@jsonstudio/rcc 0.89.1803 → 0.89.1959

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jsonstudio/rcc",
-  "version": "0.89.1803",
+  "version": "0.89.1959",
   "description": "Multi-provider OpenAI proxy server with anthropic/responses/chat support (release)",
   "type": "module",
   "main": "dist/index.js",
@@ -29,11 +29,11 @@
     "node": ">=20 <26"
   },
   "scripts": {
-    "build": "npm run llmswitch:ensure && node scripts/build-core.mjs && node scripts/vendor-core.mjs && npm run clean && node scripts/gen-build-info.mjs && tsc && node scripts/copy-compat-assets.mjs && node scripts/copy-modules-config.mjs",
-    "build:dev": "bash -lc 'export BUILD_MODE=dev; npm run build && npm run test:unified-hub-shadow && npm run verify:e2e-toolcall && npm run verify:apply-patch && npm run verify:apply-patch-regressions && npm run verify:exec-command && npm run test:routing-instructions && npm run test:cli && npm run install:global && npm run mock:regressions && npm run test:blackbox-antigravity-parity && npm run verify:errorsamples && npm run verify:e2e-gemini-followup-sample'",
-    "build:min": "npm run llmswitch:ensure && node scripts/build-core.mjs && node scripts/vendor-core.mjs && npm run clean && node scripts/gen-build-info.mjs && tsc && node scripts/copy-compat-assets.mjs && node scripts/copy-modules-config.mjs",
+    "build": "npm run llmswitch:ensure && node scripts/build-core.mjs && node scripts/vendor-core.mjs && npm run clean && node scripts/gen-build-info.mjs && tsc && node scripts/copy-compat-assets.mjs && node scripts/copy-modules-config.mjs && npm run fix:cli-permission",
+    "build:dev": "bash -lc 'export BUILD_MODE=dev; npm run build && npm run fix:cli-permission && npm run test:unified-hub-shadow && npm run verify:e2e-toolcall && npm run verify:apply-patch && npm run verify:apply-patch-regressions && npm run verify:exec-command && npm run test:routing-instructions && npm run test:cli && npm run install:global && npm run mock:regressions && npm run test:blackbox-antigravity-parity && npm run verify:errorsamples && npm run verify:e2e-gemini-followup-sample'",
+    "build:min": "npm run llmswitch:ensure && node scripts/build-core.mjs && node scripts/vendor-core.mjs && npm run clean && node scripts/gen-build-info.mjs && tsc && node scripts/copy-compat-assets.mjs && node scripts/copy-modules-config.mjs && npm run fix:cli-permission",
     "prepack": "echo skip-prepack",
-    "postbuild": "chmod +x dist/cli.js || true",
+    "postbuild": "node scripts/ensure-cli-executable.mjs",
     "build:watch": "tsc --watch",
     "start": "npm run -s start:bg",
     "dev": "tsx watch src/index.ts",
@@ -46,7 +46,7 @@
     "test:ci:coverage": "npm run test:ci:jest:coverage",
     "verify:repo-sanity": "node scripts/ci/repo-sanity.mjs",
     "vr:dryrun": "node scripts/virtual-router-dryrun.mjs",
-    "test:routing-instructions": "npm run jest:run -- --runTestsByPath tests/token-daemon/token-daemon.auto-refresh-noninteractive.spec.ts tests/token-daemon/token-daemon.refresh-ahead.spec.ts tests/commands/oauth-command.qwen-auto.spec.ts tests/token-daemon/interactive-refresh.spec.ts tests/server/runtime/request-executor.single-attempt.spec.ts tests/server/runtime/executor-provider.retryable.spec.ts tests/providers/auth/tokenfile-auth.iflow.spec.ts tests/providers/auth/antigravity-user-agent.unit.test.ts tests/providers/auth/antigravity-fingerprint.unit.test.ts tests/providers/auth/antigravity-warmup.unit.test.ts tests/providers/core/runtime/gemini-cli-http-provider.unit.test.ts tests/providers/core/runtime/antigravity-quota-client.unit.test.ts tests/manager/quota/provider-quota-center.spec.ts tests/manager/quota/provider-quota-store.spec.ts tests/manager/quota/quota-manager-refresh.spec.ts tests/manager/quota/provider-quota-daemon-module.spec.ts tests/manager/quota/provider-key-normalization.spec.ts tests/server/http-server/daemon-admin.e2e.spec.ts tests/server/http-server/quota-view-injection.spec.ts tests/server/http-server/quota-refresh-triggers.e2e.spec.ts tests/server/http-server/hub-policy-injection.spec.ts tests/server/http-server/session-header-injection.spec.ts tests/server/http-server/session-dir.spec.ts tests/server/handlers/sse-timeout.spec.ts tests/utils/is-direct-execution.test.ts tests/utils/windows-netstat.test.ts tests/servertool/virtual-router-context-fallback.spec.ts tests/servertool/virtual-router-longcontext-fallback.spec.ts tests/servertool/virtual-router-series-cooldown.spec.ts tests/servertool/recursive-detection-guard.spec.ts tests/servertool/routing-instructions.spec.ts tests/servertool/stop-message-auto.spec.ts tests/servertool/stopmessage-session-scope.spec.ts tests/servertool/stopmessage-anthropic-stop-sequence.spec.ts tests/servertool/stopmessage-compaction-false-positive.spec.ts tests/servertool/servertool-progress-logging.spec.ts tests/servertool/servertool-clock.spec.ts tests/servertool/antigravity-thought-signature-bootstrap.spec.ts tests/compat/tabglm-claude-code-profile.spec.ts tests/compat/antigravity-thought-signature.spec.ts tests/sharedmodule/mcp-tool-descriptions.spec.ts tests/sharedmodule/virtual-router-routing-model-validation.spec.ts tests/unified-hub/hub-v1-single-path-imports.spec.ts",
+    "test:routing-instructions": "npm run jest:run -- --runTestsByPath tests/token-daemon/token-daemon.auto-refresh-noninteractive.spec.ts tests/token-daemon/token-daemon.refresh-ahead.spec.ts tests/commands/oauth-command.qwen-auto.spec.ts tests/token-daemon/interactive-refresh.spec.ts tests/server/runtime/request-executor.single-attempt.spec.ts tests/server/runtime/executor-provider.retryable.spec.ts tests/providers/auth/tokenfile-auth.iflow.spec.ts tests/providers/auth/antigravity-user-agent.unit.test.ts tests/providers/auth/antigravity-fingerprint.unit.test.ts tests/providers/auth/antigravity-warmup.unit.test.ts tests/providers/core/runtime/gemini-cli-http-provider.unit.test.ts tests/providers/core/runtime/antigravity-quota-client.unit.test.ts tests/manager/quota/provider-quota-center.spec.ts tests/manager/quota/provider-quota-store.spec.ts tests/manager/quota/quota-manager-refresh.spec.ts tests/manager/quota/provider-quota-daemon-module.spec.ts tests/manager/quota/provider-key-normalization.spec.ts tests/server/http-server/daemon-admin.e2e.spec.ts tests/server/http-server/clock-client-routes.spec.ts tests/server/http-server/quota-view-injection.spec.ts tests/server/http-server/quota-refresh-triggers.e2e.spec.ts tests/server/http-server/hub-policy-injection.spec.ts tests/server/http-server/session-header-injection.spec.ts tests/server/http-server/session-dir.spec.ts tests/server/handlers/sse-timeout.spec.ts tests/utils/is-direct-execution.test.ts tests/utils/windows-netstat.test.ts tests/servertool/virtual-router-context-fallback.spec.ts tests/servertool/virtual-router-longcontext-fallback.spec.ts tests/servertool/virtual-router-series-cooldown.spec.ts tests/servertool/recursive-detection-guard.spec.ts tests/servertool/routing-instructions.spec.ts tests/servertool/stop-message-auto.spec.ts tests/servertool/stopmessage-session-scope.spec.ts tests/servertool/stopmessage-anthropic-stop-sequence.spec.ts tests/servertool/stopmessage-compaction-false-positive.spec.ts tests/servertool/servertool-progress-logging.spec.ts tests/servertool/servertool-clock.spec.ts tests/servertool/antigravity-thought-signature-bootstrap.spec.ts tests/compat/tabglm-claude-code-profile.spec.ts tests/compat/antigravity-thought-signature.spec.ts tests/sharedmodule/mcp-tool-descriptions.spec.ts tests/sharedmodule/virtual-router-routing-model-validation.spec.ts tests/unified-hub/hub-v1-single-path-imports.spec.ts",
     "test:cli": "npm run jest:run -- --runTestsByPath tests/cli/camoufox-command.spec.ts tests/cli/clean-command.spec.ts tests/cli/code-command.spec.ts tests/cli/config-command.spec.ts tests/cli/env-command.spec.ts tests/cli/env-output.spec.ts tests/cli/examples-command.spec.ts tests/cli/port-command.spec.ts tests/cli/port-utils.spec.ts tests/cli/restart-command.spec.ts tests/cli/smoke.spec.ts tests/cli/start-command.spec.ts tests/cli/status-command.spec.ts tests/cli/stop-command.spec.ts",
     "test:watch": "npm run jest:run -- --watch",
     "test:coverage": "npm run jest:run -- --coverage",
@@ -64,7 +64,7 @@
     "clean": "rm -rf dist coverage",
     "prebuild": "npm run verify:repo-sanity && echo skip-lint",
     "prepare": "",
-    "postinstall": "chmod +x dist/cli.js || true",
+    "postinstall": "node scripts/ensure-cli-executable.mjs",
     "verify:apply-patch": "node scripts/verify-apply-patch.mjs",
     "verify:apply-patch-regressions": "node scripts/verify-apply-patch-regressions.mjs",
     "verify:exec-command": "node scripts/tests/exec-command-loop.mjs",
@@ -144,11 +144,12 @@
     "publish:rcc": "node scripts/publish-rcc.mjs",
     "pack:rcc": "node scripts/pack-rcc.mjs",
     "build:rccx": "npm run build:min && node scripts/pack-mode.mjs --name @jsonstudio/rccx --bin rccx",
-    "compare:codex:rccx": "node scripts/compare-codex-rccx.mjs"
+    "compare:codex:rccx": "node scripts/compare-codex-rccx.mjs",
+    "fix:cli-permission": "node scripts/ensure-cli-executable.mjs"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.65.0",
-    "@jsonstudio/llms": "0.6.1739",
+    "@jsonstudio/llms": "^0.6.1892",
     "@lmstudio/sdk": "^1.5.0",
     "@radix-ui/react-switch": "^1.2.6",
     "@types/socket.io": "^3.0.1",

package/scripts/copy-compat-assets.mjs

@@ -19,8 +19,11 @@ async function main() {
   const PROMPT_DIST = path.resolve(process.cwd(), 'dist/config/system-prompts');
   const CAMOUFOX_SRC = path.resolve(process.cwd(), 'scripts/camoufox');
   const CAMOUFOX_DIST = path.resolve(process.cwd(), 'dist/scripts/camoufox');
+  const DEEPSEEK_SRC = path.resolve(process.cwd(), 'scripts/deepseek');
+  const DEEPSEEK_DIST = path.resolve(process.cwd(), 'dist/scripts/deepseek');
   const promptCopied = [];
   const camoufoxCopied = [];
+  const deepseekCopied = [];
   try {
     // copy system prompt artifacts only; provider compat assets are owned by llmswitch-core
     try {
@@ -52,8 +55,23 @@ async function main() {
     } catch (camoufoxErr) {
       if (camoufoxErr && camoufoxErr.code !== 'ENOENT') throw camoufoxErr;
     }
+    try {
+      for await (const file of walk(DEEPSEEK_SRC)) {
+        const stats = await fs.stat(file);
+        if (stats.isFile()) {
+          const rel = path.relative(DEEPSEEK_SRC, file);
+          const dest = path.join(DEEPSEEK_DIST, rel);
+          await ensureDir(path.dirname(dest));
+          await fs.copyFile(file, dest);
+          deepseekCopied.push(rel);
+        }
+      }
+    } catch (deepseekErr) {
+      if (deepseekErr && deepseekErr.code !== 'ENOENT') throw deepseekErr;
+    }
     console.log(`[copy-compat-assets] prompts copied: ${promptCopied.length}`);
     console.log(`[copy-compat-assets] camoufox assets copied: ${camoufoxCopied.length}`);
+    console.log(`[copy-compat-assets] deepseek assets copied: ${deepseekCopied.length}`);
   } catch (err) {
     console.error('[copy-compat-assets] failed:', err?.message || String(err));
     process.exit(1);

package/scripts/copy-modules-config.mjs

@@ -26,6 +26,7 @@ async function copyModulesConfig() {
       await fs.mkdir(path.dirname(distDaemonAdminUi), { recursive: true });
       await fs.copyFile(srcDaemonAdminUi, distDaemonAdminUi);
       console.log('[copy-modules-config] copied daemon-admin-ui.html to dist/docs/daemon-admin-ui.html');
+
     } catch (error) {
       if (error.code === 'ENOENT') {
         console.warn('[copy-modules-config] docs/daemon-admin-ui.html not found, skipping');

package/scripts/deepseek/pow-solver.mjs

@@ -0,0 +1,146 @@
+#!/usr/bin/env node
+import { readFile } from 'node:fs/promises';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+function readStdin() {
+  return new Promise((resolveInput, rejectInput) => {
+    let data = '';
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', (chunk) => {
+      data += chunk;
+    });
+    process.stdin.on('end', () => resolveInput(data));
+    process.stdin.on('error', rejectInput);
+  });
+}
+
+class DeepSeekHash {
+  constructor() {
+    this.wasmInstance = null;
+    this.offset = 0;
+    this.cachedUint8Memory = null;
+    this.cachedTextEncoder = new TextEncoder();
+  }
+
+  getCachedUint8Memory() {
+    if (this.cachedUint8Memory === null || this.cachedUint8Memory.byteLength === 0) {
+      this.cachedUint8Memory = new Uint8Array(this.wasmInstance.memory.buffer);
+    }
+    return this.cachedUint8Memory;
+  }
+
+  encodeString(text, allocate, reallocate) {
+    if (!reallocate) {
+      const encoded = this.cachedTextEncoder.encode(text);
+      const ptr = allocate(encoded.length, 1) >>> 0;
+      const memory = this.getCachedUint8Memory();
+      memory.subarray(ptr, ptr + encoded.length).set(encoded);
+      this.offset = encoded.length;
+      return ptr;
+    }
+
+    const strLength = text.length;
+    let ptr = allocate(strLength, 1) >>> 0;
+    const memory = this.getCachedUint8Memory();
+    let asciiLength = 0;
+
+    for (; asciiLength < strLength; asciiLength += 1) {
+      const charCode = text.charCodeAt(asciiLength);
+      if (charCode > 127) {
+        break;
+      }
+      memory[ptr + asciiLength] = charCode;
+    }
+
+    if (asciiLength !== strLength) {
+      if (asciiLength > 0) {
+        text = text.slice(asciiLength);
+      }
+      ptr = reallocate(ptr, strLength, asciiLength + text.length * 3, 1) >>> 0;
+      const result = this.cachedTextEncoder.encodeInto(
+        text,
+        this.getCachedUint8Memory().subarray(ptr + asciiLength, ptr + asciiLength + text.length * 3)
+      );
+      asciiLength += result.written;
+      ptr = reallocate(ptr, asciiLength + text.length * 3, asciiLength, 1) >>> 0;
+    }
+
+    this.offset = asciiLength;
+    return ptr;
+  }
+
+  async init(wasmPath) {
+    const wasmBuffer = await readFile(wasmPath);
+    const { instance } = await WebAssembly.instantiate(wasmBuffer, { wbg: {} });
+    this.wasmInstance = instance.exports;
+  }
+
+  solve(algorithm, challenge, salt, difficulty, expireAt) {
+    if (algorithm !== 'DeepSeekHashV1') {
+      throw new Error(`Unsupported algorithm: ${algorithm}`);
+    }
+
+    const prefix = `${salt}_${expireAt}_`;
+    const retptr = this.wasmInstance.__wbindgen_add_to_stack_pointer(-16);
+
+    try {
+      const ptr0 = this.encodeString(
+        challenge,
+        this.wasmInstance.__wbindgen_export_0,
+        this.wasmInstance.__wbindgen_export_1
+      );
+      const len0 = this.offset;
+
+      const ptr1 = this.encodeString(
+        prefix,
+        this.wasmInstance.__wbindgen_export_0,
+        this.wasmInstance.__wbindgen_export_1
+      );
+      const len1 = this.offset;
+
+      this.wasmInstance.wasm_solve(retptr, ptr0, len0, ptr1, len1, Number(difficulty));
+
+      const dataView = new DataView(this.wasmInstance.memory.buffer);
+      const status = dataView.getInt32(retptr + 0, true);
+      const value = dataView.getFloat64(retptr + 8, true);
+      if (status === 0 || !Number.isFinite(value)) {
+        return null;
+      }
+      return Math.trunc(value);
+    } finally {
+      this.wasmInstance.__wbindgen_add_to_stack_pointer(16);
+    }
+  }
+}
+
+async function main() {
+  const raw = await readStdin();
+  if (!raw || !raw.trim()) {
+    throw new Error('Missing stdin JSON payload');
+  }
+
+  const payload = JSON.parse(raw);
+  const wasmPath = payload.wasmPath
+    ? resolve(String(payload.wasmPath))
+    : resolve(__dirname, 'sha3_wasm_bg.7b9ca65ddd.wasm');
+
+  const solver = new DeepSeekHash();
+  await solver.init(wasmPath);
+  const answer = solver.solve(
+    payload.algorithm,
+    payload.challenge,
+    payload.salt,
+    payload.difficulty,
+    payload.expireAt
+  );
+
+  process.stdout.write(JSON.stringify({ ok: answer !== null, answer }) + '\n');
+}
+
+main().catch((error) => {
+  process.stderr.write((error && error.stack) ? String(error.stack) : String(error) + '\n');
+  process.exit(1);
+});

package/scripts/ensure-cli-executable.mjs

@@ -0,0 +1,64 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { execSync } from 'node:child_process';
+
+if (process.platform === 'win32') {
+  process.exit(0);
+}
+
+function ensureExecutable(filePath) {
+  if (!filePath || !fs.existsSync(filePath)) {
+    return;
+  }
+  try {
+    const stat = fs.statSync(filePath);
+    const nextMode = stat.mode | 0o111;
+    fs.chmodSync(filePath, nextMode);
+  } catch {
+    // ignore best-effort chmod failures
+  }
+}
+
+function getCommandOutput(command) {
+  try {
+    return execSync(command, { stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
+  } catch {
+    return '';
+  }
+}
+
+function ensureLocalCli() {
+  const cliPath = path.join(process.cwd(), 'dist', 'cli.js');
+  ensureExecutable(cliPath);
+}
+
+function ensureGlobalBinTarget(binName) {
+  const prefix = getCommandOutput('npm config get prefix');
+  if (!prefix) {
+    return;
+  }
+
+  const binPath = path.join(prefix, 'bin', binName);
+  if (fs.existsSync(binPath)) {
+    try {
+      const realTarget = fs.realpathSync(binPath);
+      ensureExecutable(realTarget);
+    } catch {
+      ensureExecutable(binPath);
+    }
+  }
+
+  const globalRoot = getCommandOutput('npm root -g');
+  if (!globalRoot) {
+    return;
+  }
+
+  const packageName = binName === 'rcc' ? '@jsonstudio/rcc' : 'routecodex';
+  const globalCliPath = path.join(globalRoot, packageName, 'dist', 'cli.js');
+  ensureExecutable(globalCliPath);
+}
+
+ensureLocalCli();
+ensureGlobalBinTarget('routecodex');
+ensureGlobalBinTarget('rcc');

package/scripts/install-global.sh

@@ -87,8 +87,8 @@ build_project() {
        echo "💡 尝试手动构建：npm run build"
        exit 1
    }
-    # 确保CLI可执行
-    chmod +x dist/cli.js
+    # 确保CLI可执行（本地 + 全局目标自愈）
+    node scripts/ensure-cli-executable.mjs || true
 
     # 检查构建结果
     if [ ! -f "dist/cli.js" ]; then
@@ -127,6 +127,9 @@ global_install() {
     # 执行安装（跳过可选依赖，减少体积；允许脚本执行以生成可执行文件）
     npm install -g . --no-audit --no-fund --omit=optional
 
+    # 全局安装后再次修复可执行位（解决偶发 permission denied）
+    node scripts/ensure-cli-executable.mjs || true
+
     if [ $? -eq 0 ]; then
         echo "✅ 全局安装成功"
     else

package/scripts/install.sh

@@ -51,7 +51,7 @@ build_project() {
 # 设置执行权限
 set_permissions() {
     echo "🔑 设置执行权限..."
-    chmod +x dist/cli.js || true
+    node scripts/ensure-cli-executable.mjs || true
 }
 
 # 验证安装

package/scripts/monitor/daemon-kill-watch.mjs

@@ -0,0 +1,184 @@
+#!/usr/bin/env node
+/**
+ * Monitor routecodex processes and record termination events with context.
+ * Usage:
+ *   node scripts/monitor/daemon-kill-watch.mjs [--port <port>] [--label <label>]
+ */
+
+import { spawn, execSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const args = process.argv.slice(2);
+let port = null;
+let label = '';
+
+for (let i = 0; i < args.length; i++) {
+  if (args[i] === '--port' && i + 1 < args.length) {
+    port = args[++i];
+  } else if (args[i] === '--label' && i + 1 < args.length) {
+    label = args[++i];
+  }
+}
+
+const timestamp = new Date().toISOString().replace(/[:.]/g, '-').slice(0, -5);
+const logFile = path.join('/tmp', `routecodex-daemon-watch-${timestamp}.log`);
+
+function log(line) {
+  const ts = new Date().toISOString();
+  const out = `[${ts}] ${line}`;
+  console.log(out);
+  fs.appendFileSync(logFile, out + '\n');
+}
+
+function getPidsForPort(p) {
+  try {
+    const out = execSync(`lsof -t -nP -iTCP:${p} -sTCP:LISTEN`, { encoding: 'utf8', timeout: 5000 });
+    return out.trim().split('\n').filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+
+function getRoutecodexPids() {
+  try {
+    const out = execSync(`pgrep -fa "routecodex|dist/index.js"`, { encoding: 'utf8' });
+    const lines = out.trim().split('\n').filter(Boolean);
+    return lines.map(line => {
+      const m = line.match(/^(\d+)\s+(.*)$/);
+      if (m) return { pid: m[1], cmd: m[2] };
+      return null;
+    }).filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+
+function isPidAlive(pid) {
+  try {
+    process.kill(Number(pid), 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function captureSystemLogs(minutes = 2) {
+  try {
+    const out = execSync(`log show --last ${minutes}m --style syslog 2>&1 | grep -iE "routecodex|node.*index|killed|sigkill|sigterm|jetsam|memorystatus" | tail -n 100`, { encoding: 'utf8', shell: true, timeout: 10000 });
+    return out.trim();
+  } catch (e) {
+    return `Failed to capture logs: ${e.message}`;
+  }
+}
+
+function captureProcessSnapshot() {
+  try {
+    const out = execSync('ps -Ao pid,ppid,pcpu,rss,etime,comm,args | grep -E "(routecodex|node|dist/index.js)"', { encoding: 'utf8', shell: true });
+    return out.trim();
+  } catch (e) {
+    return `No matching processes: ${e.message}`;
+  }
+}
+
+async function main() {
+  log('monitor start');
+  log(`label=${label || 'none'}`);
+  log(`logFile=${logFile}`);
+
+  const watchedPids = new Map();
+
+  // Initial scan
+  if (port) {
+    const pids = getPidsForPort(port);
+    for (const pid of pids) {
+      watchedPids.set(pid, { type: 'port', port, cmd: 'listener' });
+      log(`watching pid=${pid} (port=${port})`);
+    }
+  }
+
+  const rcPids = getRoutecodexPids();
+  for (const p of rcPids) {
+    if (!watchedPids.has(p.pid)) {
+      watchedPids.set(p.pid, { type: 'cmd', cmd: p.cmd });
+      log(`watching pid=${p.pid} (cmd=${p.cmd})`);
+    }
+  }
+
+  if (watchedPids.size === 0) {
+    log('no routecodex processes found to watch');
+    process.exit(1);
+  }
+
+  log(`watching ${watchedPids.size} process(es)`);
+
+  // Watch loop
+  while (true) {
+    await new Promise(r => setTimeout(r, 500));
+
+    const vanished = [];
+    for (const [pid, info] of watchedPids) {
+      if (!isPidAlive(pid)) {
+        vanished.push({ pid, ...info });
+      }
+    }
+
+    if (vanished.length > 0) {
+      for (const v of vanished) {
+        log(`PROCESS VANISHED: pid=${v.pid} type=${v.type} cmd=${v.cmd || v.port || 'unknown'}`);
+        watchedPids.delete(v.pid);
+      }
+
+      log('--- SYSTEM LOGS (last 2m) ---');
+      const logs = captureSystemLogs(2);
+      for (const line of logs.split('\n')) {
+        log(`SYSLOG: ${line}`);
+      }
+
+      log('--- PROCESS SNAPSHOT ---');
+      const snapshot = captureProcessSnapshot();
+      for (const line of snapshot.split('\n')) {
+        log(`PS: ${line}`);
+      }
+
+      // Rescan for new processes
+      const newPids = getRoutecodexPids();
+      for (const p of newPids) {
+        if (!watchedPids.has(p.pid)) {
+          watchedPids.set(p.pid, { type: 'cmd', cmd: p.cmd });
+          log(`new process detected: pid=${p.pid} cmd=${p.cmd}`);
+        }
+      }
+    }
+
+    // Check for port change if port specified
+    if (port) {
+      const currentPids = getPidsForPort(port);
+      for (const pid of currentPids) {
+        if (!watchedPids.has(pid)) {
+          watchedPids.set(pid, { type: 'port', port, cmd: 'listener' });
+          log(`new listener on port ${port}: pid=${pid}`);
+        }
+      }
+    }
+  }
+}
+
+process.on('SIGINT', () => {
+  log('monitor interrupted by SIGINT');
+  process.exit(0);
+});
+
+process.on('SIGTERM', () => {
+  log('monitor interrupted by SIGTERM');
+  process.exit(0);
+});
+
+main().catch(e => {
+  log(`ERROR: ${e.message}`);
+  process.exit(1);
+});

package/scripts/monitor/port-kill-watch.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+# Monitor a TCP port's listener PID and record when it disappears.
+# Usage:
+#   bash scripts/monitor/port-kill-watch.sh <port> [label]
+# Output log:
+#   /tmp/routecodex-port-watch-<port>-<timestamp>.log
+
+set -euo pipefail
+
+PORT=${1:-}
+LABEL=${2:-}
+
+if [[ -z "$PORT" ]]; then
+  echo "Usage: $0 <port> [label]" >&2
+  exit 2
+fi
+
+if ! [[ "$PORT" =~ ^[0-9]+$ ]]; then
+  echo "Invalid port: $PORT" >&2
+  exit 2
+fi
+
+TS=$(date +%Y%m%d-%H%M%S)
+LOG_FILE="/tmp/routecodex-port-watch-${PORT}-${TS}.log"
+INTERVAL_MS=500
+
+log() {
+  echo "[$(date +%Y-%m-%dT%H:%M:%S%z)] $*" | tee -a "$LOG_FILE" >/dev/null
+}
+
+resolve_pid() {
+  lsof -t -nP -iTCP:"$PORT" -sTCP:LISTEN 2>/dev/null | head -n 1 || true
+}
+
+log "watch start port=${PORT} label=${LABEL:-none} log=${LOG_FILE}"
+
+PID=$(resolve_pid)
+if [[ -z "$PID" ]]; then
+  log "no listener detected on port ${PORT}"
+  exit 1
+fi
+
+log "listener pid=${PID}"
+
+while true; do
+  if ! kill -0 "$PID" 2>/dev/null; then
+    log "listener pid ${PID} exited"
+    break
+  fi
+  CURRENT=$(resolve_pid)
+  if [[ -z "$CURRENT" ]]; then
+    log "listener on port ${PORT} vanished (pid=${PID})"
+    break
+  fi
+  if [[ "$CURRENT" != "$PID" ]]; then
+    log "listener pid changed ${PID} -> ${CURRENT}"
+    PID="$CURRENT"
+  fi
+  sleep 0.5
+done
+
+log "capturing recent logs (last 2m, syslog style)"
+log "--- log show (filtered) ---"
+/usr/bin/log show --last 2m --style syslog 2>/dev/null \
+  | grep -i -E "killed|kill|SIGKILL|SIGTERM|routecodex|node|memorystatus|jetsam" \
+  | tail -n 200 \
+  | tee -a "$LOG_FILE" >/dev/null || true
+log "--- end ---"
+
+log "capturing process snapshot"
+ps -Ao pid,ppid,state,etime,comm,args | grep -E "(routecodex|node|dist/index.js)" | tee -a "$LOG_FILE" >/dev/null || true
+
+log "done"
+

package/scripts/quick-install.sh

@@ -43,7 +43,7 @@ if [ ! -f "dist/cli.js" ]; then
     exit 1
 fi
 
-chmod +x dist/cli.js
+node scripts/ensure-cli-executable.mjs || true
 
 # 全局安装
 echo "🌍 全局安装..."