@tokenbuddy/tb-admin 1.0.36 → 1.0.38

package/src/ui-actions.ts

@@ -1,1040 +0,0 @@
-import { spawn } from "child_process";
-import * as fs from "fs";
-import * as os from "os";
-import * as path from "path";
-import YAML from "js-yaml";
-import type { SellerRegistryDocument, SellerRegistryEntry } from "./bootstrap-registry.js";
-import { ConfigManager } from "./config.js";
-import { AdminUiState } from "./ui-state.js";
-
-export interface UiActionResult {
-  ok: boolean;
-  stdout: string;
-  stderr: string;
-  command: string[];
-  /**
-   * Step 13 (admin web -> CLI --json):
-   * 一些子命令 (`tb-admin seller <cmd> --json` 等) spawn 出来的 JSON.
-   * 1.0.32 行为 (无此字段) 不变; 新增字段不影响旧调用方.
-   */
-  json?: unknown;
-}
-
-export interface CreateSellerRequest {
-  sellerName: string;
-  region: string;
-  image: string;
-  upstreamWebsite: string;
-  upstreamUrl: string;
-  upstreamApiKey: string;
-  upstreamBalanceProbeTemplate?: string;
-  upstreamBalanceProbeUrl?: string;
-  upstreamBalanceProbeUserId?: string;
-  upstreamBalanceProbeRechargeUrl?: string;
-  upstreamBalanceUrl?: string;
-  upstreamUserId?: string;
-  upstreamRechargeUrl?: string;
-  maxConnections: number;
-  maxQueueDepth: number;
-  markupRatio: number;
-  discountRatio: number;
-  paymentMethods?: string[] | string;
-  paymentMethod?: string;
-  clawtipPayTo?: string;
-  clawtipSm4KeyBase64?: string;
-  clawtipSkillSlug?: string;
-  clawtipSkillId?: string;
-  clawtipDescription?: string;
-  clawtipResourceUrl?: string;
-  clawtipActivationFeeFen?: number;
-  clawtipMicrosPerFen?: number;
-  flyConfig?: string;
-  operatorSecret?: string;
-  app?: string;
-  dryRun?: boolean;
-}
-
-export interface UiActionsOptions {
-  configManager: ConfigManager;
-  configPath?: string;
-  profile?: string;
-  url?: string;
-  token?: string;
-  fetchJson?: (url: string, init?: RequestInit) => Promise<unknown>;
-  balanceFetch?: typeof fetch;
-  flyApps?: () => Promise<import("./seller.js").SellerAppJson[]>;
-  commandRunner?: (args: string[], timeoutMs: number) => Promise<UiActionResult>;
-}
-
-type ConfigPatch = Record<string, unknown>;
-export type UiActionProgressStatus = "pending" | "running" | "succeeded" | "failed" | "skipped";
-export type UiActionProgressStepId = "check_registry" | "validate_config" | "create_deployment" | "wait_seller" | "apply_config" | "refresh_models" | "publish_registry";
-
-export interface UiActionProgressEvent {
-  stepId: UiActionProgressStepId;
-  status: UiActionProgressStatus;
-  title: string;
-  message?: string;
-  result?: UiActionResult;
-}
-
-type UiActionProgressReporter = (event: UiActionProgressEvent) => void;
-
-export class UiActions {
-  private readonly state: AdminUiState;
-  private readonly options: UiActionsOptions;
-  private readonly commandRunner?: (args: string[], timeoutMs: number) => Promise<UiActionResult>;
-
-  constructor(options: UiActionsOptions) {
-    this.options = options;
-    this.commandRunner = options.commandRunner;
-    this.state = new AdminUiState(options);
-  }
-
-  public async updateSellerConfig(id: string, patch: ConfigPatch): Promise<UiActionResult> {
-    const { entry, profileName, config } = await this.state.rawSellerConfig(id);
-    const next = mergeSellerConfigPatch(config, patch);
-    return this.withTempYaml(next, async (filePath) => {
-      const validateArgs = profileName
-        ? profileArgs(this.options, profileName, ["seller-config", "validate", "--file", filePath])
-        : sellerOperatorArgs(this.options, entry, ["seller-config", "validate", "--file", filePath]);
-      const validate = await this.runAdmin(validateArgs, 30000);
-      if (!validate.ok) {
-        return validate;
-      }
-      const putArgs = profileName
-        ? profileArgs(this.options, profileName, ["seller-config", "put", "--file", filePath])
-        : sellerOperatorArgs(this.options, entry, ["seller-config", "put", "--file", filePath]);
-      return this.runAdmin(putArgs, 30000);
-    });
-  }
-
-  public async createSeller(request: CreateSellerRequest, progress?: UiActionProgressReporter): Promise<{ result: UiActionResult; configValidation: UiActionResult; readiness?: UiActionResult; configPut?: UiActionResult; modelsRefresh?: UiActionResult; registryPublish?: UiActionResult; configPreview: Record<string, unknown>; publishRegistry: "completed" | "failed" | "skipped" }> {
-    const normalizedRequest = normalizeCreateSellerRequest(request);
-    const report = progress || (() => undefined);
-    validateCreateSellerRequest(normalizedRequest);
-    report({ stepId: "check_registry", status: "running", title: "Check bootstrap registry", message: "Checking seller name conflicts before creating Fly resources." });
-    const registry = await this.state.fetchRegistry();
-    const appName = normalizedRequest.app || normalizedRequest.sellerName;
-    const conflict = registry.sellers.find((seller) => {
-      return seller.id === normalizedRequest.sellerName || seller.name === normalizedRequest.sellerName || seller.app === appName;
-    });
-    if (conflict) {
-      throw new Error(`seller \`${normalizedRequest.sellerName}\` already exists in bootstrap registry`);
-    }
-    report({ stepId: "check_registry", status: "succeeded", title: "Check bootstrap registry", message: "No registry conflict found." });
-    const provider = this.options.configManager.getSellerProvider("fly");
-    const operatorSecret = normalizedRequest.operatorSecret || provider?.operator_secret;
-    const flyConfig = normalizedRequest.flyConfig;
-    if (!operatorSecret) {
-      throw new Error("operatorSecret is required in local admin config seller_providers.fly.operator_secret or request body");
-    }
-    if (!flyConfig) {
-      throw new Error("flyConfig is required before creating a seller deployment");
-    }
-    const configRequest = {
-      ...normalizedRequest,
-      operatorSecret
-    };
-
-    return this.withTempYaml(initialSellerConfig(configRequest, false), async (filePath) => {
-      const normalizedUpstreamMessage = normalizedRequest.upstreamUrl !== request.upstreamUrl
-        ? `Normalized upstreamUrl to ${normalizedRequest.upstreamUrl} before validation.`
-        : "";
-      report({ stepId: "validate_config", status: "running", title: "Validate seller config", message: normalizedUpstreamMessage || "Validating generated seller config." });
-      const configValidation = await this.runAdmin(globalArgs(this.options, ["seller-config", "validate", "--file", filePath]), 30000);
-      report({
-        stepId: "validate_config",
-        status: configValidation.ok ? "succeeded" : "failed",
-        title: "Validate seller config",
-        message: configValidation.ok ? `${normalizedUpstreamMessage} Seller config is valid.`.trim() : "Seller config validation failed.",
-        result: configValidation
-      });
-      if (!configValidation.ok) {
-        return {
-          result: configValidation,
-          configValidation,
-          configPreview: initialSellerConfig(configRequest, true),
-          publishRegistry: "skipped"
-        };
-      }
-      const args = [
-        "seller",
-        "create",
-        normalizedRequest.sellerName,
-        "--region",
-        normalizedRequest.region,
-        "--image",
-        normalizedRequest.image,
-        "--fly-config",
-        flyConfig,
-        "--initial-config",
-        filePath,
-        "--operator-secret",
-        operatorSecret
-      ];
-      if (normalizedRequest.app) {
-        args.push("--app", normalizedRequest.app);
-      }
-      if (normalizedRequest.dryRun) {
-        args.push("--dry-run");
-      }
-      report({ stepId: "create_deployment", status: "running", title: "Create Fly deployment", message: `Creating ${appName} in ${normalizedRequest.region}.` });
-      // Step 13: 调 CLI --json 路径, admin web 拿到 result.json (结构化) + 1.0.32 result.stdout (兼容 UI)
-      const result = await this.runAdminJson(globalArgs(this.options, args), 10 * 60 * 1000);
-      report({
-        stepId: "create_deployment",
-        status: result.ok ? "succeeded" : "failed",
-        title: "Create Fly deployment",
-        message: result.ok ? "Fly deployment command completed." : "Fly deployment command failed.",
-        result
-      });
-      let configPut: UiActionResult | undefined;
-      let modelsRefresh: UiActionResult | undefined;
-      let readiness: UiActionResult | undefined;
-      if (result.ok && !normalizedRequest.dryRun) {
-        readiness = await this.waitForSellerReady(appName, operatorSecret, report);
-        if (!readiness.ok) {
-          return {
-            result,
-            configValidation,
-            readiness,
-            configPreview: initialSellerConfig(configRequest, true),
-            publishRegistry: "skipped"
-          };
-        }
-        report({ stepId: "apply_config", status: "running", title: "Apply seller config", message: `Writing config to ${sellerOperatorUrl(appName)}.` });
-        configPut = await this.runAdmin(globalArgs(
-          {
-            ...this.options,
-            profile: undefined,
-            url: sellerOperatorUrl(appName),
-            token: operatorSecret
-          },
-          ["seller-config", "put", "--file", filePath]
-        ), 30000);
-        report({
-          stepId: "apply_config",
-          status: configPut.ok ? "succeeded" : "failed",
-          title: "Apply seller config",
-          message: configPut.ok ? "Seller config was written to the deployment." : "Seller config write failed.",
-          result: configPut
-        });
-        if (configPut.ok) {
-          report({ stepId: "refresh_models", status: "running", title: "Refresh upstream models", message: `Refreshing model catalog from ${sellerOperatorUrl(appName)}.` });
-          modelsRefresh = await this.refreshSellerModelsWithRetry(appName, operatorSecret, report);
-          report({
-            stepId: "refresh_models",
-            status: modelsRefresh.ok ? "succeeded" : "failed",
-            title: "Refresh upstream models",
-            message: modelsRefresh.ok ? "Upstream model catalog was refreshed." : "Upstream model refresh failed.",
-            result: modelsRefresh
-          });
-        }
-      } else if (normalizedRequest.dryRun) {
-        report({ stepId: "apply_config", status: "skipped", title: "Apply seller config", message: "Skipped because this is a dry run." });
-        report({ stepId: "refresh_models", status: "skipped", title: "Refresh upstream models", message: "Skipped because this is a dry run." });
-      }
-      const registryPublish = await this.publishCreatedSellerRegistryEntry({
-        registry,
-        request: normalizedRequest,
-        appName,
-        operatorSecret,
-        enabled: Boolean(result.ok && !normalizedRequest.dryRun && readiness?.ok && configPut?.ok && modelsRefresh?.ok),
-        report
-      });
-      if (registryPublish?.ok) {
-        this.options.configManager.setProfile(appName, {
-          url: sellerOperatorUrl(appName),
-          token: operatorSecret
-        });
-      }
-      return {
-        result,
-        configValidation,
-        readiness,
-        configPut,
-        modelsRefresh,
-        registryPublish,
-        configPreview: initialSellerConfig(configRequest, true),
-        publishRegistry: registryPublish ? (registryPublish.ok ? "completed" : "failed") : "skipped"
-      };
-    });
-  }
-
-  public async setRegistryStatus(id: string, status: "active" | "draining" | "offline"): Promise<UiActionResult> {
-    // Step 14 (v1.1): tb-admin ui 现在走 vendor-scoped /platform/sellers/{id}/status.
-    // 老路径 `tb-admin bootstrap sellers status` (operator-level) 保留给 platform operator 显式调用.
-    // Vendor client 用当前 active profile 的 token, 跟 admin web 鉴权一致.
-    const registry = await this.state.fetchManagedRegistry();
-    const target = registry.sellers.find((seller) => seller.id === id || seller.name === id || seller.app === id);
-    if (!target) {
-      throw new Error(`seller \`${id}\` not found in bootstrap registry`);
-    }
-    const { RegistryVendorClient } = await import("./vendor-client.js");
-    const profile = (this.state as unknown as { activeBootstrapProfile(): { profile?: { url?: string; token?: string } } }).activeBootstrapProfile();
-    const baseUrl = this.options.url || profile.profile?.url;
-    const token = this.options.token || profile.profile?.token;
-    if (!baseUrl || !token) {
-      throw new Error("No bootstrap profile found. Configure an admin profile or pass --url and --token.");
-    }
-    const client = new RegistryVendorClient(baseUrl, token);
-    const expectedVersion = Number.isFinite(registry.version) && registry.version > 0 ? registry.version : undefined;
-    const versionPart = expectedVersion === undefined ? "unversioned" : String(expectedVersion);
-    const idempotencyKey = `tb-admin-ui-${target.id}-${status}-${versionPart}-${Date.now()}`;
-    const response = await client.setSellerStatus(target.id, status, {
-      expectedVersion,
-      idempotencyKey
-    });
-    const newVersion = (response as { registry?: { version?: number } })?.registry?.version ?? (expectedVersion === undefined ? undefined : expectedVersion + 1);
-    return {
-      ok: true,
-      stdout: `Set seller ${target.id} status=${status}${newVersion === undefined ? "" : `: version=${newVersion}`} (vendor path)`,
-      stderr: "",
-      command: ["PUT", `/platform/sellers/${target.id}/status`, JSON.stringify({ status, ...(expectedVersion === undefined ? {} : { expectedVersion }) })],
-      json: response
-    };
-  }
-
-  public async deleteDeployment(id: string, confirm: boolean): Promise<UiActionResult> {
-    const registry = await this.state.fetchRegistry();
-    const target = registry.sellers.find((seller) => seller.id === id || seller.name === id || seller.app === id);
-    if (!target) {
-      throw new Error(`seller \`${id}\` not found in bootstrap registry`);
-    }
-    const app = target.app || target.id || target.name;
-    const args = ["seller", "remove", app, "--app", app];
-    if (!confirm) {
-      args.push("--dry-run");
-    }
-    // Step 13: 调 CLI --json 路径拿结构化 result.json (UI 暂仍按 1.0.32 用 stdout/stderr)
-    return this.runAdminJson(globalArgs(this.options, args), confirm ? 10 * 60 * 1000 : 30000);
-  }
-
-  private async withTempYaml<T>(document: unknown, callback: (filePath: string) => Promise<T>): Promise<T> {
-    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "tb-admin-ui-"));
-    const filePath = path.join(dir, "seller-config.yaml");
-    try {
-      fs.writeFileSync(filePath, YAML.dump(document, { lineWidth: 120, noRefs: true, sortKeys: false }), "utf8");
-      return await callback(filePath);
-    } finally {
-      fs.rmSync(dir, { recursive: true, force: true });
-    }
-  }
-
-  private async withTempJson<T>(document: unknown, callback: (filePath: string) => Promise<T>): Promise<T> {
-    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "tb-admin-ui-"));
-    const filePath = path.join(dir, "registry.json");
-    try {
-      fs.writeFileSync(filePath, JSON.stringify(document, null, 2), "utf8");
-      return await callback(filePath);
-    } finally {
-      fs.rmSync(dir, { recursive: true, force: true });
-    }
-  }
-
-  private runAdmin(args: string[], timeoutMs: number): Promise<UiActionResult> {
-    if (this.commandRunner) {
-      return this.commandRunner(args, timeoutMs);
-    }
-    return runTbAdmin(args, timeoutMs);
-  }
-
-  /**
-   * Step 13: 跟 `runAdmin` 一样 spawn tb-admin, 但 args 末尾追加 `--json` 并解析.
-   * 1.0.32 `commandRunner` 注入路径 (test mock): 解析成功就挂 json, 解析失败时 result.json
-   * 保持 undefined 但 ok 不变 (mock 拼的 stdout 经常不是 JSON, 强制失败会破坏所有老 test).
-   * 生产 spawn 路径走 runTbAdminJson, 那里解析失败才算 ok=false (真的 CLI 异常).
-   */
-  private runAdminJson(args: string[], timeoutMs: number): Promise<UiActionResult> {
-    if (this.commandRunner) {
-      return this.commandRunner([...args, "--json"], timeoutMs).then((result) => {
-        const parsed = parseJsonSafely(result.stdout);
-        return parsed === undefined ? { ...result } : { ...result, json: parsed };
-      });
-    }
-    return runTbAdminJson(args, timeoutMs);
-  }
-
-  private async waitForSellerReady(appName: string, operatorSecret: string, report: UiActionProgressReporter): Promise<UiActionResult> {
-    const maxAttempts = 18;
-    const delayMs = 5000;
-    let last: UiActionResult | undefined;
-    for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
-      report({
-        stepId: "wait_seller",
-        status: "running",
-        title: "Wait for seller service",
-        message: `Waiting for operator API to become ready (${attempt}/${maxAttempts}).`
-      });
-      last = await this.runAdmin(globalArgs(
-        {
-          ...this.options,
-          profile: undefined,
-          url: sellerOperatorUrl(appName),
-          token: operatorSecret
-        },
-        ["status"]
-      ), 30000);
-      if (last.ok) {
-        report({
-          stepId: "wait_seller",
-          status: "succeeded",
-          title: "Wait for seller service",
-          message: "Seller operator API is ready.",
-          result: last
-        });
-        return last;
-      }
-      if (attempt < maxAttempts) {
-        await sleep(delayMs);
-      }
-    }
-    const failed = last || {
-      ok: false,
-      stdout: "",
-      stderr: "seller service did not become ready",
-      command: []
-    };
-    report({
-      stepId: "wait_seller",
-      status: "failed",
-      title: "Wait for seller service",
-      message: "Seller operator API did not become ready before config write.",
-      result: failed
-    });
-    return failed;
-  }
-
-  private async refreshSellerModelsWithRetry(appName: string, operatorSecret: string, report: UiActionProgressReporter): Promise<UiActionResult> {
-    const maxAttempts = 6;
-    const baseDelayMs = 3000;
-    let last: UiActionResult | undefined;
-    for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
-      if (attempt > 1) {
-        report({
-          stepId: "refresh_models",
-          status: "running",
-          title: "Refresh upstream models",
-          message: `Retrying model catalog refresh (${attempt}/${maxAttempts}).`
-        });
-      }
-      last = await this.runAdmin(globalArgs(
-        {
-          ...this.options,
-          profile: undefined,
-          url: sellerOperatorUrl(appName),
-          token: operatorSecret
-        },
-        ["upstreams", "refresh", "--auto-models"]
-      ), 45000);
-      if (last.ok) {
-        return last;
-      }
-      if (attempt < maxAttempts) {
-        await sleep(baseDelayMs * attempt);
-      }
-    }
-    return last || {
-      ok: false,
-      stdout: "",
-      stderr: "model catalog refresh did not run",
-      command: ["tb-admin", "upstreams", "refresh", "--auto-models"]
-    };
-  }
-
-  private async publishCreatedSellerRegistryEntry(options: {
-    registry: SellerRegistryDocument;
-    request: CreateSellerRequest;
-    appName: string;
-    operatorSecret: string;
-    enabled: boolean;
-    report: UiActionProgressReporter;
-  }): Promise<UiActionResult | undefined> {
-    const { registry, request, appName, operatorSecret, enabled, report } = options;
-    if (!enabled) {
-      report({
-        stepId: "publish_registry",
-        status: "skipped",
-        title: "Publish bootstrap registry",
-        message: "Skipped because the deployment workflow did not complete successfully."
-      });
-      return undefined;
-    }
-
-    report({
-      stepId: "publish_registry",
-      status: "running",
-      title: "Update bootstrap registry",
-      message: `Adding ${request.sellerName} to bootstrap registry.`
-    });
-
-    let entry: SellerRegistryEntry;
-    try {
-      const upstreams = await this.fetchSellerOperatorJson(appName, operatorSecret, "/operator/admin/upstreams");
-      const service = await this.fetchSellerOperatorJson(appName, operatorSecret, "/operator/admin/service");
-      const manifest = await this.fetchSellerOperatorJsonOptional(appName, operatorSecret, "/manifest");
-      entry = registryEntryFromCreatedSeller(request, appName, upstreams, service, manifest);
-    } catch (err: any) {
-      const failed = {
-        ok: false,
-        stdout: "",
-        stderr: redactSensitive(err.message || "failed to build bootstrap registry entry"),
-        command: ["fetch", `${sellerOperatorUrl(appName)}/operator/admin/upstreams`]
-      };
-      report({
-        stepId: "publish_registry",
-        status: "failed",
-        title: "Update bootstrap registry",
-        message: "Failed to read seller metadata for bootstrap registry.",
-        result: failed
-      });
-      return failed;
-    }
-    return this.withTempJson(entry, async (filePath) => {
-      const put = await this.runAdmin(globalArgs(this.options, [
-        "bootstrap",
-        "sellers",
-        "add",
-        "--file",
-        filePath,
-        "--expect-version",
-        String(registry.version)
-      ]), 30000);
-      report({
-        stepId: "publish_registry",
-        status: put.ok ? "succeeded" : "failed",
-        title: "Update bootstrap registry",
-        message: put.ok ? "Bootstrap registry entry was added. Run registry publish to update R2." : "Bootstrap registry update failed.",
-        result: put
-      });
-      return put;
-    });
-  }
-
-  private async fetchSellerOperatorJson(appName: string, operatorSecret: string, pathName: string): Promise<Record<string, unknown>> {
-    const fetchJson = this.options.fetchJson || defaultFetchJson;
-    const response = await fetchJson(`${sellerOperatorUrl(appName)}${pathName}`, {
-      headers: { Authorization: `Bearer ${operatorSecret}` }
-    });
-    if (response && typeof response === "object" && !Array.isArray(response)) {
-      return response as Record<string, unknown>;
-    }
-    return {};
-  }
-
-  private async fetchSellerOperatorJsonOptional(appName: string, operatorSecret: string, pathName: string): Promise<Record<string, unknown>> {
-    try {
-      return await this.fetchSellerOperatorJson(appName, operatorSecret, pathName);
-    } catch {
-      return {};
-    }
-  }
-}
-
-function registryEntryFromCreatedSeller(
-  request: CreateSellerRequest,
-  appName: string,
-  upstreams: Record<string, unknown>,
-  service: Record<string, unknown>,
-  manifest: Record<string, unknown>
-): SellerRegistryEntry {
-  const wrappedUpstreams = upstreamPayload(upstreams);
-  const models = modelIdsFrom(upstreams.models)
-    || modelIdsFrom(wrappedUpstreams?.models)
-    || modelIdsFrom(service.models)
-    || modelIdsFrom(manifest.models);
-  if (!models || models.length === 0) {
-    throw new Error("seller operator upstreams did not return models for bootstrap registry");
-  }
-  const supportedProtocols = supportedProtocolsFrom(service.supportedProtocols)
-    || supportedProtocolsFrom(upstreams.supportedProtocols)
-    || supportedProtocolsFrom(wrappedUpstreams?.supportedProtocols)
-    || supportedProtocolsFrom(manifest.supportedProtocols)
-    || supportedProtocolsFrom(manifest.supported_protocols)
-    || ["chat_completions"];
-  const paymentMethods = paymentMethodsFromRequest(request);
-  return {
-    id: appName,
-    name: appName,
-    app: appName,
-    url: sellerOperatorUrl(appName),
-    status: "active",
-    region: stringValue(request.region),
-    modelsCount: models.length || undefined,
-    sampleModels: models.slice(0, 5),
-    models,
-    supportedProtocols,
-    paymentMethods,
-    recommendedFor: models.slice(0, 5)
-  };
-}
-
-function modelIdsFrom(value: unknown): string[] | undefined {
-  if (!Array.isArray(value)) {
-    return undefined;
-  }
-  return Array.from(new Set(value.map((entry) => {
-    if (typeof entry === "string") {
-      return entry;
-    }
-    if (entry && typeof entry === "object" && "id" in entry) {
-      const id = (entry as { id?: unknown }).id;
-      return typeof id === "string" && id.trim() ? id.trim() : undefined;
-    }
-    return undefined;
-  }).filter((entry): entry is string => Boolean(entry))));
-}
-
-function upstreamPayload(value: Record<string, unknown>): Record<string, unknown> | undefined {
-  const wrapped = value.upstreams;
-  if (Array.isArray(wrapped)) {
-    return objectValue(wrapped[0]);
-  }
-  return objectValue(wrapped);
-}
-
-function supportedProtocolsFrom(value: unknown): string[] | undefined {
-  if (!Array.isArray(value)) {
-    return undefined;
-  }
-  const protocols = value.map((entry) => stringValue(entry)).filter((entry): entry is string => Boolean(entry));
-  return protocols.length > 0 ? Array.from(new Set(protocols)) : undefined;
-}
-
-export function runTbAdmin(args: string[], timeoutMs: number): Promise<UiActionResult> {
-  const entry = adminEntryPath();
-  const command = [process.execPath, entry, ...args];
-  return new Promise((resolve) => {
-    const child = spawn(process.execPath, [entry, ...args], {
-      shell: false,
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    const timer = setTimeout(() => {
-      child.kill("SIGTERM");
-    }, timeoutMs);
-    let stdout = "";
-    let stderr = "";
-    child.stdout.on("data", (chunk) => {
-      stdout += chunk.toString();
-    });
-    child.stderr.on("data", (chunk) => {
-      stderr += chunk.toString();
-    });
-    child.on("close", (code) => {
-      clearTimeout(timer);
-      resolve({
-        ok: code === 0,
-        stdout: redactSensitive(stdout),
-        stderr: redactSensitive(stderr),
-        command: redactCommand(command)
-      });
-    });
-  });
-}
-
-/**
- * Step 13 (admin web -> CLI --json):
- * 跟 `runTbAdmin` 一样 spawn `tb-admin <args>`, **但 args 自动追加 `--json` flag**,
- * 把 stdout 当 JSON 解析后挂在 result.json.
- *
- * 1.0.32 UI 调用方继续看 `result.stdout` / `result.ok` / `result.stderr`, 不破坏体验.
- * UI 改造 (Step 14) 时改用 `result.json` 取结构化数据.
- *
- * 解析失败时 (CLI 输出不是 JSON, 比如老版本 CLI 没 --json), json 字段 = undefined,
- * stdout 仍是原始字符串, ok=false (CLI exit 0 但 stdout 不可解析视为可恢复错).
- */
-export function runTbAdminJson(args: string[], timeoutMs: number): Promise<UiActionResult> {
-  const jsonArgs = [...args, "--json"];
-  return runTbAdmin(jsonArgs, timeoutMs).then((result) => {
-    const parsed = parseJsonSafely(result.stdout);
-    if (parsed === undefined) {
-      return {
-        ...result,
-        ok: false,
-        stderr: result.stderr
-          ? `${result.stderr}\n[Step 13] failed to parse --json output`
-          : `[Step 13] failed to parse --json output`
-      };
-    }
-    return { ...result, json: parsed };
-  });
-}
-
-function parseJsonSafely(text: string): unknown | undefined {
-  if (!text || text.trim().length === 0) {
-    return undefined;
-  }
-  try {
-    return JSON.parse(text);
-  } catch {
-    return undefined;
-  }
-}
-
-async function defaultFetchJson(url: string, init?: RequestInit): Promise<unknown> {
-  const response = await fetch(url, init);
-  if (!response.ok) {
-    const text = await response.text();
-    throw new Error(`HTTP Error ${response.status}: ${redactSensitive(text || response.statusText)}`);
-  }
-  const text = await response.text();
-  return text ? JSON.parse(text) : {};
-}
-
-function adminEntryPath(): string {
-  const current = process.argv[1] || "";
-  if ((path.basename(current) === "tb-admin" || path.basename(current) === "tb-admin.js") && fs.existsSync(current)) {
-    return current;
-  }
-  const candidates = [
-    path.resolve(process.cwd(), "packages/admin-cli/bin/tb-admin.js"),
-    path.resolve(process.cwd(), "bin/tb-admin.js")
-  ];
-  return candidates.find((candidate) => fs.existsSync(candidate)) || candidates[candidates.length - 1];
-}
-
-function globalArgs(options: UiActionsOptions, args: string[]): string[] {
-  const output: string[] = [];
-  if (options.configPath) {
-    output.push("--config", options.configPath);
-  }
-  if (options.profile) {
-    output.push("--profile", options.profile);
-  }
-  if (options.url) {
-    output.push("--url", options.url);
-  }
-  if (options.token) {
-    output.push("--token", options.token);
-  }
-  output.push(...args);
-  return output;
-}
-
-function profileArgs(options: UiActionsOptions, profileName: string, args: string[]): string[] {
-  return globalArgs({ ...options, profile: profileName, url: undefined, token: undefined }, args);
-}
-
-function sellerOperatorArgs(options: UiActionsOptions, entry: SellerRegistryEntry, args: string[]): string[] {
-  const operatorSecret = options.configManager.getSellerProvider("fly")?.operator_secret;
-  if (!operatorSecret) {
-    throw new Error(`seller \`${entry.id}\` has no local profile and seller_providers.fly.operator_secret is not configured`);
-  }
-  return globalArgs({
-    ...options,
-    profile: undefined,
-    url: entry.url,
-    token: operatorSecret
-  }, args);
-}
-
-function mergeSellerConfigPatch(config: Record<string, unknown>, patch: ConfigPatch): Record<string, unknown> {
-  const next = { ...config };
-  copyIfPresent(next, patch, "upstreamUrl");
-  copyIfPresent(next, patch, "upstreamApiKey");
-  applyBalanceProbePatch(next, patch);
-  copyIfPresent(next, patch, "upstreamBalanceUrl");
-  copyIfPresent(next, patch, "upstreamUserId");
-  copyIfPresent(next, patch, "upstreamRechargeUrl");
-  copyIfPresent(next, patch, "markupRatio");
-  copyIfPresent(next, patch, "discountRatio");
-  copyIfPresent(next, patch, "maxConnections");
-  copyIfPresent(next, patch, "maxQueueDepth");
-  if (Array.isArray(patch.models)) {
-    next.models = patch.models;
-  }
-  if (patch.modelAliases && typeof patch.modelAliases === "object" && !Array.isArray(patch.modelAliases)) {
-    next.modelAliases = patch.modelAliases;
-  }
-  return next;
-}
-
-function copyIfPresent(target: Record<string, unknown>, source: ConfigPatch, key: string): void {
-  if (source[key] !== undefined) {
-    target[key] = source[key];
-  }
-}
-
-function validateCreateSellerRequest(request: CreateSellerRequest): void {
-  requireString(request.sellerName, "sellerName");
-  requireString(request.region, "region");
-  requireString(request.image, "image");
-  requireString(request.upstreamWebsite, "upstreamWebsite");
-  requireString(request.upstreamUrl, "upstreamUrl");
-  requireString(request.upstreamApiKey, "upstreamApiKey");
-  if (stringValue(request.upstreamBalanceProbeTemplate) !== "none") {
-    requireString(balanceProbeUrl(request), "upstreamBalanceProbeUrl");
-  }
-  requirePositiveInteger(request.maxConnections, "maxConnections");
-  requirePositiveInteger(request.maxQueueDepth, "maxQueueDepth");
-  requireFiniteNumber(request.markupRatio, "markupRatio");
-  requireFiniteNumber(request.discountRatio, "discountRatio");
-  const paymentMethods = paymentMethodsFromRequest(request);
-  const invalidPaymentMethod = paymentMethods.find((method) => !["clawtip", "mock"].includes(method));
-  if (invalidPaymentMethod) {
-    throw new Error("paymentMethods must contain only clawtip or mock");
-  }
-  if (paymentMethods.includes("clawtip")) {
-    requireString(request.clawtipPayTo, "clawtipPayTo");
-    requireString(request.clawtipSm4KeyBase64, "clawtipSm4KeyBase64");
-  }
-}
-
-function normalizeCreateSellerRequest(request: CreateSellerRequest): CreateSellerRequest {
-  const upstreamUrl = stripTrailingV1(request.upstreamUrl);
-  const app = stringValue(request.app) || request.sellerName;
-  const normalized = {
-    ...request,
-    app,
-    image: stringValue(request.image) || "registry.fly.io/tb-seller:latest",
-    flyConfig: stringValue(request.flyConfig) || "deploy/fly.io/fly.tb-seller.toml",
-    upstreamUrl
-  };
-  if (paymentMethodsFromRequest(normalized).includes("clawtip")) {
-    normalized.clawtipSkillSlug = stringValue(normalized.clawtipSkillSlug) || app;
-    normalized.clawtipSkillId = stringValue(normalized.clawtipSkillId) || `si-${app}`;
-    normalized.clawtipDescription = stringValue(normalized.clawtipDescription) || `TokenBuddy Seller ${request.sellerName}`;
-    normalized.clawtipResourceUrl = stringValue(normalized.clawtipResourceUrl) || sellerOperatorUrl(app);
-    normalized.clawtipActivationFeeFen = Number(normalized.clawtipActivationFeeFen || 1);
-    normalized.clawtipMicrosPerFen = Number(normalized.clawtipMicrosPerFen || 10000);
-  }
-  return normalized;
-}
-
-function initialSellerConfig(request: CreateSellerRequest, masked: boolean): Record<string, unknown> {
-  const upstreamBalanceProbe = balanceProbeConfigFromRequest(request);
-  const upstreamBalanceUrl = balanceProbeUrl(request);
-  const upstreamUserId = balanceProbeUserId(request);
-  const upstreamRechargeUrl = balanceProbeRechargeUrl(request);
-  const paymentConfig = paymentConfigFromRequest(request, masked);
-  return {
-    sellerId: request.app || request.sellerName,
-    manifestVersion: "manifest.v1",
-    upstreamUrl: request.upstreamUrl,
-    upstreamApiKey: masked ? "********" : request.upstreamApiKey,
-    upstreamWebsite: request.upstreamWebsite,
-    upstreamBalanceUrl,
-    upstreamUserId,
-    upstreamRechargeUrl,
-    upstreamBalanceProbe,
-    maxConnections: request.maxConnections,
-    maxQueueDepth: request.maxQueueDepth,
-    markupRatio: request.markupRatio,
-    discountRatio: request.discountRatio,
-    operatorSecret: masked ? "********" : stringValue(request.operatorSecret),
-    ...paymentConfig
-  };
-}
-
-function paymentConfigFromRequest(request: CreateSellerRequest, masked: boolean): Record<string, unknown> {
-  const paymentMethods = paymentMethodsFromRequest(request);
-  const config: Record<string, unknown> = {
-    allowMock: paymentMethods.includes("mock")
-  };
-  if (!paymentMethods.includes("clawtip")) {
-    return config;
-  }
-  return {
-    ...config,
-    clawtip: {
-      payTo: stringValue(request.clawtipPayTo),
-      sm4KeyBase64: masked ? "********" : stringValue(request.clawtipSm4KeyBase64),
-      skillSlug: stringValue(request.clawtipSkillSlug),
-      skillId: stringValue(request.clawtipSkillId),
-      description: stringValue(request.clawtipDescription),
-      resourceUrl: stringValue(request.clawtipResourceUrl),
-      activationFeeFen: Number(request.clawtipActivationFeeFen),
-      microsPerFen: Number(request.clawtipMicrosPerFen)
-    }
-  };
-}
-
-function paymentMethodsFromRequest(request: CreateSellerRequest): string[] {
-  const values = request.paymentMethods !== undefined
-    ? arrayStringValues(request.paymentMethods)
-    : legacyPaymentMethodsFromRequest(request);
-  return Array.from(new Set(values));
-}
-
-function legacyPaymentMethodsFromRequest(request: CreateSellerRequest): string[] {
-  const paymentMethod = stringValue(request.paymentMethod);
-  if (paymentMethod === "none") {
-    return [];
-  }
-  return [paymentMethod || "clawtip"];
-}
-
-function arrayStringValues(value: unknown): string[] {
-  if (Array.isArray(value)) {
-    return value.map((entry) => stringValue(entry)).filter((entry): entry is string => Boolean(entry));
-  }
-  const single = stringValue(value);
-  return single ? single.split(",").map((entry) => entry.trim()).filter(Boolean) : [];
-}
-
-function applyBalanceProbePatch(target: Record<string, unknown>, patch: ConfigPatch): void {
-  const template = stringValue(patch.upstreamBalanceProbeTemplate);
-  const url = stringValue(patch.upstreamBalanceProbeUrl) || stringValue(patch.upstreamBalanceUrl);
-  const userId = stringValue(patch.upstreamBalanceProbeUserId) || stringValue(patch.upstreamUserId);
-  const rechargeUrl = stringValue(patch.upstreamBalanceProbeRechargeUrl) || stringValue(patch.upstreamRechargeUrl);
-  if (template === undefined && url === undefined && userId === undefined && rechargeUrl === undefined) {
-    return;
-  }
-  const current = objectValue(target.upstreamBalanceProbe) || {};
-  target.upstreamBalanceProbe = {
-    ...current,
-    ...(template !== undefined ? { template } : {}),
-    ...(url !== undefined ? { url } : {}),
-    ...(userId !== undefined ? { userId } : {}),
-    ...(rechargeUrl !== undefined ? { rechargeUrl } : {})
-  };
-  if (url !== undefined) {
-    target.upstreamBalanceUrl = url;
-  }
-  if (userId !== undefined) {
-    target.upstreamUserId = userId;
-  }
-  if (rechargeUrl !== undefined) {
-    target.upstreamRechargeUrl = rechargeUrl;
-  }
-}
-
-function balanceProbeConfigFromRequest(request: CreateSellerRequest): Record<string, unknown> {
-  return {
-    template: stringValue(request.upstreamBalanceProbeTemplate) || "auto",
-    url: balanceProbeUrl(request),
-    userId: balanceProbeUserId(request),
-    rechargeUrl: balanceProbeRechargeUrl(request)
-  };
-}
-
-function balanceProbeUrl(request: CreateSellerRequest): string | undefined {
-  const explicit = stringValue(request.upstreamBalanceProbeUrl) || stringValue(request.upstreamBalanceUrl);
-  if (explicit) {
-    return explicit;
-  }
-  const template = stringValue(request.upstreamBalanceProbeTemplate) || "auto";
-  const upstreamUrl = stringValue(request.upstreamUrl);
-  const host = hostName(upstreamUrl);
-  if (template === "none") {
-    return undefined;
-  }
-  if (template === "openrouter") {
-    return "https://openrouter.ai/api/v1/credits";
-  }
-  if (template === "deepseek") {
-    return "https://api.deepseek.com/user/balance";
-  }
-  if (template === "stepfun") {
-    return "https://api.stepfun.com/v1/accounts";
-  }
-  if (template === "novita") {
-    return "https://api.novita.ai/v3/user/balance";
-  }
-  if (template === "siliconflow") {
-    return host.endsWith(".com") ? "https://api.siliconflow.com/v1/user/info" : "https://api.siliconflow.cn/v1/user/info";
-  }
-  if (template === "usage_generic") {
-    return upstreamUrl ? usageUrl(upstreamUrl) : undefined;
-  }
-  if (template === "auto") {
-    if (host === "api.deepseek.com") {
-      return "https://api.deepseek.com/user/balance";
-    }
-    if (host === "api.stepfun.ai" || host === "api.stepfun.com") {
-      return "https://api.stepfun.com/v1/accounts";
-    }
-    if (host === "api.siliconflow.cn") {
-      return "https://api.siliconflow.cn/v1/user/info";
-    }
-    if (host === "api.siliconflow.com") {
-      return "https://api.siliconflow.com/v1/user/info";
-    }
-    if (host === "openrouter.ai") {
-      return "https://openrouter.ai/api/v1/credits";
-    }
-    if (host === "api.novita.ai") {
-      return "https://api.novita.ai/v3/user/balance";
-    }
-    return upstreamUrl ? usageUrl(upstreamUrl) : undefined;
-  }
-  return undefined;
-}
-
-function balanceProbeUserId(request: CreateSellerRequest): string | undefined {
-  return stringValue(request.upstreamBalanceProbeUserId) || stringValue(request.upstreamUserId);
-}
-
-function balanceProbeRechargeUrl(request: CreateSellerRequest): string | undefined {
-  return stringValue(request.upstreamBalanceProbeRechargeUrl) || stringValue(request.upstreamRechargeUrl);
-}
-
-function stringValue(value: unknown): string | undefined {
-  return typeof value === "string" && value.trim() ? value.trim() : undefined;
-}
-
-function objectValue(value: unknown): Record<string, unknown> | undefined {
-  return value && typeof value === "object" && !Array.isArray(value)
-    ? value as Record<string, unknown>
-    : undefined;
-}
-
-function stripTrailingV1(value: string): string {
-  return String(value || "").trim().replace(/\/v1\/?$/i, "");
-}
-
-function usageUrl(value: string): string {
-  const base = String(value || "").trim().replace(/\/+$/, "");
-  return /\/v1$/i.test(base) ? `${base}/usage` : `${base}/v1/usage`;
-}
-
-function hostName(value: unknown): string {
-  try {
-    return new URL(String(value || "")).hostname.toLowerCase();
-  } catch {
-    return "";
-  }
-}
-
-function sellerOperatorUrl(appName: string): string {
-  return `https://${appName}.fly.dev`;
-}
-
-function sleep(ms: number): Promise<void> {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
-function requireString(value: unknown, field: string): void {
-  if (typeof value !== "string" || !value.trim()) {
-    throw new Error(`${field} is required`);
-  }
-}
-
-function requirePositiveInteger(value: unknown, field: string): void {
-  const parsed = Number(value);
-  if (!Number.isInteger(parsed) || parsed < 1) {
-    throw new Error(`${field} must be >= 1`);
-  }
-}
-
-function requireFiniteNumber(value: unknown, field: string): void {
-  if (!Number.isFinite(Number(value))) {
-    throw new Error(`${field} must be a number`);
-  }
-}
-
-function redactCommand(command: string[]): string[] {
-  return command.map((part, index) => {
-    const prev = command[index - 1];
-    if (prev === "--operator-secret" || prev === "--token" || prev === "--api-key") {
-      return "********";
-    }
-    return redactSensitive(part);
-  });
-}
-
-function redactSensitive(value: string): string {
-  return value.replace(/(sk-[A-Za-z0-9_-]+)/g, "********")
-    .replace(/(operatorSecret|upstreamApiKey|token|apiKey|sm4KeyBase64|clawtipSm4KeyBase64)["'=:\s]+([^"',\s]+)/gi, "$1=********");
-}