dsh-router-core 0.1.0

package/lib/index.js

@@ -0,0 +1,1756 @@
+import { basename, dirname, join } from "node:path";
+import { mkdirSync, readFileSync, readdirSync, renameSync, writeFileSync } from "node:fs";
+import { CallId, EMPTY_RESPONSE_CODE, LlmAdapter, LlmError } from "@deepseek-ai/dsh-llm";
+import { randomBytes } from "node:crypto";
+import { pathToFileURL } from "node:url";
+import { DatabaseSync } from "node:sqlite";
+//#region src/shared.ts
+/** Same-origin API base the client panel fetches (host half serves it). */
+const ROUTER_API_BASE = "/router/api";
+/** Bearer key env / credential reference protecting /v1/*. */
+const API_KEY_REF = "TW2A_API_KEY";
+//#endregion
+//#region src/router/index.ts
+/**
+* dsh-router 路由器本体：供应商注册表 + OpenAI 兼容 /v1/* 处理。
+* 仿 9router：组合 = 一组模型，请求 model 命中组合名时，按策略
+* （fallback 顺序尝试 / round-robin 轮转）选中一个模型路由。
+*/
+function openAIError(code, msg) {
+	return { error: {
+		message: msg,
+		type: "api_error",
+		code
+	} };
+}
+function writeJson$2(res, status, body) {
+	res.writeHead(status, {
+		"Content-Type": "application/json; charset=utf-8",
+		"Cache-Control": "no-store"
+	});
+	res.end(JSON.stringify(body));
+}
+/** 路由器。 */
+var Router = class {
+	suppliers = [];
+	combosFp = "";
+	customCombos = [];
+	/** round-robin 轮转游标（按组合 id 记忆）。 */
+	rrCursors = /* @__PURE__ */ new Map();
+	constructor(stateFile = "") {
+		this.combosFp = stateFile ? join(dirname(stateFile), "combos.json") : "";
+		this.loadCombos();
+	}
+	loadCombos() {
+		if (this.combosFp === "") return;
+		try {
+			const f = JSON.parse(readFileSync(this.combosFp, "utf8"));
+			if (Array.isArray(f.combos)) this.customCombos = f.combos.filter((c) => typeof c.id === "string" && c.id !== "").map((c) => {
+				const old = c;
+				const models = (Array.isArray(c.models) ? c.models.filter((m) => typeof m === "string" && m !== "") : Array.isArray(old.steps) ? old.steps.map((s) => s.supplier).filter((m) => typeof m === "string" && m !== "") : []).map((m) => {
+					const slash = m.lastIndexOf("/");
+					return slash >= 0 ? m.slice(slash + 1) : m;
+				});
+				return {
+					id: c.id,
+					name: typeof c.name === "string" ? c.name : c.id,
+					strategy: c.strategy === "round-robin" ? "round-robin" : "fallback",
+					models
+				};
+			}).filter((c) => c.models.length > 0);
+		} catch {}
+	}
+	saveCombos() {
+		if (this.combosFp === "") return;
+		try {
+			const dir = dirname(this.combosFp);
+			if (dir !== "" && dir !== ".") mkdirSync(dir, { recursive: true });
+			const raw = JSON.stringify({ combos: this.customCombos }, null, 2);
+			const tmp = this.combosFp + ".tmp";
+			writeFileSync(tmp, raw, { mode: 384 });
+			renameSync(tmp, this.combosFp);
+		} catch {}
+	}
+	add(supplier) {
+		this.suppliers.push(supplier);
+		this.suppliers.sort((a, b) => a.priority - b.priority);
+	}
+	/** 移除供应商（外部插件卸载时注销）。 */
+	removeSupplier(id) {
+		const i = this.suppliers.findIndex((s) => s.id === id);
+		if (i < 0) return false;
+		const [s] = this.suppliers.splice(i, 1);
+		s?.dispose();
+		return true;
+	}
+	/** 返回全部供应商状态（面板用）。 */
+	status() {
+		return { suppliers: this.suppliers.map((s) => s.status()) };
+	}
+	/** 供应商前缀信息（组合模型全名 = alias/id，展示时动态拼接）。 */
+	aliases() {
+		return this.suppliers.map((s) => ({
+			id: s.id,
+			name: s.name,
+			alias: s.getAlias()
+		}));
+	}
+	/**
+	* OpenAI 兼容模型列表（/v1/models）：组合（自动带出，不可改）+ 手动添加的模型。
+	* pi-ai 等 DSH provider 通过它发现 Router 的模型目录。
+	*/
+	async listModels() {
+		const seen = /* @__PURE__ */ new Set();
+		const out = [];
+		const combos = await this.combos();
+		for (const c of combos) if (!seen.has(c.name)) {
+			seen.add(c.name);
+			out.push({ id: c.name });
+		}
+		for (const s of this.suppliers) try {
+			const ids = s.customModelIds?.();
+			for (const id of ids ?? []) if (!seen.has(id)) {
+				seen.add(id);
+				out.push({ id });
+			}
+		} catch {}
+		return out;
+	}
+	/** 组合列表（面板用）：用户自定义组合。 */
+	async combos() {
+		return [...this.customCombos];
+	}
+	/** 可用模型（按供应商分组，仅启用），面板加模型用。 */
+	async supplierModels() {
+		const out = [];
+		for (const s of this.suppliers) try {
+			const models = (await s.modelsWithEnabled()).filter((m) => m.enabled);
+			out.push({
+				supplier: {
+					id: s.id,
+					name: s.name,
+					alias: s.getAlias()
+				},
+				models
+			});
+		} catch {}
+		return out;
+	}
+	validModels(models) {
+		return Array.isArray(models) && models.length > 0 && models.every((m) => typeof m === "string" && m !== "");
+	}
+	validStrategy(strategy) {
+		return strategy === "fallback" || strategy === "round-robin";
+	}
+	/** 组合模型统一存裸 id：剥掉 alias/ 前缀（前缀随供应商动态变）。 */
+	normalizeModelIds(models) {
+		return models.map((m) => {
+			const slash = m.lastIndexOf("/");
+			return slash >= 0 ? m.slice(slash + 1) : m;
+		});
+	}
+	/** 创建组合（name 唯一，非 default）。 */
+	createCombo(name, strategy, models) {
+		const clean = name.trim();
+		if (clean === "" || clean === "default") return {
+			ok: false,
+			error: "组合名无效"
+		};
+		if (!/^[A-Za-z0-9._-]+$/.test(clean)) return {
+			ok: false,
+			error: "组合名只能含字母、数字、-、_ 和 ."
+		};
+		if (this.customCombos.some((c) => c.name === clean)) return {
+			ok: false,
+			error: `组合 ${clean} 已存在`
+		};
+		if (!this.validModels(models)) return {
+			ok: false,
+			error: "至少需要一个模型"
+		};
+		if (!this.validStrategy(strategy)) return {
+			ok: false,
+			error: "策略无效"
+		};
+		const combo = {
+			id: clean,
+			name: clean,
+			strategy,
+			models: this.normalizeModelIds(models)
+		};
+		this.customCombos.push(combo);
+		this.saveCombos();
+		return {
+			ok: true,
+			combo
+		};
+	}
+	/** 更新组合（按 id）。 */
+	updateCombo(id, name, strategy, models) {
+		const target = this.customCombos.find((c) => c.id === id);
+		if (!target) return {
+			ok: false,
+			error: "组合不存在"
+		};
+		const clean = name.trim();
+		if (clean === "" || clean === "default") return {
+			ok: false,
+			error: "组合名无效"
+		};
+		if (!/^[A-Za-z0-9._-]+$/.test(clean)) return {
+			ok: false,
+			error: "组合名只能含字母、数字、-、_ 和 ."
+		};
+		if (this.customCombos.some((c) => c.id !== id && c.name === clean)) return {
+			ok: false,
+			error: `组合 ${clean} 已存在`
+		};
+		if (!this.validModels(models)) return {
+			ok: false,
+			error: "至少需要一个模型"
+		};
+		if (!this.validStrategy(strategy)) return {
+			ok: false,
+			error: "策略无效"
+		};
+		target.name = clean;
+		target.strategy = strategy;
+		target.models = this.normalizeModelIds(models);
+		this.saveCombos();
+		return { ok: true };
+	}
+	/** 删除组合（按 id，default 不可删）。 */
+	removeCombo(id) {
+		if (id === "default") return {
+			ok: false,
+			error: "默认组合不可删除"
+		};
+		const idx = this.customCombos.findIndex((c) => c.id === id);
+		if (idx === -1) return {
+			ok: false,
+			error: "组合不存在"
+		};
+		this.customCombos.splice(idx, 1);
+		this.saveCombos();
+		return { ok: true };
+	}
+	/** 按组合名查组合（含 `/` 的模型名不匹配）。 */
+	comboByName(name) {
+		if (name.includes("/")) return void 0;
+		return this.customCombos.find((c) => c.name === name);
+	}
+	/**
+	* 处理 /v1/chat/completions。
+	* - model 命中组合名 → 在组合模型里按策略选一个，交给供应商；失败按回退顺序尝试剩余模型。
+	* - 否则 → 依次尝试供应商，直到某个返回 true（已写响应）或全部返回 false。
+	*/
+	async chatCompletions(req, res) {
+		const combo = this.comboByName(req.model);
+		if (combo) {
+			const start = combo.strategy === "round-robin" ? (this.rrCursors.get(combo.id) ?? 0) % combo.models.length : 0;
+			if (combo.strategy === "round-robin") this.rrCursors.set(combo.id, (this.rrCursors.get(combo.id) ?? 0) + 1);
+			for (let i = 0; i < combo.models.length; i++) {
+				const model = combo.models[(start + i) % combo.models.length];
+				if (model === void 0) continue;
+				if (await this.chatWithModel(req, res, model)) return;
+			}
+			writeJson$2(res, 503, openAIError("no_healthy_supplier", `combo ${JSON.stringify(req.model)}: all models unavailable`));
+			return;
+		}
+		for (const s of this.suppliers) if (await s.chatCompletions(req, res)) return;
+		writeJson$2(res, 503, openAIError("no_healthy_supplier", "all suppliers unavailable"));
+	}
+	/** 把 model 改写为组合选中的模型名后尝试供应商。 */
+	async chatWithModel(req, res, model) {
+		const clone = {
+			...req,
+			model
+		};
+		try {
+			const obj = JSON.parse(req.rawBody);
+			obj.model = model;
+			clone.rawBody = JSON.stringify(obj);
+		} catch {
+			clone.rawBody = req.rawBody;
+		}
+		for (const s of this.suppliers) if (await s.chatCompletions(clone, res)) return true;
+		return false;
+	}
+	dispose() {
+		for (const s of this.suppliers) s.dispose();
+		this.suppliers = [];
+	}
+};
+//#endregion
+//#region src/llm/adapter.ts
+/**
+* DSH llm adapter for dsh-router（provider 固定卡片，名字 Router）。
+*
+* 模型目录 = 组合（自动带出，不可改）。对话转发到本插件 /v1/chat/completions，
+* 由现有路由按组合策略命中供应商模型。
+*
+* 纯文本流：组合为文本模型，本 adapter 不处理图片附件。
+*/
+/** 解析 SSE 文本，产出 `data:` 载荷（含结尾 [DONE]）。 */
+function* parseSseText(text) {
+	let data = "";
+	for (const line of text.split("\n")) {
+		if (line.startsWith("data:")) {
+			const value = line.slice(5).trimStart();
+			if (data.length > 0) data += "\n";
+			data += value;
+			continue;
+		}
+		if (line === "" && data.length > 0) {
+			yield data;
+			data = "";
+		}
+	}
+	if (data.length > 0) yield data;
+}
+/** 把 DSH 消息序列化成 openai 兼容 wire 消息（纯文本 + tool）。 */
+function wireMessages(options) {
+	const out = [];
+	for (const message of options.messages) {
+		if (message.role === "system") {
+			out.push({
+				role: "system",
+				content: flattenText(message.content)
+			});
+			continue;
+		}
+		if (message.role === "assistant") {
+			const text = flattenText(message.content);
+			const toolCalls = message.content.filter((b) => b.type === "tool-call").map((b) => ({
+				id: b.id,
+				type: "function",
+				function: {
+					name: b.name,
+					arguments: b.arguments
+				}
+			}));
+			const reasoning = message.content.filter((b) => b.type === "reasoning").map((b) => b.text).join("");
+			out.push({
+				role: "assistant",
+				content: text,
+				...toolCalls.length > 0 ? { tool_calls: toolCalls } : {},
+				...reasoning.length > 0 ? { reasoning_content: reasoning } : {}
+			});
+			continue;
+		}
+		const text = flattenText(message.content);
+		const toolResults = message.content.filter((b) => b.type === "tool-result");
+		if (text.length > 0 || toolResults.length === 0) out.push({
+			role: "user",
+			content: text
+		});
+		for (const result of toolResults) out.push({
+			role: "tool",
+			tool_call_id: result.toolCallId,
+			content: flattenText(result.content) || "(no output)"
+		});
+	}
+	return out;
+}
+/** 组装 wire 请求体。 */
+function wireRequest(options) {
+	const messages = wireMessages(options);
+	const body = {
+		model: options.model,
+		messages,
+		stream: true,
+		stream_options: { include_usage: true }
+	};
+	const tools = options.tools?.map((tool) => ({
+		type: "function",
+		function: {
+			name: tool.name,
+			description: tool.description,
+			parameters: tool.parameters
+		}
+	}));
+	if (tools !== void 0 && tools.length > 0) body.tools = tools;
+	if (options.temperature !== void 0) body.temperature = options.temperature;
+	if (options.maxTokens !== void 0) body.max_tokens = options.maxTokens;
+	if (options.stop !== void 0) body.stop = options.stop;
+	return body;
+}
+function flattenText(blocks) {
+	return blocks.filter((b) => b.type === "text").map((b) => b.text ?? "").join("");
+}
+/** openai SSE payload → DSH StreamChunk 流。 */
+async function* translate(payloads) {
+	let nextIndex = 0;
+	let textBlock;
+	let reasoningBlock;
+	const toolBlocks = /* @__PURE__ */ new Map();
+	const order = [];
+	let pendingFinish;
+	let pendingUsage;
+	const open = (kind) => {
+		const block = {
+			index: nextIndex++,
+			kind,
+			text: ""
+		};
+		order.push(block);
+		return block;
+	};
+	for (const payload of payloads) {
+		if (payload === "[DONE]") {
+			for (const block of order) yield {
+				type: "block-end",
+				index: block.index,
+				block: closeBlock(block)
+			};
+			if (pendingUsage !== void 0) yield {
+				type: "usage",
+				usage: pendingUsage
+			};
+			const reason = pendingFinish ?? { kind: "stop" };
+			yield {
+				type: "finish",
+				reason: reason.kind === "stop" && order.length === 0 ? {
+					kind: "error",
+					failure: {
+						message: "model returned a completed response with no content",
+						code: EMPTY_RESPONSE_CODE
+					}
+				} : reason
+			};
+			return;
+		}
+		let chunk;
+		try {
+			chunk = JSON.parse(payload);
+		} catch {
+			throw new LlmError(`malformed SSE payload: ${payload.slice(0, 120)}`, "MALFORMED_RESPONSE");
+		}
+		for (const choice of chunk.choices ?? []) {
+			const delta = choice.delta ?? {};
+			const reasoning = delta.reasoning_content;
+			if (typeof reasoning === "string" && reasoning.length > 0) {
+				if (!reasoningBlock) {
+					reasoningBlock = open("reasoning");
+					yield {
+						type: "block-start",
+						index: reasoningBlock.index,
+						blockType: "reasoning"
+					};
+				}
+				reasoningBlock.text += reasoning;
+				yield {
+					type: "reasoning-delta",
+					index: reasoningBlock.index,
+					text: reasoning
+				};
+			}
+			const content = delta.content;
+			if (typeof content === "string" && content.length > 0) {
+				if (!textBlock) {
+					textBlock = open("text");
+					yield {
+						type: "block-start",
+						index: textBlock.index,
+						blockType: "text"
+					};
+				}
+				textBlock.text += content;
+				yield {
+					type: "text-delta",
+					index: textBlock.index,
+					text: content
+				};
+			}
+			const toolCalls = delta.tool_calls;
+			for (const call of toolCalls ?? []) {
+				const key = call.index ?? 0;
+				let block = toolBlocks.get(key);
+				if (!block) {
+					block = open("tool-call");
+					toolBlocks.set(key, block);
+					yield {
+						type: "block-start",
+						index: block.index,
+						blockType: "tool-call"
+					};
+				}
+				if (call.id !== void 0) block.callId = call.id;
+				if (call.function?.name !== void 0) block.name = call.function.name;
+				const fragment = call.function?.arguments ?? "";
+				block.text += fragment;
+				yield {
+					type: "tool-call-delta",
+					index: block.index,
+					id: CallId(block.callId ?? ""),
+					...block.name !== void 0 ? { name: block.name } : {},
+					argumentsDelta: fragment
+				};
+			}
+			if (typeof choice.finish_reason === "string") pendingFinish = mapFinishReason(choice.finish_reason);
+		}
+		if (chunk.usage !== void 0) pendingUsage = chunk.usage;
+	}
+	throw new LlmError("SSE payload stream ended without [DONE]", "STREAM_CLOSED");
+}
+function mapFinishReason(reason) {
+	switch (reason) {
+		case "stop": return { kind: "stop" };
+		case "tool_calls": return { kind: "tool-calls" };
+		case "length": return { kind: "max-tokens" };
+		default: return {
+			kind: "error",
+			failure: {
+				message: `model stopped: ${reason}`,
+				code: reason.toUpperCase()
+			}
+		};
+	}
+}
+function closeBlock(block) {
+	switch (block.kind) {
+		case "text": return {
+			type: "text",
+			text: block.text
+		};
+		case "reasoning": return {
+			type: "reasoning",
+			text: block.text
+		};
+		case "tool-call": return {
+			type: "tool-call",
+			id: CallId(block.callId ?? ""),
+			name: block.name ?? "",
+			arguments: block.text
+		};
+	}
+}
+/**
+* DSH adapter：provider `router`。模型目录 = 组合；stream 转发到本插件
+* /v1/chat/completions（组合路由在 /v1 内完成）。
+*/
+var RouterAdapter = class extends LlmAdapter {
+	baseURL;
+	source;
+	constructor(baseURL, source) {
+		super();
+		this.baseURL = baseURL;
+		this.source = source;
+	}
+	providerInfo(provider) {
+		return {
+			id: provider,
+			name: "Router"
+		};
+	}
+	async listModels(_provider) {
+		const combos = await this.source.comboModels();
+		const seen = /* @__PURE__ */ new Set();
+		const out = [];
+		for (const m of combos) {
+			if (seen.has(m.id)) continue;
+			seen.add(m.id);
+			out.push({
+				provider: "router",
+				id: m.id,
+				name: m.name ?? m.id
+			});
+		}
+		return out;
+	}
+	async *stream(options) {
+		const body = wireRequest(options);
+		const controller = new AbortController();
+		const onAbort = () => controller.abort();
+		options.signal?.addEventListener("abort", onAbort, { once: true });
+		let resp;
+		try {
+			resp = await fetch(`${this.baseURL}/chat/completions`, {
+				method: "POST",
+				headers: {
+					"content-type": "application/json",
+					accept: "text/event-stream"
+				},
+				body: JSON.stringify(body),
+				signal: controller.signal
+			});
+		} catch (error) {
+			throw new LlmError(`dsh-router upstream call failed: ${error.message}`, "TRANSPORT", { cause: error });
+		} finally {
+			options.signal?.removeEventListener("abort", onAbort);
+		}
+		if (!resp.ok) {
+			const detail = await resp.text().catch(() => "");
+			throw new LlmError(`dsh-router /v1 returned ${resp.status}: ${detail.slice(0, 200)}`, "TRANSPORT");
+		}
+		yield* translate(parseSseText(resp.body === null ? "" : await resp.text()));
+	}
+};
+//#endregion
+//#region src/keys.ts
+/**
+* 密钥库 + 路由设置（requireApiKey）—— 9router「端点与密钥」核心。
+* 持久化到 data/keys.json（与 pool 的 stateFile 同目录）。
+*
+* /v1/* 鉴权规则：
+*   - requireApiKey=false（默认）→ 不鉴权
+*   - requireApiKey=true → Bearer 必须是「启用的库内 key」或 TW2A_API_KEY env
+*/
+function newId() {
+	return randomBytes(6).toString("hex");
+}
+function generateKey() {
+	return `dshr-${randomBytes(24).toString("hex")}`;
+}
+function mask(k) {
+	if (k.length <= 10) return k;
+	return `${k.slice(0, 6)}${"•".repeat(k.length - 10)}${k.slice(-4)}`;
+}
+/** 密钥库。 */
+var KeysStore = class {
+	fp = "";
+	keys = [];
+	require = false;
+	constructor(stateFile) {
+		this.fp = stateFile ? join(dirname(stateFile), "keys.json") : "";
+		this.load();
+	}
+	load() {
+		if (this.fp === "") return;
+		let raw;
+		try {
+			raw = readFileSync(this.fp, "utf8");
+		} catch {
+			return;
+		}
+		try {
+			const f = JSON.parse(raw);
+			this.keys = Array.isArray(f.keys) ? f.keys : [];
+			this.require = !!f.requireApiKey;
+		} catch {}
+	}
+	save() {
+		if (this.fp === "") return;
+		try {
+			const dir = dirname(this.fp);
+			if (dir !== "" && dir !== ".") mkdirSync(dir, { recursive: true });
+			const raw = JSON.stringify({
+				keys: this.keys,
+				requireApiKey: this.require
+			}, null, 2);
+			const tmp = this.fp + ".tmp";
+			writeFileSync(tmp, raw, { mode: 384 });
+			renameSync(tmp, this.fp);
+		} catch {}
+	}
+	list() {
+		return this.keys.map((k) => ({
+			id: k.id,
+			name: k.name,
+			key: k.key,
+			masked: mask(k.key),
+			isActive: k.isActive,
+			createdAt: k.createdAt
+		}));
+	}
+	/** 创建 key，返回明文（仅此一次）。 */
+	create(name) {
+		const entry = {
+			id: newId(),
+			name: name.trim() !== "" ? name.trim() : `Key ${this.keys.length + 1}`,
+			key: generateKey(),
+			isActive: true,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		this.keys.push(entry);
+		this.save();
+		return {
+			entry,
+			key: entry.key
+		};
+	}
+	remove(id) {
+		const before = this.keys.length;
+		this.keys = this.keys.filter((k) => k.id !== id);
+		if (this.keys.length === before) return false;
+		this.save();
+		return true;
+	}
+	setActive(id, isActive) {
+		const k = this.keys.find((k) => k.id === id);
+		if (!k) return false;
+		k.isActive = isActive;
+		this.save();
+		return true;
+	}
+	/** requireApiKey 开关。 */
+	get requireApiKey() {
+		return this.require;
+	}
+	set requireApiKey(v) {
+		this.require = v;
+		this.save();
+	}
+	/** 校验 Bearer key：requireApiKey 关 → 放行；开 → 库内启用 key 或 TW2A_API_KEY env。 */
+	verify(bearer) {
+		if (!this.require) return true;
+		if (bearer === void 0 || bearer === "") return false;
+		if (this.keys.some((k) => k.isActive && k.key === bearer)) return true;
+		const envKey = process.env[API_KEY_REF];
+		return envKey !== void 0 && envKey !== "" && envKey === bearer;
+	}
+};
+//#endregion
+//#region src/suppliers/loader.ts
+/**
+* 供应商 loader —— 扫描 suppliers 目录下的 *.js，动态 import，按契约包装成
+* 内部 Supplier，并暴露"能力检测"(capabilities)供通用路由/前端按能力渲染。
+*
+* 加载来源（两处，profile 优先）：
+*   1. 内置：<plugin>/lib/suppliers/*.js（随插件分发）
+*   2. 用户：~/.dsh/profiles/web/suppliers/*.js（用户自定义）
+*/
+function isFn(v) {
+	return typeof v === "function";
+}
+/** 从模块导出解析出供应商模块对象（支持 export default / 命名导出 / factory）。 */
+function resolveModule(mod, file) {
+	const cand = mod.default ?? mod;
+	if (typeof cand === "function") return cand;
+	if (typeof cand !== "object" || cand === null) throw new Error(`供应商模块无效: ${file}`);
+	if (typeof cand.id !== "string" || cand.id === "") throw new Error(`供应商缺少 id: ${file}`);
+	if (typeof cand.name !== "string" || cand.name === "") throw new Error(`供应商缺少 name: ${file}`);
+	if (typeof cand.testModel !== "function") throw new Error(`供应商 ${cand.id} 缺少 testModel（必要差异化能力）: ${file}`);
+	return cand;
+}
+/** 加载单个供应商文件，返回模块对象或抛错。 */
+async function importSupplierFile(file) {
+	return resolveModule(await import(pathToFileURL(file).href), file);
+}
+/**
+* 差异化能力（供应商 js 实现；其余为通用能力由核心提供）。
+* testModel 是必要差异化能力（核心必须），不在此列。
+*/
+const DIFF_CAPS = [
+	"generateLoginUrl",
+	"completeLogin",
+	"addApiKey",
+	"pollLogin",
+	"checkinNow"
+];
+/** 从文件构造 LoadedSupplier。 */
+async function loadOne(file, env, source) {
+	const mod = await importSupplierFile(file);
+	let instance;
+	if (typeof mod === "function") {
+		instance = mod(env);
+		if (typeof instance !== "object" || instance === null || typeof instance.id !== "string" || instance.id === "") throw new Error(`供应商 factory 返回无效: ${file}`);
+		if (typeof instance.testModel !== "function") throw new Error(`供应商 ${instance.id} 缺少 testModel（必要差异化能力）: ${file}`);
+	} else instance = mod;
+	return wrapModule(instance, env, file, source);
+}
+/**
+* 从 SupplierModule 实例构造 LoadedSupplier（能力检测 + Supplier 包装）。
+* 文件加载（loadOne）与外部插件供应商（cordis service）共用。
+*/
+function wrapModule(instance, env, source, kind = "external") {
+	if (typeof instance !== "object" || instance === null || typeof instance.id !== "string" || instance.id === "") throw new Error(`供应商模块无效: ${source}`);
+	if (typeof instance.testModel !== "function") throw new Error(`供应商 ${instance.id} 缺少 testModel（必要差异化能力）: ${source}`);
+	const capabilities = /* @__PURE__ */ new Set();
+	for (const key of DIFF_CAPS) if (isFn(instance[key])) capabilities.add(key);
+	const supplier = {
+		id: instance.id,
+		name: instance.name,
+		priority: instance.priority ?? 0,
+		icon: instance.icon,
+		status: () => instance.status(),
+		listModels: (force) => instance.listModels(force),
+		modelsWithEnabled: (force) => {
+			const cfg = env.store.get(instance.id);
+			const disabled = new Set(cfg.disabled);
+			const custom = new Set(cfg.custom);
+			return Promise.resolve(instance.listModels(force)).then((list) => list.map((mm) => ({
+				...mm,
+				enabled: !disabled.has(mm.id),
+				custom: custom.has(mm.id) ? true : void 0
+			})));
+		},
+		getAlias: () => env.store.get(instance.id).alias || instance.getAlias(),
+		customModelIds: () => [...env.store.get(instance.id).custom],
+		chatCompletions: (req, res) => instance.chatCompletions(req, res),
+		testModel: (id) => instance.testModel(id),
+		removeLink: isFn(instance.removeLink) ? (uid) => instance.removeLink(uid) : void 0,
+		dispose: () => instance.dispose()
+	};
+	supplier.__module = instance;
+	return {
+		supplier,
+		capabilities,
+		source: kind
+	};
+}
+/** 扫描目录下所有 *.js（一层）。 */
+function scanDir(dir) {
+	try {
+		return readdirSync(dir).filter((f) => f.endsWith(".js")).map((f) => join(dir, f));
+	} catch {
+		return [];
+	}
+}
+/** 加载全部供应商（内置 + 用户，用户覆盖内置同 id）。 */
+async function loadSuppliers(opts) {
+	const env = {
+		dataDir: opts.dataDir,
+		log: opts.log,
+		store: opts.store,
+		credentials: opts.credentials
+	};
+	const byId = /* @__PURE__ */ new Map();
+	const errors = [];
+	const files = [...scanDir(opts.builtinDir).map((f) => ({
+		f,
+		builtin: true
+	})), ...scanDir(opts.userDir).map((f) => ({
+		f,
+		builtin: false
+	}))];
+	for (const { f, builtin } of files) try {
+		const loaded = await loadOne(f, env, builtin ? "builtin" : "user");
+		if (byId.get(loaded.supplier.id) && builtin) continue;
+		byId.set(loaded.supplier.id, loaded);
+		opts.log(`supplier ${loaded.supplier.id} loaded (${builtin ? "builtin" : "user"}) from ${basename(f)}`);
+	} catch (err) {
+		errors.push({
+			id: basename(f, ".js"),
+			file: f,
+			error: err.message
+		});
+		opts.log(`supplier load failed ${basename(f)}: ${err.message}`);
+	}
+	return {
+		suppliers: [...byId.values()],
+		errors
+	};
+}
+//#endregion
+//#region src/suppliers/registry.ts
+function writeJson$1(res, status, body) {
+	const payload = JSON.stringify(body);
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"content-length": Buffer.byteLength(payload)
+	});
+	res.end(payload);
+}
+async function readBody$1(req, limit = 65536) {
+	const chunks = [];
+	let size = 0;
+	return await new Promise((resolve, reject) => {
+		req.on("data", (chunk) => {
+			size += chunk.length;
+			if (size > limit) {
+				reject(/* @__PURE__ */ new Error("body_too_large"));
+				req.destroy();
+				return;
+			}
+			chunks.push(chunk);
+		});
+		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+		req.on("error", reject);
+	});
+}
+function cap(set, key) {
+	return set.has(key);
+}
+/** 模型列表统一缓存（dsh-router 核心管；插件只管拉取，不缓存）。 */
+const modelsCache = /* @__PURE__ */ new Map();
+const MODELS_TTL_MS = 6e4;
+/** 拉取并缓存某供应商模型（force 时强制刷新）。custom 模型并入显示。 */
+async function cachedModels(s, cfg, force = false) {
+	const hit = modelsCache.get(s.id);
+	if (!force && hit && Date.now() - hit.fetchedAt < MODELS_TTL_MS) return hit.models;
+	const list = await Promise.resolve(s.listModels());
+	const custom = new Set(cfg.custom);
+	const disabled = new Set(cfg.disabled);
+	const models = list.map((mm) => ({
+		...mm,
+		enabled: !disabled.has(mm.id),
+		custom: custom.has(mm.id) ? true : void 0
+	}));
+	const seen = new Set(models.map((mm) => mm.id));
+	for (const id of custom) if (!seen.has(id)) {
+		seen.add(id);
+		models.push({
+			id,
+			enabled: !disabled.has(id),
+			custom: true
+		});
+	}
+	modelsCache.set(s.id, {
+		models,
+		fetchedAt: Date.now()
+	});
+	return models;
+}
+function mod(s) {
+	return s.supplier.__module ?? {};
+}
+/** 为一个供应商生成端点（通用 + 差异化，返回 route 列表）。 */
+function supplierRoutes(base, loaded, store) {
+	const s = loaded.supplier;
+	const m = mod(loaded);
+	const c = loaded.capabilities;
+	const p = `${base}/suppliers/${s.id}`;
+	const routes = [];
+	routes.push({
+		kind: "exact",
+		path: `${p}/models`,
+		handler: async (_req, res) => {
+			const models = await cachedModels(s, store.get(s.id));
+			writeJson$1(res, 200, {
+				ok: true,
+				alias: s.getAlias(),
+				models
+			});
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/alias`,
+		handler: async (req, res) => {
+			const clean = (JSON.parse(await readBody$1(req)).alias ?? "").trim();
+			if (clean === "" || !/^[A-Za-z0-9_-]+$/.test(clean)) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "前缀只能包含字母、数字、- 和 _"
+				});
+				return;
+			}
+			store.setAlias(s.id, clean);
+			writeJson$1(res, 200, { ok: true });
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/models/toggle`,
+		handler: async (req, res) => {
+			const body = JSON.parse(await readBody$1(req));
+			const cfg = store.get(s.id);
+			const models = await cachedModels(s, cfg);
+			if (!body.id || !models.some((mm) => mm.id === body.id)) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "模型不存在"
+				});
+				return;
+			}
+			store.setModelEnabled(s.id, body.id, !!body.enabled);
+			modelsCache.delete(s.id);
+			writeJson$1(res, 200, { ok: true });
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/models/add`,
+		handler: async (req, res) => {
+			const id = (JSON.parse(await readBody$1(req)).id ?? "").trim();
+			if (id === "") {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "模型 id 不能为空"
+				});
+				return;
+			}
+			if ((await cachedModels(s, store.get(s.id))).some((mm) => mm.id === id)) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: `模型 ${id} 已存在`
+				});
+				return;
+			}
+			store.addCustomModel(s.id, id);
+			modelsCache.delete(s.id);
+			writeJson$1(res, 200, { ok: true });
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/models/remove`,
+		handler: async (req, res) => {
+			const body = JSON.parse(await readBody$1(req));
+			const cfg = store.get(s.id);
+			if (!body.id || !cfg.custom.includes(body.id)) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: `模型 ${body.id} 不是自定义模型`
+				});
+				return;
+			}
+			store.removeCustomModel(s.id, body.id);
+			modelsCache.delete(s.id);
+			writeJson$1(res, 200, { ok: true });
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/models/bulk`,
+		handler: async (req, res) => {
+			const body = JSON.parse(await readBody$1(req));
+			const models = await cachedModels(s, store.get(s.id));
+			store.setAllModelsEnabled(s.id, !!body.enabled, models.map((mm) => mm.id));
+			modelsCache.delete(s.id);
+			writeJson$1(res, 200, { ok: true });
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/pool/order`,
+		handler: async (req, res) => {
+			if (req.method === "GET") {
+				writeJson$1(res, 200, {
+					ok: true,
+					order: store.get(s.id).poolOrder
+				});
+				return;
+			}
+			const body = JSON.parse(await readBody$1(req));
+			if (!Array.isArray(body.uids) || body.uids.some((u) => typeof u !== "string")) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "顺序必须是 uid 数组"
+				});
+				return;
+			}
+			store.setPoolOrder(s.id, body.uids);
+			writeJson$1(res, 200, { ok: true });
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/pool/strategy`,
+		handler: async (req, res) => {
+			if (req.method === "GET") {
+				writeJson$1(res, 200, {
+					ok: true,
+					strategy: store.get(s.id).poolStrategy
+				});
+				return;
+			}
+			const body = JSON.parse(await readBody$1(req));
+			if (body.strategy !== "fallback" && body.strategy !== "round-robin") {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "策略无效"
+				});
+				return;
+			}
+			store.setPoolStrategy(s.id, body.strategy);
+			writeJson$1(res, 200, { ok: true });
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/models/fetch`,
+		handler: async (_req, res) => {
+			writeJson$1(res, 200, {
+				ok: true,
+				models: await cachedModels(s, store.get(s.id), true)
+			});
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/models/test`,
+		handler: async (req, res) => {
+			const body = JSON.parse(await readBody$1(req));
+			const result = await s.testModel(body.id ?? "");
+			writeJson$1(res, result.ok ? 200 : 400, result);
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/login`,
+		handler: async (_req, res) => {
+			if (!cap(c, "generateLoginUrl")) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "该供应商不支持添加链接"
+				});
+				return;
+			}
+			const r = await m.generateLoginUrl.call(loaded.supplier);
+			if (typeof r === "string") writeJson$1(res, 200, {
+				ok: true,
+				loginUrl: r
+			});
+			else writeJson$1(res, r.ok === false ? 400 : 200, r);
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/login/callback`,
+		handler: async (req, res) => {
+			if (!cap(c, "completeLogin")) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "该供应商不支持添加链接"
+				});
+				return;
+			}
+			const body = JSON.parse(await readBody$1(req));
+			try {
+				writeJson$1(res, 200, {
+					ok: true,
+					account: await m.completeLogin.call(loaded.supplier, body.callbackUrl ?? "")
+				});
+			} catch (err) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: err.message
+				});
+			}
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/links/add`,
+		handler: async (req, res) => {
+			if (!cap(c, "addApiKey")) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "该供应商不支持添加 API key"
+				});
+				return;
+			}
+			const body = JSON.parse(await readBody$1(req));
+			try {
+				const r = await m.addApiKey.call(loaded.supplier, {
+					name: (body.name ?? "").trim(),
+					apiKey: (body.apiKey ?? "").trim()
+				});
+				writeJson$1(res, r.ok === false ? 400 : 200, r);
+			} catch (err) {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: err.message
+				});
+			}
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/links/remove`,
+		handler: async (req, res) => {
+			if (typeof s.removeLink !== "function") {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "该供应商不支持删除链接"
+				});
+				return;
+			}
+			const body = JSON.parse(await readBody$1(req));
+			const ok = await s.removeLink(body.uid ?? "");
+			writeJson$1(res, ok ? 200 : 404, ok ? { ok: true } : {
+				ok: false,
+				error: "link not found"
+			});
+		}
+	});
+	routes.push({
+		kind: "exact",
+		path: `${p}/checkin/rule`,
+		handler: async (req, res) => {
+			if (req.method === "GET") {
+				writeJson$1(res, 200, {
+					ok: true,
+					rule: store.get(s.id).checkinRule
+				});
+				return;
+			}
+			const body = JSON.parse(await readBody$1(req));
+			if (body.rule !== "all" && body.rule !== "first") {
+				writeJson$1(res, 400, {
+					ok: false,
+					error: "rule 必须是 all 或 first"
+				});
+				return;
+			}
+			store.setCheckinRule(s.id, body.rule);
+			writeJson$1(res, 200, { ok: true });
+		}
+	});
+	if (cap(c, "checkinNow")) routes.push({
+		kind: "exact",
+		path: `${p}/checkin`,
+		handler: async (_req, res) => {
+			try {
+				const result = await m.checkinNow.call(loaded.supplier);
+				writeJson$1(res, result.ok === false ? 400 : 200, result);
+			} catch (err) {
+				writeJson$1(res, 500, {
+					ok: false,
+					error: err.message
+				});
+			}
+		}
+	});
+	return routes;
+}
+//#endregion
+//#region src/supplier-config.ts
+/**
+* 通用供应商配置 —— dsh-router 核心能力,按供应商 id 存储。
+*
+* 通用能力(所有供应商共享,供应商 js 不需要实现)：
+*   - 别名 alias(前缀,模型全名 = alias/id)
+*   - 模型管理:启用/禁用 disabled、自定义 custom
+*   - 连接池:poolOrder(拖动排序)、poolStrategy(回退/轮询)
+*   - 签到规则 checkinRule(所有链接 / 首个链接)
+*
+* 持久化到 data/supplier-config.json。
+*/
+/** 通用供应商配置存储。 */
+var SupplierConfigStore = class {
+	fp = "";
+	bySupplier = /* @__PURE__ */ new Map();
+	constructor(stateFile) {
+		this.fp = stateFile ? join(dirname(stateFile), "supplier-config.json") : "";
+		this.load();
+	}
+	/** 读取某供应商配置(不存在则返回默认并注册)。 */
+	get(supplierId) {
+		let cfg = this.bySupplier.get(supplierId);
+		if (!cfg) {
+			cfg = {
+				alias: "",
+				disabled: [],
+				custom: [],
+				poolOrder: [],
+				poolStrategy: "fallback",
+				checkinRule: "all"
+			};
+			this.bySupplier.set(supplierId, cfg);
+		}
+		return cfg;
+	}
+	setAlias(supplierId, alias) {
+		this.get(supplierId).alias = alias;
+		this.saveLocked();
+	}
+	setModelEnabled(supplierId, modelId, enabled) {
+		const cfg = this.get(supplierId);
+		cfg.disabled = enabled ? cfg.disabled.filter((m) => m !== modelId) : [.../* @__PURE__ */ new Set([...cfg.disabled, modelId])];
+		this.saveLocked();
+	}
+	setAllModelsEnabled(supplierId, enabled, allModelIds) {
+		const cfg = this.get(supplierId);
+		cfg.disabled = enabled ? [] : [...new Set(allModelIds)];
+		this.saveLocked();
+	}
+	addCustomModel(supplierId, modelId) {
+		const cfg = this.get(supplierId);
+		if (!cfg.custom.includes(modelId)) cfg.custom.push(modelId);
+		this.saveLocked();
+	}
+	removeCustomModel(supplierId, modelId) {
+		const cfg = this.get(supplierId);
+		cfg.custom = cfg.custom.filter((m) => m !== modelId);
+		cfg.disabled = cfg.disabled.filter((m) => m !== modelId);
+		this.saveLocked();
+	}
+	setPoolOrder(supplierId, uids) {
+		this.get(supplierId).poolOrder = [...new Set(uids)];
+		this.saveLocked();
+	}
+	setPoolStrategy(supplierId, strategy) {
+		if (strategy !== "fallback" && strategy !== "round-robin") return;
+		this.get(supplierId).poolStrategy = strategy;
+		this.saveLocked();
+	}
+	setCheckinRule(supplierId, rule) {
+		if (rule !== "all" && rule !== "first") return;
+		this.get(supplierId).checkinRule = rule;
+		this.saveLocked();
+	}
+	load() {
+		if (this.fp === "") return;
+		let f;
+		try {
+			f = JSON.parse(readFileSync(this.fp, "utf8"));
+		} catch {
+			return;
+		}
+		for (const [id, c] of Object.entries(f.suppliers ?? {})) this.bySupplier.set(id, {
+			alias: typeof c.alias === "string" ? c.alias : "",
+			disabled: Array.isArray(c.disabled) ? c.disabled.filter((m) => typeof m === "string") : [],
+			custom: Array.isArray(c.custom) ? c.custom.filter((m) => typeof m === "string") : [],
+			poolOrder: Array.isArray(c.poolOrder) ? c.poolOrder.filter((u) => typeof u === "string") : [],
+			poolStrategy: c.poolStrategy === "round-robin" ? "round-robin" : "fallback",
+			checkinRule: c.checkinRule === "first" ? "first" : "all"
+		});
+	}
+	saveLocked() {
+		if (this.fp === "") return;
+		const f = { suppliers: {} };
+		for (const [id, cfg] of this.bySupplier) f.suppliers[id] = {
+			alias: cfg.alias,
+			disabled: [...cfg.disabled],
+			custom: [...cfg.custom],
+			poolOrder: [...cfg.poolOrder],
+			poolStrategy: cfg.poolStrategy,
+			checkinRule: cfg.checkinRule
+		};
+		try {
+			const dir = dirname(this.fp);
+			if (dir !== "" && dir !== ".") mkdirSync(dir, { recursive: true });
+			const raw = JSON.stringify(f, null, 2);
+			const tmp = this.fp + ".tmp";
+			writeFileSync(tmp, raw, { mode: 384 });
+			renameSync(tmp, this.fp);
+		} catch {}
+	}
+};
+//#endregion
+//#region src/credential-store.ts
+/**
+* 通用凭证存储 —— dsh-router 核心统一管账号凭证（SQLite，参考 9router 的
+* providerConnections 表：凭证作为不透明 JSON blob 存单表 data 列）。
+*
+* 凭证是供应商特有的不透明数据（js 定义格式），核心只负责存储/增删/生命周期，
+* 不解析内容。库文件：`{authDir}/credentials.sqlite`，表：
+*   credentials(supplier TEXT, uid TEXT, data TEXT, PRIMARY KEY(supplier, uid))
+*/
+/** 通用凭证存储。 */
+var CredentialStore = class {
+	db;
+	constructor(authDir) {
+		if (authDir !== "" && authDir !== ".") mkdirSync(authDir, { recursive: true });
+		const dbFile = join(authDir, "credentials.sqlite");
+		this.db = new DatabaseSync(dbFile);
+		this.db.exec(`CREATE TABLE IF NOT EXISTS credentials (
+      supplier TEXT NOT NULL,
+      uid TEXT NOT NULL,
+      data TEXT NOT NULL,
+      PRIMARY KEY (supplier, uid)
+    )`);
+	}
+	/** 某供应商的所有凭证 uid。 */
+	list(supplierId) {
+		return this.db.prepare("SELECT uid FROM credentials WHERE supplier = ? ORDER BY rowid").all(supplierId).map((r) => r.uid);
+	}
+	/** 读某凭证（不透明 blob）。不存在返回 undefined。 */
+	get(supplierId, uid) {
+		const row = this.db.prepare("SELECT data FROM credentials WHERE supplier = ? AND uid = ?").get(supplierId, uid);
+		if (row === void 0) return void 0;
+		try {
+			return JSON.parse(row.data);
+		} catch {
+			return;
+		}
+	}
+	/** 存凭证（upsert）。 */
+	save(supplierId, uid, data) {
+		this.db.prepare("INSERT INTO credentials (supplier, uid, data) VALUES (?, ?, ?) ON CONFLICT(supplier, uid) DO UPDATE SET data = excluded.data").run(supplierId, uid, JSON.stringify(data));
+	}
+	/** 删凭证。 */
+	remove(supplierId, uid) {
+		this.db.prepare("DELETE FROM credentials WHERE supplier = ? AND uid = ?").run(supplierId, uid);
+	}
+	/** 关闭连接（可选）。 */
+	close() {
+		this.db.close();
+	}
+};
+//#endregion
+//#region src/index.ts
+/** Plugin identity for cordis.yml rows. */
+const name = "dsh-router";
+/** Services required before mounting: the webserver (routes) + llm (设置-模型). */
+const inject = ["webServer", "llm"];
+function writeJson(res, status, body) {
+	const payload = JSON.stringify(body);
+	res.writeHead(status, {
+		"Content-Type": "application/json; charset=utf-8",
+		"Cache-Control": "no-store"
+	});
+	res.end(payload);
+}
+function readBody(req, limit) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		let size = 0;
+		req.on("data", (chunk) => {
+			size += chunk.length;
+			if (size > limit) {
+				reject(/* @__PURE__ */ new Error("body_too_large"));
+				req.destroy();
+				return;
+			}
+			chunks.push(chunk);
+		});
+		req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+		req.on("error", reject);
+	});
+}
+/** Plugin body. */
+function apply(rawContext) {
+	const ctx = rawContext;
+	const log = (msg) => ctx.logger.info(`[dsh-router] ${msg}`);
+	const stateFile = process.env.TW2A_STATE_FILE ?? "data/state.json";
+	const store = new SupplierConfigStore(stateFile);
+	const credentials = new CredentialStore(process.env.TW2A_AUTH_DIR ?? join(dirname(stateFile), "auths"));
+	const router = new Router(stateFile);
+	const keys = new KeysStore(stateFile);
+	const disposers = [];
+	const route = (path, handler) => {
+		disposers.push(ctx.webServer.register({
+			kind: "exact",
+			path,
+			handler
+		}));
+	};
+	const loadedSuppliers = [];
+	/** 每个供应商的 webServer 路由注销函数（注销时单独清理）。 */
+	const supplierDisposers = /* @__PURE__ */ new Map();
+	const registerSupplierRoutes = (loaded) => {
+		const dis = [];
+		for (const r of supplierRoutes(ROUTER_API_BASE, loaded, store)) dis.push(ctx.webServer.register(r));
+		supplierDisposers.set(loaded.supplier.id, dis);
+		log(`supplier routes registered: ${loaded.supplier.id}`);
+	};
+	/** 注销一个供应商（路由 + 路由器 + 列表）。 */
+	const unregisterSupplier = (id) => {
+		const i = loadedSuppliers.findIndex((l) => l.supplier.id === id);
+		if (i < 0) return;
+		const [loaded] = loadedSuppliers.splice(i, 1);
+		for (const dispose of supplierDisposers.get(id) ?? []) dispose();
+		supplierDisposers.delete(id);
+		router.removeSupplier(id);
+		loaded?.supplier.dispose();
+		log(`supplier unregistered: ${id}`);
+	};
+	const dataDir = dirname(stateFile);
+	const registerLoaded = (loaded) => {
+		loadedSuppliers.push(loaded);
+		router.add(loaded.supplier);
+		registerSupplierRoutes(loaded);
+	};
+	/** 当前由 router.suppliers service 加载的供应商 id（外部插件卸载时全部注销）。 */
+	let externalSupplierIds = [];
+	const loadExternal = (suppliers) => {
+		for (const [sid, factory] of Object.entries(suppliers)) {
+			if (externalSupplierIds.includes(sid)) continue;
+			try {
+				const loaded = wrapModule(factory({
+					dataDir,
+					log,
+					store,
+					credentials
+				}), {
+					dataDir,
+					log,
+					store,
+					credentials
+				}, `service router.suppliers.${sid}`);
+				registerLoaded(loaded);
+				externalSupplierIds.push(loaded.supplier.id);
+				log(`external supplier loaded: ${sid}`);
+			} catch (err) {
+				ctx.logger.warn(`[dsh-router] external supplier ${sid} load failed: ${err.message}`);
+			}
+		}
+	};
+	const unloadExternal = () => {
+		for (const id of externalSupplierIds.splice(0)) unregisterSupplier(id);
+	};
+	ctx.on("internal/service", (name, value) => {
+		if (name !== "router.suppliers") return;
+		if (value) loadExternal(value);
+		else unloadExternal();
+	});
+	ctx.inject(["router.suppliers"], (sctx) => {
+		const c = sctx;
+		const service = c.get?.("router.suppliers") ?? c.router?.suppliers;
+		if (service) loadExternal(service);
+	});
+	(async () => {
+		try {
+			const userDir = join(process.env.DSH_PROFILE_DIR ?? join(process.env.HOME ?? "", ".dsh", "profiles", "web"), "suppliers");
+			const { suppliers, errors } = await loadSuppliers({
+				builtinDir: join(import.meta.dirname, "suppliers"),
+				userDir,
+				dataDir,
+				store,
+				credentials,
+				log
+			});
+			for (const err of errors) ctx.logger.warn(`[dsh-router] ${err.error}`);
+			for (const loaded of suppliers) registerLoaded(loaded);
+			log(`suppliers loaded: ${suppliers.map((s) => s.supplier.id).join(", ") || "(none)"}`);
+		} catch (err) {
+			ctx.logger.warn(`[dsh-router] suppliers load failed: ${err.message}`);
+		}
+	})();
+	const withV1Auth = (handler) => {
+		return async (req, res) => {
+			const authz = req.headers.authorization ?? "";
+			const bearer = authz.length >= 7 && authz.slice(0, 7).toLowerCase() === "Bearer ".toLowerCase() ? authz.slice(7) : void 0;
+			if (!keys.verify(bearer)) {
+				writeJson(res, 401, { error: {
+					message: "missing or invalid API key",
+					type: "api_error",
+					code: "invalid_api_key"
+				} });
+				return;
+			}
+			await handler(req, res);
+		};
+	};
+	route("/v1/models", withV1Auth(async (_req, res) => {
+		writeJson(res, 200, {
+			object: "list",
+			data: await router.listModels()
+		});
+	}));
+	route("/v1/chat/completions", withV1Auth(async (req, res) => {
+		let body;
+		try {
+			body = await readBody(req, 8 << 20);
+		} catch {
+			writeJson(res, 413, { error: {
+				message: "request body too large",
+				type: "api_error",
+				code: "request_too_large"
+			} });
+			return;
+		}
+		let peek;
+		try {
+			peek = JSON.parse(body);
+		} catch {
+			writeJson(res, 400, { error: {
+				message: "invalid JSON body",
+				type: "api_error",
+				code: "invalid_request"
+			} });
+			return;
+		}
+		await router.chatCompletions({
+			rawBody: body,
+			stream: !!peek.stream,
+			model: typeof peek.model === "string" ? peek.model : ""
+		}, res);
+	}));
+	route(`${ROUTER_API_BASE}/health`, (_req, res) => {
+		const { suppliers } = router.status();
+		writeJson(res, 200, {
+			ok: true,
+			suppliers: suppliers.map((s) => {
+				const loaded = loadedSuppliers.find((l) => l.supplier.id === s.id);
+				return {
+					id: s.id,
+					name: s.name,
+					icon: loaded?.supplier.icon,
+					capabilities: loaded ? [...loaded.capabilities] : [],
+					source: loaded?.source ?? "external"
+				};
+			})
+		});
+	});
+	route(`${ROUTER_API_BASE}/status`, (_req, res) => {
+		const { suppliers } = router.status();
+		writeJson(res, 200, {
+			ok: true,
+			accounts: suppliers.flatMap((s) => s.accounts.map((a) => ({
+				...a,
+				supplier: s.id
+			})))
+		});
+	});
+	route(`${ROUTER_API_BASE}/models`, async (_req, res) => {
+		try {
+			writeJson(res, 200, {
+				ok: true,
+				models: await router.listModels()
+			});
+		} catch (error) {
+			writeJson(res, 500, {
+				ok: false,
+				error: error.message
+			});
+		}
+	});
+	route(`${ROUTER_API_BASE}/combos`, async (_req, res) => {
+		const [combos, groups] = await Promise.all([router.combos(), router.supplierModels().catch(() => [])]);
+		writeJson(res, 200, {
+			ok: true,
+			combos,
+			groups,
+			aliases: router.aliases()
+		});
+	});
+	route(`${ROUTER_API_BASE}/combos/create`, async (req, res) => {
+		let body;
+		try {
+			body = JSON.parse(await readBody(req, 65536));
+		} catch {
+			writeJson(res, 400, {
+				ok: false,
+				error: "invalid JSON body"
+			});
+			return;
+		}
+		const result = router.createCombo(body.name ?? "", body.strategy ?? "fallback", body.models ?? []);
+		writeJson(res, result.ok ? 200 : 400, result);
+	});
+	route(`${ROUTER_API_BASE}/combos/update`, async (req, res) => {
+		let body;
+		try {
+			body = JSON.parse(await readBody(req, 65536));
+		} catch {
+			writeJson(res, 400, {
+				ok: false,
+				error: "invalid JSON body"
+			});
+			return;
+		}
+		const result = router.updateCombo(body.id ?? "", body.name ?? "", body.strategy ?? "fallback", body.models ?? []);
+		writeJson(res, result.ok ? 200 : 400, result);
+	});
+	route(`${ROUTER_API_BASE}/combos/remove`, async (req, res) => {
+		let body;
+		try {
+			body = JSON.parse(await readBody(req, 65536));
+		} catch {
+			writeJson(res, 400, {
+				ok: false,
+				error: "invalid JSON body"
+			});
+			return;
+		}
+		const result = router.removeCombo(body.id ?? "");
+		writeJson(res, result.ok ? 200 : 400, result);
+	});
+	route(`${ROUTER_API_BASE}/keys`, async (req, res) => {
+		if (req.method === "POST") {
+			let body;
+			try {
+				body = JSON.parse(await readBody(req, 65536));
+			} catch {
+				writeJson(res, 400, {
+					ok: false,
+					error: "invalid JSON body"
+				});
+				return;
+			}
+			const { key } = keys.create(typeof body.name === "string" ? body.name : "");
+			writeJson(res, 201, {
+				ok: true,
+				key
+			});
+			return;
+		}
+		writeJson(res, 200, {
+			ok: true,
+			keys: keys.list()
+		});
+	});
+	route(`${ROUTER_API_BASE}/keys/delete`, async (req, res) => {
+		let body;
+		try {
+			body = JSON.parse(await readBody(req, 65536));
+		} catch {
+			writeJson(res, 400, {
+				ok: false,
+				error: "invalid JSON body"
+			});
+			return;
+		}
+		const ok = typeof body.id === "string" && keys.remove(body.id);
+		writeJson(res, ok ? 200 : 404, ok ? { ok: true } : {
+			ok: false,
+			error: "key not found"
+		});
+	});
+	route(`${ROUTER_API_BASE}/keys/toggle`, async (req, res) => {
+		let body;
+		try {
+			body = JSON.parse(await readBody(req, 65536));
+		} catch {
+			writeJson(res, 400, {
+				ok: false,
+				error: "invalid JSON body"
+			});
+			return;
+		}
+		const ok = typeof body.id === "string" && keys.setActive(body.id, !!body.isActive);
+		writeJson(res, ok ? 200 : 404, ok ? { ok: true } : {
+			ok: false,
+			error: "key not found"
+		});
+	});
+	route(`${ROUTER_API_BASE}/settings`, async (req, res) => {
+		if (req.method === "PATCH") {
+			let body;
+			try {
+				body = JSON.parse(await readBody(req, 65536));
+			} catch {
+				writeJson(res, 400, {
+					ok: false,
+					error: "invalid JSON body"
+				});
+				return;
+			}
+			if (typeof body.requireApiKey === "boolean") keys.requireApiKey = body.requireApiKey;
+		}
+		writeJson(res, 200, {
+			ok: true,
+			requireApiKey: keys.requireApiKey
+		});
+	});
+	if (ctx.llm !== void 0) {
+		const LLM_NS = "llm-dsh-router";
+		try {
+			const providerReg = ctx.llm.registerConfigurableProviders([{
+				provider: "router",
+				displayName: "Router",
+				settingsNs: LLM_NS,
+				settingsPath: []
+			}]);
+			disposers.push(providerReg);
+			disposers.push(ctx.llm.registerModelDiscovery(LLM_NS, async () => {
+				return (await router.combos()).map((c) => ({ id: c.name }));
+			}));
+			disposers.push(ctx.llm.registerAdapter(["router"], new RouterAdapter("http://localhost:3080/v1", { comboModels: async () => (await router.combos()).map((c) => ({ id: c.name })) })));
+			log("llm provider (Router) + discovery + adapter registered ok");
+		} catch (err) {
+			ctx.logger.warn(`[dsh-router] llm registration failed: ${err.message}`);
+		}
+	} else log("llm service NOT available — skip 设置-模型 registration");
+	route(`${ROUTER_API_BASE}/debug/llm`, async (_req, res) => {
+		let directory = "n/a";
+		let registeredProviders = "n/a";
+		try {
+			directory = ctx.llm !== void 0 ? ctx.llm.listConfigurableProviders() : "no llm";
+		} catch (err) {
+			directory = `error: ${err.message}`;
+		}
+		try {
+			registeredProviders = ctx.llm !== void 0 ? ctx.llm.listProviders() : "no llm";
+		} catch (err) {
+			registeredProviders = `error: ${err.message}`;
+		}
+		writeJson(res, 200, {
+			ok: true,
+			llmAvailable: ctx.llm !== void 0,
+			directory,
+			registeredProviders
+		});
+	});
+	ctx.effect(() => () => {
+		for (const dispose of disposers.splice(0)) dispose();
+		router.dispose();
+	}, "dsh-router: teardown");
+}
+//#endregion
+export { apply, inject, name };