@wxip/dsh-sub2api 0.2.2

package/lib/invariant.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Load-time invariant checks for dsh-sub2api.
+ *
+ * The host half declares `inject: ['llm', 'settings', 'credentials']`; the
+ * loader surfaces a missing provider as a waiting row, so a dedicated
+ * invariant would only duplicate that signal. This module exists to keep the
+ * package's export surface stable (lib/invariant.js) and to host any future
+ * structural checks.
+ *
+ * @module dsh-sub2api/invariant
+ */
+export declare function invariant(condition: unknown, message: string): asserts condition;
+export default invariant;

package/lib/invariant.js

@@ -0,0 +1,9 @@
+
+//#region src/invariant.ts
+function invariant(condition, message) {
+	if (!condition) throw new Error(`dsh-sub2api: ${message}`);
+}
+var invariant_default = invariant;
+
+//#endregion
+export { invariant_default as default, invariant };

package/lib/pi-ai-patch.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Best-effort defense guard for pi-ai's prefix-token estimation.
+ *
+ * Background: pi-ai's `AssistantMessage.usage` is required in its types and
+ * `estimateContextTokens` dereferences `usage.totalTokens` on that contract.
+ * The harness path is already safe — `dsh-llm-pi-ai` attaches a zero `Usage`
+ * (`emptyPiUsage()`) to every reconstructed assistant message. The guard here
+ * only defends against *other* callers that build pi-ai contexts without
+ * `usage` (hand-rolled clients, future adapters), which would otherwise die
+ * with a bare `Cannot read properties of undefined (reading 'totalTokens')`
+ * deep inside estimation.
+ *
+ * This plugin cannot control the pi-ai version through npm — Node resolves
+ * pi-ai from the dsh install, not from this package. So the guard is applied
+ * as a precise idempotent edit to the bundled `estimate.js`:
+ *
+ * ```js
+ *   assistant.stopReason !== "error" &&
+ *   assistant.usage !== undefined &&
+ *   calculateContextTokens(assistant.usage) > 0
+ * ```
+ *
+ * It runs at plugin apply time — before any pi-ai request (pi-ai's API modules
+ * are lazy-loaded, so `estimate.js` is only imported on the first stream). A
+ * refusal to write (read-only install) only logs a warning; the harness path
+ * works without the guard, and an upstream pi-ai guard makes this a no-op.
+ *
+ * @module dsh-sub2api/pi-ai-patch
+ */
+/** Outcome of one patch attempt. */
+export type PiAiPatchResult = {
+    kind: 'patched';
+    file: string;
+} | {
+    kind: 'already';
+    file: string;
+} | {
+    kind: 'skipped';
+    reason: string;
+};
+/**
+ * Apply the multi-turn guard to the dsh-bundled pi-ai `estimate.js` when it is
+ * missing. Idempotent; only a byte-exact edit is ever made.
+ */
+export declare function applyPiAiMultiTurnPatch(): PiAiPatchResult;

package/lib/pi-ai.d.ts

@@ -0,0 +1,50 @@
+/**
+ * dsh-sub2api → dsh-llm-pi-ai profile bridge.
+ *
+ * The LLM routes this plugin used to own (`sub2api-openai` / `sub2api-claude`
+ * / `sub2api-grok`) are now served by the harness's pi-ai
+ * adapter (`dsh-llm-pi-ai`, mounted dormant by dsh-base): protocol
+ * serialization, streaming, usage mapping, replay, and retry handling all live
+ * in pi-ai. This module is the translation layer — it turns this plugin's
+ * `llm-sub2api:` settings section (gateway baseURL + per-group model catalogs
+ * + keys) into `llm-pi-ai:` provider profiles and writes them through the
+ * settings service, so routes register the moment the section lands and drop
+ * again when a key is cleared.
+ *
+ * Every sub2api group is translated as a *hand-declared* route — pi-ai ships
+ * no provider under these keys — with `api` naming the group's native wire
+ * protocol (openai→responses, claude→messages, grok→chat-completions),
+ * `baseURL` set to the shared gateway, and `models` carrying the configured
+ * catalog with each model's capacity, modalities, and reasoning levels mapped
+ * onto pi-ai's vocabulary (`none` becomes `off` with wire spelling `none`).
+ *
+ * @module dsh-sub2api/pi-ai
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { PiAiProviderProfile } from '@deepseek-ai/dsh-llm-pi-ai';
+import type { Config } from './index.ts';
+/./index.jstings namespace owned by dsh-llm-pi-ai. */
+export declare const PI_AI_NS = "llm-pi-ai";
+/** Route prefix this plugin's groups own in the llm-pi-ai profile dict. */
+export declare const ROUTE_PREFIX: string;
+export type { PiAiModelProfile, PiAiProviderProfile } from '@deepseek-ai/dsh-llm-pi-ai';
+/** The llm-pi-ai settings section value this plugin writes. */
+export interface PiAiSettingsSection {
+    providers?: Record<string, PiAiProviderProfile>;
+}
+/**
+ * Build the `llm-pi-ai` provider profile dict for every configured sub2api
+ * group. A group is emitted only when it has both a key and at least one
+ * model — a hand-declared pi-ai route needs a non-empty `models` list, and a
+ * keyless group would otherwise surface as an unauthenticated route.
+ */
+export declare function translateToPiAi(config: Config): Record<string, PiAiProviderProfile>;
+/**
+ * Write the translated profiles into the `llm-pi-ai` settings section. Routes
+ * under this plugin's `sub2api-` prefix are replaced wholesale; any other
+ * route the user configured (e.g. through the built-in Models page) is
+ * preserved. The write goes through the settings service, so dsh-llm-pi-ai's
+ * own validation (schema + `assertServiceable`) refuses an unserviceable
+ * profile at the write site and the section keeps its last good value.
+ */
+export declare function syncPiAiProfiles(ctx: Context, config: Config): Promise<void>;

package/lib/routes.d.ts

@@ -0,0 +1,43 @@
+/**
+ * HTTP routes for the dsh-sub2api settings page.
+ *
+ * The browser half of a static plugin talks to the host through the web
+ * server (there is no package-private `host.call` seam outside dynamic
+ * packages), so this module exposes read/write endpoints for the plugin's
+ * settings section. Requests are restricted to trusted local origins — the
+ * same `trustedRequest` posture the oauth plugin uses — because these routes
+ * mutate configuration and echo credential state.
+ *
+ * @module dsh-sub2api/routes
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { type CatalogModel, type Config, type ImageToolsConfig, type ProviderProfile } from './in./index.jsxport declare const ROUTES: {
+    readonly get: "/plugins/dsh-sub2api/config";
+    readonly set: "/plugins/dsh-sub2api/config";
+    readonly discover: "/plugins/dsh-sub2api/discover";
+    readonly usage: "/plugins/dsh-sub2api/usage";
+    readonly status: "/plugins/dsh-sub2api/status";
+    readonly attachment: "/plugins/dsh-sub2api/attachment";
+};
+export interface ConfigPayload {
+    baseURL: string;
+    catalogFormat: 'structured-v1';
+    providers: Record<string, {
+        keyConfigured: boolean;
+        models: CatalogModel[];
+    }>;
+    tools: ImageToolsConfig;
+}
+interface RouteContext {
+    config: () => Config;
+    setConfig: (config: Config) => void | Promise<void>;
+    listRegisteredRoutes: () => string[];
+    /**
+     * Resolve the stored credential for one provider route. Used by discovery
+     * and usage probes when the settings form does not carry a freshly typed
+     * key (keys are write-only and stay in the credential store).
+     */
+    resolveApiKey: (route: string, profile: ProviderProfile) => Promise<string>;
+}
+export declare function registerRoutes(ctx: Context, routes: RouteContext): void;
+export {};

package/package.json

@@ -0,0 +1,160 @@
+{
+  "name": "@wxip/dsh-sub2api",
+  "description": "Connect your sub2api gateway to DeepSeek Harness: OpenAI-compatible multi-provider routes (OpenAI / Claude / Grok) behind one base URL, with per-key model discovery, usage lookup, global image generation, and a settings page.",
+  "version": "0.2.2",
+  "license": "MIT",
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "sub2api",
+    "llm",
+    "openai",
+    "claude",
+    "grok",
+    "image-generation"
+  ],
+  "homepage": "https://github.com/GodD6366/dsh-sub2api#readme",
+  "bugs": {
+    "url": "https://github.com/GodD6366/dsh-sub2api/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/GodD6366/dsh-sub2api.git"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "scripts": {
+    "build": "tsdown && node scripts/wrap-client.mjs",
+    "prepare": "node scripts/prepare.mjs",
+    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
+    "check": "npm run typecheck && npm run build",
+    "patch:pi-ai": "node scripts/patch-pi-ai.mjs",
+    "test": "npm run build && node --test tests/*.test.mjs",
+    "release:npm": "npm run typecheck && npm test && npm publish --ignore-scripts --access public --registry=https://registry.npmjs.org/"
+  },
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "src",
+    "assets",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh.md",
+    "LICENSE"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-slots"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.4",
+    "@deepseek-ai/dsh-attachment": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-credentials": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "^0.2.0-rc.2",
+    "@deepseek-ai/schemastery": "^3.18.4",
+    "react": "^18.2.0",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.5"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-attachment": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-fs": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-system-prompt": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-credentials": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-host-webserver": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm-pi-ai": {
+      "optional": true
+    },
+    "@deepseek-ai/schemastery": {
+      "optional": true
+    },
+    "@deepseek-ai/cordis-plugin-loader": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "~4.0.4",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-client-ui-tool": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-fs": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
+    "@deepseek-ai/schemastery": "~3.18.4",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "react": "^18.2.0",
+    "react-test-renderer": "18.3.1",
+    "tsdown": "^0.4.0",
+    "typescript": "^5.7.0",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
+    "@deepseek-ai/dsh-config-editor": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-launch-environment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-app-boot": "0.2.0-rc.2"
+  }
+}

package/src/client/icons.tsx

@@ -0,0 +1,38 @@
+/**
+ * Provider icons for the dsh-sub2api settings page.
+ *
+ * SVG source: lobehub/lobe-icons (`https://lobehub.com/icons`), the static SVG
+ * package. The three provider marks are embedded as React components so the
+ * settings page renders them without network requests.
+ *
+ * @module dsh-sub2api/client/icons
+ */
+
+import type { CSSProperties } from 'react'
+
+export type ProviderIconName = 'openai' | 'claude' | 'grok'
+
+const paths: Record<ProviderIconName, string> = {
+  openai:
+    'M9.205 8.658v-2.26c0-.19.072-.333.238-.428l4.543-2.616c.619-.357 1.356-.523 2.117-.523 2.854 0 4.662 2.212 4.662 4.566 0 .167 0 .357-.024.547l-4.71-2.759a.797.797 0 00-.856 0l-5.97 3.473zm10.609 8.8V12.06c0-.333-.143-.57-.429-.737l-5.97-3.473 1.95-1.118a.433.433 0 01.476 0l4.543 2.617c1.309.76 2.189 2.378 2.189 3.948 0 1.808-1.07 3.473-2.76 4.163zM7.802 12.703l-1.95-1.142c-.167-.095-.239-.238-.239-.428V5.899c0-2.545 1.95-4.472 4.591-4.472 1 0 1.927.333 2.712.928L8.23 5.067c-.285.166-.428.404-.428.737v6.898zM12 15.128l-2.795-1.57v-3.33L12 8.658l2.795 1.57v3.33L12 15.128zm1.796 7.23c-1 0-1.927-.332-2.712-.927l4.686-2.712c.285-.166.428-.404.428-.737v-6.898l1.974 1.142c.167.095.238.238.238.428v5.233c0 2.545-1.974 4.472-4.614 4.472zm-5.637-5.303l-4.544-2.617c-1.308-.761-2.188-2.378-2.188-3.948A4.482 4.482 0 014.21 6.327v5.423c0 .333.143.571.428.738l5.947 3.449-1.95 1.118a.432.432 0 01-.476 0zm-.262 3.9c-2.688 0-4.662-2.021-4.662-4.519 0-.19.024-.38.047-.57l4.686 2.71c.286.167.571.167.856 0l5.97-3.448v2.26c0 .19-.07.333-.237.428l-4.543 2.616c-.619.357-1.356.523-2.117.523zm5.899 2.83a5.947 5.947 0 005.827-4.756C22.287 18.339 24 15.84 24 13.296c0-1.665-.713-3.282-1.998-4.448.119-.5.19-.999.19-1.498 0-3.401-2.759-5.947-5.946-5.947-.642 0-1.26.095-1.88.31A5.962 5.962 0 0010.205 0a5.947 5.947 0 00-5.827 4.757C1.713 5.447 0 7.945 0 10.49c0 1.666.713 3.283 1.998 4.448-.119.5-.19 1-.19 1.499 0 3.401 2.759 5.946 5.946 5.946.642 0 1.26-.095 1.88-.309a5.96 5.96 0 004.162 1.713z',
+  claude:
+    'M4.709 15.955l4.72-2.647.08-.23-.08-.128H9.2l-.79-.048-2.698-.073-2.339-.097-2.266-.122-.571-.121L0 11.784l.055-.352.48-.321.686.06 1.52.103 2.278.158 1.652.097 2.449.255h.389l.055-.157-.134-.098-.103-.097-2.358-1.596-2.552-1.688-1.336-.972-.724-.491-.364-.462-.158-1.008.656-.722.881.06.225.061.893.686 1.908 1.476 2.491 1.833.365.304.145-.103.019-.073-.164-.274-1.355-2.446-1.446-2.49-.644-1.032-.17-.619a2.97 2.97 0 01-.104-.729L6.283.134 6.696 0l.996.134.42.364.62 1.414 1.002 2.229 1.555 3.03.456.898.243.832.091.255h.158V9.01l.128-1.706.237-2.095.23-2.695.08-.76.376-.91.747-.492.584.28.48.685-.067.444-.286 1.851-.559 2.903-.364 1.942h.212l.243-.242.985-1.306 1.652-2.064.73-.82.85-.904.547-.431h1.033l.76 1.129-.34 1.166-1.064 1.347-.881 1.142-1.264 1.7-.79 1.36.073.11.188-.02 2.856-.606 1.543-.28 1.841-.315.833.388.091.395-.328.807-1.969.486-2.309.462-3.439.813-.042.03.049.061 1.549.146.662.036h1.622l3.02.225.79.522.474.638-.079.485-1.215.62-1.64-.389-3.829-.91-1.312-.329h-.182v.11l1.093 1.068 2.006 1.81 2.509 2.33.127.578-.322.455-.34-.049-2.205-1.657-.851-.747-1.926-1.62h-.128v.17l.444.649 2.345 3.521.122 1.08-.17.353-.608.213-.668-.122-1.374-1.925-1.415-2.167-1.143-1.943-.14.08-.674 7.254-.316.37-.729.28-.607-.461-.322-.747.322-1.476.389-1.924.315-1.53.286-1.9.17-.632-.012-.042-.14.018-1.434 1.967-2.18 2.945-1.726 1.845-.414.164-.717-.37.067-.662.401-.589 2.388-3.036 1.44-1.882.93-1.086-.006-.158h-.055L4.132 18.56l-1.13.146-.487-.456.061-.746.231-.243 1.908-1.312-.006.006z',
+  grok:
+    'M9.27 15.29l7.978-5.897c.391-.29.95-.177 1.137.272.98 2.369.542 5.215-1.41 7.169-1.951 1.954-4.667 2.382-7.149 1.406l-2.711 1.257c3.889 2.661 8.611 2.003 11.562-.953 2.341-2.344 3.066-5.539 2.388-8.42l.006.007c-.983-4.232.242-5.924 2.75-9.383.06-.082.12-.164.179-.248l-3.301 3.305v-.01L9.267 15.292M7.623 16.723c-2.792-2.67-2.31-6.801.071-9.184 1.761-1.763 4.647-2.483 7.166-1.425l2.705-1.25a7.808 7.808 0 00-1.829-1A8.975 8.975 0 005.984 5.83c-2.533 2.536-3.33 6.436-1.962 9.764 1.022 2.487-.653 4.246-2.34 6.022-.599.63-1.199 1.259-1.682 1.925l7.62-6.815',
+
+}
+
+export function ProviderIcon({ name, size = 18, style }: { name: ProviderIconName; size?: number; style?: CSSProperties }) {
+  return (
+    <svg
+      width={size}
+      height={size}
+      viewBox="0 0 24 24"
+      fill="currentColor"
+      style={{ flex: 'none', lineHeight: 1, ...style }}
+      aria-hidden="true"
+    >
+      <path d={paths[name]} fillRule="evenodd" />
+    </svg>
+  )
+}

package/src/client/index.tsx

@@ -0,0 +1,31 @@
+/**
+ * Browser half of dsh-sub2api: registers the settings section.
+ *
+ * @module dsh-sub2api/client
+ */
+
+import type { Context } from '@deepseek-ai/cordis'
+import type {} from '@deepseek-ai/dsh-client-ui-renderer/client'
+import type {} from '@deepseek-ai/dsh-client-ui-settings/client'
+import { Sub2ApiSettings } from './settings.tsx'
+import { GenerateImageToolview } from './toolview.tsx'
+
+export const name = 'dsh-sub2api-client'
+export const inject = ['slots']
+
+export function apply(ctx: Context): void {
+  ctx.slots.inject('settings.section', () => ctx.slots.register({
+    name: 'settings.section',
+    id: 'sub2api-models',
+    order: 12,
+    label: () => 'Sub2API 模型',
+  }, Sub2ApiSettings))
+
+  // Render generate_image results as an inline image inside the tool card:
+  // the tool result already carries an image content block (durable
+  // attachment), and this keyed toolview turns those bytes into an <img>.
+  ctx.slots.inject('tool.call.toolview', () => ctx.slots.register({
+    name: 'tool.call.toolview',
+    key: 'generate_image',
+  }, GenerateImageToolview))
+}