mslxdff 0.1.128 → 0.1.130

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mslxdff",
-  "version": "0.1.128",
+  "version": "0.1.130",
   "description": "测试项目，请勿使用。",
   "type": "module",
   "bin": {

package/src/chat/tools.js

@@ -7,6 +7,7 @@ import { FORBIDDEN } from "./config.js";
 import { logDir } from "../logs.js";
 import { defaultStateFile, loadProviderKeys, loadProviderConfigs } from "../state.js";
 import { compatFetch } from "../compat.js";
+import { opencodeClientIdentity } from "../opencode-identity.js";
 
 const pkgRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const allowedRoots = [
@@ -220,12 +221,17 @@ export async function curlTool({ url, method, headers, body, timeoutMs }) {
   if (headers && typeof headers === "object") {
     for (const [k, v] of Object.entries(headers)) if (typeof v === "string") h[String(k)] = v;
   }
-  // 上游自动补最小可用头
+  // 上游自动补最小可用头（zen 免费层门禁：UA 带版本 + opencode 形状 session/request）
   if (/opencode\.ai/i.test(target)) {
+    const ident = opencodeClientIdentity();
     if (!h["x-opencode-client"]) h["x-opencode-client"] = "desktop";
     if (!h["Authorization"] && !h["authorization"]) h["Authorization"] = "Bearer public";
     if (!h["Accept"]) h["Accept"] = m === "GET" ? "*/*" : "application/json";
     if (!h["Content-Type"] && m !== "GET" && m !== "HEAD") h["Content-Type"] = "application/json";
+    if (!h["User-Agent"] && !h["user-agent"]) h["User-Agent"] = ident["User-Agent"];
+    if (!h["x-opencode-session"]) h["x-opencode-session"] = ident["x-opencode-session"];
+    if (!h["x-opencode-request"]) h["x-opencode-request"] = ident["x-opencode-request"];
+    if (!h["x-opencode-project"]) h["x-opencode-project"] = "global";
   }
   // 本机自动带 token（/v1/* 需要鉴权）；/v1/models 必须是 GET，模型常误用 POST 直接纠正
   if (/127\.0\.0\.1|localhost/i.test(target) && /\/v1\//i.test(target)) {

package/src/chat-pipeline/engine.js

@@ -7,7 +7,7 @@ import { runSerialTrial } from "./serial-trial.js";
  */
 export function createEngine(deps = {}) {
   const { raceDeps, serialDeps } = deps;
-  async function run(_plan, state) {
+  async function run(state) {
     const race = await runAutoRace(state, raceDeps);
     if (race.done) return;
     await runSerialTrial({ ...state, order: race.order }, serialDeps);

package/src/chat-pipeline/index.js

@@ -1,15 +1,13 @@
 import { performance } from "node:perf_hooks";
 import { analyzePolicy } from "./policy.js";
-import { planRoute } from "./planner.js";
 import { createEngine } from "./engine.js";
 import { runHook } from "../plugins.js";
 import { isFreeModel } from "../models.js";
-import { shouldUseGroupForModel } from "../state/schemas/use-group.js";
 import { clientIp, summarizePrompt } from "../routes/helpers.js";
 
 /**
  * ChatPipeline 深模块门面 — 对外 execute(req) 单一 inlet
- * 内部组合 Policy→Planner→Engine：解析 header/model → 产 order → 委托 engine 执行
+ * 内部组合 Policy→Engine：解析 header/model → 产 order → 委托 engine 执行
  * gateway 仅薄适配：readBody + request:received hook + 调 execute
  */
 export function createChatPipeline({ upstream, auto, logs, peers, groups, bus, token, plugins, maxHops } = {}) {
@@ -31,6 +29,20 @@ export function createChatPipeline({ upstream, auto, logs, peers, groups, bus, t
       req.body = { ...req.body, model: requested };
     }
 
+    // 事件/日志帮手先于 order 推导声明：evt 在 auto-scope 分支即被使用，
+    // 声明置后会让 useAuto && autoProvider 的请求在 TDZ 上崩（线上 -chat 回退路径）
+    const logCall = (model, status) => logs?.appendCall({ reqId, model, auto: useAuto, status, durationMs: Date.now() - startedAt, stream: Boolean(req?.body?.stream), stages });
+    const logError = (model, status, message) => logs?.appendError({ reqId, model, auto: useAuto, status, message, stages });
+    const evt = (type, data) => {
+      const entry = { ts: Date.now(), reqId, type, ...data, model: data.model ?? requested, auto: useAuto, durationMs: Date.now() - startedAt, stages: [...stages] };
+      if (bus) bus.emit(entry);
+      logs?.appendEvent?.(entry);
+    };
+    const done = (info) => {
+      if (!plugins?.length) return;
+      runHook(plugins, "request:completed", { reqId, requested, useAuto, hops, stream: Boolean(req?.body?.stream), durationMs: Date.now() - startedAt, ...info }).catch(() => {});
+    };
+
     // order 推导 + plugin model:select 可改
     // 语义：指定模型 = 死锁单模型（本机→组员同款，挂了就报挂，不兜其他 picks）；只有 auto 才轮 picks
     // x-mslxdff-auto-provider 头可把 auto 候选限定到单供应商（opencode=裸 id 免费池），-chat 默认带
@@ -55,18 +67,6 @@ export function createChatPipeline({ upstream, auto, logs, peers, groups, bus, t
     const canForwardPeers = Boolean(peers) && hops < (maxHops ?? 3);
     mark("ordered");
 
-    const logCall = (model, status) => logs?.appendCall({ reqId, model, auto: useAuto, status, durationMs: Date.now() - startedAt, stream: Boolean(req?.body?.stream), stages });
-    const logError = (model, status, message) => logs?.appendError({ reqId, model, auto: useAuto, status, message, stages });
-    const evt = (type, data) => {
-      const entry = { ts: Date.now(), reqId, type, ...data, model: data.model ?? requested, auto: useAuto, durationMs: Date.now() - startedAt, stages: [...stages] };
-      if (bus) bus.emit(entry);
-      logs?.appendEvent?.(entry);
-    };
-    const done = (info) => {
-      if (!plugins?.length) return;
-      runHook(plugins, "request:completed", { reqId, requested, useAuto, hops, stream: Boolean(req?.body?.stream), durationMs: Date.now() - startedAt, ...info }).catch(() => {});
-    };
-
     evt("request", { reqId, hops, ip: clientIp(req), stream: Boolean(req?.body?.stream), prompt: summarizePrompt(req?.body), rawModel: policy.rawModel, requested, lockModel: lockModel || null });
     if (aliasInfo) evt("alias", { reqId, alias: aliasInfo, rawModel: policy.rawModel, requested });
     if (Object.keys(shareKeys).length) evt("share-keys", { reqId, providers: Object.keys(shareKeys) });
@@ -88,11 +88,7 @@ export function createChatPipeline({ upstream, auto, logs, peers, groups, bus, t
     const handlerCtx = { reqId, model: null, body: req?.body, hops, peers, plugins, evt, logError, logCall, logs, workbuddyUid, sessionId: clientSession };
     if (clientSession) evt("client-session", { reqId, sessionId: clientSession.slice(0, 24) });
 
-    const plan = planRoute(policy, {
-      candidates: order,
-      viaRoute: Boolean(!useAuto && requested.includes("/") && canForwardPeers && shouldUseGroupForModel(requested)) ? { via: true } : null,
-    });
-    await engine.run(plan, {
+    await engine.run({
       reqId, startedAt, req, res, body: req?.body, policy,
       useAuto, lockModel, requested, hops,
       canFallback, canForwardPeers,
@@ -102,5 +98,5 @@ export function createChatPipeline({ upstream, auto, logs, peers, groups, bus, t
     });
   }
 
-  return { execute, _policy: analyzePolicy, _plan: planRoute, _engine: engine };
+  return { execute, _policy: analyzePolicy, _engine: engine };
 }

package/src/chat-pipeline/policy.js

@@ -40,7 +40,7 @@ export function analyzePolicy({ headers = {}, body = {} } = {}) {
     if (!aliasInfo) aliasInfo = null;
   }
 
-  // workbuddy <uid>:model 形式的 uid 钉死在 normalizeFullId 侧处理，这里透传原始 requested 供 planner 二次剥离
+  // workbuddy <uid>:model 形式的 uid 钉死在 normalizeFullId 侧处理，这里透传原始 requested
   // 若 requested 含 workbuddy/ 前缀且含 :，则尝试提取 uid
   let extractedUid = workbuddyUid;
   if (!extractedUid && requested.startsWith("workbuddy/") && requested.includes(":")) {
@@ -52,7 +52,7 @@ export function analyzePolicy({ headers = {}, body = {} } = {}) {
   const useAuto = isAutoModel(requested);
 
   // 对 workbuddy 前缀的 model，做 normalizeFullId 归一（剥 uid 供上游）
-  // 但保留 requested 为完整带前缀形态，供 planner 做 ViaRoute 判定
+  // 但保留 requested 为完整带前缀形态，供 serial-trial 做 ViaRoute 判定与组员路由
   let normalizedForUpstream = requested;
   try {
     const norm = normalizeFullId(requested);

package/src/cli/commands/provider/bench-via.js

@@ -5,6 +5,7 @@ import { runOne } from "../../../bench/runner.js";
 import { formatViaReport } from "../../../bench/report.js";
 import { clineBenchOne } from "../../../bench/cline-bench.js";
 import { workbuddyBenchOne } from "../../../bench/workbuddy-bench.js";
+import { opencodeClientIdentity } from "../../../opencode-identity.js";
 
 export function buildHeadersForProvider(providerId, apiKey, auth) {
   const h = {};
@@ -21,6 +22,16 @@ export function buildHeadersForProvider(providerId, apiKey, auth) {
     if (auth?.enterpriseId) { h["X-Enterprise-Id"] = auth.enterpriseId; h["X-Tenant-Id"] = auth.enterpriseId; }
     return h;
   }
+  // opencode 免费层门禁：UA 带版本 + opencode 形状 session/request，否则 403
+  if (String(providerId).toLowerCase() === "opencode") {
+    const ident = opencodeClientIdentity();
+    h["Content-Type"] = "application/json";
+    if (!h["User-Agent"]) h["User-Agent"] = ident["User-Agent"];
+    h["x-opencode-client"] = "desktop";
+    h["x-opencode-session"] = ident["x-opencode-session"];
+    h["x-opencode-request"] = ident["x-opencode-request"];
+    h["x-opencode-project"] = "global";
+  }
   if (apiKey) h["Authorization"] = `Bearer ${apiKey}`;
   return h;
 }

package/src/model-capabilities/index.js

@@ -121,7 +121,7 @@ export function createCapabilitiesService({
   return { ready, get, list, providers, npmIndex: () => new Map(npmIndex) };
 }
 
-// 模块级单例（与 globalDedup 同模式）：HTTP handler 懒加载，测试 _reset 后注入
+// 模块级单例：HTTP handler 懒加载，测试 _reset 后注入
 let _global = null;
 export function globalCapabilities() {
   if (!_global) _global = createCapabilitiesService({ cacheFile: defaultCacheFile() });

package/src/opencode-identity.js

@@ -0,0 +1,51 @@
+import crypto from "node:crypto";
+
+// opencode 客户端身份规格单一来源（源码 packages/schema/src/identifier.ts +
+// packages/opencode/src/session/llm/request.ts）：id = <prefix>_ + 12 位 hex
+// (timestamp*4096+同毫秒计数，截 48bit) + 14 位 base62，共 26 字符；UA 必须 "opencode/<semver>"。
+// zen 免费层 2026-09-17 起按该规格放行（缺版本 UA 或 id 形状不符 → 403 FreeTierError）。
+const ID_CHARS = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+const DEFAULT_OPENCODE_UA = "opencode/1.17.20";
+let idLastTs = 0;
+let idCounter = 0;
+
+export function opencodeIdTail(timestamp = Date.now()) {
+  if (timestamp !== idLastTs) {
+    idLastTs = timestamp;
+    idCounter = 0;
+  }
+  idCounter += 1;
+  const value = BigInt(timestamp) * 0x1000n + BigInt(idCounter);
+  let tail = "";
+  for (let i = 0; i < 6; i++) {
+    tail += Number((value >> BigInt(40 - 8 * i)) & 0xffn)
+      .toString(16)
+      .padStart(2, "0");
+  }
+  for (const b of crypto.randomBytes(14)) tail += ID_CHARS[b % 62];
+  return tail;
+}
+
+// 摘要派生：同种子恒同 id（会话亲和），形态仍合规
+export function digestIdTail(digest) {
+  let tail = digest.subarray(0, 6).toString("hex");
+  for (const b of digest.subarray(6, 20)) tail += ID_CHARS[b % 62];
+  return tail;
+}
+
+export function genId(prefix) {
+  return `${prefix}${opencodeIdTail()}`;
+}
+
+export function opencodeUa() {
+  return process.env.MSLXDFF_OPENCODE_UA || DEFAULT_OPENCODE_UA;
+}
+
+// 旁路（-chat curl 工具 / bench 直连）共用同一身份，避免各自伪造头再被 403
+export function opencodeClientIdentity() {
+  return {
+    "User-Agent": opencodeUa(),
+    "x-opencode-session": genId("ses_"),
+    "x-opencode-request": genId("msg_"),
+  };
+}

package/src/upstream.js

@@ -7,11 +7,9 @@ import { isFreeModel } from "./models.js";
 import { fmtShanghaiYMDHMS } from "./time.js";
 import { createTransport } from "./transport/index.js";
 import { isResponsesModel, chatToResponsesBody, toChatResponse, reshapeResponsesSse } from "./upstream-responses.js";
-import { uuid } from "./compat.js";
+import { digestIdTail, genId, opencodeClientIdentity, opencodeUa } from "./opencode-identity.js";
 
-function genId(prefix) {
-  return `${prefix}${uuid().replace(/-/g, "")}`;
-}
+export { opencodeClientIdentity, opencodeUa };
 // 上游按 session 做粘性路由（实测：固定 session 两次请求均 ~1.2s；每次随机时可能撞冷机器 26s+）。
 // 客户端（opencode AI SDK 路径）不带会话标识 → 用对话首两条消息（system + 首条 user）哈希做稳定会话：
 // 同一会话多轮里这两条不变 ⇒ 路由亲和稳定；不同会话天然分散。
@@ -25,7 +23,7 @@ function sessionFromMessages(messages) {
     };
     const seed = `${pick("system")}|${pick("user")}`.slice(0, 4000);
     if (seed === "|") return null;
-    return `ses_${crypto.createHash("sha1").update(seed).digest("hex").slice(0, 32)}`;
+    return `ses_${digestIdTail(crypto.createHash("sha1").update(seed).digest())}`;
   } catch {
     return null;
   }
@@ -56,7 +54,7 @@ export function createOpencodeHeaderBuilder({ authToken = "public", env = proces
         "Content-Type": "application/json",
         Authorization: "",
         "x-opencode-client": "desktop",
-        "User-Agent": "opencode",
+        "User-Agent": opencodeUa(),
         "HTTP-Referer": "https://hermes-agent.nousresearch.com",
         "X-Title": "Hermes Agent",
       }
@@ -73,7 +71,7 @@ export function createOpencodeHeaderBuilder({ authToken = "public", env = proces
     const base = {
       ...baseHeaders,
       Accept: isStream ? "text/event-stream" : "*/*",
-      "User-Agent": "opencode",
+      "User-Agent": opencodeUa(),
       "x-opencode-session": session,
       "x-opencode-request": genId("msg_"),
       "x-opencode-project": "global",

package/src/chat-pipeline/dedup.js

@@ -1,83 +0,0 @@
-import { createHash } from "node:crypto";
-
-/**
- * 请求去重（防前端双击/重试风暴）
- * key = ip | requested | stream | bodyHash(messages+model变体)
- * 窗口内重复到达的相同请求直接 429 返回，提示前端去重
- * 默认窗口 1000ms，可用 MSLXDFF_DEDUP_WINDOW_MS 覆盖，0 为关闭
- */
-export function dedupWindowMs() {
-  const raw = process.env.MSLXDFF_DEDUP_WINDOW_MS;
-  if (raw != null && String(raw).trim() !== "") {
-    const n = Number(raw);
-    if (Number.isFinite(n) && n >= 0) return Math.floor(n);
-  }
-  return 1000;
-}
-
-function hashBody(body) {
-  try {
-    const m = body?.messages;
-    const s = JSON.stringify({
-      model: body?.model || "",
-      stream: Boolean(body?.stream),
-      max_tokens: body?.max_tokens ?? body?.maxTokens ?? null,
-      messages: Array.isArray(m) ? m.map((x) => ({ role: x.role, content: typeof x.content === "string" ? x.content.slice(0, 4000) : JSON.stringify(x.content).slice(0, 4000) })) : [],
-      // 工具调用等也纳入，避免误判
-      tools: body?.tools ? JSON.stringify(body.tools).slice(0, 1000) : "",
-    });
-    return createHash("sha1").update(s).digest("hex").slice(0, 16);
-  } catch {
-    return String(body?.model || "").slice(0, 32);
-  }
-}
-
-let _global = null;
-export function globalDedup() {
-  if (!_global) _global = createDedup({ windowMs: dedupWindowMs() });
-  // 若环境变量在运行时被改，同步窗口
-  const want = dedupWindowMs();
-  if (_global.windowMs !== want) {
-    _global.windowMs = want;
-  }
-  return _global;
-}
-export function _resetGlobalDedup() { _global = null; }
-
-export function createDedup({ windowMs = dedupWindowMs(), now = Date.now } = {}) {
-  const map = new Map(); // key -> at
-  let sweepAt = 0;
-
-  function sweep() {
-    const t = now();
-    if (t - sweepAt < windowMs) return;
-    sweepAt = t;
-    for (const [k, at] of map) {
-      if (t - at > windowMs) map.delete(k);
-    }
-  }
-
-  function keyFor({ ip, requested, body }) {
-    const h = hashBody(body);
-    const stream = body?.stream ? "1" : "0";
-    return `${ip || "-"}|${requested || "-"}|${stream}|${h}`;
-  }
-
-  function check({ ip, requested, body }) {
-    if (!windowMs) return { dup: false, key: null };
-    sweep();
-    const key = keyFor({ ip, requested, body });
-    const at = map.get(key);
-    const t = now();
-    if (at != null && t - at < windowMs) {
-      return { dup: true, key, ageMs: t - at };
-    }
-    map.set(key, t);
-    return { dup: false, key };
-  }
-
-  function _size() { return map.size; }
-  function _clear() { map.clear(); }
-
-  return { check, keyFor, _size, _clear, windowMs };
-}

package/src/chat-pipeline/planner.js

@@ -1,31 +0,0 @@
-import { DEFAULT_AUTO_MODELS, rankModels } from "../auto.js";
-
-/**
- * RoutePlanner 纯决策 — 根据 Policy + auto 状态产 RoutePlan
- * 无网络副作用，供单测注入 FakeAuto
- */
-export function planRoute(policy, autoState = {}) {
-  const { requested, useAuto, lockModel } = policy;
-  const { candidates = [], errors = {}, latencies = {}, viaRoute = null } = autoState;
-
-  // 锁模型时直接单点
-  if (lockModel) {
-    return { strategy: "direct", order: [requested], concLimit: 1, hedgeDelayMs: 0 };
-  }
-  // ViaRoute 单路径（显式锁模型且 via 表命中）
-  if (viaRoute && !useAuto && requested.includes("/")) {
-    return { strategy: "via", order: [requested], via: viaRoute, concLimit: 1, hedgeDelayMs: 0 };
-  }
-  // Auto 并发择优
-  if (useAuto && candidates.length > 1) {
-    const concLimit = Math.min(candidates.length, 5);
-    return { strategy: "autoRace", order: candidates, concLimit, hedgeDelayMs: 1000 };
-  }
-  // 显式模型回退链
-  if (!useAuto && candidates.length) {
-    const others = candidates.filter((m) => m !== requested);
-    const order = requested ? [requested, ...others] : candidates;
-    return { strategy: "direct", order, concLimit: 1, hedgeDelayMs: 0 };
-  }
-  return { strategy: "direct", order: requested ? [requested] : [""], concLimit: 1, hedgeDelayMs: 0 };
-}