@tokenbuddy/tokenbuddy 1.0.36 → 1.0.37

package/src/cli.ts

@@ -1,2243 +0,0 @@
-import { Command } from "commander";
-import * as p from "@clack/prompts";
-import * as fs from "fs";
-import * as path from "path";
-import * as os from "os";
-import { execFileSync, spawn } from "child_process";
-import Table from "cli-table3";
-import { BuyerStore, PaymentConfig } from "./buyer-store.js";
-import {
-  applyProviderInstall,
-  detectProviders,
-  getProviderModelSelectionKind,
-  getProviderProtocolPreference,
-  type ClaudeCodeModelMappingConfig,
-  type ProviderId,
-  type ProviderSelections,
-  type SingleModelProviderRuntimeConfig,
-} from "./provider-install.js";
-import { createModuleLogger } from "@tokenbuddy/logging";
-import * as crypto from "crypto";
-import { fileURLToPath } from "url";
-import {
-  discoverSellerBackedModels,
-  filterCatalogByProtocol,
-  filterCatalogBySeller,
-  type ModelCatalogEntry,
-  type SellerCatalogResult,
-} from "./seller-catalog.js";
-import {
-  assertSellerRoutingConfig,
-  defaultSellerRoutingConfig,
-  normalizeSellerRoutingConfig,
-  parseSellerIdList,
-  ROUTING_CONFIG_KEY,
-  type BuyerSellerRoutingConfig,
-} from "./seller-routing-config.js";
-import type { SellerRoutingMode, SellerRoutingScorer } from "./seller-routing-strategy.js";
-import {
-  collectDoctorDiagnostics,
-  collectDoctorModelsSummary,
-  printDoctorProviders,
-  printDoctorModelsSummary,
-  readDoctorProviders,
-  renderDoctorDiagnosticsProgressively,
-} from "./doctor-diagnostics.js";
-import {
-  buildInitSuccessMessage,
-  buildInitTerminalSelectionState,
-  buildInstalledTerminalMessage,
-  INIT_PAYMENT_OPTIONS,
-  inspectClawtipWalletReadiness,
-  inspectOpenClawWalletConfig,
-  noteInitComingSoonPayments,
-  OTHER_TERMINAL_OPTION,
-  type InitPaymentMethod,
-  validateInitTerminalSelection,
-} from "./init-payment-options.js";
-import {
-  checkOpenClawRuntime,
-  readClawtipPayCredential,
-  startClawtipWalletBootstrap,
-  waitForClawtipActivationConfirmation,
-} from "./init-clawtip-activation.js";
-import {
-  DEFAULT_CLAWTIP_BOOTSTRAP_URL,
-  fetchClawtipBootstrap,
-  normalizeClawtipBootstrapResourceUrl,
-} from "./clawtip-bootstrap.js";
-import { displayTerminalImage } from "./terminal-image.js";
-import {
-  checkPackageUpdate,
-  readInstalledPackageManifest,
-  runPackageUpdate,
-  type PackageRestartResult,
-  type PackageUpdateCheck,
-  type PackageUpdateResult,
-} from "./package-update.js";
-import { DEFAULT_SELLER_REGISTRY_URL } from "./registry-trust.js";
-
-// @ts-ignore
-import qrcode from "qrcode-terminal";
-
-const CONTROL_PORT = 17820;
-const PROXY_PORT = 17821;
-const TOKENBUDDY_LAUNCHD_LABEL = "com.tokenbuddy.proxyd";
-const STALE_TOKENBUDDY_LAUNCHD_LABELS = [
-  "com.tokenbuddy.tb-proxyd",
-  "homebrew.mxcl.tokenbuddy",
-] as const;
-const logger = createModuleLogger("tokenbuddy-cli");
-
-function readCliPackageVersion(): string {
-  return readInstalledPackageManifest().version;
-}
-const SUPPORTED_PAYMENT_METHODS = ["mock", "clawtip"] as const;
-type SupportedPaymentMethod = typeof SUPPORTED_PAYMENT_METHODS[number];
-
-export interface DaemonProbeResult {
-  running: boolean;
-  status?: unknown;
-  error?: string;
-}
-
-export interface DaemonRepairResult {
-  attempted: boolean;
-  fixed: boolean;
-  pid?: number;
-  error?: string;
-}
-
-interface DaemonRestartResult {
-  attempted: boolean;
-  restarted: boolean;
-  method: "launchd";
-  plistPath: string;
-  target?: string;
-  before?: DaemonProbeResult;
-  after?: DaemonProbeResult;
-  error?: string;
-}
-
-interface CommandFailure extends Error {
-  code?: string;
-  exitCode?: number;
-}
-
-interface SelectOption {
-  value: string;
-  label: string;
-  hint?: string;
-}
-
-function isSupportedPaymentMethod(method: string): method is SupportedPaymentMethod {
-  return (SUPPORTED_PAYMENT_METHODS as readonly string[]).includes(method);
-}
-
-function configuredControlPort(): number {
-  return parsePortEnv("TB_PROXYD_CONTROL_PORT", CONTROL_PORT);
-}
-
-function configuredProxyPort(): number {
-  return parsePortEnv("TB_PROXYD_PROXY_PORT", PROXY_PORT);
-}
-
-function parsePortEnv(name: string, fallback: number): number {
-  const rawValue = process.env[name];
-  if (!rawValue) {
-    return fallback;
-  }
-  const port = Number(rawValue);
-  if (!Number.isInteger(port) || port < 0 || port > 65535) {
-    throw new Error(`${name} must be an integer port between 0 and 65535`);
-  }
-  return port;
-}
-
-function openBuyerStore(): BuyerStore {
-  return new BuyerStore();
-}
-
-function currentModuleDir(): string {
-  if (typeof __dirname !== "undefined") {
-    return __dirname;
-  }
-
-  const stack = new Error().stack || "";
-  const fileUrlMatch = stack.match(/(file:\/\/\/[^)\n]+\/cli\.js):\d+:\d+/);
-  if (fileUrlMatch) {
-    return path.dirname(fileURLToPath(fileUrlMatch[1]));
-  }
-
-  const filePathMatch = stack.match(/(\/[^)\n]+\/cli\.(?:js|ts)):\d+:\d+/);
-  if (filePathMatch) {
-    return path.dirname(filePathMatch[1]);
-  }
-
-  return process.cwd();
-}
-
-async function probeDaemonStatus(controlPort: number): Promise<DaemonProbeResult> {
-  try {
-    const res = await fetch(`http://127.0.0.1:${controlPort}/status`);
-    if (res.ok) {
-      return {
-        running: true,
-        status: await res.json()
-      };
-    }
-    return {
-      running: false,
-      error: `HTTP ${res.status}`
-    };
-  } catch (error: unknown) {
-    return {
-      running: false,
-      error: error instanceof Error ? error.message : String(error)
-    };
-  }
-}
-
-interface NormalizedClawtipPaymentPayload {
-  orderNo: string;
-  amountFen?: number;
-  payTo?: string;
-  encryptedData?: string;
-  indicator: string;
-  slug?: string;
-  skillId?: string;
-  description?: string;
-  resourceUrl: string;
-}
-
-async function waitForDaemonStatus(controlPort: number, timeoutMs: number): Promise<DaemonProbeResult> {
-  const deadline = Date.now() + timeoutMs;
-  let latest: DaemonProbeResult = { running: false, error: "not checked" };
-  while (Date.now() < deadline) {
-    latest = await probeDaemonStatus(controlPort);
-    if (latest.running) {
-      return latest;
-    }
-    await new Promise(resolve => setTimeout(resolve, 150));
-  }
-  return latest;
-}
-
-function launchControlUi(controlPort: number, pathname = "/"): string {
-  const normalizedPathname = pathname.startsWith("/") ? pathname : `/${pathname}`;
-  const url = `http://127.0.0.1:${controlPort}${normalizedPathname}`;
-  const platform = process.platform;
-  const args: string[] = platform === "darwin" ? [url] : platform === "win32" ? ["/c", "start", "", url] : [url];
-  const cmd = platform === "win32" ? "cmd" : platform === "darwin" ? "open" : "xdg-open";
-  const child = spawn(cmd, args, { detached: true, stdio: "ignore" });
-  child.on("error", (err) => {
-    console.error(`Failed to launch browser: ${err.message}`);
-    process.exitCode = 1;
-  });
-  child.unref();
-  return url;
-}
-
-function defaultProxydLogPath(kind: "stdout" | "stderr"): string {
-  const logDir = path.join(os.homedir(), ".tokenbuddy-store");
-  fs.mkdirSync(logDir, { recursive: true });
-  return path.join(logDir, `tb-proxyd.${kind}.log`);
-}
-
-function tbProxydScriptPath(): string {
-  return path.resolve(currentModuleDir(), "./tb-proxyd.js");
-}
-
-function tbClawtipProofScriptPath(): string {
-  return path.resolve(currentModuleDir(), "../../bin/tb-clawtip-proof.js");
-}
-
-function defaultClawtipProofCommand(): string {
-  return process.env.TB_PROXYD_CLAWTIP_PROOF_COMMAND || tbClawtipProofScriptPath();
-}
-
-/**
- * `buildLaunchdPlistContent` 的输入。
- * 用于生成 macOS launchd plist，把 `tb-proxyd` 注册成 LaunchAgent。
- */
-export interface LaunchdPlistOptions {
-  label: string;
-  nodePath: string;
-  scriptPath: string;
-  stdoutPath: string;
-  stderrPath: string;
-  controlPort: number;
-  proxyPort: number;
-  sellerRegistryUrl: string;
-  pathEnv?: string;
-  clawtipProofCommand?: string;
-  clawtipProofTimeoutMs?: number;
-}
-
-function escapeXmlText(value: string): string {
-  return value
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;");
-}
-
-function buildLaunchdPathEnv(nodePath: string, pathEnv?: string): string {
-  const entries = [
-    path.dirname(nodePath),
-    ...(pathEnv || process.env.PATH || "").split(path.delimiter),
-  ]
-    .map((entry) => entry.trim())
-    .filter((entry) => entry.length > 0);
-  return Array.from(new Set(entries)).join(path.delimiter);
-}
-
-/**
- * 构造 macOS launchd plist 的 XML 文本，用于 `launchctl load` 注册 `tb-proxyd`。
- * 已转义所有插值字段，避免 XML 注入；env 块只输出非空项。
- *
- * @param options plist 字段
- * @returns 完整的 plist XML 字符串
- */
-export function buildLaunchdPlistContent(options: LaunchdPlistOptions): string {
-  const env: Record<string, string> = {
-    TB_PROXYD_CONTROL_PORT: String(options.controlPort),
-    TB_PROXYD_PROXY_PORT: String(options.proxyPort),
-    TB_PROXYD_SELLER_REGISTRY_URL: options.sellerRegistryUrl,
-    PATH: buildLaunchdPathEnv(options.nodePath, options.pathEnv),
-  };
-  if (options.clawtipProofCommand?.trim()) {
-    env.TB_PROXYD_CLAWTIP_PROOF_COMMAND = options.clawtipProofCommand.trim();
-  }
-  if (options.clawtipProofTimeoutMs !== undefined) {
-    env.TB_PROXYD_CLAWTIP_PROOF_TIMEOUT_MS = String(options.clawtipProofTimeoutMs);
-  }
-  const envEntries = Object.entries(env)
-    .map(([key, value]) => `        <key>${escapeXmlText(key)}</key>\n        <string>${escapeXmlText(value)}</string>`)
-    .join("\n");
-
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>Label</key>
-    <string>${escapeXmlText(options.label)}</string>
-    <key>ProgramArguments</key>
-    <array>
-        <string>${escapeXmlText(options.nodePath)}</string>
-        <string>${escapeXmlText(options.scriptPath)}</string>
-    </array>
-    <key>EnvironmentVariables</key>
-    <dict>
-${envEntries}
-    </dict>
-    <key>RunAtLoad</key>
-    <true/>
-    <key>KeepAlive</key>
-    <true/>
-    <key>StandardOutPath</key>
-    <string>${escapeXmlText(options.stdoutPath)}</string>
-    <key>StandardErrorPath</key>
-    <string>${escapeXmlText(options.stderrPath)}</string>
-</dict>
-</plist>`;
-}
-
-function launchdUserDomain(): string {
-  if (typeof process.getuid === "function") {
-    return `gui/${process.getuid()}`;
-  }
-  return "gui/501";
-}
-
-function launchAgentPlistPath(label: string): string {
-  return path.join(os.homedir(), "Library", "LaunchAgents", `${label}.plist`);
-}
-
-function launchdServiceTarget(label: string): string {
-  return `${launchdUserDomain()}/${label}`;
-}
-
-function runLaunchctl(args: string[], ignoreFailure = false): void {
-  try {
-    execFileSync("launchctl", args, { stdio: "ignore" });
-  } catch (error) {
-    if (!ignoreFailure) {
-      throw error;
-    }
-  }
-}
-
-function sleepSync(ms: number): void {
-  const shared = new Int32Array(new SharedArrayBuffer(4));
-  Atomics.wait(shared, 0, 0, ms);
-}
-
-function runLaunchctlWithRetry(
-  args: string[],
-  run: (args: string[], ignoreFailure?: boolean) => void,
-  attempts = 3
-): void {
-  let latestError: unknown;
-  for (let attempt = 0; attempt < attempts; attempt += 1) {
-    try {
-      run(args);
-      return;
-    } catch (error: unknown) {
-      latestError = error;
-      if (attempt < attempts - 1) {
-        sleepSync(250 * (attempt + 1));
-      }
-    }
-  }
-  throw latestError;
-}
-
-function launchAgentLoaded(label: string, run: (args: string[], ignoreFailure?: boolean) => void = runLaunchctl): boolean {
-  try {
-    run(["print", launchdServiceTarget(label)]);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export function installLaunchAgentWithRunner(
-  plistPath: string,
-  label: string,
-  run: (args: string[], ignoreFailure?: boolean) => void
-): void {
-  const domain = launchdUserDomain();
-  for (const staleLabel of STALE_TOKENBUDDY_LAUNCHD_LABELS) {
-    run(["bootout", `${domain}/${staleLabel}`], true);
-  }
-  const target = launchdServiceTarget(label);
-  if (launchAgentLoaded(label, run)) {
-    run(["bootout", target], true);
-  }
-  runLaunchctlWithRetry(["bootstrap", domain, plistPath], run);
-  run(["kickstart", "-k", target]);
-}
-
-function installLaunchAgent(plistPath: string, label: string): void {
-  installLaunchAgentWithRunner(plistPath, label, runLaunchctl);
-}
-
-async function repairDaemon(controlPort: number): Promise<{ repair: DaemonRepairResult; probe: DaemonProbeResult }> {
-  const existing = await probeDaemonStatus(controlPort);
-  if (existing.running) {
-    return {
-      repair: { attempted: false, fixed: false },
-      probe: existing
-    };
-  }
-
-  const stdoutPath = process.env.TB_PROXYD_STDOUT_LOG_FILE || defaultProxydLogPath("stdout");
-  const stderrPath = process.env.TB_PROXYD_STDERR_LOG_FILE || defaultProxydLogPath("stderr");
-  const stdout = fs.openSync(stdoutPath, "a");
-  const stderr = fs.openSync(stderrPath, "a");
-  const child = spawn(process.execPath, [tbProxydScriptPath()], {
-    detached: true,
-    stdio: ["ignore", stdout, stderr],
-    env: process.env
-  });
-  child.unref();
-  fs.closeSync(stdout);
-  fs.closeSync(stderr);
-
-  const probe = await waitForDaemonStatus(controlPort, 8000);
-  if (probe.running) {
-    return {
-      repair: { attempted: true, fixed: true, pid: child.pid },
-      probe
-    };
-  }
-
-  return {
-    repair: {
-      attempted: true,
-      fixed: false,
-      pid: child.pid,
-      error: probe.error || "tb-proxyd did not become ready"
-    },
-    probe
-  };
-}
-
-interface RestartLaunchAgentDeps {
-  platform: NodeJS.Platform;
-  plistPath: string;
-  existsSync(filePath: string): boolean;
-  runLaunchctl(args: string[]): void;
-  probeDaemonStatus(controlPort: number): Promise<DaemonProbeResult>;
-  waitForDaemonStatus(controlPort: number, timeoutMs: number): Promise<DaemonProbeResult>;
-}
-
-export async function restartLaunchAgent(
-  controlPort: number,
-  deps: RestartLaunchAgentDeps = {
-    platform: process.platform,
-    plistPath: launchAgentPlistPath(TOKENBUDDY_LAUNCHD_LABEL),
-    existsSync: fs.existsSync,
-    runLaunchctl: (args) => runLaunchctl(args),
-    probeDaemonStatus,
-    waitForDaemonStatus,
-  },
-): Promise<DaemonRestartResult> {
-  const before = await deps.probeDaemonStatus(controlPort);
-  const baseResult = {
-    attempted: false,
-    restarted: false,
-    method: "launchd" as const,
-    plistPath: deps.plistPath,
-    before,
-  };
-
-  if (deps.platform !== "darwin") {
-    return {
-      ...baseResult,
-      error: "tb daemon restart is only supported for the macOS LaunchAgent service. Run `tb doctor --fix` to start tb-proxyd in the background."
-    };
-  }
-
-  if (!deps.existsSync(deps.plistPath)) {
-    return {
-      ...baseResult,
-      error: "LaunchAgent plist is missing. Run `tb init` to install tb-proxyd as a service first."
-    };
-  }
-
-  const target = launchdServiceTarget(TOKENBUDDY_LAUNCHD_LABEL);
-  try {
-    deps.runLaunchctl(["kickstart", "-k", target]);
-  } catch (error: unknown) {
-    return {
-      ...baseResult,
-      attempted: true,
-      target,
-      error: error instanceof Error ? error.message : String(error)
-    };
-  }
-
-  const after = await deps.waitForDaemonStatus(controlPort, 8000);
-  return {
-    ...baseResult,
-    attempted: true,
-    restarted: after.running,
-    target,
-    after,
-    error: after.running ? undefined : after.error || "tb-proxyd did not become ready after restart"
-  };
-}
-
-export interface WebInitLauncherResult {
-  method: "launchd" | "detached";
-  controlPort: number;
-  proxyPort: number;
-  url: string;
-  probe: DaemonProbeResult;
-  repair?: DaemonRepairResult;
-  plistPath?: string;
-  serviceInstalled?: boolean;
-  error?: string;
-}
-
-interface WebInitStateForLaunch {
-  freshMachine?: boolean;
-  repairMode?: boolean;
-  setup?: {
-    status?: string;
-  };
-}
-
-export interface WebInitLauncherDeps {
-  platform?: NodeJS.Platform;
-  controlPort?: number;
-  proxyPort?: number;
-  sellerRegistryUrl?: string;
-  homeDir?: string;
-  nodePath?: string;
-  scriptPath?: string;
-  pathEnv?: string;
-  stdoutPath?: string;
-  stderrPath?: string;
-  clawtipProofCommand?: string;
-  clawtipProofTimeoutMs?: number;
-  openBrowser?: boolean;
-  mkdirSync?(dirPath: string, options: { recursive: boolean }): void;
-  writeFileSync?(filePath: string, content: string, encoding: BufferEncoding): void;
-  installLaunchAgent?(plistPath: string, label: string): void;
-  repairDaemon?(controlPort: number): Promise<{ repair: DaemonRepairResult; probe: DaemonProbeResult }>;
-  waitForDaemonStatus?(controlPort: number, timeoutMs: number): Promise<DaemonProbeResult>;
-  fetchInitState?(controlPort: number): Promise<WebInitStateForLaunch>;
-  launchControlUi?(controlPort: number, pathname?: string): string;
-}
-
-async function fetchInitStateForLaunch(controlPort: number): Promise<WebInitStateForLaunch> {
-  const res = await fetch(`http://127.0.0.1:${controlPort}/init/state`);
-  if (!res.ok) {
-    throw new Error(`/init/state returned ${res.status}`);
-  }
-  return await res.json() as WebInitStateForLaunch;
-}
-
-async function resolveWebInitPath(
-  controlPort: number,
-  fetchInitState: (controlPort: number) => Promise<WebInitStateForLaunch>
-): Promise<"/init" | "/overview"> {
-  try {
-    const state = await fetchInitState(controlPort);
-    if (state.repairMode === true) {
-      return "/init";
-    }
-    return state.freshMachine === false || state.setup?.status === "completed" ? "/overview" : "/init";
-  } catch (error: unknown) {
-    logger.warn("init.web.state_probe.failed", "web init state probe failed", {
-      errorMessage: error instanceof Error ? error.message : String(error)
-    });
-    return "/init";
-  }
-}
-
-export async function runWebInitLauncher(deps: WebInitLauncherDeps = {}): Promise<WebInitLauncherResult> {
-  const platform = deps.platform ?? process.platform;
-  const controlPort = deps.controlPort ?? configuredControlPort();
-  const proxyPort = deps.proxyPort ?? configuredProxyPort();
-  const sellerRegistryUrl = deps.sellerRegistryUrl ?? sellerRegistryUrlForInit();
-  const home = deps.homeDir ?? os.homedir();
-  const launchUi = deps.launchControlUi ?? launchControlUi;
-  const fetchInitState = deps.fetchInitState ?? fetchInitStateForLaunch;
-  const expectedUrl = `http://127.0.0.1:${controlPort}/init`;
-
-  if (platform === "darwin") {
-    const plistDir = path.join(home, "Library", "LaunchAgents");
-    const plistPath = path.join(plistDir, `${TOKENBUDDY_LAUNCHD_LABEL}.plist`);
-    const stdoutPath = deps.stdoutPath ?? path.join(home, ".tokenbuddy-store", "tb-proxyd.stdout.log");
-    const stderrPath = deps.stderrPath ?? path.join(home, ".tokenbuddy-store", "tb-proxyd.stderr.log");
-    try {
-      (deps.mkdirSync ?? fs.mkdirSync)(plistDir, { recursive: true });
-      (deps.mkdirSync ?? fs.mkdirSync)(path.dirname(stdoutPath), { recursive: true });
-      (deps.mkdirSync ?? fs.mkdirSync)(path.dirname(stderrPath), { recursive: true });
-      const plistContent = buildLaunchdPlistContent({
-        label: TOKENBUDDY_LAUNCHD_LABEL,
-        nodePath: deps.nodePath ?? process.execPath,
-        scriptPath: deps.scriptPath ?? tbProxydScriptPath(),
-        pathEnv: deps.pathEnv,
-        stdoutPath,
-        stderrPath,
-        controlPort,
-        proxyPort,
-        sellerRegistryUrl,
-        clawtipProofCommand: deps.clawtipProofCommand ?? defaultClawtipProofCommand(),
-        clawtipProofTimeoutMs: deps.clawtipProofTimeoutMs ?? (
-          process.env.TB_PROXYD_CLAWTIP_PROOF_TIMEOUT_MS
-            ? Number(process.env.TB_PROXYD_CLAWTIP_PROOF_TIMEOUT_MS)
-            : undefined
-        ),
-      });
-      (deps.writeFileSync ?? fs.writeFileSync)(plistPath, plistContent, "utf8");
-      (deps.installLaunchAgent ?? installLaunchAgent)(plistPath, TOKENBUDDY_LAUNCHD_LABEL);
-    } catch (error: unknown) {
-      const errorMessage = error instanceof Error ? error.message : String(error);
-      const probe = await (deps.waitForDaemonStatus ?? waitForDaemonStatus)(controlPort, 3_000);
-      if (probe.running) {
-        const pathname = await resolveWebInitPath(controlPort, fetchInitState);
-        const url = deps.openBrowser !== false
-          ? launchUi(controlPort, pathname)
-          : `http://127.0.0.1:${controlPort}${pathname}`;
-        logger.warn("init.web.launcher.recovered", "web init launchd install failed but service is ready", {
-          method: "launchd",
-          plistPath,
-          errorMessage,
-        });
-        return {
-          method: "launchd",
-          controlPort,
-          proxyPort,
-          plistPath,
-          serviceInstalled: true,
-          url,
-          probe,
-        };
-      }
-      logger.warn("init.web.launcher.failed", "web init launchd install failed", {
-        method: "launchd",
-        plistPath,
-        errorMessage
-      });
-      return {
-        method: "launchd",
-        controlPort,
-        proxyPort,
-        plistPath,
-        serviceInstalled: false,
-        url: expectedUrl,
-        probe: { ...probe, error: probe.error || errorMessage },
-        error: errorMessage,
-      };
-    }
-
-    const probe = await (deps.waitForDaemonStatus ?? waitForDaemonStatus)(controlPort, 12_000);
-    const pathname = probe.running ? await resolveWebInitPath(controlPort, fetchInitState) : "/init";
-    const url = probe.running && deps.openBrowser !== false
-      ? launchUi(controlPort, pathname)
-      : `http://127.0.0.1:${controlPort}${pathname}`;
-    return {
-      method: "launchd",
-      controlPort,
-      proxyPort,
-      plistPath,
-      serviceInstalled: true,
-      url,
-      probe,
-      error: probe.running ? undefined : probe.error || "tb-proxyd did not become ready"
-    };
-  }
-
-  const repaired = await (deps.repairDaemon ?? repairDaemon)(controlPort);
-  const pathname = repaired.probe.running ? await resolveWebInitPath(controlPort, fetchInitState) : "/init";
-  const url = repaired.probe.running && deps.openBrowser !== false
-    ? launchUi(controlPort, pathname)
-    : `http://127.0.0.1:${controlPort}${pathname}`;
-  return {
-    method: "detached",
-    controlPort,
-    proxyPort,
-    url,
-    probe: repaired.probe,
-    repair: repaired.repair,
-    serviceInstalled: repaired.probe.running,
-    error: repaired.probe.running ? undefined : repaired.repair.error || repaired.probe.error || "tb-proxyd did not become ready"
-  };
-}
-
-function commandPath(command: Command): string {
-  const names: string[] = [];
-  let current: Command | null = command;
-  while (current) {
-    const name = current.name();
-    if (name) {
-      names.unshift(name);
-    }
-    current = current.parent || null;
-  }
-  return names.join(" ");
-}
-
-function rootActionName(command: Command): string {
-  let current = command;
-  while (current.parent && current.parent.parent) {
-    current = current.parent;
-  }
-  return current.name();
-}
-
-function commandRequiresDaemon(command: Command): boolean {
-  const rootName = rootActionName(command);
-  return rootName !== "doctor" && rootName !== "init" && rootName !== "routing" && rootName !== "daemon" && rootName !== "ui" && rootName !== "update";
-}
-
-async function enforceDaemonGate(command: Command): Promise<void> {
-  if (!commandRequiresDaemon(command)) {
-    return;
-  }
-
-  const controlPort = configuredControlPort();
-  const probe = await probeDaemonStatus(controlPort);
-  if (probe.running) {
-    return;
-  }
-
-  const commandName = commandPath(command);
-  logger.warn("daemon.gate.blocked", "tb command blocked because tb-proxyd is not running", {
-    command: commandName,
-    controlPort,
-    errorMessage: probe.error
-  });
-  console.error(`tb-proxyd is not running for \`${commandName}\`.`);
-  console.error(`Checked: http://127.0.0.1:${controlPort}/status`);
-  console.error("Run `tb doctor --fix` to repair tb-proxyd automatically, or run `tb init` to initialize TokenBuddy.");
-  process.exitCode = 1;
-  const error = new Error("tb-proxyd is not running") as CommandFailure;
-  error.code = "tokenbuddy.daemon_not_running";
-  error.exitCode = 1;
-  throw error;
-}
-
-function hashText(value: string): string {
-  return crypto.createHash("sha256").update(value).digest("hex");
-}
-
-function safePaymentView(payment: PaymentConfig) {
-  return {
-    method: payment.method,
-    enabled: payment.enabled,
-    isDefault: payment.isDefault,
-    updatedAt: payment.updatedAt,
-    config: payment.config ? {
-      ...payment.config,
-      proof: undefined,
-      paymentProof: undefined,
-      payCredential: undefined,
-      encryptedData: undefined
-    } : undefined
-  };
-}
-
-function supportedPaymentRows(payments: PaymentConfig[]) {
-  return SUPPORTED_PAYMENT_METHODS.map((method) => {
-    const configured = payments.find((payment) => payment.method === method);
-    return {
-      method,
-      supported: true,
-      configured: Boolean(configured),
-      enabled: configured?.enabled || false,
-      isDefault: configured?.isDefault || false,
-      updatedAt: configured?.updatedAt,
-      config: configured ? safePaymentView(configured).config : undefined
-    };
-  });
-}
-
-function printPaymentList(payments: PaymentConfig[], asJson: boolean): void {
-  const rows = supportedPaymentRows(payments);
-  if (asJson) {
-    console.log(JSON.stringify({ payments: rows }, null, 2));
-    return;
-  }
-
-  const table = new Table({ head: ["Method", "Supported", "Configured", "Enabled", "Default"] });
-  for (const row of rows) {
-    table.push([
-      row.method,
-      row.supported ? "yes" : "no",
-      row.configured ? "yes" : "no",
-      row.enabled ? "yes" : "no",
-      row.isDefault ? "yes" : "no"
-    ]);
-  }
-  console.log("=== TokenBuddy Payment Methods ===");
-  console.log(table.toString());
-}
-
-async function safeCheckPackageUpdate(): Promise<{ check?: PackageUpdateCheck; error?: string }> {
-  if (process.env.NODE_ENV === "test" && process.env.TOKENBUDDY_TEST_UPDATE_CHECK !== "1") {
-    return { error: "version check skipped in tests" };
-  }
-  try {
-    return { check: await checkPackageUpdate() };
-  } catch (error: unknown) {
-    return { error: error instanceof Error ? error.message : String(error) };
-  }
-}
-
-async function runDoctorPackageUpdate(
-  fix: boolean,
-  controlPort: number,
-): Promise<{ check?: PackageUpdateCheck; error?: string } | PackageUpdateResult> {
-  if (process.env.NODE_ENV === "test" && process.env.TOKENBUDDY_TEST_UPDATE_CHECK !== "1") {
-    return { error: "version check skipped in tests" };
-  }
-  if (!fix) {
-    return safeCheckPackageUpdate();
-  }
-  return await runPackageUpdate({ apply: true, controlPort }, { restartProxyd: restartProxydForPackageUpdate });
-}
-
-function printPackageUpdateCheck(result: { check?: PackageUpdateCheck; error?: string }): void {
-  if (result.error) {
-    console.log(`⚠️ Version check unavailable: ${result.error}`);
-    return;
-  }
-  const check = result.check!;
-  if (check.updateAvailable) {
-    console.log(`⬆️ TokenBuddy update available: ${check.currentVersion} -> ${check.latestVersion}`);
-    console.log(`   Run \`tb update\` to install and restart tb-proxyd.`);
-  } else {
-    console.log(`✅ TokenBuddy package is current (${check.currentVersion}).`);
-  }
-}
-
-function packageUpdateExitCode(result: PackageUpdateResult): number {
-  if (!result.check.updateAvailable) {
-    return 0;
-  }
-  if (!result.install.succeeded || !result.restart.restarted) {
-    return 1;
-  }
-  return 0;
-}
-
-function printPackageUpdateResult(result: PackageUpdateResult): void {
-  const { check, install, restart } = result;
-  if (!check.updateAvailable) {
-    console.log(`TokenBuddy is already current (${check.currentVersion}).`);
-    return;
-  }
-
-  console.log(`TokenBuddy update available: ${check.currentVersion} -> ${check.latestVersion}`);
-  if (!install.attempted) {
-    console.log(`Run \`${check.installCommand}\` to install it.`);
-    return;
-  }
-  if (!install.succeeded) {
-    console.error(`Failed to install ${check.packageName}@${check.latestVersion}: ${install.error || "unknown error"}`);
-    return;
-  }
-
-  console.log(`Installed ${check.packageName}@${check.latestVersion}.`);
-  if (!restart.restarted) {
-    console.error(`Failed to restart tb-proxyd: ${restart.error || "unknown error"}`);
-    return;
-  }
-  console.log("tb-proxyd restarted.");
-}
-
-async function restartProxydForPackageUpdate(controlPort: number): Promise<PackageRestartResult> {
-  const result = await restartLaunchAgent(controlPort);
-  return {
-    attempted: result.attempted,
-    restarted: result.restarted,
-    method: result.method,
-    plistPath: result.plistPath,
-    target: result.target,
-    error: result.error,
-  };
-}
-
-export {
-  fetchClawtipBootstrap,
-  normalizeClawtipBootstrapResourceUrl,
-} from "./clawtip-bootstrap.js";
-
-function readProof(options: { proofFile?: string; requireProof?: boolean }): string | undefined {
-  const proofFile = options.proofFile || process.env.TOKENBUDDY_CLAWTIP_PROOF_FILE;
-  if (!proofFile) {
-    if (options.requireProof) {
-      throw new Error("ClawTip proof is required; pass --proof-file or TOKENBUDDY_CLAWTIP_PROOF_FILE");
-    }
-    return undefined;
-  }
-  if (!fs.existsSync(proofFile)) {
-    throw new Error(`ClawTip proof file does not exist: ${proofFile}`);
-  }
-  const proof = fs.readFileSync(proofFile, "utf8").trim();
-  if (!proof) {
-    throw new Error(`ClawTip proof file is empty: ${proofFile}`);
-  }
-  return proof;
-}
-
-function sellerRegistryUrlForInit(): string {
-  return process.env.TB_PROXYD_SELLER_REGISTRY_URL || DEFAULT_SELLER_REGISTRY_URL;
-}
-
-function stableModelChoices(models: ModelCatalogEntry[]): SelectOption[] {
-  const grouped = new Map<string, ModelCatalogEntry[]>();
-  for (const entry of models) {
-    const list = grouped.get(entry.id) || [];
-    list.push(entry);
-    grouped.set(entry.id, list);
-  }
-  return Array.from(grouped.entries()).map(([modelId, entries]) => {
-    const sellerIds = Array.from(new Set(entries.map((entry) => entry.sellerId)));
-    const protocols = Array.from(
-      new Set(entries.flatMap((entry) => entry.supportedProtocols)),
-    );
-    return {
-      value: modelId,
-      label: modelId,
-      hint: `${sellerIds.join(",")} · ${protocols.join(",") || "no-protocol"}`,
-    };
-  });
-}
-
-async function promptSellerRoutingPreference(catalog: SellerCatalogResult): Promise<BuyerSellerRoutingConfig> {
-  const healthySellers = catalog.sellers.filter((seller) => seller.status === "ok");
-  const mode = await p.select({
-    message: "Choose seller routing mode for tb-proxyd:",
-    options: [
-      {
-        value: "fullAuto",
-        label: "Full Auto",
-        hint: "Use all compatible sellers and rank them by the selected scorer.",
-      },
-      {
-        value: "fixed",
-        label: "Fixed Seller",
-        hint: "Pin tb-proxyd to one seller and only use models from that seller.",
-      },
-      {
-        value: "fixedSet",
-        label: "Fixed Seller Set",
-        hint: "Use only a selected seller pool and rank within that pool.",
-      },
-    ],
-  }) as SellerRoutingMode | symbol;
-
-  if (typeof mode !== "string") {
-    throw new Error("seller routing selection was cancelled");
-  }
-  if ((mode === "fixed" || mode === "fixedSet") && healthySellers.length === 0) {
-    throw new Error("no healthy sellers available for fixed routing");
-  }
-  const scorer = await promptSellerRoutingScorer();
-  if (mode === "fullAuto") {
-    return { mode, scorer };
-  }
-
-  if (mode === "fixed") {
-    const sellerId = await p.select({
-    message: "Choose the seller to pin tb-proxyd to:",
-      options: sellerChoices(healthySellers),
-    }) as string | symbol;
-
-    if (typeof sellerId !== "string") {
-      throw new Error("fixed seller selection was cancelled");
-    }
-    return {
-      mode,
-      sellerId,
-      scorer,
-    };
-  }
-
-  const sellerIds = await p.multiselect({
-    message: "Choose the seller pool for fixedSet routing:",
-    options: sellerChoices(healthySellers),
-    required: true
-  }) as string[] | symbol;
-
-  if (!Array.isArray(sellerIds)) {
-    throw new Error("fixedSet seller selection was cancelled");
-  }
-  return {
-    mode,
-    sellerIds,
-    scorer,
-  };
-}
-
-async function promptSellerRoutingScorer(): Promise<SellerRoutingScorer> {
-  const scorer = await p.select({
-    message: "Choose seller ranking preference:",
-    options: [
-      { value: "balanced", label: "Balanced", hint: "Balance health, latency, and discount." },
-      { value: "speed", label: "Speed", hint: "Prefer healthier, faster sellers." },
-      { value: "discount", label: "Discount", hint: "Prefer lower discount ratio first." },
-    ],
-  }) as SellerRoutingScorer | symbol;
-  if (typeof scorer !== "string") {
-    throw new Error("seller scorer selection was cancelled");
-  }
-  return scorer;
-}
-
-function sellerChoices(sellers: SellerCatalogResult["sellers"]): SelectOption[] {
-  return sellers.map((seller) => ({
-    value: seller.id,
-    label: seller.name ? `${seller.name} (${seller.id})` : seller.id,
-    hint: [
-      seller.discountRatio != null ? `discount x${seller.discountRatio}` : null,
-      seller.modelCount != null ? `${seller.modelCount} models` : null,
-      seller.supportedProtocols?.length ? seller.supportedProtocols.join(",") : null,
-      seller.paymentMethods?.length ? seller.paymentMethods.join(",") : null,
-    ]
-      .filter(Boolean)
-      .join(" · ") || seller.url,
-  }));
-}
-
-function buildRoutingConfigFromOptions(
-  modeValue: string,
-  options: { seller?: string; sellerSet?: string; scorer?: string }
-): BuyerSellerRoutingConfig {
-  const mode = parseRoutingModeValue(modeValue);
-  const scorer = parseRoutingScorerValue(options.scorer || "balanced");
-  if (mode === "fixed") {
-    return {
-      mode,
-      sellerId: options.seller?.trim(),
-      scorer
-    };
-  }
-  if (mode === "fixedSet") {
-    return {
-      mode,
-      sellerIds: parseSellerIdList(options.sellerSet || ""),
-      scorer
-    };
-  }
-  return {
-    mode,
-    scorer
-  };
-}
-
-function parseRoutingModeValue(value: string): SellerRoutingMode {
-  if (value === "fixed" || value === "fixedSet" || value === "fullAuto") {
-    return value;
-  }
-  throw new Error("routing mode must be fixed, fixedSet, or fullAuto");
-}
-
-function parseRoutingScorerValue(value: string): SellerRoutingScorer {
-  if (value === "balanced" || value === "speed" || value === "discount") {
-    return value;
-  }
-  throw new Error("routing scorer must be balanced, speed, or discount");
-}
-
-function printRoutingConfig(config: BuyerSellerRoutingConfig, updatedAt?: string): void {
-  console.log("=== TokenBuddy Seller Routing ===");
-  console.log(`Mode: ${config.mode}`);
-  console.log(`Scorer: ${config.scorer}`);
-  if (config.mode === "fixed") {
-    console.log(`Seller: ${config.sellerId || "(not configured)"}`);
-  }
-  if (config.mode === "fixedSet") {
-    console.log(`Seller Set: ${config.sellerIds?.join(",") || "(empty)"}`);
-  }
-  if (updatedAt) {
-    console.log(`Updated: ${updatedAt}`);
-  }
-}
-
-async function promptSingleModelSelection(
-  providerId: ProviderId,
-  models: ModelCatalogEntry[],
-): Promise<SingleModelProviderRuntimeConfig> {
-  const protocolPreference = getProviderProtocolPreference(providerId);
-  const protocolFiltered = protocolPreference
-    ? filterCatalogByProtocol(models, protocolPreference)
-    : models;
-  const choices = stableModelChoices(protocolFiltered);
-  if (choices.length === 0) {
-    throw new Error(`no compatible models available for ${providerId}`);
-  }
-
-  const labelMap: Record<string, string> = {
-    opencode: "OpenCode",
-    codex: "Codex",
-    openclaw: "OpenClaw",
-    hermes: "Hermes",
-    "claude-desktop": "Claude Desktop",
-    "claude-code": "Claude Code",
-  };
-
-  const selectedModel = await p.select({
-    message: `Choose the default model for ${labelMap[providerId] || providerId}:`,
-    options: choices,
-  }) as string | symbol;
-
-  if (typeof selectedModel !== "string") {
-    throw new Error(`default model selection was cancelled for ${providerId}`);
-  }
-
-  return {
-    selectionKind: "single-model",
-    protocolPreference,
-    defaultModel: selectedModel,
-  };
-}
-
-function defaultClaudeDisplayName(modelId: string): string {
-  return modelId.trim();
-}
-
-function makeClaudeRoleMapping(modelId: string): ClaudeCodeModelMappingConfig {
-  const displayName = defaultClaudeDisplayName(modelId);
-  return {
-    selectionKind: "claude-role-mapping",
-    protocolPreference: "messages",
-    fallbackModel: modelId,
-    roles: {
-      sonnet: {
-        upstreamModel: modelId,
-        displayName,
-        declareOneM: true,
-      },
-      opus: {
-        upstreamModel: modelId,
-        displayName,
-        declareOneM: true,
-      },
-      haiku: {
-        upstreamModel: modelId,
-        displayName,
-        declareOneM: false,
-      },
-    },
-  };
-}
-
-async function promptClaudeCodeModelSelection(
-  models: ModelCatalogEntry[],
-): Promise<ClaudeCodeModelMappingConfig> {
-  const protocolFiltered = filterCatalogByProtocol(models, "messages");
-  const choices = stableModelChoices(protocolFiltered);
-  if (choices.length === 0) {
-    throw new Error("no compatible message models available for Claude Code");
-  }
-
-  const sonnetModel = await p.select({
-    message: "Choose the default Sonnet model for Claude Code:",
-    options: choices,
-  }) as string | symbol;
-
-  if (typeof sonnetModel !== "string") {
-    throw new Error("Claude Code model selection was cancelled");
-  }
-
-  const mirrorAllRoles = await p.confirm({
-    message: "Use the same model for Opus and Haiku as well?",
-    initialValue: true,
-  });
-
-  if (typeof mirrorAllRoles !== "boolean") {
-    throw new Error("Claude Code role mapping confirmation was cancelled");
-  }
-
-  if (mirrorAllRoles) {
-    return makeClaudeRoleMapping(sonnetModel);
-  }
-
-  const opusModel = await p.select({
-    message: "Choose the default Opus model for Claude Code:",
-    options: choices,
-  }) as string | symbol;
-  if (typeof opusModel !== "string") {
-    throw new Error("Claude Code Opus model selection was cancelled");
-  }
-
-  const haikuModel = await p.select({
-    message: "Choose the default Haiku model for Claude Code:",
-    options: choices,
-  }) as string | symbol;
-  if (typeof haikuModel !== "string") {
-    throw new Error("Claude Code Haiku model selection was cancelled");
-  }
-
-  return {
-    selectionKind: "claude-role-mapping",
-    protocolPreference: "messages",
-    fallbackModel: sonnetModel,
-    roles: {
-      sonnet: {
-        upstreamModel: sonnetModel,
-        displayName: defaultClaudeDisplayName(sonnetModel),
-        declareOneM: true,
-      },
-      opus: {
-        upstreamModel: opusModel,
-        displayName: defaultClaudeDisplayName(opusModel),
-        declareOneM: true,
-      },
-      haiku: {
-        upstreamModel: haikuModel,
-        displayName: defaultClaudeDisplayName(haikuModel),
-        declareOneM: false,
-      },
-    },
-  };
-}
-
-async function promptProviderSelections(
-  providerIds: ProviderId[],
-  catalog: SellerCatalogResult,
-  sellerRouting: BuyerSellerRoutingConfig,
-): Promise<ProviderSelections> {
-  const baseModels = sellerRouting.mode === "fixed"
-    ? filterCatalogBySeller(catalog.models, sellerRouting.sellerId)
-    : sellerRouting.mode === "fixedSet"
-      ? catalog.models.filter((model) => sellerRouting.sellerIds?.includes(model.sellerId))
-    : catalog.models;
-
-  const selections: ProviderSelections = {};
-  for (const providerId of providerIds) {
-    const selectionKind = getProviderModelSelectionKind(providerId);
-    if (selectionKind === "claude-role-mapping") {
-      selections[providerId] = await promptClaudeCodeModelSelection(baseModels);
-      continue;
-    }
-    selections[providerId] = await promptSingleModelSelection(
-      providerId,
-      baseModels,
-    );
-  }
-  return selections;
-}
-
-/**
- * 构造 commander program，绑定所有 `tb` 子命令（doctor / init / config / provider 等）。
- * 在 `preAction` 钩子里做 daemon gate：非 daemon-only 命令跳过，其余命令需要本地 `tb-proxyd` 在跑。
- *
- * @returns 配置完整的 commander Command 实例
- */
-export function buildCli(): Command {
-  const program = new Command();
-  program
-    .name("tb")
-    .description("Buyer CLI for TokenBuddy")
-    .version(readCliPackageVersion());
-
-  program.hook("preAction", async (_thisCommand, actionCommand) => {
-    await enforceDaemonGate(actionCommand);
-  });
-
-  program
-    .command("update")
-    .description("Check for a TokenBuddy package update, install it, and restart tb-proxyd")
-    .option("--check", "Only check for an available update")
-    .option("--json", "Output update state as JSON")
-    .action(async (options: { check?: boolean; json?: boolean }) => {
-      const controlPort = configuredControlPort();
-      try {
-        const result = await runPackageUpdate(
-          { apply: !options.check, controlPort },
-          { restartProxyd: restartProxydForPackageUpdate },
-        );
-        if (options.json) {
-          console.log(JSON.stringify(result, null, 2));
-        } else if (options.check) {
-          printPackageUpdateCheck({ check: result.check });
-        } else {
-          printPackageUpdateResult(result);
-        }
-        if (!options.check) {
-          process.exitCode = packageUpdateExitCode(result);
-        }
-      } catch (error: unknown) {
-        const errorMessage = error instanceof Error ? error.message : String(error);
-        process.exitCode = 1;
-        if (options.json) {
-          console.log(JSON.stringify({ error: { code: "package_update_failed", message: errorMessage } }, null, 2));
-        } else {
-          console.error(`TokenBuddy update failed: ${errorMessage}`);
-        }
-      }
-    });
-
-  // 1. tb doctor
-  program
-    .command("doctor")
-    .description("Check running status, system agents, and network diagnostics")
-    .option("--json", "Output diagnostics as JSON")
-    .option("--fix", "Start tb-proxyd when needed, install available package updates, and restart the service")
-    .action(async (options: { json?: boolean; fix?: boolean }) => {
-      const controlPort = configuredControlPort();
-      const proxyPort = configuredProxyPort();
-      const controlUrl = `http://127.0.0.1:${controlPort}`;
-      const plistPath = process.platform === "darwin"
-        ? path.join(os.homedir(), "Library", "LaunchAgents", "com.tokenbuddy.proxyd.plist")
-        : undefined;
-      let probe = await probeDaemonStatus(controlPort);
-      let repair: DaemonRepairResult = { attempted: false, fixed: false };
-      if (!probe.running && options.fix) {
-        const repaired = await repairDaemon(controlPort);
-        repair = repaired.repair;
-        probe = repaired.probe;
-      }
-      const daemonInfo = probe.status;
-      const daemonRunning = probe.running;
-      const daemonError = probe.error;
-      const daemonStatus = daemonInfo && typeof daemonInfo === "object"
-        ? daemonInfo as { selectionMode?: string; sellerRoutingMode?: string; selectedSellerId?: string; sellerRegistryUrl?: string }
-        : undefined;
-      const providers = readDoctorProviders();
-      const updateState = await runDoctorPackageUpdate(Boolean(options.fix), controlPort).catch((error: unknown) => ({
-            error: error instanceof Error ? error.message : String(error)
-          }));
-      if (options.fix && repair.attempted && !repair.fixed) {
-        process.exitCode = 1;
-      }
-      if (options.fix && "check" in updateState && updateState.check?.updateAvailable) {
-        process.exitCode = packageUpdateExitCode(updateState as PackageUpdateResult);
-      }
-      if (options.fix && "error" in updateState && updateState.error) {
-        process.exitCode = 1;
-      }
-
-      if (options.json) {
-        const diagnostics = await collectDoctorDiagnostics({
-          controlPort,
-          proxyPort,
-          daemonRunning,
-          daemonError,
-          providers,
-          sellerRegistryUrl: daemonStatus?.sellerRegistryUrl,
-        });
-        const v12Snapshot = daemonRunning
-          ? await fetchV12Snapshot(controlUrl)
-          : null;
-        console.log(JSON.stringify({
-          daemon: {
-            running: daemonRunning,
-            controlPort,
-            proxyPort,
-            controlUrl,
-            status: daemonInfo,
-            error: daemonError,
-            fixAvailable: true
-          },
-          repair: {
-            requested: Boolean(options.fix),
-            ...repair
-          },
-          packageUpdate: updateState,
-          service: {
-            platform: process.platform,
-            plistPath,
-            plistExists: plistPath ? fs.existsSync(plistPath) : false
-          },
-          v12: v12Snapshot,
-          ...diagnostics,
-        }, null, 2));
-        return;
-      }
-
-      console.log("=== TokenBuddy System Diagnostics ===");
-      printPackageUpdateCheck("check" in updateState ? { check: updateState.check } : updateState);
-      if (options.fix && "install" in updateState) {
-        printPackageUpdateResult(updateState);
-      }
-      console.log("");
-      
-      // 1. Detect if daemon is listening
-      if (daemonRunning) {
-        const info = daemonInfo as { pid?: number; controlPort?: number; proxyPort?: number };
-          console.log(`✅ Daemon tb-proxyd is running (PID: ${info.pid})`);
-          console.log(`   Control Plane Port: ${info.controlPort}`);
-          console.log(`   Proxy Plane Port: ${info.proxyPort}`);
-      } else {
-        console.log("❌ Daemon tb-proxyd is NOT running.");
-        if (options.fix && repair.attempted) {
-          console.log(`❌ Automatic repair failed: ${repair.error || daemonError || "unknown error"}`);
-        } else {
-          console.log("   Run `tb doctor --fix` to start tb-proxyd in the background.");
-        }
-      }
-
-      if (options.fix && repair.fixed) {
-        console.log(`✅ tb-proxyd was started in the background (PID: ${repair.pid}).`);
-      }
-
-      // 2. Detect plist launchd status on Darwin
-      if (plistPath) {
-        if (fs.existsSync(plistPath)) {
-          console.log(`✅ LaunchAgent plist exists at: ${plistPath}`);
-        } else {
-          console.log("⚠️ LaunchAgent plist does NOT exist. Run `tb init` to install it as service.");
-        }
-      }
-
-      if (daemonStatus) {
-        console.log(`   Control Plane URL: ${controlUrl}`);
-        console.log(`   Proxy Plane URL: http://127.0.0.1:${proxyPort}`);
-        if (daemonStatus.sellerRoutingMode || daemonStatus.selectionMode) {
-          console.log(`   Routing Mode: ${daemonStatus.sellerRoutingMode || daemonStatus.selectionMode}`);
-        }
-        if (daemonStatus.selectedSellerId) {
-          console.log(`   Selected Seller: ${daemonStatus.selectedSellerId}`);
-        }
-        if (daemonStatus.sellerRegistryUrl) {
-          console.log(`   Registry URL: ${daemonStatus.sellerRegistryUrl}`);
-        }
-      }
-
-      printDoctorProviders(providers);
-      await renderDoctorDiagnosticsProgressively({
-        controlPort,
-        proxyPort,
-        daemonRunning,
-        daemonError,
-        sellerRegistryUrl: daemonStatus?.sellerRegistryUrl,
-        providers,
-      });
-
-      // v1.2 §18.11: append the prewarm cache / pool / credit summary
-      // block so users can see at a glance how much of their budget is
-      // being burned by failover and which sellers are in circuit_open.
-      if (daemonRunning) {
-        await renderDoctorV12Section(controlUrl);
-      }
-    });
-
-  // tb ui — 探测 daemon + 用系统默认浏览器打开控制台
-  program
-    .command("ui")
-    .description("Open the local TokenBuddy control console in your default browser")
-    .action(async () => {
-      const controlPort = configuredControlPort();
-      const url = `http://127.0.0.1:${controlPort}/`;
-      const probe = await probeDaemonStatus(controlPort);
-      if (!probe.running) {
-        console.error(`tb-proxyd is not running.`);
-        console.error(`Checked: ${url}status`);
-        console.error(`Run \`tb init\` to complete first-time setup, then \`tb-proxyd\` to start the daemon.`);
-        process.exitCode = 1;
-        const err = new Error("tb-proxyd is not running") as CommandFailure;
-        err.code = "tokenbuddy.daemon_not_running";
-        err.exitCode = 1;
-        throw err;
-      }
-      console.log(`Opening ${launchControlUi(controlPort)} in your default browser…`);
-    });
-
-  const daemon = program
-    .command("daemon")
-    .description("Manage the local tb-proxyd service");
-
-  daemon
-    .command("restart")
-    .description("Restart tb-proxyd through the installed macOS LaunchAgent")
-    .option("--json", "Output restart result as JSON")
-    .action(async (options: { json?: boolean }) => {
-      const controlPort = configuredControlPort();
-      const proxyPort = configuredProxyPort();
-      if (!options.json) {
-        console.log("Restarting tb-proxyd LaunchAgent...");
-      }
-      const result = await restartLaunchAgent(controlPort);
-      if (!result.restarted) {
-        process.exitCode = 1;
-      }
-
-      if (options.json) {
-        const daemonProbe = result.after || result.before;
-        console.log(JSON.stringify({
-          restart: result,
-          daemon: {
-            running: Boolean(daemonProbe?.running),
-            controlPort,
-            proxyPort,
-            controlUrl: `http://127.0.0.1:${controlPort}`,
-            proxyUrl: `http://127.0.0.1:${proxyPort}`,
-            status: daemonProbe?.status,
-            error: daemonProbe?.error || result.error
-          }
-        }, null, 2));
-        return;
-      }
-
-      if (!result.restarted) {
-        console.error(`Failed to restart tb-proxyd: ${result.error || "unknown error"}`);
-        if (!result.after?.running) {
-          console.error(`Checked: http://127.0.0.1:${controlPort}/status`);
-        }
-        return;
-      }
-
-      const status = result.after?.status && typeof result.after.status === "object"
-        ? result.after.status as { pid?: number; controlPort?: number; proxyPort?: number }
-        : undefined;
-      console.log(`✅ tb-proxyd restarted${status?.pid ? ` (PID: ${status.pid})` : ""}.`);
-      console.log(`   Control Plane URL: http://127.0.0.1:${status?.controlPort || controlPort}`);
-      console.log(`   Proxy Plane URL: http://127.0.0.1:${status?.proxyPort || proxyPort}`);
-    });
-
-  // v1.2 §18.11 helpers for `tb doctor` / `tb doctor --json`.
-  async function fetchV12Snapshot(controlUrl: string): Promise<unknown | null> {
-    try {
-      const res = await fetch(`${controlUrl}/v1.2/prewarm`);
-      if (!res.ok) {
-        return null;
-      }
-      return await res.json();
-    } catch {
-      return null;
-    }
-  }
-
-  async function renderDoctorV12Section(controlUrl: string): Promise<void> {
-    try {
-      const res = await fetch(`${controlUrl}/v1.2/prewarm`);
-      if (!res.ok) {
-        return;
-      }
-      const snapshot = (await res.json()) as {
-        prewarm: { entries: Array<{ modelId: string; state: string; candidateCount: number; warmedAt: number; ttlMs: number; consecutiveWarmingFailures: number }>; size: number };
-        pool: { size: number; entries: Array<{ sellerId: string; circuit: string; healthScore: number }> };
-        credit: { totalWastedMicros: number; wastedSinceLastDoctorRun: number; purchasesInLastMinute: number; purchaseBudgetPerMinute: number; perSeller: Array<{ sellerId: string; currentBalanceMicros: number; leftoverCreditMicros: number }> };
-        focusSet: string[];
-        scheduler: { inFlight: number; queueDepth: number; totalSucceeded: number; totalFailed: number };
-      };
-      console.log("");
-      console.log("=== v1.2 Fallback Pipeline ===");
-      console.log(`Focus Set: ${snapshot.focusSet.length === 0 ? "(empty; using lazy prewarms)" : snapshot.focusSet.join(", ")}`);
-      console.log(`Prewarm Cache: ${snapshot.prewarm.size} entries`);
-      for (const entry of snapshot.prewarm.entries.slice(0, 10)) {
-        console.log(`  - ${entry.modelId} [${entry.state}] ${entry.candidateCount} candidates, age ${Math.max(0, Date.now() - entry.warmedAt)}ms / ttl ${entry.ttlMs}ms`);
-      }
-      const open = snapshot.pool.entries.filter((e) => e.circuit !== "closed");
-      console.log(`Seller Pool: ${snapshot.pool.size} entries, ${open.length} non-closed`);
-      for (const entry of open.slice(0, 5)) {
-        console.log(`  - ${entry.sellerId} [${entry.circuit}] healthScore=${entry.healthScore}`);
-      }
-      console.log(`Credit: totalWasted=${snapshot.credit.totalWastedMicros}μ, sinceLastDoctor=${snapshot.credit.wastedSinceLastDoctorRun}μ, purchasesInLastMinute=${snapshot.credit.purchasesInLastMinute}/${snapshot.credit.purchaseBudgetPerMinute}`);
-      for (const seller of snapshot.credit.perSeller.slice(0, 5)) {
-        console.log(`  - ${seller.sellerId} balance=${seller.currentBalanceMicros}μ, leftover=${seller.leftoverCreditMicros}μ`);
-      }
-      console.log(`Scheduler: inFlight=${snapshot.scheduler.inFlight}, queueDepth=${snapshot.scheduler.queueDepth}, succeeded=${snapshot.scheduler.totalSucceeded}, failed=${snapshot.scheduler.totalFailed}`);
-    } catch (err) {
-      // Doctor must not fail because of an optional section.
-      const message = err instanceof Error ? err.message : String(err);
-      console.log(`\n(v1.2 snapshot unavailable: ${message})`);
-    }
-  }
-
-  // 2. tb payment
-  const payment = program.command("payment").description("Manage payment methods");
-  
-  payment
-    .command("list")
-    .description("List configured and available payment methods")
-    .option("--json", "Output payment state as JSON")
-    .action(async (options: { json?: boolean }) => {
-      const store = openBuyerStore();
-      try {
-        printPaymentList(store.listPayments(), Boolean(options.json));
-      } finally {
-        store.close();
-      }
-    });
-
-  payment
-    .command("add <method>")
-    .description("Add/Configure a payment method")
-    .option("--bootstrap-url <url>", "Wallet bootstrap URL for ClawTip activation")
-    .option("--proof-file <file>", "File containing ClawTip payment proof")
-    .option("--require-proof", "Require ClawTip payment proof before saving the method")
-    .action(async (method: string, options: { bootstrapUrl?: string; proofFile?: string; requireProof?: boolean }) => {
-      if (!isSupportedPaymentMethod(method)) {
-        console.error(`Unsupported payment method: ${method}`);
-        process.exitCode = 1;
-        return;
-      }
-
-      const store = openBuyerStore();
-      try {
-        if (method === "mock") {
-          store.savePayment({
-            method: "mock",
-            enabled: true,
-            isDefault: true,
-            config: { channel: "developer", explicitOptIn: true }
-          });
-          logger.info("payment.channel.added", "payment channel added", {
-            method: "mock",
-            isDefault: true
-          });
-          console.log("Mock payment method registered and set as default.");
-          return;
-        }
-
-        const bootstrapUrl = options.bootstrapUrl || process.env.TOKENBUDDY_BOOTSTRAP_URL || DEFAULT_CLAWTIP_BOOTSTRAP_URL;
-        const proof = readProof({
-          proofFile: options.proofFile,
-          requireProof: options.requireProof
-        });
-        const bootstrap = await fetchClawtipBootstrap(bootstrapUrl);
-        const paymentPayload = bootstrap.payment!;
-        const proofHash = proof ? hashText(proof) : undefined;
-        store.savePayment({
-          method: "clawtip",
-          enabled: true,
-          isDefault: true,
-          config: {
-            bootstrapUrl,
-            orderNo: paymentPayload.orderNo,
-            amountFen: paymentPayload.amountFen ?? bootstrap.activationFeeFen,
-            indicator: paymentPayload.indicator,
-            slug: paymentPayload.slug,
-            skillId: paymentPayload.skillId,
-            description: paymentPayload.description,
-            resourceUrl: paymentPayload.resourceUrl,
-            proofHash,
-            proofRequired: Boolean(options.requireProof)
-          }
-        });
-        logger.info("payment.channel.added", "payment channel added", {
-          method: "clawtip",
-          isDefault: true,
-          proofProvided: Boolean(proofHash),
-          orderNo: paymentPayload.orderNo
-        });
-        console.log("ClawTip payment method registered and set as default.");
-        console.log(`Order: ${paymentPayload.orderNo}`);
-        console.log(`AmountFen: ${paymentPayload.amountFen ?? bootstrap.activationFeeFen}`);
-        console.log(`Indicator: ${paymentPayload.indicator}`);
-        console.log(`ResourceUrl: ${paymentPayload.resourceUrl}`);
-        if (paymentPayload.resourceUrl) {
-          qrcode.generate(paymentPayload.resourceUrl, { small: true });
-        }
-      } catch (error: unknown) {
-        console.error(error instanceof Error ? error.message : String(error));
-        process.exitCode = 1;
-      } finally {
-        store.close();
-      }
-    });
-
-  payment
-    .command("remove <method>")
-    .description("Remove a payment method")
-    .action(async (method: string) => {
-      if (!isSupportedPaymentMethod(method)) {
-        console.error(`Unsupported payment method: ${method}`);
-        process.exitCode = 1;
-        return;
-      }
-      const store = openBuyerStore();
-      try {
-        const removed = store.removePayment(method);
-        logger.info("payment.channel.removed", "payment channel removed", {
-          method,
-          removed
-        });
-        console.log(`Payment method \`${method}\` ${removed ? "removed" : "was not configured"}.`);
-      } finally {
-        store.close();
-      }
-    });
-
-  // 3. tb routing
-  const routing = program.command("routing").description("Manage buyer-side seller routing strategy");
-
-  routing
-    .command("show")
-    .description("Show the configured seller routing strategy")
-    .option("--json", "Output routing config as JSON")
-    .action(async (options: { json?: boolean }) => {
-      const store = openBuyerStore();
-      try {
-        const record = store.getDaemonRuntimeConfig<unknown>(ROUTING_CONFIG_KEY);
-        const config = record ? normalizeSellerRoutingConfig(record.config) : defaultSellerRoutingConfig();
-        if (options.json) {
-          console.log(JSON.stringify({ routing: config, updatedAt: record?.updatedAt }, null, 2));
-          return;
-        }
-        printRoutingConfig(config, record?.updatedAt);
-      } finally {
-        store.close();
-      }
-    });
-
-  routing
-    .command("set <mode>")
-    .description("Set seller routing strategy: fullAuto, fixed, or fixedSet")
-    .option("--seller <id>", "Seller id for fixed routing")
-    .option("--seller-set <ids>", "Comma-separated seller ids for fixedSet routing")
-    .option("--scorer <scorer>", "Ranking scorer: balanced, speed, or discount", "balanced")
-    .action(async (mode: string, options: { seller?: string; sellerSet?: string; scorer?: string }) => {
-      const config = buildRoutingConfigFromOptions(mode, options);
-      assertSellerRoutingConfig(config);
-      const store = openBuyerStore();
-      try {
-        store.saveDaemonRuntimeConfig(ROUTING_CONFIG_KEY, config);
-      } finally {
-        store.close();
-      }
-      printRoutingConfig(config);
-    });
-
-  // 3. tb models
-  program
-    .command("models")
-    .description("Show available LLM models through local proxy")
-    .option("--json", "Output model list as JSON")
-    .action(async (options: { json?: boolean }) => {
-      try {
-        const controlPort = configuredControlPort();
-        const proxyPort = configuredProxyPort();
-        const status = await probeDaemonStatus(controlPort);
-        const daemonInfo = status.status && typeof status.status === "object"
-          ? status.status as { sellerRegistryUrl?: string }
-          : undefined;
-        const models = await collectDoctorModelsSummary({
-          controlPort,
-          proxyPort,
-          daemonRunning: status.running,
-          daemonError: status.error,
-          sellerRegistryUrl: daemonInfo?.sellerRegistryUrl,
-        });
-
-        if (options.json) {
-          console.log(JSON.stringify(models, null, 2));
-          if (!models.available) {
-            process.exitCode = 1;
-          }
-          return;
-        }
-
-        printDoctorModelsSummary(models);
-        if (!models.available) {
-          process.exitCode = 1;
-        }
-      } catch (err: any) {
-        console.error("Error connecting to local proxy:", err.message);
-        process.exitCode = 1;
-      }
-    });
-
-  // 4. tb init (WOW terminal guide向导)
-  program
-    .command("init")
-    .description("Start TokenBuddy and open the web setup wizard")
-    .option("--terminal", "Run the legacy terminal setup wizard")
-    .action(async (options: { terminal?: boolean }) => {
-      if (!options.terminal) {
-        const result = await runWebInitLauncher();
-        if (result.probe.running) {
-          console.log(`TokenBuddy local service is ready on :${result.controlPort}.`);
-          console.log(`Opening ${result.url} in your default browser…`);
-          console.log("Run `tb init --terminal` if you need the legacy terminal wizard.");
-          return;
-        }
-
-        console.error("TokenBuddy local service did not become ready.");
-        console.error(`Checked: http://127.0.0.1:${result.controlPort}/status`);
-        if (result.method === "launchd" && result.plistPath) {
-          console.error(`LaunchAgent: ${result.plistPath}`);
-        }
-        if (result.error) {
-          console.error(`Reason: ${result.error}`);
-        }
-        console.error("Run `tb doctor --fix` to retry background startup, or `tb init --terminal` for the legacy terminal wizard.");
-        process.exitCode = 1;
-        const error = new Error("TokenBuddy local service did not become ready") as CommandFailure;
-        error.code = "tokenbuddy.init_daemon_not_ready";
-        error.exitCode = 1;
-        throw error;
-      }
-
-      p.intro("🚀 Welcome to TokenBuddy Interactive Wizard!");
-      const setupSummaryLines: string[] = [];
-
-      // Step 1: Scan coding terminals
-      const spinner = p.spinner();
-      spinner.start("Scanning local system for programming terminals...");
-      const candidates = detectProviders();
-      const terminalSelection = buildInitTerminalSelectionState(candidates);
-      spinner.stop("Scan completed.");
-
-      const installedTerminalMessage = buildInstalledTerminalMessage(terminalSelection.installed);
-      if (installedTerminalMessage) {
-        p.note(installedTerminalMessage, "Already Configured");
-        setupSummaryLines.push(`${terminalSelection.installed.length} terminal${terminalSelection.installed.length === 1 ? "" : "s"} already configured.`);
-      }
-
-      if (terminalSelection.options.length === 1 && terminalSelection.options[0].value === OTHER_TERMINAL_OPTION.value) {
-        p.note("No active programming terminals detected. Install one of Codex, Claude Code, Claude Desktop, OpenCode, OpenClaw or Hermes first.");
-      } else {
-        const selected = await p.multiselect({
-          message: "Select programming terminals to route via TokenBuddy (use Space to select, Enter to confirm):",
-          options: terminalSelection.options,
-          required: false
-        }) as string[];
-
-        const selectionError = validateInitTerminalSelection(selected);
-        if (selectionError) {
-          throw new Error(selectionError);
-        }
-
-        const selectedActionable = selected.filter((value) => !value.endsWith(":installed"));
-        const selectedOther = selectedActionable.includes(OTHER_TERMINAL_OPTION.value);
-        const selectedProviders = selectedActionable.filter((value) => value !== OTHER_TERMINAL_OPTION.value);
-
-        if (selectedOther) {
-          p.note(
-            [
-              "✅ OpenAI-compatible Proxy",
-              "   URL: http://127.0.0.1:17821/v1",
-              "   Probe: http://127.0.0.1:17821/v1/models",
-              "   Token: TOKENBUDDY_PROXY",
-              "",
-              "✅ Anthropic-compatible Proxy",
-              "   URL: http://127.0.0.1:17821"
-            ].join("\n"),
-            "TokenBuddy Proxy Interfaces"
-          );
-          setupSummaryLines.push("Manual terminal setup selected via Other.");
-        }
-
-        if (selectedProviders.length > 0) {
-          spinner.start("Fetching seller-backed model catalog...");
-          const proxyUrl = `http://127.0.0.1:${configuredProxyPort()}`;
-          const registryUrl = sellerRegistryUrlForInit();
-          let catalog: SellerCatalogResult;
-          try {
-            catalog = await discoverSellerBackedModels(registryUrl);
-          } catch (error: unknown) {
-            spinner.stop("Failed to fetch seller-backed models.");
-            throw error;
-          }
-          spinner.stop("Seller-backed model catalog loaded.");
-
-          const providerIds = selectedProviders.filter((provider): provider is ProviderId => {
-            return [
-              "codex",
-              "claude-code",
-              "claude-desktop",
-              "openclaw",
-              "opencode",
-              "hermes",
-            ].includes(provider);
-          });
-
-          const sellerRouting = await promptSellerRoutingPreference(catalog);
-          const providerSelections = await promptProviderSelections(
-            providerIds,
-            catalog,
-            sellerRouting,
-          );
-
-          spinner.start("Configuring proxy routing in selected terminals...");
-          const store = openBuyerStore();
-          try {
-            store.saveDaemonRuntimeConfig(ROUTING_CONFIG_KEY, sellerRouting);
-            applyProviderInstall({
-              providers: providerIds,
-              proxyUrl,
-              providerSelections,
-            }, store);
-          } finally {
-            store.close();
-          }
-          spinner.stop("Selected terminals successfully configured.");
-          setupSummaryLines.push(`${providerIds.length} programming terminal${providerIds.length === 1 ? "" : "s"} configured for TokenBuddy.`);
-        }
-      }
-
-      // Step 2: Choose Payment Method & Scan QR Activation
-      noteInitComingSoonPayments();
-      const payMethod = await p.select({
-        message: "Choose your primary payment method for LLM token purchases:",
-        options: INIT_PAYMENT_OPTIONS
-      }) as InitPaymentMethod;
-
-      if (payMethod === "clawtip") {
-        const store = openBuyerStore();
-        try {
-          let walletConfig = inspectOpenClawWalletConfig();
-          const clawtipReadiness = inspectClawtipWalletReadiness(store.getPayment("clawtip"), walletConfig);
-          const existingClawtip = clawtipReadiness.reusableBinding;
-          if (existingClawtip) {
-            store.savePayment({
-              method: "clawtip",
-              enabled: true,
-              isDefault: true,
-              config: existingClawtip.config
-            });
-            const details = [
-              existingClawtip.orderNo ? `Order: ${existingClawtip.orderNo}` : undefined,
-              existingClawtip.resourceUrl ? `ResourceUrl: ${existingClawtip.resourceUrl}` : undefined
-            ].filter(Boolean).join("\n");
-            logger.info("payment.channel.reused", "clawtip payment channel already configured locally", {
-              method: "clawtip",
-              hasOrderNo: Boolean(existingClawtip.orderNo),
-              hasResourceUrl: Boolean(existingClawtip.resourceUrl)
-            });
-            p.note(
-              details
-                ? `ClawTip wallet is already configured locally.\n${details}`
-                : "ClawTip wallet is already configured locally.",
-              "ClawTip"
-            );
-            setupSummaryLines.push("ClawTip wallet already bound locally; activation skipped.");
-          } else {
-            if (clawtipReadiness.status === "metadata_missing_wallet") {
-              p.note(
-                [
-                  clawtipReadiness.message,
-                  `Expected: ${walletConfig.expectedPath}`,
-                  walletConfig.alternatePaths.length > 0
-                    ? `Alternates: ${walletConfig.alternatePaths.join(", ")}`
-                    : "Alternates: -"
-                ].join("\n"),
-                "ClawTip"
-              );
-              setupSummaryLines.push("Saved ClawTip metadata found, but local wallet config is missing; activation restarted.");
-            }
-
-            const walletReadyBeforePay = walletConfig.exists;
-            let openClawVersion: string | undefined;
-            if (!walletReadyBeforePay) {
-              spinner.start("Checking OpenClaw CLI before ClawTip wallet bootstrap...");
-              openClawVersion = await checkOpenClawRuntime();
-              spinner.stop("OpenClaw CLI detected.");
-            }
-
-            spinner.start("Requesting payment activation payload from public bootstrap registry...");
-            const bootstrapUrl = process.env.TOKENBUDDY_BOOTSTRAP_URL || DEFAULT_CLAWTIP_BOOTSTRAP_URL;
-            const bootstrap = await fetchClawtipBootstrap(bootstrapUrl);
-            spinner.stop("Bootstrap payload received.");
-
-            if (!bootstrap.payment?.orderNo || !bootstrap.payment?.indicator) {
-              throw new Error("ClawTip bootstrap response missing orderNo or indicator.");
-            }
-
-            const activationPayment = {
-              orderNo: bootstrap.payment.orderNo,
-              amountFen: bootstrap.payment.amountFen ?? bootstrap.activationFeeFen ?? 1,
-              payTo: bootstrap.payment.payTo,
-              encryptedData: bootstrap.payment.encryptedData,
-              indicator: bootstrap.payment.indicator,
-              slug: bootstrap.payment.slug,
-              skillId: bootstrap.payment.skillId,
-              description: bootstrap.payment.description,
-              resourceUrl: bootstrap.payment.resourceUrl,
-            };
-
-            spinner.start("Starting the ClawTip payment activation flow...");
-            let activation = await startClawtipWalletBootstrap(activationPayment);
-            spinner.stop("ClawTip payment activation finished.");
-
-            let payCredential = activation.payCredential;
-            for (
-              let authAttempt = 1;
-              (walletReadyBeforePay ? !payCredential : !walletConfig.exists)
-                && activation.parsedOutput.requiresWalletAuth
-                && authAttempt <= 3;
-              authAttempt += 1
-            ) {
-              let qrDisplayMessage: string | undefined;
-              let manualOpenCommand: string | undefined;
-              if (activation.parsedOutput.mediaPath) {
-                const qrDisplay = await displayTerminalImage(activation.parsedOutput.mediaPath);
-                qrDisplayMessage = qrDisplay.message;
-                manualOpenCommand = qrDisplay.fallbackCommand;
-              }
-              if (!activation.parsedOutput.mediaPath && !activation.parsedOutput.authUrl) {
-                throw new Error(
-                  `ClawTip pay requested authorization but did not return QR media or authUrl. Order file: ${activation.orderFile}`
-                );
-              }
-              p.note(
-                [
-                  activation.parsedOutput.mediaPath
-                    ? `Open or scan this ClawTip wallet QR image with the JD app: ${activation.parsedOutput.mediaPath}`
-                    : undefined,
-                  activation.parsedOutput.authUrl
-                    ? `Open or scan this ClawTip wallet auth URL with the JD app: ${activation.parsedOutput.authUrl}`
-                    : undefined,
-                  qrDisplayMessage,
-                  manualOpenCommand ? `Manual open command: ${manualOpenCommand}` : undefined,
-                  activation.parsedOutput.clawtipId ? `clawtipId: ${activation.parsedOutput.clawtipId}` : undefined,
-                  activation.parsedOutput.clawtipId
-                    ? "After scanning, ClawTip CLI will register the local agent wallet."
-                    : "After scanning, TokenBuddy will retry ClawTip payment activation.",
-                  `Expected wallet config: ${walletConfig.expectedPath}`,
-                  openClawVersion ? `OpenClaw: ${openClawVersion}` : undefined,
-                ].filter(Boolean).join("\n"),
-                activation.parsedOutput.clawtipId ? "ClawTip Wallet QR" : "ClawTip Authorization QR"
-              );
-
-              if (activation.parsedOutput.clawtipId && !walletReadyBeforePay) {
-                spinner.start("Waiting for ClawTip wallet registration. Press Ctrl+C to cancel.");
-                const walletRegistered = await waitForClawtipActivationConfirmation({
-                  clawtipId: activation.parsedOutput.clawtipId,
-                });
-                spinner.stop(walletRegistered
-                  ? "Detected local OpenClaw ClawTip wallet config."
-                  : "ClawTip wallet registration cancelled.");
-                if (!walletRegistered) {
-                  setupSummaryLines.push("ClawTip wallet registration was cancelled before local wallet config was saved.");
-                  process.exitCode = 1;
-                  return;
-                }
-
-                walletConfig = inspectOpenClawWalletConfig();
-                if (!walletConfig.exists) {
-                  throw new Error(`ClawTip wallet registration finished but wallet config is still missing: ${walletConfig.expectedPath}`);
-                }
-                setupSummaryLines.push("ClawTip wallet registered locally.");
-              } else {
-                const authorized = await p.confirm({
-                  message: "Scan or authorize this ClawTip QR in the JD app, then press Enter to retry payment activation.",
-                  initialValue: true,
-                });
-                if (authorized !== true) {
-                  setupSummaryLines.push("ClawTip authorization was cancelled before payment activation completed.");
-                  process.exitCode = 1;
-                  return;
-                }
-                walletConfig = inspectOpenClawWalletConfig();
-              }
-
-              payCredential = readClawtipPayCredential(activation.orderFile);
-              if (!payCredential) {
-                spinner.start(`Retrying ClawTip payment activation after authorization (${authAttempt}/3)...`);
-                activation = await startClawtipWalletBootstrap(activationPayment);
-                spinner.stop("ClawTip payment activation retry finished.");
-                payCredential = activation.payCredential;
-              }
-            }
-
-            const refreshedWalletConfig = inspectOpenClawWalletConfig();
-            if (!walletReadyBeforePay && !refreshedWalletConfig.exists) {
-              const paymentQrMessage = activation.parsedOutput.mediaPath
-                ? ` ClawTip pay returned QR media: ${activation.parsedOutput.mediaPath}`
-                : " ClawTip pay did not return QR media.";
-              throw new Error(
-                [
-                  `ClawTip wallet config is still missing after payment activation: ${refreshedWalletConfig.expectedPath}.`,
-                  `Order file: ${activation.orderFile}.`,
-                  paymentQrMessage.trim(),
-                ].join(" ")
-              );
-            }
-            const completedByWalletConfig = !payCredential && !walletReadyBeforePay && refreshedWalletConfig.exists;
-            if (!payCredential && !completedByWalletConfig) {
-              const paymentQrMessage = activation.parsedOutput.mediaPath
-                ? ` ClawTip pay returned QR media: ${activation.parsedOutput.mediaPath}`
-                : "";
-              throw new Error(
-                `ClawTip pay did not write payCredential to the order file. Order file: ${activation.orderFile}.${paymentQrMessage}`
-              );
-            }
-            const activationCompletedBy = payCredential
-              ? (refreshedWalletConfig.exists ? "payCredential+wallet-config" : "payCredential")
-              : "wallet-config";
-
-            store.savePayment({
-              method: "clawtip",
-              enabled: true,
-              isDefault: true,
-              config: {
-                bootstrapUrl,
-                orderNo: bootstrap.payment?.orderNo,
-                amountFen: bootstrap.payment?.amountFen ?? bootstrap.activationFeeFen,
-                indicator: bootstrap.payment?.indicator,
-                slug: bootstrap.payment?.slug,
-                skillId: bootstrap.payment?.skillId,
-                description: bootstrap.payment?.description,
-                resourceUrl: bootstrap.payment?.resourceUrl,
-                proofRequired: false,
-                activationOrderFile: activation.orderFile,
-                walletConfigPath: refreshedWalletConfig.expectedPath,
-                walletConfigPresent: refreshedWalletConfig.exists,
-                payCredentialWritten: Boolean(payCredential),
-                activationCompletedBy
-              }
-            });
-            logger.info("payment.channel.added", "clawtip payment channel added during init", {
-              method: "clawtip",
-              orderNo: bootstrap.payment?.orderNo,
-              payCredentialWritten: Boolean(payCredential),
-              activationCompletedBy
-            });
-            if (refreshedWalletConfig.exists) {
-              if (!payCredential) {
-                p.note(
-                  [
-                    "OpenClaw saved the local ClawTip wallet config, but the ClawTip order file did not contain payCredential.",
-                    `Order file: ${activation.orderFile}`,
-                    "TokenBuddy saved the wallet binding metadata and will rely on the local wallet for future ClawTip purchases."
-                  ].join("\n"),
-                  "ClawTip"
-                );
-              }
-              setupSummaryLines.push("ClawTip wallet activated and set as the default payment method.");
-            } else {
-              p.note(
-                [
-                  "ClawTip payment metadata was saved, but the local OpenClaw wallet config is still missing.",
-                  `Expected: ${refreshedWalletConfig.expectedPath}`,
-                  refreshedWalletConfig.alternatePaths.length > 0
-                    ? `Nearby files: ${refreshedWalletConfig.alternatePaths.join(", ")}`
-                    : "Nearby files: -",
-                  "Bind or restore the local wallet before using ClawTip-backed purchases."
-                ].join("\n"),
-                "ClawTip Wallet Required"
-              );
-              setupSummaryLines.push("ClawTip payment metadata saved; local wallet config still needs binding before use.");
-            }
-          }
-        } catch (err: any) {
-          spinner.stop(`Failed to finish ClawTip setup: ${err.message}`);
-          setupSummaryLines.push("ClawTip activation requires follow-up because the bootstrap step did not complete.");
-        } finally {
-          store.close();
-        }
-      }
-
-      // Step 3: Install Launchd Daemon Service
-      if (process.platform === "darwin") {
-        const installDaemon = await p.confirm({
-          message: "Would you like to install tb-proxyd as a launchd service to automatically run in the background on startup?",
-          initialValue: true
-        });
-
-        if (installDaemon) {
-          spinner.start("Registering launchd daemon plist agent...");
-          try {
-            const home = os.homedir();
-            const plistDir = path.join(home, "Library", "LaunchAgents");
-            if (!fs.existsSync(plistDir)) fs.mkdirSync(plistDir, { recursive: true });
-
-            const plistPath = path.join(plistDir, `${TOKENBUDDY_LAUNCHD_LABEL}.plist`);
-            const controlPort = configuredControlPort();
-            const proxyPort = configuredProxyPort();
-            const sellerRegistryUrl = sellerRegistryUrlForInit();
-
-            const nodePath = process.execPath;
-            const scriptPath = tbProxydScriptPath();
-            const stdoutPath = path.join(home, ".tokenbuddy-store", "tb-proxyd.stdout.log");
-            const stderrPath = path.join(home, ".tokenbuddy-store", "tb-proxyd.stderr.log");
-            fs.mkdirSync(path.dirname(stdoutPath), { recursive: true });
-            fs.mkdirSync(path.dirname(stderrPath), { recursive: true });
-            const plistContent = buildLaunchdPlistContent({
-              label: TOKENBUDDY_LAUNCHD_LABEL,
-              nodePath,
-              scriptPath,
-              stdoutPath,
-              stderrPath,
-              controlPort,
-              proxyPort,
-              sellerRegistryUrl,
-              pathEnv: process.env.PATH,
-              clawtipProofCommand: defaultClawtipProofCommand(),
-              clawtipProofTimeoutMs: process.env.TB_PROXYD_CLAWTIP_PROOF_TIMEOUT_MS
-                ? Number(process.env.TB_PROXYD_CLAWTIP_PROOF_TIMEOUT_MS)
-                : undefined,
-            });
-            fs.writeFileSync(plistPath, plistContent, "utf8");
-
-            installLaunchAgent(plistPath, TOKENBUDDY_LAUNCHD_LABEL);
-            spinner.stop("LaunchAgent daemon successfully registered and started! 🚀");
-            setupSummaryLines.push("Background tb-proxyd launchd service installed.");
-
-            spinner.start("Checking tb-proxyd control plane...");
-            const daemonProbe = await waitForDaemonStatus(controlPort, 8000);
-            spinner.stop(daemonProbe.running ? "tb-proxyd control plane is ready." : "tb-proxyd control plane is still starting.");
-
-            if (daemonProbe.running) {
-              const nextStep = await p.select({
-                message: "tb-proxyd is running. What would you like to do next?",
-                options: [
-                  { value: "continue", label: "Continue in terminal", hint: "Finish the CLI setup summary" },
-                  { value: "ui", label: "Open tb ui", hint: "Launch the local graphical console" }
-                ]
-              }) as string;
-              if (nextStep === "ui") {
-                const uiUrl = launchControlUi(controlPort);
-                setupSummaryLines.push(`Opened TokenBuddy UI at ${uiUrl}.`);
-                p.outro(buildInitSuccessMessage(setupSummaryLines));
-                return;
-              }
-            }
-          } catch (err: any) {
-            spinner.stop(`Failed to write launchd plist: ${err.message}`);
-          }
-        }
-      } else {
-        // Run background dettached child process in linux/windows
-        p.note("System daemon is active. Process runs in dettached background.");
-        setupSummaryLines.push("Background daemon mode is available on this system.");
-      }
-
-      p.outro(buildInitSuccessMessage(setupSummaryLines));
-    });
-
-  return program;
-}