mslxdff 0.1.136 → 0.1.140

package/src/providers/cline/chat.js

@@ -1,20 +1,20 @@
 import { joinUrl, sleep } from "../base.js";
 import { clineHeaders } from "./headers.js";
 import { createTransport } from "../../transport/index.js";
+import { normalizeProviderId } from "../model-id.js";
 import { createSdkDispatch } from "../../upstream-engine/sdk/dispatch.js";
 
 function genSessionId() { return `sess_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`; }
 
-// stripProviderPrefix 去掉本地供应商前缀，发上游用裸模型 id。
-// 上游（对标 cline2api-workers MODELS）只认裸 id："deepseek/deepseek-v4-flash"、
-// "poolside/laguna-s-2.1:free"；本地 "clinebot/deepseek/..." 需取后两段。
-// 两段及以内视为已是裸 id，原样透传。
-function stripProviderPrefix(id) {
-  const parts = String(id || "").split("/").filter(Boolean);
-  if (parts.length > 2) return parts.slice(1).join("/");
-  return String(id || "");
+// stripProviderPrefix 只剥「本供应商」前缀（cline/<裸 id> → 裸 id），非本前缀（含上游自带多段 id
+// 如 meta/vendor/x）原样透传，不误削首段（旧实现按段数剥曾是潜在 bug）。
+function stripProviderPrefix(model, providerId) {
+  const s = String(model || "");
+  const i = s.indexOf("/");
+  if (i <= 0) return s;
+  const low = (v) => normalizeProviderId(String(v || "").toLowerCase());
+  return low(s.slice(0, i)) === low(providerId) ? s.slice(i + 1) : s;
 }
-
 function unwrapData(obj) {
   if (obj && obj.data && typeof obj.data === "object") {
     const d = obj.data;
@@ -169,7 +169,7 @@ export function createChatService({
     const model = body?.model || "deepseek/deepseek-v4-flash";
     const sessionId = genSessionId();
     const isStream = body?.stream === true;
-    const upstreamModel = stripProviderPrefix(model);
+    const upstreamModel = stripProviderPrefix(model, id);
     // token 口径双写：对标官方 withMaxCompletionTokensForReasoningModels——
     // cline 上游默认 reasoning_effort high，推理模型认 max_completion_tokens，
     // 只发 max_tokens 会被部分通道拒；双写兼容最稳。
@@ -182,7 +182,10 @@ export function createChatService({
       reasoning_effort: body?.reasoning_effort || body?.reasoningEffort || "high",
       messages: body?.messages || [],
     };
-    const forceStream = !isStream && String(upstreamModel).startsWith("deepseek/");
+    // 部分免费通道（deepseek 家族，含 cline-free/deepseek-*）原生非流式不可靠
+    //（500 empty response）：这类模型在内部走 stream+聚合成 JSON，对外仍按请求方
+    // stream 标志返回（true 直透，false 聚合）。其它模型完全尊重请求方，不强制。
+    const forceStream = !isStream && String(upstreamModel).toLowerCase().includes("deepseek");
     if (isStream || forceStream) upstreamBody.stream = true;
     for (const k of ["temperature", "top_p", "tools", "tool_choice", "stop", "presence_penalty", "frequency_penalty", "response_format", "user", "n", "seed"]) {
       if (body[k] !== undefined) upstreamBody[k] = body[k];

package/src/providers/cline/free-catalog.js

@@ -0,0 +1,71 @@
+/**
+ * Cline 免费目录深模块：只认上游 `free` 数组（公开接口，无需鉴权、无凭据）。
+ * GET {bareHost}/api/v1/ai/cline/recommended-models → { recommended, free, clinePass, clineCloud }
+ * 供 cline/models.js（聚合目录 + 启动自检）与 `-provider cline free` CLI 共用；缓存由调用方持有。
+ */
+import { compatFetch } from "../../compat.js";
+import { joinUrl } from "../base.js";
+
+export const FREE_CATALOG_PATH = "/api/v1/ai/cline/recommended-models";
+export const DEFAULT_CLINE_BASE = "https://api.cline.bot";
+
+// 上游不可达时的内置兜底（2026-09-20 实测 5 个；只有 id 与短名，无凭据）
+export const FALLBACK_FREE = Object.freeze([
+  { id: "cline-free/deepseek-v4.1-flash", name: "deepseek-v4.1-flash" },
+  { id: "cline-free/muse-spark-1.3-contributor", name: "muse-spark-1.3-contributor" },
+  { id: "z-ai/glm-5.3-flash", name: "glm-5.3-flash" },
+  { id: "cline-free/solar-pro4", name: "solar-pro4" },
+  { id: "poolside/laguna-s-2.1:free", name: "laguna-s-2.1:free" },
+]);
+export const FALLBACK_FREE_IDS = FALLBACK_FREE.map((m) => m.id);
+
+/** 目录 URL 归一：baseUrl 可能是裸 host 或带 /api/v1 的老 clinebot 形态；customPath 尊重用户自定义端点 */
+export function catalogUrl(baseUrl, customPath) {
+  const raw = String(baseUrl || "").trim() || DEFAULT_CLINE_BASE;
+  const bare = raw.replace(/\/+$/, "").replace(/\/api\/v1\/?$/, "") || DEFAULT_CLINE_BASE;
+  const p = String(customPath || "").trim();
+  if (p && p !== "/models" && p !== FREE_CATALOG_PATH) return joinUrl(bare, p);
+  return joinUrl(bare, FREE_CATALOG_PATH);
+}
+
+/** 只取 json.free（对象 {id,name,...} 或裸字符串两种形态都容忍） */
+function pickFree(json) {
+  const arr = Array.isArray(json?.free) ? json.free : [];
+  const out = [];
+  for (const m of arr) {
+    if (typeof m === "string" && m.trim()) out.push({ id: m.trim() });
+    else if (m && typeof m.id === "string" && m.id.trim()) out.push({ ...m, id: m.id.trim(), name: String(m.name || "") });
+  }
+  return out;
+}
+
+/**
+ * 拉免费目录。
+ * @returns {Promise<{ok:boolean, status:number, url:string, models:object[], ids:string[], error?:string}>}
+ *   ok=false 时 models/ids 为空（兜底由调用方决定）；authorization 供私有/自定义目录可选透传。
+ */
+export async function fetchFreeCatalog({ baseUrl, customPath, fetchImpl, dispatcher, authorization, timeoutMs = 15_000 } = {}) {
+  const url = catalogUrl(baseUrl, customPath);
+  const impl = fetchImpl || compatFetch;
+  const headers = { Accept: "application/json" };
+  if (authorization) headers.Authorization = authorization;
+  const opts = { headers };
+  if (dispatcher) opts.dispatcher = dispatcher;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(new Error("cline free catalog timed out")), timeoutMs);
+  timer.unref?.();
+  opts.signal = controller.signal;
+  try {
+    const res = await impl(url, opts);
+    const status = Number(res?.status) || 0;
+    if (!res?.ok) return { ok: false, status, url, models: [], ids: [], error: `HTTP ${status}` };
+    const json = await res.json().catch(() => null);
+    const models = pickFree(json);
+    if (!models.length) return { ok: false, status, url, models: [], ids: [], error: "empty free list" };
+    return { ok: true, status, url, models, ids: models.map((m) => m.id) };
+  } catch (err) {
+    return { ok: false, status: 0, url, models: [], ids: [], error: String(err?.message || err) };
+  } finally {
+    clearTimeout(timer);
+  }
+}

package/src/providers/cline/index.js

@@ -41,14 +41,7 @@ export function createClineProvider({
   if (!fetchImpl) fetchImpl = UndiciFetch || compatFetch;
 
   const rawKeys = collectApiKeysGeneric(id, apiKeys, apiKey, (pid) => loadProviderKeys(pid, file ? { file } : {}));
-  // 同时兼容 cline 与 clinebot 两个 id 的 keys（用户可能配在任一）
-  let extraKeys = [];
-  try {
-    const altId = id === "cline" ? "clinebot" : "cline";
-    const alt = loadProviderKeys(altId, file ? { file } : {});
-    if (alt.length) extraKeys = alt;
-  } catch {}
-  const allKeys = [...new Set([...rawKeys, ...extraKeys].map((k) => String(k).trim()).filter(Boolean))];
+  const allKeys = [...new Set(rawKeys.map((k) => String(k).trim()).filter(Boolean))];
   const hasRefresh = allKeys.some((k) => isRefreshToken(k, id));
   const ring = createKeyRing(allKeys.filter((k) => !isRefreshToken(k, id)), { cooldownMs });
 
@@ -78,14 +71,7 @@ export function createClineProvider({
             // 优先写 providerConfigs，兼容旧路径由 saveProviderConfig 处理
             saveProviderConfig(id, { baseUrl: resolvedBase, keys: next }, file ? { file } : {});
           }
-          // altId 同步
-          const altId = id === "cline" ? "clinebot" : "cline";
-          const cur2 = loadProviderKeys(altId, file ? { file } : {});
-          const idx2 = cur2.indexOf(oldRefreshToken);
-          if (idx2 >= 0) {
-            const next2 = [...cur2]; next2[idx2] = newRefreshToken;
-            saveProviderConfig(altId, { baseUrl: resolvedBase, keys: next2 }, file ? { file } : {});
-          }
+          // 只回写 cline 自己（旧 id 轮换回写已随 id 统一删除，见 .scratch/cline-unify/SPEC.md §4.1）
         } catch {}
       },
     });

package/src/providers/cline/models.js

@@ -3,6 +3,7 @@ import { compatFetch } from "../../compat.js";
 import { joinModelId } from "../model-id.js";
 import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { dirname } from "node:path";
+import { fetchFreeCatalog, catalogUrl, FALLBACK_FREE as BUNDLED_FREE } from "./free-catalog.js";
 
 const { UndiciFetch } = getUndici();
 
@@ -18,30 +19,21 @@ export function createModelsService({ id, baseUrl, modelsPath, fetchImpl, dispat
   let cache = null;
   let fetchedAt = 0;
 
-  // 离线兜底：与上游 recommended-models 的 free 对齐（2026-09-16 实测 5 个）。
-  // 上游挂了/401 时也不返回空数组，保证 -provider clinebot models 与 picks 仍有免费可用。
-  const FALLBACK_FREE = [
-    { id: "cline-free/deepseek-v4.1-flash", name: "deepseek-v4.1-flash" },
-    { id: "cline-free/muse-spark-1.3-contributor", name: "muse-spark-1.3-contributor" },
-    { id: "z-ai/glm-5.3-flash", name: "glm-5.3-flash" },
-    { id: "cline-free/solar-pro4", name: "solar-pro4" },
-    { id: "poolside/laguna-s-2.1:free", name: "laguna-s-2.1:free" },
-  ];
+  // 离线兜底：与上游 recommended-models 的 free 对齐（常量在 free-catalog.js，2026-09-20 实测 5 个）。
+  // 上游挂了/401 时也不返回空数组，保证 -provider cline models 与 picks 仍有免费可用。
 
   function fallbackList() {
-    const out = FALLBACK_FREE.map((m) => ({ ...m, id: joinModelId(id, m.id) }));
+    const out = BUNDLED_FREE.map((m) => ({ ...m, id: joinModelId(id, m.id) }));
     cache = out; fetchedAt = Date.now();
     return out;
   }
 
-  // 端点归一化：官方取 {bareHost}/api/v1/ai/cline/recommended-models。
-  // baseUrl 可能是裸 host（https://api.cline.bot）也可能是带 /api/v1 的，
-  // 统一收敛到 …/api/v1/ai/cline/recommended-models；用户自定义 path 原样尊重。
+  // 端点归一化：官方取 {bareHost}/api/v1/ai/cline/recommended-models（URL 拼装与 CLI 共用 free-catalog.catalogUrl）。
+  // baseUrl 可能是裸 host（https://api.cline.bot）也可能是带 /api/v1 的，统一收敛；用户自定义 path 原样尊重。
   function resolveModelsUrl() {
     const custom = modelsPath && modelsPath !== "/models" && modelsPath !== "/ai/cline/recommended-models";
     if (custom) return joinUrl(resolvedBase, resolvedPath);
-    const bare = resolvedBase.replace(/\/api\/v1\/?$/, "");
-    return joinUrl(bare, "/api/v1/ai/cline/recommended-models");
+    return catalogUrl(resolvedBase);
   }
 
   async function listModels() {
@@ -85,7 +77,7 @@ export function createModelsService({ id, baseUrl, modelsPath, fetchImpl, dispat
     } catch {}
   }
 
-  // Note: clinebot free 目录三处同源（CLI 直查/聚合目录/兜底）+ daemon 启动自检快照（diff 写 daemon.log，不自动改 picks）— 见 .agents/notes/implemented/bug-fix/2026-09-16-clinebot-free-catalog-unify.md
+  // Note: cline free 目录三处同源（CLI 直查/聚合目录/兜底，统一在 free-catalog.js）+ daemon 启动自检快照（diff 写 daemon.log，不自动改 picks）— 见 .agents/notes/implemented/bug-fix/2026-09-16-clinebot-free-catalog-unify.md
   function detectFreeChanges(ids) {
     const prev = readSnapshotFree();
     if (!prev) {
@@ -104,46 +96,31 @@ export function createModelsService({ id, baseUrl, modelsPath, fetchImpl, dispat
     return { added, removed };
   }
 
-  // 启动自检入口：拉 recommended-models → 填缓存 → 对比快照报 free 增删。
+  // 启动自检入口：拉 recommended-models → 填缓存 → 对比快照报 free 增删（拉取与 CLI 共用 free-catalog.fetchFreeCatalog）。
   async function checkFreeUpdates() {
-    const url = resolveModelsUrl();
     const t0 = performance.now();
-    try {
-      const headers = { Accept: "application/json" };
-      const key = (loadKeys ? loadKeys(id)[0] : null) || (ring ? ring.next() : null);
-      if (key && !String(key).includes(".")) headers["Authorization"] = `Bearer ${key}`;
-      const opts = { headers };
-      if (dispatcher) opts.dispatcher = dispatcher;
-      const res = await fetchImpl(url, opts);
-      let freeIds = null;
-      try {
-        const text = await res.text().catch(() => "");
-        if (res.ok && text && isClineBotHost(resolvedBase)) {
-          const json = JSON.parse(text);
-          if (Array.isArray(json.free)) {
-            const valid = json.free.filter((m) => m && typeof m.id === "string");
-            if (valid.length) {
-              cache = valid.map((m) => ({ ...m, id: joinModelId(id, m.id) }));
-              fetchedAt = Date.now();
-              freeIds = valid.map((m) => m.id);
-            }
-          }
-        }
-      } catch {}
-      let change = null;
-      if (freeIds && snapshotPath) { try { change = detectFreeChanges(freeIds); } catch {} }
-      return {
-        ok: res.ok,
-        status: res.status,
-        ms: Math.round(performance.now() - t0),
-        ...(change?.added ? { freeAdded: change.added, freeRemoved: change.removed } : {}),
-      };
-    } catch (err) {
-      return { ok: false, error: String(err?.message || err), ms: Math.round(performance.now() - t0) };
+    const key = (loadKeys ? loadKeys(id)[0] : null) || (ring ? ring.next() : null);
+    const authorization = key && !String(key).includes(".") ? `Bearer ${key}` : undefined;
+    const cat = await fetchFreeCatalog({ baseUrl: resolvedBase, fetchImpl, dispatcher, authorization });
+    const ms = () => Math.round(performance.now() - t0);
+    const httpOk = cat.status >= 200 && cat.status < 300;
+    if (!httpOk || !cat.models.length || !isClineBotHost(resolvedBase)) {
+      return { ok: httpOk, status: cat.status, ...(httpOk ? {} : { error: cat.error }), ms: ms() };
     }
+    const valid = cat.models;
+    cache = valid.map((m) => ({ ...m, id: joinModelId(id, m.id) }));
+    fetchedAt = Date.now();
+    let change = null;
+    if (snapshotPath) { try { change = detectFreeChanges(valid.map((m) => m.id)); } catch {} }
+    return {
+      ok: true,
+      status: cat.status,
+      ms: ms(),
+      ...(change?.added ? { freeAdded: change.added, freeRemoved: change.removed } : {}),
+    };
   }
 
-  // preheat 保留为别名：dispatcher 已不再调 clinebot，手动/测试/未来钩子仍可用，行为与自检一致
+  // preheat 保留为别名：dispatcher 已不再调 cline，手动/测试/未来钩子仍可用，行为与自检一致
   async function preheat() {
     return checkFreeUpdates();
   }

package/src/providers/codearts/auth-pool.js

@@ -0,0 +1,148 @@
+// 账号池：keyring 的 key = 凭证 blob JSON 字符串（一华为账号一 blob，多账号=多 key 自动轮转）。
+// 职责：blob 解析；STS 凭证临期（默认提前 30min）单飞刷新；轮转写回（saveFn，原位换 key）；
+// 死号（终态失效）标记。瞬时失败保留旧凭证继续用，绝不清已存凭证（对齐 cline isInvalidGrant 纪律）。
+import { refreshStsCredential } from "./sts.js";
+import { REFRESH_SKEW_MS_DEFAULT } from "./const.js";
+
+/** 校验并解析 blob 字符串 → 账号运行时对象；非 blob（如 Bearer key）返回 null。 */
+export function accountFromBlob(raw) {
+  if (typeof raw !== "string" || !raw.trim().startsWith("{")) return null;
+  let j;
+  try { j = JSON.parse(raw); } catch { return null; }
+  if (!j || typeof j !== "object" || !j.refreshToken || !j.codeVerifier || !j.dpopJwk) return null;
+  const expMs = j.expiration ? Date.parse(j.expiration) : NaN;
+  return {
+    blob: raw,
+    userId: String(j.userId || j.user_id || ""),
+    userName: String(j.userName || j.user_name || ""),
+    domainId: String(j.domainId || j.domain_id || ""),
+    refreshToken: String(j.refreshToken || ""),
+    clientId: String(j.clientId || "codearts-agent"),
+    codeVerifier: String(j.codeVerifier || ""),
+    dpopJwk: j.dpopJwk || null,
+    accessKeyId: String(j.accessKeyId || ""),
+    secretAccessKey: String(j.secretAccessKey || ""),
+    securityToken: String(j.securityToken || ""),
+    expiration: String(j.expiration || ""),
+    expiresAtMs: Number.isFinite(expMs) ? expMs : 0,
+    dead: false,
+    lastError: "",
+    refreshInflight: null,
+  };
+}
+
+/** 账号对象 → 可持久化 blob（JSON 字符串；AK/SK/securityToken 是 STS 临时凭证快照）。 */
+export function blobFromAccount(acc) {
+  return JSON.stringify({
+    userId: acc.userId,
+    userName: acc.userName,
+    domainId: acc.domainId,
+    refreshToken: acc.refreshToken,
+    clientId: acc.clientId,
+    codeVerifier: acc.codeVerifier,
+    dpopJwk: acc.dpopJwk,
+    accessKeyId: acc.accessKeyId,
+    secretAccessKey: acc.secretAccessKey,
+    securityToken: acc.securityToken,
+    expiration: acc.expiration,
+  });
+}
+
+export function createAuthPool({
+  keys = [],
+  fetchImpl,
+  stsHost,
+  skewMs = REFRESH_SKEW_MS_DEFAULT,
+  clock = () => Date.now(),
+  saveFn,
+} = {}) {
+  const accounts = new Map(); // blob → account
+  for (const k of keys) {
+    const acc = accountFromBlob(k);
+    if (acc) accounts.set(k, acc);
+  }
+
+  function findByBlob(blob) { return accounts.get(blob) || null; }
+  function aliveAccounts() { return [...accounts.values()].filter((a) => !a.dead); }
+  function pickPrimary() { return aliveAccounts()[0] || null; }
+
+  async function doRefresh(acc) {
+    const r = await refreshStsCredential(
+      { refreshToken: acc.refreshToken, codeVerifier: acc.codeVerifier, dpopJwk: acc.dpopJwk, clientId: acc.clientId },
+      { fetchImpl, stsHost },
+    );
+    if (r.relogin) {
+      acc.dead = true;
+      acc.lastError = r.error || "re-login required";
+      return;
+    }
+    if (r.error) { acc.lastError = r.error; return; } // 瞬时失败：旧凭证还能用就继续用
+    // 成功：STS 字段更新（refreshToken 可能轮转），原位换 blob 写回
+    acc.accessKeyId = r.account.accessKeyId;
+    acc.secretAccessKey = r.account.secretAccessKey;
+    acc.securityToken = r.account.securityToken;
+    acc.expiration = r.account.expiration;
+    acc.expiresAtMs = r.account.expiresAtMs;
+    if (r.account.refreshToken) acc.refreshToken = r.account.refreshToken;
+    if (r.account.userId) acc.userId = r.account.userId;
+    if (r.account.userName) acc.userName = r.account.userName;
+    if (r.account.domainId) acc.domainId = r.account.domainId;
+    acc.lastError = "";
+    acc.dead = false;
+    const newBlob = blobFromAccount(acc);
+    if (newBlob !== acc.blob) {
+      const oldBlob = acc.blob;
+      accounts.delete(oldBlob);
+      acc.blob = newBlob;
+      accounts.set(newBlob, acc);
+      if (saveFn) { try { await saveFn({ oldBlob, newBlob, account: acc }); } catch {} }
+    }
+  }
+
+  /**
+   * 取某账号的有效 STS 凭证（临期自动单飞刷新）。
+   * @throws {Error} blob 不在池内 / 死号（message 带 re-login 提示）
+   */
+  async function getCredential(blob) {
+    const acc = findByBlob(blob);
+    if (!acc) throw new Error("codearts: credential not in pool — restart daemon or re-login");
+    if (acc.dead) throw new Error(`codearts account ${acc.userId || "?"} dead: ${acc.lastError || "re-login required"} — run: mslxdff -provider codearts login`);
+    const now = clock();
+    const needRefresh = !acc.securityToken || !acc.accessKeyId
+      || (acc.expiresAtMs > 0 && now >= acc.expiresAtMs - skewMs);
+    if (needRefresh && !acc.refreshInflight) {
+      acc.refreshInflight = doRefresh(acc).finally(() => { acc.refreshInflight = null; });
+    }
+    if (acc.refreshInflight) await acc.refreshInflight;
+    if (acc.dead) throw new Error(`codearts account ${acc.userId || "?"} dead: ${acc.lastError || "re-login required"} — run: mslxdff -provider codearts login`);
+    return acc;
+  }
+
+  /** 强制下次刷新（401 后调用；清掉缓存的 STS 临时凭证）。 */
+  function invalidate(blob) {
+    const acc = findByBlob(blob);
+    if (!acc) return;
+    acc.securityToken = "";
+    acc.accessKeyId = "";
+    acc.secretAccessKey = "";
+    acc.expiresAtMs = 0;
+  }
+
+  function markDead(blob, reason) {
+    const acc = findByBlob(blob);
+    if (!acc) return;
+    acc.dead = true;
+    acc.lastError = reason || acc.lastError;
+  }
+
+  /** ring 轮转写回后的重排（saveFn 成功后由 index 调用；saveFn 已处理则幂等）。 */
+  function replace(oldBlob, newBlob) {
+    const acc = accounts.get(oldBlob);
+    if (!acc || oldBlob === newBlob) return;
+    accounts.delete(oldBlob);
+    acc.blob = newBlob;
+    accounts.set(newBlob, acc);
+  }
+
+  return { findByBlob, aliveAccounts, pickPrimary, getCredential, invalidate, markDead, replace, accounts: () => [...accounts.values()] };
+}

package/src/providers/codearts/chat.js

@@ -0,0 +1,176 @@
+// CodeArts 聊天服务：上游 body/头组装 + SDK-HMAC-SHA256 签名 + 401 刷新重试 + 环形切号。
+// 上游恒 stream:true（chatBodyV2 契约）；流式客户端转 OpenAI SSE，非流式聚合回 JSON。
+import crypto from "node:crypto";
+import { joinUrl } from "../base.js";
+import { createTransport } from "../../transport/index.js";
+import { SNAP_BASE, EP_CHAT_V2, chatBaseHeaders, MAAS_TYPE_HEADER, MAAS_BENEFIT } from "./const.js";
+import { signRequest } from "./sign.js";
+import { newChatId, preflightResponse, sseToOpenAIResponse, aggregateToCompletion, UpstreamEventError } from "./stream.js";
+
+const MODEL_RULES = [
+  { match: (m) => String(m || "").toLowerCase().includes("deepseek"), scope: "all" },
+  { match: (m) => /(^kimi-|kimi)/i.test(String(m || "")), scope: "toolCalls" },
+];
+
+// DeepSeek 系思考模式要求 assistant 消息回传 reasoning_content，缺失补 " " 占位（ADR-0001 同款）。
+export function injectReasoningPlaceholder(messages, model) {
+  const rule = MODEL_RULES.find((r) => r.match(model));
+  if (!rule || !Array.isArray(messages)) return messages;
+  return messages.map((m) => {
+    if (m?.role !== "assistant") return m;
+    if (typeof m.reasoning_content === "string" && m.reasoning_content.length) return m;
+    if (rule.scope === "toolCalls" && !(Array.isArray(m.tool_calls) && m.tool_calls.length)) return m;
+    return { ...m, reasoning_content: " " };
+  });
+}
+
+const PASSTHROUGH_KEYS = ["temperature", "top_p", "max_tokens", "max_completion_tokens", "reasoning_effort", "tools", "tool_choice", "stop", "presence_penalty", "frequency_penalty", "response_format", "user", "n", "seed"];
+
+export function buildUpstreamBody(body, { chatId, upstreamModel }) {
+  const out = {
+    model: upstreamModel,
+    stream: true, // v2 端点契约：恒流式，非流式由本层聚合
+    messages: injectReasoningPlaceholder(body?.messages || [], upstreamModel),
+    prompt_cache_key: chatId,
+    tool_stream: true,
+    chat_id: chatId,
+  };
+  for (const k of PASSTHROUGH_KEYS) {
+    if (body?.[k] !== undefined && body?.[k] !== null) out[k] = body[k];
+  }
+  return out;
+}
+
+// Session-Id：由 chatId 派生的稳定会话标识（prompt cache 亲和，对齐 Go sessionIDFor）。
+function sessionIdFor(chatId) {
+  return crypto.createHash("sha256").update(`codearts-session:${chatId}`, "utf8").digest("hex").slice(0, 32);
+}
+
+function stripOwnPrefix(model, providerId) {
+  const s = String(model || "");
+  const i = s.indexOf("/");
+  if (i <= 0) return s;
+  return s.slice(0, i).toLowerCase() === String(providerId || "").toLowerCase() ? s.slice(i + 1) : s;
+}
+
+export function createChatService({
+  id = "codearts",
+  baseUrl = SNAP_BASE,
+  chatPath = EP_CHAT_V2,
+  fetchImpl,
+  dispatcher,
+  authPool,
+  catalog,
+  connectTimeoutMs = 30_000,
+  clock = Date.now,
+  } = {}) {
+  const resolvedBase = String(baseUrl).trim().replace(/\/+$/, "") || SNAP_BASE;
+  const transport = createTransport({ fetchImpl, dispatcher, keepAlive: !!dispatcher, timeoutMs: connectTimeoutMs, retry: {} });
+
+  async function sendOnce({ bodyStr, account, benefit, chatId, sessionId, traceId }) {
+    const url = joinUrl(resolvedBase, chatPath);
+    const h = chatBaseHeaders(account.securityToken, traceId);
+    if (benefit) h[MAAS_TYPE_HEADER] = MAAS_BENEFIT;
+    const { headers } = signRequest({ method: "POST", url, headers: h, body: bodyStr, cred: account });
+    // Chat-Id / Session-Id 在签名之后追加（对齐官方客户端：不进 SignedHeaders）。
+    headers["chat-id"] = chatId;
+    headers["session-id"] = sessionId;
+    return transport.request({ url, method: "POST", headers, body: bodyStr, stream: true, timeoutMs: connectTimeoutMs });
+  }
+
+  function errRes(status, msg, code) {
+    return new Response(JSON.stringify({ error: { message: msg, type: "upstream_error", ...(code ? { code } : {}) } }), {
+      status,
+      headers: { "Content-Type": "application/json" },
+    });
+  }
+
+  function withTiming(res, t0) {
+    try { res._t = { attempts: [], waitMs: 0, totalMs: Math.round(clock() - t0) }; } catch {}
+    return res;
+  }
+
+  /**
+   * 跑一次对话。body.model 已由 dispatcher 剥前缀（容忍自带前缀）。
+   * @returns {Promise<Response>} 流式 → OpenAI SSE；非流式 → chat.completion JSON
+   */
+  async function runChat(body, activeRing, opts = {}) {
+    const t0 = clock();
+    const requestedModel = String(body?.model || "");
+    const rawModel = stripOwnPrefix(requestedModel, id);
+    const upstreamModel = catalog?.canonical(rawModel) || rawModel;
+    const chatId = newChatId(body, opts);
+    const sessionId = sessionIdFor(chatId);
+    const upstreamBody = buildUpstreamBody(body, { chatId, upstreamModel });
+    const bodyStr = JSON.stringify(upstreamBody);
+    const isStream = body?.stream === true;
+    let lastErr = null;
+
+    const maxTries = Math.max(1, activeRing.size || 1);
+    for (let attempt = 0; attempt < maxTries; attempt++) {
+      const blob = activeRing.next();
+      if (!blob) break;
+      let account;
+      try {
+        account = await authPool.getCredential(blob);
+      } catch (err) {
+        try { activeRing.onError(blob); } catch {}
+        lastErr = err;
+        continue; // 死号/不在池：换下一个账号
+      }
+      const benefit = catalog?.isBenefit ? catalog.isBenefit(account.userId, upstreamModel) : false;
+      const traceId = crypto.randomBytes(8).toString("hex") + String(clock());
+      let res;
+      try {
+        res = await sendOnce({ bodyStr, account, benefit, chatId, sessionId, traceId });
+      } catch (err) {
+        try { activeRing.onError(blob); } catch {}
+        lastErr = err;
+        continue;
+      }
+      if (res.status === 401 || res.status === 403) {
+        // STS 临时凭证失效：强制刷新重试一次，仍 401/403 换号
+        authPool.invalidate(blob);
+        let account2 = null;
+        try { account2 = await authPool.getCredential(blob); } catch { /* 死号 → 换号 */ }
+        if (account2) {
+          const traceId2 = crypto.randomBytes(8).toString("hex") + String(clock());
+          try { res = await sendOnce({ bodyStr, account: account2, benefit, chatId, sessionId, traceId: traceId2 }); } catch (err2) { lastErr = err2; try { activeRing.onError(blob); } catch {} continue; }
+          if (res.status === 401 || res.status === 403) {
+            try { await res.text(); } catch {}
+            try { activeRing.onError(blob); } catch {}
+            lastErr = new Error(`codearts auth still failing after refresh (http ${res.status})`);
+            continue;
+          }
+        } else {
+          try { activeRing.onError(blob); } catch {}
+          continue;
+        }
+      }
+      if (res.status >= 400) {
+        const txt = await res.text().catch(() => "");
+        if (res.status === 429 || res.status >= 500) try { activeRing.onError(blob); } catch {}
+        return withTiming(errRes(res.status, `codearts upstream http ${res.status}: ${String(txt).slice(0, 300)}`), t0);
+      }
+      try {
+        const pre = await preflightResponse(res); // HTTP 200 内嵌错误（排队/未注册/福利未领）→ 抛 UpstreamEventError
+        if (isStream) return withTiming(sseToOpenAIResponse(pre, { model: requestedModel || upstreamModel, id: `chatcmpl-${chatId.slice(0, 12)}` }), t0);
+        const data = await aggregateToCompletion(pre, { model: requestedModel || upstreamModel, id: `chatcmpl-${chatId.slice(0, 12)}` });
+        return withTiming(new Response(JSON.stringify(data), { status: 200, headers: { "Content-Type": "application/json" } }), t0);
+      } catch (err) {
+        if (err instanceof UpstreamEventError) {
+          if (err.status === 429 || err.status >= 500) try { activeRing.onError(blob); } catch {}
+          return withTiming(errRes(err.status, `codearts upstream: ${err.message}`, err.code), t0);
+        }
+        try { activeRing.onError(blob); } catch {}
+        lastErr = err;
+        continue;
+      }
+    }
+    throw Object.assign(lastErr || new Error("codearts: all accounts unavailable"), {
+      _t: { attempts: [], waitMs: 0, totalMs: Math.round(clock() - t0) },
+    });
+  }
+
+  return { runChat, buildUpstreamBody, injectReasoningPlaceholder, _sendOnce: sendOnce };
+}

package/src/providers/codearts/const.js

@@ -0,0 +1,60 @@
+// CodeArts Agent 云端 API 常量（逆向自 HITZY2002/codearts2api，源自 vscode-codebot 26.7.0）。
+// 端点契约见 docs/adr/0027-codearts-provider.md。
+
+// 盘古引擎/聊天网关（product.json snapEngineDomain，商业版 cn-north-4）。
+export const SNAP_BASE = "https://snap-access.cn-north-4.myhuaweicloud.com";
+// STS 令牌端点（refresh_token 与 client_id + DPoP 公钥 + code_verifier 三重绑定）。
+export const STS_HOST = "https://sts.cn-north-4.myhuaweicloud.com";
+// 限时福利（免费套餐）网关（模型发现 + 领取）。
+export const BENEFIT_HOST = "https://opengw.developer.huaweicloud.com";
+// OAuth authorize 入口（注意带 /portal）。
+export const PORTAL_HOST = "https://codearts.huaweicloud.com/portal";
+
+export const EP_CHAT_V2 = "/api/v2/chat/completions";
+export const EP_MODEL_BUILTIN = "/v1/model/builtin";
+export const EP_AGENT_LIST = "/v1/agent-center/agents/useragents";
+export const EP_AGENT_DETAIL = "/v1/agent-center/agents/detail";
+export const EP_BENEFIT_CONFIG = "/api/v1/gateway/config";
+export const EP_BENEFIT_CLAIM = "/api/v1/benefit/claim";
+export const EP_OAUTH_TOKENS = "/v1/oauth2/tokens";
+export const EP_LOGIN_TICKET = "/v1/login/ticket";
+export const SNAP_MANAGER_PATH = "/snap-manager";
+
+// OAuth client：官方 CodeArts Agent 插件的 uri_scheme；refresh_token 与之绑定。
+export const CLIENT_ID = "codearts-agent";
+// ticket 轮询的插件标识（逆向自 huaweicloud.authentication 扩展）。
+export const PLUGIN_NAME = "snap_AIIDE";
+export const PLUGIN_VERSION = "5.2.0";
+
+// 聊天路由头（官方 AgentKernel 形状；均进入 SDK-HMAC-SHA256 签名）。
+export function chatBaseHeaders(securityToken, traceId) {
+  return {
+    "content-type": "application/json",
+    "accept": "text/event-stream",
+    "x-auth-token": securityToken || "",
+    "x-snap-traceid": traceId,
+    "x-language": "zh-cn",
+    "app-id": "CodeAgent3.0",
+    "is_confidential": "false",
+  };
+}
+
+// 福利路由头：必须在 signRequest 之前设置（计入 SignedHeaders），否则 InferHub.002002009.404。
+export const MAAS_TYPE_HEADER = "maas_type";
+export const MAAS_BENEFIT = "benefit";
+
+// 冷启动种子：福利套餐轮换后新模型在首次发现前也按福利路由（宁多带不少带，少带即 404）。
+export const SEED_BENEFIT_MODELS = ["deepseek-v4-flash-0731", "deepseek-v4-pro-0813", "glm-5.3-flash"];
+// 内置模型种子（仅用于大小写归一，不标福利）。
+export const SEED_KNOWN_MODELS = [
+  "GLM-5.2", "GLM-5.2-ArkTS-SPARK", "GLM-5.1", "GLM-4.7",
+  "OpenPangu-2.0-Pro", "OpenPangu-2.0-Flash",
+  "Qwen3-VL-235B", "Qwen3.5-397B-A17B-VL", "Qwen3.6-27B-VL",
+];
+
+// 目录 TTL：超过则建议重新发现（对齐 codearts2api CatalogTTL）。
+export const CATALOG_TTL_MS = 60 * 60 * 1000;
+// listModels 缓存（与全仓 10min 对齐）。
+export const MODELS_CACHE_TTL_MS = 10 * 60 * 1000;
+// STS 凭证提前刷新量（对齐 codearts2api RefreshSkew 30min）。
+export const REFRESH_SKEW_MS_DEFAULT = 30 * 60 * 1000;