mslxdff 0.1.55 → 0.1.56

package/src/state.js

@@ -41,15 +41,31 @@ function loadFromDisk(file) {
 
 function readState(file) {
   const e = getEntry(file);
-  // 脏数据直接从内存拿，不碰磁盘
-  if (e.data !== null && e.dirty) return e.data;
-  // 已有干净缓存且文件未变，直接命中
+  // 即使脏数据，也要检查 mtime 是否被外部（CLI）改过；若改过则合并，避免 CLI 的 providerConfigs 白名单等被 daemon 的 modelErrors 刷盘覆盖
   if (e.data !== null) {
     try {
       const st = statSync(file);
       if (st.mtimeMs === e.mtimeMs) return e.data;
+      // mtime 变了，说明外部改过文件
+      if (e.dirty) {
+        const disk = loadFromDisk(file);
+        const diskObj = typeof disk === "object" && disk !== null ? disk : {};
+        // 合并：disk 为新基准，e.data 的热数据（modelErrors/modelLatencies/peerStats 等）覆盖回去，但 providerConfigs 等配置以 disk 为准
+        const merged = { ...diskObj, ...e.data };
+        // 配置类字段以 disk 为准（CLI 改的白名单、keys、port、token 等）
+        if (diskObj.providerConfigs !== undefined) merged.providerConfigs = diskObj.providerConfigs;
+        if (diskObj.providerKeys !== undefined) merged.providerKeys = diskObj.providerKeys;
+        if (diskObj.providerShareKeys !== undefined) merged.providerShareKeys = diskObj.providerShareKeys;
+        if (diskObj.port !== undefined) merged.port = diskObj.port;
+        if (diskObj.token !== undefined) merged.token = diskObj.token;
+        if (diskObj.preferredModel !== undefined) merged.preferredModel = diskObj.preferredModel;
+        if (diskObj.modelPicks !== undefined) merged.modelPicks = diskObj.modelPicks;
+        e.data = merged;
+        e.mtimeMs = st.mtimeMs;
+        // 保持 dirty，让热数据下次刷盘时带上合并后的配置
+        return e.data;
+      }
     } catch {
-      // 文件不存在等，沿用内存
       if (e.data) return e.data;
     }
   }
@@ -201,6 +217,285 @@ export function loadPreferredModel({ file = defaultStateFile() } = {}) {
   return typeof v === "string" && v.trim() ? v.trim() : null;
 }
 
+// 供应商 API key：state 存 `providerKeys: { openrouter: ["sk-1", "sk-2"] }`
+// 兼容旧版单字符串 `openrouter: "sk-1"`（读到自动转数组）。
+// env `MSLXDFF_<ID>_KEY`（大写）优先，state 兜底；key 为空视为未配置
+export const providerKeyEnv = (id) => `MSLXDFF_${String(id || "").toUpperCase().replace(/[^A-Z0-9]/g, "_")}_KEY`;
+export const providerBaseUrlEnv = (id) => `MSLXDFF_${String(id || "").toUpperCase().replace(/[^A-Z0-9]/g, "_")}_BASE_URL`;
+
+export function loadProviderKeys(id, { file = defaultStateFile() } = {}) {
+  const env = (process.env[providerKeyEnv(id)] || "").trim();
+  if (env) return [env];
+  // 通用供应商的 keys 优先从 providerConfigs 读取
+  const configs = readState(file).providerConfigs;
+  const cfg = configs && typeof configs === "object" ? configs[id] : undefined;
+  if (cfg && typeof cfg === "object" && Array.isArray(cfg.keys)) {
+    const list = [...new Set(cfg.keys.filter((x) => typeof x === "string" && x.trim().length))];
+    if (list.length) return list;
+  }
+  const keys = readState(file).providerKeys;
+  const v = keys && typeof keys === "object" ? keys[id] : undefined;
+  if (typeof v === "string") return v.trim() ? [v.trim()] : [];
+  if (Array.isArray(v)) return [...new Set(v.filter((x) => typeof x === "string" && x.trim().length))];
+  return [];
+}
+
+export function loadProviderKey(id, opts = {}) {
+  return loadProviderKeys(id, opts)[0] || "";
+}
+
+export function saveProviderKeys(id, list, { file = defaultStateFile() } = {}) {
+  const keys = { ...(readState(file).providerKeys || {}) };
+  const clean = [...new Set((Array.isArray(list) ? list : []).map((k) => String(k || "").trim()).filter(Boolean))];
+  if (clean.length) keys[id] = clean;
+  else delete keys[id];
+  writeStateImmediate(file, { providerKeys: keys });
+  return clean;
+}
+
+export function saveProviderKey(id, key, opts = {}) {
+  const list = [...loadProviderKeys(id, opts)];
+  const clean = String(key || "").trim();
+  if (clean && !list.includes(clean)) list.push(clean);
+  return saveProviderKeys(id, clean ? list : [], opts);
+}
+
+export function addProviderKey(id, key, opts = {}) {
+  return saveProviderKey(id, key, opts);
+}
+
+export function removeProviderKey(id, key, opts = {}) {
+  return removeProviderKeys(id, [key], opts);
+}
+
+export function removeProviderKeys(id, targets = [], opts = {}) {
+  const set = new Set((Array.isArray(targets) ? targets : [targets]).map((k) => String(k || "").trim()).filter(Boolean));
+  const list = loadProviderKeys(id, opts).filter((k) => !set.has(k));
+  return saveProviderKeys(id, list, opts);
+}
+
+// 供应商 key 瞬时共享开关（ADR-0008）：默认 false；true = 本节点在 outgoing 转发时附带
+// 该供应商 key 给组员（瞬时借用，不落盘）。env `MSLXDFF_<ID>_SHARE_KEYS` 可覆盖 state。
+export const providerShareEnv = (id) => `MSLXDFF_${String(id || "").toUpperCase().replace(/[^A-Z0-9]/g, "_")}_SHARE_KEYS`;
+
+export function loadProviderShareKeys(id, { file = defaultStateFile() } = {}) {
+  const env = process.env[providerShareEnv(id)] || "";
+  if (env) return ["1", "true", "on", "yes"].includes(String(env).trim().toLowerCase());
+  const map = readState(file).providerShareKeys;
+  return !!(map && typeof map === "object" && map[id]);
+}
+
+export function saveProviderShareKeys(id, on, { file = defaultStateFile() } = {}) {
+  const map = { ...(readState(file).providerShareKeys || {}) };
+  if (on) map[id] = true;
+  else delete map[id];
+  writeStateImmediate(file, { providerShareKeys: map });
+  return !!on;
+}
+
+// ---- 通用 OpenAI 兼容供应商配置：providerConfigs: { [id]: { baseUrl, keys, auths, allowedModels } } ----
+export const WORKBUDDY_DEFAULT_BASE_URL = "https://copilot.tencent.com";
+function normalizeBaseUrl(url) {
+  const s = String(url || "").trim();
+  if (!s) return "";
+  return s.replace(/\/+$/, "");
+}
+function normalizeAuths(list) {
+  if (!Array.isArray(list)) return [];
+  const out = [];
+  for (const a of list) {
+    if (!a || typeof a !== "object") continue;
+    const uid = String(a.uid || a.userId || "").trim();
+    if (!uid) continue;
+    out.push({
+      uid,
+      domain: String(a.domain || "www.codebuddy.cn").trim() || "www.codebuddy.cn",
+      enterpriseId: String(a.enterpriseId || a.enterprise_id || "").trim(),
+      refreshToken: String(a.refreshToken || a.refresh_token || "").trim(),
+    });
+  }
+  return out;
+}
+
+function normalizeAllowedModel(model, providerId) {
+  let s = String(model || "").trim();
+  if (!s) return "";
+  // 支持带前缀的输入：bai/glm-5.3-flash -> glm-5.3-flash（仅当 provider 匹配时剥前缀）
+  const idx = s.indexOf("/");
+  if (idx > 0) {
+    const head = s.slice(0, idx).toLowerCase();
+    if (head === String(providerId || "").toLowerCase()) s = s.slice(idx + 1);
+  }
+  return s;
+}
+
+export function loadProviderConfigs({ file = defaultStateFile() } = {}) {
+  const v = readState(file).providerConfigs;
+  if (v && typeof v === "object" && !Array.isArray(v)) return v;
+  return {};
+}
+
+export function loadProviderConfig(id, { file = defaultStateFile() } = {}) {
+  const envUrl = (process.env[providerBaseUrlEnv(id)] || "").trim();
+  const envKeys = loadProviderKeys(id, { file });
+  // env 覆盖时以 env 为准
+  if (envUrl || (process.env[providerKeyEnv(id)] || "").trim()) {
+    const baseUrl = envUrl || loadProviderConfigs({ file })[id]?.baseUrl || (String(id).toLowerCase() === "workbuddy" ? WORKBUDDY_DEFAULT_BASE_URL : "");
+    const cfg = loadProviderConfigs({ file })[id];
+    const allowedModels = cfg && Array.isArray(cfg.allowedModels) ? [...new Set(cfg.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : [];
+    const auths = cfg && Array.isArray(cfg.auths) ? normalizeAuths(cfg.auths) : [];
+    if (baseUrl || envKeys.length || allowedModels.length || auths.length) return { baseUrl: normalizeBaseUrl(baseUrl), keys: envKeys, auths, allowedModels };
+    return null;
+  }
+  const configs = loadProviderConfigs({ file });
+  const cfg = configs[id];
+  if (cfg && typeof cfg === "object") {
+    return {
+      baseUrl: normalizeBaseUrl(cfg.baseUrl || (String(id).toLowerCase() === "workbuddy" ? WORKBUDDY_DEFAULT_BASE_URL : "")),
+      keys: Array.isArray(cfg.keys) ? [...new Set(cfg.keys.filter((x) => typeof x === "string" && x.trim().length))] : [],
+      auths: normalizeAuths(cfg.auths),
+      allowedModels: Array.isArray(cfg.allowedModels) ? [...new Set(cfg.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : [],
+    };
+  }
+  // 兼容旧 providerKeys 形态：有 key 但无 configs 时视为通用供应商（baseUrl 为空，需后补）
+  const keys = loadProviderKeys(id, { file });
+  if (keys.length) return { baseUrl: String(id).toLowerCase() === "workbuddy" ? WORKBUDDY_DEFAULT_BASE_URL : "", keys, auths: [], allowedModels: [] };
+  return null;
+}
+
+export function loadProviderBaseUrl(id, opts = {}) {
+  const env = (process.env[providerBaseUrlEnv(id)] || "").trim();
+  if (env) return normalizeBaseUrl(env);
+  const cfg = loadProviderConfigs(opts)[id];
+  if (cfg && typeof cfg.baseUrl === "string" && normalizeBaseUrl(cfg.baseUrl)) return normalizeBaseUrl(cfg.baseUrl);
+  if (String(id || "").toLowerCase() === "workbuddy") return WORKBUDDY_DEFAULT_BASE_URL;
+  return "";
+}
+
+export function loadProviderAuths(id, { file = defaultStateFile() } = {}) {
+  const cfg = loadProviderConfigs({ file })[id];
+  if (cfg && Array.isArray(cfg.auths)) return normalizeAuths(cfg.auths);
+  return [];
+}
+export function saveProviderAuths(id, list, { file = defaultStateFile() } = {}) {
+  const clean = normalizeAuths(list);
+  const configs = { ...loadProviderConfigs({ file }) };
+  const cur = configs[id] && typeof configs[id] === "object" ? configs[id] : {};
+  const baseUrl = normalizeBaseUrl(cur.baseUrl || loadProviderBaseUrl(id, { file }) || "");
+  const keys = Array.isArray(cur.keys) ? [...new Set(cur.keys.filter((x) => typeof x === "string" && x.trim().length))] : loadProviderKeys(id, { file });
+  const allowedModels = Array.isArray(cur.allowedModels) ? [...new Set(cur.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : [];
+  if (!baseUrl && !keys.length && !clean.length && !allowedModels.length) {
+    delete configs[id];
+  } else {
+    configs[id] = { baseUrl, keys };
+    if (clean.length) configs[id].auths = clean;
+    if (allowedModels.length) configs[id].allowedModels = allowedModels;
+  }
+  writeStateImmediate(file, { providerConfigs: configs });
+  return clean;
+}
+
+export function saveProviderBaseUrl(id, baseUrl, { file = defaultStateFile() } = {}) {
+  const clean = normalizeBaseUrl(baseUrl);
+  const configs = { ...loadProviderConfigs({ file }) };
+  const cur = configs[id] && typeof configs[id] === "object" ? configs[id] : {};
+  const keys = Array.isArray(cur.keys) ? cur.keys : loadProviderKeys(id, { file });
+  const auths = normalizeAuths(cur.auths);
+  const allowedModels = Array.isArray(cur.allowedModels) ? [...new Set(cur.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : [];
+  if (!clean && !keys.length && !auths.length && !allowedModels.length) {
+    delete configs[id];
+  } else {
+    configs[id] = { baseUrl: clean, keys };
+    if (auths.length) configs[id].auths = auths;
+    if (allowedModels.length) configs[id].allowedModels = allowedModels;
+  }
+  writeStateImmediate(file, { providerConfigs: configs });
+  return clean;
+}
+
+export function saveProviderConfig(id, { baseUrl, keys, auths, allowedModels }, { file = defaultStateFile() } = {}) {
+  const cleanUrl = normalizeBaseUrl(baseUrl);
+  const cleanKeys = [...new Set((Array.isArray(keys) ? keys : []).map((k) => String(k || "").trim()).filter(Boolean))];
+  const cleanAuths = auths === undefined ? undefined : normalizeAuths(auths);
+  const cleanAllowed = [...new Set((Array.isArray(allowedModels) ? allowedModels : []).map((m) => normalizeAllowedModel(m, id)).filter(Boolean))];
+  const configs = { ...loadProviderConfigs({ file }) };
+  const cur = configs[id] && typeof configs[id] === "object" ? configs[id] : {};
+  // 保留已有的 allowedModels / auths 若本次未传入
+  const finalAllowed = allowedModels === undefined ? (Array.isArray(cur.allowedModels) ? [...new Set(cur.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : []) : cleanAllowed;
+  const finalAuths = cleanAuths === undefined ? normalizeAuths(cur.auths) : cleanAuths;
+  if (!cleanUrl && !cleanKeys.length && !finalAllowed.length && !finalAuths.length) {
+    delete configs[id];
+  } else {
+    configs[id] = { baseUrl: cleanUrl, keys: cleanKeys };
+    if (finalAuths.length) configs[id].auths = finalAuths;
+    if (finalAllowed.length) configs[id].allowedModels = finalAllowed;
+  }
+  // 同步清理旧 providerKeys 中同 id 的残留，避免双写
+  const oldKeys = readState(file).providerKeys;
+  if (oldKeys && typeof oldKeys === "object" && oldKeys[id] !== undefined) {
+    const nextKeys = { ...oldKeys };
+    delete nextKeys[id];
+    writeStateImmediate(file, { providerKeys: nextKeys, providerConfigs: configs });
+    return { baseUrl: cleanUrl, keys: cleanKeys, auths: finalAuths, allowedModels: finalAllowed };
+  }
+  writeStateImmediate(file, { providerConfigs: configs });
+  return { baseUrl: cleanUrl, keys: cleanKeys, auths: finalAuths, allowedModels: finalAllowed };
+}
+
+// ---- 供应商模型白名单：providerConfigs.<id>.allowedModels（空 = 不限） ----
+export function loadProviderAllowedModels(id, { file = defaultStateFile() } = {}) {
+  const cfg = loadProviderConfig(id, { file });
+  if (cfg && Array.isArray(cfg.allowedModels)) return [...cfg.allowedModels];
+  const raw = readState(file).providerConfigs?.[id];
+  if (raw && Array.isArray(raw.allowedModels)) return [...new Set(raw.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))];
+  return [];
+}
+
+export function saveProviderAllowedModels(id, list, { file = defaultStateFile() } = {}) {
+  const clean = [...new Set((Array.isArray(list) ? list : []).map((m) => normalizeAllowedModel(m, id)).filter(Boolean))];
+  const configs = { ...loadProviderConfigs({ file }) };
+  const cur = configs[id] && typeof configs[id] === "object" ? configs[id] : {};
+  const baseUrl = normalizeBaseUrl(cur.baseUrl || loadProviderBaseUrl(id, { file }) || "");
+  const keys = Array.isArray(cur.keys) ? cur.keys : loadProviderKeys(id, { file });
+  const auths = normalizeAuths(cur.auths);
+  if (!baseUrl && !keys.length && !auths.length && !clean.length) {
+    delete configs[id];
+  } else {
+    configs[id] = { baseUrl, keys };
+    if (auths.length) configs[id].auths = auths;
+    if (clean.length) configs[id].allowedModels = clean;
+  }
+  writeStateImmediate(file, { providerConfigs: configs });
+  return clean;
+}
+
+export function addProviderAllowedModel(id, model, opts = {}) {
+  const cur = loadProviderAllowedModels(id, opts);
+  const norm = normalizeAllowedModel(model, id);
+  if (!norm || cur.includes(norm)) return cur;
+  return saveProviderAllowedModels(id, [...cur, norm], opts);
+}
+
+export function removeProviderAllowedModel(id, model, opts = {}) {
+  return removeProviderAllowedModels(id, [model], opts);
+}
+
+export function removeProviderAllowedModels(id, targets = [], opts = {}) {
+  const set = new Set((Array.isArray(targets) ? targets : [targets]).map((m) => normalizeAllowedModel(m, id)).filter(Boolean));
+  const cur = loadProviderAllowedModels(id, opts);
+  const next = cur.filter((m) => !set.has(m));
+  return saveProviderAllowedModels(id, next, opts);
+}
+
+export function isModelAllowed(id, rawModel, { file = defaultStateFile() } = {}) {
+  const raw = String(rawModel || "").trim();
+  if (!raw) return true;
+  const allowed = loadProviderAllowedModels(id, { file });
+  if (!allowed.length) return true;
+  const norm = normalizeAllowedModel(raw, id);
+  return allowed.includes(norm);
+}
+
 // 常用模型勾选集（auto 候选池白名单）：空数组 = 不启用筛选（全量 auto）
 export function loadModelPicks({ file = defaultStateFile() } = {}) {
   const picks = readState(file).modelPicks;

package/src/time.js

@@ -0,0 +1,73 @@
+const TZ = "Asia/Shanghai";
+
+function shanghaiParts(d) {
+  const date = d instanceof Date ? d : new Date(d);
+  const fmt = new Intl.DateTimeFormat("en-GB", {
+    timeZone: TZ,
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit",
+    hour: "2-digit",
+    minute: "2-digit",
+    second: "2-digit",
+    hour12: false,
+  });
+  const parts = fmt.formatToParts(date);
+  const m = {};
+  for (const p of parts) m[p.type] = p.value;
+  return m; // {year, month, day, hour, minute, second}
+}
+
+// "MM-DD HH:mm:ss" e.g. "08-27 15:07:14"
+export function fmtShanghai(isoOrTs) {
+  if (isoOrTs == null) return "-";
+  try {
+    const p = shanghaiParts(isoOrTs);
+    return `${p.month}-${p.day} ${p.hour}:${p.minute}:${p.second}`;
+  } catch {
+    return "-";
+  }
+}
+
+// "YYYY-MM-DD HH:mm" e.g. "2026-08-27 15:07"
+export function fmtShanghaiYMDHM(isoOrTs) {
+  if (isoOrTs == null) return "-";
+  try {
+    const p = shanghaiParts(isoOrTs);
+    return `${p.year}-${p.month}-${p.day} ${p.hour}:${p.minute}`;
+  } catch {
+    return "-";
+  }
+}
+
+// "YYYY-MM-DD HH:mm:ss" e.g. "2026-08-27 15:07:14"
+export function fmtShanghaiYMDHMS(isoOrTs) {
+  if (isoOrTs == null) return "-";
+  try {
+    const p = shanghaiParts(isoOrTs);
+    return `${p.year}-${p.month}-${p.day} ${p.hour}:${p.minute}:${p.second}`;
+  } catch {
+    return "-";
+  }
+}
+
+// "HH:mm:ss" e.g. "15:07:14"
+export function fmtShanghaiHMS(isoOrTs) {
+  if (isoOrTs == null) return "--:--:--";
+  try {
+    const p = shanghaiParts(isoOrTs);
+    return `${p.hour}:${p.minute}:${p.second}`;
+  } catch {
+    return "--:--:--";
+  }
+}
+
+// 当前上海时间 "YYYY-MM-DD HH:mm" 用于 prompt
+export function nowShanghaiYMDHM() {
+  return fmtShanghaiYMDHM(new Date());
+}
+
+// 兼容：传入 Date 或 ts 或 ISO，都返回 "MM-DD HH:mm:ss"
+export function fmtTsShanghai(iso) {
+  return fmtShanghai(iso);
+}

package/src/upstream.js

@@ -5,6 +5,7 @@ import { dirname, join } from "node:path";
 import os from "node:os";
 import { isFreeModel } from "./models.js";
 import { defaultStateFile } from "./state.js";
+import { fmtShanghaiYMDHMS } from "./time.js";
 
 let UndiciAgent = null;
 let UndiciFetch = null;
@@ -45,6 +46,7 @@ export function createUpstreamClient({
   },
   fetchImpl,
   hooks,
+  keepAlive = true,
 } = {}) {
   // 使用 undici 的 fetch 与 Agent 配对，避免 global fetch 与 npm undici Agent 不兼容
   if (!fetchImpl) fetchImpl = UndiciFetch || fetch;
@@ -91,6 +93,74 @@ export function createUpstreamClient({
     return true;
   }
 
+  function isResponsesModel(model) {
+    const m = String(model || "").toLowerCase();
+    return m.startsWith("muse-spark");
+  }
+
+  function chatToResponsesBody(chatBody) {
+    const msgs = Array.isArray(chatBody?.messages) ? chatBody.messages : [];
+    const system = msgs.filter((m) => m.role === "system").map((m) => String(m.content || "")).join("\n");
+    const nonSystem = msgs.filter((m) => m.role !== "system");
+    // 取最后一条 user 内容作为 input，其余拼到 input 前（保留上下文）
+    const inputParts = nonSystem.map((m) => {
+      const c = m.content;
+      if (typeof c === "string") return `${m.role}: ${c}`;
+      if (Array.isArray(c)) return `${m.role}: ${c.map((x) => x.text || "").join("")}`;
+      return `${m.role}: ${String(c || "")}`;
+    });
+    const input = inputParts.join("\n\n") || "hi";
+    const out = {
+      model: chatBody.model,
+      input,
+      stream: false, // muse-spark 的 chat 流式经 responses 的 SSE 格式不同，先以非流式 200 保证可用
+    };
+    if (system) out.instructions = system;
+    if (chatBody.tools) out.tools = chatBody.tools;
+    if (chatBody.tool_choice) out.tool_choice = chatBody.tool_choice;
+    if (chatBody.temperature != null) out.temperature = chatBody.temperature;
+    if (chatBody.max_tokens != null) out.max_output_tokens = chatBody.max_tokens;
+    return out;
+  }
+
+  function responsesToChatJson(respJson) {
+    // responses: {id, model, output:[{type:reasoning},{type:message, content:[{type:output_text,text}]}]}
+    let text = "";
+    for (const item of respJson.output || []) {
+      if (item.type === "message" && item.role === "assistant") {
+        for (const c of item.content || []) {
+          if (c.type === "output_text") text += c.text || "";
+          else if (c.type === "text") text += c.text || "";
+        }
+      }
+    }
+    if (!text) {
+      // 兜底：取 output_text 的第一个
+      for (const item of respJson.output || []) {
+        if (item.type === "message") {
+          const t = item.content?.[0]?.text;
+          if (t) { text = t; break; }
+        }
+      }
+    }
+    if (!text) text = "";
+    const chatJson = {
+      id: respJson.id || `resp_${Date.now()}`,
+      object: "chat.completion",
+      created: Math.floor((respJson.created_at || Date.now() / 1000)),
+      model: respJson.model,
+      choices: [
+        {
+          index: 0,
+          finish_reason: respJson.status === "completed" ? "stop" : "length",
+          message: { role: "assistant", content: text },
+        },
+      ],
+      usage: respJson.usage || { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 },
+    };
+    return chatJson;
+  }
+
   function freeAnonLogFile() {
     // 按用户要求：放在当前项目目录，方便一眼看到；可用 env 覆盖
     return process.env.MSLXDFF_FREE_ANON_LOG || join(process.cwd(), "free-anon-extra.txt");
@@ -98,7 +168,7 @@ export function createUpstreamClient({
 
   function logFreeAnon({ model, publicStatus, anonStatus, anonAttempts, hit, totalMs }) {
     const file = freeAnonLogFile();
-    const line = `${new Date().toISOString()} model=${model} public=429 anonTries=${anonAttempts} anonStatus=${anonStatus ?? "none"} hit=${hit ? "YES额外额度" : "NO无额外"} totalMs=${totalMs} count=${hit ? "1" : "0"}\n`;
+    const line = `${fmtShanghaiYMDHMS(new Date())} model=${model} public=429 anonTries=${anonAttempts} anonStatus=${anonStatus ?? "none"} hit=${hit ? "YES额外额度" : "NO无额外"} totalMs=${totalMs} count=${hit ? "1" : "0"}\n`;
     try {
       mkdirSync(dirname(file), { recursive: true });
     } catch {}
@@ -118,7 +188,7 @@ export function createUpstreamClient({
   const keepAliveConnections = envInt("MSLXDFF_UPSTREAM_KEEPALIVE_CONNECTIONS", 20);
   let dispatcher = null;
   let agent = null;
-  if (UndiciAgent) {
+  if (keepAlive && UndiciAgent) {
     try {
       agent = new UndiciAgent({
         keepAliveTimeout,
@@ -134,13 +204,15 @@ export function createUpstreamClient({
   }
 
   async function chat(body) {
-    const url = `${baseUrl}/zen/v1/chat/completions`;
+    const isResp = isResponsesModel(body?.model);
+    const url = isResp ? `${baseUrl}/zen/v1/responses` : `${baseUrl}/zen/v1/chat/completions`;
+    const reqBody = isResp ? chatToResponsesBody(body) : body;
     const t0 = performance.now();
     const attempts = [];
     let waitMs = 0;
     for (let attempt = 0; ; attempt++) {
       const t = performance.now();
-      const result = await attemptOnce(url, body);
+      const result = await attemptOnce(url, reqBody);
       attempts.push({
         attempt,
         type: result instanceof Error ? "network" : `http${result.status}`,
@@ -177,7 +249,7 @@ export function createUpstreamClient({
           await sleep(anonDelay);
           waitMs += anonDelay;
           const t2 = performance.now();
-          anonResult = await attemptOnce(url, body, { anonymous: true });
+          anonResult = await attemptOnce(url, reqBody, { anonymous: true });
           attempts.push({
             attempt: `anon-${i}`,
             type: anonResult instanceof Error ? "network" : `http${anonResult.status}`,
@@ -185,7 +257,23 @@ export function createUpstreamClient({
           });
           if (anonResult instanceof Error) continue;
           if (anonResult.status !== 429) {
-            anonResult._t = {
+            // responses 模型的 anon 命中也需转回 chat 形状
+            let outAnon = anonResult;
+            if (isResp && anonResult.ok) {
+              try {
+                const txt = await anonResult.text();
+                const j = JSON.parse(txt);
+                if (j && Array.isArray(j.output)) {
+                  const chatJson = responsesToChatJson(j);
+                  const newHeaders = new Headers(anonResult.headers);
+                  newHeaders.set("content-type", "application/json");
+                  outAnon = new Response(JSON.stringify(chatJson), { status: anonResult.status, headers: newHeaders });
+                } else {
+                  outAnon = new Response(txt, { status: anonResult.status, headers: anonResult.headers });
+                }
+              } catch { outAnon = anonResult; }
+            }
+            outAnon._t = {
               attempts,
               waitMs,
               totalMs: Math.round(performance.now() - t0),
@@ -195,7 +283,7 @@ export function createUpstreamClient({
             hit = true;
             hitAt = i + 1;
             consecutiveHits += 1;
-            logFreeAnon({ model: body?.model, publicStatus: 429, anonStatus: anonResult.status, anonAttempts: i + 1, hit: true, totalMs: anonResult._t.totalMs });
+            logFreeAnon({ model: body?.model, publicStatus: 429, anonStatus: anonResult.status, anonAttempts: i + 1, hit: true, totalMs: outAnon._t.totalMs });
             // 额外在 txt 里强调连续命中
             try {
               if (consecutiveHits >= 2) {
@@ -204,7 +292,7 @@ export function createUpstreamClient({
               }
             } catch {}
             if (process.env.MSLXDFF_DEBUG === "1") try { console.log(`[free-anon] ${body?.model} public 429 -> anon ${anonResult.status} after ${i + 1} try HIT`); } catch {}
-            return anonResult;
+            return outAnon;
           }
         }
         // 3 次 anon 仍 429
@@ -222,6 +310,36 @@ export function createUpstreamClient({
           return anonResult;
         }
       }
+      // Muse Spark 走 /responses，需把 responses 的 JSON 转回 chat.completions 形状，保持上层无感
+      if (isResp && result.ok) {
+        try {
+          const txt = await result.text();
+          const j = JSON.parse(txt);
+          // responses 成功态：{output:[...]}；chat 态：{choices:[...]}。非 responses 形状则原样回
+          if (j && Array.isArray(j.output)) {
+            const chatJson = responsesToChatJson(j);
+            const newBody = JSON.stringify(chatJson);
+            const newHeaders = new Headers(result.headers);
+            newHeaders.set("content-type", "application/json");
+            const transformed = new Response(newBody, { status: result.status, headers: newHeaders });
+            transformed._t = {
+              attempts,
+              waitMs,
+              totalMs: Math.round(performance.now() - t0),
+            };
+            // 保留原始 timing 供日志
+            if (result._t) transformed._t = { ...transformed._t, ...result._t };
+            return transformed;
+          }
+          // 不是 responses 形状，回退：用原文本重建可读 Response
+          const fallback = new Response(txt, { status: result.status, headers: result.headers });
+          fallback._t = { attempts, waitMs, totalMs: Math.round(performance.now() - t0) };
+          return fallback;
+        } catch {
+          result._t = { attempts, waitMs, totalMs: Math.round(performance.now() - t0) };
+          return result;
+        }
+      }
       result._t = {
         attempts,
         waitMs,

package/docs/adr/0001-reasoning-content-injection.md

@@ -1,14 +0,0 @@
-# ADR-0001: Inject a reasoning_content placeholder on outbound assistant messages
-
-The Zen upstream's thinking-mode models (deepseek-family at minimum) return
-`400 "The reasoning_content in the thinking mode must be passed back"` when a
-multi-turn request echoes an assistant message without its `reasoning_content`.
-Clients speaking plain OpenAI format never send that field, so the proxy writes
-a `" "` placeholder into assistant messages before forwarding. Scope is `all`
-for deepseek-family models and `tool_calls` for kimi-family models; messages
-that already carry non-empty `reasoning_content` are left untouched.
-
-The alternative — telling clients to manage `reasoning_content` themselves —
-would break standard OpenAI-compatible clients, so the proxy eats this
-compatibility cost instead. Matches `/root/9router` v0.5.45
-`open-sse/utils/reasoningContentInjector.js`.

package/docs/adr/0002-models-free-filter.md

@@ -1,12 +0,0 @@
-# ADR-0002: /v1/models exposes only free models, matched by suffix or whitelist
-
-The upstream `/zen/v1/models` list contains ~60 models; exposing them all would
-pollute clients with paid models this proxy can't serve for free. `/v1/models`
-therefore filters to: `id` ending in `-free`, OR the explicit whitelist entry
-`big-pickle`. The whitelist exists because `big-pickle` is a free model without
-the `-free` suffix, and a suffix-only filter would silently drop it.
-
-A plain `endsWith("-free")` filter was considered and rejected for exactly that
-reason. Matches `/root/9router` v0.5.45
-`src/app/api/providers/suggested-models/filters.js`
-(`KNOWN_FREE_OPENCODE_MODELS = ["big-pickle"]`).

package/docs/adr/0003-zero-state-no-auth.md

@@ -1,10 +0,0 @@
-# ADR-0003: Zero-state, no-DB, no-account local proxy
-
-Status: partially superseded by [ADR-0004](./0004-bearer-token.md) — the
-no-auth clause below is replaced; the zero-DB / no-account / no-cloud principles
-stand.
-
-By design this proxy holds no database, no token store, no account rotation,
-and no cloud sync. A single static bearer token is the only credential, kept
-in a 0600 state file (see ADR-0004); everything else is stateless per-process
-memory at most.

package/docs/adr/0004-bearer-token.md

@@ -1,18 +0,0 @@
-# ADR-0004: Single static bearer token, persisted in a 0600 state file
-
-The proxy requires a bearer token on `/v1/*` so an accidentally-exposed port
-isn't an open relay. There is no account system: the token is a random
-`crypto` 32-byte value (hex), generated once on first run, persisted to a
-state file (default `~/.config/mslxdff/state.json`, `0600`, path overridable
-via `MSLXDFF_STATE_FILE`), and printed to stdout on creation. Rotate with
-`mslxdff -refresh-token`, which regenerates, rewrites the file, prints the
-new token, and exits (does not start the server).
-
-Auth is enforced with a constant-time string compare on
-`Authorization: Bearer <token>`; mismatches get `401` with `WWW-Authenticate`.
-`/health` stays public (no token). Tokens never appear in logs.
-
-Alternatives rejected: a fixed default token (same key on every install),
-per-user accounts (needs a DB — that's the 9Router provisioning surface we
-rejected in ADR-0003), and unauthenticated local-only binding (fragile;
-a proxy relay deserves an explicit secret even on localhost).