dsh-model 0.0.1 → 0.14.0

package/dist/dsh/connect.js

@@ -0,0 +1,257 @@
+// dsh/connect.ts — 往 dsh 写入 / 还原 dsh-model 拥有的配置项
+//
+// dsh-model 在 dsh 里可能拥有几样东西（state.dsh 记账）：
+// - profiles/<p>/cordis.patch.yml 的 llm-pi-ai providers.<id>（dsh-model 自己的端点、内置的 opencode 路由）
+// - .credentials.yaml 的 refs.<NAME>（DSH_MODEL_API_KEY、OPENCODE_API_KEY）
+// 首次写入前备份原件并记哈希；全部还原时：
+// - 文件自我们最后一次写入后没被动过 → 用备份逐字节还原（原本不存在就删掉）；
+// - 被改过 → 只摘掉我们拥有的那几项，保留别人的改动。
+import { readFile, rm, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+import { DshModelError } from '../errors.js';
+import { L } from '../i18n.js';
+import { lineDiff } from '../util/diff.js';
+import { atomicWrite, ensureDir, exists, readText, sha256, timestamp } from '../util/fs.js';
+import { KEY_REF, readRef, removeRef, upsertRef } from './credentials.js';
+import { inRecovery, isCompatible, locateDsh, DSH_COMPAT } from './locate.js';
+import { readProvider, removeProvider, upsertProvider } from './patch.js';
+export function providerSpec(port, models) {
+    return {
+        displayName: 'dsh-model',
+        apiKeyEnv: KEY_REF,
+        api: 'openai-completions',
+        baseURL: `http://127.0.0.1:${port}/v1`,
+        models,
+    };
+}
+async function ownerOf(file, fallback) {
+    try {
+        const s = await stat(file);
+        return { owner: fallback ?? { uid: s.uid, gid: s.gid }, mode: s.mode & 0o777 };
+    }
+    catch {
+        return { owner: fallback, mode: 0o600 };
+    }
+}
+async function checkLocation(state, location, force) {
+    const warnings = [];
+    if (state.dsh && (state.dsh.patchFile !== location.patchFile || state.dsh.credFile !== location.credFile)) {
+        throw new DshModelError('dsh_connected_elsewhere', L(`已经接在另一个 dsh profile 上：${state.dsh.patchFile}`, `Already connected to another dsh profile: ${state.dsh.patchFile}`), L('先执行 dsh-model disconnect-dsh', 'Run dsh-model disconnect-dsh first'));
+    }
+    if (location.version) {
+        if (!isCompatible(location.version) && !force) {
+            throw new DshModelError('dsh_version_unsupported', L(`dsh 版本 ${location.version} 不在验证过的区间（>=${DSH_COMPAT.min} <${DSH_COMPAT.maxExclusive}）`, `dsh ${location.version} is outside the verified range (>=${DSH_COMPAT.min} <${DSH_COMPAT.maxExclusive})`), L('配置格式可能已变化。确认要继续请加 --force', 'The config format may have changed. Add --force to proceed anyway'));
+        }
+    }
+    else {
+        warnings.push(L('读不到 dsh 版本，跳过版本校验', 'Could not read the dsh version; skipping the version check'));
+    }
+    if (await inRecovery(location)) {
+        throw new DshModelError('dsh_in_recovery', L('dsh 正处于崩溃恢复状态（patch 文件被改名为 .bak-*）', 'dsh is in crash recovery (patch file renamed to .bak-*)'), L('先正常启动一次 dsh，让它恢复配置，再重试', 'Start dsh once so it restores its config, then retry'));
+    }
+    return warnings;
+}
+/** 写入 / 移除一组项。所有权记在 state.dsh.ownedProviders / ownedRefs */
+export async function applyDsh(ctx, state, items, opts) {
+    const location = await locateDsh(ctx, opts.profile);
+    const warnings = await checkLocation(state, location, opts.force);
+    const ownedProviders = new Set(state.dsh?.ownedProviders ?? []);
+    const ownedRefs = new Set(state.dsh?.ownedRefs ?? []);
+    let createdLlmEntry = state.dsh?.createdLlmEntry ?? false;
+    const patchBefore = await readText(location.patchFile);
+    const credBefore = await readText(location.credFile);
+    // —— 凭据 ——
+    let credAfter = credBefore ?? '';
+    for (const [name, value] of Object.entries(items.refs ?? {})) {
+        const existing = readRef(credAfter === '' ? null : credAfter, name);
+        if (value === null) {
+            if (ownedRefs.has(name)) {
+                credAfter = removeRef(credAfter === '' ? null : credAfter, name).text ?? '';
+                ownedRefs.delete(name);
+            }
+            continue;
+        }
+        if (existing !== undefined && !ownedRefs.has(name) && !opts.isOwnRef?.(name, existing)) {
+            throw new DshModelError('credential_ref_conflict', L(`dsh 凭据里已有 ${name}，且不是 dsh-model 写的`, `dsh credentials already contain ${name}, not written by dsh-model`), L('不会覆盖它。要让 dsh-model 接管，请先在 dsh 设置里删掉它再重试', 'It will not be overwritten. To let dsh-model manage it, remove it in dsh settings and retry'));
+        }
+        credAfter = upsertRef(credAfter === '' ? null : credAfter, value, name);
+        ownedRefs.add(name);
+    }
+    // —— patch ——
+    let patchAfter = patchBefore ?? '';
+    for (const [id, spec] of Object.entries(items.providers ?? {})) {
+        if (spec === null) {
+            if (ownedProviders.has(id)) {
+                if (patchAfter !== '')
+                    patchAfter = removeProvider(patchAfter, id, createdLlmEntry).text;
+                ownedProviders.delete(id);
+            }
+            continue;
+        }
+        if (!ownedProviders.has(id) && readProvider(patchAfter === '' ? null : patchAfter, id)) {
+            throw new DshModelError('provider_conflict', L(`dsh 里已有 provider ${id}，且不是 dsh-model 写的`, `dsh already has a provider ${id}, not written by dsh-model`), L('不会覆盖它', 'It will not be overwritten'));
+        }
+        const r = upsertProvider(patchAfter === '' ? null : patchAfter, id, spec);
+        patchAfter = r.text;
+        createdLlmEntry ||= r.createdLlmEntry;
+        ownedProviders.add(id);
+    }
+    const patchChanged = (patchBefore ?? '') !== patchAfter;
+    const credChanged = (credBefore ?? '') !== credAfter;
+    const changed = patchChanged || credChanged;
+    if (opts.dryRun) {
+        const parts = [];
+        if (patchChanged)
+            parts.push(lineDiff(patchBefore ?? '', patchAfter, location.patchFile));
+        if (credChanged)
+            parts.push(lineDiff(redactCred(credBefore ?? ''), redactCred(credAfter), location.credFile));
+        return { location, changed, diff: parts.join('\n\n'), warnings };
+    }
+    if (!state.dsh) {
+        if (!changed)
+            return { location, changed, warnings };
+        state.dsh = await firstBackup(ctx, location, patchBefore, credBefore);
+    }
+    // 先写凭据再写 patch：dsh 热加载 patch 时 ref 已经能解析
+    if (credChanged) {
+        const { owner } = await ownerOf(location.credFile, ctx.owner);
+        await atomicWrite(location.credFile, credAfter, { mode: 0o600, owner });
+    }
+    if (patchChanged) {
+        const { owner, mode } = await ownerOf(location.patchFile, ctx.owner);
+        await atomicWrite(location.patchFile, patchAfter, { mode: mode || 0o600, owner });
+    }
+    const dsh = state.dsh;
+    dsh.createdLlmEntry = createdLlmEntry;
+    dsh.ownedProviders = [...ownedProviders];
+    dsh.ownedRefs = [...ownedRefs];
+    const patchNow = await readText(location.patchFile);
+    const credNow = await readText(location.credFile);
+    dsh.writtenPatchSha = patchNow == null ? null : sha256(patchNow);
+    dsh.writtenCredSha = credNow == null ? null : sha256(credNow);
+    return { location, changed, warnings };
+}
+async function firstBackup(ctx, location, patchBefore, credBefore) {
+    const dir = join(ctx.paths.backups, timestamp());
+    await ensureDir(ctx.paths.backups, { owner: ctx.owner });
+    await ensureDir(dir, { owner: ctx.owner });
+    const patchBackup = patchBefore != null ? join(dir, 'cordis.patch.yml') : null;
+    const credBackup = credBefore != null ? join(dir, 'credentials.yaml') : null;
+    if (patchBackup)
+        await atomicWrite(patchBackup, patchBefore, { owner: ctx.owner });
+    if (credBackup)
+        await atomicWrite(credBackup, credBefore, { owner: ctx.owner });
+    return {
+        dshHome: location.dshHome,
+        profile: location.profile,
+        patchFile: location.patchFile,
+        credFile: location.credFile,
+        patchBackup,
+        credBackup,
+        patchExisted: patchBefore != null,
+        credExisted: credBefore != null,
+        createdLlmEntry: false,
+        ownedProviders: [],
+        ownedRefs: [],
+        writtenPatchSha: null,
+        writtenCredSha: null,
+        connectedAt: new Date().toISOString(),
+    };
+}
+export async function connectDsh(ctx, state, keys, input) {
+    const providerWritten = input.models.length > 0;
+    const r = await applyDsh(ctx, state, {
+        refs: { [KEY_REF]: input.key },
+        providers: { [input.providerId]: providerWritten ? providerSpec(input.port, input.models) : null },
+    }, { profile: input.profile, force: input.force, dryRun: input.dryRun, isOwnRef: (name, value) => name === KEY_REF && keys.keys.some((k) => k.key === value) });
+    return { ...r, providerWritten };
+}
+/**
+ * 写入一组 provider（都指向统一端点、同一把 key）；以前写过、这次不再出现的 dsh-model* provider 一并移除。
+ */
+export async function connectDshGroups(ctx, state, keys, input) {
+    const providers = {};
+    const live = input.groups.filter((g) => g.models.length);
+    for (const g of live)
+        providers[g.providerId] = { ...providerSpec(input.port, g.models), displayName: g.displayName };
+    for (const id of state.dsh?.ownedProviders ?? [])
+        if (id.startsWith('dsh-model') && !(id in providers))
+            providers[id] = null;
+    const r = await applyDsh(ctx, state, { refs: { [KEY_REF]: input.key }, providers }, {
+        profile: input.profile,
+        force: input.force,
+        dryRun: input.dryRun,
+        isOwnRef: (name, value) => name === KEY_REF && keys.keys.some((k) => k.key === value),
+    });
+    return { ...r, providers: live.map((g) => g.providerId) };
+}
+/** dsh 里有没有 dsh-model 写的任何 provider */
+export async function anyProviderPresent(state) {
+    if (!state.dsh)
+        return false;
+    const text = await readText(state.dsh.patchFile);
+    return (state.dsh.ownedProviders ?? []).filter((id) => id.startsWith('dsh-model')).some((id) => readProvider(text, id) != null);
+}
+export async function disconnectDsh(ctx, state) {
+    const dsh = state.dsh;
+    if (!dsh)
+        return { patch: 'untouched', cred: 'untouched' };
+    const providers = dsh.ownedProviders ?? [];
+    const refs = dsh.ownedRefs ?? [];
+    const patch = await restoreFile(ctx, dsh.patchFile, dsh.writtenPatchSha, dsh.patchExisted, dsh.patchBackup, (text) => {
+        let changed = false;
+        for (const id of providers) {
+            const r = removeProvider(text, id, dsh.createdLlmEntry);
+            if (r.changed) {
+                text = r.text;
+                changed = true;
+            }
+        }
+        return changed ? text : null;
+    });
+    const cred = await restoreFile(ctx, dsh.credFile, dsh.writtenCredSha, dsh.credExisted, dsh.credBackup, (text) => {
+        let changed = false;
+        let cur = text;
+        for (const name of refs) {
+            const r = removeRef(cur, name);
+            if (r.changed) {
+                cur = r.text;
+                changed = true;
+            }
+        }
+        return changed ? cur : null;
+    });
+    delete state.dsh;
+    return { patch, cred };
+}
+async function restoreFile(ctx, file, writtenSha, existed, backup, surgical) {
+    const current = await readText(file);
+    if (current == null)
+        return 'missing';
+    if (writtenSha && sha256(current) === writtenSha) {
+        if (!existed) {
+            await rm(file, { force: true });
+            return 'restored';
+        }
+        if (backup && (await exists(backup))) {
+            const { owner, mode } = await ownerOf(file, ctx.owner);
+            await atomicWrite(file, await readFile(backup), { mode, owner });
+            return 'restored';
+        }
+    }
+    const next = surgical(current);
+    if (next == null)
+        return 'untouched';
+    const { owner, mode } = await ownerOf(file, ctx.owner);
+    await atomicWrite(file, next, { mode, owner });
+    return 'surgical';
+}
+/** dsh 里现在有没有某个 provider（doctor / status 用） */
+export async function providerPresent(state, providerId) {
+    if (!state.dsh)
+        return false;
+    return readProvider(await readText(state.dsh.patchFile), providerId) != null;
+}
+function redactCred(text) {
+    return text.replace(/(dshm_)[A-Za-z0-9_-]{8,}([A-Za-z0-9_-]{4})/g, '$1…$2').replace(/(OPENCODE_API_KEY:\s*)\S+/g, '$1***');
+}

package/dist/dsh/credentials.js

@@ -0,0 +1,55 @@
+// dsh/credentials.ts — $DSH_HOME/.credentials.yaml 的 refs.<NAME>
+//
+// dsh-credentials-local 的规则：0600，否则拒绝加载；不接受空值和未知顶层键；
+// 格式 version: 1 / refs: {NAME: value} / records: {...}。provider 里用 apiKeyEnv: NAME 引用。
+import YAML, { isMap } from 'yaml';
+import { DshModelError } from '../errors.js';
+import { L } from '../i18n.js';
+export const KEY_REF = 'DSH_MODEL_API_KEY';
+function parse(text) {
+    const src = text ?? '';
+    const doc = YAML.parseDocument(src.trim() ? src : 'version: 1\n');
+    if (doc.errors.length) {
+        throw new DshModelError('credentials_invalid', L(`dsh 的 .credentials.yaml 有 YAML 语法错误：${doc.errors[0]?.message}`, `dsh .credentials.yaml has a YAML error: ${doc.errors[0]?.message}`));
+    }
+    if (!isMap(doc.contents)) {
+        throw new DshModelError('credentials_invalid', L('dsh 的 .credentials.yaml 顶层不是映射，不敢改', 'dsh .credentials.yaml is not a top-level mapping; refusing to edit'));
+    }
+    return doc;
+}
+export function readRef(text, name = KEY_REF) {
+    if (text == null)
+        return undefined;
+    const v = parse(text).getIn(['refs', name]);
+    return typeof v === 'string' ? v : undefined;
+}
+export function upsertRef(text, value, name = KEY_REF) {
+    const doc = parse(text);
+    const root = doc.contents;
+    if (!root.has('version'))
+        root.set('version', 1);
+    let refs = root.get('refs', true);
+    if (refs == null) {
+        root.set('refs', doc.createNode({}));
+        refs = root.get('refs', true);
+    }
+    if (!isMap(refs))
+        throw new DshModelError('credentials_invalid', L('.credentials.yaml 的 refs 不是映射，不敢改', '.credentials.yaml refs is not a mapping; refusing to edit'));
+    refs.flow = false;
+    refs.set(name, value);
+    return doc.toString({ lineWidth: 0 });
+}
+/** 移除 refs.<NAME>；refs 因此变空就连 refs 键一起删（dsh 不接受空值） */
+export function removeRef(text, name = KEY_REF) {
+    if (text == null)
+        return { text, changed: false };
+    const doc = parse(text);
+    const root = doc.contents;
+    const refs = root.get('refs', true);
+    if (!isMap(refs) || !refs.has(name))
+        return { text, changed: false };
+    refs.delete(name);
+    if (refs.items.length === 0)
+        root.delete('refs');
+    return { text: doc.toString({ lineWidth: 0 }), changed: true };
+}

package/dist/dsh/locate.js

@@ -0,0 +1,129 @@
+// dsh/locate.ts — 找到 dsh：DSH_HOME、profile、版本
+import { readdir, readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { VPS_ROOT } from '../context.js';
+import { DshModelError } from '../errors.js';
+import { L } from '../i18n.js';
+import { run } from '../util/exec.js';
+import { exists } from '../util/fs.js';
+/** 验证过的 dsh 版本区间：>= MIN 且 < MAX_EXCLUSIVE */
+export const DSH_COMPAT = { min: '0.2.0-rc.2', maxExclusive: '0.3.0' };
+export async function resolveProfile(ctx, preferred) {
+    if (preferred)
+        return preferred;
+    if (ctx.mode === 'vps')
+        return 'web';
+    const dir = join(ctx.dshHome, 'profiles');
+    let names = [];
+    try {
+        names = (await readdir(dir, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
+    }
+    catch {
+        // 下面统一报错
+    }
+    if (names.includes('desktop'))
+        return 'desktop';
+    if (names.includes('web'))
+        return 'web';
+    if (names.length === 1)
+        return names[0];
+    if (names.length === 0) {
+        throw new DshModelError('dsh_not_found', L(`没找到 dsh 的 profile（${dir}）`, `No dsh profile found (${dir})`), L('请先安装并启动一次 dsh；DSH_HOME 不在默认位置时设置环境变量 DSH_HOME。', 'Install and start dsh once first; set DSH_HOME if it is not in the default location.'));
+    }
+    throw new DshModelError('profile_ambiguous', L(`有多个 dsh profile：${names.join('、')}`, `Multiple dsh profiles: ${names.join(', ')}`), L('用 --profile <名字> 指定一个', 'Pick one with --profile <name>'));
+}
+export async function dshVersion(ctx) {
+    if (ctx.env.DSH_MODEL_DSH_VERSION)
+        return ctx.env.DSH_MODEL_DSH_VERSION;
+    if (ctx.mode === 'vps') {
+        try {
+            const pkg = JSON.parse(await readFile(join(VPS_ROOT, 'dsh/current/node_modules/@deepseek-ai/dsh/package.json'), 'utf8'));
+            return pkg.version ?? null;
+        }
+        catch {
+            return null;
+        }
+    }
+    if (ctx.platform === 'darwin') {
+        for (const app of ['/Applications/DeepSeek Harness.app', join(homedir(), 'Applications/DeepSeek Harness.app')]) {
+            const r = await run('plutil', ['-extract', 'CFBundleShortVersionString', 'raw', join(app, 'Contents/Info.plist')]);
+            if (r.code === 0 && r.stdout.trim())
+                return r.stdout.trim();
+        }
+    }
+    return null;
+}
+export async function locateDsh(ctx, preferredProfile) {
+    if (!(await exists(ctx.dshHome))) {
+        throw new DshModelError('dsh_not_found', L(`没找到 dsh 的数据目录：${ctx.dshHome}`, `dsh data directory not found: ${ctx.dshHome}`), L('请先安装并启动一次 dsh；不在默认位置时设置环境变量 DSH_HOME。', 'Install and start dsh once first; set DSH_HOME if it is elsewhere.'));
+    }
+    const profile = await resolveProfile(ctx, preferredProfile);
+    const profileDir = join(ctx.dshHome, 'profiles', profile);
+    if (!(await exists(profileDir))) {
+        throw new DshModelError('profile_not_found', L(`dsh profile 不存在：${profileDir}`, `dsh profile does not exist: ${profileDir}`));
+    }
+    return {
+        dshHome: ctx.dshHome,
+        profile,
+        profileDir,
+        patchFile: join(profileDir, 'cordis.patch.yml'),
+        credFile: join(ctx.dshHome, '.credentials.yaml'),
+        version: await dshVersion(ctx),
+    };
+}
+/** dsh 崩溃恢复中：patch 被改名成 cordis.patch.yml.bak-<ms>，原文件不在 */
+export async function inRecovery(loc) {
+    if (await exists(loc.patchFile))
+        return false;
+    try {
+        return (await readdir(loc.profileDir)).some((n) => n.startsWith('cordis.patch.yml.bak-'));
+    }
+    catch {
+        return false;
+    }
+}
+// —— 版本比较（够用的 semver：x.y.z[-pre.n]）——
+function parseVer(v) {
+    const [core = '', pre] = v.replace(/^v/, '').split('-', 2);
+    return {
+        nums: core.split('.').map((n) => Number(n) || 0),
+        pre: pre ? pre.split('.').map((p) => (/^\d+$/.test(p) ? Number(p) : p)) : [],
+    };
+}
+export function compareVersions(a, b) {
+    const pa = parseVer(a);
+    const pb = parseVer(b);
+    for (let i = 0; i < 3; i++) {
+        const d = (pa.nums[i] ?? 0) - (pb.nums[i] ?? 0);
+        if (d)
+            return Math.sign(d);
+    }
+    if (!pa.pre.length && !pb.pre.length)
+        return 0;
+    if (!pa.pre.length)
+        return 1; // 正式版 > 预发布
+    if (!pb.pre.length)
+        return -1;
+    for (let i = 0; i < Math.max(pa.pre.length, pb.pre.length); i++) {
+        const x = pa.pre[i];
+        const y = pb.pre[i];
+        if (x === undefined)
+            return -1;
+        if (y === undefined)
+            return 1;
+        if (x === y)
+            continue;
+        if (typeof x === 'number' && typeof y === 'number')
+            return Math.sign(x - y);
+        if (typeof x === 'number')
+            return -1;
+        if (typeof y === 'number')
+            return 1;
+        return x < y ? -1 : 1;
+    }
+    return 0;
+}
+export function isCompatible(version) {
+    return compareVersions(version, DSH_COMPAT.min) >= 0 && compareVersions(version, DSH_COMPAT.maxExclusive) < 0;
+}

package/dist/dsh/patch.js

@@ -0,0 +1,106 @@
+// dsh/patch.ts — 在 profiles/<p>/cordis.patch.yml 里合并 / 移除 llm-pi-ai 的 providers.<id>
+//
+// dsh 的规则（0.2.0-rc.2 实测）：
+// - patch 是顶层 YAML 数组；条目的 config 会整块替换，所以只能合并进已有的 llm-pi-ai 条目，不能另起一条；
+// - 空文件或只有注释会让 dsh 启动失败，删空时至少留 []；
+// - Web UI 保存可能丢掉 config 内的注释，所以识别靠 provider 键名，不靠注释标记。
+// 这里全是纯函数（文本进、文本出），方便用 fixture 测。
+import YAML, { isMap, isSeq } from 'yaml';
+import { DshModelError } from '../errors.js';
+import { L } from '../i18n.js';
+export const LLM_ENTRY_ID = 'llm-pi-ai';
+export const LLM_ENTRY_NAME = '@deepseek-ai/dsh-llm-pi-ai';
+function parse(text) {
+    const src = text ?? '';
+    const doc = YAML.parseDocument(src.trim() ? src : '[]\n');
+    if (doc.errors.length) {
+        throw new DshModelError('patch_invalid', L(`dsh 的 cordis.patch.yml 有 YAML 语法错误：${doc.errors[0]?.message}`, `dsh cordis.patch.yml has a YAML error: ${doc.errors[0]?.message}`));
+    }
+    if (doc.contents == null)
+        doc.contents = doc.createNode([]);
+    if (!isSeq(doc.contents)) {
+        throw new DshModelError('patch_invalid', L('dsh 的 cordis.patch.yml 顶层不是数组，不敢改', 'dsh cordis.patch.yml is not a top-level array; refusing to edit'));
+    }
+    return doc;
+}
+function seqOf(doc) {
+    return doc.contents;
+}
+function findEntry(doc) {
+    const items = seqOf(doc).items;
+    for (let i = 0; i < items.length; i++) {
+        const item = items[i];
+        if (isMap(item) && item.get('id') === LLM_ENTRY_ID)
+            return { entry: item, index: i };
+    }
+    return null;
+}
+function stringify(doc) {
+    const out = doc.toString({ lineWidth: 0 });
+    return out.endsWith('\n') ? out : out + '\n';
+}
+/** 读出当前的 providers.<id>（没有返回 null） */
+export function readProvider(text, providerId) {
+    const doc = parse(text);
+    const found = findEntry(doc);
+    const providers = found?.entry.getIn(['config', 'providers']);
+    if (!isMap(providers))
+        return null;
+    const node = providers.get(providerId, true);
+    return node ? node.toJSON() : null;
+}
+/** 写入（或替换）providers.<id>；llm-pi-ai 条目不存在就新建 */
+export function upsertProvider(text, providerId, spec) {
+    const doc = parse(text);
+    let found = findEntry(doc);
+    let createdLlmEntry = false;
+    if (!found) {
+        seqOf(doc).add(doc.createNode({ id: LLM_ENTRY_ID, name: LLM_ENTRY_NAME, config: { providers: {} } }));
+        found = findEntry(doc);
+        createdLlmEntry = true;
+    }
+    const { entry } = found;
+    let cfg = entry.get('config', true);
+    if (cfg == null) {
+        entry.set('config', doc.createNode({ providers: {} }));
+        cfg = entry.get('config', true);
+    }
+    if (!isMap(cfg)) {
+        throw new DshModelError('patch_invalid', L('llm-pi-ai 条目的 config 不是普通映射（可能是 !!js 表达式），不敢改', 'The llm-pi-ai entry config is not a plain mapping (maybe a !!js expression); refusing to edit'));
+    }
+    let providers = cfg.get('providers', true);
+    if (providers == null) {
+        cfg.set('providers', doc.createNode({}));
+        providers = cfg.get('providers', true);
+    }
+    if (!isMap(providers)) {
+        throw new DshModelError('patch_invalid', L('llm-pi-ai 的 providers 不是映射，不敢改', 'llm-pi-ai providers is not a mapping; refusing to edit'));
+    }
+    // 空的 {} 是 flow 样式，写入内容后改成块样式，和 dsh 自己写的风格一致
+    ;
+    providers.flow = false;
+    providers.set(providerId, doc.createNode(spec));
+    return { text: stringify(doc), createdLlmEntry };
+}
+/**
+ * 移除 providers.<id>。dropEntryIfEmpty：llm-pi-ai 条目是我们建的、且移除后只剩空壳，就整条删掉。
+ */
+export function removeProvider(text, providerId, dropEntryIfEmpty) {
+    const doc = parse(text);
+    const found = findEntry(doc);
+    const providers = found?.entry.getIn(['config', 'providers'], true);
+    if (!found || !isMap(providers) || !providers.has(providerId))
+        return { text: text ?? '[]\n', changed: false };
+    providers.delete(providerId);
+    if (dropEntryIfEmpty && providers.items.length === 0) {
+        const cfg = found.entry.get('config', true);
+        const cfgOnlyProviders = isMap(cfg) && cfg.items.length === 1;
+        const entryKeys = found.entry.items.map((p) => String(p.key?.value ?? p.key));
+        const onlyStdKeys = entryKeys.every((k) => k === 'id' || k === 'name' || k === 'config');
+        if (cfgOnlyProviders && onlyStdKeys)
+            seqOf(doc).items.splice(found.index, 1);
+    }
+    if (seqOf(doc).items.length === 0)
+        seqOf(doc).flow = true; // 写成 []，dsh 不接受空 patch
+    return { text: stringify(doc), changed: true };
+}

package/dist/dsh/pick.js

@@ -0,0 +1,59 @@
+// dsh/pick.ts — dsh 下拉框里每个来源默认显示哪些模型
+//
+// 统一端点照常提供全部模型（其他软件不受影响）；只是写进 dsh 的模型要精简，不然几十个选起来太费事。
+// 用户在管理页勾选过的来源按勾选；没勾选过的用这里的默认：
+//   去掉画图 / 审查 / 自动路由这类不是对话用的 → 免费的先放（最多 2 个）→ 各系列轮流取最新版本，凑满 5 个。
+export const DEFAULT_PICK = 5;
+const MAX_FREE = 2;
+const NON_CHAT = /image|embed|tts|whisper|audio|review|(^|\/)(auto|default-model)$/i;
+/** 系列的先后：常用的大模型在前 */
+const FAMILY_ORDER = ['gpt', 'claude', 'gemini', 'grok', 'kimi', 'glm', 'deepseek', 'qwen', 'minimax', 'hy'];
+const bare = (id) => id.slice(id.lastIndexOf('/') + 1).toLowerCase();
+const family = (id) => /^[a-z]+/.exec(bare(id))?.[0] ?? bare(id);
+const version = (id) => (bare(id).match(/\d+(\.\d+)?/g) ?? []).map(Number);
+function newerFirst(a, b) {
+    const va = version(a.id);
+    const vb = version(b.id);
+    for (let i = 0; i < Math.max(va.length, vb.length); i++) {
+        const d = (vb[i] ?? -1) - (va[i] ?? -1);
+        if (d)
+            return d;
+    }
+    // 同版本：flash / preview / mini 这类变体往后
+    const variant = (id) => (/flash|preview|mini|lite|turbo|fast/.test(bare(id)) ? 1 : 0);
+    return variant(a.id) - variant(b.id) || a.id.length - b.id.length;
+}
+export function defaultPick(models, limit = DEFAULT_PICK) {
+    const chat = models.filter((m) => !NON_CHAT.test(m.id));
+    const out = [];
+    for (const m of chat.filter((x) => x.rate === 0).sort(newerFirst).slice(0, MAX_FREE))
+        out.push(m.id);
+    const byFamily = new Map();
+    for (const m of chat) {
+        if (out.includes(m.id))
+            continue;
+        const f = family(m.id);
+        byFamily.set(f, [...(byFamily.get(f) ?? []), m]);
+    }
+    const rank = (f) => (FAMILY_ORDER.indexOf(f) === -1 ? FAMILY_ORDER.length : FAMILY_ORDER.indexOf(f));
+    const families = [...byFamily.keys()].sort((a, b) => rank(a) - rank(b) || a.localeCompare(b));
+    for (const f of families)
+        byFamily.get(f).sort(newerFirst);
+    while (out.length < limit && families.some((f) => byFamily.get(f).length)) {
+        for (const f of families) {
+            const next = byFamily.get(f).shift();
+            if (next && out.length < limit)
+                out.push(next.id);
+        }
+    }
+    return out;
+}
+/** 这个来源在 dsh 里显示哪些：勾选过就按勾选（只留现在还在的），否则默认 */
+export function pickedFor(models, chosen) {
+    if (!chosen)
+        return defaultPick(models);
+    const have = new Set(models.map((m) => m.id));
+    const kept = chosen.filter((id) => have.has(id));
+    // 勾选的模型全都下线了：退回默认，免得这个来源整组消失
+    return kept.length || !chosen.length ? kept : defaultPick(models);
+}

package/dist/engine/auth.js

@@ -0,0 +1,40 @@
+// engine/auth.ts — 引擎 auth-dir 里的凭据文件（只看文件名，不读内容）
+import { chmod, chown, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { UPSTREAMS } from '../upstreams.js';
+import { isNotFound } from '../util/fs.js';
+export async function listAuthFiles(ctx) {
+    try {
+        const entries = await readdir(ctx.paths.auth, { withFileTypes: true });
+        return entries.filter((e) => e.isFile() && e.name.endsWith('.json')).map((e) => e.name).sort();
+    }
+    catch (error) {
+        if (isNotFound(error))
+            return [];
+        throw error;
+    }
+}
+export function filesFor(files, def) {
+    return files.filter((f) => f.startsWith(def.filePrefix));
+}
+/** 每个上游登录了几个账号；不认识前缀的文件归到 other */
+export function summarize(files) {
+    const byUpstream = {};
+    const claimed = new Set();
+    for (const def of UPSTREAMS) {
+        const mine = filesFor(files, def);
+        if (mine.length)
+            byUpstream[def.id] = mine;
+        mine.forEach((f) => claimed.add(f));
+    }
+    return { byUpstream, other: files.filter((f) => !claimed.has(f)) };
+}
+/** 引擎写出的凭据可能是 0644（实测旧版本如此）：统一收紧到 0600，vps 模式归 dsh */
+export async function tightenAuthPerms(ctx) {
+    for (const name of await listAuthFiles(ctx)) {
+        const file = join(ctx.paths.auth, name);
+        await chmod(file, 0o600);
+        if (ctx.owner)
+            await chown(file, ctx.owner.uid, ctx.owner.gid);
+    }
+}