refactor(rename)!: llmsproxy → modelrouter（module / 二进制 / 路径 / env）

产品名早已是 ModelRouter，但仓库标识符仍沿用旧名。这次统一，读写两侧都做兼容，
已部署的机器不会因为顺序问题立刻失效。

- go module `llmsproxy` → `modelrouter`；全仓 import 与 `cmd/modelrouter` 同步。
- `Makefile BINARY=modelrouter`；发行包名、systemd unit、/usr/share 资源、
  `/usr/local/bin` 目标全部改为 modelrouter。
- 默认配置目录 `/etc/llmsproxy` → `/etc/modelrouter`。**读取侧回退**：插件与
  `storeDir` 仍会检查旧路径，所以"先换二进制、后改 unit"不会立即失效。
- 环境变量 `LLMSPROXY_*`（PLUGIN_DIR / XDISPLAY_BASE / ARCH / LIVE_ZEN /
  BUILD_DIR）改为 `MODELROUTER_*`；`LLMS_PROXY_MASTER_KEY` →
  `MODELROUTER_MASTER_KEY`。旧名在读取侧继续接受。
- 桌面端内嵌核心 `bin/llmsproxy` → `bin/modelrouter`，并保留旧文件名回退，
  避免升级到一半的 profile 被判成"core binary missing"。
- 新增 `packaging/migrate-to-modelrouter.sh`：**默认 dry-run**，复制而非移动、
  旧目录永不删除、支持 `--rollback`；随 release tar 分发并由 core-dist 校验。
- `deploy.sh` 增加改名保护：发现旧 `/etc/llmsproxy` 而新配置不存在时**中止**，
  否则会部署出一个"能启动但没有 key、没有源"的空实例。
- 临时目录前缀 `/tmp/llmsproxy-*` → `/tmp/modelrouter-*`；清理逻辑同时回收两代。

兼容别名（`__llmsproxy_*` 全局、`llmsproxy` SDK 别名、旧路径/旧 env）刻意保留，
它们是升级路径而非遗留；docs/plugins.md 已标注为废弃。

本提交未包含：`adapters/opencodezen.lua`、`adapter_opencodezen_test.go`、
`adapter_opencodezen_live_test.go`（OpenCode UA/免费池的既有改动，另批提交）。

cmd/gui/main.js

@@ -1,5 +1,5 @@
 // ModelRouter Desktop GUI — main process
-// Clash-Verge-style: bundles and manages an embedded llmsproxy core instance
+// Desktop shell: bundles and manages an embedded modelrouter core instance
 // in a per-user profile dir (userData), auto-starts it, keeps a tray icon,
 // supports launch-at-login. Server-side users keep using the pure Go binary.
 const {
@@ -50,11 +50,27 @@ const CONFIG_FILE = path.join(PROFILE_DIR, "config.yaml");
 const PLUGINS_DIR = path.join(PROFILE_DIR, "plugins");
 // Packaged: extraResource at process.resourcesPath/bin (outside asar, spawnable).
 // Dev:   cmd/gui/bin, populated by prepare-core.js.
-const CORE_EXE = path.join(
+// The embedded core is named after the product. Installs produced before the
+// llmsproxy -> modelrouter rename still carry the old file name inside their
+// profile, so resolution falls back to it instead of declaring the core missing.
+const CORE_BIN_DIR = path.join(
   app.isPackaged ? process.resourcesPath : __dirname,
   "bin",
+);
+const CORE_EXE = path.join(
+  CORE_BIN_DIR,
+  process.platform === "win32" ? "modelrouter.exe" : "modelrouter",
+);
+const LEGACY_CORE_EXE = path.join(
+  CORE_BIN_DIR,
   process.platform === "win32" ? "llmsproxy.exe" : "llmsproxy",
 );
+
+function resolveCoreExe() {
+  if (fs.existsSync(CORE_EXE)) return CORE_EXE;
+  if (fs.existsSync(LEGACY_CORE_EXE)) return LEGACY_CORE_EXE;
+  return CORE_EXE;
+}
 // Packaged window icon: must be a REAL file on disk (extraResource), not an
 // asar path — Electron/GTK pulls BrowserWindow icons from the filesystem and
 // crashes (SIGSEGV) when given an asar virtual path on Linux.
@@ -163,7 +179,7 @@ function unsealViaCore() {
   let key = "";
   try {
     const out = execFileSync(
-      CORE_EXE,
+      resolveCoreExe(),
       ["-config", CONFIG_FILE, "-show-secrets"],
       {
         encoding: "utf-8",
@@ -215,7 +231,7 @@ function coreStarted() {
 function writeDefaultEmbeddedConfig() {
   // Generate a self-contained embedded profile with a fresh random admin key.
   // No upstream sources are preconfigured — the desktop user adds them via
-  // the WebUI's sources page (like Clash Verge's empty-by-default profile).
+  // the WebUI's sources page (empty by default, like the WebUI profile).
   // If a config already exists we do NOT overwrite it (keep user's edits).
   if (fs.existsSync(CONFIG_FILE)) return;
   const key = "sk-gw-" + crypto.randomBytes(16).toString("hex");
@@ -272,8 +288,9 @@ function startCore() {
     console.log("core already running");
     return;
   }
-  if (!fs.existsSync(CORE_EXE)) {
-    console.error("embedded core binary missing:", CORE_EXE);
+  const coreExe = resolveCoreExe();
+  if (!fs.existsSync(coreExe)) {
+    console.error("embedded core binary missing:", coreExe);
     return;
   }
   // ensure profile dir + config + local adapters exist
@@ -281,9 +298,8 @@ function startCore() {
   if (!fs.existsSync(CONFIG_FILE)) writeDefaultEmbeddedConfig();
   pluginSync.ensurePluginDirConfigured(CONFIG_FILE, PLUGINS_DIR, log);
   fs.mkdirSync(PLUGINS_DIR, { recursive: true });
-  pluginSync.syncBundledPluginsOnUpgrade(PROFILE_DIR, PLUGINS_DIR, app.getVersion(), log);
 
-  coreProc = spawn(CORE_EXE, ["-config", CONFIG_FILE], {
+  coreProc = spawn(coreExe, ["-config", CONFIG_FILE], {
     cwd: PROFILE_DIR,
     env: Object.assign({}, process.env, {
       LLMS_PROXY_GUI: "1",
@@ -686,7 +702,7 @@ function createWindow() {
     });
   }
   // Silent start: `--silent` CLI flag or settings.silentStart keeps the app
-  // in the tray without showing the window (Clash-Verge style). First run
+  // in the tray without showing the window (desktop-shell behaviour). First run
   // always shows the window so the user sees the dashboard.
   mainWindow.once("ready-to-show", () => {
     const firstRun = !fs.existsSync(
@@ -810,8 +826,8 @@ ipcMain.handle("core:state", () => ({
   port: settings.port || DEFAULT_PORT,
   profileDir: PROFILE_DIR,
   configFile: CONFIG_FILE,
-  coreExe: CORE_EXE,
-  coreExists: fs.existsSync(CORE_EXE),
+  coreExe: resolveCoreExe(),
+  coreExists: fs.existsSync(resolveCoreExe()),
 }));
 ipcMain.handle("core:start", () => {
   app.isQuitting = false;
@@ -883,7 +899,7 @@ if (gotLock) {
     createWindow();
     createTray();
 
-    // start embedded core if not already running (another instance of llmsproxy)
+    // start embedded core if not already running (another instance of modelrouter)
     setTimeout(async () => {
       const p = await probeEmbedded();
       if (!p.ok) {

cmd/gui/package.json

@@ -39,8 +39,8 @@
       },
       "extraResources": [
         {
-          "from": "bin/llmsproxy",
-          "to": "bin/llmsproxy"
+          "from": "bin/modelrouter",
+          "to": "bin/modelrouter"
         },
         {
           "from": "build/icon.png",
@@ -66,8 +66,8 @@
       "icon": "build/icon.ico",
       "extraResources": [
         {
-          "from": "bin/llmsproxy.exe",
-          "to": "bin/llmsproxy.exe"
+          "from": "bin/modelrouter.exe",
+          "to": "bin/modelrouter.exe"
         },
         {
           "from": "bin/lua51.dll",

cmd/gui/scripts/prepare-core.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// Build the embedded llmsproxy core(s) for the GUI package.
+// Build the embedded modelrouter core(s) for the GUI package.
 //   node prepare-core.js        -> linux (native, luajit) + win (cross, best effort)
 //   node prepare-core.js linux  -> linux only
 //   node prepare-core.js win    -> win only
@@ -12,21 +12,21 @@ const binDir = path.join(guiDir, "bin");
 const projectRoot = path.join(guiDir, "..", "..");
 
 function buildLinux() {
-  const out = path.join(binDir, "llmsproxy");
-  console.log("[prepare-core] building llmsproxy (linux/luajit)...");
+  const out = path.join(binDir, "modelrouter");
+  console.log("[prepare-core] building modelrouter (linux/luajit)...");
   fs.mkdirSync(binDir, { recursive: true });
   execFileSync(
     "go",
-    ["build", "-tags", "luajit", "-trimpath", "-o", out, "./cmd/llmsproxy"],
+    ["build", "-tags", "luajit", "-trimpath", "-o", out, "./cmd/modelrouter"],
     { cwd: projectRoot, stdio: "inherit" },
   );
   return out;
 }
 
 function buildWin() {
-  const out = path.join(binDir, "llmsproxy.exe");
+  const out = path.join(binDir, "modelrouter.exe");
   console.log(
-    "[prepare-core] cross-building llmsproxy.exe (windows/amd64, luajit)...",
+    "[prepare-core] cross-building modelrouter.exe (windows/amd64, luajit)...",
   );
   fs.mkdirSync(binDir, { recursive: true });
   const cc = process.env.MINGW_CC || "x86_64-w64-mingw32-gcc";
@@ -43,7 +43,7 @@ function buildWin() {
   }
   execFileSync(
     "go",
-    ["build", "-tags", "luajit", "-trimpath", "-o", out, "./cmd/llmsproxy"],
+    ["build", "-tags", "luajit", "-trimpath", "-o", out, "./cmd/modelrouter"],
     {
       cwd: projectRoot,
       stdio: "inherit",

cmd/modelrouter/main.go

@@ -1,4 +1,4 @@
-// Command llmsproxy is a standalone gateway that exposes multiple upstream LLM
+// Command modelrouter is a standalone gateway that exposes multiple upstream LLM
 // sources behind a unified OpenAI-compatible HTTP API. Protocol differences are
 // handled by Lua adapters (per source), optionally signing outgoing requests.
 // It supports explicit model selection or AUTO routing by priority, image
@@ -16,9 +16,9 @@ import (
 	"syscall"
 	"time"
 
-	"llmsproxy/internal/config"
-	"llmsproxy/internal/core"
-	"llmsproxy/internal/gateway"
+	"modelrouter/internal/config"
+	"modelrouter/internal/core"
+	"modelrouter/internal/gateway"
 )
 
 func main() {
@@ -33,12 +33,12 @@ func main() {
 	// error here instead of being silently created.
 	if *checkOnly {
 		if _, err := os.Stat(*cfgPath); err != nil {
-			log.Fatalf("[llmsproxy] check: %v", err)
+			log.Fatalf("[modelrouter] check: %v", err)
 		}
 		if _, err := config.Load(*cfgPath); err != nil {
-			log.Fatalf("[llmsproxy] check: %v", err)
+			log.Fatalf("[modelrouter] check: %v", err)
 		}
-		log.Printf("[llmsproxy] check: %s is valid", *cfgPath)
+		log.Printf("[modelrouter] check: %s is valid", *cfgPath)
 		return
 	}
 
@@ -48,34 +48,34 @@ func main() {
 	// program prints a credential, and this path never logs to a file.
 	if *showSecrets {
 		if _, err := os.Stat(*cfgPath); err != nil {
-			log.Fatalf("[llmsproxy] show-secrets: %v", err)
+			log.Fatalf("[modelrouter] show-secrets: %v", err)
 		}
 		if err := config.PrintSecrets(*cfgPath); err != nil {
-			log.Fatalf("[llmsproxy] show-secrets: %v", err)
+			log.Fatalf("[modelrouter] show-secrets: %v", err)
 		}
 		return
 	}
 
 	created, err := config.EnsureDefault(*cfgPath)
 	if err != nil {
-		log.Fatalf("[llmsproxy] config: %v", err)
+		log.Fatalf("[modelrouter] config: %v", err)
 	}
 
 	c, err := core.New(*cfgPath)
 	if err != nil {
-		log.Fatalf("[llmsproxy] core: %v", err)
+		log.Fatalf("[modelrouter] core: %v", err)
 	}
 	defer c.Close()
 
 	if created {
 		for _, k := range c.GatewayKeys() {
-			log.Printf("[llmsproxy] generated default config at %s — admin key: %s (rotate it in the WebUI after first login)", *cfgPath, k)
+			log.Printf("[modelrouter] generated default config at %s — admin key: %s (rotate it in the WebUI after first login)", *cfgPath, k)
 		}
 	}
 
 	gw, err := gateway.New(c)
 	if err != nil {
-		log.Fatalf("[llmsproxy] gateway: %v", err)
+		log.Fatalf("[modelrouter] gateway: %v", err)
 	}
 
 	// Ops hygiene: surface the two most common footguns instead of silently
@@ -88,16 +88,16 @@ func main() {
 	// (e.g. after rotating the starter key away) it reported "every request is
 	// rejected" while seven working keys, one of them admin, were in service.
 	if keys := c.ListKeys(); len(keys) == 0 {
-		log.Printf("[llmsproxy] WARNING: no gateway key configured — every request will be rejected. Add one in the WebUI or set gateway_keys")
+		log.Printf("[modelrouter] WARNING: no gateway key configured — every request will be rejected. Add one in the WebUI or set gateway_keys")
 	} else {
 		for _, k := range keys {
 			if k.Key == "sk-gw-local-0001" || k.Key == "sk-local-0001" {
-				log.Printf("[llmsproxy] WARNING: gateway key %q looks like the starter/example key — rotate it before exposing the gateway", k.Key)
+				log.Printf("[modelrouter] WARNING: gateway key %q looks like the starter/example key — rotate it before exposing the gateway", k.Key)
 			}
 		}
 	}
 	if l := c.Listen(); strings.HasPrefix(l, "0.0.0.0:") || strings.HasPrefix(l, "::") {
-		log.Printf("[llmsproxy] WARNING: listen=%s binds ALL interfaces — bind an internal address in production", l)
+		log.Printf("[modelrouter] WARNING: listen=%s binds ALL interfaces — bind an internal address in production", l)
 	}
 
 	srv := &http.Server{
@@ -108,22 +108,22 @@ func main() {
 	go func() {
 		cert, key := c.TLS()
 		if cert != "" && key != "" {
-			log.Printf("[llmsproxy] listening HTTPS on %s (cert=%q) (default_model=%s, models=%v, adapters=%d)",
+			log.Printf("[modelrouter] listening HTTPS on %s (cert=%q) (default_model=%s, models=%v, adapters=%d)",
 				c.Listen(), cert, c.DefaultModel(), c.Registry().ModelList(), len(c.ListAdapters()))
 			if err := srv.ListenAndServeTLS(cert, key); err != nil && err != http.ErrServerClosed {
-				log.Fatalf("[llmsproxy] server: %v", err)
+				log.Fatalf("[modelrouter] server: %v", err)
 			}
 			return
 		}
-		log.Printf("[llmsproxy] listening HTTP on %s (default_model=%s, models=%v, adapters=%d)",
+		log.Printf("[modelrouter] listening HTTP on %s (default_model=%s, models=%v, adapters=%d)",
 			c.Listen(), c.DefaultModel(), c.Registry().ModelList(), len(c.ListAdapters()))
 		if err := srv.ListenAndServe(); err != nil && err != http.ErrServerClosed {
-			log.Fatalf("[llmsproxy] server: %v", err)
+			log.Fatalf("[modelrouter] server: %v", err)
 		}
 	}()
 
 	stop := make(chan os.Signal, 1)
 	signal.Notify(stop, syscall.SIGINT, syscall.SIGTERM)
 	<-stop
-	log.Printf("[llmsproxy] shutting down")
+	log.Printf("[modelrouter] shutting down")
 }