mslxdff 0.1.129 → 0.1.130

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mslxdff",
-  "version": "0.1.129",
+  "version": "0.1.130",
   "description": "测试项目，请勿使用。",
   "type": "module",
   "bin": {

package/src/chat/tools.js

@@ -7,6 +7,7 @@ import { FORBIDDEN } from "./config.js";
 import { logDir } from "../logs.js";
 import { defaultStateFile, loadProviderKeys, loadProviderConfigs } from "../state.js";
 import { compatFetch } from "../compat.js";
+import { opencodeClientIdentity } from "../opencode-identity.js";
 
 const pkgRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const allowedRoots = [
@@ -220,12 +221,17 @@ export async function curlTool({ url, method, headers, body, timeoutMs }) {
   if (headers && typeof headers === "object") {
     for (const [k, v] of Object.entries(headers)) if (typeof v === "string") h[String(k)] = v;
   }
-  // 上游自动补最小可用头
+  // 上游自动补最小可用头（zen 免费层门禁：UA 带版本 + opencode 形状 session/request）
   if (/opencode\.ai/i.test(target)) {
+    const ident = opencodeClientIdentity();
     if (!h["x-opencode-client"]) h["x-opencode-client"] = "desktop";
     if (!h["Authorization"] && !h["authorization"]) h["Authorization"] = "Bearer public";
     if (!h["Accept"]) h["Accept"] = m === "GET" ? "*/*" : "application/json";
     if (!h["Content-Type"] && m !== "GET" && m !== "HEAD") h["Content-Type"] = "application/json";
+    if (!h["User-Agent"] && !h["user-agent"]) h["User-Agent"] = ident["User-Agent"];
+    if (!h["x-opencode-session"]) h["x-opencode-session"] = ident["x-opencode-session"];
+    if (!h["x-opencode-request"]) h["x-opencode-request"] = ident["x-opencode-request"];
+    if (!h["x-opencode-project"]) h["x-opencode-project"] = "global";
   }
   // 本机自动带 token（/v1/* 需要鉴权）；/v1/models 必须是 GET，模型常误用 POST 直接纠正
   if (/127\.0\.0\.1|localhost/i.test(target) && /\/v1\//i.test(target)) {

package/src/cli/commands/provider/bench-via.js

@@ -5,6 +5,7 @@ import { runOne } from "../../../bench/runner.js";
 import { formatViaReport } from "../../../bench/report.js";
 import { clineBenchOne } from "../../../bench/cline-bench.js";
 import { workbuddyBenchOne } from "../../../bench/workbuddy-bench.js";
+import { opencodeClientIdentity } from "../../../opencode-identity.js";
 
 export function buildHeadersForProvider(providerId, apiKey, auth) {
   const h = {};
@@ -21,6 +22,16 @@ export function buildHeadersForProvider(providerId, apiKey, auth) {
     if (auth?.enterpriseId) { h["X-Enterprise-Id"] = auth.enterpriseId; h["X-Tenant-Id"] = auth.enterpriseId; }
     return h;
   }
+  // opencode 免费层门禁：UA 带版本 + opencode 形状 session/request，否则 403
+  if (String(providerId).toLowerCase() === "opencode") {
+    const ident = opencodeClientIdentity();
+    h["Content-Type"] = "application/json";
+    if (!h["User-Agent"]) h["User-Agent"] = ident["User-Agent"];
+    h["x-opencode-client"] = "desktop";
+    h["x-opencode-session"] = ident["x-opencode-session"];
+    h["x-opencode-request"] = ident["x-opencode-request"];
+    h["x-opencode-project"] = "global";
+  }
   if (apiKey) h["Authorization"] = `Bearer ${apiKey}`;
   return h;
 }

package/src/opencode-identity.js

@@ -0,0 +1,51 @@
+import crypto from "node:crypto";
+
+// opencode 客户端身份规格单一来源（源码 packages/schema/src/identifier.ts +
+// packages/opencode/src/session/llm/request.ts）：id = <prefix>_ + 12 位 hex
+// (timestamp*4096+同毫秒计数，截 48bit) + 14 位 base62，共 26 字符；UA 必须 "opencode/<semver>"。
+// zen 免费层 2026-09-17 起按该规格放行（缺版本 UA 或 id 形状不符 → 403 FreeTierError）。
+const ID_CHARS = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+const DEFAULT_OPENCODE_UA = "opencode/1.17.20";
+let idLastTs = 0;
+let idCounter = 0;
+
+export function opencodeIdTail(timestamp = Date.now()) {
+  if (timestamp !== idLastTs) {
+    idLastTs = timestamp;
+    idCounter = 0;
+  }
+  idCounter += 1;
+  const value = BigInt(timestamp) * 0x1000n + BigInt(idCounter);
+  let tail = "";
+  for (let i = 0; i < 6; i++) {
+    tail += Number((value >> BigInt(40 - 8 * i)) & 0xffn)
+      .toString(16)
+      .padStart(2, "0");
+  }
+  for (const b of crypto.randomBytes(14)) tail += ID_CHARS[b % 62];
+  return tail;
+}
+
+// 摘要派生：同种子恒同 id（会话亲和），形态仍合规
+export function digestIdTail(digest) {
+  let tail = digest.subarray(0, 6).toString("hex");
+  for (const b of digest.subarray(6, 20)) tail += ID_CHARS[b % 62];
+  return tail;
+}
+
+export function genId(prefix) {
+  return `${prefix}${opencodeIdTail()}`;
+}
+
+export function opencodeUa() {
+  return process.env.MSLXDFF_OPENCODE_UA || DEFAULT_OPENCODE_UA;
+}
+
+// 旁路（-chat curl 工具 / bench 直连）共用同一身份，避免各自伪造头再被 403
+export function opencodeClientIdentity() {
+  return {
+    "User-Agent": opencodeUa(),
+    "x-opencode-session": genId("ses_"),
+    "x-opencode-request": genId("msg_"),
+  };
+}

package/src/upstream.js

@@ -7,11 +7,9 @@ import { isFreeModel } from "./models.js";
 import { fmtShanghaiYMDHMS } from "./time.js";
 import { createTransport } from "./transport/index.js";
 import { isResponsesModel, chatToResponsesBody, toChatResponse, reshapeResponsesSse } from "./upstream-responses.js";
-import { uuid } from "./compat.js";
+import { digestIdTail, genId, opencodeClientIdentity, opencodeUa } from "./opencode-identity.js";
 
-function genId(prefix) {
-  return `${prefix}${uuid().replace(/-/g, "")}`;
-}
+export { opencodeClientIdentity, opencodeUa };
 // 上游按 session 做粘性路由（实测：固定 session 两次请求均 ~1.2s；每次随机时可能撞冷机器 26s+）。
 // 客户端（opencode AI SDK 路径）不带会话标识 → 用对话首两条消息（system + 首条 user）哈希做稳定会话：
 // 同一会话多轮里这两条不变 ⇒ 路由亲和稳定；不同会话天然分散。
@@ -25,7 +23,7 @@ function sessionFromMessages(messages) {
     };
     const seed = `${pick("system")}|${pick("user")}`.slice(0, 4000);
     if (seed === "|") return null;
-    return `ses_${crypto.createHash("sha1").update(seed).digest("hex").slice(0, 32)}`;
+    return `ses_${digestIdTail(crypto.createHash("sha1").update(seed).digest())}`;
   } catch {
     return null;
   }
@@ -56,7 +54,7 @@ export function createOpencodeHeaderBuilder({ authToken = "public", env = proces
         "Content-Type": "application/json",
         Authorization: "",
         "x-opencode-client": "desktop",
-        "User-Agent": "opencode",
+        "User-Agent": opencodeUa(),
         "HTTP-Referer": "https://hermes-agent.nousresearch.com",
         "X-Title": "Hermes Agent",
       }
@@ -73,7 +71,7 @@ export function createOpencodeHeaderBuilder({ authToken = "public", env = proces
     const base = {
       ...baseHeaders,
       Accept: isStream ? "text/event-stream" : "*/*",
-      "User-Agent": "opencode",
+      "User-Agent": opencodeUa(),
       "x-opencode-session": session,
       "x-opencode-request": genId("msg_"),
       "x-opencode-project": "global",