mslxdff 0.1.136 → 0.1.140

package/src/runtime/qoder-checkin.js

@@ -0,0 +1,93 @@
+/**
+ * qoder 每日自动签到（daemon 内置），仿 src/runtime/traework-checkin.js。
+ * 开关：MSLXDFF_QODER_CHECKIN=0 关闭（默认开）；时间：MSLXDFF_QODER_CHECKIN_HOUR（默认 9 点）。
+ * 账号源 = auths/qoder-<uid>.json（每号自带 region，cn 走 daily-check-in，global 走 campaigns）。
+ * 只领真积分（CLAIM_BENEFIT / daily-check-in）；VIEW_DETAILS 等促销条目需手动 --any 才碰。
+ */
+import { todayKey, nextRunDelayMs, shouldCatchUp } from "./workbuddy-checkin.js";
+
+export function isCheckinEnabled(env = process.env) {
+  const v = String(env.MSLXDFF_QODER_CHECKIN ?? "1").trim().toLowerCase();
+  return !["0", "false", "off", "no"].includes(v);
+}
+
+export function getCheckinHour(env = process.env) {
+  const h = Number(env.MSLXDFF_QODER_CHECKIN_HOUR);
+  return Number.isInteger(h) && h >= 0 && h <= 23 ? h : 9;
+}
+
+export async function setupQoderCheckin({ bus, logs } = {}) {
+  function emit(type, data = {}) {
+    const entry = { ts: Date.now(), type, ...data };
+    try { bus?.emit(entry); } catch {}
+    try { logs?.appendEvent?.(entry); } catch {}
+    try { console.log(`[qoder-checkin] ${type} ${JSON.stringify(data)}`.slice(0, 500)); } catch {}
+  }
+  if (!isCheckinEnabled()) {
+    console.log("[qoder-checkin] disabled (set MSLXDFF_QODER_CHECKIN=1 to enable)");
+    emit("qoder-checkin-disabled");
+    return { enabled: false };
+  }
+  const hour = getCheckinHour();
+  console.log(`[qoder-checkin] enabled: daily ${String(hour).padStart(2, "0")}:00 local`);
+  emit("qoder-checkin-enabled", { hour });
+
+  const stateMod = await import("../state.js");
+  const { listAccountDocs } = await import("../providers/qoder/account-store.js");
+
+  let running = false;
+  async function runOnce(reason) {
+    if (running) return { skipped: "already-running" };
+    running = true;
+    try {
+      const accounts = listAccountDocs()
+        .map((d) => ({ uid: d.uid, deviceToken: d.doc?.auth?.deviceToken || "", region: d.doc?.auth?.region || "global" }))
+        .filter((a) => a.deviceToken);
+      if (!accounts.length) {
+        emit("qoder-checkin-no-accounts", { reason });
+        return { ok: false, reason: "no-accounts" };
+      }
+      const { runCheckin } = await import("../providers/qoder/checkin.js");
+      const results = [];
+      for (const a of accounts) {
+        try {
+          const r = await runCheckin({ deviceToken: a.deviceToken, region: a.region });
+          results.push({ uid: String(a.uid).slice(0, 8), region: r.region, ok: r.ok, status: r.status, amount: r.amount, msg: r.message });
+        } catch (e) {
+          results.push({ uid: String(a.uid).slice(0, 8), region: a.region, ok: false, status: "error", msg: String(e?.message || e).slice(0, 120) });
+        }
+      }
+      const okCount = results.filter((r) => r.ok).length;
+      const date = todayKey();
+      try {
+        stateMod.writeStateImmediate(stateMod.defaultStateFile(), {
+          qoderCheckin: { date, at: Date.now(), ok: okCount, total: results.length, accounts: results },
+        });
+      } catch {}
+      for (const r of results) emit("qoder-checkin-account", { ...r, reason });
+      emit("qoder-checkin-done", { date, ok: okCount, total: results.length, reason });
+      return { ok: okCount > 0, okCount, total: results.length };
+    } catch (e) {
+      emit("qoder-checkin-failed", { error: String(e?.message || e).slice(0, 200), reason });
+      return { ok: false, error: String(e?.message || e).slice(0, 200) };
+    } finally {
+      running = false;
+    }
+  }
+
+  try {
+    const lastDate = stateMod.readState(stateMod.defaultStateFile())?.qoderCheckin?.date || "";
+    if (shouldCatchUp({ lastDate, hour })) {
+      setTimeout(() => { runOnce("catch-up").catch(() => {}); }, 90_000).unref?.();
+      console.log(`[qoder-checkin] catch-up scheduled (last=${lastDate || "never"})`);
+    }
+  } catch {}
+  function arm() {
+    const delay = nextRunDelayMs(new Date(), hour);
+    setTimeout(() => {
+      runOnce("daily").catch(() => {}).finally(arm);
+    }, delay).unref?.();
+  }
+  arm();
+  return { enabled: true, hour, runOnce };
+}

package/src/runtime/server-lifecycle.js

@@ -123,10 +123,10 @@ export async function startServerLifecycle({ VERSION, token, created, upstream,
       else if (r.ok) console.log(`[preheat] opencode models ok ${r.status} ${r.ms}ms`);
       else console.log(`[preheat] opencode models failed ${r.error || r.status || ""} ${r.ms || 0}ms`);
     }).catch(() => {});
-    // clinebot free 目录自检（独立于 opencode 连接预热：dispatcher.preheat 只做默认供应商）
+    // cline free 目录自检（独立于 opencode 连接预热：dispatcher.preheat 只做默认供应商）
     // 见 .agents/notes/implemented/simplification/2026-09-16-preheat-opencode-only.md
     try {
-      const cline = upstream?.byId?.get?.("clinebot") ?? upstream?.byId?.get?.("cline");
+      const cline = upstream?.byId?.get?.("cline");
       if (cline?.checkFreeUpdates) void cline.checkFreeUpdates().catch(() => {});
     } catch {}
   }, 100).unref?.();

package/src/runtime/traework-checkin.js

@@ -0,0 +1,104 @@
+/**
+ * traework 每日自动签到（daemon 内置），仿 src/runtime/workbuddy-checkin.js。
+ * 开关：MSLXDFF_TRAEWORK_CHECKIN=0 关闭（默认开）；时间：MSLXDFF_TRAEWORK_CHECKIN_HOUR（默认 9 点）。
+ * 多账号全签 + 启动补签 + 每日定时。
+ */
+import { compatFetch } from "../compat.js";
+import { todayKey, nextRunDelayMs, shouldCatchUp } from "./workbuddy-checkin.js";
+
+export function isCheckinEnabled(env = process.env) {
+  const v = String(env.MSLXDFF_TRAEWORK_CHECKIN ?? "1").trim().toLowerCase();
+  return !["0", "false", "off", "no"].includes(v);
+}
+
+export function getCheckinHour(env = process.env) {
+  const h = Number(env.MSLXDFF_TRAEWORK_CHECKIN_HOUR);
+  return Number.isInteger(h) && h >= 0 && h <= 23 ? h : 9;
+}
+
+export async function setupTraeworkCheckin({ bus, logs } = {}) {
+  function emit(type, data = {}) {
+    const entry = { ts: Date.now(), type, ...data };
+    try { bus?.emit(entry); } catch {}
+    try { logs?.appendEvent?.(entry); } catch {}
+    try { console.log(`[traework-checkin] ${type} ${JSON.stringify(data)}`.slice(0, 500)); } catch {}
+  }
+  if (!isCheckinEnabled()) {
+    console.log("[traework-checkin] disabled (set MSLXDFF_TRAEWORK_CHECKIN=1 to enable)");
+    emit("traework-checkin-disabled");
+    return { enabled: false };
+  }
+  const hour = getCheckinHour();
+  console.log(`[traework-checkin] enabled: daily ${String(hour).padStart(2, "0")}:00 local`);
+  emit("traework-checkin-enabled", { hour });
+
+  const stateMod = await import("../state.js");
+  const fetchImpl = compatFetch;
+
+  let running = false;
+  async function runOnce(reason) {
+    if (running) return { skipped: "already-running" };
+    running = true;
+    try {
+      const cfg = stateMod.loadProviderConfigs().traework || {};
+      const keys = [...(Array.isArray(cfg.keys) ? cfg.keys : [])];
+      const authList = [...(Array.isArray(cfg.auths) ? cfg.auths : [])];
+      if (!keys.length || !authList.length) {
+        emit("traework-checkin-no-accounts", { reason });
+        return { ok: false, reason: "no-accounts" };
+      }
+      const { checkinStatus, checkinClaim } = await import("../providers/traework/checkin.js");
+      const results = await Promise.all(authList.map(async (auth, i) => {
+        const at = keys[i];
+        const uid = auth?.uid;
+        if (!uid || !at) return { uid, ok: false, msg: "missing key/uid" };
+        try {
+          const cred = { accessToken: at, deviceId: auth?.deviceId || "", uid };
+          const st = await checkinStatus({ cred, fetchImpl });
+          if (st.checkedIn) return { uid, ok: true, already: true, credits: st.credits };
+          if (!st.enable) return { uid, ok: false, msg: "checkin not enabled" };
+          await checkinClaim({ cred, fetchImpl });
+          const st2 = await checkinStatus({ cred, fetchImpl });
+          return { uid, ok: true, already: false, credits: st2.credits };
+        } catch (e) {
+          return { uid, ok: false, msg: String(e?.message || e).slice(0, 120) };
+        }
+      }));
+      const okCount = results.filter((r) => r.ok).length;
+      const date = todayKey();
+      try {
+        stateMod.writeStateImmediate(stateMod.defaultStateFile(), {
+          traeworkCheckin: { date, at: Date.now(), ok: okCount, total: results.length, accounts: results.map((r) => ({ uid: String(r.uid || "").slice(0, 8), ok: r.ok, already: !!r.already })) },
+        });
+      } catch {}
+      for (const r of results) {
+        emit("traework-checkin-account", { uid: String(r.uid || "").slice(0, 8), ok: r.ok, already: !!r.already, msg: String(r.msg || "").slice(0, 120), reason });
+      }
+      emit("traework-checkin-done", { date, ok: okCount, total: results.length, reason });
+      return { ok: okCount > 0, okCount, total: results.length };
+    } catch (e) {
+      emit("traework-checkin-failed", { error: String(e?.message || e).slice(0, 200), reason });
+      return { ok: false, error: String(e?.message || e).slice(0, 200) };
+    } finally {
+      running = false;
+    }
+  }
+
+  // 启动补签
+  try {
+    const lastDate = stateMod.readState(stateMod.defaultStateFile())?.traeworkCheckin?.date || "";
+    if (shouldCatchUp({ lastDate, hour })) {
+      setTimeout(() => { runOnce("catch-up").catch(() => {}); }, 60_000).unref?.();
+      console.log(`[traework-checkin] catch-up scheduled (last=${lastDate || "never"})`);
+    }
+  } catch {}
+  // 每日定时
+  function arm() {
+    const delay = nextRunDelayMs(new Date(), hour);
+    setTimeout(() => {
+      runOnce("daily").catch(() => {}).finally(arm);
+    }, delay).unref?.();
+  }
+  arm();
+  return { enabled: true, hour, runOnce };
+}

package/src/state/migrations/cline-unify.js

@@ -0,0 +1,94 @@
+/**
+ * 幂等状态迁移：把遗留 id 的 cline 配置合并进 `cline` 并删除旧键（供应商 id 统一）。
+ * 见 .scratch/cline-unify/SPEC.md §4.5；语义：keys 去重 + 剔除 sk_ 旧式 key、allowlist 求并、baseUrl 收敛为根。
+ * 绝不触碰 modelPicks / modelErrors / modelLatencies（旧 clinebot/* 键交给既有 prune --orphans）。
+ */
+import { chmodSync, copyFileSync, existsSync } from "node:fs";
+import { defaultStateFile, readState, writeStateImmediate } from "../store.js";
+import { normalizeAllowedModel, normalizeEndpointPath } from "../provider-config.js";
+import { appendEvent } from "../../logs.js";
+
+export const CLINE_DEFAULT_BASE_URL = "https://api.cline.bot";
+export const LEGACY_CLINE_IDS = ["clinebot", "cline-bot"];
+
+/**
+ * cline 的 chat URL = `baseUrl` + `loadProviderChatPath()`；而 loadProviderChatPath 缺省**恒**返回
+ * `/chat/completions`（src/providers/cline/index.js 里那个按 `/api/v1` 智能兜底的 defaultChat 是死代码，
+ * 永远轮不到它生效）。所以 baseUrl 必须自带 `/api/v1`，否则会拼成 `https://api.cline.bot/chat/completions`
+ * → 上游 404（2026-09-20 端到端实测）。只对 cline 官方域补全，自定义/代理 baseUrl 不做猜测。
+ */
+export function normalizeClineBaseUrl(u) {
+  const s = String(u || "").trim().replace(/\/+$/, "");
+  if (!s) return `${CLINE_DEFAULT_BASE_URL}/api/v1`;
+  if (/\/api\/v1$/i.test(s)) return s;
+  if (/^https?:\/\/api\.cline\.bot$/i.test(s)) return `${s}/api/v1`;
+  return s;
+}
+
+function uniq(list) { return [...new Set(list)]; }
+function strList(v) { return Array.isArray(v) ? v.map((x) => String(x || "").trim()).filter(Boolean) : []; }
+// sk_ 旧式 API key（D3：cline 只认 refreshToken，数据层剔除）
+function isLegacySkKey(k) { return /^sk[-_]/i.test(k); }
+
+/** 合并后的 cline 配置：只重建 cline 自己的字段，不吸收旧 id 的 allowAnyModels（避免意外放宽安全默认） */
+function mergeConfig(cl, bot) {
+  const next = {
+    baseUrl: normalizeClineBaseUrl(cl.baseUrl || bot.baseUrl),
+    keys: uniq([...strList(cl.keys), ...strList(bot.keys)]).filter((k) => !isLegacySkKey(k)),
+    allowedModels: uniq([...strList(cl.allowedModels), ...strList(bot.allowedModels)]
+      .map((m) => normalizeAllowedModel(m, "cline")).filter(Boolean)),
+  };
+  if (Array.isArray(cl.auths) && cl.auths.length) next.auths = cl.auths;
+  if (typeof cl.allowAnyModels === "boolean") next.allowAnyModels = cl.allowAnyModels;
+  const modelsPath = normalizeEndpointPath(cl.modelsPath || bot.modelsPath || "");
+  if (modelsPath) next.modelsPath = modelsPath;
+  const chatPath = normalizeEndpointPath(cl.chatPath || bot.chatPath || "");
+  if (chatPath) next.chatPath = chatPath;
+  return next;
+}
+
+/** 备份到同目录 state.json.bak-<ISO时间戳>，权限收紧 0600（含凭据，绝不外泄） */
+function backupState(file, now = new Date()) {
+  const stamp = now.toISOString().replace(/[:.]/g, "-");
+  const target = `${file}.bak-${stamp}`;
+  copyFileSync(file, target);
+  try { chmodSync(target, 0o600); } catch {}
+  return target;
+}
+
+/**
+ * @param {{file?:string, dryRun?:boolean, backup?:boolean}} opts
+ * @returns {{applied:boolean, changed:boolean, reason?:string, before?:object, after?:object, backup?:string}}
+ *   `applied` 仅在真正落盘时为 true；before/after 只含计数，绝不含凭据明文。
+ */
+export function clineUnifyMigration({ file = defaultStateFile(), dryRun = false, backup = true } = {}) {
+  const configs = readState(file).providerConfigs || {};
+  const legacyId = LEGACY_CLINE_IDS.find((pid) => configs[pid] && typeof configs[pid] === "object");
+  if (!legacyId) return { applied: false, changed: false, reason: "no legacy cline id" };
+  const bot = configs[legacyId];
+  const cl = configs.cline && typeof configs.cline === "object" ? configs.cline : {};
+  const next = mergeConfig(cl, bot);
+  const before = {
+    keys: strList(cl.keys).length + strList(bot.keys).length,
+    allowedModels: uniq([...strList(cl.allowedModels), ...strList(bot.allowedModels)]).length,
+  };
+  const after = { keys: next.keys.length, allowedModels: next.allowedModels.length };
+  if (dryRun) return { applied: false, changed: true, reason: "dry-run", before, after };
+  let backupPath = null;
+  if (backup) {
+    try { if (existsSync(file)) backupPath = backupState(file); } catch {}
+  }
+  const merged = { ...configs, cline: next };
+  for (const pid of LEGACY_CLINE_IDS) delete merged[pid];
+  writeStateImmediate(file, { providerConfigs: merged });
+  try {
+    appendEvent({
+      type: "cline-unify-migrated",
+      from: legacyId,
+      keys: after.keys,
+      allowedModels: after.allowedModels,
+      backup: backupPath ? backupPath.replace(/\\/g, "/").split("/").pop() : null,
+    });
+  } catch {}
+  return { applied: true, changed: true, reason: `merged ${legacyId}`, before, after, ...(backupPath ? { backup: backupPath } : {}) };
+}

package/src/state/migrations.js

@@ -0,0 +1,33 @@
+/**
+ * 状态迁移运行器：按注册顺序执行（每个迁移自身幂等），供 daemon bootstrap
+ * （src/runtime/providers-setup.js，实例化任何 provider 之前）与 CLI 单点调用。
+ * 失败只收集不抛出：迁移不该拖垮 daemon 启动。
+ */
+import { defaultStateFile } from "./store.js";
+import { clineUnifyMigration } from "./migrations/cline-unify.js";
+
+export const STATE_MIGRATIONS = [
+  { id: "cline-unify", run: (opts) => clineUnifyMigration(opts) },
+];
+
+/**
+ * @param {{file?:string, dryRun?:boolean, backup?:boolean}} opts
+ * @returns {Promise<{applied:string[], skipped:string[], errors:object[], details:object}>}
+ */
+export async function runStateMigrations({ file = defaultStateFile(), dryRun = false, backup = true } = {}) {
+  const applied = [];
+  const skipped = [];
+  const errors = [];
+  const details = {};
+  for (const m of STATE_MIGRATIONS) {
+    try {
+      const r = await m.run({ file, dryRun, backup });
+      details[m.id] = r;
+      if (r?.applied) applied.push(m.id);
+      else skipped.push(m.id);
+    } catch (err) {
+      errors.push({ id: m.id, error: String(err?.message || err) });
+    }
+  }
+  return { applied, skipped, errors, details };
+}

package/src/state/schemas/token.js

@@ -1,13 +1,17 @@
-import { mkdirSync, readFileSync, writeFileSync, existsSync, statSync } from "node:fs";
+import { mkdirSync, readFileSync, writeFileSync, existsSync, statSync, chmodSync } from "node:fs";
 import { dirname } from "node:path";
 import { defaultStateFile, tokenFile, generateToken, readState, writeStateImmediate, getEntry } from "../store.js";
 import { fmtShanghaiYMDHMS } from "../../time.js";
 
+// 主 Bearer token 镜像落盘：0600 + 显式 chmod。
+// 注意 writeFileSync 的 mode 只在“新建文件”时生效，已存在的文件权限不会被它改；
+// 升级前生成的老文件会永远停在 0644（同机其他用户可读），所以必须再 chmod 一次兜住。
 function syncTokenFile(token, file) {
   try {
     const tf = tokenFile(file);
     mkdirSync(dirname(tf), { recursive: true });
-    writeFileSync(tf, String(token || "").trim() + "\n", "utf8");
+    writeFileSync(tf, String(token || "").trim() + "\n", { encoding: "utf8", mode: 0o600 });
+    try { chmodSync(tf, 0o600); } catch {}
   } catch {}
 }
 

package/src/state/schemas/use-group.js

@@ -45,8 +45,8 @@ export function getUseGroupKeysEnv() {
   return parseBool(raw) === true;
 }
 
-// 取模型对应的供应商 head：兼容 canonical（workbuddy/xxx、clinebot/xxx）、
-// dash 别名（clinebot-xxx → 还原后取 head）、裸 id（归 opencode）。
+// 取模型对应的供应商 head：兼容 canonical（workbuddy/xxx、cline/xxx）、
+// dash 别名（cline-xxx → 还原后取 head）、裸 id（归 opencode）。
 // oc/ 别名归一到 opencode（与 splitModelId 一致：别名表小写 key，先小写再归一）。
 export function providerHeadOf(model) {
   let s = String(model || "").trim();
@@ -70,14 +70,14 @@ export function providerHeadOf(model) {
 // 全局开关：off 则所有供应商都不走组员网络（via-route/hedge/peer/broadband 全禁），仅本机直连
 // workbuddy/cline 系硬禁组员（ADR-0015 local-only）：本机账号绑定（workbuddy auths/*.json + uid / cline refreshToken），
 // 组员没有该账号转过去也用不了，且本地直连最快——无论全局开关一律仅本机直连。
-// model 兼容 canonical（workbuddy/xxx、clinebot/xxx）与 dash（workbuddy-xxx、cline-xxx）两种形态。
+// model 兼容 canonical（workbuddy/xxx、cline/xxx）与 dash（workbuddy-xxx、cline-xxx）两种形态。
 export function isHardLocalOnly(model) {
   const head = providerHeadOf(model);
   if (!head) return false;
   try {
     return classifyProvider(head) === "local-only";
   } catch {
-    return head === "workbuddy" || head === "cline" || head === "clinebot";
+    return head === "workbuddy" || head === "cline";
   }
 }
 

package/src/sync-workbuddy.js

@@ -119,7 +119,7 @@ export async function syncToWorkbuddy({ id, token, port, file, keep } = {}) {
     if (arr[idx].useCustomProtocol === undefined) arr[idx].useCustomProtocol = false;
     action = "updated";
   } else {
-    // 检查归一化 id 是否与已有条目冲突（如已存在 clinebot-z-ai-glm-5.3-flash 但不是本地 URL）
+    // 检查归一化 id 是否与已有条目冲突（如已存在 cline-z-ai-glm-5.3-flash 但不是本地 URL）
     const conflict = arr.findIndex((m) => m && m.id === wbId);
     if (conflict >= 0) {
       // 已有同名条目且非我们写的，跳过不覆盖

package/src/upstream-engine/index.js

@@ -1,4 +1,4 @@
-// 上游引擎选择（ADR-0017）：sdk=AI SDK wire 层（缺省），legacy=原实现（显式/Node16 回退）。
+// 上游引擎选择（ADR-0017）：sdk=AI SDK wire 层（缺省），legacy=原实现（显式指定或 SDK 装载失败回退）。
 // Note: 缺省即 sdk；chat 类走 /chat/completions（@ai-sdk/openai-compatible），
 // responses 类（muse-spark*）走 /responses（@ai-sdk/openai）；非流式与 anon 重试委派 legacy，
 // SDK 不可用自动回退并告警一次 — 见 .scratch/ai-sdk-upstream/{SPEC.md,SPEC-p4-turnon.md,SPEC-p3-responses.md} 与 docs/adr/0017