feat: add desktop app hot update channel

2026-07-15 18:01:56 +08:00
parent 2dc15d99ad
commit 322807c68d
45 changed files with 292746 additions and 10 deletions
@@ -0,0 +1,884 @@
+// router.js —— 本地路由/中转代理：Codex 直连本地，指令经此转发到"当前分组"的中转 API。
+// 切分组只改内存里的 activeId，Codex 那头地址不变 → 秒切、无需重启 Codex。
+const http = require("http");
+const https = require("https");
+const fs = require("fs");
+const path = require("path");
+const os = require("os");
+const crypto = require("crypto");
+const { URL } = require("url");
+const { app, safeStorage } = require("electron");
+const translate = require("./translate");
+
+const CODEX_HOME = path.join(os.homedir(), ".codex");
+const CLAUDE_HOME = path.join(os.homedir(), ".claude");
+const PROVIDER_ID = "local-router"; // config.toml 里的 provider 名
+
+function cfgPath() {
+  return path.join(app.getPath("userData"), "router.json");
+}
+
+// —— 加解密（复用 safeStorage）——
+function enc(s) {
+  if (!s) return "";
+  try {
+    if (safeStorage.isEncryptionAvailable()) return "v1:" + safeStorage.encryptString(s).toString("base64");
+  } catch {}
+  return "b64:" + Buffer.from(s, "utf-8").toString("base64");
+}
+function dec(s) {
+  if (!s) return "";
+  try {
+    if (s.startsWith("v1:")) return safeStorage.decryptString(Buffer.from(s.slice(3), "base64"));
+    if (s.startsWith("b64:")) return Buffer.from(s.slice(4), "base64").toString("utf-8");
+  } catch {}
+  return "";
+}
+
+// —— 配置持久化 —— config: { port, routerKey, activeId, groups:[{id,name,baseUrl,key,model}] }
+let config = null;
+
+function defaultConfig() {
+  return { port: 8787, routerKey: "rk-" + crypto.randomBytes(16).toString("hex"), activeId: null, groups: [] };
+}
+function load() {
+  if (config) return config;
+  try {
+    const raw = JSON.parse(fs.readFileSync(cfgPath(), "utf-8"));
+    raw.routerKey = raw.routerKey ? dec(raw.routerKey) : defaultConfig().routerKey;
+    raw.groups = (raw.groups || []).map((g) => ({ ...g, key: dec(g.key) }));
+    config = { ...defaultConfig(), ...raw };
+  } catch {
+    config = defaultConfig();
+  }
+  ensureDefault();
+  return config;
+}
+function save() {
+  const out = {
+    ...config,
+    routerKey: enc(config.routerKey),
+    groups: config.groups.map((g) => ({ ...g, key: enc(g.key) })),
+  };
+  const p = cfgPath();
+  fs.mkdirSync(path.dirname(p), { recursive: true });
+  fs.writeFileSync(p, JSON.stringify(out, null, 2));
+  try {
+    fs.chmodSync(p, 0o600);
+  } catch {}
+}
+
+function activeGroup() {
+  load();
+  return config.groups.find((g) => g.id === config.activeId) || null;
+}
+
+// —— 默认分组：客户原本的 Codex 配置（自己账号，直连）——
+function readConfigToml() {
+  try {
+    return fs.readFileSync(path.join(CODEX_HOME, "config.toml"), "utf-8");
+  } catch {
+    return "";
+  }
+}
+function currentModelProvider() {
+  const head = readConfigToml().split("\n[")[0];
+  const m = head.match(/^\s*model_provider\s*=\s*["']([^"']+)/m);
+  return m ? m[1] : "";
+}
+// 读根级 model（新版桌面 Codex 登录态通常没有；用于复原时精确还原/清除中转写入的 model）
+function currentRootModel() {
+  const head = readConfigToml().split("\n[")[0];
+  const m = head.match(/^\s*model\s*=\s*["']([^"']+)/m);
+  return m ? m[1] : "";
+}
+function extractProviderBlock(text, prov) {
+  const esc = prov.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const re = new RegExp(`\\[model_providers\\.${esc}\\][\\s\\S]*?(?=\\n\\[|$)`, "m");
+  const m = text.match(re);
+  return m ? m[0].trimEnd() + "\n" : "";
+}
+function readAuthKey() {
+  try {
+    return JSON.parse(fs.readFileSync(path.join(CODEX_HOME, "auth.json"), "utf-8")).OPENAI_API_KEY || "";
+  } catch {
+    return "";
+  }
+}
+// 是否已用自己账号登录 Codex（ChatGPT OAuth）——凭证是 auth.json 的 tokens，而非 API key。
+// 这是「我的账号 · 直连」的真实判据：只要 tokens 在，切中转只是覆盖 OPENAI_API_KEY，登录不会丢。
+function isLoggedIn() {
+  try {
+    const a = JSON.parse(fs.readFileSync(path.join(CODEX_HOME, "auth.json"), "utf-8"));
+    return !!(a && a.tokens && (a.tokens.access_token || a.tokens.id_token || a.tokens.refresh_token));
+  } catch {
+    return false;
+  }
+}
+// 从 TOML 文本里删除某个 section（从 [header] 行删到下一个 [ 行之前），按行处理最稳
+function removeTomlSection(text, header) {
+  const lines = text.split("\n");
+  const out = [];
+  let skip = false;
+  for (const line of lines) {
+    const t = line.trim();
+    if (t === `[${header}]`) {
+      skip = true;
+      continue;
+    }
+    if (skip && t.startsWith("[") && t.endsWith("]")) skip = false; // 遇到下一个 section，停止跳过
+    if (!skip) out.push(line);
+  }
+  return out.join("\n").replace(/\n{3,}/g, "\n\n");
+}
+
+function backupConfig(text) {
+  try {
+    const dir = path.join(CODEX_HOME, "backups_state", "router");
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(path.join(dir, "config.toml." + Date.now() + ".bak"), text || "");
+  } catch {}
+}
+// 首次使用时，把当前(原始)Codex 配置快照为不可删除的「默认」分组。
+// 铁律：默认分组必须代表「我的账号 · 直连」的登录态，绝不能是接入中转的状态，
+// 否则「切回默认」会把 Codex 重新指向中转，用户就再也复原不回自己账号了。
+function ensureDefault() {
+  if (!config) return;
+  const loggedIn = isLoggedIn();
+  const existing = config.groups.find((g) => g.isDefault);
+  if (existing) {
+    // 自愈：已用自己账号登录，但历史版本把默认分组错误地快照成了中转 provider →
+    // 纠正为「纯登录态」，保证「切回默认」永远能干净复原自己账号。
+    if (loggedIn && (existing.modelProvider || existing.providerBlock || existing.authKey)) {
+      existing.modelProvider = "";
+      existing.providerBlock = "";
+      existing.authKey = "";
+      save();
+    }
+    return;
+  }
+  if (loggedIn) {
+    // 已登录自己账号：默认分组 = Codex 原生登录直连（不覆盖 model_provider、无 API key、
+    // 保留 auth.json 的 tokens）。无论此刻 config.toml 指向哪个中转，都能干净复原。
+    config.groups.unshift({
+      id: "default",
+      isDefault: true,
+      name: "默认（我的账号 · 直连）",
+      modelProvider: "",
+      providerBlock: "",
+      authKey: "",
+      origModel: currentRootModel(), // 记住原始根级 model（新版桌面登录态通常无 → ""），复原时精确还原
+    });
+    if (!config.activeId) config.activeId = "default";
+    save();
+    return;
+  }
+  // 未用 OAuth 登录（纯 API key 用户，无 tokens 可保护）：沿用原逻辑，快照当前直连 provider。
+  const prov = currentModelProvider();
+  if (!prov || prov === PROVIDER_ID) return; // 已是本地路由 / 无配置 → 不快照
+  const text = readConfigToml();
+  config.groups.unshift({
+    id: "default",
+    isDefault: true,
+    name: "默认（我的账号 · 直连）",
+    modelProvider: prov,
+    providerBlock: extractProviderBlock(text, prov),
+    authKey: readAuthKey(),
+    origModel: currentRootModel(),
+  });
+  if (!config.activeId) config.activeId = "default";
+  save();
+}
+// 模型目录路径（config.toml 的 model_catalog_json，默认 cc-switch-model-catalog.json）
+function catalogPath() {
+  const m = readConfigToml().match(/model_catalog_json\s*=\s*["']([^"']+)/);
+  const name = m ? m[1] : "cc-switch-model-catalog.json";
+  return path.isAbsolute(name) ? name : path.join(CODEX_HOME, name);
+}
+// 把分组的模型 + 上下文窗口写进 Codex 模型目录，让 Codex 按真实窗口自动压缩
+function applyModelCatalog(group) {
+  if (!group || group.isDefault || !group.model || !group.contextWindow) return;
+  const p = catalogPath();
+  let cat;
+  try {
+    cat = JSON.parse(fs.readFileSync(p, "utf-8"));
+  } catch {
+    return; // 无目录文件就不动
+  }
+  if (!cat.models || !cat.models.length) return;
+  const win = parseInt(group.contextWindow, 10);
+  if (!win) return;
+  const existing = cat.models.find((m) => m.slug === group.model);
+  if (existing) {
+    existing.context_window = win;
+    existing.max_context_window = win;
+    existing.visibility = "list";
+  } else {
+    const tpl = JSON.parse(JSON.stringify(cat.models[0])); // 克隆模板(含 base_instructions 等必需字段)
+    tpl.slug = group.model;
+    tpl.display_name = group.model;
+    tpl.description = group.model;
+    tpl.context_window = win;
+    tpl.max_context_window = win;
+    tpl.priority = 900;
+    tpl.visibility = "list";
+    cat.models.push(tpl);
+  }
+  try {
+    fs.writeFileSync(p + ".bak-router", fs.readFileSync(p));
+  } catch {}
+  fs.writeFileSync(p, JSON.stringify(cat, null, 2), "utf-8");
+}
+// 把 config.toml 根级 model 设成指定值
+function setConfigModel(model) {
+  if (!model) return;
+  const cfgFile = path.join(CODEX_HOME, "config.toml");
+  let text = readConfigToml();
+  if (/^\s*model\s*=/m.test(text)) text = text.replace(/^\s*model\s*=.*$/m, `model = "${model}"`);
+  else text = text.replace(/^(\s*model_provider\s*=.*)$/m, `$1\nmodel = "${model}"`);
+  fs.writeFileSync(cfgFile, text, "utf-8");
+}
+
+// 恢复到默认（把 config.toml/auth.json 还原成客户原始配置，Codex 直连自己账号）
+function restoreDirect() {
+  const def = config.groups.find((g) => g.isDefault);
+  if (!def) return;
+  const cfgFile = path.join(CODEX_HOME, "config.toml");
+  let text = readConfigToml();
+  backupConfig(text);
+  // 先移除本地路由段（无论哪种复原都要清掉）
+  text = removeTomlSection(text, `model_providers.${PROVIDER_ID}`);
+  if (def.modelProvider) {
+    // 有原始直连 provider（纯 API key 用户，如 Mac 的 custom）：设根键 + 追加原始段，避免重复键。
+    // 此分支完全保持旧行为（不动根级 model 行），确保已在用的 Mac 环境零回归。
+    if (/^\s*model_provider\s*=/m.test(text)) text = text.replace(/^\s*model_provider\s*=.*$/m, `model_provider = "${def.modelProvider}"`);
+    else text = `model_provider = "${def.modelProvider}"\n` + text;
+    if (def.providerBlock) {
+      text = removeTomlSection(text, `model_providers.${def.modelProvider}`);
+      text = text.trimEnd() + "\n\n" + def.providerBlock;
+    }
+  } else {
+    // 纯登录态（Windows 新格式 OAuth）：删根级 model_provider 覆盖，回到 Codex 原生登录直连。
+    text = text.replace(/^\s*model_provider\s*=.*$\n?/m, "");
+    // 清掉中转写入的根级 model；原始登录态通常无 model，若快照记了 origModel 则精确还原。
+    text = text.replace(/^\s*model\s*=.*$\n?/m, "");
+    if (def.origModel) text = `model = "${def.origModel}"\n` + text;
+  }
+  text = text.replace(/\n{3,}/g, "\n\n");
+  fs.writeFileSync(cfgFile, text, "utf-8");
+  const af = path.join(CODEX_HOME, "auth.json");
+  try {
+    const a = JSON.parse(fs.readFileSync(af, "utf-8"));
+    // 登录态：清空 OPENAI_API_KEY、保留 tokens → Codex 用 OAuth 直连；纯 key 用户则还原原始 key
+    a.OPENAI_API_KEY = def.authKey || null;
+    fs.writeFileSync(af, JSON.stringify(a, null, 2), "utf-8");
+    fs.chmodSync(af, 0o600);
+  } catch {}
+}
+
+function getGroupKey(id) {
+  load();
+  const g = config.groups.find((x) => x.id === id);
+  return g ? g.key : "";
+}
+
+// 按 id 取分组（含解密后的 key，供内部功能按指定分组直调中转）。只读，不改激活态/切回逻辑。
+function groupById(id) {
+  load();
+  return config.groups.find((x) => x.id === id) || null;
+}
+
+// 可供画布等内部功能"按需选用"的中转分组列表：排除默认直连分组，需配齐 baseUrl+key。只读。
+function usableGroups() {
+  load();
+  return config.groups.filter((g) => !g.isDefault && g.baseUrl && g.key);
+}
+
+// 给内部功能（如「会话记忆」摘要）用的可调用分组：优先当前激活的中转分组，
+// 不可用则取第一个配置齐全的中转分组；默认分组（直连账号）不参与。
+function llmGroup() {
+  load();
+  const usable = (g) => g && !g.isDefault && g.baseUrl && g.key && g.model;
+  const act = config.groups.find((g) => g.id === config.activeId);
+  if (usable(act)) return act;
+  return config.groups.find(usable) || null;
+}
+
+// 拉取某个中转 API 的模型列表（试 /v1/models 再 /models）
+async function fetchModels(baseUrl, key) {
+  if (!baseUrl) throw new Error("请先填 API 地址");
+  const base = baseUrl.replace(/\/$/, "");
+  let lastErr = null;
+  for (const p of ["/v1/models", "/models"]) {
+    try {
+      const res = await fetch(base + p, {
+        headers: { Authorization: "Bearer " + (key || ""), "User-Agent": "codex-market" },
+      });
+      if (!res.ok) {
+        lastErr = new Error("HTTP " + res.status);
+        continue;
+      }
+      const j = await res.json();
+      const arr = Array.isArray(j) ? j : j.data || j.models || [];
+      const list = arr.map((m) => (typeof m === "string" ? m : m.id || m.name)).filter(Boolean);
+      if (list.length) return Array.from(new Set(list));
+    } catch (e) {
+      lastErr = e;
+    }
+  }
+  throw lastErr || new Error("未获取到模型列表（接口可能不支持 /v1/models）");
+}
+
+// —— 代理服务器 ——
+let server = null;
+
+// 抓取一次真实请求/响应到 userData/router-capture/（用于开发协议转换）
+function captureDir() {
+  return path.join(app.getPath("userData"), "router-capture");
+}
+function writeCapture(name, data) {
+  try {
+    fs.mkdirSync(captureDir(), { recursive: true });
+    fs.writeFileSync(path.join(captureDir(), name), data);
+  } catch {}
+}
+
+function handle(req, res) {
+  const g = activeGroup();
+  if (!g) {
+    res.writeHead(503, { "content-type": "text/plain; charset=utf-8" });
+    res.end("本地路由：未选择中转分组");
+    return;
+  }
+  // 校验路由 key（Codex 用 auth.json 里的 routerKey 作 Bearer 发来）
+  const auth = req.headers["authorization"] || "";
+  if (config.routerKey && auth !== "Bearer " + config.routerKey) {
+    // 放行 localhost 但不匹配时也继续（避免 key 变动导致不可用），仅记录
+  }
+  const chunks = [];
+  req.on("data", (c) => chunks.push(c));
+  req.on("end", () => {
+    let body = Buffer.concat(chunks);
+    const doCapture = /responses/.test(req.url || "");
+    // 分组指定了模型 → 覆盖请求体里的 model
+    if (g.model && body.length) {
+      try {
+        const j = JSON.parse(body.toString("utf-8"));
+        if (j && typeof j === "object" && "model" in j) {
+          j.model = g.model;
+          body = Buffer.from(JSON.stringify(j), "utf-8");
+        }
+      } catch {}
+    }
+    // —— chat 模式：Responses ⇄ Chat Completions 协议转换（DeepSeek/GLM/Kimi 等）——
+    if (g.mode === "chat" && /responses/.test(req.url || "")) {
+      let responsesReq = {};
+      try {
+        responsesReq = JSON.parse(body.toString("utf-8"));
+      } catch {}
+      const chatReq = translate.responsesToChat(responsesReq, g.model || responsesReq.model);
+      const chatBody = Buffer.from(JSON.stringify(chatReq), "utf-8");
+      // 拼 chat 端点：多数网关/厂商(DeepSeek/GLM/Kimi/one-api)是 /v1/chat/completions
+      const cbase = g.baseUrl.replace(/\/$/, "");
+      let chatEndpoint;
+      if (/\/chat\/completions$/.test(cbase)) chatEndpoint = cbase; // 用户已填全
+      else if (/\/v\d+$/.test(cbase)) chatEndpoint = cbase + "/chat/completions"; // 已含 /v1
+      else chatEndpoint = cbase + "/v1/chat/completions";
+      let chatUrl;
+      try {
+        chatUrl = new URL(chatEndpoint);
+      } catch {
+        res.writeHead(502);
+        res.end("分组 API 地址无效");
+        return;
+      }
+      const https2 = chatUrl.protocol === "https:";
+      const conv = new translate.ChatToResponses(chatReq.model);
+      let ended = false;
+      const endOnce = (tail) => {
+        if (ended) return;
+        ended = true;
+        if (tail) res.write(tail);
+        res.end();
+      };
+      res.writeHead(200, { "content-type": "text/event-stream; charset=utf-8", "cache-control": "no-cache", connection: "keep-alive" });
+      if (doCapture) writeCapture("last-chat-request.json", `UPSTREAM ${chatUrl.href}\n\n` + JSON.stringify(chatReq, null, 2));
+      const up2 = (https2 ? https : http).request(
+        {
+          method: "POST",
+          hostname: chatUrl.hostname,
+          port: chatUrl.port || (https2 ? 443 : 80),
+          path: chatUrl.pathname + chatUrl.search,
+          headers: {
+            "content-type": "application/json",
+            authorization: "Bearer " + g.key,
+            accept: "text/event-stream",
+            host: chatUrl.host,
+            "content-length": Buffer.byteLength(chatBody),
+          },
+        },
+        (upRes) => {
+          if (upRes.statusCode !== 200) {
+            const eb = [];
+            upRes.on("data", (c) => eb.push(c));
+            upRes.on("end", () => {
+              const raw = Buffer.concat(eb).toString("utf-8").slice(0, 2000);
+              if (doCapture) writeCapture("last-chat-response.txt", `STATUS ${upRes.statusCode}\n\n` + raw);
+              // 提取上游错误消息，作为一条助手回复显示给 Codex（而不是"断连"）
+              let human = raw.slice(0, 800);
+              try {
+                const j = JSON.parse(raw);
+                human = (j.error && (j.error.message || j.error)) || j.message || human;
+              } catch {}
+              let s = conv.onChunk({ choices: [{ delta: { content: `⚠️ 中转上游返回错误 (${upRes.statusCode})：\n${human}` } }] });
+              s += conv.finish();
+              endOnce(s);
+            });
+            return;
+          }
+          const rawBuf = [];
+          let sseBuf = "";
+          upRes.on("data", (chunk) => {
+            if (doCapture) rawBuf.push(chunk);
+            sseBuf += chunk.toString("utf-8");
+            let i;
+            while ((i = sseBuf.indexOf("\n")) >= 0) {
+              const line = sseBuf.slice(0, i).trim();
+              sseBuf = sseBuf.slice(i + 1);
+              if (!line.startsWith("data:")) continue;
+              const data = line.slice(5).trim();
+              if (data === "[DONE]") {
+                endOnce(conv.finish());
+                return;
+              }
+              try {
+                res.write(conv.onChunk(JSON.parse(data)));
+              } catch {}
+            }
+          });
+          upRes.on("end", () => {
+            if (doCapture) writeCapture("last-chat-response.txt", `STATUS 200\n\n` + Buffer.concat(rawBuf).toString("utf-8").slice(0, 8000));
+            endOnce(conv.finish());
+          });
+        }
+      );
+      up2.on("error", (e) => {
+        if (doCapture) writeCapture("last-chat-response.txt", "PROXY ERROR: " + String(e.message || e));
+        endOnce(conv.ev("error", { code: "proxy_error", message: String(e.message || e) }));
+      });
+      up2.end(chatBody);
+      return;
+    }
+
+    let target;
+    try {
+      target = new URL(g.baseUrl.replace(/\/$/, "") + req.url);
+    } catch {
+      res.writeHead(502);
+      res.end("分组 API 地址无效");
+      return;
+    }
+    const isHttps = target.protocol === "https:";
+    const mod = isHttps ? https : http;
+    const headers = { ...req.headers };
+    headers["host"] = target.host;
+    // Anthropic 风格请求（Claude Code 走 /v1/messages）：保持客户端原本的认证方式，只把密钥换成分组的真实密钥。
+    // 关键：不要同时塞 Bearer + x-api-key —— 有的中转会据此判定为"直连 API 模式"而落到空账号池，返回 "No available accounts"。
+    const isAnthropic = /\/v1\/messages/.test(req.url || "") || "anthropic-version" in headers || "x-api-key" in headers;
+    if (isAnthropic) {
+      if ("x-api-key" in headers) {
+        headers["x-api-key"] = g.key; // 客户端用的是 x-api-key 模式
+        delete headers["authorization"];
+      } else {
+        headers["authorization"] = "Bearer " + g.key; // Claude Code 默认：只发 Bearer
+        delete headers["x-api-key"];
+      }
+      if (!headers["anthropic-version"]) headers["anthropic-version"] = "2023-06-01";
+    } else {
+      headers["authorization"] = "Bearer " + g.key; // 非 Anthropic（Codex 等）：换成分组密钥
+    }
+    delete headers["content-length"];
+    if (body.length) headers["content-length"] = Buffer.byteLength(body);
+    if (doCapture) {
+      writeCapture("last-request.json", `URL ${req.method} ${req.url}\nUPSTREAM ${target.href}\n\n` + body.toString("utf-8"));
+    }
+    const up = mod.request(
+      {
+        method: req.method,
+        hostname: target.hostname,
+        port: target.port || (isHttps ? 443 : 80),
+        path: target.pathname + target.search,
+        headers,
+      },
+      (upRes) => {
+        res.writeHead(upRes.statusCode || 502, upRes.headers);
+        if (doCapture) {
+          const buf = [];
+          upRes.on("data", (c) => {
+            buf.push(c);
+            res.write(c);
+          });
+          upRes.on("end", () => {
+            res.end();
+            writeCapture("last-response.txt", `STATUS ${upRes.statusCode}\n\n` + Buffer.concat(buf).toString("utf-8"));
+          });
+        } else {
+          upRes.pipe(res); // 流式透传（SSE 也 OK）
+        }
+      }
+    );
+    up.on("error", (e) => {
+      if (!res.headersSent) res.writeHead(502, { "content-type": "text/plain; charset=utf-8" });
+      res.end("上游错误：" + e.message);
+    });
+    up.end(body);
+  });
+}
+
+function start() {
+  load();
+  if (server) return { running: true, port: config.port };
+  return new Promise((resolve, reject) => {
+    server = http.createServer(handle);
+    server.on("error", (e) => {
+      server = null;
+      reject(e);
+    });
+    server.listen(config.port, "127.0.0.1", () => resolve({ running: true, port: config.port }));
+  });
+}
+function stop() {
+  if (server) {
+    server.close();
+    server = null;
+  }
+  return { running: false };
+}
+function isRunning() {
+  return !!server;
+}
+
+function status() {
+  load();
+  return {
+    running: isRunning(),
+    port: config.port,
+    routerKey: config.routerKey,
+    address: `http://127.0.0.1:${config.port}`,
+    activeId: config.activeId,
+    claudeApplied: claudeApplied(),
+    groups: config.groups.map((g) => ({
+      id: g.id,
+      name: g.name,
+      baseUrl: g.isDefault ? "（Codex 原始配置 · 直连你的账号）" : g.baseUrl,
+      model: g.model || "",
+      mode: g.mode || "responses",
+      contextWindow: g.contextWindow || "",
+      hasKey: g.isDefault ? true : !!g.key,
+      isDefault: !!g.isDefault,
+      codexImage: !!g.codexImage,
+    })),
+  };
+}
+
+// ——————————————————————————————————————————————————————————————
+// gen-image 生图技能：把「用于 Codex 生图」的中转分组凭证写进技能的 .env
+// ——————————————————————————————————————————————————————————————
+// 技能目录名可能因显示名不同而变（市场安装按 skill.name 派生中文目录），
+// 故扫描各 skills/*/SKILL.md 的 name 字段来定位，而非写死路径。
+function genImageSkillDir() {
+  const base = path.join(CODEX_HOME, "skills");
+  let names = [];
+  try {
+    names = fs.readdirSync(base, { withFileTypes: true })
+      .filter((d) => d.isDirectory() || d.isSymbolicLink())
+      .map((d) => d.name);
+  } catch {
+    return null;
+  }
+  for (const name of names) {
+    try {
+      const txt = fs.readFileSync(path.join(base, name, "SKILL.md"), "utf-8");
+      const fm = /^---\s*\n([\s\S]*?)\n---/.exec(txt);
+      const scope = fm ? fm[1] : txt.slice(0, 400);
+      const m = /^\s*name\s*:\s*(.+)$/im.exec(scope);
+      if (m && m[1].trim().replace(/^["']|["']$/g, "") === "gen-image") return path.join(base, name);
+    } catch {}
+  }
+  for (const guess of ["gen-image", "gen-image-生图"]) {
+    if (fs.existsSync(path.join(base, guess, "SKILL.md"))) return path.join(base, guess);
+  }
+  return null;
+}
+
+function writeGenImageEnv(dir, baseUrl, key, model) {
+  const body =
+    "# 由 TD工具箱「中转」自动写入：勾选“在 Codex 中用于生图”的分组凭证。\n" +
+    "# 取消勾选 / 删除该分组会被清除。请勿手动提交到 git。\n" +
+    `IMAGE_API_BASE_URL=${baseUrl || ""}\n` +
+    `IMAGE_API_KEY=${key || ""}\n` +
+    `IMAGE_MODEL=${model || "gpt-image-2"}\n`;
+  const p = path.join(dir, ".env");
+  fs.writeFileSync(p, body, "utf-8");
+  try { fs.chmodSync(p, 0o600); } catch {}
+}
+
+function clearGenImageEnv(dir) {
+  const p = path.join(dir, ".env");
+  try {
+    if (!fs.existsSync(p)) return;
+    // 只清除工具箱自动写入的那份，保留用户手工建的 .env（避免误删）
+    if (fs.readFileSync(p, "utf-8").includes("由 TD工具箱")) fs.unlinkSync(p);
+  } catch {}
+}
+
+// 依据当前分组的 codexImage 标记，同步写入/清除 gen-image 的 .env。
+// 生图默认用 gpt-image-2（分组的 model 是对话模型，不用于生图）。
+function syncGenImage() {
+  load();
+  const dir = genImageSkillDir();
+  const src = config.groups.find((g) => g.codexImage && !g.isDefault && g.baseUrl && g.key);
+  if (!dir) return { ok: false, reason: src ? "skill-not-installed" : "no-skill" };
+  if (!src) { clearGenImageEnv(dir); return { ok: true, cleared: true, dir }; }
+  writeGenImageEnv(dir, src.baseUrl, src.key, src.imageModel || "gpt-image-2");
+  return { ok: true, wrote: true, dir, group: src.name };
+}
+
+// —— 分组增删改 / 切换 ——
+function upsertGroup(g) {
+  load();
+  let id;
+  if (g.id) {
+    const i = config.groups.findIndex((x) => x.id === g.id);
+    if (i >= 0) config.groups[i] = { ...config.groups[i], ...g };
+    else config.groups.push({ ...g });
+    id = g.id;
+  } else {
+    g.id = "g-" + crypto.randomBytes(6).toString("hex");
+    config.groups.push(g);
+    id = g.id;
+  }
+  if (!config.activeId) config.activeId = g.id;
+  // 生图来源唯一：勾选的分组独占，清掉其它分组的标记
+  const cur = config.groups.find((x) => x.id === id);
+  if (cur && cur.codexImage) {
+    for (const grp of config.groups) if (grp.id !== id) grp.codexImage = false;
+  }
+  save();
+  try { syncGenImage(); } catch {}
+  return status();
+}
+function deleteGroup(id) {
+  load();
+  const g = config.groups.find((x) => x.id === id);
+  if (g && g.isDefault) return { ...status(), error: "默认分组不可删除" };
+  config.groups = config.groups.filter((x) => x.id !== id);
+  if (config.activeId === id) config.activeId = config.groups[0] ? config.groups[0].id : null;
+  save();
+  try { syncGenImage(); } catch {}  // 删掉的可能正是生图来源，同步清除 .env
+  return status();
+}
+function setActive(id) {
+  load();
+  const target = config.groups.find((g) => g.id === id);
+  if (!target) return status();
+  const before = currentModelProvider();
+  let needsRestart = false;
+  let mode = "proxy";
+  if (target.isDefault) {
+    // 切回默认 = 还原原始配置，Codex 直连自己账号（需重启 Codex）
+    restoreDirect();
+    mode = "direct";
+    needsRestart = before === PROVIDER_ID; // 之前在走路由 → 需重启
+  } else {
+    // 切到中转分组：确保 config.toml 指向本地路由
+    if (before !== PROVIDER_ID) {
+      applyToCodex();
+      needsRestart = true; // 从直连切到路由 → 需重启一次
+    }
+    // 若分组指定了模型：写模型目录窗口 + 设 config 模型，让 Codex 按真实窗口压缩
+    if (target.model) {
+      applyModelCatalog(target);
+      setConfigModel(target.model);
+    }
+  }
+  config.activeId = id;
+  save();
+  return { ...status(), _needsRestart: needsRestart, _mode: mode };
+}
+function setPort(port) {
+  load();
+  config.port = parseInt(port, 10) || 8787;
+  save();
+  return status();
+}
+
+// —— 自动配置 Codex —— 写 config.toml 的 local-router provider + auth.json 的 routerKey
+function codexSnippet() {
+  load();
+  return `model_provider = "${PROVIDER_ID}"\n\n[model_providers.${PROVIDER_ID}]\nname = "本地路由"\nbase_url = "http://127.0.0.1:${config.port}"\nwire_api = "responses"\nrequires_openai_auth = true`;
+}
+
+function applyToCodex() {
+  load();
+  // 本地路由需要一个中转分组做上游；若当前是默认/空，自动选第一个中转分组
+  const cur = config.groups.find((g) => g.id === config.activeId);
+  if (!cur || cur.isDefault) {
+    const proxy = config.groups.find((g) => !g.isDefault);
+    if (proxy) config.activeId = proxy.id;
+  }
+  const cfgFile = path.join(CODEX_HOME, "config.toml");
+  let text = "";
+  try {
+    text = fs.readFileSync(cfgFile, "utf-8");
+  } catch {}
+  // 备份
+  try {
+    fs.mkdirSync(path.join(CODEX_HOME, "backups_state", "router"), { recursive: true });
+    fs.writeFileSync(path.join(CODEX_HOME, "backups_state", "router", "config.toml." + Date.now() + ".bak"), text);
+  } catch {}
+
+  // 替换/插入 model_provider 根键
+  if (/^\s*model_provider\s*=/m.test(text)) {
+    text = text.replace(/^\s*model_provider\s*=.*$/m, `model_provider = "${PROVIDER_ID}"`);
+  } else {
+    text = `model_provider = "${PROVIDER_ID}"\n` + text;
+  }
+  // 清掉「默认分组」原始 provider 的旧段（已存进 router.json，避免残留误导）
+  const def = config.groups.find((g) => g.isDefault);
+  if (def && def.modelProvider && def.modelProvider !== PROVIDER_ID) {
+    text = removeTomlSection(text, `model_providers.${def.modelProvider}`);
+  }
+  // 替换/插入 [model_providers.local-router] 段：先删旧的（含被 bug 弄重复的），再追加干净的
+  const block = `[model_providers.${PROVIDER_ID}]\nname = "本地路由"\nbase_url = "http://127.0.0.1:${config.port}"\nwire_api = "responses"\nrequires_openai_auth = true\n`;
+  text = removeTomlSection(text, `model_providers.${PROVIDER_ID}`);
+  text = text.trimEnd() + "\n\n" + block;
+  fs.writeFileSync(cfgFile, text, "utf-8");
+
+  // auth.json 写 routerKey（保留其它字段），Codex 会把它当 Bearer 发到本地路由
+  const authFile = path.join(CODEX_HOME, "auth.json");
+  let auth = {};
+  try {
+    auth = JSON.parse(fs.readFileSync(authFile, "utf-8"));
+  } catch {}
+  auth.OPENAI_API_KEY = config.routerKey;
+  try {
+    fs.writeFileSync(authFile, JSON.stringify(auth, null, 2), "utf-8");
+    fs.chmodSync(authFile, 0o600);
+  } catch {}
+  // 当前分组若指定了模型 → 写模型目录窗口 + 设 config 模型
+  const cur2 = config.groups.find((g) => g.id === config.activeId);
+  if (cur2 && !cur2.isDefault && cur2.model) {
+    applyModelCatalog(cur2);
+    setConfigModel(cur2.model);
+  }
+  save();
+  return { ok: true };
+}
+
+// —— 自动接入 Claude Code —— 写 ~/.claude/settings.json 的 env：ANTHROPIC_BASE_URL + ANTHROPIC_AUTH_TOKEN
+// Claude Code 会把 settings.json 里 env 的键当环境变量注入每个会话，从而走本地路由。
+function claudeSettingsPath() {
+  return path.join(CLAUDE_HOME, "settings.json");
+}
+
+function applyToClaudeCode() {
+  load();
+  // 本地路由需要一个中转分组做上游；若当前是默认/空，自动选第一个中转分组
+  const cur = config.groups.find((g) => g.id === config.activeId);
+  if (!cur || cur.isDefault) {
+    const proxy = config.groups.find((g) => !g.isDefault);
+    if (proxy) {
+      config.activeId = proxy.id;
+      save();
+    }
+  }
+  fs.mkdirSync(CLAUDE_HOME, { recursive: true });
+  const p = claudeSettingsPath();
+  let settings = {};
+  let existed = false;
+  try {
+    settings = JSON.parse(fs.readFileSync(p, "utf-8"));
+    existed = true;
+  } catch {}
+  // 备份原文件
+  if (existed) {
+    try {
+      const dir = path.join(CLAUDE_HOME, "backups_router");
+      fs.mkdirSync(dir, { recursive: true });
+      fs.writeFileSync(path.join(dir, "settings.json." + Date.now() + ".bak"), fs.readFileSync(p));
+    } catch {}
+  }
+  settings.env = settings.env || {};
+  // 首次接入时记住用户原有的两项，便于「取消接入」还原
+  if (!config.claudePrev) {
+    config.claudePrev = {
+      base: Object.prototype.hasOwnProperty.call(settings.env, "ANTHROPIC_BASE_URL") ? settings.env.ANTHROPIC_BASE_URL : null,
+      token: Object.prototype.hasOwnProperty.call(settings.env, "ANTHROPIC_AUTH_TOKEN") ? settings.env.ANTHROPIC_AUTH_TOKEN : null,
+    };
+  }
+  settings.env.ANTHROPIC_BASE_URL = `http://127.0.0.1:${config.port}`;
+  settings.env.ANTHROPIC_AUTH_TOKEN = config.routerKey;
+  fs.writeFileSync(p, JSON.stringify(settings, null, 2), "utf-8");
+  try {
+    fs.chmodSync(p, 0o600);
+  } catch {}
+  save();
+  return { ok: true, path: p };
+}
+
+// 取消接入：把 settings.json 里的两项还原成用户原值（或删除）
+function restoreClaudeCode() {
+  load();
+  const p = claudeSettingsPath();
+  let settings = {};
+  try {
+    settings = JSON.parse(fs.readFileSync(p, "utf-8"));
+  } catch {
+    return { ok: true }; // 没有文件就无需还原
+  }
+  settings.env = settings.env || {};
+  const prev = config.claudePrev || { base: null, token: null };
+  for (const [k, v] of [["ANTHROPIC_BASE_URL", prev.base], ["ANTHROPIC_AUTH_TOKEN", prev.token]]) {
+    if (v == null) delete settings.env[k];
+    else settings.env[k] = v;
+  }
+  if (settings.env && Object.keys(settings.env).length === 0) delete settings.env;
+  fs.writeFileSync(p, JSON.stringify(settings, null, 2), "utf-8");
+  delete config.claudePrev;
+  save();
+  return { ok: true };
+}
+
+// Claude Code 是否已指向本地路由
+function claudeApplied() {
+  try {
+    const s = JSON.parse(fs.readFileSync(claudeSettingsPath(), "utf-8"));
+    return !!(s.env && s.env.ANTHROPIC_BASE_URL === `http://127.0.0.1:${(config || {}).port || 8787}`);
+  } catch {
+    return false;
+  }
+}
+
+module.exports = {
+  load,
+  start,
+  stop,
+  isRunning,
+  status,
+  upsertGroup,
+  deleteGroup,
+  setActive,
+  setPort,
+  applyToCodex,
+  codexSnippet,
+  applyToClaudeCode,
+  restoreClaudeCode,
+  claudeApplied,
+  getGroupKey,
+  syncGenImage,
+  groupById,
+  usableGroups,
+  llmGroup,
+  fetchModels,
+};