@simonyea/holysheep-cli 2.1.40 → 2.1.41

package/src/webui/server.js

@@ -1,1572 +0,0 @@
-/**
- * HolySheep WebUI — HTTP 服务器 + REST API
- * 仅绑定 127.0.0.1，零新依赖
- */
-'use strict'
-
-// 设置 DNS 回退：Cloudflare (1.1.1.1) + 阿里 (223.5.5.5) + 系统默认
-// 解决大陆服务器 DNS 解析 api.holysheep.ai 失败 (EAI_AGAIN) 的问题
-const dns = require('dns')
-dns.setServers([...new Set([...dns.getServers(), '1.1.1.1', '223.5.5.5'])])
-
-const http = require('http')
-const fs = require('fs')
-const path = require('path')
-const { execSync, spawn } = require('child_process')
-const { loadConfig, saveConfig, getApiKey, BASE_URL_ANTHROPIC, BASE_URL_OPENAI, BASE_URL_CLAUDE_RELAY, SHOP_URL, CONFIG_FILE } = require('../utils/config')
-const { removeEnvFromShell, writeEnvToShell, getShellRcFiles } = require('../utils/shell')
-const { commandExistsAsync } = require('../utils/which')
-const TOOLS = require('../tools')
-const pkg = require('../../package.json')
-const workspaceStore = require('./workspace-store')
-const workspaceRuntime = require('./workspace-runtime')
-
-const TOOL_CHECK_CACHE_TTL_MS = 10_000
-const toolStateCache = new Map()
-
-// ── Helpers ──────────────────────────────────────────────────────────────────
-
-function maskKey(key) {
-  if (!key || key.length < 8) return '****'
-  return key.slice(0, 6) + '...' + key.slice(-4)
-}
-
-async function fetchWithRetry(url, opts = {}, retries = 3, timeoutMs = 20000) {
-  const fetch = require('node-fetch')
-  for (let i = 0; i < retries; i++) {
-    const controller = new AbortController()
-    const timer = setTimeout(() => controller.abort(), timeoutMs)
-    try {
-      const res = await fetch(url, { ...opts, signal: controller.signal })
-      clearTimeout(timer)
-      return res
-    } catch (e) {
-      clearTimeout(timer)
-      const retryable = e.code === 'EAI_AGAIN' || e.code === 'ETIMEDOUT' || e.code === 'ECONNRESET' || e.code === 'ECONNREFUSED' || e.type === 'system' || e.name === 'AbortError'
-      if (i < retries - 1 && retryable) {
-        await new Promise(r => setTimeout(r, 2000 * (i + 1)))
-        continue
-      }
-      throw e
-    }
-  }
-}
-
-async function validateApiKey(apiKey) {
-  const res = await fetchWithRetry(`${BASE_URL_OPENAI}/models`, {
-    method: 'GET',
-    headers: { Authorization: `Bearer ${apiKey}`, 'Content-Type': 'application/json' },
-  })
-  return res.status === 200
-}
-
-const { exec } = require('child_process')
-
-function getVersionAsync(tool) {
-  if (typeof tool.getVersion === 'function') {
-    return Promise.resolve(tool.getVersion())
-  }
-  const cmds = {
-    'claude-code': 'claude --version',
-    'codex': 'codex --version',
-    'droid': 'droid --version',
-    'gemini-cli': 'gemini --version',
-    'opencode': 'opencode --version',
-    'openclaw': 'openclaw --version',
-    'aider': 'aider --version',
-    'hermes': 'hermes --version',
-  }
-  const cmd = cmds[tool.id]
-  if (!cmd) return Promise.resolve(null)
-  return new Promise(resolve => {
-    exec(cmd, { timeout: 5000 }, (err, stdout) => {
-      if (err) return resolve(null)
-      resolve(stdout.trim().split('\n')[0].slice(0, 30) || null)
-    })
-  })
-}
-
-function parseBody(req) {
-  return new Promise((resolve, reject) => {
-    let body = ''
-    req.on('data', chunk => { body += chunk })
-    req.on('end', () => {
-      try { resolve(body ? JSON.parse(body) : {}) }
-      catch { reject(new Error('Invalid JSON')) }
-    })
-    req.on('error', reject)
-  })
-}
-
-function getToolCommand(toolId) {
-  const cmds = {
-    'claude-code': 'claude',
-    'codex': 'codex',
-    'droid': 'droid',
-    'gemini-cli': 'gemini',
-    'opencode': 'opencode',
-    'openclaw': 'openclaw',
-    'aider': 'aider',
-    'hermes': 'hermes',
-    'env-config': null,
-  }
-  return cmds[toolId] ?? null
-}
-
-async function detectToolInstalled(tool) {
-  if (tool.id === 'env-config') return true
-
-  const now = Date.now()
-  const cached = toolStateCache.get(tool.id)
-  if (cached && now - cached.checkedAt < TOOL_CHECK_CACHE_TTL_MS) {
-    return cached.installed
-  }
-
-  const command = getToolCommand(tool.id)
-  const installed = command ? await commandExistsAsync(command) : false
-  toolStateCache.set(tool.id, { installed, checkedAt: now })
-  return installed
-}
-
-async function buildToolSummary(tool) {
-  const installed = await detectToolInstalled(tool)
-  return {
-    id: tool.id,
-    name: tool.name,
-    installed,
-    configured: installed ? (tool.isConfigured?.() || false) : false,
-    version: installed ? await getVersionAsync(tool) : null,
-    installCmd: tool.installCmd,
-    hint: tool.hint || null,
-    launchCmd: tool.launchCmd || null,
-    canAutoInstall: !!AUTO_INSTALL[tool.id],
-    canUpgrade: !!UPGRADABLE_TOOLS.find((item) => item.id === tool.id),
-    npmPkg: UPGRADABLE_TOOLS.find((item) => item.id === tool.id)?.npmPkg || null,
-  }
-}
-
-function json(res, data, status = 200) {
-  res.writeHead(status, { 'Content-Type': 'application/json' })
-  res.end(JSON.stringify(data))
-}
-
-function sseStart(res) {
-  res.writeHead(200, {
-    'Content-Type': 'text/event-stream',
-    'Cache-Control': 'no-cache',
-    'Connection': 'keep-alive',
-  })
-}
-
-function sseEmit(res, data) {
-  res.write(`data: ${JSON.stringify(data)}\n\n`)
-}
-
-// ── AUTO_INSTALL map (from setup.js) ─────────────────────────────────────────
-
-const AUTO_INSTALL = {
-  'claude-code': {
-    cmd: process.platform === 'win32'
-      ? 'powershell.exe -NoProfile -ExecutionPolicy Bypass -Command "irm https://claude.ai/install.ps1 | iex"'
-      : 'curl -fsSL https://claude.ai/install.sh | bash',
-  },
-  'codex':       { cmd: 'npm install -g @openai/codex' },
-  'droid': {
-    // 2.1.14 fix: Windows/Linux now have official installers; previously
-    // the WebUI piped the macOS-only brew command on every platform.
-    cmd: process.platform === 'win32'
-      ? 'winget install --id Factory.Droid -e --accept-source-agreements --accept-package-agreements'
-      : process.platform === 'darwin'
-        ? 'brew install --cask droid'
-        : 'curl -fsSL https://app.factory.ai/install.sh | bash',
-  },
-  'gemini-cli':  { cmd: 'npm install -g @google/gemini-cli' },
-  'opencode':    { cmd: 'npm install -g opencode-ai' },
-  'openclaw':    { cmd: 'npm install -g openclaw@latest' },
-  'aider':       { cmd: 'pip install aider-chat' },
-  // Hermes Agent (Nous Research). Python-based, installed via uv. Windows
-  // requires WSL2 (the installer explicitly rejects native Windows). On
-  // Windows the CLI's hermes tool reports manual steps instead of running
-  // this shell command — see src/tools/hermes.js.
-  'hermes': {
-    cmd: process.platform === 'win32'
-      ? '' // unsupported — see hermes tool for manual steps
-      : 'curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash -s -- --skip-setup',
-  },
-}
-
-// ── UPGRADABLE_TOOLS (from upgrade.js) ───────────────────────────────────────
-
-const UPGRADABLE_TOOLS = [
-  { name: 'HolySheep CLI', id: 'holysheep', command: 'hs', versionCmd: 'hs --version', npmPkg: '@simonyea/holysheep-cli', installCmd: 'npm install -g @simonyea/holysheep-cli@latest' },
-  {
-    name: 'Claude Code', id: 'claude-code', command: 'claude',
-    versionCmd: 'claude --version', npmPkg: null,
-    installCmd: process.platform === 'win32'
-      ? 'powershell -NoProfile -ExecutionPolicy Bypass -Command "irm https://claude.ai/install.ps1 | iex"'
-      : 'curl -fsSL https://claude.ai/install.sh | bash',
-  },
-  { name: 'Codex CLI', id: 'codex', command: 'codex', versionCmd: 'codex --version', npmPkg: '@openai/codex', installCmd: 'npm install -g @openai/codex@latest' },
-  {
-    name: 'Droid CLI', id: 'droid', command: 'droid', versionCmd: 'droid --version', npmPkg: null,
-    // 2.1.14: Correct Factory winget package id is `Factory.Droid` (not `Droid.Droid`)
-    // and Linux/macOS get platform-native installers. Previously the Linux
-    // fallback was the macOS brew cmd which fails.
-    installCmd: process.platform === 'win32'
-      ? 'winget install --id Factory.Droid -e --accept-source-agreements --accept-package-agreements'
-      : process.platform === 'darwin'
-        ? 'brew install --cask droid'
-        : 'curl -fsSL https://app.factory.ai/install.sh | bash',
-  },
-  { name: 'OpenCode', id: 'opencode', command: 'opencode', versionCmd: 'opencode --version', npmPkg: 'opencode-ai', installCmd: 'npm install -g opencode-ai@latest' },
-  { name: 'OpenClaw', id: 'openclaw', command: 'openclaw', versionCmd: 'openclaw --version', npmPkg: 'openclaw', installCmd: 'npm install -g openclaw@latest' },
-  { name: 'Gemini CLI', id: 'gemini-cli', command: 'gemini', versionCmd: 'gemini --version', npmPkg: '@google/gemini-cli', installCmd: 'npm install -g @google/gemini-cli@latest' },
-  {
-    name: 'Hermes Agent', id: 'hermes', command: 'hermes', versionCmd: 'hermes --version', npmPkg: null,
-    installCmd: process.platform === 'win32'
-      ? '' // unsupported on native Windows — see hermes tool hint
-      : 'curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash -s -- --skip-setup',
-  },
-]
-
-// ── Update check (cached, refreshes every 30min) ────────────────────────────
-
-let _latestVersion = null
-let _lastCheckTime = 0
-const UPDATE_CHECK_INTERVAL = 5 * 60 * 1000
-
-// Returns cached value immediately; fetches in background when cache is stale.
-function checkLatestVersion() {
-  const now = Date.now()
-  if (now - _lastCheckTime >= UPDATE_CHECK_INTERVAL) {
-    _lastCheckTime = now // prevent concurrent fetches
-    fetchWithRetry('https://registry.npmjs.org/@simonyea/holysheep-cli/latest', {}, 2)
-      .then(r => r.ok ? r.json() : null)
-      .then(data => { if (data?.version) _latestVersion = data.version })
-      .catch(() => {})
-  }
-  return _latestVersion
-}
-
-// 启动时立即检查一次
-checkLatestVersion()
-
-// ── API Handlers ─────────────────────────────────────────────────────────────
-
-function handleStatus(_req, res) {
-  const apiKey = getApiKey()
-  const config = loadConfig()
-  const latest = checkLatestVersion()
-  json(res, {
-    loggedIn: !!apiKey,
-    apiKey: apiKey ? maskKey(apiKey) : null,
-    savedAt: config.savedAt || null,
-    version: pkg.version,
-    latestVersion: latest || null,
-    updateAvailable: latest && latest !== pkg.version ? latest : null,
-  })
-}
-
-async function handleLogin(req, res) {
-  const body = await parseBody(req)
-  const apiKey = (body.apiKey || '').trim()
-  if (!apiKey || !apiKey.startsWith('cr_')) {
-    return json(res, { success: false, message: 'API Key 必须以 cr_ 开头' }, 400)
-  }
-  try {
-    const valid = await validateApiKey(apiKey)
-    if (!valid) return json(res, { success: false, message: 'API Key 无效 (server returned non-2xx)' }, 401)
-    saveConfig({ apiKey, savedAt: new Date().toISOString() })
-    workspaceStore.saveHolySheepApiConfig({
-      apiKey,
-      baseUrl: workspaceStore.getHolySheepApiConfig().baseUrl || BASE_URL_OPENAI,
-      model: workspaceStore.getHolySheepApiConfig().model || 'gpt-5.4',
-    })
-    json(res, { success: true, apiKey: maskKey(apiKey) })
-  } catch (e) {
-    // Translate cryptic node-fetch / DNS / proxy errors into something actionable.
-    // Previously users just saw "链接失败" in the browser alert — now we surface
-    // the underlying cause (DNS, timeout, proxy interference, TLS, etc).
-    const code = e && (e.code || e.errno || e.type)
-    const name = e && e.name
-    let hint
-    if (code === 'EAI_AGAIN' || code === 'ENOTFOUND') {
-      hint = 'DNS 解析失败 — 检查网络 / 代理 / 防火墙是否拦截了 api.holysheep.ai'
-    } else if (code === 'ETIMEDOUT' || name === 'AbortError') {
-      hint = '连接超时 — 可能是网络慢或代理阻塞；试试开关代理再重试'
-    } else if (code === 'ECONNREFUSED' || code === 'ECONNRESET') {
-      hint = '连接被拒绝 — 检查本机防火墙或公司代理'
-    } else if (code === 'CERT_HAS_EXPIRED' || code === 'UNABLE_TO_VERIFY_LEAF_SIGNATURE') {
-      hint = 'TLS 证书校验失败 — 可能是系统时间错误或中间人代理'
-    } else {
-      hint = e && e.message ? e.message : String(e)
-    }
-    const detail = `${hint}${code ? ` [${code}]` : ''}`
-    json(res, { success: false, message: `验证失败: ${detail}` }, 500)
-  }
-}
-
-async function handleLogout(_req, res) {
-  const config = loadConfig()
-  delete config.apiKey
-  delete config.savedAt
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2))
-  workspaceStore.saveHolySheepApiConfig({
-    apiKey: '',
-    baseUrl: workspaceStore.getHolySheepApiConfig().baseUrl || BASE_URL_OPENAI,
-    model: workspaceStore.getHolySheepApiConfig().model || 'gpt-5.4',
-  })
-  json(res, { success: true })
-}
-
-async function handleWhoami(_req, res) {
-  const apiKey = getApiKey()
-  const config = loadConfig()
-  if (!apiKey) return json(res, { loggedIn: false })
-  let valid = null
-  try { valid = await validateApiKey(apiKey) } catch {}
-  json(res, { loggedIn: true, apiKey: maskKey(apiKey), savedAt: config.savedAt || null, valid })
-}
-
-async function handleBalance(_req, res) {
-  const apiKey = getApiKey()
-  if (!apiKey) return json(res, { error: '未登录' }, 401)
-  // IMPORTANT (2.1.14): SHOP_URL is `https://holysheep.ai` which issues a
-  // 301 to `https://www.holysheep.ai`. node-fetch's default redirect flow
-  // drops the Authorization header on cross-origin redirects (even between
-  // same-reg-domain hosts), so the downstream request would hit the Next.js
-  // app unauthenticated and return 404/HTML. We hit www.* directly to keep
-  // the Bearer header intact.
-  //
-  // Response schema (verified 2026-04-22):
-  //   { balance, todayCost, monthCost, totalCalls, totalCost, recentRecords:[…] }
-  const STATS_URL = 'https://www.holysheep.ai/api/stats/overview'
-  try {
-    const r = await fetchWithRetry(STATS_URL, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-    })
-    if (r.status === 401) return json(res, { error: 'API Key 无效或已过期' }, 401)
-    if (!r.ok) return json(res, { error: `HTTP ${r.status}` }, r.status)
-    const data = await r.json()
-    json(res, {
-      balance: Number(data.balance || 0),
-      todayCost: Number(data.todayCost || 0),
-      monthCost: Number(data.monthCost || 0),
-      totalCalls: Number(data.totalCalls || 0),
-      totalCost: Number(data.totalCost || 0),
-      plans: Array.isArray(data.plans) ? data.plans : [],
-    })
-  } catch (e) {
-    const msg = e.code === 'EAI_AGAIN' ? 'DNS 解析失败，请检查网络' : e.message
-    json(res, { error: msg }, 500)
-  }
-}
-
-async function handleDoctor(_req, res) {
-  const apiKey = getApiKey()
-  const nodeMajor = parseInt(process.version.slice(1), 10)
-
-  // Tools
-  const tools = await Promise.all(TOOLS.map((tool) => buildToolSummary(tool)))
-
-  // Connectivity
-  let connectivity = { ok: false, modelCount: 0 }
-  if (apiKey) {
-    try {
-      const fetch = require('node-fetch')
-      const r = await fetch(`${BASE_URL_ANTHROPIC}/v1/models`, {
-        headers: { 'x-api-key': apiKey, 'anthropic-version': '2023-06-01' },
-        timeout: 8000,
-      })
-      if (r.ok) {
-        const data = await r.json()
-        connectivity = { ok: true, modelCount: data.data?.length || 0 }
-      }
-    } catch {}
-  }
-
-  json(res, {
-    node: { version: process.version, ok: nodeMajor >= 16 },
-    apiKey: { set: !!apiKey, masked: apiKey ? maskKey(apiKey) : null },
-    envVars: {
-      ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY || null,
-      ANTHROPIC_AUTH_TOKEN: process.env.ANTHROPIC_AUTH_TOKEN || null,
-      ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL || null,
-      OPENAI_API_KEY: process.env.OPENAI_API_KEY || null,
-      OPENAI_BASE_URL: process.env.OPENAI_BASE_URL || null,
-    },
-    tools,
-    connectivity,
-  })
-}
-
-function isClaudeProxyRunning() {
-  try {
-    const pidFile = path.join(require('os').homedir(), '.holysheep', 'claude-proxy.pid')
-    const info = JSON.parse(fs.readFileSync(pidFile, 'utf8'))
-    process.kill(info.pid, 0) // check alive
-    return { running: true, port: info.port, pid: info.pid }
-  } catch {
-    return { running: false }
-  }
-}
-
-async function handleTools(_req, res) {
-  const tools = await Promise.all(TOOLS.map((tool) => buildToolSummary(tool)))
-
-  // 追加 claude-proxy 虚拟工具
-  const proxyState = isClaudeProxyRunning()
-  tools.push({
-    id: 'claude-proxy',
-    name: 'Claude 代理（VS Code）',
-    installed: true,
-    configured: proxyState.running,
-    version: proxyState.running ? `端口 ${proxyState.port}` : null,
-    installCmd: null,
-    hint: '启动后 VS Code Claude 扩展即可通过 HolySheep 使用',
-    launchCmd: 'hs claude-proxy',
-    canAutoInstall: false,
-    canUpgrade: false,
-    isProxy: true,
-  })
-
-  json(res, tools)
-}
-
-async function handleSetup(req, res) {
-  const body = await parseBody(req)
-  const { apiKey, models, toolIds, autoInstall } = body
-
-  sseStart(res)
-
-  // Step 1: Validate API Key — support using saved key
-  let effectiveKey = apiKey
-  if (apiKey === '__use_saved__') {
-    effectiveKey = getApiKey()
-    if (!effectiveKey) {
-      sseEmit(res, { type: 'error', message: '未找到已保存的 API Key' })
-      return res.end()
-    }
-  }
-  if (!effectiveKey || !effectiveKey.startsWith('cr_')) {
-    sseEmit(res, { type: 'error', message: 'API Key 必须以 cr_ 开头' })
-    return res.end()
-  }
-
-  sseEmit(res, { type: 'progress', step: 'validate', message: '验证 API Key...' })
-  try {
-    const valid = await validateApiKey(effectiveKey)
-    if (!valid) {
-      sseEmit(res, { type: 'error', message: 'API Key 无效' })
-      return res.end()
-    }
-    sseEmit(res, { type: 'progress', step: 'validate', status: 'ok', message: 'API Key 验证成功' })
-  } catch (e) {
-    sseEmit(res, { type: 'error', message: `验证失败: ${e.message}` })
-    return res.end()
-  }
-
-  // Step 2: Save API Key
-  saveConfig({ apiKey: effectiveKey, savedAt: new Date().toISOString() })
-  sseEmit(res, { type: 'progress', step: 'save-key', status: 'ok', message: 'API Key 已保存' })
-
-  // Step 3: Determine models
-  const selectedModels = models && models.length > 0 ? models : ['claude-sonnet-4-6']
-  const primaryModel = selectedModels.find(m => m.startsWith('claude-')) || selectedModels[0] || 'claude-sonnet-4-6'
-
-  // Step 4: Process each tool
-  const selectedToolIds = toolIds || []
-  const selectedTools = TOOLS.filter(t => selectedToolIds.includes(t.id))
-  const results = []
-
-  for (const tool of selectedTools) {
-    const installed = tool.checkInstalled()
-
-    // Auto-install if needed
-    if (!installed && autoInstall && AUTO_INSTALL[tool.id]) {
-      sseEmit(res, { type: 'progress', step: 'install', tool: tool.name, message: `正在安装 ${tool.name}...` })
-      const installOk = await new Promise(resolve => {
-        const child = spawn(AUTO_INSTALL[tool.id].cmd, [], { shell: true })
-        let output = ''
-        child.stdout?.on('data', chunk => {
-          output += chunk.toString()
-          sseEmit(res, { type: 'output', tool: tool.name, text: chunk.toString() })
-        })
-        child.stderr?.on('data', chunk => {
-          output += chunk.toString()
-          sseEmit(res, { type: 'output', tool: tool.name, text: chunk.toString() })
-        })
-        child.on('close', code => resolve(code === 0))
-        child.on('error', () => resolve(false))
-      })
-      if (!installOk) {
-        sseEmit(res, { type: 'progress', step: 'install', tool: tool.name, status: 'error', message: `${tool.name} 安装失败` })
-        results.push({ tool: tool.name, status: 'error', error: '安装失败' })
-        continue
-      }
-      sseEmit(res, { type: 'progress', step: 'install', tool: tool.name, status: 'ok', message: `${tool.name} 安装成功` })
-    } else if (!installed) {
-      sseEmit(res, { type: 'progress', step: 'skip', tool: tool.name, status: 'skip', message: `${tool.name} 未安装，跳过` })
-      results.push({ tool: tool.name, status: 'skip' })
-      continue
-    }
-
-    // Configure
-    sseEmit(res, { type: 'progress', step: 'configure', tool: tool.name, message: `配置 ${tool.name}...` })
-    try {
-      const result = tool.configure(effectiveKey, BASE_URL_ANTHROPIC, BASE_URL_OPENAI, primaryModel, selectedModels)
-      if (result.manual) {
-        sseEmit(res, { type: 'progress', step: 'configure', tool: tool.name, status: 'manual', message: `${tool.name} 需要手动配置`, steps: result.steps })
-        results.push({ tool: tool.name, status: 'manual', steps: result.steps })
-      } else if (result.warning) {
-        sseEmit(res, { type: 'progress', step: 'configure', tool: tool.name, status: 'warning', message: result.warning, file: result.file })
-        results.push({ tool: tool.name, status: 'warning', warning: result.warning, file: result.file })
-      } else {
-        sseEmit(res, { type: 'progress', step: 'configure', tool: tool.name, status: 'ok', message: `${tool.name} 配置成功`, file: result.file, hot: result.hot })
-        results.push({ tool: tool.name, status: 'ok', file: result.file, hot: result.hot })
-      }
-    } catch (e) {
-      sseEmit(res, { type: 'progress', step: 'configure', tool: tool.name, status: 'error', message: e.message })
-      results.push({ tool: tool.name, status: 'error', error: e.message })
-    }
-  }
-
-  // Step 5: Clean env vars (skip if env-config tool is selected)
-  if (!selectedToolIds.includes('env-config')) {
-    try {
-      const cleaned = removeEnvFromShell(['ANTHROPIC_API_KEY', 'ANTHROPIC_BASE_URL', 'OPENAI_API_KEY', 'OPENAI_BASE_URL'])
-      if (cleaned.length) {
-        sseEmit(res, { type: 'progress', step: 'clean-env', status: 'ok', message: `已清理环境变量: ${cleaned.join(', ')}` })
-      }
-    } catch {}
-  }
-
-  // Done
-  const ok = results.filter(r => r.status === 'ok').length
-  const errors = results.filter(r => r.status === 'error').length
-  sseEmit(res, { type: 'done', summary: { ok, errors, total: results.length, results } })
-  res.end()
-}
-
-async function handleReset(req, res) {
-  const body = await parseBody(req)
-  if (!body.confirm) return json(res, { error: '需要确认' }, 400)
-
-  const results = []
-  for (const tool of TOOLS) {
-    if (!tool.checkInstalled() && !tool.isConfigured?.()) continue
-    try {
-      tool.reset()
-      results.push({ tool: tool.name, status: 'ok' })
-    } catch (e) {
-      results.push({ tool: tool.name, status: 'error', error: e.message })
-    }
-  }
-
-  try { removeEnvFromShell() } catch {}
-  saveConfig({ apiKey: '' })
-
-  json(res, { success: true, results })
-}
-
-async function handleUpgrade(_req, res) {
-  sseStart(res)
-
-  for (const tool of UPGRADABLE_TOOLS) {
-    const installed = commandExists(tool.command)
-    if (!installed) {
-      sseEmit(res, { type: 'tool', name: tool.name, status: 'not-installed' })
-      continue
-    }
-
-    let localVer = null
-    try {
-      const out = execSync(tool.versionCmd, { stdio: 'pipe', timeout: 10000 }).toString().trim()
-      const m = out.match(/(\d+\.\d+\.\d+[\w.-]*)/)
-      localVer = m ? m[1] : out.split('\n')[0].slice(0, 30)
-    } catch {}
-
-    sseEmit(res, { type: 'tool', name: tool.name, status: 'upgrading', localVer })
-
-    const ok = await new Promise(resolve => {
-      const child = spawn(tool.installCmd, [], { shell: true })
-      child.stdout?.on('data', chunk => sseEmit(res, { type: 'output', name: tool.name, text: chunk.toString() }))
-      child.stderr?.on('data', chunk => sseEmit(res, { type: 'output', name: tool.name, text: chunk.toString() }))
-      child.on('close', code => resolve(code === 0))
-      child.on('error', () => resolve(false))
-    })
-
-    let newVer = null
-    try {
-      const out = execSync(tool.versionCmd, { stdio: 'pipe', timeout: 10000 }).toString().trim()
-      const m = out.match(/(\d+\.\d+\.\d+[\w.-]*)/)
-      newVer = m ? m[1] : null
-    } catch {}
-
-    // OpenClaw 升级后：Gateway → 等端口就绪 → 更新 PID → Bridge
-    if (ok && tool.id === 'openclaw') {
-      try { execSync('openclaw daemon stop', { stdio: 'ignore', timeout: 10000 }) } catch {}
-      try { execSync('openclaw daemon start', { stdio: 'ignore', timeout: 30000 }) } catch {}
-      const openclawTool = TOOLS.find(t => t.id === 'openclaw')
-      const gPort = openclawTool?.getGatewayPort?.() || 18789
-      let gPid = null
-      for (let i = 0; i < 10 && !gPid; i++) {
-        await new Promise(r => setTimeout(r, 1500))
-        try {
-          if (process.platform === 'win32') {
-            const o = execSync(`powershell -NonInteractive -Command "(Get-NetTCPConnection -LocalPort ${gPort} -State Listen -ErrorAction SilentlyContinue).OwningProcess"`, { stdio: 'pipe', timeout: 5000 }).toString().trim()
-            gPid = Number(o.split(/\r?\n/)[0]) || null
-          } else {
-            const o = execSync(`lsof -iTCP:${gPort} -sTCP:LISTEN -t 2>/dev/null | head -1`, { stdio: 'pipe', timeout: 5000 }).toString().trim()
-            gPid = Number(o) || null
-          }
-        } catch {}
-      }
-      try {
-        const bridgeMod = require('../tools/openclaw-bridge')
-        const bc = bridgeMod.readBridgeConfig()
-        bc.gatewayPid = gPid // null 也写入，清除旧死 PID
-        bc.gatewayStartedAt = new Date().toISOString()
-        fs.writeFileSync(bridgeMod.BRIDGE_CONFIG_FILE, JSON.stringify(bc, null, 2), 'utf8')
-      } catch {}
-      try { openclawTool?.ensureBridgeRunning?.() } catch {}
-    }
-
-    sseEmit(res, { type: 'tool', name: tool.name, status: ok ? 'ok' : 'error', localVer, newVer })
-  }
-
-  sseEmit(res, { type: 'done' })
-  res.end()
-}
-
-async function handleToolInstall(req, res) {
-  const body = await parseBody(req)
-  const { toolId } = body
-  if (!toolId || !AUTO_INSTALL[toolId]) {
-    return json(res, { error: '不支持自动安装此工具' }, 400)
-  }
-  // Hermes on Windows: installer only supports Linux/macOS/WSL2. Instead of
-  // spawning an empty cmd (which hangs SSE), short-circuit with guidance.
-  if (toolId === 'hermes' && process.platform === 'win32') {
-    sseStart(res)
-    sseEmit(res, { type: 'output', text: 'Hermes Agent 官方安装脚本不支持原生 Windows。\n请先启用 WSL2（`wsl --install`）后，在 Ubuntu 终端里运行：\n  curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash -s -- --skip-setup\n' })
-    sseEmit(res, { type: 'done', success: false, manual: true })
-    return res.end()
-  }
-
-  sseStart(res)
-  sseEmit(res, { type: 'progress', message: `正在安装 ${toolId}...` })
-
-  const INSTALL_TIMEOUT_MS = 10 * 60 * 1000 // 10 分钟
-  const ok = await new Promise(resolve => {
-    const child = spawn(AUTO_INSTALL[toolId].cmd, [], { shell: true })
-    const timer = setTimeout(() => {
-      sseEmit(res, { type: 'output', text: `\n⚠️ 安装超时（10分钟），请手动运行:\n${AUTO_INSTALL[toolId].cmd}\n` })
-      try { child.kill('SIGKILL') } catch {}
-      resolve(false)
-    }, INSTALL_TIMEOUT_MS)
-    child.stdout?.on('data', chunk => sseEmit(res, { type: 'output', text: chunk.toString() }))
-    child.stderr?.on('data', chunk => sseEmit(res, { type: 'output', text: chunk.toString() }))
-    child.on('close', code => { clearTimeout(timer); resolve(code === 0) })
-    child.on('error', () => { clearTimeout(timer); resolve(false) })
-  })
-
-  // Windows: npm-global installs (codex, gemini-cli, opencode, openclaw) drop
-  // the binary under %APPDATA%\npm which isn't in the freshly-installed user's
-  // Path. Fix it now so the very next tool check sees the binary. No-op on
-  // non-Windows or when already present.
-  if (ok && process.platform === 'win32') {
-    try {
-      const { ensureWindowsUserPathHasNpmBin, ensureWindowsUserPathHasLocalBin } = require('../utils/shell')
-      ensureWindowsUserPathHasNpmBin()
-      sseEmit(res, { type: 'output', text: '\n✓ 已更新 Windows 用户 PATH（包含 npm global bin）\n' })
-      // [HolySheep fork v2.1.36 / hs25] Claude Code's Windows installer
-      // (claude.ai/install.ps1) drops claude.exe under
-      // `%USERPROFILE%\\.local\\bin` which is NOT on PATH by default — it
-      // prints a warning and exits, leaving our `commandExists` check to
-      // incorrectly report 未安装 even though the install succeeded.
-      if (toolId === 'claude-code') {
-        try {
-          ensureWindowsUserPathHasLocalBin()
-          sseEmit(res, { type: 'output', text: '\n✓ 已更新 Windows 用户 PATH（包含 %USERPROFILE%\\.local\\bin for Claude Code）\n' })
-        } catch {}
-      }
-    } catch {}
-    // Resolve the real install path via `where.exe` so the user sees
-    // exactly where the binary landed. This was a high-signal 2.1.14
-    // feedback item: previously users saw "install succeeded" but then
-    // `command not found` in the next terminal because PATH hadn't been
-    // refreshed — surfacing the absolute path (a) confirms the install
-    // really worked, (b) gives them a copy-pasteable fallback if PATH
-    // still isn't picked up by their shell.
-    try {
-      const cmd = getToolCommand(toolId)
-      if (cmd) {
-        const out = execSync(`where.exe ${cmd}`, { stdio: 'pipe', timeout: 5000 })
-          .toString().trim()
-        const first = out.split(/\r?\n/).find(Boolean)
-        if (first) {
-          sseEmit(res, { type: 'output', text: `\n📍 ${cmd} 二进制位置: ${first}\n` })
-          sseEmit(res, { type: 'output', text: '   如果新终端里执行该命令仍报 not found，复制上述绝对路径直接运行。\n' })
-        } else {
-          sseEmit(res, { type: 'output', text: `\n⚠️ ${cmd} 安装完成但 where.exe 找不到 — 可能需要重新打开 PowerShell / CMD\n` })
-        }
-      }
-    } catch {
-      // `where.exe` can be missing in very old cmd.exe or locked-down images.
-      // Not fatal — the ensureWindowsUserPathHasNpmBin hint above is enough.
-    }
-    // Bust the tool-check cache so the follow-up /api/holysheep/tools sees
-    // the new binary without waiting 10s for the TTL.
-    toolStateCache.delete(toolId)
-  }
-
-  sseEmit(res, { type: 'done', success: ok })
-  res.end()
-}
-
-// ── Single-tool configure (SSE) ──────────────────────────────────────────────
-
-async function handleToolConfigure(req, res) {
-  const body = await parseBody(req)
-  const { toolId } = body
-  const apiKey = getApiKey()
-  if (!apiKey) return json(res, { error: '未登录' }, 401)
-
-  const tool = TOOLS.find(t => t.id === toolId)
-  if (!tool) return json(res, { error: '未知工具' }, 400)
-
-  sseStart(res)
-
-  if (!tool.checkInstalled()) {
-    sseEmit(res, { type: 'error', message: `${tool.name} 未安装` })
-    sseEmit(res, { type: 'done', success: false })
-    return res.end()
-  }
-
-  const allModelIds = [
-    'gpt-5.4', 'gpt-5.3-codex-spark',
-    'claude-sonnet-4-6', 'claude-opus-4-6',
-    'MiniMax-M2.7-highspeed', 'claude-haiku-4-5',
-  ]
-  const primaryModel = 'claude-sonnet-4-6'
-
-  sseEmit(res, { type: 'progress', message: `正在配置 ${tool.name}...` })
-
-  // 用子进程运行 configure()，避免 spawnSync/busy-wait 阻塞主进程事件循环
-  const { fork } = require('child_process')
-  const child = fork(path.join(__dirname, 'configure-worker.js'), { silent: true })
-
-  child.send({ toolId, apiKey, baseUrlAnthropic: BASE_URL_ANTHROPIC, baseUrlOpenAI: BASE_URL_OPENAI, primaryModel, allModelIds })
-
-  let success = false
-  let lastResult = null
-
-  child.on('message', (msg) => {
-    if (msg.type === 'progress') {
-      sseEmit(res, msg)
-    } else if (msg.type === 'result') {
-      lastResult = msg
-      sseEmit(res, msg)
-    } else if (msg.type === 'error') {
-      sseEmit(res, msg)
-    }
-  })
-
-  await new Promise((resolve) => {
-    child.on('exit', (code) => {
-      success = code === 0 && lastResult?.status === 'ok'
-      // [HolySheep fork v2.1.40 / hs27] Bust tool-check cache on success so
-      // CLI Manager's follow-up `/api/holysheep/tools` immediately sees the
-      // refreshed configured/installed state without waiting 10s for TTL.
-      if (success) {
-        toolStateCache.delete(toolId)
-      }
-      sseEmit(res, {
-        type: 'done',
-        success,
-        file: lastResult?.file || null,
-        hot: lastResult?.hot || false,
-        dashboardUrl: lastResult?.dashboardUrl || null,
-      })
-      res.end()
-      resolve()
-    })
-  })
-}
-
-// ── Single-tool upgrade (SSE) ────────────────────────────────────────────────
-
-async function handleToolUpgrade(req, res) {
-  const body = await parseBody(req)
-  const { toolId } = body
-  const entry = UPGRADABLE_TOOLS.find(t => t.id === toolId)
-  if (!entry) return json(res, { error: '不支持升级此工具' }, 400)
-
-  sseStart(res)
-
-  let localVer = null
-  try {
-    const out = execSync(entry.versionCmd, { stdio: 'pipe', timeout: 10000 }).toString().trim()
-    const m = out.match(/(\d+\.\d+\.\d+[\w.-]*)/)
-    localVer = m ? m[1] : out.split('\n')[0].slice(0, 30)
-  } catch {}
-
-  sseEmit(res, { type: 'progress', message: `${entry.name} 当前版本: ${localVer || '未知'}` })
-
-  // Windows：升级前先 kill 正在运行的进程，避免文件被占用导致安装失败
-  if (process.platform === 'win32' && entry.command) {
-    try {
-      execSync(`taskkill /F /IM ${entry.command}.exe /T`, { stdio: 'ignore', shell: true })
-      sseEmit(res, { type: 'progress', message: `已关闭正在运行的 ${entry.name} 进程` })
-    } catch {}
-  }
-
-  sseEmit(res, { type: 'progress', message: `正在升级 ${entry.name}...` })
-
-  const UPGRADE_TIMEOUT_MS = 10 * 60 * 1000 // 10 分钟
-  const ok = await new Promise(resolve => {
-    const child = spawn(entry.installCmd, [], { shell: true })
-    const timer = setTimeout(() => {
-      sseEmit(res, { type: 'progress', message: `⚠️ 升级超时（10分钟），请手动运行: ${entry.installCmd}` })
-      try { child.kill('SIGKILL') } catch {}
-      resolve(false)
-    }, UPGRADE_TIMEOUT_MS)
-    child.stdout?.on('data', chunk => sseEmit(res, { type: 'output', text: chunk.toString() }))
-    child.stderr?.on('data', chunk => sseEmit(res, { type: 'output', text: chunk.toString() }))
-    child.on('close', code => { clearTimeout(timer); resolve(code === 0) })
-    child.on('error', () => { clearTimeout(timer); resolve(false) })
-  })
-
-  let newVer = null
-  try {
-    const out = execSync(entry.versionCmd, { stdio: 'pipe', timeout: 10000 }).toString().trim()
-    const m = out.match(/(\d+\.\d+\.\d+[\w.-]*)/)
-    newVer = m ? m[1] : null
-  } catch {}
-
-  if (ok) {
-    sseEmit(res, { type: 'progress', message: `✓ ${entry.name} 升级成功: ${localVer || '?'} → ${newVer || 'latest'}` })
-    // OpenClaw 升级后：先停 → 启动 Gateway（拿 PID）→ 更新 bridge config → 启动 Bridge
-    if (entry.id === 'openclaw') {
-      const openclawTool = TOOLS.find(t => t.id === 'openclaw')
-      sseEmit(res, { type: 'progress', message: '正在重启 OpenClaw...' })
-      try { execSync('openclaw daemon stop', { stdio: 'ignore', timeout: 10000 }) } catch {}
-      try {
-        execSync('openclaw daemon start', { stdio: 'ignore', timeout: 30000 })
-        sseEmit(res, { type: 'progress', message: '✓ OpenClaw Gateway 已启动' })
-      } catch {
-        sseEmit(res, { type: 'progress', message: '⚠️ Gateway 启动失败' })
-      }
-      // 等 Gateway 端口就绪，获取 PID 写入 bridge config
-      const gPort = openclawTool?.getGatewayPort?.() || 18789
-      let gPid = null
-      for (let i = 0; i < 10 && !gPid; i++) {
-        await new Promise(r => setTimeout(r, 1500))
-        try {
-          if (process.platform === 'win32') {
-            const o = execSync(`powershell -NonInteractive -Command "(Get-NetTCPConnection -LocalPort ${gPort} -State Listen -ErrorAction SilentlyContinue).OwningProcess"`, { stdio: 'pipe', timeout: 5000 }).toString().trim()
-            gPid = Number(o.split(/\r?\n/)[0]) || null
-          } else {
-            const o = execSync(`lsof -iTCP:${gPort} -sTCP:LISTEN -t 2>/dev/null | head -1`, { stdio: 'pipe', timeout: 5000 }).toString().trim()
-            gPid = Number(o) || null
-          }
-        } catch {}
-      }
-      try {
-        const bridgeMod = require('../tools/openclaw-bridge')
-        const bc = bridgeMod.readBridgeConfig()
-        bc.gatewayPid = gPid // null 也写入，清除旧死 PID
-        bc.gatewayStartedAt = new Date().toISOString()
-        fs.writeFileSync(bridgeMod.BRIDGE_CONFIG_FILE, JSON.stringify(bc, null, 2), 'utf8')
-      } catch {}
-      // 启动 Bridge
-      if (openclawTool?.ensureBridgeRunning) {
-        try {
-          openclawTool.ensureBridgeRunning()
-          sseEmit(res, { type: 'progress', message: '✓ HolySheep Bridge 已启动' })
-        } catch {
-          sseEmit(res, { type: 'progress', message: '⚠️ Bridge 启动失败' })
-        }
-      }
-    }
-  } else {
-    sseEmit(res, { type: 'progress', message: `✗ ${entry.name} 升级失败` })
-  }
-
-  sseEmit(res, { type: 'done', success: ok, localVer, newVer })
-  res.end()
-}
-
-// ── Single-tool rollback (SSE) ────────────────────────────────────────────────
-
-async function handleToolRollback(req, res) {
-  const body = await parseBody(req)
-  const { toolId } = body
-  const entry = UPGRADABLE_TOOLS.find(t => t.id === toolId)
-  if (!entry || !entry.npmPkg) return json(res, { error: '不支持回退此工具（仅限 npm 工具）' }, 400)
-
-  sseStart(res)
-
-  // 1. 获取当前本地版本
-  let localVer = null
-  try {
-    const out = execSync(entry.versionCmd, { stdio: 'pipe', timeout: 10000 }).toString().trim()
-    const m = out.match(/(\d+\.\d+\.\d+[\w.-]*)/)
-    localVer = m ? m[1] : null
-  } catch {}
-  sseEmit(res, { type: 'progress', message: `${entry.name} 当前版本: ${localVer || '未知'}` })
-
-  // 2. 从 npm registry 获取版本列表，找到倒数第二个
-  let targetVer = null
-  try {
-    sseEmit(res, { type: 'progress', message: '正在查询可用版本...' })
-    const r = await fetchWithRetry(`https://registry.npmjs.org/${entry.npmPkg}`, {}, 2, 15000)
-    if (r.ok) {
-      const data = await r.json()
-      const versions = Object.keys(data.versions || {})
-        .filter(v => !v.includes('alpha') && !v.includes('beta') && !v.includes('rc') && !v.includes('canary'))
-      if (versions.length >= 2) {
-        // 找到当前版本的前一个，或者倒数第二个
-        const currentIdx = localVer ? versions.indexOf(localVer) : -1
-        if (currentIdx > 0) {
-          targetVer = versions[currentIdx - 1]
-        } else {
-          targetVer = versions[versions.length - 2]
-        }
-      }
-    }
-  } catch (e) {
-    sseEmit(res, { type: 'progress', message: `⚠️ 查询版本失败: ${e.message}` })
-  }
-
-  if (!targetVer) {
-    sseEmit(res, { type: 'progress', message: '✗ 无法确定回退版本' })
-    sseEmit(res, { type: 'done', success: false })
-    return res.end()
-  }
-
-  sseEmit(res, { type: 'progress', message: `回退目标: ${localVer || '?'} → ${targetVer}` })
-
-  // 3. Windows: kill 进程 + 停止 daemon
-  if (entry.id === 'openclaw') {
-    try { execSync('openclaw daemon stop', { stdio: 'ignore', timeout: 10000 }) } catch {}
-  }
-  if (process.platform === 'win32' && entry.command) {
-    try {
-      execSync(`taskkill /F /IM ${entry.command}.exe /T`, { stdio: 'ignore', shell: true })
-      sseEmit(res, { type: 'progress', message: `已关闭 ${entry.name} 进程` })
-    } catch {}
-  }
-
-  // 4. 清理残留: npm cache + 删除 node_modules 目录
-  sseEmit(res, { type: 'progress', message: '正在清理残留文件...' })
-  try { execSync('npm cache clean --force', { stdio: 'ignore', timeout: 30000 }) } catch {}
-  try { execSync(`npm uninstall -g ${entry.npmPkg}`, { stdio: 'ignore', timeout: 30000 }) } catch {}
-  // Windows 上 npm uninstall 可能残留文件
-  if (process.platform === 'win32') {
-    const globalPrefix = String(execSync('npm prefix -g', { stdio: 'pipe', timeout: 5000 })).trim()
-    const modulePath = path.join(globalPrefix, 'node_modules', ...entry.npmPkg.split('/'))
-    try {
-      if (fs.existsSync(modulePath)) {
-        execSync(`rd /s /q "${modulePath}"`, { stdio: 'ignore', shell: true, timeout: 10000 })
-        sseEmit(res, { type: 'progress', message: '已清理残留目录' })
-      }
-    } catch {}
-  }
-
-  // 5. 安装目标版本
-  sseEmit(res, { type: 'progress', message: `正在安装 ${entry.npmPkg}@${targetVer}...` })
-  const installCmd = `npm install -g ${entry.npmPkg}@${targetVer}`
-  const ok = await new Promise(resolve => {
-    const child = spawn(installCmd, [], { shell: true })
-    const timer = setTimeout(() => {
-      sseEmit(res, { type: 'progress', message: `⚠️ 安装超时` })
-      try { child.kill('SIGKILL') } catch {}
-      resolve(false)
-    }, 5 * 60 * 1000)
-    child.stdout?.on('data', chunk => sseEmit(res, { type: 'output', text: chunk.toString() }))
-    child.stderr?.on('data', chunk => sseEmit(res, { type: 'output', text: chunk.toString() }))
-    child.on('close', code => { clearTimeout(timer); resolve(code === 0) })
-    child.on('error', () => { clearTimeout(timer); resolve(false) })
-  })
-
-  // 6. 验证版本
-  let newVer = null
-  try {
-    const out = execSync(entry.versionCmd, { stdio: 'pipe', timeout: 10000 }).toString().trim()
-    const m = out.match(/(\d+\.\d+\.\d+[\w.-]*)/)
-    newVer = m ? m[1] : null
-  } catch {}
-
-  if (ok) {
-    sseEmit(res, { type: 'progress', message: `✓ ${entry.name} 已回退: ${localVer || '?'} → ${newVer || targetVer}` })
-    // OpenClaw: 先启动 Gateway（拿 PID），更新 bridge config，再启动 Bridge
-    if (entry.id === 'openclaw') {
-      sseEmit(res, { type: 'progress', message: '正在重启 OpenClaw...' })
-      // 1. 启动 Gateway
-      try {
-        execSync('openclaw daemon start', { stdio: 'ignore', timeout: 30000 })
-        sseEmit(res, { type: 'progress', message: '✓ OpenClaw Gateway 已启动' })
-      } catch {
-        sseEmit(res, { type: 'progress', message: '⚠️ Gateway 启动失败' })
-      }
-      // 2. 等 Gateway 端口就绪，获取 PID 写入 bridge config
-      const openclawTool = TOOLS.find(t => t.id === 'openclaw')
-      const gatewayPort = openclawTool?.getGatewayPort?.() || 18789
-      let gatewayPid = null
-      for (let attempt = 0; attempt < 10 && !gatewayPid; attempt++) {
-        await new Promise(r => setTimeout(r, 1500))
-        try {
-          if (process.platform === 'win32') {
-            const out = execSync(`powershell -NonInteractive -Command "(Get-NetTCPConnection -LocalPort ${gatewayPort} -State Listen -ErrorAction SilentlyContinue).OwningProcess"`, { stdio: 'pipe', timeout: 5000 }).toString().trim()
-            gatewayPid = Number(out.split(/\r?\n/)[0]) || null
-          } else {
-            const out = execSync(`lsof -iTCP:${gatewayPort} -sTCP:LISTEN -t 2>/dev/null | head -1`, { stdio: 'pipe', timeout: 5000 }).toString().trim()
-            gatewayPid = Number(out) || null
-          }
-        } catch {}
-      }
-      // PID 检测不到时设为 null（和 hs setup 一致），watchdog 不杀 null PID 的 bridge
-      try {
-        const bridgeMod = require('../tools/openclaw-bridge')
-        const bc = bridgeMod.readBridgeConfig()
-        bc.gatewayPid = gatewayPid // null 也写入，清除旧死 PID
-        bc.gatewayStartedAt = new Date().toISOString()
-        fs.writeFileSync(bridgeMod.BRIDGE_CONFIG_FILE, JSON.stringify(bc, null, 2), 'utf8')
-        sseEmit(res, { type: 'progress', message: gatewayPid ? `Gateway PID: ${gatewayPid}` : 'Gateway PID cleared' })
-      } catch {}
-      // 3. 启动 Bridge
-      if (openclawTool?.ensureBridgeRunning) {
-        try {
-          const bridgeOk = openclawTool.ensureBridgeRunning()
-          sseEmit(res, { type: 'progress', message: bridgeOk ? '✓ HolySheep Bridge 已启动' : '⚠️ Bridge 未就绪' })
-        } catch (e) {
-          sseEmit(res, { type: 'progress', message: `⚠️ Bridge 启动失败: ${e.message}` })
-        }
-      }
-    }
-  } else {
-    sseEmit(res, { type: 'progress', message: `✗ 回退失败，请手动运行: ${installCmd}` })
-  }
-
-  sseEmit(res, { type: 'done', success: ok, localVer, newVer: newVer || targetVer })
-  res.end()
-}
-
-// ── Single-tool reset ────────────────────────────────────────────────────────
-
-async function handleToolReset(req, res) {
-  const body = await parseBody(req)
-  const { toolId } = body
-  const tool = TOOLS.find(t => t.id === toolId)
-  if (!tool) return json(res, { error: '未知工具' }, 400)
-  try {
-    tool.reset()
-    json(res, { success: true })
-  } catch (e) {
-    json(res, { success: false, error: e.message }, 500)
-  }
-}
-
-// ── Launch tool in new terminal ───────────────────────────────────────────────
-
-async function handleToolLaunch(req, res) {
-  const body = await parseBody(req)
-  const { toolId } = body
-  const tool = TOOLS.find(t => t.id === toolId)
-  if (!tool) return json(res, { error: '未知工具' }, 400)
-
-  // OpenClaw: 后台启动服务，立即打开浏览器
-  if (toolId === 'openclaw') {
-    const gatewayPort = tool.getGatewayPort?.() || 18789
-    const bridgePort  = tool.getBridgePort?.()  || 18788
-
-    // 后台启动 Bridge + Gateway，不阻塞响应
-    setImmediate(() => {
-      try {
-        tool.ensureBridgeRunning?.(bridgePort)
-        tool.ensureGatewayRunning?.(gatewayPort)
-      } catch {}
-    })
-
-    const url = `http://127.0.0.1:${gatewayPort}/`
-    if (process.platform === 'darwin') spawn('open', [url], { detached: true, stdio: 'ignore' }).unref()
-    else if (process.platform === 'win32') spawn('cmd.exe', ['/c', 'start', '', url], { detached: true, stdio: 'ignore', shell: true }).unref()
-    else spawn('xdg-open', [url], { detached: true, stdio: 'ignore' }).unref()
-    return json(res, { ok: true, type: 'browser', url })
-  }
-
-  const cmd = tool.launchCmd
-  if (!cmd) return json(res, { error: '无启动命令' }, 400)
-
-  if (process.platform === 'darwin') {
-    spawn('osascript', ['-e', `tell app "Terminal" to do script "${cmd.replace(/"/g, '\\"')}"`], { detached: true, stdio: 'ignore' }).unref()
-  } else if (process.platform === 'win32') {
-    spawn('cmd.exe', ['/c', 'start', 'cmd.exe', '/k', cmd], { detached: true, stdio: 'ignore', shell: true }).unref()
-  } else {
-    const terms = ['x-terminal-emulator', 'gnome-terminal', 'xterm']
-    for (const term of terms) {
-      if (commandExists(term)) {
-        spawn(term, ['-e', cmd], { detached: true, stdio: 'ignore' }).unref()
-        break
-      }
-    }
-  }
-  json(res, { ok: true, type: 'terminal', cmd })
-}
-
-// ── Claude Proxy start/stop ──────────────────────────────────────────────────
-
-async function handleClaudeProxyStart(_req, res) {
-  const state = isClaudeProxyRunning()
-  if (state.running) {
-    return json(res, { ok: true, message: '代理已在运行', port: state.port, pid: state.pid })
-  }
-  try {
-    const claudeProxy = require('../commands/claude-proxy')
-    await claudeProxy(['--daemon'])
-    // 等一下确认
-    await new Promise(r => setTimeout(r, 2000))
-    const newState = isClaudeProxyRunning()
-    json(res, { ok: newState.running, port: newState.port, pid: newState.pid })
-  } catch (e) {
-    json(res, { ok: false, error: e.message }, 500)
-  }
-}
-
-async function handleClaudeProxyStop(_req, res) {
-  try {
-    const claudeProxy = require('../commands/claude-proxy')
-    await claudeProxy(['--stop'])
-    json(res, { ok: true })
-  } catch (e) {
-    json(res, { ok: false, error: e.message }, 500)
-  }
-}
-
-// ── Environment variables ────────────────────────────────────────────────────
-
-const HS_ENV_KEYS = ['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL', 'OPENAI_API_KEY', 'OPENAI_BASE_URL']
-const MARKER_START = '# >>> holysheep-cli managed >>>'
-
-function handleEnv(_req, res) {
-  const vars = {}
-
-  // Windows: process.env 看不到 setx 写入的值，从注册表读
-  const envConfigTool = TOOLS.find(t => t.id === 'env-config')
-  const registryValues = (process.platform === 'win32' && envConfigTool?.getConfiguredValues?.()) || {}
-
-  for (const k of HS_ENV_KEYS) {
-    const v = process.env[k] || registryValues[k] || null
-    vars[k] = v ? (k.includes('KEY') || k.includes('TOKEN') ? maskKey(v) : v) : null
-  }
-
-  const rcFiles = []
-  try {
-    for (const f of getShellRcFiles()) {
-      let has = false
-      try { has = fs.readFileSync(f, 'utf8').includes(MARKER_START) } catch {}
-      rcFiles.push({ path: f.replace(require('os').homedir(), '~'), hasManagedBlock: has })
-    }
-  } catch {}
-
-  json(res, { vars, rcFiles })
-}
-
-function handleEnvClean(_req, res) {
-  try {
-    const cleaned = removeEnvFromShell()
-    json(res, { success: true, cleaned })
-  } catch (e) {
-    json(res, { success: false, error: e.message }, 500)
-  }
-}
-
-// ── Models list ──────────────────────────────────────────────────────────────
-
-function handleModels(_req, res) {
-  json(res, [
-    { id: 'gpt-5.4',                label: 'GPT 5.4',              desc: '通用编码' },
-    { id: 'gpt-5.3-codex-spark',    label: 'GPT 5.3 Codex Spark',  desc: '编码' },
-    { id: 'claude-sonnet-4-6',      label: 'Sonnet 4.6',           desc: '均衡推荐' },
-    { id: 'claude-sonnet-4-6[1m]',  label: 'Sonnet 4.6 (1M)',      desc: '均衡推荐·100万上下文' },
-    { id: 'claude-opus-4-6',        label: 'Opus 4.6',             desc: '强力旗舰' },
-    { id: 'claude-opus-4-6[1m]',    label: 'Opus 4.6 (1M)',        desc: '强力旗舰·100万上下文' },
-    { id: 'MiniMax-M2.7-highspeed', label: 'MiniMax M2.7',         desc: '高速经济版' },
-    { id: 'claude-haiku-4-5',       label: 'Haiku 4.5',            desc: '轻快便宜' },
-  ])
-}
-
-function getWorkspacePayload() {
-  const config = workspaceRuntime.normalizeRuntimeConfig({})
-  const hasRuntimeConfig = Boolean(config.apiKey && config.baseUrl && config.model)
-  return {
-    conversations: workspaceStore.listConversations(),
-    scheduledTasks: workspaceStore.listTasks(),
-    holySheepApi: {
-      ...config,
-      apiKeyMasked: config.apiKey ? maskKey(config.apiKey) : null,
-      ready: hasRuntimeConfig,
-    },
-    tools: TOOLS.map((tool) => ({
-      id: tool.id,
-      name: tool.name,
-      launchCmd: tool.launchCmd || null,
-      hint: tool.hint || null,
-    })),
-  }
-}
-
-async function handleWorkspaceState(_req, res) {
-  json(res, getWorkspacePayload())
-}
-
-async function handleWorkspaceSearch(req, res, url) {
-  const query = url.searchParams.get('q') || ''
-  json(res, workspaceStore.searchWorkspace(query))
-}
-
-async function handleWorkspaceApiConfig(req, res) {
-  if (req.method === 'GET') {
-    const config = workspaceRuntime.normalizeRuntimeConfig({})
-    return json(res, {
-      apiKey: config.apiKey,
-      apiKeyMasked: config.apiKey ? maskKey(config.apiKey) : null,
-      baseUrl: config.baseUrl,
-      model: config.model,
-      ready: Boolean(config.apiKey && config.baseUrl && config.model),
-    })
-  }
-
-  const body = await parseBody(req)
-  const apiKey = String(body.apiKey || '').trim()
-  const baseUrl = String(body.baseUrl || '').trim() || BASE_URL_OPENAI
-  const model = String(body.model || '').trim()
-  if (!apiKey || !apiKey.startsWith('cr_')) {
-    return json(res, { success: false, error: 'HolySheep API Key 必须以 cr_ 开头' }, 400)
-  }
-  if (!model) {
-    return json(res, { success: false, error: '模型不能为空' }, 400)
-  }
-
-  workspaceStore.saveHolySheepApiConfig({ apiKey, baseUrl, model })
-  saveConfig({ apiKey, savedAt: new Date().toISOString() })
-  json(res, { success: true, config: getWorkspacePayload().holySheepApi })
-}
-
-async function handleWorkspaceConversations(req, res) {
-  if (req.method === 'GET') {
-    return json(res, workspaceStore.listConversations())
-  }
-  const body = await parseBody(req)
-  const conversation = workspaceStore.createConversation({
-    title: body.title,
-    toolId: body.toolId,
-    pinned: body.pinned,
-  })
-  json(res, { success: true, conversation })
-}
-
-async function handleWorkspaceConversationById(req, res, conversationId) {
-  const conversation = workspaceStore.getConversation(conversationId)
-  if (!conversation) return json(res, { success: false, error: '会话不存在' }, 404)
-
-  if (req.method === 'GET') {
-    return json(res, conversation)
-  }
-
-  if (req.method === 'PATCH') {
-    const body = await parseBody(req)
-    const updated = workspaceStore.updateConversation(conversationId, {
-      title: body.title,
-      toolId: body.toolId,
-      pinned: body.pinned,
-    })
-    return json(res, { success: true, conversation: updated })
-  }
-
-  return json(res, { success: false, error: 'Method not allowed' }, 405)
-}
-
-async function handleWorkspaceConversationMessages(req, res, conversationId) {
-  if (req.method === 'GET') {
-    const conversation = workspaceStore.getConversation(conversationId)
-    if (!conversation) return json(res, { success: false, error: '会话不存在' }, 404)
-    return json(res, conversation.messages)
-  }
-
-  const body = await parseBody(req)
-  const content = String(body.content || '').trim()
-  if (!content) return json(res, { success: false, error: '消息不能为空' }, 400)
-
-  try {
-    const result = await workspaceRuntime.sendConversationMessage(conversationId, content, body.runtimeConfig || {})
-    return json(res, {
-      success: true,
-      messages: [result.userMessage, result.assistantMessage],
-      conversation: workspaceStore.getConversation(conversationId),
-    })
-  } catch (error) {
-    return json(res, {
-      success: false,
-      error: error.message,
-      conversation: workspaceStore.getConversation(conversationId),
-    }, 500)
-  }
-}
-
-async function handleWorkspaceTasks(req, res) {
-  if (req.method === 'GET') {
-    return json(res, workspaceStore.listTasks())
-  }
-  const body = await parseBody(req)
-  const title = String(body.title || '').trim()
-  const prompt = String(body.prompt || '').trim()
-  if (!title || !prompt) return json(res, { success: false, error: '任务标题和提示词不能为空' }, 400)
-
-  try {
-    workspaceRuntime.parseScheduleToMs(body.schedule || '1h')
-  } catch (error) {
-    return json(res, { success: false, error: error.message }, 400)
-  }
-
-  const task = workspaceStore.saveTask({
-    title,
-    prompt,
-    schedule: body.schedule || '1h',
-    active: body.active !== false,
-    conversationId: body.conversationId || null,
-    modelOverride: body.modelOverride || '',
-  })
-  workspaceRuntime.rescheduleAllTasks()
-  json(res, { success: true, task })
-}
-
-async function handleWorkspaceTaskById(req, res, taskId) {
-  if (req.method === 'DELETE') {
-    workspaceStore.deleteTask(taskId)
-    workspaceRuntime.rescheduleAllTasks()
-    return json(res, { success: true })
-  }
-
-  if (req.method === 'PATCH') {
-    const body = await parseBody(req)
-    if (body.schedule) {
-      try {
-        workspaceRuntime.parseScheduleToMs(body.schedule)
-      } catch (error) {
-        return json(res, { success: false, error: error.message }, 400)
-      }
-    }
-    const task = workspaceStore.saveTask({
-      id: taskId,
-      title: body.title,
-      prompt: body.prompt,
-      schedule: body.schedule,
-      active: body.active,
-      conversationId: body.conversationId,
-      modelOverride: body.modelOverride,
-    })
-    workspaceRuntime.rescheduleAllTasks()
-    return json(res, { success: true, task })
-  }
-
-  if (req.method === 'POST') {
-    try {
-      const result = await workspaceRuntime.runTask(taskId)
-      return json(res, { success: true, result })
-    } catch (error) {
-      return json(res, { success: false, error: error.message }, 500)
-    }
-  }
-
-  return json(res, { success: false, error: 'Method not allowed' }, 405)
-}
-
-// ── Router ───────────────────────────────────────────────────────────────────
-
-async function handleRequest(req, res) {
-  res.setHeader('Access-Control-Allow-Origin', '*')
-  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS')
-  res.setHeader('Access-Control-Allow-Headers', 'Content-Type')
-
-  if (req.method === 'OPTIONS') { res.writeHead(204); return res.end() }
-
-  const url = new URL(req.url, `http://${req.headers.host}`)
-  const route = url.pathname
-
-  try {
-    // Static
-    if (route === '/' || route === '/index.html') {
-      const html = fs.readFileSync(path.join(__dirname, 'index.html'), 'utf8')
-      res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' })
-      return res.end(html)
-    }
-
-    // API
-    if (route === '/api/status'  && req.method === 'GET')  return await handleStatus(req, res)
-    if (route === '/api/login'   && req.method === 'POST') return await handleLogin(req, res)
-    if (route === '/api/logout'  && req.method === 'POST') return await handleLogout(req, res)
-    if (route === '/api/balance' && req.method === 'GET')  return await handleBalance(req, res)
-    if (route === '/api/doctor'  && req.method === 'GET')  return await handleDoctor(req, res)
-    if (route === '/api/tools'   && req.method === 'GET')  return await handleTools(req, res)
-    if (route === '/api/models'  && req.method === 'GET')  return await handleModels(req, res)
-    if (route === '/api/workspace/state' && req.method === 'GET') return await handleWorkspaceState(req, res)
-    if (route === '/api/workspace/search' && req.method === 'GET') return await handleWorkspaceSearch(req, res, url)
-    if (route === '/api/workspace/api-config' && (req.method === 'GET' || req.method === 'POST')) return await handleWorkspaceApiConfig(req, res)
-    if (route === '/api/workspace/conversations' && (req.method === 'GET' || req.method === 'POST')) return await handleWorkspaceConversations(req, res)
-    const conversationMatch = route.match(/^\/api\/workspace\/conversations\/([^/]+)$/)
-    if (conversationMatch) return await handleWorkspaceConversationById(req, res, conversationMatch[1])
-    const messagesMatch = route.match(/^\/api\/workspace\/conversations\/([^/]+)\/messages$/)
-    if (messagesMatch) return await handleWorkspaceConversationMessages(req, res, messagesMatch[1])
-    if (route === '/api/workspace/tasks' && (req.method === 'GET' || req.method === 'POST')) return await handleWorkspaceTasks(req, res)
-    const taskMatch = route.match(/^\/api\/workspace\/tasks\/([^/]+)$/)
-    if (taskMatch) return await handleWorkspaceTaskById(req, res, taskMatch[1])
-    if (route === '/api/upgrade' && req.method === 'POST') return await handleUpgrade(req, res)
-    if (route === '/api/tool/install'   && req.method === 'POST') return await handleToolInstall(req, res)
-    if (route === '/api/tool/configure' && req.method === 'POST') return await handleToolConfigure(req, res)
-    if (route === '/api/tool/reset'     && req.method === 'POST') return await handleToolReset(req, res)
-    if (route === '/api/tool/upgrade'   && req.method === 'POST') return await handleToolUpgrade(req, res)
-    if (route === '/api/tool/rollback'  && req.method === 'POST') return await handleToolRollback(req, res)
-    if (route === '/api/tool/launch'    && req.method === 'POST') return await handleToolLaunch(req, res)
-    if (route === '/api/claude-proxy/start' && req.method === 'POST') return await handleClaudeProxyStart(req, res)
-    if (route === '/api/claude-proxy/stop'  && req.method === 'POST') return await handleClaudeProxyStop(req, res)
-    if (route === '/api/env'       && req.method === 'GET')  return handleEnv(req, res)
-    if (route === '/api/env/clean' && req.method === 'POST') return handleEnvClean(req, res)
-    if (route === '/api/restart' && req.method === 'POST') {
-      json(res, { ok: true })
-      // 升级后用新版 hs web 重启自身
-      const port = req.headers.host?.split(':')[1] || '9876'
-      setTimeout(() => {
-        const child = spawn(process.execPath, [path.join(__dirname, '..', 'index.js'), 'web', '--port', port, '--no-open'], { detached: true, stdio: 'ignore' })
-        child.unref()
-        process.exit(0)
-      }, 500)
-      return
-    }
-
-    res.writeHead(404)
-    res.end('Not Found')
-  } catch (e) {
-    if (!res.headersSent) {
-      json(res, { error: e.message }, 500)
-    }
-  }
-}
-
-function startServer(port) {
-  return new Promise((resolve, reject) => {
-    const server = http.createServer(handleRequest)
-    server.on('error', (err) => {
-      if (err.code === 'EADDRINUSE') {
-        // Try to kill stale process and retry once
-        try {
-          if (process.platform === 'win32') {
-            // Windows: find PID by port and kill
-            const out = execSync(`netstat -ano | findstr :${port} | findstr LISTENING`, { stdio: 'pipe', encoding: 'utf8', shell: true })
-            const pids = [...new Set(out.match(/\d+\s*$/gm)?.map(s => s.trim()).filter(Boolean) || [])]
-            for (const pid of pids) { try { execSync(`taskkill /F /PID ${pid}`, { stdio: 'ignore' }) } catch {} }
-          } else {
-            execSync(`lsof -ti:${port} | xargs kill -9`, { stdio: 'ignore' })
-          }
-        } catch {}
-        setTimeout(() => {
-          const retry = http.createServer(handleRequest)
-          retry.on('error', (err2) => reject(err2))
-          retry.listen(port, '127.0.0.1', () => {
-            workspaceRuntime.startScheduler()
-            resolve(retry)
-          })
-        }, 500)
-      } else {
-        reject(err)
-      }
-    })
-    server.listen(port, '127.0.0.1', () => {
-      workspaceRuntime.startScheduler()
-      resolve(server)
-    })
-  })
-}
-
-// ── 后台服务自动拉起 ─────────────────────────────────────────────────────────
-
-async function bootstrapBackgroundServices() {
-  const { getApiKey } = require('../utils/config')
-  const apiKey = getApiKey()
-  if (!apiKey) return // 未登录，跳过
-
-  // 1. OpenClaw Bridge
-  try {
-    const openclawTool = TOOLS.find(t => t.id === 'openclaw')
-    if (openclawTool?.checkInstalled() && openclawTool?.isConfigured()) {
-      const bridgePort = openclawTool.getBridgePort?.() || 18788
-      // 检查是否已在运行
-      let bridgeAlive = false
-      try {
-        const http = require('http')
-        await new Promise((resolve, reject) => {
-          const req = http.get({ hostname: '127.0.0.1', port: bridgePort, path: '/health', family: 4 }, resolve)
-          req.setTimeout(2000, () => { req.destroy(); reject() })
-          req.on('error', reject)
-        })
-        bridgeAlive = true
-      } catch {}
-
-      if (!bridgeAlive) {
-        // 更新 bridge config 里的 gateway PID，防止 watchdog 误杀
-        // 关键：检测不到 PID 时设为 null（和 hs setup 一致），watchdog 不会杀 null PID 的 bridge
-        const gatewayPort = openclawTool.getGatewayPort?.() || 18789
-        const bridgeMod = require('../tools/openclaw-bridge')
-        const bc = bridgeMod.readBridgeConfig()
-        let gPid = null
-        try {
-          if (process.platform === 'win32') {
-            const o = execSync(`powershell -NonInteractive -Command "(Get-NetTCPConnection -LocalPort ${gatewayPort} -State Listen -ErrorAction SilentlyContinue).OwningProcess"`, { stdio: 'pipe', timeout: 5000 }).toString().trim()
-            gPid = Number(o.split(/\r?\n/)[0]) || null
-          } else {
-            const o = execSync(`lsof -iTCP:${gatewayPort} -sTCP:LISTEN -t 2>/dev/null | head -1`, { stdio: 'pipe', timeout: 5000 }).toString().trim()
-            gPid = Number(o) || null
-          }
-        } catch {}
-        // 无论是否检测到，都写入（null 或真实 PID），清除旧的死 PID
-        bc.gatewayPid = gPid
-        bc.gatewayStartedAt = new Date().toISOString()
-        try { fs.writeFileSync(bridgeMod.BRIDGE_CONFIG_FILE, JSON.stringify(bc, null, 2), 'utf8') } catch {}
-        openclawTool.ensureBridgeRunning?.(bridgePort)
-      }
-    }
-  } catch {}
-
-  // 2. Claude Proxy
-  try {
-    const claudeTool = TOOLS.find(t => t.id === 'claude-code')
-    if (claudeTool?.checkInstalled() && claudeTool?.isConfigured()) {
-      if (!isClaudeProxyRunning().running) {
-        const claudeProxy = require('../commands/claude-proxy')
-        await claudeProxy(['--daemon'])
-      }
-    }
-  } catch {}
-}
-
-// Exported for in-process reuse by the AionUi wrapper.
-// Each handler is a pure `(req, res) => Promise<void>` and writes the HTTP response itself.
-module.exports = {
-  startServer,
-  bootstrapBackgroundServices,
-  // Handlers reused by src/webui/aionui-wrapper.js
-  handleTools,
-  handleSetup,
-  handleToolInstall,
-  handleToolConfigure,
-  handleToolReset,
-  handleToolLaunch,
-  handleBalance,
-  handleDoctor,
-  handleWhoami,
-  handleStatus,
-  handleModels,
-  handleEnv,
-}