@zqagent/core 0.2.10 → 0.2.12

package/dist/cli/index.cjs

@@ -570,7 +570,7 @@ var init_wire = __esm({
 init_cjs_shims();
 var import_config = require("dotenv/config");
 var fs34 = __toESM(require("fs"), 1);
-var readline2 = __toESM(require("readline"), 1);
+var readline3 = __toESM(require("readline"), 1);
 var path42 = __toESM(require("path"), 1);
 var import_child_process = require("child_process");
 var import_util = require("util");
@@ -10094,6 +10094,38 @@ function countRawEscapes(chunk) {
   for (const ch of cleaned) if (ch === "\x1B") escCount++;
   return escCount;
 }
+function patchReadlineHistoryNav(rl2) {
+  const iface = rl2;
+  const orig = iface._ttyWrite;
+  let draft = null;
+  iface._ttyWrite = function(s, key) {
+    const k = key;
+    const name = k?.name;
+    const plainArrow = (name === "up" || name === "down") && !k?.ctrl && !k?.meta && !k?.shift;
+    if (plainArrow) {
+      if (name === "up" && iface.historyIndex === -1) {
+        draft = { line: iface.line, cursor: iface.cursor };
+      }
+      if (iface.cursor > 0) {
+        iface._moveCursor(-iface.cursor);
+      }
+    }
+    const prevHistoryIndex = iface.historyIndex;
+    orig.call(rl2, s, key);
+    if (plainArrow && name === "down" && prevHistoryIndex >= 0 && iface.historyIndex === -1) {
+      const saved = draft;
+      draft = null;
+      if (saved) {
+        iface.line = saved.line;
+        iface.cursor = Math.min(saved.cursor, saved.line.length);
+        iface._refreshLine?.();
+      }
+    }
+  };
+  rl2.on("line", () => {
+    draft = null;
+  });
+}
 var PASTE_PLACEHOLDER_PREFIX = "\u7C98\u8D34\u6587\u672C #";
 var InputRouter = class {
   rl;
@@ -10481,7 +10513,8 @@ function renderTerminalTutorial() {
 
 // src/cli/link.ts
 init_cjs_shims();
-var path21 = __toESM(require("path"), 1);
+var path27 = __toESM(require("path"), 1);
+var readline2 = __toESM(require("readline"), 1);
 
 // src/server/store.ts
 init_cjs_shims();
@@ -10889,858 +10922,500 @@ async function hubEnrollByAccount(baseUrl, input) {
   return { hubUrl: baseUrl.replace(/\/$/, ""), ...data };
 }
 
-// src/cli/serve-instances.ts
+// src/cli/account-enroll.ts
 init_cjs_shims();
-var import_node_child_process4 = require("child_process");
-var fs18 = __toESM(require("fs"), 1);
-var path20 = __toESM(require("path"), 1);
-var DEFAULT_SERVE_HOST = "127.0.0.1";
-var DEFAULT_SERVE_PORT = 8787;
-function serveSubcommandIndex(argv) {
-  for (let i = 1; i < argv.length; i++) {
-    if (argv[i].startsWith("-")) continue;
-    return argv[i] === "serve" ? i : -1;
-  }
-  return -1;
-}
-function parseServeArgs(argv) {
-  const at = serveSubcommandIndex(argv);
-  if (at < 0) return null;
-  let dataDir = null;
-  let host = DEFAULT_SERVE_HOST;
-  let port = DEFAULT_SERVE_PORT;
-  for (let i = at + 1; i < argv.length; i++) {
-    const arg = argv[i];
-    if (arg === "--data-dir" && argv[i + 1]) {
-      dataDir = argv[++i];
-    } else if (arg.startsWith("--data-dir=")) {
-      dataDir = arg.slice("--data-dir=".length);
-    } else if (arg === "--host" && argv[i + 1]) {
-      host = argv[++i];
-    } else if (arg.startsWith("--host=")) {
-      host = arg.slice("--host=".length);
-    } else if (arg === "--port" && argv[i + 1]) {
-      port = Number(argv[++i]);
-    } else if (arg.startsWith("--port=")) {
-      port = Number(arg.slice("--port=".length));
-    }
-  }
-  if (!Number.isFinite(port) || port <= 0) port = DEFAULT_SERVE_PORT;
-  if (host === "0.0.0.0" || host === "::" || host === "") host = DEFAULT_SERVE_HOST;
-  return { dataDir, host, port };
+var path24 = __toESM(require("path"), 1);
+var readline = __toESM(require("readline/promises"), 1);
+
+// src/server/projects.ts
+init_cjs_shims();
+var path23 = __toESM(require("path"), 1);
+
+// src/server/session.ts
+init_cjs_shims();
+var path22 = __toESM(require("path"), 1);
+var import_async_hooks = require("async_hooks");
+
+// src/server/mcpConfig.ts
+init_cjs_shims();
+var import_node_fs = __toESM(require("fs"), 1);
+var import_node_path = __toESM(require("path"), 1);
+function isValidMcpConfig(v) {
+  return !!v && typeof v === "object" && typeof v.name === "string" && (v.type === "stdio" || v.type === "http");
 }
-function buildHotCandidates(explicitDataDir, discovered, fallback) {
-  const out = explicitDataDir ? [{ dataDir: path20.resolve(explicitDataDir), ...fallback }] : [{ dataDir: path20.resolve(DEFAULT_DATA_DIR), ...fallback }];
-  for (const inst of discovered) {
-    if (!out.some((o) => o.dataDir === inst.dataDir)) out.push(inst);
+function readConfigFile(file) {
+  if (!file) return [];
+  try {
+    if (!import_node_fs.default.existsSync(file)) return [];
+    const raw = JSON.parse(import_node_fs.default.readFileSync(file, "utf8"));
+    const list = Array.isArray(raw) ? raw : raw && typeof raw === "object" && Array.isArray(raw.servers) ? raw.servers : [];
+    return list.filter(isValidMcpConfig);
+  } catch (err) {
+    console.error(`[mcp] \u8BFB\u53D6\u914D\u7F6E\u5931\u8D25 ${file}: ${err.message}`);
+    return [];
   }
-  return out;
-}
-function isWindowsAbsolute(p) {
-  return /^[A-Za-z]:[\\/]/.test(p) || /^\\\\/.test(p);
 }
-function isAbsolutePath(p) {
-  return path20.isAbsolute(p) || isWindowsAbsolute(p);
+function hasServerMcpConfig() {
+  if (readConfigFile(process.env.MCP_CONFIG_PATH).length > 0) return true;
+  const workspace = process.env.WORKSPACE;
+  if (!workspace) return false;
+  return readConfigFile(import_node_path.default.join(workspace, ".agent", "mcp.json")).length > 0;
 }
-function normalizePath(p) {
-  return isWindowsAbsolute(p) ? path20.win32.normalize(p) : path20.normalize(p);
+function loadServerMcpConfigs(tenant) {
+  const fromEnv = readConfigFile(process.env.MCP_CONFIG_PATH);
+  if (fromEnv.length > 0) return fromEnv;
+  if (Array.isArray(tenant.mcpServers) && tenant.mcpServers.length > 0) {
+    return tenant.mcpServers.filter(isValidMcpConfig);
+  }
+  const workspace = tenant.workspaceRoot ?? process.env.WORKSPACE;
+  if (workspace)
+    return readConfigFile(import_node_path.default.join(workspace, ".agent", "mcp.json"));
+  return [];
 }
-function parseServeCommandLine(line) {
-  if (!/(?:^|\s)["']?serve["']?(?=\s|$)/.test(line)) return null;
-  const m = /--data-dir(?:=|\s+)(?:"([^"]+)"|'([^']+)'|(.+?))(?=\s+--\w|\s*$)/.exec(line);
-  const rawDataDir = (m?.[1] ?? m?.[2] ?? m?.[3] ?? "").trim();
-  if (!rawDataDir || !isAbsolutePath(rawDataDir)) return null;
-  const host = /--host(?:=|\s+)(?:"([^"]+)"|'([^']+)'|(\S+))/.exec(line);
-  const rawHost = (host?.[1] ?? host?.[2] ?? host?.[3] ?? DEFAULT_SERVE_HOST).trim();
-  const portMatch = /--port(?:=|\s+)(\d+)/.exec(line);
-  const port = Number(portMatch?.[1] ?? DEFAULT_SERVE_PORT);
+
+// src/server/nodeLlm.ts
+init_cjs_shims();
+var GLOBAL_PROVIDER_ID = "__env__";
+function envProvider() {
+  const apiKey = process.env.OPENAI_API_KEY;
+  if (!apiKey) return null;
   return {
-    dataDir: normalizePath(rawDataDir),
-    host: rawHost === "0.0.0.0" || rawHost === "::" || rawHost === "" ? DEFAULT_SERVE_HOST : rawHost,
-    port: Number.isFinite(port) && port > 0 ? port : DEFAULT_SERVE_PORT
+    id: GLOBAL_PROVIDER_ID,
+    name: process.env.OPENAI_MODEL || process.env.MODEL || "\u5168\u5C40 LLM",
+    type: "env",
+    baseURL: process.env.OPENAI_BASE_URL ?? "",
+    model: process.env.OPENAI_MODEL || process.env.MODEL || "",
+    apiKey
   };
 }
-function processCwd(pid) {
-  try {
-    return fs18.readlinkSync(`/proc/${pid}/cwd`);
-  } catch {
-    return null;
-  }
+function normReasoningEffort(v) {
+  return v === "low" || v === "medium" || v === "high" ? v : null;
 }
-function processEnv(pid) {
-  const out = {};
-  try {
-    const raw = fs18.readFileSync(`/proc/${pid}/environ`, "utf-8");
-    for (const entry of raw.split("\0")) {
-      const eq = entry.indexOf("=");
-      if (eq > 0) out[entry.slice(0, eq)] = entry.slice(eq + 1);
-    }
-  } catch {
+function normalizeModelList(v) {
+  if (!Array.isArray(v)) return void 0;
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const x of v) {
+    const s = String(x ?? "").trim();
+    if (!s || seen.has(s)) continue;
+    seen.add(s);
+    out.push(s);
+    if (out.length >= 500) break;
   }
   return out;
 }
-function resolveDataDir(rawDataDir, cwd, env3) {
-  const pick = rawDataDir ?? env3.DATA_DIR ?? null;
-  if (pick) return path20.isAbsolute(pick) ? path20.normalize(pick) : cwd ? path20.resolve(cwd, pick) : null;
-  return cwd ? path20.resolve(cwd, DEFAULT_DATA_DIR) : null;
+function nodeLlmView(cfg) {
+  const g = envProvider();
+  const providers = [
+    ...g ? [
+      {
+        id: g.id,
+        name: g.name,
+        type: g.type,
+        baseURL: g.baseURL,
+        model: g.model,
+        hasApiKey: true,
+        global: true
+      }
+    ] : [],
+    ...cfg.providers.map((p) => ({
+      id: p.id,
+      name: p.name,
+      type: p.type ?? "",
+      baseURL: p.baseURL,
+      model: p.model,
+      hasApiKey: Boolean(p.apiKey),
+      models: p.models ?? [],
+      nonChat: p.nonChat ?? [],
+      modelMeta: p.modelMeta ?? [],
+      reasoningEffort: p.reasoningEffort ?? null,
+      global: false
+    }))
+  ];
+  return {
+    defaultProviderId: cfg.defaultProviderId ?? null,
+    providers,
+    /** 未显式设置默认时，是否由环境变量全局配置兜底 */
+    globalIsDefault: !cfg.defaultProviderId && Boolean(g)
+  };
 }
-function discoverFromProc() {
-  const out = [];
-  let pids;
-  try {
-    pids = fs18.readdirSync("/proc");
-  } catch {
-    return out;
+function applyNodeLlmPatch(cfg, raw) {
+  const next = { providers: cfg.providers, defaultProviderId: cfg.defaultProviderId };
+  if (Array.isArray(raw?.providers)) {
+    const old = new Map(cfg.providers.map((p) => [p.id, p]));
+    next.providers = raw.providers.filter((x) => Boolean(x) && typeof x === "object").filter((x) => x.global !== true && String(x.id ?? "") !== GLOBAL_PROVIDER_ID).map((x) => {
+      const id = String(x.id ?? "").trim();
+      if (!id) throw new ApiError(400, "bad_request", "\u4F9B\u5E94\u5546 id \u4E0D\u80FD\u4E3A\u7A7A");
+      const prev = old.get(id);
+      const apiKey = String(x.apiKey ?? "").trim();
+      const models = normalizeModelList(x.models) ?? prev?.models;
+      const nonChat = normalizeModelList(x.nonChat) ?? prev?.nonChat;
+      const modelMeta = normalizeModelMeta(x.modelMeta) ?? prev?.modelMeta;
+      return {
+        id,
+        name: String(x.name ?? prev?.name ?? id).trim(),
+        type: x.type == null ? prev?.type : String(x.type),
+        baseURL: String(x.baseURL ?? prev?.baseURL ?? "").trim(),
+        model: String(x.model ?? prev?.model ?? "").trim(),
+        apiKey: apiKey || prev?.apiKey,
+        reasoningEffort: x.reasoningEffort === void 0 ? prev?.reasoningEffort ?? null : normReasoningEffort(x.reasoningEffort),
+        ...models ? { models } : {},
+        ...nonChat ? { nonChat } : {},
+        ...modelMeta ? { modelMeta } : {}
+      };
+    });
   }
-  for (const name of pids) {
-    if (!/^\d+$/.test(name)) continue;
-    const pid = Number(name);
-    if (pid === process.pid) continue;
-    let argv;
-    try {
-      argv = fs18.readFileSync(`/proc/${pid}/cmdline`, "utf-8").split("\0").filter(Boolean);
-    } catch {
-      continue;
-    }
-    const parsed = parseServeArgs(argv);
-    if (!parsed) continue;
-    const dataDir = resolveDataDir(parsed.dataDir, processCwd(pid), processEnv(pid));
-    if (!dataDir) continue;
-    out.push({ dataDir, host: parsed.host, port: parsed.port });
+  if (typeof raw?.defaultProviderId === "string") {
+    const id = raw.defaultProviderId.trim();
+    next.defaultProviderId = id || void 0;
+  } else if (raw?.defaultProviderId === null) {
+    next.defaultProviderId = void 0;
   }
-  return out;
+  return next;
 }
-function discoverFromPs() {
-  const out = [];
-  const res = (0, import_node_child_process4.spawnSync)("ps", ["-axo", "command="], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] });
-  if (res.status !== 0 || !res.stdout) return out;
-  for (const line of res.stdout.split("\n")) {
-    const inst = parseServeCommandLine(line);
-    if (inst) out.push(inst);
-  }
-  return out;
+function findNodeProvider(store, id) {
+  if (!id) return null;
+  if (id === GLOBAL_PROVIDER_ID) return envProvider();
+  return store.loadNodeLlm().providers.find((p) => p.id === id) ?? null;
 }
-function discoverFromWindows() {
-  const out = [];
-  const script = `[Console]::OutputEncoding=[Text.Encoding]::UTF8; Get-CimInstance Win32_Process -Filter "Name='zqagent.exe' OR Name='node.exe'" | ForEach-Object { $_.CommandLine }`;
-  const res = (0, import_node_child_process4.spawnSync)(
-    "powershell.exe",
-    ["-NoProfile", "-NonInteractive", "-Command", script],
-    { encoding: "utf-8", timeout: 15e3, windowsHide: true, stdio: ["ignore", "pipe", "ignore"] }
-  );
-  if (res.status !== 0 || !res.stdout) return out;
-  for (const line of res.stdout.replace(/^\uFEFF/, "").split(/\r?\n/)) {
-    const inst = parseServeCommandLine(line);
-    if (inst) out.push(inst);
-  }
-  return out;
+function nodeDefaultProvider(store) {
+  const cfg = store.loadNodeLlm();
+  if (cfg.providers.length === 0) return null;
+  return cfg.providers.find((p) => p.id === cfg.defaultProviderId) ?? cfg.providers[0] ?? null;
 }
-function discoverRunningServeInstances() {
-  const found = process.platform === "linux" ? discoverFromProc() : process.platform === "win32" ? discoverFromWindows() : discoverFromPs();
-  const seen = /* @__PURE__ */ new Set();
-  return found.filter((inst) => {
-    if (seen.has(inst.dataDir)) return false;
-    seen.add(inst.dataDir);
-    return true;
-  });
+function resolveSessionProvider(store, tenant, providerId) {
+  const own = tenant.provider ?? {};
+  if (providerId) {
+    const picked = findNodeProvider(store, providerId);
+    if (picked) {
+      return {
+        apiKey: picked.apiKey || own.apiKey,
+        baseURL: picked.baseURL || own.baseURL,
+        model: picked.model,
+        providerId,
+        reasoningEffort: picked.reasoningEffort ?? null,
+        ...picked.modelMeta ? { modelMeta: picked.modelMeta } : {}
+      };
+    }
+  }
+  if (own.apiKey) return { ...own, model: tenant.model };
+  const def = nodeDefaultProvider(store);
+  if (def?.apiKey) {
+    return {
+      apiKey: def.apiKey,
+      baseURL: own.baseURL || def.baseURL,
+      model: def.model || tenant.model,
+      reasoningEffort: def.reasoningEffort ?? null,
+      ...def.modelMeta ? { modelMeta: def.modelMeta } : {}
+    };
+  }
+  return { ...own, model: tenant.model };
 }
 
-// src/cli/link.ts
-function expandHome(p) {
-  const home = process.env.HOME || process.env.USERPROFILE;
-  if (!home) return p;
-  if (p === "~") return home;
-  if (p.startsWith("~/") || p.startsWith("~\\")) return path21.join(home, p.slice(2));
-  return p;
+// src/server/usage.ts
+init_cjs_shims();
+var fs19 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
+var LEDGER_RETENTION_MONTHS = 12;
+var USAGE_SCHEMA = 1;
+var DEFAULT_PRICING = {
+  schema: USAGE_SCHEMA,
+  base: "USD",
+  rate: { CNY: 7.2 },
+  vendors: {
+    openai: {
+      "gpt-4o": { input: 2.5, output: 10, cacheRead: 1.25 },
+      "gpt-4o-mini": { input: 0.15, output: 0.6, cacheRead: 0.075 },
+      "gpt-4.1": { input: 2, output: 8, cacheRead: 0.5 }
+    },
+    deepseek: {
+      "deepseek-flash": {
+        input: 0.27,
+        output: 1.1,
+        cacheRead: 0.027,
+        cacheWrite: 0.27
+      },
+      "deepseek-reasoner": {
+        input: 0.55,
+        output: 2.19,
+        cacheRead: 0.055,
+        cacheWrite: 0.55
+      },
+      "deepseek-*": {
+        input: 0.27,
+        output: 1.1,
+        cacheRead: 0.027,
+        cacheWrite: 0.27
+      }
+    },
+    qwen: {
+      "qwen-plus": { input: 0.4, output: 1.2 },
+      "qwen-turbo": { input: 0.05, output: 0.2 }
+    },
+    zhipu: { "glm-4-plus": { input: 0.7, output: 0.7 } },
+    moonshot: { "moonshot-v1-8k": { input: 1.68, output: 1.68 } },
+    xiaomi: {},
+    custom: {},
+    env: {}
+  },
+  fallback: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 }
+};
+function zeroAgg() {
+  return {
+    calls: 0,
+    input: 0,
+    output: 0,
+    cacheRead: 0,
+    cacheWrite: 0,
+    costUsd: 0,
+    unpriced: 0
+  };
 }
-function installDataDirHint() {
-  if (process.platform === "darwin") return "$HOME/Library/Application Support/zqagent";
-  if (process.platform === "win32") return "%LOCALAPPDATA%\\zqagent";
-  return "/var/lib/zqagent\uFF08\u9700 root\uFF1B\u666E\u901A\u7528\u6237\u7528 ~/.zqagent_data\uFF09";
+function addAgg(into, tokens, costUsd) {
+  into.calls += 1;
+  into.input += tokens.input;
+  into.output += tokens.output;
+  into.cacheRead += tokens.cacheRead;
+  into.cacheWrite += tokens.cacheWrite;
+  if (costUsd == null) into.unpriced += 1;
+  else into.costUsd += costUsd;
 }
-function parseLinkArgs(argv) {
-  const out = {};
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    const val = argv[i + 1];
-    if (a === "--hub") {
-      out.hubUrl = val;
-      i++;
-    } else if (a === "--code") {
-      out.code = val;
-      i++;
-    } else if (a === "--data-dir") {
-      out.dataDir = val;
-      i++;
-    } else if (a === "--label") {
-      out.label = val;
-      i++;
-    } else if (a === "--host") {
-      out.host = val;
-      i++;
-    } else if (a === "--port") {
-      out.port = Number(val);
-      i++;
-    } else if (a === "-h" || a === "--help") {
-      out.help = true;
-    }
+function utcDay(iso) {
+  return iso.slice(0, 10);
+}
+function monthOf(iso) {
+  return iso.slice(0, 7);
+}
+function retainedMonths(now = /* @__PURE__ */ new Date()) {
+  const out = /* @__PURE__ */ new Set();
+  const d = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1));
+  for (let i = 0; i < LEDGER_RETENTION_MONTHS; i += 1) {
+    out.add(d.toISOString().slice(0, 7));
+    d.setUTCMonth(d.getUTCMonth() - 1);
   }
   return out;
 }
-function ensureNodeId(store) {
-  let id = store.loadNodeId();
-  if (!id) {
-    id = newId();
-    store.saveNodeId(id);
-  }
-  return id;
+function atomicWrite(file, content) {
+  fs19.mkdirSync(path21.dirname(file), { recursive: true });
+  const tmp = `${file}.tmp`;
+  fs19.writeFileSync(tmp, content, "utf-8");
+  fs19.renameSync(tmp, file);
 }
-async function probeServer(host, port, adminKey) {
-  const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(), 1500);
-  try {
-    const res = await fetch(`http://${host}:${port}/api/v1/fleet/status`, {
-      headers: { Authorization: `Bearer ${adminKey}` },
-      signal: ctrl.signal
-    });
-    return res.ok;
-  } catch {
-    return false;
-  } finally {
-    clearTimeout(timer);
+var UsageLedger = class {
+  constructor(root) {
+    this.root = root;
+    this.dir = path21.join(root, "usage");
   }
-}
-async function enrollViaServer(host, port, adminKey, opts) {
-  const res = await fetch(`http://${host}:${port}/api/v1/fleet/enroll`, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Authorization: `Bearer ${adminKey}`
-    },
-    body: JSON.stringify({ hubUrl: opts.hubUrl, code: opts.code, label: opts.label })
-  });
-  const text = await res.text();
-  let payload = null;
-  try {
-    payload = text ? JSON.parse(text) : null;
-  } catch {
+  root;
+  dir;
+  rollup;
+  pricing;
+  rollupDirty = false;
+  rollupTimer = null;
+  inited = false;
+  get ledgerDir() {
+    return this.dir;
   }
-  if (!res.ok) {
-    throw new Error(payload?.error?.message ?? `HTTP ${res.status}`);
+  ledgerFile(month) {
+    return path21.join(this.ledgerDir, `ledger-${month}.jsonl`);
   }
-  return payload?.data;
-}
-async function linkNode(opts) {
-  const rawDataDir = opts.dataDir?.trim() || process.env.DATA_DIR?.trim() || void 0;
-  const explicitDataDir = rawDataDir ? expandHome(rawDataDir) : void 0;
-  const host = opts.host?.trim() || process.env.HOST?.trim() || DEFAULT_SERVE_HOST;
-  const port = opts.port ?? Number(process.env.PORT ?? DEFAULT_SERVE_PORT);
-  const running = discoverRunningServeInstances();
-  const candidates = buildHotCandidates(explicitDataDir, running, { host, port });
-  for (const inst of candidates) {
-    const store2 = new Store(inst.dataDir);
-    const adminKey = process.env.ADMIN_API_KEY ?? store2.loadAdminKey();
-    if (!adminKey) continue;
-    if (!await probeServer(inst.host, inst.port, adminKey)) continue;
-    const status = await enrollViaServer(inst.host, inst.port, adminKey, opts);
-    return { mode: "hot", ...status, dataDir: inst.dataDir };
+  get rollupFile() {
+    return path21.join(this.ledgerDir, "rollup.json");
   }
-  const dataDir = path21.resolve(explicitDataDir ?? DEFAULT_DATA_DIR);
-  const store = new Store(dataDir);
-  const nodeId = ensureNodeId(store);
-  const cred = await hubEnrollByCode(opts.hubUrl, {
-    code: opts.code,
-    nodeId,
-    label: opts.label
-  });
-  try {
-    store.saveFleetCredential({
-      ...cred,
-      label: opts.label ?? cred.label,
-      enrolledAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-  } catch (e) {
-    const err = e;
-    if (err.code === "EACCES" || err.code === "EPERM") {
-      throw new Error(
-        `\u65E0\u6CD5\u5199\u5165\u6570\u636E\u76EE\u5F55 ${dataDir}\uFF08${err.code}: ${err.message}\uFF09
-  \u8BE5\u76EE\u5F55\u5F53\u524D\u7528\u6237\u6CA1\u6709\u5199\u6743\u9650\u3002\u4E24\u79CD\u6539\u6CD5\uFF1A
-    1) \u53BB\u6389 --data-dir\uFF0C\u8BA9 link \u81EA\u52A8\u53D1\u73B0\u672C\u673A\u8FD0\u884C\u7684\u8282\u70B9\uFF08\u63A8\u8350\uFF09\uFF1B
-    2) \u7528\u5F53\u524D\u7528\u6237\u53EF\u5199\u7684\u76EE\u5F55\uFF0C\u672C\u5E73\u53F0\u5B89\u88C5\u811A\u672C\u9ED8\u8BA4\uFF1A${installDataDirHint()}
-  \uFF08\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF0C\u9700\u8981\u91CD\u65B0\u751F\u6210\uFF09`
-      );
-    }
-    throw e;
+  get pricingFile() {
+    return path21.join(this.ledgerDir, "pricing.json");
   }
-  const otherRunningDirs = [
-    ...new Set(running.map((r) => r.dataDir).filter((d) => d !== dataDir))
-  ];
-  return {
-    mode: "saved",
-    nodeId,
-    gatewayUrl: cred.gatewayUrl,
-    label: opts.label,
-    dataDir,
-    explicitDataDir: Boolean(explicitDataDir),
-    runningServiceDirs: otherRunningDirs
-  };
-}
-function printLinkHelp() {
-  cliLog("\u7528\u6CD5: zqagent link --hub <url> --code <\u6CE8\u518C\u7801> [--label \u540D\u79F0] [--data-dir \u76EE\u5F55]");
-  cliLog("  \u5728 Hub \u7528\u6237\u4E2D\u5FC3\u751F\u6210\u4E00\u6B21\u6027\u6CE8\u518C\u7801\u540E\uFF0C\u4E8E\u8282\u70B9\u673A\u5668\u6267\u884C\u672C\u547D\u4EE4\u5373\u53EF\u63A5\u5165\u3002");
-  cliLog("  \u5DF2\u6709\u672C\u673A server \u65F6\u70ED\u63A5\u5165\uFF08\u514D\u91CD\u542F\uFF0C\u4F1A\u81EA\u52A8\u53D1\u73B0\u8FD0\u884C\u4E2D\u670D\u52A1\u7684 --data-dir\uFF09\uFF1B");
-  cliLog("  \u5426\u5219\u5199\u5165 <\u6570\u636E\u76EE\u5F55>/fleet.json\uFF0C\u4E0B\u6B21\u542F\u52A8\u81EA\u52A8\u63A5\u5165\u3002");
-}
-async function runLinkCommand(argv) {
-  const args = parseLinkArgs(argv);
-  if (args.help) {
-    printLinkHelp();
-    return true;
-  }
-  const hubUrl = (args.hubUrl ?? process.env.HUB_URL ?? "").trim().replace(/\/$/, "");
-  const code = (args.code ?? "").trim();
-  if (!hubUrl || !code) {
-    cliErr("\u7F3A\u5C11 --hub \u6216 --code\u3002");
-    printLinkHelp();
-    return false;
+  // ===================== 初始化 =====================
+  init(now = /* @__PURE__ */ new Date()) {
+    if (this.inited) return;
+    fs19.mkdirSync(this.ledgerDir, { recursive: true });
+    this.pricing = this.loadPricing();
+    this.rollup = this.loadRollup(now);
+    this.pruneLedgers(now);
+    this.inited = true;
   }
-  try {
-    const r = await linkNode({
-      hubUrl,
-      code,
-      dataDir: args.dataDir,
-      label: args.label,
-      host: args.host,
-      port: args.port
-    });
-    if (r.mode === "hot") {
-      cliLog("\u2705 \u5DF2\u63A5\u5165 Hub\uFF08\u70ED\u63A5\u5165\uFF0C\u514D\u91CD\u542F\uFF09");
-      cliLog(`   \u8282\u70B9: ${r.nodeId}${r.label ? ` (${r.label})` : ""}`);
-      cliLog(`   \u7F51\u5173: ${r.gatewayUrl ?? "\uFF08\u672A\u4E0B\u53D1\uFF09"}    \u5728\u7EBF: ${r.online ? "\u662F" : "\u8FDE\u63A5\u4E2D\u2026"}`);
-      cliLog(`   \u6570\u636E\u76EE\u5F55: ${r.dataDir}`);
-    } else {
-      cliLog("\u2705 \u63A5\u5165\u51ED\u636E\u5DF2\u4FDD\u5B58\uFF08\u672C\u673A\u6682\u65E0\u8FD0\u884C\u4E2D\u7684 server\uFF09");
-      cliLog(`   \u8282\u70B9: ${r.nodeId}`);
-      cliLog(`   \u7F51\u5173: ${r.gatewayUrl ?? "\uFF08\u672A\u4E0B\u53D1\uFF09"}`);
-      cliLog(`   \u6570\u636E\u76EE\u5F55: ${r.dataDir}`);
-      cliLog("   \u4E0B\u6B21\u542F\u52A8 server \u5373\u81EA\u52A8\u63A5\u5165\uFF1B\u6216\u8FD0\u884C zqagent serve \u5E38\u9A7B\u4E3A\u8282\u70B9\u3002");
-      if (r.runningServiceDirs.length > 0) {
-        cliLog("");
-        cliLog("\u26A0\uFE0F  \u672C\u673A\u6709\u6B63\u5728\u8FD0\u884C\u7684\u8282\u70B9\uFF0C\u4F46\u6570\u636E\u76EE\u5F55\u4E0E\u672C\u6B21\u5199\u5165\u7684\u4E0D\u4E00\u81F4\uFF1A");
-        cliLog(`    \u672C\u6B21\u5199\u5165: ${r.dataDir}`);
-        for (const d of r.runningServiceDirs) cliLog(`    \u670D\u52A1\u4F7F\u7528: ${d}`);
-        cliLog("    \u6B63\u5728\u8FD0\u884C\u7684\u670D\u52A1\u8BFB\u4E0D\u5230\u8FD9\u4EFD\u51ED\u636E\uFF0CHub \u4F1A\u4E00\u76F4\u663E\u793A\u672A\u63A5\u5165\u3002");
-        cliLog("    \u8BF7\u786E\u8BA4\u670D\u52A1\u7684\u6570\u636E\u76EE\u5F55\u540E\u91CD\u65B0\u6267\u884C\uFF08\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF0C\u9700\u8981\u91CD\u65B0\u751F\u6210\uFF09\uFF1A");
-        cliLog(`      zqagent link --hub <Hub\u5730\u5740> --code <\u65B0\u63A5\u5165\u7801> --data-dir "${r.runningServiceDirs[0]}"`);
-      } else if (!r.explicitDataDir) {
-        cliLog("");
-        cliLog("\u26A0\uFE0F  \u672A\u6307\u5B9A --data-dir\uFF0C\u51ED\u636E\u5199\u5165\u4E86\u5F53\u524D\u76EE\u5F55\u4E0B\u7684 .zqagent_data\u3002");
-        cliLog("    \u82E5\u672C\u673A\u670D\u52A1\u662F\u7531\u5B89\u88C5\u811A\u672C\uFF08systemd / launchd\uFF09\u542F\u52A8\u7684\uFF0C\u5B83\u8BFB\u4E0D\u5230\u8FD9\u4EFD\u51ED\u636E\uFF0C");
-        cliLog("    Hub \u4F1A\u4E00\u76F4\u663E\u793A\u672A\u5728\u7EBF\u3002\u8BF7\u7528\u670D\u52A1\u7684\u6570\u636E\u76EE\u5F55\u91CD\u65B0\u6267\u884C\uFF1A");
-        cliLog("      zqagent link --hub <Hub\u5730\u5740> --code <\u65B0\u63A5\u5165\u7801> --data-dir <\u670D\u52A1\u6570\u636E\u76EE\u5F55>");
-        cliLog(`      \uFF08\u672C\u5E73\u53F0\u5B89\u88C5\u811A\u672C\u9ED8\u8BA4\uFF1A${installDataDirHint()}\uFF1B\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF0C\u9700\u8981\u91CD\u65B0\u751F\u6210\uFF09`);
+  loadPricing() {
+    try {
+      const raw = fs19.readFileSync(this.pricingFile, "utf-8");
+      const parsed = JSON.parse(raw);
+      const vendors = {};
+      for (const v of /* @__PURE__ */ new Set([
+        ...Object.keys(DEFAULT_PRICING.vendors),
+        ...Object.keys(parsed.vendors ?? {})
+      ])) {
+        vendors[v] = {
+          ...DEFAULT_PRICING.vendors[v] ?? {},
+          ...(parsed.vendors ?? {})[v] ?? {}
+        };
+      }
+      return {
+        schema: USAGE_SCHEMA,
+        base: "USD",
+        rate: { ...DEFAULT_PRICING.rate, ...parsed.rate ?? {} },
+        vendors,
+        fallback: { ...DEFAULT_PRICING.fallback, ...parsed.fallback ?? {} }
+      };
+    } catch {
+      try {
+        atomicWrite(this.pricingFile, JSON.stringify(DEFAULT_PRICING, null, 2));
+      } catch {
       }
+      return JSON.parse(JSON.stringify(DEFAULT_PRICING));
     }
-    return true;
-  } catch (e) {
-    cliErr(`\u63A5\u5165\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`);
-    return false;
   }
-}
-
-// src/cli/serve.ts
-init_cjs_shims();
-
-// src/server/runtime.ts
-init_cjs_shims();
-var fs31 = __toESM(require("fs"), 1);
-var path37 = __toESM(require("path"), 1);
-
-// src/server/session.ts
-init_cjs_shims();
-var path24 = __toESM(require("path"), 1);
-var import_async_hooks = require("async_hooks");
-
-// src/server/mcpConfig.ts
-init_cjs_shims();
-var import_node_fs = __toESM(require("fs"), 1);
-var import_node_path = __toESM(require("path"), 1);
-function isValidMcpConfig(v) {
-  return !!v && typeof v === "object" && typeof v.name === "string" && (v.type === "stdio" || v.type === "http");
-}
-function readConfigFile(file) {
-  if (!file) return [];
-  try {
-    if (!import_node_fs.default.existsSync(file)) return [];
-    const raw = JSON.parse(import_node_fs.default.readFileSync(file, "utf8"));
-    const list = Array.isArray(raw) ? raw : raw && typeof raw === "object" && Array.isArray(raw.servers) ? raw.servers : [];
-    return list.filter(isValidMcpConfig);
-  } catch (err) {
-    console.error(`[mcp] \u8BFB\u53D6\u914D\u7F6E\u5931\u8D25 ${file}: ${err.message}`);
-    return [];
+  loadRollup(now) {
+    try {
+      const raw = fs19.readFileSync(this.rollupFile, "utf-8");
+      const parsed = JSON.parse(raw);
+      return {
+        schema: USAGE_SCHEMA,
+        since: parsed.since ?? now.toISOString(),
+        legacy: parsed.legacy,
+        total: { ...zeroAgg(), ...parsed.total },
+        byDay: parsed.byDay ?? {},
+        byModel: parsed.byModel ?? {},
+        byProject: parsed.byProject ?? {}
+      };
+    } catch {
+      return {
+        schema: USAGE_SCHEMA,
+        since: now.toISOString(),
+        total: zeroAgg(),
+        byDay: {},
+        byModel: {},
+        byProject: {}
+      };
+    }
   }
-}
-function hasServerMcpConfig() {
-  if (readConfigFile(process.env.MCP_CONFIG_PATH).length > 0) return true;
-  const workspace = process.env.WORKSPACE;
-  if (!workspace) return false;
-  return readConfigFile(import_node_path.default.join(workspace, ".agent", "mcp.json")).length > 0;
-}
-function loadServerMcpConfigs(tenant) {
-  const fromEnv = readConfigFile(process.env.MCP_CONFIG_PATH);
-  if (fromEnv.length > 0) return fromEnv;
-  if (Array.isArray(tenant.mcpServers) && tenant.mcpServers.length > 0) {
-    return tenant.mcpServers.filter(isValidMcpConfig);
+  /** 删除超出保留期的账本文件，并裁剪 byDay */
+  pruneLedgers(now) {
+    const keep = retainedMonths(now);
+    let changed = false;
+    try {
+      for (const f of fs19.readdirSync(this.ledgerDir)) {
+        const m = /^ledger-(\d{4}-\d{2})\.jsonl$/.exec(f);
+        if (m && !keep.has(m[1])) {
+          fs19.unlinkSync(path21.join(this.ledgerDir, f));
+        }
+      }
+    } catch {
+    }
+    for (const day of Object.keys(this.rollup.byDay)) {
+      if (!keep.has(day.slice(0, 7))) {
+        delete this.rollup.byDay[day];
+        changed = true;
+      }
+    }
+    if (changed) this.saveRollupNow();
   }
-  const workspace = tenant.workspaceRoot ?? process.env.WORKSPACE;
-  if (workspace)
-    return readConfigFile(import_node_path.default.join(workspace, ".agent", "mcp.json"));
-  return [];
-}
-
-// src/server/nodeLlm.ts
-init_cjs_shims();
-var GLOBAL_PROVIDER_ID = "__env__";
-function envProvider() {
-  const apiKey = process.env.OPENAI_API_KEY;
-  if (!apiKey) return null;
-  return {
-    id: GLOBAL_PROVIDER_ID,
-    name: process.env.OPENAI_MODEL || process.env.MODEL || "\u5168\u5C40 LLM",
-    type: "env",
-    baseURL: process.env.OPENAI_BASE_URL ?? "",
-    model: process.env.OPENAI_MODEL || process.env.MODEL || "",
-    apiKey
-  };
-}
-function normReasoningEffort(v) {
-  return v === "low" || v === "medium" || v === "high" ? v : null;
-}
-function normalizeModelList(v) {
-  if (!Array.isArray(v)) return void 0;
-  const out = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const x of v) {
-    const s = String(x ?? "").trim();
-    if (!s || seen.has(s)) continue;
-    seen.add(s);
-    out.push(s);
-    if (out.length >= 500) break;
+  // ===================== 价格 =====================
+  getPricing() {
+    return this.pricing;
   }
-  return out;
-}
-function nodeLlmView(cfg) {
-  const g = envProvider();
-  const providers = [
-    ...g ? [
-      {
-        id: g.id,
-        name: g.name,
-        type: g.type,
-        baseURL: g.baseURL,
-        model: g.model,
-        hasApiKey: true,
-        global: true
+  /** 更新价格/汇率（整表覆盖式合并） */
+  updatePricing(patch) {
+    this.pricing = {
+      schema: USAGE_SCHEMA,
+      base: "USD",
+      rate: { ...this.pricing.rate, ...patch.rate ?? {} },
+      vendors: { ...this.pricing.vendors, ...patch.vendors ?? {} },
+      fallback: { ...this.pricing.fallback, ...patch.fallback ?? {} }
+    };
+    atomicWrite(this.pricingFile, JSON.stringify(this.pricing, null, 2));
+    return this.pricing;
+  }
+  priceFor(vendor, model) {
+    const table = this.pricing.vendors[vendor];
+    if (table) {
+      if (table[model]) return table[model];
+      for (const key of Object.keys(table)) {
+        if (key.endsWith("*") && model.startsWith(key.slice(0, -1)))
+          return table[key];
       }
-    ] : [],
-    ...cfg.providers.map((p) => ({
-      id: p.id,
-      name: p.name,
-      type: p.type ?? "",
-      baseURL: p.baseURL,
-      model: p.model,
-      hasApiKey: Boolean(p.apiKey),
-      models: p.models ?? [],
-      nonChat: p.nonChat ?? [],
-      modelMeta: p.modelMeta ?? [],
-      reasoningEffort: p.reasoningEffort ?? null,
-      global: false
-    }))
-  ];
-  return {
-    defaultProviderId: cfg.defaultProviderId ?? null,
-    providers,
-    /** 未显式设置默认时，是否由环境变量全局配置兜底 */
-    globalIsDefault: !cfg.defaultProviderId && Boolean(g)
-  };
-}
-function applyNodeLlmPatch(cfg, raw) {
-  const next = { providers: cfg.providers, defaultProviderId: cfg.defaultProviderId };
-  if (Array.isArray(raw?.providers)) {
-    const old = new Map(cfg.providers.map((p) => [p.id, p]));
-    next.providers = raw.providers.filter((x) => Boolean(x) && typeof x === "object").filter((x) => x.global !== true && String(x.id ?? "") !== GLOBAL_PROVIDER_ID).map((x) => {
-      const id = String(x.id ?? "").trim();
-      if (!id) throw new ApiError(400, "bad_request", "\u4F9B\u5E94\u5546 id \u4E0D\u80FD\u4E3A\u7A7A");
-      const prev = old.get(id);
-      const apiKey = String(x.apiKey ?? "").trim();
-      const models = normalizeModelList(x.models) ?? prev?.models;
-      const nonChat = normalizeModelList(x.nonChat) ?? prev?.nonChat;
-      const modelMeta = normalizeModelMeta(x.modelMeta) ?? prev?.modelMeta;
-      return {
-        id,
-        name: String(x.name ?? prev?.name ?? id).trim(),
-        type: x.type == null ? prev?.type : String(x.type),
-        baseURL: String(x.baseURL ?? prev?.baseURL ?? "").trim(),
-        model: String(x.model ?? prev?.model ?? "").trim(),
-        apiKey: apiKey || prev?.apiKey,
-        reasoningEffort: x.reasoningEffort === void 0 ? prev?.reasoningEffort ?? null : normReasoningEffort(x.reasoningEffort),
-        ...models ? { models } : {},
-        ...nonChat ? { nonChat } : {},
-        ...modelMeta ? { modelMeta } : {}
-      };
-    });
-  }
-  if (typeof raw?.defaultProviderId === "string") {
-    const id = raw.defaultProviderId.trim();
-    next.defaultProviderId = id || void 0;
-  } else if (raw?.defaultProviderId === null) {
-    next.defaultProviderId = void 0;
-  }
-  return next;
-}
-function findNodeProvider(store, id) {
-  if (!id) return null;
-  if (id === GLOBAL_PROVIDER_ID) return envProvider();
-  return store.loadNodeLlm().providers.find((p) => p.id === id) ?? null;
-}
-function nodeDefaultProvider(store) {
-  const cfg = store.loadNodeLlm();
-  if (cfg.providers.length === 0) return null;
-  return cfg.providers.find((p) => p.id === cfg.defaultProviderId) ?? cfg.providers[0] ?? null;
-}
-function resolveSessionProvider(store, tenant, providerId) {
-  const own = tenant.provider ?? {};
-  if (providerId) {
-    const picked = findNodeProvider(store, providerId);
-    if (picked) {
-      return {
-        apiKey: picked.apiKey || own.apiKey,
-        baseURL: picked.baseURL || own.baseURL,
-        model: picked.model,
-        providerId,
-        reasoningEffort: picked.reasoningEffort ?? null,
-        ...picked.modelMeta ? { modelMeta: picked.modelMeta } : {}
-      };
     }
-  }
-  if (own.apiKey) return { ...own, model: tenant.model };
-  const def = nodeDefaultProvider(store);
-  if (def?.apiKey) {
-    return {
-      apiKey: def.apiKey,
-      baseURL: own.baseURL || def.baseURL,
-      model: def.model || tenant.model,
-      reasoningEffort: def.reasoningEffort ?? null,
-      ...def.modelMeta ? { modelMeta: def.modelMeta } : {}
-    };
-  }
-  return { ...own, model: tenant.model };
-}
-
-// src/server/usage.ts
-init_cjs_shims();
-var fs20 = __toESM(require("fs"), 1);
-var path23 = __toESM(require("path"), 1);
-var LEDGER_RETENTION_MONTHS = 12;
-var USAGE_SCHEMA = 1;
-var DEFAULT_PRICING = {
-  schema: USAGE_SCHEMA,
-  base: "USD",
-  rate: { CNY: 7.2 },
-  vendors: {
-    openai: {
-      "gpt-4o": { input: 2.5, output: 10, cacheRead: 1.25 },
-      "gpt-4o-mini": { input: 0.15, output: 0.6, cacheRead: 0.075 },
-      "gpt-4.1": { input: 2, output: 8, cacheRead: 0.5 }
-    },
-    deepseek: {
-      "deepseek-flash": {
-        input: 0.27,
-        output: 1.1,
-        cacheRead: 0.027,
-        cacheWrite: 0.27
-      },
-      "deepseek-reasoner": {
-        input: 0.55,
-        output: 2.19,
-        cacheRead: 0.055,
-        cacheWrite: 0.55
-      },
-      "deepseek-*": {
-        input: 0.27,
-        output: 1.1,
-        cacheRead: 0.027,
-        cacheWrite: 0.27
+    for (const v of Object.values(this.pricing.vendors)) {
+      if (v[model]) return v[model];
+    }
+    for (const v of Object.values(this.pricing.vendors)) {
+      for (const key of Object.keys(v)) {
+        if (key.endsWith("*") && model.startsWith(key.slice(0, -1)))
+          return v[key];
       }
-    },
-    qwen: {
-      "qwen-plus": { input: 0.4, output: 1.2 },
-      "qwen-turbo": { input: 0.05, output: 0.2 }
-    },
-    zhipu: { "glm-4-plus": { input: 0.7, output: 0.7 } },
-    moonshot: { "moonshot-v1-8k": { input: 1.68, output: 1.68 } },
-    xiaomi: {},
-    custom: {},
-    env: {}
-  },
-  fallback: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 }
-};
-function zeroAgg() {
-  return {
-    calls: 0,
-    input: 0,
-    output: 0,
-    cacheRead: 0,
-    cacheWrite: 0,
-    costUsd: 0,
-    unpriced: 0
-  };
-}
-function addAgg(into, tokens, costUsd) {
-  into.calls += 1;
-  into.input += tokens.input;
-  into.output += tokens.output;
-  into.cacheRead += tokens.cacheRead;
-  into.cacheWrite += tokens.cacheWrite;
-  if (costUsd == null) into.unpriced += 1;
-  else into.costUsd += costUsd;
-}
-function utcDay(iso) {
-  return iso.slice(0, 10);
-}
-function monthOf(iso) {
-  return iso.slice(0, 7);
-}
-function retainedMonths(now = /* @__PURE__ */ new Date()) {
-  const out = /* @__PURE__ */ new Set();
-  const d = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1));
-  for (let i = 0; i < LEDGER_RETENTION_MONTHS; i += 1) {
-    out.add(d.toISOString().slice(0, 7));
-    d.setUTCMonth(d.getUTCMonth() - 1);
+    }
+    return null;
   }
-  return out;
-}
-function atomicWrite(file, content) {
-  fs20.mkdirSync(path23.dirname(file), { recursive: true });
-  const tmp = `${file}.tmp`;
-  fs20.writeFileSync(tmp, content, "utf-8");
-  fs20.renameSync(tmp, file);
-}
-var UsageLedger = class {
-  constructor(root) {
-    this.root = root;
-    this.dir = path23.join(root, "usage");
+  /** 成本（USD）：input 已含 cacheRead，故按非缓存部分计价 */
+  costOf(vendor, model, t) {
+    const p = this.priceFor(vendor, model);
+    if (!p) return null;
+    const cached3 = Math.min(t.cacheRead, t.input);
+    const fresh = Math.max(0, t.input - cached3);
+    const M = 1e6;
+    const cost = (fresh * p.input + cached3 * (p.cacheRead ?? p.input) + t.output * p.output + t.cacheWrite * (p.cacheWrite ?? 0)) / M;
+    return Number.isFinite(cost) ? cost : null;
   }
-  root;
-  dir;
-  rollup;
-  pricing;
-  rollupDirty = false;
-  rollupTimer = null;
-  inited = false;
-  get ledgerDir() {
-    return this.dir;
+  convert(usd, currency) {
+    if (!currency || currency === "USD") return usd;
+    const r = this.pricing.rate[currency];
+    return typeof r === "number" && r > 0 ? usd * r : usd;
   }
-  ledgerFile(month) {
-    return path23.join(this.ledgerDir, `ledger-${month}.jsonl`);
+  // ===================== 记账 =====================
+  /** 追加一条用量（串行 + appendFileSync；同步返回，便于在事件回调里调用） */
+  record(input) {
+    this.ensureInit();
+    const costUsd = this.costOf(input.vendor, input.model, input);
+    const rec = {
+      ...input,
+      id: input.id ?? `${input.sessionId}:${input.ts}:${Math.random().toString(36).slice(2, 8)}`,
+      costUsd,
+      priced: costUsd != null
+    };
+    const line = JSON.stringify(rec) + "\n";
+    try {
+      fs19.appendFileSync(this.ledgerFile(monthOf(rec.ts)), line);
+    } catch (e) {
+      console.error(`[usage] \u5199\u8D26\u672C\u5931\u8D25: ${String(e)}`);
+    }
+    addAgg(this.rollup.total, rec, costUsd);
+    const day = this.rollup.byDay[utcDay(rec.ts)] ?? (this.rollup.byDay[utcDay(rec.ts)] = zeroAgg());
+    addAgg(day, rec, costUsd);
+    const mk = `${rec.vendor}/${rec.model}`;
+    const bm = this.rollup.byModel[mk] ?? (this.rollup.byModel[mk] = zeroAgg());
+    addAgg(bm, rec, costUsd);
+    const bp = this.rollup.byProject[rec.projectId] ?? (this.rollup.byProject[rec.projectId] = zeroAgg());
+    addAgg(bp, rec, costUsd);
+    this.scheduleRollupSave();
+    return rec;
   }
-  get rollupFile() {
-    return path23.join(this.ledgerDir, "rollup.json");
+  /** 写入历史基线（仅一次；迁移自既有消息 usage） */
+  seedLegacy(agg, throughTs) {
+    this.ensureInit();
+    if (this.rollup.legacy) return;
+    this.rollup.legacy = { ...agg, throughTs };
+    if (throughTs < this.rollup.since) this.rollup.since = throughTs;
+    this.rollup.total.calls += agg.calls;
+    this.rollup.total.input += agg.input;
+    this.rollup.total.output += agg.output;
+    this.rollup.total.cacheRead += agg.cacheRead;
+    this.rollup.total.cacheWrite += agg.cacheWrite;
+    this.rollup.total.costUsd += agg.costUsd;
+    this.rollup.total.unpriced += agg.unpriced;
+    this.saveRollupNow();
   }
-  get pricingFile() {
-    return path23.join(this.ledgerDir, "pricing.json");
+  ensureInit() {
+    if (!this.inited) this.init();
   }
-  // ===================== 初始化 =====================
-  init(now = /* @__PURE__ */ new Date()) {
-    if (this.inited) return;
-    fs20.mkdirSync(this.ledgerDir, { recursive: true });
-    this.pricing = this.loadPricing();
-    this.rollup = this.loadRollup(now);
-    this.pruneLedgers(now);
-    this.inited = true;
+  scheduleRollupSave() {
+    this.rollupDirty = true;
+    if (this.rollupTimer) return;
+    this.rollupTimer = setTimeout(() => {
+      this.rollupTimer = null;
+      if (this.rollupDirty) this.saveRollupNow();
+    }, 1500);
+    this.rollupTimer.unref?.();
   }
-  loadPricing() {
-    try {
-      const raw = fs20.readFileSync(this.pricingFile, "utf-8");
-      const parsed = JSON.parse(raw);
-      const vendors = {};
-      for (const v of /* @__PURE__ */ new Set([
-        ...Object.keys(DEFAULT_PRICING.vendors),
-        ...Object.keys(parsed.vendors ?? {})
-      ])) {
-        vendors[v] = {
-          ...DEFAULT_PRICING.vendors[v] ?? {},
-          ...(parsed.vendors ?? {})[v] ?? {}
-        };
-      }
-      return {
-        schema: USAGE_SCHEMA,
-        base: "USD",
-        rate: { ...DEFAULT_PRICING.rate, ...parsed.rate ?? {} },
-        vendors,
-        fallback: { ...DEFAULT_PRICING.fallback, ...parsed.fallback ?? {} }
-      };
-    } catch {
-      try {
-        atomicWrite(this.pricingFile, JSON.stringify(DEFAULT_PRICING, null, 2));
-      } catch {
-      }
-      return JSON.parse(JSON.stringify(DEFAULT_PRICING));
-    }
-  }
-  loadRollup(now) {
-    try {
-      const raw = fs20.readFileSync(this.rollupFile, "utf-8");
-      const parsed = JSON.parse(raw);
-      return {
-        schema: USAGE_SCHEMA,
-        since: parsed.since ?? now.toISOString(),
-        legacy: parsed.legacy,
-        total: { ...zeroAgg(), ...parsed.total },
-        byDay: parsed.byDay ?? {},
-        byModel: parsed.byModel ?? {},
-        byProject: parsed.byProject ?? {}
-      };
-    } catch {
-      return {
-        schema: USAGE_SCHEMA,
-        since: now.toISOString(),
-        total: zeroAgg(),
-        byDay: {},
-        byModel: {},
-        byProject: {}
-      };
-    }
-  }
-  /** 删除超出保留期的账本文件，并裁剪 byDay */
-  pruneLedgers(now) {
-    const keep = retainedMonths(now);
-    let changed = false;
-    try {
-      for (const f of fs20.readdirSync(this.ledgerDir)) {
-        const m = /^ledger-(\d{4}-\d{2})\.jsonl$/.exec(f);
-        if (m && !keep.has(m[1])) {
-          fs20.unlinkSync(path23.join(this.ledgerDir, f));
-        }
-      }
-    } catch {
-    }
-    for (const day of Object.keys(this.rollup.byDay)) {
-      if (!keep.has(day.slice(0, 7))) {
-        delete this.rollup.byDay[day];
-        changed = true;
-      }
-    }
-    if (changed) this.saveRollupNow();
-  }
-  // ===================== 价格 =====================
-  getPricing() {
-    return this.pricing;
-  }
-  /** 更新价格/汇率（整表覆盖式合并） */
-  updatePricing(patch) {
-    this.pricing = {
-      schema: USAGE_SCHEMA,
-      base: "USD",
-      rate: { ...this.pricing.rate, ...patch.rate ?? {} },
-      vendors: { ...this.pricing.vendors, ...patch.vendors ?? {} },
-      fallback: { ...this.pricing.fallback, ...patch.fallback ?? {} }
-    };
-    atomicWrite(this.pricingFile, JSON.stringify(this.pricing, null, 2));
-    return this.pricing;
-  }
-  priceFor(vendor, model) {
-    const table = this.pricing.vendors[vendor];
-    if (table) {
-      if (table[model]) return table[model];
-      for (const key of Object.keys(table)) {
-        if (key.endsWith("*") && model.startsWith(key.slice(0, -1)))
-          return table[key];
-      }
-    }
-    for (const v of Object.values(this.pricing.vendors)) {
-      if (v[model]) return v[model];
-    }
-    for (const v of Object.values(this.pricing.vendors)) {
-      for (const key of Object.keys(v)) {
-        if (key.endsWith("*") && model.startsWith(key.slice(0, -1)))
-          return v[key];
-      }
-    }
-    return null;
-  }
-  /** 成本（USD）：input 已含 cacheRead，故按非缓存部分计价 */
-  costOf(vendor, model, t) {
-    const p = this.priceFor(vendor, model);
-    if (!p) return null;
-    const cached3 = Math.min(t.cacheRead, t.input);
-    const fresh = Math.max(0, t.input - cached3);
-    const M = 1e6;
-    const cost = (fresh * p.input + cached3 * (p.cacheRead ?? p.input) + t.output * p.output + t.cacheWrite * (p.cacheWrite ?? 0)) / M;
-    return Number.isFinite(cost) ? cost : null;
-  }
-  convert(usd, currency) {
-    if (!currency || currency === "USD") return usd;
-    const r = this.pricing.rate[currency];
-    return typeof r === "number" && r > 0 ? usd * r : usd;
-  }
-  // ===================== 记账 =====================
-  /** 追加一条用量（串行 + appendFileSync；同步返回，便于在事件回调里调用） */
-  record(input) {
-    this.ensureInit();
-    const costUsd = this.costOf(input.vendor, input.model, input);
-    const rec = {
-      ...input,
-      id: input.id ?? `${input.sessionId}:${input.ts}:${Math.random().toString(36).slice(2, 8)}`,
-      costUsd,
-      priced: costUsd != null
-    };
-    const line = JSON.stringify(rec) + "\n";
-    try {
-      fs20.appendFileSync(this.ledgerFile(monthOf(rec.ts)), line);
-    } catch (e) {
-      console.error(`[usage] \u5199\u8D26\u672C\u5931\u8D25: ${String(e)}`);
-    }
-    addAgg(this.rollup.total, rec, costUsd);
-    const day = this.rollup.byDay[utcDay(rec.ts)] ?? (this.rollup.byDay[utcDay(rec.ts)] = zeroAgg());
-    addAgg(day, rec, costUsd);
-    const mk = `${rec.vendor}/${rec.model}`;
-    const bm = this.rollup.byModel[mk] ?? (this.rollup.byModel[mk] = zeroAgg());
-    addAgg(bm, rec, costUsd);
-    const bp = this.rollup.byProject[rec.projectId] ?? (this.rollup.byProject[rec.projectId] = zeroAgg());
-    addAgg(bp, rec, costUsd);
-    this.scheduleRollupSave();
-    return rec;
-  }
-  /** 写入历史基线（仅一次；迁移自既有消息 usage） */
-  seedLegacy(agg, throughTs) {
-    this.ensureInit();
-    if (this.rollup.legacy) return;
-    this.rollup.legacy = { ...agg, throughTs };
-    if (throughTs < this.rollup.since) this.rollup.since = throughTs;
-    this.rollup.total.calls += agg.calls;
-    this.rollup.total.input += agg.input;
-    this.rollup.total.output += agg.output;
-    this.rollup.total.cacheRead += agg.cacheRead;
-    this.rollup.total.cacheWrite += agg.cacheWrite;
-    this.rollup.total.costUsd += agg.costUsd;
-    this.rollup.total.unpriced += agg.unpriced;
-    this.saveRollupNow();
-  }
-  ensureInit() {
-    if (!this.inited) this.init();
-  }
-  scheduleRollupSave() {
-    this.rollupDirty = true;
-    if (this.rollupTimer) return;
-    this.rollupTimer = setTimeout(() => {
-      this.rollupTimer = null;
-      if (this.rollupDirty) this.saveRollupNow();
-    }, 1500);
-    this.rollupTimer.unref?.();
-  }
-  saveRollupNow() {
-    this.rollupDirty = false;
+  saveRollupNow() {
+    this.rollupDirty = false;
     try {
       atomicWrite(this.rollupFile, JSON.stringify(this.rollup, null, 2));
     } catch (e) {
@@ -11869,10 +11544,10 @@ var UsageLedger = class {
     const rows = [];
     for (const month of months) {
       const file = this.ledgerFile(month);
-      if (!fs20.existsSync(file)) continue;
+      if (!fs19.existsSync(file)) continue;
       let content = "";
       try {
-        content = fs20.readFileSync(file, "utf-8");
+        content = fs19.readFileSync(file, "utf-8");
       } catch {
         continue;
       }
@@ -11981,10 +11656,10 @@ var UsageLedger = class {
     const seen = /* @__PURE__ */ new Set();
     for (const month of this.monthsInRange("", "")) {
       const file = this.ledgerFile(month);
-      if (!fs20.existsSync(file)) continue;
+      if (!fs19.existsSync(file)) continue;
       let content = "";
       try {
-        content = fs20.readFileSync(file, "utf-8");
+        content = fs19.readFileSync(file, "utf-8");
       } catch {
         continue;
       }
@@ -13295,7 +12970,7 @@ data: ${JSON.stringify(entry.data)}
       softThresholdPct: parseRatio(process.env.COMPACTION_SOFT_THRESHOLD_PCT),
       capTokens: parseOptionalPositiveNumber(process.env.COMPACTION_CAP_TOKENS) ?? null,
       // 超预算工具结果按租户/工作区隔离落盘（多租户共用一个状态目录会混内容）
-      toolResultDir: path24.join(workspace, ".agent", "tool-results")
+      toolResultDir: path22.join(workspace, ".agent", "tool-results")
     });
     engine.setApprover(this._makeApprover(rt));
     const mcpConfigs = loadServerMcpConfigs(tenant);
@@ -13469,132 +13144,912 @@ var ApiError = class extends Error {
     this.status = status;
     this.code = code;
   }
-  status;
-  code;
-};
-
-// src/server/routes.ts
-init_cjs_shims();
-var import_http = require("http");
-var path29 = __toESM(require("path"), 1);
+  status;
+  code;
+};
+
+// src/server/projects.ts
+var DEFAULT_MODEL = () => process.env.OPENAI_MODEL || process.env.MODEL || "gpt-4o";
+function toProjectSummary(store, tenant) {
+  return {
+    id: tenant.id,
+    name: tenant.name ?? tenant.id,
+    model: tenant.model,
+    baseURL: tenant.provider?.baseURL ?? "",
+    hasApiKey: Boolean(tenant.provider?.apiKey),
+    workspaceRoot: tenant.workspaceRoot ?? null,
+    sessionCount: store.listSessions(tenant.id).length
+  };
+}
+function providerViews(tenant) {
+  return {
+    activeProviderId: tenant.activeProviderId ?? null,
+    providers: (tenant.llmProviders ?? []).map((p) => ({
+      id: p.id,
+      name: p.name,
+      type: p.type ?? "",
+      baseURL: p.baseURL,
+      model: p.model,
+      models: p.models ?? [],
+      modelMeta: p.modelMeta ?? [],
+      hasApiKey: Boolean(p.apiKey)
+    }))
+  };
+}
+function applyProvidersPatch(tenant, raw) {
+  if (Array.isArray(raw.providers)) {
+    const existing = new Map((tenant.llmProviders ?? []).map((p) => [p.id, p]));
+    const next = [];
+    for (const item of raw.providers) {
+      if (!item || typeof item !== "object") continue;
+      const o = item;
+      const id = String(o.id ?? "").trim() || newId();
+      const prev = existing.get(id);
+      const apiKey = typeof o.apiKey === "string" && o.apiKey.trim() ? o.apiKey.trim() : prev?.apiKey;
+      const models = normalizeModelList(o.models) ?? prev?.models;
+      const modelMeta = normalizeModelMeta(o.modelMeta) ?? prev?.modelMeta;
+      next.push({
+        id,
+        name: String(o.name ?? "").trim() || id,
+        type: typeof o.type === "string" ? o.type : prev?.type,
+        baseURL: String(o.baseURL ?? "").trim(),
+        model: String(o.model ?? "").trim(),
+        ...apiKey ? { apiKey } : {},
+        ...models ? { models } : {},
+        ...modelMeta ? { modelMeta } : {}
+      });
+    }
+    tenant.llmProviders = next;
+  }
+  if (typeof raw.activeProviderId === "string") {
+    const activeId = raw.activeProviderId.trim();
+    tenant.activeProviderId = activeId || void 0;
+    const entry = (tenant.llmProviders ?? []).find((p) => p.id === activeId);
+    if (entry) {
+      tenant.provider = tenant.provider ?? {};
+      tenant.provider.baseURL = entry.baseURL || void 0;
+      if (entry.apiKey) tenant.provider.apiKey = entry.apiKey;
+      if (entry.model) tenant.model = entry.model;
+    }
+  }
+}
+function allProjectSummaries(store) {
+  return store.listTenants().map((id) => store.loadTenant(id)).filter((t) => t !== null).map((t) => toProjectSummary(store, t));
+}
+function lastUserMessage(rec) {
+  const sent = (rec.lastInput ?? "").trim();
+  if (sent) {
+    return sent.length > LAST_USER_MESSAGE_MAX ? `${sent.slice(0, LAST_USER_MESSAGE_MAX)}\u2026` : sent;
+  }
+  const msgs = rec.messages;
+  for (let i = msgs.length - 1; i >= 0; i--) {
+    const m = msgs[i];
+    if (!m || m.role !== "user" || typeof m.content !== "string") continue;
+    const text = m.content.trim();
+    if (!text) continue;
+    return text.length > LAST_USER_MESSAGE_MAX ? `${text.slice(0, LAST_USER_MESSAGE_MAX)}\u2026` : text;
+  }
+  return null;
+}
+function lastCompletedAt(rec) {
+  if (rec.lastCompletedAt) return rec.lastCompletedAt;
+  if (rec.status !== "completed") return null;
+  const msgs = rec.messages;
+  for (let i = msgs.length - 1; i >= 0; i--) {
+    const m = msgs[i];
+    if (!m || m.role !== "assistant") continue;
+    if (typeof m.ts === "number" && Number.isFinite(m.ts)) {
+      return new Date(m.ts).toISOString();
+    }
+    return null;
+  }
+  return null;
+}
+function allSessionStates(store, manager) {
+  const out = [];
+  for (const id of store.listTenants()) {
+    const t = store.loadTenant(id);
+    if (!t) continue;
+    try {
+      for (const s of manager.listSessions(t.id)) {
+        out.push({
+          projectId: t.id,
+          projectName: t.name ?? t.id,
+          sessionId: s.sessionId,
+          name: s.name ?? null,
+          status: s.status,
+          lastUserMessage: lastUserMessage(s),
+          lastCompletedAt: lastCompletedAt(s)
+        });
+      }
+    } catch {
+    }
+  }
+  return out;
+}
+function ensureNodeId(store) {
+  let id = store.loadNodeId();
+  if (!id) {
+    id = newId();
+    store.saveNodeId(id);
+  }
+  return id;
+}
+function createProject(store, input) {
+  const raw = input ?? {};
+  const id = String(raw.id ?? "").trim() || newId();
+  if (store.loadTenant(id)) {
+    throw new ApiError(409, "project_exists", `\u9879\u76EE ${id} \u5DF2\u5B58\u5728`);
+  }
+  const workspaceRoot = typeof raw.workspaceRoot === "string" && raw.workspaceRoot.trim() ? path23.resolve(raw.workspaceRoot.trim()) : void 0;
+  const explicitName = typeof raw.name === "string" && raw.name.trim() ? raw.name.trim() : "";
+  const defaultName = workspaceRoot ? path23.basename(workspaceRoot) : id;
+  const tenant = {
+    id,
+    name: explicitName || defaultName,
+    apiKey: generateApiKey(),
+    model: typeof raw.model === "string" && raw.model.trim() ? raw.model.trim() : DEFAULT_MODEL(),
+    provider: {
+      apiKey: typeof raw.providerApiKey === "string" && raw.providerApiKey.trim() ? raw.providerApiKey.trim() : void 0,
+      baseURL: typeof raw.baseURL === "string" && raw.baseURL.trim() ? raw.baseURL.trim() : void 0
+    },
+    workspaceRoot,
+    allowedCommands: Array.isArray(raw.allowedCommands) ? raw.allowedCommands.map((c) => String(c)) : []
+  };
+  const def = nodeDefaultProvider(store);
+  if (def) {
+    if (!tenant.provider?.apiKey && def.apiKey) tenant.provider = { ...tenant.provider, apiKey: def.apiKey };
+    if (!tenant.provider?.baseURL && def.baseURL) tenant.provider = { ...tenant.provider, baseURL: def.baseURL };
+    if (!(typeof raw.model === "string" && raw.model.trim()) && def.model) tenant.model = def.model;
+    const nodeCfg = store.loadNodeLlm();
+    tenant.llmProviders = nodeCfg.providers.map((p) => ({ ...p }));
+    tenant.activeProviderId = nodeCfg.defaultProviderId ?? nodeCfg.providers[0]?.id;
+  }
+  store.saveTenant(tenant);
+  return tenant;
+}
+function buildNodeInfo(store, opts) {
+  return {
+    nodeId: opts.nodeId ?? ensureNodeId(store),
+    platform: process.platform,
+    mode: process.env.NODE_MODE ?? "standalone",
+    version: "0.2.12",
+    admin: opts.admin,
+    projects: opts.projects
+  };
+}
+
+// src/server/fleet-config.ts
+init_cjs_shims();
+function fleetConfigFromEnv(store) {
+  const fleetToken = process.env.FLEET_TOKEN;
+  const fleetSecret = process.env.FLEET_SECRET;
+  if (!fleetToken || !fleetSecret) return null;
+  return {
+    hubUrl: process.env.HUB_URL,
+    fleetToken,
+    fleetSecret,
+    nodeId: ensureNodeId(store),
+    gatewayUrl: process.env.FLEET_GATEWAY_URL
+  };
+}
+function resolveFleetConfig(store) {
+  const saved = store.loadFleetCredential();
+  if (saved?.fleetToken && saved.fleetSecret) {
+    return { ...saved, nodeId: saved.nodeId || ensureNodeId(store) };
+  }
+  return fleetConfigFromEnv(store);
+}
+
+// src/cli/account-enroll.ts
+var SKIP_ANSWERS = /* @__PURE__ */ new Set(["-", "skip", "none", "no"]);
+function resolveDefaultHub(hubUrl, env3 = process.env) {
+  return (hubUrl ?? env3.HUB_URL ?? DEFAULT_HUB_URL).trim().replace(/\/$/, "");
+}
+function parseHubAnswer(answer, fallback) {
+  const a = answer.trim();
+  if (SKIP_ANSWERS.has(a.toLowerCase())) return null;
+  return (a || fallback).replace(/\/$/, "");
+}
+async function promptHubUrl(rl2, hubUrl) {
+  const fallback = resolveDefaultHub(hubUrl);
+  const answer = await rl2.question(`Hub \u5730\u5740 [${fallback}]\uFF1A`);
+  return parseHubAnswer(answer, fallback);
+}
+async function promptAccountLogin(rl2, hubUrl) {
+  cliLog("\u767B\u5F55\u65B9\u5F0F\uFF1A1) \u90AE\u7BB1 + \u5BC6\u7801   2) \u624B\u673A\u53F7 + \u5BC6\u7801   3) \u624B\u673A\u53F7 + \u77ED\u4FE1\u9A8C\u8BC1\u7801");
+  const mode = (await rl2.question("\u8BF7\u9009\u62E9 [1]\uFF1A")).trim() || "1";
+  const input = {};
+  if (mode === "1") {
+    input.email = (await rl2.question("\u90AE\u7BB1\uFF1A")).trim();
+    input.password = await askHidden(rl2, "\u5BC6\u7801\uFF1A");
+    if (!input.email || !input.password) {
+      cliErr("\u90AE\u7BB1\u4E0E\u5BC6\u7801\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
+      return null;
+    }
+  } else if (mode === "2") {
+    input.phone = (await rl2.question("\u624B\u673A\u53F7\uFF1A")).trim();
+    input.password = await askHidden(rl2, "\u5BC6\u7801\uFF1A");
+    if (!input.phone || !input.password) {
+      cliErr("\u624B\u673A\u53F7\u4E0E\u5BC6\u7801\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
+      return null;
+    }
+  } else if (mode === "3") {
+    input.phone = (await rl2.question("\u624B\u673A\u53F7\uFF1A")).trim();
+    if (!input.phone) {
+      cliErr("\u624B\u673A\u53F7\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
+      return null;
+    }
+    try {
+      const sent = await hubSendSms(resolveDefaultHub(hubUrl), {
+        phone: input.phone,
+        purpose: "login"
+      });
+      if (sent.debugCode) cliLog(`\uFF08\u8C03\u8BD5\u6A21\u5F0F\u9A8C\u8BC1\u7801\uFF1A${sent.debugCode}\uFF09`);
+      else cliLog("\u9A8C\u8BC1\u7801\u5DF2\u53D1\u9001\uFF0C5 \u5206\u949F\u5185\u6709\u6548\u3002");
+    } catch (e) {
+      cliErr(`\u77ED\u4FE1\u9A8C\u8BC1\u7801\u53D1\u9001\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+      cliLog("  \u53EF\u6539\u7528\u65B9\u5F0F 1/2\uFF08\u5BC6\u7801\u767B\u5F55\uFF09\uFF0C\u6216\u5728\u7F51\u9875\u7AEF\u751F\u6210\u63A5\u5165\u7801\u540E\u6267\u884C\uFF1A");
+      cliLog("    zqagent link --hub <Hub\u5730\u5740> --code <\u63A5\u5165\u7801>");
+      return null;
+    }
+    input.code = (await rl2.question("\u77ED\u4FE1\u9A8C\u8BC1\u7801\uFF1A")).trim();
+    if (!input.code) {
+      cliErr("\u9A8C\u8BC1\u7801\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
+      return null;
+    }
+  } else {
+    cliErr("\u672A\u77E5\u7684\u767B\u5F55\u65B9\u5F0F\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
+    return null;
+  }
+  return input;
+}
+async function promptLinkAccount(rl2, hubUrl, opts = {}) {
+  const fallback = resolveDefaultHub(hubUrl);
+  let resolved = fallback;
+  if (opts.askHub !== false) {
+    const answer = await promptHubUrl(rl2, fallback);
+    if (!answer) {
+      cliLog("\u5DF2\u8DF3\u8FC7\u63A5\u5165\uFF1A\u8282\u70B9\u4FDD\u6301\u7EAF\u672C\u5730\u8FD0\u884C\u3002");
+      return null;
+    }
+    resolved = answer;
+  }
+  const auth = await promptAccountLogin(rl2, resolved);
+  if (!auth) return null;
+  return { hubUrl: resolved, auth };
+}
+async function promptPassword(rl2, prompt = "\u5BC6\u7801\uFF1A") {
+  return askHidden(rl2, prompt);
+}
+function resolveDataDir(dataDir) {
+  return path24.resolve(dataDir ?? process.env.DATA_DIR ?? DEFAULT_DATA_DIR);
+}
+async function maybeAccountEnroll(opts = {}) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) return;
+  let store;
+  try {
+    store = new Store(resolveDataDir(opts.dataDir));
+    if (resolveFleetConfig(store)) return;
+  } catch (e) {
+    cliErr(`\u63A5\u5165\u68C0\u67E5\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+    return;
+  }
+  const rl2 = readline.createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    await runWizard(rl2, store, opts);
+  } catch (e) {
+    cliErr(`\u63A5\u5165\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+    cliLog("  \u53EF\u7A0D\u540E\u5728\u63A7\u5236\u53F0\u751F\u6210\u63A5\u5165\u7801\uFF0C\u518D\u6267\u884C\uFF1Azqagent link --hub <Hub\u5730\u5740> --code <\u63A5\u5165\u7801>");
+  } finally {
+    rl2.close();
+  }
+}
+async function runWizard(rl2, store, opts) {
+  cliLog("");
+  cliLog("\u672C\u673A\u5C1A\u672A\u63A5\u5165 Hub\u3002\u53EF\u7528 Hub \u8D26\u53F7\u63A5\u5165\uFF08\u8282\u70B9\u9ED8\u8BA4\u8FDB\u5165\u300C\u672A\u5206\u7EC4\u300D\uFF09\uFF1B\u8F93\u5165 - \u8DF3\u8FC7\u4FDD\u6301\u7EAF\u672C\u5730\u3002");
+  const prompted = await promptLinkAccount(rl2, opts.hubUrl);
+  if (!prompted) return;
+  const nodeId = ensureNodeId(store);
+  const cred = await hubEnrollByAccount(prompted.hubUrl, {
+    ...prompted.auth,
+    nodeId,
+    label: opts.label
+  });
+  store.saveFleetCredential({
+    ...cred,
+    label: opts.label ?? cred.label,
+    enrolledAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  cliLog(`\u2705 \u5DF2\u63A5\u5165 Hub\uFF1A\u8282\u70B9 ${cred.nodeId}\uFF08\u7F51\u5173 ${cred.gatewayUrl ?? "\u672A\u4E0B\u53D1"}\uFF09`);
+  cliLog("   \u51ED\u636E\u5DF2\u4FDD\u5B58\u5230 fleet.json\uFF0C\u672C\u6B21\u542F\u52A8\u5373\u8FDE\u63A5 Hub\u3002");
+}
+async function askHidden(rl2, prompt) {
+  if (!process.stdin.isTTY) return (await rl2.question(prompt)).trim();
+  return new Promise((resolve24) => {
+    const saved = process.stdin.listeners("data");
+    process.stdin.removeAllListeners("data");
+    cliWrite(prompt);
+    rl2.pause();
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    let buf = "";
+    const cleanup = () => {
+      process.stdin.removeListener("data", onData);
+      for (const listener of saved) {
+        process.stdin.on("data", listener);
+      }
+      process.stdin.setRawMode(true);
+      rl2.resume();
+    };
+    const onData = (chunk) => {
+      const s = chunk.toString().replace(/\x1b\[[0-9;?]*[A-Za-z~]/g, "").replace(/\x1bO[A-Za-z]/g, "");
+      for (const ch of s) {
+        if (ch === "\r" || ch === "\n") {
+          cleanup();
+          cliWrite("\n");
+          resolve24(buf);
+          return;
+        }
+        if (ch === "") {
+          cleanup();
+          cliWrite("\n");
+          resolve24("");
+          return;
+        }
+        if (ch === "\x7F" || ch === "\b") {
+          if (buf.length > 0) {
+            buf = buf.slice(0, -1);
+            cliWrite("\b \b");
+          }
+        } else if (ch >= " ") {
+          buf += ch;
+          cliWrite("*");
+        }
+      }
+    };
+    process.stdin.on("data", onData);
+  });
+}
+
+// src/cli/serve-instances.ts
+init_cjs_shims();
+var import_node_child_process5 = require("child_process");
+var fs21 = __toESM(require("fs"), 1);
+var os5 = __toESM(require("os"), 1);
+var path26 = __toESM(require("path"), 1);
+
+// src/update/platform.ts
+init_cjs_shims();
+var fs20 = __toESM(require("fs"), 1);
+var os4 = __toESM(require("os"), 1);
+var path25 = __toESM(require("path"), 1);
+var import_node_child_process4 = require("child_process");
+var import_node_module3 = require("module");
+function currentVersion() {
+  const injected = "0.2.12"?.trim();
+  if (injected) return injected;
+  try {
+    const req2 = (0, import_node_module3.createRequire)(importMetaUrl);
+    const pkg = req2("../../package.json");
+    if (pkg?.version) return pkg.version;
+  } catch {
+  }
+  return "dev";
+}
+function isSeaRuntime() {
+  if (process.env.ZQAGENT_SEA === "1") return true;
+  const base = path25.basename(process.execPath).toLowerCase().replace(/\.exe$/, "");
+  return base !== "node" && base !== "nodejs";
+}
+var DEFAULT_SERVICE_NAME = "zqagent";
+var DEFAULT_SERVICE_LABEL = "com.zqagent.node";
+function serviceManagerFromCgroup(cgroup, serviceName = DEFAULT_SERVICE_NAME) {
+  const unitName = `${serviceName}.service`;
+  for (const line of cgroup.split("\n")) {
+    const idx = line.lastIndexOf(":");
+    if (idx < 0) continue;
+    const unitPath = line.slice(idx + 1).trim();
+    if (unitPath.split("/").includes(unitName)) return "systemd";
+  }
+  return null;
+}
+function launchdDomain() {
+  const uid = typeof process.getuid === "function" ? process.getuid() : -1;
+  return uid === 0 ? "system" : `gui/${uid}`;
+}
+function launchdLabel() {
+  return process.env.ZQAGENT_SERVICE_LABEL?.trim() || DEFAULT_SERVICE_LABEL;
+}
+function launchdPlistPath() {
+  const label = launchdLabel();
+  const uid = typeof process.getuid === "function" ? process.getuid() : -1;
+  if (uid === 0) return `/Library/LaunchDaemons/${label}.plist`;
+  return path25.join(os4.homedir(), "Library", "LaunchAgents", `${label}.plist`);
+}
+function serviceManagerFromLaunchctl(output, pid, execPath, sea = true) {
+  const pidMatch = /^\s*pid = (\d+)\s*$/m.exec(output);
+  if (pidMatch && Number(pidMatch[1]) === pid) return "launchd";
+  const program = /^\s*program = (.+?)\s*$/m.exec(output);
+  if (program) {
+    const shown = program[1].replace(/^"|"$/g, "");
+    if (path25.resolve(shown) === path25.resolve(execPath)) return "launchd";
+  }
+  if (!sea && /^\s*state = /m.test(output)) return "launchd";
+  return null;
+}
+function parseLaunchdEnvironment(xml) {
+  const out = {};
+  const marker = xml.indexOf("<key>EnvironmentVariables</key>");
+  if (marker < 0) return out;
+  const open = xml.indexOf("<dict>", marker);
+  if (open < 0) return out;
+  const close = xml.indexOf("</dict>", open);
+  if (close < 0) return out;
+  const body = xml.slice(open + "<dict>".length, close);
+  for (const m of body.matchAll(/<key>([^<]+)<\/key>\s*<string>([^<]*)<\/string>/g)) {
+    out[m[1]] = m[2];
+  }
+  return out;
+}
+function detectServiceManager() {
+  if (process.platform === "darwin") return detectLaunchd();
+  if (process.platform !== "linux") return null;
+  const serviceName = process.env.ZQAGENT_SERVICE_NAME?.trim() || DEFAULT_SERVICE_NAME;
+  try {
+    return serviceManagerFromCgroup(
+      fs20.readFileSync("/proc/self/cgroup", "utf8"),
+      serviceName
+    );
+  } catch {
+    return null;
+  }
+}
+function detectLaunchd() {
+  try {
+    const res = (0, import_node_child_process4.spawnSync)(
+      "launchctl",
+      ["print", `${launchdDomain()}/${launchdLabel()}`],
+      { encoding: "utf8", timeout: 3e3 }
+    );
+    if (res.status !== 0 || !res.stdout) return null;
+    return serviceManagerFromLaunchctl(
+      res.stdout,
+      process.pid,
+      process.execPath,
+      isSeaRuntime()
+    );
+  } catch {
+    return null;
+  }
+}
+function serviceManager() {
+  const v = process.env.ZQAGENT_SERVICE_MANAGER?.trim().toLowerCase();
+  if (v === "systemd" || v === "launchd") return v;
+  return detectServiceManager();
+}
+function parseServiceEnvironment(raw) {
+  const out = {};
+  for (const token of raw.trim().split(/\s+/)) {
+    const idx = token.indexOf("=");
+    if (idx > 0) out[token.slice(0, idx)] = token.slice(idx + 1);
+  }
+  return out;
+}
+var cachedServiceEnv = null;
+function readServiceEnvironment() {
+  const serviceName = process.env.ZQAGENT_SERVICE_NAME?.trim() || DEFAULT_SERVICE_NAME;
+  try {
+    const res = (0, import_node_child_process4.spawnSync)(
+      "systemctl",
+      ["show", serviceName, "--property=Environment", "--value", "--no-pager"],
+      { encoding: "utf8", timeout: 3e3 }
+    );
+    if (res.status !== 0 || !res.stdout) return {};
+    return parseServiceEnvironment(res.stdout);
+  } catch {
+    return {};
+  }
+}
+function serviceEnvValue(key) {
+  if (process.platform === "darwin") {
+    if (serviceManager() !== "launchd") return void 0;
+    cachedLaunchdEnv ??= readLaunchdEnvironment();
+    return cachedLaunchdEnv[key];
+  }
+  if (process.platform !== "linux") return void 0;
+  if (serviceManager() !== "systemd") return void 0;
+  cachedServiceEnv ??= readServiceEnvironment();
+  return cachedServiceEnv[key];
+}
+var cachedLaunchdEnv = null;
+function readLaunchdEnvironment() {
+  try {
+    return parseLaunchdEnvironment(fs20.readFileSync(launchdPlistPath(), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function selfUpdateCapability(hasPublicKey) {
+  if (!isSeaRuntime()) {
+    return {
+      ok: false,
+      reason: "\u5F53\u524D\u4E0D\u662F\u5355\u6587\u4EF6\uFF08SEA\uFF09\u5F62\u6001\uFF1A\u8BF7\u7528 npm \u5347\u7EA7\uFF08npm i -g @zqagent/core@latest\uFF09"
+    };
+  }
+  if (!serviceManager()) {
+    return {
+      ok: false,
+      reason: "\u672A\u88AB systemd/launchd \u6258\u7BA1\uFF1A\u8BF7\u7528 deploy/service/install.sh \u5B89\u88C5\uFF0C\u6216\u624B\u52A8\u5347\u7EA7"
+    };
+  }
+  if (!hasPublicKey) {
+    return { ok: false, reason: "\u672A\u914D\u7F6E ZQAGENT_UPDATE_PUBKEY\uFF0C\u65E0\u6CD5\u9A8C\u7B7E\uFF0C\u5DF2\u7981\u7528\u81EA\u52A8\u66F4\u65B0" };
+  }
+  return { ok: true };
+}
 
-// src/server/projects.ts
-init_cjs_shims();
-var path25 = __toESM(require("path"), 1);
-var DEFAULT_MODEL = () => process.env.OPENAI_MODEL || process.env.MODEL || "gpt-4o";
-function toProjectSummary(store, tenant) {
-  return {
-    id: tenant.id,
-    name: tenant.name ?? tenant.id,
-    model: tenant.model,
-    baseURL: tenant.provider?.baseURL ?? "",
-    hasApiKey: Boolean(tenant.provider?.apiKey),
-    workspaceRoot: tenant.workspaceRoot ?? null,
-    sessionCount: store.listSessions(tenant.id).length
+// src/cli/serve-instances.ts
+var DEFAULT_SERVE_HOST = "127.0.0.1";
+var DEFAULT_SERVE_PORT = 8787;
+var DEFAULT_SERVICE_NAME2 = "zqagent";
+var DEFAULT_SERVICE_LABEL2 = "com.zqagent.node";
+function serveSubcommandIndex(argv) {
+  for (let i = 1; i < argv.length; i++) {
+    if (argv[i].startsWith("-")) continue;
+    return argv[i] === "serve" ? i : -1;
+  }
+  return -1;
+}
+function parseServeArgs(argv) {
+  const at = serveSubcommandIndex(argv);
+  if (at < 0) return null;
+  let dataDir = null;
+  let host = DEFAULT_SERVE_HOST;
+  let port = DEFAULT_SERVE_PORT;
+  for (let i = at + 1; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === "--data-dir" && argv[i + 1]) {
+      dataDir = argv[++i];
+    } else if (arg.startsWith("--data-dir=")) {
+      dataDir = arg.slice("--data-dir=".length);
+    } else if (arg === "--host" && argv[i + 1]) {
+      host = argv[++i];
+    } else if (arg.startsWith("--host=")) {
+      host = arg.slice("--host=".length);
+    } else if (arg === "--port" && argv[i + 1]) {
+      port = Number(argv[++i]);
+    } else if (arg.startsWith("--port=")) {
+      port = Number(arg.slice("--port=".length));
+    }
+  }
+  if (!Number.isFinite(port) || port <= 0) port = DEFAULT_SERVE_PORT;
+  if (host === "0.0.0.0" || host === "::" || host === "") host = DEFAULT_SERVE_HOST;
+  return { dataDir, host, port };
+}
+function buildHotCandidates(explicitDataDir, discovered, fallback) {
+  const out = [];
+  const push = (inst) => {
+    if (!out.some((o) => o.dataDir === inst.dataDir)) out.push(inst);
   };
+  if (explicitDataDir) push({ dataDir: path26.resolve(explicitDataDir), ...fallback });
+  for (const inst of discovered) if (inst.managed) push(inst);
+  for (const inst of discovered) if (!inst.managed) push(inst);
+  if (!explicitDataDir) push({ dataDir: path26.resolve(DEFAULT_DATA_DIR), ...fallback });
+  return out;
 }
-function providerViews(tenant) {
+function isWindowsAbsolute(p) {
+  return /^[A-Za-z]:[\\/]/.test(p) || /^\\\\/.test(p);
+}
+function isAbsolutePath(p) {
+  return path26.isAbsolute(p) || isWindowsAbsolute(p);
+}
+function normalizePath(p) {
+  return isWindowsAbsolute(p) ? path26.win32.normalize(p) : path26.normalize(p);
+}
+function parseServeCommandLine(line) {
+  if (!/(?:^|\s)["']?serve["']?(?=\s|$)/.test(line)) return null;
+  const m = /--data-dir(?:=|\s+)(?:"([^"]+)"|'([^']+)'|(.+?))(?=\s+--\w|\s*$)/.exec(line);
+  const rawDataDir = (m?.[1] ?? m?.[2] ?? m?.[3] ?? "").trim();
+  if (!rawDataDir || !isAbsolutePath(rawDataDir)) return null;
+  const host = /--host(?:=|\s+)(?:"([^"]+)"|'([^']+)'|(\S+))/.exec(line);
+  const rawHost = (host?.[1] ?? host?.[2] ?? host?.[3] ?? DEFAULT_SERVE_HOST).trim();
+  const portMatch = /--port(?:=|\s+)(\d+)/.exec(line);
+  const port = Number(portMatch?.[1] ?? DEFAULT_SERVE_PORT);
   return {
-    activeProviderId: tenant.activeProviderId ?? null,
-    providers: (tenant.llmProviders ?? []).map((p) => ({
-      id: p.id,
-      name: p.name,
-      type: p.type ?? "",
-      baseURL: p.baseURL,
-      model: p.model,
-      models: p.models ?? [],
-      modelMeta: p.modelMeta ?? [],
-      hasApiKey: Boolean(p.apiKey)
-    }))
+    dataDir: normalizePath(rawDataDir),
+    host: rawHost === "0.0.0.0" || rawHost === "::" || rawHost === "" ? DEFAULT_SERVE_HOST : rawHost,
+    port: Number.isFinite(port) && port > 0 ? port : DEFAULT_SERVE_PORT
   };
 }
-function applyProvidersPatch(tenant, raw) {
-  if (Array.isArray(raw.providers)) {
-    const existing = new Map((tenant.llmProviders ?? []).map((p) => [p.id, p]));
-    const next = [];
-    for (const item of raw.providers) {
-      if (!item || typeof item !== "object") continue;
-      const o = item;
-      const id = String(o.id ?? "").trim() || newId();
-      const prev = existing.get(id);
-      const apiKey = typeof o.apiKey === "string" && o.apiKey.trim() ? o.apiKey.trim() : prev?.apiKey;
-      const models = normalizeModelList(o.models) ?? prev?.models;
-      const modelMeta = normalizeModelMeta(o.modelMeta) ?? prev?.modelMeta;
-      next.push({
-        id,
-        name: String(o.name ?? "").trim() || id,
-        type: typeof o.type === "string" ? o.type : prev?.type,
-        baseURL: String(o.baseURL ?? "").trim(),
-        model: String(o.model ?? "").trim(),
-        ...apiKey ? { apiKey } : {},
-        ...models ? { models } : {},
-        ...modelMeta ? { modelMeta } : {}
-      });
+function processCwd(pid) {
+  try {
+    return fs21.readlinkSync(`/proc/${pid}/cwd`);
+  } catch {
+    return null;
+  }
+}
+function processEnv(pid) {
+  const out = {};
+  try {
+    const raw = fs21.readFileSync(`/proc/${pid}/environ`, "utf-8");
+    for (const entry of raw.split("\0")) {
+      const eq = entry.indexOf("=");
+      if (eq > 0) out[entry.slice(0, eq)] = entry.slice(eq + 1);
     }
-    tenant.llmProviders = next;
+  } catch {
   }
-  if (typeof raw.activeProviderId === "string") {
-    const activeId = raw.activeProviderId.trim();
-    tenant.activeProviderId = activeId || void 0;
-    const entry = (tenant.llmProviders ?? []).find((p) => p.id === activeId);
-    if (entry) {
-      tenant.provider = tenant.provider ?? {};
-      tenant.provider.baseURL = entry.baseURL || void 0;
-      if (entry.apiKey) tenant.provider.apiKey = entry.apiKey;
-      if (entry.model) tenant.model = entry.model;
+  return out;
+}
+function resolveDataDir2(rawDataDir, cwd, env3) {
+  const pick = rawDataDir ?? env3.DATA_DIR ?? null;
+  if (pick) return path26.isAbsolute(pick) ? path26.normalize(pick) : cwd ? path26.resolve(cwd, pick) : null;
+  return cwd ? path26.resolve(cwd, DEFAULT_DATA_DIR) : null;
+}
+function isManagedBySystemd(pid, env3) {
+  if (env3.ZQAGENT_SERVICE_MANAGER?.trim()) return true;
+  try {
+    const cgroup = fs21.readFileSync(`/proc/${pid}/cgroup`, "utf-8");
+    const serviceName = env3.ZQAGENT_SERVICE_NAME?.trim() || "zqagent";
+    return serviceManagerFromCgroup(cgroup, serviceName) !== null;
+  } catch {
+    return false;
+  }
+}
+function discoverFromProc() {
+  const out = [];
+  let pids;
+  try {
+    pids = fs21.readdirSync("/proc");
+  } catch {
+    return out;
+  }
+  for (const name of pids) {
+    if (!/^\d+$/.test(name)) continue;
+    const pid = Number(name);
+    if (pid === process.pid) continue;
+    let argv;
+    let env3;
+    try {
+      argv = fs21.readFileSync(`/proc/${pid}/cmdline`, "utf-8").split("\0").filter(Boolean);
+      env3 = processEnv(pid);
+    } catch {
+      continue;
     }
+    const parsed = parseServeArgs(argv);
+    if (!parsed) continue;
+    const dataDir = resolveDataDir2(parsed.dataDir, processCwd(pid), env3);
+    if (!dataDir) continue;
+    out.push({
+      dataDir,
+      host: parsed.host,
+      port: parsed.port,
+      managed: isManagedBySystemd(pid, env3)
+    });
   }
+  return out;
 }
-function allProjectSummaries(store) {
-  return store.listTenants().map((id) => store.loadTenant(id)).filter((t) => t !== null).map((t) => toProjectSummary(store, t));
+function discoverFromPs() {
+  const out = [];
+  const res = (0, import_node_child_process5.spawnSync)("ps", ["-axo", "command="], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] });
+  if (res.status !== 0 || !res.stdout) return out;
+  for (const line of res.stdout.split("\n")) {
+    const inst = parseServeCommandLine(line);
+    if (inst) out.push(inst);
+  }
+  return out;
 }
-function lastUserMessage(rec) {
-  const sent = (rec.lastInput ?? "").trim();
-  if (sent) {
-    return sent.length > LAST_USER_MESSAGE_MAX ? `${sent.slice(0, LAST_USER_MESSAGE_MAX)}\u2026` : sent;
+function discoverFromWindows() {
+  const out = [];
+  const script = `[Console]::OutputEncoding=[Text.Encoding]::UTF8; Get-CimInstance Win32_Process -Filter "Name='zqagent.exe' OR Name='node.exe'" | ForEach-Object { $_.CommandLine }`;
+  const res = (0, import_node_child_process5.spawnSync)(
+    "powershell.exe",
+    ["-NoProfile", "-NonInteractive", "-Command", script],
+    { encoding: "utf-8", timeout: 15e3, windowsHide: true, stdio: ["ignore", "pipe", "ignore"] }
+  );
+  if (res.status !== 0 || !res.stdout) return out;
+  for (const line of res.stdout.replace(/^\uFEFF/, "").split(/\r?\n/)) {
+    const inst = parseServeCommandLine(line);
+    if (inst) out.push(inst);
   }
-  const msgs = rec.messages;
-  for (let i = msgs.length - 1; i >= 0; i--) {
-    const m = msgs[i];
-    if (!m || m.role !== "user" || typeof m.content !== "string") continue;
-    const text = m.content.trim();
-    if (!text) continue;
-    return text.length > LAST_USER_MESSAGE_MAX ? `${text.slice(0, LAST_USER_MESSAGE_MAX)}\u2026` : text;
+  return out;
+}
+function decodeXmlEntities(s) {
+  return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&amp;/g, "&");
+}
+function parseLaunchdProgramArguments(xml) {
+  const marker = xml.indexOf("<key>ProgramArguments</key>");
+  if (marker < 0) return [];
+  const open = xml.indexOf("<array>", marker);
+  if (open < 0) return [];
+  const close = xml.indexOf("</array>", open);
+  if (close < 0) return [];
+  return [...xml.slice(open + "<array>".length, close).matchAll(/<string>([^<]*)<\/string>/g)].map(
+    (m) => decodeXmlEntities(m[1])
+  );
+}
+function launchdServiceInstances() {
+  if (process.platform !== "darwin") return [];
+  const label = process.env.ZQAGENT_SERVICE_LABEL?.trim() || DEFAULT_SERVICE_LABEL2;
+  const plists = [
+    `/Library/LaunchDaemons/${label}.plist`,
+    path26.join(os5.homedir(), "Library", "LaunchAgents", `${label}.plist`)
+  ];
+  const out = [];
+  for (const plist of plists) {
+    let xml;
+    try {
+      xml = fs21.readFileSync(plist, "utf-8");
+    } catch {
+      continue;
+    }
+    const parsed = parseServeArgs(parseLaunchdProgramArguments(xml));
+    if (!parsed?.dataDir || !isAbsolutePath(parsed.dataDir)) continue;
+    out.push({
+      dataDir: normalizePath(parsed.dataDir),
+      host: parsed.host,
+      port: parsed.port,
+      managed: true
+    });
   }
-  return null;
+  return out;
 }
-function lastCompletedAt(rec) {
-  if (rec.lastCompletedAt) return rec.lastCompletedAt;
-  if (rec.status !== "completed") return null;
-  const msgs = rec.messages;
-  for (let i = msgs.length - 1; i >= 0; i--) {
-    const m = msgs[i];
-    if (!m || m.role !== "assistant") continue;
-    if (typeof m.ts === "number" && Number.isFinite(m.ts)) {
-      return new Date(m.ts).toISOString();
+function parseSystemdUnit(text) {
+  let dataDir = null;
+  let host = DEFAULT_SERVE_HOST;
+  let port = DEFAULT_SERVE_PORT;
+  for (const line of text.split("\n")) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith("WorkingDirectory=")) {
+      const v = trimmed.slice("WorkingDirectory=".length).trim();
+      if (v && isAbsolutePath(v)) dataDir = v;
+    } else if (trimmed.startsWith("ExecStart=")) {
+      const tokens = trimmed.slice("ExecStart=".length).trim().split(/\s+/).map((t) => t.replace(/^["']|["']$/g, ""));
+      const parsed = parseServeArgs(tokens);
+      if (!parsed) continue;
+      if (parsed.dataDir && isAbsolutePath(parsed.dataDir)) dataDir = parsed.dataDir;
+      host = parsed.host;
+      port = parsed.port;
+    }
+  }
+  if (!dataDir) return null;
+  return { dataDir: normalizePath(dataDir), host, port, managed: true };
+}
+function systemdServiceInstances() {
+  if (process.platform !== "linux") return [];
+  const unit = process.env.ZQAGENT_SERVICE_NAME?.trim() || DEFAULT_SERVICE_NAME2;
+  const configHome = process.env.XDG_CONFIG_HOME?.trim() || path26.join(os5.homedir(), ".config");
+  const units = [
+    `/etc/systemd/system/${unit}.service`,
+    path26.join(configHome, "systemd", "user", `${unit}.service`)
+  ];
+  const out = [];
+  for (const file of units) {
+    let text;
+    try {
+      text = fs21.readFileSync(file, "utf-8");
+    } catch {
+      continue;
     }
-    return null;
+    const inst = parseSystemdUnit(text);
+    if (inst) out.push(inst);
+  }
+  return out;
+}
+function windowsServiceInstances() {
+  if (process.platform !== "win32") return [];
+  const appdata = process.env.APPDATA?.trim();
+  if (!appdata) return [];
+  const base = path26.join(appdata, "zqagent");
+  try {
+    const raw = fs21.readFileSync(path26.join(base, "runtime", "service.json"), "utf-8");
+    const v = JSON.parse(raw);
+    const dataDir = v.dataDir && isAbsolutePath(v.dataDir) ? v.dataDir : base;
+    const port = Number(v.port);
+    return [
+      {
+        dataDir: normalizePath(dataDir),
+        host: DEFAULT_SERVE_HOST,
+        port: Number.isFinite(port) && port > 0 ? port : DEFAULT_SERVE_PORT,
+        managed: true
+      }
+    ];
+  } catch {
+    return [];
+  }
+}
+function mergeServeInstances(discovered, managed) {
+  const out = [];
+  const push = (inst) => {
+    if (!out.some((o) => o.dataDir === inst.dataDir)) out.push(inst);
+  };
+  for (const inst of discovered) {
+    const hit = managed.find((m) => m.dataDir === inst.dataDir);
+    push(hit ? { ...inst, managed: true } : inst);
   }
-  return null;
+  for (const inst of managed) push(inst);
+  return out;
 }
-function allSessionStates(store, manager) {
-  const out = [];
-  for (const id of store.listTenants()) {
-    const t = store.loadTenant(id);
-    if (!t) continue;
-    try {
-      for (const s of manager.listSessions(t.id)) {
-        out.push({
-          projectId: t.id,
-          projectName: t.name ?? t.id,
-          sessionId: s.sessionId,
-          name: s.name ?? null,
-          status: s.status,
-          lastUserMessage: lastUserMessage(s),
-          lastCompletedAt: lastCompletedAt(s)
-        });
-      }
-    } catch {
+function discoverRunningServeInstances() {
+  const found = process.platform === "linux" ? discoverFromProc() : process.platform === "win32" ? discoverFromWindows() : discoverFromPs();
+  const declared = process.platform === "linux" ? systemdServiceInstances() : process.platform === "win32" ? windowsServiceInstances() : launchdServiceInstances();
+  return mergeServeInstances(found, declared);
+}
+
+// src/cli/link.ts
+function expandHome(p) {
+  const home = process.env.HOME || process.env.USERPROFILE;
+  if (!home) return p;
+  if (p === "~") return home;
+  if (p.startsWith("~/") || p.startsWith("~\\")) return path27.join(home, p.slice(2));
+  return p;
+}
+function installDataDirHint() {
+  if (process.platform === "darwin") return "$HOME/Library/Application Support/zqagent";
+  if (process.platform === "win32") return "%APPDATA%\\zqagent";
+  return "/var/lib/zqagent\uFF08\u9700 root\uFF1B\u666E\u901A\u7528\u6237\u7528 ~/.zqagent_data\uFF09";
+}
+function buildAccountAuth(flags, env3 = process.env) {
+  const username = (flags.username ?? env3.ZQAGENT_HUB_USERNAME ?? "").trim();
+  let email = (flags.email ?? "").trim();
+  let phone = (flags.phone ?? "").trim();
+  if (username && !email && !phone) {
+    if (username.includes("@")) email = username;
+    else phone = username;
+  }
+  if (!email && !phone) return null;
+  const password = flags.password ?? env3.ZQAGENT_HUB_PASSWORD ?? "";
+  const smsCode = (flags.smsCode ?? env3.ZQAGENT_HUB_SMS_CODE ?? "").trim();
+  return {
+    email: email ? email.toLowerCase() : void 0,
+    phone: phone || void 0,
+    password: password || void 0,
+    smsCode: smsCode || void 0
+  };
+}
+function isCompleteAccount(account) {
+  return Boolean(account && (account.password || account.smsCode));
+}
+function parseLinkArgs(argv) {
+  const out = {};
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    const val = argv[i + 1];
+    if (a === "--hub") {
+      out.hubUrl = val;
+      i++;
+    } else if (a === "--code") {
+      out.code = val;
+      i++;
+    } else if (a === "--username" || a === "--user") {
+      out.username = val;
+      i++;
+    } else if (a === "--email") {
+      out.email = val;
+      i++;
+    } else if (a === "--phone") {
+      out.phone = val;
+      i++;
+    } else if (a === "--password") {
+      out.password = val;
+      i++;
+    } else if (a === "--sms-code") {
+      out.smsCode = val;
+      i++;
+    } else if (a === "--data-dir") {
+      out.dataDir = val;
+      i++;
+    } else if (a === "--label") {
+      out.label = val;
+      i++;
+    } else if (a === "--host") {
+      out.host = val;
+      i++;
+    } else if (a === "--port") {
+      out.port = Number(val);
+      i++;
+    } else if (a === "-h" || a === "--help") {
+      out.help = true;
     }
   }
   return out;
@@ -13607,50 +14062,285 @@ function ensureNodeId2(store) {
   }
   return id;
 }
-function createProject(store, input) {
-  const raw = input ?? {};
-  const id = String(raw.id ?? "").trim() || newId();
-  if (store.loadTenant(id)) {
-    throw new ApiError(409, "project_exists", `\u9879\u76EE ${id} \u5DF2\u5B58\u5728`);
+async function probeServer(host, port, adminKey) {
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), 1500);
+  try {
+    const res = await fetch(`http://${host}:${port}/api/v1/fleet/status`, {
+      headers: { Authorization: `Bearer ${adminKey}` },
+      signal: ctrl.signal
+    });
+    return res.ok;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
   }
-  const workspaceRoot = typeof raw.workspaceRoot === "string" && raw.workspaceRoot.trim() ? path25.resolve(raw.workspaceRoot.trim()) : void 0;
-  const explicitName = typeof raw.name === "string" && raw.name.trim() ? raw.name.trim() : "";
-  const defaultName = workspaceRoot ? path25.basename(workspaceRoot) : id;
-  const tenant = {
-    id,
-    name: explicitName || defaultName,
-    apiKey: generateApiKey(),
-    model: typeof raw.model === "string" && raw.model.trim() ? raw.model.trim() : DEFAULT_MODEL(),
-    provider: {
-      apiKey: typeof raw.providerApiKey === "string" && raw.providerApiKey.trim() ? raw.providerApiKey.trim() : void 0,
-      baseURL: typeof raw.baseURL === "string" && raw.baseURL.trim() ? raw.baseURL.trim() : void 0
+}
+async function enrollViaServer(host, port, adminKey, opts) {
+  const res = await fetch(`http://${host}:${port}/api/v1/fleet/enroll`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${adminKey}`
     },
-    workspaceRoot,
-    allowedCommands: Array.isArray(raw.allowedCommands) ? raw.allowedCommands.map((c) => String(c)) : []
-  };
-  const def = nodeDefaultProvider(store);
-  if (def) {
-    if (!tenant.provider?.apiKey && def.apiKey) tenant.provider = { ...tenant.provider, apiKey: def.apiKey };
-    if (!tenant.provider?.baseURL && def.baseURL) tenant.provider = { ...tenant.provider, baseURL: def.baseURL };
-    if (!(typeof raw.model === "string" && raw.model.trim()) && def.model) tenant.model = def.model;
-    const nodeCfg = store.loadNodeLlm();
-    tenant.llmProviders = nodeCfg.providers.map((p) => ({ ...p }));
-    tenant.activeProviderId = nodeCfg.defaultProviderId ?? nodeCfg.providers[0]?.id;
+    body: JSON.stringify({
+      hubUrl: opts.hubUrl,
+      code: opts.code,
+      email: opts.account?.email,
+      phone: opts.account?.phone,
+      password: opts.account?.password,
+      smsCode: opts.account?.smsCode,
+      label: opts.label
+    })
+  });
+  const text = await res.text();
+  let payload = null;
+  try {
+    payload = text ? JSON.parse(text) : null;
+  } catch {
   }
-  store.saveTenant(tenant);
-  return tenant;
+  if (!res.ok) {
+    throw new Error(payload?.error?.message ?? `HTTP ${res.status}`);
+  }
+  return payload?.data;
 }
-function buildNodeInfo(store, opts) {
+function hotWarnings(inst, running) {
+  const warnings = [];
+  const managed = running.filter((r) => r.managed && r.dataDir !== inst.dataDir);
+  if (!inst.managed && managed.length > 0) {
+    warnings.push(
+      `\u51ED\u636E\u5199\u5165\u4E86\u975E\u6258\u7BA1\u5B9E\u4F8B ${inst.dataDir}\uFF0C\u4F46\u672C\u673A\u6258\u7BA1\u670D\u52A1\u4F7F\u7528\u7684\u662F ${managed.map((m) => m.dataDir).join("\u3001")}\u3002`
+    );
+    warnings.push(
+      "\u6258\u7BA1\u670D\u52A1\u8BFB\u4E0D\u5230\u8FD9\u4EFD\u51ED\u636E\uFF08\u91CD\u542F\u540E\u4E5F\u4E0D\u4F1A\u81EA\u52A8\u4E0A\u7EBF\uFF09\uFF0C\u8BF7\u7528 --data-dir \u6307\u5411\u5B83\u7684\u6570\u636E\u76EE\u5F55\u91CD\u65B0\u63A5\u5165\u3002"
+    );
+  }
+  const others = [...new Set(running.map((r) => r.dataDir).filter((d) => d !== inst.dataDir))];
+  if (others.length > 0) {
+    warnings.push(`\u672C\u673A\u8FD8\u6709\u5176\u5B83\u8FD0\u884C\u4E2D\u7684\u8282\u70B9\u5B9E\u4F8B\uFF08\u672A\u5199\u5165\u51ED\u636E\uFF09\uFF1A${others.join("\u3001")}\u3002`);
+  }
+  return warnings;
+}
+async function linkNode(opts) {
+  if (!opts.code && !isCompleteAccount(opts.account ?? null)) {
+    throw new Error("\u7F3A\u5C11\u63A5\u5165\u7801\uFF0C\u6216 Hub \u8D26\u53F7\u5BC6\u7801/\u77ED\u4FE1\u9A8C\u8BC1\u7801");
+  }
+  const hubUrl = opts.hubUrl.trim().replace(/\/$/, "");
+  if (!hubUrl) throw new Error("\u7F3A\u5C11 Hub \u5730\u5740");
+  const rawDataDir = opts.dataDir?.trim() || process.env.DATA_DIR?.trim() || void 0;
+  const explicitDataDir = rawDataDir ? expandHome(rawDataDir) : void 0;
+  const host = opts.host?.trim() || process.env.HOST?.trim() || DEFAULT_SERVE_HOST;
+  const port = opts.port ?? Number(process.env.PORT ?? DEFAULT_SERVE_PORT);
+  const running = discoverRunningServeInstances();
+  const candidates = buildHotCandidates(explicitDataDir, running, { host, port });
+  for (const inst of candidates) {
+    const store2 = new Store(inst.dataDir);
+    const adminKey = process.env.ADMIN_API_KEY ?? store2.loadAdminKey();
+    if (!adminKey) continue;
+    if (!await probeServer(inst.host, inst.port, adminKey)) continue;
+    const status = await enrollViaServer(inst.host, inst.port, adminKey, { ...opts, hubUrl });
+    return {
+      mode: "hot",
+      ...status,
+      dataDir: inst.dataDir,
+      managed: inst.managed,
+      warnings: hotWarnings(inst, running)
+    };
+  }
+  const managedDir = running.find((r) => r.managed)?.dataDir;
+  const dataDir = path27.resolve(explicitDataDir ?? managedDir ?? DEFAULT_DATA_DIR);
+  const targetedService = !explicitDataDir && Boolean(managedDir) && dataDir === managedDir;
+  const store = new Store(dataDir);
+  const nodeId = ensureNodeId2(store);
+  const account = opts.account;
+  const cred = account && isCompleteAccount(account) ? await hubEnrollByAccount(hubUrl, {
+    email: account.email,
+    phone: account.phone,
+    password: account.password,
+    code: account.smsCode,
+    nodeId,
+    label: opts.label
+  }) : await hubEnrollByCode(hubUrl, {
+    code: opts.code,
+    nodeId,
+    label: opts.label
+  });
+  try {
+    store.saveFleetCredential({
+      ...cred,
+      label: opts.label ?? cred.label,
+      enrolledAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+  } catch (e) {
+    const err = e;
+    if (err.code === "EACCES" || err.code === "EPERM") {
+      throw new Error(
+        `\u65E0\u6CD5\u5199\u5165\u6570\u636E\u76EE\u5F55 ${dataDir}\uFF08${err.code}: ${err.message}\uFF09
+  \u8BE5\u76EE\u5F55\u5F53\u524D\u7528\u6237\u6CA1\u6709\u5199\u6743\u9650\u3002\u4E24\u79CD\u6539\u6CD5\uFF1A
+    1) \u53BB\u6389 --data-dir\uFF0C\u8BA9 link \u81EA\u52A8\u53D1\u73B0\u672C\u673A\u8FD0\u884C\u7684\u8282\u70B9\uFF08\u63A8\u8350\uFF09\uFF1B
+    2) \u7528\u5F53\u524D\u7528\u6237\u53EF\u5199\u7684\u76EE\u5F55\uFF0C\u672C\u5E73\u53F0\u5B89\u88C5\u811A\u672C\u9ED8\u8BA4\uFF1A${installDataDirHint()}
+  \uFF08\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF0C\u9700\u8981\u91CD\u65B0\u751F\u6210\uFF1B\u8D26\u53F7\u65B9\u5F0F\u53EF\u91CD\u590D\u4F7F\u7528\uFF09`
+      );
+    }
+    throw e;
+  }
+  const otherRunningDirs = [
+    ...new Set(running.map((r) => r.dataDir).filter((d) => d !== dataDir))
+  ];
   return {
-    nodeId: opts.nodeId ?? ensureNodeId2(store),
-    platform: process.platform,
-    mode: process.env.NODE_MODE ?? "standalone",
-    version: "0.2.10",
-    admin: opts.admin,
-    projects: opts.projects
+    mode: "saved",
+    nodeId,
+    gatewayUrl: cred.gatewayUrl,
+    label: opts.label,
+    dataDir,
+    explicitDataDir: Boolean(explicitDataDir),
+    runningServiceDirs: otherRunningDirs,
+    targetedService
+  };
+}
+function printLinkHelp() {
+  cliLog("\u7528\u6CD5: zqagent link [--hub <url>] [--username <\u90AE\u7BB1/\u624B\u673A\u53F7> --password <\u5BC6\u7801>] [--label \u540D\u79F0]");
+  cliLog("      zqagent link [--hub <url>] --code <\u4E00\u6B21\u6027\u63A5\u5165\u7801> [--label \u540D\u79F0]");
+  cliLog("  \u65B9\u5F0F\u4E00\uFF08\u63A8\u8350\uFF09\uFF1A\u7528 Hub \u5DF2\u6CE8\u518C\u7684\u8D26\u53F7\u76F4\u63A5\u63A5\u5165\uFF1A");
+  cliLog("    zqagent link --hub https://hub.cd-zq.com --username you@example.com --password '<\u5BC6\u7801>'");
+  cliLog("    zqagent link --hub https://hub.cd-zq.com --username 13800000000 --password '<\u5BC6\u7801>'");
+  cliLog("    zqagent link --hub https://hub.cd-zq.com --username 13800000000 --sms-code <\u9A8C\u8BC1\u7801>");
+  cliLog("  \u65B9\u5F0F\u4E8C\uFF1A\u5728 Hub\u300C\u8282\u70B9\u7BA1\u7406\u300D\u751F\u6210\u4E00\u6B21\u6027\u63A5\u5165\u7801\uFF0815 \u5206\u949F\u6709\u6548\uFF09\uFF1A");
+  cliLog("    zqagent link --hub https://hub.cd-zq.com --code <\u63A5\u5165\u7801>");
+  cliLog("  \u4E0D\u5E26\u51ED\u636E\u53C2\u6570\u65F6\u8FDB\u5165\u4EA4\u4E92\u5411\u5BFC\uFF08\u9700\u7EC8\u7AEF\uFF09\uFF1B\u5BC6\u7801\u4E5F\u53EF\u7528 ZQAGENT_HUB_PASSWORD \u63D0\u4F9B\u3002");
+  cliLog("  \u672C\u673A\u5DF2\u88C5\u8282\u70B9\u670D\u52A1\uFF08install.sh / \u684C\u9762\u7AEF\uFF09\u65F6\u4F1A\u81EA\u52A8\u53D1\u73B0\u5B83\u7684\u6570\u636E\u76EE\u5F55\u5E76\u70ED\u63A5\u5165\uFF0C");
+  cliLog("  \u4E0D\u9700\u8981\u624B\u52A8\u6307\u5B9A --data-dir\uFF1B\u670D\u52A1\u6CA1\u5728\u8FD0\u884C\u65F6\u4F1A\u5199\u5165\u5B83\u7684\u76EE\u5F55\uFF0C\u4E0B\u6B21\u542F\u52A8\u5373\u63A5\u5165\u3002");
+  cliLog("  \u4EC5\u5F53\u672C\u673A\u5B8C\u5168\u6CA1\u6709\u670D\u52A1\u65F6\u624D\u9700\u8981 --data-dir \u6307\u5B9A\u76EE\u5F55\uFF08\u4E0B\u6B21\u542F\u52A8 serve \u65F6\u751F\u6548\uFF09\u3002");
+}
+async function runLinkCommand(argv, ctx = {}) {
+  const args = parseLinkArgs(argv);
+  if (args.help) {
+    printLinkHelp();
+    return true;
+  }
+  const explicitHub = Boolean((args.hubUrl ?? process.env.HUB_URL ?? "").trim());
+  let hubUrl = (args.hubUrl ?? process.env.HUB_URL ?? DEFAULT_HUB_URL).trim().replace(/\/$/, "");
+  const code = (args.code ?? "").trim();
+  let account = buildAccountAuth(args);
+  const interactive = ctx.interactive ?? (process.stdin.isTTY && process.stdout.isTTY);
+  if (code && account) {
+    cliErr("--code \u4E0E Hub \u8D26\u53F7\uFF08--username/--email/--phone/--password\uFF09\u53EA\u80FD\u4E8C\u9009\u4E00\u3002");
+    return false;
+  }
+  if (!account && (args.password || args.smsCode)) {
+    cliErr("\u63D0\u4F9B\u4E86\u5BC6\u7801/\u77ED\u4FE1\u9A8C\u8BC1\u7801\uFF0C\u4F46\u7F3A\u5C11\u8D26\u53F7\uFF1A\u8BF7\u52A0 --username\u3001--email \u6216 --phone\u3002");
+    return false;
+  }
+  const asPrompter = (rl2) => ({
+    question: (q) => new Promise((resolve24) => rl2.question(q, resolve24)),
+    pause: () => rl2.pause(),
+    resume: () => rl2.resume()
+  });
+  let ownedRl = null;
+  const getRl = () => {
+    if (ctx.rl) return asPrompter(ctx.rl);
+    if (!interactive) return null;
+    ownedRl = readline2.createInterface({ input: process.stdin, output: process.stdout });
+    return asPrompter(ownedRl);
   };
+  const closeOwnedRl = () => {
+    if (ownedRl) ownedRl.close();
+  };
+  try {
+    if (!code && !isCompleteAccount(account)) {
+      const rl2 = getRl();
+      if (!rl2) {
+        cliErr("\u7F3A\u5C11\u63A5\u5165\u51ED\u636E\uFF1A\u8BF7\u7528 --username/--password\uFF0C\u6216 --code <\u63A5\u5165\u7801>\u3002");
+        printLinkHelp();
+        return false;
+      }
+      if (account) {
+        const password = await promptPassword(rl2);
+        if (!password) {
+          cliErr("\u5BC6\u7801\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u53D6\u6D88\u63A5\u5165\u3002");
+          return false;
+        }
+        account = { ...account, password };
+      } else {
+        const prompted = await promptLinkAccount(rl2, hubUrl, { askHub: !explicitHub });
+        if (!prompted) return true;
+        hubUrl = prompted.hubUrl;
+        account = {
+          email: prompted.auth.email,
+          phone: prompted.auth.phone,
+          password: prompted.auth.password,
+          smsCode: prompted.auth.code
+        };
+      }
+    }
+    const r = await linkNode({
+      hubUrl,
+      code: code || void 0,
+      account: account ?? void 0,
+      dataDir: args.dataDir,
+      label: args.label,
+      host: args.host,
+      port: args.port
+    });
+    if (r.mode === "hot") {
+      cliLog("\u2705 \u5DF2\u63A5\u5165 Hub\uFF08\u70ED\u63A5\u5165\uFF0C\u514D\u91CD\u542F\uFF09");
+      cliLog(`   \u8282\u70B9: ${r.nodeId}${r.label ? ` (${r.label})` : ""}`);
+      cliLog(`   \u7F51\u5173: ${r.gatewayUrl ?? "\uFF08\u672A\u4E0B\u53D1\uFF09"}    \u5728\u7EBF: ${r.online ? "\u662F" : "\u8FDE\u63A5\u4E2D\u2026"}`);
+      cliLog(`   \u6570\u636E\u76EE\u5F55: ${r.dataDir}${r.managed ? "\uFF08\u6258\u7BA1\u670D\u52A1\uFF0C\u5F00\u673A\u81EA\u542F\uFF09" : ""}`);
+      if (r.warnings.length > 0) {
+        cliLog("");
+        for (const w of r.warnings) cliLog(`\u26A0\uFE0F  ${w}`);
+      }
+    } else {
+      cliLog("\u2705 \u63A5\u5165\u51ED\u636E\u5DF2\u4FDD\u5B58\uFF08\u672C\u673A\u6682\u65E0\u8FD0\u884C\u4E2D\u7684 server\uFF09");
+      cliLog(`   \u8282\u70B9: ${r.nodeId}`);
+      cliLog(`   \u7F51\u5173: ${r.gatewayUrl ?? "\uFF08\u672A\u4E0B\u53D1\uFF09"}`);
+      cliLog(`   \u6570\u636E\u76EE\u5F55: ${r.dataDir}`);
+      cliLog("   \u4E0B\u6B21\u542F\u52A8 server \u5373\u81EA\u52A8\u63A5\u5165\uFF1B\u6216\u8FD0\u884C zqagent serve \u5E38\u9A7B\u4E3A\u8282\u70B9\u3002");
+      if (r.targetedService) {
+        cliLog("");
+        cliLog("\u2705 \u51ED\u636E\u5DF2\u5199\u5165\u672C\u673A\u6258\u7BA1\u670D\u52A1\u7684\u6570\u636E\u76EE\u5F55\uFF0C\u670D\u52A1\u542F\u52A8\u65F6\u81EA\u52A8\u63A5\u5165\uFF0C\u65E0\u9700 --data-dir\u3002");
+        cliLog("   \u7ACB\u5373\u751F\u6548\uFF1A\u91CD\u542F\u8BE5\u670D\u52A1\uFF08Linux: systemctl restart zqagent\uFF1B");
+        cliLog("   macOS: launchctl kickstart -k gui/$(id -u)/com.zqagent.node\uFF09\u3002");
+      } else if (r.runningServiceDirs.length > 0) {
+        cliLog("");
+        cliLog("\u26A0\uFE0F  \u672C\u673A\u6709\u6B63\u5728\u8FD0\u884C\u7684\u8282\u70B9\uFF0C\u4F46\u6570\u636E\u76EE\u5F55\u4E0E\u672C\u6B21\u5199\u5165\u7684\u4E0D\u4E00\u81F4\uFF1A");
+        cliLog(`    \u672C\u6B21\u5199\u5165: ${r.dataDir}`);
+        for (const d of r.runningServiceDirs) cliLog(`    \u670D\u52A1\u4F7F\u7528: ${d}`);
+        cliLog("    \u6B63\u5728\u8FD0\u884C\u7684\u670D\u52A1\u8BFB\u4E0D\u5230\u8FD9\u4EFD\u51ED\u636E\uFF0CHub \u4F1A\u4E00\u76F4\u663E\u793A\u672A\u63A5\u5165\u3002");
+        cliLog("    \u8BF7\u786E\u8BA4\u670D\u52A1\u7684\u6570\u636E\u76EE\u5F55\u540E\u91CD\u65B0\u6267\u884C\uFF08\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF1B\u8D26\u53F7\u65B9\u5F0F\u53EF\u91CD\u590D\u4F7F\u7528\uFF09\uFF1A");
+        cliLog(`      zqagent link --hub <Hub\u5730\u5740> --username <\u90AE\u7BB1/\u624B\u673A\u53F7> --password '<\u5BC6\u7801>' --data-dir "${r.runningServiceDirs[0]}"`);
+      } else if (!r.explicitDataDir) {
+        cliLog("");
+        cliLog("\u26A0\uFE0F  \u672A\u53D1\u73B0\u672C\u673A\u8282\u70B9\u670D\u52A1\uFF0C\u51ED\u636E\u5199\u5165\u4E86\u5F53\u524D\u76EE\u5F55\u4E0B\u7684 .zqagent_data\u3002");
+        cliLog("    \u5982\u679C\u8FD9\u53F0\u673A\u5668\u6253\u7B97\u957F\u671F\u8FD0\u884C\u8282\u70B9\uFF0C\u8BF7\u5148\u5B89\u88C5\u5F00\u673A\u670D\u52A1\uFF0C\u4E4B\u540E link \u4F1A\u81EA\u52A8\u5199\u5165\u5B83\u7684\u76EE\u5F55\uFF1A");
+        cliLog("      curl -fsSL https://agent.cd-zq.com/install.sh | sh");
+        cliLog(`      \uFF08\u670D\u52A1\u9ED8\u8BA4\u6570\u636E\u76EE\u5F55\uFF1A${installDataDirHint()}\uFF09`);
+      }
+    }
+    return true;
+  } catch (e) {
+    cliErr(`\u63A5\u5165\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`);
+    return false;
+  } finally {
+    closeOwnedRl();
+  }
 }
 
+// src/cli/serve.ts
+init_cjs_shims();
+
+// src/server/runtime.ts
+init_cjs_shims();
+var fs31 = __toESM(require("fs"), 1);
+var path38 = __toESM(require("path"), 1);
+
+// src/server/routes.ts
+init_cjs_shims();
+var import_http = require("http");
+var path31 = __toESM(require("path"), 1);
+
 // src/server/auth.ts
 init_cjs_shims();
 var crypto4 = __toESM(require("crypto"), 1);
@@ -13824,34 +14514,34 @@ async function handleHubProxy(req2, res) {
 
 // src/server/fsBrowser.ts
 init_cjs_shims();
-var fs21 = __toESM(require("fs"), 1);
-var os4 = __toESM(require("os"), 1);
-var path26 = __toESM(require("path"), 1);
+var fs22 = __toESM(require("fs"), 1);
+var os6 = __toESM(require("os"), 1);
+var path28 = __toESM(require("path"), 1);
 var MAX_ENTRIES = 2e3;
 var DEFAULT_SEARCH_LIMIT = 200;
 var MAX_SEARCH_LIMIT = 1e3;
 function listDirs(input) {
-  const base = (input ?? "").trim() || os4.homedir();
-  const target = path26.resolve(base);
+  const base = (input ?? "").trim() || os6.homedir();
+  const target = path28.resolve(base);
   let st;
   try {
-    st = fs21.statSync(target);
+    st = fs22.statSync(target);
   } catch {
     throw new Error(`\u8DEF\u5F84\u4E0D\u5B58\u5728: ${target}`);
   }
   if (!st.isDirectory()) throw new Error(`\u4E0D\u662F\u76EE\u5F55: ${target}`);
   let dirents;
   try {
-    dirents = fs21.readdirSync(target, { withFileTypes: true });
+    dirents = fs22.readdirSync(target, { withFileTypes: true });
   } catch {
     throw new Error(`\u65E0\u6CD5\u8BFB\u53D6\u76EE\u5F55\uFF08\u6743\u9650\u4E0D\u8DB3\uFF1F\uFF09: ${target}`);
   }
   const entries = dirents.map((d) => {
-    const full = path26.join(target, d.name);
+    const full = path28.join(target, d.name);
     let isDir = d.isDirectory();
     if (d.isSymbolicLink()) {
       try {
-        isDir = fs21.statSync(full).isDirectory();
+        isDir = fs22.statSync(full).isDirectory();
       } catch {
       }
     }
@@ -13860,7 +14550,7 @@ function listDirs(input) {
   entries.sort(
     (a, b) => a.type === b.type ? a.name.localeCompare(b.name) : a.type === "dir" ? -1 : 1
   );
-  const parentDir = path26.dirname(target);
+  const parentDir = path28.dirname(target);
   return {
     path: target,
     parent: parentDir !== target ? parentDir : null,
@@ -13891,7 +14581,7 @@ var NAME_CACHE_MAX_DIRS = 4;
 var NAME_CACHE_MAX_ENTRIES = 5e4;
 var nameCache = /* @__PURE__ */ new Map();
 function invalidateDirNames(target) {
-  nameCache.delete(path26.resolve(target));
+  nameCache.delete(path28.resolve(target));
 }
 async function loadDirNames(target) {
   const now = Date.now();
@@ -13903,7 +14593,7 @@ async function loadDirNames(target) {
   }
   let dirents;
   try {
-    dirents = await fs21.promises.readdir(target, { withFileTypes: true });
+    dirents = await fs22.promises.readdir(target, { withFileTypes: true });
   } catch {
     throw new Error(`\u65E0\u6CD5\u8BFB\u53D6\u76EE\u5F55\uFF08\u6743\u9650\u4E0D\u8DB3\uFF1F\uFF09: ${target}`);
   }
@@ -13926,22 +14616,22 @@ async function loadDirNames(target) {
   return entries;
 }
 async function toDirEntry(dir, e) {
-  const full = path26.join(dir, e.name);
+  const full = path28.join(dir, e.name);
   let isDir = e.isDir;
   if (e.isLink) {
     try {
-      isDir = (await fs21.promises.stat(full)).isDirectory();
+      isDir = (await fs22.promises.stat(full)).isDirectory();
     } catch {
     }
   }
   return { name: e.name, path: full, type: isDir ? "dir" : "file" };
 }
 async function searchDirs(input, query, limit) {
-  const base = (input ?? "").trim() || os4.homedir();
-  const target = path26.resolve(base);
+  const base = (input ?? "").trim() || os6.homedir();
+  const target = path28.resolve(base);
   let st;
   try {
-    st = await fs21.promises.stat(target);
+    st = await fs22.promises.stat(target);
   } catch {
     throw new Error(`\u8DEF\u5F84\u4E0D\u5B58\u5728: ${target}`);
   }
@@ -13971,7 +14661,7 @@ async function searchDirs(input, query, limit) {
   );
   const hit = scored.slice(0, max);
   const entries = await Promise.all(hit.map(({ entry }) => toDirEntry(target, entry)));
-  const parentDir = path26.dirname(target);
+  const parentDir = path28.dirname(target);
   return {
     path: target,
     parent: parentDir !== target ? parentDir : null,
@@ -13982,52 +14672,52 @@ async function searchDirs(input, query, limit) {
   };
 }
 function makeDirIn(parentInput, name) {
-  const parent = path26.resolve((parentInput ?? "").trim() || os4.homedir());
+  const parent = path28.resolve((parentInput ?? "").trim() || os6.homedir());
   const clean = (name ?? "").trim();
   if (!clean) throw new Error("\u76EE\u5F55\u540D\u4E0D\u80FD\u4E3A\u7A7A");
   if (clean === "." || clean === "..") throw new Error("\u76EE\u5F55\u540D\u975E\u6CD5");
-  const target = path26.resolve(parent, clean);
-  const rel = path26.relative(parent, target);
-  if (!rel || rel.startsWith("..") || path26.isAbsolute(rel)) {
+  const target = path28.resolve(parent, clean);
+  const rel = path28.relative(parent, target);
+  if (!rel || rel.startsWith("..") || path28.isAbsolute(rel)) {
     throw new Error("\u76EE\u5F55\u540D\u4E0D\u80FD\u8D8A\u51FA\u5F53\u524D\u76EE\u5F55");
   }
   let st = null;
   try {
-    st = fs21.statSync(target);
+    st = fs22.statSync(target);
   } catch {
     st = null;
   }
   if (st && !st.isDirectory()) throw new Error(`\u5DF2\u5B58\u5728\u540C\u540D\u6587\u4EF6: ${target}`);
   try {
-    fs21.mkdirSync(target, { recursive: true });
+    fs22.mkdirSync(target, { recursive: true });
   } catch (e) {
     throw new Error(`\u521B\u5EFA\u76EE\u5F55\u5931\u8D25: ${e instanceof Error ? e.message : String(e)}`);
   }
   invalidateDirNames(parent);
-  return { name: path26.basename(target), path: target, type: "dir" };
+  return { name: path28.basename(target), path: target, type: "dir" };
 }
 
 // src/server/projectFiles.ts
 init_cjs_shims();
-var fs22 = __toESM(require("fs"), 1);
-var path27 = __toESM(require("path"), 1);
+var fs23 = __toESM(require("fs"), 1);
+var path29 = __toESM(require("path"), 1);
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 var MAX_DOWNLOAD_BYTES = 16 * 1024 * 1024;
 var MAX_ENTRIES2 = 2e3;
 function toPosix(p) {
-  return p.split(path27.sep).join("/");
+  return p.split(path29.sep).join("/");
 }
 function projectRoot(workspaceRoot) {
   const r = (workspaceRoot ?? "").trim();
   if (!r) {
     throw new Error("\u9879\u76EE\u672A\u8BBE\u7F6E\u5DE5\u4F5C\u533A\u76EE\u5F55\uFF08workspaceRoot\uFF09\uFF0C\u65E0\u6CD5\u6D4F\u89C8\u6587\u4EF6");
   }
-  const abs = path27.resolve(r);
-  if (!fs22.existsSync(abs)) {
+  const abs = path29.resolve(r);
+  if (!fs23.existsSync(abs)) {
     throw new Error(`\u5DE5\u4F5C\u533A\u76EE\u5F55\u4E0D\u5B58\u5728: ${abs}`);
   }
   try {
-    return fs22.realpathSync(abs);
+    return fs23.realpathSync(abs);
   } catch {
     return abs;
   }
@@ -14045,37 +14735,37 @@ function listProjectFiles(workspaceRoot, relPath) {
   const dir = resolveWithin(base, relPath ?? "");
   let st;
   try {
-    st = fs22.statSync(dir);
+    st = fs23.statSync(dir);
   } catch {
-    throw new Error(`\u76EE\u5F55\u4E0D\u5B58\u5728: ${toPosix(path27.relative(base, dir)) || "/"}`);
+    throw new Error(`\u76EE\u5F55\u4E0D\u5B58\u5728: ${toPosix(path29.relative(base, dir)) || "/"}`);
   }
   if (!st.isDirectory()) throw new Error("\u76EE\u6807\u4E0D\u662F\u76EE\u5F55");
   let dirents;
   try {
-    dirents = fs22.readdirSync(dir, { withFileTypes: true });
+    dirents = fs23.readdirSync(dir, { withFileTypes: true });
   } catch {
     throw new Error("\u65E0\u6CD5\u8BFB\u53D6\u76EE\u5F55\uFF08\u6743\u9650\u4E0D\u8DB3\uFF1F\uFF09");
   }
   const entries = dirents.map((d) => {
-    const full = path27.join(dir, d.name);
+    const full = path29.join(dir, d.name);
     let isDir = d.isDirectory();
     if (d.isSymbolicLink()) {
       try {
-        isDir = fs22.statSync(full).isDirectory();
+        isDir = fs23.statSync(full).isDirectory();
       } catch {
       }
     }
     let size = 0;
     let mtime = "";
     try {
-      const s = fs22.statSync(full);
+      const s = fs23.statSync(full);
       size = s.size;
       mtime = s.mtime.toISOString();
     } catch {
     }
     return {
       name: d.name,
-      path: toPosix(path27.relative(base, full)),
+      path: toPosix(path29.relative(base, full)),
       type: isDir ? "dir" : "file",
       size,
       mtime
@@ -14084,12 +14774,12 @@ function listProjectFiles(workspaceRoot, relPath) {
   entries.sort(
     (a, b) => a.type === b.type ? a.name.localeCompare(b.name) : a.type === "dir" ? -1 : 1
   );
-  const relDir = toPosix(path27.relative(base, dir));
-  const parentAbs = path27.dirname(dir);
+  const relDir = toPosix(path29.relative(base, dir));
+  const parentAbs = path29.dirname(dir);
   return {
     root: base,
     path: relDir,
-    parent: isWithinRoot(base, parentAbs) ? toPosix(path27.relative(base, parentAbs)) : null,
+    parent: isWithinRoot(base, parentAbs) ? toPosix(path29.relative(base, parentAbs)) : null,
     entries: entries.slice(0, MAX_ENTRIES2)
   };
 }
@@ -14098,17 +14788,17 @@ function readProjectFile(workspaceRoot, relPath) {
   const file = resolveWithin(base, relPath ?? "");
   let st;
   try {
-    st = fs22.statSync(file);
+    st = fs23.statSync(file);
   } catch {
     throw new Error("\u6587\u4EF6\u4E0D\u5B58\u5728");
   }
   if (!st.isFile()) throw new Error("\u76EE\u6807\u4E0D\u662F\u6587\u4EF6");
-  const buf = fs22.readFileSync(file);
+  const buf = fs23.readFileSync(file);
   const binary = isBinary(buf);
   const truncated = buf.length > MAX_FILE_BYTES;
   const slice = truncated ? buf.subarray(0, MAX_FILE_BYTES) : buf;
   return {
-    path: toPosix(path27.relative(base, file)),
+    path: toPosix(path29.relative(base, file)),
     size: st.size,
     binary,
     truncated,
@@ -14120,7 +14810,7 @@ function downloadProjectFile(workspaceRoot, relPath) {
   const file = resolveWithin(base, relPath ?? "");
   let st;
   try {
-    st = fs22.statSync(file);
+    st = fs23.statSync(file);
   } catch {
     throw new Error("\u6587\u4EF6\u4E0D\u5B58\u5728");
   }
@@ -14128,10 +14818,10 @@ function downloadProjectFile(workspaceRoot, relPath) {
   if (st.size > MAX_DOWNLOAD_BYTES) {
     throw new Error(`\u6587\u4EF6\u8D85\u8FC7\u4E0B\u8F7D\u4E0A\u9650\uFF08${MAX_DOWNLOAD_BYTES / (1024 * 1024)}MB\uFF09`);
   }
-  const buf = fs22.readFileSync(file);
+  const buf = fs23.readFileSync(file);
   return {
-    path: toPosix(path27.relative(base, file)),
-    name: path27.basename(file),
+    path: toPosix(path29.relative(base, file)),
+    name: path29.basename(file),
     size: buf.length,
     base64: buf.toString("base64")
   };
@@ -14153,12 +14843,12 @@ function writeProjectFile(workspaceRoot, relPath, content) {
     throw new Error("\u5185\u5BB9\u8D85\u8FC7 2MB \u4E0A\u9650\uFF0C\u65E0\u6CD5\u4FDD\u5B58");
   }
   try {
-    fs22.mkdirSync(path27.dirname(file), { recursive: true });
-    fs22.writeFileSync(file, buf);
+    fs23.mkdirSync(path29.dirname(file), { recursive: true });
+    fs23.writeFileSync(file, buf);
   } catch (e) {
     throw new Error(`\u5199\u5165\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
   }
-  return { path: toPosix(path27.relative(base, file)), size: buf.length };
+  return { path: toPosix(path29.relative(base, file)), size: buf.length };
 }
 function createProjectDir(workspaceRoot, relPath) {
   const base = projectRoot(workspaceRoot);
@@ -14166,26 +14856,26 @@ function createProjectDir(workspaceRoot, relPath) {
   if (!rel) throw new Error("\u76EE\u5F55\u8DEF\u5F84\u4E0D\u80FD\u4E3A\u7A7A");
   const dir = resolveWithin(base, rel);
   try {
-    fs22.mkdirSync(dir, { recursive: true });
+    fs23.mkdirSync(dir, { recursive: true });
   } catch (e) {
     throw new Error(`\u521B\u5EFA\u76EE\u5F55\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
   }
-  return { path: toPosix(path27.relative(base, dir)) };
+  return { path: toPosix(path29.relative(base, dir)) };
 }
 function createProjectFile(workspaceRoot, relPath, content = "") {
   const base = projectRoot(workspaceRoot);
   const rel = (relPath ?? "").trim();
   if (!rel) throw new Error("\u6587\u4EF6\u8DEF\u5F84\u4E0D\u80FD\u4E3A\u7A7A");
   const file = resolveWithin(base, rel);
-  if (fs22.existsSync(file)) throw new Error("\u6587\u4EF6\u5DF2\u5B58\u5728");
+  if (fs23.existsSync(file)) throw new Error("\u6587\u4EF6\u5DF2\u5B58\u5728");
   const buf = Buffer.from(String(content ?? ""), "utf-8");
   try {
-    fs22.mkdirSync(path27.dirname(file), { recursive: true });
-    fs22.writeFileSync(file, buf);
+    fs23.mkdirSync(path29.dirname(file), { recursive: true });
+    fs23.writeFileSync(file, buf);
   } catch (e) {
     throw new Error(`\u521B\u5EFA\u6587\u4EF6\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
   }
-  return { path: toPosix(path27.relative(base, file)), size: buf.length };
+  return { path: toPosix(path29.relative(base, file)), size: buf.length };
 }
 function searchProjectFiles(workspaceRoot, query) {
   const base = projectRoot(workspaceRoot);
@@ -14208,7 +14898,7 @@ function searchProjectFiles(workspaceRoot, query) {
     if (out.length >= LIMIT) return;
     let dirents;
     try {
-      dirents = fs22.readdirSync(dir, { withFileTypes: true });
+      dirents = fs23.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -14219,7 +14909,7 @@ function searchProjectFiles(workspaceRoot, query) {
       let isDir = d.isDirectory();
       if (d.isSymbolicLink()) {
         try {
-          isDir = fs22.statSync(path27.join(dir, d.name)).isDirectory();
+          isDir = fs23.statSync(path29.join(dir, d.name)).isDirectory();
         } catch {
           isDir = false;
         }
@@ -14227,7 +14917,7 @@ function searchProjectFiles(workspaceRoot, query) {
       if (d.name.toLowerCase().includes(q)) {
         out.push({ path: rel, type: isDir ? "dir" : "file" });
       }
-      if (isDir) walk(path27.join(dir, d.name), rel);
+      if (isDir) walk(path29.join(dir, d.name), rel);
     }
   };
   walk(base, "");
@@ -14236,8 +14926,8 @@ function searchProjectFiles(workspaceRoot, query) {
 
 // src/server/projectOps.ts
 init_cjs_shims();
-var os5 = __toESM(require("os"), 1);
-var path28 = __toESM(require("path"), 1);
+var os7 = __toESM(require("os"), 1);
+var path30 = __toESM(require("path"), 1);
 var MAX_STDOUT2 = 2e4;
 var MAX_STDERR2 = 1e4;
 var MAX_BUFFER3 = 1024 * 1024 * 5;
@@ -14251,7 +14941,7 @@ function resolveInvocation2(spec, prepared) {
 }
 function workRoot(workspaceRoot) {
   const r = (workspaceRoot ?? "").trim();
-  return r ? path28.resolve(r) : os5.homedir();
+  return r ? path30.resolve(r) : os7.homedir();
 }
 async function runProjectCommand(workspaceRoot, command, timeoutSeconds) {
   const cmd = String(command ?? "");
@@ -14562,11 +15252,11 @@ function projectStats(manager, tenantId) {
 
 // src/server/nodeHost.ts
 init_cjs_shims();
-var fs23 = __toESM(require("fs"), 1);
-var os6 = __toESM(require("os"), 1);
+var fs24 = __toESM(require("fs"), 1);
+var os8 = __toESM(require("os"), 1);
 function diskInfo(pathStr) {
   try {
-    const st = fs23.statfsSync(pathStr);
+    const st = fs24.statfsSync(pathStr);
     return {
       path: pathStr,
       total: Number(st.blocks) * Number(st.bsize),
@@ -14578,7 +15268,7 @@ function diskInfo(pathStr) {
 }
 function networkInfo() {
   const out = [];
-  const ifaces = os6.networkInterfaces();
+  const ifaces = os8.networkInterfaces();
   for (const [name, list] of Object.entries(ifaces)) {
     for (const info of list ?? []) {
       out.push({
@@ -14629,23 +15319,23 @@ function overview(store, manager) {
   return { projects, sessions: { total, running, waiting, items }, usage: { tokensIn, tokensOut } };
 }
 function buildNodeHost(store, manager, diskPath) {
-  const cpus2 = os6.cpus();
+  const cpus2 = os8.cpus();
   const ov = overview(store, manager);
   return {
     nodeId: store.loadNodeId() ?? "",
-    hostname: os6.hostname(),
+    hostname: os8.hostname(),
     platform: process.platform,
     arch: process.arch,
-    release: os6.release(),
-    uptimeSec: Math.round(os6.uptime()),
-    version: "0.2.10",
+    release: os8.release(),
+    uptimeSec: Math.round(os8.uptime()),
+    version: "0.2.12",
     mode: process.env.NODE_MODE ?? "standalone",
     cpu: {
       count: cpus2.length,
       model: cpus2[0]?.model ?? "",
-      loadAvg: os6.loadavg().map((n) => Math.round(n * 100) / 100)
+      loadAvg: os8.loadavg().map((n) => Math.round(n * 100) / 100)
     },
-    memory: { total: os6.totalmem(), free: os6.freemem() },
+    memory: { total: os8.totalmem(), free: os8.freemem() },
     network: networkInfo(),
     disk: diskInfo(diskPath || process.cwd()),
     ...ov
@@ -15008,7 +15698,7 @@ function createApp(store, manager, opts = {}) {
         ok(res, opts.fleet.status());
       }
     },
-    // 运行时热接入：凭一次性注册码接入 Hub（落盘 fleet.json + 立即连接，免重启）
+    // 运行时热接入：凭一次性注册码或 Hub 账号接入（落盘 fleet.json + 立即连接，免重启）
     {
       method: "POST",
       pattern: ["fleet", "enroll"],
@@ -15020,15 +15710,42 @@ function createApp(store, manager, opts = {}) {
         const raw = body ?? {};
         const hubUrl = String(raw.hubUrl ?? "").trim().replace(/\/$/, "");
         const code = String(raw.code ?? "").trim();
-        if (!hubUrl || !code) {
-          throw new ApiError(400, "bad_request", "hubUrl \u4E0E code \u5FC5\u586B");
+        const email = String(raw.email ?? "").trim();
+        const phone = String(raw.phone ?? "").trim();
+        const password = String(raw.password ?? "");
+        const smsCode = String(raw.smsCode ?? "").trim();
+        const hasAccount = Boolean(email || phone);
+        if (!hubUrl) {
+          throw new ApiError(400, "bad_request", "hubUrl \u5FC5\u586B");
+        }
+        if (code && hasAccount) {
+          throw new ApiError(400, "bad_request", "code \u4E0E\u8D26\u53F7\u51ED\u636E\u53EA\u80FD\u4E8C\u9009\u4E00");
+        }
+        if (!code && !hasAccount) {
+          throw new ApiError(400, "bad_request", "\u9700\u8981 code\uFF0C\u6216 email/phone + password/smsCode");
+        }
+        if (hasAccount && !password && !smsCode) {
+          throw new ApiError(400, "bad_request", "\u8D26\u53F7\u63A5\u5165\u9700\u8981 password \u6216 smsCode");
         }
         const label = typeof raw.label === "string" ? raw.label.trim() : void 0;
         try {
-          ok(res, await opts.fleet.enroll({ hubUrl, code, label }));
+          ok(
+            res,
+            await opts.fleet.enroll({
+              hubUrl,
+              code: code || void 0,
+              account: hasAccount ? {
+                email: email || void 0,
+                phone: phone || void 0,
+                password: password || void 0,
+                smsCode: smsCode || void 0
+              } : void 0,
+              label
+            })
+          );
         } catch (e) {
           const code2 = e.code;
-          const status = code2 === "code_expired" ? 410 : code2 === "code_used" || code2 === "node_taken" ? 409 : code2 === "not_found" ? 404 : code2 === "plan_limit" || code2 === "subscription_required" ? 402 : 400;
+          const status = code2 === "code_expired" ? 410 : code2 === "unauthorized" ? 401 : code2 === "account_disabled" ? 403 : code2 === "code_used" || code2 === "node_taken" ? 409 : code2 === "not_found" ? 404 : code2 === "plan_limit" || code2 === "subscription_required" ? 402 : 400;
           const msg = e instanceof Error ? e.message : String(e);
           throw new ApiError(
             status,
@@ -15213,7 +15930,7 @@ function createApp(store, manager, opts = {}) {
         applyProvidersPatch(tenant, raw);
         if (typeof raw.workspaceRoot === "string") {
           const ws = raw.workspaceRoot.trim();
-          const next = ws ? path29.resolve(ws) : void 0;
+          const next = ws ? path31.resolve(ws) : void 0;
           if (tenant.workspaceRoot) {
             if (next !== tenant.workspaceRoot) {
               throw new ApiError(
@@ -16200,7 +16917,7 @@ function createApp(store, manager, opts = {}) {
       json(res, 200, {
         status: "ok",
         // 版本让运维/探针能确认线上跑的是哪个构建（更新与回滚据此判断）
-        version: "0.2.10",
+        version: "0.2.12",
         features: { mcp: hasServerMcpConfig() }
       });
       return;
@@ -16295,7 +17012,7 @@ function createApp(store, manager, opts = {}) {
 
 // src/server/fleet/FleetNodeBridge.ts
 init_cjs_shims();
-var os7 = __toESM(require("os"), 1);
+var os9 = __toESM(require("os"), 1);
 var import_node_perf_hooks = require("perf_hooks");
 
 // src/server/fleet/FleetCommands.ts
@@ -17489,7 +18206,7 @@ function withTimeout(p, ms) {
 }
 function primaryIp() {
   let v6;
-  for (const infos of Object.values(os7.networkInterfaces())) {
+  for (const infos of Object.values(os9.networkInterfaces())) {
     for (const info of infos ?? []) {
       if (info.internal) continue;
       if (info.family === "IPv4") return info.address;
@@ -17503,7 +18220,7 @@ function primaryIp() {
 var FleetNodeBridge = class {
   constructor(opts) {
     this.opts = opts;
-    this.nodeId = opts.nodeId ?? ensureNodeId2(opts.deps.store);
+    this.nodeId = opts.nodeId ?? ensureNodeId(opts.deps.store);
   }
   opts;
   /** 是否成功连接过（区分「一直连不上」与「连上后断线」） */
@@ -17838,7 +18555,7 @@ var FleetNodeBridge = class {
       label: this.opts.deps.store.loadNodeLabel() ?? void 0,
       platform: process.platform,
       mode: process.env.NODE_MODE ?? "standalone",
-      version: "0.2.10",
+      version: "0.2.12",
       ip: primaryIp()
     };
   }
@@ -17893,7 +18610,7 @@ var FleetNodeBridge = class {
         label: this.opts.deps.store.loadNodeLabel() ?? void 0,
         platform: process.platform,
         mode: process.env.NODE_MODE ?? "standalone",
-        version: "0.2.10",
+        version: "0.2.12",
         ip: primaryIp(),
         projects,
         totals,
@@ -18081,28 +18798,6 @@ var FleetNodeBridge = class {
   }
 };
 
-// src/server/fleet-config.ts
-init_cjs_shims();
-function fleetConfigFromEnv(store) {
-  const fleetToken = process.env.FLEET_TOKEN;
-  const fleetSecret = process.env.FLEET_SECRET;
-  if (!fleetToken || !fleetSecret) return null;
-  return {
-    hubUrl: process.env.HUB_URL,
-    fleetToken,
-    fleetSecret,
-    nodeId: ensureNodeId2(store),
-    gatewayUrl: process.env.FLEET_GATEWAY_URL
-  };
-}
-function resolveFleetConfig(store) {
-  const saved = store.loadFleetCredential();
-  if (saved?.fleetToken && saved.fleetSecret) {
-    return { ...saved, nodeId: saved.nodeId || ensureNodeId2(store) };
-  }
-  return fleetConfigFromEnv(store);
-}
-
 // src/server/notify/index.ts
 init_cjs_shims();
 
@@ -18662,8 +19357,8 @@ init_cjs_shims();
 
 // src/server/qq/bindings.ts
 init_cjs_shims();
-var fs24 = __toESM(require("fs"), 1);
-var path30 = __toESM(require("path"), 1);
+var fs25 = __toESM(require("fs"), 1);
+var path32 = __toESM(require("path"), 1);
 function conversationKey(target) {
   switch (target.kind) {
     case "c2c":
@@ -18702,12 +19397,12 @@ var QqBindingsStore = class _QqBindingsStore {
   cache = null;
   /** 基于 DATA_DIR 构造 */
   static in(dataDir) {
-    return new _QqBindingsStore(path30.join(dataDir, "qq", "bindings.json"));
+    return new _QqBindingsStore(path32.join(dataDir, "qq", "bindings.json"));
   }
   load() {
     if (this.cache) return this.cache;
     try {
-      const raw = JSON.parse(fs24.readFileSync(this.file, "utf-8"));
+      const raw = JSON.parse(fs25.readFileSync(this.file, "utf-8"));
       this.cache = {
         conversations: raw.conversations ?? {}
       };
@@ -18739,8 +19434,8 @@ var QqBindingsStore = class _QqBindingsStore {
     return null;
   }
   persist() {
-    fs24.mkdirSync(path30.dirname(this.file), { recursive: true });
-    fs24.writeFileSync(this.file, JSON.stringify(this.cache, null, 2), "utf-8");
+    fs25.mkdirSync(path32.dirname(this.file), { recursive: true });
+    fs25.writeFileSync(this.file, JSON.stringify(this.cache, null, 2), "utf-8");
   }
 };
 
@@ -19152,8 +19847,8 @@ ${lines.join("\n")}`, msgId);
 
 // src/server/qq/QqManager.ts
 init_cjs_shims();
-var fs25 = __toESM(require("fs"), 1);
-var path31 = __toESM(require("path"), 1);
+var fs26 = __toESM(require("fs"), 1);
+var path33 = __toESM(require("path"), 1);
 var QqManager = class {
   constructor(opts) {
     this.opts = opts;
@@ -19162,7 +19857,7 @@ var QqManager = class {
   adapter = null;
   config = null;
   get configFile() {
-    return path31.join(this.opts.dataDir, "qq", "config.json");
+    return path33.join(this.opts.dataDir, "qq", "config.json");
   }
   /** 启动：读配置（env 优先，其次文件），有则建连接 */
   start() {
@@ -19200,7 +19895,7 @@ var QqManager = class {
   /** 清空配置：删除文件 + 断开 */
   clearConfig() {
     try {
-      fs25.rmSync(this.configFile, { force: true });
+      fs26.rmSync(this.configFile, { force: true });
     } catch {
     }
     this.stop();
@@ -19242,7 +19937,7 @@ var QqManager = class {
   }
   _readConfigFile() {
     try {
-      const raw = JSON.parse(fs25.readFileSync(this.configFile, "utf-8"));
+      const raw = JSON.parse(fs26.readFileSync(this.configFile, "utf-8"));
       if (raw.appId && raw.appSecret) {
         return {
           appId: raw.appId,
@@ -19255,8 +19950,8 @@ var QqManager = class {
     return null;
   }
   _persistConfig(cfg) {
-    fs25.mkdirSync(path31.dirname(this.configFile), { recursive: true });
-    fs25.writeFileSync(this.configFile, JSON.stringify(cfg, null, 2), "utf-8");
+    fs26.mkdirSync(path33.dirname(this.configFile), { recursive: true });
+    fs26.writeFileSync(this.configFile, JSON.stringify(cfg, null, 2), "utf-8");
   }
 };
 
@@ -19305,16 +20000,16 @@ var PairingCodeStore = class {
 // src/update/controller.ts
 init_cjs_shims();
 var fs30 = __toESM(require("fs"), 1);
-var path36 = __toESM(require("path"), 1);
+var path37 = __toESM(require("path"), 1);
 
 // src/update/downloader.ts
 init_cjs_shims();
 var import_node_crypto5 = require("crypto");
-var fs26 = __toESM(require("fs"), 1);
+var fs27 = __toESM(require("fs"), 1);
 var import_node_stream2 = require("stream");
 var import_promises2 = require("stream/promises");
-var import_node_child_process5 = require("child_process");
-var path32 = __toESM(require("path"), 1);
+var import_node_child_process6 = require("child_process");
+var path34 = __toESM(require("path"), 1);
 
 // src/update/manifest.ts
 init_cjs_shims();
@@ -19480,267 +20175,97 @@ async function fetchManifest(url, publicKey, opts = {}) {
   }
   let parsed;
   try {
-    parsed = JSON.parse(raw.toString("utf-8"));
-  } catch (err) {
-    return { error: `\u6E05\u5355\u4E0D\u662F\u5408\u6CD5 JSON\uFF1A${err.message}` };
-  }
-  const { manifest, error: error2 } = parseManifest(parsed, opts);
-  if (!manifest) return { error: error2 };
-  return { manifest, raw };
-}
-async function downloadBinary(bin, destPath, log = () => {
-}) {
-  const partPath = `${destPath}.part`;
-  fs26.mkdirSync(path32.dirname(destPath), { recursive: true });
-  fs26.rmSync(partPath, { force: true });
-  let res;
-  try {
-    res = await fetch(bin.url, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS2) });
-  } catch (err) {
-    return { error: `\u4E0B\u8F7D\u5931\u8D25\uFF1A${err.message}` };
-  }
-  if (!res.ok) return { error: `\u4E0B\u8F7D\u5931\u8D25 HTTP ${res.status}` };
-  if (!res.body) return { error: "\u4E0B\u8F7D\u54CD\u5E94\u6CA1\u6709 body" };
-  const expected = bin.size && bin.size > 0 ? bin.size : void 0;
-  const limit = expected ? Math.max(expected * 2, 1024 * 1024) : MAX_BINARY_BYTES;
-  const hash = (0, import_node_crypto5.createHash)("sha256");
-  let bytes = 0;
-  try {
-    const source = import_node_stream2.Readable.fromWeb(res.body);
-    await (0, import_promises2.pipeline)(
-      source,
-      async function* (chunks) {
-        for await (const chunk of chunks) {
-          bytes += chunk.length;
-          if (bytes > limit) throw new Error(`\u4EA7\u7269\u8D85\u8FC7\u5927\u5C0F\u4E0A\u9650\uFF08>${limit} \u5B57\u8282\uFF09`);
-          hash.update(chunk);
-          yield chunk;
-        }
-      },
-      fs26.createWriteStream(partPath, { mode: 493 })
-    );
-  } catch (err) {
-    fs26.rmSync(partPath, { force: true });
-    return { error: `\u4E0B\u8F7D\u4E2D\u65AD\uFF1A${err.message}` };
-  }
-  const actual = hash.digest("hex");
-  if (actual !== bin.sha256) {
-    fs26.rmSync(partPath, { force: true });
-    return { error: `SHA-256 \u4E0D\u5339\u914D\uFF08\u671F\u671B ${bin.sha256.slice(0, 12)}\u2026\uFF0C\u5B9E\u9645 ${actual.slice(0, 12)}\u2026\uFF09` };
-  }
-  if (expected && bytes !== expected) {
-    fs26.rmSync(partPath, { force: true });
-    return { error: `\u4EA7\u7269\u5927\u5C0F\u4E0D\u5339\u914D\uFF08\u671F\u671B ${expected}\uFF0C\u5B9E\u9645 ${bytes}\uFF09` };
-  }
-  fs26.rmSync(destPath, { force: true });
-  fs26.renameSync(partPath, destPath);
-  fs26.chmodSync(destPath, 493);
-  log(`\u5DF2\u4E0B\u8F7D ${path32.basename(destPath)}\uFF08${Math.round(bytes / 1024 / 1024)}MB\uFF0C\u6821\u9A8C\u901A\u8FC7\uFF09`);
-  return { bytes };
-}
-function selfCheck(binPath, expectedVersion) {
-  try {
-    const r = (0, import_node_child_process5.spawnSync)(binPath, ["--version"], {
-      timeout: 2e4,
-      encoding: "utf-8",
-      env: { ...process.env, ZQAGENT_AUTO_UPDATE: "0" }
-    });
-    if (r.error) return { ok: false, error: `\u6267\u884C\u81EA\u68C0\u5931\u8D25\uFF1A${r.error.message}` };
-    if (r.status !== 0) return { ok: false, error: `\u81EA\u68C0\u9000\u51FA\u7801 ${r.status}\uFF1A${(r.stderr || "").trim()}` };
-    const out = `${r.stdout ?? ""}${r.stderr ?? ""}`;
-    if (!out.includes(expectedVersion)) {
-      return { ok: false, error: `\u81EA\u68C0\u7248\u672C\u4E0D\u7B26\uFF08\u671F\u671B ${expectedVersion}\uFF0C\u8F93\u51FA\uFF1A${out.trim().slice(0, 120)}\uFF09` };
-    }
-    return { ok: true };
-  } catch (err) {
-    return { ok: false, error: `\u81EA\u68C0\u5F02\u5E38\uFF1A${err.message}` };
-  }
-}
-
-// src/update/platform.ts
-init_cjs_shims();
-var fs27 = __toESM(require("fs"), 1);
-var os8 = __toESM(require("os"), 1);
-var path33 = __toESM(require("path"), 1);
-var import_node_child_process6 = require("child_process");
-var import_node_module3 = require("module");
-function currentVersion() {
-  const injected = "0.2.10"?.trim();
-  if (injected) return injected;
-  try {
-    const req2 = (0, import_node_module3.createRequire)(importMetaUrl);
-    const pkg = req2("../../package.json");
-    if (pkg?.version) return pkg.version;
-  } catch {
-  }
-  return "dev";
-}
-function isSeaRuntime() {
-  if (process.env.ZQAGENT_SEA === "1") return true;
-  const base = path33.basename(process.execPath).toLowerCase().replace(/\.exe$/, "");
-  return base !== "node" && base !== "nodejs";
-}
-var DEFAULT_SERVICE_NAME = "zqagent";
-var DEFAULT_SERVICE_LABEL = "com.zqagent.node";
-function serviceManagerFromCgroup(cgroup, serviceName = DEFAULT_SERVICE_NAME) {
-  const unitName = `${serviceName}.service`;
-  for (const line of cgroup.split("\n")) {
-    const idx = line.lastIndexOf(":");
-    if (idx < 0) continue;
-    const unitPath = line.slice(idx + 1).trim();
-    if (unitPath.split("/").includes(unitName)) return "systemd";
-  }
-  return null;
-}
-function launchdDomain() {
-  const uid = typeof process.getuid === "function" ? process.getuid() : -1;
-  return uid === 0 ? "system" : `gui/${uid}`;
-}
-function launchdLabel() {
-  return process.env.ZQAGENT_SERVICE_LABEL?.trim() || DEFAULT_SERVICE_LABEL;
-}
-function launchdPlistPath() {
-  const label = launchdLabel();
-  const uid = typeof process.getuid === "function" ? process.getuid() : -1;
-  if (uid === 0) return `/Library/LaunchDaemons/${label}.plist`;
-  return path33.join(os8.homedir(), "Library", "LaunchAgents", `${label}.plist`);
-}
-function serviceManagerFromLaunchctl(output, pid, execPath, sea = true) {
-  const pidMatch = /^\s*pid = (\d+)\s*$/m.exec(output);
-  if (pidMatch && Number(pidMatch[1]) === pid) return "launchd";
-  const program = /^\s*program = (.+?)\s*$/m.exec(output);
-  if (program) {
-    const shown = program[1].replace(/^"|"$/g, "");
-    if (path33.resolve(shown) === path33.resolve(execPath)) return "launchd";
-  }
-  if (!sea && /^\s*state = /m.test(output)) return "launchd";
-  return null;
-}
-function parseLaunchdEnvironment(xml) {
-  const out = {};
-  const marker = xml.indexOf("<key>EnvironmentVariables</key>");
-  if (marker < 0) return out;
-  const open = xml.indexOf("<dict>", marker);
-  if (open < 0) return out;
-  const close = xml.indexOf("</dict>", open);
-  if (close < 0) return out;
-  const body = xml.slice(open + "<dict>".length, close);
-  for (const m of body.matchAll(/<key>([^<]+)<\/key>\s*<string>([^<]*)<\/string>/g)) {
-    out[m[1]] = m[2];
-  }
-  return out;
-}
-function detectServiceManager() {
-  if (process.platform === "darwin") return detectLaunchd();
-  if (process.platform !== "linux") return null;
-  const serviceName = process.env.ZQAGENT_SERVICE_NAME?.trim() || DEFAULT_SERVICE_NAME;
-  try {
-    return serviceManagerFromCgroup(
-      fs27.readFileSync("/proc/self/cgroup", "utf8"),
-      serviceName
-    );
-  } catch {
-    return null;
-  }
-}
-function detectLaunchd() {
-  try {
-    const res = (0, import_node_child_process6.spawnSync)(
-      "launchctl",
-      ["print", `${launchdDomain()}/${launchdLabel()}`],
-      { encoding: "utf8", timeout: 3e3 }
-    );
-    if (res.status !== 0 || !res.stdout) return null;
-    return serviceManagerFromLaunchctl(
-      res.stdout,
-      process.pid,
-      process.execPath,
-      isSeaRuntime()
-    );
-  } catch {
-    return null;
-  }
-}
-function serviceManager() {
-  const v = process.env.ZQAGENT_SERVICE_MANAGER?.trim().toLowerCase();
-  if (v === "systemd" || v === "launchd") return v;
-  return detectServiceManager();
-}
-function parseServiceEnvironment(raw) {
-  const out = {};
-  for (const token of raw.trim().split(/\s+/)) {
-    const idx = token.indexOf("=");
-    if (idx > 0) out[token.slice(0, idx)] = token.slice(idx + 1);
-  }
-  return out;
-}
-var cachedServiceEnv = null;
-function readServiceEnvironment() {
-  const serviceName = process.env.ZQAGENT_SERVICE_NAME?.trim() || DEFAULT_SERVICE_NAME;
-  try {
-    const res = (0, import_node_child_process6.spawnSync)(
-      "systemctl",
-      ["show", serviceName, "--property=Environment", "--value", "--no-pager"],
-      { encoding: "utf8", timeout: 3e3 }
-    );
-    if (res.status !== 0 || !res.stdout) return {};
-    return parseServiceEnvironment(res.stdout);
-  } catch {
-    return {};
+    parsed = JSON.parse(raw.toString("utf-8"));
+  } catch (err) {
+    return { error: `\u6E05\u5355\u4E0D\u662F\u5408\u6CD5 JSON\uFF1A${err.message}` };
   }
+  const { manifest, error: error2 } = parseManifest(parsed, opts);
+  if (!manifest) return { error: error2 };
+  return { manifest, raw };
 }
-function serviceEnvValue(key) {
-  if (process.platform === "darwin") {
-    if (serviceManager() !== "launchd") return void 0;
-    cachedLaunchdEnv ??= readLaunchdEnvironment();
-    return cachedLaunchdEnv[key];
+async function downloadBinary(bin, destPath, log = () => {
+}) {
+  const partPath = `${destPath}.part`;
+  fs27.mkdirSync(path34.dirname(destPath), { recursive: true });
+  fs27.rmSync(partPath, { force: true });
+  let res;
+  try {
+    res = await fetch(bin.url, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS2) });
+  } catch (err) {
+    return { error: `\u4E0B\u8F7D\u5931\u8D25\uFF1A${err.message}` };
   }
-  if (process.platform !== "linux") return void 0;
-  if (serviceManager() !== "systemd") return void 0;
-  cachedServiceEnv ??= readServiceEnvironment();
-  return cachedServiceEnv[key];
-}
-var cachedLaunchdEnv = null;
-function readLaunchdEnvironment() {
+  if (!res.ok) return { error: `\u4E0B\u8F7D\u5931\u8D25 HTTP ${res.status}` };
+  if (!res.body) return { error: "\u4E0B\u8F7D\u54CD\u5E94\u6CA1\u6709 body" };
+  const expected = bin.size && bin.size > 0 ? bin.size : void 0;
+  const limit = expected ? Math.max(expected * 2, 1024 * 1024) : MAX_BINARY_BYTES;
+  const hash = (0, import_node_crypto5.createHash)("sha256");
+  let bytes = 0;
   try {
-    return parseLaunchdEnvironment(fs27.readFileSync(launchdPlistPath(), "utf8"));
-  } catch {
-    return {};
+    const source = import_node_stream2.Readable.fromWeb(res.body);
+    await (0, import_promises2.pipeline)(
+      source,
+      async function* (chunks) {
+        for await (const chunk of chunks) {
+          bytes += chunk.length;
+          if (bytes > limit) throw new Error(`\u4EA7\u7269\u8D85\u8FC7\u5927\u5C0F\u4E0A\u9650\uFF08>${limit} \u5B57\u8282\uFF09`);
+          hash.update(chunk);
+          yield chunk;
+        }
+      },
+      fs27.createWriteStream(partPath, { mode: 493 })
+    );
+  } catch (err) {
+    fs27.rmSync(partPath, { force: true });
+    return { error: `\u4E0B\u8F7D\u4E2D\u65AD\uFF1A${err.message}` };
   }
-}
-function selfUpdateCapability(hasPublicKey) {
-  if (!isSeaRuntime()) {
-    return {
-      ok: false,
-      reason: "\u5F53\u524D\u4E0D\u662F\u5355\u6587\u4EF6\uFF08SEA\uFF09\u5F62\u6001\uFF1A\u8BF7\u7528 npm \u5347\u7EA7\uFF08npm i -g @zqagent/core@latest\uFF09"
-    };
+  const actual = hash.digest("hex");
+  if (actual !== bin.sha256) {
+    fs27.rmSync(partPath, { force: true });
+    return { error: `SHA-256 \u4E0D\u5339\u914D\uFF08\u671F\u671B ${bin.sha256.slice(0, 12)}\u2026\uFF0C\u5B9E\u9645 ${actual.slice(0, 12)}\u2026\uFF09` };
   }
-  if (!serviceManager()) {
-    return {
-      ok: false,
-      reason: "\u672A\u88AB systemd/launchd \u6258\u7BA1\uFF1A\u8BF7\u7528 deploy/service/install.sh \u5B89\u88C5\uFF0C\u6216\u624B\u52A8\u5347\u7EA7"
-    };
+  if (expected && bytes !== expected) {
+    fs27.rmSync(partPath, { force: true });
+    return { error: `\u4EA7\u7269\u5927\u5C0F\u4E0D\u5339\u914D\uFF08\u671F\u671B ${expected}\uFF0C\u5B9E\u9645 ${bytes}\uFF09` };
   }
-  if (!hasPublicKey) {
-    return { ok: false, reason: "\u672A\u914D\u7F6E ZQAGENT_UPDATE_PUBKEY\uFF0C\u65E0\u6CD5\u9A8C\u7B7E\uFF0C\u5DF2\u7981\u7528\u81EA\u52A8\u66F4\u65B0" };
+  fs27.rmSync(destPath, { force: true });
+  fs27.renameSync(partPath, destPath);
+  fs27.chmodSync(destPath, 493);
+  log(`\u5DF2\u4E0B\u8F7D ${path34.basename(destPath)}\uFF08${Math.round(bytes / 1024 / 1024)}MB\uFF0C\u6821\u9A8C\u901A\u8FC7\uFF09`);
+  return { bytes };
+}
+function selfCheck(binPath, expectedVersion) {
+  try {
+    const r = (0, import_node_child_process6.spawnSync)(binPath, ["--version"], {
+      timeout: 2e4,
+      encoding: "utf-8",
+      env: { ...process.env, ZQAGENT_AUTO_UPDATE: "0" }
+    });
+    if (r.error) return { ok: false, error: `\u6267\u884C\u81EA\u68C0\u5931\u8D25\uFF1A${r.error.message}` };
+    if (r.status !== 0) return { ok: false, error: `\u81EA\u68C0\u9000\u51FA\u7801 ${r.status}\uFF1A${(r.stderr || "").trim()}` };
+    const out = `${r.stdout ?? ""}${r.stderr ?? ""}`;
+    if (!out.includes(expectedVersion)) {
+      return { ok: false, error: `\u81EA\u68C0\u7248\u672C\u4E0D\u7B26\uFF08\u671F\u671B ${expectedVersion}\uFF0C\u8F93\u51FA\uFF1A${out.trim().slice(0, 120)}\uFF09` };
+    }
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: `\u81EA\u68C0\u5F02\u5E38\uFF1A${err.message}` };
   }
-  return { ok: true };
 }
 
 // src/update/installer.ts
 init_cjs_shims();
 var fs29 = __toESM(require("fs"), 1);
-var path35 = __toESM(require("path"), 1);
+var path36 = __toESM(require("path"), 1);
 
 // src/update/state.ts
 init_cjs_shims();
 var fs28 = __toESM(require("fs"), 1);
-var path34 = __toESM(require("path"), 1);
+var path35 = __toESM(require("path"), 1);
 function updatesDir(dataDir) {
-  return path34.join(dataDir, "updates");
+  return path35.join(dataDir, "updates");
 }
 function statePath(dataDir) {
-  return path34.join(updatesDir(dataDir), "state.json");
+  return path35.join(updatesDir(dataDir), "state.json");
 }
 function loadState(dataDir) {
   try {
@@ -19767,12 +20292,12 @@ function patchState(dataDir, patch) {
 
 // src/update/installer.ts
 function backupDir(dataDir) {
-  return path35.join(updatesDir(dataDir), "backup");
+  return path36.join(updatesDir(dataDir), "backup");
 }
 function backupCurrent(dataDir, execPath, version) {
   const dir = backupDir(dataDir);
   fs29.mkdirSync(dir, { recursive: true });
-  const target = path35.join(dir, `zqagent-${version}${process.platform === "win32" ? ".exe" : ""}`);
+  const target = path36.join(dir, `zqagent-${version}${process.platform === "win32" ? ".exe" : ""}`);
   fs29.copyFileSync(execPath, target);
   fs29.chmodSync(target, 493);
   return target;
@@ -19804,7 +20329,7 @@ function installStaged(opts) {
   const from = currentVersion();
   log(`\u6B63\u5728\u5B89\u88C5 v${opts.version}\uFF08\u5F53\u524D v${from}\uFF09`);
   const backupPath = backupCurrent(opts.dataDir, opts.execPath, from);
-  log(`\u5DF2\u5907\u4EFD\u5F53\u524D\u7248\u672C\u5230 ${path35.basename(backupPath)}`);
+  log(`\u5DF2\u5907\u4EFD\u5F53\u524D\u7248\u672C\u5230 ${path36.basename(backupPath)}`);
   replaceExecutable(opts.execPath, opts.stagedPath);
   return patchState(opts.dataDir, {
     stagedVersion: void 0,
@@ -19848,7 +20373,7 @@ function rollback(dataDir, execPath, log = () => {
 }
 function readRollbackTarget(dataDir) {
   try {
-    const raw = fs29.readFileSync(path35.join(updatesDir(dataDir), "state.json"), "utf-8");
+    const raw = fs29.readFileSync(path36.join(updatesDir(dataDir), "state.json"), "utf-8");
     const s = JSON.parse(raw);
     if (s.backupPath && s.backupVersion) return s;
   } catch {
@@ -20025,7 +20550,7 @@ var UpdateController = class {
       if (!bin) return `\u6E05\u5355\u6CA1\u6709\u5F53\u524D\u5E73\u53F0\uFF08${platformKey()}\uFF09\u7684\u4EA7\u7269`;
       let stagedPath = state.stagedPath;
       if (!(state.stagedVersion === manifest.version && stagedPath && fs30.existsSync(stagedPath))) {
-        stagedPath = path36.join(
+        stagedPath = path37.join(
           updatesDir(this.opts.dataDir),
           "staged",
           `zqagent-${manifest.version}${process.platform === "win32" ? ".exe" : ""}`
@@ -20200,7 +20725,7 @@ function seedDemoTenant(store) {
       apiKey: env2("OPENAI_API_KEY"),
       baseURL: env2("OPENAI_BASE_URL")
     },
-    workspaceRoot: workspace ? path37.resolve(workspace) : void 0,
+    workspaceRoot: workspace ? path38.resolve(workspace) : void 0,
     allowedCommands: []
   };
   store.saveTenant(demo);
@@ -20254,9 +20779,9 @@ function syncTenantModels(store) {
       tenant.model = model;
       changed = true;
     }
-    if (workspace && tenant.workspaceRoot !== path37.resolve(workspace)) {
-      console.log(`[sync] \u79DF\u6237 ${id} workspaceRoot \u5DF2\u540C\u6B65: ${tenant.workspaceRoot ?? "(\u6C99\u7BB1)"} \u2192 ${path37.resolve(workspace)}`);
-      tenant.workspaceRoot = path37.resolve(workspace);
+    if (workspace && tenant.workspaceRoot !== path38.resolve(workspace)) {
+      console.log(`[sync] \u79DF\u6237 ${id} workspaceRoot \u5DF2\u540C\u6B65: ${tenant.workspaceRoot ?? "(\u6C99\u7BB1)"} \u2192 ${path38.resolve(workspace)}`);
+      tenant.workspaceRoot = path38.resolve(workspace);
       changed = true;
     }
     if (apiKey && tenant.provider.apiKey !== apiKey) {
@@ -20317,7 +20842,7 @@ function listenWithPortFallback(server, startPort, host, dataDir, limit = PORT_F
         }
         try {
           fs31.mkdirSync(dataDir, { recursive: true });
-          fs31.writeFileSync(path37.join(dataDir, "server-port"), `${actualPort}
+          fs31.writeFileSync(path38.join(dataDir, "server-port"), `${actualPort}
 `);
         } catch {
         }
@@ -20328,7 +20853,7 @@ function listenWithPortFallback(server, startPort, host, dataDir, limit = PORT_F
   });
 }
 function startServer(opts = {}) {
-  const dataDir = path37.resolve(opts.dataDir ?? env2("DATA_DIR") ?? DEFAULT_DATA_DIR);
+  const dataDir = path38.resolve(opts.dataDir ?? env2("DATA_DIR") ?? DEFAULT_DATA_DIR);
   const port = opts.port ?? Number(env2("PORT") ?? 8787);
   const host = opts.host ?? env2("HOST") ?? "127.0.0.1";
   exitWhenOrphaned();
@@ -20358,7 +20883,7 @@ function startServer(opts = {}) {
   }
   const adminKey = ensureAdminKey();
   const secretKey = env2("SECRET_KEY");
-  const secretBox = secretKey ? SecretBox.fromHex(secretKey) : SecretBox.fromFile(path37.join(dataDir, "secret.key"));
+  const secretBox = secretKey ? SecretBox.fromHex(secretKey) : SecretBox.fromFile(path38.join(dataDir, "secret.key"));
   if (secretKey && !secretBox) {
     console.warn("[crypto] SECRET_KEY \u975E\u6CD5\uFF08\u9700 64 \u4F4D hex\uFF09\uFF0C\u901A\u77E5\u51ED\u636E\u5C06\u9000\u5316\u4E3A\u660E\u6587");
   }
@@ -20367,7 +20892,7 @@ function startServer(opts = {}) {
   let fleet = null;
   let fleetCred = null;
   function connectFleet(cred) {
-    const localId = ensureNodeId2(store);
+    const localId = ensureNodeId(store);
     const nodeId = (cred.nodeId ?? "").trim() || localId;
     if (nodeId !== localId) store.saveNodeId(nodeId);
     fleet?.close();
@@ -20395,7 +20920,7 @@ function startServer(opts = {}) {
   function fleetStatus() {
     return {
       linked: fleet !== null,
-      nodeId: ensureNodeId2(store),
+      nodeId: ensureNodeId(store),
       hubUrl: fleetCred?.hubUrl,
       gatewayUrl: fleetCred?.gatewayUrl ?? env2("FLEET_GATEWAY_URL"),
       online: fleet?.isConnected() ?? false,
@@ -20407,8 +20932,15 @@ function startServer(opts = {}) {
   const fleetController = {
     status: fleetStatus,
     async enroll(input) {
-      const nodeId = ensureNodeId2(store);
-      const cred = await hubEnrollByCode(input.hubUrl, {
+      const nodeId = ensureNodeId(store);
+      const cred = input.account ? await hubEnrollByAccount(input.hubUrl, {
+        email: input.account.email,
+        phone: input.account.phone,
+        password: input.account.password,
+        code: input.account.smsCode,
+        nodeId,
+        label: input.label
+      }) : await hubEnrollByCode(input.hubUrl, {
         code: input.code,
         nodeId,
         label: input.label
@@ -20434,7 +20966,7 @@ function startServer(opts = {}) {
         gatewayUrl: fleetCred.gatewayUrl ?? env2("FLEET_GATEWAY_URL"),
         fleetToken: fleetCred.fleetToken,
         fleetSecret: fleetCred.fleetSecret,
-        nodeId: ensureNodeId2(store)
+        nodeId: ensureNodeId(store)
       };
     }
   };
@@ -20587,7 +21119,7 @@ function printReady(info, qq) {
     `zqagent server \u76D1\u542C http://${info.host}:${info.port}`,
     `\u6570\u636E\u76EE\u5F55: ${info.dataDir}`,
     `\u5BA1\u6279\u6302\u8D77\u8D85\u65F6: ${env2("APPROVAL_TIMEOUT_SECONDS") ?? 900}s\uFF08\u8D85\u65F6\u540E\u56DE\u6536\u5185\u5B58\u4EFB\u52A1\uFF0C\u53EF\u7ECF resume \u6062\u590D\uFF09`,
-    env2("ZQAGENT_LOG_ADMIN_KEY") === "0" ? `\u7BA1\u7406\u5458\u5BC6\u94A5: ${maskKey(info.adminKey)}\uFF08\u5DF2\u8131\u654F\uFF0C\u5B8C\u6574\u503C\u89C1 ${path37.join(info.dataDir, "admin.json")}\uFF09` : `\u7BA1\u7406\u5458\u5BC6\u94A5: ${info.adminKey}\uFF08\u63A7\u5236\u53F0\u591A\u9879\u76EE\u5165\u53E3\uFF1A/api/v1/projects\uFF1B\u9879\u76EE\u7EA7\u63A5\u53E3\u52A0 X-Project-Id \u5934\uFF09`
+    env2("ZQAGENT_LOG_ADMIN_KEY") === "0" ? `\u7BA1\u7406\u5458\u5BC6\u94A5: ${maskKey(info.adminKey)}\uFF08\u5DF2\u8131\u654F\uFF0C\u5B8C\u6574\u503C\u89C1 ${path38.join(info.dataDir, "admin.json")}\uFF09` : `\u7BA1\u7406\u5458\u5BC6\u94A5: ${info.adminKey}\uFF08\u63A7\u5236\u53F0\u591A\u9879\u76EE\u5165\u53E3\uFF1A/api/v1/projects\uFF1B\u9879\u76EE\u7EA7\u63A5\u53E3\u52A0 X-Project-Id \u5934\uFF09`
   ];
   if (info.fleetNodeId) {
     lines.push(
@@ -20606,152 +21138,6 @@ function printReady(info, qq) {
   for (const l of lines) console.log(l);
 }
 
-// src/cli/account-enroll.ts
-init_cjs_shims();
-var path38 = __toESM(require("path"), 1);
-var readline = __toESM(require("readline/promises"), 1);
-var SKIP_ANSWERS = /* @__PURE__ */ new Set(["-", "skip", "none", "no"]);
-function resolveDefaultHub(hubUrl, env3 = process.env) {
-  return (hubUrl ?? env3.HUB_URL ?? DEFAULT_HUB_URL).trim().replace(/\/$/, "");
-}
-function parseHubAnswer(answer, fallback) {
-  const a = answer.trim();
-  if (SKIP_ANSWERS.has(a.toLowerCase())) return null;
-  return (a || fallback).replace(/\/$/, "");
-}
-function resolveDataDir2(dataDir) {
-  return path38.resolve(dataDir ?? process.env.DATA_DIR ?? DEFAULT_DATA_DIR);
-}
-async function maybeAccountEnroll(opts = {}) {
-  if (!process.stdin.isTTY || !process.stdout.isTTY) return;
-  let store;
-  try {
-    store = new Store(resolveDataDir2(opts.dataDir));
-    if (resolveFleetConfig(store)) return;
-  } catch (e) {
-    cliErr(`\u63A5\u5165\u68C0\u67E5\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
-    return;
-  }
-  const rl2 = readline.createInterface({ input: process.stdin, output: process.stdout });
-  try {
-    await runWizard(rl2, store, opts);
-  } catch (e) {
-    cliErr(`\u63A5\u5165\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
-    cliLog("  \u53EF\u7A0D\u540E\u5728\u63A7\u5236\u53F0\u751F\u6210\u63A5\u5165\u7801\uFF0C\u518D\u6267\u884C\uFF1Azqagent link --hub <Hub\u5730\u5740> --code <\u63A5\u5165\u7801>");
-  } finally {
-    rl2.close();
-  }
-}
-async function runWizard(rl2, store, opts) {
-  cliLog("");
-  cliLog("\u672C\u673A\u5C1A\u672A\u63A5\u5165 Hub\u3002\u53EF\u7528 Hub \u8D26\u53F7\u63A5\u5165\uFF08\u8282\u70B9\u9ED8\u8BA4\u8FDB\u5165\u300C\u672A\u5206\u7EC4\u300D\uFF09\uFF1B\u8F93\u5165 - \u8DF3\u8FC7\u4FDD\u6301\u7EAF\u672C\u5730\u3002");
-  const fallback = resolveDefaultHub(opts.hubUrl);
-  const answer = await rl2.question(`Hub \u5730\u5740 [${fallback}]\uFF1A`);
-  const hubUrl = parseHubAnswer(answer, fallback);
-  if (!hubUrl) {
-    cliLog("\u5DF2\u8DF3\u8FC7\u63A5\u5165\uFF1A\u8282\u70B9\u4FDD\u6301\u7EAF\u672C\u5730\u8FD0\u884C\u3002");
-    return;
-  }
-  cliLog("\u767B\u5F55\u65B9\u5F0F\uFF1A1) \u90AE\u7BB1 + \u5BC6\u7801   2) \u624B\u673A\u53F7 + \u5BC6\u7801   3) \u624B\u673A\u53F7 + \u77ED\u4FE1\u9A8C\u8BC1\u7801");
-  const mode = (await rl2.question("\u8BF7\u9009\u62E9 [1]\uFF1A")).trim() || "1";
-  const input = {};
-  if (mode === "1") {
-    input.email = (await rl2.question("\u90AE\u7BB1\uFF1A")).trim();
-    input.password = await askHidden(rl2, "\u5BC6\u7801\uFF1A");
-    if (!input.email || !input.password) {
-      cliErr("\u90AE\u7BB1\u4E0E\u5BC6\u7801\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
-      return;
-    }
-  } else if (mode === "2") {
-    input.phone = (await rl2.question("\u624B\u673A\u53F7\uFF1A")).trim();
-    input.password = await askHidden(rl2, "\u5BC6\u7801\uFF1A");
-    if (!input.phone || !input.password) {
-      cliErr("\u624B\u673A\u53F7\u4E0E\u5BC6\u7801\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
-      return;
-    }
-  } else if (mode === "3") {
-    input.phone = (await rl2.question("\u624B\u673A\u53F7\uFF1A")).trim();
-    if (!input.phone) {
-      cliErr("\u624B\u673A\u53F7\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
-      return;
-    }
-    try {
-      const sent = await hubSendSms(hubUrl, { phone: input.phone, purpose: "login" });
-      if (sent.debugCode) cliLog(`\uFF08\u8C03\u8BD5\u6A21\u5F0F\u9A8C\u8BC1\u7801\uFF1A${sent.debugCode}\uFF09`);
-      else cliLog("\u9A8C\u8BC1\u7801\u5DF2\u53D1\u9001\uFF0C5 \u5206\u949F\u5185\u6709\u6548\u3002");
-    } catch (e) {
-      cliErr(`\u77ED\u4FE1\u9A8C\u8BC1\u7801\u53D1\u9001\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
-      cliLog("  \u53EF\u6539\u7528\u65B9\u5F0F 1/2\uFF08\u5BC6\u7801\u767B\u5F55\uFF09\uFF0C\u6216\u5728\u7F51\u9875\u7AEF\u751F\u6210\u63A5\u5165\u7801\u540E\u6267\u884C\uFF1A");
-      cliLog("    zqagent link --hub <Hub\u5730\u5740> --code <\u63A5\u5165\u7801>");
-      return;
-    }
-    input.code = (await rl2.question("\u77ED\u4FE1\u9A8C\u8BC1\u7801\uFF1A")).trim();
-    if (!input.code) {
-      cliErr("\u9A8C\u8BC1\u7801\u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
-      return;
-    }
-  } else {
-    cliErr("\u672A\u77E5\u7684\u767B\u5F55\u65B9\u5F0F\uFF0C\u5DF2\u8DF3\u8FC7\u63A5\u5165\u3002");
-    return;
-  }
-  const nodeId = ensureNodeId2(store);
-  const cred = await hubEnrollByAccount(hubUrl, { ...input, nodeId, label: opts.label });
-  store.saveFleetCredential({
-    ...cred,
-    label: opts.label ?? cred.label,
-    enrolledAt: (/* @__PURE__ */ new Date()).toISOString()
-  });
-  cliLog(`\u2705 \u5DF2\u63A5\u5165 Hub\uFF1A\u8282\u70B9 ${cred.nodeId}\uFF08\u7F51\u5173 ${cred.gatewayUrl ?? "\u672A\u4E0B\u53D1"}\uFF09`);
-  cliLog("   \u51ED\u636E\u5DF2\u4FDD\u5B58\u5230 fleet.json\uFF0C\u672C\u6B21\u542F\u52A8\u5373\u8FDE\u63A5 Hub\u3002");
-}
-async function askHidden(rl2, prompt) {
-  if (!process.stdin.isTTY) return (await rl2.question(prompt)).trim();
-  return new Promise((resolve24) => {
-    const saved = process.stdin.listeners("data");
-    process.stdin.removeAllListeners("data");
-    cliWrite(prompt);
-    rl2.pause();
-    process.stdin.setRawMode(true);
-    process.stdin.resume();
-    let buf = "";
-    const cleanup = () => {
-      process.stdin.removeListener("data", onData);
-      for (const listener of saved) {
-        process.stdin.on("data", listener);
-      }
-      process.stdin.setRawMode(true);
-      rl2.resume();
-    };
-    const onData = (chunk) => {
-      const s = chunk.toString().replace(/\x1b\[[0-9;?]*[A-Za-z~]/g, "").replace(/\x1bO[A-Za-z]/g, "");
-      for (const ch of s) {
-        if (ch === "\r" || ch === "\n") {
-          cleanup();
-          cliWrite("\n");
-          resolve24(buf);
-          return;
-        }
-        if (ch === "") {
-          cleanup();
-          cliWrite("\n");
-          resolve24("");
-          return;
-        }
-        if (ch === "\x7F" || ch === "\b") {
-          if (buf.length > 0) {
-            buf = buf.slice(0, -1);
-            cliWrite("\b \b");
-          }
-        } else if (ch >= " ") {
-          buf += ch;
-          cliWrite("*");
-        }
-      }
-    };
-    process.stdin.on("data", onData);
-  });
-}
-
 // src/cli/serve.ts
 function parse2(argv) {
   const out = {};
@@ -20764,6 +21150,21 @@ function parse2(argv) {
     } else if (a === "--enroll-code" || a === "--code") {
       out.code = v;
       i++;
+    } else if (a === "--username" || a === "--user") {
+      out.username = v;
+      i++;
+    } else if (a === "--email") {
+      out.email = v;
+      i++;
+    } else if (a === "--phone") {
+      out.phone = v;
+      i++;
+    } else if (a === "--password") {
+      out.password = v;
+      i++;
+    } else if (a === "--sms-code") {
+      out.smsCode = v;
+      i++;
     } else if (a === "--label") {
       out.label = v;
       i++;
@@ -20784,7 +21185,32 @@ async function runServeCommand(argv) {
   const args = parse2(argv);
   const hubUrl = (args.hubUrl ?? process.env.HUB_URL ?? "").trim();
   const code = (args.code ?? process.env.HUB_ENROLL_CODE ?? "").trim();
-  if (!(hubUrl && code)) {
+  const account = buildAccountAuth(args);
+  if (code && account) {
+    cliErr("--enroll-code \u4E0E Hub \u8D26\u53F7\u53C2\u6570\uFF08--username/--password \u7B49\uFF09\u53EA\u80FD\u4E8C\u9009\u4E00\u3002");
+    return;
+  }
+  if (account && !isCompleteAccount(account) && !process.stdin.isTTY) {
+    cliErr("\u8D26\u53F7\u53C2\u6570\u7F3A\u5C11\u5BC6\u7801\u6216\u77ED\u4FE1\u9A8C\u8BC1\u7801\uFF1A\u975E\u4EA4\u4E92\u73AF\u5883\u8BF7\u8865 --password \u6216 --sms-code\u3002");
+  }
+  if (!code && isCompleteAccount(account)) {
+    try {
+      const r = await linkNode({
+        hubUrl: resolveDefaultHub(args.hubUrl || void 0),
+        account,
+        dataDir: args.dataDir,
+        label: args.label,
+        host: args.host,
+        port: args.port
+      });
+      cliLog(
+        r.mode === "hot" ? `\u2705 \u5DF2\u901A\u8FC7 Hub \u8D26\u53F7\u63A5\u5165\uFF08\u8282\u70B9 ${r.nodeId}\uFF09` : `\u2705 \u5DF2\u4FDD\u5B58 Hub \u63A5\u5165\u51ED\u636E\uFF08\u8282\u70B9 ${r.nodeId}\uFF09`
+      );
+    } catch (e) {
+      cliErr(`Hub \u8D26\u53F7\u63A5\u5165\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+    }
+  }
+  if (!(hubUrl && code) && !isCompleteAccount(account)) {
     await maybeAccountEnroll({ dataDir: args.dataDir, hubUrl: args.hubUrl, label: args.label });
   }
   const handle = startServer({
@@ -20923,7 +21349,7 @@ function updateSessionMetaFile(stateDir2, sessionId, patch) {
 // src/cli/debug.ts
 init_cjs_shims();
 var fs33 = __toESM(require("fs"), 1);
-var os9 = __toESM(require("os"), 1);
+var os10 = __toESM(require("os"), 1);
 var path41 = __toESM(require("path"), 1);
 var LOG_NAME = "zqagent-debug.log";
 var TRUTHY = /^(1|true|yes|on)$/i;
@@ -20937,7 +21363,7 @@ function resolveLogFile() {
   const explicit = process.env.ZQAGENT_DEBUG_LOG;
   if (explicit) return path41.resolve(explicit);
   const dir = process.env.ZQAGENT_DEBUG_DIR;
-  return path41.join(dir ? path41.resolve(dir) : os9.tmpdir(), LOG_NAME);
+  return path41.join(dir ? path41.resolve(dir) : os10.tmpdir(), LOG_NAME);
 }
 function enableDebug(argv = process.argv) {
   if (enabled) return true;
@@ -21359,7 +21785,7 @@ function cycleMode(engine) {
   engine.permissions.mode = next;
   return next;
 }
-var rl = readline2.createInterface({
+var rl = readline3.createInterface({
   input: process.stdin,
   output: process.stdout
 });
@@ -21375,20 +21801,7 @@ var _exitHandler = null;
 rl.on("SIGINT", () => {
   _exitHandler?.();
 });
-function patchReadlineHistoryNav() {
-  const iface = rl;
-  const orig = iface._ttyWrite;
-  iface._ttyWrite = function(s, key) {
-    const k = key;
-    if (k && (k.name === "up" || k.name === "down") && !k.ctrl && !k.meta && !k.shift) {
-      if (iface.cursor > 0) {
-        iface._moveCursor(-iface.cursor);
-      }
-    }
-    orig.call(rl, s, key);
-  };
-}
-patchReadlineHistoryNav();
+patchReadlineHistoryNav(rl);
 dlog("init", "\u6A21\u5757\u521D\u59CB\u5316\u5B8C\u6210\uFF08readline / \u8F93\u5165\u8DEF\u7531 / \u5386\u53F2\u5BFC\u822A\u5C31\u7EEA\uFF09");
 function question(prompt) {
   return inputRouter.ask(prompt);
@@ -21852,7 +22265,7 @@ async function offerTerminalSetup(engine, canUseAgent) {
 }
 var KNOWN_SUBCOMMANDS = /* @__PURE__ */ new Set(["link", "serve", "update"]);
 function cliVersion() {
-  const env3 = "0.2.10"?.trim();
+  const env3 = "0.2.12"?.trim();
   if (env3) return env3;
   try {
     const req2 = (0, import_module.createRequire)(importMetaUrl);
@@ -21870,11 +22283,13 @@ function printCliUsage() {
   cliLog("  zqagent serve [\u9009\u9879]           \u4EE5 headless \u65B9\u5F0F\u5E38\u9A7B\u4E3A\u53EF\u88AB Hub \u7BA1\u7406\u7684\u8282\u70B9");
   cliLog("  zqagent update [--status|--check|--now|--rollback]");
   cliLog("                                 \u67E5\u770B/\u624B\u52A8\u89E6\u53D1\u8282\u70B9\u81EA\u52A8\u66F4\u65B0");
-  cliLog("  zqagent link --hub <url> --code <\u63A5\u5165\u7801> [--label \u540D\u79F0]");
-  cliLog("                                 \u628A\u672C\u673A\u8282\u70B9\u63A5\u5165 Hub\uFF08\u672C\u673A\u6709 server \u65F6\u70ED\u63A5\u5165\uFF09");
+  cliLog("  zqagent link [--hub <url>] [--username <\u90AE\u7BB1/\u624B\u673A\u53F7> --password <\u5BC6\u7801>]");
+  cliLog("               [--code <\u63A5\u5165\u7801>] [--label \u540D\u79F0]");
+  cliLog("                                 \u628A\u672C\u673A\u8282\u70B9\u63A5\u5165 Hub\uFF08\u8D26\u53F7\u76F4\u8FDE\u6216\u63A5\u5165\u7801\uFF1B\u672C\u673A\u6709 server \u65F6\u70ED\u63A5\u5165\uFF09");
   cliLog("");
   cliLog("serve \u9009\u9879\uFF1A--port <n>  --host <addr>  --data-dir <dir>");
   cliLog("            --hub <url> --enroll-code <\u7801> --label <\u540D\u79F0>   \uFF08\u542F\u52A8\u5373\u63A5\u5165\uFF09");
+  cliLog("            --hub <url> --username <\u90AE\u7BB1/\u624B\u673A\u53F7> --password <\u5BC6\u7801>\uFF08\u8D26\u53F7\u63A5\u5165\uFF09");
   cliLog("\u5176\u5B83\u9009\u9879\uFF1A--resume <\u4F1A\u8BDDID>   --debug   --help/-h   --version/-v");
 }
 async function main() {
@@ -21891,7 +22306,10 @@ async function main() {
     process.exit(0);
   }
   if (subcommand === "link") {
-    const ok2 = await runLinkCommand(process.argv.slice(3));
+    const ok2 = await runLinkCommand(process.argv.slice(3), {
+      rl,
+      interactive: Boolean(process.stdin.isTTY && process.stdout.isTTY)
+    });
     rl.close();
     process.exit(ok2 ? 0 : 1);
   }
@@ -22792,7 +23210,11 @@ async function main() {
           case "/link": {
             const code = parts[1];
             const hub = parts[2] ?? process.env.HUB_URL;
-            if (!code || !hub) {
+            if (!code) {
+              await runLinkCommand([], { rl, interactive: true });
+              break;
+            }
+            if (!hub) {
               cliLog("\u7528\u6CD5: /link <\u6CE8\u518C\u7801> [Hub\u5730\u5740]\uFF08Hub\u5730\u5740\u4E5F\u53EF\u7531 HUB_URL \u73AF\u5883\u53D8\u91CF\u63D0\u4F9B\uFF09");
               break;
             }