dsh-modelscope-pool 0.9.0 → 0.10.1

package/README.md

@@ -1,5 +1,6 @@
 # dsh-modelscope-pool
 
+[![npm](https://img.shields.io/npm/v/dsh-modelscope-pool.svg)](https://www.npmjs.com/package/dsh-modelscope-pool)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![dsh](https://img.shields.io/badge/dsh-%3E%3D0.2.1--rc.2-4D6BFE.svg)](https://github.com/deepseek-ai/deepseek-harness)
 [![Node](https://img.shields.io/badge/node-%3E%3D20-5FA04E.svg)](https://nodejs.org/)
@@ -20,6 +21,7 @@
 - [配置](#配置)
 - [界面](#界面)
 - [多语言](#多语言)
+- [网页版与桌面版](#网页版与桌面版)
 - [HTTP 接口](#http-接口)
 - [接入其它客户端](#接入其它客户端)
 - [常见问题](#常见问题)
@@ -116,29 +118,53 @@
 - Node.js ≥ 20
 - 一个魔搭账号和它的 API Key（`ms-` 开头），在 <https://modelscope.cn/my/myaccesstoken> 或 <https://modelscope.ai> 生成
 
-### 作为 dsh-go 原生插件安装
+### 方式一：从 npm 安装（推荐）
 
 ```bash
-# 1. 把仓库放进 dsh-go 的本地插件目录
-#    目录名必须叫 dsh-modelscope-pool（与 package.json 的 name 一致）
+dsh plugin --profile web add dsh-modelscope-pool@0.10.0
+```
+
+一条命令搞定。装好后重启 App（或让插件重新加载），网关会在 `127.0.0.1:8899` 起来。
+
+升级就是换版本号重装：
+
+```bash
+dsh plugin --profile web add dsh-modelscope-pool@<新版本>
+```
+
+> 建议写死精确版本。npm 上其他包常见的 `latest`、`^` 范围在这里没有好处——插件会监听端口、读写本机文件，版本变化值得你自己看一眼。
+
+只想要包本身、不需要 dsh 帮你装：
+
+```bash
+npm i dsh-modelscope-pool
+```
+
+> 每个版本的改动见 [Releases](https://github.com/Yizutt/dsh-modelscope-pool/releases)。
+
+### 方式二：从源码安装（要改代码时用）
+
+```bash
+# 目录名要和 package.json 的 name 一致
 mkdir -p "$DSH_HOME/dsh-go/plugins"
 cd "$DSH_HOME/dsh-go/plugins"
 git clone https://github.com/Yizutt/dsh-modelscope-pool.git dsh-modelscope-pool
 
-# 2. 装进当前 profile
 dsh plugin --profile web add "$DSH_HOME/dsh-go/plugins/dsh-modelscope-pool"
 ```
 
-装好后重启 App，或让插件重新加载。网关会在 `127.0.0.1:8899` 起来。
+装的是指向这个目录的链接，所以**目录不能删**。改完 `lib/` 里的代码需要在 App 的「引擎」页重启引擎才生效。
 
-### 只想用网关、不装 App
+### 方式三：只挂到 Harness（网页版 / 桌面版）
 
-插件本身就是一个 Cordis bundle（`package.json` 里的 `dsh.bundle.patch` 指向 `cordis.patch.yml`），所以也可以直接挂到 Harness 的 profile 里：
+插件本身就是一个 Cordis bundle（`package.json` 里的 `dsh.bundle.patch` 指向 `cordis.patch.yml`），所以不装 dsh-go 也能用：
 
 ```bash
 dsh plugin --profile web add /path/to/dsh-modelscope-pool
 ```
 
+网页版的管理页在 `http://127.0.0.1:3080/modelscope-pool`，见[网页版与桌面版](#网页版与桌面版)。
+
 ---
 
 ## 配置
@@ -177,7 +203,7 @@ dsh plugin --profile web add /path/to/dsh-modelscope-pool
 
 | 面板 | 位置 | 内容 |
 |---|---|---|
-| **魔搭 Key 池** | 对话标签 / 侧栏 / 功能页 | 可用 / 冷却 / 魔粒三个数字、两张扇形图（Key 状态分布 + 魔粒用量）、Key 列表（分页）、刷新额度、测试全部、全部恢复、添加 Key |
+| **魔搭 Key 池** | 对话标签 / 侧栏 / 功能页 | 三个数字（可用 / 冷却 / 魔粒）、一条魔粒进度条、Key 列表（每页 10 个）、刷新额度 / 测试全部 / 全部恢复、添加入口 |
 | **Key 详情** | 侧栏 / 功能页 | 点列表任意一行进来：完整令牌、站点、额度明细、状态、失败原因，以及禁用 / 停用 / 恢复 / 删除（删除需连点两次确认） |
 | **魔搭模型** | 对话标签 / 侧栏 / 功能页 | 按「国际版 / 国内版 / 双站」分组的模型列表，点一下设为默认，底部可重新拉取 |
 
@@ -185,6 +211,25 @@ dsh plugin --profile web add /path/to/dsh-modelscope-pool
 
 ---
 
+## 网页版与桌面版
+
+原生面板只在 dsh-go 手机端出现。Harness Web / 桌面端没有这套面板，所以插件在宿主自带的 webServer 上开了一个**同源管理页**：
+
+```
+http://127.0.0.1:3080/modelscope-pool
+```
+
+（端口跟着你的 Harness 网页端口走，默认 3080。）
+
+页面上能做的事和原生面板一致：看三个数字和魔粒进度、看 Key 列表、刷新额度、测试全部、全部恢复、逐条禁用 / 停用 / 恢复 / 删除、批量添加 Key、切换默认模型。中英文跟随浏览器语言，右上角可手动切换。
+
+两道保护：
+
+- **只认本机回环地址**。来自 `192.168.*`、`10.*` 等局域网地址的请求直接 403，令牌不会因为开了这个页面而被同网段的人看到。
+- **沿用 Harness 自己的登录校验**。这个路径和 `/api/*` 一样要过宿主的 Host/Origin 校验与 cookie 凭据，所以请在你已经登录 DSH 网页的那个浏览器里打开。
+
+桌面端内嵌的就是同一套 Web 界面，地址相同。
+
 ## 多语言
 
 界面文案跟随系统语言，判定顺序：
@@ -198,7 +243,7 @@ dsh plugin --profile web add /path/to/dsh-modelscope-pool
 
 ## 魔粒用量怎么算
 
-魔搭按「魔粒」（magicubes）计费，每个 Key 的免费额度是 **250 魔粒**。面板上的第二张扇形图就是按这个估的：
+魔搭按「魔粒」（magicubes）计费，每个 Key 的免费额度是 **250 魔粒**。面板上的魔粒进度条（网页版是顶部那条横条）就是按这个估的：
 
 ```
 总魔粒 = Key 数量 × 250
@@ -288,6 +333,9 @@ dsh-go 里更进一步：这个插件会把自己注册成一个叫 **魔搭 Key
 **Key 一直不自动恢复？**
 看看是不是被「手动禁用」了（`manual` 标记）。手动禁用不会被自动恢复流程放开，需要点「恢复」。
 
+**点「刷新额度」提示「魔搭 Key 池没有响应」？**
+App 要求点按在 3 秒内返回，而刷新额度要联网逐个查所有 Key 的额度，早就超过 3 秒了。0.10.1 起这几个慢操作（刷新额度 / 测试全部 / 重新拉取模型 / 添加 Key）改成先回一个「正在刷新额度」的等待态，结果异步回来，最多 60 秒。如果你还在 0.10.0 或更早，升级即可。
+
 **端口被占用？**
 改 `config.json` 的 `port`，同时把客户端和供应商配置里的地址一起改掉。
 

package/lib/i18n.js

@@ -71,6 +71,8 @@ const S = {
   unitKey: ['个', ''],
   captionNoKeys: ['还没有 Key', 'No keys yet'],
   shareTitle: ['Key 状态分布', 'Key status'],
+  magicLabel: ['魔粒用量', 'Magicube usage'],
+  magicBarCaption: ['剩余 {left} / 共 {total}', '{left} left of {total}'],
   magicLeft: ['剩余', 'Remaining'],
   magicUsed: ['已用', 'Spent'],
   magicCaption: [
@@ -127,6 +129,12 @@ const S = {
   trailingCurrent: ['当前', 'Current'],
   trailingUse: ['使用', 'Use'],
 
+  // 慢操作：点按后先回 pending，App 会显示等待
+  pendingRefresh: ['正在刷新额度', 'Refreshing quota'],
+  pendingTest: ['正在测试全部', 'Testing all'],
+  pendingModels: ['正在拉取模型', 'Loading models'],
+  pendingAdd: ['正在校验 Key', 'Checking keys'],
+
   // 操作反馈
   toastQuotaUpdated: ['额度已更新', 'Quota refreshed'],
   toastModelSet: ['默认模型：{model}', 'Default model: {model}'],

package/lib/index.js

@@ -12,8 +12,9 @@ import { createProxy, quotaLike } from './proxy.js'
 import { createQuotaBook, REGIONS } from './quota.js'
 import { createRouter } from './route.js'
 import { makeT } from './i18n.js'
+import { registerWebAdmin, WEB_ADMIN_PATH } from './web.js'
 
-export const name = 'local-modelscope-pool'
+export const name = 'dsh-modelscope-pool'
 
 // 「模型」页只有在这个插件的设置命名空间存在时才显示「魔搭 Key 池」这一行，
 // 而命名空间来自这里导出的 Config schema，键就是 loader 里的条目 id。
@@ -265,7 +266,7 @@ export function apply(ctx) {
   let keyFocus = ''
   let keyPage = 0
   let deleteArmed = ''
-  const KEYS_PER_PAGE = 40
+  const KEYS_PER_PAGE = 10
   const pickedKey = () => (keyFocus && pool?.keys.some((k) => k.id === keyFocus) ? keyFocus : '')
 
 
@@ -362,6 +363,7 @@ const modelRowOf = (entry, current, t) => {
               left: magicLeft,
               used: magicUsed,
             }),
+      brief: t('magicBarCaption', { left: magicLeft, total: magicTotal }),
       categories: [t('magicLeft'), t('magicUsed')],
       series: [{ name: 'Magicubes', values: [magicLeft, magicUsed] }],
     }
@@ -505,7 +507,7 @@ const modelRowOf = (entry, current, t) => {
       models: modelRows,
     }
   }
-const viewPool = (scope, caps) => {
+  const viewPool = (scope, caps) => {
     const t = makeT(caps?.locale)
     return {
       v: 2,
@@ -522,19 +524,12 @@ const viewPool = (scope, caps) => {
           ],
         },
         {
-          type: 'chart',
-          kind: 'donut',
-          categories: { $: 'data.share.categories' },
-          series: { $: 'data.share.series' },
-          caption: { $: 'data.share.caption' },
-        },
-        { type: 'text', text: { $: 'data.shareTitle' }, style: { size: 'title', weight: 'bold' } },
-        {
-          type: 'chart',
-          kind: 'donut',
-          categories: { $: 'data.magic.categories' },
-          series: { $: 'data.magic.series' },
-          caption: { $: 'data.magic.caption' },
+          type: 'progress',
+          label: t('magicLabel'),
+          value: { $: 'data.magic.left' },
+          max: { $: 'data.magic.total' },
+          caption: { $: 'data.magic.brief' },
+          tone: 'good',
         },
         { type: 'callout', tone: 'info', text: { $: 'data.hint' } },
         { type: 'text', text: { $: 'data.keyTitle' }, style: { size: 'title', weight: 'bold' } },
@@ -542,19 +537,18 @@ const viewPool = (scope, caps) => {
         {
           type: 'actions',
           items: [
-            { label: t('btnPrev'), icon: 'collapse', action: { id: 'key-prev' } },
-            { label: t('btnNext'), icon: 'expand', action: { id: 'key-next' } },
+            { label: t('btnRefresh'), icon: 'refresh', action: { id: 'refresh' } },
+            { label: t('btnTestAll'), icon: 'bolt', action: { id: 'test-all' } },
+            { label: t('btnRestoreAll'), icon: 'play', action: { id: 'restore-all' } },
           ],
         },
         {
           type: 'actions',
           items: [
-            { label: t('btnRefresh'), icon: 'refresh', action: { id: 'refresh' } },
-            { label: t('btnTestAll'), icon: 'bolt', action: { id: 'test-all' } },
-            { label: t('btnRestoreAll'), icon: 'play', action: { id: 'restore-all' } },
+            { label: t('btnPrev'), icon: 'collapse', action: { id: 'key-prev' } },
+            { label: t('btnNext'), icon: 'expand', action: { id: 'key-next' } },
           ],
         },
-        { type: 'text', text: { $: 'data.focusTitle' }, tone: 'muted' },
         {
           type: 'form',
           submitLabel: t('formSubmit'),
@@ -617,7 +611,6 @@ const viewPool = (scope, caps) => {
       cooling: d.cooling,
       magicubes: d.magicubes,
       share: d.share,
-      shareTitle: d.shareTitle,
       magic: d.magic,
       hint: d.hint,
       keyTitle: d.keyTitle,
@@ -735,11 +728,26 @@ const viewPool = (scope, caps) => {
         }
     }
 
+    // 点按必须在 3 秒内返回，否则 App 会提示「没有响应」。
+    // 刷新额度 / 测试全部 / 拉模型 / 校验 Key 都要联网，所以先回 pending，结果走延后效果。
+    const defer = (label, work) => ({
+      pending: { label, timeoutMs: 60_000 },
+      result: async () => {
+        const value = await work()
+        refreshPanel()
+        refreshStrip()
+        return value
+      },
+    })
+
     const panelActions = {
-        async refresh(scope, event) {
+        refresh(scope, event) {
           const t = makeT(event?.locale)
-          await Promise.all([refreshQuota(true), refreshCatalog(true)])
-          return { toast: t('toastQuotaUpdated'), refresh: true }
+          return defer(t('pendingRefresh'), async () => {
+            await refreshQuota(true)
+            await refreshCatalog(true)
+            return { toast: t('toastQuotaUpdated') }
+          })
         },
         async 'pick-model'(scope, event) {
           const t = makeT(event?.locale)
@@ -749,12 +757,13 @@ const viewPool = (scope, caps) => {
             ? { toast: t('toastModelSet', { model }), refresh: true }
             : { toast: t('toastModelBad') }
         },
-        async 'test-all'(scope, event) {
+        'test-all'(scope, event) {
           const t = makeT(event?.locale)
           const keys = pool ? [...pool.keys] : []
           if (keys.length === 0) return { toast: t('toastNoKeys') }
           // 注意不能用 /v1/models 验 Key：那个接口是公开的，什么令牌都返回 200。
           // 真正会校验令牌的是额度接口，而且查额度不扣魔粒。
+          return defer(t('pendingTest'), async () => {
           const rows = await quota.refresh(
             keys.map((k) => ({ id: k.id, key: k.key, region: k.region })),
             { force: true },
@@ -781,6 +790,7 @@ const viewPool = (scope, caps) => {
           if (short > 0) parts.push(t('partShort', { n: short }))
           if (invalid > 0) parts.push(t('partInvalid', { n: invalid }))
           return { toast: t('toastTestDone', { parts: parts.join(' · ') }) }
+          })
         },
         'restore-all': async (scope, event) => {
           const t = makeT(event?.locale)
@@ -860,20 +870,24 @@ const viewPool = (scope, caps) => {
           })
           return { toast: t('toastDeleted', { id }), refresh: true }
         },
-        'add-form': async (scope, event) => {
+        'add-form': (scope, event) => {
+          const t = makeT(event?.locale)
           const value = event?.value
           const raw = typeof value === 'string' ? value : value?.newKey ?? value?.value ?? ''
-          const result = await addKey(raw, event?.locale)
-          return { ...result, refresh: true }
+          return defer(t('pendingAdd'), async () => {
+            const result = await addKey(raw, event?.locale)
+            return { toast: result?.toast ?? t('toastNoNew') }
+          })
         },
         'key-back'() {
           return { open: 'panel:pool' }
         },
-        async 'refresh-models'(scope, event) {
+        'refresh-models'(scope, event) {
           const t = makeT(event?.locale)
-          await refreshCatalog(true)
-          refreshPanel()
-          return { toast: t('toastModelsReloaded'), refresh: true }
+          return defer(t('pendingModels'), async () => {
+            await refreshCatalog(true)
+            return { toast: t('toastModelsReloaded') }
+          })
         },
     }
 
@@ -1037,7 +1051,133 @@ const viewPool = (scope, caps) => {
   })
 
   // 真正的网关只在引擎里起（检查器没有 webServer，也不会占端口）。
-  ctx.inject(['webServer'], () => {
+  // 网页版 / 桌面版：原生面板只在 dsh-go 里出现，这里补一个同源管理页。
+  ctx.inject(['webServer'], (webCtx) => {
+    const webServer = webCtx?.webServer
+    if (webServer && typeof webServer.register === 'function') {
+      const getState = () => {
+        const status = pool ? pool.status() : { total: 0, available: 0, cooling: 0, keys: [] }
+        const ids = status.keys.map((k) => k.id)
+        const sum = quota ? quota.sum(ids) : { available: 0, known: 0 }
+        const per = 250
+        const total = status.total * per
+        const unknown = Math.max(0, status.total - sum.known)
+        const left = sum.known > 0 ? sum.available + unknown * per : total
+        return {
+          total: status.total,
+          available: status.available,
+          cooling: status.cooling,
+          magic: { total, left, used: Math.max(0, total - left) },
+          model: String(config.model ?? ''),
+          models: (catalog?.entries ?? [])
+            .filter((entry) => isChatModel(entry.id))
+            .map((entry) => ({ id: entry.id, name: entry.name || entry.id, regions: entry.regions ?? [] })),
+          keys: status.keys.map((k) => {
+            const state = quota?.cached(k.id)
+            return {
+              id: k.id,
+              masked: k.masked,
+              region: k.region,
+              state: k.state,
+              reason: k.reason ?? '',
+              manual: Boolean(k.manual),
+              untilAt: k.untilAt ?? 0,
+              used: k.used ?? 0,
+              quota: state?.ok
+                ? { ok: true, available: state.available, total: state.total, frozen: state.frozen }
+                : { ok: false, available: 0, total: 0, frozen: 0, error: state?.error ?? '' },
+            }
+          }),
+        }
+      }
+
+      const doAction = async (action, payload) => {
+        const id = String(payload?.id ?? '')
+        const after = () => {
+          refreshPanel()
+          refreshStrip()
+        }
+        switch (action) {
+          case 'refresh':
+            await refreshQuota(true)
+            await refreshCatalog(true)
+            after()
+            return makeT()('toastQuotaUpdated')
+          case 'test': {
+            const keys = pool ? [...pool.keys] : []
+            if (keys.length === 0) return makeT()('toastNoKeys')
+            const rows = await quota.refresh(
+              keys.map((k) => ({ id: k.id, key: k.key, region: k.region })),
+              { force: true },
+            )
+            for (const [i, row] of rows.entries()) {
+              const key = keys[i]
+              if (row.state?.region) await pool.setRegion(key.id, row.state.region)
+              if (!row.state?.ok) {
+                pool.markFailure(key.id, '令牌无效', String(row.state?.error ?? '').slice(0, 80))
+                continue
+              }
+              if (row.state.available < QUOTA_FLOOR) {
+                pool.markFailure(key.id, '额度不足', `剩余 ${row.state.available} 魔粒`, nextQuotaResetAt())
+                continue
+              }
+              pool.restore(key.id)
+            }
+            after()
+            const t = makeT()
+            const ready = rows.filter((r) => r.state?.ok && r.state.available >= QUOTA_FLOOR).length
+            return t('toastTestDone', { parts: t('partOk', { ok: ready, total: keys.length }) })
+          }
+          case 'restoreAll':
+            await pool.restoreAll()
+            router.clearAll()
+            after()
+            return makeT()('toastRestored')
+          case 'disable':
+            if (!id) return makeT()('toastNoKeyId')
+            pool.disable(id, '手动禁用')
+            router.clearKey?.(id)
+            after()
+            return makeT()('toastDisabled', { id })
+          case 'stop':
+            if (!id) return makeT()('toastNoKeyId')
+            pool.stop(id, '手动停用', nextQuotaResetAt())
+            router.clearKey?.(id)
+            after()
+            return makeT()('toastStopped', { id })
+          case 'restore':
+            if (!id) return makeT()('toastNoKeyId')
+            pool.restore(id)
+            router.clearKey?.(id)
+            after()
+            return makeT()('toastRestoredOne', { id })
+          case 'remove':
+            if (!id) return makeT()('toastNoKeyId')
+            await pool.remove(id)
+            quota?.forget?.(id)
+            after()
+            return makeT()('toastDeleted', { id })
+          case 'add': {
+            const result = await addKey(String(payload?.value ?? ''), undefined)
+            return result?.toast ?? makeT()('toastNoNew')
+          }
+          case 'setModel': {
+            const ok = await selectModel(String(payload?.value ?? ''))
+            return ok ? makeT()('toastModelSet', { model: payload.value }) : makeT()('toastModelBad')
+          }
+          default:
+            throw new Error(`unknown action ${action}`)
+        }
+      }
+
+      try {
+        ctx.effect(() => registerWebAdmin(webServer, { getState, doAction, logger }))
+        logger?.info?.(`modelscope-pool: 网页/桌面端管理页 ${WEB_ADMIN_PATH}`)
+      } catch (error) {
+        logger?.warn?.(`modelscope-pool: 管理页注册失败 ${String(error?.message ?? error)}`)
+      }
+    }
+
     ready
       .then(async () => {
         proxy = createProxy({

package/lib/provider.js

@@ -60,7 +60,7 @@ const INERT_AUTH = {
       return []
     },
     async modify() {
-      throw new Error('local-modelscope-pool has no pi-ai credential lifecycle')
+      throw new Error('dsh-modelscope-pool has no pi-ai credential lifecycle')
     },
     async delete() {},
   },
@@ -176,7 +176,7 @@ export async function registerPoolProvider(ctx, { providerId, displayName, getPo
     provider: providerId,
     displayName,
     streamIdleTimeoutMs: 180000,
-    retryPolicy: resolveRetryPolicy(undefined, 'local-modelscope-pool retryPolicy'),
+    retryPolicy: resolveRetryPolicy(undefined, 'dsh-modelscope-pool retryPolicy'),
     configuredMaxTokens: new Map(),
     modelErrors: new Map(),
     defaultContextWindow: DEFAULT_CONTEXT_WINDOW,

package/lib/proxy.js

@@ -119,7 +119,7 @@ export function createProxy({ pool, config, router, logger, hooks = {} }) {
     if (req.method === 'GET' && url.pathname === '/') {
       const s = pool.status()
       return sendJson(res, 200, {
-        service: 'local-modelscope-pool',
+        service: 'dsh-modelscope-pool',
         endpoint: `http://127.0.0.1:${boundPort}/v1`,
         keys: { total: s.total, available: s.available, cooling: s.cooling },
       })

package/lib/web.js

@@ -0,0 +1,287 @@
+// 网页版 / 桌面版 DSH 的管理页面。
+// dsh-go 手机端用原生面板，Harness Web（含桌面端内嵌的同一套界面）没有面板，
+// 所以在宿主自带的 webServer 上开一个同源页面：http://127.0.0.1:<web 端口>/modelscope-pool
+// 页面只读同源 JSON，不跨域；只接受本机回环地址，避免局域网里被人看到令牌。
+
+const PAGE_PATH = '/modelscope-pool'
+
+const HTML = [
+  '<!doctype html>',
+  '<html lang="zh-CN"><head>',
+  '<meta charset="utf-8">',
+  '<meta name="viewport" content="width=device-width,initial-scale=1">',
+  '<title>ModelScope key pool</title>',
+  '<style>',
+  ':root{color-scheme:light dark;--bg:#fff;--fg:#16181d;--muted:#6b7078;--line:#e3e6ea;--card:#f7f8fa;--good:#1f7a4d;--warn:#8a6100;--bad:#b3261e;--btn:#eceff3}',
+  '@media (prefers-color-scheme:dark){:root{--bg:#16181d;--fg:#e8eaee;--muted:#9aa0aa;--line:#2b2f36;--card:#1d2026;--good:#5fd39b;--warn:#e0b355;--bad:#ff8a80;--btn:#262b33}}',
+  '*{box-sizing:border-box}',
+  'body{margin:0;padding:16px 14px 40px;background:var(--bg);color:var(--fg);font:14px/1.5 -apple-system,system-ui,"Segoe UI",Roboto,"Noto Sans SC",sans-serif}',
+  'h1{margin:0 0 2px;font-size:18px}',
+  '.sub{color:var(--muted);font-size:12px;margin-bottom:14px}',
+  '.stats{display:flex;gap:10px;margin-bottom:12px}',
+  '.stat{flex:1;background:var(--card);border:1px solid var(--line);border-radius:10px;padding:10px}',
+  '.stat b{display:block;font-size:20px;line-height:1.2}',
+  '.stat span{color:var(--muted);font-size:12px}',
+  '.bar{height:8px;border-radius:6px;background:var(--line);overflow:hidden;margin:6px 0 4px}',
+  '.bar i{display:block;height:100%;background:var(--good)}',
+  '.row{display:flex;gap:8px;flex-wrap:wrap;margin:12px 0}',
+  'button{background:var(--btn);color:var(--fg);border:1px solid var(--line);border-radius:8px;padding:7px 12px;font:inherit;cursor:pointer}',
+  'button:active{opacity:.7}',
+  'button.pri{background:var(--fg);color:var(--bg);border-color:var(--fg)}',
+  'table{width:100%;border-collapse:collapse;font-size:13px}',
+  'th,td{text-align:left;padding:7px 6px;border-bottom:1px solid var(--line);vertical-align:middle}',
+  'th{color:var(--muted);font-weight:500;font-size:12px}',
+  '.mono{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px}',
+  '.ok{color:var(--good)}.warn{color:var(--warn)}.bad{color:var(--bad)}',
+  '.muted{color:var(--muted)}',
+  'td.ops{white-space:nowrap;text-align:right}',
+  'td.ops button{padding:4px 8px;font-size:12px;margin-left:4px}',
+  'textarea,select{width:100%;background:var(--card);color:var(--fg);border:1px solid var(--line);border-radius:8px;padding:8px;font:inherit}',
+  'textarea{min-height:64px;resize:vertical}',
+  '.toast{position:fixed;left:50%;bottom:24px;transform:translateX(-50%);background:var(--fg);color:var(--bg);padding:9px 16px;border-radius:20px;font-size:13px;opacity:0;transition:opacity .2s;pointer-events:none;max-width:88vw}',
+  '.toast.on{opacity:.95}',
+  'details{margin-top:18px}summary{cursor:pointer;color:var(--muted);font-size:13px}',
+  '</style></head><body>',
+  '<h1 id="title">魔搭 Key 池</h1>',
+  '<div class="sub" id="sub"></div>',
+  '<div class="stats">',
+  '<div class="stat"><b id="s-ok">–</b><span id="l-ok"></span></div>',
+  '<div class="stat"><b id="s-cool">–</b><span id="l-cool"></span></div>',
+  '<div class="stat"><b id="s-magic">–</b><span id="l-magic"></span></div>',
+  '</div>',
+  '<div class="bar"><i id="bar" style="width:0"></i></div>',
+  '<div class="sub" id="magic-cap"></div>',
+  '<div class="row">',
+  '<button class="pri" data-act="refresh" id="b-refresh"></button>',
+  '<button data-act="test" id="b-test"></button>',
+  '<button data-act="restoreAll" id="b-restore"></button>',
+  '<button id="b-lang"></button>',
+  '</div>',
+  '<table><thead><tr id="head"></tr></thead><tbody id="rows"></tbody></table>',
+  '<div class="row"><button id="b-prev"></button><button id="b-next"></button></div>',
+  '<details><summary id="add-sum"></summary>',
+  '<div class="row"><textarea id="add-text" placeholder="ms-..."></textarea></div>',
+  '<div class="row"><button class="pri" id="b-add"></button></div>',
+  '</details>',
+  '<details><summary id="model-sum"></summary>',
+  '<div class="row"><select id="model-sel"></select></div>',
+  '</details>',
+  '<div class="toast" id="toast"></div>',
+  '<script>',
+  'var L=null,S=null,PAGE=0,PER=20,ARM="";',
+  'var DICT={',
+  ' zh:{title:"魔搭 Key 池",sub:"本页只在 127.0.0.1 上可用；Key 不会离开这台设备。",',
+  ' ok:"可用",cool:"冷却",magic:"魔粒",left:"剩余",total:"共",refresh:"刷新额度",test:"测试全部",restoreAll:"全部恢复",',
+  ' prev:"上一页",next:"下一页",add:"添加",addSum:"添加 Key（一行一个）",modelSum:"默认模型",',
+  ' id:"Key",site:"站点",state:"状态",quota:"额度",ops:"操作",',
+  ' disable:"禁用",stop:"停用",restore:"恢复",del:"删除",delAgain:"再点一次",',
+  ' ai:"国际版",cn:"国内版",none:"—",empty:"还没有 Key",',
+  ' copied:"已刷新",added:"已添加",saved:"已保存",failed:"操作失败",lang:"English"},',
+  ' en:{title:"ModelScope keys",sub:"This page only answers on 127.0.0.1; keys never leave this device.",',
+  ' ok:"Ready",cool:"Cooling",magic:"Magicubes",left:"left",total:"of",refresh:"Refresh quota",test:"Test all",restoreAll:"Restore all",',
+  ' prev:"Prev",next:"Next",add:"Add",addSum:"Add keys (one per line)",modelSum:"Default model",',
+  ' id:"Key",site:"Site",state:"State",quota:"Quota",ops:"Actions",',
+  ' disable:"Disable",stop:"Pause",restore:"Restore",del:"Delete",delAgain:"Tap again",',
+  ' ai:"International",cn:"China",none:"—",empty:"No keys yet",',
+  ' copied:"Refreshed",added:"Added",saved:"Saved",failed:"Action failed",lang:"中文"}};',
+  'var RSN={"额度不足":["额度不足","Out of quota"],"额度用尽":["额度用尽","Quota exhausted"],"令牌无效":["令牌无效","Invalid token"],"被限流":["被限流","Rate limited"],"模型名不可用":["模型名不可用","Model unavailable"],"上游超时":["上游超时","Upstream timeout"],"读取请求失败":["读取请求失败","Request failed"],"冷却中":["冷却中","Cooling down"],"手动禁用":["手动禁用","Disabled"],"手动停用":["手动停用","Paused"]};',
+  'function rsn(r){if(!r)return "";var x=RSN[r];return x?(L===DICT.en?x[1]:x[0]):r}',
+  'function t(k){return (L&&L[k])||k}',
+  'function pickLang(){try{var s=localStorage.getItem("ms-lang");if(s==="zh"||s==="en")return s}catch(e){}',
+  ' var n=(navigator.language||"zh").toLowerCase();return n.indexOf("zh")===0?"zh":"en"}',
+  'function setLang(x){L=DICT[x];try{localStorage.setItem("ms-lang",x)}catch(e){}',
+  ' document.documentElement.lang=x==="zh"?"zh-CN":"en";',
+  ' document.querySelectorAll("[id^=b-lang]").forEach(function(b){b.textContent=L.lang});render()}',
+  'function toast(m){var el=document.getElementById("toast");el.textContent=m;el.classList.add("on");',
+  ' clearTimeout(window.__t);window.__t=setTimeout(function(){el.classList.remove("on")},2200)}',
+  'function fmt(ms){if(!ms)return "";var d=new Date(ms);function p(n){return n<10?"0"+n:""+n}',
+  ' return p(d.getMonth()+1)+"-"+p(d.getDate())+" "+p(d.getHours())+":"+p(d.getMinutes())}',
+  'function el(tag,cls,text){var e=document.createElement(tag);if(cls)e.className=cls;if(text!=null)e.textContent=text;return e}',
+  'function render(){',
+  ' if(!S||!L)return;',
+  ' document.getElementById("title").textContent=L.title;',
+  ' document.getElementById("sub").textContent=L.sub;',
+  ' document.getElementById("s-ok").textContent=S.available;',
+  ' document.getElementById("s-cool").textContent=S.cooling;',
+  ' document.getElementById("s-magic").textContent=S.magic.left;',
+  ' document.getElementById("l-ok").textContent=L.ok;',
+  ' document.getElementById("l-cool").textContent=L.cool;',
+  ' document.getElementById("l-magic").textContent=L.magic;',
+  ' var pct=S.magic.total>0?Math.max(0,Math.min(100,S.magic.left/S.magic.total*100)):0;',
+  ' document.getElementById("bar").style.width=pct.toFixed(1)+"%";',
+  ' document.getElementById("magic-cap").textContent=" "+L.left+" "+S.magic.left+" / "+L.total+" "+S.magic.total;',
+  ' document.getElementById("b-refresh").textContent=L.refresh;',
+  ' document.getElementById("b-test").textContent=L.test;',
+  ' document.getElementById("b-restore").textContent=L.restoreAll;',
+  ' document.getElementById("b-prev").textContent=L.prev;',
+  ' document.getElementById("b-next").textContent=L.next;',
+  ' document.getElementById("b-add").textContent=L.add;',
+  ' document.getElementById("add-sum").textContent=L.addSum;',
+  ' document.getElementById("model-sum").textContent=L.modelSum;',
+  ' var head=document.getElementById("head");head.innerHTML="";',
+  ' [L.id,L.site,L.state,L.quota,L.ops].forEach(function(h){head.appendChild(el("th",null,h))});',
+  ' var body=document.getElementById("rows");body.innerHTML="";',
+  ' var maxPage=Math.max(0,Math.ceil(S.keys.length/PER)-1);PAGE=Math.min(PAGE,maxPage);',
+  ' var slice=S.keys.slice(PAGE*PER,PAGE*PER+PER);',
+  ' if(!slice.length){var tr=el("tr");var td=el("td","muted",L.empty);td.colSpan=5;tr.appendChild(td);body.appendChild(tr)}',
+  ' slice.forEach(function(k){',
+  '  var tr=el("tr");',
+  '  tr.appendChild(el("td","mono",k.id+" "+k.masked));',
+  '  tr.appendChild(el("td",null,k.region==="ai"?L.ai:k.region==="cn"?L.cn:L.none));',
+  '  var st=el("td",k.state==="ok"?"ok":k.manual?"bad":"warn");',
+  '  st.textContent=k.state==="ok"?L.ok:(k.manual?L.disable:rsn(k.reason)||L.cool)+(k.untilAt?" "+fmt(k.untilAt):"");',
+  '  tr.appendChild(st);',
+  '  var q=el("td",null,k.quota&&k.quota.ok?(k.quota.available+" / "+k.quota.total):L.none);',
+  '  tr.appendChild(q);',
+  '  var ops=el("td","ops");',
+  '  function mk(act,label,cls){var b=el("button",cls,label);b.onclick=function(){act(k.id,label)};ops.appendChild(b);return b}',
+  '  if(k.state==="ok"||k.manual){mk(actDisable,L.disable)} else {mk(actRestore,L.restore)}',
+  '  mk(actStop,L.stop);',
+  '  var delBtn=mk(actDelete,ARM===k.id?L.delAgain:L.del);',
+  '  tr.appendChild(ops);',
+  '  body.appendChild(tr);',
+  ' });',
+  ' var sel=document.getElementById("model-sel");sel.innerHTML="";',
+  ' S.models.slice(0,400).forEach(function(m){var o=el("option",null,m.name);o.value=m.id;if(m.id===S.model)o.selected=true;sel.appendChild(o)});',
+  '}',
+  'function post(action,payload){',
+  ' var body=Object.assign({action:action},payload||{});',
+  ' return fetch("' + PAGE_PATH + '/api/action",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(body)})',
+  '  .then(function(r){return r.json()}).then(function(j){if(j.message)toast(j.message);return load()})',
+  '  .catch(function(){toast(L.failed)})',
+  '}',
+  'function actDisable(id){post("disable",{id:id})}',
+  'function actStop(id){post("stop",{id:id})}',
+  'function actRestore(id){post("restore",{id:id})}',
+  'function actDelete(id){if(ARM!==id){ARM=id;render();return}ARM="";post("remove",{id:id})}',
+  'function load(){',
+  ' return fetch("' + PAGE_PATH + '/api/state").then(function(r){if(!r.ok)throw 0;return r.json()})',
+  '  .then(function(j){S=j;render()}).catch(function(){})',
+  '}',
+  'document.addEventListener("click",function(e){',
+  ' var a=e.target&&e.target.getAttribute&&e.target.getAttribute("data-act");',
+  ' if(a){post(a);return}',
+  ' if(e.target.id==="b-prev"){if(PAGE>0){PAGE--;render()}return}',
+  ' if(e.target.id==="b-next"){if((PAGE+1)*PER<S.keys.length){PAGE++;render()}return}',
+  ' if(e.target.id==="b-add"){var v=document.getElementById("add-text").value;',
+  '  if(!v.trim())return;post("add",{value:v}).then(function(){document.getElementById("add-text").value=""});return}',
+  ' if(e.target.id==="b-lang"){setLang(L===DICT.zh?"en":"zh");return}',
+  '});',
+  'document.addEventListener("change",function(e){',
+  ' if(e.target.id==="model-sel")post("setModel",{value:e.target.value});',
+  '});',
+  'setLang(pickLang());load();setInterval(load,4000);',
+  '</script></body></html>',
+].join('\n')
+
+const isLoopback = (req) => {
+  const ip = String(req.socket?.remoteAddress ?? '')
+  return ip === '::1' || ip.startsWith('127.') || ip.startsWith('::ffff:127.')
+}
+
+const send = (res, status, type, body, extra) => {
+  res.writeHead(status, {
+    'content-type': type,
+    'cache-control': 'no-store',
+    'x-content-type-options': 'nosniff',
+    ...extra,
+  })
+  res.end(body)
+}
+
+const sendJson = (res, status, value) => send(res, status, 'application/json; charset=utf-8', JSON.stringify(value))
+
+const readBody = (req) =>
+  new Promise((resolve) => {
+    let size = 0
+    const chunks = []
+    req.on('data', (chunk) => {
+      size += chunk.length
+      if (size > 256 * 1024) {
+        req.destroy()
+        return
+      }
+      chunks.push(chunk)
+    })
+    req.on('end', () => {
+      const text = Buffer.concat(chunks).toString('utf8')
+      let value = null
+      try {
+        value = text ? JSON.parse(text) : null
+      } catch {}
+      resolve(value)
+    })
+    req.on('error', () => resolve(null))
+  })
+
+/**
+ * 在宿主的 webServer 上挂一个同源管理页。
+ * @param webServer 宿主注入的 webServer 服务
+ * @param options.getState () => 状态对象
+ * @param options.doAction (action, payload) => Promise<string> 返回一行提示
+ */
+export function registerWebAdmin(webServer, { getState, doAction, logger }) {
+  const route = {
+    kind: 'prefix',
+    path: PAGE_PATH,
+    handler: async (req, res) => {
+      if (!isLoopback(req)) {
+        sendJson(res, 403, { error: 'loopback only' })
+        return
+      }
+      const url = new URL(String(req.url ?? '/'), 'http://127.0.0.1')
+      const rest = url.pathname.slice(PAGE_PATH.length).replace(/\/+$/, '')
+
+      if (rest === '' || rest === '/') {
+        if (req.method !== 'GET' && req.method !== 'HEAD') {
+          sendJson(res, 405, { error: 'method not allowed' })
+          return
+        }
+        send(res, 200, 'text/html; charset=utf-8', req.method === 'HEAD' ? '' : HTML, {
+          'x-frame-options': 'SAMEORIGIN',
+          'referrer-policy': 'no-referrer',
+        })
+        return
+      }
+
+      if (rest === '/api/state') {
+        if (req.method !== 'GET') {
+          sendJson(res, 405, { error: 'method not allowed' })
+          return
+        }
+        try {
+          sendJson(res, 200, getState())
+        } catch (error) {
+          logger?.warn?.(`modelscope-pool: 网页状态读取失败 ${String(error?.message ?? error)}`)
+          sendJson(res, 500, { error: 'state failed' })
+        }
+        return
+      }
+
+      if (rest === '/api/action') {
+        if (req.method !== 'POST') {
+          sendJson(res, 405, { error: 'method not allowed' })
+          return
+        }
+        const body = await readBody(req)
+        if (!body || typeof body.action !== 'string') {
+          sendJson(res, 400, { error: 'bad request' })
+          return
+        }
+        try {
+          const message = await doAction(body.action, body)
+          sendJson(res, 200, { ok: true, message: message ?? '' })
+        } catch (error) {
+          logger?.warn?.(`modelscope-pool: 网页操作失败 ${String(error?.message ?? error)}`)
+          sendJson(res, 200, { ok: false, message: String(error?.message ?? error) })
+        }
+        return
+      }
+
+      sendJson(res, 404, { error: 'not found' })
+    },
+  }
+  return webServer.register(route)
+}
+
+export const WEB_ADMIN_PATH = PAGE_PATH

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-modelscope-pool",
-  "version": "0.9.0",
+  "version": "0.10.1",
   "description": "魔搭多 Key 聚合网关：无感路由（模型不变，Key 遇限流/额度不足/无权限/不存在自动换下一个）；自动识别国际版/国内版令牌；单个 Key 可禁用/停用/恢复/删除/查看；全部密钥分页浏览；模型实际拉取国际版+国内版合并成简化名、按站点分组；额度低于 2 停用到次日 00:01、多 Key 轮换、限流临时失败冷却 5 分钟，并注册为 DSH 模型供应商",
   "license": "MIT",
   "author": "Yizutt",