mslxdff 0.1.120 → 0.1.122

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mslxdff",
-  "version": "0.1.120",
+  "version": "0.1.122",
   "description": "测试项目，请勿使用。",
   "type": "module",
   "bin": {

package/src/chat-pipeline/serial-trial.js

@@ -107,9 +107,18 @@ export async function runSerialTrial(ctx, deps = {}) {
         return json(res, 403, errBody);
       }
       if (auto) await auto.recordError(model, { status: upRes.status });
-      lastErr = { model, upstream: upRes, status: upRes.status, message: null };
-      logError(model, upRes.status, `upstream ${upRes.status}`);
-      evt("upstream-error", { reqId, model, status: upRes.status, message: null, timing: upRes._t ?? null });
+      // 读失败响应体（clone 不影响后续 relay 转发原响应；1s 上限防流式错误体拖慢）
+      let upBody = "";
+      try {
+        upBody = String(await Promise.race([
+          upRes.clone().text(),
+          new Promise((r) => { const t = setTimeout(() => r(""), 1000); t.unref?.(); }),
+        ])).replace(/\s+/g, " ").slice(0, 400);
+      } catch {}
+      const upMsg = upBody || `upstream ${upRes.status}`;
+      lastErr = { model, upstream: upRes, status: upRes.status, message: upMsg };
+      logError(model, upRes.status, `upstream ${upRes.status}${upBody ? ` body=${upBody.slice(0, 300)}` : ""}`);
+      evt("upstream-error", { reqId, model, status: upRes.status, message: upMsg.slice(0, 300), timing: upRes._t ?? null });
       upRes = null;
     }
     if (upRes) {
@@ -138,6 +147,7 @@ export async function runSerialTrial(ctx, deps = {}) {
       } else {
         const pr = await peerRelay({ model, body, lastErr, requested, useAuto, lockModel, auto, peers, handlerCtx, evt, logCall, mark, perf0, stages, startedAt, plugins, res });
         if (pr.handled) return { done: true };
+        if (pr.lastErr) lastErr = pr.lastErr;
       }
     }
     if (groups) {

package/src/cli/commands/daemon.js

@@ -95,8 +95,29 @@ export async function handleDaemonFlag(args, VERSION) {
 
 export async function handleDebug(args) {
   if (!(args.includes("-debug") || args.includes("--debug"))) return false;
+  // systemd 自启协同：若后台 daemon 由 user service（Restart=always, RestartSec=3）托管，
+  // 仅 stopDaemon() 会让 systemd 3 秒后拉起新实例 → 抢 8989 → EADDRINUSE 自愈反杀本 debug 前台。
+  // 必须先 systemctl stop（主动停止不会被 Restart 拉起）。
+  if (process.platform === "linux") {
+    try {
+      const { execFile } = await import("node:child_process");
+      const active = await new Promise((res) => execFile("systemctl", ["--user", "is-active", "mslxdff"], { windowsHide: true, timeout: 4000 }, (e, so) => res(String(so || "").trim())));
+      if (active === "active") {
+        await new Promise((res) => execFile("systemctl", ["--user", "stop", "mslxdff"], { windowsHide: true, timeout: 6000 }, () => res()));
+        console.log("[debug] stopped systemd user service (mslxdff) — it will be restarted on exit");
+      }
+    } catch {}
+  }
   const { stopped, pid } = stopDaemon();
   if (stopped) console.log(`[debug] stopped background daemon (pid ${pid})`);
+  // 等旧 daemon 真正退出再抢端口（Windows 端口释放有延迟，否则 EADDRINUSE 会让 debug 立即崩）
+  if (stopped && pid) {
+    const t0 = Date.now();
+    while (isPidAlive(pid) && Date.now() - t0 < 4000) {
+      await new Promise((r) => setTimeout(r, 100));
+    }
+    await new Promise((r) => setTimeout(r, 150));
+  }
   try {
     const dir = logDir();
     const toClear = [eventsFile(), callsFile(), errorsFile(), logFile()];

package/src/cli/commands/provider/add.js

@@ -101,6 +101,7 @@ export async function handleProviderAdd(id, sub, rest) {
   console.log(`  share: ${loadProviderShareKeys(nid) ? "ON" : "off"}   (mslxdff -provider ${nid} share on|off)`);
   console.log(`  allowAny: OFF (secure, empty allowlist = 403 block before upstream) — enable via: mslxdff -provider ${nid} allowAny on`);
   console.log(`  use as: ${nid}/<model-id>  — restart daemon to activate`);
+  if (allowedModels.length) console.log(`  opencode 中使用: mslxdff -setto opencode ${nid}/${allowedModels[0]}  (同步进 opencode.json，会一并设为默认模型)`);
   console.log(`  NOTE: empty allowlist = 403 before upstream, no cost — must set allowlist to use`);
   process.exit(0);
 }

package/src/cli/policy.js

@@ -89,6 +89,10 @@ export function peerCooldownMs() {
   const n = Number(process.env.MSLXDFF_PEER_COOLDOWN_MS);
   return Number.isInteger(n) && n > 0 ? n : 30_000;
 }
+export function peerLimitCooldownMs() {
+  const n = Number(process.env.MSLXDFF_PEER_LIMIT_COOLDOWN_MS);
+  return Number.isInteger(n) && n > 0 ? n : 5 * 60_000;
+}
 export function peerHeatMs() {
   const n = Number(process.env.MSLXDFF_PEER_HEAT_MS);
   return Number.isInteger(n) && n > 0 ? n : 5 * 60_000;

package/src/peers.js

@@ -1,6 +1,7 @@
 import { loadPeers, savePeers, loadPeerErrors, savePeerErrors, loadPeerStats, savePeerStats } from "./state.js";
 
 export const DEFAULT_PEER_COOLDOWN_MS = 30_000;
+export const DEFAULT_PEER_LIMIT_COOLDOWN_MS = 5 * 60_000;
 export const DEFAULT_PEER_HEAT_MS = 5 * 60_000;
 export const DEFAULT_MAX_HOPS = 3;
 export const DEFAULT_BROADBAND_STALE_MS = 90_000;
@@ -28,6 +29,7 @@ export function createPeersService({
   file,
   now = () => Date.now(),
   cooldownMs = DEFAULT_PEER_COOLDOWN_MS,
+  limitCooldownMs = DEFAULT_PEER_LIMIT_COOLDOWN_MS,
   heatMs = DEFAULT_PEER_HEAT_MS,
   peers: seedPeers,
   errors: seedErrors,
@@ -75,10 +77,18 @@ export function createPeersService({
     return before - list.length;
   }
 
+  // 分级冷却：连续 429（streak >= 2）→ limitCooldownMs（限流恢复慢，5min 内不再考虑）；
+  // 其他失败（网络抖动、5xx）→ cooldownMs（可能几秒恢复，给快速重试机会）。
+  function coolingWindowMs(url) {
+    const streak = stats[url]?.streak429 ?? 0;
+    return streak >= 2 ? limitCooldownMs : cooldownMs;
+  }
+
   function isCooling(url) {
-    if (!cooldownMs) return false;
+    const win = coolingWindowMs(url);
+    if (!win) return false;
     const err = lastErrorAt[url];
-    if (typeof err === "number" && now() - err < cooldownMs) return true;
+    if (typeof err === "number" && now() - err < win) return true;
     const peer = list.find((p) => p.url === url);
     if (peer && isBroadbandStale(peer, now(), broadbandStaleMs())) return true;
     return false;
@@ -148,6 +158,21 @@ export function createPeersService({
 
   let cursor = 0;
 
+  // 兜底重试集合：仅"因错误冷却中"的 peer（按最早失败优先）。
+  // 场景：唯一可用节点偶发失败被冷却锁死 → 主链零候选/全败时，兜底给它一次机会；
+  // 成功会被 recordResult 清除错误记录、回归热路径，避免"明明能用的节点被 30s 冷却全灭"。
+  function coolingByLastError() {
+    const t = now();
+    return list
+      .filter((p) => {
+        const err = lastErrorAt[p.url];
+        if (typeof err !== "number") return false;
+        if ((stats[p.url]?.streak429 ?? 0) >= 2) return false; // 429 长冷却：兜底也不考虑
+        return t - err < cooldownMs;
+      })
+      .sort((a, b) => (lastErrorAt[a.url] ?? 0) - (lastErrorAt[b.url] ?? 0));
+  }
+
   function next() {
     const avail = available();
     if (!avail.length) return null;
@@ -158,10 +183,16 @@ export function createPeersService({
   // Long-lived error memory: a peer keeps its last-error timestamp until a
   // subsequent success resets it (success clears the failure record) or the
   // error is no longer in the persist store on next load.
-  async function recordError(url) {
+  async function recordError(url, { status } = {}) {
     if (!url) return;
     lastErrorAt[url] = now();
     await persistErrors({ ...lastErrorAt });
+    // 连续 429 计数（仅成功清零）：第 2 次起进入长冷却——该 peer 大概率真被限流，不再频繁试它
+    if (Number(status) === 429) {
+      const prev = stats[url] || {};
+      stats[url] = { ...prev, streak429: (prev.streak429 || 0) + 1 };
+      await persistStats({ ...stats });
+    }
   }
 
   // Outcome of a forwarded request: ok updates the hot-cache (EMA latency,
@@ -182,6 +213,7 @@ export function createPeersService({
           : (typeof latencyMs === "number" ? latencyMs : prev.latencyMs ?? 0),
         fails: 0,
         model: model || prev.model || "",
+        streak429: 0,
       };
     } else {
       const prev = stats[url] || {};
@@ -194,7 +226,7 @@ export function createPeersService({
     all, add, remove, removeByGroup, isCooling, isBroadbandCooling, isBroadbandStale: (url) => {
       const peer = list.find((p) => p.url === url);
       return peer ? isBroadbandStale(peer, now(), broadbandStaleMs()) : false;
-    }, isHot, stat, ordered, orderedByLastError, available, next,
+    }, isHot, stat, ordered, orderedByLastError, coolingByLastError, available, next,
     recordError, recordResult, errors: () => ({ ...lastErrorAt }), stats: () => ({ ...stats }),
   };
 }

package/src/providers/workbuddy/chat.js

@@ -2,6 +2,7 @@ import { joinUrl } from "../base.js";
 import { isAuthError, isInsufficientStatus } from "./auth.js";
 import { appendRotationLog as defaultAppend } from "./rotation-log.js";
 import { createTransport } from "../../transport/index.js";
+import { dispatcherFetch } from "../../upstream-engine/sdk/attempt.js";
 import { reshapeWorkbuddySse } from "./reshape.js";
 import { attemptOnceSdk } from "./sdk-chat.js";
 import { sanitizeToolSequence } from "./sanitize-tools.js";
@@ -88,6 +89,9 @@ export function createChatService({
     try { defaultAppend(opts); } catch {}
   };
   const transport = createTransport({ fetchImpl, dispatcher, keepAlive: !!dispatcher, timeoutMs: connectTimeoutMs, retry: {} });
+  // SDK 通道与 legacy 同享 keep-alive 连接池（dispatcher → fetch 注入）；同时该 fetch 被 attempt 层
+  // 包装用于错误路径捕获请求体（上游 4xx 时打印 tool 序列断裂诊断，见 sdk/attempt.js）。
+  const sdkFetch = dispatcher ? dispatcherFetch(dispatcher) : fetchImpl;
 
   function authForKey(key) {
     const idx = keys.indexOf(key);
@@ -109,7 +113,7 @@ export function createChatService({
     const payload = rewriteWorkbuddyPayload(body);
     if (engineMode === "sdk") {
       try {
-        return await attemptOnceSdk({ url, body: payload, key, auth, buildHeaders: buildAuthHeaders });
+        return await attemptOnceSdk({ url, body: payload, key, auth, buildHeaders: buildAuthHeaders, ...(sdkFetch ? { fetchImpl: sdkFetch } : {}) });
       } catch (e) {
         if (!e || !e._sdkLoadFailed) throw e;
         if (!sdkFallbackLogged) {
@@ -157,8 +161,8 @@ export function createChatService({
     const url = joinUrl(baseUrl, chatPath);
     const t0 = nowMs(clock);
     const clean = sanitizeToolSequence(body?.messages);
-    if (clean.droppedCalls || clean.droppedResults) {
-      try { console.error(`[workbuddy] tool-sequence sanitized: dropped ${clean.droppedCalls} call(s), ${clean.droppedResults} result(s), model=${body?.model || ""}`); } catch {}
+    if (clean.droppedCalls || clean.droppedResults || clean.movedResults || clean.injectedHead) {
+      try { console.error(`[workbuddy] tool-sequence sanitized: dropped ${clean.droppedCalls} call(s), ${clean.droppedResults} result(s), moved ${clean.movedResults} result(s), head+${clean.injectedHead}, model=${body?.model || ""}`); } catch {}
       body = { ...body, messages: clean.messages };
     }
     _t0Val = t0;

package/src/providers/workbuddy/sanitize-tools.js

@@ -1,55 +1,61 @@
-// workbuddy 上游对 tool 序列严格校验（400 code 11148 tool_call_sequence_broken）：
-// assistant.tool_calls 与后续 tool 结果必须按 id 一一配对，否则整单拒绝并提示开新会话。
-// 历史上下文经压缩/编辑/跨模型切换后可能断裂（有调用无结果、结果孤立、id 漂移），
-// AI SDK 转换层对缺失字段用占位（toolName "tool" / toolCallId ""）进一步错配。
-// 这里在 workbuddy 出口做防御性清洗：仅保留能成对出现的调用与结果，避免整单 400。
-// 其他上游（opencode 等）宽容，不受影响——只挂在 workbuddy 链路。
+// workbuddy 上游对 tool 序列严格校验（400 code 11148 tool_call_sequence_broken），实测三条规则：
+// ① assistant.tool_calls 与结果必须按 id 一一配对（孤立调用/结果均拒）；
+// ② 结果必须紧跟对应 assistant（配对不能被 user/assistant 消息打断）；
+// ③ 序列不能以"带 tool_calls 的 assistant"开头（tool call 无前置上下文即拒；compaction 裁剪点
+//    落在工具链中间时最易触发）。
+// 这里在 workbuddy 出口做防御性清洗：结果前移到对应调用之后（组内按 calls 顺序）、剔无法配对的
+// 调用/结果、首条为 assistant/tool 时注入占位 user（"continue"）。其他上游宽容不受影响——只挂 workbuddy。
 export function sanitizeToolSequence(messages) {
   const list = Array.isArray(messages) ? messages : [];
 
-  const callIds = new Set();
-  for (const m of list) {
-    if (m?.role === "assistant" && Array.isArray(m.tool_calls)) {
-      for (const tc of m.tool_calls) {
-        const id = String(tc?.id || "");
-        if (id) callIds.add(id);
-      }
-    }
-  }
-
-  const resultIds = new Set();
-  for (const m of list) {
-    if (m?.role === "tool") {
-      const id = String(m.tool_call_id || "");
-      if (id) resultIds.add(id);
-    }
-  }
-
-  const paired = new Set();
-  for (const id of callIds) if (resultIds.has(id)) paired.add(id);
+  const resultById = new Map();
+  list.forEach((m, idx) => {
+    if (m?.role !== "tool") return;
+    const id = String(m.tool_call_id || "");
+    if (id && !resultById.has(id)) resultById.set(id, { msg: m, idx, used: false });
+  });
 
   let droppedCalls = 0;
   let droppedResults = 0;
+  let movedResults = 0;
   const out = [];
-  for (const m of list) {
+  list.forEach((m, idx) => {
     if (m?.role === "assistant" && Array.isArray(m.tool_calls) && m.tool_calls.length) {
-      const kept = m.tool_calls.filter((tc) => paired.has(String(tc?.id || "")));
-      droppedCalls += m.tool_calls.length - kept.length;
+      const kept = [];
+      for (const tc of m.tool_calls) {
+        const r = resultById.get(String(tc?.id || ""));
+        if (r && !r.used) kept.push(tc);
+        else droppedCalls++;
+      }
       if (kept.length) {
         out.push({ ...m, tool_calls: kept });
+        for (const tc of kept) {
+          const r = resultById.get(String(tc.id));
+          r.used = true;
+          if (!(r.idx >= idx + 1 && r.idx <= idx + kept.length)) movedResults++;
+          out.push(r.msg);
+        }
       } else if (typeof m.content === "string" && m.content) {
         const { tool_calls: _dropped, ...rest } = m;
         out.push(rest);
       }
-      continue;
+      return;
     }
     if (m?.role === "tool") {
-      if (paired.has(String(m.tool_call_id || ""))) out.push(m);
-      else droppedResults++;
-      continue;
+      const id = String(m.tool_call_id || "");
+      const r = resultById.get(id);
+      if (r && r.idx === idx && r.used) return; // 已前移消费，跳过原位置
+      droppedResults++; // 孤儿或重复
+      return;
     }
     out.push(m);
+  });
+
+  let injectedHead = 0;
+  if (out.length && out[0]?.role !== "user" && out[0]?.role !== "system" && out[0]?.role !== "developer") {
+    out.unshift({ role: "user", content: "continue" });
+    injectedHead = 1;
   }
 
-  return { messages: out, droppedCalls, droppedResults };
+  return { messages: out, droppedCalls, droppedResults, movedResults, injectedHead };
 }

package/src/providers/workbuddy/sdk-chat.js

@@ -8,7 +8,7 @@ export { sdkBaseFromUrl };
 
 let channelLogged = false;
 
-export async function attemptOnceSdk({ url, body, key, auth, buildHeaders, clock = Date.now } = {}) {
+export async function attemptOnceSdk({ url, body, key, auth, buildHeaders, clock = Date.now, fetchImpl } = {}) {
   const out = await attemptGeneric({
     url,
     body,
@@ -16,6 +16,7 @@ export async function attemptOnceSdk({ url, body, key, auth, buildHeaders, clock
     providerName: "workbuddy",
     marker: { name: "x-mslxdff-workbuddy-channel", value: "sdk" },
     clock,
+    ...(fetchImpl ? { fetchImpl } : {}),
   });
   if (!channelLogged) {
     channelLogged = true;

package/src/routes/chat/peer-handler.js

@@ -24,12 +24,20 @@ export async function handlePeerRelay({
   res,
 }) {
   evt("peer-race-start", { reqId: handlerCtx.reqId, model, peers: peers.ordered().length });
+  const peerErrors = [];
+  const pctx = { ...handlerCtx, peerErrors };
   const win =
-    (await racePeerCandidates(peers.ordered(), handlerCtx)) ||
-    (await racePeerCandidates(peers.orderedByLastError(), handlerCtx));
+    (await racePeerCandidates(peers.ordered(), pctx)) ||
+    (await racePeerCandidates(peers.orderedByLastError(), pctx)) ||
+    (await racePeerCandidates(peers.coolingByLastError(), pctx));
   if (!win) {
     evt("peer-race-lose", { reqId: handlerCtx.reqId, model });
-    return { handled: false };
+    // 组员全失败：把每个组员的真实返回汇总给调用者（否则只剩一个无信息的 429/502）
+    const detail = peerErrors.length
+      ? peerErrors.map((e) => `${e.peer} -> ${e.status}${e.message ? ` (${String(e.message).slice(0, 160)})` : ""}`).join("; ")
+      : "no peers available";
+    const allLimit = peerErrors.length > 0 && peerErrors.every((e) => e.status === 429);
+    return { handled: false, lastErr: { model, upstream: null, status: allLimit ? 429 : 502, message: `peers failed: ${detail}` } };
   }
   evt("peer-race-win", { reqId: handlerCtx.reqId, model, winPeer: win.peer.url, winTarget: win.target, latencyMs: win.latencyMs });
   await peers.recordResult(win.peer.url, { ok: true, latencyMs: win.latencyMs, model: win.target });

package/src/routes/chat/via-route-handler.js

@@ -104,7 +104,7 @@ export async function handleViaRoute({
     try { bodyText = await upRes.clone().text(); } catch {}
     const msg = bodyText.slice(0, 300) || errMsg(upRes) || `peer ${status}`;
     evt("via-route-peer-error", { reqId: handlerCtx.reqId, peer: peer.url, model, status, message: msg.slice(0, 200) });
-    try { await peers.recordError(peer.url); } catch {}
+    try { await peers.recordError(peer.url, { status }); } catch {}
     try { await peers.recordResult(peer.url, { ok: false }); } catch {}
     // 502/429 等可 fallback 到 direct
     return { handled: false, lastErr: { model, upstream: upRes, status, message: msg } };

package/src/routes/hedge.js

@@ -136,7 +136,8 @@ export async function hedgedFirstChunkRace({
   try {
     peerWin =
       (await racePeerCandidates(candidates, handlerCtx)) ||
-      (await racePeerCandidates(handlerCtx.peers.orderedByLastError(), handlerCtx));
+      (await racePeerCandidates(handlerCtx.peers.orderedByLastError(), handlerCtx)) ||
+      (await racePeerCandidates(handlerCtx.peers.coolingByLastError(), handlerCtx));
   } catch (_) {
     peerWin = null;
   }

package/src/routes/peers.js

@@ -142,7 +142,9 @@ export async function racePeerCandidates(candidates, ctx) {
           }
           if (failed) {
             const status = res instanceof Error ? 502 : res.status;
-            ctx.logError(ctx.model, status, res instanceof Error ? errMsg(res) : `peer ${status}`);
+            const failRec = { peer: peer.url, status, message: res instanceof Error ? errMsg(res) : null };
+            if (Array.isArray(ctx.peerErrors)) ctx.peerErrors.push(failRec);
+            ctx.logError(ctx.model, status, res instanceof Error ? `peer ${peer.url} ${errMsg(res)}` : `peer ${peer.url} ${status}`);
             ctx.evt("peer-error", { peer: peer.url, model: target, status, message: res instanceof Error ? errMsg(res) : null });
             order.push({ ok: false, peer, target, res, status });
           } else {
@@ -157,7 +159,7 @@ export async function racePeerCandidates(candidates, ctx) {
       for (const o of completed) {
         if (o === winner) continue;
         if (!o.ok) {
-          await ctx.peers.recordError(o.peer.url);
+          await ctx.peers.recordError(o.peer.url, { status: o.status });
           await ctx.peers.recordResult(o.peer.url, { ok: false });
         } else {
           await ctx.peers.recordResult(o.peer.url, { ok: true, latencyMs: o.latencyMs, model: o.target });
@@ -165,8 +167,25 @@ export async function racePeerCandidates(candidates, ctx) {
       }
       return { peer: winner.peer, target: winner.target, res: winner.res, latencyMs: winner.latencyMs };
     }
+    // 全失败：补读失败响应体（诊断 + 调用者详情）。仅在"本轮无 winner"时执行，
+    // 不拖慢成功路径；并行读、每 peer 上限 600ms，body 里才有 400/429 的真实原因。
+    await Promise.all(completed.map(async (o) => {
+      if (o.ok || !o.res || typeof o.res !== "object" || o.res instanceof Error) return;
+      try {
+        const snip = String(await Promise.race([
+          o.res.clone().text(),
+          new Promise((r) => { const t = setTimeout(() => r(""), 600); t.unref?.(); }),
+        ])).replace(/\s+/g, " ").slice(0, 300);
+        if (!snip) return;
+        if (Array.isArray(ctx.peerErrors)) {
+          const rec = ctx.peerErrors.find((x) => x.peer === o.peer.url && x.status === o.status && !x.message);
+          if (rec) rec.message = snip;
+        }
+        ctx.logError(ctx.model, o.status, `peer ${o.peer.url} ${o.status} body=${snip}`);
+      } catch {}
+    }));
     for (const o of completed) {
-      await ctx.peers.recordError(o.peer.url);
+      await ctx.peers.recordError(o.peer.url, { status: o.status });
       await ctx.peers.recordResult(o.peer.url, { ok: false });
     }
   }

package/src/runtime/auto-update.js

@@ -11,7 +11,12 @@ export function setupAutoUpdate({ VERSION, bus, logs }) {
     const line = `[auto-update] ${type} ${JSON.stringify(data)}`;
     console.log(line);
   }
-  if (autoUpdateMs) {
+  // debug 会话不自动升级：debug 前台会把自己的 pid 写入 daemon.pid，
+  // auto-update 的 stopDaemon() 会把它自己停掉（现象：-debug 跑一会儿就"自己退出"）
+  if (autoUpdateMs && process.env.MSLXDFF_DEBUG === "1") {
+    console.log(`auto-update: skipped (debug session)`);
+    emitAutoUpdate("auto-update-skipped", { intervalMs: autoUpdateMs, current: VERSION, reason: "debug" });
+  } else if (autoUpdateMs) {
     console.log(`auto-update enabled: checking every ${Math.round(autoUpdateMs / 60000)}m`);
     emitAutoUpdate("auto-update-enabled", { intervalMs: autoUpdateMs, current: VERSION });
     setTimeout(() => {

package/src/runtime/providers-setup.js

@@ -11,7 +11,7 @@ import { logDir, appendEvent } from "../logs.js";
 import { loadPlugins, runHook, resolvePluginDirs } from "../plugins.js";
 import { createOpenCodeProvider } from "../providers/opencode.js";
 import { loadProviderKeys, loadProviderAuths, loadProviderConfigs } from "../state.js";
-import { refreshIntervalMs, modelCooldownMs, slowCooldownMs, peerCooldownMs, peerHeatMs, banWindowMs, banThreshold } from "../cli/policy.js";
+import { refreshIntervalMs, modelCooldownMs, slowCooldownMs, peerCooldownMs, peerLimitCooldownMs, peerHeatMs, banWindowMs, banThreshold } from "../cli/policy.js";
 import { errMsg } from "../cli/util.js";
 
 /**
@@ -140,7 +140,7 @@ export async function setupProviders() {
       }
     },
   });
-  const peers = createPeersService({ cooldownMs: peerCooldownMs(), heatMs: peerHeatMs() });
+  const peers = createPeersService({ cooldownMs: peerCooldownMs(), limitCooldownMs: peerLimitCooldownMs(), heatMs: peerHeatMs() });
   const groups = createGroupsService({});
   const bans = createBansService({ windowMs: banWindowMs(), threshold: banThreshold() });
 

package/src/runtime/server-lifecycle.js

@@ -37,8 +37,16 @@ export async function startServerLifecycle({ VERSION, token, created, upstream,
       } catch {}
     });
     const { startDaemon: sd } = await import("../daemon.js");
-    const restore2 = () => {
+    const restore2 = async () => {
       console.log("\n[debug] restoring background daemon...");
+      try { await srv.close(); } catch {} // 先释放端口，避免恢复的 daemon 抢端口互杀
+      if (process.platform === "linux") {
+        try {
+          const { execFile } = await import("node:child_process");
+          const ok = await new Promise((res) => execFile("systemctl", ["--user", "start", "mslxdff"], { windowsHide: true, timeout: 8000 }, (e) => res(!e)));
+          if (ok) { console.log("[debug] systemd user service restarted (mslxdff)"); setTimeout(() => process.exit(0), 300); return; }
+        } catch {}
+      }
       try {
         const restoredPid = sd([]);
         console.log(`[debug] daemon restored (pid ${restoredPid})`);

package/src/upstream-engine/sdk/attempt.js

@@ -6,6 +6,7 @@
 // 见 .scratch/ai-sdk-upstream/{SPEC.md,SPEC-p3-responses.md} 与 docs/adr/0017。
 import { toModelPrompt, toModelTools, toModelToolChoice, toModelParams } from "./convert.js";
 import { createSseSerializer } from "./sse.js";
+import { diagnoseToolSequence, compactSequence } from "./diagnose.js";
 import { getUndici } from "../../compat.js";
 
 let sdkPromise = null;
@@ -44,6 +45,20 @@ export function markerHeaders(marker) {
   return marker && marker.name ? { [marker.name]: marker.value } : {};
 }
 
+// 错误路径诊断：AI SDK 的 APICallError 对 HTTP 4xx 的 requestBodyValues 是空对象（provider-utils 实测），
+// 故用包装 fetch 捕获真实发出的 body，在上游非 2xx 时打印 tool 序列断裂点与尾部序列。
+function logRequestDiagnosis(bodyText, status) {
+  if (!bodyText || typeof bodyText !== "string") return;
+  let parsed = null;
+  try { parsed = JSON.parse(bodyText); } catch { return; }
+  const msgs = parsed?.messages;
+  if (!Array.isArray(msgs)) return;
+  const { issues, summary } = diagnoseToolSequence(msgs);
+  console.error(`[sdk-upstream] ${status} ${summary} issues=${issues.length ? issues.join(" | ") : "none"}`);
+  console.error(`[sdk-upstream] head: ${compactSequence(msgs, 0, 6)}`);
+  console.error(`[sdk-upstream] tail: ${compactSequence(msgs, Math.max(0, msgs.length - 40))}`);
+}
+
 // SDK 抛出的 APICallError → 带状态码的 Response；非 HTTP 错误返回 null 由调用方 rethrow。
 export function errorResponseFromSdkError(e, { marker = null } = {}) {
   const status = Number(e?.statusCode ?? e?.status);
@@ -125,11 +140,19 @@ export async function attemptOnceSdk({
     err._sdkLoadFailed = true;
     throw err;
   }
+  // 包装注入的 fetch 以捕获真实请求体（诊断用）：不改变调用语义，仅在非 2xx 时被读取。
+  let lastBodyText = null;
+  const capturedFetch = fetchImpl
+    ? async (u, init) => {
+        try { if (init && typeof init.body === "string") lastBodyText = init.body; } catch {}
+        return fetchImpl(u, init);
+      }
+    : undefined;
   const provider = createOpenAICompatible({
     name: providerName,
     baseURL,
     headers: sanitizeHeaders(headers),
-    ...(fetchImpl ? { fetch: fetchImpl } : {}),
+    ...(capturedFetch ? { fetch: capturedFetch } : {}),
   });
   const model = provider.chatModel(String(body?.model || ""));
   let res;
@@ -142,7 +165,10 @@ export async function attemptOnceSdk({
     });
   } catch (e) {
     const mapped = errorResponseFromSdkError(e, { marker });
-    if (mapped) return mapped;
+    if (mapped) {
+      try { logRequestDiagnosis(lastBodyText, mapped.status); } catch {}
+      return mapped;
+    }
     throw e;
   }
   return streamResponseFromParts(res.stream, { marker, clock, t0 });

package/src/upstream-engine/sdk/diagnose.js

@@ -0,0 +1,61 @@
+// 请求消息序列诊断（纯函数）：上游 11148 tool_call_sequence_broken 时定位断裂点。
+// 上游校验规则：assistant.tool_calls 必须与紧随其后的 tool 结果按 id 严格配对，
+// 且配对过程不能被其他消息（user/assistant/system）打断——仅集合级 id 配对（sanitize-tools）不够。
+// 在 SDK 错误路径对 AI SDK 实际发出的请求体做本诊断，异常位置用消息下标指认。
+export function compactSequence(messages, from = 0, limit = Infinity) {
+  const list = Array.isArray(messages) ? messages : [];
+  const end = Number.isFinite(limit) ? Math.min(list.length, from + limit) : list.length;
+  const out = [];
+  for (let i = Math.max(0, from); i < end; i++) {
+    const m = list[i] || {};
+    const role = String(m.role || "?");
+    if (role === "assistant") {
+      const calls = Array.isArray(m.tool_calls) ? m.tool_calls : [];
+      out.push(calls.length ? `A{${calls.map((t) => String(t?.id || "empty")).join(",")}}` : "A");
+    } else if (role === "tool") out.push(`T{${String(m.tool_call_id || "empty")}}`);
+    else if (role === "user") out.push("U");
+    else if (role === "system" || role === "developer") out.push("S");
+    else out.push(String(role)[0] || "?");
+  }
+  return out.join(" ");
+}
+
+export function diagnoseToolSequence(messages) {
+  const list = Array.isArray(messages) ? messages : [];
+  const issues = [];
+  const open = new Map();
+  let calls = 0;
+  let results = 0;
+  const first = list[0];
+  if (first && first.role !== "user" && first.role !== "system" && first.role !== "developer") {
+    issues.push(`#0 首条为 ${String(first.role || "?")}（上游拒带工具链的 assistant/tool 开头）`);
+  }
+  list.forEach((m, i) => {
+    const role = m?.role;
+    if (role === "assistant") {
+      const tcs = Array.isArray(m.tool_calls) ? m.tool_calls : [];
+      if (tcs.length) {
+        if (open.size) issues.push(`#${i} assistant 打断未闭合{${[...open.keys()].join(",")}}`);
+        for (const tc of tcs) {
+          const id = String(tc?.id || "");
+          calls++;
+          if (!id) issues.push(`#${i} tool_call 空 id`);
+          else if (open.has(id)) issues.push(`#${i} call id 重复:${id}`);
+          else open.set(id, i);
+        }
+      } else if (open.size) {
+        issues.push(`#${i} assistant(无调用) 打断{${[...open.keys()].join(",")}}`);
+      }
+    } else if (role === "tool") {
+      results++;
+      const id = String(m.tool_call_id || "");
+      if (!id) issues.push(`#${i} tool 结果空 id`);
+      else if (!open.has(id)) issues.push(`#${i} 孤立结果:${id}`);
+      else open.delete(id);
+    } else if (open.size) {
+      issues.push(`#${i} ${role} 打断{${[...open.keys()].join(",")}}`);
+    }
+  });
+  for (const [id, at] of open) issues.push(`#${at} 悬空调用:${id}`);
+  return { issues, summary: `msgs=${list.length} calls=${calls} results=${results}` };
+}