@zqagent/core 0.2.16 → 0.2.20

package/dist/server/index.cjs

@@ -583,6 +583,15 @@ var path4 = __toESM(require("path"), 1);
 var readline = __toESM(require("readline"), 1);
 var import_crypto = require("crypto");
 
+// src/server/llmIds.ts
+init_cjs_shims();
+var GLOBAL_PROVIDER_ID = "__env__";
+var BUILTIN_PROVIDER_ID = "__zqai__";
+function isBuiltinProvider(id) {
+  return id === BUILTIN_PROVIDER_ID;
+}
+var FALLBACK_MODEL = "gpt-4o";
+
 // src/server/dbgTrace.ts
 init_cjs_shims();
 var DBG_FLEET = (() => {
@@ -1720,7 +1729,23 @@ var Store = class {
       legacyFiles: [path4.join(this.root, "node-llm.json")]
     });
     const old = new Map(cur.providers.map((p) => [p.id, p]));
-    const providers = cfg.providers.map((p) => {
+    const src = [...cfg.providers];
+    const prevBuiltin = cur.providers.find((p) => p.id === BUILTIN_PROVIDER_ID);
+    if (prevBuiltin && !src.some((p) => p.id === BUILTIN_PROVIDER_ID)) {
+      src.unshift({
+        id: prevBuiltin.id,
+        name: prevBuiltin.name,
+        type: prevBuiltin.type,
+        baseURL: prevBuiltin.baseURL,
+        model: prevBuiltin.model,
+        apiKey: decryptKey(prevBuiltin.apiKeyEnc, file) ?? void 0,
+        reasoningEffort: prevBuiltin.reasoningEffort ?? null,
+        ...prevBuiltin.models ? { models: prevBuiltin.models } : {},
+        ...prevBuiltin.nonChat ? { nonChat: prevBuiltin.nonChat } : {},
+        ...prevBuiltin.modelMeta ? { modelMeta: prevBuiltin.modelMeta } : {}
+      });
+    }
+    const providers = src.map((p) => {
       const prev = old.get(p.id);
       const apiKeyEnc = p.apiKey ? encryptKey(p.apiKey, file) : prev?.apiKeyEnc ?? "";
       return {
@@ -9248,7 +9273,6 @@ function registerMediaTool(registry, workspace, opts = {}) {
 
 // src/server/nodeLlm.ts
 init_cjs_shims();
-var GLOBAL_PROVIDER_ID = "__env__";
 function envProvider() {
   const apiKey = process.env.OPENAI_API_KEY;
   if (!apiKey) return null;
@@ -9291,19 +9315,26 @@ function nodeLlmView(cfg) {
         global: true
       }
     ] : [],
-    ...cfg.providers.map((p) => ({
-      id: p.id,
-      name: p.name,
-      type: p.type ?? "",
-      baseURL: p.baseURL,
-      model: p.model,
-      hasApiKey: Boolean(p.apiKey),
-      models: p.models ?? [],
-      nonChat: p.nonChat ?? [],
-      modelMeta: p.modelMeta ?? [],
-      reasoningEffort: p.reasoningEffort ?? null,
-      global: false
-    }))
+    ...cfg.providers.map((p) => {
+      const builtin = isBuiltinProvider(p.id);
+      return {
+        id: p.id,
+        name: p.name,
+        type: p.type ?? "",
+        baseURL: p.baseURL,
+        model: p.model,
+        hasApiKey: Boolean(p.apiKey),
+        models: p.models ?? [],
+        nonChat: p.nonChat ?? [],
+        modelMeta: p.modelMeta ?? [],
+        reasoningEffort: p.reasoningEffort ?? null,
+        global: false,
+        /** 平台内置（接入 Hub 后自动下发，用户不用关心 Key） */
+        builtin,
+        /** 不可编辑的字段：控制台据此把 baseURL / key 显示为只读 */
+        ...builtin ? { locked: ["baseURL", "apiKey"] } : {}
+      };
+    })
   ];
   return {
     defaultProviderId: cfg.defaultProviderId ?? null,
@@ -9316,27 +9347,42 @@ function applyNodeLlmPatch(cfg, raw) {
   const next = { providers: cfg.providers, defaultProviderId: cfg.defaultProviderId };
   if (Array.isArray(raw?.providers)) {
     const old = new Map(cfg.providers.map((p) => [p.id, p]));
-    next.providers = raw.providers.filter((x) => Boolean(x) && typeof x === "object").filter((x) => x.global !== true && String(x.id ?? "") !== GLOBAL_PROVIDER_ID).map((x) => {
-      const id = String(x.id ?? "").trim();
-      if (!id) throw new ApiError(400, "bad_request", "\u4F9B\u5E94\u5546 id \u4E0D\u80FD\u4E3A\u7A7A");
-      const prev = old.get(id);
-      const apiKey = String(x.apiKey ?? "").trim();
-      const models = normalizeModelList(x.models) ?? prev?.models;
-      const nonChat = normalizeModelList(x.nonChat) ?? prev?.nonChat;
-      const modelMeta = normalizeModelMeta(x.modelMeta) ?? prev?.modelMeta;
-      return {
-        id,
-        name: String(x.name ?? prev?.name ?? id).trim(),
-        type: x.type == null ? prev?.type : String(x.type),
-        baseURL: String(x.baseURL ?? prev?.baseURL ?? "").trim(),
-        model: String(x.model ?? prev?.model ?? "").trim(),
-        apiKey: apiKey || prev?.apiKey,
-        reasoningEffort: x.reasoningEffort === void 0 ? prev?.reasoningEffort ?? null : normReasoningEffort(x.reasoningEffort),
-        ...models ? { models } : {},
-        ...nonChat ? { nonChat } : {},
-        ...modelMeta ? { modelMeta } : {}
-      };
-    });
+    const incoming = raw.providers.filter((x) => Boolean(x) && typeof x === "object").filter((x) => x.global !== true && String(x.id ?? "") !== GLOBAL_PROVIDER_ID);
+    const prevBuiltin = cfg.providers.find((p) => isBuiltinProvider(p.id));
+    const builtinPatch = incoming.find((x) => isBuiltinProvider(String(x.id ?? "")));
+    const keptBuiltin = prevBuiltin ? [
+      {
+        ...prevBuiltin,
+        ...builtinPatch?.model != null ? { model: String(builtinPatch.model).trim() || prevBuiltin.model } : {},
+        ...normalizeModelList(builtinPatch?.models) ? { models: normalizeModelList(builtinPatch?.models) } : {},
+        ...builtinPatch?.reasoningEffort !== void 0 ? { reasoningEffort: normReasoningEffort(builtinPatch.reasoningEffort) } : {},
+        ...typeof builtinPatch?.name === "string" && builtinPatch.name.trim() ? { name: builtinPatch.name.trim() } : {}
+      }
+    ] : [];
+    next.providers = [
+      ...keptBuiltin,
+      ...incoming.filter((x) => !isBuiltinProvider(String(x.id ?? ""))).map((x) => {
+        const id = String(x.id ?? "").trim();
+        if (!id) throw new ApiError(400, "bad_request", "\u4F9B\u5E94\u5546 id \u4E0D\u80FD\u4E3A\u7A7A");
+        const prev = old.get(id);
+        const apiKey = String(x.apiKey ?? "").trim();
+        const models = normalizeModelList(x.models) ?? prev?.models;
+        const nonChat = normalizeModelList(x.nonChat) ?? prev?.nonChat;
+        const modelMeta = normalizeModelMeta(x.modelMeta) ?? prev?.modelMeta;
+        return {
+          id,
+          name: String(x.name ?? prev?.name ?? id).trim(),
+          type: x.type == null ? prev?.type : String(x.type),
+          baseURL: String(x.baseURL ?? prev?.baseURL ?? "").trim(),
+          model: String(x.model ?? prev?.model ?? "").trim(),
+          apiKey: apiKey || prev?.apiKey,
+          reasoningEffort: x.reasoningEffort === void 0 ? prev?.reasoningEffort ?? null : normReasoningEffort(x.reasoningEffort),
+          ...models ? { models } : {},
+          ...nonChat ? { nonChat } : {},
+          ...modelMeta ? { modelMeta } : {}
+        };
+      })
+    ];
   }
   if (typeof raw?.defaultProviderId === "string") {
     const id = raw.defaultProviderId.trim();
@@ -9356,6 +9402,9 @@ function nodeDefaultProvider(store) {
   if (cfg.providers.length === 0) return null;
   return cfg.providers.find((p) => p.id === cfg.defaultProviderId) ?? cfg.providers[0] ?? null;
 }
+function defaultTenantModel(store) {
+  return process.env.OPENAI_MODEL || process.env.MODEL || nodeDefaultProvider(store)?.model || FALLBACK_MODEL;
+}
 function resolveSessionProvider(store, tenant, providerId) {
   const own = tenant.provider ?? {};
   if (providerId) {
@@ -9385,6 +9434,208 @@ function resolveSessionProvider(store, tenant, providerId) {
   return { ...own, model: tenant.model };
 }
 
+// src/server/builtinLlm.ts
+init_cjs_shims();
+var FETCH_TIMEOUT_MS = 8e3;
+var RETRY_AFTER_MS = 5 * 6e4;
+function hubBase(cred) {
+  return (cred.hubUrl ?? "").replace(/\/+$/, "");
+}
+function asProvider(grant) {
+  const baseURL = String(grant.baseURL ?? "").trim();
+  const apiKey = String(grant.apiKey ?? "").trim();
+  const model = String(grant.model ?? "").trim();
+  if (!baseURL || !apiKey) return null;
+  return {
+    id: BUILTIN_PROVIDER_ID,
+    name: String(grant.name ?? "").trim() || "\u5FD7\u524D\u5927\u6A21\u578B\uFF08\u5185\u7F6E\uFF09",
+    type: "builtin",
+    baseURL,
+    model,
+    apiKey
+  };
+}
+async function enrichModels(p) {
+  try {
+    const r = await Promise.race([
+      fetchModels(p.baseURL, p.apiKey ?? "", p.model),
+      new Promise((resolve20) => {
+        const t = setTimeout(() => resolve20(null), FETCH_TIMEOUT_MS);
+        t.unref?.();
+      })
+    ]);
+    if (!r?.models?.length) return p;
+    return {
+      ...p,
+      // 控制面没给默认型号时，取供应商返回的第一个，避免模型为空让用户卡住
+      model: p.model || r.models[0],
+      models: r.models,
+      ...r.nonChat?.length ? { nonChat: r.nonChat } : {},
+      ...r.modelMeta?.length ? { modelMeta: r.modelMeta } : {}
+    };
+  } catch {
+    return p;
+  }
+}
+function saveBuiltin(store, provider) {
+  const cfg = store.loadNodeLlm();
+  const others = cfg.providers.filter((p) => p.id !== BUILTIN_PROVIDER_ID);
+  const prev = cfg.providers.find((p) => p.id === BUILTIN_PROVIDER_ID);
+  const merged = {
+    ...provider,
+    // 用户选过的型号/候选列表/推理强度/显示名都保留；只有托管字段（baseURL/key）强制以控制面为准
+    ...prev?.model ? { model: prev.model } : {},
+    ...prev?.models?.length ? { models: prev.models } : {},
+    ...prev?.reasoningEffort != null ? { reasoningEffort: prev.reasoningEffort } : {},
+    ...prev?.name ? { name: prev.name } : {}
+  };
+  store.saveNodeLlm({
+    providers: [merged, ...others],
+    // 之前没有默认且用户也没指定时，让内置模型成为默认——「开箱即用」
+    defaultProviderId: cfg.defaultProviderId ?? BUILTIN_PROVIDER_ID
+  });
+  adoptBuiltinModelForTenants(store, merged.model);
+}
+var LEGACY_DEFAULT_MODELS = /* @__PURE__ */ new Set([FALLBACK_MODEL, "deepseek-v4-flash"]);
+function adoptBuiltinModelForTenants(store, model) {
+  if (!model) return;
+  for (const id of store.listTenants()) {
+    const tenant = store.loadTenant(id);
+    if (!tenant || !LEGACY_DEFAULT_MODELS.has(tenant.model)) continue;
+    if (tenant.provider?.apiKey) continue;
+    tenant.model = model;
+    store.saveTenant(tenant);
+  }
+}
+async function ensureBuiltinProvider(store, opts = {}) {
+  const cred = store.loadFleetCredential();
+  if (!cred?.fleetToken || !cred.fleetSecret) {
+    return { status: "disabled", reason: "\u8282\u70B9\u672A\u63A5\u5165 Hub" };
+  }
+  const hub = hubBase(cred);
+  if (!hub) return { status: "disabled", reason: "\u7F3A\u5C11 Hub \u5730\u5740" };
+  const local = store.loadNodeLlm().providers.find((p) => p.id === BUILTIN_PROVIDER_ID);
+  if (local && !opts.force) {
+    adoptBuiltinModelForTenants(store, local.model);
+    return { status: "ready", provider: local, refreshed: false };
+  }
+  const cached3 = cred.builtinLlm ? asProvider(cred.builtinLlm) : null;
+  let res;
+  try {
+    res = await fetch(`${hub}/api/hub/node/builtin-llm`, {
+      headers: {
+        Authorization: `Bearer ${cred.fleetToken}`,
+        "X-Fleet-Secret": cred.fleetSecret,
+        "X-Node-Id": cred.nodeId
+      },
+      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+    });
+  } catch (e) {
+    if (cached3) {
+      const provider2 = await enrichModels(cached3);
+      saveBuiltin(store, provider2);
+      return { status: "ready", provider: provider2, refreshed: true };
+    }
+    return { status: "error", reason: `\u8FDE\u63A5 Hub \u5931\u8D25\uFF1A${e.message}` };
+  }
+  let body = null;
+  try {
+    body = await res.json();
+  } catch {
+  }
+  if (!res.ok) {
+    const msg = body?.error?.message ?? `HTTP ${res.status}`;
+    if (res.status === 401 || res.status === 403) {
+      return { status: "unavailable", reason: msg };
+    }
+    if (cached3) {
+      const provider2 = await enrichModels(cached3);
+      saveBuiltin(store, provider2);
+      return { status: "ready", provider: provider2, refreshed: true };
+    }
+    return { status: "error", reason: msg };
+  }
+  const grant = body?.data?.builtinLlm;
+  if (!grant) {
+    const why = String(body?.data?.reason ?? "").trim();
+    return { status: "unavailable", reason: why || "\u63A7\u5236\u9762\u672A\u4E0B\u53D1\u5185\u7F6E\u6A21\u578B" };
+  }
+  const parsed = asProvider(grant);
+  if (!parsed) return { status: "unavailable", reason: "\u5185\u7F6E\u6A21\u578B\u914D\u7F6E\u4E0D\u5B8C\u6574" };
+  const provider = await enrichModels(parsed);
+  saveBuiltin(store, provider);
+  return { status: "ready", provider, refreshed: true };
+}
+async function fetchLlmBalance(store) {
+  const cred = store.loadFleetCredential();
+  const hub = cred ? hubBase(cred) : "";
+  if (!cred?.fleetToken || !cred.fleetSecret || !hub) {
+    return { available: null, currency: "CNY", reason: "\u8282\u70B9\u672A\u63A5\u5165 Hub" };
+  }
+  try {
+    const res = await fetch(`${hub}/api/hub/node/balance`, {
+      headers: {
+        Authorization: `Bearer ${cred.fleetToken}`,
+        "X-Fleet-Secret": cred.fleetSecret,
+        "X-Node-Id": cred.nodeId
+      },
+      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+    });
+    const body = await res.json().catch(() => null);
+    if (!res.ok) {
+      return {
+        available: null,
+        currency: "CNY",
+        reason: body?.data ? "" : `HTTP ${res.status}`
+      };
+    }
+    const d = body?.data ?? {};
+    const available = typeof d.available === "number" ? d.available : null;
+    return {
+      available,
+      currency: typeof d.currency === "string" && d.currency ? d.currency : "CNY",
+      ...typeof d.reserved === "number" ? { reserved: d.reserved } : {},
+      // Hub 没配 HUB_PUBLIC_URL 时退回用接入时的 hubUrl
+      topupUrl: typeof d.topupUrl === "string" && d.topupUrl ? d.topupUrl : `${hub}/topup`,
+      ...available === null && typeof d.reason === "string" ? { reason: d.reason } : {}
+    };
+  } catch (e) {
+    return {
+      available: null,
+      currency: "CNY",
+      reason: `\u8FDE\u63A5 Hub \u5931\u8D25\uFF1A${e.message}`
+    };
+  }
+}
+var AUTH_RETRY_THROTTLE_MS = 6e4;
+var lastAuthRetryAt = 0;
+function healBuiltinOnAuthFailure(store, message) {
+  if (!/401|unauthorized|invalid[_\s]*api[_\s]*key|api[\s_-]*key\s*(?:无效|invalid)/i.test(message)) return;
+  if (!store.loadFleetCredential()) return;
+  if (!store.loadNodeLlm().providers.some((p) => p.id === BUILTIN_PROVIDER_ID)) return;
+  if (Date.now() - lastAuthRetryAt < AUTH_RETRY_THROTTLE_MS) return;
+  lastAuthRetryAt = Date.now();
+  void ensureBuiltinProvider(store, { force: true }).catch(() => {
+  });
+}
+var lastFailureAt = 0;
+function scheduleBuiltinProvider(store, log = () => {
+}) {
+  if (Date.now() - lastFailureAt < RETRY_AFTER_MS) return;
+  void ensureBuiltinProvider(store).then((r) => {
+    if (r.status === "ready") {
+      if (r.refreshed) log(`[builtin-llm] \u5DF2\u4E0B\u53D1\u5185\u7F6E\u6A21\u578B\uFF1A${r.provider.name}\uFF08${r.provider.model}\uFF09`);
+      return;
+    }
+    if (r.status === "disabled") return;
+    lastFailureAt = Date.now();
+    if (r.status === "unavailable") log(`[builtin-llm] \u6682\u65E0\u5185\u7F6E\u6A21\u578B\uFF1A${r.reason}`);
+    else log(`[builtin-llm] \u62C9\u53D6\u5185\u7F6E\u6A21\u578B\u5931\u8D25\uFF1A${r.reason}`);
+  }).catch(() => {
+    lastFailureAt = Date.now();
+  });
+}
+
 // src/server/usage.ts
 init_cjs_shims();
 var fs18 = __toESM(require("fs"), 1);
@@ -11446,6 +11697,7 @@ data: ${JSON.stringify(entry.data)}
               this._setStatus(rt, "error");
               this._persist(rt);
               this._emitNotify(rt, "error", this._turnEndData(rt, event.data, {}));
+              healBuiltinOnAuthFailure(this.store, String(event.data["error"] ?? ""));
               break;
             case "interrupted" /* INTERRUPTED */:
               this._setStatus(rt, "interrupted");
@@ -11876,7 +12128,6 @@ var path25 = __toESM(require("path"), 1);
 // src/server/projects.ts
 init_cjs_shims();
 var path21 = __toESM(require("path"), 1);
-var DEFAULT_MODEL = () => process.env.OPENAI_MODEL || process.env.MODEL || "gpt-4o";
 function toProjectSummary(store, tenant) {
   return {
     id: tenant.id,
@@ -12016,7 +12267,7 @@ function createProject(store, input) {
     id,
     name: explicitName || defaultName,
     apiKey: generateApiKey(),
-    model: typeof raw.model === "string" && raw.model.trim() ? raw.model.trim() : DEFAULT_MODEL(),
+    model: typeof raw.model === "string" && raw.model.trim() ? raw.model.trim() : defaultTenantModel(store),
     provider: {
       apiKey: typeof raw.providerApiKey === "string" && raw.providerApiKey.trim() ? raw.providerApiKey.trim() : void 0,
       baseURL: typeof raw.baseURL === "string" && raw.baseURL.trim() ? raw.baseURL.trim() : void 0
@@ -12041,7 +12292,7 @@ function buildNodeInfo(store, opts) {
     nodeId: opts.nodeId ?? ensureNodeId(store),
     platform: process.platform,
     mode: process.env.NODE_MODE ?? "standalone",
-    version: "0.2.16",
+    version: "0.2.20",
     admin: opts.admin,
     projects: opts.projects
   };
@@ -12407,10 +12658,133 @@ function makeDirIn(parentInput, name) {
 init_cjs_shims();
 var fs20 = __toESM(require("fs"), 1);
 var path23 = __toESM(require("path"), 1);
+
+// src/server/zipArchive.ts
+init_cjs_shims();
+var zlib = __toESM(require("zlib"), 1);
+var MAX_ZIP_ENTRIES = 2e4;
+var LOCAL_SIG = 67324752;
+var CENTRAL_SIG = 33639248;
+var EOCD_SIG = 101010256;
+var FLAG_UTF8 = 2048;
+var METHOD_STORE = 0;
+var METHOD_DEFLATE = 8;
+var CRC_TABLE = (() => {
+  const table = new Int32Array(256);
+  for (let n = 0; n < 256; n++) {
+    let c = n;
+    for (let k = 0; k < 8; k++) {
+      c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
+    }
+    table[n] = c;
+  }
+  return table;
+})();
+function crc32(buf) {
+  let c = -1;
+  for (let i = 0; i < buf.length; i++) {
+    c = CRC_TABLE[(c ^ buf[i]) & 255] ^ c >>> 8;
+  }
+  return (c ^ -1) >>> 0;
+}
+function dosDateTime(d) {
+  const year = Math.max(1980, d.getFullYear());
+  return {
+    time: d.getHours() << 11 | d.getMinutes() << 5 | d.getSeconds() >> 1,
+    date: year - 1980 << 9 | d.getMonth() + 1 << 5 | d.getDate()
+  };
+}
+function buildZip(entries) {
+  if (entries.length > MAX_ZIP_ENTRIES) {
+    throw new Error(`\u5F52\u6863\u6761\u76EE\u8FC7\u591A\uFF08${entries.length} > ${MAX_ZIP_ENTRIES}\uFF09`);
+  }
+  const chunks = [];
+  const central = [];
+  let offset = 0;
+  for (const e of entries) {
+    const name = Buffer.from(e.name, "utf-8");
+    const isDir = e.name.endsWith("/");
+    const raw = isDir ? Buffer.alloc(0) : e.data ?? Buffer.alloc(0);
+    let method = METHOD_STORE;
+    let body = raw;
+    if (!isDir && raw.length > 0) {
+      const deflated = zlib.deflateRawSync(raw, { level: 6 });
+      if (deflated.length < raw.length) {
+        method = METHOD_DEFLATE;
+        body = deflated;
+      }
+    }
+    const crc = isDir ? 0 : crc32(raw);
+    const { time, date } = dosDateTime(e.mtime ?? /* @__PURE__ */ new Date());
+    const local = Buffer.alloc(30);
+    local.writeUInt32LE(LOCAL_SIG, 0);
+    local.writeUInt16LE(20, 4);
+    local.writeUInt16LE(FLAG_UTF8, 6);
+    local.writeUInt16LE(method, 8);
+    local.writeUInt16LE(time, 10);
+    local.writeUInt16LE(date, 12);
+    local.writeUInt32LE(crc, 14);
+    local.writeUInt32LE(body.length, 18);
+    local.writeUInt32LE(raw.length, 22);
+    local.writeUInt16LE(name.length, 26);
+    local.writeUInt16LE(0, 28);
+    chunks.push(local, name);
+    if (body.length > 0) chunks.push(body);
+    central.push({
+      name,
+      method,
+      crc,
+      csize: body.length,
+      usize: raw.length,
+      offset,
+      time,
+      date,
+      isDir
+    });
+    offset += local.length + name.length + body.length;
+  }
+  const cdStart = offset;
+  for (const c of central) {
+    const head = Buffer.alloc(46);
+    head.writeUInt32LE(CENTRAL_SIG, 0);
+    head.writeUInt16LE(20, 4);
+    head.writeUInt16LE(20, 6);
+    head.writeUInt16LE(FLAG_UTF8, 8);
+    head.writeUInt16LE(c.method, 10);
+    head.writeUInt16LE(c.time, 12);
+    head.writeUInt16LE(c.date, 14);
+    head.writeUInt32LE(c.crc, 16);
+    head.writeUInt32LE(c.csize, 20);
+    head.writeUInt32LE(c.usize, 24);
+    head.writeUInt16LE(c.name.length, 28);
+    head.writeUInt16LE(0, 30);
+    head.writeUInt16LE(0, 32);
+    head.writeUInt16LE(0, 34);
+    head.writeUInt16LE(0, 36);
+    head.writeUInt32LE(c.isDir ? 16 : 0, 38);
+    head.writeUInt32LE(c.offset, 42);
+    chunks.push(head, c.name);
+    offset += head.length + c.name.length;
+  }
+  const eocd = Buffer.alloc(22);
+  eocd.writeUInt32LE(EOCD_SIG, 0);
+  eocd.writeUInt16LE(0, 4);
+  eocd.writeUInt16LE(0, 6);
+  eocd.writeUInt16LE(central.length, 8);
+  eocd.writeUInt16LE(central.length, 10);
+  eocd.writeUInt32LE(offset - cdStart, 12);
+  eocd.writeUInt32LE(cdStart, 16);
+  eocd.writeUInt16LE(0, 20);
+  chunks.push(eocd);
+  return Buffer.concat(chunks);
+}
+
+// src/server/projectFiles.ts
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 var MAX_DOWNLOAD_BYTES = 16 * 1024 * 1024;
 var MAX_BINARY_BYTES = 2.5 * 1024 * 1024;
 var MAX_ENTRIES2 = 2e3;
+var MAX_ZIP_BYTES = 100 * 1024 * 1024;
 function toPosix(p) {
   return p.split(path23.sep).join("/");
 }
@@ -12686,6 +13060,134 @@ function deleteProjectPaths(workspaceRoot, relPaths) {
   }
   return out;
 }
+function formatBytes(n) {
+  if (n >= 1024 * 1024) return `${(n / (1024 * 1024)).toFixed(1)} MB`;
+  if (n >= 1024) return `${(n / 1024).toFixed(1)} KB`;
+  return `${n} B`;
+}
+function renameProjectPath(workspaceRoot, relPath, newName) {
+  const base = projectRoot(workspaceRoot);
+  const rel = (relPath ?? "").trim().replace(/^[/\\]+/, "");
+  if (!rel) throw new Error("\u4E0D\u80FD\u91CD\u547D\u540D\u9879\u76EE\u6839\u76EE\u5F55");
+  const abs = resolveWithin(base, rel);
+  const name = (newName ?? "").trim();
+  if (!name) throw new Error("\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
+  if (name === "." || name === "..") throw new Error("\u540D\u79F0\u975E\u6CD5");
+  if (/[/\\]/.test(name)) throw new Error("\u540D\u79F0\u4E0D\u80FD\u5305\u542B\u8DEF\u5F84\u5206\u9694\u7B26");
+  if (!fs20.existsSync(abs)) throw new Error("\u6587\u4EF6\u4E0D\u5B58\u5728");
+  const parent = path23.dirname(abs);
+  const target = path23.join(parent, name);
+  if (!isWithinRoot(base, target)) throw new Error("\u8DEF\u5F84\u8D8A\u754C\uFF08\u8D85\u51FA\u9879\u76EE\u5DE5\u4F5C\u533A\uFF09");
+  if (fs20.existsSync(target)) {
+    let same = false;
+    try {
+      const a = fs20.statSync(target);
+      const b = fs20.statSync(abs);
+      same = a.ino === b.ino && a.dev === b.dev;
+    } catch {
+      same = false;
+    }
+    if (!same) throw new Error(`\u5DF2\u5B58\u5728\u540C\u540D\u6587\u4EF6\u6216\u76EE\u5F55: ${name}`);
+  }
+  if (path23.resolve(target) === path23.resolve(abs)) {
+    return { from: toPosix(path23.relative(base, abs)), path: toPosix(path23.relative(base, abs)) };
+  }
+  try {
+    fs20.renameSync(abs, target);
+  } catch (e) {
+    throw new Error(`\u91CD\u547D\u540D\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+  }
+  return { from: toPosix(path23.relative(base, abs)), path: toPosix(path23.relative(base, target)) };
+}
+function zipProjectPaths(workspaceRoot, relPaths, opts = {}) {
+  const base = projectRoot(workspaceRoot);
+  const maxBytes = opts.maxBytes && opts.maxBytes > 0 ? opts.maxBytes : MAX_ZIP_BYTES;
+  const rels = (relPaths ?? []).map((x) => (x ?? "").trim().replace(/^[/\\]+/, ""));
+  if (rels.length === 0) throw new Error("\u8BF7\u9009\u62E9\u8981\u538B\u7F29\u7684\u6587\u4EF6\u6216\u76EE\u5F55");
+  if (rels.some((r) => !r)) throw new Error("\u4E0D\u80FD\u538B\u7F29\u9879\u76EE\u6839\u76EE\u5F55");
+  const targets = rels.map((rel) => ({ rel, abs: resolveWithin(base, rel) }));
+  const single = targets.length === 1 ? targets[0].abs : "";
+  const items = [];
+  let total = 0;
+  const overLimit = () => new Error(
+    `\u5171 ${formatBytes(total)}\uFF0C\u8D85\u8FC7 ${formatBytes(maxBytes)} \u4E0A\u9650\uFF0C\u4E0D\u652F\u6301\u538B\u7F29\u4E0B\u8F7D`
+  );
+  const walk = (absDir) => {
+    let dirents;
+    try {
+      dirents = fs20.readdirSync(absDir, { withFileTypes: true });
+    } catch {
+      return 0;
+    }
+    dirents.sort((a, b) => a.name.localeCompare(b.name));
+    let files = 0;
+    for (const d of dirents) {
+      if (d.isSymbolicLink()) continue;
+      const child = path23.join(absDir, d.name);
+      if (d.isDirectory()) {
+        files += walk(child);
+        continue;
+      }
+      if (!d.isFile()) continue;
+      let st;
+      try {
+        st = fs20.statSync(child);
+      } catch {
+        continue;
+      }
+      total += st.size;
+      if (total > maxBytes) throw overLimit();
+      if (items.length >= MAX_ZIP_ENTRIES) {
+        throw new Error(`\u5F52\u6863\u6761\u76EE\u8FC7\u591A\uFF08\u8D85\u8FC7 ${MAX_ZIP_ENTRIES} \u9879\uFF09\uFF0C\u8BF7\u7F29\u5C0F\u8303\u56F4\u540E\u518D\u8BD5`);
+      }
+      items.push({ abs: child, dir: false, size: st.size, mtime: st.mtime });
+      files++;
+    }
+    if (files === 0) {
+      let mtime = /* @__PURE__ */ new Date();
+      try {
+        mtime = fs20.statSync(absDir).mtime;
+      } catch {
+      }
+      items.push({ abs: absDir, dir: true, size: 0, mtime });
+    }
+    return files;
+  };
+  for (const t of targets) {
+    let st;
+    try {
+      st = fs20.statSync(t.abs);
+    } catch {
+      throw new Error(`\u6587\u4EF6\u4E0D\u5B58\u5728: ${t.rel}`);
+    }
+    if (st.isDirectory()) {
+      walk(t.abs);
+      continue;
+    }
+    total += st.size;
+    if (total > maxBytes) throw overLimit();
+    items.push({ abs: t.abs, dir: false, size: st.size, mtime: st.mtime });
+  }
+  const nameOf = (abs) => {
+    const rel = toPosix(path23.relative(single || base, abs));
+    return rel || path23.posix.basename(toPosix(abs));
+  };
+  const zipEntries = items.map((it) => {
+    const name2 = nameOf(it.abs);
+    if (it.dir) return { name: `${name2}/`, mtime: it.mtime };
+    return { name: name2, data: fs20.readFileSync(it.abs), mtime: it.mtime };
+  });
+  const buf = buildZip(zipEntries);
+  const first = targets[0].rel;
+  const name = single ? `${path23.posix.basename(toPosix(first))}.zip` : "archive.zip";
+  return {
+    name,
+    size: buf.length,
+    total,
+    entries: zipEntries.length,
+    base64: buf.toString("base64")
+  };
+}
 
 // src/server/projectOps.ts
 init_cjs_shims();
@@ -13015,6 +13517,7 @@ function projectStats(manager, tenantId) {
 
 // src/server/nodeHost.ts
 init_cjs_shims();
+var import_child_process = require("child_process");
 var fs21 = __toESM(require("fs"), 1);
 var os6 = __toESM(require("os"), 1);
 function diskInfo(pathStr) {
@@ -13029,6 +13532,64 @@ function diskInfo(pathStr) {
     return null;
   }
 }
+var PSEUDO_FS = /^(devfs|tmpfs|devtmpfs|proc|procfs|sysfs|none|udev|shm|mqueue|devpts|hugetlbfs|debugfs|tracefs|securityfs|pstore|bpf|configfs|fusectl|nsfs|autofs|efivarfs|ramfs|map)$/;
+function isInternalMount(mount) {
+  if (mount === "/") return false;
+  const prefixes = ["/proc", "/sys", "/run", "/snap"];
+  if (process.platform === "darwin") prefixes.push("/System/Volumes");
+  return prefixes.some((p) => mount === p || mount.startsWith(`${p}/`));
+}
+function readOnlyVolumes() {
+  const out = /* @__PURE__ */ new Set();
+  const res = (0, import_child_process.spawnSync)("mount", [], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] });
+  if (res.error || res.status !== 0 || !res.stdout) return out;
+  for (const line of res.stdout.split("\n")) {
+    const m = line.match(/^.+? on (.+?) \(([^)]*)\)$/);
+    if (!m || m[1] === "/") continue;
+    if (m[2].split(",").some((opt) => opt.trim() === "read-only")) out.add(m[1]);
+  }
+  return out;
+}
+function diskList(workspacePath) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const push = (path36, total, free) => {
+    if (!path36 || seen.has(path36) || !Number.isFinite(total) || total <= 0) return;
+    seen.add(path36);
+    out.push({ path: path36, total, free });
+  };
+  if (process.platform === "win32") {
+    for (const letter of "CDEFGHIJKLMNOPQRSTUVWXYZ") {
+      const root = `${letter}:\\`;
+      const d = diskInfo(root);
+      if (d) push(root, d.total, d.free);
+    }
+  } else {
+    const readonly = process.platform === "darwin" ? readOnlyVolumes() : /* @__PURE__ */ new Set();
+    const res = (0, import_child_process.spawnSync)("df", ["-kP"], {
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    if (!res.error && res.status === 0 && res.stdout) {
+      for (const line of res.stdout.split("\n").slice(1)) {
+        const m = line.trim().match(/^(\S+)\s+(\d+)\s+(\d+)\s+(\d+)\s+\d+%\s+(.+)$/);
+        if (!m || PSEUDO_FS.test(m[1])) continue;
+        if (/^\/dev\/loop\d+$/.test(m[1])) continue;
+        if (isInternalMount(m[5]) || readonly.has(m[5])) continue;
+        push(m[5], Number(m[2]) * 1024, Number(m[4]) * 1024);
+      }
+    }
+  }
+  const primary = diskInfo(workspacePath);
+  if (primary) {
+    const covered = out.some((d) => {
+      const root = d.path.endsWith("/") || d.path.endsWith("\\") ? d.path : `${d.path}/`;
+      return workspacePath === d.path || workspacePath.startsWith(root);
+    });
+    if (!covered) push(primary.path, primary.total, primary.free);
+  }
+  return out.sort((a, b) => b.total - a.total);
+}
 function networkInfo() {
   const out = [];
   const ifaces = os6.networkInterfaces();
@@ -13084,6 +13645,7 @@ function overview(store, manager) {
 function buildNodeHost(store, manager, diskPath) {
   const cpus2 = os6.cpus();
   const ov = overview(store, manager);
+  const disks = diskList(diskPath || process.cwd());
   return {
     nodeId: store.loadNodeId() ?? "",
     hostname: os6.hostname(),
@@ -13091,7 +13653,7 @@ function buildNodeHost(store, manager, diskPath) {
     arch: process.arch,
     release: os6.release(),
     uptimeSec: Math.round(os6.uptime()),
-    version: "0.2.16",
+    version: "0.2.20",
     mode: process.env.NODE_MODE ?? "standalone",
     cpu: {
       count: cpus2.length,
@@ -13101,6 +13663,7 @@ function buildNodeHost(store, manager, diskPath) {
     memory: { total: os6.totalmem(), free: os6.freemem() },
     network: networkInfo(),
     disk: diskInfo(diskPath || process.cwd()),
+    disks,
     ...ov
   };
 }
@@ -14326,6 +14889,41 @@ function createApp(store, manager, opts = {}) {
         }
       }
     },
+    {
+      method: "POST",
+      pattern: ["files", "rename"],
+      // 重命名（只改同目录下的名字）
+      fn: (_req, res, { tenant, body }) => {
+        const raw = body ?? {};
+        try {
+          ok(
+            res,
+            renameProjectPath(
+              tenant.workspaceRoot ?? null,
+              String(raw.path ?? ""),
+              String(raw.name ?? "")
+            )
+          );
+        } catch (e) {
+          throw new ApiError(400, "bad_request", e instanceof Error ? e.message : String(e));
+        }
+      }
+    },
+    {
+      method: "POST",
+      pattern: ["files", "zip"],
+      // 压缩下载（多选一起打包；超上限由实现拒绝）
+      fn: (_req, res, { tenant, body }) => {
+        const raw = body ?? {};
+        const paths = Array.isArray(raw.paths) ? raw.paths.map((x) => String(x)) : [];
+        if (paths.length === 0) throw new ApiError(400, "bad_request", "paths \u4E0D\u80FD\u4E3A\u7A7A");
+        try {
+          ok(res, zipProjectPaths(tenant.workspaceRoot ?? null, paths));
+        } catch (e) {
+          throw new ApiError(400, "bad_request", e instanceof Error ? e.message : String(e));
+        }
+      }
+    },
     // ---------- 项目（= 租户）管理：控制台多项目视图 ----------
     // 仅管理员密钥可用；项目级与会话级接口仍用项目自己的 tenant API Key
     // （或管理员密钥 + X-Project-Id 头），互不暴露明文密钥。
@@ -14384,6 +14982,29 @@ function createApp(store, manager, opts = {}) {
         ok(res, nodeLlmView(next));
       }
     },
+    // 大模型账户余额（控制台「余额不足 → 查看余额并充值」用；由节点向 Hub 代查）
+    {
+      method: "GET",
+      pattern: ["node", "llm", "balance"],
+      adminOnly: true,
+      fn: async (_req, res) => {
+        ok(res, await fetchLlmBalance(store));
+      }
+    },
+    // 重新拉取平台内置模型凭据（用户点了「刷新内置模型」，或 Key 在控制台被重置）
+    {
+      method: "POST",
+      pattern: ["node", "llm", "builtin-refresh"],
+      adminOnly: true,
+      fn: async (_req, res) => {
+        const r = await ensureBuiltinProvider(store, { force: true });
+        if (r.status !== "ready") {
+          ok(res, { ok: false, reason: r.reason });
+          return;
+        }
+        ok(res, { ok: true, view: nodeLlmView(store.loadNodeLlm()) });
+      }
+    },
     // ---------- 用量（账本 + 汇总 + 价格） ----------
     {
       method: "GET",
@@ -14810,7 +15431,7 @@ function createApp(store, manager, opts = {}) {
       json(res, 200, {
         status: "ok",
         // 版本让运维/探针能确认线上跑的是哪个构建（更新与回滚据此判断）
-        version: "0.2.16",
+        version: "0.2.20",
         features: { mcp: hasServerMcpConfig() }
       });
       return;
@@ -15150,6 +15771,22 @@ async function dispatchFleetCommand(deps, env3) {
         store.saveNodeLlm(next);
         return ok2(nodeLlmView(next));
       }
+      /*
+       * 重新拉取平台内置模型（志前 API）。
+       *
+       * 用途：用户在控制台点了「刷新」、或内置模型的 Key 在控制台被重置后需要换新。
+       * 走写链串行——它会改写 connections.json，不能与 update_node_llm 并发。
+       */
+      // 余额查询：只读、幂等，可进只读并发池
+      case "get_llm_balance":
+        return ok2(await fetchLlmBalance(store));
+      case "refresh_builtin_llm": {
+        const r = await ensureBuiltinProvider(store, { force: true });
+        if (r.status !== "ready") {
+          return ok2({ ok: false, reason: r.reason });
+        }
+        return ok2({ ok: true, view: nodeLlmView(store.loadNodeLlm()) });
+      }
       case "get_usage_summary": {
         const ledger = manager.usageLedger();
         if (!ledger) return ok2({ total: null, groups: [] });
@@ -15334,6 +15971,24 @@ async function dispatchFleetCommand(deps, env3) {
         const t = project();
         return ok2(searchProjectFiles(t.workspaceRoot ?? null, String(payload.query ?? "")));
       }
+      case "rename_path": {
+        const t = project();
+        return ok2(
+          renameProjectPath(
+            t.workspaceRoot ?? null,
+            String(payload.path ?? ""),
+            String(payload.name ?? "")
+          )
+        );
+      }
+      case "zip_download": {
+        const t = project();
+        const raw = payload.paths;
+        const paths = Array.isArray(raw) ? raw.map((x) => String(x)) : [];
+        if (paths.length === 0) throw new ApiError(400, "bad_request", "paths \u4E0D\u80FD\u4E3A\u7A7A");
+        const maxBytes = typeof payload.maxBytes === "number" ? payload.maxBytes : void 0;
+        return ok2(zipProjectPaths(t.workspaceRoot ?? null, paths, { maxBytes }));
+      }
       case "list_tools": {
         const t = project();
         return ok2(buildToolCatalog(t.workspaceRoot ?? process.cwd()));
@@ -15686,6 +16341,22 @@ function toWireAck(ack) {
     data: ack.data === void 0 ? void 0 : utf8Encode(JSON.stringify(ack.data))
   };
 }
+var ACK_JSON_MAX_BYTES = MAX_FRAME_BYTES - 64 * 1024;
+function mb(bytes) {
+  return (bytes / (1024 * 1024)).toFixed(1);
+}
+function guardAckSize(ack, json2) {
+  if (!ack.ok || ack.data === void 0) return ack;
+  const bytes = Buffer.byteLength(json2, "utf8");
+  if (bytes <= ACK_JSON_MAX_BYTES) return ack;
+  return {
+    reqId: ack.reqId,
+    type: ack.type,
+    ok: false,
+    // 带上实际大小：用户据此能判断「差一点」还是「差很多」，而不是只看到「失败」
+    error: `\u7ED3\u679C\u8FC7\u5927\uFF08${mb(bytes)} MB\uFF09\uFF0C\u8D85\u8FC7\u5355\u5E27\u4F20\u8F93\u4E0A\u9650\uFF08${mb(ACK_JSON_MAX_BYTES)} MB\uFF09\uFF0C\u8BF7\u7F29\u5C0F\u8303\u56F4\u540E\u91CD\u8BD5`
+  };
+}
 function fromWireCommand(env3) {
   let payload = {};
   if (env3.payload && env3.payload.length > 0) {
@@ -16156,6 +16827,7 @@ var READONLY_CMD_TYPES = /* @__PURE__ */ new Set([
   "get_node_llm",
   "list_node_llm_models",
   "get_usage_summary",
+  "get_llm_balance",
   "get_usage_records",
   "get_usage_pricing",
   "list_projects",
@@ -16580,7 +17252,7 @@ var FleetNodeBridge = class {
       label: this.opts.deps.store.loadNodeLabel() ?? void 0,
       platform: process.platform,
       mode: process.env.NODE_MODE ?? "standalone",
-      version: "0.2.16",
+      version: "0.2.20",
       ip: primaryIp()
     };
   }
@@ -16678,7 +17350,7 @@ var FleetNodeBridge = class {
         label: this.opts.deps.store.loadNodeLabel() ?? void 0,
         platform: process.platform,
         mode: process.env.NODE_MODE ?? "standalone",
-        version: "0.2.16",
+        version: "0.2.20",
         ip: primaryIp(),
         projects,
         totals,
@@ -16840,7 +17512,13 @@ var FleetNodeBridge = class {
     const stamped = { ...ack, reqId: env3.reqId, type: env3.type };
     const json2 = JSON.stringify(stamped);
     const __t1 = dbgNow();
-    this._send({ kind: "ack", clientId: env3.clientId, ack: stamped });
+    const payload = guardAckSize(stamped, json2);
+    if (payload !== stamped) {
+      console.warn(
+        `[fleet] ${env3.type} \u56DE\u6267 ${(json2.length / 1024 / 1024).toFixed(1)}MB \u8D85\u8FC7\u5355\u5E27\u4E0A\u9650\uFF0C\u5DF2\u964D\u7EA7\u4E3A\u9519\u8BEF\u56DE\u6267`
+      );
+    }
+    this._send({ kind: "ack", clientId: env3.clientId, ack: payload });
     dbgMs(
       "publishAck",
       __t0,
@@ -18416,7 +19094,7 @@ var path29 = __toESM(require("path"), 1);
 var import_node_child_process5 = require("child_process");
 var import_node_module3 = require("module");
 function currentVersion() {
-  const injected = "0.2.16"?.trim();
+  const injected = "0.2.20"?.trim();
   if (injected) return injected;
   try {
     const req2 = (0, import_node_module3.createRequire)(importMetaUrl);
@@ -19142,7 +19820,9 @@ function seedDemoTenant(store) {
     // 未显式指定时随机生成：固定默认密钥一旦随 HOST=0.0.0.0 暴露到公网，等于公开凭据。
     // 只在首次创建时生成并落盘，后续启动沿用磁盘上的值（启动日志会打印完整密钥）。
     apiKey: env2("TENANT_API_KEY") ?? generateApiKey(),
-    model: env2("MODEL") ?? env2("OPENAI_MODEL") ?? "deepseek-v4-flash",
+    // 不再硬编码具体厂商型号：志前 API 只认 deepseek-flash，写死 deepseek-v4-flash
+    // 会让新装节点的第一次请求 404。默认值统一走 defaultTenantModel（见 nodeLlm.ts）。
+    model: defaultTenantModel(store),
     provider: {
       apiKey: env2("OPENAI_API_KEY"),
       baseURL: env2("OPENAI_BASE_URL")
@@ -19282,6 +19962,8 @@ function startServer(opts = {}) {
   const store = new Store(dataDir);
   const demo = seedDemoTenant(store);
   syncTenantModels(store);
+  const nodeModel = nodeDefaultProvider(store)?.model;
+  if (nodeModel) adoptBuiltinModelForTenants(store, nodeModel);
   const usageLedger = new UsageLedger(dataDir);
   usageLedger.init();
   const manager = new SessionManager(store, void 0, { usage: usageLedger });
@@ -19425,8 +20107,12 @@ function startServer(opts = {}) {
   if (initialCred) {
     connectFleet(initialCred);
   } else if (opts.autoEnroll) {
-    void fleetController.enroll(opts.autoEnroll).then((st) => console.log(`[fleet] \u5DF2\u81EA\u52A8\u63A5\u5165\uFF0C\u8282\u70B9 ${st.nodeId}\uFF08${st.gatewayUrl}\uFF09`)).catch((e) => console.warn(`[fleet] \u81EA\u52A8\u63A5\u5165\u5931\u8D25\uFF08\u53EF\u7A0D\u540E /link \u91CD\u8BD5\uFF09: ${e instanceof Error ? e.message : e}`));
+    void fleetController.enroll(opts.autoEnroll).then((st) => {
+      console.log(`[fleet] \u5DF2\u81EA\u52A8\u63A5\u5165\uFF0C\u8282\u70B9 ${st.nodeId}\uFF08${st.gatewayUrl}\uFF09`);
+      scheduleBuiltinProvider(store, (m) => console.log(m));
+    }).catch((e) => console.warn(`[fleet] \u81EA\u52A8\u63A5\u5165\u5931\u8D25\uFF08\u53EF\u7A0D\u540E /link \u91CD\u8BD5\uFF09: ${e instanceof Error ? e.message : e}`));
   }
+  if (initialCred) scheduleBuiltinProvider(store, (m) => console.log(m));
   const pairingCodes = new PairingCodeStore();
   const qq = new QqManager({
     store,