@zhushanwen/zcode-subagent-cli 0.8.1 → 0.8.3

package/dist/main.cjs

@@ -404,41 +404,97 @@ function resolveAccountModelRef(wanted, wantedProvider, sources) {
       `\u672A\u77E5 account provider "${wantedProvider}"\uFF08\u5185\u5EFA\u76EE\u5F55\u65E0\u6B64\u89C4\u5219\uFF09\u3002\u6062\u590D\u6307\u5F15\uFF1A\u6539\u7528\u76EE\u5F55\u5185 account:* \u89C4\u5219\uFF08\u5982 account:zai-individual-coding-plan / account:bigmodel-individual-coding-plan\uFF09\u3002`
     );
   }
-  assertAccountModelKnown(accountRule, wanted, wantedProvider);
-  return wanted;
+  return `${wantedProvider}/${normalizeAccountModel(accountRule, wanted, wantedProvider)}`;
 }
 function findAccountProviderRule(catalog, wantedProvider) {
   const catalogRules = isRecord(catalog) && isRecord(catalog["config"]) && isRecord(catalog["config"]["providerConfigRules"]) ? catalog["config"]["providerConfigRules"]["providerRules"] : void 0;
   const accountRule = Array.isArray(catalogRules) ? catalogRules.find((r) => isRecord(r) && r["providerId"] === wantedProvider) : void 0;
   return isRecord(accountRule) ? accountRule : void 0;
 }
-function assertAccountModelKnown(accountRule, wanted, wantedProvider) {
+function normalizeAccountModel(accountRule, wanted, wantedProvider) {
   const accountConfig = isRecord(accountRule["config"]) ? accountRule["config"] : {};
   const modelIds = accountConfig["builtinModelIds"] ?? accountConfig["personalModelIds"];
   const short = modelShort(wanted);
-  if (Array.isArray(modelIds) && modelIds.length > 0 && !modelIds.includes(short)) {
+  if (!Array.isArray(modelIds) || modelIds.length === 0) return short;
+  const matched = modelIds.find((m) => typeof m === "string" && m.toLowerCase() === short.toLowerCase());
+  if (matched === void 0) {
     throw new ZcodePrepareError(
       "model_not_available",
-      `\u672A\u77E5\u6A21\u578B "${short}"\uFF08account provider ${wantedProvider} \u4E0B\u53EF\u7528: ${modelIds.join(", ")}\uFF09\u3002`
+      `\u672A\u77E5\u6A21\u578B "${short}"\uFF08account provider ${wantedProvider} \u4E0B\u53EF\u7528: ${modelIds.filter((m) => typeof m === "string").join(", ")}\uFF09\u3002`
     );
   }
+  return matched;
+}
+var PI_TO_ZCODE_PROVIDER_MAP = {
+  "zai-coding-cn": "account:bigmodel-individual-coding-plan"
+};
+function translatePiModelRefToZcode(requested, sources) {
+  if (!requested.includes("/")) return requested;
+  const piProvider = providerOf(requested);
+  const target = PI_TO_ZCODE_PROVIDER_MAP[piProvider];
+  if (target === void 0) return requested;
+  const catalogPath = locateZcodeBuiltinCatalog(sources);
+  if (catalogPath === void 0) {
+    throw new ZcodePrepareError(
+      "model_not_available",
+      `\u6A21\u578B\u901A\u9053\u7FFB\u8BD1\u5931\u8D25\uFF1Api \u4FA7 "${piProvider}" \u5728 zcode \u4FA7\u5BF9\u5E94 ${target}\uFF0C\u4F46\u5185\u5EFA\u76EE\u5F55\u5B9A\u4F4D\u5931\u8D25\uFF08ZCODE_BUILTIN_PROVIDER_CONFIG_FILE \u4E0E runtime/provider \u626B\u63CF\u5747\u672A\u547D\u4E2D\uFF09\u3002\u6062\u590D\u6307\u5F15\uFF1A\u786E\u8BA4 ZCode \u5DF2\u5B89\u88C5\u540E\u91CD\u8BD5\u3002`
+    );
+  }
+  let catalog;
+  try {
+    catalog = JSON.parse(fs.readFileSync(catalogPath, "utf8"));
+  } catch (err) {
+    throw new ZcodePrepareError(
+      "model_not_available",
+      `\u6A21\u578B\u901A\u9053\u7FFB\u8BD1\u5931\u8D25\uFF1A\u5185\u5EFA\u76EE\u5F55\u4E0D\u53EF\u8BFB\uFF08${err instanceof Error ? err.message : String(err)}\uFF09\u3002`
+    );
+  }
+  const accountRule = findAccountProviderRule(catalog, target);
+  if (accountRule === void 0) {
+    throw new ZcodePrepareError(
+      "model_not_available",
+      `pi \u4FA7 "${piProvider}" \u7684 zcode \u5BF9\u5E94\u901A\u9053 ${target} \u4E0D\u53EF\u7528\uFF08\u5185\u5EFA\u76EE\u5F55\u65E0\u6B64\u89C4\u5219\uFF09\u3002\u6062\u590D\u6307\u5F15\uFF1A\u5728 ZCode \u684C\u9762\u7AEF\u5B8C\u6210\u8BE5 plan \u7684\u8D26\u53F7\u767B\u5F55/\u914D\u7F6E\u540E\u91CD\u8BD5\u3002`
+    );
+  }
+  const accountConfig = isRecord(accountRule["config"]) ? accountRule["config"] : {};
+  const modelIds = accountConfig["builtinModelIds"] ?? accountConfig["personalModelIds"];
+  if (!Array.isArray(modelIds) || modelIds.length === 0) {
+    return `${target}/${modelShort(requested)}`;
+  }
+  const wanted = modelShort(requested).toLowerCase();
+  const matched = modelIds.find((m) => typeof m === "string" && m.toLowerCase() === wanted);
+  if (matched === void 0) {
+    throw new ZcodePrepareError(
+      "model_not_available",
+      `\u6A21\u578B "${modelShort(requested)}" \u5728 ${target} \u4E0B\u65E0\u7B49\u4EF7\u6A21\u578B\uFF08\u53EF\u7528: ${modelIds.filter((m) => typeof m === "string").join(", ")}\uFF09\u3002\u6062\u590D\u6307\u5F15\uFF1A\u6539\u7528\u4E0A\u8FF0\u6A21\u578B\u4E4B\u4E00\uFF0C\u6216\u7701\u7565 model \u53C2\u6570\u8D70\u5F15\u64CE\u7F3A\u7701\u3002`
+    );
+  }
+  return `${target}/${matched}`;
+}
+function translateToAccountModelRef(wanted, sources) {
+  const translated = translatePiModelRefToZcode(wanted, sources);
+  const translatedProvider = translated.includes("/") ? providerOf(translated) : void 0;
+  if (translatedProvider !== void 0 && translatedProvider.startsWith("account:")) {
+    return resolveAccountModelRef(translated, translatedProvider, sources);
+  }
+  return void 0;
 }
 function resolveZcodeModelRef(requested, sources) {
   const { conf, sourceDesc } = readPersonalProviderView(sources);
   const withKey = [...conf.providers.entries()].filter(([, e]) => hasApiKey(e));
   const wanted = requested?.trim() || void 0;
+  if (wanted !== void 0) {
+    const accountRef = translateToAccountModelRef(wanted, sources);
+    if (accountRef !== void 0) return accountRef;
+  }
   if (withKey.length === 0) {
     const hint = wanted ? `model="${wanted}" \u4E0D\u80FD\u6821\u9A8C` : "\u7F3A\u7701\u6A21\u578B\u89E3\u6790\u4E0D\u80FD\u6821\u9A8C";
     throw new ZcodePrepareError(
       "engine_credential_missing",
-      `zcode \u5F15\u64CE\u627E\u4E0D\u5230\u4EFB\u4F55\u5E26 apiKey \u7684\u4E2A\u4EBA provider\uFF08${hint}\uFF09\u3002\u5DF2\u8BFB\u6E90\uFF1A${sourceDesc}\u3002\u6062\u590D\u6307\u5F15\uFF1A\u5728 ZCode \u684C\u9762\u7AEF\u914D\u7F6E\u81F3\u5C11\u4E00\u4E2A\u4E2A\u4EBA provider\uFF08provider_config.json \u5185\u5B58\u5728 config.access.apiKey \u975E\u7A7A\u6761\u76EE\uFF09\u540E\u91CD\u8BD5\uFF1Bplan \u5957\u9910\u65CF\uFF08builtin:/account: \u524D\u7F00\uFF09\u7ECF\u8D26\u53F7 entitlement \u95E8\u63A7\uFF0C\u5916\u90E8 spawn \u7684\u5F15\u64CE\u6CE8\u518C\u8868\u4E0D\u88C5\u8F7D\uFF0C\u4E0D\u53EF\u4F5C\u4E3A\u5F15\u64CE\u6A21\u578B\u3002` + TAIJI_SYNC_GUIDANCE
+      `zcode \u5F15\u64CE\u627E\u4E0D\u5230\u4EFB\u4F55\u5E26 apiKey \u7684\u4E2A\u4EBA provider\uFF08${hint}\uFF09\u3002\u5DF2\u8BFB\u6E90\uFF1A${sourceDesc}\u3002\u6062\u590D\u6307\u5F15\uFF1A\u5728 ZCode \u684C\u9762\u7AEF\u914D\u7F6E\u81F3\u5C11\u4E00\u4E2A\u4E2A\u4EBA provider\uFF08provider_config.json \u5185\u5B58\u5728 config.access.apiKey \u975E\u7A7A\u6761\u76EE\uFF09\u540E\u91CD\u8BD5\uFF1Bplan \u5957\u9910\u65CF\u4E2D account: \u524D\u7F00\u7ECF\u8D26\u53F7 entitlement \u76F4\u901A\u53EF\u7528\uFF08builtin: \u524D\u7F00\u4E0D\u88C5\u8F7D\uFF0C\u4E0D\u53EF\u4F5C\u4E3A\u5F15\u64CE\u6A21\u578B\uFF09\u3002` + TAIJI_SYNC_GUIDANCE
     );
   }
   if (wanted === void 0) return "";
-  const wantedProvider = wanted.includes("/") ? providerOf(wanted) : void 0;
-  if (wantedProvider !== void 0 && wantedProvider.startsWith("account:")) {
-    return resolveAccountModelRef(wanted, wantedProvider, sources);
-  }
   const provider = wanted.includes("/") ? providerOf(wanted) : defaultProviderForShortName(conf, withKey);
   const short = modelShort(wanted);
   const entry = conf.providers.get(provider);
@@ -467,16 +523,58 @@ function resolveZcodeModelRef(requested, sources) {
 function listZcodeModels(sources) {
   const { conf } = readPersonalProviderView(sources);
   const out = [];
+  const seen = /* @__PURE__ */ new Set();
   for (const [pid, entry] of conf.providers) {
     if (!hasApiKey(entry)) continue;
     const providerName = entry.providerName !== void 0 && entry.providerName.trim() !== "" ? entry.providerName.trim() : void 0;
     for (const model of entry.models ?? []) {
+      if (seen.has(`${pid}/${model}`)) continue;
+      seen.add(`${pid}/${model}`);
       out.push({
         id: `${pid}/${model}`,
         ...providerName !== void 0 ? { name: `${providerName} \xB7 ${model}` } : {}
       });
     }
   }
+  for (const entry of listAccountFamilyModels(sources)) {
+    if (seen.has(entry.id)) continue;
+    seen.add(entry.id);
+    out.push(entry);
+  }
+  return out;
+}
+function readCatalogProviderRules(catalog) {
+  const rules = isRecord(catalog) && isRecord(catalog["config"]) && isRecord(catalog["config"]["providerConfigRules"]) ? catalog["config"]["providerConfigRules"]["providerRules"] : void 0;
+  return Array.isArray(rules) ? rules : [];
+}
+function pushAccountFamilyRuleModels(rule, out) {
+  if (!isRecord(rule)) return;
+  const providerId = rule["providerId"];
+  if (typeof providerId !== "string" || !providerId.startsWith("account:")) return;
+  const cfg = isRecord(rule["config"]) ? rule["config"] : {};
+  const models = Array.isArray(cfg["builtinModelIds"]) ? cfg["builtinModelIds"] : cfg["personalModelIds"];
+  const providerName = typeof rule["providerName"] === "string" && rule["providerName"].trim() !== "" ? rule["providerName"].trim() : void 0;
+  for (const model of Array.isArray(models) ? models : []) {
+    if (typeof model !== "string" || model.trim() === "") continue;
+    out.push({
+      id: `${providerId}/${model}`,
+      ...providerName !== void 0 ? { name: `${providerName} \xB7 ${model}` } : {}
+    });
+  }
+}
+function listAccountFamilyModels(sources) {
+  const catalogPath = locateZcodeBuiltinCatalog(sources);
+  if (catalogPath === void 0) return [];
+  let catalog;
+  try {
+    catalog = JSON.parse(fs.readFileSync(catalogPath, "utf8"));
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const rule of readCatalogProviderRules(catalog)) {
+    pushAccountFamilyRuleModels(rule, out);
+  }
   return out;
 }
 
@@ -487,6 +585,475 @@ var path3 = __toESM(require("path"), 1);
 // src/error-message.ts
 var import_subagent_engine_sdk5 = require("@zhushanwen/subagent-engine-sdk");
 
+// src/appserver-launcher-patches.ts
+var CLI_PATCH_SECTION = `
+// [2026-10-13 account \u76F4\u901A\u2461] CLI bundle \u6E90\u7801\u5185\u5B58\u8865\u4E01\uFF1A\u5916\u90E8 spawn \u7684\u8D26\u53F7\u6761\u76EE\u6784\u5EFA
+// \u786C\u7F16\u7801 entitled:!1\uFF08YXe\uFF09\uFF0C\u6570\u636E\u9762\u6CE8\u5165\uFF08\u76EE\u5F55 entitled \u5B57\u6BB5\uFF09\u88AB\u5176\u65E0\u89C6\u2014\u2014\u6309\u7528\u6237\u88C1\u51B3
+// \u6539 zcode \u6E90\u7801\u7ED5\u8FC7\uFF1A\u62E6\u622A CLI bundle \u6E90\u7801\u8BFB\u53D6\uFF0C\u5185\u5B58\u66FF\u6362\u8BE5\u5B57\u9762\u91CF\u4E3A !0\uFF08ZCode.app
+// \u78C1\u76D8\u6587\u4EF6\u96F6\u89E6\u78B0\uFF1B\u951A\u4E32\u542B ]]:[] \u5C3E\u7F00\u552F\u4E00\u547D\u4E2D YXe \u6784\u9020\uFF0C\u53E6\u4E00\u5904\u540C\u540D\u6761\u4EF6\u903B\u8F91\u4E0D\u53D7\u5F71\u54CD\uFF09\u3002
+// \u951A\u4E0D\u547D\u4E2D\uFF08\u4E0A\u6E38\u6DF7\u6DC6\u5F62\u6001\u53D8\u5316\uFF09\u2192 \u539F\u6587\u900F\u51FA\uFF1A\u4EC5 account \u5BB6\u65CF\u7EE7\u7EED\u88AB\u62D2\uFF0C\u4E2A\u4EBA provider
+// \u4E0D\u53D7\u5F71\u54CD\u3002
+// \u8865\u4E01\u6BB5\u5185\u8054\u626B\u63CF\u5668\uFF082026-10 review\xB7MF-1-5\uFF09\uFF1A\u8DF3\u8FC7\u5B57\u7B26\u4E32/\u6A21\u677F\u5B57\u9762\u91CF/\u6CE8\u91CA\uFF0C\u8BA9\u62EC\u53F7
+// \u914D\u5E73\u4E0E\u53C2\u6570\u5207\u5206\u53EA\u5728\u4EE3\u7801\u9762\u4E0A\u8FDB\u884C\u2014\u2014bundle \u5185\u8054\u4E32\u91CC\u7684 ')' \u66FE\u628A\u8C03\u7528\u70B9\u53C2\u6570\u914D\u5E73\u5E26\u504F\u3002
+// \u8FD4\u56DE -1 = \u8BE5\u4F4D\u7F6E\u4E0D\u662F\u5B57\u9762\u91CF/\u6CE8\u91CA\u8D77\u70B9\uFF08\u6B63\u5E38\u4EE3\u7801\u5B57\u7B26\uFF09\u3002
+function __skipLiteralOrComment(src, i) {
+  const ch = src[i];
+  if (ch === '"' || ch === "'") {
+    i++;
+    while (i < src.length) {
+      if (src.charCodeAt(i) === 92) { i += 2; continue; }
+      if (src[i] === ch) return i + 1;
+      i++;
+    }
+    return i;
+  }
+  if (ch === '\`') {
+    i++;
+    while (i < src.length) {
+      if (src.charCodeAt(i) === 92) { i += 2; continue; }
+      const c = src[i];
+      if (c === '\`') return i + 1;
+      if (c === '$' && src[i + 1] === '{') {
+        let depth = 1;
+        i += 2;
+        while (i < src.length && depth > 0) {
+          const cc = src[i];
+          if (cc === '"' || cc === "'" || cc === '\`') { i = __skipLiteralOrComment(src, i); continue; }
+          if (cc === '/' && src[i + 1] === '/') { const nl = src.indexOf('\\n', i + 2); i = nl < 0 ? src.length : nl + 1; continue; }
+          if (cc === '/' && src[i + 1] === '*') { const end = src.indexOf('*/', i + 2); i = end < 0 ? src.length : end + 2; continue; }
+          if (cc === '{') depth++;
+          else if (cc === '}') depth--;
+          i++;
+        }
+        continue;
+      }
+      i++;
+    }
+    return i;
+  }
+  if (ch === '/' && src[i + 1] === '/') {
+    const nl = src.indexOf('\\n', i + 2);
+    return nl < 0 ? src.length : nl + 1;
+  }
+  if (ch === '/' && src[i + 1] === '*') {
+    const end = src.indexOf('*/', i + 2);
+    return end < 0 ? src.length : end + 2;
+  }
+  return -1;
+}
+// \u4E0E openIdx \u5904 '(' \u914D\u5BF9\u7684\u95ED\u62EC\u53F7\uFF08\u8DF3\u8FC7\u5B57\u9762\u91CF/\u6CE8\u91CA\uFF09\uFF1B-1 = \u4E0D\u914D\u5E73\u3002
+function __matchingParen(src, openIdx) {
+  let depth = 0;
+  for (let i = openIdx; i < src.length; i++) {
+    const skip = __skipLiteralOrComment(src, i);
+    if (skip >= 0) { i = skip - 1; continue; }
+    const c = src[i];
+    if (c === '(') depth++;
+    else if (c === ')') { depth--; if (depth === 0) return i; }
+  }
+  return -1;
+}
+// [start,end) \u5185\u6309\u9876\u5C42\u9017\u53F7\u5207\u5206\uFF08\u62EC\u53F7/\u65B9\u62EC\u53F7/\u5BF9\u8C61\u5B57\u9762\u91CF\u4E0E\u5B57\u9762\u91CF\u5185\u7684\u9017\u53F7\u4E0D\u8BA1\uFF09\uFF1B
+// \u8FD4\u56DE\u7EDD\u5BF9\u504F\u79FB\u6BB5\u5217\u8868\u3002
+function __splitTopLevel(src, start, end) {
+  const parts = [];
+  let depth = 0;
+  let segStart = start;
+  for (let i = start; i < end; i++) {
+    const skip = __skipLiteralOrComment(src, i);
+    if (skip >= 0) { i = Math.min(skip, end) - 1; continue; }
+    const c = src[i];
+    if (c === '(' || c === '[' || c === '{') depth++;
+    else if (c === ')' || c === ']' || c === '}') depth--;
+    else if (c === ',' && depth === 0) { parts.push({ start: segStart, end: i }); segStart = i + 1; }
+  }
+  parts.push({ start: segStart, end: end });
+  return parts;
+}
+const __cliPatchCache = new Map();
+// \u5E94\u7528\u6001\u6807\u5FD7\u53D1\u5E03\uFF082026-10 review\uFF09\uFF1A\u5B89\u88C5\u95E8\u66FE\u4EE5\u8865\u4E01\u4EA7\u7269\u5B50\u4E32\u5224\u5B9A header-port\u2014\u2014\u771F\u5B9E
+// 3.15.3 bundle \u672C\u5C31\u542B 8 \u5904 'providerRuntimeHeadersPort:'\uFF082 \u5904 ',providerRuntimeHeadersPort:'\uFF09
+// \u2192 \u5B50\u4E32\u5224\u5B9A\u6052\u771F\u3001\u5BF9\u951A\u70B9\u6F02\u79FB\u96F6\u68C0\u6D4B\u529B\u3002\u6539\u7531\u8865\u4E01\u51FD\u6570\u672C\u8EAB\u53D1\u5E03 {entitled,standalone,
+// headerPort}\uFF08\u7F13\u5B58\u547D\u4E2D\u4ECD\u53EF\u8BFB\uFF09\uFF0C\u95E8\u53EA\u8BFB\u6807\u5FD7\uFF08\u4E09\u5904\u5224\u5B9A\u5404\u81EA\u5177\u540D\uFF0C\u6F02\u79FB\u4E0D\u9759\u9ED8\uFF09\u3002
+const __cliPatchStatus = new Map();
+function patchedCliSource(path) {
+  if (__cliPatchCache.has(path)) return __cliPatchCache.get(path);
+  let result = null;
+  let entitledApplied = false;
+  let standaloneApplied = false;
+  let portInjected = false;
+  try {
+    const readOrig = fs.__origReadFileSync || fs.readFileSync;
+    let src = readOrig(path, 'utf8');
+    // \u2460 \u7248\u672C\u9C81\u68D2\u951A\uFF082026-10-13 \u4FEE\u8BA2\uFF09\uFF1Aminified \u6807\u8BC6\u7B26\uFF08Uk/I3 \u7B49\uFF09\u968F zcode \u91CD\u65B0\u6253\u5305
+    // \u6F02\u79FB\uFF0C\u5C5E\u6027\u540D\uFF08zcodeBuiltinProviders / zhipu-account / entitled\uFF09\u662F\u6570\u636E/\u5951\u7EA6
+    // \u771F\u540D\u4E0D\u88AB\u6DF7\u6DC6\u2014\u2014\u4EE5\u5C5E\u6027\u540D\u5B9A\u4F4D + 600 \u5B57\u7B26\u7A97\u53E3\u5185\u628A\u8D26\u53F7\u6761\u76EE\u6784\u5EFA\u7684 entitled:!1
+    // \u7FFB\u8F6C\u4E3A !0\u3002\u7A97\u53E3\u96F6\u547D\u4E2D = \u4E0A\u6E38\u5F62\u6001\u6F02\u79FB \u2192 \u539F\u6587\u900F\u51FA + stderr warn\uFF08\u6F02\u79FB\u53EF\u89C1\uFF0C
+    // \u8FDB app-server stderr \u65E5\u5FD7\uFF09\u3002
+    const anchorIdx = src.indexOf('zcodeBuiltinProviders.entries()');
+    if (anchorIdx >= 0) {
+      const window = src.slice(anchorIdx, Math.min(src.length, anchorIdx + 600));
+      if (window.indexOf('zhipu-account') >= 0 && window.indexOf('entitled:!1') >= 0) {
+        src = src.slice(0, anchorIdx)
+          + window.split('entitled:!1').join('entitled:!0')
+          + src.slice(anchorIdx + 600);
+        entitledApplied = true;
+      }
+    }
+    if (!entitledApplied) {
+      process.stderr.write('[zcode-launcher] account bypass: CLI bundle anchor not found (zcode upstream shape drifted?) - account family stays gated\\n');
+    }
+    // \u2461 [2026-10-16 standalone account] \u534F\u8BAE\u8DEF\u5F84\u7684 provider registry \u6052\u4EE5 host-account
+    // \u6A21\u5F0F\u521B\u5EFA\uFF08\u6E90\u7801\uFF1Acreate:r(()=>xCt(z),"create") \u4E0D\u4F20 standalone\uFF09\u2014\u2014\u8BE5\u6A21\u5F0F\u4E0B
+    // account \u65CF\u8BF7\u6C42\u5FC5\u987B\u7531\u5BBF\u4E3B\u5E94\u7B54 providerRuntimeHeaders\uFF1Btaiji \u7684 headless spawn \u65E0
+    // \u5BBF\u4E3B\u53C2\u4E0E\u8BE5\u534F\u8BAE\uFF0C\u5E94\u7B54\u5E27\u7578\u5F62 \u2192 zod invalid_union(headersApplied)\uFF082026-10-16 \u771F\u673A
+    // \u4E8B\u6545\u6839\u56E0\uFF1B\u5BBF\u4E3B\u65E5\u5FD7\u96F6\u8E2A\u8FF9 = \u8BF7\u6C42\u4ECE\u672A\u5230\u8FBE\u4EFB\u4F55 host \u5B9E\u73B0\uFF09\u3002\u672C\u8865\u4E01\u7ED9\u8BE5\u8C03\u7528\u6CE8\u5165
+    // {standalone:{}}\uFF1Astandalone \u6A21\u5F0F\u81EA\u5EFA\u672C\u5730\u8D26\u53F7\u6E90\uFF08entitled \u7531\u51ED\u636E\u5B58\u5728\u6027\u8BA1\u7B97\uFF0C
+    // \u8BFB credentials.json\uFF09\u5E76\u6CE8\u5165\u672C\u5730 providerRuntimeHeaders \u7AEF\u53E3\u2014\u2014\u8D26\u53F7\u65CF\u5168\u94FE\u672C\u5730
+    // \u5B8C\u6210\u3001\u96F6\u5BBF\u4E3B\u4F9D\u8D56\u3002\u951A\u70B9\u4E24\u5904\u7A33\u5B9A\u4E32\uFF08\u975E minified\uFF09\uFF1A\u6A21\u5757\u5BFC\u51FA\u6620\u5C04
+    // startProcessProviderRegistryRuntime:()=> \u53D6\u51FD\u6570\u540D + \u8C03\u7528\u70B9 create:r(()=><fn>(\u3002
+    const exportAnchor = 'startProcessProviderRegistryRuntime:()=>';
+    const exportIdx = src.indexOf(exportAnchor);
+    if (exportIdx >= 0) {
+      // \u540D\u79F0\u5C3E\u90E8\u987B\u662F\u5206\u9694\u7B26\uFF08\u771F\u5B9E\u5F62\u6001 = \u5BFC\u51FA\u6620\u5C04\u5BF9\u8C61 ',' / '}'\uFF09\uFF1A'{0,10}' \u4E0A\u9650\u4F1A\u9759\u9ED8
+      // \u622A\u65AD\u66F4\u957F\u7684 minified \u540D \u2192 \u53D6\u5230\u9519\u8BEF\u51FD\u6570\u540D\uFF1B\u8981\u6C42\u5206\u9694\u7B26\u540E\u622A\u65AD\u4E0D\u6210\u7ACB\uFF08\u6F02\u79FB\u53EF\u89C1\uFF09\u3002
+      const nameMatch = /^([A-Za-z_$][A-Za-z0-9_$]*)(?=[,}:])/.exec(src.slice(exportIdx + exportAnchor.length));
+      const fnName = nameMatch ? nameMatch[1] : null;
+      if (fnName) {
+        // \u951A\u70B9 A\uFF08\u9996\u9009\uFF0C\u6297\u6F02\u79FB\u6700\u5F3A\uFF09\uFF1A\u51FD\u6570\u5B9A\u4E49\u9ED8\u8BA4\u53C2\u6570\u6CD5\u2014\u2014
+        // 'function <fnName>(e,t={}){' \u2192 'function <fnName>(e,t={standalone:{}}){'\u3002
+        // \u8BED\u4E49\uFF1A\u8C03\u7528\u65B9\u7701\u7565\u7B2C\u4E8C\u53C2\uFF08\u534F\u8BAE\u8DEF\u5F84 xCt(z)\uFF09\u2192 t = {standalone:{}}\uFF1B\u663E\u5F0F\u4F20
+        // {}\uFF08skipUserConfig \u8DEF\u5F84\uFF09\u6216 {standalone:{...}}\uFF08TUI \u8DEF\u5F84\uFF09\u4E0D\u53D7\u5F71\u54CD\u3002
+        const defAnchor = 'function ' + fnName + '(';
+        // \u7ED3\u6784\u6821\u9A8C\uFF082026-10 review\xB7MF-1-5\uFF09\uFF1A\u66FE\u53D6\u9996\u4E2A\u6587\u672C\u547D\u4E2D\u2014\u2014\u771F\u5B9E bundle \u6709\u6570\u767E\u4E2A
+        // \u91CD\u540D function \u5B9A\u4E49\uFF08\u540C\u540D\u4E0D\u4EE3\u8868\u552F\u4E00\uFF09\uFF0C\u9519\u6539\u4E00\u5904\u4ECD\u662F\u8BED\u6CD5\u5408\u6CD5 bundle\uFF0C\u81EA\u68C0\u65E0\u6CD5
+        // \u53D1\u73B0\u4E14\u95E8\u4F1A\u62A5 armed\u3002\u5B9A\u4E49\u5FC5\u987B**\u552F\u4E00**\u4E14\u4F4D\u4E8E\u5BFC\u51FA\u6620\u5C04\u4E4B\u524D\uFF1B\u7B2C\u4E8C\u5904\u51FA\u73B0\u6216\u5B9A\u4E49
+        // \u843D\u5728\u5BFC\u51FA\u6620\u5C04\u4E4B\u540E = \u65E0\u6CD5\u786E\u5B9A\u5BFC\u51FA\u5BF9\u8C61\u6307\u5411\u7684\u5B9E\u73B0 \u2192 \u653E\u5F03\u672C\u951A\uFF08\u56DE\u9000\u8C03\u7528\u70B9\u951A /
+        // not armed\uFF09\uFF0C\u5B81\u53EF\u6F0F\u8865\u4E5F\u4E0D\u9ED8\u9ED8\u6539\u9519\u4F4D\u7F6E\u3002
+        let defCount = 0;
+        let defIdx = -1;
+        for (let scan = src.indexOf(defAnchor); scan >= 0; scan = src.indexOf(defAnchor, scan + 1)) {
+          defCount++;
+          if (scan < exportIdx) defIdx = scan;
+        }
+        if (defCount !== 1) defIdx = -1;
+        if (defIdx >= 0) {
+          const paramsEnd = __matchingParen(src, defIdx + defAnchor.length - 1);
+          if (paramsEnd > defIdx) {
+            // \u5FC5\u987B\u6070\u597D\u4E24\u4E2A\u9876\u5C42\u53C2\u6570\u4E14\u7B2C\u4E8C\u4E2A\u4EE5 '={}' \u6536\u5C3E\uFF1A\u66FE\u53EA\u8981\u6C42 '={}' \u552F\u4E00\u2014\u2014
+            // function f(e={},t) \u4F1A\u628A standalone \u6CE8\u5165\u7B2C\u4E00\u4E2A\u53C2\u6570\uFF08\u8BED\u6CD5\u5408\u6CD5\u3001\u8BED\u4E49\u9519\u8BEF\uFF09\uFF0C
+            // function f(e,t={},o={}) \u4E5F\u4E0D\u786E\u5B9A\u6CE8\u5165\u70B9\uFF08\u65E2\u6709\u56DE\u9000\u7528\u4F8B\uFF09\u3002
+            const params = __splitTopLevel(src, defIdx + defAnchor.length, paramsEnd);
+            if (params.length === 2) {
+              const second = params[1];
+              let secondEnd = second.end;
+              while (secondEnd > second.start && src.charCodeAt(secondEnd - 1) <= 32) secondEnd--;
+              // \u51FD\u6570\u4F53\u7A97\u53E3\u4EE4\u724C\uFF08\u53EF\u9009\u4FDD\u9669\uFF09\uFF1A\u771F\u5B9E\u6CE8\u518C\u6E90\u5B9E\u88C5\u5F15\u7528 .standalone /
+              // credentialStore\u2014\u2014\u540C\u540D\u4F46\u65E0\u5173\u7684\u5B9A\u4E49\uFF08\u6216\u5B57\u7B26\u4E32\u5185\u4F2A\u547D\u4E2D\uFF09\u4E0D\u5F97\u88AB\u6539\u5199\u3002
+              const bodyWindow = src.slice(paramsEnd + 1, paramsEnd + 500);
+              if (secondEnd - second.start > 3 && src.slice(secondEnd - 3, secondEnd) === '={}'
+                  && (bodyWindow.indexOf('standalone') >= 0 || bodyWindow.indexOf('credentialStore') >= 0)) {
+                const at = secondEnd - 3;
+                src = src.slice(0, at) + '={standalone:{}}' + src.slice(secondEnd);
+                standaloneApplied = true;
+              }
+            }
+          }
+        }
+        // \u951A\u70B9 B\uFF08\u56DE\u9000\uFF09\uFF1A\u8C03\u7528\u70B9\u6CE8\u5165 create:r(()=><fn>( \u2192 (<arg>,{standalone:{}})\u3002
+        // \u7ED3\u6784\u6821\u9A8C\u4E0E\u5B9A\u4E49\u951A\u540C\u53E3\u5F84\uFF082026-10 review\xB7N-1\uFF09\uFF1A\u5168\u6587\u4EF6\u51FA\u73B0\u6B21\u6570\u5FC5\u987B\u6070\u597D 1
+        // \u2014\u2014\u66FE\u53D6\u9996\u4E2A\u6587\u672C\u547D\u4E2D\uFF0C\u672A\u6765\u7248\u672C\u51FA\u73B0\u4E24\u5904\u540C\u6B3E\u8C03\u7528\u65F6\u6CE8\u5165\u843D\u5728\u65E0\u5173\u8C03\u7528\u4E0A\u3001
+        // standaloneApplied \u4ECD\u7F6E true = \u771F\u5B9E\u534F\u8BAE\u8DEF\u5F84 host \u6A21\u5F0F\u800C\u95E8\u62A5 armed \u7684\u5047\u6210\u529F\u3002
+        // count > 1 = \u65E0\u6CD5\u786E\u5B9A\u534F\u8BAE\u8DEF\u5F84\u8C03\u7528\u70B9 \u2192 \u653E\u5F03\u672C\u951A\uFF08not armed\uFF09\u3002
+        if (!standaloneApplied) {
+          const callAnchor = 'create:r(()=>' + fnName + '(';
+          let callCount = 0;
+          let callIdx = -1;
+          for (let scan = src.indexOf(callAnchor); scan >= 0; scan = src.indexOf(callAnchor, scan + 1)) {
+            callCount++;
+            callIdx = scan;
+          }
+          if (callCount === 1) {
+            const argStart = callIdx + callAnchor.length;
+            // \u62EC\u53F7\u914D\u5E73\u627E\u4E0E fnName( \u914D\u5BF9\u7684\u95ED\u62EC\u53F7\uFF08\u626B\u63CF\u5668\u8DF3\u8FC7\u5B57\u9762\u91CF/\u6A21\u677F/\u6CE8\u91CA\u2014\u2014\u5B9E\u53C2
+            // \u542B\u5185\u8054\u4E32\u6216\u5185\u5C42\u8C03\u7528\u65F6\u9996\u4E2A ')' \u843D\u5728\u9519\u8BEF\u5C42\u7EA7 = \u6CE8\u5165\u9519\u4F4D\u7684\u5047\u6210\u529F\uFF09
+            const closeIdx = __matchingParen(src, argStart - 1);
+            if (closeIdx > argStart) {
+              src = src.slice(0, closeIdx) + ',{standalone:{}}' + src.slice(closeIdx);
+              standaloneApplied = true;
+            }
+          }
+        }
+      }
+    }
+    if (!standaloneApplied) {
+      process.stderr.write('[zcode-launcher] standalone account: CLI bundle anchor not found (zcode upstream shape drifted?) - account family stays host-dependent\\n');
+    }
+    // \u2462 [2026-10-16 standalone account\xB7\u7AEF\u53E3\u6CE8\u5165] \u534F\u8BAE\u8DEF\u5F84\u7684 app \u521B\u5EFA\uFF08
+    // createZCodeApp:r((ut={})=>INn({...q0c(...)}) \u552F\u4E00\u547D\u4E2D\uFF09\u672A\u4F20
+    // providerRuntimeHeadersPort\u2014\u2014app \u56E0\u6B64\u56DE\u843D host \u8BF7\u6C42\u7AEF\u53E3\uFF08mai\uFF09\uFF0C\u800C taiji \u94FE\u4E0A\u65E0
+    // \u5BBF\u4E3B\u4EFB\u5E94\u7B54 \u2192 zod invalid_union(headersApplied)\uFF08\u2461\u53EA\u4FEE\u4E86 registry \u4FA7\uFF1Aprovider
+    // \u5DF2\u80FD\u8FDB\u6CE8\u518C\u8868\uFF0C\u4F46\u8BA4\u8BC1\u5934\u4ECD\u8D70 host \u8BF7\u6C42\uFF09\u3002\u672C\u6B65\u628A registry runtime \u5BF9\u8C61\u4E0A\u7684
+    // providerRuntimeHeadersPort\uFF08standalone \u6A21\u5F0F = \u672C\u5730\u7AEF\u53E3\uFF09\u6CE8\u5165\u8BE5 app \u521B\u5EFA\u9009\u9879\uFF1A
+    // \u8D26\u53F7\u65CF\u8BA4\u8BC1\u5934\u7531\u672C\u8FDB\u7A0B\u672C\u5730\u89E3\u6790\uFF08\u51ED\u636E = credentials.json \u4E2D ZCode \u81EA\u6709\u9879\uFF09\u3002
+    const appAnchor = 'createZCodeApp:r(';
+    const appIdx = src.indexOf(appAnchor);
+    if (appIdx >= 0) {
+      const closeAnchor = '}),"createZCodeApp")';
+      const closeIdx = src.indexOf(closeAnchor, appIdx);
+      // \u641C\u7D22\u7A97\u4EE5\u6536\u53E3\u951A\u4E3A\u754C\uFF08\u66FE\u7528 appIdx+1600 \u56FA\u5B9A\u7A97\u2014\u2014\u7A97\u53E3\u8D8A\u8FC7\u6536\u53E3\u4F1A\u6355\u83B7\u9009\u9879\u5BF9\u8C61\u5916
+      // \u7684\u65E0\u5173\u540C\u540D\u5F62\u6001\uFF0C\u6CE8\u5165\u9519\u8BEF\u53D8\u91CF\u540D \u2192 \u52A0\u8F7D\u671F ReferenceError \u4E14\u8865\u4E01\u5C42\u65E0 warn\uFF09
+      const regMatch = closeIdx > appIdx
+        ? /([A-Za-z_$][A-Za-z0-9_$]*).runtime.registryService/.exec(src.slice(appIdx, closeIdx))
+        : null;
+      if (closeIdx > appIdx && regMatch) {
+        // \u6761\u4EF6 spread\uFF082026-10 review\xB7S-4\uFF09\uFF1A\u4E0A\u6E38 kEt \u4EE5 \`n.providerRuntimeHeadersPort ??
+        // mai(e,t)\` \u628A\u5BBF\u4E3B\u8BF7\u6C42\u7AEF\u53E3\u663E\u5F0F\u4EA4\u7ED9 createZCodeApp\uFF08...q0c($0c(ut,n),...) \u5DF2\u542B\u8BE5\u503C\uFF09\uFF1B
+        // \u65E0\u6761\u4EF6\u5C3E\u63D2 <reg>.providerRuntimeHeadersPort \u5728 standalone \u672A\u6B66\u88C5\u5F62\u6001\uFF08\u503C\u4E3A
+        // undefined\uFF09\u4F1A shadow \u6389\u5BBF\u4E3B\u7AEF\u53E3\u3001\u62B9\u9664 host \u56DE\u843D\u3002\u6539\u4E3A\u4EC5\u5728\u672C\u5730\u7AEF\u53E3\u5B58\u5728\u65F6\u8986\u76D6\uFF1A
+        // standalone \u5F62\u6001\u5B57\u8282\u7B49\u4EF7\uFF0Chost \u5F62\u6001\u4FDD\u7559\u8C03\u7528\u65B9\u503C\u3002
+        const reg = regMatch[1];
+        src = src.slice(0, closeIdx)
+          + ',...(' + reg + '.providerRuntimeHeadersPort?{providerRuntimeHeadersPort:' + reg + '.providerRuntimeHeadersPort}:{})'
+          + src.slice(closeIdx);
+        portInjected = true;
+      }
+    }
+    if (!portInjected) {
+      process.stderr.write('[zcode-launcher] standalone account: header-port injection anchor not found (zcode upstream shape drifted?) - account auth stays host-dependent\\n');
+    }
+    // \u4EA4\u4ED8\u6761\u4EF6\u542B portInjected\uFF082026-10 review \u4FEE\u6B63\uFF09\uFF1A\u66FE\u53EA\u8BA4 entitled/standalone\u2014\u2014
+    // \u7AEF\u53E3\u951A\u5355\u72EC\u547D\u4E2D\u65F6\u8865\u4E01\u4EA7\u7269\u88AB\u9759\u9ED8\u4E22\u5F03\uFF08\u2462 \u5F62\u540C\u865A\u8BBE\uFF0C\u65E0\u4EFB\u4F55\u4FE1\u53F7\uFF09\u3002
+    if (entitledApplied || standaloneApplied || portInjected) {
+      // \u7F13\u5B58\u524D\u8BED\u6CD5\u81EA\u68C0\uFF08\u5EC9\u4EF7\u4FDD\u9669\uFF09\uFF1A\u951A\u6F02\u79FB\u5F62\u6001\u4E0B\u63D2\u9519\u4F4D\u7F6E\u4F1A\u4EA7\u51FA\u8BED\u6CD5\u975E\u6CD5 bundle\uFF0C
+      // app-server \u542F\u52A8\u5373\u88F8 SyntaxError \u4E14\u96BE\u5F52\u56E0\u8865\u4E01\u5C42\u2014\u2014\u7F13\u5B58\u524D try \u7F16\u8BD1\u4E00\u6B21\uFF0C
+      // \u5931\u8D25\u56DE\u9000\u539F\u6587 + stderr warn\uFF08\u8D70\u65E2\u6709\u300C\u539F\u6587\u900F\u51FA\u300D\u964D\u7EA7\u8BED\u4E49\uFF09\u3002BOM/shebang \u5265\u79BB
+      // \u4E0E .js \u6269\u5C55\u5904\u7406\u5668\u540C\u6B3E\uFF08\u5426\u5219\u5408\u6CD5 CJS \u88AB\u8BEF\u5224\u975E\u6CD5\uFF09\u3002
+      let check = src;
+      if (check.charCodeAt(0) === 0xfeff) check = check.slice(1);
+      if (check.startsWith('#!')) check = check.slice(check.indexOf('\\n') + 1);
+      try {
+        new Function(check);
+        result = src;
+      } catch (syntaxErr) {
+        process.stderr.write('[zcode-launcher] cli-source patch produced invalid JS (' + ((syntaxErr && syntaxErr.message) || 'unknown') + ') - falling back to unpatched source\\n');
+        result = null;
+      }
+    } else {
+      result = null;
+    }
+  } catch { result = null; }
+  __cliPatchCache.set(path, result);
+  // \u6807\u5FD7\u53EA\u63CF\u8FF0\u300C\u5DF2\u4EA4\u4ED8\u4EA7\u7269\u300D\uFF1A\u8BED\u6CD5\u81EA\u68C0\u5931\u8D25/\u5F02\u5E38\u56DE\u9000\uFF08result=null\uFF09\u65F6\u5168\u90E8 false\u2014\u2014
+  // \u95E8\u4E0D\u5F97\u628A\u672A\u751F\u6548\u7684\u8865\u4E01\u62A5\u6210 armed\u3002
+  __cliPatchStatus.set(path, {
+    entitled: result !== null && entitledApplied,
+    standalone: result !== null && standaloneApplied,
+    headerPort: result !== null && portInjected,
+  });
+  return result;
+}`;
+var ACCOUNT_METADATA_SECTION = `
+// [2026-10-16 standalone account metadata] standalone \u8D26\u53F7\u6E90\u8981\u6C42
+// account-provider:<planProviderId>:identity / :auth-source \u4E24\u6761**\u5143\u6570\u636E**\u952E\u624D\u627F\u8BA4
+// account provider\uFF08\u7F3A identity \u76F4\u63A5\u4E22\u5F03\u8BE5 provider \u2192 \u6D3E\u53D1\u62A5\u300CProvider Registry \u4E2D
+// \u4E0D\u5B58\u5728 Model\u300D\uFF09\u3002\u4E24\u952E\u975E\u79D8\u5BC6\uFF08\u8EAB\u4EFD ID / \u8BA4\u8BC1\u6765\u6E90\uFF09\uFF0C\u771F\u51ED\u636E\u4ECD\u662F ZCode \u81EA\u6709\u9879
+// \uFF08oauth token \u6216 plan api-key\uFF0C\u5747\u5728 credentials.json\uFF0C\u7531 ZCode \u767B\u5F55/\u914D\u7F6E\u5199\u5165\uFF09\u3002
+// \u672C\u6B65\u5E42\u7B49\u4F9B\u7ED9\uFF1A\u7F3A\u65F6\u8FFD\u52A0 + **\u5B64\u513F\u503C\u77EB\u6B63**\uFF082026-10 review\xB7MF-1-1\uFF09\u2014\u2014\u6D3E\u751F\u503C\u6BCF\u6B21
+// spawn \u91CD\u7B97\uFF0C\u65E2\u6709\u975E\u7A7A\u503C\u4ECD\u662F\u6743\u5A01\uFF08\u4E0D\u65E0\u5DEE\u522B\u8986\u5199\uFF09\uFF0C\u4EC5\u5F53\u5176\u80CC\u540E\u51ED\u636E\u5DF2\u4E0D\u5B58\u5728\u65F6\u624D
+// \u6539\u5199\uFF08oauth \u64A4\u9500 / plan key \u8F6E\u6362 / \u8D26\u53F7\u5207\u6362\uFF09\uFF1B\u5426\u5219\u65E7\u8EAB\u4EFD/\u65E7\u6765\u6E90\u4F1A\u6C38\u4E45\u95E8\u63A7\u8BE5
+// provider \u4E14\u6C38\u4E0D\u6536\u655B\u3002\u4EFB\u4F55\u5931\u8D25\u53EA warn \u4E0D\u963B\u65AD spawn\uFF08\u7F3A\u952E\u7684\u62A5\u9519\u8DEF\u5F84\u4E0E\u6062\u590D\u6307\u5F15\u7531
+// \u5F15\u64CE\u4FA7\u65E2\u6709\u6587\u6848\u627F\u8F7D\uFF09\u3002catches\uFF1A\u6587\u4EF6\u7F3A\u5931/\u574F JSON/\u76EE\u5F55\u4E0D\u53EF\u5199\u3002
+// \u5E76\u53D1\u8FB9\u754C\uFF08ADR-0143 \u767B\u8BB0\uFF09\uFF1A\u5BF9\u4E0E GUI \u5171\u4EAB\u7684\u51ED\u636E\u5E93\u505A\u65E0\u9501 read-modify-write \u5168\u91CF
+// \u5199\u56DE\uFF0C\u4E0E GUI token \u5237\u65B0\u5E76\u53D1\u5B58\u5728\u6BEB\u79D2\u7EA7\u4E22\u66F4\u65B0\u7A97\u53E3\u2014\u2014\u540E\u679C\u81EA\u6108\uFF08GUI \u4FA7\u91CD\u8BD5\u5237\u65B0 /
+// \u672C\u4FA7\u7F3A\u952E\u4E0B\u6B21 spawn \u5E42\u7B49\u8865\u9F50\uFF09\uFF0C\u4E8B\u5B9E\u9A71\u52A8\u539F\u5219\u4E0B\u4E0D\u52A0\u9501\u3001\u4E0D\u505A\u65F6\u95F4\u8865\u507F\u3002\u5143\u6570\u636E\u952E
+// \u9762\u53E6\u52A0 compare-and-skip \u9632\u7EBF\uFF082026-10 review\xB7N-3\uFF09\uFF1A\u5199\u56DE\u524D\u91CD\u8BFB\u78C1\u76D8\u6BD4\u5BF9
+// identity/auth-source \u4E24\u952E\uFF0C\u68C0\u6D4B\u5230\u5E76\u53D1\u5199\u5165\u5373\u653E\u5F03\u672C\u6B21\u5199\u5165\uFF08\u89C1\u843D\u5E93\u6BB5\u6CE8\u91CA\uFF09\u3002
+// \u8C03\u7528\u5951\u7EA6\uFF082026-10 review\xB7S-3\uFF09\uFF1A\u4EC5\u5728\u5B89\u88C5\u95E8\u786E\u8BA4 standalone \u4E0E header-port \u4E24\u951A
+// \u5747\u5DF2\u6B66\u88C5\u65F6\u8C03\u7528\u2014\u2014\u8FD9\u4E9B\u5143\u6570\u636E\u952E\u53EA\u88AB standalone \u8D26\u53F7\u6E90\u6D88\u8D39\uFF0C\u4E14\u8D26\u53F7\u94FE\u8981\u6210\u7ACB\u8FD8\u8981\u6C42
+// \u8BA4\u8BC1\u5934\u8D70\u672C\u5730\u7AEF\u53E3\uFF1B\u4EFB\u4E00\u951A\u6F02\u79FB\uFF08\u7248\u672C\u4E0D\u652F\u6301\uFF09\u65F6\u5199\u5165\u7528\u6237\u5171\u4EAB credentials.json \u65E0
+// \u4EFB\u4F55\u8FD0\u884C\u65F6\u6536\u76CA\uFF0C\u53EA\u589E\u98CE\u9669\u3002
+function ensureAccountMetadata() {
+  try {
+    const credPath = path.join(os.homedir(), '.zcode', 'v2', 'credentials.json');
+    const readOrig = fs.__origReadFileSync || fs.readFileSync;
+    if (!fs.existsSync(credPath)) return;
+    const creds = JSON.parse(readOrig.call(fs, credPath, 'utf8'));
+    if (!creds || typeof creds !== 'object' || Array.isArray(creds)) return;
+    if (!CATALOG_PATH) return;
+    let planIds = [];
+    try {
+      const cat = JSON.parse(readOrig.call(fs, CATALOG_PATH, 'utf8'));
+      const pcr = (cat && cat.config && cat.config.providerConfigRules) || {};
+      const rules = Array.isArray(pcr.providerRules) ? pcr.providerRules : [];
+      planIds = rules
+        // \u8FC7\u6EE4\u9762\u523B\u610F\u5BBD\u4E8E 3.15.3 standalone \u5FEB\u7167\u7684\u6D88\u8D39\u5224\u636E\uFF08\u6E90\u7801 NNn\uFF1Atype=zhipu-account
+        // && mode=individual-coding-plan && accountType \u975E\u7A7A && builtinModelIds \u975E\u7A7A\uFF1B
+        // \u771F\u5B9E\u76EE\u5F55 10 \u6761\u547D\u4E2D\u3001\u4EC5 2 \u6761\u88AB individual \u5FEB\u7167\u6D88\u8D39\uFF09\uFF1A\u591A\u5199\u7684\u952E\u662F\u975E\u79D8\u5BC6\u5143\u6570\u636E\u3001
+        // \u7F3A\u65F6\u8FFD\u52A0\u6210\u672C\u2248\u96F6\uFF1B\u800C mode \u503C\u57DF\uFF08individual/team/start/off-peak/
+        // highspeed\uFF09\u8DE8 CLI \u7248\u672C\u4ECD\u5728\u6F14\u5316\uFF0C\u6309\u5F53\u524D\u7248\u672C\u6536\u7A84\u4F1A\u8BA9\u522B\u7684\u7248\u672C/\u672A\u6765\u6D88\u8D39\u9762
+        // \u9759\u9ED8\u7F3A\u952E\u3002\u5BBD\u5EA6\u662F\u6709\u610F\u7684\uFF0C\u4E0D\u6309 3.15.3 \u6536\u7A84\uFF082026-10 review\xB7S-5 \u6838\u5B9E\u540E\u4FDD\u7559\uFF09\u3002
+        .filter(function (r) { return r && r.config && r.config.access && r.config.access.type === 'zhipu-account'; })
+        .map(function (r) { return String(r.providerId || ''); })
+        .filter(Boolean);
+    } catch (e) {
+      // \u76EE\u5F55\u635F\u574F/\u4E0D\u53EF\u8BFB = identity/auth-source \u65E0\u6CD5\u4F9B\u7ED9\u7684\u771F\u56E0\uFF0C\u4E0D\u80FD\u9759\u9ED8\u8FD4\u56DE\uFF08\u5426\u5219
+      // standalone \u6D3E\u53D1\u62A5\u300CProvider Registry \u4E2D\u4E0D\u5B58\u5728 Model\u300D\u65F6\u6392\u969C\u65E0\u5165\u53E3\uFF09
+      process.stderr.write('[zcode-launcher] account metadata: builtin catalog unreadable (' + ((e && e.message) || String(e)) + ') - skipping account provider metadata\\n');
+      return;
+    }
+    const added = [];
+    const reconciled = [];
+    // compare-and-skip \u57FA\u7EBF\uFF082026-10 review\xB7N-3\uFF09\uFF1A\u5168\u90E8 plan \u4E24\u952E\u7684\u8BFB\u65F6\u539F\u59CB\u503C\uFF08\u9996\u89C1
+    // \u6355\u83B7\u2014\u2014\u540E\u7EED\u6539\u5199 creds \u4E0D\u5F71\u54CD\u57FA\u7EBF\uFF09\u3002\u5199\u56DE\u524D\u91CD\u8BFB\u78C1\u76D8\u9010\u952E\u6BD4\u5BF9\uFF0C\u68C0\u6D4B\u300C\u5FEB\u7167\u8BFB\u53D6
+    // \u2192\u5199\u56DE\u300D\u7A97\u53E3\u5185\u7684 GUI/\u767B\u5F55\u5E76\u53D1\u5199\u5165\uFF0C\u9632\u9648\u65E7\u5FEB\u7167\u8986\u76D6\u6743\u5A01\u65B0\u503C\u3002
+    const metaBaseline = Object.create(null);
+    for (const pid of planIds) {
+      const idKey = 'account-provider:' + pid + ':identity';
+      const srcKey = 'account-provider:' + pid + ':auth-source';
+      if (metaBaseline[idKey] === undefined) metaBaseline[idKey] = creds[idKey];
+      if (metaBaseline[srcKey] === undefined) metaBaseline[srcKey] = creds[srcKey];
+      // host \u6001 plan api-key \u952E\u540D\u6A21\u677F\uFF1Aaccount-provider:coding-plan:<pid>:account:<identity>:api-key
+      const apiKeyPrefix = 'account-provider:coding-plan:' + pid + ':account:';
+      const apiKeySuffix = ':api-key';
+      const hasPlanApiKey = (id) => {
+        if (!id) return false;
+        return Boolean(creds[apiKeyPrefix + encodeURIComponent(id) + apiKeySuffix]);
+      };
+      let identity = typeof creds[idKey] === 'string' ? creds[idKey] : '';
+      const authSource = typeof creds[srcKey] === 'string' ? creds[srcKey] : '';
+      // \u6D3E\u751F\u8EAB\u4EFD\u6BCF\u6B21 spawn \u91CD\u7B97\uFF08\u4E0D\u8BFB\u65E2\u6709\u952E\uFF09\u3002\u591A plan api-key\uFF08\u65E7+\u65B0 account / \u8F6E\u6362
+      // \u6B8B\u7559\uFF09\u65F6\u300CObject.keys \u9996\u4E2A\u547D\u4E2D\u300D\u4F1A\u6C38\u4E45\u6307\u5411\u9648\u65E7 account \u4E14 hasPlanApiKey \u6052\u771F\u3001
+      // \u6C38\u4E0D\u81EA\u6108\uFF082026-10 review\xB7DG-R2-01\uFF09\u2014\u2014\u6D3E\u751F\u4F18\u5148\u7EA7\uFF1A
+      //   \u2460 project-key-location:v1:[origin,family,identity,...] \u952E\u5185\u5D4C identity
+      //      \uFF08ZCode \u767B\u5F55\u5199\u5165\u7684\u786E\u5B9A\u6027\u4FE1\u53F7\uFF1B\u952E\u540D\u5C3E\u6BB5 URL \u7F16\u7801 JSON \u6570\u7EC4\uFF0C\u7B2C 2/3 \u5143\u7D20
+      //      = family/identity\uFF0Cfamily \u4E0E pid \u524D\u7F00\u5339\u914D\u540C oauth \u5BB6\u65CF\u5224\u636E\uFF09\u5168\u4F53\u53BB\u91CD\u540E
+      //      \u552F\u4E00\u4E14\u8BE5 identity \u540D\u4E0B\u786E\u6709 plan api-key \u2192 \u7528\u5B83\uFF1B
+      //   \u2461 \u65E0\u2460\u4FE1\u53F7\u65F6\uFF0C\u8BE5 pid \u540D\u4E0B plan api-key \u952E\u7684 identity \u53BB\u91CD\u540E\u552F\u4E00 \u2192 \u7528\u5B83
+      //      \uFF08\u5355 account \u5E38\u6001\uFF09\uFF1B
+      //   \u2462 \u591A\u5019\u9009\u4E14\u65E0\u2460\u786E\u5B9A\u6027\u4FE1\u53F7 \u2192 \u4E0D\u731C\u6D4B\uFF1A\u4E0D\u6D3E\u751F\uFF08\u4FDD\u7559\u65E2\u6709 stored identity\uFF09\u5E76
+      //      log \u6B67\u4E49\u2014\u2014\u731C\u6D4B\u6539\u5199\u6BD4\u4FDD\u7559\u9648\u65E7\u503C\u66F4\u7CDF\uFF08\u9648\u65E7\u503C\u81F3\u5C11\u662F\u767B\u5F55\u6D41\u7A0B\u5199\u8FC7\u7684\uFF09\u3002
+      let derivedIdentity = '';
+      let ambiguousIdentity = false;
+      const keyLocPrefix = 'project-key-location:v1:';
+      const keyLocIds = [];
+      for (const k of Object.keys(creds)) {
+        if (k.indexOf(keyLocPrefix) !== 0) continue;
+        try {
+          const arr = JSON.parse(decodeURIComponent(k.slice(keyLocPrefix.length)));
+          if (Array.isArray(arr) && typeof arr[1] === 'string' && typeof arr[2] === 'string'
+              && pid.indexOf('account:' + arr[1]) === 0 && keyLocIds.indexOf(arr[2]) === -1) {
+            keyLocIds.push(arr[2]);
+          }
+        } catch (e2) { /* \u5F62\u6001\u5916\u952E\uFF08\u635F\u574F/\u975E\u6570\u7EC4\uFF09\u4E0D\u6784\u6210\u786E\u5B9A\u6027\u4FE1\u53F7 */ }
+      }
+      if (keyLocIds.length === 1 && hasPlanApiKey(keyLocIds[0])) {
+        derivedIdentity = keyLocIds[0];
+      } else {
+        const apiKeyIds = [];
+        for (const k of Object.keys(creds)) {
+          if (k.indexOf(apiKeyPrefix) !== 0 || k.slice(-apiKeySuffix.length) !== apiKeySuffix) continue;
+          const mid = k.slice(apiKeyPrefix.length, k.length - apiKeySuffix.length);
+          if (!mid) continue;
+          let id; try { id = decodeURIComponent(mid); } catch (e2) { id = mid; }
+          if (apiKeyIds.indexOf(id) === -1) apiKeyIds.push(id);
+        }
+        if (apiKeyIds.length === 1) derivedIdentity = apiKeyIds[0];
+        else if (apiKeyIds.length > 1) ambiguousIdentity = true;
+      }
+      if (ambiguousIdentity) {
+        process.stderr.write('[zcode-launcher] account metadata: multiple plan api-key identities for ' + pid + ', no deterministic signal - keeping stored identity\\n');
+      }
+      // oauth \u5BB6\u65CF\u51ED\u636E\u5B58\u5728\u6027\uFF1A\u626B oauth:<family>:access_token\uFF0Cprovider id \u4EE5
+      // account:<family> \u5F00\u5934\u5373\u7ED1\u5B9A\u8BE5\u5BB6\u65CF\uFF08\u96F6\u5BB6\u65CF\u540D\u5199\u6B7B\uFF09\u3002
+      let oauthBacked = false;
+      const oauthPrefix = 'oauth:';
+      const oauthSuffix = ':access_token';
+      for (const k of Object.keys(creds)) {
+        if (k.indexOf(oauthPrefix) !== 0 || k.slice(-oauthSuffix.length) !== oauthSuffix) continue;
+        const fam = k.slice(oauthPrefix.length, k.length - oauthSuffix.length);
+        if (!fam) continue;
+        const token = creds[k];
+        if (typeof token !== 'string' || token === '') continue;
+        if (pid.indexOf('account:' + fam) === 0) { oauthBacked = true; break; }
+      }
+      // \u2460 \u8EAB\u4EFD\u5B64\u513F\u77EB\u6B63\uFF1A\u65E2\u6709\u975E\u7A7A\u8EAB\u4EFD\u662F\u6743\u5A01\u5199\u5165\uFF0C\u4F46\u53EA\u5728\u300C\u8BA4\u8BC1\u5F62\u6001\u8981\u6C42\u8EAB\u4EFD\u5BF9\u5E94 plan
+      // api-key\u300D\u65F6\u5224\u5B9A\u5B64\u513F\u2014\u2014oauth \u5F62\u6001\u4E0B\u8EAB\u4EFD\u4E0D\u53C2\u4E0E\u51ED\u636E\u67E5\u627E\uFF08CLI \u767B\u5F55\u5199\u5165\u7684\u8EAB\u4EFD
+      // \u53EF\u80FD\u6C38\u65E0 api-key\uFF09\uFF0C\u4E0D\u5F97\u7528\u6B8B\u7559\u952E\u540D\u8986\u5199\u3002\u5B64\u513F = \u65E0\u5BF9\u5E94 api-key \u4E14\u5F53\u524D\u53EF\u6D3E\u751F
+      // \u2192 \u6539\u6210\u5F53\u524D\u8EAB\u4EFD\uFF08\u5426\u5219 manual \u67E5\u65E7\u8EAB\u4EFD\u51ED\u636E\u6052\u5931\u8D25\u3001\u6C38\u4E0D\u6536\u655B\uFF09\u3002\u65E5\u5FD7\u5728\u843D\u5E93
+      // \u70B9\u53D1\uFF08\u65E0\u53EF\u7528 auth-source \u65F6 continue\uFF0C\u4E0D\u5F97\u7559\u4E0B\u201C\u5DF2\u77EB\u6B63\u201D\u800C\u672A\u5199\u76D8\u7684\u5047\u65E5\u5FD7\uFF09\u3002
+      let identityCorrectedFrom = '';
+      if (identity && !hasPlanApiKey(identity) && (authSource === 'manual' || !oauthBacked)
+          && derivedIdentity && derivedIdentity !== identity) {
+        identityCorrectedFrom = identity;
+        identity = derivedIdentity;
+      }
+      if (!identity) identity = derivedIdentity;
+      if (!identity) continue;
+      // \u2461 auth-source \u6D3E\u751F + \u5B64\u513F\u77EB\u6B63\uFF1Aoauth \u9700\u5339\u914D\u5BB6\u65CF\u7684 access_token\uFF1Bmanual \u9700\u8BE5
+      // \u8EAB\u4EFD\u540D\u4E0B\u7684 plan api-key\u3002\u65E2\u6709\u503C\u4E0E\u5F53\u524D\u4E8B\u5B9E\u4E00\u81F4\u65F6\u539F\u6837\u4FDD\u7559\uFF08GUI/\u767B\u5F55\u5199\u5165\u7684
+      // manual \u5728 oauth \u540C\u65F6\u5B58\u5728\u65F6\u4ECD\u662F\u6743\u5A01\u2014\u2014\u66FE\u65E0\u5DEE\u522B\u8986\u5199\u5DEE\u5F02\u503C\uFF09\u3002
+      const derivedAuthSource = oauthBacked ? 'oauth' : (hasPlanApiKey(identity) ? 'manual' : '');
+      let nextAuthSource = authSource || derivedAuthSource;
+      if (authSource === 'oauth' && !oauthBacked) nextAuthSource = derivedAuthSource;
+      else if (authSource === 'manual' && !hasPlanApiKey(identity)) nextAuthSource = derivedAuthSource;
+      if (!nextAuthSource) continue;
+      // \u843D\u5E93\u5224\u5B9A\uFF1A\u7F3A\u5931\u6001\uFF08\u7A7A\u4E32/\u975E\u4E32\uFF09\u8BB0 provisioned\uFF0C\u975E\u7A7A\u65E7\u503C\u88AB\u77EB\u6B63\u8BB0 reconciled\u3002
+      if (creds[idKey] !== identity) {
+        if (identityCorrectedFrom) {
+          reconciled.push(idKey + ' (' + identityCorrectedFrom + ' -> ' + identity + ')');
+        } else if (typeof creds[idKey] !== 'string' || creds[idKey] === '') {
+          added.push(idKey);
+        }
+        creds[idKey] = identity;
+      }
+      if (creds[srcKey] !== nextAuthSource) {
+        if (typeof creds[srcKey] === 'string' && creds[srcKey] !== '') {
+          reconciled.push(srcKey + ' (' + creds[srcKey] + ' -> ' + nextAuthSource + ')');
+        } else added.push(srcKey);
+        creds[srcKey] = nextAuthSource;
+      }
+    }
+    if (added.length === 0 && reconciled.length === 0) return;
+    // compare-and-skip\uFF082026-10 review\xB7N-3\uFF09\uFF1A\u65E0\u9501 RMW \u7684\u9648\u65E7\u8986\u76D6\u9632\u7EBF\u2014\u2014\u5199\u56DE\u524D\u91CD\u8BFB
+    // \u78C1\u76D8\uFF0C\u4EFB\u4E00 plan \u4E24\u952E\u5F53\u524D\u503C \u2260 \u8BFB\u65F6\u57FA\u7EBF = \u7A97\u53E3\u5185 GUI/\u767B\u5F55\u5DF2\u5B8C\u6210\u6743\u5A01\u5199\u5165 \u2192 \u653E\u5F03
+    // \u672C\u6B21\u5199\u5165\uFF08log \u8BF4\u660E\uFF0C\u4E0B\u6B21 spawn \u5E42\u7B49\u91CD\u7B97\uFF1B\u653E\u5F03\u540E\u7684\u6062\u590D = \u91CD\u65B0\u767B\u5F55/\u914D\u7F6E\u6216\u5220\u9664
+    // \u8BE5\u952E\uFF0CADR-0143 \u5E76\u53D1\u8FB9\u754C\uFF09\u3002\u91CD\u8BFB/\u89E3\u6790\u5931\u8D25 = \u7A97\u53E3\u4E0D\u53EF\u5224\u5B9A\uFF0C\u540C\u6837\u4FDD\u5B88\u653E\u5F03\u3002
+    try {
+      const reread = JSON.parse(readOrig.call(fs, credPath, 'utf8'));
+      if (!reread || typeof reread !== 'object' || Array.isArray(reread)) {
+        throw new Error('credentials reread is not an object');
+      }
+      for (const mk of Object.keys(metaBaseline)) {
+        if ((reread[mk] || '') !== (metaBaseline[mk] || '')) {
+          throw new Error('concurrent write detected on ' + mk);
+        }
+      }
+    } catch (skipErr) {
+      process.stderr.write('[zcode-launcher] account metadata skipped (' + ((skipErr && skipErr.message) || String(skipErr)) + ') - retry on next spawn\\n');
+      return;
+    }
+    const tmp = credPath + '.taiji-tmp-' + process.pid;
+    // rename \u6362 inode\u2014\u2014tmp \u4E0D\u5E26 mode \u843D\u76D8\u4F1A\u628A GUI \u4FA7\u6536\u7D27\u8FC7\u7684\u6587\u4EF6\u6743\u9650\u9759\u9ED8\u653E\u5BBD\u4E3A
+    // \u7F3A\u7701 umask \u503C\uFF0C\u5199\u524D\u8BFB\u65E2\u6709 mode \u968F\u5199\u4F20\u9012\uFF08stat \u5931\u8D25\u56DE\u9000 0600\uFF09\uFF1B\u5199/rename
+    // \u5931\u8D25\u6E05\u7406 tmp\uFF0C\u4E0D\u5728\u7528\u6237\u51ED\u636E\u76EE\u5F55\u7559\u6B8B\u7247\u3002
+    let writeMode = 0o600;
+    try { writeMode = fs.statSync(credPath).mode & 0o777; } catch { /* \u7F3A\u7701 0600 */ }
+    try {
+      fs.writeFileSync(tmp, JSON.stringify(creds, null, 2), { mode: writeMode });
+      fs.renameSync(tmp, credPath);
+    } catch (err) {
+      try { fs.unlinkSync(tmp); } catch { /* tmp \u672A\u751F\u6210\u6216\u5DF2 rename */ }
+      throw err;
+    }
+    if (added.length > 0) process.stderr.write('[zcode-launcher] account metadata provisioned: ' + added.join(', ') + '\\n');
+    if (reconciled.length > 0) process.stderr.write('[zcode-launcher] account metadata reconciled: ' + reconciled.join(', ') + '\\n');
+  } catch (err) {
+    process.stderr.write('[zcode-launcher] account metadata provisioning failed (non-blocking): ' + ((err && err.message) || String(err)) + '\\n');
+  }
+}
+`;
+
 // src/appserver-launcher.ts
 var ZCODE_APPSERVER_LAUNCHER_NAME = "appserver-launcher.cjs";
 var APPSERVER_LAUNCHER_SOURCE = `'use strict';
@@ -507,7 +1074,7 @@ const CONFIG_PATH = path.join(os.homedir(), '.zcode', 'cli', 'config.json');
 
 // \u5408\u5E76\u5F62\u6001\uFF1A\u771F\u5B9E cli config \u539F\u6837\uFF08model/plugins/mcp/subagents \u7B49 worker \u7EE7\u627F\u9762\u4E0D\u53D8\uFF09
 // + v2 \u7684 provider \u5B57\u5178\u6CE8\u5165\uFF0C\u540C id \u65F6 v2 \u6761\u76EE\u6574\u6761\u4F18\u5148\u2014\u2014GUI \u76F4\u4F20 modelConfig \u65F6
-// v2 \u5373\u6743\u5A01\u6E90\uFF08\u8FDB\u7A0B\u5916\u7B49\u4EF7\u590D\u523B\uFF09\uFF1Bcli config \u4E0D\u5728 GUI \u7BA1\u7406\u9762\u3001\u53EF\u80FD\u6B8B\u7559\u5386\u53F2\u9A8C\u8BC1
+// v2 \u5373\u6743\u5A01\u6E90\uFF08\u8FDB\u7A0B\u5916\u7B49\u4EF7\u590D\u523B\uFF09\uFF1Bcli config \u4E0D\u5728 GUI \u7BA1\u7406\u4FA7\u3001\u53EF\u80FD\u6B8B\u7559\u5386\u53F2\u9A8C\u8BC1
 // \u914D\u7F6E\uFF082026-08-25 \u4E8B\u6545\uFF1A\u6B8B\u7559\u65E7 key \u538B\u8FC7\u65B0\u51ED\u636E\u81F4 turn 0 401\uFF09\uFF0C\u6545\u4E0D\u53D6 real \u4F18\u5148\u3002
 // model.main \u7F3A\u5931\u65F6\u53EA\u4ECE v2 \u900F\u4F20\uFF08v2 \u4E5F\u6CA1\u6709\u5219\u4E0D\u4F2A\u9020\u2014\u2014CLI \u7F3A\u7701\u89E3\u6790\u81EA\u4F1A\u843D\u5230\u6CE8\u518C\u8868
 // \u53EF\u7528\u6A21\u578B\uFF1Bplan \u5BB6\u65CF id \u5DF2\u4E0D\u53EF\u7528\uFF0C\u4E0D\u518D\u515C\u5E95\u4F2A\u9020\uFF09\u3002
@@ -536,12 +1103,16 @@ function injectedConfigText() {
   const v2Providers = v2.provider && typeof v2.provider === 'object' ? v2.provider : {};
   const hasKey = (entry) => entry && typeof entry === 'object'
     && entry.options && typeof entry.options.apiKey === 'string' && entry.options.apiKey !== '';
-  const injectable = {};
+  // \u65E0\u539F\u578B\u5B57\u5178\uFF08DG-R2-02\uFF09\uFF1Aprovider id \u503C\u57DF\u542B '__proto__'/'toString' \u7B49\u5371\u9669\u952E
+  //\uFF08runtime \u4FA7\u6709\u610F\u4EA7\u51FA\uFF0CS-17\uFF09\u2014\u2014\u666E\u901A\u5BF9\u8C61\u4E0A\u5BF9 __proto__ \u952E\u8D4B\u503C\u89E6\u53D1\u539F\u578B setter
+  // \u9759\u9ED8\u4E22\u6761\u76EE\u3001\u8BFB toString \u952E\u843D\u5230\u539F\u578B\u65B9\u6CD5\u8BEF\u5224\u5DF2\u5B58\u5728\u3002Object.create(null) \u4F7F
+  // \u952E\u8BFB\u5199\u5747\u843D\u5728 own property\u3002
+  const injectable = Object.create(null);
   for (const [id, entry] of Object.entries(v2Providers)) {
     if (hasKey(entry)) injectable[id] = entry;
   }
   // provider_config.json \u8865\u6CE8\u5165\uFF08\u8BFB\u53D6\u5931\u8D25\u9759\u9ED8\u964D\u7EA7\u2014\u2014\u6821\u9A8C\u6E90\u7F3A\u5E2D\u65F6\u5F15\u64CE\u4FA7\u6821\u9A8C\u540C\u6837\u4E0D\u53EF
-  // \u7528\uFF0C\u6CE8\u5165\u9762\u7EF4\u6301 v2-only \u73B0\u72B6\uFF1BproviderRules \u7F3A\u5931\u4E0D\u6784\u6210\u51ED\u636E\u9519\u8BEF\uFF09\u3002
+  // \u7528\uFF0C\u6CE8\u5165\u70B9\u7EF4\u6301 v2-only \u73B0\u72B6\uFF1BproviderRules \u7F3A\u5931\u4E0D\u6784\u6210\u51ED\u636E\u9519\u8BEF\uFF09\u3002
   try {
     const pc = JSON.parse(readOrig(PROVIDER_CONFIG_PATH, 'utf8'));
     const pcCfg = pc && typeof pc.config === 'object' && pc.config ? pc.config : {};
@@ -549,7 +1120,9 @@ function injectedConfigText() {
     const rules = Array.isArray(pcr.providerRules) ? pcr.providerRules : [];
     const mcr = typeof pcCfg.modelConfigRules === 'object' && pcCfg.modelConfigRules ? pcCfg.modelConfigRules : {};
     const modelRules = Array.isArray(mcr.providerModelRules) ? mcr.providerModelRules : [];
-    const modelMeta = {};
+    // \u65E0\u539F\u578B\u5B57\u5178\uFF08DG-R2-02 \u540C\u65CF\uFF09\uFF1Aid \u4E3A 'constructor' \u7B49\u539F\u578B\u65B9\u6CD5\u540D\u65F6\u666E\u901A\u5BF9\u8C61\u8BFB\u53D6
+    // \u843D\u5230\u539F\u578B Function\uFF0Cfor...of \u76F4\u63A5 TypeError \u88AB catch \u9759\u9ED8\u541E\u6389\u8BE5 rule \u7684\u5408\u6210
+    const modelMeta = Object.create(null);
     for (const mr of modelRules) {
       if (!mr || typeof mr !== 'object' || typeof mr.providerId !== 'string' || typeof mr.modelId !== 'string') continue;
       (modelMeta[mr.providerId] = modelMeta[mr.providerId] || []).push(mr);
@@ -560,8 +1133,10 @@ function injectedConfigText() {
       const cfg = rule.config && typeof rule.config === 'object' ? rule.config : {};
       const access = cfg.access && typeof cfg.access === 'object' ? cfg.access : {};
       const api = cfg.api && typeof cfg.api === 'object' ? cfg.api : {};
-      // v2/real \u5DF2\u6709 \u2192 \u4E0D\u91CD\u590D\u5408\u6210\uFF08v2 \u6761\u76EE\u66F4\u5168\uFF0C\u6574\u6761\u4F18\u5148\u8BED\u4E49\u4E0D\u53D7\u5F71\u54CD\uFF09
-      if (!id || injectable[id] || realProviders[id]) continue;
+      // v2/real \u5DF2\u6709 \u2192 \u4E0D\u91CD\u590D\u5408\u6210\uFF08v2 \u6761\u76EE\u66F4\u5168\uFF0C\u6574\u6761\u4F18\u5148\u8BED\u4E49\u4E0D\u53D7\u5F71\u54CD\uFF09\u3002
+      // realProviders \u662F JSON.parse \u666E\u901A\u5BF9\u8C61\uFF08\u6709\u539F\u578B\uFF09\u2014\u2014id \u4E3A 'toString' \u7B49
+      // \u539F\u578B\u65B9\u6CD5\u540D\u65F6\u76F4\u63A5\u4E0B\u6807\u8BFB\u53D6\u6052 truthy \u8BEF\u5224 real \u5DF2\u6709\uFF0C\u987B own-property \u68C0\u67E5
+      if (!id || injectable[id] || Object.prototype.hasOwnProperty.call(realProviders, id)) continue;
       // hasKey \u7EAA\u5F8B\u540C\u6B3E\uFF1A\u65E0 apiKey \u4E0D\u5408\u6210\uFF1B\u65E0 baseUrl\uFF08endpoint \u7531\u6A21\u677F\u63D0\u4F9B\u7684\u5F62\u6001\uFF09
       // \u4E0D\u5408\u6210\u2014\u2014\u6B8B\u7F3A\u6761\u76EE\u6BD4\u4E0D\u6CE8\u5165\u66F4\u7CDF\uFF0C\u539F\u751F\u300C\u4E0D\u5B58\u5728 Model\u300D\u62A5\u9519\u7167\u65E7\u900F\u51FA
       if (typeof access.apiKey !== 'string' || access.apiKey === '') continue;
@@ -593,7 +1168,7 @@ function injectedConfigText() {
         models: models,
       };
     }
-  } catch { /* provider_config \u7F3A\u5931/\u635F\u574F \u2192 \u8865\u6CE8\u5165\u9762\u9759\u9ED8\u964D\u7EA7\uFF08v2 \u6CE8\u5165\u4E0D\u53D7\u5F71\u54CD\uFF09 */ }
+  } catch { /* provider_config \u7F3A\u5931/\u635F\u574F \u2192 \u8865\u6CE8\u5165\u70B9\u9759\u9ED8\u964D\u7EA7\uFF08v2 \u6CE8\u5165\u4E0D\u53D7\u5F71\u54CD\uFF09 */ }
   if (Object.keys(injectable).length === 0) return null;
   const merged = { ...real };
   merged.provider = { ...realProviders, ...injectable };
@@ -607,7 +1182,7 @@ function injectedConfigText() {
 // [merge-fn-start]\uFF08\u5BF9\u8D26\u5355\u6D4B\u63D0\u53D6\u951A\u2014\u2014appserver-launcher.test.ts \u6309\u6807\u8BB0\u622A\u53D6\u672C\u51FD\u6570
 // eval \u6267\u884C\uFF1Bpreparer.ts mergePersonalProviderConfig \u4E0E\u672C\u51FD\u6570\u540C\u89C4\u5219\u9501\u6B65\uFF0C\u6539\u4EFB\u4E00\u4FA7
 // \u987B\u540C\u6B65\u53E6\u4E00\u4FA7\u5E76\u8DD1\u5BF9\u8D26\u5355\u6D4B\uFF09
-// merge(\u771F\u5B9E, \u526F\u672C)\u2014\u2014D3 \u6362\u8F68\u7248\u89C4\u5219\uFF1A
+// merge(\u771F\u5B9E, \u526F\u672C)\u2014\u2014D3 \u5207\u6362\u7248\u89C4\u5219\uFF1A
 //   - \u526F\u672C\u975E\u5BF9\u8C61 \u2192 \u539F\u6837\u8FD4\u56DE real\uFF08\u526F\u672C\u7F3A\u5E2D\u56DE\u843D\u8BED\u4E49\uFF1Bwrapper \u4FA7\u66F4\u65E9\u77ED\u8DEF\uFF0C\u9632\u5FA1\u5F62\u6001\uFF09
 //   - \u771F\u5B9E\u975E\u5BF9\u8C61\uFF08ENOENT/\u635F\u574F\uFF09\u2192 \u539F\u6837\u8FD4\u56DE copy\uFF08\u526F\u672C\u72EC\u6709\u6761\u76EE\u4E3A\u5168\u96C6\uFF1AproviderRules
 //     \u4EC5\u526F\u672C\u6761\u76EE + order \u4EC5\u526F\u672C\u5E8F\uFF0C\u9876\u5C42\u5B57\u6BB5\u968F\u526F\u672C\u4FDD\u6301\u5F62\u6001\u5B8C\u6574\uFF09
@@ -627,7 +1202,10 @@ function mergeProviderConfig(realObj, copyObj) {
   };
   const strArr = (v) => (Array.isArray(v) ? v.filter((s) => typeof s === 'string' && s.trim() !== '') : []);
   const mergedRules = [];
-  const seen = {};
+  // \u65E0\u539F\u578B\u5B57\u5178\uFF08DG-R2-02\uFF09\uFF1AproviderId \u4E3A '__proto__'/'toString' \u7B49\u5371\u9669\u952E\u65F6\u666E\u901A\u5BF9\u8C61
+  // \u7684 seen \u8BFB\u5199\u90FD\u4F1A\u649E\u539F\u578B\u94FE\uFF08__proto__ \u8D4B\u503C\u88AB setter \u541E / toString \u8BFB\u5230\u539F\u578B\u65B9\u6CD5
+  // \u8BEF\u5224\u5DF2\u89C1 \u2192 \u526F\u672C\u72EC\u6709\u6761\u76EE\u88AB\u4E22\uFF0C\u4E0E TS \u4FA7 Set \u5B9E\u88C5\u5206\u6B67\uFF09\u3002Object.create(null) \u6D88\u9664\u3002
+  const seen = Object.create(null);
   for (const rule of rulesOf(realObj)) {
     mergedRules.push(rule);
     if (isRec(rule) && typeof rule.providerId === 'string' && rule.providerId !== '') seen[rule.providerId] = true;
@@ -654,7 +1232,7 @@ function mergeProviderConfig(realObj, copyObj) {
 }
 // [merge-fn-end]
 
-// D3 \u6362\u8F68\u88C5\u8F7D\u901A\u9053\uFF1A\u547D\u4E2D\u771F\u5B9E provider_config.json \u7684\u8BFB\u53D6\u91CD\u5B9A\u5411\u4E3A merge(\u771F\u5B9E\u5B9E\u65F6
+// D3 \u5207\u6362\u88C5\u8F7D\u901A\u9053\uFF1A\u547D\u4E2D\u771F\u5B9E provider_config.json \u7684\u8BFB\u53D6\u91CD\u5B9A\u5411\u4E3A merge(\u771F\u5B9E\u5B9E\u65F6
 // \u5185\u5BB9, taiji \u540C\u6B65\u526F\u672C)\u2014\u2014\u6BCF\u6B21\u8BFB\u53D6\u91CD\u7B97\uFF08\u4E8B\u5B9E\u9A71\u52A8\uFF0C\u65E0\u7F13\u5B58/\u65F6\u95F4\u7A97\uFF0CZCode \u7AEF\u53D8\u66F4
 // \u5B9E\u65F6\u751F\u6548\uFF09\u3002\u526F\u672C\u7F3A\u5931/\u4E0D\u53EF\u8BFB \u2192 null = \u8C03\u7528\u65B9\u77ED\u8DEF\u56DE\u539F\u6587\u4EF6\uFF08\u56DE\u843D\u771F\u5B9E\u6587\u4EF6\u8BED\u4E49\uFF0C
 // \u96F6\u884C\u4E3A\u53D8\u5316\uFF09\uFF1Benv \u672A\u8BBE \u2192 null\uFF08\u5206\u652F\u4E0D\u6FC0\u6D3B\uFF09\u3002\u8BFB\u53D6\u4E00\u5F8B\u7ECF readOrig \u95F4\u63A5\u53D6\uFF08\u9632
@@ -713,42 +1291,9 @@ function catalogPatchText(path) {
   return result;
 }
 
-// [2026-10-13 account \u76F4\u901A\u2461] CLI bundle \u6E90\u7801\u5185\u5B58\u8865\u4E01\uFF1A\u5916\u90E8 spawn \u7684\u8D26\u53F7\u6761\u76EE\u6784\u5EFA
-// \u786C\u7F16\u7801 entitled:!1\uFF08YXe\uFF09\uFF0C\u6570\u636E\u9762\u6CE8\u5165\uFF08\u76EE\u5F55 entitled \u5B57\u6BB5\uFF09\u88AB\u5176\u65E0\u89C6\u2014\u2014\u6309\u7528\u6237\u88C1\u51B3
-// \u6539 zcode \u6E90\u7801\u7ED5\u8FC7\uFF1A\u62E6\u622A CLI bundle \u6E90\u7801\u8BFB\u53D6\uFF0C\u5185\u5B58\u66FF\u6362\u8BE5\u5B57\u9762\u91CF\u4E3A !0\uFF08ZCode.app
-// \u78C1\u76D8\u6587\u4EF6\u96F6\u89E6\u78B0\uFF1B\u951A\u4E32\u542B ]]:[] \u5C3E\u7F00\u552F\u4E00\u547D\u4E2D YXe \u6784\u9020\uFF0C\u53E6\u4E00\u5904\u540C\u540D\u6761\u4EF6\u903B\u8F91\u4E0D\u53D7\u5F71\u54CD\uFF09\u3002
-// \u951A\u4E0D\u547D\u4E2D\uFF08\u4E0A\u6E38\u6DF7\u6DC6\u5F62\u6001\u53D8\u5316\uFF09\u2192 \u539F\u6587\u900F\u51FA\uFF1A\u4EC5 account \u5BB6\u65CF\u7EE7\u7EED\u88AB\u62D2\uFF0C\u4E2A\u4EBA provider
-// \u4E0D\u53D7\u5F71\u54CD\u3002
-const __cliPatchCache = new Map();
-function patchedCliSource(path) {
-  if (__cliPatchCache.has(path)) return __cliPatchCache.get(path);
-  let result = null;
-  try {
-    const readOrig = fs.__origReadFileSync || fs.readFileSync;
-    const src = readOrig(path, 'utf8');
-    // \u7248\u672C\u9C81\u68D2\u951A\uFF082026-10-13 \u4FEE\u8BA2\uFF09\uFF1Aminified \u6807\u8BC6\u7B26\uFF08Uk/I3 \u7B49\uFF09\u968F zcode \u91CD\u65B0\u6253\u5305
-    // \u6F02\u79FB\uFF0C\u5C5E\u6027\u540D\uFF08zcodeBuiltinProviders / zhipu-account / entitled\uFF09\u662F\u6570\u636E/\u5951\u7EA6
-    // \u771F\u540D\u4E0D\u88AB\u6DF7\u6DC6\u2014\u2014\u4EE5\u5C5E\u6027\u540D\u5B9A\u4F4D + 600 \u5B57\u7B26\u7A97\u53E3\u5185\u628A\u8D26\u53F7\u6761\u76EE\u6784\u5EFA\u7684 entitled:!1
-    // \u7FFB\u8F6C\u4E3A !0\u3002\u7A97\u53E3\u96F6\u547D\u4E2D = \u4E0A\u6E38\u5F62\u6001\u6F02\u79FB \u2192 \u539F\u6587\u900F\u51FA + stderr warn\uFF08\u6F02\u79FB\u53EF\u89C1\uFF0C
-    // \u8FDB app-server stderr \u65E5\u5FD7\uFF09\uFF0C\u4E2A\u4EBA provider \u4E0D\u53D7\u5F71\u54CD\u3002
-    const anchorIdx = src.indexOf('zcodeBuiltinProviders.entries()');
-    if (anchorIdx >= 0) {
-      const window = src.slice(anchorIdx, Math.min(src.length, anchorIdx + 600));
-      if (window.indexOf('zhipu-account') >= 0 && window.indexOf('entitled:!1') >= 0) {
-        result = src.slice(0, anchorIdx)
-          + window.split('entitled:!1').join('entitled:!0')
-          + src.slice(anchorIdx + 600);
-      }
-    }
-    if (result === null) {
-      process.stderr.write('[zcode-launcher] account bypass: CLI bundle anchor not found (zcode upstream shape drifted?) - account family stays gated, personal providers unaffected\\n');
-    }
-  } catch { result = null; }
-  __cliPatchCache.set(path, result);
-  return result;
-}
+${CLI_PATCH_SECTION}
 
-// \u5185\u5EFA provider \u914D\u7F6E\u5B9A\u4F4D\uFF08\u6F02\u79FB\u9762\u2461\uFF09\uFF1A3.12.x \u8D77\u914D\u7F6E\u6587\u4EF6\u632A\u4F4D + CLI \u4F9D\u8D56\u5BBF\u4E3B\u6CE8\u5165
+// \u5185\u5EFA provider \u914D\u7F6E\u5B9A\u4F4D\uFF08\u6F02\u79FB\u98CE\u9669\u2461\uFF09\uFF1A3.12.x \u8D77\u914D\u7F6E\u6587\u4EF6\u632A\u4F4D + CLI \u4F9D\u8D56\u5BBF\u4E3B\u6CE8\u5165
 // ZCODE_BUILTIN_PROVIDER_CONFIG_FILE \u76F4\u63A5\u5B9A\u4F4D\uFF1BZCode \u684C\u9762 spawn \u94FE\u81EA\u5E26\u8BE5\u952E\uFF0C
 // \u672C wrapper \u94FE\u9700\u81EA\u7ED9\u3002\u663E\u5F0F\u4F20\u5165\u4F18\u5148 \u2192 v2 runtime \u76EE\u5F55\u4E0B\u5E73\u53F0\u76EE\u5F55\uFF08\u7CBE\u786E
 // <plat>-<arch> \u4F18\u5148\uFF0CRust arch \u53D8\u4F53\u5982 darwin-aarch64 \u5B57\u5178\u5E8F\u8DDF\u540E\uFF09\xD7 \u7248\u672C\u76EE\u5F55
@@ -820,15 +1365,32 @@ if (!process.env.ZCODE_BUILTIN_PROVIDER_CONFIG_FILE) {
   }
 }
 
+${ACCOUNT_METADATA_SECTION}
+
 // \u5B89\u88C5\u95E8\uFF1A\u4EFB\u4E00 patch \u6E90\u53EF\u7528\u5373\u5B89\u88C5\u62E6\u622A\u5C42\uFF1B\u51B3\u7B56\u4E24\u6001\u90FD\u51FA\u58F0\uFF08\u88C5\u4E86\u54EA\u4E9B patch / \u4E3A\u4F55
 // \u8DF3\u8FC7\uFF09\u2014\u2014\u8865\u4E01\u5C42\u7684\u5931\u6548\u5F62\u6001\u662F\u9759\u9ED8\u7684\uFF08account \u76F4\u901A\u5931\u6548 = plan \u5BB6\u65CF\u62A5\u300C\u4E0D\u5B58\u5728
 // Model\u300D\u800C\u65E0\u4EFB\u4F55\u65E5\u5FD7\uFF09\uFF0C\u8DF3\u8FC7\u540C\u6837\u5FC5\u987B\u7559\u75D5\u3002
 const text = injectedConfigText();
 const catalogPatch = CATALOG_PATH !== null ? catalogPatchText(CATALOG_PATH) : null;
-if (text !== null || catalogPatch !== null) {
+const cliPatchProbe = CLI_PATH ? patchedCliSource(CLI_PATH) : null;
+// \u4E09\u5904\u6539\u5199\u7684\u5E94\u7528\u6001\u7531 patchedCliSource \u53D1\u5E03\uFF08__cliPatchStatus\uFF09\u2014\u2014\u66FE\u4EE5\u4EA7\u7269\u5B50\u4E32\u5224\u5B9A\uFF1A
+// header-port \u5728\u672A\u6253\u8865\u4E01\u7684 3.15.3 bundle \u4E0A\u6052\u771F\uFF088 \u5904\u65E2\u6709\u540C\u540D\u5C5E\u6027\uFF09\u2192 \u95E8\u5BF9\u951A\u70B9
+// \u6F02\u79FB\u96F6\u68C0\u6D4B\u529B\uFF1Bstandalone \u540C\u7406\u7531\u6807\u5FD7\u9A71\u52A8\uFF08\u4E09\u5904\u5224\u5B9A\u5404\u81EA\u5177\u540D\uFF09\u3002cli-source-bypass
+// \u7684\u62EC\u53F7\u540E\u7F00\u628A\u4E09\u951A\u9010\u4E00\u5217\u51FA\uFF082026-10 review\xB7S-2\uFF09\uFF1Aentitled \u6807\u5FD7\u66FE\u53D1\u5E03\u4F46\u65E0\u6D88\u8D39\u65B9\uFF0C
+// \u8BE5\u951A\u5355\u72EC\u6F02\u79FB\u65F6\u516D\u9879\u77E9\u9635\u4F1A\u5168\u90E8 armed\u2014\u2014\u9010\u951A\u53EF\u89C1\u624D\u80FD\u5B9A\u4F4D\u6F02\u79FB\uFF08\u516D\u9879\u53E3\u5F84\u4E0D\u53D8\uFF09\u3002
+const cliPatchStatus = CLI_PATH ? __cliPatchStatus.get(CLI_PATH) : null;
+const anchorFlags = cliPatchStatus
+  ? '(entitled=' + (cliPatchStatus.entitled ? 'on' : 'off')
+    + ',standalone=' + (cliPatchStatus.standalone ? 'on' : 'off')
+    + ',port=' + (cliPatchStatus.headerPort ? 'on' : 'off') + ')'
+  : '';
+if (text !== null || catalogPatch !== null || cliPatchProbe !== null) {
   process.stderr.write('[zcode-launcher] \u8865\u4E01\u5C42\u5DF2\u5B89\u88C5: cli-config-inject=' + (text !== null ? 'on' : 'off')
     + ', catalog-entitled=' + (catalogPatch !== null ? 'on' : 'off')
-    + ', provider-merge=' + (PI_SYNCED_PATH ? 'armed' : 'off') + ', cli-source-bypass=armed\\n');
+    + ', provider-merge=' + (PI_SYNCED_PATH ? 'armed' : 'off')
+    + ', cli-source-bypass=' + (cliPatchProbe !== null ? 'armed' : 'off') + anchorFlags
+    + ', standalone-account=' + (cliPatchStatus && cliPatchStatus.standalone ? 'armed' : 'off')
+    + ', header-port=' + (cliPatchStatus && cliPatchStatus.headerPort ? 'armed' : 'off') + '\\n');
   // encoding \u5F52\u4E00\uFF08Node \u522B\u540D\u9762\uFF09\uFF1A'utf8'/'utf-8'/\u5927\u5C0F\u5199\u53D8\u4F53\u7EDF\u4E00\u6309 string \u8FD4\u56DE\u2014\u2014
   // \u771F\u5B9E bundle \u7684 config \u8BFB\u53D6\u6070\u7528 'utf-8' \u5F62\u6001\uFF0C\u4EC5\u5339\u914D 'utf8' \u4F1A\u9519\u56DE Buffer
   // \uFF08\u5F53\u4E0B\u6E38\u4E0D\u53EA JSON.parse \u800C\u505A\u5B57\u7B26\u4E32\u8FD0\u7B97\u65F6\u5373 TypeError\uFF09
@@ -842,12 +1404,17 @@ if (text !== null || catalogPatch !== null) {
     return Buffer.from(value);
   };
   fs.__origReadFileSync = fs.readFileSync;
+  // standalone \u8D26\u53F7\u5143\u6570\u636E\u952E\u4F9B\u7ED9\uFF08ADR-0143\uFF09\uFF1A\u4EC5\u5F53 standalone \u4E0E header-port \u4E24\u951A
+  // \u5747\u5DF2\u6B66\u88C5\u65F6\u6267\u884C\uFF082026-10 review\xB7S-3\uFF09\u2014\u2014\u53EA\u6B66\u88C5 standalone \u65F6\u8BA4\u8BC1\u5934\u4ECD\u56DE\u843D\u5BBF\u4E3B
+  // \u8BF7\u6C42\u7AEF\u53E3\uFF08\u65E0\u5BBF\u4E3B\u4EFB\u5E94\u7B54 = \u8D26\u53F7\u94FE\u4ECD\u4E0D\u53EF\u7528\uFF09\uFF0C\u6B64\u65F6\u5199\u7528\u6237\u5171\u4EAB credentials.json
+  // \u65E0\u8FD0\u884C\u65F6\u6536\u76CA\u3001\u53EA\u589E\u98CE\u9669\uFF1B\u6B64\u5904\u8BFB\u6E90\u4ECD\u662F\u539F\u751F fs\uFF08readFileSync \u62E6\u622A\u5C1A\u672A\u5B89\u88C5\uFF09\u3002
+  if (cliPatchStatus && cliPatchStatus.standalone && cliPatchStatus.headerPort) ensureAccountMetadata();
   fs.readFileSync = function (p, ...rest) {
     if (typeof p === 'string' && p === CONFIG_PATH) {
       const cur = injectedConfigText();
       if (cur !== null) return shape(rest, cur);
     }
-    // D3 \u6362\u8F68\uFF1ARegistry \u76F4\u8BFB\u771F\u5B9E provider_config.json \u2192 merge(\u771F\u5B9E, \u526F\u672C) \u89C6\u56FE
+    // D3 \u5207\u6362\uFF1ARegistry \u76F4\u8BFB\u771F\u5B9E provider_config.json \u2192 merge(\u771F\u5B9E, \u526F\u672C) \u89C6\u56FE
     if (typeof p === 'string' && p === REAL_PROVIDER_CONFIG_PATH) {
       const cur = mergedProviderConfigText();
       if (cur !== null) return shape(rest, cur);
@@ -904,8 +1471,8 @@ if (text !== null || catalogPatch !== null) {
 
   // existsSync \u62E6\u622A\uFF1A\u771F\u5B9E bundle \u7684\u7528\u6237 config \u8BFB\u53D6\uFF08loadFileConfig\uFF09\u4EE5 existsSync
   // \u4E3A\u77ED\u8DEF\u95E8\u2014\u2014\u6587\u4EF6\u4E0D\u5B58\u5728\u65F6\u8FD4\u56DE\u7A7A config \u4E14 readFileSync \u4E0D\u88AB\u8C03\u7528\uFF0CGUI-only
-  // \u767B\u5F55\u5BBF\u4E3B\uFF08cli/config.json \u4ECE\u672A\u88AB CLI \u4FA7\u5199\u8FC7\uFF09\u4E0A\u6CE8\u5165\u53EA\u6302\u5728\u8BFB\u53D6\u9762 = \u4E0D\u53EF\u89C1\u3002
-  // D3 \u6362\u8F68\uFF1A\u771F\u5B9E provider_config.json \u7684\u5B58\u5728\u6027 = \u771F\u5B9E\u6216\u526F\u672C\u4EFB\u4E00\u5B58\u5728\u5373 true
+  // \u767B\u5F55\u5BBF\u4E3B\uFF08cli/config.json \u4ECE\u672A\u88AB CLI \u4FA7\u5199\u8FC7\uFF09\u4E0A\u6CE8\u5165\u53EA\u6302\u5728\u8BFB\u4FA7 = \u4E0D\u53EF\u89C1\u3002
+  // D3 \u5207\u6362\uFF1A\u771F\u5B9E provider_config.json \u7684\u5B58\u5728\u6027 = \u771F\u5B9E\u6216\u526F\u672C\u4EFB\u4E00\u5B58\u5728\u5373 true
   //\uFF08\u771F\u5B9E\u7F3A\u5931 + \u526F\u672C\u5B58\u5728\u65F6 Registry \u7684 existsSync \u95E8\u4E0D\u5F97\u62E6\u6389 merge \u89C6\u56FE\u8BFB\u53D6\uFF09
   fs.__origExistsSync = fs.existsSync;
   fs.existsSync = function (p) {
@@ -1292,7 +1859,7 @@ var AppServerConnection = class {
   killChainPromise;
   generation = 0;
   pushHandlers = /* @__PURE__ */ new Map();
-  /** [R4] 连接级崩溃通知面（onClose 订阅者集合；与 pushHandlers 同构的 refCount 形态）。 */
+  /** [R4] 连接级崩溃通知侧（onClose 订阅者集合；与 pushHandlers 同构的 refCount 形态）。 */
   closeHandlers = /* @__PURE__ */ new Set();
   capturedProtocolInfo = null;
   constructor(opts) {
@@ -1312,7 +1879,7 @@ var AppServerConnection = class {
   get pid() {
     return this.child?.pid;
   }
-  /** 当前代是否有活进程（关闭原语与重建测试的观测面）。 */
+  /** 当前代是否有活进程（关闭原语与重建测试的观测范围）。 */
   get alive() {
     return this.child !== null;
   }
@@ -1593,7 +2160,7 @@ var AppServerConnection = class {
       return false;
     }
   }
-  /** stderr 实时 append 落盘（懒打开 + 尺寸轮转 + 过期清理；失败静默——取证面不
+  /** stderr 实时 append 落盘（懒打开 + 尺寸轮转 + 过期清理；失败静默——取证侧不
    * 能拖垮主通道）。 */
   appendStderrLog(chunk) {
     if (this.stderrStreamFailed) return;
@@ -1779,7 +2346,7 @@ var SessionChannel = class {
   /**
    * [P0-1 U5/D7] dispose 标志：dispose 收割后 closeSession 短路——收割形态下连接
    * 可能仍 alive（close 事件迟到，finalize 未跑、child 非 null），此时发 close
-   * request 会写死进程（请求挂到控制面超时）或触发惰性重建（凭空 spawn 无人使用的
+   * request 会写死进程（请求挂到控制范围超时）或触发惰性重建（凭空 spawn 无人使用的
    * 进程，违背 dispose 防泄漏语义）；进程随即被引擎杀链回收，会话驻留随之消亡。
    */
   disposed = false;
@@ -1803,10 +2370,10 @@ var SessionChannel = class {
   /**
    * [P0-1 U5/D7] dispose 前收割 + 退订：「退订 = 不会再有事件」在结构上蕴含「在途
    * turn 不应再等」——close 缺失/被吞没形态（onClose 收割主路径未触发）下，在途
-   * turn 于退订前经既有 failAllTurns 收敛为明确失败（设计 §3.4 退化路径闭合；
+   * turn 于退订前经既有 failAllTurns 收敛为明确失败（设计 §3.4 退化路径完成；
    * race 窗口在引擎 shutdownRuntimeAndDisposeChannel，量级与 awaitConnFinalized
    * 同源 ZCODE_APPSERVER_HARVEST_GRACE_MS）。幂等：与 onClose 收割先到者赢
-   * （turn.fail 的 settled 守卫——已落定 turn 不改写），activeTurns 已空则 no-op。
+   * （turn.fail 的 settled 检查——已落定 turn 不改写），activeTurns 已空则 no-op。
    * 不影响连接自身生命周期（R4）。
    */
   dispose() {
@@ -1878,7 +2445,7 @@ var SessionChannel = class {
    * 原样上抛（调用方决定降级形态——引擎侧 warn 后注入锚失效声明段继续执行，
    * run 不失败，[U3]）。
    * 经 conn.request 惰性启动连接（resume 是 run 的**首个**请求——调用时点连接
-   * 可能尚未启动，与 readBestEffort 的「已死跳过」判据不同场景，不做 alive 守卫）。
+   * 可能尚未启动，与 readBestEffort 的「已死跳过」判据不同场景，不做 alive 检查）。
    */
   async resumeSession(sessionId) {
     return this.conn.request("session/resume", { sessionId }, { timeoutMs: ZCODE_APPSERVER_TURN_READ_TIMEOUT_MS });
@@ -2027,7 +2594,7 @@ var SessionChannel = class {
   }
   /**
    * 收尾帧判定与吸收（A.2 ⑤ 两种形态：payload.response / stopReason+content 变体）。
-   * 命中任一形态则落 finalText/finalUsage 并以 final-frame 宽松终态收口，返回 true。
+   * 命中任一形态则落 finalText/finalUsage 并以 final-frame 宽松终态收尾，返回 true。
    */
   applyFinalFrame(turn, payload) {
     if (typeof payload.response === "string" && payload.response !== "") {
@@ -2104,7 +2671,7 @@ var SessionChannel = class {
    *   - "interrupted"：用户中断形态，debug（stderr 兜底对 debug no-op——对齐
    *     SDK logger CONSOLE_SINK 语义，host/log 反向请求侧仍可观测）；
    *   - 失败类（isFailedTerminalStatus，与引擎失败分流同口径）与 unknown/未识别
-   *     status：保守 warn（原样 status 已写入文案）——假成功识破的防御面，理论
+   *     status：保守 warn（原样 status 已写入文案）——假成功识破的防御机制，理论
    *     不可达但保留，宁可误报不静默。
    */
   logLateTerminal(turn, status) {
@@ -2145,7 +2712,7 @@ var SessionChannel = class {
       }
     }
   }
-  /** 终态后 read（A.2 ⑥）。失败/超时不抛——降级链由 runTurn 收口（read 只兜底不致命）。
+  /** 终态后 read（A.2 ⑥）。失败/超时不抛——降级链由 runTurn 收尾（read 只兜底不致命）。
    *  连接已死时跳过（与 closeSession 同判——对死连接发请求会凭空重建进程）。 */
   async readBestEffort(sessionId) {
     if (!this.conn.alive) return void 0;
@@ -2300,7 +2867,7 @@ function sweepExpiredZcodeSessions(dbPath, opts = {}) {
     return { swept, keptActive };
   } catch (err) {
     logger3.warn(
-      `[zcode-ttl] sweep \u5931\u8D25\uFF08\u8F85\u52A9\u8D44\u6E90\u9762\uFF0C\u4E0D\u5F71\u54CD run \u4E3B\u94FE\u8DEF\uFF1B\u4E0B\u4E2A\u8282\u6D41\u7A97\u91CD\u8BD5\uFF09: ${err instanceof Error ? err.message : String(err)}`,
+      `[zcode-ttl] sweep \u5931\u8D25\uFF08\u8F85\u52A9\u8D44\u6E90\u4FA7\uFF0C\u4E0D\u5F71\u54CD run \u4E3B\u94FE\u8DEF\uFF1B\u4E0B\u4E2A\u8282\u6D41\u7A97\u91CD\u8BD5\uFF09: ${err instanceof Error ? err.message : String(err)}`,
       { dbPath }
     );
     return noOp;
@@ -2378,7 +2945,7 @@ var ZcodeEngine = class {
       permissionMode: "native",
       // [D3-④] 无 turn_end 语义，轮数上限不可兑现（预检 gate 据此同步拒绝）
       maxTurns: false,
-      // [subagent-model-switch] zcode 引擎不在模型切换设计范围（协议面引擎中立预留，
+      // [subagent-model-switch] zcode 引擎不在模型切换设计范围（协议范围引擎中立预留，
       // 后续另立项接入）——setModel 通路未接通，unsupported 如实声明
       setModel: "unsupported"
     };
@@ -2446,7 +3013,7 @@ var ZcodeEngine = class {
    * 常驻路径主编排：模型解析（v2 单源校验）→ 惰性连接 + runTurn（事件时序前移：
    * text_delta 流式、终态后 message_end/turn_end）→ schema 仿真重试 → outcome/handle。
    * onHandleReady 在 create 应答后（§3.4 不变量 3；原 onPoolResolved prepare 期
-   * 声明已随 [池抽象降级 2026-09-13] poolKey 协议面退役删除）。
+   * 声明已随 [池抽象降级 2026-09-13] poolKey 协议范围退役删除）。
    */
   async runViaAppServer(task, ctx) {
     const startedAt = Date.now();
@@ -2466,7 +3033,7 @@ var ZcodeEngine = class {
     const outcome = this.finalizeOutcome(task, ctx, final, usageAcc, startedAt);
     return { handle: this.appServerHandle(outcome), outcome };
   }
-  /** pre-aborted 短路收口：合成中止 outcome + 'shared' 锚定 handle。 */
+  /** pre-aborted 短路收尾：合成中止 outcome + 'shared' 锚定 handle。 */
   abortedAppServerRun(task, ctx, startedAt) {
     const outcome = this.finalizeOutcome(
       task,
@@ -2486,11 +3053,11 @@ var ZcodeEngine = class {
    *   新建会话）。重试轮 prompt 用 basePrompt 原样重跑（失败形态非 schema），文案补
    *   「已自动重试一次」句（retried 标记仅对真实发生的重试生效）。
    *
-   * 两次重试一次封顶各自独立（D6 被否①：多次重试/指数退避不做——重跑一轮=整任务
+   * 两次重试一次封顶各自独立（D6 不采用①：多次重试/指数退避不做——重跑一轮=整任务
    * 重算，一次封顶）。组合序：瞬时重试在前、schema 重试在后——瞬时重试轮 parsed 且
    * 校验失败时仍进 schema 重试（末次 attempt 语义，schema 重试编排保持现状不动）。
    *
-   * 重试轮是独立会话的独立 LLM 调用：token 计入 outcome.usage 总量；事件面
+   * 重试轮是独立会话的独立 LLM 调用：token 计入 outcome.usage 总量；事件范围
    * text_delta 按实际流出（含失败轮——journal 记录真实流水），message_end/turn_end
    * 只在最终轮终态后合成（不变量 2/5）。
    */
@@ -2537,7 +3104,7 @@ var ZcodeEngine = class {
   }
   /**
    * 单轮常驻执行：runTurn 组合面 + D3 abort 链 + 事件前移（text_delta 实时流出；
-   * 终态数据经 read 兜底收口后才 resolve——不变量 1/2）。
+   * 终态数据经 read 兜底收尾后才 resolve——不变量 1/2）。
    *
    * @param opts retried：瞬时重试轮标记——失败文案补「已自动重试一次」句（F-1/F-4）。
    */
@@ -2560,7 +3127,7 @@ var ZcodeEngine = class {
       // 等，真机探针实证每 ~1s 一帧）→ activity 事件（零载荷纯活性信号——宿主无进展
       // 守护对任何事件类型刷新；reducer no-op、不落 journal）。zcode 引擎声明
       // conversation:"cold"（续聊 = session-store 冷恢复重建 + 新 run + resume 锚点，
-      // 无热 steering/chat 域接线），run 域是唯一发射面。
+      // 无热 steering/chat 域接线），run 域是唯一发射点。
       onActivity: () => ctx.onEvent?.({ type: "activity" }),
       onSessionCreated: (sessionId) => {
         currentSessionId = sessionId;
@@ -2597,12 +3164,12 @@ var ZcodeEngine = class {
   }
   /**
    * [attemptAppServerTurn 拆分] 失败分流（catch 半边）：
-   * - signal 已 aborted → 中止终态收口；
+   * - signal 已 aborted → 中止终态收尾；
    * - [P0-1 U4] 连接崩溃收割形态（failAllTurns 的错误，D6 可重试形态）判据：
-   *   非 RPC error（服务端无明确应答——有应答即精确错误归类，非瞬时崩溃面）且
+   *   非 RPC error（服务端无明确应答——有应答即精确错误归类，非瞬时崩溃）且
    *   conn 不存活。时序可靠性：catch 时刻紧随 onClose 收割，连接重建仅由
    *   conn.request 惰性触发——本链路中 runTurn finally 的 closeSession 对死连接
-   *   短路（channel 侧 !alive 守卫）、stop 只属 abort 链（已被 signal.aborted
+   *   短路（channel 侧 !alive 检查）、stop 只属 abort 链（已被 signal.aborted
    *   短路）——此刻无 request 可重建，判据可靠；
    * - 其余 → 精确错误终态。
    */
@@ -2638,7 +3205,7 @@ var ZcodeEngine = class {
    * D3 abort 链执行体（用户取消入口，fire-and-forget——与 turn promise 并行推进）：
    * stop 帧（超时 ZCODE_APPSERVER_STOP_TIMEOUT_MS）→ grace 窗口内 turn 落定即止
    * （不杀共享进程）→ 超窗 killChain（conn.shutdown 全序：SIGTERM→grace→SIGKILL）。
-   * turn 的最终落定由 attempt 主路径 await 收口，本链不直接产出终态。abort 与 create
+   * turn 的最终落定由 attempt 主路径 await 收尾，本链不直接产出终态。abort 与 create
    * 竞态（signal 先到、session 未建立）：等会话建立（带上限）再发 stop——否则 stop
    * 永远发不出，直接连坐杀共享进程。
    */
@@ -2687,7 +3254,7 @@ var ZcodeEngine = class {
    * workspace.workspacePath 按任务传递——D10 基线不预设任务级进程 cwd）。
    * spawn 经 fs 拦截 wrapper（appserver-launcher：cli config 读取重定向为
    * 「真实文件 + v2 provider 注入」——CLI 形态 app-server 在共享宿主 HOME 下的
-   * 唯一凭据供数通路，机制与漂移面见该文件头注）。
+   * 唯一凭据供数通路，机制与漂移风险见该文件头注）。
    */
   ensureAppServerRuntime() {
     if (this.appserverRuntime !== void 0) return this.appserverRuntime;
@@ -2736,7 +3303,7 @@ var ZcodeEngine = class {
    * [P0-1 U5/D7] grace race 输掉（close 迟到/永不到达——stdio 被孙进程持有排空不
    * 尽等病态形态）时，channel.dispose() 内置的 dispose 收割（failAllTurns 先于退订，
    * SessionChannel.dispose）兜底在途 turn——在途 turn 收敛为「grace 窗口内明确失败」
-   * （设计 §3.4 退化路径闭合）；race 窗口与 awaitConnFinalized 同源同量级
+   * （设计 §3.4 退化路径完成）；race 窗口与 awaitConnFinalized 同源同量级
    * （ZCODE_APPSERVER_HARVEST_GRACE_MS）。正常 close 先到时 onClose 收割先行，
    * dispose 收割幂等 no-op（零回归）。
    */
@@ -2752,10 +3319,10 @@ var ZcodeEngine = class {
     rt.channel.dispose();
   }
   /**
-   * [R1 D6 主体] 引擎停机面：①fire 全部在途会话的 session/close 帧（不等待
+   * [R1 D6 主体] 引擎停机路径：①fire 全部在途会话的 session/close 帧（不等待
    * 应答——D6① 顺序规定：close 帧必须先于 SIGTERM，否则对面来不及处理即被杀）→
-   * ②同步 SIGTERM（conn.shutdown 调用内 killChain 前缀同步执行——同步面在返回
-   * Promise 前完成）→ ③grace → SIGKILL（异步面，Promise resolve 于进程退出）。
+   * ②同步 SIGTERM（conn.shutdown 调用内 killChain 前缀同步执行——同步部分在返回
+   * Promise 前完成）→ ③grace → SIGKILL（异步侧，Promise resolve 于进程退出）。
    * 幂等：运行时字段取走即置空，二次调用零副作用；dispose 后首个 run 经
    * ensureAppServerRuntime 自动重建（与崩溃重建同一代码路径，不变量 4）。
    */
@@ -2794,7 +3361,7 @@ var ZcodeEngine = class {
   /** abort 合成终态：exitCode=null（record 正常收尾，不留僵尸）。 */
   applyAbortedOutcome(outcome, task, ctx, final, emit) {
     outcome.exitCode = null;
-    outcome.error = isHostTimeoutAbort(ctx) ? (0, import_subagent_engine_sdk12.synthesizeTimeoutOutcome)(task, final.output.stdoutText, ZCODE_ENGINE_ID).error ?? (0, import_subagent_engine_sdk12.engineTimeoutDetail)(final.output.stdoutText) : final.abortMessage ?? `engine_run_failed: zcode \u4EFB\u52A1\u88AB\u4E2D\u6B62\uFF08app-server abort \u94FE\u6536\u53E3\uFF0C\u5BBF\u4E3B\u5408\u6210\u7EC8\u6001\uFF09\u3002\u8F93\u51FA\u5C3E\u90E8: ${final.output.stdoutText.slice(-ZCODE_ERROR_TAIL_CHARS)}`;
+    outcome.error = isHostTimeoutAbort(ctx) ? (0, import_subagent_engine_sdk12.synthesizeTimeoutOutcome)(task, final.output.stdoutText, ZCODE_ENGINE_ID).error ?? (0, import_subagent_engine_sdk12.engineTimeoutDetail)(final.output.stdoutText) : final.abortMessage ?? `engine_run_failed: zcode \u4EFB\u52A1\u88AB\u4E2D\u6B62\uFF08app-server abort \u94FE\u6536\u5C3E\uFF0C\u5BBF\u4E3B\u5408\u6210\u7EC8\u6001\uFF09\u3002\u8F93\u51FA\u5C3E\u90E8: ${final.output.stdoutText.slice(-ZCODE_ERROR_TAIL_CHARS)}`;
     emit({ type: "error", message: outcome.error });
   }
   /**
@@ -2840,6 +3407,17 @@ var ZcodeEngine = class {
   listModels() {
     return listZcodeModels(this.deps.sources);
   }
+  /**
+   * [engine-ref-translation D1] 派发期模型 ref 翻译（EnginePort 可选成员实装）：
+   * pi 词汇 ref → zcode 原生 ref（zai-coding-cn/* → account:bigmodel-individual-*
+   * 大小写归一，2026-10-16 用户裁决（证据驱动修正目标家族）），其余透传。编排层在 record stamp 前调用——
+   * record/上报侧呈现实际发给引擎的 ref；翻译失败抛错 = 显式失败（不静默回落）。
+   * 幂等：翻译产物（account:/个人 id）再入恒等，引擎内 resolveZcodeModelRef 的
+   * 同名翻译分支零冲突。
+   */
+  translateModelRef(modelRef) {
+    return translatePiModelRefToZcode(modelRef, this.deps.sources);
+  }
   /** 模型 reasoning 值域缓存（目录 modelRules 值域；per-modelRef 记忆化——
    *  目录文件在引擎进程生命周期内视为静态，重复 run 不重读）。 */
   reasoningMemo = /* @__PURE__ */ new Map();
@@ -2871,9 +3449,9 @@ var ZcodeEngine = class {
    * 权威，无双实现）。校验失败原样抛 ZcodePrepareError，由编排层
    * （engine/model-validation.ts）包装成「引擎与模型不配套」文案。
    *
-   * [R4/D6-②] 缺席语义：本实现是进程内形态 + 协议诊断面（宿主 cli 形态消费的是
+   * [R4/D6-②] 缺席语义：本实现是进程内形态 + 协议诊断范围（宿主 cli 形态消费的是
    * RemoteEngine 的 manifest 本地判定，不经本方法——SDK protocol methods.ts 明示
-   * validateModel 为诊断面）。缺席 modelRef 时返回空串 canonical（= create 帧省略
+   * validateModel 为诊断范围）。缺席 modelRef 时返回空串 canonical（= create 帧省略
    * model 键、CLI 自身缺省解析——2026-09-29 account 体系迁移后 plan 家族兜底 id
    * 已不可用；record 留痕侧按 R4/D6-② 空串归一为「用户未指定」条件留空）。帧应答
    * 形态维持 {canonicalRef: string}（SDK port-contract 契约必填——「帧字段缺席」
@@ -2890,7 +3468,7 @@ var ZcodeEngine = class {
    * （zcodeSessionDbPath(engineDataDir)，tier1 白名单集合见方法体——宿主路径仅
    * 「共享 HOME 时代」存量兼容）；旧 records（池时代）的相对路径仍按池目录锚定
    * 解析（read 兼容旧数据，池目录不存在时自然落②级 journal 降级）。[池抽象降级
-   * 2026-09-13] 锚定 key 用常量 SHARED_POOL_KEY 承载——协议面 poolKey 已删，池
+   * 2026-09-13] 锚定 key 用常量 SHARED_POOL_KEY 承载——协议范围 poolKey 已删，池
    * 时代真实池 key 不再随 handle 传输；若旧 record 的池目录恰为 shared 布局则①级
    * 仍可达，其余池 key 的旧 record 直接走②级 journal 降级（30 天 TTL 同尺度衰减，
    * 行为安全）。
@@ -2987,8 +3565,8 @@ var ZcodeEngine = class {
    * [U6 / §3.2.6 要点 3] resume 锚 → 历史前缀（interact-resume 的读半段）。
    *
    * 无锚 / 非 zcode 锚形态 → undefined（行为不变）。读通道失败（会话失效 / 控制
-   * 面错误）= 锚真失效的权威信号——宿主侧库投影预检查已退役（app-server 落库滞后
-   * 于 create 应答，分钟级窗 + 部分行永不落库，预检查系统性误判；resume 走
+   * 面错误）= 锚真失效的权威信号——宿主侧库派生视图预检查已退役（app-server 写盘滞后
+   * 于 create 应答，分钟级窗 + 部分行永不写盘，预检查系统性误判；resume 走
    * app-server resident 内存态才是真实活性判据），因此此处不再静默降级为无前缀
    * 裸跑，而是返回锚失效声明段：让模型知情「延续但无历史」，基于最新消息独立
    * 续推，而非在缺上下文时臆测连续性。用户消息照常执行，不炸轮。
@@ -3082,7 +3660,7 @@ function stopTimeoutMs() {
   return resolveAppserverTimingMs(
     ZCODE_APPSERVER_STOP_TIMEOUT_ENV,
     ZCODE_APPSERVER_STOP_TIMEOUT_MS,
-    "stop \u63A7\u5236\u9762\u8D85\u65F6"
+    "stop \u63A7\u5236\u8303\u56F4\u8D85\u65F6"
   );
 }
 function abortGraceMs() {
@@ -3386,10 +3964,10 @@ var EngineProtocolServer = class {
     (0, import_server.writeRunEvent)(this.write, this.activeRuns, runId, event);
   }
   /**
-   * 发反向请求并等应答（帧④必须应答）。计时面登记：发出 → clock.started；收到
+   * 发反向请求并等应答（帧④必须应答）。计时侧登记：发出 → clock.started；收到
    * ack 形态应答 → clock.acked（两阶段第一段，等待不计超时）；终结 → clock.settled。
-   * 应答超时兜底 reject——数据面通道（host/log 等）core 10s 应答，reject 由调用方
-   * 吞掉留痕（数据面丢失不拖死主链路）。
+   * 应答超时兜底 reject——数据范围通道（host/log 等）core 10s 应答，reject 由调用方
+   * 吞掉留痕（数据范围丢失不拖死主链路）。
    */
   /**
    * fire-and-forget 反向请求（`void this.reverseRequestInternal(...)` 形态）的
@@ -3404,7 +3982,7 @@ var EngineProtocolServer = class {
       });
     };
   }
-  /** 反向请求发送（公开面：main.ts 的 host/log 桥接消费；内部 run 通道同路）。 */
+  /** 反向请求发送（对外公开：main.ts 的 host/log 桥接消费；内部 run 通道同路）。 */
   reverseRequest(method, params) {
     return this.reverseRequestInternal(method, params);
   }
@@ -3421,7 +3999,7 @@ var EngineProtocolServer = class {
       params
     );
   }
-  /** 反向请求应答落位（ack 两阶段：{ack:true}/{unsupported:true}/{ok:true} 均先 ack 计时面）。 */
+  /** 反向请求应答落位（ack 两阶段：{ack:true}/{unsupported:true}/{ok:true} 均先 ack 计时侧）。 */
   settleReverse(id, frame) {
     const pending = this.reversePending.get(String(id));
     if (pending === void 0) return;