dsh-model 0.23.0 → 0.23.3

package/README.en.md

@@ -2,9 +2,9 @@
 
 # dsh-model
 
-**One address for all your models: subscriptions, free tiers and local models, with daily check-in credits claimed for you.**
+**📅 Daily check-in credits claimed for you · 🔁 one address that relays every model · 🧩 free and subscription models, your pick**
 
-One OpenAI-compatible endpoint, one key, dozens of models. dsh, Cline, Continue, Cherry Studio, scripts: anything that speaks the OpenAI API just works.
+Install once and all three are taken care of. dsh gets a management page; without dsh, the command line does everything.
 
 <p>
   <a href="LICENSE"><img src="https://img.shields.io/github/license/AIcivilization/dsh-model" alt="MIT license"></a>
@@ -19,22 +19,45 @@ English · [中文](README.md)
 
 </div>
 
-## Why
+## 📅 1. Daily check-in: credits land on their own
 
-You may have several at once: Codex from ChatGPT Plus, a Kimi coding plan, free WorkBuddy credits, free Gemini and Groq keys, and Ollama on your machine. Each has its own API and sign-in, every tool needs its own setup, and when a quota runs out you switch by hand.
+**The most hands-off part: no more remembering to claim the daily check-in credits.**
 
-dsh-model turns them into **one address and one kind of key**:
+| Product | How it connects | Every day |
+|---|---|---|
+| **Trae** | Detected automatically if Trae is installed and signed in; nothing to do | Check-in credits (200 a day in testing) |
+| **Qoder** | Paste a personal access token once (China or international) | That day's check-in credits |
+| **WorkBuddy (China)** | Sign in once | Check-in credits |
+
+- **Automatic by default**: done at a random 5–55 minutes after midnight Beijing time; failures retry an hour later; if the computer was off, it catches up within a minute of starting.
+- **You can see it**: one line at the top of the settings page, "Checked in today: …", with a one-click "Check in all" for anything missed, plus a one-time notice in the corner of dsh.
+- **Check-in only, credits untouched**: they stay on your account for use in each product's own app. Command line: `dsh-model checkin`.
+
+## 🔁 2. Relay: one address, one key, every model
 
-- 🔌 **Connect once, use everywhere**: every model shows up in dsh, grouped by source; any other tool uses the same address and key.
-- 🆓 **Get the most from free tiers**: free Gemini / Groq / OpenRouter keys, local models and WorkBuddy credits; every source is tagged Free / Free · limited / Paid.
-- 📅 **Daily check-in, credits claimed for you**: WorkBuddy (China), Qoder and Trae are checked in automatically every day.
-- 🔁 **Rate limits are not the end**: build a combo (say Codex → Kimi → WorkBuddy) and requests move to the next model on a rate limit or used-up quota; a model offered by several sources also switches automatically.
-- 📊 **Know where you stand**: plan usage with reset countdowns, remaining credits and when they expire, success rate and speed per model, recent failures with advice, and a notice when quota runs low.
-- 🔒 **Secure by default**: a key is always required, one per device, revocable at any time; every sign-in happens on your own machine.
-- 🖥️ **Laptop or server**: Windows, macOS, Linux; on a VPS (with [dsh-vps](https://github.com/AIcivilization/dsh-vps)) it opens an https address you can use from anywhere.
-- 🧹 **Installs in one command, uninstalls cleanly**: dsh's config is restored byte for byte.
+Your model sources each have their own API and sign-in. dsh-model puts them behind **one OpenAI-compatible address**:
+
+- **Shows up in dsh**: every model, grouped by source, with nothing to configure.
+- **Works in other tools**: Cline, Continue, Cherry Studio, scripts: anything that speaks the OpenAI API uses the same address and key.
+- **Rate limits are not the end**: build a combo (say Codex → Kimi → Gemini) and the next model takes over on a rate limit, used-up quota or error.
+- **Know where you stand**: plan usage with reset countdowns, success rate and speed per model, recent failures with what to do, and a notice when quota runs low.
+- **Secure by default**: a key is always required, one per device, revocable any time; every sign-in happens on your own machine.
+- **Laptop or server**: Windows, macOS, Linux; on a VPS (with [dsh-vps](https://github.com/AIcivilization/dsh-vps)) it opens an https address you can use from anywhere. Uninstall restores dsh's config byte for byte.
+
+## 🧩 3. Models: free or subscription, connect what you have
+
+| Kind | Sources |
+|---|---|
+| **Free (suggested)** | **SiliconFlow** (reachable from China; some models free after identity verification), **Gemini** (if you can reach Google; the best free models) |
+| Free · limited | Groq, OpenRouter (`:free` models) |
+| Local | Ollama, LM Studio: appear once started, no sign-in |
+| Subscription | Codex (ChatGPT Plus / Pro), Kimi Code, Grok, Muse, Devin: sign in from the management page |
+| Pay as you go | DeepSeek official, OpenCode Zen, any OpenAI-compatible service |
+
+Every source is tagged Free / Free · limited / Paid; see [Sources and cost](#sources-and-cost) below. dsh-model only connects; it provides no quota of its own.
+
+> WorkBuddy: since 2026-10 it recognises conversations sent by dsh and blocks them, so dsh-model uses it for check-in only and does not connect its models by default.
 
-No dsh? It still works: the command line manages everything; dsh just adds a management page.
 
 ## Quick start
 
@@ -56,12 +79,12 @@ On a dsh-vps server, use `sudo dsh-model setup`. On Windows, run it in a normal
 
 | Section | What it holds |
 |---|---|
+| **Daily check-in** | WorkBuddy (China), Qoder and Trae are checked in automatically every day (or with one click); the card shows what you got today |
 | **Endpoint** | Local and public addresses, each with a Copy button |
 | **Sources** | One switch per provider: on connects (and signs in if needed), off pauses and keeps the sign-in. Each row is tagged Free / Free · limited / Paid and shows plan usage with reset countdowns, or remaining credits and the next batch to expire; a used-up plan shows when it comes back |
 | **Models** | Pick which models of each source appear in dsh (5 suggested per source by default); the rest stay available through the endpoint; a "Test" button per model |
 | **Combos** | Put several models in order and it becomes one model in dsh: the first is used, and the next takes over on a rate limit, used-up quota or error. Other tools use the model name `combo/<id>` |
 | **Auto switch** | When a model is offered by several sources, dsh gets an "Auto switch (multiple sources)" group that moves to another source when one is rate-limited or failing |
-| **Daily check-in** | WorkBuddy (China), Qoder and Trae are checked in automatically every day (or with one click); the card shows what you got today |
 | **Recent failures** | Failed requests in the last 24 hours: which model, why, and what to do (no conversation content kept) |
 | **API keys** | OpenAI-style, one per device. Requests, success rate, latency and speed over 24 hours; copy, rotate, revoke |
 | **Model stats** | Success rate, latency and speed per model |
@@ -140,6 +163,7 @@ See the [design doc](docs/DESIGN.md) (Chinese).
 - Meant for personal use: one account of your own per provider; do not use it to serve others.
 - Using subscription and WorkBuddy credentials outside the official clients may break the providers' terms and put the account at risk. Decide for yourself.
 - Windows 10 / 11 (x64, ARM64), macOS and Linux, Node ≥ 20.
+- Downloading the engine needs GitHub: setup uses the system proxy (Windows, macOS) or `HTTPS_PROXY` automatically; if it still cannot connect it says why, and you can pass `--proxy <url>` or download the file yourself and set `DSH_MODEL_ENGINE_ARCHIVE`.
 - Windows: the background services start at sign-in with no window. If an antivirus blocks them (the program is gone or will not start), trust `%USERPROFILE%\.dsh-model` and run `dsh-model repair`.
 
 ## License

package/README.md

@@ -2,9 +2,9 @@
 
 # dsh-model
 
-**一个地址，用上你所有的模型：订阅、免费额度、本机模型，签到积分自动领。**
+**📅 每天自动签到领积分 · 🔁 一个地址中转所有模型 · 🧩 免费和订阅模型随你接**
 
-一个 OpenAI 兼容地址，一把 key，几十个模型。dsh、Cline、Continue、Cherry Studio、脚本……凡是支持 OpenAI 接口的软件都能直接用。
+装一次，三件事都替你做好。dsh 里有图形管理页，没有 dsh 也能用命令行。
 
 <p>
   <a href="LICENSE"><img src="https://img.shields.io/github/license/AIcivilization/dsh-model" alt="MIT license"></a>
@@ -19,22 +19,45 @@
 
 </div>
 
-## 为什么用它
+## 📅 1. 每日签到：积分自动到账
 
-你手上可能有好几样：ChatGPT Plus 带的 Codex、Kimi 的编程套餐、WorkBuddy 的免费积分、Gemini 和 Groq 的免费 key，还有本机的 Ollama。每家接口和登录方式都不一样，每个软件都得分别配置，额度用完了还要手动换。
+**最省心的一件事：每天的签到积分，不用再记着去领。**
 
-dsh-model 把它们合成**一个地址、一种 key**：
+| 产品 | 怎么接入 | 每天 |
+|---|---|---|
+| **Trae** | 本机装了 Trae 并登录过，自动识别，什么都不用做 | 签到送积分（实测每天 200） |
+| **Qoder** | 粘贴一次个人访问令牌（国内版、国际版都行） | 领当天的签到积分 |
+| **WorkBuddy 国内版** | 登录一次 | 签到送积分 |
+
+- **自动签到默认打开**：北京时间零点后随机延后 5–55 分钟签好；失败的一小时后重试；电脑关机错过了，开机一分钟内补签。
+- **结果看得见**：设置页顶部一行「今日已完成签到：…」，没签上的可以「一键签到」；签完在 dsh 右下角提示一次。
+- **只签到，不碰积分**：积分留在你的账号里，照常在各家官方软件里用。命令行：`dsh-model checkin`。
+
+## 🔁 2. 中转：一个地址、一把 key，用上所有模型
 
-- 🔌 **一处接入，处处可用**：dsh 里自动出现全部模型，按来源分组；其他软件填上同一个地址和 key 就行。
-- 🆓 **把免费的用足**：Gemini / Groq / OpenRouter 免费 key、本机模型、WorkBuddy 积分都能接；每个来源标出「免费 / 免费·额度少 / 需付费」。
-- 📅 **每日签到，自动领积分**：WorkBuddy 国内版、Qoder、Trae 每天自动签到，不用记。
-- 🔁 **不怕限流**：自己排一个组合（如 Codex → Kimi → WorkBuddy），一个限流或额度用完就自动换下一个；同一个模型在几个来源都有时也会自动切换。
-- 📊 **心里有数**：套餐用量和重置倒计时、剩余积分和到期时间、每个模型的成功率和速度、最近失败的原因和建议；额度快用完时提醒。
-- 🔒 **默认安全**：始终要求 key，每台设备一把，可随时吊销；登录全在本机完成，不经过第三方。
-- 🖥️ **电脑和服务器都行**：Windows、macOS、Linux；装在 VPS 上（配合 [dsh-vps](https://github.com/AIcivilization/dsh-vps)）自动开一个 https 地址，电脑、手机随处用。
-- 🧹 **装得上，卸得净**：一条命令安装；卸载时把 dsh 的配置逐字节还原。
+你手上的模型来源，各家接口、登录方式都不一样。dsh-model 把它们合成**一个 OpenAI 兼容地址**：
+
+- **dsh 里自动出现**：全部模型按来源分组，不用手动配置。
+- **其他软件也能用**：Cline、Continue、Cherry Studio、脚本……凡是支持 OpenAI 接口的，填同一个地址和 key 就行。
+- **不怕限流**：自己排一个组合（如 Codex → Kimi → Gemini），一个限流、额度用完或出错，就自动换下一个。
+- **心里有数**：套餐用量和重置倒计时、每个模型的成功率和速度、最近失败的原因和该怎么办；额度快用完时提醒。
+- **默认安全**：始终要求 key，每台设备一把，可随时吊销；登录全在本机完成。
+- **电脑和服务器都行**：Windows、macOS、Linux；装在 VPS 上（配合 [dsh-vps](https://github.com/AIcivilization/dsh-vps)）自动开一个 https 地址，电脑、手机随处用。卸载时把 dsh 的配置逐字节还原。
+
+## 🧩 3. 模型提供：免费的、订阅的都能接
+
+| 类型 | 来源 |
+|---|---|
+| **免费（推荐）** | **硅基流动**（国内直连，实名后部分模型免费）、**Gemini**（能上外网，免费模型里质量最好） |
+| 免费 · 额度少 | Groq、OpenRouter（`:free` 模型） |
+| 本机 | Ollama、LM Studio：启动后自动出现，不用登录 |
+| 订阅 | Codex（ChatGPT Plus / Pro）、Kimi Code、Grok、Muse、Devin：在管理页里登录即可 |
+| 按量付费 | DeepSeek 官方、OpenCode Zen、任意 OpenAI 兼容服务 |
+
+每个来源都标出「免费 / 免费·额度少 / 需付费」，详见下面的[来源与费用](#来源与费用)。dsh-model 只负责转接，不提供额度。
+
+> WorkBuddy：2026-10 起它会认出 dsh 发出的对话并拦下，所以 dsh-model 只用它来签到，模型默认不接进 dsh。
 
-没有 dsh 也能用：命令行就能管理全部功能，dsh 里多一个图形管理页而已。
 
 ## 快速开始
 
@@ -56,12 +79,12 @@ dsh-model setup
 
 | 区块 | 内容 |
 |---|---|
+| **每日签到** | WorkBuddy 国内版、Qoder、Trae 每天自动签到（也可一键签到），卡片显示今天领了多少 |
 | **访问地址** | 本机地址和外网地址，各带「复制」按钮 |
-| **来源** | 每家一个开关：打开就接入（没登录会弹出登录框），关闭只停用、保留登录。每行标出「免费 / 免费·额度少 / 需付费」，下面显示套餐用量和重置倒计时，或剩余积分和最近到期的一批；额度用完会标出多久后恢复 |
+| **来源** | 每家一个开关：打开就接入（没登录会弹出登录框），关闭只停用、保留登录。每行标出「免费 / 免费·额度少 / 需付费」；没登录的、关掉的收进折叠列表。下面显示套餐用量和重置倒计时，或剩余积分和最近到期的一批；额度用完会标出多久后恢复 |
 | **选模型** | 每个来源选哪些模型显示在 dsh 里，默认每家推荐 5 个，其余的经统一地址照样可用；每个模型旁边有「测一下」 |
 | **组合切换** | 把几个模型按顺序排成一个组合，在 dsh 里就是一个模型：先用第一个，限流、额度用完或出错就换下一个。其他软件用模型名 `combo/<id>` |
 | **自动切换** | 同一个模型在几个来源都有时，dsh 里多一组「自动切换（多来源）」，一个来源限流或出错就自动换另一个 |
-| **每日签到** | WorkBuddy 国内版、Qoder、Trae 每天自动签到（也可一键签到），卡片显示今天领了多少 |
 | **最近失败** | 最近 24 小时失败的请求：哪个模型、为什么、该怎么办（不记录对话内容） |
 | **API key** | OpenAI 格式，每台设备一把。显示 24 小时内的请求数、成功率、延迟和速度，可复制、轮换、吊销 |
 | **模型统计** | 按模型显示成功率、延迟和速度 |
@@ -140,6 +163,7 @@ dsh · 编辑器 · 脚本 ──Bearer key──▶ 引擎 127.0.0.1:8317/v1（
 - 适合个人使用：每家用自己的一个账号，不要拿来对外提供服务。
 - 订阅和 WorkBuddy 的凭据在官方客户端之外使用，可能不符合服务商的条款，账号有风险，请自行判断。
 - 支持 Windows 10 / 11（x64、ARM64）、macOS、Linux，需要 Node ≥ 20。
+- 下载引擎要连 GitHub：setup 会自动用上系统代理（Windows、macOS）或 `HTTPS_PROXY`；连不上时会说明原因，可以用 `--proxy <地址>` 指定代理，或手动下载后设置 `DSH_MODEL_ENGINE_ARCHIVE`。
 - Windows：后台服务登录后自动运行、不弹窗口。如果被杀毒软件拦下（程序不见了或启动不了），把 `%USERPROFILE%\.dsh-model` 加入信任，再执行 `dsh-model repair`。
 
 ## License

package/dist/commands/engine.js

@@ -45,9 +45,9 @@ async function upgrade(ctx, requested) {
     let asset = version === manifest.version ? manifest.assets[target] : undefined;
     if (!asset) {
         warn(L(`v${version} 不在本版 dsh-model 的锁定清单里，校验值取自上游发布的 checksums.txt`, `v${version} is not pinned by this dsh-model; using the checksum from the upstream checksums.txt`));
-        asset = await fetchUpstreamAsset(manifest, version, target);
+        asset = await fetchUpstreamAsset(manifest, version, target, { proxy: all.config.proxy });
     }
-    await installVersion(ctx, version, asset);
+    await installVersion(ctx, version, asset, { proxy: all.config.proxy });
     ok(L(`v${version} 已下载并校验`, `v${version} downloaded and verified`));
     await trialRun(ctx, all, versionBinary(ctx, version));
     ok(L('试运行通过', 'Trial run passed'));

package/dist/commands/setup.js

@@ -164,10 +164,10 @@ export async function ensureEngine(ctx, all, opts = {}) {
     const manifest = await loadManifest();
     const target = platformTarget();
     const version = config.engine.version ?? manifest.version;
-    const asset = version === manifest.version ? manifest.assets[target] : await fetchUpstreamAsset(manifest, version, target);
+    const asset = version === manifest.version ? manifest.assets[target] : await fetchUpstreamAsset(manifest, version, target, { proxy: config.proxy });
     if (!asset)
         throw new DshModelError('unsupported_platform', L(`引擎没有 ${target} 的发布包`, `No engine build for ${target}`));
-    const installed = await installVersion(ctx, version, asset);
+    const installed = await installVersion(ctx, version, asset, { proxy: config.proxy });
     if ((await currentVersion(ctx)) !== version)
         await activateVersion(ctx, version);
     config.engine.version = version;

package/dist/engine/install.js

@@ -3,13 +3,12 @@
 // 只信任仓库里 engine-manifest.json 的 sha256；校验不过直接失败。
 // 版本目录 engine/versions/<v>/，current 软链指向在用版本，升级与回滚只切软链。
 // Windows：发布包是 zip、程序叫 cli-proxy-api.exe；建软链要管理员，所以 current 用目录联接（junction），不需要权限。
-import { createWriteStream } from 'node:fs';
 import { chmod, mkdir, readFile, readlink, rename, rm, symlink, unlink } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
 import { join, resolve } from 'node:path';
-import { Readable } from 'node:stream';
-import { pipeline } from 'node:stream/promises';
-import { DshModelError } from '../errors.js';
+import { DshModelError, isDshModelError } from '../errors.js';
 import { L } from '../i18n.js';
+import { downloadFile, downloadText } from '../util/download.js';
 import { run } from '../util/exec.js';
 import { ensureDir, exists, sha256 } from '../util/fs.js';
 import { PKG_ROOT } from '../util/pkg.js';
@@ -44,13 +43,19 @@ export async function currentVersion(ctx) {
     }
 }
 /** 从上游发布的 checksums.txt 取某版本的资产（engine upgrade <ver> 指定了清单外版本时用） */
-export async function fetchUpstreamAsset(manifest, version, target) {
+export async function fetchUpstreamAsset(manifest, version, target, opts = {}) {
     const base = `https://github.com/${manifest.repo}/releases/download/v${version}`;
     const file = assetFileName(version, target);
-    const res = await fetch(`${base}/checksums.txt`);
-    if (!res.ok)
-        throw new DshModelError('engine_version_not_found', L(`找不到引擎版本 v${version}（HTTP ${res.status}）`, `Engine version v${version} not found (HTTP ${res.status})`));
-    const line = (await res.text()).split('\n').find((l) => l.trim().endsWith(file));
+    let text;
+    try {
+        text = await downloadText(`${base}/checksums.txt`, join(tmpdir(), `dsh-model-checksums-${process.pid}-${Date.now()}.txt`), opts);
+    }
+    catch (error) {
+        if (isDshModelError(error) && error.code === 'download_not_found')
+            throw new DshModelError('engine_version_not_found', L(`找不到引擎版本 v${version}`, `Engine version v${version} not found`));
+        throw error;
+    }
+    const line = text.split('\n').find((l) => l.trim().endsWith(file));
     const sha = line?.trim().split(/\s+/)[0];
     if (!sha || !/^[0-9a-f]{64}$/.test(sha))
         throw new DshModelError('engine_checksum_missing', L(`v${version} 的 checksums.txt 里没有 ${file}`, `${file} is missing from v${version} checksums.txt`));
@@ -60,7 +65,7 @@ export async function fetchUpstreamAsset(manifest, version, target) {
  * 安装某版本到 versions/<v>/（已装就跳过）。返回是否真的装了。
  * DSH_MODEL_ENGINE_ARCHIVE 可指向本地 tar.gz（离线 / 测试），同样要过 sha256 校验。
  */
-export async function installVersion(ctx, version, asset) {
+export async function installVersion(ctx, version, asset, opts = {}) {
     const bin = versionBinary(ctx, version);
     if (await exists(bin))
         return false;
@@ -75,10 +80,14 @@ export async function installVersion(ctx, version, asset) {
             data = await readFile(local);
         }
         else {
-            const res = await fetch(asset.url);
-            if (!res.ok || !res.body)
-                throw new DshModelError('engine_download_failed', L(`下载引擎失败：HTTP ${res.status}`, `Engine download failed: HTTP ${res.status}`), asset.url);
-            await pipeline(Readable.fromWeb(res.body), createWriteStream(archive, { mode: 0o600 }));
+            try {
+                await downloadFile(asset.url, archive, opts);
+            }
+            catch (error) {
+                if (isDshModelError(error))
+                    throw new DshModelError('engine_download_failed', L(`下载引擎失败：${error.message.replace(/^下载失败：|^Download failed: /, '')}`, `Engine download failed: ${error.message.replace(/^下载失败：|^Download failed: /, '')}`), error.hint);
+                throw error;
+            }
             data = await readFile(archive);
         }
         const actual = sha256(data);

package/dist/util/download.js

@@ -0,0 +1,69 @@
+// util/download.ts — 下载文件（引擎发布包、checksums.txt）
+//
+// Node 的 fetch 不走系统代理，也不认 HTTPS_PROXY。国内直连 GitHub 的下载地址经常不通，
+// Windows 上 setup 只报一句 "fetch failed"（实测）。所以设了代理时改用系统自带的 curl 走代理
+// （macOS、Linux 都有；Windows 10 1803 起自带 curl.exe），没有 curl 再退回 fetch。
+// 下载的内容一律由调用方按清单里的 sha256 校验，走哪条路都一样可信。
+import { createWriteStream } from 'node:fs';
+import { readFile, rm } from 'node:fs/promises';
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { DshModelError } from '../errors.js';
+import { L } from '../i18n.js';
+import { run, which } from './exec.js';
+import { redactProxy } from './proxy.js';
+/** fetch 抛的错里真正的原因（"fetch failed" 的 cause：ENOTFOUND、ECONNRESET、UND_ERR_CONNECT_TIMEOUT…） */
+export function fetchCause(error) {
+    const e = error;
+    const cause = e?.cause?.code ?? e?.cause?.message;
+    return cause ? `${e.message ?? 'fetch failed'}（${cause}）` : String(e?.message ?? error);
+}
+/** 连不上时怎么办：开代理、指定代理，或手动下载后用本地文件 */
+export function downloadHint(url, proxy) {
+    return proxy
+        ? L(`经代理 ${redactProxy(proxy)} 也没下载成功：确认代理软件开着、能打开 GitHub；或换一个代理（dsh-model setup --proxy <地址>）。也可以手动下载 ${url}，把环境变量 DSH_MODEL_ENGINE_ARCHIVE 设成下载好的文件路径，再执行 dsh-model setup`, `Still failed through the proxy ${redactProxy(proxy)}: check the proxy app is running and can reach GitHub, or use another one (dsh-model setup --proxy <url>). You can also download ${url} yourself, set the environment variable DSH_MODEL_ENGINE_ARCHIVE to the file's path, and run dsh-model setup again`)
+        : L(`连不上 GitHub（下载引擎要用）。用代理的话：打开代理软件的"系统代理"，或执行 dsh-model setup --proxy http://127.0.0.1:7890（换成你的代理端口）。也可以手动下载 ${url}，把环境变量 DSH_MODEL_ENGINE_ARCHIVE 设成下载好的文件路径，再执行 dsh-model setup`, `Cannot reach GitHub (needed to download the engine). If you use a proxy: turn on its "system proxy", or run dsh-model setup --proxy http://127.0.0.1:7890 (your proxy's port). You can also download ${url} yourself, set the environment variable DSH_MODEL_ENGINE_ARCHIVE to the file's path, and run dsh-model setup again`);
+}
+/** 下载到 dest。HTTP 404 抛 code=download_not_found，其余失败抛 download_failed（带原因和建议） */
+export async function downloadFile(url, dest, opts = {}) {
+    const curl = opts.proxy ? await which('curl') : null;
+    if (opts.proxy && curl) {
+        // --noproxy ''：只用这里指定的代理，不受环境里 NO_PROXY 的影响
+        const r = await run(curl, ['-fsSL', '--retry', '2', '--connect-timeout', '20', '--proxy', opts.proxy, '--noproxy', '', '-o', dest, url], { timeoutMs: 10 * 60_000 });
+        if (r.code === 0)
+            return;
+        await rm(dest, { force: true });
+        // curl -f：HTTP 4xx/5xx 退出码 22，stderr 里有 "The requested URL returned error: 404"
+        if (/\b404\b/.test(r.stderr))
+            throw new DshModelError('download_not_found', L(`没有这个文件：${url}`, `No such file: ${url}`));
+        throw new DshModelError('download_failed', L(`下载失败：${r.stderr.trim() || `curl 退出码 ${r.code}`}`, `Download failed: ${r.stderr.trim() || `curl exit code ${r.code}`}`), downloadHint(url, opts.proxy));
+    }
+    let res;
+    try {
+        res = await fetch(url, { signal: AbortSignal.timeout(10 * 60_000) });
+    }
+    catch (error) {
+        throw new DshModelError('download_failed', L(`下载失败：${fetchCause(error)}`, `Download failed: ${fetchCause(error)}`), downloadHint(url, opts.proxy));
+    }
+    if (res.status === 404)
+        throw new DshModelError('download_not_found', L(`没有这个文件：${url}`, `No such file: ${url}`));
+    if (!res.ok || !res.body)
+        throw new DshModelError('download_failed', L(`下载失败：HTTP ${res.status}`, `Download failed: HTTP ${res.status}`), downloadHint(url, opts.proxy));
+    try {
+        await pipeline(Readable.fromWeb(res.body), createWriteStream(dest, { mode: 0o600 }));
+    }
+    catch (error) {
+        await rm(dest, { force: true });
+        throw new DshModelError('download_failed', L(`下载中断：${fetchCause(error)}`, `Download interrupted: ${fetchCause(error)}`), downloadHint(url, opts.proxy));
+    }
+}
+/** 下载一个小文本文件（checksums.txt） */
+export async function downloadText(url, tmpFile, opts = {}) {
+    try {
+        await downloadFile(url, tmpFile, opts);
+        return await readFile(tmpFile, 'utf8');
+    }
+    finally {
+        await rm(tmpFile, { force: true });
+    }
+}

package/package.json

@@ -1,8 +1,10 @@
 {
   "name": "dsh-model",
-  "version": "0.23.0",
-  "description": "One OpenAI-compatible address for all your models: subscriptions (Codex, Kimi…), free tiers (WorkBuddy, Gemini, Groq, OpenRouter), local models (Ollama, LM Studio), daily check-in credits, auto failover. Works with DeepSeek Harness (dsh) and any OpenAI-compatible tool. 一个地址用上你所有的模型。",
+  "version": "0.23.3",
+  "description": "Daily check-in credits claimed for you (Trae, Qoder, WorkBuddy China), one OpenAI-compatible address that relays every model, and free or subscription model sources (SiliconFlow, Gemini, Codex, Kimi, Ollama…). For DeepSeek Harness (dsh) and any OpenAI-compatible tool. 每天自动签到领积分 · 一个地址中转所有模型 · 免费和订阅模型随你接。",
   "keywords": [
+    "siliconflow",
+    "checkin",
     "dsh-plugin",
     "dsh-plugins",
     "dsh",

package/plugin/client.js

@@ -462,8 +462,9 @@ window.__ModuleLoader__.load({
         try { await api('POST', `/sources/${s.id}/logout`); await reload() } catch (e) { setErr(e.message) }
       }
       // 已登录的照常列出；没登录的收进一个可折叠的列表（默认收起；一个都没登录时默认展开）
-      const signedIn = visible.filter((s) => s.loggedIn)
-      const rest = visible.filter((s) => !s.loggedIn)
+      // 顶部只放正在用的（已登录且打开）；没登录的、关掉的都收进折叠列表
+      const signedIn = visible.filter((s) => s.loggedIn && s.enabled)
+      const rest = visible.filter((s) => !(s.loggedIn && s.enabled))
       const [restPref, setRestPref] = useState(readShowRest)
       const openRest = restPref ?? signedIn.length === 0
       const toggleRest = (v) => {
@@ -509,7 +510,7 @@ window.__ModuleLoader__.load({
         showRisky ? h('p', { style: { ...S.note, color: C.warn } }, L('高风险来源（Claude、Antigravity）：服务商有封禁第三方使用订阅的先例，账号可能被封。仅在你清楚风险时使用。', 'High-risk sources (Claude, Antigravity): the providers have banned third-party use of subscriptions before; your account may be suspended. Use only if you accept the risk.')) : null,
         signedIn.length ? h('div', { style: S.card }, signedIn.map(row)) : h('div', { style: { ...S.note, margin: '0 0 8px' } }, L('还没有接入任何来源：展开下面的列表挑一个。', 'No source connected yet: open the list below and pick one.')),
         rest.length ? h('button', { type: 'button', style: { ...S.btn, marginTop: 10 }, 'aria-expanded': openRest, onClick: () => toggleRest(!openRest) },
-          openRest ? L(`▾ 收起未登录的来源（${rest.length} 个）`, `▾ Hide signed-out sources (${rest.length})`) : L(`▸ 未登录的来源（${rest.length} 个）`, `▸ Signed-out sources (${rest.length})`)) : null,
+          openRest ? L(`▾ 收起没在用的来源（${rest.length} 个：未登录或已关闭）`, `▾ Hide sources not in use (${rest.length}: signed out or off)`) : L(`▸ 没在用的来源（${rest.length} 个：未登录或已关闭）`, `▸ Sources not in use (${rest.length}: signed out or off)`)) : null,
         openRest && rest.length ? h('div', { style: { ...S.card, marginTop: 8 } }, rest.map(row)) : null)
     }