@peterwangze/claude-trigger-router 1.1.1 → 1.1.2

package/dist/cli.js

@@ -124,6 +124,389 @@ var init_constants = __esm({
   }
 });
 
+// src/auth/api-keys.ts
+function createSecret() {
+  const token = (0, import_crypto.randomBytes)(24).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  return `ctr_${token}`;
+}
+function createKeyId() {
+  return `key_${(0, import_crypto.randomBytes)(8).toString("hex")}`;
+}
+function hashApiKey(secret) {
+  return (0, import_crypto.createHash)("sha256").update(secret).digest("hex");
+}
+function safeEqual(left, right) {
+  const leftBuffer = Buffer.from(left);
+  const rightBuffer = Buffer.from(right);
+  if (leftBuffer.length !== rightBuffer.length) {
+    return false;
+  }
+  return (0, import_crypto.timingSafeEqual)(leftBuffer, rightBuffer);
+}
+function normalizeManagedApiKeyScopes(input3) {
+  if (!Array.isArray(input3) || input3.length === 0) {
+    return ["client"];
+  }
+  const scopes = Array.from(new Set(
+    input3.map((item) => String(item).trim()).filter((item) => VALID_SCOPES.includes(item))
+  ));
+  return scopes.length ? scopes : ["client"];
+}
+function validateManagedApiKeyScopes(input3) {
+  if (input3 === void 0) {
+    return [];
+  }
+  if (!Array.isArray(input3) || input3.length === 0) {
+    return ["scopes must be a non-empty array when provided"];
+  }
+  return input3.map((item) => String(item).trim()).filter((item) => !VALID_SCOPES.includes(item)).map((item) => `unsupported scope: ${item}`);
+}
+function validateManagedApiKeyQuota(input3) {
+  if (input3 === void 0) {
+    return [];
+  }
+  if (!input3 || typeof input3 !== "object" || Array.isArray(input3)) {
+    return ["quota must be an object when provided"];
+  }
+  const quota = input3;
+  return ["request_limit", "token_limit", "window_seconds"].filter((field) => quota[field] !== void 0).filter((field) => !Number.isInteger(quota[field]) || Number(quota[field]) <= 0).map((field) => `quota.${field} must be a positive integer`);
+}
+function createManagedApiKey(input3 = {}, now = /* @__PURE__ */ new Date()) {
+  const secret = createSecret();
+  const label = typeof input3.label === "string" && input3.label.trim() ? input3.label.trim() : "client key";
+  const record = {
+    id: createKeyId(),
+    label,
+    key_hash: hashApiKey(secret),
+    key_prefix: secret.slice(0, 8),
+    key_suffix: secret.slice(-6),
+    scopes: normalizeManagedApiKeyScopes(input3.scopes),
+    created_at: now.toISOString(),
+    ...typeof input3.expiresAt === "string" && input3.expiresAt.trim() ? { expires_at: input3.expiresAt.trim() } : {},
+    ...input3.quota ? { quota: input3.quota } : {}
+  };
+  return { secret, record };
+}
+function isManagedApiKeyActive(record, now = /* @__PURE__ */ new Date()) {
+  if (record.revoked_at) {
+    return false;
+  }
+  if (record.expires_at) {
+    const expiresAt = Date.parse(record.expires_at);
+    if (Number.isFinite(expiresAt) && expiresAt <= now.getTime()) {
+      return false;
+    }
+  }
+  return true;
+}
+function sanitizeManagedApiKey(record, now = /* @__PURE__ */ new Date()) {
+  return {
+    id: record.id,
+    label: record.label,
+    keyPrefix: record.key_prefix,
+    keySuffix: record.key_suffix,
+    scopes: record.scopes,
+    createdAt: record.created_at,
+    expiresAt: record.expires_at,
+    revokedAt: record.revoked_at,
+    active: isManagedApiKeyActive(record, now),
+    quota: record.quota
+  };
+}
+function listManagedApiKeys(config, now = /* @__PURE__ */ new Date()) {
+  return (config.Auth?.managed_keys ?? []).map((record) => sanitizeManagedApiKey(record, now));
+}
+function managedApiKeySummary(config, now = /* @__PURE__ */ new Date()) {
+  const keys = listManagedApiKeys(config, now);
+  return {
+    total: keys.length,
+    active: keys.filter((item) => item.active).length,
+    revoked: keys.filter((item) => item.revokedAt).length,
+    expired: keys.filter((item) => !item.active && !item.revokedAt).length
+  };
+}
+function scopeAllows(scopes, required) {
+  if (scopes.includes("admin")) {
+    return true;
+  }
+  if (required === "read-only") {
+    return scopes.includes("read-only");
+  }
+  if (required === "client") {
+    return scopes.includes("client");
+  }
+  return false;
+}
+function verifyApiKey(config, providedKey, required = "client", now = /* @__PURE__ */ new Date()) {
+  if (!providedKey) {
+    return { ok: false, reason: "missing" };
+  }
+  if (config.APIKEY && safeEqual(providedKey, config.APIKEY)) {
+    return {
+      ok: true,
+      source: "bootstrap",
+      scopes: ["admin"]
+    };
+  }
+  const providedHash = hashApiKey(providedKey);
+  const record = (config.Auth?.managed_keys ?? []).find((item) => safeEqual(item.key_hash, providedHash));
+  if (!record) {
+    return { ok: false, reason: "invalid" };
+  }
+  if (record.revoked_at) {
+    return { ok: false, source: "managed", keyId: record.id, reason: "revoked" };
+  }
+  if (!isManagedApiKeyActive(record, now)) {
+    return { ok: false, source: "managed", keyId: record.id, reason: "expired" };
+  }
+  if (!scopeAllows(record.scopes, required)) {
+    return { ok: false, source: "managed", keyId: record.id, reason: "insufficient_scope" };
+  }
+  return {
+    ok: true,
+    source: "managed",
+    keyId: record.id,
+    scopes: record.scopes,
+    quota: record.quota
+  };
+}
+function extractApiKeyFromHeaders(headers) {
+  const authHeader = headers?.authorization ?? headers?.Authorization;
+  const xApiKey = headers?.["x-api-key"] ?? headers?.["X-Api-Key"];
+  if (typeof authHeader === "string" && authHeader.startsWith("Bearer ")) {
+    return authHeader.slice(7);
+  }
+  if (Array.isArray(xApiKey)) {
+    return xApiKey[0];
+  }
+  return typeof xApiKey === "string" ? xApiKey : void 0;
+}
+var import_crypto, VALID_SCOPES, AuthAuditStore, authAuditStore, AuthQuotaUsageStore, authQuotaUsageStore;
+var init_api_keys = __esm({
+  "src/auth/api-keys.ts"() {
+    "use strict";
+    import_crypto = require("crypto");
+    VALID_SCOPES = ["admin", "client", "read-only"];
+    AuthAuditStore = class {
+      constructor(max = 200) {
+        this.max = max;
+      }
+      events = [];
+      add(event2) {
+        const recorded = {
+          ...event2,
+          timestamp: event2.timestamp ?? (/* @__PURE__ */ new Date()).toISOString()
+        };
+        this.events.unshift(recorded);
+        if (this.events.length > this.max) {
+          this.events = this.events.slice(0, this.max);
+        }
+        return recorded;
+      }
+      list(limit = 50) {
+        return this.events.slice(0, Math.max(0, Math.min(limit, this.max))).map((event2) => ({
+          ...event2,
+          scopes: event2.scopes ? [...event2.scopes] : void 0
+        }));
+      }
+      summary() {
+        const total = this.events.length;
+        const denied = this.events.filter((event2) => event2.outcome === "denied").length;
+        const allowed = this.events.filter((event2) => event2.outcome === "allowed").length;
+        const skipped = this.events.filter((event2) => event2.outcome === "skipped").length;
+        const managed = this.events.filter((event2) => event2.source === "managed").length;
+        const bootstrap = this.events.filter((event2) => event2.source === "bootstrap").length;
+        const byReason = this.events.reduce((acc, event2) => {
+          const reason = event2.reason ?? event2.outcome;
+          acc[reason] = (acc[reason] ?? 0) + 1;
+          return acc;
+        }, {});
+        return {
+          total,
+          allowed,
+          denied,
+          skipped,
+          managed,
+          bootstrap,
+          byReason,
+          latestAt: this.events[0]?.timestamp
+        };
+      }
+      clear() {
+        this.events = [];
+      }
+    };
+    authAuditStore = new AuthAuditStore();
+    AuthQuotaUsageStore = class {
+      usage = /* @__PURE__ */ new Map();
+      hydrate(input3) {
+        if (!input3 || typeof input3 !== "object" || Array.isArray(input3)) {
+          return;
+        }
+        Object.entries(input3).forEach(([keyId, item]) => {
+          if (!item || typeof item !== "object") {
+            return;
+          }
+          const requests = Number(item.requests);
+          const tokens = Number(item.tokens);
+          const windowStartedAt = Date.parse(item.window_started_at);
+          const windowSeconds = Number(item.window_seconds);
+          if (!keyId || !Number.isFinite(requests) || requests < 0 || !Number.isFinite(tokens) || tokens < 0 || !Number.isFinite(windowStartedAt)) {
+            return;
+          }
+          const existing = this.usage.get(keyId);
+          if (existing && existing.windowStartedAt === windowStartedAt && existing.requests >= requests && existing.tokens >= tokens) {
+            return;
+          }
+          this.usage.set(keyId, {
+            requests: Math.floor(requests),
+            tokens: Math.floor(tokens),
+            windowStartedAt,
+            windowSeconds: Number.isInteger(windowSeconds) && windowSeconds > 0 ? windowSeconds : void 0
+          });
+        });
+      }
+      exportForConfig(now = /* @__PURE__ */ new Date()) {
+        const nowMs = now.getTime();
+        return Object.fromEntries(
+          Array.from(this.usage.entries()).map(([keyId, item]) => [
+            keyId,
+            {
+              requests: item.requests,
+              tokens: item.tokens,
+              window_started_at: new Date(item.windowStartedAt).toISOString(),
+              ...item.windowSeconds !== void 0 ? { window_seconds: item.windowSeconds } : {},
+              updated_at: new Date(nowMs).toISOString()
+            }
+          ])
+        );
+      }
+      resolveLimits(quota) {
+        const requestLimit = Number.isInteger(quota?.request_limit) && Number(quota?.request_limit) > 0 ? Number(quota?.request_limit) : void 0;
+        const tokenLimit = Number.isInteger(quota?.token_limit) && Number(quota?.token_limit) > 0 ? Number(quota?.token_limit) : void 0;
+        const windowSeconds = Number.isInteger(quota?.window_seconds) && Number(quota?.window_seconds) > 0 ? Number(quota?.window_seconds) : void 0;
+        return { requestLimit, tokenLimit, windowSeconds };
+      }
+      normalizeEntry(keyId, windowSeconds, now) {
+        const existing = this.usage.get(keyId);
+        if (!existing) {
+          return void 0;
+        }
+        const nowMs = now.getTime();
+        if (windowSeconds !== void 0 && (existing.windowSeconds !== windowSeconds || nowMs - existing.windowStartedAt >= windowSeconds * 1e3)) {
+          const reset = {
+            requests: 0,
+            tokens: 0,
+            windowStartedAt: nowMs,
+            windowSeconds
+          };
+          this.usage.set(keyId, reset);
+          return reset;
+        }
+        const current = { ...existing, windowSeconds };
+        if (existing.windowSeconds !== windowSeconds) {
+          this.usage.set(keyId, current);
+        }
+        return current;
+      }
+      toSnapshot(entry, quota, estimatedTokens) {
+        const { requestLimit, tokenLimit, windowSeconds } = this.resolveLimits(quota);
+        if (requestLimit === void 0 && tokenLimit === void 0) {
+          return void 0;
+        }
+        return {
+          requestLimit,
+          requestsUsed: entry?.requests ?? 0,
+          tokenLimit,
+          tokensUsed: entry?.tokens ?? 0,
+          windowSeconds,
+          windowStartedAt: entry?.windowStartedAt !== void 0 ? new Date(entry.windowStartedAt).toISOString() : void 0,
+          windowResetAt: entry?.windowStartedAt !== void 0 && windowSeconds !== void 0 ? new Date(entry.windowStartedAt + windowSeconds * 1e3).toISOString() : void 0,
+          estimatedTokens
+        };
+      }
+      consume(keyId, quota, estimatedTokens = 0, now = /* @__PURE__ */ new Date()) {
+        if (!keyId || !quota) {
+          return { ok: true };
+        }
+        const { requestLimit, tokenLimit, windowSeconds } = this.resolveLimits(quota);
+        if (requestLimit === void 0 && tokenLimit === void 0) {
+          return { ok: true };
+        }
+        const nowMs = now.getTime();
+        const current = this.normalizeEntry(keyId, windowSeconds, now) ?? { requests: 0, tokens: 0, windowStartedAt: nowMs, windowSeconds };
+        const tokensToAdd = Math.max(0, Math.ceil(estimatedTokens));
+        const currentSnapshot = this.toSnapshot(current, quota, tokensToAdd);
+        if (requestLimit !== void 0 && current.requests >= requestLimit) {
+          return {
+            ok: false,
+            reason: "request_quota_exceeded",
+            usage: currentSnapshot
+          };
+        }
+        if (tokenLimit !== void 0 && current.tokens + tokensToAdd > tokenLimit) {
+          return {
+            ok: false,
+            reason: "token_quota_exceeded",
+            usage: currentSnapshot
+          };
+        }
+        const next = {
+          requests: current.requests + 1,
+          tokens: current.tokens + tokensToAdd,
+          windowStartedAt: current.windowStartedAt,
+          windowSeconds
+        };
+        this.usage.set(keyId, next);
+        return {
+          ok: true,
+          usage: this.toSnapshot(next, quota, tokensToAdd)
+        };
+      }
+      snapshotForKey(keyId, quota, now = /* @__PURE__ */ new Date()) {
+        if (!keyId) {
+          return void 0;
+        }
+        const { requestLimit, tokenLimit, windowSeconds } = this.resolveLimits(quota);
+        if (requestLimit === void 0 && tokenLimit === void 0) {
+          return void 0;
+        }
+        return this.toSnapshot(this.normalizeEntry(keyId, windowSeconds, now), quota);
+      }
+      summary(now = /* @__PURE__ */ new Date()) {
+        const nowMs = now.getTime();
+        const entries = Array.from(this.usage.entries()).map(([key, item]) => {
+          if (item.windowSeconds !== void 0 && nowMs - item.windowStartedAt >= item.windowSeconds * 1e3) {
+            const reset = {
+              requests: 0,
+              tokens: 0,
+              windowStartedAt: nowMs,
+              windowSeconds: item.windowSeconds
+            };
+            this.usage.set(key, reset);
+            return [key, reset];
+          }
+          return [key, item];
+        });
+        const windowResetAts = entries.map(([, item]) => item.windowSeconds !== void 0 ? item.windowStartedAt + item.windowSeconds * 1e3 : void 0).filter((value) => value !== void 0);
+        const result = {
+          trackedKeys: entries.length,
+          requestsUsed: entries.reduce((total, [, item]) => total + item.requests, 0),
+          tokensUsed: entries.reduce((total, [, item]) => total + item.tokens, 0)
+        };
+        if (windowResetAts.length > 0) {
+          result.windowResetAt = new Date(Math.min(...windowResetAts)).toISOString();
+        }
+        return result;
+      }
+      clear() {
+        this.usage.clear();
+      }
+    };
+    authQuotaUsageStore = new AuthQuotaUsageStore();
+  }
+});
+
 // src/models/schema.ts
 function trimTrailingSlash(value) {
   return value.replace(/\/+$/, "");
@@ -165,7 +548,7 @@ function normalizeEndpointPath(pathname, modelInterface) {
     if (!normalizedPath) {
       return "/v1/messages";
     }
-    return `${normalizedPath}/messages`;
+    return normalizedPath;
   }
   if (lowerPath.endsWith("/chat/completions")) {
     return normalizedPath || "/chat/completions";
@@ -176,7 +559,7 @@ function normalizeEndpointPath(pathname, modelInterface) {
   if (!normalizedPath) {
     return "/v1/chat/completions";
   }
-  return `${normalizedPath}/chat/completions`;
+  return normalizedPath;
 }
 function normalizeApiEndpoint(api, explicitInterface) {
   const trimmed = api?.trim() || "";
@@ -362,6 +745,160 @@ function buildCompiledCapabilities(item, modelInterface) {
     systemMessageStyle: modelInterface
   };
 }
+function readMetadataString(metadata, key) {
+  const value = metadata?.[key];
+  return typeof value === "string" ? value.trim() : "";
+}
+function readMetadataNumber(metadata, key) {
+  const value = metadata?.[key];
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function readMetadataBoolean(metadata, key) {
+  const value = metadata?.[key];
+  return typeof value === "boolean" ? value : void 0;
+}
+function buildRegistrationUpstreamIndex(config) {
+  const services = Array.isArray(config.Registration?.upstream_services) ? config.Registration?.upstream_services : [];
+  return new Map(
+    services.filter((service) => typeof service?.id === "string" && service.id.trim()).map((service) => [service.id.trim(), service])
+  );
+}
+function createUniqueEndpointId(preferredId, usedEndpointIds) {
+  let endpointId = preferredId;
+  let suffix = 2;
+  while (usedEndpointIds.has(endpointId)) {
+    endpointId = `${preferredId}-${suffix}`;
+    suffix += 1;
+  }
+  usedEndpointIds.add(endpointId);
+  return endpointId;
+}
+function createUniqueName(preferredName, usedNames) {
+  let name = preferredName;
+  let suffix = 2;
+  while (usedNames.has(name)) {
+    name = `${preferredName}_${suffix}`;
+    suffix += 1;
+  }
+  usedNames.add(name);
+  return name;
+}
+function sanitizeProviderName(value) {
+  const sanitized = value.trim().replace(/[^a-zA-Z0-9_-]+/g, "_").replace(/^_+|_+$/g, "");
+  return sanitized || "endpoint";
+}
+function buildCompiledModelRefFromPoolEndpoint(endpoint, thinking, compatibilityProfile) {
+  return {
+    id: endpoint.modelId,
+    providerName: endpoint.providerName,
+    modelName: endpoint.modelName,
+    interface: endpoint.interface,
+    protocol: endpoint.protocol,
+    compatibilityProfile,
+    dispatchFormat: getDispatchFormatForProfile(endpoint.protocol, compatibilityProfile),
+    thinking,
+    capabilities: endpoint.capabilities,
+    source: "registration",
+    modelPool: {
+      modelId: endpoint.modelId,
+      endpointId: endpoint.id,
+      strategy: "priority"
+    }
+  };
+}
+function buildRegistrationModelPools(config) {
+  const registration = config.Registration;
+  if (!registration?.enabled || !Array.isArray(registration.models) || registration.models.length === 0) {
+    return {
+      providers: [],
+      modelMap: {},
+      modelPools: {}
+    };
+  }
+  const upstreamServices = buildRegistrationUpstreamIndex(config);
+  const usedEndpointIds = /* @__PURE__ */ new Set();
+  const usedProviderNames = /* @__PURE__ */ new Set();
+  const providers = [];
+  const modelMap = {};
+  const pools = {};
+  registration.models.forEach((rawItem, index) => {
+    const item = normalizeModelEndpointConfig(rawItem);
+    if (!item.id) {
+      return;
+    }
+    const upstreamServiceId = readMetadataString(item.metadata, "upstream_service_id");
+    const upstreamService = upstreamServiceId ? upstreamServices.get(upstreamServiceId) : void 0;
+    const warnings = [];
+    if (upstreamServiceId && !upstreamService) {
+      warnings.push(`Registration.models[${index}].metadata.upstream_service_id references missing upstream service "${upstreamServiceId}".`);
+    }
+    const modelInterface = getModelInterface(item) || "openai";
+    const endpointId = createUniqueEndpointId(
+      readMetadataString(item.metadata, "pool_endpoint_id") || (upstreamServiceId ? `${item.id}@${upstreamServiceId}` : `${item.id}@registration-${index + 1}`),
+      usedEndpointIds
+    );
+    const providerName = createUniqueName(
+      `registration__${sanitizeProviderName(endpointId)}`,
+      usedProviderNames
+    );
+    const poolPriority = readMetadataNumber(item.metadata, "pool_priority") ?? index + 1;
+    const enabled = readMetadataBoolean(item.metadata, "pool_enabled") ?? true;
+    const compatibilityProfile = inferCompatibilityProfile(item, modelInterface);
+    const capabilities = buildCompiledCapabilities(item, modelInterface);
+    const endpoint = {
+      id: endpointId,
+      modelId: item.id,
+      modelName: item.model,
+      providerName,
+      legacyRef: `${providerName},${item.model}`,
+      interface: modelInterface,
+      protocol: modelInterface,
+      api: getModelApi(item) || void 0,
+      keyConfigured: Boolean(getModelKey(item)),
+      upstreamServiceId: upstreamServiceId || void 0,
+      upstreamBaseUrl: upstreamService?.base_url,
+      upstreamAuthConfigured: Boolean(upstreamService?.auth_token),
+      priority: poolPriority,
+      enabled,
+      capabilities,
+      source: "registration"
+    };
+    providers.push({
+      name: providerName,
+      api_base_url: getModelApi(item),
+      api_key: getModelKey(item),
+      models: [item.model],
+      transformer: inferTransformer(modelInterface)
+    });
+    modelMap[endpoint.legacyRef] = buildCompiledModelRefFromPoolEndpoint(
+      endpoint,
+      item.thinking,
+      compatibilityProfile
+    );
+    const pool = pools[item.id] ?? {
+      modelId: item.id,
+      strategy: "priority",
+      endpoints: [],
+      warnings: []
+    };
+    pool.endpoints.push(endpoint);
+    pool.warnings.push(...warnings);
+    pools[item.id] = pool;
+  });
+  Object.values(pools).forEach((pool) => {
+    pool.endpoints.sort((a, b) => a.priority - b.priority || a.id.localeCompare(b.id));
+    pool.activeEndpointId = pool.endpoints.find((endpoint) => endpoint.enabled)?.id;
+    const activeEndpoint = pool.endpoints.find((endpoint) => endpoint.id === pool.activeEndpointId);
+    if (activeEndpoint) {
+      modelMap[pool.modelId] = modelMap[activeEndpoint.legacyRef];
+    }
+  });
+  return {
+    providers,
+    modelMap,
+    modelPools: pools
+  };
+}
 function compileModelsToProviders(models) {
   return models.map((rawItem) => {
     const item = normalizeModelEndpointConfig(rawItem);
@@ -376,8 +913,12 @@ function compileModelsToProviders(models) {
   });
 }
 function buildModelRegistry(config) {
+  const registrationPools = buildRegistrationModelPools(config);
   if (Array.isArray(config.Models) && config.Models.length > 0) {
-    const providers2 = compileModelsToProviders(config.Models);
+    const providers2 = [
+      ...compileModelsToProviders(config.Models),
+      ...registrationPools.providers
+    ];
     const modelMap2 = config.Models.reduce((result, rawItem) => {
       const item = normalizeModelEndpointConfig(rawItem);
       const modelInterface = getModelInterface(item) || "openai";
@@ -395,21 +936,32 @@ function buildModelRegistry(config) {
         source: "models"
       };
       return result;
-    }, {});
+    }, {
+      ...registrationPools.modelMap
+    });
     return {
       providers: providers2,
-      modelMap: modelMap2
+      modelMap: modelMap2,
+      modelPools: registrationPools.modelPools
     };
   }
-  const providers = config.Providers ?? [];
+  const providers = [
+    ...config.Providers ?? [],
+    ...registrationPools.providers
+  ];
   const modelMap = providers.reduce((result, provider) => {
     for (const model of provider.models ?? []) {
+      const legacyRef = `${provider.name},${model}`;
+      if (registrationPools.modelMap[legacyRef]) {
+        result[legacyRef] = registrationPools.modelMap[legacyRef];
+        continue;
+      }
       const compatibilityProfile = inferCompatibilityProfile(
         { api_base_url: provider.api_base_url },
         "openai"
       );
-      result[`${provider.name},${model}`] = {
-        id: `${provider.name},${model}`,
+      result[legacyRef] = {
+        id: legacyRef,
         providerName: provider.name,
         modelName: model,
         interface: "openai",
@@ -428,10 +980,13 @@ function buildModelRegistry(config) {
       };
     }
     return result;
-  }, {});
+  }, {
+    ...registrationPools.modelMap
+  });
   return {
     providers,
-    modelMap
+    modelMap,
+    modelPools: registrationPools.modelPools
   };
 }
 function resolveModelReference(config, ref) {
@@ -470,6 +1025,10 @@ function isKnownModelReference(config, ref) {
     return false;
   }
   if (ref.includes(",")) {
+    const registry2 = buildModelRegistry(config);
+    if (registry2.modelMap[ref]) {
+      return true;
+    }
     const [provider, model] = ref.split(",");
     return Boolean(
       config.Providers?.find(
@@ -733,7 +1292,7 @@ function validateSemanticRoutingConfig(semantic, config, validProviders, prefix,
     }
   }
 }
-function validateModelEndpointList(models, prefix, errors) {
+function validateModelEndpointList(models, prefix, errors, options = {}) {
   const ids = /* @__PURE__ */ new Set();
   models.forEach((item, index) => {
     if (!item || typeof item !== "object" || Array.isArray(item)) {
@@ -742,7 +1301,7 @@ function validateModelEndpointList(models, prefix, errors) {
     }
     if (!item.id?.trim()) {
       errors.push(`${prefix}[${index}].id is required`);
-    } else if (ids.has(item.id.trim())) {
+    } else if (!options.allowDuplicateIds && ids.has(item.id.trim())) {
       errors.push(`${prefix}[${index}].id must be unique`);
     } else {
       ids.add(item.id.trim());
@@ -798,6 +1357,74 @@ function validateRegistrationUpstreamServices(services, errors) {
     }
   });
 }
+function validateManagedApiKeys(keys, errors) {
+  const ids = /* @__PURE__ */ new Set();
+  keys.forEach((key, index) => {
+    if (!key || typeof key !== "object" || Array.isArray(key)) {
+      errors.push(`Auth.managed_keys[${index}] must be an object`);
+      return;
+    }
+    const id = typeof key.id === "string" ? key.id.trim() : "";
+    if (!id) {
+      errors.push(`Auth.managed_keys[${index}].id is required`);
+    } else if (ids.has(id)) {
+      errors.push(`Auth.managed_keys[${index}].id must be unique`);
+    } else {
+      ids.add(id);
+    }
+    if (!key.label || typeof key.label !== "string") {
+      errors.push(`Auth.managed_keys[${index}].label is required`);
+    }
+    if (!key.key_hash || typeof key.key_hash !== "string") {
+      errors.push(`Auth.managed_keys[${index}].key_hash is required`);
+    }
+    if (!key.key_prefix || typeof key.key_prefix !== "string") {
+      errors.push(`Auth.managed_keys[${index}].key_prefix is required`);
+    }
+    if (!key.key_suffix || typeof key.key_suffix !== "string") {
+      errors.push(`Auth.managed_keys[${index}].key_suffix is required`);
+    }
+    if (!key.created_at || typeof key.created_at !== "string") {
+      errors.push(`Auth.managed_keys[${index}].created_at is required`);
+    }
+    validateManagedApiKeyScopes(key.scopes).forEach((message) => {
+      errors.push(`Auth.managed_keys[${index}].${message}`);
+    });
+    if (key.expires_at !== void 0 && typeof key.expires_at !== "string") {
+      errors.push(`Auth.managed_keys[${index}].expires_at must be a string when provided`);
+    }
+    if (key.revoked_at !== void 0 && typeof key.revoked_at !== "string") {
+      errors.push(`Auth.managed_keys[${index}].revoked_at must be a string when provided`);
+    }
+  });
+}
+function validateAuthQuotaUsage(usage, errors) {
+  if (usage === void 0) {
+    return;
+  }
+  if (!usage || typeof usage !== "object" || Array.isArray(usage)) {
+    errors.push("Auth.quota_usage must be an object when provided");
+    return;
+  }
+  Object.entries(usage).forEach(([keyId, item]) => {
+    if (!item || typeof item !== "object" || Array.isArray(item)) {
+      errors.push(`Auth.quota_usage.${keyId} must be an object`);
+      return;
+    }
+    if (!Number.isInteger(item.requests) || item.requests < 0) {
+      errors.push(`Auth.quota_usage.${keyId}.requests must be a non-negative integer`);
+    }
+    if (!Number.isInteger(item.tokens) || item.tokens < 0) {
+      errors.push(`Auth.quota_usage.${keyId}.tokens must be a non-negative integer`);
+    }
+    if (!item.window_started_at || typeof item.window_started_at !== "string" || Number.isNaN(Date.parse(item.window_started_at))) {
+      errors.push(`Auth.quota_usage.${keyId}.window_started_at must be an ISO date string`);
+    }
+    if (item.window_seconds !== void 0 && (!Number.isInteger(item.window_seconds) || item.window_seconds <= 0)) {
+      errors.push(`Auth.quota_usage.${keyId}.window_seconds must be a positive integer when provided`);
+    }
+  });
+}
 function trimTrailingSlash2(value) {
   return value.replace(/\/+$/, "");
 }
@@ -862,13 +1489,21 @@ function validateConfig(config) {
   if (config.Registration?.models !== void 0 && !Array.isArray(config.Registration.models)) {
     errors.push("Registration.models must be an array when provided");
   } else if (Array.isArray(config.Registration?.models)) {
-    validateModelEndpointList(config.Registration.models, "Registration.models", errors);
+    validateModelEndpointList(config.Registration.models, "Registration.models", errors, {
+      allowDuplicateIds: true
+    });
   }
   if (config.Registration?.upstream_services !== void 0 && !Array.isArray(config.Registration.upstream_services)) {
     errors.push("Registration.upstream_services must be an array when provided");
   } else if (Array.isArray(config.Registration?.upstream_services)) {
     validateRegistrationUpstreamServices(config.Registration.upstream_services, errors);
   }
+  if (config.Auth?.managed_keys !== void 0 && !Array.isArray(config.Auth.managed_keys)) {
+    errors.push("Auth.managed_keys must be an array when provided");
+  } else if (Array.isArray(config.Auth?.managed_keys)) {
+    validateManagedApiKeys(config.Auth.managed_keys, errors);
+  }
+  validateAuthQuotaUsage(config.Auth?.quota_usage, errors);
   const validProviders = config.Providers?.filter((p) => p.name && p.models?.length) ?? [];
   const runtimeSmartRouter = deriveRuntimeSmartRouterConfig(config, config);
   if (validProviders.length > 0) {
@@ -1290,6 +1925,7 @@ var init_config = __esm({
     import_path2 = require("path");
     yaml = __toESM(require("js-yaml"));
     init_constants();
+    init_api_keys();
     init_compile();
     init_schema();
     init_log();
@@ -1319,6 +1955,10 @@ var init_utils = __esm({
 });
 
 // src/service-health.ts
+function buildServiceHealthHeaders(options = {}) {
+  const apiKey = options.apiKey?.trim();
+  return apiKey ? { Authorization: `Bearer ${apiKey}` } : void 0;
+}
 function isExpectedServiceHealth(payload) {
   if (!payload || typeof payload !== "object") {
     return false;
@@ -1326,9 +1966,10 @@ function isExpectedServiceHealth(payload) {
   const health = payload;
   return health.service === SERVICE_NAME && health.ready === true;
 }
-async function probeServiceHealth(port, timeoutMs = 500) {
+async function probeServiceHealth(port, timeoutMs = 500, options = {}) {
   try {
     const res = await fetch(`http://127.0.0.1:${port}${SERVICE_HEALTH_PATH}`, {
+      headers: buildServiceHealthHeaders(options),
       signal: AbortSignal.timeout(timeoutMs)
     });
     if (!res.ok) {
@@ -1391,7 +2032,9 @@ async function probeRemoteServiceStatus(remoteService, timeoutMs = 800, fetchFn
       baseUrl: normalizedBaseUrl,
       service: info.service,
       runtimeMode: info.runtimeMode,
-      remoteEnabled: info.remoteEnabled
+      remoteEnabled: info.remoteEnabled,
+      ...info.auth !== void 0 ? { auth: info.auth } : {},
+      ...info.security !== void 0 ? { security: info.security } : {}
     };
   } catch (error) {
     return {
@@ -1429,10 +2072,10 @@ async function isTcpPortOccupied(port, timeoutMs = 500) {
     socket.connect(port, "127.0.0.1");
   });
 }
-async function waitForService(port, timeoutMs = 5e3) {
+async function waitForService(port, timeoutMs = 5e3, options = {}) {
   const start = Date.now();
   while (Date.now() - start < timeoutMs) {
-    if (await probeServiceHealth(port, 500)) {
+    if (await probeServiceHealth(port, 500, options)) {
       return true;
     }
     await new Promise((resolve) => setTimeout(resolve, 300));
@@ -1460,7 +2103,7 @@ var init_types = __esm({
 // src/governance/trace.ts
 function createGovernanceTrace(input3 = {}) {
   return {
-    requestId: input3.requestId ?? (0, import_crypto.randomUUID)(),
+    requestId: input3.requestId ?? (0, import_crypto2.randomUUID)(),
     sessionKey: input3.sessionKey,
     initialModel: input3.initialModel,
     finalModel: input3.finalModel,
@@ -1499,11 +2142,11 @@ function recordGovernanceTrace(trace) {
   governanceTraceStore.add(trace);
   return trace;
 }
-var import_crypto, import_fs2, import_lru_cache, import_path3, import_zlib, GovernanceTraceStore, governanceTraceStore;
+var import_crypto2, import_fs2, import_lru_cache, import_path3, import_zlib, GovernanceTraceStore, governanceTraceStore;
 var init_trace = __esm({
   "src/governance/trace.ts"() {
     "use strict";
-    import_crypto = require("crypto");
+    import_crypto2 = require("crypto");
     import_fs2 = require("fs");
     import_lru_cache = require("lru-cache");
     import_path3 = require("path");
@@ -2888,6 +3531,122 @@ function buildTopEntries(distribution, total, limit = 5) {
     rate: rate(count, total)
   }));
 }
+function buildTopSwitchEntries(distribution, total, limit = 5) {
+  return Object.values(distribution).sort((left, right) => {
+    if (right.count !== left.count) {
+      return right.count - left.count;
+    }
+    return `${left.from ?? ""}->${left.to ?? ""}`.localeCompare(`${right.from ?? ""}->${right.to ?? ""}`);
+  }).slice(0, limit).map((entry) => ({
+    key: `${entry.from ?? "-"} -> ${entry.to ?? "-"}`,
+    from: entry.from,
+    to: entry.to,
+    count: entry.count,
+    rate: rate(entry.count, total)
+  }));
+}
+function addOutcomeGroup(groups, key, trace) {
+  if (!key) {
+    return;
+  }
+  const switched = isModelSwitch(trace);
+  const group = groups[key] ?? {
+    key,
+    totalTraces: 0,
+    modelSwitchCount: 0,
+    alignmentOnSwitchCount: 0,
+    cascadeAfterSwitchCount: 0,
+    latencyValues: []
+  };
+  group.totalTraces += 1;
+  group.modelSwitchCount += switched ? 1 : 0;
+  group.alignmentOnSwitchCount += switched && trace.alignmentUsed ? 1 : 0;
+  group.cascadeAfterSwitchCount += switched && trace.cascadeTriggered ? 1 : 0;
+  if (typeof trace.latencyMs === "number" && Number.isFinite(trace.latencyMs)) {
+    group.latencyValues.push(trace.latencyMs);
+  }
+  groups[key] = group;
+}
+function buildOutcomeGroupEntries(groups, totalTraces, limit = 5) {
+  return Object.values(groups).sort((left, right) => {
+    if (right.totalTraces !== left.totalTraces) {
+      return right.totalTraces - left.totalTraces;
+    }
+    return left.key.localeCompare(right.key);
+  }).slice(0, limit).map((group) => ({
+    key: group.key,
+    totalTraces: group.totalTraces,
+    rate: rate(group.totalTraces, totalTraces),
+    modelSwitchCount: group.modelSwitchCount,
+    modelSwitchRate: rate(group.modelSwitchCount, group.totalTraces),
+    alignmentOnSwitchCount: group.alignmentOnSwitchCount,
+    alignmentOnSwitchRate: rate(group.alignmentOnSwitchCount, group.modelSwitchCount),
+    cascadeAfterSwitchCount: group.cascadeAfterSwitchCount,
+    cascadeAfterSwitchRate: rate(group.cascadeAfterSwitchCount, group.modelSwitchCount),
+    averageLatencyMs: average(group.latencyValues)
+  }));
+}
+function isRoutedTrace(trace) {
+  return trace.routeReason.some((reason) => reason !== "request_received");
+}
+function isModelSwitch(trace) {
+  return Boolean(trace.initialModel && trace.finalModel && trace.initialModel !== trace.finalModel);
+}
+function summarizeRoutingOutcomes(traces) {
+  const routedTraces = traces.filter(isRoutedTrace);
+  const switchedTraces = traces.filter(isModelSwitch);
+  const stableModelCount = traces.filter(
+    (trace) => Boolean(trace.initialModel && trace.finalModel && trace.initialModel === trace.finalModel)
+  ).length;
+  const alignmentOnSwitchCount = switchedTraces.filter((trace) => trace.alignmentUsed).length;
+  const cascadeAfterSwitchCount = switchedTraces.filter((trace) => trace.cascadeTriggered).length;
+  const switchDistribution = {};
+  const routeLatencyValues = {};
+  const routeReasonGroups = {};
+  const finalModelGroups = {};
+  const semanticIntentGroups = {};
+  for (const trace of traces) {
+    if (isModelSwitch(trace)) {
+      const key = `${trace.initialModel} -> ${trace.finalModel}`;
+      switchDistribution[key] = {
+        from: trace.initialModel,
+        to: trace.finalModel,
+        count: (switchDistribution[key]?.count ?? 0) + 1
+      };
+    }
+    if (typeof trace.latencyMs === "number" && Number.isFinite(trace.latencyMs)) {
+      for (const reason of trace.routeReason.filter((item) => item !== "request_received")) {
+        routeLatencyValues[reason] = [...routeLatencyValues[reason] ?? [], trace.latencyMs];
+      }
+    }
+    for (const reason of trace.routeReason.filter((item) => item !== "request_received")) {
+      addOutcomeGroup(routeReasonGroups, reason, trace);
+    }
+    addOutcomeGroup(finalModelGroups, trace.finalModel, trace);
+    addOutcomeGroup(semanticIntentGroups, trace.semanticIntent, trace);
+  }
+  const averageLatencyByRouteReason = Object.fromEntries(
+    Object.entries(routeLatencyValues).sort(([left], [right]) => left.localeCompare(right)).map(([reason, values]) => [reason, average(values)])
+  );
+  return {
+    totalTraces: traces.length,
+    routedTraces: routedTraces.length,
+    routedRate: rate(routedTraces.length, traces.length),
+    modelSwitchCount: switchedTraces.length,
+    modelSwitchRate: rate(switchedTraces.length, traces.length),
+    stableModelCount,
+    stableModelRate: rate(stableModelCount, traces.length),
+    alignmentOnSwitchCount,
+    alignmentOnSwitchRate: rate(alignmentOnSwitchCount, switchedTraces.length),
+    cascadeAfterSwitchCount,
+    cascadeAfterSwitchRate: rate(cascadeAfterSwitchCount, switchedTraces.length),
+    averageLatencyByRouteReason,
+    topModelSwitches: buildTopSwitchEntries(switchDistribution, switchedTraces.length),
+    byRouteReason: buildOutcomeGroupEntries(routeReasonGroups, traces.length),
+    byFinalModel: buildOutcomeGroupEntries(finalModelGroups, traces.length),
+    bySemanticIntent: buildOutcomeGroupEntries(semanticIntentGroups, traces.length)
+  };
+}
 function averageRate(values) {
   if (!values.length) {
     return 0;
@@ -2995,6 +3754,8 @@ function buildGovernanceHealthSummary(input3) {
         cascadeTriggeredRate: 0,
         shadowCheckedRate: 0,
         alignmentUsedRate: 0,
+        modelSwitchRate: 0,
+        alignmentOnSwitchRate: 0,
         averageLatencyMs: 0,
         topRouteReason: input3.topRouteReasons?.[0],
         topFinalModel: input3.topFinalModels?.[0]
@@ -3017,6 +3778,8 @@ function buildGovernanceHealthSummary(input3) {
       cascadeTriggeredRate: metrics.cascadeTriggeredRate,
       shadowCheckedRate: metrics.shadowCheckedRate,
       alignmentUsedRate: metrics.alignmentUsedRate,
+      modelSwitchRate: input3.outcome?.modelSwitchRate ?? 0,
+      alignmentOnSwitchRate: input3.outcome?.alignmentOnSwitchRate ?? 0,
       averageLatencyMs: metrics.averageLatencyMs,
       topRouteReason: input3.topRouteReasons?.[0],
       topFinalModel: input3.topFinalModels?.[0]
@@ -3113,6 +3876,7 @@ function getGovernanceMetricsReport(options = {}) {
   const limitedTraces = options.limit && options.limit > 0 ? windowed.traces.slice(0, options.limit) : windowed.traces;
   const bucketCount = options.bucketCount && options.bucketCount > 0 ? options.bucketCount : 6;
   const metrics = summarizeGovernanceMetrics(limitedTraces);
+  const outcome = summarizeRoutingOutcomes(limitedTraces);
   const buckets = buildBuckets(limitedTraces, windowed.windowStart, windowed.windowEnd, bucketCount);
   const thresholds = normalizeAnomalyThresholds(options.anomalyThresholds);
   const topRouteReasons = buildTopEntries(metrics.routeReasonDistribution, limitedTraces.length);
@@ -3125,6 +3889,7 @@ function getGovernanceMetricsReport(options = {}) {
     windowStart: windowed.windowStart,
     windowEnd: windowed.windowEnd,
     metrics,
+    outcome,
     buckets,
     topRouteReasons,
     topFinalModels,
@@ -3134,7 +3899,8 @@ function getGovernanceMetricsReport(options = {}) {
       metrics,
       anomalies,
       topRouteReasons,
-      topFinalModels
+      topFinalModels,
+      outcome
     })
   };
 }
@@ -3150,7 +3916,11 @@ function exportGovernanceMetricsReport(report, format = "json") {
     `summary,shadowCheckedRate,${report.metrics.shadowCheckedRate}`,
     `summary,alignmentUsedRate,${report.metrics.alignmentUsedRate}`,
     `summary,averageLatencyMs,${report.metrics.averageLatencyMs}`,
-    `summary,averageEstimatedCost,${report.metrics.averageEstimatedCost}`
+    `summary,averageEstimatedCost,${report.metrics.averageEstimatedCost}`,
+    `outcome,routedRate,${report.outcome.routedRate}`,
+    `outcome,modelSwitchRate,${report.outcome.modelSwitchRate}`,
+    `outcome,alignmentOnSwitchRate,${report.outcome.alignmentOnSwitchRate}`,
+    `outcome,cascadeAfterSwitchRate,${report.outcome.cascadeAfterSwitchRate}`
   ];
   if (report.health) {
     lines.push(`summary,healthStatus,${report.health.status}`);
@@ -3168,6 +3938,18 @@ function exportGovernanceMetricsReport(report, format = "json") {
   for (const item of report.topSemanticIntents) {
     lines.push(`topSemanticIntent,${item.key},${item.count}:${item.rate}`);
   }
+  for (const item of report.outcome.topModelSwitches) {
+    lines.push(`topModelSwitch,${item.key},${item.count}:${item.rate}`);
+  }
+  for (const item of report.outcome.byRouteReason) {
+    lines.push(`outcomeByRouteReason,${item.key},${item.totalTraces}:${item.modelSwitchRate}:${item.averageLatencyMs}`);
+  }
+  for (const item of report.outcome.byFinalModel) {
+    lines.push(`outcomeByFinalModel,${item.key},${item.totalTraces}:${item.modelSwitchRate}:${item.averageLatencyMs}`);
+  }
+  for (const item of report.outcome.bySemanticIntent) {
+    lines.push(`outcomeBySemanticIntent,${item.key},${item.totalTraces}:${item.modelSwitchRate}:${item.averageLatencyMs}`);
+  }
   for (const bucket of report.buckets) {
     lines.push(
       `bucket,${bucket.label},${[
@@ -3620,6 +4402,17 @@ var init_provider_presets = __esm({
   }
 });
 
+// src/runtime-role-guidance.ts
+var LOCAL_USER_ROLE_GUIDE, SERVER_MAINTAINER_ROLE_GUIDE, REMOTE_CLIENT_ROLE_GUIDE;
+var init_runtime_role_guidance = __esm({
+  "src/runtime-role-guidance.ts"() {
+    "use strict";
+    LOCAL_USER_ROLE_GUIDE = "\u672C\u5730\u4F7F\u7528\u8005\uFF1A\u5148\u8DD1\u901A Models + Router.default\uFF0C\u518D\u7528 ctr start / ctr status / ctr code \u8FDB\u5165 Claude Code\u3002";
+    SERVER_MAINTAINER_ROLE_GUIDE = "\u670D\u52A1\u7EF4\u62A4\u8005\uFF1A\u7528 ctr deploy init --target server \u751F\u6210 server \u914D\u7F6E\uFF0C\u4FDD\u7559 bootstrap/admin key \u7BA1\u7406\u670D\u52A1\uFF0C\u5E76\u7ED9\u8FDC\u7A0B\u4F7F\u7528\u8005\u53D1\u653E managed client + read-only key\u3002";
+    REMOTE_CLIENT_ROLE_GUIDE = "\u8FDC\u7A0B\u4F7F\u7528\u8005\uFF1A\u62FF\u5230\u670D\u52A1\u5730\u5740\u548C managed client + read-only key\uFF1BRuntime.remote_service \u8D1F\u8D23\u8FDE\u63A5\u914D\u7F6E\u4E0E ready/status \u68C0\u67E5\uFF0C\u76F4\u8FDE Claude Code \u65F6\u8BBE\u7F6E ANTHROPIC_BASE_URL \u4E0E ANTHROPIC_AUTH_TOKEN\u3002";
+  }
+});
+
 // src/ui/workbench.ts
 function toInlineScriptJson(value) {
   return JSON.stringify(value).replace(/</g, "\\u003c");
@@ -3637,27 +4430,53 @@ function renderWorkbenchHtml(rawInitialConfig, configuredThresholds = {}) {
   const remoteService = initialConfig.Runtime?.remote_service ?? {};
   const remoteBaseUrl = typeof remoteService.base_url === "string" ? remoteService.base_url.trim().replace(/\/+$/, "") : "";
   const remoteSummary = remoteService.enabled ? `${remoteBaseUrl || "-"} (checking)` : "disabled";
+  const configuredHost = String(initialConfig.HOST ?? "127.0.0.1").trim() || "127.0.0.1";
+  const publicHost = ["0.0.0.0", "::", "[::]"].includes(configuredHost);
+  const advertisedUrl = publicHost ? `http://<server-host>:${displayPort}` : `http://${configuredHost}:${displayPort}`;
+  const clientConnectionSummary = runtimeMode === "local" && remoteService.enabled ? `${remoteBaseUrl || "-"} \xB7 client + read-only token` : runtimeMode === "local" ? `local only \xB7 http://127.0.0.1:${displayPort}` : `${advertisedUrl} \xB7 client + read-only token`;
   const registration = initialConfig.Registration ?? {};
   const registrationModels = Array.isArray(registration.models) ? registration.models.length : 0;
   const registrationUpstreamServices = Array.isArray(registration.upstream_services) ? registration.upstream_services.length : 0;
   const registrationSummary = registration.enabled ? `${registrationModels} models / ${registrationUpstreamServices} upstream` : "disabled";
+  const initialManagedKeys = Array.isArray(initialConfig.Auth?.managed_keys) ? initialConfig.Auth.managed_keys : [];
+  const nowMs = Date.now();
+  const initialActiveManagedKeys = initialManagedKeys.filter((record) => {
+    if (record?.revoked_at) {
+      return false;
+    }
+    if (!record?.expires_at) {
+      return true;
+    }
+    const expiresAt = Date.parse(record.expires_at);
+    return !Number.isFinite(expiresAt) || expiresAt > nowMs;
+  }).length;
+  const authSummary = initialConfig.APIKEY || initialManagedKeys.length > 0 ? `configured \xB7 ${initialActiveManagedKeys} active` : "not configured";
+  const securitySummary = !initialConfig.APIKEY && initialManagedKeys.length === 0 && (runtimeMode !== "local" || publicHost) ? "critical" : !initialConfig.APIKEY && initialManagedKeys.length > 0 && initialActiveManagedKeys === 0 ? "warning" : "ok";
   const escapedDisplayPort = escapeHtml(displayPort);
   const escapedModelsCount = escapeHtml(modelsCount);
   const escapedRouterDefault = escapeHtml(routerDefault);
   const escapedRuntimeMode = escapeHtml(runtimeMode);
   const escapedServiceRole = escapeHtml(serviceRole);
+  const escapedListenerSummary = escapeHtml(`${configuredHost}:${displayPort}${publicHost ? " (public)" : " (local)"}`);
+  const escapedClientConnectionSummary = escapeHtml(clientConnectionSummary);
   const escapedRemoteSummary = escapeHtml(remoteSummary);
   const escapedRegistrationSummary = escapeHtml(registrationSummary);
+  const escapedAuthSummary = escapeHtml(authSummary);
+  const escapedSecuritySummary = escapeHtml(securitySummary);
+  const escapedLocalUserRoleGuide = escapeHtml(LOCAL_USER_ROLE_GUIDE);
+  const escapedServerMaintainerRoleGuide = escapeHtml(SERVER_MAINTAINER_ROLE_GUIDE);
+  const escapedRemoteClientRoleGuide = escapeHtml(REMOTE_CLIENT_ROLE_GUIDE);
   const escapedMinSampleSize = escapeHtml(configuredThresholds.min_sample_size ?? 3);
   const escapedCascadeWarnRate = escapeHtml(configuredThresholds.cascade_warn_rate ?? 0.4);
   const escapedShadowWarnRate = escapeHtml(configuredThresholds.shadow_warn_rate ?? 0.5);
   const escapedLatencyWarnMs = escapeHtml(configuredThresholds.latency_warn_ms ?? 1500);
-  return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Claude Trigger Router</title><style>body{font-family:ui-sans-serif,system-ui,sans-serif;padding:2rem;max-width:1100px;margin:0 auto;background:#f7f7f5;color:#1f2328}.panel{background:#fff;border:1px solid #e5e7eb;border-radius:12px;padding:1rem 1.25rem;margin-bottom:1rem}.muted{color:#6b7280}.hero{display:grid;grid-template-columns:minmax(0,1.2fr) minmax(260px,.8fr);gap:1rem;align-items:stretch;margin-bottom:1rem}.hero h2{margin:.2rem 0 .5rem;font-size:1.55rem}.hero-copy{display:flex;flex-direction:column;justify-content:center}.status-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:.75rem}.status-tile{background:#f8fafc;border:1px solid #e5e7eb;border-radius:8px;padding:.75rem;min-width:0}.status-tile strong{display:block;margin-top:.2rem;word-break:break-word}@media (max-width:760px){.hero{grid-template-columns:1fr}.status-grid{grid-template-columns:1fr}}.stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:.75rem;margin-top:1rem}.stat{background:#f8fafc;border:1px solid #e5e7eb;border-radius:12px;padding:.85rem}.stat strong{display:block;font-size:1.1rem;margin-top:.25rem}.subpanel{margin-top:1rem;padding-top:1rem;border-top:1px solid #e5e7eb}.bucket-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:.75rem;margin-top:.75rem}.detail-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(260px,1fr));gap:1rem;margin-top:1rem}.mini-list{list-style:none;padding:0;margin:.75rem 0 0}.mini-list li{display:flex;justify-content:space-between;gap:1rem;padding:.45rem 0;border-bottom:1px dashed #e5e7eb}.mini-list li:last-child{border-bottom:none}.action-row{display:flex;gap:.75rem;flex-wrap:wrap;align-items:center;margin-top:.75rem}.management-table{width:100%;margin-top:.75rem}.management-table th,.management-table td{padding:.5rem;border-bottom:1px solid #e5e7eb;font-size:.92rem;vertical-align:top}.alert-list{display:grid;gap:.75rem;margin-top:1rem}.alert{border-radius:12px;padding:.85rem 1rem;border:1px solid}.alert.warn{background:#fff7ed;border-color:#fdba74;color:#9a3412}.alert.critical{background:#fef2f2;border-color:#fca5a5;color:#991b1b}.alert.info{background:#eff6ff;border-color:#93c5fd;color:#1d4ed8}.diff-summary{display:grid;grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:.75rem;margin-top:.75rem}.diff-chip{background:#f8fafc;border:1px solid #e5e7eb;border-radius:12px;padding:.75rem}.diff-chip strong{display:block;font-size:1rem;margin-top:.2rem}.models-form-grid{display:grid;gap:.75rem;margin-top:.75rem}.model-card{border:1px solid #e5e7eb;border-radius:12px;padding:1rem;background:#fcfcfd}.model-card-header{display:flex;justify-content:space-between;gap:1rem;align-items:center;margin-bottom:.75rem}.model-card-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:.75rem}.model-card-grid textarea{min-height:84px;resize:vertical}.list-editor{display:grid;gap:.75rem;margin-top:.75rem}.list-item{border:1px solid #e5e7eb;border-radius:12px;padding:.85rem;background:#fcfcfd}.list-item-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:.75rem}.jump-highlight{outline:3px solid #f59e0b;box-shadow:0 0 0 6px rgba(245,158,11,.15);transition:box-shadow .25s ease,outline-color .25s ease}.control-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:.75rem;margin-top:1rem}.control-grid label{display:block;font-size:.85rem;color:#6b7280;margin-bottom:.35rem}.trend-table{width:100%;margin-top:.75rem}.trend-table th,.trend-table td{padding:.45rem;border-bottom:1px solid #e5e7eb;font-size:.92rem}.row{display:flex;gap:1rem;flex-wrap:wrap;align-items:center}input,select,button{font:inherit;padding:.55rem .75rem;border-radius:8px;border:1px solid #d1d5db}button{background:#111827;color:#fff;border-color:#111827;cursor:pointer}table{width:100%;border-collapse:collapse;margin-top:1rem}th,td{text-align:left;padding:.65rem .5rem;border-bottom:1px solid #e5e7eb;vertical-align:top}code,pre{font-family:ui-monospace,SFMono-Regular,monospace}pre{white-space:pre-wrap;background:#0f172a;color:#e2e8f0;padding:1rem;border-radius:12px;overflow:auto}.pill{display:inline-block;padding:.2rem .5rem;border-radius:999px;background:#eef2ff;color:#3730a3;font-size:.8rem}.surface-tabs{display:flex;gap:.5rem;flex-wrap:wrap;margin:1rem 0}.surface-tab{background:#fff;color:#1f2328;border-color:#d1d5db}.surface-tab.active{background:#111827;color:#fff;border-color:#111827}.surface-panel[hidden]{display:none}.surface-heading{display:flex;gap:1rem;flex-wrap:wrap;align-items:center;margin-bottom:.75rem}</style></head><body><div class="hero"><div class="panel hero-copy"><h2>\u914D\u7F6E\u4E0E\u72B6\u6001\u5DE5\u4F5C\u53F0</h2><p class="muted">\u67E5\u770B\u5F53\u524D\u8DEF\u7531\u670D\u52A1\u3001\u6A21\u578B\u914D\u7F6E\u548C\u9ED8\u8BA4\u53BB\u5411\uFF1B\u9700\u8981\u6392\u67E5\u65F6\uFF0C\u4E0B\u65B9\u7EF4\u62A4\u8005\u533A\u57DF\u53EF\u7EE7\u7EED\u67E5\u770B Governance Trace\u3001metrics \u548C\u5F52\u6863\u3002</p><div class="action-row"><button id="loadConfigDraftHeroBtn" type="button">\u8F7D\u5165\u5F53\u524D\u914D\u7F6E</button><button id="previewConfigDraftHeroBtn" type="button">\u9884\u89C8 compiled models</button><button id="refreshStatusHeroBtn" type="button">\u5237\u65B0\u72B6\u6001</button></div></div><div class="panel"><div class="status-grid"><div class="status-tile"><span class="muted">Service</span><strong id="serviceReadyStatus">ready</strong></div><div class="status-tile"><span class="muted">Port</span><strong id="servicePortStatus">${escapedDisplayPort}</strong></div><div class="status-tile"><span class="muted">Mode</span><strong id="serviceModeStatus">${escapedRuntimeMode}</strong></div><div class="status-tile"><span class="muted">Role</span><strong id="serviceRoleStatus">${escapedServiceRole}</strong></div><div class="status-tile"><span class="muted">Models</span><strong id="modelCountStatus">${escapedModelsCount}</strong></div><div class="status-tile"><span class="muted">Router.default</span><strong id="routerDefaultStatus">${escapedRouterDefault}</strong></div><div class="status-tile"><span class="muted">Remote service</span><strong id="remoteStatusSummary">${escapedRemoteSummary}</strong></div><div class="status-tile"><span class="muted">Registration</span><strong id="registrationStatusSummary">${escapedRegistrationSummary}</strong></div></div></div></div><div class="surface-tabs" role="tablist" aria-label="\u5DE5\u4F5C\u53F0\u5207\u6362"><button id="userSurfaceTab" class="surface-tab active" type="button" role="tab" aria-selected="true" data-surface-target="user">\u4F7F\u7528\u8005\u5DE5\u4F5C\u53F0</button><button id="maintainerSurfaceTab" class="surface-tab" type="button" role="tab" aria-selected="false" data-surface-target="maintainer">\u7EF4\u62A4\u8005\u5DE5\u4F5C\u53F0</button></div><section id="userSurface" class="surface-panel" data-surface="user"><div class="panel"><div class="surface-heading"><strong>\u4F7F\u7528\u8005\u5DE5\u4F5C\u53F0</strong><span class="muted">\u914D\u7F6E\u3001\u6A21\u578B\u3001\u8DEF\u7531\u3001\u670D\u52A1\u72B6\u6001\u4E0E\u4E0B\u4E00\u6B65\u4FDD\u5B58\u52A8\u4F5C\u3002</span></div><div class="subpanel"><div class="row"><strong>Draft Config Preview</strong><span class="muted">\u7F16\u8F91\u5F53\u524D\u914D\u7F6E\u8349\u7A3F\u5E76\u5373\u65F6\u9884\u89C8 compiled models \u7ED3\u679C\uFF0C\u4E0D\u843D\u76D8</span></div><div class="action-row"><button id="loadConfigDraftBtn" type="button">\u8F7D\u5165\u5F53\u524D\u914D\u7F6E</button><button id="addModelDraftBtn" type="button">\u65B0\u589E Model</button><button id="applyBalancedPresetBtn" type="button">\u5E94\u7528\u5E73\u8861\u9884\u8BBE</button><button id="previewBalancedPresetBtn" type="button">\u9884\u89C8\u5E73\u8861\u9884\u8BBE</button><button id="applyFastPresetBtn" type="button">\u5E94\u7528\u5FEB\u901F\u9884\u8BBE</button><button id="previewFastPresetBtn" type="button">\u9884\u89C8\u5FEB\u901F\u9884\u8BBE</button><button id="applyGovernancePresetBtn" type="button">\u5E94\u7528\u6CBB\u7406\u9884\u8BBE</button><button id="previewGovernancePresetBtn" type="button">\u9884\u89C8\u6CBB\u7406\u9884\u8BBE</button><button id="syncDraftJsonBtn" type="button">\u540C\u6B65 JSON \u8349\u7A3F</button><button id="previewConfigDraftBtn" type="button">\u9884\u89C8 compiled models</button><button id="saveConfigDraftBtn" type="button">\u4FDD\u5B58\u914D\u7F6E</button><span id="draftPreviewStatus" class="muted">\u5C1A\u672A\u9884\u89C8\u914D\u7F6E\u8349\u7A3F</span></div><div class="control-grid"><div><label>Preset mode</label><select id="draftPresetMode"><option value="merge" selected>append / merge</option><option value="replace">overwrite</option></select></div><div><label>Mode guide</label><div id="draftPresetModeHint" class="muted">append / merge \u4F1A\u5C3D\u91CF\u4FDD\u7559\u5F53\u524D\u8349\u7A3F\uFF0C\u4EC5\u8865\u5145\u9884\u8BBE\u76F8\u5173\u5B57\u6BB5</div></div></div><div id="draftPresetList" class="alert-list"><div class="alert info"><strong>Preset guide</strong><div class="muted">\u9009\u62E9\u9884\u8BBE\u524D\u53EF\u5148\u67E5\u770B\u5176\u4F1A\u8986\u76D6\u7684\u533A\u57DF\u4E0E\u63A8\u8350\u7528\u9014</div></div></div><div id="draftPreviewMeta" class="alert-list"><div class="alert info"><strong>Draft preview mode</strong><div class="muted">\u5F53\u524D\u663E\u793A\u4E3A\u8349\u7A3F\u7F16\u8F91\u89C6\u56FE\uFF0C\u9884\u8BBE dry-run \u4F1A\u5728\u8FD9\u91CC\u63D0\u793A\u5F71\u54CD\u8303\u56F4\u3002</div></div></div><div id="draftSummaryGrid" class="stats"><div class="stat"><span class="muted">Models</span><strong>0</strong></div><div class="stat"><span class="muted">Routing rules</span><strong>0</strong></div><div class="stat"><span class="muted">Patterns</span><strong>0</strong></div><div class="stat"><span class="muted">Smart candidates</span><strong>0</strong></div><div class="stat"><span class="muted">Cascade levels</span><strong>0</strong></div><div class="stat"><span class="muted">Model refs</span><strong>0</strong></div></div><div class="subpanel"><div class="row"><strong>Validation Summary</strong><span class="muted">\u96C6\u4E2D\u663E\u793A\u5F53\u524D\u8349\u7A3F\u7684\u9519\u8BEF\u4E0E warning\uFF0C\u5E76\u533A\u5206\u4FEE\u590D\u4F18\u5148\u7EA7</span></div><div id="draftValidationList" class="alert-list"><div class="alert info"><strong>No validation issues</strong><div class="muted">\u9884\u89C8\u524D\u4F1A\u5728\u8FD9\u91CC\u6C47\u603B\u8349\u7A3F\u95EE\u9898</div></div></div></div><div class="subpanel"><div class="row"><strong>Capability Warnings</strong><span class="muted">\u663E\u793A\u6A21\u578B capability hint \u53EF\u80FD\u5E26\u6765\u7684\u8FD0\u884C\u65F6\u964D\u7EA7\u884C\u4E3A</span></div><div id="capabilityWarningsList" class="alert-list"><div class="alert info"><strong>No capability warnings</strong><div class="muted">\u9884\u89C8\u6216\u52A0\u8F7D compiled models \u540E\u4F1A\u5728\u8FD9\u91CC\u663E\u793A\u80FD\u529B\u964D\u7EA7\u63D0\u793A</div></div></div></div><div class="control-grid"><div><label>Router default (modelId)</label><input id="draftRouterDefault" placeholder="\u4F8B\u5982 sonnet"></div><div><label>Models count</label><input id="draftModelsCount" value="0" readonly></div></div><div class="subpanel"><div class="row"><strong>Routing Controls</strong><span class="muted">\u56F4\u7ED5 SmartRouter \u7EDF\u4E00\u8DEF\u7531\u5F15\u64CE\u7F16\u8F91\u89C4\u5219\u3001\u5019\u9009\u4E0E\u6CBB\u7406\u589E\u5F3A\u517C\u5BB9\u914D\u7F6E</span></div><div class="detail-grid"><div class="panel" style="margin-bottom:0"><div class="row"><strong>Routing rules</strong><span class="muted">\u663E\u5F0F\u89C4\u5219\u3001\u8BED\u4E49\u63D0\u793A\u4E0E\u517C\u5BB9\u8F93\u5165</span></div><div class="control-grid"><div><label><input id="triggerEnabled" type="checkbox"> Enabled</label></div><div><label><input id="triggerIntentEnabled" type="checkbox"> Intent recognition</label></div><div><label>Analysis scope</label><select id="triggerAnalysisScope"><option value="last_message">last_message</option><option value="full_context">full_context</option></select></div><div><label>Intent model</label><input id="triggerIntentModel" list="topLevelTriggerIntentSuggestions" placeholder="modelId"><datalist id="topLevelTriggerIntentSuggestions"></datalist></div></div><div style="margin-top:.75rem"><div class="action-row"><label>Rules</label><button id="addTriggerRuleBtn" type="button">\u65B0\u589E Rule</button></div><div id="triggerRulesList" class="list-editor"><div class="panel" style="margin-bottom:0"><span class="muted">No routing rules yet</span></div></div></div></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>SmartRouter</strong><span class="muted">\u667A\u80FD\u5019\u9009\u9009\u62E9</span></div><div class="control-grid"><div><label><input id="smartEnabled" type="checkbox"> Enabled</label></div><div><label>Router model</label><input id="smartRouterModel" list="topLevelSmartRouterSuggestions" placeholder="modelId"><datalist id="topLevelSmartRouterSuggestions"></datalist></div><div><label>Fallback</label><select id="smartFallback"><option value="default">default</option><option value="skip">skip</option></select></div><div><label>Cache TTL</label><input id="smartCacheTtl" placeholder="600000"></div><div><label>Max tokens</label><input id="smartMaxTokens" placeholder="256"></div></div><div style="margin-top:.75rem"><div class="action-row"><label>Candidates</label><button id="addSmartCandidateBtn" type="button">\u65B0\u589E Candidate</button></div><div id="smartCandidatesList" class="list-editor"><div class="panel" style="margin-bottom:0"><span class="muted">No smart candidates yet</span></div></div></div></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Governance</strong><span class="muted">\u5F71\u5B50\u6821\u9A8C\u3001\u7EA7\u8054\u4E0E\u89C2\u6D4B\u76F8\u5173\u914D\u7F6E</span></div><div class="control-grid"><div><label><input id="governanceEnabled" type="checkbox"> Enabled</label></div><div><label><input id="governanceAlignmentEnabled" type="checkbox"> Alignment</label></div><div><label>Summarizer model</label><input id="governanceSummarizerModel" list="topLevelGovernanceSummarizerSuggestions" placeholder="modelId"><datalist id="topLevelGovernanceSummarizerSuggestions"></datalist></div><div><label><input id="governanceSemanticEnabled" type="checkbox"> Semantic</label></div><div><label>Classifier model</label><input id="governanceClassifierModel" list="topLevelGovernanceClassifierSuggestions" placeholder="modelId"><datalist id="topLevelGovernanceClassifierSuggestions"></datalist></div><div><label><input id="governanceShadowEnabled" type="checkbox"> Shadow</label></div><div><label>Verifier model</label><input id="governanceVerifierModel" list="topLevelGovernanceVerifierSuggestions" placeholder="modelId"><datalist id="topLevelGovernanceVerifierSuggestions"></datalist></div></div><div style="margin-top:.75rem"><div class="action-row"><label>Cascade levels</label><button id="addCascadeLevelBtn" type="button">\u65B0\u589E Level</button></div><div id="governanceCascadeLevelsList" class="list-editor"><div class="panel" style="margin-bottom:0"><span class="muted">No cascade levels yet</span></div></div></div></div></div></div><div class="alert info"><strong>Models field guide</strong><div class="muted">\u65B0\u914D\u7F6E\u8BF7\u4F7F\u7528\u5165\u53E3\u5B57\u6BB5\uFF1Aid / api / key / interface / model / thinking / metadata\uFF1Bapi_key / api_base_url / protocol \u4EC5\u4F5C\u4E3A\u65E7\u914D\u7F6E\u517C\u5BB9\u8BFB\u53D6\u3002</div></div><div id="modelsFormGrid" class="models-form-grid"><div class="panel" style="margin-bottom:0"><span class="muted">No draft models loaded yet</span></div></div><textarea id="configDraftEditor" aria-label="JSON config draft" style="width:100%;min-height:240px;margin-top:.75rem;padding:.75rem;border-radius:12px;border:1px solid #d1d5db;font:12px/1.5 ui-monospace,SFMono-Regular,monospace" spellcheck="false" placeholder='{"Models":[{"id":"sonnet","api":"https://...","key":"sk-...","interface":"openai","model":"anthropic/claude-sonnet-4","thinking":"auto","metadata":{"vendor_hint":"openrouter"}}],"Router":{"default":"sonnet"}}'></textarea><div class="muted">JSON \u8349\u7A3F\u540C\u6837\u5EFA\u8BAE\u53EA\u5199\u5165\u53E3\u5B57\u6BB5\uFF1B\u4FDD\u5B58\u65F6\u4F1A\u81EA\u52A8\u5F52\u4E00\uFF0C\u65E7\u5B57\u6BB5\u522B\u540D\u65E0\u9700\u624B\u52A8\u8865\u5145\u3002</div><div class="subpanel"><div class="row"><strong>Preview Diff</strong><span class="muted">\u5BF9\u6BD4\u5F53\u524D\u8FD0\u884C\u914D\u7F6E\u4E0E\u8349\u7A3F\u914D\u7F6E\u7684 compiled model \u53D8\u5316</span></div><div id="compiledDiffSummary" class="diff-summary"><div class="diff-chip"><span class="muted">Added providers</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Removed providers</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Changed providers</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Added models</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Removed models</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Changed models</span><strong>0</strong></div></div><table id="compiledDiffTable" class="management-table"><thead><tr><th>Scope</th><th>Type</th><th>Key</th><th>Changed fields</th><th>Target</th></tr></thead><tbody><tr><td colspan="5" class="muted">Preview a draft to inspect compiled registry changes</td></tr></tbody></table></div><div class="subpanel"><div class="row"><strong>Reference Impact</strong><span class="muted">\u5206\u6790 Router / SmartRouter / Governance\uFF08shadow/cascade\uFF09\u7B49 modelId \u5F15\u7528\u662F\u5426\u4ECD\u7136\u6709\u6548</span></div><div id="referenceImpactSummary" class="diff-summary"><div class="diff-chip"><span class="muted">Total refs</span><strong>0</strong></div><div class="diff-chip"><span class="muted">modelId refs</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Legacy refs</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Valid modelIds</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Missing modelIds</span><strong>0</strong></div></div><table id="referenceImpactTable" class="management-table"><thead><tr><th>Path</th><th>Ref</th><th>Type</th><th>Status</th><th>Resolved target</th><th>Suggestions</th></tr></thead><tbody><tr><td colspan="6" class="muted">Preview a draft to inspect model reference impact</td></tr></tbody></table></div></div><div class="subpanel"><div class="row"><strong>Compiled Models</strong><span class="muted">\u67E5\u770B Models \u7F16\u8BD1\u540E\u7684 provider \u4E0E\u8DEF\u7531\u6620\u5C04</span></div><div id="compiledModelsStatus" class="muted" style="margin-top:.75rem">\u52A0\u8F7D compiled models \u4E2D...</div><div class="detail-grid"><div class="panel" style="margin-bottom:0"><div class="row"><strong>Compiled providers</strong><span class="muted">\u5185\u90E8 provider\u3001\u6A21\u578B\u5217\u8868\u4E0E transformer</span></div><table id="compiledProvidersTable" class="management-table"><thead><tr><th>Provider</th><th>Interface</th><th>Models</th><th>Transformer</th><th>API key</th></tr></thead><tbody><tr><td colspan="5" class="muted">Loading compiled providers...</td></tr></tbody></table></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Model map</strong><span class="muted">modelId \u5230\u5185\u90E8 provider/model\u3001thinking \u4E0E capability \u914D\u7F6E</span></div><table id="compiledModelMapTable" class="management-table"><thead><tr><th>Model ID</th><th>Internal target</th><th>Protocol</th><th>Compatibility profile</th><th>Dispatch format</th><th>Thinking</th><th>Capabilities</th><th>Source</th></tr></thead><tbody><tr><td colspan="8" class="muted">Loading model map...</td></tr></tbody></table></div></div></div></div></section><section id="maintainerSurface" class="surface-panel" data-surface="maintainer" hidden><div class="panel"><div class="surface-heading"><strong>\u7EF4\u62A4\u8005\u5DE5\u4F5C\u53F0</strong><span class="muted">\u8FD0\u884C\u89C2\u6D4B\u3001Governance Trace\u3001metrics\u3001\u5F52\u6863\u4E0E\u7EF4\u62A4\u64CD\u4F5C\u3002</span></div><div class="row"><strong>\u7EF4\u62A4\u8005\u89C2\u6D4B</strong><span class="muted">\u6309 requestId / sessionKey / routeReason \u8FC7\u6EE4 Governance Trace\uFF0C\u5E76\u67E5\u770B\u8FD1\u671F\u6CBB\u7406\u6307\u6807\u3002</span></div><div class="row"><input id="requestId" placeholder="requestId"><input id="sessionKey" placeholder="sessionKey"><input id="routeReason" placeholder="routeReason"><select id="cascadeTriggered"><option value="">cascadeTriggered</option><option value="true">cascade=true</option><option value="false">cascade=false</option></select><select id="shadowChecked"><option value="">shadowChecked</option><option value="true">shadow=true</option><option value="false">shadow=false</option></select><select id="windowMs"><option value="900000">15m window</option><option value="3600000" selected>1h window</option><option value="21600000">6h window</option><option value="86400000">24h window</option></select><input id="limit" placeholder="limit" value="20"><button id="refreshBtn">\u5237\u65B0</button></div><div class="muted" style="margin-top:.75rem">\u6570\u636E\u6E90\uFF1A<code>/api/models/compiled</code>\u3001<code>/api/models/compiled/preview</code>\u3001<code>/api/governance/traces</code>\u3001<code>/api/governance/traces/:requestId</code>\u3001<code>/api/governance/archives</code>\u3001<code>/api/governance/metrics</code>\u3001<code>/api/governance/health</code>\u3001<code>/api/governance/metrics/export</code>\u3001<code>/api/governance/metrics/exports</code></div><div id="metricsGrid" class="stats"><div class="stat"><span class="muted">Health</span><strong>-</strong></div><div class="stat"><span class="muted">Recent traces</span><strong>-</strong></div><div class="stat"><span class="muted">Sticky hit rate</span><strong>-</strong></div><div class="stat"><span class="muted">Cascade rate</span><strong>-</strong></div><div class="stat"><span class="muted">Shadow rate</span><strong>-</strong></div><div class="stat"><span class="muted">Alignment rate</span><strong>-</strong></div><div class="stat"><span class="muted">Avg latency</span><strong>-</strong></div></div><div class="subpanel"><div class="row"><strong>Anomaly alerts</strong><span class="muted">\u68C0\u6D4B\u8FD1\u671F\u6CBB\u7406\u5F02\u5E38\u4E0E\u7A81\u589E</span></div><div id="healthSummary" class="alert info"><strong>Health pending</strong><div class="muted">\u7B49\u5F85\u6CBB\u7406\u5065\u5EB7\u6458\u8981\u52A0\u8F7D</div></div><div id="anomalyList" class="alert-list"><div class="alert info"><strong>No alerts yet</strong><div class="muted">\u7B49\u5F85\u6CBB\u7406\u6307\u6807\u52A0\u8F7D</div></div></div></div><div class="subpanel"><div class="row"><strong>Anomaly tuning</strong><span class="muted">\u6765\u81EA\u914D\u7F6E\u6587\u4EF6\uFF0C\u53EF\u5728\u6B64\u4E34\u65F6\u8986\u76D6\u5F53\u524D\u9875\u9762\u67E5\u8BE2</span></div><div class="control-grid"><div><label>Min sample</label><input id="minSampleSize" value="${escapedMinSampleSize}"></div><div><label>Cascade warn</label><input id="cascadeWarnRate" value="${escapedCascadeWarnRate}"></div><div><label>Shadow warn</label><input id="shadowWarnRate" value="${escapedShadowWarnRate}"></div><div><label>Latency warn ms</label><input id="latencyWarnMs" value="${escapedLatencyWarnMs}"></div></div><div class="row" style="margin-top:.75rem"><button id="saveThresholdsBtn" type="button">\u4FDD\u5B58\u9608\u503C\u5230\u914D\u7F6E</button><span id="saveThresholdsStatus" class="muted">\u5F53\u524D\u4EC5\u4F5C\u4E3A\u9875\u9762\u67E5\u8BE2\u53C2\u6570\uFF1B\u70B9\u51FB\u53EF\u5199\u56DE\u914D\u7F6E\u6587\u4EF6</span></div></div><div class="subpanel"><div class="row"><strong>Window buckets</strong><span id="bucketHint" class="muted">\u6309\u65F6\u95F4\u7A97\u67E5\u770B\u8FD1\u671F\u6CBB\u7406\u8D8B\u52BF</span></div><div id="bucketGrid" class="bucket-grid"><div class="stat"><span class="muted">Loading buckets</span><strong>-</strong></div></div></div><div class="detail-grid"><div class="panel" style="margin-bottom:0"><div class="row"><strong>Route ranking</strong><span class="muted">\u8FD1\u671F\u547D\u4E2D\u539F\u56E0 Top 5</span></div><ul id="routeRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Model ranking</strong><span class="muted">\u8FD1\u671F\u6700\u7EC8\u6A21\u578B Top 5</span></div><ul id="modelRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Intent ranking</strong><span class="muted">\u8FD1\u671F\u8BED\u4E49\u610F\u56FE Top 5</span></div><ul id="intentRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Trend detail</strong><span class="muted">\u6BCF\u4E2A bucket \u7684\u8BE6\u7EC6\u547D\u4E2D\u7387</span></div><table id="trendTable" class="trend-table"><thead><tr><th>Bucket</th><th>Traces</th><th>Sticky</th><th>Cascade</th><th>Shadow</th><th>Alignment</th></tr></thead><tbody><tr><td colspan="6" class="muted">Loading...</td></tr></tbody></table></div></div><table id="traceTable"><thead><tr><th>Request</th><th>Session</th><th>Final Model</th><th>Reasons</th><th>Latency</th><th>Inspect</th></tr></thead><tbody><tr><td colspan="6" class="muted">\u52A0\u8F7D\u4E2D...</td></tr></tbody></table></div><div class="panel"><div class="row"><strong>Trace Detail</strong><span id="detailHint" class="muted">\u70B9\u51FB\u4E0A\u8868\u4E2D\u7684 View \u67E5\u770B\u8BE6\u60C5</span></div><pre id="traceDetail">{}</pre></div><div class="panel"><div class="row"><strong>Snapshot Management</strong><span class="muted">\u67E5\u770B\u5BFC\u51FA\u5386\u53F2\u3001\u5B9A\u65F6\u4EFB\u52A1\uFF0C\u5E76\u624B\u52A8\u521B\u5EFA\u5FEB\u7167</span></div><div class="action-row"><select id="snapshotFormat"><option value="json">snapshot json</option><option value="csv">snapshot csv</option></select><button id="createSnapshotBtn" type="button">\u751F\u6210\u5FEB\u7167</button><span id="snapshotStatus" class="muted">\u5C1A\u672A\u521B\u5EFA\u5FEB\u7167</span></div><table id="exportTable" class="management-table"><thead><tr><th>Export</th><th>Kind</th><th>Format</th><th>Created</th></tr></thead><tbody><tr><td colspan="4" class="muted">Loading exports...</td></tr></tbody></table><table id="scheduleTable" class="management-table"><thead><tr><th>Schedule</th><th>Interval</th><th>Format</th><th>Last run</th></tr></thead><tbody><tr><td colspan="4" class="muted">Loading schedules...</td></tr></tbody></table></div><div class="panel"><div class="row"><strong>Archive Management</strong><span class="muted">\u6D4F\u89C8\u538B\u7F29\u5F52\u6863\u5E76\u67E5\u770B\u5206\u9875\u7ED3\u679C</span></div><div class="action-row"><input id="archiveDate" placeholder="YYYY-MM-DD"><input id="archivePage" placeholder="page" value="1"><input id="archivePageSize" placeholder="pageSize" value="5"><button id="loadArchivesBtn" type="button">\u52A0\u8F7D\u5F52\u6863</button><span id="archiveStatus" class="muted">\u5C1A\u672A\u52A0\u8F7D\u5F52\u6863</span></div><table id="archiveTable" class="management-table"><thead><tr><th>Archive</th><th>Range</th><th>Count</th><th>Compressed</th></tr></thead><tbody><tr><td colspan="4" class="muted">Loading archives...</td></tr></tbody></table></div><div class="panel"><p>\u5176\u4ED6\u7BA1\u7406 API\uFF1A</p><ul><li><code>GET /api/config</code> \u2014 \u8BFB\u53D6\u5F53\u524D\u914D\u7F6E</li><li><code>GET /api/models/compiled</code> \u2014 \u67E5\u770B Models \u7F16\u8BD1\u540E\u7684\u5185\u90E8 provider / model \u6620\u5C04</li><li><code>POST /api/models/compiled/preview</code> \u2014 \u7528\u914D\u7F6E\u8349\u7A3F\u9884\u89C8 compiled models \u7ED3\u679C\uFF0C\u4E0D\u5199\u56DE\u6587\u4EF6</li><li><code>POST /api/config</code> \u2014 \u4FDD\u5B58\u914D\u7F6E</li><li><code>GET /api/transformers</code> \u2014 \u67E5\u770B\u5DF2\u52A0\u8F7D transformer</li><li><code>POST /api/restart</code> \u2014 \u91CD\u542F\u670D\u52A1</li><li><code>GET /api/governance/archives</code> \u2014 \u67E5\u770B\u6CBB\u7406\u5F52\u6863\u5217\u8868</li><li><code>GET /api/governance/archives/:file</code> \u2014 \u67E5\u770B\u5F52\u6863\u5185 traces</li><li><code>POST /api/governance/archives/:file/delete</code> \u2014 \u5220\u9664\u6307\u5B9A\u5F52\u6863</li><li><code>GET /api/governance/health</code> \u2014 \u67E5\u770B\u6CBB\u7406\u5065\u5EB7\u6458\u8981</li><li><code>POST /api/governance/metrics/snapshots</code> \u2014 \u751F\u6210\u4E00\u6B21\u6CBB\u7406\u6307\u6807\u5FEB\u7167</li><li><code>POST /api/governance/metrics/schedules</code> \u2014 \u6CE8\u518C\u5B9A\u65F6\u5FEB\u7167\u4EFB\u52A1</li></ul></div></section><script>const tbody=document.querySelector('#traceTable tbody');const detail=document.getElementById('traceDetail');const detailHint=document.getElementById('detailHint');const draftPreviewStatus=document.getElementById('draftPreviewStatus');const draftPresetMode=document.getElementById('draftPresetMode');const draftPresetModeHint=document.getElementById('draftPresetModeHint');const draftPresetList=document.getElementById('draftPresetList');const draftPreviewMeta=document.getElementById('draftPreviewMeta');const draftValidationList=document.getElementById('draftValidationList');const capabilityWarningsList=document.getElementById('capabilityWarningsList');const configDraftEditor=document.getElementById('configDraftEditor');const draftSummaryGrid=document.getElementById('draftSummaryGrid');const modelsFormGrid=document.getElementById('modelsFormGrid');const draftRouterDefault=document.getElementById('draftRouterDefault');const draftModelsCount=document.getElementById('draftModelsCount');const serviceReadyStatus=document.getElementById('serviceReadyStatus');const servicePortStatus=document.getElementById('servicePortStatus');const serviceModeStatus=document.getElementById('serviceModeStatus');const serviceRoleStatus=document.getElementById('serviceRoleStatus');const remoteStatusSummary=document.getElementById('remoteStatusSummary');const registrationStatusSummary=document.getElementById('registrationStatusSummary');const modelCountStatus=document.getElementById('modelCountStatus');const routerDefaultStatus=document.getElementById('routerDefaultStatus');const triggerEnabled=document.getElementById('triggerEnabled');const triggerIntentEnabled=document.getElementById('triggerIntentEnabled');const triggerAnalysisScope=document.getElementById('triggerAnalysisScope');const triggerIntentModel=document.getElementById('triggerIntentModel');const triggerRulesList=document.getElementById('triggerRulesList');const smartEnabled=document.getElementById('smartEnabled');const smartRouterModel=document.getElementById('smartRouterModel');const smartFallback=document.getElementById('smartFallback');const smartCacheTtl=document.getElementById('smartCacheTtl');const smartMaxTokens=document.getElementById('smartMaxTokens');const smartCandidatesList=document.getElementById('smartCandidatesList');const governanceEnabled=document.getElementById('governanceEnabled');const governanceAlignmentEnabled=document.getElementById('governanceAlignmentEnabled');const governanceSummarizerModel=document.getElementById('governanceSummarizerModel');const governanceSemanticEnabled=document.getElementById('governanceSemanticEnabled');const governanceClassifierModel=document.getElementById('governanceClassifierModel');const governanceShadowEnabled=document.getElementById('governanceShadowEnabled');const governanceVerifierModel=document.getElementById('governanceVerifierModel');const governanceCascadeLevelsList=document.getElementById('governanceCascadeLevelsList');const topLevelTriggerIntentSuggestions=document.getElementById('topLevelTriggerIntentSuggestions');const topLevelSmartRouterSuggestions=document.getElementById('topLevelSmartRouterSuggestions');const topLevelGovernanceSummarizerSuggestions=document.getElementById('topLevelGovernanceSummarizerSuggestions');const topLevelGovernanceClassifierSuggestions=document.getElementById('topLevelGovernanceClassifierSuggestions');const topLevelGovernanceVerifierSuggestions=document.getElementById('topLevelGovernanceVerifierSuggestions');const compiledModelsStatus=document.getElementById('compiledModelsStatus');const compiledDiffSummary=document.getElementById('compiledDiffSummary');const compiledDiffTableBody=document.querySelector('#compiledDiffTable tbody');const referenceImpactSummary=document.getElementById('referenceImpactSummary');const referenceImpactTableBody=document.querySelector('#referenceImpactTable tbody');const compiledProvidersTableBody=document.querySelector('#compiledProvidersTable tbody');const compiledModelMapTableBody=document.querySelector('#compiledModelMapTable tbody');const metricsGrid=document.getElementById('metricsGrid');const bucketGrid=document.getElementById('bucketGrid');const bucketHint=document.getElementById('bucketHint');const routeRanking=document.getElementById('routeRanking');const modelRanking=document.getElementById('modelRanking');const intentRanking=document.getElementById('intentRanking');const healthSummary=document.getElementById('healthSummary');const anomalyList=document.getElementById('anomalyList');const saveThresholdsStatus=document.getElementById('saveThresholdsStatus');const snapshotStatus=document.getElementById('snapshotStatus');const archiveStatus=document.getElementById('archiveStatus');const exportTableBody=document.querySelector('#exportTable tbody');const scheduleTableBody=document.querySelector('#scheduleTable tbody');const archiveTableBody=document.querySelector('#archiveTable tbody');const trendTableBody=document.querySelector('#trendTable tbody');const surfaceTabs=Array.from(document.querySelectorAll('[data-surface-target]'));const surfacePanels=Array.from(document.querySelectorAll('[data-surface]'));let currentDraftConfig={};let knownModelIds=[];let activeValidationHighlight=null;const draftPresets={  balanced:{ label:'\u5E73\u8861\u9884\u8BBE', description:'\u542F\u7528 SmartRouter\uFF0C\u5E76\u586B\u5145\u5E73\u8861/\u5FEB\u901F\u5019\u9009\u6A21\u578B\u7EC4\u5408\u3002', affects:['Router.default','SmartRouter.enabled','SmartRouter.candidates'], routerDefault:'sonnet', smartEnabled:true, smartCandidates:[{ model:'sonnet', description:'balanced default' },{ model:'haiku', description:'fast lightweight' }] },  fast:{ label:'\u5FEB\u901F\u9884\u8BBE', description:'\u9ED8\u8BA4\u8D70\u8F7B\u91CF\u6A21\u578B\uFF0C\u5E76\u6DFB\u52A0\u4E00\u6761\u5FEB\u901F\u54CD\u5E94\u8DEF\u7531\u89C4\u5219\u3002', affects:['Router.default','SmartRouter.enabled','SmartRouter.rules'], routerDefault:'haiku', triggerEnabled:true, triggerRules:[{ name:'quick-response', enabled:true, priority:20, model:'haiku', patterns:[{ type:'exact', keywords:['\u5FEB\u901F\u5904\u7406','\u5FEB\u901F\u56DE\u7B54'] }] }] },  governance:{ label:'\u6CBB\u7406\u9884\u8BBE', description:'\u6253\u5F00\u6CBB\u7406\u589E\u5F3A\u4E0E\u6821\u9A8C\u80FD\u529B\uFF0C\u5E76\u586B\u5165 summarizer/classifier/verifier \u793A\u4F8B\u6A21\u578B\u3002', affects:['Governance.enabled','SmartRouter.sticky.alignment','SmartRouter.semantic','Governance.shadow'], governanceEnabled:true, governanceAlignmentEnabled:true, governanceSemanticEnabled:true, governanceShadowEnabled:true, governanceSummarizerModel:'sonnet', governanceClassifierModel:'sonnet', governanceVerifierModel:'haiku' }};const modelProviderTemplates=${toInlineScriptJson(getUiProviderTemplates())};const defaultProviderTemplateKey='openrouter';function esc(v){return String(v ?? '').replace(/[&<>"]/g,m=>({ '&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;' }[m]));}function pct(v){return (Number(v || 0) * 100).toFixed(1)+'%';}function fmt(v){return Number(v || 0).toFixed(2);}function shortTime(v){ const d=new Date(v); return d.toISOString().slice(11,16); }function setActiveSurface(surfaceName){  surfacePanels.forEach((panel)=>{ panel.hidden=panel.dataset.surface !== surfaceName; });  surfaceTabs.forEach((tab)=>{ const active=tab.dataset.surfaceTarget === surfaceName; tab.classList.toggle('active',active); tab.setAttribute('aria-selected', active ? 'true' : 'false'); });}function inferProviderTemplateKey(model){  const explicit=String(model?.provider_template || '').trim();  if(explicit && modelProviderTemplates[explicit]){ return explicit; }  const api=String(model?.api || model?.api_base_url || '').trim().toLowerCase();  const modelInterface=String(model?.interface || model?.protocol || '').trim().toLowerCase();  const exactMatch=Object.entries(modelProviderTemplates).find(([,item])=>String(item.api || '').trim().toLowerCase()===api && String(item.interface || '').trim().toLowerCase()===modelInterface);  if(exactMatch){ return exactMatch[0]; }  if(api.includes('api.anthropic.com/v1/messages') || modelInterface === 'anthropic'){ return 'anthropic'; }  if(api.includes('openrouter.ai')){ return 'openrouter'; }  if(api.includes('deepseek.com')){ return 'deepseek'; }  if(api.includes('siliconflow.cn')){ return 'siliconflow'; }  if(api.includes('api.openai.com')){ return 'openai-compatible'; }  return '';}function getProviderTemplateContext(model){  const templateKey=inferProviderTemplateKey(model) || defaultProviderTemplateKey;  return { templateKey, template:modelProviderTemplates[templateKey] || modelProviderTemplates[defaultProviderTemplateKey] || {} };}function createDraftModelFromTemplate(templateKey){  const resolvedKey=(templateKey && modelProviderTemplates[templateKey]) ? templateKey : defaultProviderTemplateKey;  const template=modelProviderTemplates[resolvedKey] || {};  return { provider_template:resolvedKey, id:template.suggested_id || '', api:template.api || '', interface:template.interface || 'openai', model:template.default_model || '', thinking:template.default_thinking || 'auto' };}function getModelIdSuggestionsMarkup(idPrefix){  return '<datalist id="'+idPrefix+'">'+knownModelIds.map(modelId=>'<option value="'+esc(modelId)+'"></option>').join('')+'</datalist>';}function resolvePresetModelId(seed){  const source=String(seed || '').trim().toLowerCase();  if(!source || !knownModelIds.length){ return seed; }  if(knownModelIds.includes(seed)){ return seed; }  const ranked=knownModelIds.map((modelId)=>{    const target=String(modelId || '').toLowerCase();    let score=0;    if(target===source){ score+=100; }    if(target.includes(source) || source.includes(target)){ score+=40; }    source.split(/[^a-z0-9]+/).filter(Boolean).forEach((part)=>{ if(target.includes(part)){ score+=Math.min(part.length * 4, 24); } });    return { modelId, score };  }).filter((item)=>item.score>0).sort((a,b)=>b.score-a.score || a.modelId.localeCompare(b.modelId));  return ranked.length ? ranked[0].modelId : seed;}function getTriggerPatternValidationHint(pattern){  if((pattern?.type || 'exact') === 'regex'){    return pattern?.pattern ? { level:'ok', message:'regex pattern \u5DF2\u914D\u7F6E' } : { level:'warn', message:'regex \u6A21\u5F0F\u9700\u8981\u586B\u5199 pattern' };  }  return Array.isArray(pattern?.keywords) && pattern.keywords.some((keyword)=>String(keyword || '').trim()) ? { level:'ok', message:'exact keywords \u5DF2\u914D\u7F6E' } : { level:'warn', message:'exact \u6A21\u5F0F\u81F3\u5C11\u9700\u8981\u4E00\u4E2A keyword' };}function getDraftSmartRouterConfig(config){  const smart={ ...((config && config.SmartRouter) || {}) };  const smartExplicit=config && Object.prototype.hasOwnProperty.call(config,'SmartRouter');  const legacyIntentEnabled=Boolean(config?.TriggerRouter?.llm_intent_recognition);  const legacyIntentModel=config?.TriggerRouter?.intent_model || '';  if(!smart.analysis_scope && config?.TriggerRouter?.analysis_scope){ smart.analysis_scope=config.TriggerRouter.analysis_scope; }  if((!Array.isArray(smart.rules) || !smart.rules.length) && Array.isArray(config?.TriggerRouter?.rules)){ smart.rules=config.TriggerRouter.rules; }  if(!smart.semantic && (config?.Governance?.semantic || config?.TriggerRouter?.llm_intent_recognition)){ smart.semantic={ ...((config && config.Governance && config.Governance.semantic) || {}) }; if(config?.TriggerRouter?.llm_intent_recognition){ smart.semantic.enabled=true; smart.semantic.mode=smart.semantic.mode || 'classifier'; smart.semantic.classifier_model=smart.semantic.classifier_model || config.TriggerRouter.intent_model || ''; } }  if(!smart.sticky && config?.Governance?.sticky){ smart.sticky={ ...(config.Governance.sticky || {}) }; }  if(!smartExplicit && !smart.enabled && (config?.TriggerRouter?.enabled || smart.rules?.length || smart.router_model || smart.candidates?.length || smart.semantic || smart.sticky)){ smart.enabled=true; }  if(smart.enabled){    smart.analysis_scope=smart.analysis_scope || 'last_message';    smart.semantic={ ...(smart.semantic || {}) };    smart.semantic.enabled=smart.semantic.enabled !== undefined ? smart.semantic.enabled : true;    smart.semantic.threshold=smart.semantic.threshold !== undefined ? smart.semantic.threshold : 0.2;    if(legacyIntentEnabled){ smart.semantic.mode=smart.semantic.mode || 'classifier'; smart.semantic.classifier_model=smart.semantic.classifier_model || legacyIntentModel; }    smart.sticky={ ...(smart.sticky || {}) };    smart.sticky.enabled=smart.sticky.enabled !== undefined ? smart.sticky.enabled : true;    smart.sticky.alignment={ ...((smart.sticky && smart.sticky.alignment) || {}) };    smart.sticky.alignment.enabled=smart.sticky.alignment.enabled !== undefined ? smart.sticky.alignment.enabled : true;    smart.sticky.alignment.summarizer_model=smart.sticky.alignment.summarizer_model || smart.router_model || config?.Router?.default || legacyIntentModel || '';  }  return smart;}function renderDraftSummary(config){  const models=Array.isArray(config?.Models) ? config.Models : [];  const smart=getDraftSmartRouterConfig(config);  const triggerRules=Array.isArray(smart?.rules) ? smart.rules : [];  const patternCount=triggerRules.reduce((sum,rule)=>sum + (Array.isArray(rule.patterns) ? rule.patterns.length : 0),0);  const smartCandidates=Array.isArray(smart?.candidates) ? smart.candidates : [];  const cascadeLevels=Array.isArray(config?.Governance?.cascade?.levels) ? config.Governance.cascade.levels : [];  const modelRefCount=[config?.Router?.default, smart?.router_model, smart?.sticky?.alignment?.summarizer_model, smart?.semantic?.classifier_model, config?.Governance?.shadow?.verifier_model].filter(v=>typeof v === 'string' && v.trim()).length + triggerRules.filter(rule=>rule?.model).length + smartCandidates.filter(item=>item?.model).length + cascadeLevels.reduce((sum,level)=>sum + (level?.from ? 1 : 0) + (level?.to ? 1 : 0), 0);  draftSummaryGrid.innerHTML=[    ['Models', models.length],    ['Routing rules', triggerRules.length],    ['Patterns', patternCount],    ['Smart candidates', smartCandidates.length],    ['Cascade levels', cascadeLevels.length],    ['Model refs', modelRefCount]  ].map(([label,value])=>'<div class="stat"><span class="muted">'+esc(label)+'</span><strong>'+esc(value)+'</strong></div>').join('');}function updateStatusSummary(config){  const models=Array.isArray(config?.Models) ? config.Models : [];  modelCountStatus.textContent=String(models.length);  routerDefaultStatus.textContent=config?.Router?.default || '-';}function renderDraftValidation(errors,warnings,issueReport){  const errorList=Array.isArray(errors) ? errors.filter(Boolean) : [];  const warningList=Array.isArray(warnings) ? warnings.filter(Boolean) : [];  const contractIssues=Array.isArray(issueReport?.issues) ? issueReport.issues : [];  if(!errorList.length && !warningList.length && !contractIssues.length){ draftValidationList.innerHTML='<div class="alert info"><strong>No validation issues</strong><div class="muted">\u5F53\u524D\u8349\u7A3F\u672A\u53D1\u73B0\u96C6\u4E2D\u5C55\u793A\u7684\u95EE\u9898</div></div>'; return; }  const extractPath=(text)=>{ const match=String(text).match(/^(Models(?:\\[[0-9]+\\])?(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?|Router(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?|TriggerRouter(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?|SmartRouter(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?|Governance(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?)/); return match ? match[1] : ''; };  const sourceItems=contractIssues.length ? contractIssues.map(item=>({ text:String(item.message || ''), severity:item.severity==='error' ? 'error' : 'warning', path:item.path || '', action:item.action || '' })) : [...errorList.map(item=>({ text:String(item), severity:'error', path:'', action:'' })), ...warningList.map(item=>({ text:String(item), severity:'warning', path:'', action:'' }))];  const grouped=sourceItems.reduce((acc,item)=>{    const text=item.text;    const path=item.path || extractPath(text);    const bucket=path.startsWith('Models') || text.startsWith('Models') ? 'Models' : path.startsWith('Router') || text.startsWith('Router') ? 'Router' : path.startsWith('TriggerRouter') || text.startsWith('TriggerRouter') ? 'SmartRouter' : path.startsWith('SmartRouter') || text.startsWith('SmartRouter') ? 'SmartRouter' : (path.startsWith('Governance.sticky') || path.startsWith('Governance.semantic') || text.startsWith('Governance.sticky') || text.startsWith('Governance.semantic')) ? 'SmartRouter' : path.startsWith('Governance') || text.startsWith('Governance') ? 'Governance' : text.startsWith('JSON parse error') ? 'Draft JSON' : 'Other';    acc[bucket]=acc[bucket] || [];    acc[bucket].push({ text, path, severity:item.severity, action:item.action || '' });    return acc;  }, {});  const errorCount=contractIssues.length ? contractIssues.filter(item=>item.severity==='error').length : errorList.length;  const warningCount=contractIssues.length ? contractIssues.filter(item=>item.severity!=='error').length : warningList.length;  const summary='<div class="alert info"><div class="row"><strong>Validation summary</strong><span class="pill">'+esc(errorCount)+' errors / '+esc(warningCount)+' warnings</span></div><div class="muted">'+(errorCount ? '\u8BF7\u4F18\u5148\u4FEE\u590D errors\uFF0C\u518D\u51B3\u5B9A\u662F\u5426\u63A5\u53D7 warnings\u3002' : '\u5F53\u524D\u65E0\u963B\u65AD\u9519\u8BEF\uFF0C\u53EF\u6309\u9700\u5904\u7406 warnings\u3002')+'</div></div>';  draftValidationList.innerHTML=summary + Object.entries(grouped).map(([bucket,items])=>{ const hasError=items.some(item=>item.severity==='error'); const levelClass=hasError ? 'warn' : 'info'; const actionLabel=hasError ? 'repair first' : 'review before save'; return '<div class="alert '+levelClass+'"><div class="row"><strong>'+esc(bucket)+'</strong><span class="pill">'+esc(items.length)+' issues</span></div><div class="muted">'+esc(actionLabel)+'</div><div>'+items.slice(0,4).map(item=>'<div>'+(item.path ? ('<button type="button" class="pill" data-validation-path="'+esc(item.path)+'">'+esc(item.path)+'</button> ') : '')+'<span class="pill">'+esc(item.severity==='error' ? 'error' : 'warning')+'</span> '+esc(item.text)+(item.action ? ('<div class="muted">Action: '+esc(item.action)+'</div>') : '')+'</div>').join('')+'</div></div>'; }).join('');}function getCapabilityWarningActionLabel(code){  if(code==='thinking_ignored'){ return '\u79FB\u9664 thinking'; }  if(code==='tools_text_fallback' || code==='images_text_fallback'){ return '\u6062\u590D\u9ED8\u8BA4 capability'; }  return '';}function renderCapabilityWarnings(report){  const entries=Array.isArray(report?.entries) ? report.entries : [];  if(!entries.length){ capabilityWarningsList.innerHTML='<div class="alert info"><strong>No capability warnings</strong><div class="muted">\u5F53\u524D compiled models \u672A\u53D1\u73B0\u9700\u8981\u989D\u5916\u63D0\u793A\u7684\u80FD\u529B\u964D\u7EA7</div></div>'; return; }  const summary=report?.summary || {};  capabilityWarningsList.innerHTML='<div class="alert info"><strong>Capability warning summary</strong><div class="muted">warn '+esc(summary.warn ?? 0)+' / info '+esc(summary.info ?? 0)+' / total '+esc(summary.total ?? entries.length)+'</div></div>' + entries.map(item=>{ const actionLabel=getCapabilityWarningActionLabel(item.code); return '<div class="alert '+esc(item.level === 'warn' ? 'warn' : 'info')+'"><div class="row"><strong>'+esc(item.code || item.level || 'warning')+'</strong><span class="pill">'+esc(item.modelId || '-').trim()+'</span></div><div>'+(item.path ? ('<button type="button" class="pill" data-validation-path="'+esc(item.path)+'">'+esc(item.path)+'</button> ') : '')+esc(item.message || '')+'</div>'+(actionLabel ? ('<div class="row" style="margin-top:.5rem"><button type="button" data-apply-warning-path="'+esc(item.path || '')+'" data-apply-warning-code="'+esc(item.code || '')+'">'+esc(actionLabel)+'</button></div>') : '')+'</div>'; }).join('');}function findValidationTarget(path){  if(!path){ return null; }  if(path.startsWith('Models')){ return modelsFormGrid; }  if(path === 'Router.default'){ return draftRouterDefault; }  if(path.startsWith('TriggerRouter.intent_model')){ return triggerIntentModel; }  if(path.startsWith('TriggerRouter.rules[')){ return triggerRulesList; }  if(path.startsWith('SmartRouter.router_model')){ return smartRouterModel; }  if(path.startsWith('SmartRouter.candidates[')){ return smartCandidatesList; }  if(path.startsWith('Governance.cascade.levels[')){ return governanceCascadeLevelsList; }  if(path.startsWith('Governance.sticky.alignment')){ return governanceSummarizerModel; }  if(path.startsWith('Governance.semantic')){ return governanceClassifierModel; }  if(path.startsWith('Governance.shadow')){ return governanceVerifierModel; }  if(path.startsWith('Governance')){ return governanceEnabled; }  return null;}function jumpToValidationPath(path){  const target=findValidationTarget(path);  if(!target || typeof target.scrollIntoView !== 'function'){ return; }  if(activeValidationHighlight && activeValidationHighlight.classList){ activeValidationHighlight.classList.remove('jump-highlight'); }  target.scrollIntoView({ behavior:'smooth', block:'center' });  if(target.classList){ target.classList.add('jump-highlight'); activeValidationHighlight=target; setTimeout(()=>{ if(target.classList){ target.classList.remove('jump-highlight'); if(activeValidationHighlight===target){ activeValidationHighlight=null; } } }, 1800); }  if(typeof target.focus === 'function'){ target.focus({ preventScroll:true }); }}function renderDraftPresetModeHint(){  const overwriteMode=draftPresetMode.value === 'replace';  draftPresetModeHint.textContent=overwriteMode ? 'overwrite \u4F1A\u91CD\u7F6E SmartRouter / Governance \u76F8\u5173\u8868\u5355\uFF0C\u518D\u5E94\u7528\u9884\u8BBE' : 'append / merge \u4F1A\u5C3D\u91CF\u4FDD\u7559\u5F53\u524D\u8349\u7A3F\uFF0C\u4EC5\u8865\u5145 SmartRouter / Governance \u76F8\u5173\u5B57\u6BB5';}function deriveActualAffectedAreas(preview){  const areas=new Set();  const diff=preview?.diff || {};  const impact=preview?.referenceImpact || {};  if((diff.providerChanges || []).length || (diff.modelChanges || []).length){ areas.add('Models'); }  (impact.entries || []).forEach((entry)=>{    const path=String(entry.path || '');    if(path.startsWith('Router.')){ areas.add('Router'); }    else if(path.startsWith('TriggerRouter.')){ areas.add('SmartRouter'); }    else if(path.startsWith('SmartRouter.')){ areas.add('SmartRouter'); }    else if(path.startsWith('Governance.sticky') || path.startsWith('Governance.semantic')){ areas.add('SmartRouter'); }    else if(path.startsWith('Governance.')){ areas.add('Governance'); }  });  return Array.from(areas);}function renderDraftPreviewMeta(meta){  if(!meta){ draftPreviewMeta.innerHTML='<div class="alert info"><strong>Draft preview mode</strong><div class="muted">\u5F53\u524D\u663E\u793A\u4E3A\u8349\u7A3F\u7F16\u8F91\u89C6\u56FE\uFF0C\u9884\u8BBE dry-run \u4F1A\u5728\u8FD9\u91CC\u63D0\u793A\u5F71\u54CD\u8303\u56F4\u3002</div></div>'; return; }  draftPreviewMeta.innerHTML='<div class="alert info"><strong>'+esc(meta.title || 'Preset dry-run')+'</strong><div>'+esc(meta.description || '')+'</div><div class="muted">\u6A21\u5F0F\uFF1A'+esc(meta.mode || '-')+' \xB7 \u9884\u8BBE\u58F0\u660E\u5F71\u54CD\u8303\u56F4\uFF1A'+esc((meta.affects || []).join(' / ') || '-')</div><div class="muted">\u5B9E\u9645\u9884\u89C8\u547D\u4E2D\u533A\u57DF\uFF1A'+esc((meta.actualAffects || []).join(' / ') || '-')</div></div>';}function renderDraftPresetGuide(){  draftPresetList.innerHTML=Object.entries(draftPresets).map(([key,preset])=>'<div class="alert info"><strong>'+esc(preset.label || key)+'</strong><div>'+esc(preset.description || '')+'</div><div class="muted">\u5F71\u54CD\u8303\u56F4\uFF1A'+esc((preset.affects || []).join(' / '))+'</div></div>').join('');}function updateTopLevelModelSuggestionLists(){  const markup=knownModelIds.map(modelId=>'<option value="'+esc(modelId)+'"></option>').join('');  [topLevelTriggerIntentSuggestions,topLevelSmartRouterSuggestions,topLevelGovernanceSummarizerSuggestions,topLevelGovernanceClassifierSuggestions,topLevelGovernanceVerifierSuggestions].forEach(node=>{ if(node){ node.innerHTML=markup; } });}function renderModelsForm(models){  const list=Array.isArray(models) ? models : [];  draftModelsCount.value=String(list.length);  if(!list.length){ modelsFormGrid.innerHTML='<div class="panel" style="margin-bottom:0"><span class="muted">No draft models loaded yet</span></div>'; return; }  modelsFormGrid.innerHTML=list.map((model,index)=>{ const templateContext=getProviderTemplateContext(model); const template=templateContext.template; return '<div class="model-card" data-model-card="'+index+'">' +    '<div class="model-card-header"><strong>Model #'+(index+1)+'</strong><button type="button" data-remove-model="'+index+'">\u5220\u9664</button></div>' +    '<div class="model-card-grid">' +      '<div><label>Provider template</label><div class="row"><select data-field="provider_template" data-index="'+index+'"><option value="">custom</option>'+Object.entries(modelProviderTemplates).map(([key,item])=>'<option value="'+esc(key)+'"'+(model.provider_template === key ? ' selected' : '')+'>'+esc(item.label)+'</option>').join('')+'</select><button type="button" data-apply-template="'+index+'">\u5E94\u7528</button></div></div>' +      '<div><label>ID</label><input data-field="id" data-index="'+index+'" value="'+esc(model.id || '')+'" placeholder="'+esc(template.suggested_id || 'sonnet')+'"><div class="muted">Router.default \u548C\u8DEF\u7531\u89C4\u5219\u5F15\u7528\u8FD9\u4E2A model id\uFF1B\u5EFA\u8BAE\u6A21\u677F\uFF1A'+esc(template.label || templateContext.templateKey || 'custom')+'</div></div>' +      '<div><label>Interface</label><select data-field="interface" data-index="'+index+'"><option value="openai"'+(((model.interface || model.protocol || 'openai') === 'openai') ? ' selected' : '')+'>openai</option><option value="anthropic"'+(((model.interface || model.protocol) === 'anthropic') ? ' selected' : '')+'>anthropic</option></select><div class="muted">\u65B0\u914D\u7F6E\u4F7F\u7528 interface\uFF1B\u65E7 protocol \u4F1A\u81EA\u52A8\u8BFB\u53D6\u4E3A\u517C\u5BB9\u503C\u3002</div></div>' +      '<div><label>Model</label><input data-field="model" data-index="'+index+'" list="modelSuggestions'+index+'" value="'+esc(model.model || '')+'" placeholder="'+esc(template.default_model || 'anthropic/claude-sonnet-4')+'"><datalist id="modelSuggestions'+index+'">'+((template.model_examples || []).map(item=>'<option value="'+esc(item)+'"></option>').join(''))+'</datalist><div class="muted">\u4E0A\u6E38\u771F\u5B9E\u6A21\u578B\u540D\uFF0C\u4F8B\u5982\uFF1A'+esc((template.model_examples || ['anthropic/claude-sonnet-4']).join(' / '))+'</div></div>' +      '<div><label>API</label><input data-field="api" data-index="'+index+'" value="'+esc(model.api || model.api_base_url || '')+'" placeholder="'+esc(template.api || 'https://...')+'"><div class="muted">\u65B0\u914D\u7F6E\u4F7F\u7528 api\uFF1B\u65E7 api_base_url \u4EC5\u7528\u4E8E\u517C\u5BB9\u8BFB\u53D6\u3002</div></div>' +      '<div><label>Key</label><input data-field="key" data-index="'+index+'" value="'+esc(model.key || model.api_key || '')+'" placeholder="'+esc(template.key_placeholder || 'sk-...')+'"><div class="muted">\u65B0\u914D\u7F6E\u4F7F\u7528 key\uFF1B\u65E7 api_key \u4EC5\u7528\u4E8E\u517C\u5BB9\u8BFB\u53D6\u3002</div></div>' +      '<div><label>Thinking</label><select data-field="thinking_profile" data-index="'+index+'"><option value="">default</option><option value="off"'+(((model.thinking === 'off') || model.thinking?.mode === 'off') ? ' selected' : '')+'>off</option><option value="auto"'+(((model.thinking === 'auto') || model.thinking?.mode === 'auto') ? ' selected' : '')+'>auto</option><option value="on"'+(((model.thinking === 'on') || (model.thinking?.mode === 'on' && !model.thinking?.effort)) ? ' selected' : '')+'>on</option><option value="low"'+(((model.thinking === 'low') || (model.thinking?.mode === 'on' && model.thinking?.effort === 'low' && !model.thinking?.budget_tokens)) ? ' selected' : '')+'>low</option><option value="medium"'+(((model.thinking === 'medium') || (model.thinking?.mode === 'on' && model.thinking?.effort === 'medium' && !model.thinking?.budget_tokens)) ? ' selected' : '')+'>medium</option><option value="high"'+(((model.thinking === 'high') || (model.thinking?.mode === 'on' && model.thinking?.effort === 'high' && !model.thinking?.budget_tokens)) ? ' selected' : '')+'>high</option><option value="custom"'+(((typeof model.thinking === 'object') && model.thinking && model.thinking.budget_tokens) ? ' selected' : '')+'>custom</option></select></div>' +      '<div><label>Thinking mode</label><select data-field="thinking_mode" data-index="'+index+'"><option value="">default</option><option value="off"'+(model.thinking?.mode === 'off' ? ' selected' : '')+'>off</option><option value="auto"'+(model.thinking?.mode === 'auto' ? ' selected' : '')+'>auto</option><option value="on"'+(model.thinking?.mode === 'on' ? ' selected' : '')+'>on</option></select></div>' +      '<div><label>Thinking effort</label><select data-field="thinking_effort" data-index="'+index+'"><option value="">default</option><option value="low"'+(model.thinking?.effort === 'low' ? ' selected' : '')+'>low</option><option value="medium"'+(model.thinking?.effort === 'medium' ? ' selected' : '')+'>medium</option><option value="high"'+(model.thinking?.effort === 'high' ? ' selected' : '')+'>high</option></select></div>' +      '<div><label>Thinking budget</label><input data-field="thinking_budget_tokens" data-index="'+index+'" value="'+esc(model.thinking?.budget_tokens || '')+'" placeholder="1024"></div>' +      '<div><label>Vendor hint</label><input data-field="vendor_hint" data-index="'+index+'" value="'+esc(model.metadata?.vendor_hint || '')+'" placeholder="'+esc(template.vendor_hint || 'openrouter')+'"></div>' +      '<div><label>Reasoning support</label><select data-field="supports_reasoning" data-index="'+index+'"><option value="">default</option><option value="true"'+(model.metadata?.supports_reasoning === true ? ' selected' : '')+'>supported</option><option value="false"'+(model.metadata?.supports_reasoning === false ? ' selected' : '')+'>disabled</option></select></div>' +      '<div><label>Tool support</label><select data-field="supports_tools" data-index="'+index+'"><option value="">default</option><option value="true"'+(model.metadata?.supports_tools === true ? ' selected' : '')+'>supported</option><option value="false"'+(model.metadata?.supports_tools === false ? ' selected' : '')+'>disabled</option></select></div>' +      '<div><label>Image support</label><select data-field="supports_images" data-index="'+index+'"><option value="">default</option><option value="true"'+(model.metadata?.supports_images === true ? ' selected' : '')+'>supported</option><option value="false"'+(model.metadata?.supports_images === false ? ' selected' : '')+'>disabled</option></select></div>' +      '<div style="grid-column:1/-1"><label>Metadata (advanced JSON)</label><textarea data-field="metadata" data-index="'+index+'" placeholder="{\\"label\\":\\"Balanced profile\\"}">'+esc(model.metadata ? JSON.stringify(model.metadata, null, 2) : '')+'</textarea><div class="muted">\u666E\u901A capability \u5EFA\u8BAE\u4F18\u5148\u4F7F\u7528\u4E0A\u9762\u7684\u663E\u5F0F\u5B57\u6BB5\uFF1B\u8FD9\u91CC\u4FDD\u7559\u7ED9\u9AD8\u7EA7\u6269\u5C55\u5143\u6570\u636E\u3002</div></div>' +    '</div>' +  '</div>'; }).join('');}function extractModelsFromForm(){  const cards=Array.from(modelsFormGrid.querySelectorAll('[data-model-card]'));  return cards.map((card,index)=>{    const read=(field)=>card.querySelector('[data-field="'+field+'"][data-index="'+index+'"]');    const providerTemplate=(read('provider_template')?.value || '').trim();    const metadataRaw=(read('metadata')?.value || '').trim();    let metadata;    if(metadataRaw){ metadata=JSON.parse(metadataRaw); } else { metadata={}; }    const thinkingProfile=(read('thinking_profile')?.value || '').trim();    const vendorHint=(read('vendor_hint')?.value || '').trim();    const supportsReasoning=(read('supports_reasoning')?.value || '').trim();    const supportsTools=(read('supports_tools')?.value || '').trim();    const supportsImages=(read('supports_images')?.value || '').trim();    const thinking={};    const mode=(read('thinking_mode')?.value || '').trim();    const effort=(read('thinking_effort')?.value || '').trim();    const budget=(read('thinking_budget_tokens')?.value || '').trim();    if(mode) thinking.mode=mode;    if(effort) thinking.effort=effort;    if(budget) thinking.budget_tokens=Number(budget);    const model={      id:(read('id')?.value || '').trim(),      api:(read('api')?.value || '').trim(),      key:(read('key')?.value || '').trim(),      interface:(read('interface')?.value || '').trim(),      model:(read('model')?.value || '').trim(),    };    if(vendorHint){ metadata.vendor_hint=vendorHint; } else if(metadata && Object.prototype.hasOwnProperty.call(metadata,'vendor_hint')){ delete metadata.vendor_hint; }    if(supportsReasoning){ metadata.supports_reasoning=supportsReasoning === 'true'; } else if(metadata && Object.prototype.hasOwnProperty.call(metadata,'supports_reasoning')){ delete metadata.supports_reasoning; }    if(supportsTools){ metadata.supports_tools=supportsTools === 'true'; } else if(metadata && Object.prototype.hasOwnProperty.call(metadata,'supports_tools')){ delete metadata.supports_tools; }    if(supportsImages){ metadata.supports_images=supportsImages === 'true'; } else if(metadata && Object.prototype.hasOwnProperty.call(metadata,'supports_images')){ delete metadata.supports_images; }    if(providerTemplate){ model.provider_template=providerTemplate; }    if(thinkingProfile && thinkingProfile !== 'custom'){ model.thinking=thinkingProfile; } else if(Object.keys(thinking).length){ model.thinking=thinking; }    if(metadata !== undefined && Object.keys(metadata).length){ model.metadata=metadata; }    return model;  });}function applyProviderTemplate(index){  const card=modelsFormGrid.querySelector('[data-model-card="'+index+'"]');  if(!card){ return; }  const templateKey=(card.querySelector('[data-field="provider_template"][data-index="'+index+'"]')?.value || '').trim();  const template=modelProviderTemplates[templateKey];  if(!template){ return; }  const modelInterface=card.querySelector('[data-field="interface"][data-index="'+index+'"]');  const apiBaseUrl=card.querySelector('[data-field="api"][data-index="'+index+'"]');  const modelInput=card.querySelector('[data-field="model"][data-index="'+index+'"]');  if(modelInterface){ modelInterface.value=template.interface || template.protocol; }  if(apiBaseUrl && !apiBaseUrl.value.trim()){ apiBaseUrl.value=template.api || template.api_base_url; } else if(apiBaseUrl){ apiBaseUrl.value=template.api || template.api_base_url; }  if(modelInput){ modelInput.placeholder=template.default_model || modelInput.placeholder; if(!modelInput.value.trim() && template.default_model){ modelInput.value=template.default_model; } }  const modelIdInput=card.querySelector('[data-field="id"][data-index="'+index+'"]');  if(modelIdInput){ modelIdInput.placeholder=template.suggested_id || modelIdInput.placeholder; if(!modelIdInput.value.trim() && template.suggested_id){ modelIdInput.value=template.suggested_id; } }  const keyInput=card.querySelector('[data-field="key"][data-index="'+index+'"]');  if(keyInput && template.key_placeholder){ keyInput.placeholder=template.key_placeholder; }  const vendorHintInput=card.querySelector('[data-field="vendor_hint"][data-index="'+index+'"]');  if(vendorHintInput && template.vendor_hint){ vendorHintInput.placeholder=template.vendor_hint; }  const thinkingProfile=card.querySelector('[data-field="thinking_profile"][data-index="'+index+'"]');  if(thinkingProfile && !thinkingProfile.value && template.default_thinking){ thinkingProfile.value=template.default_thinking; }  const nextModels=extractModelsFromForm();  if(nextModels[index]){ nextModels[index]={ ...nextModels[index], provider_template: templateKey }; }  renderModelsForm(nextModels);}function renderTriggerRulesList(rules){  const list=Array.isArray(rules) ? rules : [];  if(!list.length){ triggerRulesList.innerHTML='<div class="panel" style="margin-bottom:0"><span class="muted">No routing rules yet</span></div>'; return; }  triggerRulesList.innerHTML=list.map((rule,index)=>'<div class="list-item" data-trigger-rule="'+index+'">' +    '<div class="action-row"><strong>Rule #'+(index+1)+'</strong><button type="button" data-remove-trigger-rule="'+index+'">\u5220\u9664</button></div>' +    '<div class="list-item-grid">' +      '<div><label>Name</label><input data-trigger-field="name" data-index="'+index+'" value="'+esc(rule.name || '')+'"></div>' +      '<div><label>Model</label><input data-trigger-field="model" data-index="'+index+'" list="triggerModelSuggestions'+index+'" value="'+esc(rule.model || '')+'">'+getModelIdSuggestionsMarkup('triggerModelSuggestions'+index)+'</div>' +      '<div><label>Priority</label><input data-trigger-field="priority" data-index="'+index+'" value="'+esc(rule.priority ?? 10)+'"></div>' +      '<div><label><input type="checkbox" data-trigger-field="enabled" data-index="'+index+'"'+(rule.enabled === false ? '' : ' checked')+'> Enabled</label></div>' +      '<div style="grid-column:1/-1"><label>Description</label><input data-trigger-field="description" data-index="'+index+'" value="'+esc(rule.description || '')+'"></div>' +    '</div>' +    '<div class="action-row" style="margin-top:.75rem"><strong>Patterns</strong><button type="button" data-add-trigger-pattern="'+index+'">\u65B0\u589E Pattern</button></div>' +    '<div class="list-editor">'+(((rule.patterns || []).length ? rule.patterns : [{ type:'exact', keywords:[] }]).map((pattern,patternIndex)=>'<div class="list-item" data-trigger-pattern="'+index+'-'+patternIndex+'">' +      '<div class="action-row"><span class="muted">Pattern #'+(patternIndex+1)+'</span><span class="pill">'+esc(pattern.type || 'exact')+'</span><span class="muted">'+esc(getTriggerPatternValidationHint(pattern).message)+'</span><button type="button" data-remove-trigger-pattern="'+index+'" data-pattern-index="'+patternIndex+'">\u5220\u9664</button></div>' +      '<div class="list-item-grid">' +        '<div><label>Type</label><select data-trigger-pattern-field="type" data-index="'+index+'" data-pattern-index="'+patternIndex+'"><option value="exact"'+(pattern.type !== 'regex' ? ' selected' : '')+'>exact</option><option value="regex"'+(pattern.type === 'regex' ? ' selected' : '')+'>regex</option></select></div>' +        '<div><label><input type="checkbox" data-trigger-pattern-field="caseSensitive" data-index="'+index+'" data-pattern-index="'+patternIndex+'"'+(pattern.caseSensitive ? ' checked' : '')+'> Case sensitive</label></div>' +        '<div style="grid-column:1/-1"><div class="action-row"><label>Keywords</label><button type="button" data-add-trigger-keyword="'+index+'" data-pattern-index="'+patternIndex+'"'+(pattern.type === 'regex' ? ' disabled' : '')+'>\u65B0\u589E Keyword</button></div><div class="list-editor">'+((((pattern.keywords || []).length ? pattern.keywords : ['']).map((keyword,keywordIndex)=>'<div class="list-item" data-trigger-keyword="'+index+'-'+patternIndex+'-'+keywordIndex+'"><div class="action-row"><span class="muted">Keyword #'+(keywordIndex+1)+'</span><button type="button" data-remove-trigger-keyword="'+index+'" data-pattern-index="'+patternIndex+'" data-keyword-index="'+keywordIndex+'"'+(pattern.type === 'regex' ? ' disabled' : '')+'>\u5220\u9664</button></div><input data-trigger-pattern-field="keyword_item" data-index="'+index+'" data-pattern-index="'+patternIndex+'" data-keyword-index="'+keywordIndex+'" value="'+esc(keyword || '')+'" placeholder="keyword"'+(pattern.type === 'regex' ? ' disabled' : '')+'></div>')).join(''))+'</div><div class="muted">'+(pattern.type === 'regex' ? 'regex \u6A21\u5F0F\u4E0B\u5FFD\u7565 keywords' : 'exact \u6A21\u5F0F\u4E0B\u6309\u5173\u952E\u8BCD\u5217\u8868\u5339\u914D')+'</div></div>' +        '<div style="grid-column:1/-1"><label>Regex pattern</label><input data-trigger-pattern-field="pattern" data-index="'+index+'" data-pattern-index="'+patternIndex+'" value="'+esc(pattern.pattern || '')+'" placeholder="error|exception"'+(pattern.type === 'regex' ? '' : ' disabled')+'><div class="muted">'+(pattern.type === 'regex' ? 'regex \u6A21\u5F0F\u4E0B\u4F7F\u7528\u6B63\u5219\u8868\u8FBE\u5F0F\u5339\u914D' : 'exact \u6A21\u5F0F\u4E0B\u5FFD\u7565 regex pattern')+'</div></div>' +      '</div>' +    '</div>').join(''))+'</div>' +  '</div>').join('');}function extractTriggerRulesFromForm(){  return Array.from(triggerRulesList.querySelectorAll('[data-trigger-rule]')).map((card,index)=>{    const read=(field)=>card.querySelector('[data-trigger-field="'+field+'"][data-index="'+index+'"]');    const patterns=Array.from(card.querySelectorAll('[data-trigger-pattern]')).map((patternCard,patternIndex)=>{      const patternRead=(field)=>patternCard.querySelector('[data-trigger-pattern-field="'+field+'"][data-index="'+index+'"][data-pattern-index="'+patternIndex+'"]');      const type=(patternRead('type')?.value || 'exact').trim();      const pattern={ type, caseSensitive:Boolean(patternRead('caseSensitive')?.checked) };      const keywords=Array.from(patternCard.querySelectorAll('[data-trigger-pattern-field="keyword_item"][data-index="'+index+'"][data-pattern-index="'+patternIndex+'"]')).map((node)=>node.value.trim()).filter(Boolean);      const regexPattern=(patternRead('pattern')?.value || '').trim();      if(type === 'regex'){ if(regexPattern){ pattern.pattern=regexPattern; } } else if(keywords.length){ pattern.keywords=keywords; }      return pattern;    });    const rule={ name:(read('name')?.value || '').trim(), model:(read('model')?.value || '').trim(), priority:Number(read('priority')?.value || 10), enabled:Boolean(read('enabled')?.checked), patterns };    const description=(read('description')?.value || '').trim(); if(description){ rule.description=description; } return rule;  });}function renderSmartCandidatesList(candidates){  const list=Array.isArray(candidates) ? candidates : [];  if(!list.length){ smartCandidatesList.innerHTML='<div class="panel" style="margin-bottom:0"><span class="muted">No smart candidates yet</span></div>'; return; }  smartCandidatesList.innerHTML=list.map((candidate,index)=>'<div class="list-item" data-smart-candidate="'+index+'">' +    '<div class="action-row"><strong>Candidate #'+(index+1)+'</strong><button type="button" data-remove-smart-candidate="'+index+'">\u5220\u9664</button></div>' +    '<div class="list-item-grid">' +      '<div><label>Model</label><input data-smart-field="model" data-index="'+index+'" list="smartModelSuggestions'+index+'" value="'+esc(candidate.model || '')+'">'+getModelIdSuggestionsMarkup('smartModelSuggestions'+index)+'</div>' +      '<div style="grid-column:1/-1"><label>Description</label><input data-smart-field="description" data-index="'+index+'" value="'+esc(candidate.description || '')+'"></div>' +    '</div>' +  '</div>').join('');}function extractSmartCandidatesFromForm(){  return Array.from(smartCandidatesList.querySelectorAll('[data-smart-candidate]')).map((card,index)=>{    const read=(field)=>card.querySelector('[data-smart-field="'+field+'"][data-index="'+index+'"]');    return { model:(read('model')?.value || '').trim(), description:(read('description')?.value || '').trim() };  });}function renderCascadeLevelsList(levels){  const list=Array.isArray(levels) ? levels : [];  if(!list.length){ governanceCascadeLevelsList.innerHTML='<div class="panel" style="margin-bottom:0"><span class="muted">No cascade levels yet</span></div>'; return; }  governanceCascadeLevelsList.innerHTML=list.map((level,index)=>'<div class="list-item" data-cascade-level="'+index+'">' +    '<div class="action-row"><strong>Level #'+(index+1)+'</strong><button type="button" data-remove-cascade-level="'+index+'">\u5220\u9664</button></div>' +    '<div class="list-item-grid">' +      '<div><label>From</label><input data-cascade-field="from" data-index="'+index+'" list="cascadeFromSuggestions'+index+'" value="'+esc(level.from || '')+'">'+getModelIdSuggestionsMarkup('cascadeFromSuggestions'+index)+'</div>' +      '<div><label>To</label><input data-cascade-field="to" data-index="'+index+'" list="cascadeToSuggestions'+index+'" value="'+esc(level.to || '')+'">'+getModelIdSuggestionsMarkup('cascadeToSuggestions'+index)+'</div>' +      '<div style="grid-column:1/-1"><label>Reason</label><input data-cascade-field="reason" data-index="'+index+'" value="'+esc(level.reason || '')+'"></div>' +    '</div>' +  '</div>').join('');}function extractCascadeLevelsFromForm(){  return Array.from(governanceCascadeLevelsList.querySelectorAll('[data-cascade-level]')).map((card,index)=>{    const read=(field)=>card.querySelector('[data-cascade-field="'+field+'"][data-index="'+index+'"]');    const level={ from:(read('from')?.value || '').trim(), to:(read('to')?.value || '').trim() };    const reason=(read('reason')?.value || '').trim(); if(reason){ level.reason=reason; } return level;  });}function buildDraftPayloadFromForm(){  const payload=JSON.parse(JSON.stringify(currentDraftConfig || {}));  payload.Models=extractModelsFromForm();  const routerDefault=(draftRouterDefault.value || '').trim();  if(routerDefault){ payload.Router={ ...(payload.Router || {}), default: routerDefault }; }  else if(payload.Router){ delete payload.Router.default; if(!Object.keys(payload.Router).length){ delete payload.Router; } }  const triggerRules=extractTriggerRulesFromForm();  const smartCandidates=extractSmartCandidatesFromForm();  const smartRouterEnabled=Boolean(smartEnabled.checked || triggerEnabled.checked || triggerIntentEnabled.checked || triggerIntentModel.value.trim() || triggerRules.length || smartRouterModel.value.trim() || smartCandidates.length || smartCacheTtl.value.trim() || smartMaxTokens.value.trim() || governanceAlignmentEnabled.checked || governanceSummarizerModel.value.trim() || governanceSemanticEnabled.checked || governanceClassifierModel.value.trim());  if(smartRouterEnabled){ payload.SmartRouter={ ...(payload.SmartRouter || {}), enabled: true, analysis_scope: triggerAnalysisScope.value || payload.SmartRouter?.analysis_scope || 'last_message', router_model: smartRouterModel.value.trim(), fallback: smartFallback.value || 'default', candidates: smartCandidates, cache_ttl: smartCacheTtl.value.trim() ? Number(smartCacheTtl.value.trim()) : undefined, max_tokens: smartMaxTokens.value.trim() ? Number(smartMaxTokens.value.trim()) : undefined, rules: triggerRules, semantic:(governanceSemanticEnabled.checked || triggerIntentEnabled.checked || governanceClassifierModel.value.trim() || triggerIntentModel.value.trim()) ? { ...(((payload.SmartRouter || {}).semantic) || {}), enabled:Boolean(governanceSemanticEnabled.checked || triggerIntentEnabled.checked), mode:'classifier', classifier_model: governanceClassifierModel.value.trim() || triggerIntentModel.value.trim() } : undefined, sticky:(governanceAlignmentEnabled.checked || governanceSummarizerModel.value.trim()) ? { ...(((payload.SmartRouter || {}).sticky) || {}), enabled:true, alignment:{ ...((((payload.SmartRouter || {}).sticky || {}).alignment) || {}), enabled:Boolean(governanceAlignmentEnabled.checked), summarizer_model: governanceSummarizerModel.value.trim() } } : undefined }; } else { delete payload.SmartRouter; }  delete payload.TriggerRouter;  const cascadeLevels=extractCascadeLevelsFromForm();  if(governanceEnabled.checked || governanceShadowEnabled.checked || governanceVerifierModel.value.trim() || cascadeLevels.length){ payload.Governance={ ...(payload.Governance || {}), enabled: governanceEnabled.checked, shadow:{ ...((payload.Governance && payload.Governance.shadow) || {}), enabled: governanceShadowEnabled.checked, verifier_model: governanceVerifierModel.value.trim() }, cascade:{ ...((payload.Governance && payload.Governance.cascade) || {}), enabled: Boolean(cascadeLevels.length), levels: cascadeLevels } }; } else { delete payload.Governance; }  return payload;}function renderConfigControlForms(config){  const smart=getDraftSmartRouterConfig(config);  const trigger=config?.TriggerRouter || {};  triggerEnabled.checked=Boolean(smart.enabled);  triggerIntentEnabled.checked=Boolean(smart.semantic?.enabled && smart.semantic?.mode === 'classifier');  triggerAnalysisScope.value=smart.analysis_scope || 'last_message';  triggerIntentModel.value=smart.semantic?.classifier_model || trigger.intent_model || '';  renderTriggerRulesList(smart.rules || trigger.rules || []);  smartEnabled.checked=Boolean(smart.enabled);  smartRouterModel.value=smart.router_model || '';  smartFallback.value=smart.fallback || 'default';  smartCacheTtl.value=smart.cache_ttl ?? '';  smartMaxTokens.value=smart.max_tokens ?? '';  renderSmartCandidatesList(smart.candidates || []);  const governance=config?.Governance || {};  governanceEnabled.checked=Boolean(governance.enabled);  governanceAlignmentEnabled.checked=Boolean(smart.sticky?.alignment?.enabled);  governanceSummarizerModel.value=smart.sticky?.alignment?.summarizer_model || '';  governanceSemanticEnabled.checked=Boolean(smart.semantic?.enabled);  governanceClassifierModel.value=smart.semantic?.classifier_model || '';  governanceShadowEnabled.checked=Boolean(governance.shadow?.enabled);  governanceVerifierModel.value=governance.shadow?.verifier_model || '';  renderCascadeLevelsList(governance.cascade?.levels || []);}function syncDraftEditorFromForm(){  try {    const payload=buildDraftPayloadFromForm();    currentDraftConfig=payload;    configDraftEditor.value=JSON.stringify(payload,null,2);    renderDraftSummary(payload);    renderDraftValidation([],[]);    renderCapabilityWarnings();    renderDraftPreviewMeta();    draftPreviewStatus.textContent='\u5DF2\u540C\u6B65 Models \u8868\u5355\u5230 JSON \u8349\u7A3F';  } catch (error) {    draftPreviewStatus.textContent='\u540C\u6B65\u5931\u8D25\uFF1A'+error.message;  }}function applyReferenceSuggestion(path,modelId){  if(!modelId){ return; }  if(path==='Router.default'){ draftRouterDefault.value=modelId; syncDraftEditorFromForm(); draftPreviewStatus.textContent='\u5DF2\u5C06\u5EFA\u8BAE\u6A21\u578B\u5E94\u7528\u5230 Router.default'; return; }  const payload=JSON.parse(JSON.stringify(currentDraftConfig || {}));  const pathMatch=path.match(/^([^.[]+)(?:.(.+))?$/);  if(!pathMatch){ draftPreviewStatus.textContent='\u6682\u4E0D\u652F\u6301\u81EA\u52A8\u4FEE\u590D\uFF1A'+path; return; }  const tokens=path.replace(/[(d+)]/g,'.$1').split('.');  let cursor=payload;  for(let i=0;i<tokens.length-1;i++){    const token=tokens[i];    const nextToken=tokens[i+1];    if(cursor[token] === undefined){ cursor[token]=String(Number(nextToken))===nextToken ? [] : {}; }    cursor=cursor[token];  }  cursor[tokens[tokens.length-1]]=modelId;  currentDraftConfig=payload;  if(payload.Router?.default){ draftRouterDefault.value=payload.Router.default; }  renderConfigControlForms(payload);  configDraftEditor.value=JSON.stringify(payload,null,2);  renderDraftSummary(payload);  renderDraftValidation([],[]);  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u5DF2\u5C06\u5EFA\u8BAE\u6A21\u578B\u5E94\u7528\u5230 '+path+'\uFF0C\u53EF\u91CD\u65B0\u9884\u89C8\u9A8C\u8BC1';}function applyCapabilityWarningSuggestion(path,code){  const payload=JSON.parse(JSON.stringify(currentDraftConfig || {}));  const tokens=String(path || '').replace(/[(d+)]/g,'.$1').split('.').filter(Boolean);  if(!tokens.length){ draftPreviewStatus.textContent='\u6682\u4E0D\u652F\u6301\u81EA\u52A8\u4FEE\u590D\u8BE5 warning'; return; }  let cursor=payload;  for(let i=0;i<tokens.length-1;i++){ if(cursor == null){ break; } cursor=cursor[tokens[i]]; }  const lastToken=tokens[tokens.length-1];  if(code==='thinking_ignored'){    if(cursor && Object.prototype.hasOwnProperty.call(cursor,lastToken)){ delete cursor[lastToken]; }  } else if(code==='tools_text_fallback' || code==='images_text_fallback'){    if(cursor && Object.prototype.hasOwnProperty.call(cursor,lastToken)){ delete cursor[lastToken]; }    if(cursor && !Object.keys(cursor).length){      const parentTokens=tokens.slice(0,-1);      const maybeMetadataKey=parentTokens[parentTokens.length-1];      if(maybeMetadataKey==='metadata'){        let parentCursor=payload;        for(let i=0;i<parentTokens.length-1;i++){ if(parentCursor == null){ break; } parentCursor=parentCursor[parentTokens[i]]; }        if(parentCursor && Object.prototype.hasOwnProperty.call(parentCursor,'metadata')){ delete parentCursor.metadata; }      }    }  } else {    draftPreviewStatus.textContent='\u6682\u4E0D\u652F\u6301\u81EA\u52A8\u4FEE\u590D\u8BE5 warning';    return;  }  currentDraftConfig=payload;  renderModelsForm(payload.Models || []);  renderConfigControlForms(payload);  draftRouterDefault.value=payload.Router?.default || '';  configDraftEditor.value=JSON.stringify(payload,null,2);  renderDraftSummary(payload);  renderDraftValidation([],[]);  renderCapabilityWarnings();  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u5DF2\u5E94\u7528 warning \u4FEE\u6B63\uFF1A'+code+'\uFF0C\u53EF\u91CD\u65B0\u9884\u89C8\u9A8C\u8BC1';}function renderCompiledDiff(diff){  const summary=diff?.summary || {};  compiledDiffSummary.innerHTML=[    ['Added providers', summary.addedProviders ?? 0],    ['Removed providers', summary.removedProviders ?? 0],    ['Changed providers', summary.changedProviders ?? 0],    ['Added models', summary.addedModels ?? 0],    ['Removed models', summary.removedModels ?? 0],    ['Changed models', summary.changedModels ?? 0]  ].map(([label,value])=>'<div class="diff-chip"><span class="muted">'+esc(label)+'</span><strong>'+esc(value)+'</strong></div>').join('');  const rows=[    ...((diff?.providerChanges || []).map(item=>({ scope:'provider', key:item.name, type:item.type, fields:item.fields || [], target:item.after || item.before || {} }))),    ...((diff?.modelChanges || []).map(item=>({ scope:'model', key:item.modelId, type:item.type, fields:item.fields || [], target:item.after || item.before || {} }))),  ];  compiledDiffTableBody.innerHTML=rows.length ? rows.map(item=>'<tr>' +    '<td>'+esc(item.scope)+'</td>' +    '<td>'+esc(item.type)+'</td>' +    '<td><code>'+esc(item.key)+'</code></td>' +    '<td>'+esc(item.fields.join(', ') || '-')+'</td>' +    '<td><code>'+esc(item.target.providerName || item.target.name || '-')+'</code><div class="muted">'+esc(item.target.modelName || (item.target.models || []).join(', ') || '-')}</div></td>' +  '</tr>').join('') : '<tr><td colspan="5" class="muted">No compiled registry changes</td></tr>';}function renderReferenceImpact(impact){  const summary=impact?.summary || {};  referenceImpactSummary.innerHTML=[    ['Total refs', summary.total ?? 0],    ['modelId refs', summary.modelIdRefs ?? 0],    ['Legacy refs', summary.legacyRefs ?? 0],    ['Valid modelIds', summary.validModelIds ?? 0],    ['Missing modelIds', summary.missingModelIds ?? 0]  ].map(([label,value])=>'<div class="diff-chip"><span class="muted">'+esc(label)+'</span><strong>'+esc(value)+'</strong></div>').join('');  const entries=impact?.entries || [];  referenceImpactTableBody.innerHTML=entries.length ? entries.map(item=>'<tr>' +    '<td><code>'+esc(item.path)+'</code></td>' +    '<td><code>'+esc(item.value)+'</code></td>' +    '<td>'+esc(item.referenceType)+'</td>' +    '<td>'+esc(item.status)+'</td>' +    '<td><code>'+esc(item.resolvedTarget?.providerName || '-')+'</code><div class="muted">'+esc(item.resolvedTarget?.modelName || '-')}</div></td>' +    '<td>'+((item.suggestions || []).length ? item.suggestions.map(s=>'<div><code>'+esc(s.modelId)+'</code><div class="muted">'+esc(s.modelName || '-')+'</div><button type="button" data-apply-reference-path="'+esc(item.path)+'" data-apply-reference-model="'+esc(s.modelId)+'">\u5E94\u7528\u5EFA\u8BAE</button></div>').join('') : '<span class="muted">-</span>')+'</td>' +  '</tr>').join('') : '<tr><td colspan="6" class="muted">No model references found</td></tr>';}function renderCompiledModels(data){  const providers=Array.isArray(data.providers) ? data.providers : [];  const modelMapEntries=Object.entries(data.modelMap || {});  knownModelIds=modelMapEntries.map(([modelId])=>modelId).sort();  updateTopLevelModelSuggestionLists();  renderCapabilityWarnings(data.capabilityWarnings);  compiledModelsStatus.textContent='\u5DF2\u52A0\u8F7D '+providers.length+' \u4E2A compiled provider / '+modelMapEntries.length+' \u4E2A modelId \u6620\u5C04';  compiledProvidersTableBody.innerHTML=providers.length ? providers.map(provider=>'<tr>' +    '<td><code>'+esc(provider.name)+'</code><div class="muted">'+esc(provider.api_base_url || '-')+'</div></td>' +    '<td>'+esc(provider.transformer?.use?.[0] || '-')+'</td>' +    '<td>'+esc((provider.models || []).join(', ') || '-')+'</td>' +    '<td>'+esc(JSON.stringify(provider.transformer || {}))+'</td>' +    '<td>'+esc(provider.has_api_key ? 'configured' : 'missing')+'</td>' +  '</tr>').join('') : '<tr><td colspan="5" class="muted">No compiled providers</td></tr>';  compiledModelMapTableBody.innerHTML=modelMapEntries.length ? modelMapEntries.map(([modelId,item])=>'<tr>' +    '<td><code>'+esc(modelId)+'</code></td>' +    '<td><code>'+esc(item.providerName || '-')+'</code><div class="muted">'+esc(item.modelName || '-')+'</div></td>' +    '<td>'+esc(item.protocol || '-')+'</td>' +    '<td>'+esc(item.compatibilityProfile || '-')+'</td>' +    '<td>'+esc(item.dispatchFormat || '-')+'</td>' +    '<td><code>'+esc(JSON.stringify(item.thinking || { mode: 'off' }))+'</code></td>' +    '<td><code>'+esc(JSON.stringify(item.capabilities || {}))+'</code></td>' +    '<td>'+esc(item.source || '-')+'</td>' +  '</tr>').join('') : '<tr><td colspan="8" class="muted">No compiled model map</td></tr>';  if(data.diff){ renderCompiledDiff(data.diff); }  if(data.referenceImpact){ renderReferenceImpact(data.referenceImpact); }  renderConfigControlForms(currentDraftConfig);}async function loadConfigDraft(){  draftPreviewStatus.textContent='\u52A0\u8F7D\u5F53\u524D\u914D\u7F6E\u4E2D...';  const res=await fetch('/api/config');  const data=await res.json();  currentDraftConfig=data || {};  renderModelsForm(currentDraftConfig.Models || []);  renderConfigControlForms(currentDraftConfig);  draftRouterDefault.value=currentDraftConfig.Router?.default || '';  configDraftEditor.value=JSON.stringify(data,null,2);  renderDraftSummary(currentDraftConfig);  updateStatusSummary(currentDraftConfig);  renderDraftValidation([],[]);  renderCapabilityWarnings();  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u5DF2\u8F7D\u5165\u5F53\u524D\u914D\u7F6E\uFF0C\u53EF\u901A\u8FC7 Models \u8868\u5355\u6216 JSON \u8349\u7A3F\u7F16\u8F91';}async function previewConfigDraft(){  let payload;  try {    payload=buildDraftPayloadFromForm();    configDraftEditor.value=JSON.stringify(payload,null,2);  } catch (error) {    renderDraftValidation(['JSON parse error: '+error.message],[]);    renderCapabilityWarnings();    renderDraftPreviewMeta();    draftPreviewStatus.textContent='\u8349\u7A3F\u89E3\u6790\u5931\u8D25\uFF1A'+error.message;    return;  }  draftPreviewStatus.textContent='\u9884\u89C8\u7F16\u8BD1\u7ED3\u679C\u4E2D...';  const res=await fetch('/api/models/compiled/preview',{    method:'POST',    headers:{'Content-Type':'application/json'},    body:JSON.stringify(payload)  });  const data=await res.json();  if(!res.ok){    draftPreviewStatus.textContent='\u9884\u89C8\u5931\u8D25\uFF1A'+((data.errors || []).join('; ') || data.message || 'unknown error');    renderDraftValidation(data.errors || [data.message || 'unknown error'], data.warnings || [], data.issueReport);    renderCapabilityWarnings(data.capabilityWarnings);    renderCompiledDiff();    renderReferenceImpact(data.referenceImpact);    renderDraftPreviewMeta();    return;  }  renderDraftValidation([], data.warnings || [], data.issueReport);  renderCompiledModels(data);  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u9884\u89C8\u5B8C\u6210\uFF1A\u5DF2\u6309\u8349\u7A3F\u914D\u7F6E\u5237\u65B0 compiled models';}async function loadServiceStatus(){  serviceReadyStatus.textContent='checking';  try {    const [serviceRes,remoteRes]=await Promise.all([fetch('/api/service-info'),fetch('/api/remote-status')]);    const data=await serviceRes.json();    const remoteData=await remoteRes.json();    serviceReadyStatus.textContent=data.ready ? 'ready' : 'not ready';    servicePortStatus.textContent=data.port || '-';    serviceModeStatus.textContent=data.runtimeMode || '-';    serviceRoleStatus.textContent=data.serviceRole || '-';    const registration=data.registration || {};    registrationStatusSummary.textContent=registration.enabled ? ((registration.models ?? 0)+' models / '+(registration.upstreamServices ?? 0)+' upstream') : 'disabled';    const remote=remoteData.remote || {};    remoteStatusSummary.textContent=remote.enabled ? ((remote.ready ? 'ready' : (remote.reachable ? 'reachable' : 'unreachable'))+' \xB7 '+(remote.baseUrl || '-')) : 'disabled';    if(remoteData.compiledModels){ modelCountStatus.textContent=remoteData.compiledModels.modelCount ?? modelCountStatus.textContent; }  } catch (_error) {    serviceReadyStatus.textContent='unreachable';    remoteStatusSummary.textContent='unknown';  }}async function saveConfigDraft(){  let payload;  try {    payload=buildDraftPayloadFromForm();    configDraftEditor.value=JSON.stringify(payload,null,2);  } catch (error) {    renderDraftValidation(['JSON parse error: '+error.message],[]);    renderCapabilityWarnings();    draftPreviewStatus.textContent='\u4FDD\u5B58\u5931\u8D25\uFF1A'+error.message;    return;  }  draftPreviewStatus.textContent='\u4FDD\u5B58\u914D\u7F6E\u4E2D...';  const res=await fetch('/api/config',{ method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(payload) });  const data=await res.json();  renderDraftValidation(data.errors || [], data.warnings || [], data.issueReport);  if(!res.ok){    draftPreviewStatus.textContent='\u4FDD\u5B58\u5931\u8D25\uFF1A'+((data.errors || []).join('; ') || data.message || 'unknown error');    return;  }  currentDraftConfig=payload;  await loadCompiledModels();  draftPreviewStatus.textContent='\u5DF2\u4FDD\u5B58\u914D\u7F6E'+((data.warnings || []).length ? ('\uFF08\u542B '+data.warnings.length+' \u6761 warning\uFF09') : '');}function addDraftModel(){  const nextModels=extractModelsFromForm();  nextModels.push(createDraftModelFromTemplate(defaultProviderTemplateKey));  renderModelsForm(nextModels);  syncDraftEditorFromForm();}function addTriggerRule(){ const next=extractTriggerRulesFromForm(); next.push({ name:'', enabled:true, priority:10, model:'', patterns:[{ type:'exact', keywords:[] }] }); renderTriggerRulesList(next); syncDraftEditorFromForm(); }function addTriggerPattern(ruleIndex){ const next=extractTriggerRulesFromForm(); if(!next[ruleIndex]){ return; } next[ruleIndex].patterns = Array.isArray(next[ruleIndex].patterns) ? next[ruleIndex].patterns : []; next[ruleIndex].patterns.push({ type:'exact', keywords:[] }); renderTriggerRulesList(next); syncDraftEditorFromForm(); }function addTriggerKeyword(ruleIndex,patternIndex){ const next=extractTriggerRulesFromForm(); if(!next[ruleIndex] || !next[ruleIndex].patterns || !next[ruleIndex].patterns[patternIndex]){ return; } const pattern=next[ruleIndex].patterns[patternIndex]; pattern.keywords=Array.isArray(pattern.keywords) ? pattern.keywords : []; pattern.keywords.push(''); renderTriggerRulesList(next); syncDraftEditorFromForm(); }function addSmartCandidate(){ const next=extractSmartCandidatesFromForm(); next.push({ model:'', description:'' }); renderSmartCandidatesList(next); syncDraftEditorFromForm(); }function addCascadeLevel(){ const next=extractCascadeLevelsFromForm(); next.push({ from:'', to:'' }); renderCascadeLevelsList(next); syncDraftEditorFromForm(); }modelsFormGrid.addEventListener('input',()=>syncDraftEditorFromForm());modelsFormGrid.addEventListener('change',()=>syncDraftEditorFromForm());modelsFormGrid.addEventListener('click',(e)=>{ const applyBtn=e.target.closest('button[data-apply-template]'); if(applyBtn){ const applyIndex=Number(applyBtn.dataset.applyTemplate); applyProviderTemplate(applyIndex); syncDraftEditorFromForm(); return; } const btn=e.target.closest('button[data-remove-model]'); if(!btn){ return; } const removeIndex=Number(btn.dataset.removeModel); const nextModels=extractModelsFromForm().filter((_,index)=>index!==removeIndex); renderModelsForm(nextModels); syncDraftEditorFromForm(); });triggerRulesList.addEventListener('input',()=>syncDraftEditorFromForm());triggerRulesList.addEventListener('change',()=>syncDraftEditorFromForm());triggerRulesList.addEventListener('click',(e)=>{ const addKeywordBtn=e.target.closest('button[data-add-trigger-keyword]'); if(addKeywordBtn){ addTriggerKeyword(Number(addKeywordBtn.dataset.addTriggerKeyword), Number(addKeywordBtn.dataset.patternIndex)); return; } const removeKeywordBtn=e.target.closest('button[data-remove-trigger-keyword]'); if(removeKeywordBtn){ const ruleIndex=Number(removeKeywordBtn.dataset.removeTriggerKeyword); const patternIndex=Number(removeKeywordBtn.dataset.patternIndex); const keywordIndex=Number(removeKeywordBtn.dataset.keywordIndex); const next=extractTriggerRulesFromForm(); if(next[ruleIndex] && next[ruleIndex].patterns && next[ruleIndex].patterns[patternIndex]){ const pattern=next[ruleIndex].patterns[patternIndex]; pattern.keywords=(pattern.keywords || []).filter((_,index)=>index!==keywordIndex); if(!pattern.keywords.length){ pattern.keywords=['']; } renderTriggerRulesList(next); syncDraftEditorFromForm(); } return; } const addBtn=e.target.closest('button[data-add-trigger-pattern]'); if(addBtn){ addTriggerPattern(Number(addBtn.dataset.addTriggerPattern)); return; } const removePatternBtn=e.target.closest('button[data-remove-trigger-pattern]'); if(removePatternBtn){ const ruleIndex=Number(removePatternBtn.dataset.removeTriggerPattern); const patternIndex=Number(removePatternBtn.dataset.patternIndex); const next=extractTriggerRulesFromForm(); if(next[ruleIndex]){ next[ruleIndex].patterns=(next[ruleIndex].patterns || []).filter((_,index)=>index!==patternIndex); if(!next[ruleIndex].patterns.length){ next[ruleIndex].patterns=[{ type:'exact', keywords:[] }]; } renderTriggerRulesList(next); syncDraftEditorFromForm(); } return; } const btn=e.target.closest('button[data-remove-trigger-rule]'); if(!btn){ return; } const next=extractTriggerRulesFromForm().filter((_,index)=>index!==Number(btn.dataset.removeTriggerRule)); renderTriggerRulesList(next); syncDraftEditorFromForm(); });smartCandidatesList.addEventListener('input',()=>syncDraftEditorFromForm());smartCandidatesList.addEventListener('change',()=>syncDraftEditorFromForm());smartCandidatesList.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-remove-smart-candidate]'); if(!btn){ return; } const next=extractSmartCandidatesFromForm().filter((_,index)=>index!==Number(btn.dataset.removeSmartCandidate)); renderSmartCandidatesList(next); syncDraftEditorFromForm(); });governanceCascadeLevelsList.addEventListener('input',()=>syncDraftEditorFromForm());governanceCascadeLevelsList.addEventListener('change',()=>syncDraftEditorFromForm());governanceCascadeLevelsList.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-remove-cascade-level]'); if(!btn){ return; } const next=extractCascadeLevelsFromForm().filter((_,index)=>index!==Number(btn.dataset.removeCascadeLevel)); renderCascadeLevelsList(next); syncDraftEditorFromForm(); });referenceImpactTableBody.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-apply-reference-path]'); if(!btn){ return; } applyReferenceSuggestion(btn.dataset.applyReferencePath, btn.dataset.applyReferenceModel); });draftValidationList.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-validation-path]'); if(!btn){ return; } jumpToValidationPath(btn.dataset.validationPath); });capabilityWarningsList.addEventListener('click',(e)=>{ const applyBtn=e.target.closest('button[data-apply-warning-path]'); if(applyBtn){ applyCapabilityWarningSuggestion(applyBtn.dataset.applyWarningPath, applyBtn.dataset.applyWarningCode); return; } const btn=e.target.closest('button[data-validation-path]'); if(!btn){ return; } jumpToValidationPath(btn.dataset.validationPath); });healthSummary.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-health-action]'); if(btn){ applyHealthAction(btn.dataset.healthAction); } });draftRouterDefault.addEventListener('input',syncDraftEditorFromForm);[triggerEnabled,triggerIntentEnabled,triggerAnalysisScope,triggerIntentModel,smartEnabled,smartRouterModel,smartFallback,smartCacheTtl,smartMaxTokens,governanceEnabled,governanceAlignmentEnabled,governanceSummarizerModel,governanceSemanticEnabled,governanceClassifierModel,governanceShadowEnabled,governanceVerifierModel].forEach(el=>{ el.addEventListener('input',syncDraftEditorFromForm); el.addEventListener('change',syncDraftEditorFromForm); });surfaceTabs.forEach((tab)=>tab.addEventListener('click',()=>setActiveSurface(tab.dataset.surfaceTarget || 'user')));setActiveSurface('user');function renderMetrics(metrics,health){  metricsGrid.innerHTML=[    ['Health', health?.status || 'idle'],     ['Recent traces', metrics.totalTraces ?? 0],    ['Sticky hit rate', pct(metrics.stickyHitRate)],    ['Cascade rate', pct(metrics.cascadeTriggeredRate)],    ['Shadow rate', pct(metrics.shadowCheckedRate)],    ['Alignment rate', pct(metrics.alignmentUsedRate)],    ['Avg latency', fmt(metrics.averageLatencyMs)+' ms']  ].map(([label,value])=>'<div class="stat"><span class="muted">'+esc(label)+'</span><strong>'+esc(value)+'</strong></div>').join('');}function buildPresetPayload(presetName){  const preset=draftPresets[presetName];  if(!preset){ return null; }  const overwriteMode=draftPresetMode.value === 'replace';  const payload=buildDraftPayloadFromForm();  if(overwriteMode){ delete payload.TriggerRouter; delete payload.SmartRouter; delete payload.Governance; }  if(preset.routerDefault){ payload.Router={ ...(payload.Router || {}), default: resolvePresetModelId(preset.routerDefault) }; }  if(preset.triggerEnabled !== undefined || preset.triggerRules){ payload.SmartRouter={ ...(payload.SmartRouter || {}), enabled: preset.triggerEnabled !== undefined ? Boolean(preset.triggerEnabled) : Boolean(payload.SmartRouter?.enabled), analysis_scope: payload.SmartRouter?.analysis_scope || 'last_message', router_model: payload.SmartRouter?.router_model || '', fallback: payload.SmartRouter?.fallback || 'default', candidates: payload.SmartRouter?.candidates || [], cache_ttl: payload.SmartRouter?.cache_ttl, max_tokens: payload.SmartRouter?.max_tokens, rules: preset.triggerRules ? preset.triggerRules.map(rule=>({ ...rule, model: resolvePresetModelId(rule.model) })) : (payload.SmartRouter?.rules || []) }; delete payload.TriggerRouter; }  if(preset.smartEnabled !== undefined || preset.smartCandidates){ payload.SmartRouter={ ...(payload.SmartRouter || {}), enabled: preset.smartEnabled !== undefined ? Boolean(preset.smartEnabled) : Boolean(payload.SmartRouter?.enabled), router_model: payload.SmartRouter?.router_model || '', fallback: payload.SmartRouter?.fallback || 'default', candidates: preset.smartCandidates ? preset.smartCandidates.map(item=>({ ...item, model: resolvePresetModelId(item.model) })) : (payload.SmartRouter?.candidates || []), cache_ttl: payload.SmartRouter?.cache_ttl, max_tokens: payload.SmartRouter?.max_tokens, rules: payload.SmartRouter?.rules || [] }; }  if(preset.governanceEnabled !== undefined || preset.governanceAlignmentEnabled !== undefined || preset.governanceSemanticEnabled !== undefined || preset.governanceShadowEnabled !== undefined || preset.governanceSummarizerModel !== undefined || preset.governanceClassifierModel !== undefined || preset.governanceVerifierModel !== undefined){ payload.SmartRouter={ ...(payload.SmartRouter || {}), enabled: payload.SmartRouter?.enabled !== undefined ? Boolean(payload.SmartRouter?.enabled) : Boolean(preset.governanceEnabled), sticky:{ ...((payload.SmartRouter && payload.SmartRouter.sticky) || {}), enabled: preset.governanceAlignmentEnabled !== undefined ? Boolean(preset.governanceAlignmentEnabled) : Boolean(payload.SmartRouter?.sticky?.enabled), alignment:{ ...(((payload.SmartRouter && payload.SmartRouter.sticky && payload.SmartRouter.sticky.alignment) || {})), enabled: preset.governanceAlignmentEnabled !== undefined ? Boolean(preset.governanceAlignmentEnabled) : Boolean(payload.SmartRouter?.sticky?.alignment?.enabled), summarizer_model: preset.governanceSummarizerModel !== undefined ? resolvePresetModelId(preset.governanceSummarizerModel) : (payload.SmartRouter?.sticky?.alignment?.summarizer_model || '') } }, semantic:{ ...((payload.SmartRouter && payload.SmartRouter.semantic) || {}), enabled: preset.governanceSemanticEnabled !== undefined ? Boolean(preset.governanceSemanticEnabled) : Boolean(payload.SmartRouter?.semantic?.enabled), mode:(payload.SmartRouter?.semantic?.mode || 'classifier'), classifier_model: preset.governanceClassifierModel !== undefined ? resolvePresetModelId(preset.governanceClassifierModel) : (payload.SmartRouter?.semantic?.classifier_model || '') } }; payload.Governance={ ...(payload.Governance || {}), enabled: preset.governanceEnabled !== undefined ? Boolean(preset.governanceEnabled) : Boolean(payload.Governance?.enabled), shadow:{ ...((payload.Governance && payload.Governance.shadow) || {}), enabled: preset.governanceShadowEnabled !== undefined ? Boolean(preset.governanceShadowEnabled) : Boolean(payload.Governance?.shadow?.enabled), verifier_model: preset.governanceVerifierModel !== undefined ? resolvePresetModelId(preset.governanceVerifierModel) : (payload.Governance?.shadow?.verifier_model || '') } }; }  return payload;}function applyDraftPreset(presetName){  const payload=buildPresetPayload(presetName);  if(!payload){ return; }  currentDraftConfig=payload;  renderModelsForm(payload.Models || []);  renderConfigControlForms(payload);  draftRouterDefault.value=payload.Router?.default || '';  configDraftEditor.value=JSON.stringify(payload,null,2);  renderDraftSummary(payload);  renderDraftValidation([],[]);  renderCapabilityWarnings();  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u5DF2\u5E94\u7528\u9884\u8BBE\uFF1A'+presetName+'\uFF08'+(draftPresetMode.value === 'replace' ? 'overwrite' : 'append / merge')+'\uFF09';}async function previewDraftPreset(presetName){  const payload=buildPresetPayload(presetName);  if(!payload){ return; }  const preset=draftPresets[presetName];  const modeLabel=draftPresetMode.value === 'replace' ? 'overwrite' : 'append / merge';  renderDraftPreviewMeta({ title:'Preset dry-run', description:(preset?.label || presetName)+' \u4EC5\u9884\u89C8\uFF0C\u4E0D\u4F1A\u5199\u56DE\u5F53\u524D\u8349\u7A3F\u3002', affects:preset?.affects || [], actualAffects:[], mode:modeLabel });  draftPreviewStatus.textContent='\u9884\u89C8\u9884\u8BBE\u4E2D\uFF1A'+presetName;  const res=await fetch('/api/models/compiled/preview',{ method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(payload) });  const data=await res.json();  if(!res.ok){ renderDraftValidation(data.errors || [data.message || 'unknown error'], data.warnings || [], data.issueReport); renderCapabilityWarnings(data.capabilityWarnings); renderCompiledDiff(); renderReferenceImpact(data.referenceImpact); renderDraftPreviewMeta({ title:'Preset dry-run', description:(preset?.label || presetName)+' \u9884\u89C8\u5931\u8D25\uFF0C\u4EE5\u4E0B\u4E3A\u5F53\u524D\u9884\u89C8\u5C1D\u8BD5\u547D\u4E2D\u7684\u533A\u57DF\u3002', affects:preset?.affects || [], actualAffects:deriveActualAffectedAreas(data), mode:modeLabel }); draftPreviewStatus.textContent='\u9884\u8BBE\u9884\u89C8\u5931\u8D25\uFF1A'+((data.errors || []).join('; ') || data.message || 'unknown error'); return; }  renderDraftValidation([], data.warnings || [], data.issueReport);  renderCompiledModels(data);  renderDraftPreviewMeta({ title:'Preset dry-run', description:(preset?.label || presetName)+' \u4EC5\u9884\u89C8\uFF0C\u4E0D\u4F1A\u5199\u56DE\u5F53\u524D\u8349\u7A3F\u3002', affects:preset?.affects || [], actualAffects:deriveActualAffectedAreas(data), mode:modeLabel });  draftPreviewStatus.textContent='\u5DF2\u9884\u89C8\u9884\u8BBE\uFF1A'+presetName+'\uFF08\u672A\u5199\u56DE\u8349\u7A3F\uFF09';}function renderRanking(target,entries,emptyLabel){  if(!entries || !entries.length){ target.innerHTML='<li><span class="muted">'+esc(emptyLabel)+'</span><strong>0</strong></li>'; return; }  target.innerHTML=entries.map(item=>'<li><span><code>'+esc(item.key)+'</code></span><strong>'+esc(item.count)+' \xB7 '+esc(pct(item.rate))+'</strong></li>').join('');}function renderAnomalies(anomalies,health){  const status=health?.status || 'idle';  const message=health?.message || 'No governance traces yet.';  const actions=Array.isArray(health?.actions) ? health.actions : [];  healthSummary.className='alert '+esc(status === 'critical' ? 'critical' : (status === 'watch' ? 'warn' : 'info'));  healthSummary.innerHTML='<strong>Health: '+esc(status)+'</strong><div>'+esc(message)+'</div>'+ (actions.length ? '<ul class="mini-list">'+actions.map(action=>'<li><button type="button" data-health-action="'+esc(action)+'">'+esc(action)+'</button></li>').join('')+'</ul>' : '');  if(!anomalies || !anomalies.length){ anomalyList.innerHTML='<div class="alert info"><strong>No active alerts</strong><div class="muted">\u5F53\u524D\u7A97\u53E3\u672A\u53D1\u73B0\u660E\u663E\u6CBB\u7406\u5F02\u5E38</div></div>'; return; }  anomalyList.innerHTML=anomalies.map(item=>'<div class="alert '+esc(item.severity || 'info')+'"><strong>'+esc(item.type)+'</strong><div>'+esc(item.message)+'</div></div>').join('');}function applyHealthAction(action){  const text=String(action || '').toLowerCase();  const routeReasonInput=document.getElementById('routeReason');  const cascadeSelect=document.getElementById('cascadeTriggered');  const shadowSelect=document.getElementById('shadowChecked');  if(text.includes('cascade')){ cascadeSelect.value='true'; shadowSelect.value=''; routeReasonInput.value=''; detailHint.textContent='Health action: filtered cascade traces'; }  else if(text.includes('shadow')){ shadowSelect.value='true'; cascadeSelect.value=''; routeReasonInput.value=''; detailHint.textContent='Health action: filtered shadow traces'; }  else { cascadeSelect.value=''; shadowSelect.value=''; routeReasonInput.value=''; detailHint.textContent='Health action: showing recent traces'; }  loadTraces();  document.getElementById('traceTable').scrollIntoView({ behavior:'smooth', block:'start' });}function renderBuckets(report){  const buckets=report.buckets || [];  const windowMs=Number(report.windowMs || 0);  bucketHint.textContent=windowMs ? ('\u6700\u8FD1 '+Math.round(windowMs / 60000)+' \u5206\u949F\uFF0C\u5171 '+(report.bucketCount || buckets.length || 0)+' \u6876') : '\u5F53\u524D\u672A\u542F\u7528\u65F6\u95F4\u7A97';  if(!buckets.length){ bucketGrid.innerHTML='<div class="stat"><span class="muted">No bucket data</span><strong>0</strong></div>'; return; }  bucketGrid.innerHTML=buckets.map(bucket=>    '<div class="stat">'+'<span class="muted">'+esc(shortTime(bucket.bucketStart))+' - '+esc(shortTime(bucket.bucketEnd))+'</span>'+'<strong>'+esc(bucket.metrics.totalTraces)+'</strong>'+'<div class="muted">sticky '+esc(pct(bucket.metrics.stickyHitRate))+' / cascade '+esc(pct(bucket.metrics.cascadeTriggeredRate))+'</div>'+'</div>').join('');}function renderTrendTable(report){  const buckets=report.buckets || [];  if(!buckets.length){ trendTableBody.innerHTML='<tr><td colspan="6" class="muted">No trend data</td></tr>'; return; }  trendTableBody.innerHTML=buckets.map(bucket=>'<tr>' +    '<td>'+esc(shortTime(bucket.bucketStart))+' - '+esc(shortTime(bucket.bucketEnd))+'</td>' +    '<td>'+esc(bucket.metrics.totalTraces)+'</td>' +    '<td>'+esc(pct(bucket.metrics.stickyHitRate))+'</td>' +    '<td>'+esc(pct(bucket.metrics.cascadeTriggeredRate))+'</td>' +    '<td>'+esc(pct(bucket.metrics.shadowCheckedRate))+'</td>' +    '<td>'+esc(pct(bucket.metrics.alignmentUsedRate))+'</td>' +  '</tr>').join('');}function renderExportHistory(data){  const exports=(data.exports || []);  const schedules=(data.schedules || []);  exportTableBody.innerHTML=exports.length ? exports.map(item=>'<tr><td><code>'+esc(item.id)+'</code></td><td>'+esc(item.kind)+'</td><td>'+esc(item.format)+'</td><td>'+esc(new Date(item.createdAt).toISOString())+'</td></tr>').join('') : '<tr><td colspan="4" class="muted">No exports yet</td></tr>';  scheduleTableBody.innerHTML=schedules.length ? schedules.map(item=>'<tr><td><code>'+esc(item.id)+'</code></td><td>'+esc(item.intervalMs)+' ms</td><td>'+esc(item.format)+'</td><td>'+esc(item.lastRunAt ? new Date(item.lastRunAt).toISOString() : '-')}</td></tr>').join('') : '<tr><td colspan="4" class="muted">No schedules yet</td></tr>';}function renderArchives(data){  const archives=(data.archives || []);  archiveTableBody.innerHTML=archives.length ? archives.map(item=>'<tr><td><code>'+esc(item.file)+'</code></td><td>'+esc(item.startedAt ? new Date(item.startedAt).toISOString().slice(0,10) : '-')+' ~ '+esc(item.endedAt ? new Date(item.endedAt).toISOString().slice(0,10) : '-')+'</td><td>'+esc(item.traceCount)+'</td><td>'+esc(item.compressed ? 'yes' : 'no')+'</td></tr>').join('') : '<tr><td colspan="4" class="muted">No archives found</td></tr>';}async function loadCompiledModels(){  compiledModelsStatus.textContent='\u52A0\u8F7D compiled models \u4E2D...';  const res=await fetch('/api/models/compiled');  const data=await res.json();  renderDraftValidation([], data.warnings || [], data.issueReport);  renderCompiledModels(data);  renderCompiledDiff();  renderReferenceImpact();}async function loadTraces(){  const requestId=document.getElementById('requestId').value.trim();  const sessionKey=document.getElementById('sessionKey').value.trim();  const routeReason=document.getElementById('routeReason').value.trim();  const cascadeTriggered=document.getElementById('cascadeTriggered').value;  const shadowChecked=document.getElementById('shadowChecked').value;  const windowMs=document.getElementById('windowMs').value;  const minSampleSize=document.getElementById('minSampleSize').value.trim();  const cascadeWarnRate=document.getElementById('cascadeWarnRate').value.trim();  const shadowWarnRate=document.getElementById('shadowWarnRate').value.trim();  const latencyWarnMs=document.getElementById('latencyWarnMs').value.trim();  const limit=document.getElementById('limit').value.trim();  const params=new URLSearchParams();  if(requestId) params.set('requestId',requestId);  if(sessionKey) params.set('sessionKey',sessionKey);  if(routeReason) params.set('routeReason',routeReason);  if(cascadeTriggered) params.set('cascadeTriggered',cascadeTriggered);  if(shadowChecked) params.set('shadowChecked',shadowChecked);  if(windowMs) params.set('windowMs',windowMs);  if(minSampleSize) params.set('minSampleSize',minSampleSize);  if(cascadeWarnRate) params.set('cascadeWarnRate',cascadeWarnRate);  if(shadowWarnRate) params.set('shadowWarnRate',shadowWarnRate);  if(latencyWarnMs) params.set('latencyWarnMs',latencyWarnMs);  params.set('bucketCount','6');  if(limit) params.set('limit',limit);  tbody.innerHTML='<tr><td colspan="6" class="muted">\u52A0\u8F7D\u4E2D...</td></tr>';  const query=params.toString()?('?'+params.toString()):'';  const [traceRes,metricsRes,healthRes]=await Promise.all([    fetch('/api/governance/traces'+query),    fetch('/api/governance/metrics'+query),    fetch('/api/governance/health'+query)  ]);  const data=await traceRes.json();  const metricsData=await metricsRes.json();  const healthData=await healthRes.json();  const health=healthData.health || metricsData.health;  renderMetrics(metricsData.metrics || {},health);  renderBuckets(metricsData || {});  renderAnomalies(metricsData.anomalies || [],health);  renderRanking(routeRanking,metricsData.topRouteReasons || [],'No routes');  renderRanking(modelRanking,metricsData.topFinalModels || [],'No models');  renderRanking(intentRanking,metricsData.topSemanticIntents || [],'No intents');  renderTrendTable(metricsData || {});  const traces=data.traces || [];  if(!traces.length){ tbody.innerHTML='<tr><td colspan="6" class="muted">\u6682\u65E0 trace</td></tr>'; return; }  tbody.innerHTML=traces.map(t=>    \`<tr>\`+      \`<td><code>\${esc(t.requestId)}</code></td>\`+      \`<td>\${t.sessionKey ? \`<span class="pill">\${esc(t.sessionKey)}</span>\` : '<span class="muted">-</span>'}</td>\`+      \`<td><code>\${esc(t.finalModel || '')}</code></td>\`+      \`<td>\${(t.routeReason || []).map(r=>\`<span class="pill">\${esc(r)}</span>\`).join(' ')}</td>\`+      \`<td>\${esc(t.latencyMs ?? '')}</td>\`+      \`<td><button data-request="\${esc(t.requestId)}">View</button></td>\`+    \`</tr>\`  ).join('');}async function loadDetail(requestId){  const res=await fetch('/api/governance/traces/'+encodeURIComponent(requestId));  const data=await res.json();  detailHint.textContent='\u5F53\u524D\u67E5\u770B\uFF1A'+requestId;  detail.textContent=JSON.stringify(data,null,2);}async function loadExports(){  const res=await fetch('/api/governance/metrics/exports');  renderExportHistory(await res.json());}async function createSnapshot(){  snapshotStatus.textContent='\u521B\u5EFA\u5FEB\u7167\u4E2D...';  const res=await fetch('/api/governance/metrics/snapshots',{    method:'POST',    headers:{'Content-Type':'application/json'},    body:JSON.stringify({ format: document.getElementById('snapshotFormat').value, windowMs: Number(document.getElementById('windowMs').value || 0) || undefined })  });  const data=await res.json();  snapshotStatus.textContent=res.ok ? ('\u5DF2\u521B\u5EFA\uFF1A'+data.export.id) : ('\u521B\u5EFA\u5931\u8D25\uFF1A'+(data.message || 'unknown error'));  if(res.ok) await loadExports();}async function loadArchives(){  archiveStatus.textContent='\u52A0\u8F7D\u5F52\u6863\u4E2D...';  const params=new URLSearchParams();  const archiveDate=document.getElementById('archiveDate').value.trim();  const archivePage=document.getElementById('archivePage').value.trim();  const archivePageSize=document.getElementById('archivePageSize').value.trim();  if(archiveDate) params.set('date',archiveDate);  if(archivePage) params.set('page',archivePage);  if(archivePageSize) params.set('pageSize',archivePageSize);  const res=await fetch('/api/governance/archives'+(params.toString()?('?'+params.toString()):''));  const data=await res.json();  renderArchives(data);  archiveStatus.textContent='\u5F52\u6863\u52A0\u8F7D\u5B8C\u6210';}async function saveThresholds(){  const payload={    min_sample_size:Number(document.getElementById('minSampleSize').value || 0),    cascade_warn_rate:Number(document.getElementById('cascadeWarnRate').value || 0),    shadow_warn_rate:Number(document.getElementById('shadowWarnRate').value || 0),    latency_warn_ms:Number(document.getElementById('latencyWarnMs').value || 0)  };  saveThresholdsStatus.textContent='\u4FDD\u5B58\u4E2D...';  const res=await fetch('/api/governance/observability/anomaly-thresholds',{    method:'POST',    headers:{'Content-Type':'application/json'},    body:JSON.stringify(payload)  });  const data=await res.json();  if(!res.ok){ saveThresholdsStatus.textContent='\u4FDD\u5B58\u5931\u8D25\uFF1A'+(data.message || 'unknown error'); return; }  saveThresholdsStatus.textContent='\u5DF2\u4FDD\u5B58\u5230\u914D\u7F6E\u6587\u4EF6';}document.getElementById('refreshBtn').addEventListener('click',loadTraces);document.getElementById('loadConfigDraftHeroBtn').addEventListener('click',loadConfigDraft);document.getElementById('previewConfigDraftHeroBtn').addEventListener('click',previewConfigDraft);document.getElementById('refreshStatusHeroBtn').addEventListener('click',loadServiceStatus);document.getElementById('loadConfigDraftBtn').addEventListener('click',loadConfigDraft);document.getElementById('addModelDraftBtn').addEventListener('click',addDraftModel);document.getElementById('applyBalancedPresetBtn').addEventListener('click',()=>applyDraftPreset('balanced'));document.getElementById('previewBalancedPresetBtn').addEventListener('click',()=>previewDraftPreset('balanced'));document.getElementById('applyFastPresetBtn').addEventListener('click',()=>applyDraftPreset('fast'));document.getElementById('previewFastPresetBtn').addEventListener('click',()=>previewDraftPreset('fast'));document.getElementById('applyGovernancePresetBtn').addEventListener('click',()=>applyDraftPreset('governance'));document.getElementById('previewGovernancePresetBtn').addEventListener('click',()=>previewDraftPreset('governance'));document.getElementById('addTriggerRuleBtn').addEventListener('click',addTriggerRule);document.getElementById('addSmartCandidateBtn').addEventListener('click',addSmartCandidate);document.getElementById('addCascadeLevelBtn').addEventListener('click',addCascadeLevel);document.getElementById('syncDraftJsonBtn').addEventListener('click',syncDraftEditorFromForm);document.getElementById('previewConfigDraftBtn').addEventListener('click',previewConfigDraft);document.getElementById('saveConfigDraftBtn').addEventListener('click',saveConfigDraft);draftPresetMode.addEventListener('change',renderDraftPresetModeHint);document.getElementById('createSnapshotBtn').addEventListener('click',createSnapshot);document.getElementById('loadArchivesBtn').addEventListener('click',loadArchives);document.getElementById('saveThresholdsBtn').addEventListener('click',saveThresholds);tbody.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-request]'); if(btn){ loadDetail(btn.dataset.request); } });renderDraftPresetGuide();renderDraftPresetModeHint();renderDraftPreviewMeta();loadServiceStatus();loadConfigDraft();loadCompiledModels();loadExports();loadArchives();loadTraces();</script></body></html>`;
+  return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Claude Trigger Router</title><style>body{font-family:ui-sans-serif,system-ui,sans-serif;padding:2rem;max-width:1100px;margin:0 auto;background:#f7f7f5;color:#1f2328}.panel{background:#fff;border:1px solid #e5e7eb;border-radius:12px;padding:1rem 1.25rem;margin-bottom:1rem}.muted{color:#6b7280}.hero{display:grid;grid-template-columns:minmax(0,1.2fr) minmax(260px,.8fr);gap:1rem;align-items:stretch;margin-bottom:1rem}.hero h2{margin:.2rem 0 .5rem;font-size:1.55rem}.hero-copy{display:flex;flex-direction:column;justify-content:center}.status-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:.75rem}.status-tile{background:#f8fafc;border:1px solid #e5e7eb;border-radius:8px;padding:.75rem;min-width:0}.status-tile strong{display:block;margin-top:.2rem;word-break:break-word}@media (max-width:760px){.hero{grid-template-columns:1fr}.status-grid{grid-template-columns:1fr}}.stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:.75rem;margin-top:1rem}.stat{background:#f8fafc;border:1px solid #e5e7eb;border-radius:12px;padding:.85rem}.stat strong{display:block;font-size:1.1rem;margin-top:.25rem}.subpanel{margin-top:1rem;padding-top:1rem;border-top:1px solid #e5e7eb}.bucket-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:.75rem;margin-top:.75rem}.detail-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(260px,1fr));gap:1rem;margin-top:1rem}.mini-list{list-style:none;padding:0;margin:.75rem 0 0}.mini-list li{display:flex;justify-content:space-between;gap:.75rem 1rem;flex-wrap:wrap;align-items:flex-start;padding:.45rem 0;border-bottom:1px dashed #e5e7eb}.mini-list li:last-child{border-bottom:none}.action-row{display:flex;gap:.75rem;flex-wrap:wrap;align-items:center;margin-top:.75rem}.management-table{width:100%;margin-top:.75rem}.management-table th,.management-table td{padding:.5rem;border-bottom:1px solid #e5e7eb;font-size:.92rem;vertical-align:top}.scope-guide{display:grid;grid-template-columns:repeat(auto-fit,minmax(190px,1fr));gap:.75rem;margin-top:.75rem}.scope-guide div{background:#f8fafc;border:1px solid #e5e7eb;border-radius:8px;padding:.75rem}.scope-guide strong{display:block;margin-bottom:.35rem}.alert-list{display:grid;gap:.75rem;margin-top:1rem}.alert{border-radius:12px;padding:.85rem 1rem;border:1px solid}.alert.warn{background:#fff7ed;border-color:#fdba74;color:#9a3412}.alert.critical{background:#fef2f2;border-color:#fca5a5;color:#991b1b}.alert.info{background:#eff6ff;border-color:#93c5fd;color:#1d4ed8}.diff-summary{display:grid;grid-template-columns:repeat(auto-fit,minmax(120px,1fr));gap:.75rem;margin-top:.75rem}.diff-chip{background:#f8fafc;border:1px solid #e5e7eb;border-radius:12px;padding:.75rem}.diff-chip strong{display:block;font-size:1rem;margin-top:.2rem}.models-form-grid{display:grid;gap:.75rem;margin-top:.75rem}.model-card{border:1px solid #e5e7eb;border-radius:12px;padding:1rem;background:#fcfcfd}.model-card-header{display:flex;justify-content:space-between;gap:1rem;align-items:center;margin-bottom:.75rem}.model-card-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:.75rem}.model-card-grid textarea{min-height:84px;resize:vertical}.list-editor{display:grid;gap:.75rem;margin-top:.75rem}.list-item{border:1px solid #e5e7eb;border-radius:12px;padding:.85rem;background:#fcfcfd}.list-item-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:.75rem}.jump-highlight{outline:3px solid #f59e0b;box-shadow:0 0 0 6px rgba(245,158,11,.15);transition:box-shadow .25s ease,outline-color .25s ease}.control-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:.75rem;margin-top:1rem}.control-grid label{display:block;font-size:.85rem;color:#6b7280;margin-bottom:.35rem}.trend-table{width:100%;margin-top:.75rem}.trend-table th,.trend-table td{padding:.45rem;border-bottom:1px solid #e5e7eb;font-size:.92rem}.row{display:flex;gap:1rem;flex-wrap:wrap;align-items:center}input,select,button{font:inherit;padding:.55rem .75rem;border-radius:8px;border:1px solid #d1d5db}button{background:#111827;color:#fff;border-color:#111827;cursor:pointer}table{width:100%;border-collapse:collapse;margin-top:1rem}th,td{text-align:left;padding:.65rem .5rem;border-bottom:1px solid #e5e7eb;vertical-align:top}code,pre{font-family:ui-monospace,SFMono-Regular,monospace}pre{white-space:pre-wrap;background:#0f172a;color:#e2e8f0;padding:1rem;border-radius:12px;overflow:auto}.pill{display:inline-block;padding:.2rem .5rem;border-radius:999px;background:#eef2ff;color:#3730a3;font-size:.8rem}.pill.info{background:#eff6ff;color:#1d4ed8}.pill.warn{background:#fff7ed;color:#9a3412}.pill.critical{background:#fef2f2;color:#991b1b}.surface-tabs{display:flex;gap:.5rem;flex-wrap:wrap;margin:1rem 0}.surface-tab{background:#fff;color:#1f2328;border-color:#d1d5db}.surface-tab.active{background:#111827;color:#fff;border-color:#111827}.surface-panel[hidden]{display:none}.surface-heading{display:flex;gap:1rem;flex-wrap:wrap;align-items:center;margin-bottom:.75rem}</style></head><body><div class="hero"><div class="panel hero-copy"><h2>\u914D\u7F6E\u4E0E\u72B6\u6001\u5DE5\u4F5C\u53F0</h2><p class="muted">\u67E5\u770B\u5F53\u524D\u8DEF\u7531\u670D\u52A1\u3001\u6A21\u578B\u914D\u7F6E\u548C\u9ED8\u8BA4\u53BB\u5411\uFF1B\u9700\u8981\u6392\u67E5\u65F6\uFF0C\u4E0B\u65B9\u7EF4\u62A4\u8005\u533A\u57DF\u53EF\u7EE7\u7EED\u67E5\u770B Governance Trace\u3001metrics \u548C\u5F52\u6863\u3002</p><div class="action-row"><button id="loadConfigDraftHeroBtn" type="button">\u8F7D\u5165\u5F53\u524D\u914D\u7F6E</button><button id="previewConfigDraftHeroBtn" type="button">\u9884\u89C8 compiled models</button><button id="refreshStatusHeroBtn" type="button">\u5237\u65B0\u72B6\u6001</button></div></div><div class="panel"><div class="status-grid"><div class="status-tile"><span class="muted">Service</span><strong id="serviceReadyStatus">ready</strong></div><div class="status-tile"><span class="muted">Port</span><strong id="servicePortStatus">${escapedDisplayPort}</strong></div><div class="status-tile"><span class="muted">Mode</span><strong id="serviceModeStatus">${escapedRuntimeMode}</strong></div><div class="status-tile"><span class="muted">Role</span><strong id="serviceRoleStatus">${escapedServiceRole}</strong></div><div class="status-tile"><span class="muted">Listener</span><strong id="listenerStatusSummary">${escapedListenerSummary}</strong></div><div class="status-tile"><span class="muted">Models</span><strong id="modelCountStatus">${escapedModelsCount}</strong></div><div class="status-tile"><span class="muted">Router.default</span><strong id="routerDefaultStatus">${escapedRouterDefault}</strong></div><div class="status-tile"><span class="muted">Remote service</span><strong id="remoteStatusSummary">${escapedRemoteSummary}</strong></div><div class="status-tile"><span class="muted">Registration</span><strong id="registrationStatusSummary">${escapedRegistrationSummary}</strong></div><div class="status-tile"><span class="muted">Auth</span><strong id="authStatusSummary">${escapedAuthSummary}</strong></div><div class="status-tile"><span class="muted">Security</span><strong id="securityStatusSummary">${escapedSecuritySummary}</strong></div></div></div></div><div class="surface-tabs" role="tablist" aria-label="\u5DE5\u4F5C\u53F0\u5207\u6362"><button id="userSurfaceTab" class="surface-tab active" type="button" role="tab" aria-selected="true" data-surface-target="user">\u4F7F\u7528\u8005\u5DE5\u4F5C\u53F0</button><button id="maintainerSurfaceTab" class="surface-tab" type="button" role="tab" aria-selected="false" data-surface-target="maintainer">\u7EF4\u62A4\u8005\u5DE5\u4F5C\u53F0</button></div><section id="userSurface" class="surface-panel" data-surface="user"><div class="panel"><div class="surface-heading"><strong>\u4F7F\u7528\u8005\u5DE5\u4F5C\u53F0</strong><span class="muted">\u914D\u7F6E\u3001\u6A21\u578B\u3001\u8DEF\u7531\u3001\u670D\u52A1\u72B6\u6001\u4E0E\u4E0B\u4E00\u6B65\u4FDD\u5B58\u52A8\u4F5C\u3002</span></div><div class="subpanel"><div class="row"><strong>Draft Config Preview</strong><span class="muted">\u7F16\u8F91\u5F53\u524D\u914D\u7F6E\u8349\u7A3F\u5E76\u5373\u65F6\u9884\u89C8 compiled models \u7ED3\u679C\uFF0C\u4E0D\u843D\u76D8</span></div><div class="action-row"><button id="loadConfigDraftBtn" type="button">\u8F7D\u5165\u5F53\u524D\u914D\u7F6E</button><button id="addModelDraftBtn" type="button">\u65B0\u589E Model</button><button id="applyBalancedPresetBtn" type="button">\u5E94\u7528\u5E73\u8861\u9884\u8BBE</button><button id="previewBalancedPresetBtn" type="button">\u9884\u89C8\u5E73\u8861\u9884\u8BBE</button><button id="applyFastPresetBtn" type="button">\u5E94\u7528\u5FEB\u901F\u9884\u8BBE</button><button id="previewFastPresetBtn" type="button">\u9884\u89C8\u5FEB\u901F\u9884\u8BBE</button><button id="applyGovernancePresetBtn" type="button">\u5E94\u7528\u6CBB\u7406\u9884\u8BBE</button><button id="previewGovernancePresetBtn" type="button">\u9884\u89C8\u6CBB\u7406\u9884\u8BBE</button><button id="syncDraftJsonBtn" type="button">\u540C\u6B65 JSON \u8349\u7A3F</button><button id="previewConfigDraftBtn" type="button">\u9884\u89C8 compiled models</button><button id="saveConfigDraftBtn" type="button">\u4FDD\u5B58\u914D\u7F6E</button><span id="draftPreviewStatus" class="muted">\u5C1A\u672A\u9884\u89C8\u914D\u7F6E\u8349\u7A3F</span></div><div class="control-grid"><div><label>Preset mode</label><select id="draftPresetMode"><option value="merge" selected>append / merge</option><option value="replace">overwrite</option></select></div><div><label>Mode guide</label><div id="draftPresetModeHint" class="muted">append / merge \u4F1A\u5C3D\u91CF\u4FDD\u7559\u5F53\u524D\u8349\u7A3F\uFF0C\u4EC5\u8865\u5145\u9884\u8BBE\u76F8\u5173\u5B57\u6BB5</div></div></div><div id="draftPresetList" class="alert-list"><div class="alert info"><strong>Preset guide</strong><div class="muted">\u9009\u62E9\u9884\u8BBE\u524D\u53EF\u5148\u67E5\u770B\u5176\u4F1A\u8986\u76D6\u7684\u533A\u57DF\u4E0E\u63A8\u8350\u7528\u9014</div></div></div><div id="draftPreviewMeta" class="alert-list"><div class="alert info"><strong>Draft preview mode</strong><div class="muted">\u5F53\u524D\u663E\u793A\u4E3A\u8349\u7A3F\u7F16\u8F91\u89C6\u56FE\uFF0C\u9884\u8BBE dry-run \u4F1A\u5728\u8FD9\u91CC\u63D0\u793A\u5F71\u54CD\u8303\u56F4\u3002</div></div></div><div id="draftSummaryGrid" class="stats"><div class="stat"><span class="muted">Models</span><strong>0</strong></div><div class="stat"><span class="muted">Routing rules</span><strong>0</strong></div><div class="stat"><span class="muted">Patterns</span><strong>0</strong></div><div class="stat"><span class="muted">Smart candidates</span><strong>0</strong></div><div class="stat"><span class="muted">Cascade levels</span><strong>0</strong></div><div class="stat"><span class="muted">Model refs</span><strong>0</strong></div></div><div class="subpanel"><div class="row"><strong>Validation Summary</strong><span class="muted">\u96C6\u4E2D\u663E\u793A\u5F53\u524D\u8349\u7A3F\u7684\u9519\u8BEF\u4E0E warning\uFF0C\u5E76\u533A\u5206\u4FEE\u590D\u4F18\u5148\u7EA7</span></div><div id="draftValidationList" class="alert-list"><div class="alert info"><strong>No validation issues</strong><div class="muted">\u9884\u89C8\u524D\u4F1A\u5728\u8FD9\u91CC\u6C47\u603B\u8349\u7A3F\u95EE\u9898</div></div></div></div><div class="subpanel"><div class="row"><strong>Capability Warnings</strong><span class="muted">\u663E\u793A\u6A21\u578B capability hint \u53EF\u80FD\u5E26\u6765\u7684\u8FD0\u884C\u65F6\u964D\u7EA7\u884C\u4E3A</span></div><div id="capabilityWarningsList" class="alert-list"><div class="alert info"><strong>No capability warnings</strong><div class="muted">\u9884\u89C8\u6216\u52A0\u8F7D compiled models \u540E\u4F1A\u5728\u8FD9\u91CC\u663E\u793A\u80FD\u529B\u964D\u7EA7\u63D0\u793A</div></div></div></div><div class="control-grid"><div><label>Router default (modelId)</label><input id="draftRouterDefault" placeholder="\u4F8B\u5982 sonnet"></div><div><label>Models count</label><input id="draftModelsCount" value="0" readonly></div></div><div class="subpanel"><div class="row"><strong>Routing Controls</strong><span class="muted">\u56F4\u7ED5 SmartRouter \u7EDF\u4E00\u8DEF\u7531\u5F15\u64CE\u7F16\u8F91\u89C4\u5219\u3001\u5019\u9009\u4E0E\u6CBB\u7406\u589E\u5F3A\u517C\u5BB9\u914D\u7F6E</span></div><div class="detail-grid"><div class="panel" style="margin-bottom:0"><div class="row"><strong>Routing rules</strong><span class="muted">\u663E\u5F0F\u89C4\u5219\u3001\u8BED\u4E49\u63D0\u793A\u4E0E\u517C\u5BB9\u8F93\u5165</span></div><div class="control-grid"><div><label><input id="triggerEnabled" type="checkbox"> Enabled</label></div><div><label><input id="triggerIntentEnabled" type="checkbox"> Intent recognition</label></div><div><label>Analysis scope</label><select id="triggerAnalysisScope"><option value="last_message">last_message</option><option value="full_context">full_context</option></select></div><div><label>Intent model</label><input id="triggerIntentModel" list="topLevelTriggerIntentSuggestions" placeholder="modelId"><datalist id="topLevelTriggerIntentSuggestions"></datalist></div></div><div style="margin-top:.75rem"><div class="action-row"><label>Rules</label><button id="addTriggerRuleBtn" type="button">\u65B0\u589E Rule</button></div><div id="triggerRulesList" class="list-editor"><div class="panel" style="margin-bottom:0"><span class="muted">No routing rules yet</span></div></div></div></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>SmartRouter</strong><span class="muted">\u667A\u80FD\u5019\u9009\u9009\u62E9</span></div><div class="control-grid"><div><label><input id="smartEnabled" type="checkbox"> Enabled</label></div><div><label>Router model</label><input id="smartRouterModel" list="topLevelSmartRouterSuggestions" placeholder="modelId"><datalist id="topLevelSmartRouterSuggestions"></datalist></div><div><label>Fallback</label><select id="smartFallback"><option value="default">default</option><option value="skip">skip</option></select></div><div><label>Cache TTL</label><input id="smartCacheTtl" placeholder="600000"></div><div><label>Max tokens</label><input id="smartMaxTokens" placeholder="256"></div></div><div style="margin-top:.75rem"><div class="action-row"><label>Candidates</label><button id="addSmartCandidateBtn" type="button">\u65B0\u589E Candidate</button></div><div id="smartCandidatesList" class="list-editor"><div class="panel" style="margin-bottom:0"><span class="muted">No smart candidates yet</span></div></div></div></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Governance</strong><span class="muted">\u5F71\u5B50\u6821\u9A8C\u3001\u7EA7\u8054\u4E0E\u89C2\u6D4B\u76F8\u5173\u914D\u7F6E</span></div><div class="control-grid"><div><label><input id="governanceEnabled" type="checkbox"> Enabled</label></div><div><label><input id="governanceAlignmentEnabled" type="checkbox"> Alignment</label></div><div><label>Summarizer model</label><input id="governanceSummarizerModel" list="topLevelGovernanceSummarizerSuggestions" placeholder="modelId"><datalist id="topLevelGovernanceSummarizerSuggestions"></datalist></div><div><label><input id="governanceSemanticEnabled" type="checkbox"> Semantic</label></div><div><label>Classifier model</label><input id="governanceClassifierModel" list="topLevelGovernanceClassifierSuggestions" placeholder="modelId"><datalist id="topLevelGovernanceClassifierSuggestions"></datalist></div><div><label><input id="governanceShadowEnabled" type="checkbox"> Shadow</label></div><div><label>Verifier model</label><input id="governanceVerifierModel" list="topLevelGovernanceVerifierSuggestions" placeholder="modelId"><datalist id="topLevelGovernanceVerifierSuggestions"></datalist></div></div><div style="margin-top:.75rem"><div class="action-row"><label>Cascade levels</label><button id="addCascadeLevelBtn" type="button">\u65B0\u589E Level</button></div><div id="governanceCascadeLevelsList" class="list-editor"><div class="panel" style="margin-bottom:0"><span class="muted">No cascade levels yet</span></div></div></div></div></div></div><div class="alert info"><strong>Models field guide</strong><div class="muted">\u65B0\u914D\u7F6E\u8BF7\u4F7F\u7528\u5165\u53E3\u5B57\u6BB5\uFF1Aid / api / key / interface / model / thinking / metadata\uFF1Bapi_key / api_base_url / protocol \u4EC5\u4F5C\u4E3A\u65E7\u914D\u7F6E\u517C\u5BB9\u8BFB\u53D6\u3002</div></div><div id="modelsFormGrid" class="models-form-grid"><div class="panel" style="margin-bottom:0"><span class="muted">No draft models loaded yet</span></div></div><textarea id="configDraftEditor" aria-label="JSON config draft" style="width:100%;min-height:240px;margin-top:.75rem;padding:.75rem;border-radius:12px;border:1px solid #d1d5db;font:12px/1.5 ui-monospace,SFMono-Regular,monospace" spellcheck="false" placeholder='{"Models":[{"id":"sonnet","api":"https://...","key":"sk-...","interface":"openai","model":"anthropic/claude-sonnet-4","thinking":"auto","metadata":{"vendor_hint":"openrouter"}}],"Router":{"default":"sonnet"}}'></textarea><div class="muted">JSON \u8349\u7A3F\u540C\u6837\u5EFA\u8BAE\u53EA\u5199\u5165\u53E3\u5B57\u6BB5\uFF1B\u4FDD\u5B58\u65F6\u4F1A\u81EA\u52A8\u5F52\u4E00\uFF0C\u65E7\u5B57\u6BB5\u522B\u540D\u65E0\u9700\u624B\u52A8\u8865\u5145\u3002</div><div class="subpanel"><div class="row"><strong>Preview Diff</strong><span class="muted">\u5BF9\u6BD4\u5F53\u524D\u8FD0\u884C\u914D\u7F6E\u4E0E\u8349\u7A3F\u914D\u7F6E\u7684 compiled model \u53D8\u5316</span></div><div id="compiledDiffSummary" class="diff-summary"><div class="diff-chip"><span class="muted">Added providers</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Removed providers</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Changed providers</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Added models</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Removed models</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Changed models</span><strong>0</strong></div></div><table id="compiledDiffTable" class="management-table"><thead><tr><th>Scope</th><th>Type</th><th>Key</th><th>Changed fields</th><th>Target</th></tr></thead><tbody><tr><td colspan="5" class="muted">Preview a draft to inspect compiled registry changes</td></tr></tbody></table></div><div class="subpanel"><div class="row"><strong>Reference Impact</strong><span class="muted">\u5206\u6790 Router / SmartRouter / Governance\uFF08shadow/cascade\uFF09\u7B49 modelId \u5F15\u7528\u662F\u5426\u4ECD\u7136\u6709\u6548</span></div><div id="referenceImpactSummary" class="diff-summary"><div class="diff-chip"><span class="muted">Total refs</span><strong>0</strong></div><div class="diff-chip"><span class="muted">modelId refs</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Legacy refs</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Valid modelIds</span><strong>0</strong></div><div class="diff-chip"><span class="muted">Missing modelIds</span><strong>0</strong></div></div><table id="referenceImpactTable" class="management-table"><thead><tr><th>Path</th><th>Ref</th><th>Type</th><th>Status</th><th>Resolved target</th><th>Suggestions</th></tr></thead><tbody><tr><td colspan="6" class="muted">Preview a draft to inspect model reference impact</td></tr></tbody></table></div></div><div class="subpanel"><div class="row"><strong>Compiled Models</strong><span class="muted">\u67E5\u770B Models \u7F16\u8BD1\u540E\u7684 provider \u4E0E\u8DEF\u7531\u6620\u5C04</span></div><div id="compiledModelsStatus" class="muted" style="margin-top:.75rem">\u52A0\u8F7D compiled models \u4E2D...</div><div class="detail-grid"><div class="panel" style="margin-bottom:0"><div class="row"><strong>Compiled providers</strong><span class="muted">\u5185\u90E8 provider\u3001\u6A21\u578B\u5217\u8868\u4E0E transformer</span></div><table id="compiledProvidersTable" class="management-table"><thead><tr><th>Provider</th><th>Interface</th><th>Models</th><th>Transformer</th><th>API key</th></tr></thead><tbody><tr><td colspan="5" class="muted">Loading compiled providers...</td></tr></tbody></table></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Model map</strong><span class="muted">modelId \u5230\u5185\u90E8 provider/model\u3001thinking \u4E0E capability \u914D\u7F6E</span></div><table id="compiledModelMapTable" class="management-table"><thead><tr><th>Model ID</th><th>Internal target</th><th>Protocol</th><th>Compatibility profile</th><th>Dispatch format</th><th>Thinking</th><th>Capabilities</th><th>Source</th></tr></thead><tbody><tr><td colspan="8" class="muted">Loading model map...</td></tr></tbody></table></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Model pools</strong><span class="muted">Registration.models \u7F16\u8BD1\u51FA\u7684\u540C\u6A21\u578B\u591A\u6E90\u6C60\uFF0C\u5F53\u524D\u4E3A priority \u8C03\u5EA6\u5951\u7EA6</span></div><table id="compiledModelPoolsTable" class="management-table"><thead><tr><th>Pool</th><th>Strategy</th><th>Active endpoint</th><th>Endpoints</th><th>Warnings</th></tr></thead><tbody><tr><td colspan="5" class="muted">Loading model pools...</td></tr></tbody></table></div></div></div></div></section><section id="maintainerSurface" class="surface-panel" data-surface="maintainer" hidden><div class="panel"><div class="surface-heading"><strong>\u7EF4\u62A4\u8005\u5DE5\u4F5C\u53F0</strong><span class="muted">\u8FD0\u884C\u89C2\u6D4B\u3001Governance Trace\u3001metrics\u3001\u5F52\u6863\u4E0E\u7EF4\u62A4\u64CD\u4F5C\u3002</span></div><div id="securitySummary" class="alert info"><strong>Security pending</strong><div class="muted">\u7B49\u5F85\u670D\u52A1\u5B89\u5168\u72B6\u6001\u52A0\u8F7D</div></div><div class="subpanel" id="roleConnectionGuide"><div class="row"><strong>Role & connection guide</strong><span class="muted">\u6309\u5F53\u524D local / server / cloud \u89D2\u8272\u786E\u8BA4\u76D1\u542C\u5730\u5740\u3001\u7EF4\u62A4\u5165\u53E3\u548C\u8FDC\u7A0B\u5BA2\u6237\u7AEF\u63A5\u5165\u65B9\u5F0F\u3002</span></div><div class="scope-guide"><div><strong>current role</strong><span id="roleConnectionSummary" class="muted">${escapedRuntimeMode} / ${escapedServiceRole}</span></div><div><strong>listener</strong><span id="listenerConnectionSummary" class="muted">${escapedListenerSummary}</span></div><div><strong>remote clients</strong><span id="clientConnectionSummary" class="muted">${escapedClientConnectionSummary}</span></div></div><div class="muted" style="margin-top:.75rem">${escapedLocalUserRoleGuide}</div><div class="muted" style="margin-top:.5rem">${escapedServerMaintainerRoleGuide}</div><div class="muted" style="margin-top:.5rem">${escapedRemoteClientRoleGuide}</div></div><div class="subpanel" id="authScopeGuide"><div class="row"><strong>Auth scope guide</strong><span class="muted">\u6309\u7528\u9014\u53D1\u653E\u6700\u5C0F\u6743\u9650 key\uFF0C\u8FDC\u7A0B\u5BA2\u6237\u7AEF\u4E0D\u8981\u590D\u7528 admin key\u3002</span></div><div class="scope-guide"><div><strong>admin</strong><span class="muted">\u7EF4\u62A4\u8005\u4F7F\u7528\uFF1A/ui\u3001\u914D\u7F6E\u4FDD\u5B58\u3001\u91CD\u542F\u3001auth \u7BA1\u7406\u548C\u6CBB\u7406\u5199\u64CD\u4F5C\u3002</span></div><div><strong>client</strong><span class="muted">\u5BA2\u6237\u7AEF\u6A21\u578B\u8C03\u7528\uFF1A/v1/messages\u3001/v1/chat/completions\uFF1B\u6A21\u578B\u8C03\u7528\u914D\u989D\u53EA\u8BA1\u5165\u8FD9\u91CC\u3002</span></div><div><strong>read-only</strong><span class="muted">\u53EA\u8BFB\u89C2\u6D4B\uFF1Ahealth\u3001service-info\u3001compiled models\u3001transformers \u548C governance GET\u3002</span></div><div><strong>client + read-only</strong><span class="muted">\u8FDC\u7A0B token \u540C\u65F6\u9700\u8981 ready/status \u63A2\u6D4B\u4E0E\u6A21\u578B\u8C03\u7528\u65F6\u4F7F\u7528\u8BE5\u7EC4\u5408\u3002</span></div></div><div class="muted" style="margin-top:.75rem">\u7BA1\u7406\u5165\u53E3\uFF1A\u7528 admin key \u8C03\u7528 <code>GET /api/auth/keys</code> \u67E5\u770B\u5217\u8868\uFF0C<code>POST /api/auth/keys</code> \u751F\u6210 key\uFF0C<code>POST /api/auth/keys/:id/revoke</code> \u540A\u9500 key\uFF1B\u751F\u6210\u7684 secret \u53EA\u8FD4\u56DE\u4E00\u6B21\uFF0C\u8BF7\u76F4\u63A5\u4EA4\u7ED9\u5BF9\u5E94\u5BA2\u6237\u7AEF\u4FDD\u5B58\u3002</div></div><div class="subpanel"><div class="row"><strong>Auth quota</strong><span class="muted">\u6309 managed key \u67E5\u770B\u6A21\u578B\u8C03\u7528\u914D\u989D\u3001\u5F53\u524D\u7528\u91CF\u4E0E\u7A97\u53E3\u91CD\u7F6E\u65F6\u95F4</span></div><table id="authQuotaTable" class="management-table"><thead><tr><th>Key</th><th>Scope</th><th>Status</th><th>Requests</th><th>Tokens</th><th>Window</th></tr></thead><tbody><tr><td colspan="6" class="muted">Waiting for service status...</td></tr></tbody></table></div><div class="row"><strong>\u7EF4\u62A4\u8005\u89C2\u6D4B</strong><span class="muted">\u6309 requestId / sessionKey / routeReason \u8FC7\u6EE4 Governance Trace\uFF0C\u5E76\u67E5\u770B\u8FD1\u671F\u6CBB\u7406\u6307\u6807\u3002</span></div><div class="row"><input id="requestId" placeholder="requestId"><input id="sessionKey" placeholder="sessionKey"><input id="routeReason" placeholder="routeReason"><select id="cascadeTriggered"><option value="">cascadeTriggered</option><option value="true">cascade=true</option><option value="false">cascade=false</option></select><select id="shadowChecked"><option value="">shadowChecked</option><option value="true">shadow=true</option><option value="false">shadow=false</option></select><select id="windowMs"><option value="900000">15m window</option><option value="3600000" selected>1h window</option><option value="21600000">6h window</option><option value="86400000">24h window</option></select><input id="limit" placeholder="limit" value="20"><button id="refreshBtn">\u5237\u65B0</button></div><div class="muted" style="margin-top:.75rem">\u6570\u636E\u6E90\uFF1A<code>/api/models/compiled</code>\u3001<code>/api/models/compiled/preview</code>\u3001<code>/api/governance/traces</code>\u3001<code>/api/governance/traces/:requestId</code>\u3001<code>/api/governance/archives</code>\u3001<code>/api/governance/metrics</code>\u3001<code>/api/governance/health</code>\u3001<code>/api/governance/metrics/export</code>\u3001<code>/api/governance/metrics/exports</code></div><div id="metricsGrid" class="stats"><div class="stat"><span class="muted">Health</span><strong>-</strong></div><div class="stat"><span class="muted">Recent traces</span><strong>-</strong></div><div class="stat"><span class="muted">Sticky hit rate</span><strong>-</strong></div><div class="stat"><span class="muted">Cascade rate</span><strong>-</strong></div><div class="stat"><span class="muted">Shadow rate</span><strong>-</strong></div><div class="stat"><span class="muted">Alignment rate</span><strong>-</strong></div><div class="stat"><span class="muted">Model switch rate</span><strong>-</strong></div><div class="stat"><span class="muted">Alignment on switch</span><strong>-</strong></div><div class="stat"><span class="muted">Avg latency</span><strong>-</strong></div></div><div class="subpanel"><div class="row"><strong>Anomaly alerts</strong><span class="muted">\u68C0\u6D4B\u8FD1\u671F\u6CBB\u7406\u5F02\u5E38\u4E0E\u7A81\u589E</span></div><div id="healthSummary" class="alert info"><strong>Health pending</strong><div class="muted">\u7B49\u5F85\u6CBB\u7406\u5065\u5EB7\u6458\u8981\u52A0\u8F7D</div></div><div id="anomalyList" class="alert-list"><div class="alert info"><strong>No alerts yet</strong><div class="muted">\u7B49\u5F85\u6CBB\u7406\u6307\u6807\u52A0\u8F7D</div></div></div></div><div class="subpanel"><div class="row"><strong>Anomaly tuning</strong><span class="muted">\u6765\u81EA\u914D\u7F6E\u6587\u4EF6\uFF0C\u53EF\u5728\u6B64\u4E34\u65F6\u8986\u76D6\u5F53\u524D\u9875\u9762\u67E5\u8BE2</span></div><div class="control-grid"><div><label>Min sample</label><input id="minSampleSize" value="${escapedMinSampleSize}"></div><div><label>Cascade warn</label><input id="cascadeWarnRate" value="${escapedCascadeWarnRate}"></div><div><label>Shadow warn</label><input id="shadowWarnRate" value="${escapedShadowWarnRate}"></div><div><label>Latency warn ms</label><input id="latencyWarnMs" value="${escapedLatencyWarnMs}"></div></div><div class="row" style="margin-top:.75rem"><button id="saveThresholdsBtn" type="button">\u4FDD\u5B58\u9608\u503C\u5230\u914D\u7F6E</button><span id="saveThresholdsStatus" class="muted">\u5F53\u524D\u4EC5\u4F5C\u4E3A\u9875\u9762\u67E5\u8BE2\u53C2\u6570\uFF1B\u70B9\u51FB\u53EF\u5199\u56DE\u914D\u7F6E\u6587\u4EF6</span></div></div><div class="subpanel"><div class="row"><strong>Window buckets</strong><span id="bucketHint" class="muted">\u6309\u65F6\u95F4\u7A97\u67E5\u770B\u8FD1\u671F\u6CBB\u7406\u8D8B\u52BF</span></div><div id="bucketGrid" class="bucket-grid"><div class="stat"><span class="muted">Loading buckets</span><strong>-</strong></div></div></div><div class="detail-grid"><div class="panel" style="margin-bottom:0"><div class="row"><strong>Route ranking</strong><span class="muted">\u8FD1\u671F\u547D\u4E2D\u539F\u56E0 Top 5</span></div><ul id="routeRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Model ranking</strong><span class="muted">\u8FD1\u671F\u6700\u7EC8\u6A21\u578B Top 5</span></div><ul id="modelRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Intent ranking</strong><span class="muted">\u8FD1\u671F\u8BED\u4E49\u610F\u56FE Top 5</span></div><ul id="intentRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Outcome by route</strong><span class="muted">\u5207\u6362\u3001alignment\u3001cascade \u4E0E\u5EF6\u8FDF</span></div><ul id="routeOutcomeRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Outcome by model</strong><span class="muted">\u6700\u7EC8\u6A21\u578B\u5207\u6362\u4E0E\u5EF6\u8FDF\u8868\u73B0</span></div><ul id="modelOutcomeRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Outcome by intent</strong><span class="muted">\u4EFB\u52A1\u610F\u56FE\u5207\u6362\u4E0E\u5EF6\u8FDF\u8868\u73B0</span></div><ul id="intentOutcomeRanking" class="mini-list"><li><span class="muted">Loading</span><strong>-</strong></li></ul></div><div class="panel" style="margin-bottom:0"><div class="row"><strong>Trend detail</strong><span class="muted">\u6BCF\u4E2A bucket \u7684\u8BE6\u7EC6\u547D\u4E2D\u7387</span></div><table id="trendTable" class="trend-table"><thead><tr><th>Bucket</th><th>Traces</th><th>Sticky</th><th>Cascade</th><th>Shadow</th><th>Alignment</th></tr></thead><tbody><tr><td colspan="6" class="muted">Loading...</td></tr></tbody></table></div></div><table id="traceTable"><thead><tr><th>Request</th><th>Session</th><th>Final Model</th><th>Reasons</th><th>Latency</th><th>Inspect</th></tr></thead><tbody><tr><td colspan="6" class="muted">\u52A0\u8F7D\u4E2D...</td></tr></tbody></table></div><div class="panel"><div class="row"><strong>Trace Detail</strong><span id="detailHint" class="muted">\u70B9\u51FB\u4E0A\u8868\u4E2D\u7684 View \u67E5\u770B\u8BE6\u60C5</span></div><pre id="traceDetail">{}</pre></div><div class="panel"><div class="row"><strong>Snapshot Management</strong><span class="muted">\u67E5\u770B\u5BFC\u51FA\u5386\u53F2\u3001\u5B9A\u65F6\u4EFB\u52A1\uFF0C\u5E76\u624B\u52A8\u521B\u5EFA\u5FEB\u7167</span></div><div class="action-row"><select id="snapshotFormat"><option value="json">snapshot json</option><option value="csv">snapshot csv</option></select><button id="createSnapshotBtn" type="button">\u751F\u6210\u5FEB\u7167</button><span id="snapshotStatus" class="muted">\u5C1A\u672A\u521B\u5EFA\u5FEB\u7167</span></div><table id="exportTable" class="management-table"><thead><tr><th>Export</th><th>Kind</th><th>Format</th><th>Created</th></tr></thead><tbody><tr><td colspan="4" class="muted">Loading exports...</td></tr></tbody></table><table id="scheduleTable" class="management-table"><thead><tr><th>Schedule</th><th>Interval</th><th>Format</th><th>Last run</th></tr></thead><tbody><tr><td colspan="4" class="muted">Loading schedules...</td></tr></tbody></table></div><div class="panel"><div class="row"><strong>Archive Management</strong><span class="muted">\u6D4F\u89C8\u538B\u7F29\u5F52\u6863\u5E76\u67E5\u770B\u5206\u9875\u7ED3\u679C</span></div><div class="action-row"><input id="archiveDate" placeholder="YYYY-MM-DD"><input id="archivePage" placeholder="page" value="1"><input id="archivePageSize" placeholder="pageSize" value="5"><button id="loadArchivesBtn" type="button">\u52A0\u8F7D\u5F52\u6863</button><span id="archiveStatus" class="muted">\u5C1A\u672A\u52A0\u8F7D\u5F52\u6863</span></div><table id="archiveTable" class="management-table"><thead><tr><th>Archive</th><th>Range</th><th>Count</th><th>Compressed</th></tr></thead><tbody><tr><td colspan="4" class="muted">Loading archives...</td></tr></tbody></table></div><div class="panel"><p>\u5176\u4ED6\u7BA1\u7406 API\uFF1A</p><ul><li><code>GET /api/config</code> \u2014 \u8BFB\u53D6\u5F53\u524D\u914D\u7F6E</li><li><code>GET /api/models/compiled</code> \u2014 \u67E5\u770B Models \u7F16\u8BD1\u540E\u7684\u5185\u90E8 provider / model \u6620\u5C04</li><li><code>POST /api/models/compiled/preview</code> \u2014 \u7528\u914D\u7F6E\u8349\u7A3F\u9884\u89C8 compiled models \u7ED3\u679C\uFF0C\u4E0D\u5199\u56DE\u6587\u4EF6</li><li><code>POST /api/config</code> \u2014 \u4FDD\u5B58\u914D\u7F6E</li><li><code>GET /api/transformers</code> \u2014 \u67E5\u770B\u5DF2\u52A0\u8F7D transformer</li><li><code>POST /api/restart</code> \u2014 \u91CD\u542F\u670D\u52A1</li><li><code>GET /api/governance/archives</code> \u2014 \u67E5\u770B\u6CBB\u7406\u5F52\u6863\u5217\u8868</li><li><code>GET /api/governance/archives/:file</code> \u2014 \u67E5\u770B\u5F52\u6863\u5185 traces</li><li><code>POST /api/governance/archives/:file/delete</code> \u2014 \u5220\u9664\u6307\u5B9A\u5F52\u6863</li><li><code>GET /api/governance/health</code> \u2014 \u67E5\u770B\u6CBB\u7406\u5065\u5EB7\u6458\u8981</li><li><code>GET /api/auth/audit</code> \u2014 \u67E5\u770B\u9274\u6743\u5BA1\u8BA1\u6458\u8981</li><li><code>POST /api/governance/metrics/snapshots</code> \u2014 \u751F\u6210\u4E00\u6B21\u6CBB\u7406\u6307\u6807\u5FEB\u7167</li><li><code>POST /api/governance/metrics/schedules</code> \u2014 \u6CE8\u518C\u5B9A\u65F6\u5FEB\u7167\u4EFB\u52A1</li></ul></div></section><script>const tbody=document.querySelector('#traceTable tbody');const detail=document.getElementById('traceDetail');const detailHint=document.getElementById('detailHint');const draftPreviewStatus=document.getElementById('draftPreviewStatus');const draftPresetMode=document.getElementById('draftPresetMode');const draftPresetModeHint=document.getElementById('draftPresetModeHint');const draftPresetList=document.getElementById('draftPresetList');const draftPreviewMeta=document.getElementById('draftPreviewMeta');const draftValidationList=document.getElementById('draftValidationList');const capabilityWarningsList=document.getElementById('capabilityWarningsList');const configDraftEditor=document.getElementById('configDraftEditor');const draftSummaryGrid=document.getElementById('draftSummaryGrid');const modelsFormGrid=document.getElementById('modelsFormGrid');const draftRouterDefault=document.getElementById('draftRouterDefault');const draftModelsCount=document.getElementById('draftModelsCount');const serviceReadyStatus=document.getElementById('serviceReadyStatus');const servicePortStatus=document.getElementById('servicePortStatus');const serviceModeStatus=document.getElementById('serviceModeStatus');const serviceRoleStatus=document.getElementById('serviceRoleStatus');const listenerStatusSummary=document.getElementById('listenerStatusSummary');const roleConnectionSummary=document.getElementById('roleConnectionSummary');const listenerConnectionSummary=document.getElementById('listenerConnectionSummary');const clientConnectionSummary=document.getElementById('clientConnectionSummary');const remoteStatusSummary=document.getElementById('remoteStatusSummary');const registrationStatusSummary=document.getElementById('registrationStatusSummary');const authStatusSummary=document.getElementById('authStatusSummary');const securityStatusSummary=document.getElementById('securityStatusSummary');const modelCountStatus=document.getElementById('modelCountStatus');const routerDefaultStatus=document.getElementById('routerDefaultStatus');const triggerEnabled=document.getElementById('triggerEnabled');const triggerIntentEnabled=document.getElementById('triggerIntentEnabled');const triggerAnalysisScope=document.getElementById('triggerAnalysisScope');const triggerIntentModel=document.getElementById('triggerIntentModel');const triggerRulesList=document.getElementById('triggerRulesList');const smartEnabled=document.getElementById('smartEnabled');const smartRouterModel=document.getElementById('smartRouterModel');const smartFallback=document.getElementById('smartFallback');const smartCacheTtl=document.getElementById('smartCacheTtl');const smartMaxTokens=document.getElementById('smartMaxTokens');const smartCandidatesList=document.getElementById('smartCandidatesList');const governanceEnabled=document.getElementById('governanceEnabled');const governanceAlignmentEnabled=document.getElementById('governanceAlignmentEnabled');const governanceSummarizerModel=document.getElementById('governanceSummarizerModel');const governanceSemanticEnabled=document.getElementById('governanceSemanticEnabled');const governanceClassifierModel=document.getElementById('governanceClassifierModel');const governanceShadowEnabled=document.getElementById('governanceShadowEnabled');const governanceVerifierModel=document.getElementById('governanceVerifierModel');const governanceCascadeLevelsList=document.getElementById('governanceCascadeLevelsList');const topLevelTriggerIntentSuggestions=document.getElementById('topLevelTriggerIntentSuggestions');const topLevelSmartRouterSuggestions=document.getElementById('topLevelSmartRouterSuggestions');const topLevelGovernanceSummarizerSuggestions=document.getElementById('topLevelGovernanceSummarizerSuggestions');const topLevelGovernanceClassifierSuggestions=document.getElementById('topLevelGovernanceClassifierSuggestions');const topLevelGovernanceVerifierSuggestions=document.getElementById('topLevelGovernanceVerifierSuggestions');const compiledModelsStatus=document.getElementById('compiledModelsStatus');const compiledDiffSummary=document.getElementById('compiledDiffSummary');const compiledDiffTableBody=document.querySelector('#compiledDiffTable tbody');const referenceImpactSummary=document.getElementById('referenceImpactSummary');const referenceImpactTableBody=document.querySelector('#referenceImpactTable tbody');const compiledProvidersTableBody=document.querySelector('#compiledProvidersTable tbody');const compiledModelMapTableBody=document.querySelector('#compiledModelMapTable tbody');const compiledModelPoolsTableBody=document.querySelector('#compiledModelPoolsTable tbody');const metricsGrid=document.getElementById('metricsGrid');const bucketGrid=document.getElementById('bucketGrid');const bucketHint=document.getElementById('bucketHint');const routeRanking=document.getElementById('routeRanking');const modelRanking=document.getElementById('modelRanking');const intentRanking=document.getElementById('intentRanking');const routeOutcomeRanking=document.getElementById('routeOutcomeRanking');const modelOutcomeRanking=document.getElementById('modelOutcomeRanking');const intentOutcomeRanking=document.getElementById('intentOutcomeRanking');const healthSummary=document.getElementById('healthSummary');const securitySummary=document.getElementById('securitySummary');const authQuotaTableBody=document.querySelector('#authQuotaTable tbody');const anomalyList=document.getElementById('anomalyList');const saveThresholdsStatus=document.getElementById('saveThresholdsStatus');const snapshotStatus=document.getElementById('snapshotStatus');const archiveStatus=document.getElementById('archiveStatus');const exportTableBody=document.querySelector('#exportTable tbody');const scheduleTableBody=document.querySelector('#scheduleTable tbody');const archiveTableBody=document.querySelector('#archiveTable tbody');const trendTableBody=document.querySelector('#trendTable tbody');const surfaceTabs=Array.from(document.querySelectorAll('[data-surface-target]'));const surfacePanels=Array.from(document.querySelectorAll('[data-surface]'));let currentDraftConfig={};let knownModelIds=[];let activeValidationHighlight=null;const draftPresets={  balanced:{ label:'\u5E73\u8861\u9884\u8BBE', description:'\u542F\u7528 SmartRouter\uFF0C\u5E76\u586B\u5145\u5E73\u8861/\u5FEB\u901F\u5019\u9009\u6A21\u578B\u7EC4\u5408\u3002', affects:['Router.default','SmartRouter.enabled','SmartRouter.candidates'], routerDefault:'sonnet', smartEnabled:true, smartCandidates:[{ model:'sonnet', description:'balanced default' },{ model:'haiku', description:'fast lightweight' }] },  fast:{ label:'\u5FEB\u901F\u9884\u8BBE', description:'\u9ED8\u8BA4\u8D70\u8F7B\u91CF\u6A21\u578B\uFF0C\u5E76\u6DFB\u52A0\u4E00\u6761\u5FEB\u901F\u54CD\u5E94\u8DEF\u7531\u89C4\u5219\u3002', affects:['Router.default','SmartRouter.enabled','SmartRouter.rules'], routerDefault:'haiku', triggerEnabled:true, triggerRules:[{ name:'quick-response', enabled:true, priority:20, model:'haiku', patterns:[{ type:'exact', keywords:['\u5FEB\u901F\u5904\u7406','\u5FEB\u901F\u56DE\u7B54'] }] }] },  governance:{ label:'\u6CBB\u7406\u9884\u8BBE', description:'\u6253\u5F00\u6CBB\u7406\u589E\u5F3A\u4E0E\u6821\u9A8C\u80FD\u529B\uFF0C\u5E76\u586B\u5165 summarizer/classifier/verifier \u793A\u4F8B\u6A21\u578B\u3002', affects:['Governance.enabled','SmartRouter.sticky.alignment','SmartRouter.semantic','Governance.shadow'], governanceEnabled:true, governanceAlignmentEnabled:true, governanceSemanticEnabled:true, governanceShadowEnabled:true, governanceSummarizerModel:'sonnet', governanceClassifierModel:'sonnet', governanceVerifierModel:'haiku' }};const modelProviderTemplates=${toInlineScriptJson(getUiProviderTemplates())};const defaultProviderTemplateKey='openrouter';function esc(v){return String(v ?? '').replace(/[&<>"]/g,m=>({ '&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;' }[m]));}function pct(v){return (Number(v || 0) * 100).toFixed(1)+'%';}function fmt(v){return Number(v || 0).toFixed(2);}function shortTime(v){ const d=new Date(v); return d.toISOString().slice(11,16); }function limitText(used,limit){ return Number.isFinite(limit) ? (String(used ?? 0)+' / '+String(limit)) : String(used ?? 0); }function renderAuthQuotaTable(quota){  const keys=Array.isArray(quota?.keys) ? quota.keys : [];  if(!keys.length){ authQuotaTableBody.innerHTML='<tr><td colspan="6" class="muted">No managed keys configured</td></tr>'; return; }  authQuotaTableBody.innerHTML=keys.map(item=>{    const usage=item.usage || {};    const quotaCfg=item.quota || {};    const keyName=esc(item.label || item.id || '-')+'<div class="muted"><code>'+esc(item.id || '-')+'</code></div>';    const statusClass=item.status === 'exhausted' ? 'critical' : (item.status === 'watch' ? 'warn' : 'info');    const windowText=quotaCfg.window_seconds ? (esc(quotaCfg.window_seconds)+'s'+(usage.windowResetAt ? '<div class="muted">reset '+esc(String(usage.windowResetAt).replace('T',' ').replace('.000Z','Z'))+'</div>' : '<div class="muted">not started</div>')) : '-';    return '<tr><td>'+keyName+'</td><td>'+esc((item.scopes || []).join(', ') || '-')+'</td><td><span class="pill '+statusClass+'">'+esc(item.status || '-')+'</span></td><td>'+esc(limitText(usage.requestsUsed,usage.requestLimit))+'</td><td>'+esc(limitText(usage.tokensUsed,usage.tokenLimit))+'</td><td>'+windowText+'</td></tr>';  }).join('');}function renderRoleConnectionGuide(data){  const listener=data.listener || {};  const connection=data.clientConnection || {};  const mode=data.runtimeMode || '-';  const role=data.serviceRole || '-';  const listenerText=listener.host ? (listener.host+':'+(listener.port || '-')+(listener.public ? ' (public)' : ' (local)')) : '-';  const connectionText=connection.baseUrl ? (connection.baseUrl+' \xB7 '+(Array.isArray(connection.recommendedScopes) ? connection.recommendedScopes.join(' + ') : '')) : (connection.guidance || '-');  listenerStatusSummary.textContent=listenerText;  roleConnectionSummary.textContent=mode+' / '+role;  listenerConnectionSummary.textContent=listenerText;  clientConnectionSummary.textContent=connectionText || '-';}function setActiveSurface(surfaceName){  surfacePanels.forEach((panel)=>{ panel.hidden=panel.dataset.surface !== surfaceName; });  surfaceTabs.forEach((tab)=>{ const active=tab.dataset.surfaceTarget === surfaceName; tab.classList.toggle('active',active); tab.setAttribute('aria-selected', active ? 'true' : 'false'); });}function inferProviderTemplateKey(model){  const explicit=String(model?.provider_template || '').trim();  if(explicit && modelProviderTemplates[explicit]){ return explicit; }  const api=String(model?.api || model?.api_base_url || '').trim().toLowerCase();  const modelInterface=String(model?.interface || model?.protocol || '').trim().toLowerCase();  const exactMatch=Object.entries(modelProviderTemplates).find(([,item])=>String(item.api || '').trim().toLowerCase()===api && String(item.interface || '').trim().toLowerCase()===modelInterface);  if(exactMatch){ return exactMatch[0]; }  if(api.includes('api.anthropic.com/v1/messages') || modelInterface === 'anthropic'){ return 'anthropic'; }  if(api.includes('openrouter.ai')){ return 'openrouter'; }  if(api.includes('deepseek.com')){ return 'deepseek'; }  if(api.includes('siliconflow.cn')){ return 'siliconflow'; }  if(api.includes('api.openai.com')){ return 'openai-compatible'; }  return '';}function getProviderTemplateContext(model){  const templateKey=inferProviderTemplateKey(model) || defaultProviderTemplateKey;  return { templateKey, template:modelProviderTemplates[templateKey] || modelProviderTemplates[defaultProviderTemplateKey] || {} };}function createDraftModelFromTemplate(templateKey){  const resolvedKey=(templateKey && modelProviderTemplates[templateKey]) ? templateKey : defaultProviderTemplateKey;  const template=modelProviderTemplates[resolvedKey] || {};  return { provider_template:resolvedKey, id:template.suggested_id || '', api:template.api || '', interface:template.interface || 'openai', model:template.default_model || '', thinking:template.default_thinking || 'auto' };}function getModelIdSuggestionsMarkup(idPrefix){  return '<datalist id="'+idPrefix+'">'+knownModelIds.map(modelId=>'<option value="'+esc(modelId)+'"></option>').join('')+'</datalist>';}function resolvePresetModelId(seed){  const source=String(seed || '').trim().toLowerCase();  if(!source || !knownModelIds.length){ return seed; }  if(knownModelIds.includes(seed)){ return seed; }  const ranked=knownModelIds.map((modelId)=>{    const target=String(modelId || '').toLowerCase();    let score=0;    if(target===source){ score+=100; }    if(target.includes(source) || source.includes(target)){ score+=40; }    source.split(/[^a-z0-9]+/).filter(Boolean).forEach((part)=>{ if(target.includes(part)){ score+=Math.min(part.length * 4, 24); } });    return { modelId, score };  }).filter((item)=>item.score>0).sort((a,b)=>b.score-a.score || a.modelId.localeCompare(b.modelId));  return ranked.length ? ranked[0].modelId : seed;}function getTriggerPatternValidationHint(pattern){  if((pattern?.type || 'exact') === 'regex'){    return pattern?.pattern ? { level:'ok', message:'regex pattern \u5DF2\u914D\u7F6E' } : { level:'warn', message:'regex \u6A21\u5F0F\u9700\u8981\u586B\u5199 pattern' };  }  return Array.isArray(pattern?.keywords) && pattern.keywords.some((keyword)=>String(keyword || '').trim()) ? { level:'ok', message:'exact keywords \u5DF2\u914D\u7F6E' } : { level:'warn', message:'exact \u6A21\u5F0F\u81F3\u5C11\u9700\u8981\u4E00\u4E2A keyword' };}function getDraftSmartRouterConfig(config){  const smart={ ...((config && config.SmartRouter) || {}) };  const smartExplicit=config && Object.prototype.hasOwnProperty.call(config,'SmartRouter');  const legacyIntentEnabled=Boolean(config?.TriggerRouter?.llm_intent_recognition);  const legacyIntentModel=config?.TriggerRouter?.intent_model || '';  if(!smart.analysis_scope && config?.TriggerRouter?.analysis_scope){ smart.analysis_scope=config.TriggerRouter.analysis_scope; }  if((!Array.isArray(smart.rules) || !smart.rules.length) && Array.isArray(config?.TriggerRouter?.rules)){ smart.rules=config.TriggerRouter.rules; }  if(!smart.semantic && (config?.Governance?.semantic || config?.TriggerRouter?.llm_intent_recognition)){ smart.semantic={ ...((config && config.Governance && config.Governance.semantic) || {}) }; if(config?.TriggerRouter?.llm_intent_recognition){ smart.semantic.enabled=true; smart.semantic.mode=smart.semantic.mode || 'classifier'; smart.semantic.classifier_model=smart.semantic.classifier_model || config.TriggerRouter.intent_model || ''; } }  if(!smart.sticky && config?.Governance?.sticky){ smart.sticky={ ...(config.Governance.sticky || {}) }; }  if(!smartExplicit && !smart.enabled && (config?.TriggerRouter?.enabled || smart.rules?.length || smart.router_model || smart.candidates?.length || smart.semantic || smart.sticky)){ smart.enabled=true; }  if(smart.enabled){    smart.analysis_scope=smart.analysis_scope || 'last_message';    smart.semantic={ ...(smart.semantic || {}) };    smart.semantic.enabled=smart.semantic.enabled !== undefined ? smart.semantic.enabled : true;    smart.semantic.threshold=smart.semantic.threshold !== undefined ? smart.semantic.threshold : 0.2;    if(legacyIntentEnabled){ smart.semantic.mode=smart.semantic.mode || 'classifier'; smart.semantic.classifier_model=smart.semantic.classifier_model || legacyIntentModel; }    smart.sticky={ ...(smart.sticky || {}) };    smart.sticky.enabled=smart.sticky.enabled !== undefined ? smart.sticky.enabled : true;    smart.sticky.alignment={ ...((smart.sticky && smart.sticky.alignment) || {}) };    smart.sticky.alignment.enabled=smart.sticky.alignment.enabled !== undefined ? smart.sticky.alignment.enabled : true;    smart.sticky.alignment.summarizer_model=smart.sticky.alignment.summarizer_model || smart.router_model || config?.Router?.default || legacyIntentModel || '';  }  return smart;}function renderDraftSummary(config){  const models=Array.isArray(config?.Models) ? config.Models : [];  const smart=getDraftSmartRouterConfig(config);  const triggerRules=Array.isArray(smart?.rules) ? smart.rules : [];  const patternCount=triggerRules.reduce((sum,rule)=>sum + (Array.isArray(rule.patterns) ? rule.patterns.length : 0),0);  const smartCandidates=Array.isArray(smart?.candidates) ? smart.candidates : [];  const cascadeLevels=Array.isArray(config?.Governance?.cascade?.levels) ? config.Governance.cascade.levels : [];  const modelRefCount=[config?.Router?.default, smart?.router_model, smart?.sticky?.alignment?.summarizer_model, smart?.semantic?.classifier_model, config?.Governance?.shadow?.verifier_model].filter(v=>typeof v === 'string' && v.trim()).length + triggerRules.filter(rule=>rule?.model).length + smartCandidates.filter(item=>item?.model).length + cascadeLevels.reduce((sum,level)=>sum + (level?.from ? 1 : 0) + (level?.to ? 1 : 0), 0);  draftSummaryGrid.innerHTML=[    ['Models', models.length],    ['Routing rules', triggerRules.length],    ['Patterns', patternCount],    ['Smart candidates', smartCandidates.length],    ['Cascade levels', cascadeLevels.length],    ['Model refs', modelRefCount]  ].map(([label,value])=>'<div class="stat"><span class="muted">'+esc(label)+'</span><strong>'+esc(value)+'</strong></div>').join('');}function updateStatusSummary(config){  const models=Array.isArray(config?.Models) ? config.Models : [];  modelCountStatus.textContent=String(models.length);  routerDefaultStatus.textContent=config?.Router?.default || '-';}function renderDraftValidation(errors,warnings,issueReport){  const errorList=Array.isArray(errors) ? errors.filter(Boolean) : [];  const warningList=Array.isArray(warnings) ? warnings.filter(Boolean) : [];  const contractIssues=Array.isArray(issueReport?.issues) ? issueReport.issues : [];  if(!errorList.length && !warningList.length && !contractIssues.length){ draftValidationList.innerHTML='<div class="alert info"><strong>No validation issues</strong><div class="muted">\u5F53\u524D\u8349\u7A3F\u672A\u53D1\u73B0\u96C6\u4E2D\u5C55\u793A\u7684\u95EE\u9898</div></div>'; return; }  const extractPath=(text)=>{ const match=String(text).match(/^(Models(?:\\[[0-9]+\\])?(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?|Router(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?|TriggerRouter(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?|SmartRouter(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?|Governance(?:\\.[A-Za-z0-9_\\[\\]\\.]+)?)/); return match ? match[1] : ''; };  const sourceItems=contractIssues.length ? contractIssues.map(item=>({ text:String(item.message || ''), severity:item.severity==='error' ? 'error' : 'warning', path:item.path || '', action:item.action || '' })) : [...errorList.map(item=>({ text:String(item), severity:'error', path:'', action:'' })), ...warningList.map(item=>({ text:String(item), severity:'warning', path:'', action:'' }))];  const grouped=sourceItems.reduce((acc,item)=>{    const text=item.text;    const path=item.path || extractPath(text);    const bucket=path.startsWith('Models') || text.startsWith('Models') ? 'Models' : path.startsWith('Router') || text.startsWith('Router') ? 'Router' : path.startsWith('TriggerRouter') || text.startsWith('TriggerRouter') ? 'SmartRouter' : path.startsWith('SmartRouter') || text.startsWith('SmartRouter') ? 'SmartRouter' : (path.startsWith('Governance.sticky') || path.startsWith('Governance.semantic') || text.startsWith('Governance.sticky') || text.startsWith('Governance.semantic')) ? 'SmartRouter' : path.startsWith('Governance') || text.startsWith('Governance') ? 'Governance' : text.startsWith('JSON parse error') ? 'Draft JSON' : 'Other';    acc[bucket]=acc[bucket] || [];    acc[bucket].push({ text, path, severity:item.severity, action:item.action || '' });    return acc;  }, {});  const errorCount=contractIssues.length ? contractIssues.filter(item=>item.severity==='error').length : errorList.length;  const warningCount=contractIssues.length ? contractIssues.filter(item=>item.severity!=='error').length : warningList.length;  const summary='<div class="alert info"><div class="row"><strong>Validation summary</strong><span class="pill">'+esc(errorCount)+' errors / '+esc(warningCount)+' warnings</span></div><div class="muted">'+(errorCount ? '\u8BF7\u4F18\u5148\u4FEE\u590D errors\uFF0C\u518D\u51B3\u5B9A\u662F\u5426\u63A5\u53D7 warnings\u3002' : '\u5F53\u524D\u65E0\u963B\u65AD\u9519\u8BEF\uFF0C\u53EF\u6309\u9700\u5904\u7406 warnings\u3002')+'</div></div>';  draftValidationList.innerHTML=summary + Object.entries(grouped).map(([bucket,items])=>{ const hasError=items.some(item=>item.severity==='error'); const levelClass=hasError ? 'warn' : 'info'; const actionLabel=hasError ? 'repair first' : 'review before save'; return '<div class="alert '+levelClass+'"><div class="row"><strong>'+esc(bucket)+'</strong><span class="pill">'+esc(items.length)+' issues</span></div><div class="muted">'+esc(actionLabel)+'</div><div>'+items.slice(0,4).map(item=>'<div>'+(item.path ? ('<button type="button" class="pill" data-validation-path="'+esc(item.path)+'">'+esc(item.path)+'</button> ') : '')+'<span class="pill">'+esc(item.severity==='error' ? 'error' : 'warning')+'</span> '+esc(item.text)+(item.action ? ('<div class="muted">Action: '+esc(item.action)+'</div>') : '')+'</div>').join('')+'</div></div>'; }).join('');}function getCapabilityWarningActionLabel(code){  if(code==='thinking_ignored'){ return '\u79FB\u9664 thinking'; }  if(code==='tools_text_fallback' || code==='images_text_fallback'){ return '\u6062\u590D\u9ED8\u8BA4 capability'; }  return '';}function renderCapabilityWarnings(report){  const entries=Array.isArray(report?.entries) ? report.entries : [];  if(!entries.length){ capabilityWarningsList.innerHTML='<div class="alert info"><strong>No capability warnings</strong><div class="muted">\u5F53\u524D compiled models \u672A\u53D1\u73B0\u9700\u8981\u989D\u5916\u63D0\u793A\u7684\u80FD\u529B\u964D\u7EA7</div></div>'; return; }  const summary=report?.summary || {};  capabilityWarningsList.innerHTML='<div class="alert info"><strong>Capability warning summary</strong><div class="muted">warn '+esc(summary.warn ?? 0)+' / info '+esc(summary.info ?? 0)+' / total '+esc(summary.total ?? entries.length)+'</div></div>' + entries.map(item=>{ const actionLabel=getCapabilityWarningActionLabel(item.code); return '<div class="alert '+esc(item.level === 'warn' ? 'warn' : 'info')+'"><div class="row"><strong>'+esc(item.code || item.level || 'warning')+'</strong><span class="pill">'+esc(item.modelId || '-').trim()+'</span></div><div>'+(item.path ? ('<button type="button" class="pill" data-validation-path="'+esc(item.path)+'">'+esc(item.path)+'</button> ') : '')+esc(item.message || '')+'</div>'+(actionLabel ? ('<div class="row" style="margin-top:.5rem"><button type="button" data-apply-warning-path="'+esc(item.path || '')+'" data-apply-warning-code="'+esc(item.code || '')+'">'+esc(actionLabel)+'</button></div>') : '')+'</div>'; }).join('');}function findValidationTarget(path){  if(!path){ return null; }  if(path.startsWith('Models')){ return modelsFormGrid; }  if(path === 'Router.default'){ return draftRouterDefault; }  if(path.startsWith('TriggerRouter.intent_model')){ return triggerIntentModel; }  if(path.startsWith('TriggerRouter.rules[')){ return triggerRulesList; }  if(path.startsWith('SmartRouter.router_model')){ return smartRouterModel; }  if(path.startsWith('SmartRouter.candidates[')){ return smartCandidatesList; }  if(path.startsWith('Governance.cascade.levels[')){ return governanceCascadeLevelsList; }  if(path.startsWith('Governance.sticky.alignment')){ return governanceSummarizerModel; }  if(path.startsWith('Governance.semantic')){ return governanceClassifierModel; }  if(path.startsWith('Governance.shadow')){ return governanceVerifierModel; }  if(path.startsWith('Governance')){ return governanceEnabled; }  return null;}function jumpToValidationPath(path){  const target=findValidationTarget(path);  if(!target || typeof target.scrollIntoView !== 'function'){ return; }  if(activeValidationHighlight && activeValidationHighlight.classList){ activeValidationHighlight.classList.remove('jump-highlight'); }  target.scrollIntoView({ behavior:'smooth', block:'center' });  if(target.classList){ target.classList.add('jump-highlight'); activeValidationHighlight=target; setTimeout(()=>{ if(target.classList){ target.classList.remove('jump-highlight'); if(activeValidationHighlight===target){ activeValidationHighlight=null; } } }, 1800); }  if(typeof target.focus === 'function'){ target.focus({ preventScroll:true }); }}function renderDraftPresetModeHint(){  const overwriteMode=draftPresetMode.value === 'replace';  draftPresetModeHint.textContent=overwriteMode ? 'overwrite \u4F1A\u91CD\u7F6E SmartRouter / Governance \u76F8\u5173\u8868\u5355\uFF0C\u518D\u5E94\u7528\u9884\u8BBE' : 'append / merge \u4F1A\u5C3D\u91CF\u4FDD\u7559\u5F53\u524D\u8349\u7A3F\uFF0C\u4EC5\u8865\u5145 SmartRouter / Governance \u76F8\u5173\u5B57\u6BB5';}function deriveActualAffectedAreas(preview){  const areas=new Set();  const diff=preview?.diff || {};  const impact=preview?.referenceImpact || {};  if((diff.providerChanges || []).length || (diff.modelChanges || []).length){ areas.add('Models'); }  (impact.entries || []).forEach((entry)=>{    const path=String(entry.path || '');    if(path.startsWith('Router.')){ areas.add('Router'); }    else if(path.startsWith('TriggerRouter.')){ areas.add('SmartRouter'); }    else if(path.startsWith('SmartRouter.')){ areas.add('SmartRouter'); }    else if(path.startsWith('Governance.sticky') || path.startsWith('Governance.semantic')){ areas.add('SmartRouter'); }    else if(path.startsWith('Governance.')){ areas.add('Governance'); }  });  return Array.from(areas);}function renderDraftPreviewMeta(meta){  if(!meta){ draftPreviewMeta.innerHTML='<div class="alert info"><strong>Draft preview mode</strong><div class="muted">\u5F53\u524D\u663E\u793A\u4E3A\u8349\u7A3F\u7F16\u8F91\u89C6\u56FE\uFF0C\u9884\u8BBE dry-run \u4F1A\u5728\u8FD9\u91CC\u63D0\u793A\u5F71\u54CD\u8303\u56F4\u3002</div></div>'; return; }  draftPreviewMeta.innerHTML='<div class="alert info"><strong>'+esc(meta.title || 'Preset dry-run')+'</strong><div>'+esc(meta.description || '')+'</div><div class="muted">\u6A21\u5F0F\uFF1A'+esc(meta.mode || '-')+' \xB7 \u9884\u8BBE\u58F0\u660E\u5F71\u54CD\u8303\u56F4\uFF1A'+esc((meta.affects || []).join(' / ') || '-')</div><div class="muted">\u5B9E\u9645\u9884\u89C8\u547D\u4E2D\u533A\u57DF\uFF1A'+esc((meta.actualAffects || []).join(' / ') || '-')</div></div>';}function renderDraftPresetGuide(){  draftPresetList.innerHTML=Object.entries(draftPresets).map(([key,preset])=>'<div class="alert info"><strong>'+esc(preset.label || key)+'</strong><div>'+esc(preset.description || '')+'</div><div class="muted">\u5F71\u54CD\u8303\u56F4\uFF1A'+esc((preset.affects || []).join(' / '))+'</div></div>').join('');}function updateTopLevelModelSuggestionLists(){  const markup=knownModelIds.map(modelId=>'<option value="'+esc(modelId)+'"></option>').join('');  [topLevelTriggerIntentSuggestions,topLevelSmartRouterSuggestions,topLevelGovernanceSummarizerSuggestions,topLevelGovernanceClassifierSuggestions,topLevelGovernanceVerifierSuggestions].forEach(node=>{ if(node){ node.innerHTML=markup; } });}function renderModelsForm(models){  const list=Array.isArray(models) ? models : [];  draftModelsCount.value=String(list.length);  if(!list.length){ modelsFormGrid.innerHTML='<div class="panel" style="margin-bottom:0"><span class="muted">No draft models loaded yet</span></div>'; return; }  modelsFormGrid.innerHTML=list.map((model,index)=>{ const templateContext=getProviderTemplateContext(model); const template=templateContext.template; return '<div class="model-card" data-model-card="'+index+'">' +    '<div class="model-card-header"><strong>Model #'+(index+1)+'</strong><button type="button" data-remove-model="'+index+'">\u5220\u9664</button></div>' +    '<div class="model-card-grid">' +      '<div><label>Provider template</label><div class="row"><select data-field="provider_template" data-index="'+index+'"><option value="">custom</option>'+Object.entries(modelProviderTemplates).map(([key,item])=>'<option value="'+esc(key)+'"'+(model.provider_template === key ? ' selected' : '')+'>'+esc(item.label)+'</option>').join('')+'</select><button type="button" data-apply-template="'+index+'">\u5E94\u7528</button></div></div>' +      '<div><label>ID</label><input data-field="id" data-index="'+index+'" value="'+esc(model.id || '')+'" placeholder="'+esc(template.suggested_id || 'sonnet')+'"><div class="muted">Router.default \u548C\u8DEF\u7531\u89C4\u5219\u5F15\u7528\u8FD9\u4E2A model id\uFF1B\u5EFA\u8BAE\u6A21\u677F\uFF1A'+esc(template.label || templateContext.templateKey || 'custom')+'</div></div>' +      '<div><label>Interface</label><select data-field="interface" data-index="'+index+'"><option value="openai"'+(((model.interface || model.protocol || 'openai') === 'openai') ? ' selected' : '')+'>openai</option><option value="anthropic"'+(((model.interface || model.protocol) === 'anthropic') ? ' selected' : '')+'>anthropic</option></select><div class="muted">\u65B0\u914D\u7F6E\u4F7F\u7528 interface\uFF1B\u65E7 protocol \u4F1A\u81EA\u52A8\u8BFB\u53D6\u4E3A\u517C\u5BB9\u503C\u3002</div></div>' +      '<div><label>Model</label><input data-field="model" data-index="'+index+'" list="modelSuggestions'+index+'" value="'+esc(model.model || '')+'" placeholder="'+esc(template.default_model || 'anthropic/claude-sonnet-4')+'"><datalist id="modelSuggestions'+index+'">'+((template.model_examples || []).map(item=>'<option value="'+esc(item)+'"></option>').join(''))+'</datalist><div class="muted">\u4E0A\u6E38\u771F\u5B9E\u6A21\u578B\u540D\uFF0C\u4F8B\u5982\uFF1A'+esc((template.model_examples || ['anthropic/claude-sonnet-4']).join(' / '))+'</div></div>' +      '<div><label>API</label><input data-field="api" data-index="'+index+'" value="'+esc(model.api || model.api_base_url || '')+'" placeholder="'+esc(template.api || 'https://...')+'"><div class="muted">\u65B0\u914D\u7F6E\u4F7F\u7528 api\uFF1B\u65E7 api_base_url \u4EC5\u7528\u4E8E\u517C\u5BB9\u8BFB\u53D6\u3002</div></div>' +      '<div><label>Key</label><input data-field="key" data-index="'+index+'" value="'+esc(model.key || model.api_key || '')+'" placeholder="'+esc(template.key_placeholder || 'sk-...')+'"><div class="muted">\u65B0\u914D\u7F6E\u4F7F\u7528 key\uFF1B\u65E7 api_key \u4EC5\u7528\u4E8E\u517C\u5BB9\u8BFB\u53D6\u3002</div></div>' +      '<div><label>Thinking</label><select data-field="thinking_profile" data-index="'+index+'"><option value="">default</option><option value="off"'+(((model.thinking === 'off') || model.thinking?.mode === 'off') ? ' selected' : '')+'>off</option><option value="auto"'+(((model.thinking === 'auto') || model.thinking?.mode === 'auto') ? ' selected' : '')+'>auto</option><option value="on"'+(((model.thinking === 'on') || (model.thinking?.mode === 'on' && !model.thinking?.effort)) ? ' selected' : '')+'>on</option><option value="low"'+(((model.thinking === 'low') || (model.thinking?.mode === 'on' && model.thinking?.effort === 'low' && !model.thinking?.budget_tokens)) ? ' selected' : '')+'>low</option><option value="medium"'+(((model.thinking === 'medium') || (model.thinking?.mode === 'on' && model.thinking?.effort === 'medium' && !model.thinking?.budget_tokens)) ? ' selected' : '')+'>medium</option><option value="high"'+(((model.thinking === 'high') || (model.thinking?.mode === 'on' && model.thinking?.effort === 'high' && !model.thinking?.budget_tokens)) ? ' selected' : '')+'>high</option><option value="custom"'+(((typeof model.thinking === 'object') && model.thinking && model.thinking.budget_tokens) ? ' selected' : '')+'>custom</option></select></div>' +      '<div><label>Thinking mode</label><select data-field="thinking_mode" data-index="'+index+'"><option value="">default</option><option value="off"'+(model.thinking?.mode === 'off' ? ' selected' : '')+'>off</option><option value="auto"'+(model.thinking?.mode === 'auto' ? ' selected' : '')+'>auto</option><option value="on"'+(model.thinking?.mode === 'on' ? ' selected' : '')+'>on</option></select></div>' +      '<div><label>Thinking effort</label><select data-field="thinking_effort" data-index="'+index+'"><option value="">default</option><option value="low"'+(model.thinking?.effort === 'low' ? ' selected' : '')+'>low</option><option value="medium"'+(model.thinking?.effort === 'medium' ? ' selected' : '')+'>medium</option><option value="high"'+(model.thinking?.effort === 'high' ? ' selected' : '')+'>high</option></select></div>' +      '<div><label>Thinking budget</label><input data-field="thinking_budget_tokens" data-index="'+index+'" value="'+esc(model.thinking?.budget_tokens || '')+'" placeholder="1024"></div>' +      '<div><label>Vendor hint</label><input data-field="vendor_hint" data-index="'+index+'" value="'+esc(model.metadata?.vendor_hint || '')+'" placeholder="'+esc(template.vendor_hint || 'openrouter')+'"></div>' +      '<div><label>Reasoning support</label><select data-field="supports_reasoning" data-index="'+index+'"><option value="">default</option><option value="true"'+(model.metadata?.supports_reasoning === true ? ' selected' : '')+'>supported</option><option value="false"'+(model.metadata?.supports_reasoning === false ? ' selected' : '')+'>disabled</option></select></div>' +      '<div><label>Tool support</label><select data-field="supports_tools" data-index="'+index+'"><option value="">default</option><option value="true"'+(model.metadata?.supports_tools === true ? ' selected' : '')+'>supported</option><option value="false"'+(model.metadata?.supports_tools === false ? ' selected' : '')+'>disabled</option></select></div>' +      '<div><label>Image support</label><select data-field="supports_images" data-index="'+index+'"><option value="">default</option><option value="true"'+(model.metadata?.supports_images === true ? ' selected' : '')+'>supported</option><option value="false"'+(model.metadata?.supports_images === false ? ' selected' : '')+'>disabled</option></select></div>' +      '<div style="grid-column:1/-1"><label>Metadata (advanced JSON)</label><textarea data-field="metadata" data-index="'+index+'" placeholder="{\\"label\\":\\"Balanced profile\\"}">'+esc(model.metadata ? JSON.stringify(model.metadata, null, 2) : '')+'</textarea><div class="muted">\u666E\u901A capability \u5EFA\u8BAE\u4F18\u5148\u4F7F\u7528\u4E0A\u9762\u7684\u663E\u5F0F\u5B57\u6BB5\uFF1B\u8FD9\u91CC\u4FDD\u7559\u7ED9\u9AD8\u7EA7\u6269\u5C55\u5143\u6570\u636E\u3002</div></div>' +    '</div>' +  '</div>'; }).join('');}function extractModelsFromForm(){  const cards=Array.from(modelsFormGrid.querySelectorAll('[data-model-card]'));  return cards.map((card,index)=>{    const read=(field)=>card.querySelector('[data-field="'+field+'"][data-index="'+index+'"]');    const providerTemplate=(read('provider_template')?.value || '').trim();    const metadataRaw=(read('metadata')?.value || '').trim();    let metadata;    if(metadataRaw){ metadata=JSON.parse(metadataRaw); } else { metadata={}; }    const thinkingProfile=(read('thinking_profile')?.value || '').trim();    const vendorHint=(read('vendor_hint')?.value || '').trim();    const supportsReasoning=(read('supports_reasoning')?.value || '').trim();    const supportsTools=(read('supports_tools')?.value || '').trim();    const supportsImages=(read('supports_images')?.value || '').trim();    const thinking={};    const mode=(read('thinking_mode')?.value || '').trim();    const effort=(read('thinking_effort')?.value || '').trim();    const budget=(read('thinking_budget_tokens')?.value || '').trim();    if(mode) thinking.mode=mode;    if(effort) thinking.effort=effort;    if(budget) thinking.budget_tokens=Number(budget);    const model={      id:(read('id')?.value || '').trim(),      api:(read('api')?.value || '').trim(),      key:(read('key')?.value || '').trim(),      interface:(read('interface')?.value || '').trim(),      model:(read('model')?.value || '').trim(),    };    if(vendorHint){ metadata.vendor_hint=vendorHint; } else if(metadata && Object.prototype.hasOwnProperty.call(metadata,'vendor_hint')){ delete metadata.vendor_hint; }    if(supportsReasoning){ metadata.supports_reasoning=supportsReasoning === 'true'; } else if(metadata && Object.prototype.hasOwnProperty.call(metadata,'supports_reasoning')){ delete metadata.supports_reasoning; }    if(supportsTools){ metadata.supports_tools=supportsTools === 'true'; } else if(metadata && Object.prototype.hasOwnProperty.call(metadata,'supports_tools')){ delete metadata.supports_tools; }    if(supportsImages){ metadata.supports_images=supportsImages === 'true'; } else if(metadata && Object.prototype.hasOwnProperty.call(metadata,'supports_images')){ delete metadata.supports_images; }    if(providerTemplate){ model.provider_template=providerTemplate; }    if(thinkingProfile && thinkingProfile !== 'custom'){ model.thinking=thinkingProfile; } else if(Object.keys(thinking).length){ model.thinking=thinking; }    if(metadata !== undefined && Object.keys(metadata).length){ model.metadata=metadata; }    return model;  });}function applyProviderTemplate(index){  const card=modelsFormGrid.querySelector('[data-model-card="'+index+'"]');  if(!card){ return; }  const templateKey=(card.querySelector('[data-field="provider_template"][data-index="'+index+'"]')?.value || '').trim();  const template=modelProviderTemplates[templateKey];  if(!template){ return; }  const modelInterface=card.querySelector('[data-field="interface"][data-index="'+index+'"]');  const apiBaseUrl=card.querySelector('[data-field="api"][data-index="'+index+'"]');  const modelInput=card.querySelector('[data-field="model"][data-index="'+index+'"]');  if(modelInterface){ modelInterface.value=template.interface || template.protocol; }  if(apiBaseUrl && !apiBaseUrl.value.trim()){ apiBaseUrl.value=template.api || template.api_base_url; } else if(apiBaseUrl){ apiBaseUrl.value=template.api || template.api_base_url; }  if(modelInput){ modelInput.placeholder=template.default_model || modelInput.placeholder; if(!modelInput.value.trim() && template.default_model){ modelInput.value=template.default_model; } }  const modelIdInput=card.querySelector('[data-field="id"][data-index="'+index+'"]');  if(modelIdInput){ modelIdInput.placeholder=template.suggested_id || modelIdInput.placeholder; if(!modelIdInput.value.trim() && template.suggested_id){ modelIdInput.value=template.suggested_id; } }  const keyInput=card.querySelector('[data-field="key"][data-index="'+index+'"]');  if(keyInput && template.key_placeholder){ keyInput.placeholder=template.key_placeholder; }  const vendorHintInput=card.querySelector('[data-field="vendor_hint"][data-index="'+index+'"]');  if(vendorHintInput && template.vendor_hint){ vendorHintInput.placeholder=template.vendor_hint; }  const thinkingProfile=card.querySelector('[data-field="thinking_profile"][data-index="'+index+'"]');  if(thinkingProfile && !thinkingProfile.value && template.default_thinking){ thinkingProfile.value=template.default_thinking; }  const nextModels=extractModelsFromForm();  if(nextModels[index]){ nextModels[index]={ ...nextModels[index], provider_template: templateKey }; }  renderModelsForm(nextModels);}function renderTriggerRulesList(rules){  const list=Array.isArray(rules) ? rules : [];  if(!list.length){ triggerRulesList.innerHTML='<div class="panel" style="margin-bottom:0"><span class="muted">No routing rules yet</span></div>'; return; }  triggerRulesList.innerHTML=list.map((rule,index)=>'<div class="list-item" data-trigger-rule="'+index+'">' +    '<div class="action-row"><strong>Rule #'+(index+1)+'</strong><button type="button" data-remove-trigger-rule="'+index+'">\u5220\u9664</button></div>' +    '<div class="list-item-grid">' +      '<div><label>Name</label><input data-trigger-field="name" data-index="'+index+'" value="'+esc(rule.name || '')+'"></div>' +      '<div><label>Model</label><input data-trigger-field="model" data-index="'+index+'" list="triggerModelSuggestions'+index+'" value="'+esc(rule.model || '')+'">'+getModelIdSuggestionsMarkup('triggerModelSuggestions'+index)+'</div>' +      '<div><label>Priority</label><input data-trigger-field="priority" data-index="'+index+'" value="'+esc(rule.priority ?? 10)+'"></div>' +      '<div><label><input type="checkbox" data-trigger-field="enabled" data-index="'+index+'"'+(rule.enabled === false ? '' : ' checked')+'> Enabled</label></div>' +      '<div style="grid-column:1/-1"><label>Description</label><input data-trigger-field="description" data-index="'+index+'" value="'+esc(rule.description || '')+'"></div>' +    '</div>' +    '<div class="action-row" style="margin-top:.75rem"><strong>Patterns</strong><button type="button" data-add-trigger-pattern="'+index+'">\u65B0\u589E Pattern</button></div>' +    '<div class="list-editor">'+(((rule.patterns || []).length ? rule.patterns : [{ type:'exact', keywords:[] }]).map((pattern,patternIndex)=>'<div class="list-item" data-trigger-pattern="'+index+'-'+patternIndex+'">' +      '<div class="action-row"><span class="muted">Pattern #'+(patternIndex+1)+'</span><span class="pill">'+esc(pattern.type || 'exact')+'</span><span class="muted">'+esc(getTriggerPatternValidationHint(pattern).message)+'</span><button type="button" data-remove-trigger-pattern="'+index+'" data-pattern-index="'+patternIndex+'">\u5220\u9664</button></div>' +      '<div class="list-item-grid">' +        '<div><label>Type</label><select data-trigger-pattern-field="type" data-index="'+index+'" data-pattern-index="'+patternIndex+'"><option value="exact"'+(pattern.type !== 'regex' ? ' selected' : '')+'>exact</option><option value="regex"'+(pattern.type === 'regex' ? ' selected' : '')+'>regex</option></select></div>' +        '<div><label><input type="checkbox" data-trigger-pattern-field="caseSensitive" data-index="'+index+'" data-pattern-index="'+patternIndex+'"'+(pattern.caseSensitive ? ' checked' : '')+'> Case sensitive</label></div>' +        '<div style="grid-column:1/-1"><div class="action-row"><label>Keywords</label><button type="button" data-add-trigger-keyword="'+index+'" data-pattern-index="'+patternIndex+'"'+(pattern.type === 'regex' ? ' disabled' : '')+'>\u65B0\u589E Keyword</button></div><div class="list-editor">'+((((pattern.keywords || []).length ? pattern.keywords : ['']).map((keyword,keywordIndex)=>'<div class="list-item" data-trigger-keyword="'+index+'-'+patternIndex+'-'+keywordIndex+'"><div class="action-row"><span class="muted">Keyword #'+(keywordIndex+1)+'</span><button type="button" data-remove-trigger-keyword="'+index+'" data-pattern-index="'+patternIndex+'" data-keyword-index="'+keywordIndex+'"'+(pattern.type === 'regex' ? ' disabled' : '')+'>\u5220\u9664</button></div><input data-trigger-pattern-field="keyword_item" data-index="'+index+'" data-pattern-index="'+patternIndex+'" data-keyword-index="'+keywordIndex+'" value="'+esc(keyword || '')+'" placeholder="keyword"'+(pattern.type === 'regex' ? ' disabled' : '')+'></div>')).join(''))+'</div><div class="muted">'+(pattern.type === 'regex' ? 'regex \u6A21\u5F0F\u4E0B\u5FFD\u7565 keywords' : 'exact \u6A21\u5F0F\u4E0B\u6309\u5173\u952E\u8BCD\u5217\u8868\u5339\u914D')+'</div></div>' +        '<div style="grid-column:1/-1"><label>Regex pattern</label><input data-trigger-pattern-field="pattern" data-index="'+index+'" data-pattern-index="'+patternIndex+'" value="'+esc(pattern.pattern || '')+'" placeholder="error|exception"'+(pattern.type === 'regex' ? '' : ' disabled')+'><div class="muted">'+(pattern.type === 'regex' ? 'regex \u6A21\u5F0F\u4E0B\u4F7F\u7528\u6B63\u5219\u8868\u8FBE\u5F0F\u5339\u914D' : 'exact \u6A21\u5F0F\u4E0B\u5FFD\u7565 regex pattern')+'</div></div>' +      '</div>' +    '</div>').join(''))+'</div>' +  '</div>').join('');}function extractTriggerRulesFromForm(){  return Array.from(triggerRulesList.querySelectorAll('[data-trigger-rule]')).map((card,index)=>{    const read=(field)=>card.querySelector('[data-trigger-field="'+field+'"][data-index="'+index+'"]');    const patterns=Array.from(card.querySelectorAll('[data-trigger-pattern]')).map((patternCard,patternIndex)=>{      const patternRead=(field)=>patternCard.querySelector('[data-trigger-pattern-field="'+field+'"][data-index="'+index+'"][data-pattern-index="'+patternIndex+'"]');      const type=(patternRead('type')?.value || 'exact').trim();      const pattern={ type, caseSensitive:Boolean(patternRead('caseSensitive')?.checked) };      const keywords=Array.from(patternCard.querySelectorAll('[data-trigger-pattern-field="keyword_item"][data-index="'+index+'"][data-pattern-index="'+patternIndex+'"]')).map((node)=>node.value.trim()).filter(Boolean);      const regexPattern=(patternRead('pattern')?.value || '').trim();      if(type === 'regex'){ if(regexPattern){ pattern.pattern=regexPattern; } } else if(keywords.length){ pattern.keywords=keywords; }      return pattern;    });    const rule={ name:(read('name')?.value || '').trim(), model:(read('model')?.value || '').trim(), priority:Number(read('priority')?.value || 10), enabled:Boolean(read('enabled')?.checked), patterns };    const description=(read('description')?.value || '').trim(); if(description){ rule.description=description; } return rule;  });}function renderSmartCandidatesList(candidates){  const list=Array.isArray(candidates) ? candidates : [];  if(!list.length){ smartCandidatesList.innerHTML='<div class="panel" style="margin-bottom:0"><span class="muted">No smart candidates yet</span></div>'; return; }  smartCandidatesList.innerHTML=list.map((candidate,index)=>'<div class="list-item" data-smart-candidate="'+index+'">' +    '<div class="action-row"><strong>Candidate #'+(index+1)+'</strong><button type="button" data-remove-smart-candidate="'+index+'">\u5220\u9664</button></div>' +    '<div class="list-item-grid">' +      '<div><label>Model</label><input data-smart-field="model" data-index="'+index+'" list="smartModelSuggestions'+index+'" value="'+esc(candidate.model || '')+'">'+getModelIdSuggestionsMarkup('smartModelSuggestions'+index)+'</div>' +      '<div style="grid-column:1/-1"><label>Description</label><input data-smart-field="description" data-index="'+index+'" value="'+esc(candidate.description || '')+'"></div>' +    '</div>' +  '</div>').join('');}function extractSmartCandidatesFromForm(){  return Array.from(smartCandidatesList.querySelectorAll('[data-smart-candidate]')).map((card,index)=>{    const read=(field)=>card.querySelector('[data-smart-field="'+field+'"][data-index="'+index+'"]');    return { model:(read('model')?.value || '').trim(), description:(read('description')?.value || '').trim() };  });}function renderCascadeLevelsList(levels){  const list=Array.isArray(levels) ? levels : [];  if(!list.length){ governanceCascadeLevelsList.innerHTML='<div class="panel" style="margin-bottom:0"><span class="muted">No cascade levels yet</span></div>'; return; }  governanceCascadeLevelsList.innerHTML=list.map((level,index)=>'<div class="list-item" data-cascade-level="'+index+'">' +    '<div class="action-row"><strong>Level #'+(index+1)+'</strong><button type="button" data-remove-cascade-level="'+index+'">\u5220\u9664</button></div>' +    '<div class="list-item-grid">' +      '<div><label>From</label><input data-cascade-field="from" data-index="'+index+'" list="cascadeFromSuggestions'+index+'" value="'+esc(level.from || '')+'">'+getModelIdSuggestionsMarkup('cascadeFromSuggestions'+index)+'</div>' +      '<div><label>To</label><input data-cascade-field="to" data-index="'+index+'" list="cascadeToSuggestions'+index+'" value="'+esc(level.to || '')+'">'+getModelIdSuggestionsMarkup('cascadeToSuggestions'+index)+'</div>' +      '<div style="grid-column:1/-1"><label>Reason</label><input data-cascade-field="reason" data-index="'+index+'" value="'+esc(level.reason || '')+'"></div>' +    '</div>' +  '</div>').join('');}function extractCascadeLevelsFromForm(){  return Array.from(governanceCascadeLevelsList.querySelectorAll('[data-cascade-level]')).map((card,index)=>{    const read=(field)=>card.querySelector('[data-cascade-field="'+field+'"][data-index="'+index+'"]');    const level={ from:(read('from')?.value || '').trim(), to:(read('to')?.value || '').trim() };    const reason=(read('reason')?.value || '').trim(); if(reason){ level.reason=reason; } return level;  });}function buildDraftPayloadFromForm(){  const payload=JSON.parse(JSON.stringify(currentDraftConfig || {}));  payload.Models=extractModelsFromForm();  const routerDefault=(draftRouterDefault.value || '').trim();  if(routerDefault){ payload.Router={ ...(payload.Router || {}), default: routerDefault }; }  else if(payload.Router){ delete payload.Router.default; if(!Object.keys(payload.Router).length){ delete payload.Router; } }  const triggerRules=extractTriggerRulesFromForm();  const smartCandidates=extractSmartCandidatesFromForm();  const smartRouterEnabled=Boolean(smartEnabled.checked || triggerEnabled.checked || triggerIntentEnabled.checked || triggerIntentModel.value.trim() || triggerRules.length || smartRouterModel.value.trim() || smartCandidates.length || smartCacheTtl.value.trim() || smartMaxTokens.value.trim() || governanceAlignmentEnabled.checked || governanceSummarizerModel.value.trim() || governanceSemanticEnabled.checked || governanceClassifierModel.value.trim());  if(smartRouterEnabled){ payload.SmartRouter={ ...(payload.SmartRouter || {}), enabled: true, analysis_scope: triggerAnalysisScope.value || payload.SmartRouter?.analysis_scope || 'last_message', router_model: smartRouterModel.value.trim(), fallback: smartFallback.value || 'default', candidates: smartCandidates, cache_ttl: smartCacheTtl.value.trim() ? Number(smartCacheTtl.value.trim()) : undefined, max_tokens: smartMaxTokens.value.trim() ? Number(smartMaxTokens.value.trim()) : undefined, rules: triggerRules, semantic:(governanceSemanticEnabled.checked || triggerIntentEnabled.checked || governanceClassifierModel.value.trim() || triggerIntentModel.value.trim()) ? { ...(((payload.SmartRouter || {}).semantic) || {}), enabled:Boolean(governanceSemanticEnabled.checked || triggerIntentEnabled.checked), mode:'classifier', classifier_model: governanceClassifierModel.value.trim() || triggerIntentModel.value.trim() } : undefined, sticky:(governanceAlignmentEnabled.checked || governanceSummarizerModel.value.trim()) ? { ...(((payload.SmartRouter || {}).sticky) || {}), enabled:true, alignment:{ ...((((payload.SmartRouter || {}).sticky || {}).alignment) || {}), enabled:Boolean(governanceAlignmentEnabled.checked), summarizer_model: governanceSummarizerModel.value.trim() } } : undefined }; } else { delete payload.SmartRouter; }  delete payload.TriggerRouter;  const cascadeLevels=extractCascadeLevelsFromForm();  if(governanceEnabled.checked || governanceShadowEnabled.checked || governanceVerifierModel.value.trim() || cascadeLevels.length){ payload.Governance={ ...(payload.Governance || {}), enabled: governanceEnabled.checked, shadow:{ ...((payload.Governance && payload.Governance.shadow) || {}), enabled: governanceShadowEnabled.checked, verifier_model: governanceVerifierModel.value.trim() }, cascade:{ ...((payload.Governance && payload.Governance.cascade) || {}), enabled: Boolean(cascadeLevels.length), levels: cascadeLevels } }; } else { delete payload.Governance; }  return payload;}function renderConfigControlForms(config){  const smart=getDraftSmartRouterConfig(config);  const trigger=config?.TriggerRouter || {};  triggerEnabled.checked=Boolean(smart.enabled);  triggerIntentEnabled.checked=Boolean(smart.semantic?.enabled && smart.semantic?.mode === 'classifier');  triggerAnalysisScope.value=smart.analysis_scope || 'last_message';  triggerIntentModel.value=smart.semantic?.classifier_model || trigger.intent_model || '';  renderTriggerRulesList(smart.rules || trigger.rules || []);  smartEnabled.checked=Boolean(smart.enabled);  smartRouterModel.value=smart.router_model || '';  smartFallback.value=smart.fallback || 'default';  smartCacheTtl.value=smart.cache_ttl ?? '';  smartMaxTokens.value=smart.max_tokens ?? '';  renderSmartCandidatesList(smart.candidates || []);  const governance=config?.Governance || {};  governanceEnabled.checked=Boolean(governance.enabled);  governanceAlignmentEnabled.checked=Boolean(smart.sticky?.alignment?.enabled);  governanceSummarizerModel.value=smart.sticky?.alignment?.summarizer_model || '';  governanceSemanticEnabled.checked=Boolean(smart.semantic?.enabled);  governanceClassifierModel.value=smart.semantic?.classifier_model || '';  governanceShadowEnabled.checked=Boolean(governance.shadow?.enabled);  governanceVerifierModel.value=governance.shadow?.verifier_model || '';  renderCascadeLevelsList(governance.cascade?.levels || []);}function syncDraftEditorFromForm(){  try {    const payload=buildDraftPayloadFromForm();    currentDraftConfig=payload;    configDraftEditor.value=JSON.stringify(payload,null,2);    renderDraftSummary(payload);    renderDraftValidation([],[]);    renderCapabilityWarnings();    renderDraftPreviewMeta();    draftPreviewStatus.textContent='\u5DF2\u540C\u6B65 Models \u8868\u5355\u5230 JSON \u8349\u7A3F';  } catch (error) {    draftPreviewStatus.textContent='\u540C\u6B65\u5931\u8D25\uFF1A'+error.message;  }}function applyReferenceSuggestion(path,modelId){  if(!modelId){ return; }  if(path==='Router.default'){ draftRouterDefault.value=modelId; syncDraftEditorFromForm(); draftPreviewStatus.textContent='\u5DF2\u5C06\u5EFA\u8BAE\u6A21\u578B\u5E94\u7528\u5230 Router.default'; return; }  const payload=JSON.parse(JSON.stringify(currentDraftConfig || {}));  const pathMatch=path.match(/^([^.[]+)(?:.(.+))?$/);  if(!pathMatch){ draftPreviewStatus.textContent='\u6682\u4E0D\u652F\u6301\u81EA\u52A8\u4FEE\u590D\uFF1A'+path; return; }  const tokens=path.replace(/[(d+)]/g,'.$1').split('.');  let cursor=payload;  for(let i=0;i<tokens.length-1;i++){    const token=tokens[i];    const nextToken=tokens[i+1];    if(cursor[token] === undefined){ cursor[token]=String(Number(nextToken))===nextToken ? [] : {}; }    cursor=cursor[token];  }  cursor[tokens[tokens.length-1]]=modelId;  currentDraftConfig=payload;  if(payload.Router?.default){ draftRouterDefault.value=payload.Router.default; }  renderConfigControlForms(payload);  configDraftEditor.value=JSON.stringify(payload,null,2);  renderDraftSummary(payload);  renderDraftValidation([],[]);  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u5DF2\u5C06\u5EFA\u8BAE\u6A21\u578B\u5E94\u7528\u5230 '+path+'\uFF0C\u53EF\u91CD\u65B0\u9884\u89C8\u9A8C\u8BC1';}function applyCapabilityWarningSuggestion(path,code){  const payload=JSON.parse(JSON.stringify(currentDraftConfig || {}));  const tokens=String(path || '').replace(/[(d+)]/g,'.$1').split('.').filter(Boolean);  if(!tokens.length){ draftPreviewStatus.textContent='\u6682\u4E0D\u652F\u6301\u81EA\u52A8\u4FEE\u590D\u8BE5 warning'; return; }  let cursor=payload;  for(let i=0;i<tokens.length-1;i++){ if(cursor == null){ break; } cursor=cursor[tokens[i]]; }  const lastToken=tokens[tokens.length-1];  if(code==='thinking_ignored'){    if(cursor && Object.prototype.hasOwnProperty.call(cursor,lastToken)){ delete cursor[lastToken]; }  } else if(code==='tools_text_fallback' || code==='images_text_fallback'){    if(cursor && Object.prototype.hasOwnProperty.call(cursor,lastToken)){ delete cursor[lastToken]; }    if(cursor && !Object.keys(cursor).length){      const parentTokens=tokens.slice(0,-1);      const maybeMetadataKey=parentTokens[parentTokens.length-1];      if(maybeMetadataKey==='metadata'){        let parentCursor=payload;        for(let i=0;i<parentTokens.length-1;i++){ if(parentCursor == null){ break; } parentCursor=parentCursor[parentTokens[i]]; }        if(parentCursor && Object.prototype.hasOwnProperty.call(parentCursor,'metadata')){ delete parentCursor.metadata; }      }    }  } else {    draftPreviewStatus.textContent='\u6682\u4E0D\u652F\u6301\u81EA\u52A8\u4FEE\u590D\u8BE5 warning';    return;  }  currentDraftConfig=payload;  renderModelsForm(payload.Models || []);  renderConfigControlForms(payload);  draftRouterDefault.value=payload.Router?.default || '';  configDraftEditor.value=JSON.stringify(payload,null,2);  renderDraftSummary(payload);  renderDraftValidation([],[]);  renderCapabilityWarnings();  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u5DF2\u5E94\u7528 warning \u4FEE\u6B63\uFF1A'+code+'\uFF0C\u53EF\u91CD\u65B0\u9884\u89C8\u9A8C\u8BC1';}function renderCompiledDiff(diff){  const summary=diff?.summary || {};  compiledDiffSummary.innerHTML=[    ['Added providers', summary.addedProviders ?? 0],    ['Removed providers', summary.removedProviders ?? 0],    ['Changed providers', summary.changedProviders ?? 0],    ['Added models', summary.addedModels ?? 0],    ['Removed models', summary.removedModels ?? 0],    ['Changed models', summary.changedModels ?? 0]  ].map(([label,value])=>'<div class="diff-chip"><span class="muted">'+esc(label)+'</span><strong>'+esc(value)+'</strong></div>').join('');  const rows=[    ...((diff?.providerChanges || []).map(item=>({ scope:'provider', key:item.name, type:item.type, fields:item.fields || [], target:item.after || item.before || {} }))),    ...((diff?.modelChanges || []).map(item=>({ scope:'model', key:item.modelId, type:item.type, fields:item.fields || [], target:item.after || item.before || {} }))),  ];  compiledDiffTableBody.innerHTML=rows.length ? rows.map(item=>'<tr>' +    '<td>'+esc(item.scope)+'</td>' +    '<td>'+esc(item.type)+'</td>' +    '<td><code>'+esc(item.key)+'</code></td>' +    '<td>'+esc(item.fields.join(', ') || '-')+'</td>' +    '<td><code>'+esc(item.target.providerName || item.target.name || '-')+'</code><div class="muted">'+esc(item.target.modelName || (item.target.models || []).join(', ') || '-')}</div></td>' +  '</tr>').join('') : '<tr><td colspan="5" class="muted">No compiled registry changes</td></tr>';}function renderReferenceImpact(impact){  const summary=impact?.summary || {};  referenceImpactSummary.innerHTML=[    ['Total refs', summary.total ?? 0],    ['modelId refs', summary.modelIdRefs ?? 0],    ['Legacy refs', summary.legacyRefs ?? 0],    ['Valid modelIds', summary.validModelIds ?? 0],    ['Missing modelIds', summary.missingModelIds ?? 0]  ].map(([label,value])=>'<div class="diff-chip"><span class="muted">'+esc(label)+'</span><strong>'+esc(value)+'</strong></div>').join('');  const entries=impact?.entries || [];  referenceImpactTableBody.innerHTML=entries.length ? entries.map(item=>'<tr>' +    '<td><code>'+esc(item.path)+'</code></td>' +    '<td><code>'+esc(item.value)+'</code></td>' +    '<td>'+esc(item.referenceType)+'</td>' +    '<td>'+esc(item.status)+'</td>' +    '<td><code>'+esc(item.resolvedTarget?.providerName || '-')+'</code><div class="muted">'+esc(item.resolvedTarget?.modelName || '-')}</div></td>' +    '<td>'+((item.suggestions || []).length ? item.suggestions.map(s=>'<div><code>'+esc(s.modelId)+'</code><div class="muted">'+esc(s.modelName || '-')+'</div><button type="button" data-apply-reference-path="'+esc(item.path)+'" data-apply-reference-model="'+esc(s.modelId)+'">\u5E94\u7528\u5EFA\u8BAE</button></div>').join('') : '<span class="muted">-</span>')+'</td>' +  '</tr>').join('') : '<tr><td colspan="6" class="muted">No model references found</td></tr>';}function renderCompiledModels(data){  const providers=Array.isArray(data.providers) ? data.providers : [];  const modelMapEntries=Object.entries(data.modelMap || {});  const modelPoolEntries=Object.entries(data.modelPools || {});  const modelPoolEndpointCount=modelPoolEntries.reduce((sum,[_modelId,pool])=>sum+((pool.endpoints || []).length),0);  knownModelIds=modelMapEntries.map(([modelId])=>modelId).sort();  updateTopLevelModelSuggestionLists();  renderCapabilityWarnings(data.capabilityWarnings);  compiledModelsStatus.textContent='\u5DF2\u52A0\u8F7D '+providers.length+' \u4E2A compiled provider / '+modelMapEntries.length+' \u4E2A modelId \u6620\u5C04 / '+modelPoolEntries.length+' \u4E2A model pool / '+modelPoolEndpointCount+' \u4E2A pool endpoint';  compiledProvidersTableBody.innerHTML=providers.length ? providers.map(provider=>'<tr>' +    '<td><code>'+esc(provider.name)+'</code><div class="muted">'+esc(provider.api_base_url || '-')+'</div></td>' +    '<td>'+esc(provider.transformer?.use?.[0] || '-')+'</td>' +    '<td>'+esc((provider.models || []).join(', ') || '-')+'</td>' +    '<td>'+esc(JSON.stringify(provider.transformer || {}))+'</td>' +    '<td>'+esc(provider.has_api_key ? 'configured' : 'missing')+'</td>' +  '</tr>').join('') : '<tr><td colspan="5" class="muted">No compiled providers</td></tr>';  compiledModelMapTableBody.innerHTML=modelMapEntries.length ? modelMapEntries.map(([modelId,item])=>'<tr>' +    '<td><code>'+esc(modelId)+'</code></td>' +    '<td><code>'+esc(item.providerName || '-')+'</code><div class="muted">'+esc(item.modelName || '-')+'</div></td>' +    '<td>'+esc(item.protocol || '-')+'</td>' +    '<td>'+esc(item.compatibilityProfile || '-')+'</td>' +    '<td>'+esc(item.dispatchFormat || '-')+'</td>' +    '<td><code>'+esc(JSON.stringify(item.thinking || { mode: 'off' }))+'</code></td>' +    '<td><code>'+esc(JSON.stringify(item.capabilities || {}))+'</code></td>' +    '<td>'+esc(item.source || '-')+'</td>' +  '</tr>').join('') : '<tr><td colspan="8" class="muted">No compiled model map</td></tr>';  compiledModelPoolsTableBody.innerHTML=modelPoolEntries.length ? modelPoolEntries.map(([modelId,pool])=>{    const endpoints=pool.endpoints || [];    return '<tr>' +      '<td><code>'+esc(modelId)+'</code></td>' +      '<td>'+esc(pool.strategy || '-')+'</td>' +      '<td><code>'+esc(pool.activeEndpointId || '-')+'</code></td>' +      '<td>'+endpoints.map(endpoint=>'<div><code>'+esc(endpoint.id)+'</code><span class="muted"> priority '+esc(endpoint.priority)+' / '+esc(endpoint.enabled ? 'enabled' : 'disabled')+'</span><div class="muted">'+esc(endpoint.upstreamServiceId || endpoint.api || '-')+'</div></div>').join('')+'</td>' +      '<td>'+((pool.warnings || []).length ? pool.warnings.map(w=>'<div class="warning-text">'+esc(w)+'</div>').join('') : '<span class="muted">-</span>')+'</td>' +    '</tr>';  }).join('') : '<tr><td colspan="5" class="muted">No compiled model pools</td></tr>';  if(data.diff){ renderCompiledDiff(data.diff); }  if(data.referenceImpact){ renderReferenceImpact(data.referenceImpact); }  renderConfigControlForms(currentDraftConfig);}async function loadConfigDraft(){  draftPreviewStatus.textContent='\u52A0\u8F7D\u5F53\u524D\u914D\u7F6E\u4E2D...';  const res=await fetch('/api/config');  const data=await res.json();  currentDraftConfig=data || {};  renderModelsForm(currentDraftConfig.Models || []);  renderConfigControlForms(currentDraftConfig);  draftRouterDefault.value=currentDraftConfig.Router?.default || '';  configDraftEditor.value=JSON.stringify(data,null,2);  renderDraftSummary(currentDraftConfig);  updateStatusSummary(currentDraftConfig);  renderDraftValidation([],[]);  renderCapabilityWarnings();  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u5DF2\u8F7D\u5165\u5F53\u524D\u914D\u7F6E\uFF0C\u53EF\u901A\u8FC7 Models \u8868\u5355\u6216 JSON \u8349\u7A3F\u7F16\u8F91';}async function previewConfigDraft(){  let payload;  try {    payload=buildDraftPayloadFromForm();    configDraftEditor.value=JSON.stringify(payload,null,2);  } catch (error) {    renderDraftValidation(['JSON parse error: '+error.message],[]);    renderCapabilityWarnings();    renderDraftPreviewMeta();    draftPreviewStatus.textContent='\u8349\u7A3F\u89E3\u6790\u5931\u8D25\uFF1A'+error.message;    return;  }  draftPreviewStatus.textContent='\u9884\u89C8\u7F16\u8BD1\u7ED3\u679C\u4E2D...';  const res=await fetch('/api/models/compiled/preview',{    method:'POST',    headers:{'Content-Type':'application/json'},    body:JSON.stringify(payload)  });  const data=await res.json();  if(!res.ok){    draftPreviewStatus.textContent='\u9884\u89C8\u5931\u8D25\uFF1A'+((data.errors || []).join('; ') || data.message || 'unknown error');    renderDraftValidation(data.errors || [data.message || 'unknown error'], data.warnings || [], data.issueReport);    renderCapabilityWarnings(data.capabilityWarnings);    renderCompiledDiff();    renderReferenceImpact(data.referenceImpact);    renderDraftPreviewMeta();    return;  }  renderDraftValidation([], data.warnings || [], data.issueReport);  renderCompiledModels(data);  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u9884\u89C8\u5B8C\u6210\uFF1A\u5DF2\u6309\u8349\u7A3F\u914D\u7F6E\u5237\u65B0 compiled models';}async function loadServiceStatus(){  serviceReadyStatus.textContent='checking';  try {    const [serviceRes,remoteRes]=await Promise.all([fetch('/api/service-info'),fetch('/api/remote-status')]);    const data=await serviceRes.json();    const remoteData=await remoteRes.json();    serviceReadyStatus.textContent=data.ready ? 'ready' : 'not ready';    servicePortStatus.textContent=data.port || '-';    serviceModeStatus.textContent=data.runtimeMode || '-';    serviceRoleStatus.textContent=data.serviceRole || '-';    renderRoleConnectionGuide(data);    const auth=data.auth || {};    const managed=auth.managedKeys || {};    const quota=auth.quota || {};    const quotaText=Number.isFinite(quota.requestsUsed) ? (' \xB7 quota '+quota.requestsUsed+' req'+(quota.windowResetAt ? ' \xB7 reset '+String(quota.windowResetAt).replace('T',' ').replace('.000Z','Z') : '')) : '';    authStatusSummary.textContent=auth.required ? ((auth.bootstrapConfigured ? 'bootstrap' : 'managed')+' \xB7 '+(managed.active ?? 0)+' active'+quotaText) : 'not configured';    renderAuthQuotaTable(quota);    const security=data.security || {};    const issues=Array.isArray(security.issues) ? security.issues : [];    securityStatusSummary.textContent=security.status || '-';    securitySummary.className='alert '+((security.status === 'critical') ? 'critical' : (security.status === 'warning' ? 'warn' : 'info'));    securitySummary.innerHTML='<strong>Security: '+esc(security.status || '-')+'</strong><div>'+esc(issues[0]?.message || '\u5F53\u524D\u670D\u52A1\u672A\u53D1\u73B0\u660E\u663E\u9274\u6743\u66B4\u9732\u98CE\u9669')+'</div>'+ (issues.length ? '<ul class="mini-list">'+issues.map(issue=>'<li>'+esc(issue.action || issue.code)+'</li>').join('')+'</ul>' : '');    const registration=data.registration || {};    registrationStatusSummary.textContent=registration.enabled ? ((registration.models ?? 0)+' models / '+(registration.upstreamServices ?? 0)+' upstream') : 'disabled';    const remote=remoteData.remote || {};    remoteStatusSummary.textContent=remote.enabled ? ((remote.ready ? 'ready' : (remote.reachable ? 'reachable' : 'unreachable'))+' \xB7 '+(remote.baseUrl || '-')) : 'disabled';    if(remoteData.compiledModels){ modelCountStatus.textContent=remoteData.compiledModels.modelCount ?? modelCountStatus.textContent; }  } catch (_error) {    serviceReadyStatus.textContent='unreachable';    remoteStatusSummary.textContent='unknown';    securityStatusSummary.textContent='unknown';  }}async function saveConfigDraft(){  let payload;  try {    payload=buildDraftPayloadFromForm();    configDraftEditor.value=JSON.stringify(payload,null,2);  } catch (error) {    renderDraftValidation(['JSON parse error: '+error.message],[]);    renderCapabilityWarnings();    draftPreviewStatus.textContent='\u4FDD\u5B58\u5931\u8D25\uFF1A'+error.message;    return;  }  draftPreviewStatus.textContent='\u4FDD\u5B58\u914D\u7F6E\u4E2D...';  const res=await fetch('/api/config',{ method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(payload) });  const data=await res.json();  renderDraftValidation(data.errors || [], data.warnings || [], data.issueReport);  if(!res.ok){    draftPreviewStatus.textContent='\u4FDD\u5B58\u5931\u8D25\uFF1A'+((data.errors || []).join('; ') || data.message || 'unknown error');    return;  }  currentDraftConfig=payload;  await loadCompiledModels();  draftPreviewStatus.textContent='\u5DF2\u4FDD\u5B58\u914D\u7F6E'+((data.warnings || []).length ? ('\uFF08\u542B '+data.warnings.length+' \u6761 warning\uFF09') : '');}function addDraftModel(){  const nextModels=extractModelsFromForm();  nextModels.push(createDraftModelFromTemplate(defaultProviderTemplateKey));  renderModelsForm(nextModels);  syncDraftEditorFromForm();}function addTriggerRule(){ const next=extractTriggerRulesFromForm(); next.push({ name:'', enabled:true, priority:10, model:'', patterns:[{ type:'exact', keywords:[] }] }); renderTriggerRulesList(next); syncDraftEditorFromForm(); }function addTriggerPattern(ruleIndex){ const next=extractTriggerRulesFromForm(); if(!next[ruleIndex]){ return; } next[ruleIndex].patterns = Array.isArray(next[ruleIndex].patterns) ? next[ruleIndex].patterns : []; next[ruleIndex].patterns.push({ type:'exact', keywords:[] }); renderTriggerRulesList(next); syncDraftEditorFromForm(); }function addTriggerKeyword(ruleIndex,patternIndex){ const next=extractTriggerRulesFromForm(); if(!next[ruleIndex] || !next[ruleIndex].patterns || !next[ruleIndex].patterns[patternIndex]){ return; } const pattern=next[ruleIndex].patterns[patternIndex]; pattern.keywords=Array.isArray(pattern.keywords) ? pattern.keywords : []; pattern.keywords.push(''); renderTriggerRulesList(next); syncDraftEditorFromForm(); }function addSmartCandidate(){ const next=extractSmartCandidatesFromForm(); next.push({ model:'', description:'' }); renderSmartCandidatesList(next); syncDraftEditorFromForm(); }function addCascadeLevel(){ const next=extractCascadeLevelsFromForm(); next.push({ from:'', to:'' }); renderCascadeLevelsList(next); syncDraftEditorFromForm(); }modelsFormGrid.addEventListener('input',()=>syncDraftEditorFromForm());modelsFormGrid.addEventListener('change',()=>syncDraftEditorFromForm());modelsFormGrid.addEventListener('click',(e)=>{ const applyBtn=e.target.closest('button[data-apply-template]'); if(applyBtn){ const applyIndex=Number(applyBtn.dataset.applyTemplate); applyProviderTemplate(applyIndex); syncDraftEditorFromForm(); return; } const btn=e.target.closest('button[data-remove-model]'); if(!btn){ return; } const removeIndex=Number(btn.dataset.removeModel); const nextModels=extractModelsFromForm().filter((_,index)=>index!==removeIndex); renderModelsForm(nextModels); syncDraftEditorFromForm(); });triggerRulesList.addEventListener('input',()=>syncDraftEditorFromForm());triggerRulesList.addEventListener('change',()=>syncDraftEditorFromForm());triggerRulesList.addEventListener('click',(e)=>{ const addKeywordBtn=e.target.closest('button[data-add-trigger-keyword]'); if(addKeywordBtn){ addTriggerKeyword(Number(addKeywordBtn.dataset.addTriggerKeyword), Number(addKeywordBtn.dataset.patternIndex)); return; } const removeKeywordBtn=e.target.closest('button[data-remove-trigger-keyword]'); if(removeKeywordBtn){ const ruleIndex=Number(removeKeywordBtn.dataset.removeTriggerKeyword); const patternIndex=Number(removeKeywordBtn.dataset.patternIndex); const keywordIndex=Number(removeKeywordBtn.dataset.keywordIndex); const next=extractTriggerRulesFromForm(); if(next[ruleIndex] && next[ruleIndex].patterns && next[ruleIndex].patterns[patternIndex]){ const pattern=next[ruleIndex].patterns[patternIndex]; pattern.keywords=(pattern.keywords || []).filter((_,index)=>index!==keywordIndex); if(!pattern.keywords.length){ pattern.keywords=['']; } renderTriggerRulesList(next); syncDraftEditorFromForm(); } return; } const addBtn=e.target.closest('button[data-add-trigger-pattern]'); if(addBtn){ addTriggerPattern(Number(addBtn.dataset.addTriggerPattern)); return; } const removePatternBtn=e.target.closest('button[data-remove-trigger-pattern]'); if(removePatternBtn){ const ruleIndex=Number(removePatternBtn.dataset.removeTriggerPattern); const patternIndex=Number(removePatternBtn.dataset.patternIndex); const next=extractTriggerRulesFromForm(); if(next[ruleIndex]){ next[ruleIndex].patterns=(next[ruleIndex].patterns || []).filter((_,index)=>index!==patternIndex); if(!next[ruleIndex].patterns.length){ next[ruleIndex].patterns=[{ type:'exact', keywords:[] }]; } renderTriggerRulesList(next); syncDraftEditorFromForm(); } return; } const btn=e.target.closest('button[data-remove-trigger-rule]'); if(!btn){ return; } const next=extractTriggerRulesFromForm().filter((_,index)=>index!==Number(btn.dataset.removeTriggerRule)); renderTriggerRulesList(next); syncDraftEditorFromForm(); });smartCandidatesList.addEventListener('input',()=>syncDraftEditorFromForm());smartCandidatesList.addEventListener('change',()=>syncDraftEditorFromForm());smartCandidatesList.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-remove-smart-candidate]'); if(!btn){ return; } const next=extractSmartCandidatesFromForm().filter((_,index)=>index!==Number(btn.dataset.removeSmartCandidate)); renderSmartCandidatesList(next); syncDraftEditorFromForm(); });governanceCascadeLevelsList.addEventListener('input',()=>syncDraftEditorFromForm());governanceCascadeLevelsList.addEventListener('change',()=>syncDraftEditorFromForm());governanceCascadeLevelsList.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-remove-cascade-level]'); if(!btn){ return; } const next=extractCascadeLevelsFromForm().filter((_,index)=>index!==Number(btn.dataset.removeCascadeLevel)); renderCascadeLevelsList(next); syncDraftEditorFromForm(); });referenceImpactTableBody.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-apply-reference-path]'); if(!btn){ return; } applyReferenceSuggestion(btn.dataset.applyReferencePath, btn.dataset.applyReferenceModel); });draftValidationList.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-validation-path]'); if(!btn){ return; } jumpToValidationPath(btn.dataset.validationPath); });capabilityWarningsList.addEventListener('click',(e)=>{ const applyBtn=e.target.closest('button[data-apply-warning-path]'); if(applyBtn){ applyCapabilityWarningSuggestion(applyBtn.dataset.applyWarningPath, applyBtn.dataset.applyWarningCode); return; } const btn=e.target.closest('button[data-validation-path]'); if(!btn){ return; } jumpToValidationPath(btn.dataset.validationPath); });healthSummary.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-health-action]'); if(btn){ applyHealthAction(btn.dataset.healthAction); } });draftRouterDefault.addEventListener('input',syncDraftEditorFromForm);[triggerEnabled,triggerIntentEnabled,triggerAnalysisScope,triggerIntentModel,smartEnabled,smartRouterModel,smartFallback,smartCacheTtl,smartMaxTokens,governanceEnabled,governanceAlignmentEnabled,governanceSummarizerModel,governanceSemanticEnabled,governanceClassifierModel,governanceShadowEnabled,governanceVerifierModel].forEach(el=>{ el.addEventListener('input',syncDraftEditorFromForm); el.addEventListener('change',syncDraftEditorFromForm); });surfaceTabs.forEach((tab)=>tab.addEventListener('click',()=>setActiveSurface(tab.dataset.surfaceTarget || 'user')));setActiveSurface('user');function renderMetrics(metrics,health,outcome){  metricsGrid.innerHTML=[    ['Health', health?.status || 'idle'],     ['Recent traces', metrics.totalTraces ?? 0],    ['Sticky hit rate', pct(metrics.stickyHitRate)],    ['Cascade rate', pct(metrics.cascadeTriggeredRate)],    ['Shadow rate', pct(metrics.shadowCheckedRate)],    ['Alignment rate', pct(metrics.alignmentUsedRate)],    ['Model switch rate', pct(outcome?.modelSwitchRate)],    ['Alignment on switch', pct(outcome?.alignmentOnSwitchRate)],    ['Avg latency', fmt(metrics.averageLatencyMs)+' ms']  ].map(([label,value])=>'<div class="stat"><span class="muted">'+esc(label)+'</span><strong>'+esc(value)+'</strong></div>').join('');}function buildPresetPayload(presetName){  const preset=draftPresets[presetName];  if(!preset){ return null; }  const overwriteMode=draftPresetMode.value === 'replace';  const payload=buildDraftPayloadFromForm();  if(overwriteMode){ delete payload.TriggerRouter; delete payload.SmartRouter; delete payload.Governance; }  if(preset.routerDefault){ payload.Router={ ...(payload.Router || {}), default: resolvePresetModelId(preset.routerDefault) }; }  if(preset.triggerEnabled !== undefined || preset.triggerRules){ payload.SmartRouter={ ...(payload.SmartRouter || {}), enabled: preset.triggerEnabled !== undefined ? Boolean(preset.triggerEnabled) : Boolean(payload.SmartRouter?.enabled), analysis_scope: payload.SmartRouter?.analysis_scope || 'last_message', router_model: payload.SmartRouter?.router_model || '', fallback: payload.SmartRouter?.fallback || 'default', candidates: payload.SmartRouter?.candidates || [], cache_ttl: payload.SmartRouter?.cache_ttl, max_tokens: payload.SmartRouter?.max_tokens, rules: preset.triggerRules ? preset.triggerRules.map(rule=>({ ...rule, model: resolvePresetModelId(rule.model) })) : (payload.SmartRouter?.rules || []) }; delete payload.TriggerRouter; }  if(preset.smartEnabled !== undefined || preset.smartCandidates){ payload.SmartRouter={ ...(payload.SmartRouter || {}), enabled: preset.smartEnabled !== undefined ? Boolean(preset.smartEnabled) : Boolean(payload.SmartRouter?.enabled), router_model: payload.SmartRouter?.router_model || '', fallback: payload.SmartRouter?.fallback || 'default', candidates: preset.smartCandidates ? preset.smartCandidates.map(item=>({ ...item, model: resolvePresetModelId(item.model) })) : (payload.SmartRouter?.candidates || []), cache_ttl: payload.SmartRouter?.cache_ttl, max_tokens: payload.SmartRouter?.max_tokens, rules: payload.SmartRouter?.rules || [] }; }  if(preset.governanceEnabled !== undefined || preset.governanceAlignmentEnabled !== undefined || preset.governanceSemanticEnabled !== undefined || preset.governanceShadowEnabled !== undefined || preset.governanceSummarizerModel !== undefined || preset.governanceClassifierModel !== undefined || preset.governanceVerifierModel !== undefined){ payload.SmartRouter={ ...(payload.SmartRouter || {}), enabled: payload.SmartRouter?.enabled !== undefined ? Boolean(payload.SmartRouter?.enabled) : Boolean(preset.governanceEnabled), sticky:{ ...((payload.SmartRouter && payload.SmartRouter.sticky) || {}), enabled: preset.governanceAlignmentEnabled !== undefined ? Boolean(preset.governanceAlignmentEnabled) : Boolean(payload.SmartRouter?.sticky?.enabled), alignment:{ ...(((payload.SmartRouter && payload.SmartRouter.sticky && payload.SmartRouter.sticky.alignment) || {})), enabled: preset.governanceAlignmentEnabled !== undefined ? Boolean(preset.governanceAlignmentEnabled) : Boolean(payload.SmartRouter?.sticky?.alignment?.enabled), summarizer_model: preset.governanceSummarizerModel !== undefined ? resolvePresetModelId(preset.governanceSummarizerModel) : (payload.SmartRouter?.sticky?.alignment?.summarizer_model || '') } }, semantic:{ ...((payload.SmartRouter && payload.SmartRouter.semantic) || {}), enabled: preset.governanceSemanticEnabled !== undefined ? Boolean(preset.governanceSemanticEnabled) : Boolean(payload.SmartRouter?.semantic?.enabled), mode:(payload.SmartRouter?.semantic?.mode || 'classifier'), classifier_model: preset.governanceClassifierModel !== undefined ? resolvePresetModelId(preset.governanceClassifierModel) : (payload.SmartRouter?.semantic?.classifier_model || '') } }; payload.Governance={ ...(payload.Governance || {}), enabled: preset.governanceEnabled !== undefined ? Boolean(preset.governanceEnabled) : Boolean(payload.Governance?.enabled), shadow:{ ...((payload.Governance && payload.Governance.shadow) || {}), enabled: preset.governanceShadowEnabled !== undefined ? Boolean(preset.governanceShadowEnabled) : Boolean(payload.Governance?.shadow?.enabled), verifier_model: preset.governanceVerifierModel !== undefined ? resolvePresetModelId(preset.governanceVerifierModel) : (payload.Governance?.shadow?.verifier_model || '') } }; }  return payload;}function applyDraftPreset(presetName){  const payload=buildPresetPayload(presetName);  if(!payload){ return; }  currentDraftConfig=payload;  renderModelsForm(payload.Models || []);  renderConfigControlForms(payload);  draftRouterDefault.value=payload.Router?.default || '';  configDraftEditor.value=JSON.stringify(payload,null,2);  renderDraftSummary(payload);  renderDraftValidation([],[]);  renderCapabilityWarnings();  renderDraftPreviewMeta();  draftPreviewStatus.textContent='\u5DF2\u5E94\u7528\u9884\u8BBE\uFF1A'+presetName+'\uFF08'+(draftPresetMode.value === 'replace' ? 'overwrite' : 'append / merge')+'\uFF09';}async function previewDraftPreset(presetName){  const payload=buildPresetPayload(presetName);  if(!payload){ return; }  const preset=draftPresets[presetName];  const modeLabel=draftPresetMode.value === 'replace' ? 'overwrite' : 'append / merge';  renderDraftPreviewMeta({ title:'Preset dry-run', description:(preset?.label || presetName)+' \u4EC5\u9884\u89C8\uFF0C\u4E0D\u4F1A\u5199\u56DE\u5F53\u524D\u8349\u7A3F\u3002', affects:preset?.affects || [], actualAffects:[], mode:modeLabel });  draftPreviewStatus.textContent='\u9884\u89C8\u9884\u8BBE\u4E2D\uFF1A'+presetName;  const res=await fetch('/api/models/compiled/preview',{ method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(payload) });  const data=await res.json();  if(!res.ok){ renderDraftValidation(data.errors || [data.message || 'unknown error'], data.warnings || [], data.issueReport); renderCapabilityWarnings(data.capabilityWarnings); renderCompiledDiff(); renderReferenceImpact(data.referenceImpact); renderDraftPreviewMeta({ title:'Preset dry-run', description:(preset?.label || presetName)+' \u9884\u89C8\u5931\u8D25\uFF0C\u4EE5\u4E0B\u4E3A\u5F53\u524D\u9884\u89C8\u5C1D\u8BD5\u547D\u4E2D\u7684\u533A\u57DF\u3002', affects:preset?.affects || [], actualAffects:deriveActualAffectedAreas(data), mode:modeLabel }); draftPreviewStatus.textContent='\u9884\u8BBE\u9884\u89C8\u5931\u8D25\uFF1A'+((data.errors || []).join('; ') || data.message || 'unknown error'); return; }  renderDraftValidation([], data.warnings || [], data.issueReport);  renderCompiledModels(data);  renderDraftPreviewMeta({ title:'Preset dry-run', description:(preset?.label || presetName)+' \u4EC5\u9884\u89C8\uFF0C\u4E0D\u4F1A\u5199\u56DE\u5F53\u524D\u8349\u7A3F\u3002', affects:preset?.affects || [], actualAffects:deriveActualAffectedAreas(data), mode:modeLabel });  draftPreviewStatus.textContent='\u5DF2\u9884\u89C8\u9884\u8BBE\uFF1A'+presetName+'\uFF08\u672A\u5199\u56DE\u8349\u7A3F\uFF09';}function renderRanking(target,entries,emptyLabel){  if(!entries || !entries.length){ target.innerHTML='<li><span class="muted">'+esc(emptyLabel)+'</span><strong>0</strong></li>'; return; }  target.innerHTML=entries.map(item=>'<li><span><code>'+esc(item.key)+'</code></span><strong>'+esc(item.count)+' \xB7 '+esc(pct(item.rate))+'</strong></li>').join('');}function renderOutcomeGroups(target,entries,emptyLabel){  if(!entries || !entries.length){ target.innerHTML='<li><span class="muted">'+esc(emptyLabel)+'</span><strong>0</strong></li>'; return; }  target.innerHTML=entries.map(item=>'<li><span><code>'+esc(item.key)+'</code><span class="muted"> \xB7 '+esc(item.totalTraces)+' traces</span></span><strong>switch '+esc(pct(item.modelSwitchRate))+' \xB7 align '+esc(pct(item.alignmentOnSwitchRate))+' \xB7 cascade '+esc(pct(item.cascadeAfterSwitchRate))+' \xB7 '+esc(fmt(item.averageLatencyMs))+' ms</strong></li>').join('');}function renderAnomalies(anomalies,health){  const status=health?.status || 'idle';  const message=health?.message || 'No governance traces yet.';  const actions=Array.isArray(health?.actions) ? health.actions : [];  healthSummary.className='alert '+esc(status === 'critical' ? 'critical' : (status === 'watch' ? 'warn' : 'info'));  healthSummary.innerHTML='<strong>Health: '+esc(status)+'</strong><div>'+esc(message)+'</div>'+ (actions.length ? '<ul class="mini-list">'+actions.map(action=>'<li><button type="button" data-health-action="'+esc(action)+'">'+esc(action)+'</button></li>').join('')+'</ul>' : '');  if(!anomalies || !anomalies.length){ anomalyList.innerHTML='<div class="alert info"><strong>No active alerts</strong><div class="muted">\u5F53\u524D\u7A97\u53E3\u672A\u53D1\u73B0\u660E\u663E\u6CBB\u7406\u5F02\u5E38</div></div>'; return; }  anomalyList.innerHTML=anomalies.map(item=>'<div class="alert '+esc(item.severity || 'info')+'"><strong>'+esc(item.type)+'</strong><div>'+esc(item.message)+'</div></div>').join('');}function applyHealthAction(action){  const text=String(action || '').toLowerCase();  const routeReasonInput=document.getElementById('routeReason');  const cascadeSelect=document.getElementById('cascadeTriggered');  const shadowSelect=document.getElementById('shadowChecked');  if(text.includes('cascade')){ cascadeSelect.value='true'; shadowSelect.value=''; routeReasonInput.value=''; detailHint.textContent='Health action: filtered cascade traces'; }  else if(text.includes('shadow')){ shadowSelect.value='true'; cascadeSelect.value=''; routeReasonInput.value=''; detailHint.textContent='Health action: filtered shadow traces'; }  else { cascadeSelect.value=''; shadowSelect.value=''; routeReasonInput.value=''; detailHint.textContent='Health action: showing recent traces'; }  loadTraces();  document.getElementById('traceTable').scrollIntoView({ behavior:'smooth', block:'start' });}function renderBuckets(report){  const buckets=report.buckets || [];  const windowMs=Number(report.windowMs || 0);  bucketHint.textContent=windowMs ? ('\u6700\u8FD1 '+Math.round(windowMs / 60000)+' \u5206\u949F\uFF0C\u5171 '+(report.bucketCount || buckets.length || 0)+' \u6876') : '\u5F53\u524D\u672A\u542F\u7528\u65F6\u95F4\u7A97';  if(!buckets.length){ bucketGrid.innerHTML='<div class="stat"><span class="muted">No bucket data</span><strong>0</strong></div>'; return; }  bucketGrid.innerHTML=buckets.map(bucket=>    '<div class="stat">'+'<span class="muted">'+esc(shortTime(bucket.bucketStart))+' - '+esc(shortTime(bucket.bucketEnd))+'</span>'+'<strong>'+esc(bucket.metrics.totalTraces)+'</strong>'+'<div class="muted">sticky '+esc(pct(bucket.metrics.stickyHitRate))+' / cascade '+esc(pct(bucket.metrics.cascadeTriggeredRate))+'</div>'+'</div>').join('');}function renderTrendTable(report){  const buckets=report.buckets || [];  if(!buckets.length){ trendTableBody.innerHTML='<tr><td colspan="6" class="muted">No trend data</td></tr>'; return; }  trendTableBody.innerHTML=buckets.map(bucket=>'<tr>' +    '<td>'+esc(shortTime(bucket.bucketStart))+' - '+esc(shortTime(bucket.bucketEnd))+'</td>' +    '<td>'+esc(bucket.metrics.totalTraces)+'</td>' +    '<td>'+esc(pct(bucket.metrics.stickyHitRate))+'</td>' +    '<td>'+esc(pct(bucket.metrics.cascadeTriggeredRate))+'</td>' +    '<td>'+esc(pct(bucket.metrics.shadowCheckedRate))+'</td>' +    '<td>'+esc(pct(bucket.metrics.alignmentUsedRate))+'</td>' +  '</tr>').join('');}function renderExportHistory(data){  const exports=(data.exports || []);  const schedules=(data.schedules || []);  exportTableBody.innerHTML=exports.length ? exports.map(item=>'<tr><td><code>'+esc(item.id)+'</code></td><td>'+esc(item.kind)+'</td><td>'+esc(item.format)+'</td><td>'+esc(new Date(item.createdAt).toISOString())+'</td></tr>').join('') : '<tr><td colspan="4" class="muted">No exports yet</td></tr>';  scheduleTableBody.innerHTML=schedules.length ? schedules.map(item=>'<tr><td><code>'+esc(item.id)+'</code></td><td>'+esc(item.intervalMs)+' ms</td><td>'+esc(item.format)+'</td><td>'+esc(item.lastRunAt ? new Date(item.lastRunAt).toISOString() : '-')}</td></tr>').join('') : '<tr><td colspan="4" class="muted">No schedules yet</td></tr>';}function renderArchives(data){  const archives=(data.archives || []);  archiveTableBody.innerHTML=archives.length ? archives.map(item=>'<tr><td><code>'+esc(item.file)+'</code></td><td>'+esc(item.startedAt ? new Date(item.startedAt).toISOString().slice(0,10) : '-')+' ~ '+esc(item.endedAt ? new Date(item.endedAt).toISOString().slice(0,10) : '-')+'</td><td>'+esc(item.traceCount)+'</td><td>'+esc(item.compressed ? 'yes' : 'no')+'</td></tr>').join('') : '<tr><td colspan="4" class="muted">No archives found</td></tr>';}async function loadCompiledModels(){  compiledModelsStatus.textContent='\u52A0\u8F7D compiled models \u4E2D...';  const res=await fetch('/api/models/compiled');  const data=await res.json();  renderDraftValidation([], data.warnings || [], data.issueReport);  renderCompiledModels(data);  renderCompiledDiff();  renderReferenceImpact();}async function loadTraces(){  const requestId=document.getElementById('requestId').value.trim();  const sessionKey=document.getElementById('sessionKey').value.trim();  const routeReason=document.getElementById('routeReason').value.trim();  const cascadeTriggered=document.getElementById('cascadeTriggered').value;  const shadowChecked=document.getElementById('shadowChecked').value;  const windowMs=document.getElementById('windowMs').value;  const minSampleSize=document.getElementById('minSampleSize').value.trim();  const cascadeWarnRate=document.getElementById('cascadeWarnRate').value.trim();  const shadowWarnRate=document.getElementById('shadowWarnRate').value.trim();  const latencyWarnMs=document.getElementById('latencyWarnMs').value.trim();  const limit=document.getElementById('limit').value.trim();  const params=new URLSearchParams();  if(requestId) params.set('requestId',requestId);  if(sessionKey) params.set('sessionKey',sessionKey);  if(routeReason) params.set('routeReason',routeReason);  if(cascadeTriggered) params.set('cascadeTriggered',cascadeTriggered);  if(shadowChecked) params.set('shadowChecked',shadowChecked);  if(windowMs) params.set('windowMs',windowMs);  if(minSampleSize) params.set('minSampleSize',minSampleSize);  if(cascadeWarnRate) params.set('cascadeWarnRate',cascadeWarnRate);  if(shadowWarnRate) params.set('shadowWarnRate',shadowWarnRate);  if(latencyWarnMs) params.set('latencyWarnMs',latencyWarnMs);  params.set('bucketCount','6');  if(limit) params.set('limit',limit);  tbody.innerHTML='<tr><td colspan="6" class="muted">\u52A0\u8F7D\u4E2D...</td></tr>';  const query=params.toString()?('?'+params.toString()):'';  const [traceRes,metricsRes,healthRes]=await Promise.all([    fetch('/api/governance/traces'+query),    fetch('/api/governance/metrics'+query),    fetch('/api/governance/health'+query)  ]);  const data=await traceRes.json();  const metricsData=await metricsRes.json();  const healthData=await healthRes.json();  const health=healthData.health || metricsData.health;  renderMetrics(metricsData.metrics || {},health,metricsData.outcome || {});  renderBuckets(metricsData || {});  renderAnomalies(metricsData.anomalies || [],health);  renderRanking(routeRanking,metricsData.topRouteReasons || [],'No routes');  renderRanking(modelRanking,metricsData.topFinalModels || [],'No models');  renderRanking(intentRanking,metricsData.topSemanticIntents || [],'No intents');  renderOutcomeGroups(routeOutcomeRanking,metricsData.outcome?.byRouteReason || [],'No route outcomes');  renderOutcomeGroups(modelOutcomeRanking,metricsData.outcome?.byFinalModel || [],'No model outcomes');  renderOutcomeGroups(intentOutcomeRanking,metricsData.outcome?.bySemanticIntent || [],'No intent outcomes');  renderTrendTable(metricsData || {});  const traces=data.traces || [];  if(!traces.length){ tbody.innerHTML='<tr><td colspan="6" class="muted">\u6682\u65E0 trace</td></tr>'; return; }  tbody.innerHTML=traces.map(t=>    \`<tr>\`+      \`<td><code>\${esc(t.requestId)}</code></td>\`+      \`<td>\${t.sessionKey ? \`<span class="pill">\${esc(t.sessionKey)}</span>\` : '<span class="muted">-</span>'}</td>\`+      \`<td><code>\${esc(t.finalModel || '')}</code></td>\`+      \`<td>\${(t.routeReason || []).map(r=>\`<span class="pill">\${esc(r)}</span>\`).join(' ')}</td>\`+      \`<td>\${esc(t.latencyMs ?? '')}</td>\`+      \`<td><button data-request="\${esc(t.requestId)}">View</button></td>\`+    \`</tr>\`  ).join('');}async function loadDetail(requestId){  const res=await fetch('/api/governance/traces/'+encodeURIComponent(requestId));  const data=await res.json();  detailHint.textContent='\u5F53\u524D\u67E5\u770B\uFF1A'+requestId;  detail.textContent=JSON.stringify(data,null,2);}async function loadExports(){  const res=await fetch('/api/governance/metrics/exports');  renderExportHistory(await res.json());}async function createSnapshot(){  snapshotStatus.textContent='\u521B\u5EFA\u5FEB\u7167\u4E2D...';  const res=await fetch('/api/governance/metrics/snapshots',{    method:'POST',    headers:{'Content-Type':'application/json'},    body:JSON.stringify({ format: document.getElementById('snapshotFormat').value, windowMs: Number(document.getElementById('windowMs').value || 0) || undefined })  });  const data=await res.json();  snapshotStatus.textContent=res.ok ? ('\u5DF2\u521B\u5EFA\uFF1A'+data.export.id) : ('\u521B\u5EFA\u5931\u8D25\uFF1A'+(data.message || 'unknown error'));  if(res.ok) await loadExports();}async function loadArchives(){  archiveStatus.textContent='\u52A0\u8F7D\u5F52\u6863\u4E2D...';  const params=new URLSearchParams();  const archiveDate=document.getElementById('archiveDate').value.trim();  const archivePage=document.getElementById('archivePage').value.trim();  const archivePageSize=document.getElementById('archivePageSize').value.trim();  if(archiveDate) params.set('date',archiveDate);  if(archivePage) params.set('page',archivePage);  if(archivePageSize) params.set('pageSize',archivePageSize);  const res=await fetch('/api/governance/archives'+(params.toString()?('?'+params.toString()):''));  const data=await res.json();  renderArchives(data);  archiveStatus.textContent='\u5F52\u6863\u52A0\u8F7D\u5B8C\u6210';}async function saveThresholds(){  const payload={    min_sample_size:Number(document.getElementById('minSampleSize').value || 0),    cascade_warn_rate:Number(document.getElementById('cascadeWarnRate').value || 0),    shadow_warn_rate:Number(document.getElementById('shadowWarnRate').value || 0),    latency_warn_ms:Number(document.getElementById('latencyWarnMs').value || 0)  };  saveThresholdsStatus.textContent='\u4FDD\u5B58\u4E2D...';  const res=await fetch('/api/governance/observability/anomaly-thresholds',{    method:'POST',    headers:{'Content-Type':'application/json'},    body:JSON.stringify(payload)  });  const data=await res.json();  if(!res.ok){ saveThresholdsStatus.textContent='\u4FDD\u5B58\u5931\u8D25\uFF1A'+(data.message || 'unknown error'); return; }  saveThresholdsStatus.textContent='\u5DF2\u4FDD\u5B58\u5230\u914D\u7F6E\u6587\u4EF6';}document.getElementById('refreshBtn').addEventListener('click',loadTraces);document.getElementById('loadConfigDraftHeroBtn').addEventListener('click',loadConfigDraft);document.getElementById('previewConfigDraftHeroBtn').addEventListener('click',previewConfigDraft);document.getElementById('refreshStatusHeroBtn').addEventListener('click',loadServiceStatus);document.getElementById('loadConfigDraftBtn').addEventListener('click',loadConfigDraft);document.getElementById('addModelDraftBtn').addEventListener('click',addDraftModel);document.getElementById('applyBalancedPresetBtn').addEventListener('click',()=>applyDraftPreset('balanced'));document.getElementById('previewBalancedPresetBtn').addEventListener('click',()=>previewDraftPreset('balanced'));document.getElementById('applyFastPresetBtn').addEventListener('click',()=>applyDraftPreset('fast'));document.getElementById('previewFastPresetBtn').addEventListener('click',()=>previewDraftPreset('fast'));document.getElementById('applyGovernancePresetBtn').addEventListener('click',()=>applyDraftPreset('governance'));document.getElementById('previewGovernancePresetBtn').addEventListener('click',()=>previewDraftPreset('governance'));document.getElementById('addTriggerRuleBtn').addEventListener('click',addTriggerRule);document.getElementById('addSmartCandidateBtn').addEventListener('click',addSmartCandidate);document.getElementById('addCascadeLevelBtn').addEventListener('click',addCascadeLevel);document.getElementById('syncDraftJsonBtn').addEventListener('click',syncDraftEditorFromForm);document.getElementById('previewConfigDraftBtn').addEventListener('click',previewConfigDraft);document.getElementById('saveConfigDraftBtn').addEventListener('click',saveConfigDraft);draftPresetMode.addEventListener('change',renderDraftPresetModeHint);document.getElementById('createSnapshotBtn').addEventListener('click',createSnapshot);document.getElementById('loadArchivesBtn').addEventListener('click',loadArchives);document.getElementById('saveThresholdsBtn').addEventListener('click',saveThresholds);tbody.addEventListener('click',(e)=>{ const btn=e.target.closest('button[data-request]'); if(btn){ loadDetail(btn.dataset.request); } });renderDraftPresetGuide();renderDraftPresetModeHint();renderDraftPreviewMeta();loadServiceStatus();loadConfigDraft();loadCompiledModels();loadExports();loadArchives();loadTraces();</script></body></html>`;
 }
 var init_workbench = __esm({
   "src/ui/workbench.ts"() {
     "use strict";
     init_provider_presets();
+    init_runtime_role_guidance();
   }
 });
 
@@ -3672,7 +4491,8 @@ function toCompiledRegistryView(config) {
       transformer: provider.transformer,
       has_api_key: Boolean(provider.api_key)
     })),
-    modelMap: registry.modelMap
+    modelMap: registry.modelMap,
+    modelPools: registry.modelPools
   };
 }
 function collectModelReferences(config) {
@@ -3712,23 +4532,120 @@ function buildServiceInfo(rawConfig) {
   const remoteService = runtime.remote_service ?? {};
   const registration = normalized.Registration ?? {};
   const runtimeMode = runtime.mode ?? "local";
+  const managedKeys = listManagedApiKeys(normalized);
+  const authSummary = managedApiKeySummary(normalized);
+  const host = rawConfig?.HOST ?? normalized.HOST;
+  const port = rawConfig?.PORT ?? normalized.PORT;
+  const listenerHost = String(host ?? "").trim() || "127.0.0.1";
+  const publicHost = ["0.0.0.0", "::", "[::]"].includes(String(host ?? "").trim());
+  const hasBootstrapAuth = Boolean(normalized.APIKEY);
+  const hasManagedAuthRecords = authSummary.total > 0;
+  const hasActiveManagedAuth = authSummary.active > 0;
+  const authRequired = hasBootstrapAuth || hasManagedAuthRecords;
+  const listenerBaseUrl = publicHost ? `http://<server-host>:${port}` : `http://${listenerHost}:${port}`;
+  const localBaseUrl = `http://127.0.0.1:${port}`;
+  const securityIssues = [];
+  if (!authRequired && (publicHost || runtimeMode !== "local")) {
+    securityIssues.push({
+      code: "server_without_auth",
+      severity: "critical",
+      message: "Server/cloud or public listener is running without API key authentication.",
+      action: "Set APIKEY or create an active managed admin/client key before exposing this service."
+    });
+  }
+  if (authRequired && hasBootstrapAuth && authSummary.total === 0 && runtimeMode !== "local") {
+    securityIssues.push({
+      code: "bootstrap_only_auth",
+      severity: "warning",
+      message: "Only the bootstrap APIKEY is configured for a server/cloud role.",
+      action: "Create managed client keys for remote users and keep APIKEY for administration."
+    });
+  }
+  if (!hasBootstrapAuth && hasManagedAuthRecords && !hasActiveManagedAuth) {
+    securityIssues.push({
+      code: "managed_auth_without_active_key",
+      severity: "warning",
+      message: "Managed API key records exist, but none are active.",
+      action: "Create an active managed admin/client key or configure APIKEY before relying on this service."
+    });
+  }
+  const quotaSummary = authQuotaUsageStore.summary();
+  const quotaKeys = managedKeys.map((key) => {
+    const usage = authQuotaUsageStore.snapshotForKey(key.id, key.quota);
+    const requestLimit = usage?.requestLimit;
+    const tokenLimit = usage?.tokenLimit;
+    const requestRatio = requestLimit ? usage.requestsUsed / requestLimit : 0;
+    const tokenRatio = tokenLimit ? usage.tokensUsed / tokenLimit : 0;
+    const exhausted = requestLimit !== void 0 && usage.requestsUsed >= requestLimit || tokenLimit !== void 0 && usage.tokensUsed >= tokenLimit;
+    const nearLimit = !exhausted && (requestRatio >= 0.8 || tokenRatio >= 0.8);
+    return {
+      id: key.id,
+      label: key.label,
+      scopes: key.scopes,
+      active: key.active,
+      quota: key.quota,
+      usage,
+      status: !usage ? "unlimited" : !key.active ? "inactive" : exhausted ? "exhausted" : nearLimit ? "watch" : "ok"
+    };
+  });
   return {
     service: SERVICE_NAME,
     ready: true,
-    host: rawConfig?.HOST ?? normalized.HOST,
-    port: rawConfig?.PORT ?? normalized.PORT,
+    host,
+    port,
     runtimeMode,
     serviceRole: runtimeMode === "local" ? "local_agent" : "router_service",
+    listener: {
+      host: listenerHost,
+      port,
+      public: publicHost,
+      localUrl: localBaseUrl,
+      advertisedUrl: listenerBaseUrl
+    },
     remoteEnabled: Boolean(remoteService.enabled),
     remoteService: {
       enabled: Boolean(remoteService.enabled),
       baseUrl: remoteService.base_url || "",
       authTokenConfigured: Boolean(remoteService.auth_token)
     },
+    clientConnection: runtimeMode === "local" && remoteService.enabled ? {
+      role: "remote_client",
+      baseUrl: remoteService.base_url || "",
+      authTokenConfigured: Boolean(remoteService.auth_token),
+      recommendedScopes: ["client", "read-only"],
+      guidance: "Use Runtime.remote_service.base_url and a managed client + read-only key from the server maintainer."
+    } : runtimeMode === "local" ? {
+      role: "local_user",
+      baseUrl: localBaseUrl,
+      authTokenConfigured: authRequired,
+      recommendedScopes: [],
+      guidance: "Local Claude Code can use the local router URL; authentication is optional unless configured."
+    } : {
+      role: "remote_user",
+      baseUrl: listenerBaseUrl,
+      authTokenConfigured: authRequired,
+      recommendedScopes: ["client", "read-only"],
+      guidance: "Remote clients should set ANTHROPIC_BASE_URL to this service and use a managed client + read-only key."
+    },
     registration: {
       enabled: Boolean(registration.enabled),
       models: Array.isArray(registration.models) ? registration.models.length : 0,
       upstreamServices: Array.isArray(registration.upstream_services) ? registration.upstream_services.length : 0
+    },
+    auth: {
+      required: authRequired,
+      bootstrapConfigured: Boolean(normalized.APIKEY),
+      managedKeys: authSummary,
+      audit: authAuditStore.summary(),
+      quota: {
+        ...quotaSummary,
+        keys: quotaKeys
+      }
+    },
+    security: {
+      status: securityIssues.some((issue) => issue.severity === "critical") ? "critical" : securityIssues.length > 0 ? "warning" : "ok",
+      publicHost,
+      issues: securityIssues
     }
   };
 }
@@ -3765,9 +4682,13 @@ function summarizeCompiledModels(normalized) {
   const compiled = toCompiledRegistryView(normalized);
   const capabilityWarnings = collectCapabilityWarnings(normalized);
   const modelEntries = Object.values(compiled.modelMap ?? {});
+  const modelPoolEntries = Object.values(compiled.modelPools ?? {});
+  const modelPoolEndpoints = modelPoolEntries.flatMap((pool) => pool.endpoints ?? []);
   return {
     providerCount: compiled.providers.length,
     modelCount: modelEntries.length,
+    modelPoolCount: modelPoolEntries.length,
+    modelPoolEndpointCount: modelPoolEndpoints.length,
     capabilities: {
       reasoning: modelEntries.filter((item) => item.capabilities?.thinking?.supported !== false).length,
       tools: modelEntries.filter((item) => item.capabilities?.tools !== false).length,
@@ -3909,6 +4830,10 @@ function buildPersistedConfig(rawConfig, normalizedConfig) {
   if (registrationProjection && typeof registrationProjection === "object" && Object.keys(registrationProjection).length > 0) {
     persisted.Registration = registrationProjection;
   }
+  const authProjection = projectConfiguredBranch(rawConfig?.Auth, normalizedConfig.Auth);
+  if (authProjection && typeof authProjection === "object" && Object.keys(authProjection).length > 0) {
+    persisted.Auth = authProjection;
+  }
   if (rawConfig?.TriggerRouter) {
     smartRouterProjection = mergeSmartRouterProjection(smartRouterProjection, {
       ...rawConfig.TriggerRouter.enabled !== void 0 ? { enabled: runtimeSmartRouter.enabled } : {},
@@ -3948,6 +4873,51 @@ function buildPersistedConfig(rawConfig, normalizedConfig) {
   }
   return persisted;
 }
+function denyAuth(reply, statusCode, reason) {
+  reply.code(statusCode);
+  return {
+    success: false,
+    message: statusCode === 403 ? "Forbidden" : "Unauthorized",
+    reason
+  };
+}
+function requireAdminAuth(req, reply, authConfig) {
+  const verification = verifyApiKey(
+    authConfig ?? {},
+    extractApiKeyFromHeaders(req?.headers ?? {}),
+    "admin"
+  );
+  const auditBase = {
+    required: "admin",
+    method: req?.method,
+    path: req?.url,
+    requestId: req?.id
+  };
+  if (verification.ok) {
+    authAuditStore.add({
+      ...auditBase,
+      outcome: "allowed",
+      source: verification.source,
+      keyId: verification.keyId,
+      scopes: verification.scopes,
+      statusCode: 200
+    });
+    return null;
+  }
+  authAuditStore.add({
+    ...auditBase,
+    outcome: "denied",
+    source: verification.source,
+    keyId: verification.keyId,
+    reason: verification.reason ?? "invalid",
+    statusCode: verification.reason === "insufficient_scope" ? 403 : 401
+  });
+  return denyAuth(
+    reply,
+    verification.reason === "insufficient_scope" ? 403 : 401,
+    verification.reason ?? "invalid"
+  );
+}
 function buildDraftConfigView(config) {
   const normalizedConfig = normalizeAndValidateConfig(config ?? {}).config;
   const runtimeSmartRouterConfig = deriveRuntimeSmartRouterConfig(normalizedConfig);
@@ -4052,6 +5022,7 @@ var init_server = __esm({
     init_schema();
     init_validation_contract();
     init_workbench();
+    init_api_keys();
     createServer = (config) => {
       const server = new import_llms.default(config);
       const configuredThresholds = config.initialConfig?.Governance?.observability?.anomaly_thresholds ?? {};
@@ -4137,6 +5108,7 @@ var init_server = __esm({
           success: true,
           providers: previewCompiled.providers,
           modelMap: previewCompiled.modelMap,
+          modelPools: previewCompiled.modelPools,
           normalizedConfig: buildDraftConfigView(result.config),
           diff: diffCompiledRegistry(currentCompiled, previewCompiled),
           referenceImpact: analyzeModelReferenceImpact(result.config, previewCompiled),
@@ -4156,11 +5128,149 @@ var init_server = __esm({
         };
       });
       server.app.get("/api/service-info", async () => {
-        return buildServiceInfo(config.initialConfig ?? {});
+        let currentConfig;
+        try {
+          currentConfig = await readConfigFile();
+        } catch {
+          currentConfig = void 0;
+        }
+        const serviceInfoConfig = currentConfig && Object.keys(currentConfig).length > 0 ? { ...config.initialConfig ?? {}, ...currentConfig } : config.initialConfig ?? {};
+        return buildServiceInfo(serviceInfoConfig);
       });
       server.app.get("/api/registration", async () => {
         return buildRegistrationInfo(config.initialConfig ?? {});
       });
+      server.app.get("/api/auth/keys", async (req, reply) => {
+        const currentConfig = await readConfigFile();
+        const denied = requireAdminAuth(req, reply, currentConfig);
+        if (denied) {
+          return denied;
+        }
+        const normalized = normalizeAndValidateConfig(currentConfig ?? {}).config;
+        return {
+          keys: listManagedApiKeys(normalized),
+          summary: managedApiKeySummary(normalized)
+        };
+      });
+      server.app.get("/api/auth/audit", async (req, reply) => {
+        const currentConfig = await readConfigFile();
+        const denied = requireAdminAuth(req, reply, currentConfig);
+        if (denied) {
+          return denied;
+        }
+        const limit = Number(req.query?.limit ?? 50);
+        return {
+          events: authAuditStore.list(Number.isFinite(limit) ? limit : 50),
+          summary: authAuditStore.summary()
+        };
+      });
+      server.app.post("/api/auth/keys", async (req, reply) => {
+        const currentConfig = await readConfigFile();
+        const denied = requireAdminAuth(req, reply, currentConfig);
+        if (denied) {
+          return denied;
+        }
+        const scopeErrors = validateManagedApiKeyScopes(req.body?.scopes);
+        const quotaErrors = validateManagedApiKeyQuota(req.body?.quota);
+        const inputErrors = [...scopeErrors, ...quotaErrors];
+        if (inputErrors.length > 0) {
+          reply.code(400);
+          return {
+            success: false,
+            message: "Invalid managed API key input",
+            errors: inputErrors
+          };
+        }
+        if (req.body?.expiresAt !== void 0 && Number.isNaN(Date.parse(String(req.body.expiresAt)))) {
+          reply.code(400);
+          return {
+            success: false,
+            message: "expiresAt must be an ISO date string when provided"
+          };
+        }
+        const created = createManagedApiKey({
+          label: req.body?.label,
+          scopes: req.body?.scopes,
+          expiresAt: req.body?.expiresAt,
+          quota: req.body?.quota
+        });
+        const nextConfig = {
+          ...currentConfig ?? {},
+          Auth: {
+            ...currentConfig?.Auth ?? {},
+            managed_keys: [
+              ...currentConfig?.Auth?.managed_keys ?? [],
+              created.record
+            ]
+          }
+        };
+        const result = normalizeAndValidateConfig(nextConfig);
+        if (result.errors.length > 0) {
+          reply.code(400);
+          return {
+            success: false,
+            message: "Invalid auth key configuration",
+            errors: result.errors
+          };
+        }
+        const backupPath = await backupConfigFile();
+        if (backupPath) {
+          log(`Backed up existing configuration file to ${backupPath}`);
+        }
+        await writeConfigFile(buildPersistedConfig(nextConfig, result.config));
+        return {
+          success: true,
+          key: sanitizeManagedApiKey(created.record),
+          secret: created.secret,
+          message: "Managed API key created. Store the secret now; it will not be shown again."
+        };
+      });
+      server.app.post("/api/auth/keys/:id/revoke", async (req, reply) => {
+        const currentConfig = await readConfigFile();
+        const denied = requireAdminAuth(req, reply, currentConfig);
+        if (denied) {
+          return denied;
+        }
+        const keyId = String(req.params?.id ?? "").trim();
+        const managedKeys = currentConfig?.Auth?.managed_keys ?? [];
+        const keyIndex = managedKeys.findIndex((key) => key.id === keyId);
+        if (keyIndex < 0) {
+          reply.code(404);
+          return {
+            success: false,
+            message: "Managed API key not found"
+          };
+        }
+        const revokedAt = (/* @__PURE__ */ new Date()).toISOString();
+        const nextKeys = managedKeys.map(
+          (key, index) => index === keyIndex ? { ...key, revoked_at: key.revoked_at ?? revokedAt } : key
+        );
+        const nextConfig = {
+          ...currentConfig ?? {},
+          Auth: {
+            ...currentConfig?.Auth ?? {},
+            managed_keys: nextKeys
+          }
+        };
+        const result = normalizeAndValidateConfig(nextConfig);
+        if (result.errors.length > 0) {
+          reply.code(400);
+          return {
+            success: false,
+            message: "Invalid auth key configuration",
+            errors: result.errors
+          };
+        }
+        const backupPath = await backupConfigFile();
+        if (backupPath) {
+          log(`Backed up existing configuration file to ${backupPath}`);
+        }
+        await writeConfigFile(buildPersistedConfig(nextConfig, result.config));
+        return {
+          success: true,
+          key: sanitizeManagedApiKey(nextKeys[keyIndex])
+        };
+      });
       server.app.get("/api/remote-status", async (req) => {
         const normalizedResult = normalizeAndValidateConfig(config.initialConfig ?? {});
         const normalized = normalizedResult.config;
@@ -4206,9 +5316,11 @@ var init_server = __esm({
             metrics: report.metrics,
             anomalies: report.anomalies,
             topRouteReasons: report.topRouteReasons,
-            topFinalModels: report.topFinalModels
+            topFinalModels: report.topFinalModels,
+            outcome: report.outcome
           }),
           metrics: report.metrics,
+          outcome: report.outcome,
           anomalies: report.anomalies,
           topRouteReasons: report.topRouteReasons,
           topFinalModels: report.topFinalModels,
@@ -4398,8 +5510,8 @@ var init_server = __esm({
         reply.send({ success: true, message: "Service restart initiated" });
         setTimeout(() => {
           const { spawn: spawn3 } = require("child_process");
-          const { join: join8 } = require("path");
-          const cliPath = join8(__dirname, "cli.js");
+          const { join: join9 } = require("path");
+          const cliPath = join9(__dirname, "cli.js");
           const currentPort = config.initialConfig?.PORT;
           const restartArgs = [cliPath, "start", "--daemon"];
           if (currentPort) {
@@ -4430,6 +5542,7 @@ var init_router = __esm({
     init_cache();
     init_log();
     init_compile();
+    init_governance();
     enc = (0, import_tiktoken.get_encoding)("cl100k_base");
     calculateTokenCount = (messages, system, tools) => {
       let tokenCount = 0;
@@ -4582,6 +5695,17 @@ var init_router = __esm({
         }
         req.body.model = model ?? req.body.model;
         applyModelThinking(req, config, req.body.model);
+        const compiledModel = getCompiledModelRef(config, req.body.model);
+        if (compiledModel?.source === "registration" && compiledModel.modelPool) {
+          req.modelPoolSelection = compiledModel.modelPool;
+          if (req.governanceTrace) {
+            req.governanceTrace.finalModel = req.body.model;
+            appendTraceReason(
+              req.governanceTrace,
+              `model_pool:${compiledModel.modelPool.modelId}:${compiledModel.modelPool.endpointId}`
+            );
+          }
+        }
         req.tokenCount = tokenCount;
       } catch (error) {
         logError("Error in router middleware:", error.message);
@@ -4593,31 +5717,166 @@ var init_router = __esm({
 });
 
 // src/middleware/auth.ts
-function apiKeyAuth(config) {
+function estimateRequestTokens(body) {
+  if (body === void 0 || body === null) {
+    return 0;
+  }
+  const text = typeof body === "string" ? body : JSON.stringify(body);
+  return Math.ceil(text.length / 4);
+}
+function authRequirementForRequest(req) {
+  const method = String(req.method ?? "").toUpperCase();
+  const path = String(req.url ?? "").split("?")[0];
+  const readOnlyPaths = /* @__PURE__ */ new Set([
+    "/api/health",
+    "/api/service-info",
+    "/api/remote-status",
+    "/api/registration",
+    "/api/models/compiled",
+    "/api/transformers",
+    "/api/governance/health",
+    "/api/governance/metrics",
+    "/api/governance/metrics/export",
+    "/api/governance/metrics/exports"
+  ]);
+  const modelCallPaths = /* @__PURE__ */ new Set([
+    "/v1/messages",
+    "/v1/chat/completions"
+  ]);
+  if (method === "GET" && (readOnlyPaths.has(path) || path === "/api/governance/traces" || path.startsWith("/api/governance/traces/") || path === "/api/governance/archives" || path.startsWith("/api/governance/archives/"))) {
+    return "read-only";
+  }
+  if (modelCallPaths.has(path)) {
+    return "client";
+  }
+  return path.startsWith("/api/") || path === "/ui" ? "admin" : "client";
+}
+function isQuotaMeteredRequest(req) {
+  const method = String(req.method ?? "").toUpperCase();
+  const path = String(req.url ?? "").split("?")[0];
+  return method === "POST" && (path === "/v1/messages" || path === "/v1/chat/completions");
+}
+function apiKeyAuth(configInput, options = {}) {
   return (req, reply, done) => {
-    if (!config.APIKEY) {
+    Promise.resolve(typeof configInput === "function" ? configInput() : configInput).then(async (config) => {
+      authQuotaUsageStore.hydrate(config.Auth?.quota_usage);
+      const required = authRequirementForRequest(req);
+      const auditBase = {
+        required,
+        method: req.method,
+        path: req.url,
+        requestId: req.id
+      };
+      if (!config.APIKEY && !config.Auth?.managed_keys?.length) {
+        authAuditStore.add({
+          ...auditBase,
+          outcome: "skipped",
+          reason: "no_auth_config"
+        });
+        done();
+        return;
+      }
+      const result = verifyApiKey(config, extractApiKeyFromHeaders(req.headers), required);
+      if (!result.ok) {
+        const statusCode = result.reason === "insufficient_scope" ? 403 : 401;
+        authAuditStore.add({
+          ...auditBase,
+          outcome: "denied",
+          source: result.source,
+          keyId: result.keyId,
+          reason: result.reason,
+          statusCode
+        });
+        reply.code(statusCode).send({
+          error: statusCode === 403 ? "Forbidden" : "Unauthorized",
+          reason: result.reason
+        });
+        done(new Error(statusCode === 403 ? "Forbidden" : "Unauthorized"));
+        return;
+      }
+      const quotaResult = isQuotaMeteredRequest(req) ? authQuotaUsageStore.consume(
+        result.keyId,
+        result.quota,
+        estimateRequestTokens(req.body)
+      ) : { ok: true };
+      if (!quotaResult.ok) {
+        const retryAfterSeconds = quotaResult.usage.windowResetAt ? Math.max(0, Math.ceil((Date.parse(quotaResult.usage.windowResetAt) - Date.now()) / 1e3)) : void 0;
+        authAuditStore.add({
+          ...auditBase,
+          outcome: "denied",
+          source: result.source,
+          keyId: result.keyId,
+          scopes: result.scopes,
+          reason: quotaResult.reason,
+          statusCode: 429,
+          quota: quotaResult.usage
+        });
+        if (retryAfterSeconds !== void 0) {
+          reply.header("Retry-After", String(retryAfterSeconds));
+        }
+        reply.code(429).send({
+          error: "Too Many Requests",
+          reason: quotaResult.reason,
+          quota: quotaResult.usage
+        });
+        done(new Error("Too Many Requests"));
+        return;
+      }
+      authAuditStore.add({
+        ...auditBase,
+        outcome: "allowed",
+        source: result.source,
+        keyId: result.keyId,
+        scopes: result.scopes,
+        statusCode: 200,
+        quota: quotaResult.usage
+      });
+      if (quotaResult.usage && options.persistQuotaUsage) {
+        Promise.resolve().then(() => options.persistQuotaUsage?.(authQuotaUsageStore.exportForConfig())).catch(() => void 0);
+      }
       done();
-      return;
-    }
-    const authHeader = req.headers.authorization;
-    const xApiKey = req.headers["x-api-key"];
-    let providedKey;
-    if (authHeader?.startsWith("Bearer ")) {
-      providedKey = authHeader.slice(7);
-    } else if (xApiKey) {
-      providedKey = xApiKey;
-    }
-    if (!providedKey || providedKey !== config.APIKEY) {
-      reply.code(401).send({ error: "Unauthorized" });
-      done(new Error("Unauthorized"));
-      return;
-    }
-    done();
+    }).catch((error) => {
+      done(error instanceof Error ? error : new Error(String(error)));
+    });
   };
 }
 var init_auth = __esm({
   "src/middleware/auth.ts"() {
     "use strict";
+    init_api_keys();
+  }
+});
+
+// src/auth/quota-persistence.ts
+async function loadPersistedAuthQuotaUsage() {
+  if (!(0, import_fs4.existsSync)(QUOTA_USAGE_FILE)) {
+    return void 0;
+  }
+  const content = await (0, import_promises2.readFile)(QUOTA_USAGE_FILE, "utf-8");
+  const parsed = JSON.parse(content);
+  return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
+}
+async function savePersistedAuthQuotaUsage(usage) {
+  if (!(0, import_fs4.existsSync)(HOME_DIR)) {
+    (0, import_fs4.mkdirSync)(HOME_DIR, { recursive: true });
+  }
+  const tempFile = `${QUOTA_USAGE_FILE}.tmp`;
+  quotaUsageWriteQueue = quotaUsageWriteQueue.catch(() => void 0).then(async () => {
+    await (0, import_promises2.writeFile)(tempFile, JSON.stringify(usage, null, 2), "utf-8");
+    await (0, import_promises2.rename)(tempFile, QUOTA_USAGE_FILE);
+  });
+  await quotaUsageWriteQueue;
+}
+var import_fs4, import_promises2, import_path5, QUOTA_USAGE_FILE, quotaUsageWriteQueue;
+var init_quota_persistence = __esm({
+  "src/auth/quota-persistence.ts"() {
+    "use strict";
+    import_fs4 = require("fs");
+    import_promises2 = require("fs/promises");
+    import_path5 = require("path");
+    init_constants();
+    QUOTA_USAGE_FILE = (0, import_path5.join)(HOME_DIR, "auth-quota-usage.json");
+    quotaUsageWriteQueue = Promise.resolve();
   }
 });
 
@@ -4676,12 +5935,12 @@ function savePid(pid, port) {
     port: port ?? DEFAULT_CONFIG2.PORT,
     startTime: (/* @__PURE__ */ new Date()).toISOString()
   };
-  (0, import_fs4.writeFileSync)(PID_FILE, JSON.stringify(info, null, 2), "utf-8");
+  (0, import_fs5.writeFileSync)(PID_FILE, JSON.stringify(info, null, 2), "utf-8");
 }
 function readServiceInfo() {
-  if (!(0, import_fs4.existsSync)(PID_FILE)) return null;
+  if (!(0, import_fs5.existsSync)(PID_FILE)) return null;
   try {
-    const content = (0, import_fs4.readFileSync)(PID_FILE, "utf-8").trim();
+    const content = (0, import_fs5.readFileSync)(PID_FILE, "utf-8").trim();
     if (/^\d+$/.test(content)) {
       return { pid: parseInt(content, 10), port: DEFAULT_CONFIG2.PORT, startTime: "" };
     }
@@ -4691,19 +5950,19 @@ function readServiceInfo() {
   }
 }
 function cleanupPidFile() {
-  if ((0, import_fs4.existsSync)(PID_FILE)) {
+  if ((0, import_fs5.existsSync)(PID_FILE)) {
     try {
-      (0, import_fs4.unlinkSync)(PID_FILE);
+      (0, import_fs5.unlinkSync)(PID_FILE);
     } catch (error) {
       logError("Failed to cleanup PID file:", error);
     }
   }
 }
-var import_fs4, import_child_process;
+var import_fs5, import_child_process;
 var init_processCheck = __esm({
   "src/utils/processCheck.ts"() {
     "use strict";
-    import_fs4 = require("fs");
+    import_fs5 = require("fs");
     import_child_process = require("child_process");
     init_constants();
     init_log();
@@ -6541,8 +7800,8 @@ function cloneRequestBody(value) {
 }
 async function initializeClaudeConfig() {
   const homeDir = (0, import_os2.homedir)();
-  const configPath = (0, import_path5.join)(homeDir, ".claude.json");
-  if (!(0, import_fs5.existsSync)(configPath)) {
+  const configPath = (0, import_path6.join)(homeDir, ".claude.json");
+  if (!(0, import_fs6.existsSync)(configPath)) {
     log(`Creating ${configPath} for Claude Code compatibility (onboarding bypass)`);
     const userID = Array.from(
       { length: 64 },
@@ -6556,7 +7815,7 @@ async function initializeClaudeConfig() {
       lastOnboardingVersion: "1.0.17",
       projects: {}
     };
-    await (0, import_promises2.writeFile)(configPath, JSON.stringify(configContent, null, 2));
+    await (0, import_promises3.writeFile)(configPath, JSON.stringify(configContent, null, 2));
   }
 }
 function buildServerInitialConfig(config, registry, host, servicePort) {
@@ -6565,7 +7824,7 @@ function buildServerInitialConfig(config, registry, host, servicePort) {
     providers: registry.providers,
     HOST: host,
     PORT: servicePort,
-    LOG_FILE: (0, import_path5.join)(
+    LOG_FILE: (0, import_path6.join)(
       (0, import_os2.homedir)(),
       ".claude-trigger-router",
       "claude-trigger-router.log"
@@ -6579,11 +7838,19 @@ async function run(options = {}) {
   }
   await initDir();
   const config = await initConfig();
+  authQuotaUsageStore.hydrate(config.Auth?.quota_usage);
+  try {
+    authQuotaUsageStore.hydrate(await loadPersistedAuthQuotaUsage());
+  } catch (error) {
+    logWarn(`[AuthQuota] Failed to load persisted quota usage: ${error instanceof Error ? error.message : String(error)}`);
+  }
   configureLogging(config);
   let HOST = config.HOST || "127.0.0.1";
-  if (config.HOST && !config.APIKEY) {
+  const managedKeySummary = managedApiKeySummary(config);
+  const hasPublicAuth = Boolean(config.APIKEY || managedKeySummary.active > 0);
+  if (config.HOST && !hasPublicAuth) {
     HOST = "127.0.0.1";
-    logWarn("\u26A0\uFE0F API key is not set. HOST is forced to 127.0.0.1.");
+    logWarn("\u26A0\uFE0F API key or active managed key is not set. HOST is forced to 127.0.0.1.");
   }
   const port = options.port ?? config.PORT ?? DEFAULT_CONFIG.PORT;
   savePid(process.pid, port);
@@ -6626,13 +7893,34 @@ async function run(options = {}) {
     initialConfig: buildServerInitialConfig(config, registry, HOST, servicePort),
     logger: loggerConfig
   });
+  const authMiddleware = apiKeyAuth(async () => {
+    try {
+      const currentConfig = await readConfigFile();
+      return {
+        ...config,
+        APIKEY: currentConfig.APIKEY,
+        Auth: currentConfig.Auth
+      };
+    } catch (error) {
+      logWarn(`[Auth] Failed to refresh auth config, using startup auth config: ${error instanceof Error ? error.message : String(error)}`);
+      return config;
+    }
+  }, {
+    persistQuotaUsage: async (usage) => {
+      try {
+        await savePersistedAuthQuotaUsage(usage);
+      } catch (error) {
+        logWarn(`[AuthQuota] Failed to persist quota usage: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    }
+  });
   server.addHook("preHandler", async (req, reply) => {
     return new Promise((resolve, reject) => {
       const done = (err) => {
         if (err) reject(err);
         else resolve();
       };
-      apiKeyAuth(config)(req, reply, done);
+      authMiddleware(req, reply, done);
     });
   });
   triggerRouter.init(config);
@@ -6911,18 +8199,20 @@ async function run(options = {}) {
   });
   await server.start();
 }
-var import_fs5, import_promises2, import_os2, import_path5, import_json5, import_node_events, import_rotating_file_stream, event;
+var import_fs6, import_promises3, import_os2, import_path6, import_json5, import_node_events, import_rotating_file_stream, event;
 var init_index = __esm({
   "src/index.ts"() {
     "use strict";
-    import_fs5 = require("fs");
-    import_promises2 = require("fs/promises");
+    import_fs6 = require("fs");
+    import_promises3 = require("fs/promises");
     import_os2 = require("os");
-    import_path5 = require("path");
+    import_path6 = require("path");
     init_utils();
     init_server();
     init_router();
     init_auth();
+    init_api_keys();
+    init_quota_persistence();
     init_processCheck();
     init_constants();
     init_log();
@@ -7400,6 +8690,17 @@ function buildRemoteServiceConfig(input3) {
     Router: {}
   };
 }
+function buildServerDeploymentConfig(input3) {
+  const template = buildUsableMinimalTemplateConfig();
+  return {
+    ...template,
+    HOST: "0.0.0.0",
+    APIKEY: input3.apiKey,
+    Runtime: {
+      mode: "server"
+    }
+  };
+}
 function buildUsableMinimalTemplateConfig() {
   const openRouterPreset = getProviderPreset("openrouter");
   const modelId = openRouterPreset?.suggested_id ?? "sonnet";
@@ -7590,6 +8891,16 @@ function getMigratedModelCount(draft) {
   }
   return 0;
 }
+function isRouterServiceDeploymentDraft(draft) {
+  return draft?.Runtime?.mode === "server" || draft?.Runtime?.mode === "cloud";
+}
+function getRouterServiceDeploymentLabel(draft) {
+  return draft?.Runtime?.mode === "cloud" ? "cloud" : "server";
+}
+function printRouterServiceDeploymentNextSteps(io, draft, message = "\u5DF2\u751F\u6210 {mode} \u90E8\u7F72\u914D\u7F6E\uFF1Bsetup \u4E0D\u4F1A\u81EA\u52A8\u542F\u52A8\u8FDC\u7A0B\u670D\u52A1\u3002") {
+  io.info(message.replace("{mode}", getRouterServiceDeploymentLabel(draft)));
+  io.info("\u4E0B\u4E00\u6B65\uFF1A\u7F16\u8F91 Models[].key / Models[].model\uFF0C\u8FD0\u884C ctr doctor\uFF0C\u7136\u540E\u8FD0\u884C ctr start --daemon\u3002");
+}
 async function runSetup(deps) {
   const detection = await deps.detectSetupEnvironment();
   const currentConfigAction = await deps.chooseCurrentConfigAction({
@@ -7613,6 +8924,7 @@ async function runSetup(deps) {
     return;
   }
   let configChanged = false;
+  let finalDraft;
   if (branch.kind === "repair_current") {
     if (detection.currentConfig.kind !== "invalid" && detection.currentConfig.kind !== "valid") {
       throw new Error("repair_current requires current config");
@@ -7632,6 +8944,7 @@ async function runSetup(deps) {
       draft: baseDraft,
       fields: repairPlan.fields
     });
+    finalDraft = completedDraft;
     const persistResult = await deps.persistConfig({
       config: completedDraft,
       currentConfigPath: detection.currentConfig.path,
@@ -7640,16 +8953,28 @@ async function runSetup(deps) {
     configChanged = persistResult.configChanged;
   }
   if (branch.kind === "reuse_current") {
-    await deps.ensureServiceReady({
+    if (detection.currentConfig.kind === "valid" && isRouterServiceDeploymentDraft(detection.currentConfig.config)) {
+      printRouterServiceDeploymentNextSteps(
+        deps.io,
+        detection.currentConfig.config,
+        "\u5F53\u524D\u914D\u7F6E\u662F {mode} \u90E8\u7F72\u914D\u7F6E\uFF1Bsetup \u4E0D\u4F1A\u81EA\u52A8\u542F\u52A8\u8FDC\u7A0B\u670D\u52A1\u3002"
+      );
+      return;
+    }
+    const service = await deps.ensureServiceReady({
       configChanged: false,
       detectedService: detection.detectedService,
       reloadSupported: deps.reloadSupported
     });
-    await deps.enterClaudeCode();
+    await deps.enterClaudeCode({
+      config: detection.currentConfig.config,
+      service
+    });
     return;
   }
   if (branch.kind === "unparseable_current") {
     const draft = await deps.buildFreshConfig();
+    finalDraft = draft;
     const persistResult = await deps.persistConfig({
       config: draft,
       currentConfigPath: detection.currentConfig.path,
@@ -7659,6 +8984,7 @@ async function runSetup(deps) {
   }
   if (branch.kind === "fresh_init") {
     const draft = await deps.buildFreshConfig();
+    finalDraft = draft;
     const persistResult = await deps.persistConfig({
       config: draft,
       currentConfigPath: getTargetConfigPath(detection),
@@ -7681,27 +9007,38 @@ async function runSetup(deps) {
     if (migrated.skippedFields.length > 0) {
       deps.io.info(`\u4EE5\u4E0B\u65E7\u5B57\u6BB5\u672A\u81EA\u52A8\u8FC1\u79FB\uFF1A${migrated.skippedFields.join(", ")}`);
     }
-    let finalDraft = migrated.draft;
+    let migratedFinalDraft = migrated.draft;
     if (migrated.needsCompletion) {
-      finalDraft = await deps.completeDraft({
+      migratedFinalDraft = await deps.completeDraft({
         draft: migrated.draft,
         fields: migrated.missingFields
       });
     }
+    finalDraft = migratedFinalDraft;
     const persistResult = await deps.persistConfig({
-      config: finalDraft,
+      config: migratedFinalDraft,
       currentConfigPath: getTargetConfigPath(detection),
       hasExistingConfig: detection.currentConfig.kind !== "missing"
     });
     configChanged = persistResult.configChanged;
   }
   if (branch.kind === "fresh_init" || branch.kind === "repair_current" || branch.kind === "unparseable_current" || branch.kind === "migrate_legacy") {
-    await deps.ensureServiceReady({
+    if (isRouterServiceDeploymentDraft(finalDraft)) {
+      printRouterServiceDeploymentNextSteps(deps.io, finalDraft);
+      return;
+    }
+    const service = await deps.ensureServiceReady({
       configChanged,
       detectedService: detection.detectedService,
       reloadSupported: deps.reloadSupported
     });
-    await deps.enterClaudeCode();
+    if (!finalDraft) {
+      throw new Error("setup finished without a final config draft");
+    }
+    await deps.enterClaudeCode({
+      config: finalDraft,
+      service
+    });
     return;
   }
 }
@@ -7716,7 +9053,7 @@ var init_setup = __esm({
 // src/setup/index.ts
 function createConsoleIO() {
   if (process.env.CTR_SETUP_FORCE_SCRIPTED_INPUT === "1") {
-    const scriptedInput = (0, import_fs6.readFileSync)(0, "utf-8");
+    const scriptedInput = (0, import_fs7.readFileSync)(0, "utf-8");
     const answers = scriptedInput.split(/\r?\n/).map((item) => item.trim()).filter((item) => item.length > 0);
     let cursor = 0;
     const nextAnswer = async () => answers[cursor++] ?? "";
@@ -7805,7 +9142,7 @@ function createConsoleIO() {
       }
     };
   }
-  const rl = (0, import_promises3.createInterface)({ input: import_process.stdin, output: import_process.stdout });
+  const rl = (0, import_promises4.createInterface)({ input: import_process.stdin, output: import_process.stdout });
   const ask = async (message) => {
     const answer = await rl.question(message);
     return answer.trim();
@@ -7846,7 +9183,7 @@ function createConsoleIO() {
   };
 }
 function readStructuredConfigFile(filePath) {
-  const content = (0, import_fs6.readFileSync)(filePath, "utf-8");
+  const content = (0, import_fs7.readFileSync)(filePath, "utf-8");
   if (filePath.endsWith(".json")) {
     return JSON.parse(content);
   }
@@ -7854,7 +9191,7 @@ function readStructuredConfigFile(filePath) {
 }
 function getCurrentRuntimeFields() {
   const candidates = [CONFIG_FILE, CONFIG_FILE_YML, CONFIG_FILE_JSON];
-  const currentPath = candidates.find((filePath) => (0, import_fs6.existsSync)(filePath));
+  const currentPath = candidates.find((filePath) => (0, import_fs7.existsSync)(filePath));
   if (!currentPath) {
     return {};
   }
@@ -7876,7 +9213,7 @@ function getCurrentRuntimeFields() {
 }
 function getConfiguredPortFromCurrentFiles() {
   const candidates = [CONFIG_FILE, CONFIG_FILE_YML, CONFIG_FILE_JSON];
-  const currentPath = candidates.find((filePath) => (0, import_fs6.existsSync)(filePath));
+  const currentPath = candidates.find((filePath) => (0, import_fs7.existsSync)(filePath));
   if (!currentPath) {
     return DEFAULT_CONFIG2.PORT;
   }
@@ -7910,7 +9247,7 @@ async function getAvailablePort() {
   }
 }
 function readLegacyConfigFile(filePath) {
-  const content = (0, import_fs6.readFileSync)(filePath, "utf-8");
+  const content = (0, import_fs7.readFileSync)(filePath, "utf-8");
   if (filePath.endsWith(".json")) {
     return import_json52.default.parse(content);
   }
@@ -7918,13 +9255,13 @@ function readLegacyConfigFile(filePath) {
 }
 async function readLegacyConfig(deps = {}) {
   const baseHomeDir = deps.homeDir || (0, import_os3.homedir)();
-  const exists = deps.exists || import_fs6.existsSync;
+  const exists = deps.exists || import_fs7.existsSync;
   const readConfig = deps.readConfig || readLegacyConfigFile;
   const overridePath = process.env.CTR_SETUP_LEGACY_CONFIG_PATH;
   const candidatePaths = overridePath ? [overridePath] : [
-    (0, import_path6.join)(baseHomeDir, ".ccr", "config.yaml"),
-    (0, import_path6.join)(baseHomeDir, ".claude-code-router", "config.yaml"),
-    (0, import_path6.join)(baseHomeDir, ".claude-code-router", "config.json")
+    (0, import_path7.join)(baseHomeDir, ".ccr", "config.yaml"),
+    (0, import_path7.join)(baseHomeDir, ".claude-code-router", "config.yaml"),
+    (0, import_path7.join)(baseHomeDir, ".claude-code-router", "config.json")
   ];
   const legacyPath = candidatePaths.find((filePath) => exists(filePath));
   if (!legacyPath) {
@@ -7946,7 +9283,7 @@ async function readLegacyConfig(deps = {}) {
 }
 async function readCurrentConfig() {
   const candidates = [CONFIG_FILE, CONFIG_FILE_YML, CONFIG_FILE_JSON];
-  const currentPath = candidates.find((filePath) => (0, import_fs6.existsSync)(filePath));
+  const currentPath = candidates.find((filePath) => (0, import_fs7.existsSync)(filePath));
   if (!currentPath) {
     return { kind: "missing" };
   }
@@ -8321,6 +9658,9 @@ function applyRoutingBootstrap(draft, choice, specializedModelId) {
   };
   return nextDraft;
 }
+function createSetupBootstrapApiKey() {
+  return `ctr_bootstrap_${(0, import_crypto3.randomBytes)(24).toString("base64url")}`;
+}
 async function promptModelConnection(io, input3) {
   if (input3.intro) {
     io.info(input3.intro);
@@ -8354,18 +9694,30 @@ async function promptModelConnection(io, input3) {
   };
 }
 async function buildFreshConfig(io) {
-  const setupEntryChoice = await io.choose("\u5F53\u524D\u8981\u672C\u5730\u4F7F\u7528\uFF0C\u8FD8\u662F\u8FDE\u63A5\u8FDC\u7A0B\u670D\u52A1\uFF1F", [
+  const setupEntryChoice = await io.choose("\u5F53\u524D\u8981\u672C\u5730\u4F7F\u7528\u3001\u8FDE\u63A5\u8FDC\u7A0B\u670D\u52A1\uFF0C\u8FD8\u662F\u90E8\u7F72\u4E3A\u8FDC\u7A0B\u670D\u52A1\u7AEF\uFF1F", [
     "\u672C\u5730\u4F7F\u7528\uFF08\u63A8\u8350\uFF09",
-    "\u8FDE\u63A5\u8FDC\u7A0B\u670D\u52A1"
+    "\u8FDE\u63A5\u8FDC\u7A0B\u670D\u52A1",
+    "\u90E8\u7F72\u4E3A\u8FDC\u7A0B\u670D\u52A1\u7AEF"
   ]);
   if (setupEntryChoice === "\u8FDE\u63A5\u8FDC\u7A0B\u670D\u52A1") {
     const baseUrl = await io.input("\u8FDC\u7A0B\u670D\u52A1 URL");
     const authToken = await io.input("\u8FDC\u7A0B\u670D\u52A1 Auth Token\uFF08\u53EF\u9009\uFF09", "${CTR_REMOTE_AUTH_TOKEN}");
     io.info("\u5DF2\u751F\u6210\u8FDC\u7A0B\u670D\u52A1\u8FDE\u63A5\u914D\u7F6E\uFF0C\u672C\u673A\u4E0D\u4F1A\u8981\u6C42\u4F60\u5148\u586B\u5199 provider/model\u3002");
+    io.info(REMOTE_CLIENT_ROLE_GUIDE);
+    io.info("\u5982\u679C\u4F60\u5176\u5B9E\u8981\u628A\u672C\u673A\u90E8\u7F72\u6210\u670D\u52A1\u7AEF\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C setup \u9009\u62E9\u201C\u90E8\u7F72\u4E3A\u8FDC\u7A0B\u670D\u52A1\u7AEF\u201D\uFF0C\u6216\u8FD0\u884C\uFF1Actr deploy init --target server");
+    io.info(SERVER_MAINTAINER_ROLE_GUIDE);
     return buildRemoteServiceConfig({ baseUrl, authToken });
   }
+  if (setupEntryChoice === "\u90E8\u7F72\u4E3A\u8FDC\u7A0B\u670D\u52A1\u7AEF") {
+    io.info(SERVER_MAINTAINER_ROLE_GUIDE);
+    io.info("setup \u5C06\u751F\u6210 server profile \u548C bootstrap admin APIKEY\uFF0C\u4F46\u4E0D\u4F1A\u81EA\u52A8\u542F\u52A8\u670D\u52A1\u3002");
+    io.info("\u4FDD\u5B58\u540E\u8BF7\u5148\u7F16\u8F91 Models[].key / Models[].model\uFF0C\u518D\u8FD0\u884C\uFF1Actr doctor && ctr start --daemon");
+    return buildServerDeploymentConfig({
+      apiKey: createSetupBootstrapApiKey()
+    });
+  }
   const primaryModel = await promptModelConnection(io, {
-    intro: "\u6211\u4EEC\u5148\u521B\u5EFA\u4E00\u4EFD\u6700\u5C0F\u53EF\u7528\u914D\u7F6E\u3002",
+    intro: `\u6211\u4EEC\u5148\u521B\u5EFA\u4E00\u4EFD\u6700\u5C0F\u53EF\u7528\u914D\u7F6E\u3002${LOCAL_USER_ROLE_GUIDE}`,
     modelIdPrompt: "\u9ED8\u8BA4\u6A21\u578B\u7684 model id\uFF08Router.default \u4F1A\u5F15\u7528\u5B83\uFF09",
     suggestedModelId: "sonnet"
   });
@@ -8466,6 +9818,31 @@ function printRoutingNextSteps(io) {
   io.info("  - SmartRouter candidates\uFF1A\u9002\u5408\u6A21\u7CCA\u4EFB\u52A1\uFF0C\u5728\u5019\u9009\u6A21\u578B\u4E4B\u95F4\u81EA\u52A8\u9009\u62E9\u66F4\u5408\u9002\u7684\u6A21\u578B");
   io.info("  - \u914D\u7F6E\u6A21\u677F\u53C2\u8003\uFF1Aconfig/trigger.advanced.yaml");
 }
+function formatSetupServiceReadyMessage(action) {
+  if (action === "start") {
+    return "\u672C\u5730\u4EE3\u7406\u5DF2\u542F\u52A8\u5E76\u901A\u8FC7\u5065\u5EB7\u68C0\u67E5\u3002";
+  }
+  if (action === "reload") {
+    return "\u672C\u5730\u4EE3\u7406\u5DF2\u91CD\u8F7D\u914D\u7F6E\u5E76\u901A\u8FC7\u5065\u5EB7\u68C0\u67E5\u3002";
+  }
+  if (action === "restart") {
+    return "\u672C\u5730\u4EE3\u7406\u5DF2\u91CD\u542F\u5E76\u901A\u8FC7\u5065\u5EB7\u68C0\u67E5\u3002";
+  }
+  return "\u672C\u5730\u4EE3\u7406\u5DF2\u5728\u8FD0\u884C\u5E76\u901A\u8FC7\u5065\u5EB7\u68C0\u67E5\u3002";
+}
+function printRemoteClientNextSteps(io, action) {
+  io.info(`${formatSetupServiceReadyMessage(action)}\u8FDC\u7A0B\u670D\u52A1\u8FDE\u63A5\u914D\u7F6E\u5DF2\u4FDD\u5B58\uFF0C\u53EF\u7528\u4E8E\u68C0\u67E5\u8FDC\u7AEF ready/status\u3002`);
+  io.info("\u4E0B\u4E00\u6B65\uFF1A\u8FD0\u884C ctr status \u67E5\u770B\u672C\u5730\u4EE3\u7406\u4E0E\u8FDC\u7A0B\u670D\u52A1 ready \u72B6\u6001\u3002");
+  io.info("\u65E5\u5E38\u76F4\u8FDE\u8FDC\u7A0B\u670D\u52A1\u65F6\uFF0C\u8BF7\u6309\u670D\u52A1\u7EF4\u62A4\u8005\u63D0\u4F9B\u7684 ANTHROPIC_BASE_URL \u548C ANTHROPIC_AUTH_TOKEN \u914D\u7F6E Claude Code\u3002");
+  io.info("\u5982\u679C\u8FDC\u7AEF\u4E0D\u53EF\u7528\uFF0C\u8BF7\u786E\u8BA4 Runtime.remote_service.base_url \u548C managed client + read-only key\u3002");
+}
+function printLocalClientNextSteps(io, action) {
+  io.info(`${formatSetupServiceReadyMessage(action)}\u65E5\u5E38\u4F7F\u7528\u8FD0\u884C\uFF1Actr code`);
+  printRoutingNextSteps(io);
+}
+function isRemoteServiceClientConfig(config) {
+  return config.Runtime?.mode === "local" && Boolean(config.Runtime.remote_service?.enabled);
+}
 async function runSetupCli(customDeps) {
   const defaults = createDefaultDeps(customDeps?.io);
   const deps = { ...defaults, ...customDeps };
@@ -8569,8 +9946,13 @@ async function runSetupCli(customDeps) {
           healthChecked: true
         };
       },
-      enterClaudeCode: async () => {
-        printRoutingNextSteps(deps.io);
+      enterClaudeCode: async ({ config, service }) => {
+        if (isRemoteServiceClientConfig(config)) {
+          printRemoteClientNextSteps(deps.io, service.action);
+          return;
+        } else {
+          printLocalClientNextSteps(deps.io, service.action);
+        }
         if (!shouldAutoEnterClaudeCodeAfterSetup()) {
           deps.io.info("\u4E3A\u907F\u514D setup \u7ED3\u675F\u540E\u63A5\u7BA1\u5F53\u524D\u7EC8\u7AEF\uFF0C\u8BF7\u624B\u52A8\u8FD0\u884C\uFF1Actr code");
           deps.io.info("\u5982\u679C\u4F60\u660E\u786E\u9700\u8981 setup \u7ED3\u675F\u540E\u81EA\u52A8\u8FDB\u5165 Claude Code\uFF0C\u53EF\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF CTR_SETUP_AUTO_ENTER_CODE=1");
@@ -8585,15 +9967,16 @@ async function runSetupCli(customDeps) {
     deps.io.close?.();
   }
 }
-var import_fs6, import_net2, import_os3, import_path6, import_promises3, import_process, import_json52, import_js_yaml;
+var import_fs7, import_crypto3, import_net2, import_os3, import_path7, import_promises4, import_process, import_json52, import_js_yaml;
 var init_setup2 = __esm({
   "src/setup/index.ts"() {
     "use strict";
-    import_fs6 = require("fs");
+    import_fs7 = require("fs");
+    import_crypto3 = require("crypto");
     import_net2 = require("net");
     import_os3 = require("os");
-    import_path6 = require("path");
-    import_promises3 = require("readline/promises");
+    import_path7 = require("path");
+    import_promises4 = require("readline/promises");
     import_process = require("process");
     import_json52 = __toESM(require("json5"));
     import_js_yaml = __toESM(require("js-yaml"));
@@ -8611,6 +9994,7 @@ var init_setup2 = __esm({
     init_templates();
     init_persist();
     init_setup();
+    init_runtime_role_guidance();
   }
 });
 
@@ -8683,7 +10067,7 @@ function hasArg(flag) {
 }
 function createConsoleIO2() {
   if (process.env.CTR_DOCTOR_FORCE_SCRIPTED_INPUT === "1") {
-    const scriptedInput = (0, import_fs7.readFileSync)(0, "utf-8");
+    const scriptedInput = (0, import_fs8.readFileSync)(0, "utf-8");
     const answers = scriptedInput.split(/\r?\n/).map((item) => item.trim()).filter(Boolean);
     let cursor = 0;
     const nextAnswer = async () => answers[cursor++] ?? "";
@@ -8726,8 +10110,17 @@ function createConsoleIO2() {
       }
     };
   }
-  const rl = (0, import_promises4.createInterface)({ input: import_process2.stdin, output: import_process2.stdout });
-  const ask = async (message) => (await rl.question(message)).trim();
+  const rl = (0, import_promises5.createInterface)({ input: import_process2.stdin, output: import_process2.stdout });
+  const ask = async (message) => {
+    try {
+      return (await rl.question(message)).trim();
+    } catch (error) {
+      if (error?.code === "ERR_USE_AFTER_CLOSE") {
+        return void 0;
+      }
+      throw error;
+    }
+  };
   return {
     info(message) {
       import_process2.stdout.write(`${message}
@@ -8744,6 +10137,9 @@ function createConsoleIO2() {
 `));
       while (true) {
         const answer = await ask("> ");
+        if (answer === void 0) {
+          return options[0];
+        }
         const index = Number(answer);
         if (Number.isInteger(index) && index >= 1 && index <= options.length) {
           return options[index - 1];
@@ -8760,7 +10156,7 @@ function createConsoleIO2() {
       return answer || defaultValue || "";
     },
     async confirm(message, defaultValue = true) {
-      const answer = (await ask(`${message} ${defaultValue ? "[Y/n]" : "[y/N]"}: `)).toLowerCase();
+      const answer = (await ask(`${message} ${defaultValue ? "[Y/n]" : "[y/N]"}: `))?.toLowerCase();
       if (!answer) {
         return defaultValue;
       }
@@ -8807,7 +10203,7 @@ function tryLoadStructuredConfig(filePath, content) {
   }
 }
 function loadCurrentConfig() {
-  const existingPath = getConfigCandidates().find((filePath) => (0, import_fs7.existsSync)(filePath));
+  const existingPath = getConfigCandidates().find((filePath) => (0, import_fs8.existsSync)(filePath));
   const path = existingPath ?? CONFIG_FILE;
   if (!existingPath) {
     return {
@@ -8817,7 +10213,7 @@ function loadCurrentConfig() {
       messages: ["\u672A\u68C0\u6D4B\u5230\u5F53\u524D Claude Trigger Router \u914D\u7F6E\u3002"]
     };
   }
-  const content = (0, import_fs7.readFileSync)(existingPath, "utf-8");
+  const content = (0, import_fs8.readFileSync)(existingPath, "utf-8");
   const loaded = tryLoadStructuredConfig(existingPath, content);
   return {
     path,
@@ -9094,7 +10490,8 @@ function explainProbeFailure(category) {
 }
 async function ensureServiceUsable(config, deps, configChanged) {
   const port = config.PORT ?? DEFAULT_CONFIG2.PORT;
-  const healthy = await deps.probeServiceHealth(port, 500);
+  const serviceHealthOptions = config.APIKEY ? { apiKey: config.APIKEY } : {};
+  const healthy = await deps.probeServiceHealth(port, 500, serviceHealthOptions);
   const occupied = await deps.isTcpPortOccupied(port, 500);
   const running = deps.isServiceRunning();
   if (healthy && !configChanged) {
@@ -9114,7 +10511,7 @@ async function ensureServiceUsable(config, deps, configChanged) {
     }
   }
   await deps.startDaemon();
-  const verified = await deps.waitForService(port, 5e3);
+  const verified = await deps.waitForService(port, 5e3, serviceHealthOptions);
   if (!verified) {
     throw new Error(`doctor \u81EA\u52A8\u542F\u52A8\u540E\u5065\u5EB7\u68C0\u67E5\u4ECD\u672A\u901A\u8FC7\uFF08\u7AEF\u53E3 ${port}\uFF09\u3002`);
   }
@@ -9124,16 +10521,48 @@ async function reportRuntimeServiceContext(config, deps) {
   const runtimeMode = config.Runtime?.mode ?? "local";
   const serviceRole = runtimeMode === "local" ? "local_agent" : "router_service";
   const remoteService = config.Runtime?.remote_service;
+  const managedKeys = managedApiKeySummary(config);
+  const hasBootstrapAuth = Boolean(config.APIKEY);
+  const hasManagedAuthRecords = managedKeys.total > 0;
+  const authRequired = hasBootstrapAuth || hasManagedAuthRecords;
+  const host = String(config.HOST ?? DEFAULT_CONFIG2.HOST ?? "127.0.0.1").trim() || "127.0.0.1";
+  const port = config.PORT ?? DEFAULT_CONFIG2.PORT;
+  const publicHost = ["0.0.0.0", "::", "[::]"].includes(host);
+  const listenerUrl = publicHost ? `http://<server-host>:${port}` : `http://${host}:${port}`;
   deps.io.info(`\u670D\u52A1\u4E0A\u4E0B\u6587\uFF1A${runtimeMode}\uFF08${serviceRole}\uFF09`);
+  deps.io.info(`\u76D1\u542C\u5730\u5740\uFF1A${host}:${port}${publicHost ? "\uFF08\u5BF9\u5916\u76D1\u542C\uFF09" : "\uFF08\u672C\u673A\u76D1\u542C\uFF09"}`);
+  deps.io.info(`\u9274\u6743\u72B6\u6001\uFF1A${authRequired ? "enabled" : "disabled"}\uFF08bootstrap=${hasBootstrapAuth}, managed_active=${managedKeys.active}\uFF09`);
+  deps.io.info("Scope \u6307\u5F15\uFF1Aadmin \u7528\u4E8E /ui\u3001\u914D\u7F6E\u4FDD\u5B58\u3001\u91CD\u542F\u3001auth \u7BA1\u7406\u548C\u6CBB\u7406\u5199\u64CD\u4F5C\uFF1Bclient \u53EA\u7528\u4E8E\u6A21\u578B\u8C03\u7528\uFF1Bread-only \u53EA\u7528\u4E8E health/status/compiled/governance \u89C2\u6D4B\u3002");
+  deps.io.info("Key \u64CD\u4F5C\u6307\u5F15\uFF1A\u4F7F\u7528 admin key \u8C03\u7528 GET /api/auth/keys \u67E5\u770B\u5217\u8868\u3001POST /api/auth/keys \u751F\u6210 key\u3001POST /api/auth/keys/:id/revoke \u540A\u9500 key\uFF1B\u751F\u6210\u7684 secret \u53EA\u8FD4\u56DE\u4E00\u6B21\u3002");
+  if (runtimeMode !== "local") {
+    deps.io.info(`\u8FDC\u7A0B\u5BA2\u6237\u7AEF\u63A5\u5165\uFF1AANTHROPIC_BASE_URL=${listenerUrl}\uFF0CANTHROPIC_AUTH_TOKEN \u4F7F\u7528 managed client + read-only key\u3002`);
+    deps.io.info(`\u7EF4\u62A4\u5165\u53E3\uFF1Ahttp://127.0.0.1:${port}/ui\uFF1B\u516C\u7F51\u8BBF\u95EE\u8BF7\u653E\u5728 HTTPS \u53CD\u5411\u4EE3\u7406\u6216\u5185\u7F51\u4E4B\u540E\u3002`);
+  }
+  if (!authRequired && (runtimeMode !== "local" || publicHost)) {
+    deps.io.error("\u5B89\u5168\u98CE\u9669\uFF1A\u5F53\u524D server/cloud \u6216\u516C\u7F51\u76D1\u542C\u672A\u914D\u7F6E API key\uFF1B\u66B4\u9732\u670D\u52A1\u524D\u8BF7\u8BBE\u7F6E APIKEY \u6216\u521B\u5EFA managed client/admin key\u3002");
+  } else if (!hasBootstrapAuth && hasManagedAuthRecords && managedKeys.active === 0) {
+    deps.io.error("\u5B89\u5168\u98CE\u9669\uFF1A\u5F53\u524D\u4EC5\u4FDD\u7559 managed key \u8BB0\u5F55\u4F46\u6CA1\u6709 active key\uFF1B\u670D\u52A1\u4F1A\u62D2\u7EDD\u8BF7\u6C42\uFF0C\u8BF7\u8BBE\u7F6E APIKEY \u6216\u521B\u5EFA active managed key\u3002");
+  } else if (authRequired && hasBootstrapAuth && managedKeys.total === 0 && runtimeMode !== "local") {
+    deps.io.info("\u5B89\u5168\u63D0\u793A\uFF1A\u5F53\u524D\u4EC5\u914D\u7F6E bootstrap APIKEY\uFF1B\u5EFA\u8BAE\u4E3A\u8FDC\u7A0B\u4F7F\u7528\u8005\u751F\u6210 managed client key\uFF0C\u5E76\u4FDD\u7559 APIKEY \u53EA\u505A\u7BA1\u7406\u7528\u9014\u3002");
+  }
   if (!remoteService?.enabled) {
     deps.io.info("\u8FDC\u7A0B\u670D\u52A1\u68C0\u67E5\uFF1A\u672A\u542F\u7528\uFF0C\u672C\u673A\u4F7F\u7528\u672C\u5730\u914D\u7F6E\u548C\u672C\u5730\u670D\u52A1\u5065\u5EB7\u68C0\u67E5\u3002");
     return;
   }
   const baseUrl = remoteService.base_url?.trim().replace(/\/+$/, "") || "<missing>";
   deps.io.info(`\u8FDC\u7A0B\u670D\u52A1\u68C0\u67E5\uFF1A${baseUrl}`);
+  deps.io.info("\u8FDC\u7A0B token \u6307\u5F15\uFF1ARuntime.remote_service.auth_token \u5982\u679C\u540C\u65F6\u8981\u63A2\u6D4B ready/status \u5E76\u8C03\u7528\u6A21\u578B\uFF0C\u8BF7\u901A\u8FC7 POST /api/auth/keys \u751F\u6210 client + read-only key\uFF1B\u907F\u514D\u590D\u7528 admin key\u3002");
   const remoteStatus = await probeRemoteServiceStatus(remoteService);
   const statusLabel = remoteStatus.ready ? "ready" : remoteStatus.reachable ? "reachable" : "unreachable";
   deps.io.info(`\u8FDC\u7A0B\u670D\u52A1\u72B6\u6001\uFF1A${statusLabel}\uFF08reachable=${remoteStatus.reachable}, ready=${remoteStatus.ready}\uFF09`);
+  const remoteSecurity = remoteStatus.security && typeof remoteStatus.security === "object" ? remoteStatus.security : void 0;
+  if (remoteSecurity?.status) {
+    deps.io.info(`\u8FDC\u7A0B\u670D\u52A1\u5B89\u5168\u72B6\u6001\uFF1A${String(remoteSecurity.status)}`);
+    const firstIssue = Array.isArray(remoteSecurity.issues) ? remoteSecurity.issues[0] : void 0;
+    if (firstIssue?.message) {
+      deps.io.info(`\u8FDC\u7A0B\u670D\u52A1\u5B89\u5168\u63D0\u793A\uFF1A${firstIssue.message}${firstIssue.action ? `\uFF1B${firstIssue.action}` : ""}`);
+    }
+  }
   if (remoteStatus.error) {
     deps.io.info(`\u8FDC\u7A0B\u670D\u52A1\u63D0\u793A\uFF1A${remoteStatus.error}`);
   }
@@ -9262,12 +10691,12 @@ async function runDoctorCli(customDeps) {
     deps.io.close?.();
   }
 }
-var import_fs7, import_promises4, import_process2, import_child_process2, import_json53, import_js_yaml2;
+var import_fs8, import_promises5, import_process2, import_child_process2, import_json53, import_js_yaml2;
 var init_doctor = __esm({
   "src/doctor/index.ts"() {
     "use strict";
-    import_fs7 = require("fs");
-    import_promises4 = require("readline/promises");
+    import_fs8 = require("fs");
+    import_promises5 = require("readline/promises");
     import_process2 = require("process");
     import_child_process2 = require("child_process");
     import_json53 = __toESM(require("json5"));
@@ -9283,6 +10712,7 @@ var init_doctor = __esm({
     init_processCheck();
     init_service_health();
     init_templates();
+    init_api_keys();
   }
 });
 
@@ -9295,7 +10725,7 @@ __export(cli_exports, {
 });
 module.exports = __toCommonJS(cli_exports);
 function getPackageInfo() {
-  const content = (0, import_fs8.readFileSync)(PACKAGE_JSON_PATH, "utf-8");
+  const content = (0, import_fs9.readFileSync)(PACKAGE_JSON_PATH, "utf-8");
   const pkg = JSON.parse(content);
   return {
     name: pkg.name ?? "@peterwangze/claude-trigger-router",
@@ -9335,16 +10765,16 @@ function getPort() {
   }
   try {
     const yaml4 = require("js-yaml");
-    if ((0, import_fs8.existsSync)(CONFIG_FILE)) {
-      const content = (0, import_fs8.readFileSync)(CONFIG_FILE, "utf-8");
+    if ((0, import_fs9.existsSync)(CONFIG_FILE)) {
+      const content = (0, import_fs9.readFileSync)(CONFIG_FILE, "utf-8");
       const config = yaml4.load(content);
       if (config?.PORT) return config.PORT;
-    } else if ((0, import_fs8.existsSync)(CONFIG_FILE_YML)) {
-      const content = (0, import_fs8.readFileSync)(CONFIG_FILE_YML, "utf-8");
+    } else if ((0, import_fs9.existsSync)(CONFIG_FILE_YML)) {
+      const content = (0, import_fs9.readFileSync)(CONFIG_FILE_YML, "utf-8");
       const config = yaml4.load(content);
       if (config?.PORT) return config.PORT;
-    } else if ((0, import_fs8.existsSync)(CONFIG_FILE_JSON)) {
-      const content = (0, import_fs8.readFileSync)(CONFIG_FILE_JSON, "utf-8");
+    } else if ((0, import_fs9.existsSync)(CONFIG_FILE_JSON)) {
+      const content = (0, import_fs9.readFileSync)(CONFIG_FILE_JSON, "utf-8");
       const config = JSON.parse(content);
       if (config?.PORT) return config.PORT;
     }
@@ -9365,6 +10795,7 @@ Claude Trigger Router - \u667A\u80FD\u89E6\u53D1\u8DEF\u7531\u5668
   setup       \u68C0\u6D4B\u5E76\u590D\u7528\u5DF2\u6709\u914D\u7F6E\uFF0C\u5FC5\u8981\u65F6\u8FC1\u79FB\u65E7\u914D\u7F6E\u6216\u65B0\u5EFA\u6700\u5C0F\u914D\u7F6E
   doctor      \u8BCA\u65AD\u5E76\u4FEE\u590D\u5F53\u524D\u914D\u7F6E\uFF0C\u6309\u9700\u63A2\u6D4B\u6A21\u578B\u53EF\u7528\u6027
   init        \u521D\u59CB\u5316\u6700\u5C0F\u914D\u7F6E\u6A21\u677F
+  deploy      \u751F\u6210\u90E8\u7F72\u5165\u53E3\u914D\u7F6E\uFF08\u5F53\u524D\u652F\u6301 deploy init --target server\uFF09
   start       \u542F\u52A8\u8DEF\u7531\u670D\u52A1\uFF08\u9ED8\u8BA4\u524D\u53F0\u8FD0\u884C\uFF09
   stop        \u505C\u6B62\u540E\u53F0\u670D\u52A1
   restart     \u91CD\u542F\u540E\u53F0\u670D\u52A1
@@ -9378,12 +10809,13 @@ Claude Trigger Router - \u667A\u80FD\u89E6\u53D1\u8DEF\u7531\u5668
 \u9009\u9879\uFF1A
   --port, -p    \u6307\u5B9A\u76D1\u542C\u7AEF\u53E3\uFF08\u9ED8\u8BA4\uFF1A5678\uFF09
   --daemon, -d  \u4EE5\u540E\u53F0\u65B9\u5F0F\u8FD0\u884C\uFF08\u914D\u5408 start/restart \u4F7F\u7528\uFF09
-  --force       \u5F3A\u5236\u8986\u76D6\u5DF2\u6709\u914D\u7F6E\uFF08\u914D\u5408 init \u4F7F\u7528\uFF09
+  --force       \u5F3A\u5236\u8986\u76D6\u5DF2\u6709\u914D\u7F6E\uFF08\u914D\u5408 init/deploy init \u4F7F\u7528\uFF09
 
 \u4F7F\u7528\u793A\u4F8B\uFF1A
   ctr setup                # \u590D\u7528\u5F53\u524D\u914D\u7F6E / \u8FC1\u79FB\u65E7\u914D\u7F6E / \u65B0\u5EFA\u6700\u5C0F\u914D\u7F6E
   ctr doctor               # \u8BCA\u65AD\u914D\u7F6E / \u4FEE\u590D\u683C\u5F0F\u95EE\u9898 / \u6309\u9700\u63A2\u6D4B\u6A21\u578B\u53EF\u7528\u6027
   ctr init                 # \u521D\u59CB\u5316\u6700\u5C0F\u914D\u7F6E\u6A21\u677F
+  ctr deploy init --target server  # \u751F\u6210\u5B89\u5168\u9ED8\u8BA4\u7684 server \u90E8\u7F72\u914D\u7F6E
   ctr version              # \u67E5\u770B\u5F53\u524D\u5B89\u88C5\u7248\u672C
   ctr upgrade              # \u67E5\u770B\u5347\u7EA7\u5230\u6700\u65B0\u7248\u672C\u7684\u547D\u4EE4
   ctr start                # \u524D\u53F0\u542F\u52A8\uFF08\u63A8\u8350\u9996\u6B21\u4F7F\u7528\uFF0C\u4FBF\u4E8E\u67E5\u770B\u65E5\u5FD7\uFF09
@@ -9406,6 +10838,73 @@ Claude Trigger Router - \u667A\u80FD\u89E6\u53D1\u8DEF\u7531\u5668
 \u66F4\u591A\u4FE1\u606F\uFF1Ahttps://github.com/peterwangze/claude-trigger-router
 `);
 }
+function readConfigForCliStatus() {
+  const yaml4 = require("js-yaml");
+  for (const configFile of [CONFIG_FILE, CONFIG_FILE_YML, CONFIG_FILE_JSON]) {
+    if (!(0, import_fs9.existsSync)(configFile)) {
+      continue;
+    }
+    const content = (0, import_fs9.readFileSync)(configFile, "utf-8");
+    return configFile.endsWith(".json") ? JSON.parse(content) : yaml4.load(content);
+  }
+  return {};
+}
+function getLocalClaudeProxyToken(config) {
+  const bootstrapKey = typeof config?.APIKEY === "string" ? config.APIKEY.trim() : "";
+  return bootstrapKey || "ctr-local-proxy";
+}
+async function fetchLiveServiceInfo(port, apiKey) {
+  try {
+    const headers = apiKey?.trim() ? { Authorization: `Bearer ${apiKey.trim()}` } : void 0;
+    const response = await fetch(`http://127.0.0.1:${port}${SERVICE_INFO_PATH}`, {
+      headers,
+      signal: AbortSignal.timeout(500)
+    });
+    if (!response.ok) {
+      return null;
+    }
+    const payload = await response.json();
+    if (!payload || typeof payload !== "object" || payload.service !== SERVICE_NAME) {
+      return null;
+    }
+    return payload;
+  } catch {
+    return null;
+  }
+}
+function printRuntimeStatus(config, port, liveInfo) {
+  const normalized = normalizeAndValidateConfig(config ?? {}).config;
+  const runtimeMode = liveInfo?.runtimeMode ?? normalized.Runtime?.mode ?? "local";
+  const serviceRole = liveInfo?.serviceRole ?? (runtimeMode === "local" ? "local_agent" : "router_service");
+  const listener = liveInfo?.listener && typeof liveInfo.listener === "object" ? liveInfo.listener : null;
+  const host = String(listener?.host ?? normalized.HOST ?? DEFAULT_CONFIG2.HOST ?? "127.0.0.1").trim() || "127.0.0.1";
+  const publicHost = typeof listener?.public === "boolean" ? listener.public : ["0.0.0.0", "::", "[::]"].includes(host);
+  const listenerPort = Number(listener?.port ?? port) || port;
+  const managedKeys = managedApiKeySummary(normalized);
+  const liveAuth = liveInfo?.auth && typeof liveInfo.auth === "object" ? liveInfo.auth : null;
+  const hasBootstrapAuth = Boolean(liveAuth?.bootstrapConfigured ?? normalized.APIKEY);
+  const managedActive = Number(liveAuth?.managedKeys?.active ?? managedKeys.active) || 0;
+  const authRequired = Boolean(liveAuth?.required ?? (hasBootstrapAuth || managedKeys.total > 0));
+  const listenerUrl = String(listener?.advertisedUrl ?? (publicHost ? `http://<server-host>:${listenerPort}` : `http://${host}:${listenerPort}`));
+  const remoteService = normalized.Runtime?.remote_service;
+  const clientConnection = liveInfo?.clientConnection && typeof liveInfo.clientConnection === "object" ? liveInfo.clientConnection : null;
+  console.log(`   \u6A21\u5F0F\uFF1A${runtimeMode}\uFF08${serviceRole}\uFF09`);
+  console.log(`   \u76D1\u542C\uFF1A${host}:${listenerPort}${publicHost ? "\uFF08\u5BF9\u5916\u76D1\u542C\uFF09" : "\uFF08\u672C\u673A\u76D1\u542C\uFF09"}`);
+  console.log(`   \u9274\u6743\uFF1A${authRequired ? "enabled" : "disabled"}\uFF08bootstrap=${hasBootstrapAuth}, managed_active=${managedActive}\uFF09`);
+  if (runtimeMode !== "local") {
+    console.log(`   \u8FDC\u7A0B\u5BA2\u6237\u7AEF\u63A5\u5165\uFF1AANTHROPIC_BASE_URL=${clientConnection?.baseUrl || listenerUrl}`);
+    console.log("   \u63A8\u8350\u5BA2\u6237\u7AEF key\uFF1Amanaged client + read-only\uFF1B\u4E0D\u8981\u628A admin/bootstrap key \u53D1\u7ED9\u8FDC\u7A0B\u4F7F\u7528\u8005\u3002");
+    console.log(`   \u7EF4\u62A4\u5165\u53E3\uFF1Ahttp://127.0.0.1:${listenerPort}/ui\uFF08\u9700\u8981 admin key\uFF09`);
+    return;
+  }
+  if (clientConnection?.role === "remote_client" || remoteService?.enabled) {
+    const baseUrl = String(clientConnection?.baseUrl || remoteService?.base_url || "").trim().replace(/\/+$/, "") || "<missing>";
+    console.log(`   \u8FDC\u7A0B\u670D\u52A1\uFF1A${baseUrl}`);
+    console.log("   \u63A8\u8350\u8FDC\u7A0B token\uFF1Amanaged client + read-only\uFF0C\u7528\u4E8E ready/status \u63A2\u6D4B\u548C\u6A21\u578B\u8C03\u7528\u3002");
+    return;
+  }
+  console.log(`   \u672C\u5730\u63A5\u5165\uFF1A${clientConnection?.baseUrl || `http://127.0.0.1:${listenerPort}`}`);
+}
 function getLatestPackageVersionViaNpm(packageName, timeoutMs = 5e3) {
   try {
     const result = (0, import_child_process3.spawnSync)("npm", ["view", packageName, "version", "--registry", PACKAGE_REGISTRY_URL], {
@@ -9492,16 +10991,19 @@ function isClaudeCommandAvailable(timeoutMs = 3e3) {
     return false;
   }
 }
+function createBootstrapApiKey() {
+  return `ctr_bootstrap_${(0, import_crypto4.randomBytes)(24).toString("hex")}`;
+}
 function initConfig2() {
   const force = hasArg2("--force");
-  const existingConfig = [CONFIG_FILE, CONFIG_FILE_YML, CONFIG_FILE_JSON].find(import_fs8.existsSync);
+  const existingConfig = [CONFIG_FILE, CONFIG_FILE_YML, CONFIG_FILE_JSON].find(import_fs9.existsSync);
   if (existingConfig && !force) {
     console.log(`\u26A0\uFE0F  \u914D\u7F6E\u6587\u4EF6\u5DF2\u5B58\u5728\uFF1A${existingConfig}`);
     console.log("    \u5982\u9700\u8986\u76D6\uFF0C\u8BF7\u4F7F\u7528 --force \u53C2\u6570\u3002");
     return;
   }
-  if (!(0, import_fs8.existsSync)(CONFIG_DIR)) {
-    (0, import_fs8.mkdirSync)(CONFIG_DIR, { recursive: true });
+  if (!(0, import_fs9.existsSync)(CONFIG_DIR)) {
+    (0, import_fs9.mkdirSync)(CONFIG_DIR, { recursive: true });
   }
   try {
     const yaml4 = require("js-yaml");
@@ -9511,7 +11013,7 @@ function initConfig2() {
       lineWidth: -1,
       noRefs: true
     });
-    (0, import_fs8.writeFileSync)(CONFIG_FILE, content, "utf-8");
+    (0, import_fs9.writeFileSync)(CONFIG_FILE, content, "utf-8");
     const action = force ? "\u5DF2\u8986\u76D6" : "\u5DF2\u521B\u5EFA";
     console.log(`\u2705 \u914D\u7F6E\u6587\u4EF6${action}\uFF1A${CONFIG_FILE}`);
     console.log("");
@@ -9526,6 +11028,65 @@ function initConfig2() {
     process.exit(1);
   }
 }
+function printDeployHelp() {
+  console.log("\u7528\u6CD5\uFF1Actr deploy init --target server [--force]");
+  console.log("");
+  console.log("\u5F53\u524D\u652F\u6301\uFF1A");
+  console.log("  server  \u751F\u6210\u5E26 HOST/APIKEY/Runtime.mode/Models/Router \u7684\u81EA\u6258\u7BA1\u670D\u52A1\u7AEF\u914D\u7F6E");
+  console.log("");
+  console.log("\u4E0B\u4E00\u6B65\uFF1A");
+  console.log("  1. \u7F16\u8F91 Models[].key \u548C Models[].model");
+  console.log("  2. \u8FD0\u884C ctr doctor \u68C0\u67E5\u914D\u7F6E\u548C\u9274\u6743\u72B6\u6001");
+  console.log("  3. \u8FD0\u884C ctr start --daemon \u542F\u52A8\u670D\u52A1");
+}
+function initDeployConfig() {
+  const action = getArgs()[1];
+  const target = getArgValue("--target") ?? "server";
+  const force = hasArg2("--force");
+  if (action !== "init") {
+    printDeployHelp();
+    return;
+  }
+  if (target !== "server") {
+    console.error(`\u274C \u5F53\u524D\u4E0D\u652F\u6301\u7684\u90E8\u7F72\u76EE\u6807\uFF1A${target}`);
+    printDeployHelp();
+    process.exit(1);
+  }
+  const existingConfig = [CONFIG_FILE, CONFIG_FILE_YML, CONFIG_FILE_JSON].find(import_fs9.existsSync);
+  if (existingConfig && !force) {
+    console.log(`\u26A0\uFE0F  \u914D\u7F6E\u6587\u4EF6\u5DF2\u5B58\u5728\uFF1A${existingConfig}`);
+    console.log("    \u5982\u9700\u8986\u76D6\u90E8\u7F72\u6A21\u677F\uFF0C\u8BF7\u4F7F\u7528 --force \u53C2\u6570\u3002");
+    return;
+  }
+  if (!(0, import_fs9.existsSync)(CONFIG_DIR)) {
+    (0, import_fs9.mkdirSync)(CONFIG_DIR, { recursive: true });
+  }
+  try {
+    const yaml4 = require("js-yaml");
+    const templateConfig = buildServerDeploymentConfig({
+      apiKey: createBootstrapApiKey()
+    });
+    const content = yaml4.dump(templateConfig, {
+      indent: 2,
+      lineWidth: -1,
+      noRefs: true
+    });
+    (0, import_fs9.writeFileSync)(CONFIG_FILE, content, "utf-8");
+    const actionLabel = force ? "\u5DF2\u8986\u76D6" : "\u5DF2\u521B\u5EFA";
+    console.log(`\u2705 Server \u90E8\u7F72\u914D\u7F6E${actionLabel}\uFF1A${CONFIG_FILE}`);
+    console.log("");
+    console.log("\u5DF2\u751F\u6210 bootstrap admin APIKEY\uFF1B\u8BF7\u53EA\u7528\u4E8E\u7EF4\u62A4\u8005\u7BA1\u7406\uFF0C\u4E0D\u8981\u53D1\u7ED9\u8FDC\u7A0B\u5BA2\u6237\u7AEF\u3002");
+    console.log("");
+    console.log("\u4E0B\u4E00\u6B65\uFF1A");
+    console.log("  1. \u7F16\u8F91 Models[].key \u548C Models[].model\uFF0C\u586B\u5165\u670D\u52A1\u7AEF\u8981\u4EE3\u7406\u7684\u4E0A\u6E38\u6A21\u578B");
+    console.log("  2. \u8FD0\u884C\uFF1Actr doctor");
+    console.log("  3. \u8FD0\u884C\uFF1Actr start --daemon");
+    console.log("  4. \u7528 admin key \u8C03\u7528 POST /api/auth/keys \u751F\u6210 client + read-only \u8FDC\u7A0B\u5BA2\u6237\u7AEF key");
+  } catch (error) {
+    console.error("\u274C \u521B\u5EFA\u90E8\u7F72\u914D\u7F6E\u5931\u8D25:", error.message);
+    process.exit(1);
+  }
+}
 async function startForeground(port) {
   const targetPort = port ?? getPort();
   const healthy = await waitForService(targetPort, 500);
@@ -9613,16 +11174,28 @@ async function startDaemon(port) {
   console.log(`   Run 'ctr stop' to stop it.`);
 }
 async function showStatus() {
+  const config = readConfigForCliStatus();
+  const configuredPort = getPort();
+  const healthOptions = config?.APIKEY ? { apiKey: config.APIKEY } : {};
   const info = readServiceInfo();
   if (!info || !isServiceRunning()) {
-    const targetPort = getPort();
-    const healthy = await waitForService(targetPort, 500);
+    const targetPort = configuredPort;
+    const healthy = await waitForService(targetPort, 500, healthOptions);
     const occupied = await isTcpPortOccupied(targetPort, 500);
+    if (healthy) {
+      const liveInfo2 = await fetchLiveServiceInfo(targetPort, config?.APIKEY);
+      console.log("\u2705 \u670D\u52A1\u8FD0\u884C\u4E2D");
+      console.log(`   \u7AEF\u53E3\uFF1A${targetPort}`);
+      console.log(`   \u63A5\u5165\u5730\u5740\uFF1Ahttp://127.0.0.1:${targetPort}`);
+      printRuntimeStatus(config, targetPort, liveInfo2);
+      return;
+    }
     if (!healthy && occupied) {
       console.log(`\u26A0\uFE0F  \u7AEF\u53E3 ${targetPort} \u5DF2\u88AB\u5176\u4ED6\u670D\u52A1\u5360\u7528\uFF0C\u5F53\u524D\u4E0D\u662F claude-trigger-router\u3002`);
       return;
     }
     console.log("\u23F9  \u670D\u52A1\u672A\u8FD0\u884C");
+    printRuntimeStatus(config, targetPort);
     return;
   }
   const startTime = info.startTime ? new Date(info.startTime).toLocaleString() : "\u672A\u77E5";
@@ -9631,6 +11204,8 @@ async function showStatus() {
   console.log(`   \u7AEF\u53E3\uFF1A${info.port}`);
   console.log(`   \u542F\u52A8\u65F6\u95F4\uFF1A${startTime}`);
   console.log(`   \u63A5\u5165\u5730\u5740\uFF1Ahttp://127.0.0.1:${info.port}`);
+  const liveInfo = await fetchLiveServiceInfo(info.port, config?.APIKEY);
+  printRuntimeStatus(config, info.port, liveInfo);
 }
 function stopService() {
   const info = readServiceInfo();
@@ -9653,10 +11228,12 @@ async function restartService() {
 }
 async function runClaudeCode() {
   const port = getPort();
+  const config = readConfigForCliStatus();
+  const proxyToken = getLocalClaudeProxyToken(config);
   await initializeClaudeConfig();
   const running = isServiceRunning();
   console.log(`\u{1F50D} Checking if service is available on port ${port}...`);
-  const reachable = await waitForService(port, 2e3);
+  const reachable = await waitForService(port, 2e3, { apiKey: proxyToken });
   if (!reachable) {
     console.log(`\u26A0\uFE0F  Trigger Router service is not running on port ${port}.`);
     console.log("");
@@ -9673,14 +11250,16 @@ async function runClaudeCode() {
     process.exit(1);
   }
   const isWindows = process.platform === "win32";
+  const claudeEnv = {
+    ...process.env,
+    ANTHROPIC_BASE_URL: `http://127.0.0.1:${port}`,
+    ANTHROPIC_AUTH_TOKEN: proxyToken
+  };
+  delete claudeEnv.ANTHROPIC_API_KEY;
   const claude = (0, import_child_process3.spawn)("claude", [], {
     stdio: "inherit",
     shell: isWindows,
-    env: {
-      ...process.env,
-      ANTHROPIC_BASE_URL: `http://127.0.0.1:${port}`,
-      ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY || "ctr-local-proxy"
-    }
+    env: claudeEnv
   });
   claude.on("error", (error) => {
     console.error("\u274C \u542F\u52A8 Claude Code \u5931\u8D25:", error.message);
@@ -9723,6 +11302,9 @@ async function main() {
     case "init":
       initConfig2();
       break;
+    case "deploy":
+      initDeployConfig();
+      break;
     case "start":
       if (isDaemonMode()) {
         await startDaemon(getPort());
@@ -9765,13 +11347,14 @@ async function main() {
       process.exit(command ? 1 : 0);
   }
 }
-var import_child_process3, import_path7, import_openurl, import_fs8, PACKAGE_JSON_PATH, PACKAGE_PAGE_URL, PACKAGE_REGISTRY_LATEST_URL, PACKAGE_REGISTRY_URL;
+var import_child_process3, import_crypto4, import_path8, import_openurl, import_fs9, PACKAGE_JSON_PATH, PACKAGE_PAGE_URL, PACKAGE_REGISTRY_LATEST_URL, PACKAGE_REGISTRY_URL;
 var init_cli = __esm({
   "src/cli.ts"() {
     import_child_process3 = require("child_process");
-    import_path7 = require("path");
+    import_crypto4 = require("crypto");
+    import_path8 = require("path");
     import_openurl = __toESM(require("openurl"));
-    import_fs8 = require("fs");
+    import_fs9 = require("fs");
     init_index();
     init_processCheck();
     init_constants();
@@ -9779,7 +11362,9 @@ var init_cli = __esm({
     init_setup2();
     init_templates();
     init_doctor();
-    PACKAGE_JSON_PATH = (0, import_path7.join)(__dirname, "..", "package.json");
+    init_api_keys();
+    init_config();
+    PACKAGE_JSON_PATH = (0, import_path8.join)(__dirname, "..", "package.json");
     PACKAGE_PAGE_URL = "https://www.npmjs.com/package/@peterwangze/claude-trigger-router";
     PACKAGE_REGISTRY_LATEST_URL = "https://registry.npmjs.org/@peterwangze%2Fclaude-trigger-router/latest";
     PACKAGE_REGISTRY_URL = "https://registry.npmjs.org/";