mslxdff 0.1.55 → 0.1.57

package/src/routes/peers.js

@@ -2,6 +2,7 @@ import { performance } from "node:perf_hooks";
 import { isAutoModel } from "../auto.js";
 import { errMsg } from "./helpers.js";
 import { runHook } from "../plugins.js";
+import { buildShareKeysHeader, SHARE_KEYS_HEADER } from "../providers/share-keys.js";
 
 const PEER_TIMEOUT_MS = 30_000;
 const PEER_STATUS_TIMEOUT_MS = 2_000;
@@ -63,15 +64,19 @@ async function forwardToPeer(peer, body, model, hops) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), PEER_TIMEOUT_MS);
   try {
+    const headers = {
+      "Content-Type": "application/json",
+      "Authorization": `Bearer ${peer.token}`,
+      "x-mslxdff-hops": String(hops + 1),
+      "x-mslxdff-model-lock": model,
+      "Accept": "text/event-stream",
+    };
+    // ADR-0008：该模型命中的供应商若开启 share → 附带瞬时 key 给组员借用（opencode 恒排除）
+    const shareHeader = buildShareKeysHeader(model);
+    if (shareHeader) headers[SHARE_KEYS_HEADER] = shareHeader;
     return await fetch(`${peer.url}/v1/chat/completions`, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "Authorization": `Bearer ${peer.token}`,
-        "x-mslxdff-hops": String(hops + 1),
-        "x-mslxdff-model-lock": model,
-        "Accept": "text/event-stream",
-      },
+      headers,
       body: JSON.stringify({ ...body, model }),
       signal: controller.signal,
     });

package/src/routes/stream.js

@@ -33,6 +33,15 @@ export async function relay(res, upRes, body, { onFirstChunk, onDownstreamAbort,
   const contentType = upRes.headers.get("content-type") || "";
   const isStream = Boolean(body?.stream) || contentType.includes("text/event-stream");
   res.statusCode = upRes.status;
+  // propagate workbuddy uid / allowlist headers
+  try {
+    const uid = upRes.headers.get("x-mslxdff-workbuddy-uid");
+    if (uid) res.setHeader("x-mslxdff-workbuddy-uid", uid);
+    const reason = upRes.headers.get("x-mslxdff-workbuddy-reason");
+    if (reason) res.setHeader("x-mslxdff-workbuddy-reason", reason);
+    const allow = upRes.headers.get("x-mslxdff-allowlist");
+    if (allow) res.setHeader("x-mslxdff-allowlist", allow);
+  } catch {}
   if (fallback) applyFallbackHeaders(res, fallback);
 
   let ttf = null;

package/src/state.js

@@ -41,15 +41,31 @@ function loadFromDisk(file) {
 
 function readState(file) {
   const e = getEntry(file);
-  // 脏数据直接从内存拿，不碰磁盘
-  if (e.data !== null && e.dirty) return e.data;
-  // 已有干净缓存且文件未变，直接命中
+  // 即使脏数据，也要检查 mtime 是否被外部（CLI）改过；若改过则合并，避免 CLI 的 providerConfigs 白名单等被 daemon 的 modelErrors 刷盘覆盖
   if (e.data !== null) {
     try {
       const st = statSync(file);
       if (st.mtimeMs === e.mtimeMs) return e.data;
+      // mtime 变了，说明外部改过文件
+      if (e.dirty) {
+        const disk = loadFromDisk(file);
+        const diskObj = typeof disk === "object" && disk !== null ? disk : {};
+        // 合并：disk 为新基准，e.data 的热数据（modelErrors/modelLatencies/peerStats 等）覆盖回去，但 providerConfigs 等配置以 disk 为准
+        const merged = { ...diskObj, ...e.data };
+        // 配置类字段以 disk 为准（CLI 改的白名单、keys、port、token 等）
+        if (diskObj.providerConfigs !== undefined) merged.providerConfigs = diskObj.providerConfigs;
+        if (diskObj.providerKeys !== undefined) merged.providerKeys = diskObj.providerKeys;
+        if (diskObj.providerShareKeys !== undefined) merged.providerShareKeys = diskObj.providerShareKeys;
+        if (diskObj.port !== undefined) merged.port = diskObj.port;
+        if (diskObj.token !== undefined) merged.token = diskObj.token;
+        if (diskObj.preferredModel !== undefined) merged.preferredModel = diskObj.preferredModel;
+        if (diskObj.modelPicks !== undefined) merged.modelPicks = diskObj.modelPicks;
+        e.data = merged;
+        e.mtimeMs = st.mtimeMs;
+        // 保持 dirty，让热数据下次刷盘时带上合并后的配置
+        return e.data;
+      }
     } catch {
-      // 文件不存在等，沿用内存
       if (e.data) return e.data;
     }
   }
@@ -201,6 +217,285 @@ export function loadPreferredModel({ file = defaultStateFile() } = {}) {
   return typeof v === "string" && v.trim() ? v.trim() : null;
 }
 
+// 供应商 API key：state 存 `providerKeys: { openrouter: ["sk-1", "sk-2"] }`
+// 兼容旧版单字符串 `openrouter: "sk-1"`（读到自动转数组）。
+// env `MSLXDFF_<ID>_KEY`（大写）优先，state 兜底；key 为空视为未配置
+export const providerKeyEnv = (id) => `MSLXDFF_${String(id || "").toUpperCase().replace(/[^A-Z0-9]/g, "_")}_KEY`;
+export const providerBaseUrlEnv = (id) => `MSLXDFF_${String(id || "").toUpperCase().replace(/[^A-Z0-9]/g, "_")}_BASE_URL`;
+
+export function loadProviderKeys(id, { file = defaultStateFile() } = {}) {
+  const env = (process.env[providerKeyEnv(id)] || "").trim();
+  if (env) return [env];
+  // 通用供应商的 keys 优先从 providerConfigs 读取
+  const configs = readState(file).providerConfigs;
+  const cfg = configs && typeof configs === "object" ? configs[id] : undefined;
+  if (cfg && typeof cfg === "object" && Array.isArray(cfg.keys)) {
+    const list = [...new Set(cfg.keys.filter((x) => typeof x === "string" && x.trim().length))];
+    if (list.length) return list;
+  }
+  const keys = readState(file).providerKeys;
+  const v = keys && typeof keys === "object" ? keys[id] : undefined;
+  if (typeof v === "string") return v.trim() ? [v.trim()] : [];
+  if (Array.isArray(v)) return [...new Set(v.filter((x) => typeof x === "string" && x.trim().length))];
+  return [];
+}
+
+export function loadProviderKey(id, opts = {}) {
+  return loadProviderKeys(id, opts)[0] || "";
+}
+
+export function saveProviderKeys(id, list, { file = defaultStateFile() } = {}) {
+  const keys = { ...(readState(file).providerKeys || {}) };
+  const clean = [...new Set((Array.isArray(list) ? list : []).map((k) => String(k || "").trim()).filter(Boolean))];
+  if (clean.length) keys[id] = clean;
+  else delete keys[id];
+  writeStateImmediate(file, { providerKeys: keys });
+  return clean;
+}
+
+export function saveProviderKey(id, key, opts = {}) {
+  const list = [...loadProviderKeys(id, opts)];
+  const clean = String(key || "").trim();
+  if (clean && !list.includes(clean)) list.push(clean);
+  return saveProviderKeys(id, clean ? list : [], opts);
+}
+
+export function addProviderKey(id, key, opts = {}) {
+  return saveProviderKey(id, key, opts);
+}
+
+export function removeProviderKey(id, key, opts = {}) {
+  return removeProviderKeys(id, [key], opts);
+}
+
+export function removeProviderKeys(id, targets = [], opts = {}) {
+  const set = new Set((Array.isArray(targets) ? targets : [targets]).map((k) => String(k || "").trim()).filter(Boolean));
+  const list = loadProviderKeys(id, opts).filter((k) => !set.has(k));
+  return saveProviderKeys(id, list, opts);
+}
+
+// 供应商 key 瞬时共享开关（ADR-0008）：默认 false；true = 本节点在 outgoing 转发时附带
+// 该供应商 key 给组员（瞬时借用，不落盘）。env `MSLXDFF_<ID>_SHARE_KEYS` 可覆盖 state。
+export const providerShareEnv = (id) => `MSLXDFF_${String(id || "").toUpperCase().replace(/[^A-Z0-9]/g, "_")}_SHARE_KEYS`;
+
+export function loadProviderShareKeys(id, { file = defaultStateFile() } = {}) {
+  const env = process.env[providerShareEnv(id)] || "";
+  if (env) return ["1", "true", "on", "yes"].includes(String(env).trim().toLowerCase());
+  const map = readState(file).providerShareKeys;
+  return !!(map && typeof map === "object" && map[id]);
+}
+
+export function saveProviderShareKeys(id, on, { file = defaultStateFile() } = {}) {
+  const map = { ...(readState(file).providerShareKeys || {}) };
+  if (on) map[id] = true;
+  else delete map[id];
+  writeStateImmediate(file, { providerShareKeys: map });
+  return !!on;
+}
+
+// ---- 通用 OpenAI 兼容供应商配置：providerConfigs: { [id]: { baseUrl, keys, auths, allowedModels } } ----
+export const WORKBUDDY_DEFAULT_BASE_URL = "https://copilot.tencent.com";
+function normalizeBaseUrl(url) {
+  const s = String(url || "").trim();
+  if (!s) return "";
+  return s.replace(/\/+$/, "");
+}
+function normalizeAuths(list) {
+  if (!Array.isArray(list)) return [];
+  const out = [];
+  for (const a of list) {
+    if (!a || typeof a !== "object") continue;
+    const uid = String(a.uid || a.userId || "").trim();
+    if (!uid) continue;
+    out.push({
+      uid,
+      domain: String(a.domain || "www.codebuddy.cn").trim() || "www.codebuddy.cn",
+      enterpriseId: String(a.enterpriseId || a.enterprise_id || "").trim(),
+      refreshToken: String(a.refreshToken || a.refresh_token || "").trim(),
+    });
+  }
+  return out;
+}
+
+function normalizeAllowedModel(model, providerId) {
+  let s = String(model || "").trim();
+  if (!s) return "";
+  // 支持带前缀的输入：bai/glm-5.3-flash -> glm-5.3-flash（仅当 provider 匹配时剥前缀）
+  const idx = s.indexOf("/");
+  if (idx > 0) {
+    const head = s.slice(0, idx).toLowerCase();
+    if (head === String(providerId || "").toLowerCase()) s = s.slice(idx + 1);
+  }
+  return s;
+}
+
+export function loadProviderConfigs({ file = defaultStateFile() } = {}) {
+  const v = readState(file).providerConfigs;
+  if (v && typeof v === "object" && !Array.isArray(v)) return v;
+  return {};
+}
+
+export function loadProviderConfig(id, { file = defaultStateFile() } = {}) {
+  const envUrl = (process.env[providerBaseUrlEnv(id)] || "").trim();
+  const envKeys = loadProviderKeys(id, { file });
+  // env 覆盖时以 env 为准
+  if (envUrl || (process.env[providerKeyEnv(id)] || "").trim()) {
+    const baseUrl = envUrl || loadProviderConfigs({ file })[id]?.baseUrl || (String(id).toLowerCase() === "workbuddy" ? WORKBUDDY_DEFAULT_BASE_URL : "");
+    const cfg = loadProviderConfigs({ file })[id];
+    const allowedModels = cfg && Array.isArray(cfg.allowedModels) ? [...new Set(cfg.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : [];
+    const auths = cfg && Array.isArray(cfg.auths) ? normalizeAuths(cfg.auths) : [];
+    if (baseUrl || envKeys.length || allowedModels.length || auths.length) return { baseUrl: normalizeBaseUrl(baseUrl), keys: envKeys, auths, allowedModels };
+    return null;
+  }
+  const configs = loadProviderConfigs({ file });
+  const cfg = configs[id];
+  if (cfg && typeof cfg === "object") {
+    return {
+      baseUrl: normalizeBaseUrl(cfg.baseUrl || (String(id).toLowerCase() === "workbuddy" ? WORKBUDDY_DEFAULT_BASE_URL : "")),
+      keys: Array.isArray(cfg.keys) ? [...new Set(cfg.keys.filter((x) => typeof x === "string" && x.trim().length))] : [],
+      auths: normalizeAuths(cfg.auths),
+      allowedModels: Array.isArray(cfg.allowedModels) ? [...new Set(cfg.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : [],
+    };
+  }
+  // 兼容旧 providerKeys 形态：有 key 但无 configs 时视为通用供应商（baseUrl 为空，需后补）
+  const keys = loadProviderKeys(id, { file });
+  if (keys.length) return { baseUrl: String(id).toLowerCase() === "workbuddy" ? WORKBUDDY_DEFAULT_BASE_URL : "", keys, auths: [], allowedModels: [] };
+  return null;
+}
+
+export function loadProviderBaseUrl(id, opts = {}) {
+  const env = (process.env[providerBaseUrlEnv(id)] || "").trim();
+  if (env) return normalizeBaseUrl(env);
+  const cfg = loadProviderConfigs(opts)[id];
+  if (cfg && typeof cfg.baseUrl === "string" && normalizeBaseUrl(cfg.baseUrl)) return normalizeBaseUrl(cfg.baseUrl);
+  if (String(id || "").toLowerCase() === "workbuddy") return WORKBUDDY_DEFAULT_BASE_URL;
+  return "";
+}
+
+export function loadProviderAuths(id, { file = defaultStateFile() } = {}) {
+  const cfg = loadProviderConfigs({ file })[id];
+  if (cfg && Array.isArray(cfg.auths)) return normalizeAuths(cfg.auths);
+  return [];
+}
+export function saveProviderAuths(id, list, { file = defaultStateFile() } = {}) {
+  const clean = normalizeAuths(list);
+  const configs = { ...loadProviderConfigs({ file }) };
+  const cur = configs[id] && typeof configs[id] === "object" ? configs[id] : {};
+  const baseUrl = normalizeBaseUrl(cur.baseUrl || loadProviderBaseUrl(id, { file }) || "");
+  const keys = Array.isArray(cur.keys) ? [...new Set(cur.keys.filter((x) => typeof x === "string" && x.trim().length))] : loadProviderKeys(id, { file });
+  const allowedModels = Array.isArray(cur.allowedModels) ? [...new Set(cur.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : [];
+  if (!baseUrl && !keys.length && !clean.length && !allowedModels.length) {
+    delete configs[id];
+  } else {
+    configs[id] = { baseUrl, keys };
+    if (clean.length) configs[id].auths = clean;
+    if (allowedModels.length) configs[id].allowedModels = allowedModels;
+  }
+  writeStateImmediate(file, { providerConfigs: configs });
+  return clean;
+}
+
+export function saveProviderBaseUrl(id, baseUrl, { file = defaultStateFile() } = {}) {
+  const clean = normalizeBaseUrl(baseUrl);
+  const configs = { ...loadProviderConfigs({ file }) };
+  const cur = configs[id] && typeof configs[id] === "object" ? configs[id] : {};
+  const keys = Array.isArray(cur.keys) ? cur.keys : loadProviderKeys(id, { file });
+  const auths = normalizeAuths(cur.auths);
+  const allowedModels = Array.isArray(cur.allowedModels) ? [...new Set(cur.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : [];
+  if (!clean && !keys.length && !auths.length && !allowedModels.length) {
+    delete configs[id];
+  } else {
+    configs[id] = { baseUrl: clean, keys };
+    if (auths.length) configs[id].auths = auths;
+    if (allowedModels.length) configs[id].allowedModels = allowedModels;
+  }
+  writeStateImmediate(file, { providerConfigs: configs });
+  return clean;
+}
+
+export function saveProviderConfig(id, { baseUrl, keys, auths, allowedModels }, { file = defaultStateFile() } = {}) {
+  const cleanUrl = normalizeBaseUrl(baseUrl);
+  const cleanKeys = [...new Set((Array.isArray(keys) ? keys : []).map((k) => String(k || "").trim()).filter(Boolean))];
+  const cleanAuths = auths === undefined ? undefined : normalizeAuths(auths);
+  const cleanAllowed = [...new Set((Array.isArray(allowedModels) ? allowedModels : []).map((m) => normalizeAllowedModel(m, id)).filter(Boolean))];
+  const configs = { ...loadProviderConfigs({ file }) };
+  const cur = configs[id] && typeof configs[id] === "object" ? configs[id] : {};
+  // 保留已有的 allowedModels / auths 若本次未传入
+  const finalAllowed = allowedModels === undefined ? (Array.isArray(cur.allowedModels) ? [...new Set(cur.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))] : []) : cleanAllowed;
+  const finalAuths = cleanAuths === undefined ? normalizeAuths(cur.auths) : cleanAuths;
+  if (!cleanUrl && !cleanKeys.length && !finalAllowed.length && !finalAuths.length) {
+    delete configs[id];
+  } else {
+    configs[id] = { baseUrl: cleanUrl, keys: cleanKeys };
+    if (finalAuths.length) configs[id].auths = finalAuths;
+    if (finalAllowed.length) configs[id].allowedModels = finalAllowed;
+  }
+  // 同步清理旧 providerKeys 中同 id 的残留，避免双写
+  const oldKeys = readState(file).providerKeys;
+  if (oldKeys && typeof oldKeys === "object" && oldKeys[id] !== undefined) {
+    const nextKeys = { ...oldKeys };
+    delete nextKeys[id];
+    writeStateImmediate(file, { providerKeys: nextKeys, providerConfigs: configs });
+    return { baseUrl: cleanUrl, keys: cleanKeys, auths: finalAuths, allowedModels: finalAllowed };
+  }
+  writeStateImmediate(file, { providerConfigs: configs });
+  return { baseUrl: cleanUrl, keys: cleanKeys, auths: finalAuths, allowedModels: finalAllowed };
+}
+
+// ---- 供应商模型白名单：providerConfigs.<id>.allowedModels（空 = 不限） ----
+export function loadProviderAllowedModels(id, { file = defaultStateFile() } = {}) {
+  const cfg = loadProviderConfig(id, { file });
+  if (cfg && Array.isArray(cfg.allowedModels)) return [...cfg.allowedModels];
+  const raw = readState(file).providerConfigs?.[id];
+  if (raw && Array.isArray(raw.allowedModels)) return [...new Set(raw.allowedModels.map((m) => normalizeAllowedModel(m, id)).filter(Boolean))];
+  return [];
+}
+
+export function saveProviderAllowedModels(id, list, { file = defaultStateFile() } = {}) {
+  const clean = [...new Set((Array.isArray(list) ? list : []).map((m) => normalizeAllowedModel(m, id)).filter(Boolean))];
+  const configs = { ...loadProviderConfigs({ file }) };
+  const cur = configs[id] && typeof configs[id] === "object" ? configs[id] : {};
+  const baseUrl = normalizeBaseUrl(cur.baseUrl || loadProviderBaseUrl(id, { file }) || "");
+  const keys = Array.isArray(cur.keys) ? cur.keys : loadProviderKeys(id, { file });
+  const auths = normalizeAuths(cur.auths);
+  if (!baseUrl && !keys.length && !auths.length && !clean.length) {
+    delete configs[id];
+  } else {
+    configs[id] = { baseUrl, keys };
+    if (auths.length) configs[id].auths = auths;
+    if (clean.length) configs[id].allowedModels = clean;
+  }
+  writeStateImmediate(file, { providerConfigs: configs });
+  return clean;
+}
+
+export function addProviderAllowedModel(id, model, opts = {}) {
+  const cur = loadProviderAllowedModels(id, opts);
+  const norm = normalizeAllowedModel(model, id);
+  if (!norm || cur.includes(norm)) return cur;
+  return saveProviderAllowedModels(id, [...cur, norm], opts);
+}
+
+export function removeProviderAllowedModel(id, model, opts = {}) {
+  return removeProviderAllowedModels(id, [model], opts);
+}
+
+export function removeProviderAllowedModels(id, targets = [], opts = {}) {
+  const set = new Set((Array.isArray(targets) ? targets : [targets]).map((m) => normalizeAllowedModel(m, id)).filter(Boolean));
+  const cur = loadProviderAllowedModels(id, opts);
+  const next = cur.filter((m) => !set.has(m));
+  return saveProviderAllowedModels(id, next, opts);
+}
+
+export function isModelAllowed(id, rawModel, { file = defaultStateFile() } = {}) {
+  const raw = String(rawModel || "").trim();
+  if (!raw) return true;
+  const allowed = loadProviderAllowedModels(id, { file });
+  if (!allowed.length) return true;
+  const norm = normalizeAllowedModel(raw, id);
+  return allowed.includes(norm);
+}
+
 // 常用模型勾选集（auto 候选池白名单）：空数组 = 不启用筛选（全量 auto）
 export function loadModelPicks({ file = defaultStateFile() } = {}) {
   const picks = readState(file).modelPicks;

package/src/sync-opencode.js

@@ -0,0 +1,152 @@
+import { readFileSync, writeFileSync, mkdirSync, existsSync, renameSync } from "node:fs";
+import { dirname, join } from "node:path";
+import os from "node:os";
+
+export function opencodeConfigPath() {
+  const env = process.env.OPENCODE_CONFIG || process.env.OPENCODE_CONFIG_PATH;
+  if (typeof env === "string" && env.trim()) return env.trim();
+  return join(os.homedir(), ".config", "opencode", "opencode.json");
+}
+
+export function toExternalAlias(id) {
+  const s = String(id || "").trim();
+  if (!s) return "";
+  return s.startsWith("mslxdff-") ? s : `mslxdff-${s}`;
+}
+
+export function toInternalId(aliasOrRaw) {
+  const s = String(aliasOrRaw || "").trim();
+  if (!s) return "";
+  return s.startsWith("mslxdff-") ? s.slice("mslxdff-".length) : s;
+}
+
+export function buildOpencodeProvider({ id, token, port }) {
+  const p = Number(port) || 8989;
+  const alias = toExternalAlias(id);
+  return {
+    name: "mslxdff",
+    npm: "@ai-sdk/openai-compatible",
+    options: {
+      apiKey: String(token || ""),
+      baseURL: `http://127.0.0.1:${p}/v1`,
+    },
+    models: {
+      [alias]: { name: alias },
+    },
+  };
+}
+
+export function isOpencodeLocalUrl(url) {
+  const u = String(url || "");
+  return u.includes("127.0.0.1") && u.includes("/v1");
+}
+
+export async function syncToOpencode({ id, token, port, file } = {}) {
+  const targetFile = file || opencodeConfigPath();
+  // id 可能是 alias 或原名，统一以 internal 去重、以 external 入库（原名兼容）
+  const normalizedRaw = String(id || "").trim();
+  if (!normalizedRaw) throw new Error("model id required");
+  const internal = toInternalId(normalizedRaw);
+  if (!internal) throw new Error("model id required");
+  const external = toExternalAlias(internal);
+  const cleanToken = String(token || "");
+  const p = Number(port) || 8989;
+
+  let data = null;
+  let corrupted = false;
+  let rawText = null;
+  try {
+    rawText = readFileSync(targetFile, "utf8");
+    const parsed = JSON.parse(rawText);
+    data = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+  } catch (err) {
+    if (rawText !== null) {
+      corrupted = true;
+      try {
+        mkdirSync(dirname(targetFile), { recursive: true });
+        writeFileSync(targetFile + ".bak", rawText ?? "", "utf8");
+      } catch {}
+      data = {};
+    } else {
+      data = {};
+    }
+  }
+
+  if (!data.provider || typeof data.provider !== "object" || Array.isArray(data.provider)) {
+    data.provider = {};
+  }
+
+  const oldProvider = data.provider.mslxdff && typeof data.provider.mslxdff === "object" && !Array.isArray(data.provider.mslxdff)
+    ? data.provider.mslxdff
+    : null;
+
+  let action;
+  let effectiveId = external;
+  if (oldProvider) {
+    const oldModels = oldProvider.models && typeof oldProvider.models === "object" && !Array.isArray(oldProvider.models)
+      ? oldProvider.models
+      : {};
+    // 去重：internal 或 external 任一已存在即视为已存在（原名兼容，以 internal 为基准）
+    const hasExternal = Object.prototype.hasOwnProperty.call(oldModels, external);
+    const hasInternal = Object.prototype.hasOwnProperty.call(oldModels, internal);
+    const exists = hasExternal || hasInternal;
+    const nextModels = { ...oldModels };
+    if (exists) {
+      if (hasExternal) {
+        nextModels[external] = { name: external, ...(oldModels[external] && typeof oldModels[external] === "object" ? oldModels[external] : {}), name: external };
+        effectiveId = external;
+      } else if (hasInternal) {
+        // 仅原名存在：保留原名不强制迁移为 alias，视为 updated（原名兼容）
+        nextModels[internal] = { name: internal, ...(oldModels[internal] && typeof oldModels[internal] === "object" ? oldModels[internal] : {}), name: internal };
+        effectiveId = internal;
+      }
+      action = "updated";
+    } else {
+      nextModels[external] = { name: external };
+      effectiveId = external;
+      action = "inserted";
+    }
+    // 合并 provider：保留 name/npm，覆盖 options.baseURL/apiKey，合并 models
+    const nextProvider = {
+      ...oldProvider,
+      name: oldProvider.name || "mslxdff",
+      npm: oldProvider.npm || "@ai-sdk/openai-compatible",
+      options: {
+        ...(oldProvider.options && typeof oldProvider.options === "object" ? oldProvider.options : {}),
+        baseURL: `http://127.0.0.1:${p}/v1`,
+        apiKey: cleanToken,
+      },
+      models: nextModels,
+    };
+    // 若插入的是 alias 但原名已存在，上面已处理为不新增；否则正常
+    data.provider.mslxdff = nextProvider;
+    // 若是新插入且 external 不等于 internal，且 internal 已存在时，需避免双键，上面已处理
+    // 若是新插入 external 且 internal 不存在，正常插入
+    if (!exists) {
+      data.provider.mslxdff.models = nextModels;
+    }
+  } else {
+    data.provider.mslxdff = buildOpencodeProvider({ id: external, token: cleanToken, port: p });
+    action = "inserted";
+  }
+
+  // 原子写
+  mkdirSync(dirname(targetFile), { recursive: true });
+  const tmp = `${targetFile}.tmp.${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+  writeFileSync(tmp, JSON.stringify(data, null, 2), "utf8");
+  try {
+    renameSync(tmp, targetFile);
+  } catch {
+    try {
+      writeFileSync(targetFile, readFileSync(tmp, "utf8"), "utf8");
+    } catch {}
+  }
+  try {
+    if (existsSync(tmp)) {
+      const { unlinkSync } = await import("node:fs");
+      unlinkSync(tmp);
+    }
+  } catch {}
+
+  return { action, file: targetFile, id: effectiveId, alias: external, internal, corrupted };
+}

package/src/time.js

@@ -0,0 +1,73 @@
+const TZ = "Asia/Shanghai";
+
+function shanghaiParts(d) {
+  const date = d instanceof Date ? d : new Date(d);
+  const fmt = new Intl.DateTimeFormat("en-GB", {
+    timeZone: TZ,
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit",
+    hour: "2-digit",
+    minute: "2-digit",
+    second: "2-digit",
+    hour12: false,
+  });
+  const parts = fmt.formatToParts(date);
+  const m = {};
+  for (const p of parts) m[p.type] = p.value;
+  return m; // {year, month, day, hour, minute, second}
+}
+
+// "MM-DD HH:mm:ss" e.g. "08-27 15:07:14"
+export function fmtShanghai(isoOrTs) {
+  if (isoOrTs == null) return "-";
+  try {
+    const p = shanghaiParts(isoOrTs);
+    return `${p.month}-${p.day} ${p.hour}:${p.minute}:${p.second}`;
+  } catch {
+    return "-";
+  }
+}
+
+// "YYYY-MM-DD HH:mm" e.g. "2026-08-27 15:07"
+export function fmtShanghaiYMDHM(isoOrTs) {
+  if (isoOrTs == null) return "-";
+  try {
+    const p = shanghaiParts(isoOrTs);
+    return `${p.year}-${p.month}-${p.day} ${p.hour}:${p.minute}`;
+  } catch {
+    return "-";
+  }
+}
+
+// "YYYY-MM-DD HH:mm:ss" e.g. "2026-08-27 15:07:14"
+export function fmtShanghaiYMDHMS(isoOrTs) {
+  if (isoOrTs == null) return "-";
+  try {
+    const p = shanghaiParts(isoOrTs);
+    return `${p.year}-${p.month}-${p.day} ${p.hour}:${p.minute}:${p.second}`;
+  } catch {
+    return "-";
+  }
+}
+
+// "HH:mm:ss" e.g. "15:07:14"
+export function fmtShanghaiHMS(isoOrTs) {
+  if (isoOrTs == null) return "--:--:--";
+  try {
+    const p = shanghaiParts(isoOrTs);
+    return `${p.hour}:${p.minute}:${p.second}`;
+  } catch {
+    return "--:--:--";
+  }
+}
+
+// 当前上海时间 "YYYY-MM-DD HH:mm" 用于 prompt
+export function nowShanghaiYMDHM() {
+  return fmtShanghaiYMDHM(new Date());
+}
+
+// 兼容：传入 Date 或 ts 或 ISO，都返回 "MM-DD HH:mm:ss"
+export function fmtTsShanghai(iso) {
+  return fmtShanghai(iso);
+}