dsh-model 0.19.1 → 0.20.1

package/dist/bridge/workbuddy/upstream.js

@@ -643,6 +643,25 @@ export class WorkBuddyUpstreamClient {
      * `enterpriseId` must stay on the measured personal path instead of being
      * moved onto an unmeasured one.
      */
+    /**
+     * 每日签到（只有国内版有）。dsh-model 加：接口与"已签到"的判断照 corrinehu/dsh-buddy-checkin（MIT）。
+     * 返回 signed（这次签上了，credit 是送的积分）或 already（今天已经签过）；其他情况抛错。
+     */
+    async dailyCheckin(credential) {
+        const response = await fetch(`${billingBase(credential)}/v2/billing/meter/daily-checkin`, {
+            method: 'POST',
+            headers: billingHeaders(credential),
+            body: '{}',
+            signal: AbortSignal.timeout(JSON_TIMEOUT_MS),
+        });
+        const envelope = await readEnvelope(response);
+        if (envelope.msg.includes('已签到'))
+            return { state: 'already' };
+        if (!response.ok || (envelope.code !== undefined && envelope.code !== 0))
+            throw envelopeError(response.status, envelope);
+        const data = typeof envelope.data === 'object' && envelope.data !== null ? envelope.data : {};
+        return { state: 'signed', ...(typeof data['credit'] === 'number' ? { credit: data['credit'] } : {}) };
+    }
     async fetchCredits(credential) {
         if (regionOf(credential.domain) === 'cn'
             && credential.enterpriseId !== undefined && credential.enterpriseId !== '') {

package/dist/checkin/index.js

@@ -0,0 +1,86 @@
+// checkin/index.ts — 每日签到（设计 §14.15）：WorkBuddy 国内版、Qoder；以后加 Trae、WPS 灵犀
+//
+// 「今天」按北京时间算：这几家都在北京时间零点换天（VPS 的系统时间是 UTC）。
+// 自动签到默认打开：守护进程每 15 分钟看一眼，过了当天随机的几分钟后签一次；失败的隔一小时再试；错过了下次开机补。
+// 结果存 <home>/checkin.json：开关、当天日期、每家的结果。
+import { join } from 'node:path';
+import { L } from '../i18n.js';
+import { readJson, writeJson } from '../util/fs.js';
+export const checkinPath = (home) => join(home, 'checkin.json');
+/** 北京时间的日期与时刻 */
+export function beijingNow(now = new Date()) {
+    const parts = Object.fromEntries(new Intl.DateTimeFormat('en-CA', { timeZone: 'Asia/Shanghai', year: 'numeric', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', hourCycle: 'h23' }).formatToParts(now).map((p) => [p.type, p.value]));
+    return { date: `${parts.year}-${parts.month}-${parts.day}`, minutes: Number(parts.hour) * 60 + Number(parts.minute) };
+}
+export async function loadCheckin(home) {
+    return (await readJson(checkinPath(home))) ?? { results: [] };
+}
+/** 今天的结果（换天了就是空的） */
+export function todayResults(file, now = new Date()) {
+    return file.date === beijingNow(now).date ? file.results : [];
+}
+/** 失败原因 → 该怎么办 */
+export function checkinAdvice(id, message) {
+    if (/无效|过期|401|403|unauthor|expired/i.test(message)) {
+        return id === 'qoder' ? L('Qoder 个人访问令牌失效：在签到卡片里重新填一个', 'The Qoder access token no longer works: enter a new one in the check-in card') : L('WorkBuddy 登录过期：在来源里重新登录 WorkBuddy', 'WorkBuddy sign-in expired: sign in to WorkBuddy again under Sources');
+    }
+    if (/timeout|timed out|fetch failed|network|ECONN/i.test(message))
+        return L('网络不通：稍后会自动再试', 'Network problem: it will retry automatically');
+    return L('稍后会自动再试', 'It will retry automatically');
+}
+/**
+ * 签到。force：今天已经成功的也再问一遍（一键签到时用；各家都是幂等的，重复签只会返回"已签到"）。
+ * 返回今天的全部结果。
+ */
+export async function runCheckin(home, checkers, opts = {}) {
+    const file = await loadCheckin(home);
+    const { date } = beijingNow();
+    const results = new Map(todayResults(file).map((r) => [r.id, r]));
+    for (const c of checkers) {
+        const prev = results.get(c.id);
+        if (!opts.force && prev && prev.state !== 'failed')
+            continue;
+        const at = new Date().toISOString();
+        try {
+            const r = await c.run();
+            results.set(c.id, { id: c.id, label: c.label, state: r.state, ...(r.credit !== undefined ? { credit: r.credit } : {}), at });
+        }
+        catch (error) {
+            const message = String(error.message ?? error).slice(0, 200);
+            results.set(c.id, { id: c.id, label: c.label, state: 'failed', message, at });
+        }
+    }
+    const next = { ...file, date, results: [...results.values()] };
+    await writeJson(checkinPath(home), next, { owner: opts.owner });
+    return next.results;
+}
+/** 现在该不该自动签：打开了、过了今天的随机延后、有没签上的（失败的隔一小时再试） */
+export function autoDue(file, checkers, now = new Date()) {
+    if (file.auto === false || !checkers.length)
+        return false;
+    const { date, minutes } = beijingNow(now);
+    const jitter = file.jitter?.date === date ? file.jitter.minutes : 0;
+    if (minutes < jitter)
+        return false;
+    const today = new Map(todayResults(file, now).map((r) => [r.id, r]));
+    return checkers.some((c) => {
+        const r = today.get(c.id);
+        if (!r)
+            return true;
+        return r.state === 'failed' && now.getTime() - Date.parse(r.at) > 60 * 60 * 1000;
+    });
+}
+/** 今天的随机延后（5–55 分钟），一天定一次 */
+export async function ensureJitter(home, owner) {
+    const file = await loadCheckin(home);
+    const { date } = beijingNow();
+    if (file.jitter?.date === date)
+        return file;
+    const next = { ...file, jitter: { date, minutes: 5 + Math.floor(Math.random() * 50) } };
+    await writeJson(checkinPath(home), next, { owner });
+    return next;
+}
+export async function setAuto(home, on, owner) {
+    const file = await loadCheckin(home);
+    await writeJson(checkinPath(home), { ...file, auto: on }, { owner });
+}

package/dist/checkin/qoder.js

@@ -0,0 +1,94 @@
+// checkin/qoder.ts — Qoder 每日签到（领取每日赠送积分）
+//
+// 协议照 G57651/dsh-dual-checkin 的 qoder 适配器（MIT），与 Qoder 桌面端「用量面板」自己的领取链路一致：
+//   个人访问令牌（PAT）→ POST {openApi}/api/v1/jobToken/exchange → 短期 jobToken
+//   GET  {openApi}/sash/api/v1/me/campaigns                    找当天的 CLAIM_BENEFIT 活动
+//   POST {openApi}/sash/api/v1/me/campaigns/{id}/claim         幂等：重复领取返回 replayed，不会多发
+// PAT 存在 dsh-model 的 secrets.json（0600）；jobToken 只在内存里用，不落盘。
+export const QODER_REGIONS = {
+    cn: { label: 'Qoder（国内版）', openApi: 'https://openapi.qoder.com.cn' },
+    intl: { label: 'Qoder', openApi: 'https://openapi.qoder.sh' },
+};
+const TIMEOUT_MS = 20_000;
+async function call(url, init) {
+    const res = await fetch(url, { ...init, signal: AbortSignal.timeout(TIMEOUT_MS) });
+    const text = await res.text();
+    let json = {};
+    try {
+        json = text ? JSON.parse(text) : {};
+    }
+    catch {
+        // 非 JSON：按状态码判断
+    }
+    return { status: res.status, json };
+}
+/** PAT 换短期 token；PAT 不对就抛"PAT 无效" */
+export async function exchangePat(pat, region) {
+    const r = await call(`${QODER_REGIONS[region].openApi}/api/v1/jobToken/exchange`, {
+        method: 'POST',
+        headers: { accept: 'application/json', 'content-type': 'application/json', 'cosy-clienttype': '5', 'cosy-version': '1.0.1', 'user-agent': 'Qoder' },
+        body: JSON.stringify({ personal_token: pat }),
+    });
+    const token = typeof r.json.token === 'string' ? r.json.token : '';
+    if (r.status >= 400 || !token)
+        throw new QoderAuthError(`Qoder 个人访问令牌无效或已过期（HTTP ${r.status}）`);
+    return token;
+}
+export class QoderAuthError extends Error {
+}
+const headers = (token) => ({ accept: 'application/json', authorization: `Bearer ${token}`, 'cosy-clienttype': '10', 'user-agent': 'Qoder' });
+const epoch = (v) => {
+    if (typeof v === 'number' && Number.isFinite(v) && v > 0)
+        return v >= 1e12 ? v : v * 1000;
+    if (typeof v === 'string' && v) {
+        const t = Date.parse(v);
+        return Number.isNaN(t) ? undefined : t;
+    }
+    return undefined;
+};
+/** 当天能领的 CLAIM_BENEFIT 活动。导出给测试 */
+export function claimableCampaign(payload, now = Date.now()) {
+    const list = payload?.campaigns ?? payload?.data?.campaigns;
+    if (!Array.isArray(list))
+        return undefined;
+    for (const c of list) {
+        if (!c || c.actionType !== 'CLAIM_BENEFIT')
+            continue;
+        const start = epoch(c.startAt ?? c.beginAt);
+        const end = epoch(c.endAt);
+        if (start !== undefined && now < start)
+            continue;
+        if (end !== undefined && now > end)
+            continue;
+        return c;
+    }
+    return undefined;
+}
+const amountOf = (claim, campaign) => {
+    const n = Number(claim.data?.benefit?.amount ?? claim.benefit?.amount ?? campaign.benefit?.amount);
+    return Number.isFinite(n) && n > 0 ? n : undefined;
+};
+export async function qoderCheckin(pat, region) {
+    const base = QODER_REGIONS[region].openApi;
+    const token = await exchangePat(pat, region);
+    const list = await call(`${base}/sash/api/v1/me/campaigns`, { headers: headers(token) });
+    if (list.status === 401 || list.status === 403)
+        throw new QoderAuthError(`Qoder 登录无效（HTTP ${list.status}）`);
+    if (list.status >= 400)
+        throw new Error(`Qoder 活动列表 HTTP ${list.status}`);
+    const campaign = claimableCampaign(list.json);
+    if (!campaign)
+        throw new Error('Qoder 现在没有可领取的签到活动（每天滚动发放，稍后会再试）');
+    if (campaign.claimStatus === 'CLAIMED')
+        return { state: 'already' };
+    const claim = await call(`${base}/sash/api/v1/me/campaigns/${encodeURIComponent(String(campaign.campaignId ?? campaign.id ?? ''))}/claim`, { method: 'POST', headers: { ...headers(token), 'content-type': 'application/json' }, body: '{}' });
+    if (claim.status >= 400)
+        throw new Error(`Qoder 领取失败（HTTP ${claim.status}）：${String(claim.json.message ?? '').slice(0, 120)}`);
+    const body = (typeof claim.json.data === 'object' && claim.json.data !== null ? claim.json.data : claim.json);
+    if (body.replayed === true)
+        return { state: 'already' };
+    if (body.status !== 'CLAIMED' && body.success !== true)
+        throw new Error(`Qoder 签到返回异常：${JSON.stringify(claim.json).slice(0, 160)}`);
+    const credit = amountOf(claim.json, campaign);
+    return { state: 'signed', ...(credit !== undefined ? { credit } : {}) };
+}

package/dist/cli.js

@@ -14,7 +14,7 @@ import { supervise } from './service/windows.js';
 import { opencode } from './commands/opencode.js';
 import { workbuddy } from './commands/workbuddy.js';
 import { bridge } from './commands/bridge.js';
-import { enableInteractive, failures, source, sources, stats } from './commands/sources.js';
+import { checkin, enableInteractive, failures, source, sources, stats } from './commands/sources.js';
 import { createContext } from './context.js';
 import { isDshModelError } from './errors.js';
 import { L, initLang } from './i18n.js';
@@ -69,6 +69,7 @@ function help() {
   login <来源> / logout <来源>          同 source enable / source logout
   stats                                按 key / 来源 / 模型的成功率、延迟、速度
   failures                             最近 24 小时失败的请求，以及该怎么办
+  checkin                              现在签到一次（WorkBuddy 国内版、Qoder；默认每天自动签）
   status                               一屏总览
   doctor [--e2e] [--all] [--model M]   逐项自检；--e2e 实测流式与工具调用
   connect-dsh [--dry-run] [--force]    写入 / 刷新 dsh 配置
@@ -101,6 +102,7 @@ Usage: dsh-model <command> [options]
   login <source> / logout <source>     Same as source enable / source logout
   stats                                Success rate, latency and speed by key / source / model
   failures                             Failed requests in the last 24 hours, and what to do
+  checkin                              Check in now (WorkBuddy China, Qoder; automatic daily by default)
   status                               Overview
   doctor [--e2e] [--all] [--model M]   Health checks; --e2e tests streaming and tool calls
   connect-dsh [--dry-run] [--force]    Write / refresh dsh config
@@ -171,6 +173,8 @@ export async function main(argv) {
                 return await stats(ctx);
             case 'failures':
                 return await failures(ctx);
+            case 'checkin':
+                return await checkin(ctx);
             case 'status':
                 return await status(ctx);
             case 'doctor':

package/dist/commands/self.js

@@ -5,7 +5,7 @@
 // 3. 用新版本执行一次 repair：重写服务文件、重启引擎与守护进程、同步模型。
 import { spawn } from 'node:child_process';
 import { closeSync, openSync } from 'node:fs';
-import { chown, realpath } from 'node:fs/promises';
+import { chown, realpath, writeFile } from 'node:fs/promises';
 import { delimiter, dirname, join } from 'node:path';
 import { requireRootInVps } from '../context.js';
 import { DshModelError, isDshModelError } from '../errors.js';
@@ -120,8 +120,12 @@ export async function selfUpdate(ctx, opts = {}) {
 }
 /** 管理页请求的日志：更新写在 home 里；卸载会删 home，写在它外面 */
 export function selfJobLog(ctx, action) {
-    return action === 'uninstall' ? join(dirname(ctx.paths.home), 'dsh-model-uninstall.log') : join(ctx.paths.home, 'update.log');
+    if (action === 'uninstall')
+        return join(dirname(ctx.paths.home), 'dsh-model-uninstall.log');
+    return join(ctx.paths.home, action === 'repair' ? 'repair.log' : 'update.log');
 }
+/** admin-run 跑完在日志最后写的一行：页面据此知道结束了、成没成 */
+export const ADMIN_DONE_RE = /^\[dsh-model\] exit (-?\d+)$/m;
 /** 由 dsh-model-admin.service（root）执行：取出管理页的请求单，只做 update / uninstall */
 export async function adminRun(ctx) {
     if (!ctx.isRoot)
@@ -138,7 +142,8 @@ export async function adminRun(ctx) {
     const out = openSync(log, 'w', 0o600);
     if (ctx.owner)
         await chown(log, ctx.owner.uid, ctx.owner.gid).catch(() => { });
-    const args = req.action === 'update' ? ['update'] : ['uninstall', '--yes', '--remove-plugin', ...(req.keepAuth ? ['--keep-auth'] : [])];
+    // repair 就是重跑 setup（幂等，什么缺了补什么；比 repair 命令能修的多）
+    const args = req.action === 'update' ? ['update'] : req.action === 'repair' ? ['setup', '--skip-dsh-plugin'] : ['uninstall', '--yes', '--remove-plugin', ...(req.keepAuth ? ['--keep-auth'] : [])];
     const code = await new Promise((resolve) => {
         const child = spawn(process.execPath, [join(PKG_ROOT, 'bin', 'dsh-model.js'), ...args, '--lang', req.lang ?? 'zh'], {
             stdio: ['ignore', out, out],
@@ -149,5 +154,6 @@ export async function adminRun(ctx) {
         child.on('exit', (c) => resolve(c ?? -1));
     });
     closeSync(out);
+    await writeFile(log, `\n[dsh-model] exit ${code}\n`, { flag: 'a' }).catch(() => { });
     return code;
 }

package/dist/commands/sources.js

@@ -213,3 +213,26 @@ export async function failures(ctx) {
     }
     return 0;
 }
+/** dsh-model checkin：现在签到一次（WorkBuddy 国内版、Qoder），显示每家的结果 */
+export async function checkin(ctx) {
+    const st = await control(ctx, 'POST', '/checkin', {}, 120_000);
+    if (isJsonMode()) {
+        printJson(st);
+        return 0;
+    }
+    if (!st.available.length) {
+        warn(L('没有能签到的：登录 WorkBuddy 国内版，或在 dsh 管理页的签到卡片里添加 Qoder', 'Nothing to check in: sign in to WorkBuddy (China), or add Qoder in the check-in card of the dsh page'));
+        return 1;
+    }
+    let failed = 0;
+    for (const r of st.results) {
+        if (r.state === 'failed') {
+            failed++;
+            warn(`${r.label}：${L('失败', 'failed')}：${r.message ?? ''}${r.advice ? ` — ${r.advice}` : ''}`);
+        }
+        else
+            ok(`${r.label}：${r.state === 'signed' ? L(`签到成功${r.credit ? ` +${r.credit} 积分` : ''}`, `checked in${r.credit ? ` +${r.credit} credits` : ''}`) : L('今天已签过', 'already checked in today')}`);
+    }
+    info(dim(L(`自动签到：${st.auto ? '开' : '关'}（北京时间 ${st.date}）`, `Auto check-in: ${st.auto ? 'on' : 'off'} (Beijing date ${st.date})`)));
+    return failed ? 1 : 0;
+}

package/dist/commands/uninstall.js

@@ -57,10 +57,15 @@ export async function uninstall(ctx, opts) {
         if (all.state.remote && all.state.remote.mode !== 'off')
             await disableRemote(ctx, all);
     });
-    await step('dsh-plugin', async () => {
+    // 移除插件只是尽力而为：dsh 的 pnpm 可能因"新版本要等一天"的规则拒绝改动（2026-10-14 实测，连删除也会被拦）。
+    // 这一步失败不该让卸载停在半路：服务、配置照样清掉，home 照样删，插件请用户在 dsh 的插件页手动删。
+    try {
         if (await removeDshPlugin(ctx, all, { force: opts.removePlugin }))
             ok(L('已从 dsh 移除 dsh-model 插件', 'Removed the dsh-model plugin from dsh'));
-    });
+    }
+    catch (error) {
+        warn(L(`没能自动从 dsh 移除 dsh-model 插件（${error.message}）：请在 dsh 的插件页里手动删掉它`, `Could not remove the dsh-model plugin from dsh automatically (${error.message}); remove it on the dsh Plugins page`));
+    }
     await step('workbuddy', async () => {
         if (await removeWorkbuddyPlugin(ctx, all))
             ok(L('已移除上一版安装的 WorkBuddy 插件', 'Removed the WorkBuddy plugin installed by a previous version'));

package/dist/daemon/core.js

@@ -16,6 +16,8 @@ import { lang } from '../i18n.js';
 import { which } from '../util/exec.js';
 import { spawnDetached } from '../util/detach.js';
 import { classify, recentFailures } from './failures.js';
+import { autoDue, beijingNow, checkinAdvice, ensureJitter, loadCheckin, runCheckin, setAuto, todayResults } from '../checkin/index.js';
+import { QODER_REGIONS, exchangePat, qoderCheckin } from '../checkin/qoder.js';
 import { PKG_ROOT, pkgVersion } from '../util/pkg.js';
 import { randomBytes } from 'node:crypto';
 import { currentBinary } from '../engine/install.js';
@@ -31,7 +33,7 @@ import { riskNotice as workbuddyRiskNotice } from '../integrations/workbuddy.js'
 import { DSH_KEY_NAME, addKey, loadKeys, revokeKey, rotateKey, saveKeys } from '../keys.js';
 import { applyEngineConfig, dshCandidates, dshKey, loadAll, saveAll, syncAll } from '../ops.js';
 import { defaultPick, pickedFor } from '../dsh/pick.js';
-import { loadSecrets } from '../secrets.js';
+import { loadSecrets, saveSecrets } from '../secrets.js';
 import { SOURCES, credsFor, findSource, paymentRequired } from '../sources.js';
 import { withLock } from '../state.js';
 import { riskNotice as upstreamRiskNotice } from '../upstreams.js';
@@ -84,6 +86,9 @@ export class Daemon {
         if (await this.refreshCatalogs())
             void this.resync();
         this.timers.push(setInterval(() => void this.refreshCatalogs().then((c) => (c ? this.resync() : undefined)), CATALOG_REFRESH_MS));
+        // 每日签到：每 15 分钟看一眼该不该签（到点、有没签上的）；启动一分钟后先看一次（错过的补签）
+        this.timers.push(setInterval(() => void this.autoCheckin().catch(() => { }), 15 * 60 * 1000));
+        setTimeout(() => void this.autoCheckin().catch(() => { }), 60_000);
         // 本机模型服务（Ollama、LM Studio）随时可能启动或退出：两分钟问一次，变了就同步
         this.timers.push(setInterval(() => void refreshLocalCatalog(this.ctx.paths.home, this.ctx.owner).then((c) => (c ? this.resync() : undefined), () => { }), 2 * 60 * 1000));
         this.timers.push(setInterval(() => void this.pollUsage(), USAGE_POLL_MS));
@@ -705,6 +710,69 @@ export class Daemon {
             .filter((k) => !k.revokedAt)
             .map((k) => ({ name: k.name, key: redactKey(k.key), createdAt: k.createdAt, ...(snap.byKey[k.name] ? { stats: snap.byKey[k.name] } : {}) }));
     }
+    // —— 每日签到 ——
+    /** 现在能签到的：WorkBuddy 国内版（已登录）、Qoder（填了个人访问令牌） */
+    async checkers() {
+        const out = [];
+        for (const rt of this.runtimes) {
+            if (rt.variant.id !== 'workbuddy')
+                continue; // 国际版没有签到
+            const st = await rt.wbStore.status().catch(() => null);
+            if (st?.state !== 'signed-in')
+                continue;
+            out.push({ id: 'workbuddy', label: rt.label, run: async () => rt.wbClient.dailyCheckin(await rt.wbStore.resolve()) });
+        }
+        const q = (await loadSecrets(this.ctx)).checkin?.qoder;
+        if (q?.pat)
+            out.push({ id: 'qoder', label: QODER_REGIONS[q.region].label, run: () => qoderCheckin(q.pat, q.region) });
+        return out;
+    }
+    async checkinStatus() {
+        const file = await loadCheckin(this.ctx.paths.home);
+        const checkers = await this.checkers();
+        const q = (await loadSecrets(this.ctx)).checkin?.qoder;
+        return {
+            auto: file.auto !== false,
+            date: beijingNow().date,
+            results: todayResults(file).map((r) => (r.state === 'failed' ? { ...r, advice: checkinAdvice(r.id, r.message ?? '') } : r)),
+            available: checkers.map((c) => ({ id: c.id, label: c.label })),
+            qoder: { configured: Boolean(q?.pat), ...(q ? { region: q.region } : {}) },
+        };
+    }
+    checkinInflight;
+    /** 一键签到（force：今天已成功的也再确认一遍） */
+    async checkinNow(force = true) {
+        this.checkinInflight ??= runCheckin(this.ctx.paths.home, await this.checkers(), { force, ...(this.ctx.owner ? { owner: this.ctx.owner } : {}) }).finally(() => (this.checkinInflight = undefined));
+        await this.checkinInflight;
+        return this.checkinStatus();
+    }
+    /** 自动签到：到点且有没签上的就签 */
+    async autoCheckin() {
+        const file = await ensureJitter(this.ctx.paths.home, this.ctx.owner).catch(() => null);
+        if (!file)
+            return;
+        const checkers = await this.checkers();
+        if (!autoDue(file, checkers))
+            return;
+        const results = await this.checkinNow(false).catch(() => null);
+        if (results)
+            log_(`daemon: auto check-in ${results.results.map((r) => `${r.id}=${r.state}`).join(' ')}`);
+    }
+    async setQoderPat(pat, region) {
+        if (!pat || /\s/.test(pat) || pat.length < 8)
+            throw new DshModelError('invalid_key', L('这看起来不是 Qoder 的个人访问令牌', 'That does not look like a Qoder access token'));
+        await exchangePat(pat, region); // 换得到短期 token 才算可用
+        const secrets = await loadSecrets(this.ctx);
+        secrets.checkin = { ...secrets.checkin, qoder: { pat, region, savedAt: new Date().toISOString() } };
+        await saveSecrets(this.ctx, secrets);
+    }
+    async removeQoderPat() {
+        const secrets = await loadSecrets(this.ctx);
+        if (secrets.checkin?.qoder) {
+            delete secrets.checkin.qoder;
+            await saveSecrets(this.ctx, secrets);
+        }
+    }
     // —— 更新 / 卸载（管理页的按钮）——
     selfJob;
     /** 版本与能不能在页面上自管理（VPS 上要 root，只给命令） */
@@ -952,6 +1020,22 @@ export class Daemon {
                 return ok(await this.endpoints());
             if (method === 'GET' && path === '/self')
                 return ok(await this.selfInfo());
+            if (method === 'GET' && path === '/checkin')
+                return ok(await this.checkinStatus());
+            if (method === 'POST' && path === '/checkin')
+                return ok(await this.checkinNow(true));
+            if (method === 'POST' && path === '/checkin/auto') {
+                await setAuto(this.ctx.paths.home, b.on !== false, this.ctx.owner);
+                return ok(await this.checkinStatus());
+            }
+            if (method === 'POST' && path === '/checkin/qoder') {
+                await this.setQoderPat(String(b.pat ?? '').trim(), b.region === 'intl' ? 'intl' : 'cn');
+                return ok(await this.checkinNow(true));
+            }
+            if (method === 'DELETE' && path === '/checkin/qoder') {
+                await this.removeQoderPat();
+                return ok(await this.checkinStatus());
+            }
             if (method === 'GET' && path === '/failures')
                 return ok(await recentFailures(this.ctx.paths.logs));
             if (method === 'POST' && path === '/models/test')

package/dist/service/admin.js

@@ -2,7 +2,7 @@
 //
 // 守护进程以 dsh 用户运行，而更新（npm 全局目录、系统服务）和卸载（Caddy、防火墙、系统服务）要 root。
 // 所以 setup（root）装一个 systemd path 单元：守护进程在 <home>/admin/request 写一张请求单，
-// systemd 以 root 运行 `dsh-model admin-run`，它只认三件固定的事：更新到 npm 最新版、卸载、重启 dsh（插件更新后要重启才生效）。别的一律拒绝。
+// systemd 以 root 运行 `dsh-model admin-run`，它只认四件固定的事：更新到 npm 最新版、卸载、重启 dsh（插件更新后要重启才生效）、修复（重跑 setup）。别的一律拒绝。
 import { chown, mkdir, readFile, rm } from 'node:fs/promises';
 import { join } from 'node:path';
 import { run } from '../util/exec.js';
@@ -76,7 +76,7 @@ export async function takeAdminRequest(ctx) {
     await rm(file, { force: true });
     try {
         const r = JSON.parse(raw);
-        if (r.action !== 'update' && r.action !== 'uninstall' && r.action !== 'restart-dsh')
+        if (r.action !== 'update' && r.action !== 'uninstall' && r.action !== 'restart-dsh' && r.action !== 'repair')
             return null;
         return { action: r.action, keepAuth: r.keepAuth === true, lang: r.lang === 'en' ? 'en' : 'zh' };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-model",
-  "version": "0.19.1",
+  "version": "0.20.1",
   "description": "Many model sources behind one authenticated OpenAI-compatible endpoint for DeepSeek Harness (dsh) and your tools: WorkBuddy, OpenCode Zen and your CLI subscriptions (Codex, Kimi…), with a management page inside dsh. 多家模型汇成一个 OpenAI 兼容地址，dsh 和其他软件都能直接用。",
   "keywords": [
     "dsh-plugin",

package/plugin/client.js

@@ -614,7 +614,8 @@ window.__ModuleLoader__.load({
         }
       }
       const cmds = notInstalled ? ['npm install -g dsh-model', 'dsh-model setup'] : ['dsh-model repair']
-      const vpsCmds = notInstalled ? ['sudo npm install -g dsh-model', 'sudo dsh-model setup'] : ['sudo dsh-model repair']
+      // setup 什么缺了补什么（卸载到一半、服务被删了也能救回来），比 repair 稳
+      const vpsCmds = notInstalled ? ['sudo npm install -g dsh-model', 'sudo dsh-model setup'] : ['sudo dsh-model setup']
       const cmdBlock = (list) => h('div', { style: { ...S.card, padding: '8px 12px', marginTop: 8 } }, list.map((c) => h('div', { key: c, style: { ...S.line, minHeight: 30 } }, h('code', { style: { ...S.mono, ...S.grow } }, c), h(CopyButton, { get: c }))))
       return h('div', { style: { color: C.text, maxWidth: 820 } },
         h('div', { style: S.section },
@@ -623,7 +624,7 @@ window.__ModuleLoader__.load({
             ? L('这个页面只是管理界面；模型由 dsh-model 在本机运行的服务提供（统一端点、WorkBuddy bridge、登录与用量）。装好后，来源、key 和模型都在这里管理。', 'This page is only the control panel; models are served by dsh-model\'s local service (the unified endpoint, WorkBuddy bridge, sign-ins and usage). Once it is set up, manage sources, keys and models here.')
             : L('可能是电脑重启后服务没起来，或者刚升级。修复会按记录重新注册并启动服务。', 'The service may not have started after a reboot, or was just upgraded. Repair re-registers and starts it from the saved records.')),
           res?.vps ? h('div', null,
-            h('p', { style: { ...S.note, color: C.text } }, L('这是 dsh-vps 服务器：安装要 root 权限，请在服务器终端里执行：', 'This is a dsh-vps server: setup needs root, so run this in a server terminal:')),
+            h('p', { style: { ...S.note, color: C.text } }, L('这是 dsh-vps 服务器：这一步要 root 权限，而这台机器上还没有 dsh-model 的管理员服务。请在服务器终端里执行一次（之后页面上的按钮就能用）：', 'This is a dsh-vps server: this needs root, and dsh-model\'s admin service is not on this machine yet. Run this once in a server terminal (the page buttons work afterwards):')),
             cmdBlock(vpsCmds),
             h('p', { style: { ...S.note, marginTop: 8 } }, L('装好后刷新本页。', 'Reload this page when done.'))) : h('div', null,
             h('div', { style: S.line },
@@ -838,6 +839,104 @@ window.__ModuleLoader__.load({
         h('div', { style: { ...S.line, marginTop: 6, justifyContent: 'flex-end' } }, h('button', { type: 'button', style: S.btn, onClick: dismiss }, L('知道了', 'Got it'))))
     }
 
+    // —— 每日签到 ——
+    const CHECKIN_TEXT = (r) => (r.state === 'signed' ? L(`成功${r.credit ? ` +${r.credit} 积分` : ''}`, `done${r.credit ? ` +${r.credit} credits` : ''}`) : r.state === 'already' ? L('今天已签过', 'already today') : L(`失败：${r.message || ''}`, `failed: ${r.message || ''}`))
+
+    function QoderDialog({ onDone, onClose }) {
+      const [pat, setPat] = useState('')
+      const [region, setRegion] = useState('cn')
+      const [busy, setBusy] = useState(false)
+      const [msg, setMsg] = useState('')
+      const save = async () => {
+        setBusy(true)
+        setMsg(L('正在验证这个令牌并签到…', 'Checking the token and checking in…'))
+        try { await api('POST', '/checkin/qoder', { pat: pat.trim(), region }); onDone() } catch (e) { setMsg(e.message); setBusy(false) }
+      }
+      return h(Modal, { title: L('添加 Qoder 签到', 'Add Qoder check-in'), onClose },
+        h('p', { style: S.note }, L('在 Qoder 的账号设置里创建一个个人访问令牌（Personal Access Token），粘贴到这里。只用来每天领签到积分，保存在本机。', 'Create a Personal Access Token in your Qoder account settings and paste it here. It is only used to claim the daily credits, and stays on this machine.')),
+        h('div', { style: { ...S.line, marginBottom: 8 } },
+          ['cn', 'intl'].map((r) => h('label', { key: r, style: { ...S.meta, display: 'flex', alignItems: 'center', gap: 4, cursor: 'pointer' } },
+            h('input', { type: 'radio', name: 'qoder-region', checked: region === r, onChange: () => setRegion(r) }), r === 'cn' ? L('国内版', 'China') : L('国际版', 'International')))),
+        h('div', { style: S.line },
+          h('input', { type: 'password', style: { ...S.input, ...S.grow }, placeholder: L('个人访问令牌', 'Personal access token'), value: pat, onChange: (e) => setPat(e.target.value) }),
+          h('button', { type: 'button', style: S.btnPrimary, disabled: busy || !pat.trim(), onClick: () => void save() }, L('保存', 'Save'))),
+        msg ? h('div', { style: { ...S.meta, marginTop: 8 } }, msg) : null)
+    }
+
+    /** 签到卡片：平时一行"今日已完成签到：…"；没签完的列出来，一键签到；自动签到开关 */
+    function CheckinCard() {
+      const [st, setSt] = useState(null)
+      const [busy, setBusy] = useState(false)
+      const [open, setOpen] = useState(false)
+      const [qoder, setQoder] = useState(false)
+      const [err, setErr] = useState('')
+      const refresh = useCallback(() => api('GET', '/checkin').then(setSt, () => {}), [])
+      useEffect(() => { void refresh(); const t = setInterval(refresh, 5 * 60 * 1000); return () => clearInterval(t) }, [refresh])
+      if (!st) return null
+      const byId = new Map(st.results.map((r) => [r.id, r]))
+      const done = st.available.filter((a) => { const r = byId.get(a.id); return r && r.state !== 'failed' })
+      const pending = st.available.filter((a) => !done.includes(a))
+      const run = async () => {
+        setBusy(true)
+        setErr('')
+        try { setSt(await api('POST', '/checkin')); setOpen(true) } catch (e) { setErr(e.message) } finally { setBusy(false) }
+      }
+      const toggleAuto = async (on) => {
+        try { setSt(await api('POST', '/checkin/auto', { on })) } catch (e) { setErr(e.message) }
+      }
+      if (!st.available.length && st.qoder.configured === false) {
+        // 没有能签到的：只留一个很小的入口
+        return h('div', { style: { ...S.section, marginBottom: 16 } },
+          h('div', { style: { ...S.meta } }, L('每日签到：登录 WorkBuddy 国内版，或', 'Daily check-in: sign in to WorkBuddy (China), or '),
+            h('button', { type: 'button', style: { ...S.btn, marginLeft: 6 }, onClick: () => setQoder(true) }, L('添加 Qoder', 'Add Qoder'))),
+          qoder ? h(QoderDialog, { onDone: () => { setQoder(false); void refresh() }, onClose: () => setQoder(false) }) : null)
+      }
+      return h('div', { style: S.section },
+        h('div', { style: { ...S.card, padding: '10px 14px' } },
+          h('div', { style: S.line },
+            h('span', { style: { ...S.grow, fontSize: 13 } },
+              done.length ? h('span', { style: { color: C.ok } }, L(`今日已完成签到：${done.map((a) => a.label).join('、')}`, `Checked in today: ${done.map((a) => a.label).join(', ')}`)) : null,
+              done.length && pending.length ? h('span', { style: { color: C.sub } }, L('；', '; ')) : null,
+              pending.length ? h('span', { style: { color: C.text } }, L(`还没签：${pending.map((a) => a.label).join('、')}`, `Not yet: ${pending.map((a) => a.label).join(', ')}`)) : null),
+            pending.length ? h('button', { type: 'button', style: S.btnPrimary, disabled: busy, onClick: () => void run() }, busy ? L('签到中…', 'Checking in…') : L('一键签到', 'Check in all')) : null,
+            st.results.length ? h('button', { type: 'button', style: S.btn, onClick: () => setOpen(!open) }, open ? L('收起', 'Hide') : L('详情', 'Details')) : null,
+            h('label', { style: { ...S.meta, display: 'flex', alignItems: 'center', gap: 4, cursor: 'pointer', whiteSpace: 'nowrap' } },
+              h('input', { type: 'checkbox', checked: st.auto, onChange: (e) => void toggleAuto(e.target.checked) }), L('自动签到', 'Auto'))),
+          open ? h('div', { style: { marginTop: 8 } },
+            st.results.map((r) => h('div', { key: r.id, style: { fontSize: 12, lineHeight: 1.8, color: r.state === 'failed' ? C.err : C.text } },
+              `${r.label}：${CHECKIN_TEXT(r)}`, r.advice ? h('span', { style: { color: C.sub, marginLeft: 6 } }, r.advice) : null)),
+            h('div', { style: { ...S.line, marginTop: 6 } },
+              st.qoder.configured
+                ? h('button', { type: 'button', style: S.btn, onClick: () => { if (window.confirm(L('删除 Qoder 的令牌？之后不再给 Qoder 签到。', 'Remove the Qoder token? Qoder will no longer be checked in.'))) void api('DELETE', '/checkin/qoder').then(setSt, (e) => setErr(e.message)) } }, L('删除 Qoder 令牌', 'Remove Qoder token'))
+                : h('button', { type: 'button', style: S.btn, onClick: () => setQoder(true) }, L('添加 Qoder', 'Add Qoder')))) : null,
+          !open && !st.qoder.configured ? h('div', { style: { ...S.meta, marginTop: 4 } }, h('button', { type: 'button', style: { ...S.btn, padding: '2px 8px' }, onClick: () => setQoder(true) }, L('+ 添加 Qoder', '+ Add Qoder'))) : null,
+          err ? h('div', { style: { fontSize: 12, color: C.err, marginTop: 6 } }, err) : null),
+        qoder ? h(QoderDialog, { onDone: () => { setQoder(false); void refresh() }, onClose: () => setQoder(false) }) : null)
+    }
+
+    /** 签完在 dsh 右下角提示一次（成功或失败），一天一次 */
+    const CHECKIN_SEEN = 'dsh-model.checkinSeen'
+    function CheckinNotice() {
+      const [st, setSt] = useState(null)
+      const [seen, setSeen] = useState(() => { try { return window.localStorage.getItem(CHECKIN_SEEN) || '' } catch { return '' } })
+      useEffect(() => {
+        let stop = false
+        const tick = () => api('GET', '/checkin').then((r) => { if (!stop) setSt(r) }, () => {})
+        void tick()
+        const t = setInterval(tick, 15 * 60 * 1000)
+        return () => { stop = true; clearInterval(t) }
+      }, [])
+      if (!st || !st.results.length) return null
+      const key = `${st.date}:${st.results.map((r) => `${r.id}=${r.state}`).join(',')}`
+      if (seen === key) return null
+      const failed = st.results.filter((r) => r.state === 'failed')
+      const hide = () => { setSeen(key); try { window.localStorage.setItem(CHECKIN_SEEN, key) } catch { /* 无痕模式 */ } }
+      return h('div', { role: 'status', style: { position: 'fixed', right: 16, bottom: 120, zIndex: 900, maxWidth: 360, background: C.base, color: C.text, border: `1px solid ${failed.length ? C.err : C.ok}`, borderRadius: 10, padding: '10px 12px', boxShadow: 'var(--dsw-elevation-soft, 0 8px 30px rgba(0,0,0,.2))', fontSize: 13 } },
+        h('div', { style: { fontWeight: 600, marginBottom: 4, color: failed.length ? C.err : C.ok } }, failed.length ? L('dsh-model：有签到没成功', 'dsh-model: a check-in failed') : L('dsh-model：今日签到完成', 'dsh-model: checked in for today')),
+        st.results.map((r) => h('div', { key: r.id, style: { lineHeight: 1.6 } }, `${r.label}：${CHECKIN_TEXT(r)}`)),
+        h('div', { style: { ...S.line, marginTop: 6, justifyContent: 'flex-end' } }, h('button', { type: 'button', style: S.btn, onClick: hide }, L('知道了', 'Got it'))))
+    }
+
     // —— 首次使用向导 ——
     const GUIDE_KEY = 'dsh-model.guideDone'
     const readGuideDone = () => {
@@ -926,6 +1025,7 @@ window.__ModuleLoader__.load({
       return h('div', { style: { color: C.text, maxWidth: 820 } },
         banner,
         h(Guide, { sources: data.sources, onConnect: (s) => void connect(s) }),
+        h(CheckinCard, null),
         err ? h('div', { style: { fontSize: 12, color: C.err, marginBottom: 12 } }, err) : null,
         h(EndpointCard, { endpoints: data.endpoints }),
         h(SourcesCard, { sources: data.sources, reload: () => load(false), onLogin: (s, session) => setLogin({ source: s, session }), onKey: (s) => setKeyDialog(s || true) }),
@@ -953,6 +1053,11 @@ window.__ModuleLoader__.load({
       } catch (error) {
         console.warn('[dsh-model] 额度提醒注册失败', error)
       }
+      try {
+        ctx.slots.inject('shell.overlay', () => ctx.slots.register({ name: 'shell.overlay', id: 'dsh-model-checkin' }, CheckinNotice))
+      } catch (error) {
+        console.warn('[dsh-model] 签到提示注册失败', error)
+      }
     }
 
     module.exports = { name, inject, apply, __test: { until, pct, ms, lowQuota } }

package/plugin/index.js

@@ -62,6 +62,9 @@ const ALLOWED = [
   ['GET', /^\/endpoints$/],
   ['GET', /^\/self$/],
   ['GET', /^\/failures$/],
+  ['GET', /^\/checkin$/],
+  ['POST', /^\/checkin(\/auto|\/qoder)?$/],
+  ['DELETE', /^\/checkin\/qoder$/],
   ['POST', /^\/models\/test$/],
   ['POST', /^\/self\/(update|uninstall)$/],
   ['GET', /^\/sources\/[a-z-]{2,20}\/models$/],
@@ -235,7 +238,19 @@ export function apply(ctx) {
           } catch {
             return json(res, 400, { error: { code: 'invalid_json', message: 'invalid JSON' } })
           }
-          if (await exists(VPS_ROOT)) return json(res, 200, { vps: true })
+          if (await exists(VPS_ROOT)) {
+            // dsh-vps：安装要 root。管理员小服务还在（setup 装的）就交给它跑 setup，页面照样看进度；不在就只能给命令
+            if (!(await exists(ADMIN_PATH_UNIT))) return json(res, 200, { vps: true })
+            const log = join(home(), 'repair.log')
+            if (body.poll) {
+              const text = await readFile(log, 'utf8').catch(() => '')
+              const m = /^\[dsh-model\] exit (-?\d+)$/m.exec(text)
+              return json(res, 200, { running: !m, output: text.replace(/\n?\[dsh-model\] exit -?\d+\n?$/, '').replace(/\x1b\[[0-9;]*m/g, ''), code: m ? Number(m[1]) : null, action: 'repair' })
+            }
+            await writeFile(log, '', { mode: 0o600 }).catch(() => {})
+            await writeFile(join(home(), 'admin', 'request'), JSON.stringify({ action: 'repair', lang: body.lang === 'en' ? 'en' : 'zh' }), { mode: 0o600 })
+            return json(res, 200, { running: true, output: '', code: null, action: 'repair' })
+          }
           // { poll: true }：只取进度；否则开始（已经在跑就接着看同一个）
           if (body.poll) return json(res, 200, job ? { running: job.running, output: job.output, code: job.code, action: job.action } : { running: false, output: '', code: null })
           const action = body.action === 'repair' ? 'repair' : 'setup'