magpie-scnet-auth 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,42 @@
+MIT License
+
+
+
+Copyright (c) 2026 SCNet provider plugin contributors
+
+
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+
+of this software and associated documentation files (the "Software"), to deal
+
+in the Software without restriction, including without limitation the rights
+
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+
+copies of the Software, and to permit persons to whom the Software is
+
+furnished to do so, subject to the following conditions:
+
+
+
+The above copyright notice and this permission notice shall be included in all
+
+copies or substantial portions of the Software.
+
+
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+
+SOFTWARE.
+

package/README.md

@@ -1,3 +1,145 @@
-# Temporary Holding Version
+# magpie-scnet-auth
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Magpie provider plugin for SCNet (scnet.cn) LLM models.**
+
+English | [简体中文](README.zh-CN.md)
+
+Once installed, the models served by the SCNet platform appear in magpie as a `scnet` provider and become available to every agent that magpie drives (Claude Code, Codex, dsh, and others).
+
+- Sign in with an SCNet username and password — no desktop client, no packet capture
+- Speaks standard OpenAI Chat Completions
+- Passes through tool calls and reasoning content
+
+---
+
+## Supported models
+
+The platform `GET /models` endpoint returns 32 models, including:
+
+| Family | Models |
+|---|---|
+| Zhipu | GLM-5.3-Flash, GLM-5.3, GLM-5.2, GLM-5.1, GLM-5 |
+| Qwen | Qwen3.8-Max, Qwen3.8-Flash, Qwen3.7-Max, Qwen3.7-Plus, Qwen3.6-Plus, Qwen3-235B-A22B |
+| DeepSeek | DeepSeek-V4-Pro-0813, DeepSeek-V4.1-Flash, DeepSeek-V4.1-Flash-1017, DeepSeek-V4-Flash-0731 |
+| Kimi | Kimi-K3.1-Pro, Kimi-K3, Kimi-K2.7-Code, Kimi-K2.6 |
+| MiniMax | MiniMax-M3.1-Flash, MiniMax-M3, MiniMax-M2.7, MiniMax-M2.5 |
+| Others | SCNet-Max, Spark-X2.5, MiMo-V2.5-Pro |
+
+**Quota is granted per model.** An account does not necessarily have balance for every model; calls to an unprovisioned model return `402 Insufficient Balance`. The plugin lists all models by default and offers filtering (see Configuration).
+
+---
+
+## Install
+
+```bash
+# From a local folder
+magpie plugin add /path/to/magpie-scnet-auth
+
+# From GitHub
+magpie plugin add github:RrOrange/magpie-scnet-auth
+
+# From npm, once published
+magpie plugin add magpie-scnet-auth
+```
+
+After installation, the provider **SCNet** appears on the Providers page in magpie.
+
+---
+
+## Sign in
+
+### Username and password (recommended)
+
+In the magpie window:
+
+1. Providers → **SCNet** → click **＋**
+2. Choose **Sign in with SCNet username and password**
+3. Enter the username / phone number → Next → enter the password → Sign in
+
+The password is used only to exchange for an API key and is not stored; only the returned `sk-…` key is saved.
+
+Command-line equivalent:
+
+```bash
+node login.mjs          # prompts for username and password
+```
+
+### API key
+
+If an API key already exists on the platform, choose **API Key** and paste `sk-…`.
+
+### Local client credentials
+
+If the SCNet desktop client is installed and signed in (`~/.sclaw/agent/scnet-credentials/`), enter `local` and the plugin reads and validates the available key automatically.
+
+### Any other compatible service
+
+Paste a JSON credential pointing at any OpenAI-compatible endpoint:
+
+```json
+{"baseUrl":"https://example.com/v1","apiKey":"sk-…","models":["model-a","model-b"]}
+```
+
+---
+
+## Configuration
+
+Environment variables, applied after `magpie plugin off scnet-plugin` / `on scnet-plugin`:
+
+| Variable | Description |
+|---|---|
+| `SCNET_MODELS` | `all` (default) lists everything; `known` lists only models verified on this machine; or a comma-separated list of model IDs |
+| `SCNET_PROBE` | Set to `1` to probe each model's balance (`max_tokens:1`) and keep only usable ones |
+| `SCNET_BASE` | Overrides the API base URL (default `https://api.scnet.cn/api/llm/v1`) |
+| `SCNET_AGENT_DIR` | Overrides the client config directory (default `~/.sclaw/agent`) |
+
+---
+
+## Authentication and multiple accounts
+
+The plugin contains no authentication layer of its own. A credential is simply the user's API key, stored locally:
+
+```
+~/.config/magpie/plugin-auth.json     # mode 0600, readable only by the current user
+```
+
+Identity is verified by the SCNet platform (Bearer token). The same plugin can be installed by several people, each using their own credential.
+
+magpie supports multiple accounts for one provider: click **＋** again to add another, mark one as preferred, and the next account is used automatically when the current one runs out of quota.
+
+To share quota with someone else, share the magpie gateway rather than the plugin:
+
+```bash
+magpie gateway-key add friend --models 'scnet-plugin/*'
+magpie gateway-key limit friend day --tokens 5000000
+```
+
+---
+
+## Known limitations
+
+- Quota is counted per model; unprovisioned models return `402`.
+- Context and output limits come from the client metadata (e.g. GLM-5.3-Flash: 1048576 / 131072).
+- The server occasionally returns `500 internal_error`; retrying resolves it.
+- The plugin proxies chat only; it does not expose the platform's image or video generation APIs.
+- Concurrency is limited by `magpie.maxConcurrency` (default 4) to avoid triggering rate limits.
+
+---
+
+## Layout
+
+```
+magpie-scnet-auth/
+├── index.mjs            provider declaration, credential resolution, model discovery
+├── login.mjs            username/password login helper (exchanges for a key and writes it into magpie)
+├── package.json         package manifest
+├── README.md            this document
+├── README.zh-CN.md      Chinese translation
+└── LICENSE
+```
+
+---
+
+## License
+
+MIT

package/README.zh-CN.md

@@ -0,0 +1,145 @@
+# magpie-scnet-auth
+
+**Magpie provider 插件：接入 SCNet 计算互联网（scnet.cn）的大模型。**
+
+[English](README.md) | 简体中文
+
+安装后，SCNet 平台提供的模型会作为 `scnet` 供应商出现在 magpie 中，magpie 驱动的所有 agent（Claude Code、Codex、dsh 等）均可直接选用。
+
+- 支持账号密码登录，无需安装桌面客户端，无需抓包
+- 使用标准 OpenAI Chat Completions 协议
+- 透传工具调用与推理过程
+
+---
+
+## 支持的模型
+
+平台 `GET /models` 返回 32 个模型，包括：
+
+| 系列 | 模型 |
+|---|---|
+| 智谱 | GLM-5.3-Flash、GLM-5.3、GLM-5.2、GLM-5.1、GLM-5 |
+| 通义 | Qwen3.8-Max、Qwen3.8-Flash、Qwen3.7-Max、Qwen3.7-Plus、Qwen3.6-Plus、Qwen3-235B-A22B |
+| DeepSeek | DeepSeek-V4-Pro-0813、DeepSeek-V4.1-Flash、DeepSeek-V4.1-Flash-1017、DeepSeek-V4-Flash-0731 |
+| Kimi | Kimi-K3.1-Pro、Kimi-K3、Kimi-K2.7-Code、Kimi-K2.6 |
+| MiniMax | MiniMax-M3.1-Flash、MiniMax-M3、MiniMax-M2.7、MiniMax-M2.5 |
+| 其他 | SCNet-Max、Spark-X2.5、MiMo-V2.5-Pro |
+
+**额度按模型分配。** 账号并非对所有模型都有余额，未开通的模型调用会返回 `402 Insufficient Balance`。插件默认列出全部模型，并支持筛选（见「配置」）。
+
+---
+
+## 安装
+
+```bash
+# 从本地目录安装
+magpie plugin add /path/to/magpie-scnet-auth
+
+# 从 GitHub 安装
+magpie plugin add github:RrOrange/magpie-scnet-auth
+
+# 发布到 npm 后按包名安装
+magpie plugin add magpie-scnet-auth
+```
+
+安装后，magpie 的「供应商」页面会出现 **SCNet**。
+
+---
+
+## 登录
+
+### 账号密码（推荐）
+
+在 magpie 窗口中：
+
+1. 供应商 → **SCNet** → 点击 **＋**
+2. 选择 **使用 SCNet 账号密码登录**
+3. 输入用户名/手机号 → 下一步 → 输入密码 → 登录
+
+密码仅用于当次换取 API Key，不会被保存；保存的是平台返回的 `sk-…` 密钥。
+
+命令行等价方式：
+
+```bash
+node login.mjs          # 交互输入账号与密码
+```
+
+### API Key
+
+若平台已创建密钥，登录时选择 **API Key**，粘贴 `sk-…`。
+
+### 本机客户端凭据
+
+若本机已安装并登录 SCNet 桌面客户端（`~/.sclaw/agent/scnet-credentials/`），登录时输入 `local`，插件会自动读取并校验可用的密钥。
+
+### 其他兼容服务
+
+登录时粘贴 JSON，可指向任意 OpenAI 兼容端点：
+
+```json
+{"baseUrl":"https://example.com/v1","apiKey":"sk-…","models":["model-a","model-b"]}
+```
+
+---
+
+## 配置
+
+通过环境变量控制，修改后执行 `magpie plugin off scnet-plugin` / `on scnet-plugin` 生效：
+
+| 变量 | 说明 |
+|---|---|
+| `SCNET_MODELS` | `all`（默认）列出全部；`known` 仅列本机已验证有余额的模型；或逗号分隔的模型 ID |
+| `SCNET_PROBE` | 设为 `1` 时逐个探测模型余额（`max_tokens:1`），仅保留可用模型 |
+| `SCNET_BASE` | 覆盖 API 基址，默认 `https://api.scnet.cn/api/llm/v1` |
+| `SCNET_AGENT_DIR` | 覆盖客户端配置目录，默认 `~/.sclaw/agent` |
+
+---
+
+## 鉴权与多账号
+
+插件本身不包含鉴权层。凭据即用户的 API Key，保存在本机：
+
+```
+~/.config/magpie/plugin-auth.json     # 权限 0600，仅当前用户可读
+```
+
+身份校验由 SCNet 平台（Bearer Token）完成。同一份插件可被多人安装，各自使用自己的凭据。
+
+magpie 支持同一供应商多账号：重复点击 **＋** 即可添加，可设置首选账号，当前账号额度耗尽时自动切换到下一个。
+
+如需与他人共享额度，应共享 magpie 网关而非插件：
+
+```bash
+magpie gateway-key add friend --models 'scnet-plugin/*'
+magpie gateway-key limit friend day --tokens 5000000
+```
+
+---
+
+## 已知限制
+
+- 额度按模型计算，未开通的模型返回 `402`。
+- 上下文与输出上限取自客户端元数据（如 GLM-5.3-Flash：1048576 / 131072）。
+- 服务端偶发 `500 internal_error`，重试即可。
+- 插件仅代理对话能力，不包含平台的图片/视频生成接口。
+- 并发受 `magpie.maxConcurrency` 限制（默认 4），以避免触发风控。
+
+---
+
+## 目录结构
+
+```
+magpie-scnet-auth/
+├── index.mjs            provider 声明、凭据解析、模型发现
+├── login.mjs            账号密码登录工具（换取 key 并写入 magpie）
+├── package.json         包声明
+├── README.md            英文文档
+├── README.zh-CN.md      中文文档
+└── LICENSE
+```
+
+---
+
+## 许可
+
+MIT

package/index.mjs

@@ -0,0 +1,354 @@
+// SCNet 计算互联网 → magpie provider 插件
+//
+// 事实依据（本机实测）：
+//   - 平台是标准 OpenAI 兼容：POST https://api.scnet.cn/api/llm/v1/chat/completions
+//     Authorization: Bearer <key>，流式带 choices[].delta.reasoning_content
+//   - GET /api/llm/v1/models 用这把 key 能列出 32 个模型（GLM-5.3-Flash / Qwen3.8 / Kimi-K3 …）
+//   - SCNet 客户端把凭据和模型元数据存在本机：
+//       %USERPROFILE%\.sclaw\agent\scnet-credentials\*.json  → {scnet:{type:"api-key",key}}
+//       %USERPROFILE%\.sclaw\agent\models.json              → providers.scnet.models[]（含 contextWindow 等）
+//
+// 所以插件不需要任何抓包或注入：登录时填 local，它自己去客户端目录里取 key。
+
+import { readFileSync, readdirSync, statSync } from "node:fs"
+import { homedir } from "node:os"
+import { join } from "node:path"
+
+const PROVIDER = "scnet"
+const BASE = process.env.SCNET_BASE || "https://api.scnet.cn/api/llm/v1"
+const AGENT_DIR = process.env.SCNET_AGENT_DIR || join(homedir(), ".sclaw", "agent")
+const CRED_DIR = join(AGENT_DIR, "scnet-credentials")
+const MODELS_FILE = join(AGENT_DIR, "models.json")
+
+// 兜底：客户端读不到时至少可用
+const FALLBACK = { "GLM-5.3-Flash": { name: "GLM-5.3-Flash", context: 1000000, output: 131072, reasoning: true } }
+
+// 平台给了 32 个模型，但额度是按模型隔离的：没额度的调用会 402 Insufficient Balance。
+// 默认全部列出（账号不同，能用哪些只有自己知道）；想收窄用 SCNET_MODELS。
+//   SCNET_MODELS=…                逗号分隔的模型 id
+//   SCNET_MODELS=known            只列本机实测有额度的（GLM-5.3-Flash / SCNet-Max）
+//   SCNET_PROBE=1                 逐个实测余额（max_tokens=1），只留有额度的
+const KNOWN_IDS = ["GLM-5.3-Flash", "SCNet-Max"]
+
+function selectedIds(allIds) {
+  const spec = (process.env.SCNET_MODELS || "").trim().toLowerCase()
+  if (!spec || spec === "all" || spec === "*") return allIds
+  if (spec === "known" || spec === "mine") {
+    const lower = new Set(KNOWN_IDS.map((x) => x.toLowerCase()))
+    const picked = allIds.filter((id) => lower.has(id.toLowerCase()))
+    return picked.length ? picked : KNOWN_IDS.filter((id) => allIds.some((a) => a.toLowerCase() === id.toLowerCase()))
+  }
+  const want = spec.split(",").map((x) => x.trim()).filter(Boolean)
+  return allIds.filter((id) => want.includes(id.toLowerCase()))
+}
+
+// 可选：SCNET_PROBE=1 时实测每个模型是否还有余额（max_tokens=1，几乎不耗额度）
+async function probeIds(key, ids) {
+  const ok = []
+  const queue = [...ids]
+  const worker = async () => {
+    while (queue.length) {
+      const id = queue.shift()
+      try {
+        const r = await fetch(`${BASE}/chat/completions`, {
+          method: "POST",
+          headers: { authorization: `Bearer ${key}`, "content-type": "application/json" },
+          body: JSON.stringify({ model: id, messages: [{ role: "user", content: "hi" }], max_tokens: 1, stream: false }),
+          signal: AbortSignal.timeout(20000),
+        })
+        if (r.ok) ok.push(id)
+      } catch {}
+    }
+  }
+  await Promise.all(Array.from({ length: 8 }, worker))
+  return ids.filter((id) => ok.includes(id))
+}
+
+let cachedKey = null
+let cachedKeyAt = 0
+let cachedCatalog = null
+let cachedCatalogAt = 0
+
+const enc = new TextEncoder()
+
+// ---------- 账号密码登录（不用客户端、不用抓包） ----------
+// 链路（来自 scnet-client 源码）：POST /ac/api/auth/loginDesktopClient.action
+//   username + RSA(password) + encrypted=true + ph=1  →  Set-Cookie: Token=…
+// 再用 cookie 调 POST /acx/llm/api-key/createActivityApiKey  →  {data:{apiKey:"sk-…", baseUrl:…}}
+const WEB_ORIGIN = "https://www.scnet.cn"
+const LOGIN_URL = `${WEB_ORIGIN}/ac/api/auth/loginDesktopClient.action`
+const CAPTCHA_URL = `${WEB_ORIGIN}/ac/api/auth/isNeedCpatcha.action`
+const ACTIVITY_KEY_URL = `${WEB_ORIGIN}/acx/llm/api-key/createActivityApiKey`
+const RSA_PUB = "MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALaXEnbjI6fjy+t9W9AiO/KS0q+b/OZFS+7ykinLbiriUx9P8BcuuHnVbXNiZp5jW70eVGBtX4DhGUPzJa1YT/8CAwEAAQ=="
+const UA = "scnet-client/4.1.2"
+
+async function rsaEncrypt(plain) {
+  const { publicEncrypt, constants } = await import("node:crypto")
+  const pem = "-----BEGIN PUBLIC KEY-----\n" + RSA_PUB.match(/.{1,64}/g).join("\n") + "\n-----END PUBLIC KEY-----"
+  return publicEncrypt({ key: pem, padding: constants.RSA_PKCS1_PADDING }, Buffer.from(plain, "utf8")).toString("base64")
+}
+
+async function needCaptcha() {
+  try {
+    const r = await fetch(CAPTCHA_URL, { headers: { "user-agent": UA }, signal: AbortSignal.timeout(15000) })
+    const j = await r.json()
+    return j?.data === true
+  } catch {
+    return false
+  }
+}
+
+function cookiesOf(res) {
+  const list = typeof res.headers.getSetCookie === "function" ? res.headers.getSetCookie() : []
+  const raw = list.length ? list : (res.headers.get("set-cookie") ?? "").split(/,(?=[^;,]+=)/)
+  return raw.map((c) => String(c).split(";")[0].trim()).filter(Boolean).join("; ")
+}
+
+async function loginWithPassword(username, password) {
+  if (await needCaptcha()) {
+    throw new Error("该账号当前需要图形验证码。请先用 API Key 登录，或在 scnet.cn 网页登录一次后再试。")
+  }
+  const body = new URLSearchParams({
+    username,
+    password: await rsaEncrypt(password),
+    captcha: "",
+    captchaKey: "",
+    encrypted: "true",
+    ph: "1",
+  })
+  const r = await fetch(LOGIN_URL, {
+    method: "POST",
+    headers: { "content-type": "application/x-www-form-urlencoded", "user-agent": UA },
+    body,
+    signal: AbortSignal.timeout(20000),
+  })
+  const j = await r.json()
+  if (String(j?.code) !== "0") throw new Error(`SCNet 登录失败：${j?.msg || j?.code || r.status}`)
+  const cookie = cookiesOf(r)
+  if (!cookie) throw new Error("SCNet 登录成功但没有拿到会话 cookie")
+
+  const r2 = await fetch(ACTIVITY_KEY_URL, {
+    method: "POST",
+    headers: { "content-type": "application/json", cookie, "user-agent": UA },
+    body: "{}",
+    signal: AbortSignal.timeout(20000),
+  })
+  const j2 = await r2.json()
+  const key = j2?.data?.apiKey
+  if (!key) throw new Error(`取 API Key 失败：${j2?.msg || j2?.code || r2.status}（账号可能未开通模型服务）`)
+  return { key, baseUrl: j2.data.baseUrl, model: j2.data.model }
+}
+
+// ---------- 凭据：优先客户端目录，其次显式 key ----------
+
+function keysFromClient() {
+  const out = []
+  try {
+    for (const f of readdirSync(CRED_DIR)) {
+      if (!f.endsWith(".json")) continue
+      const p = join(CRED_DIR, f)
+      try {
+        const d = JSON.parse(readFileSync(p, "utf8"))
+        const k = d?.scnet?.key
+        if (typeof k === "string" && k.length > 10) out.push({ key: k, file: f, mtime: statSync(p).mtimeMs })
+      } catch {}
+    }
+  } catch {}
+  return out.sort((a, b) => b.mtime - a.mtime)
+}
+
+async function keyWorks(key) {
+  try {
+    const r = await fetch(`${BASE}/models`, {
+      headers: { authorization: `Bearer ${key}` },
+      signal: AbortSignal.timeout(8000),
+    })
+    return r.ok
+  } catch {
+    return false
+  }
+}
+
+async function clientKey() {
+  if (cachedKey && Date.now() - cachedKeyAt < 300_000) return cachedKey
+  const candidates = keysFromClient()
+  for (const c of candidates) {
+    if (await keyWorks(c.key)) {
+      cachedKey = c.key
+      cachedKeyAt = Date.now()
+      return cachedKey
+    }
+  }
+  if (candidates[0]) {
+    cachedKey = candidates[0].key
+    cachedKeyAt = Date.now()
+    return cachedKey
+  }
+  throw new Error(
+    `读不到 SCNet 凭据：${CRED_DIR} 为空或不存在。请先登录 SCNet 客户端（计算服务），或直接粘贴 API Key。`,
+  )
+}
+
+// 登录凭据支持三种形态：
+//   local                → 从本机 SCNet 客户端目录读 key
+//   sk-xxx               → 直接把这个 key 用在 SCNet 平台
+//   {"baseUrl":…,"apiKey":…,"models":[…]} → 接任意 OpenAI 兼容服务（分发/自建用）
+async function resolveCred(raw) {
+  const s = String(raw ?? "").trim()
+  if (!s || /^(local|auto|本机|自动)$/i.test(s)) {
+    return { baseUrl: BASE, apiKey: await clientKey(), models: null }
+  }
+  if (s.startsWith("{")) {
+    let j
+    try {
+      j = JSON.parse(s)
+    } catch {
+      throw new Error('凭据 JSON 解析失败。形如 {"baseUrl":"https://…/v1","apiKey":"…","models":["m1","m2"]}')
+    }
+    const apiKey = j.apiKey || j.key
+    if (!apiKey) throw new Error("凭据 JSON 缺少 apiKey")
+    return {
+      baseUrl: String(j.baseUrl || j.baseURL || BASE).replace(/\/+$/, ""),
+      apiKey,
+      models: Array.isArray(j.models) && j.models.length ? j.models : null,
+    }
+  }
+  return { baseUrl: BASE, apiKey: s, models: null }
+}
+
+// ---------- 模型目录：客户端元数据 + 平台 /models 交叉 ----------
+
+function clientCatalog() {
+  if (cachedCatalog && Date.now() - cachedCatalogAt < 300_000) return cachedCatalog
+  try {
+    const d = JSON.parse(readFileSync(MODELS_FILE, "utf8"))
+    const list = d?.providers?.scnet?.models
+    if (Array.isArray(list)) {
+      const map = {}
+      for (const m of list) {
+        if (!m?.id) continue
+        map[m.id] = {
+          name: m.name || m.id,
+          context: m.contextWindow,
+          output: m.maxTokens,
+          reasoning: !!m.reasoning,
+          tool_call: m.toolCalling !== false,
+          input: Array.isArray(m.input) ? m.input : ["text"],
+        }
+      }
+      cachedCatalog = map
+      cachedCatalogAt = Date.now()
+      return map
+    }
+  } catch {}
+  return {}
+}
+
+async function platformModels(baseUrl, key) {
+  const r = await fetch(`${baseUrl}/models`, { headers: { authorization: `Bearer ${key}` }, signal: AbortSignal.timeout(20000) })
+  if (!r.ok) throw new Error(`/models 返回 ${r.status}`)
+  const d = await r.json()
+  return (d?.data ?? []).map((m) => m.id).filter(Boolean)
+}
+
+function toModel(id, meta) {
+  const m = meta?.[id] ?? {}
+  return {
+    name: m.name || id,
+    limit: { context: m.context ?? 131072, output: m.output ?? 32768 },
+    reasoning: m.reasoning ?? false,
+    tool_call: m.tool_call ?? true,
+    modalities: { input: m.input ?? ["text"] },
+  }
+}
+
+// ---------- 插件 ----------
+
+export const SCNetAuthPlugin = async ({ client }) => ({
+  config: async (cfg) => {
+    cfg.provider ??= {}
+    cfg.provider[PROVIDER] ??= {
+      name: "SCNet 计算互联网",
+      npm: "@ai-sdk/openai-compatible",
+      api: BASE,
+      models: Object.fromEntries(
+        Object.entries(FALLBACK).map(([id, m]) => [
+          id,
+          { name: m.name, limit: { context: m.context, output: m.output }, reasoning: m.reasoning, tool_call: true },
+        ]),
+      ),
+    }
+  },
+
+  auth: {
+    provider: PROVIDER,
+    methods: [
+      {
+        type: "api",
+        label: "SCNet 账号密码登录",
+        prompts: [
+          { type: "text", key: "username", message: "SCNet 用户名 / 手机号", placeholder: "手机号或用户名" },
+          { type: "password", key: "password", message: "密码" },
+        ],
+        async authorize(inputs) {
+          try {
+            const out = await loginWithPassword(String(inputs?.username ?? "").trim(), String(inputs?.password ?? ""))
+            return { type: "success", key: out.key, metadata: { username: inputs.username, baseUrl: out.baseUrl } }
+          } catch (e) {
+            return { type: "failed", error: String(e?.message || e).slice(0, 500) }
+          }
+        },
+      },
+      {
+        type: "api",
+        label: "API Key（local = 读本机客户端；或粘贴 sk-… / JSON）",
+        placeholder: "local",
+      },
+    ],
+
+    async loader(getAuth) {
+      const auth = await getAuth()
+      if (auth?.type !== "api") return {}
+      const cred = await resolveCred(auth.key)
+      const metaBase = typeof auth.metadata?.baseUrl === "string" ? auth.metadata.baseUrl.replace(/\/+$/, "") : ""
+      return { baseURL: metaBase || cred.baseUrl, apiKey: cred.apiKey }
+    },
+  },
+
+  provider: {
+    id: PROVIDER,
+    async models(provider, { auth } = {}) {
+      let cred
+      try {
+        cred = await resolveCred(auth?.key)
+      } catch {
+        return provider.models
+      }
+      const meta = clientCatalog()
+      // 自定义服务：凭据里直接给了模型列表，不用再问
+      if (cred.models) {
+        const out = {}
+        for (const id of cred.models) out[id] = toModel(id, meta)
+        return out
+      }
+      try {
+        let ids = await platformModels(cred.baseUrl, cred.apiKey)
+        if (!ids.length) return provider.models
+        ids = selectedIds(ids)
+        if (process.env.SCNET_PROBE === "1") ids = await probeIds(cred.apiKey, ids)
+        const out = {}
+        for (const id of ids) out[id] = toModel(id, meta)
+        return out
+      } catch {
+        // 平台拉不到就退到客户端目录
+        const ids = selectedIds(Object.keys(meta))
+        if (!ids.length) return provider.models
+        const out = {}
+        for (const id of ids) out[id] = toModel(id, meta)
+        return out
+      }
+    },
+  },
+})
+
+export const _internal = { PROVIDER, BASE, keysFromClient, clientKey, clientCatalog, toModel, loginWithPassword, rsaEncrypt }

package/login.mjs

@@ -0,0 +1,114 @@
+// SCNet 账号密码登录 → 拿到 API Key → 写进 magpie 的 plugin-auth.json
+//
+//   node login.mjs                 交互输入用户名/密码
+//   node login.mjs <用户名> <密码>  直接传参（脚本用）
+//
+// 不需要 SCNet 客户端，也不需要抓包。
+
+import { readFileSync, writeFileSync, copyFileSync, existsSync } from "node:fs"
+import { join } from "node:path"
+import { homedir } from "node:os"
+import { execFileSync } from "node:child_process"
+import { createInterface } from "node:readline"
+
+const { _internal } = await import(new URL("./index.mjs", import.meta.url))
+const { loginWithPassword } = _internal
+
+function configDir() {
+  const xdg = process.env.XDG_CONFIG_HOME
+  return xdg ? join(xdg, "magpie") : join(homedir(), ".config", "magpie")
+}
+
+function ask(question, hidden = false) {
+  return new Promise((resolve) => {
+    const rl = createInterface({ input: process.stdin, output: process.stdout, terminal: !!process.stdin.isTTY })
+    if (hidden && process.stdin.isTTY) {
+      process.stdout.write(question)
+      const stdin = process.stdin
+      stdin.setRawMode?.(true)
+      let buf = ""
+      const onData = (c) => {
+        const s = c.toString()
+        if (s === "\r" || s === "\n") {
+          stdin.setRawMode?.(false)
+          stdin.removeListener("data", onData)
+          process.stdout.write("\n")
+          rl.close()
+          resolve(buf)
+        } else if (s === "\u0003") {
+          process.exit(130)
+        } else if (s === "\u007f") {
+          buf = buf.slice(0, -1)
+        } else {
+          buf += s
+        }
+      }
+      stdin.on("data", onData)
+      return
+    }
+    rl.question(question, (a) => {
+      rl.close()
+      resolve(a)
+    })
+  })
+}
+
+// 找到本插件在 magpie 里真实的 provider id（scnet 或 scnet-plugin）
+function providerId() {
+  try {
+    const out = execFileSync("magpie", ["plugin", "--json"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] })
+    const data = JSON.parse(out)
+    const hit = (data.providers ?? []).find((p) => String(p.spec ?? "").includes("scnet-plugin"))
+    if (hit?.id) return hit.id
+  } catch {}
+  return "scnet"
+}
+
+let [username, password] = process.argv.slice(2)
+if (!username) username = (await ask("SCNet 用户名 / 手机号: ")).trim()
+if (!password) password = await ask("密码: ", true)
+
+if (!username || !password) {
+  console.error("用户名和密码都要填。")
+  process.exit(1)
+}
+
+console.log("正在登录 SCNet …")
+let cred
+try {
+  cred = await loginWithPassword(username, password)
+} catch (e) {
+  console.error("登录失败：" + (e?.message || e))
+  process.exit(1)
+}
+console.log("✓ 登录成功，已取得 API Key：" + cred.key.slice(0, 6) + "…（长度 " + cred.key.length + "）")
+
+const dir = configDir()
+const file = join(dir, "plugin-auth.json")
+if (!existsSync(dir)) {
+  console.error(`找不到 magpie 配置目录 ${dir}，请先启动一次 magpie。`)
+  process.exit(1)
+}
+
+let db = {}
+if (existsSync(file)) {
+  try {
+    db = JSON.parse(readFileSync(file, "utf8"))
+  } catch {
+    db = {}
+  }
+  copyFileSync(file, file + ".bak-scnet-login")
+}
+
+const id = providerId()
+db[id] = {
+  type: "api",
+  key: cred.key,
+  metadata: { username, baseUrl: cred.baseUrl, via: "password-login" },
+}
+writeFileSync(file, JSON.stringify(db, null, 2) + "\n", { mode: 0o600 })
+
+console.log(`✓ 已写入 ${file}（provider: ${id}）`)
+console.log("")
+console.log("下一步：重启 magpie（或 magpie plugin off/on " + id + "），然后")
+console.log("  magpie provider test " + id + " GLM-5.3-Flash")

package/package.json

@@ -1,6 +1,44 @@
-{
-  "name": "magpie-scnet-auth",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+{
+  "name": "magpie-scnet-auth",
+  "version": "0.1.1",
+  "description": "Magpie / OpenCode provider plugin for SCNet (scnet.cn) LLM models - password login, OpenAI-compatible, tool calls and reasoning passthrough.",
+  "type": "module",
+  "main": "./index.mjs",
+  "files": [
+    "index.mjs",
+    "login.mjs",
+    "README.md",
+    "README.zh-CN.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "opencode",
+    "opencode-plugin",
+    "magpie",
+    "scnet",
+    "sugon",
+    "glm",
+    "qwen",
+    "deepseek",
+    "kimi",
+    "minimax"
+  ],
+  "license": "MIT",
+  "magpie": {
+    "maxConcurrency": 4,
+    "name": "SCNet 计算互联网",
+    "summary": {
+      "en": "All models on the SCNet platform (GLM-5.3-Flash, Qwen3.8, Kimi-K3 …), reusing the SCNet client's credentials.",
+      "zh": "把 SCNet 计算互联网平台的全部模型（GLM-5.3-Flash、Qwen3.8、Kimi-K3…）接进 magpie，直接复用客户端的凭据。"
+    },
+    "icon": "data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAxMjggMTI4Ij48cmVjdCB3aWR0aD0iMTI4IiBoZWlnaHQ9IjEyOCIgcng9IjI4IiBmaWxsPSIjMjU2M0VCIi8+PHRleHQgeD0iNjQiIHk9Ijg2IiBmb250LWZhbWlseT0iU2Vnb2UgVUksSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWYiIGZvbnQtc2l6ZT0iNjIiIGZvbnQtd2VpZ2h0PSI3MDAiIGZpbGw9IiNmZmYiIHRleHQtYW5jaG9yPSJtaWRkbGUiPlNDPC90ZXh0Pjwvc3ZnPg=="
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/RrOrange/magpie-scnet-auth.git"
+  },
+  "homepage": "https://github.com/RrOrange/magpie-scnet-auth#readme",
+  "bugs": {
+    "url": "https://github.com/RrOrange/magpie-scnet-auth/issues"
+  }
 }