@tokenbuddy/tb-admin 1.0.36 → 1.0.38

package/src/ui-state.ts

@@ -1,1318 +0,0 @@
-import { AdminClient } from "./client.js";
-import { ConfigManager, type AdminProfile } from "./config.js";
-import type { SellerRegistryDocument, SellerRegistryEntry } from "./bootstrap-registry.js";
-import {
-  BalanceProbeCache,
-  type BalanceSnapshot,
-  probeUpstreamBalance
-} from "./upstream-balance-probe.js";
-
-export type RegistryStatus = "active" | "draining" | "offline" | "pending" | "unknown";
-export type NodeStatus = RegistryStatus | "busy_capacity" | "auth_unknown";
-export type UpstreamStatus = "healthy" | "degraded" | "unhealthy" | "unknown";
-export type PublishStatus = "checking" | "published" | "unpublished" | "registry_only" | "unknown";
-export type DetailStatus = "pending" | "queued" | "loading" | "fresh" | "stale" | "error" | "skipped";
-/**
- * Step 13 v1.1: dataSource 标记一行 seller 在 fly.io apps list vs
- * registry /registry/sellers 两个独立查询里的出现情况. UI 据此决定
- * 标红 / 立即下线 / Apply 按钮. 详细见
- * docs/processes/seller-fleet-data-sources.md.
- */
-export type SellerDataSource = "fly" | "registry" | "both";
-
-export interface SellerRow {
-  id: string;
-  name: string;
-  description?: string;
-  app?: string;
-  profile?: string;
-  url: string;
-  registryStatus: RegistryStatus;
-  nodeStatus: NodeStatus;
-  region?: string;
-  upstreamDomain: string;
-  upstreamStatus: UpstreamStatus;
-  upstreamBalanceUsdMicros?: number;
-  upstreamBalanceCurrency?: string;
-  upstreamBalanceSource?: string;
-  upstreamBalanceFetchedAt?: string;
-  upstreamBalanceError?: string;
-  upstreamRechargeUrl?: string;
-  discountRatio?: number;
-  capacityUsed?: number;
-  capacityLimit?: number;
-  resourceCpuPercent?: number;
-  resourceMemoryPercent?: number;
-  resourceMemoryRssMb?: number;
-  resourceMemoryLimitMb?: number;
-  ttftMs?: number;
-  avgInferenceMs?: number;
-  lastInferenceMs?: number;
-  avgTokensPerSecond?: number;
-  lastTokensPerSecond?: number;
-  latencySamples?: number;
-  lastSwitchAt?: string;
-  modelsCount?: number;
-  specs?: {
-    cpuKind?: string;
-    cpuCores?: number;
-    memoryMb?: number;
-    memoryGb?: number;
-    machines?: number;
-    runningMachines?: number;
-    volumeGb?: number;
-    region?: string;
-    regions?: string[];
-    modelsCount?: number;
-  };
-  error?: string;
-  /**
-   * Step 13 v1.1: 数据源标记. UI 据此决定:
-   *   - "fly"      → 灰点 + 「未发布」+ Apply 按钮 (走 vendor-bootstrap stage)
-   *   - "registry" → 整行标红 + 立即下线按钮 (registry-only = 重大事故)
-   *   - "both"     → 正常色 + Activate / Drain 走 vendor path
-   */
-  dataSource: SellerDataSource;
-  /**
-   * Step 13 v1.1: 标红告警 (registry-only). UI 整行用 .registry-alert
-   * class 标红, tooltip 提示事故 + 立即下线.
-   */
-  registryAlert?: boolean;
-  /** Step 13 v1.1: 标红原因 (中文短句, UI tooltip 显示). */
-  alertReason?: string;
-  /** Step 13 v1.1: "未发布" 提示 (fly-only 行的 publishHint 按钮 caption). */
-  publishHint?: string;
-  /**
-   * Step 13 v1.1: 立即下线按钮 caption (registry-only 行). 文案
-   * 必须含 "registry-only" 让用户知道这**不**删 fly app. 详见 spec.
-   */
-  removeHint?: string;
-  /**
-   * Step 13 v1.1: 关联的 fly app (raw, 来源 flyctl apps list --json).
-   * fly-only 行一定有值; both 行有值; registry-only 行 undefined.
-   */
-  flyApp?: { name: string; status?: string; owner?: string; latestDeployAt?: string };
-  publishStatus?: PublishStatus;
-  detailStatus?: DetailStatus;
-  detailUpdatedAt?: string;
-  detailNextRefreshAt?: string;
-}
-
-export interface SellerModelRow {
-  upstreamModel: string;
-  billingModel: string;
-  enabled: boolean;
-  configModel?: Record<string, unknown>;
-  inputPrice?: string;
-  outputPrice?: string;
-  ttftMs?: number;
-  avgInferenceMs?: number;
-  avgTokensPerSecond?: number;
-  latencySamples?: number;
-}
-
-export interface SellerDetail {
-  row: SellerRow;
-  configuration: {
-    registryStatus: string;
-    region?: string;
-    upstreamUrl?: string;
-    upstreamApiKeyMasked?: string;
-    upstreamStatus: UpstreamStatus;
-    upstreamBalance?: string;
-    upstreamBalanceSource?: string;
-    upstreamBalanceFetchedAt?: string;
-    upstreamBalanceError?: string;
-    upstreamBalanceProbeTemplate?: string;
-    upstreamBalanceProbeUrl?: string;
-    upstreamBalanceProbeUserId?: string;
-    upstreamBalanceProbeRechargeUrl?: string;
-    upstreamBalanceUrl?: string;
-    upstreamUserId?: string;
-    upstreamRechargeUrl?: string;
-    markupRatio?: number;
-    discountRatio?: number;
-    maxConnections?: number;
-    maxQueueDepth?: number;
-  };
-  models: SellerModelRow[];
-}
-
-export interface BootstrapSummary {
-  status: "available" | "unavailable";
-  url?: string;
-  profile?: string;
-  registryVersion?: number;
-  registryUpdatedAt?: string;
-  sellerEntries: number;
-  defaultSeller?: string;
-  regions: string[];
-  error?: string;
-}
-
-export interface BootstrapConfigSummary {
-  status: "available" | "unavailable";
-  sellerRegistryPath?: string;
-  bindHost?: string;
-  bindPort?: number;
-  allowLocalSellerUrls?: boolean;
-  clawtip?: {
-    payToMasked?: string;
-    sm4KeyMasked?: string;
-    skillSlug?: string;
-    skillId?: string;
-    description?: string;
-    resourceUrl?: string;
-    activationFeeFen?: number;
-    microsPerFen?: number;
-  };
-  error?: string;
-}
-
-export interface AdminUiStateOptions {
-  configManager: ConfigManager;
-  configPath?: string;
-  profile?: string;
-  url?: string;
-  token?: string;
-  fetchJson?: (url: string, init?: RequestInit) => Promise<unknown>;
-  balanceFetch?: typeof fetch;
-  /**
-   * Step 13 v1.1: flyctl apps list --json 替代. 默认调 seller.ts 的
-   * runFlyctlJson 真 spawn flyctl. 测试用 closure 注入 fake 数据.
-   * 返回的 SellerAppJson 形如 { name, status, owner, latestDeployAt }.
-   */
-  flyApps?: () => Promise<import("./seller.js").SellerAppJson[]>;
-  flyMachineSpecs?: (appName: string) => Promise<import("./seller.js").SellerMachineSpecs | undefined>;
-}
-
-interface ProfileMatch {
-  name?: string;
-  profile?: AdminProfile;
-  localProfile?: boolean;
-}
-
-interface SellerSnapshot {
-  row: SellerRow;
-  status?: any;
-  service?: any;
-  upstreams?: any;
-  config?: any;
-  balance?: BalanceSnapshot;
-}
-
-interface SellerTarget {
-  entry: SellerRegistryEntry;
-  flyApp?: import("./seller.js").SellerAppJson;
-  dataSource: SellerDataSource;
-}
-
-export class AdminUiState {
-  private readonly configManager: ConfigManager;
-  private readonly options: AdminUiStateOptions;
-  private readonly fetchJson: (url: string, init?: RequestInit) => Promise<unknown>;
-  private readonly balanceCache = new BalanceProbeCache();
-  private readonly machineSpecsCache = new Map<string, import("./seller.js").SellerMachineSpecs | undefined>();
-
-  constructor(options: AdminUiStateOptions) {
-    this.options = options;
-    this.configManager = options.configPath ? new ConfigManager(options.configPath) : options.configManager;
-    this.fetchJson = options.fetchJson || defaultFetchJson;
-  }
-
-  public async bootstrap(): Promise<BootstrapSummary> {
-    try {
-      const document = await this.fetchRegistry();
-      const profile = this.activeBootstrapProfile();
-      return {
-        status: "available",
-        url: profile.profile?.url || this.options.url,
-        profile: profile.name,
-        registryVersion: document.version,
-        registryUpdatedAt: document.updatedAt,
-        sellerEntries: document.sellers.length,
-        defaultSeller: document.defaultSeller,
-        regions: Array.from(new Set(document.sellers.map((seller) => seller.region).filter((region): region is string => Boolean(region)))).sort()
-      };
-    } catch (err: any) {
-      const profile = this.activeBootstrapProfile();
-      return {
-        status: "unavailable",
-        url: profile.profile?.url || this.options.url,
-        profile: profile.name,
-        sellerEntries: 0,
-        regions: [],
-        error: err.message
-      };
-    }
-  }
-
-  public async bootstrapConfig(): Promise<BootstrapConfigSummary> {
-    try {
-      const profile = this.activeBootstrapProfile();
-      if (!profile.profile) {
-        throw new Error("No bootstrap profile found. Configure an admin profile or pass --url and --token.");
-      }
-      const client = new AdminClient(profile.profile.url, profile.profile.token);
-      const config = await client.get("/operator/config");
-      return {
-        status: "available",
-        sellerRegistryPath: stringValue(config.sellerRegistryPath),
-        bindHost: stringValue(config.bind?.host),
-        bindPort: numberValue(config.bind?.port),
-        allowLocalSellerUrls: Boolean(config.allowLocalSellerUrls),
-        clawtip: {
-          payToMasked: maskSecret(config.clawtip?.payTo),
-          sm4KeyMasked: maskSecret(config.clawtip?.sm4KeyBase64),
-          skillSlug: stringValue(config.clawtip?.skillSlug),
-          skillId: stringValue(config.clawtip?.skillId),
-          description: stringValue(config.clawtip?.description),
-          resourceUrl: stringValue(config.clawtip?.resourceUrl),
-          activationFeeFen: numberValue(config.clawtip?.activationFeeFen),
-          microsPerFen: numberValue(config.clawtip?.microsPerFen)
-        }
-      };
-    } catch (err: any) {
-      return {
-        status: "unavailable",
-        error: err.message
-      };
-    }
-  }
-
-  /**
-   * Step 13 v1.1: 双源 seller list.
-   *   - flyApps: flyctl apps list --json (走 fly token)
-   *   - fetchRegistry: GET <registry>/registry/sellers (走 vendor key)
-   * **不**做 union / dedupe / merge. 渲染时按 (fly ∩ registry / fly /
-   * registry) 标 dataSource, registry-only 行整行标红. 详见
-   * docs/processes/seller-fleet-data-sources.md.
-   */
-  public async sellers(): Promise<SellerRow[]> {
-    const [flyApps, registryDoc] = await Promise.all([
-      this.fetchFlyApps().catch((err: any) => {
-        return { __error: err.message } as any;
-      }),
-      this.fetchManagedRegistry().catch((err: any) => {
-        return { __error: err.message, sellers: [] } as any;
-      })
-    ]);
-
-    // Step 13: 算两个索引.
-    //   flyByName: app.name -> SellerAppJson (UI 用, 不会重复)
-    //   registryByKey: entry.id / entry.app -> entry (UI 用, 不会重复)
-    // 行数 = max(fly 数量, registry 数量); 双源都有时合并到 1 行.
-    const flyByName = new Map<string, import("./seller.js").SellerAppJson>();
-    if (Array.isArray(flyApps)) {
-      for (const app of flyApps) {
-        if (app?.name) {
-          flyByName.set(app.name, app);
-        }
-      }
-    }
-    const registryById = new Map<string, SellerRegistryEntry>();
-    const registryByApp = new Map<string, SellerRegistryEntry>();
-    for (const entry of registryDoc.sellers || []) {
-      if (entry.id) registryById.set(entry.id, entry);
-      if (entry.app) registryByApp.set(entry.app, entry);
-    }
-
-    // Step 13: 4 类行 (dataSource 决定):
-    //   - fly ∩ registry: 同一行 (both)
-    //   - fly only: dataSource=fly, 灰点 + "未发布" 提示
-    //   - registry only: dataSource=registry, **整行标红** + 立即下线按钮
-    //   - 都出现但 key 不 match (e.g. registry 没填 app 字段): 也当 both
-    //     (按 entry.url host 兜底 match)
-    const rows: SellerRow[] = [];
-    const consumedFly = new Set<string>();
-    const consumedRegistry = new Set<string>();
-    const specsByApp = await this.fetchFlyMachineSpecsForApps(Array.from(flyByName.keys()));
-    const registryTargets: Array<{
-      entry: SellerRegistryEntry;
-      flyMatch?: import("./seller.js").SellerAppJson;
-      dataSource: SellerDataSource;
-    }> = [];
-
-    // Phase 1: registry first (因为有 id + url + 详细 metadata)
-    for (const entry of registryDoc.sellers || []) {
-      const flyMatch = findFlyAppForEntry(flyByName, entry);
-      const dataSource: SellerDataSource = flyMatch ? "both" : "registry";
-      if (flyMatch) {
-        consumedFly.add(flyMatch.name);
-      }
-      consumedRegistry.add(entry.id);
-      registryTargets.push({ entry, flyMatch, dataSource });
-    }
-    rows.push(...await Promise.all(
-      registryTargets.map(async ({ entry, flyMatch, dataSource }) => {
-        const snapshot = await this.sellerSnapshot(entry, flyMatch, dataSource, { balanceTimeoutMs: 8000, machineSpecs: flyMatch ? specsByApp.get(flyMatch.name) : undefined });
-        return snapshot.row;
-      })
-    ));
-
-    // Phase 2: fly-only apps (registry 没有)
-    const flyOnlyApps = Array.from(flyByName.values()).filter((app) => !consumedFly.has(app.name));
-    rows.push(...await Promise.all(flyOnlyApps.map(async (app) => {
-      const stubEntry: SellerRegistryEntry = {
-        id: app.name,
-        name: app.name,
-        app: app.name,
-        url: `https://${app.name}.fly.dev`,
-        supportedProtocols: [],
-        paymentMethods: [],
-        models: []
-      };
-      const snapshot = await this.sellerSnapshot(stubEntry, app, "fly", { includeOperator: true, balanceTimeoutMs: 8000, machineSpecs: specsByApp.get(app.name) });
-      return snapshot.row;
-    })));
-
-    return rows;
-  }
-
-  public async sellerRegistryRows(): Promise<SellerRow[]> {
-    const registryDoc = await this.fetchManagedRegistry();
-    return (registryDoc.sellers || []).map((entry) => {
-      const match = this.matchSellerProfile(entry);
-      return {
-        ...baseSellerRow(entry, match.name, "registry"),
-        publishStatus: "checking",
-        detailStatus: "pending"
-      };
-    });
-  }
-
-  public async sellerInventory(): Promise<SellerRow[]> {
-    const registryDoc = await this.fetchManagedRegistry();
-    const flyApps = await this.fetchFlyApps().catch(() => []);
-    const flyByName = new Map<string, import("./seller.js").SellerAppJson>();
-    for (const app of flyApps) {
-      if (app?.name) {
-        flyByName.set(app.name, app);
-      }
-    }
-    const specsByApp = await this.fetchFlyMachineSpecsForApps(Array.from(flyByName.keys()));
-    const rows: SellerRow[] = [];
-    const consumedFly = new Set<string>();
-
-    for (const entry of registryDoc.sellers || []) {
-      const flyMatch = findFlyAppForEntry(flyByName, entry);
-      const dataSource: SellerDataSource = flyMatch ? "both" : "registry";
-      if (flyMatch) {
-        consumedFly.add(flyMatch.name);
-      }
-      const match = this.matchSellerProfile(entry);
-      const row = baseSellerRow(entry, match.name, dataSource, flyMatch, flyMatch ? specsByApp.get(flyMatch.name) : undefined);
-      row.publishStatus = flyMatch ? "published" : "registry_only";
-      row.detailStatus = dataSource === "registry" ? "skipped" : "pending";
-      if (dataSource === "registry") {
-        row.registryAlert = true;
-        row.alertReason = "registry 收录了但 fly app 失踪 — 严重事故, 立即下线";
-        row.removeHint = "立即下线 (registry-only)";
-      }
-      rows.push(row);
-    }
-
-    const flyOnlyApps = Array.from(flyByName.values()).filter((app) => !consumedFly.has(app.name));
-    for (const app of flyOnlyApps) {
-      const stubEntry = sellerEntryFromFlyApp(app);
-      const row = baseSellerRow(stubEntry, undefined, "fly", app, specsByApp.get(app.name));
-      row.publishStatus = "unpublished";
-      row.detailStatus = "pending";
-      row.publishHint = "未发布 — 可申请发布 (走 vendor-bootstrap stage)";
-      rows.push(row);
-    }
-
-    return rows;
-  }
-
-  public async refreshSellerRows(rows: SellerRow[]): Promise<SellerRow[]> {
-    return await Promise.all(rows.map((row) => this.refreshSellerRow(row)));
-  }
-
-  /**
-   * Step 13 v1.1: 拉 flyctl apps list --json. 默认走 seller.ts 真实
-   * flyctl spawn, 测试或受限环境可注入 options.flyApps closure.
-   */
-  private async fetchFlyApps(): Promise<import("./seller.js").SellerAppJson[]> {
-    if (this.options.flyApps) {
-      return (await this.options.flyApps()).filter((app) => isSellerFlyAppName(app.name));
-    }
-    // 默认路径: 走 SellerCommandRunner.ls(true) 真 spawn flyctl.
-    // 避免在 ui-state.ts 里 import 整个 seller module 引入循环依赖,
-    // 走 dynamic import; 失败 fallback 返空数组 (UI 不会崩, 只是
-    // 标 dataSource="registry" + 标红).
-    try {
-      const mod = await import("./seller.js");
-      const cfg = this.configManager.load();
-      const profile = cfg.profiles[this.options.profile || "default"];
-      const env = {
-        ...process.env,
-        ...(profile?.url ? { TB_REGISTRY_URL: profile.url } : {}),
-        ...(profile?.token ? { TB_REGISTRY_TOKEN: profile.token } : {})
-      };
-      const runner = new mod.SellerCommandRunner(this.configManager);
-      const result = await runner.ls(true);
-      if (result && typeof result === "object" && "apps" in result) {
-        return (result as { apps: import("./seller.js").SellerAppJson[] }).apps.filter((app) => isSellerFlyAppName(app.name));
-      }
-      return [];
-    } catch (err: any) {
-      return [];
-    }
-  }
-
-  private async fetchFlyMachineSpecsForApps(appNames: string[]): Promise<Map<string, import("./seller.js").SellerMachineSpecs | undefined>> {
-    if (!this.options.flyMachineSpecs && this.options.flyApps) {
-      return new Map(appNames.map((appName) => [appName, undefined]));
-    }
-    const entries: Array<readonly [string, import("./seller.js").SellerMachineSpecs | undefined]> = [];
-    for (const appName of appNames) {
-      entries.push([appName, await this.fetchFlyMachineSpecs(appName)] as const);
-    }
-    return new Map(entries);
-  }
-
-  private async fetchFlyMachineSpecs(appName: string): Promise<import("./seller.js").SellerMachineSpecs | undefined> {
-    if (this.machineSpecsCache.has(appName)) {
-      return this.machineSpecsCache.get(appName);
-    }
-    try {
-      const specs = this.options.flyMachineSpecs
-        ? await this.options.flyMachineSpecs(appName)
-        : await this.defaultFlyMachineSpecs(appName);
-      this.machineSpecsCache.set(appName, specs);
-      return specs;
-    } catch {
-      this.machineSpecsCache.set(appName, undefined);
-      return undefined;
-    }
-  }
-
-  private async defaultFlyMachineSpecs(appName: string): Promise<import("./seller.js").SellerMachineSpecs | undefined> {
-    const mod = await import("./seller.js");
-    const runner = new mod.SellerCommandRunner(this.configManager);
-    return runner.machineSpecs(appName);
-  }
-
-  public async sellerDetail(id: string): Promise<SellerDetail> {
-    const { entry, flyApp, dataSource } = await this.resolveSellerTarget(id);
-    const snapshot = await this.sellerSnapshot(entry, flyApp, dataSource, { includeOperator: true, balanceTimeoutMs: 8000 });
-    const config = snapshot.config?.config || snapshot.config || {};
-    const upstreams = snapshot.upstreams || {};
-    return {
-      row: snapshot.row,
-      configuration: {
-        registryStatus: snapshot.row.registryStatus,
-        region: entry.region,
-        upstreamUrl: stringValue(config.upstreamUrl || upstreams.upstreamUrl),
-        upstreamApiKeyMasked: maskApiKey(config.upstreamApiKey || upstreams.upstreamApiKey),
-        upstreamStatus: snapshot.row.upstreamStatus,
-        upstreamBalance: balanceString(snapshot.balance),
-        upstreamBalanceSource: snapshot.row.upstreamBalanceSource,
-        upstreamBalanceFetchedAt: snapshot.row.upstreamBalanceFetchedAt,
-        upstreamBalanceError: snapshot.row.upstreamBalanceError,
-        upstreamBalanceProbeTemplate: stringValue(config.upstreamBalanceProbe?.template),
-        upstreamBalanceProbeUrl: stringValue(config.upstreamBalanceProbe?.url || config.upstreamBalanceUrl),
-        upstreamBalanceProbeUserId: stringValue(config.upstreamBalanceProbe?.userId || config.upstreamUserId),
-        upstreamBalanceProbeRechargeUrl: stringValue(config.upstreamBalanceProbe?.rechargeUrl || config.upstreamRechargeUrl),
-        upstreamBalanceUrl: stringValue(config.upstreamBalanceUrl),
-        upstreamUserId: stringValue(config.upstreamUserId),
-        upstreamRechargeUrl: snapshot.row.upstreamRechargeUrl,
-        markupRatio: numberValue(config.markupRatio ?? upstreams.markupRatio),
-        discountRatio: numberValue(config.discountRatio ?? upstreams.discountRatio),
-        maxConnections: numberValue(config.maxConnections ?? snapshot.service?.capacity?.maxConnections ?? snapshot.status?.capacity?.maxConnections),
-        maxQueueDepth: numberValue(config.maxQueueDepth ?? snapshot.service?.capacity?.maxQueueDepth ?? snapshot.status?.capacity?.maxQueueDepth)
-      },
-      models: modelRows(upstreams, config, snapshot.status)
-    };
-  }
-
-  private async refreshSellerRow(row: SellerRow): Promise<SellerRow> {
-    const dataSource = row.dataSource || "both";
-    if (dataSource === "registry") {
-      return { ...row, nodeStatus: "unknown", detailStatus: "skipped", detailUpdatedAt: new Date().toISOString() };
-    }
-    const entry = sellerEntryFromRow(row);
-    const match = this.matchSellerProfile(entry);
-    const manifestPromise = this.probeManifest(entry.url);
-    if (!match.profile) {
-      const manifestOk = await manifestPromise;
-      return {
-        ...row,
-        nodeStatus: manifestOk ? "active" : "unknown",
-        detailStatus: manifestOk ? "fresh" : "error",
-        detailUpdatedAt: new Date().toISOString(),
-        error: manifestOk ? row.error : (row.error || "No matching local admin profile; /manifest probe failed")
-      };
-    }
-
-    const [manifestOk, status, upstreams, config] = await Promise.all([
-      manifestPromise,
-      this.fetchSellerAdminJson(match.profile, "/operator/status").catch((err: any) => ({ error: err.message })),
-      this.fetchSellerAdminJson(match.profile, "/operator/admin/upstreams").catch((err: any) => ({ error: err.message })),
-      this.fetchSellerAdminJson(match.profile, "/operator/admin/config").catch((err: any) => ({ error: err.message }))
-    ]);
-    const balance = await this.operatorBalanceSnapshot(match.profile, 8000).catch(() => unavailableBalanceSnapshot("seller balance endpoint unavailable"));
-    const configDocument = config?.config || config || {};
-    const normalizedUpstreams = upstreamDocument(upstreams);
-    const upstreamUrl = stringValue(configDocument.upstreamUrl || normalizedUpstreams?.upstreamUrl || status?.upstream?.url || status?.upstreamUrl);
-    if (status?.error) {
-      return {
-        ...row,
-        nodeStatus: manifestOk ? "active" : "unknown",
-        upstreamDomain: upstreamUrl ? (hostName(upstreamUrl) || row.upstreamDomain) : row.upstreamDomain,
-        upstreamStatus: upstreamStatus(normalizedUpstreams?.status || row.upstreamStatus),
-        discountRatio: numberValue(configDocument.discountRatio ?? normalizedUpstreams?.discountRatio) ?? row.discountRatio,
-        modelsCount: numberValue(normalizedUpstreams?.models?.length ?? row.modelsCount) ?? row.modelsCount,
-        ...balanceFields(balance, row),
-        detailStatus: "error",
-        detailUpdatedAt: new Date().toISOString(),
-        error: status.error
-      };
-    }
-    const capacity = status?.capacity || {};
-    return {
-      ...row,
-      nodeStatus: manifestOk ? "active" : nodeStatus(status?.status || row.nodeStatus),
-      upstreamDomain: upstreamUrl ? (hostName(upstreamUrl) || row.upstreamDomain) : row.upstreamDomain,
-      upstreamStatus: upstreamStatus(status?.upstream?.status || normalizedUpstreams?.status || row.upstreamStatus),
-      discountRatio: numberValue(configDocument.discountRatio ?? normalizedUpstreams?.discountRatio) ?? row.discountRatio,
-      capacityUsed: numberValue(capacity.activeConnections) ?? row.capacityUsed,
-      capacityLimit: numberValue(capacity.maxConnections) ?? row.capacityLimit,
-      ...runtimeUsageFields(status?.runtime, row),
-      ttftMs: numberValue(status?.latency?.ttftMs) ?? row.ttftMs,
-      avgInferenceMs: numberValue(status?.latency?.avgInferenceMs) ?? row.avgInferenceMs,
-      lastInferenceMs: numberValue(status?.latency?.lastInferenceMs) ?? row.lastInferenceMs,
-      avgTokensPerSecond: numberValue(status?.latency?.avgTokensPerSecond) ?? row.avgTokensPerSecond,
-      lastTokensPerSecond: numberValue(status?.latency?.lastTokensPerSecond) ?? row.lastTokensPerSecond,
-      latencySamples: numberValue(status?.latency?.sampleCount) ?? row.latencySamples,
-      modelsCount: numberValue(normalizedUpstreams?.models?.length ?? row.modelsCount) ?? row.modelsCount,
-      ...balanceFields(balance, row),
-      detailStatus: "fresh",
-      detailUpdatedAt: new Date().toISOString(),
-      error: undefined
-    };
-  }
-
-  public async rawSellerConfig(id: string): Promise<{ entry: SellerRegistryEntry; profileName?: string; config: any }> {
-    const { entry } = await this.resolveSellerTarget(id);
-    const match = this.matchSellerProfile(entry);
-    if (!match.profile) {
-      throw new Error(`seller \`${entry.id}\` has no matching local admin profile`);
-    }
-    const response = await this.fetchSellerAdminJson(match.profile, "/operator/admin/config");
-    return { entry, profileName: match.localProfile ? match.name : undefined, config: response.config || response };
-  }
-
-  private async resolveSellerTarget(id: string): Promise<SellerTarget> {
-    let document: SellerRegistryDocument | undefined;
-    let registryError: unknown;
-    try {
-      document = await this.fetchManagedRegistry();
-    } catch (err) {
-      registryError = err;
-      document = { version: 0, sellers: [] };
-    }
-
-    const flyApps = await this.fetchFlyApps().catch(() => []);
-    const flyByName = new Map(flyApps.map((app) => [app.name, app]));
-    const entry = document.sellers.find((seller) => seller.id === id || seller.name === id || seller.app === id);
-    if (entry) {
-      const flyApp = findFlyAppForEntry(flyByName, entry);
-      return { entry, flyApp, dataSource: flyApp ? "both" : "registry" };
-    }
-
-    const flyApp = flyApps.find((app) => app.name === id || app.name === `tb-seller-${id}` || app.name === id.replace(/^tb-seller-/, ""));
-    if (flyApp) {
-      return { entry: sellerEntryFromFlyApp(flyApp), flyApp, dataSource: "fly" };
-    }
-
-    if (registryError) {
-      throw registryError;
-    }
-    throw new Error(`seller \`${id}\` not found in fly.io apps or bootstrap registry`);
-  }
-
-  public async fetchRegistry(): Promise<SellerRegistryDocument> {
-    const profile = this.activeBootstrapProfile();
-    const baseUrl = this.options.url || profile.profile?.url;
-    if (!baseUrl) {
-      throw new Error("No bootstrap profile found. Configure an admin profile or pass --url.");
-    }
-    return normalizeRegistryDocument(
-      await this.fetchBootstrapJson(`${trimSlash(baseUrl)}/registry/sellers`),
-      "bootstrap registry response"
-    );
-  }
-
-  public async fetchManagedRegistry(): Promise<SellerRegistryDocument> {
-    const profile = this.activeBootstrapProfile();
-    const baseUrl = this.options.url || profile.profile?.url;
-    const token = this.options.token || profile.profile?.token;
-    if (!baseUrl) {
-      throw new Error("No bootstrap profile found. Configure an admin profile or pass --url.");
-    }
-    if (!token) {
-      return this.fetchRegistry();
-    }
-
-    try {
-      const managed = normalizeRegistryDocument(
-        await this.fetchBootstrapJson(`${trimSlash(baseUrl)}/platform/sellers`, {
-          headers: { Authorization: `Bearer ${token}` }
-        }),
-        "platform sellers response"
-      );
-      const publicDoc = await this.fetchRegistry().catch(() => undefined);
-      if (!publicDoc) {
-        return managed;
-      }
-      return mergeRegistryDocuments(publicDoc, managed);
-    } catch (err: any) {
-      if (isUnavailablePlatformSellersEndpoint(err)) {
-        return this.fetchRegistry();
-      }
-      throw err;
-    }
-  }
-
-  public activeBootstrapProfile(): ProfileMatch {
-    const envProfile = process.env.TOKENBUDDY_ADMIN_PROFILE;
-    const target = this.options.profile || envProfile;
-    if (this.options.url) {
-      return {
-        name: target,
-        profile: this.options.token ? { url: this.options.url, token: this.options.token } : undefined,
-        localProfile: false
-      };
-    }
-    const config = this.configManager.load();
-    const name = target || config.default_profile || Object.keys(config.profiles)[0];
-    return {
-      name,
-      profile: name ? config.profiles[name] : undefined,
-      localProfile: Boolean(name && config.profiles[name])
-    };
-  }
-
-  private matchSellerProfile(entry: SellerRegistryEntry): ProfileMatch {
-    const config = this.configManager.load();
-    if (entry.profile && config.profiles[entry.profile]) {
-      return { name: entry.profile, profile: config.profiles[entry.profile], localProfile: true };
-    }
-    const byUrl = Object.entries(config.profiles).find(([, profile]) => trimSlash(profile.url) === trimSlash(entry.url));
-    if (byUrl) {
-      return { name: byUrl[0], profile: byUrl[1], localProfile: true };
-    }
-    const entryHost = hostName(entry.url);
-    const near = Object.entries(config.profiles).find(([name, profile]) => {
-      const haystack = `${name} ${profile.url} ${hostName(profile.url)}`.toLowerCase();
-      return [entry.id, entry.app, entryHost].some((value) => value && haystack.includes(value.toLowerCase()));
-    });
-    if (near) {
-      return { name: near[0], profile: near[1], localProfile: true };
-    }
-    const provider = this.configManager.getSellerProvider("fly");
-    if (provider?.operator_secret) {
-      return {
-        name: entry.app || entry.id,
-        profile: {
-          url: entry.url,
-          token: provider.operator_secret
-        },
-        localProfile: false
-      };
-    }
-    return {};
-  }
-
-  /**
-   * Step 13 v1.1: seller snapshot.
-   *   - 双源数据已经定好 (dataSource 由调用方传入)
-   *   - nodeStatus = fetch <seller.url>/manifest 200 → active, 否则 unknown
-   *     (**不**用 registry entry.status 决定绿点)
-   *   - registry-only 行 (dataSource="registry") → 标红 (registryAlert=true)
-   */
-  private async sellerSnapshot(
-    entry: SellerRegistryEntry,
-    flyApp: import("./seller.js").SellerAppJson | undefined,
-    dataSource: SellerDataSource,
-    options: { includeOperator?: boolean; balanceTimeoutMs?: number; machineSpecs?: import("./seller.js").SellerMachineSpecs } = {}
-  ): Promise<SellerSnapshot> {
-    const match = this.matchSellerProfile(entry);
-    const baseRow = baseSellerRow(entry, match.name, dataSource, flyApp, options.machineSpecs);
-
-    // Step 13: 立即下线 / Apply 按钮 hint 文案
-    if (dataSource === "registry") {
-      baseRow.registryAlert = true;
-      baseRow.alertReason = "registry 收录了但 fly app 失踪 — 严重事故, 立即下线";
-      baseRow.removeHint = "立即下线 (registry-only)";
-    } else if (dataSource === "fly") {
-      baseRow.publishHint = "未发布 — 可申请发布 (走 vendor-bootstrap stage)";
-    }
-
-    if (dataSource === "registry") {
-      return {
-        row: {
-          ...baseRow,
-          nodeStatus: "unknown"
-        }
-      };
-    }
-
-    let manifestOk = false;
-    const manifestPromise = this.probeManifest(entry.url).then((ok) => {
-      manifestOk = ok;
-      return ok;
-    });
-
-    if (dataSource === "fly" && (!options.includeOperator || !match.profile)) {
-      // fly-only 行没 registry entry, 也可能没 profile. 仍然跑 manifest
-      // probe (entry.url 来自 flyApp 推断 https://<name>.fly.dev), 但
-      // 没 profile 时只算 "unknown" (灰点) — 因为 vendor 没法管控一个
-      // 还没发布的 instance, 不该 throw auth_unknown 把 UI 卡死.
-      manifestOk = await manifestPromise;
-      return {
-        row: {
-          ...baseRow,
-          nodeStatus: manifestOk ? "active" : "unknown",
-          error: manifestOk ? undefined : "未发布到 registry, /manifest 探测失败 (不视为事故)"
-        }
-      };
-    }
-
-    if (!match.profile) {
-      manifestOk = await manifestPromise;
-      return {
-        row: {
-          ...baseRow,
-          nodeStatus: manifestOk ? "active" : "unknown",
-          error: manifestOk ? "No matching local admin profile" : "No matching local admin profile; /manifest probe failed"
-        }
-      };
-    }
-    try {
-      const [, status, service, upstreams, config] = await Promise.all([
-        manifestPromise,
-        this.fetchSellerAdminJson(match.profile, "/operator/status").catch((err: any) => ({ error: err.message })),
-        this.fetchSellerAdminJson(match.profile, "/operator/admin/service").catch((err: any) => ({ error: err.message })),
-        this.fetchSellerAdminJson(match.profile, "/operator/admin/upstreams").catch((err: any) => ({ error: err.message })),
-        this.fetchSellerAdminJson(match.profile, "/operator/admin/config").catch((err: any) => ({ error: err.message }))
-      ]);
-      const configDocument = config?.config || config || {};
-      const balance = await this.balanceSnapshot(match.profile, configDocument, upstreams, options.balanceTimeoutMs);
-      return {
-        status,
-        service,
-        upstreams,
-        config,
-        balance,
-        row: mergeSellerRow(
-          {
-            ...baseRow,
-            nodeStatus: manifestOk ? "active" : baseRow.nodeStatus
-          },
-          entry,
-          status,
-          service,
-          upstreams,
-          configDocument,
-          balance,
-          manifestOk
-        )
-      };
-    } catch (err: any) {
-      await manifestPromise.catch(() => false);
-      return {
-        row: {
-          ...baseRow,
-          nodeStatus: manifestOk ? "active" : "unknown",
-          error: err.message
-        }
-      };
-    }
-  }
-
-  /**
-   * Step 13 v1.1: 探 `<entry.url>/manifest` 拿绿点. 200/204 → true;
-   * 任何非 2xx / 网络错 → false. 3s timeout 避免列表卡死.
-   */
-  private async probeManifest(url: string): Promise<boolean> {
-    try {
-      const controller = new AbortController();
-      const timer = setTimeout(() => controller.abort(), 3000);
-      const target = url.replace(/\/+$/, "") + "/manifest";
-      const res = await fetch(target, {
-        method: "GET",
-        signal: controller.signal,
-        headers: { "Content-Type": "application/json" }
-      });
-      clearTimeout(timer);
-      return res.status >= 200 && res.status < 300;
-    } catch {
-      return false;
-    }
-  }
-
-  private async fetchSellerAdminJson(profile: AdminProfile, pathName: string, options: { timeoutMs?: number } = {}): Promise<any> {
-    const controller = options.timeoutMs ? new AbortController() : undefined;
-    const timer = controller ? setTimeout(() => controller.abort(), options.timeoutMs) : undefined;
-    try {
-      return await this.fetchJson(`${trimSlash(profile.url)}${pathName}`, {
-        headers: {
-          "Content-Type": "application/json",
-          Authorization: `Bearer ${profile.token}`
-        },
-        ...(controller ? { signal: controller.signal } : {})
-      });
-    } finally {
-      if (timer) {
-        clearTimeout(timer);
-      }
-    }
-  }
-
-  private async fetchBootstrapJson(url: string, init?: RequestInit): Promise<unknown> {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), 10000);
-    try {
-      return await this.fetchJson(url, { ...init, signal: controller.signal });
-    } finally {
-      clearTimeout(timer);
-    }
-  }
-
-  private async balanceSnapshot(profile: AdminProfile, config: any, upstreams: any, timeoutMs?: number): Promise<BalanceSnapshot | undefined> {
-    if (config?.error) {
-      return undefined;
-    }
-    if (stringValue(config.upstreamBalanceProbe?.template) === "none") {
-      return undefined;
-    }
-    const operatorBalance = await this.operatorBalanceSnapshot(profile, timeoutMs).catch(() => undefined);
-    if (operatorBalance) {
-      return operatorBalance;
-    }
-    if (isRedactedConfigSecret(config.upstreamApiKey)) {
-      return {
-        rawAmount: null,
-        amountUsdMicros: null,
-        currency: null,
-        source: "unknown",
-        fetchedAt: Date.now(),
-        error: {
-          httpStatus: 0,
-          message: "seller balance endpoint unavailable"
-        }
-      };
-    }
-    return probeUpstreamBalance({
-      upstreamUrl: stringValue(config.upstreamUrl || upstreams?.upstreamUrl),
-      upstreamBalanceUrl: stringValue(config.upstreamBalanceUrl || upstreams?.upstreamBalanceUrl),
-      upstreamApiKey: stringValue(config.upstreamApiKey),
-      upstreamUserId: stringValue(config.upstreamUserId),
-      upstreamBalanceProbe: objectValue(config.upstreamBalanceProbe)
-    }, {
-      fetch: this.options.balanceFetch,
-      cache: this.balanceCache,
-      timeoutMs
-    });
-  }
-
-  private async operatorBalanceSnapshot(profile: AdminProfile, timeoutMs?: number): Promise<BalanceSnapshot | undefined> {
-    return await this.fetchSellerAdminJson(profile, "/operator/admin/upstream-balance", { timeoutMs })
-      .then((response) => {
-        const responseObject = objectValue(response);
-        const balance = objectValue(responseObject?.balance) || responseObject;
-        return balance as BalanceSnapshot | undefined;
-      });
-  }
-}
-
-async function defaultFetchJson(url: string, init?: RequestInit): Promise<unknown> {
-  // Step 13 v1.1: 3s timeout 避免坏 host / DNS 卡死整个 admin web.
-  const controller = init?.signal ? undefined : new AbortController();
-  const timer = controller ? setTimeout(() => controller.abort(), 3000) : undefined;
-  let response: Response;
-  try {
-    response = await fetch(url, controller ? { ...init, signal: controller.signal } : init);
-  } finally {
-    if (timer) {
-      clearTimeout(timer);
-    }
-  }
-  if (!response.ok) {
-    const text = await response.text();
-    throw new Error(`HTTP Error ${response.status}: ${text || response.statusText}`);
-  }
-  const text = await response.text();
-  return text ? JSON.parse(text) : {};
-}
-
-function baseSellerRow(
-  entry: SellerRegistryEntry,
-  profile?: string,
-  dataSource: SellerDataSource = "registry",
-  flyApp?: import("./seller.js").SellerAppJson,
-  machineSpecs?: import("./seller.js").SellerMachineSpecs
-): SellerRow {
-  const primaryRegion = entry.region || machineSpecs?.regions?.[0];
-  return {
-    id: entry.id,
-    name: entry.id,
-    description: entry.name && entry.name !== entry.id ? entry.name : undefined,
-    app: entry.app,
-    profile: profile || entry.profile,
-    url: entry.url,
-    registryStatus: registryStatus(entry.status),
-    // Step 13 v1.1: 绿点 base 改 unknown, 真正值由 sellerSnapshot
-    // 拿 /manifest 200 决定. 老逻辑直接复用 entry.status 是错的.
-    nodeStatus: "unknown",
-    region: primaryRegion,
-    upstreamDomain: hostName(entry.url) || "unknown",
-    upstreamStatus: "unknown",
-    modelsCount: entry.modelsCount ?? entry.models?.length ?? entry.sampleModels?.length,
-    specs: {
-      cpuKind: machineSpecs?.cpuKind,
-      cpuCores: machineSpecs?.cpuCores,
-      memoryMb: machineSpecs?.memoryMb,
-      memoryGb: machineSpecs?.memoryMb ? Number((machineSpecs.memoryMb / 1024).toFixed(2)) : undefined,
-      machines: machineSpecs?.machines,
-      runningMachines: machineSpecs?.runningMachines,
-      volumeGb: machineSpecs?.volumeGb,
-      region: primaryRegion,
-      regions: machineSpecs?.regions,
-      modelsCount: entry.modelsCount ?? entry.models?.length ?? entry.sampleModels?.length
-    },
-    dataSource,
-    publishStatus: dataSource === "both" ? "published" : dataSource === "fly" ? "unpublished" : "unknown",
-    detailStatus: "pending",
-    flyApp: flyApp ? {
-      name: flyApp.name,
-      status: flyApp.status,
-      owner: flyApp.owner,
-      latestDeployAt: flyApp.latestDeployAt
-    } : undefined
-  };
-}
-
-function isSellerFlyAppName(name: string | undefined): boolean {
-  return Boolean(name && (name.startsWith("tbs-") || name.startsWith("tb-seller-")) && name !== "tb-seller");
-}
-
-function sellerEntryFromFlyApp(app: import("./seller.js").SellerAppJson): SellerRegistryEntry {
-  return {
-    id: app.name,
-    name: app.name,
-    app: app.name,
-    url: `https://${app.name}.fly.dev`,
-    supportedProtocols: [],
-    paymentMethods: [],
-    models: []
-  };
-}
-
-function findFlyAppForEntry(
-  flyByName: Map<string, import("./seller.js").SellerAppJson>,
-  entry: SellerRegistryEntry
-): import("./seller.js").SellerAppJson | undefined {
-  for (const key of [entry.app, entry.id, entry.name]) {
-    const normalized = stringValue(key);
-    if (!normalized) {
-      continue;
-    }
-    const match = flyByName.get(normalized);
-    if (match) {
-      return match;
-    }
-  }
-  return undefined;
-}
-
-function sellerEntryFromRow(row: SellerRow): SellerRegistryEntry {
-  return {
-    id: row.id,
-    name: row.name,
-    app: row.app || row.flyApp?.name || row.id,
-    url: row.url,
-    status: row.registryStatus,
-    region: row.region,
-    modelsCount: row.modelsCount,
-    supportedProtocols: [],
-    paymentMethods: [],
-    models: []
-  };
-}
-
-function mergeSellerRow(
-  base: SellerRow,
-  entry: SellerRegistryEntry,
-  status: any,
-  service: any,
-  upstreams: any,
-  config: any,
-  balance: BalanceSnapshot | undefined,
-  manifestOk = false
-): SellerRow {
-  const normalizedUpstreams = upstreamDocument(upstreams);
-  const capacity = status?.capacity || service?.capacity || {};
-  const upstreamUrl = stringValue(config?.upstreamUrl || normalizedUpstreams?.upstreamUrl || service?.upstreamUrl) || entry.url;
-  const error = firstError(status, service, upstreams);
-  return {
-    ...base,
-    nodeStatus: error ? (manifestOk ? "active" : "unknown") : (manifestOk ? "active" : nodeStatus(status?.status || entry.status)),
-    upstreamDomain: hostName(upstreamUrl) || base.upstreamDomain,
-    upstreamStatus: upstreamStatus(status?.upstream?.status || normalizedUpstreams?.status),
-    discountRatio: numberValue(config?.discountRatio ?? normalizedUpstreams?.discountRatio),
-    capacityUsed: numberValue(capacity.activeConnections),
-    capacityLimit: numberValue(capacity.maxConnections),
-    ...runtimeUsageFields(status?.runtime, base),
-    ttftMs: numberValue(status?.latency?.ttftMs),
-    avgInferenceMs: numberValue(status?.latency?.avgInferenceMs),
-    lastInferenceMs: numberValue(status?.latency?.lastInferenceMs),
-    avgTokensPerSecond: numberValue(status?.latency?.avgTokensPerSecond),
-    lastTokensPerSecond: numberValue(status?.latency?.lastTokensPerSecond),
-    latencySamples: numberValue(status?.latency?.sampleCount),
-    upstreamBalanceUsdMicros: balance && Number.isFinite(balance.amountUsdMicros ?? NaN) ? (balance.amountUsdMicros as number) : undefined,
-    upstreamBalanceCurrency: typeof balance?.currency === "string" ? balance.currency : undefined,
-    upstreamBalanceSource: balance?.source,
-    upstreamBalanceFetchedAt: balance ? new Date(balance.fetchedAt).toISOString() : undefined,
-    upstreamBalanceError: balance?.error?.message,
-    upstreamRechargeUrl: stringValue(config?.upstreamBalanceProbe?.rechargeUrl || config?.upstreamRechargeUrl || normalizedUpstreams?.upstreamRechargeUrl),
-    modelsCount: numberValue(service?.modelsCount ?? normalizedUpstreams?.models?.length ?? base.modelsCount),
-    specs: {
-      ...base.specs,
-      region: entry.region || base.specs?.region,
-      modelsCount: numberValue(service?.modelsCount ?? normalizedUpstreams?.models?.length ?? base.modelsCount)
-    },
-    error
-  };
-}
-
-function runtimeUsageFields(runtime: any, fallback: SellerRow): Partial<SellerRow> {
-  return {
-    resourceCpuPercent: numberValue(runtime?.cpuPercent) ?? fallback.resourceCpuPercent,
-    resourceMemoryPercent: numberValue(runtime?.memoryPercent) ?? fallback.resourceMemoryPercent,
-    resourceMemoryRssMb: numberValue(runtime?.memoryRssMb) ?? fallback.resourceMemoryRssMb,
-    resourceMemoryLimitMb: numberValue(runtime?.memoryLimitMb) ?? fallback.resourceMemoryLimitMb
-  };
-}
-
-function balanceFields(balance: BalanceSnapshot | undefined, fallback: SellerRow): Partial<SellerRow> {
-  if (!balance) {
-    return {};
-  }
-  return {
-    upstreamBalanceUsdMicros: Number.isFinite(balance.amountUsdMicros ?? NaN) ? (balance.amountUsdMicros as number) : undefined,
-    upstreamBalanceCurrency: typeof balance.currency === "string" ? balance.currency : undefined,
-    upstreamBalanceSource: balance.source,
-    upstreamBalanceFetchedAt: new Date(balance.fetchedAt).toISOString(),
-    upstreamBalanceError: balance.error?.message,
-    upstreamRechargeUrl: fallback.upstreamRechargeUrl
-  };
-}
-
-function unavailableBalanceSnapshot(message: string): BalanceSnapshot {
-  return {
-    rawAmount: null,
-    amountUsdMicros: null,
-    currency: null,
-    source: "unknown",
-    fetchedAt: Date.now(),
-    error: {
-      httpStatus: 0,
-      message
-    }
-  };
-}
-
-function modelRows(upstreams: any, config: any, status: any): SellerModelRow[] {
-  const normalizedUpstreams = upstreamDocument(upstreams);
-  const aliases = config.modelAliases || normalizedUpstreams.modelAliases || {};
-  const models = Array.isArray(config.models)
-      ? config.models
-      : Array.isArray(normalizedUpstreams.models)
-        ? normalizedUpstreams.models
-        : [];
-  return models.map((model: any) => {
-    const id = stringValue(model.id || model.name) || "unknown";
-    return {
-      upstreamModel: id,
-      billingModel: stringValue(aliases[id]) || id,
-      enabled: model.enabled !== false,
-      configModel: objectValue(model),
-      inputPrice: priceString(model.inputPriceMicrosPer1m),
-      outputPrice: priceString(model.outputPriceMicrosPer1m),
-      ttftMs: numberValue(model.ttftMs ?? status?.latency?.ttftMs),
-      avgInferenceMs: numberValue(model.avgInferenceMs ?? status?.latency?.avgInferenceMs),
-      avgTokensPerSecond: numberValue(model.avgTokensPerSecond ?? status?.latency?.avgTokensPerSecond),
-      latencySamples: numberValue(model.latencySamples ?? status?.latency?.sampleCount)
-    };
-  });
-}
-
-function upstreamDocument(value: any): any {
-  if (Array.isArray(value?.upstreams)) {
-    return objectValue(value.upstreams[0]) || {};
-  }
-  return objectValue(value?.upstreams) || value || {};
-}
-
-function registryStatus(value: unknown): RegistryStatus {
-  const normalized = String(value || "unknown").toLowerCase();
-  if (normalized === "active" || normalized === "draining" || normalized === "offline" || normalized === "pending") {
-    return normalized;
-  }
-  return "unknown";
-}
-
-function nodeStatus(value: unknown): NodeStatus {
-  const normalized = String(value || "unknown").toLowerCase();
-  if (normalized === "active" || normalized === "busy_capacity" || normalized === "draining" || normalized === "pending" || normalized === "offline") {
-    return normalized;
-  }
-  if (normalized === "healthy") {
-    return "active";
-  }
-  return "unknown";
-}
-
-function upstreamStatus(value: unknown): UpstreamStatus {
-  const normalized = String(value || "unknown").toLowerCase();
-  if (normalized === "healthy" || normalized === "degraded" || normalized === "unhealthy") {
-    return normalized;
-  }
-  return "unknown";
-}
-
-export function maskApiKey(value: unknown): string | undefined {
-  const normalized = String(value || "").trim();
-  if (!normalized) {
-    return undefined;
-  }
-  if (isRedactedConfigSecret(normalized)) {
-    return "configured";
-  }
-  const tail = normalized.replace(/\s+/g, "").slice(-4);
-  return tail ? `**** **** **** ${tail}` : "****";
-}
-
-function maskSecret(value: unknown): string | undefined {
-  const normalized = String(value || "").trim();
-  if (!normalized) {
-    return undefined;
-  }
-  const compact = normalized.replace(/\s+/g, "");
-  if (compact.length <= 8) {
-    return "********";
-  }
-  return `${compact.slice(0, 4)}...${compact.slice(-4)}`;
-}
-
-function trimSlash(value: string): string {
-  return value.replace(/\/+$/, "");
-}
-
-function hostName(value: string | undefined): string {
-  if (!value) {
-    return "";
-  }
-  try {
-    return new URL(value).hostname.replace(/^www\./, "");
-  } catch {
-    return "";
-  }
-}
-
-function numberValue(value: unknown): number | undefined {
-  const parsed = Number(value);
-  return Number.isFinite(parsed) ? parsed : undefined;
-}
-
-function stringValue(value: unknown): string | undefined {
-  return typeof value === "string" && value.trim() ? value.trim() : undefined;
-}
-
-function objectValue(value: unknown): Record<string, unknown> | undefined {
-  return value && typeof value === "object" && !Array.isArray(value)
-    ? value as Record<string, unknown>
-    : undefined;
-}
-
-function isRedactedConfigSecret(value: unknown): boolean {
-  return value === "[redacted]";
-}
-
-function priceString(value: unknown): string | undefined {
-  const parsed = numberValue(value);
-  if (parsed === undefined) {
-    return undefined;
-  }
-  return `$${(parsed / 1000000).toFixed(4)}/1M`;
-}
-
-function balanceString(balance: BalanceSnapshot | undefined): string | undefined {
-  if (!balance) {
-    return undefined;
-  }
-  if (balance.rawAmount === null) {
-    return balance.error?.message;
-  }
-  const amount = Math.abs(balance.rawAmount) >= 100
-    ? balance.rawAmount.toFixed(0)
-    : balance.rawAmount.toFixed(2);
-  return `${balance.currency || "USD"} ${amount}`;
-}
-
-function firstError(...values: any[]): string | undefined {
-  const hit = values.find((value) => value?.error);
-  return hit?.error;
-}
-
-function normalizeRegistryDocument(value: unknown, label: string): SellerRegistryDocument {
-  if (!value || typeof value !== "object" || !Array.isArray((value as { sellers?: unknown }).sellers)) {
-    throw new Error(`${label} did not include sellers`);
-  }
-  const document = value as Partial<SellerRegistryDocument> & { sellers: SellerRegistryEntry[] };
-  return {
-    version: numberValue(document.version) ?? 0,
-    updatedAt: stringValue(document.updatedAt),
-    purpose: stringValue(document.purpose),
-    defaultSeller: stringValue(document.defaultSeller),
-    notes: Array.isArray(document.notes) ? document.notes.map((note) => stringValue(note)).filter((note): note is string => Boolean(note)) : undefined,
-    sellers: document.sellers
-  };
-}
-
-function mergeRegistryDocuments(publicDoc: SellerRegistryDocument, managedDoc: SellerRegistryDocument): SellerRegistryDocument {
-  const sellers = publicDoc.sellers.map((seller) => ({ ...seller }));
-  for (const managed of managedDoc.sellers) {
-    const index = sellers.findIndex((seller) => sameSellerEntry(seller, managed));
-    if (index >= 0) {
-      sellers[index] = { ...sellers[index], ...managed };
-    } else {
-      sellers.push(managed);
-    }
-  }
-  return {
-    version: publicDoc.version || managedDoc.version,
-    updatedAt: publicDoc.updatedAt || managedDoc.updatedAt,
-    purpose: publicDoc.purpose || managedDoc.purpose,
-    defaultSeller: publicDoc.defaultSeller || managedDoc.defaultSeller,
-    notes: publicDoc.notes || managedDoc.notes,
-    sellers
-  };
-}
-
-function sameSellerEntry(a: SellerRegistryEntry, b: SellerRegistryEntry): boolean {
-  const aKeys = new Set([a.id, a.app, a.name].map((value) => stringValue(value)).filter((value): value is string => Boolean(value)));
-  return [b.id, b.app, b.name].some((value) => {
-    const normalized = stringValue(value);
-    return normalized ? aKeys.has(normalized) : false;
-  });
-}
-
-function isUnavailablePlatformSellersEndpoint(err: unknown): boolean {
-  const message = err instanceof Error ? err.message : String(err || "");
-  return /HTTP Error (401|403|404)|Cannot GET \/platform\/sellers|vendor_auth|not found/i.test(message);
-}