mslxdff 0.1.136 → 0.1.140

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mslxdff",
-  "version": "0.1.136",
+  "version": "0.1.140",
   "description": "测试项目，请勿使用。",
   "type": "module",
   "bin": {
@@ -12,7 +12,7 @@
     "docs:check": "node scripts/docs-check.js"
   },
   "engines": {
-    "node": ">=16"
+    "node": ">=18"
   },
   "files": [
     "bin/",

package/src/chat/gateway.js

@@ -138,7 +138,7 @@ export function createGatewayClient({
         }
         if (provider === "opencode" && rawModel.includes("/")) {
           const maybe = rawModel.split("/")[0];
-          if (["workbuddy", "clinebot", "sensenova", "openrouter", "generic"].includes(maybe)) provider = maybe;
+          if (["workbuddy", "cline", "sensenova", "openrouter", "generic"].includes(maybe)) provider = maybe;
         }
       } catch {}
       if (TRACE) {

package/src/chat/prompt.js

@@ -58,7 +58,7 @@ ${mini}
 - 需要执行命令时调用 run_command，需要看文件时调用 read_file，需要检查网络/服务可用性时调用 curl。
 - curl 简写：upstream(=上游 https://opencode.ai/zen/v1/models)、local/health(=本机 /health)、local/models(=本机 /v1/models)，也支持完整 http(s) URL；会自动补上游头、本机 token 与已配置供应商 key（直连 https://api.b.ai/v1/models 会自动带 bai 的 key，无需手动加头）。
 - 查“某供应商有哪些模型”**优先用 CLI 直查**：若上方“可用模型”已能回答，直接前缀过滤回答（如 workbuddy/ 即 workbuddy）；需实时拉取时调用 run_command: "-provider <id> models"（如 -provider workbuddy models）或 "-model list --provider <id>"，按 allowlist 过滤，--json 供脚本。**禁止**调 -provider <id> list（这是查配置，不是查模型！）。**错误示例**：workbuddy有哪些模型 → 调 -provider workbuddy list → 错。**正确**：-provider workbuddy models。禁止为此调用 -showtoken。
-- 严禁幻觉命令：mslxdff "hi" --model X / mslxdff --model X "hi" / mslxdff -chat --model X 都不存在，输出只会是 status 页。探活任意模型（含 clinebot/*、workbuddy/*、bai/*）必须用 curl POST http://localhost:8989/v1/chat/completions，body 为 {"model":"<前缀/模型>","messages":[{"role":"user","content":"hi"}],"stream":false}，成功 200 + x-mslxdff-via:local 即通；401 代表本机 token 陈旧需提示 mslxdff -stop && mslxdff；403 + x-mslxdff-allowlist:1 代表白名单未放行需 allowlist add。
+- 严禁幻觉命令：mslxdff "hi" --model X / mslxdff --model X "hi" / mslxdff -chat --model X 都不存在，输出只会是 status 页。探活任意模型（含 cline/*、workbuddy/*、bai/*）必须用 curl POST http://localhost:8989/v1/chat/completions，body 为 {"model":"<前缀/模型>","messages":[{"role":"user","content":"hi"}],"stream":false}，成功 200 + x-mslxdff-via:local 即通；401 代表本机 token 陈旧需提示 mslxdff -stop && mslxdff；403 + x-mslxdff-allowlist:1 代表白名单未放行需 allowlist add。
 - **禁止重复调用（最高优先级）**：同一 run_command/curl/read_file 在本轮只执行一次，重复会被工具侧 SKIPPED_DUP 拦截；查询类（-showtoken/-status/-provider list/-providers list/-model list/-group list/-log 等）**调用一次即答案**，拿到 OK 结果后必须**立即用中文直接回答用户**，禁止再发起任何工具调用。收到 SKIPPED_DUP 或“请直接回答/禁止再调用”提示时，必须 0 工具直接回答。
 - 禁止调用 -uninstall，包含即拒绝；-showtoken 仅在用户明确要求查看/调试本机 token 时才用，查模型/查供应商严禁调用。
 - 回复风格：简洁友好，执行前后用中文说明你在做什么。

package/src/chat/terminal.js

@@ -96,7 +96,7 @@ export function handleSlash(line, ctx) {
     const id = arg;
     if (id.includes("/")) {
       console.log(`\x1b[31m[拒绝] ${id} 带供应商前缀 — -chat 只支持 opencode 上游模型（裸 id，直连 opencode.ai 免费池）\x1b[0m`);
-      console.log(`\x1b[90m其他供应商（deepseek/ workbuddy/ clinebot/ 等）请走网关：mslxdff -model set <id> 或 curl 本机 /v1/chat/completions\x1b[0m`);
+      console.log(`\x1b[90m其他供应商（deepseek/ workbuddy/ cline/ 等）请走网关：mslxdff -model set <id> 或 curl 本机 /v1/chat/completions\x1b[0m`);
       return { handled: true };
     }
     if (!isFreeModel(id) || !freePoolNow().includes(id)) {

package/src/chooser.js

@@ -1,33 +1,52 @@
-// 交互式模型选择器的纯渲染逻辑（便于测试）；键盘循环在 bin/mslxdff.js
+// 交互式模型选择器的纯渲染逻辑（便于测试）；键盘循环在 interactive.js
 
-// items: [{ id, status?, ms?, fail?, current?, picked? }]；cursor 当前高亮行
+// items: [{ id, status?, ms?, fail?, current?, picked? }]；cursor 当前高亮行（全局下标）
 // multi=true 时多选勾选（picked 显示 [x]/[ ]），否则单选默认模型（当前显示 ✓）
-// 返回行数组（无 ANSI 颜色，纯文本标记，Windows 终端友好）
-export function renderChooser(items, cursor = 0, { multi = false } = {}) {
-  return items.map((it, i) => {
+// index/size 可选——窗口分页渲染（只画当页 + 页头），不传 size 则全量渲染（行为不变）
+// Note: 分页是本模块职责（键盘循环在 interactive.js），不传 size 必全量渲染 — 见 .agents/notes/implemented/feature/2026-09-21-models-paginated-chooser.md
+export function renderChooser(items, cursor = 0, { multi = false, index = 0, size } = {}) {
+  if (size == null) return renderRows(items, cursor, 0, multi);
+  const total = items.length;
+  const sz = Math.max(1, Number(size) || 1);
+  const pages = Math.max(1, Math.ceil(total / sz));
+  const idx = Math.min(Math.max(Number(index) || 0, 0), pages - 1);
+  const start = idx * sz;
+  const rows = [`── 第 ${idx + 1}/${pages} 页 · 共 ${total} 项（←/→ 翻页） ──`];
+  rows.push(...renderRows(items.slice(start, start + sz), cursor, start, multi));
+  return rows;
+}
+
+function renderRows(slice, cursor, offset, multi) {
+  return slice.map((it, li) => {
+    const i = offset + li;
     const arrow = i === cursor ? "❯" : " ";
-    const check = multi
-      ? (it.picked ? " [✓]" : " [ ]")
-      : (it.current ? " ✓ (current)" : "");
     let state = "";
     if (it.fail) state = `  [fail: ${it.fail}]`;
     else if (it.ms != null) state = `  [${it.ms}ms]`;
     else if (it.status && it.status !== "normal") state = `  [${it.status}]`;
+    if (multi) {
+      const box = it.picked ? "[✓]" : "[ ]";
+      return `${arrow} ${box} ${it.id}${state}`;
+    }
+    const check = it.current ? " ✓ (current)" : "";
     return `${arrow} ${it.id}${check}${state}`;
   });
 }
 
-export function renderChooserHelp(multi = false) {
+export function renderChooserHelp(multi = false, hasPages = false) {
+  const paging = hasPages ? " · ←/→ page" : "";
   return multi
-    ? ["", "↑/↓ move · Space toggle pick · Enter save picks · q/Esc cancel"]
-    : ["", "↑/↓ move · Enter select as default · q/Esc cancel"];
+    ? ["", `↑/↓ move · Space toggle pick${paging} · Enter save picks · q/Esc cancel`]
+    : ["", `↑/↓ move${paging} · Enter select as default · q/Esc cancel`];
 }
 
-// 解析按键：返回 "up" | "down" | "enter" | "cancel" | "space" | null(忽略)
+// 解析按键：返回 "up" | "down" | "pageup" | "pagedown" | "enter" | "cancel" | "space" | null(忽略)
 export function parseKey(str) {
   if (!str) return null;
   if (str === "\x1b[A" || str === "k") return "up";
   if (str === "\x1b[B" || str === "j") return "down";
+  if (str === "\x1b[D" || str === "h" || str === "\x1b[5~") return "pageup";
+  if (str === "\x1b[C" || str === "l" || str === "\x1b[6~") return "pagedown";
   if (str === "\r" || str === "\n") return "enter";
   if (str === " " || str === "\x1b[32") return "space"; // 空格（32=0x20 的 ASC 表示）或某些终端 terminator
   if (str === "\x1b" || str === "q" || str === "\x03") return "cancel";

package/src/cli/commands/model/list-live.js

@@ -0,0 +1,22 @@
+// 交互式 `-models` 候选合并（从 list.js 拆出以守住 ≤10KB 体积门）。
+// allowAny 且空白名单的供应商（qoder/codearts 类）不写 allowlist，其模型只存在于
+// daemon 聚合的 /v1/models —— 不并入这些 id，该供应商在交互列表里「一个都挑不到」。
+import { loadProviderAllowedModels } from "../../../state.js";
+
+/** 把「空白名单且已启用」供应商的网关 live 模型并入候选（按前缀归属，去重）。 */
+export async function mergeLiveIds({ combinedIds, seen, knownProviders, liveIds }) {
+  const needsLive = knownProviders.filter(
+    (k) => String(k).toLowerCase() !== "opencode" && loadProviderAllowedModels(k).length === 0,
+  );
+  if (!needsLive.length) return;
+  const { fetchDaemonModelIds } = await import("./live-models.js");
+  const live = await fetchDaemonModelIds();
+  for (const id of live) {
+    if (liveIds.includes(id)) continue; // 单供应商缓存已含 → 不重复
+    const pid = String(id).includes("/") ? String(id).split("/")[0].toLowerCase() : "opencode";
+    if (!needsLive.some((k) => String(k).toLowerCase() === pid)) continue;
+    if (seen.has(id)) continue;
+    seen.add(id);
+    combinedIds.push(id);
+  }
+}

package/src/cli/commands/model/list-providers.js

@@ -8,7 +8,7 @@ export async function renderOtherProviders({ pickedIds, ids, fullAliases }) {
   try { _la2(); } catch {}
   const configs = loadProviderConfigs();
   const otherIds = Object.keys(configs).filter((k) => String(k).toLowerCase() !== "opencode");
-  const order2 = ["workbuddy", "clinebot", "openrouter", "bai"];
+  const order2 = ["workbuddy", "cline", "openrouter", "bai"];
   otherIds.sort((a, b) => {
     const ia = order2.indexOf(a), ib = order2.indexOf(b);
     if (ia !== -1 || ib !== -1) {

package/src/cli/commands/model/list-render.js

@@ -57,7 +57,7 @@ export function renderFreeList({ ids, at, pickedIds, sortedProvs, groups, aliasM
   }
 }
 
-/** 按供应商分组 + 排序（opencode/workbuddy/clinebot/openrouter 优先） */
+/** 按供应商分组 + 排序（opencode/workbuddy/cline/openrouter 优先） */
 export function groupByProvider(ids) {
   const groups = {};
   for (const id of ids) {
@@ -65,7 +65,7 @@ export function groupByProvider(ids) {
     if (!groups[prov]) groups[prov] = [];
     groups[prov].push(id);
   }
-  const order = ["opencode", "workbuddy", "clinebot", "openrouter"];
+  const order = ["opencode", "workbuddy", "cline", "openrouter"];
   const sortedProvs = Object.keys(groups).sort((a, b) => {
     const ia = order.indexOf(a), ib = order.indexOf(b);
     if (ia !== -1 || ib !== -1) {

package/src/cli/commands/model/list.js

@@ -10,6 +10,7 @@ import { pickInteractiveMulti } from "../../interactive.js";
 import { buildAliasMap, readFullAliases, renderProviderList, renderFreeList, groupByProvider } from "./list-render.js";
 import { renderOtherProviders } from "./list-providers.js";
 import { filterStalePicks } from "../../../providers/model-id.js";
+import { mergeLiveIds } from "./list-live.js";
 
 /**
  * `-model list` 全流程：参数解析 → 刷新/回退 → provider 分支 → TTY 交互 → 分组渲染。
@@ -159,6 +160,7 @@ export async function handleModelList(args, idx, sub) {
             }
           }
         }
+        await mergeLiveIds({ combinedIds, seen, knownProviders, liveIds: ids });
         staleFilter = { knownProviders, liveIds: ids, allowedIds };
       } catch {}
       // provider 已不存在的 picks 孤儿不进交互列表（数据不动，status --all 仍可审计）。

package/src/cli/commands/model/live-models.js

@@ -0,0 +1,24 @@
+// 网关 live 模型列表：allowAny 且空白名单的供应商（qoder/codearts 类）不写 allowlist，
+// 其模型只存在于 daemon 聚合的 /v1/models 里；交互式 `-models` 必须并入这些 id，
+// 否则该供应商「一个模型都挑不到」（用户视角：-models 什么也没有）。
+import { compatFetch, timeoutSignal } from "../../../compat.js";
+import { effectivePort, effectiveHost } from "../../policy.js";
+import { loadToken } from "../../../state.js";
+
+export async function fetchDaemonModelIds({ fetchImpl = compatFetch, port, host, token, timeoutMs = 6000 } = {}) {
+  try {
+    const p = port ?? effectivePort([]);
+    const h = host ?? effectiveHost() ?? "127.0.0.1";
+    const tk = (token ?? (await loadToken())?.token) || "";
+    const res = await fetchImpl(`http://${h}:${p}/v1/models?all=1`, {
+      headers: tk ? { Authorization: `Bearer ${tk}` } : {},
+      signal: timeoutSignal(timeoutMs),
+    });
+    if (!res?.ok) return [];
+    const json = await res.json().catch(() => ({}));
+    return (json?.data || []).map((m) => m?.id).filter(Boolean);
+  } catch {
+    // 网关没跑 / 超时 / 鉴权失败：静默降级（候选列表退回 allowlist + picks）
+    return [];
+  }
+}

package/src/cli/commands/provider/add.js

@@ -69,7 +69,8 @@ export async function handleProviderAdd(id, sub, rest) {
     try {
       const { writeFileSync, mkdirSync } = await import("node:fs");
       const { join } = await import("node:path");
-      const dir = process.env.WORKBUDDY_AUTH_DIR || join(process.cwd(), "auths");
+      const { resolveAuthDir } = await import("../../providers/workbuddy/account-store.js");
+      const dir = resolveAuthDir();
       mkdirSync(dir, { recursive: true });
       const fp = join(dir, `workbuddy-${uid}.json`);
       const doc = { account: { uid, enterpriseId: "", nickname: "" }, auth: { accessToken: token, refreshToken: "", expiresAt: Math.floor(Date.now()/1000)+3600, domain: "www.codebuddy.cn" } };

package/src/cli/commands/provider/bench-via.js

@@ -120,7 +120,7 @@ export async function handleVia({ providerId, opts, fetchImpl, loadConfigs, load
       for (const k of Object.keys(raw.providerConfigs || {})) if (!targetIds.includes(k) && (loadAllowed(k) || []).length) targetIds.push(k);
       for (const k of Object.keys(raw.providerKeys || {})) if (!targetIds.includes(k) && (loadAllowed(k) || []).length) targetIds.push(k);
     } catch {}
-    if (!targetIds.length) targetIds = ["openrouter", "workbuddy", "clinebot"].filter((p) => (loadAllowed(p) || []).length);
+    if (!targetIds.length) targetIds = ["openrouter", "workbuddy", "cline"].filter((p) => (loadAllowed(p) || []).length);
     // opencode 默认 allowAny 但 allowlist 常空：有裸 picks 且确认包含 opencode 时纳入
     if (includeOpencode && !targetIds.includes("opencode") && picks.some((p) => !String(p).includes("/") || String(p).toLowerCase().startsWith("opencode/"))) {
       targetIds.push("opencode");

package/src/cli/commands/provider/cline-free.js

@@ -0,0 +1,94 @@
+/**
+ * mslxdff -provider cline free [sync] [--yes] [--json] [--keep-extra]
+ * 只读：直查上游免费目录（公开接口，无凭据）并与当前 allowlist 求差；只有 `free sync --yes` 才写 allowlist。
+ * allowlist 存裸 id（不带 cline/ 前缀），与 normalizeAllowedModel 语义一致；落盘走 saveProviderAllowedModels 保留 keys/baseUrl。
+ */
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { fetchFreeCatalog, FALLBACK_FREE, FREE_CATALOG_PATH } from "../../../providers/cline/free-catalog.js";
+
+/** 上游不可达时退回内置兜底目录（标注 source=fallback，供人判断是否该落盘） */
+async function loadCatalog() {
+  const cat = await fetchFreeCatalog({});
+  if (cat.ok) return { ...cat, source: "upstream" };
+  return {
+    ...cat,
+    source: "fallback",
+    models: FALLBACK_FREE.map((m) => ({ ...m })),
+    ids: FALLBACK_FREE.map((m) => m.id),
+  };
+}
+
+function computeNext(current, freeIds, keepExtra) {
+  const next = keepExtra ? [...new Set([...current, ...freeIds])] : [...freeIds];
+  return {
+    next,
+    added: next.filter((m) => !current.includes(m)),
+    removed: current.filter((m) => !next.includes(m)),
+    kept: next.filter((m) => current.includes(m)),
+  };
+}
+
+function renderList(cat, current, next, plan) {
+  console.log(`cline free 目录（GET ${FREE_CATALOG_PATH} → free）：${cat.ids.length} 个${cat.source === "fallback" ? "（内置兜底，上游不可达）" : ""}`);
+  const w = Math.max(20, ...cat.ids.map((s) => s.length)) + 2;
+  for (const m of cat.models) console.log(`   + ${String(m.id).padEnd(w)}${m.name && m.name !== m.id ? m.name : ""}`);
+  console.log(`当前 allowlist：${current.length} 个`);
+  for (const id of current) console.log(`   ${next.includes(id) ? "✓" : "-"} ${id}${next.includes(id) ? "" : "          （不在 free 目录）"}`);
+  console.log(`结果：allowlist ${current.length} → ${next.length}（+${plan.added.length} 新增 / -${plan.removed.length} 移除 / ${plan.kept.length} 保留）`);
+}
+
+export async function handleClineFree(id, sub, rest = [], args = []) {
+  if (normalizeProviderId(id) !== "cline") return false;
+  if (String(sub || "").toLowerCase() !== "free") return false;
+  const isSync = String(rest[1] || "").toLowerCase() === "sync";
+  const wantsJson = args.includes("--json") || args.includes("-json");
+  const yes = args.includes("--yes") || args.includes("-y");
+  const keepExtra = args.includes("--keep-extra");
+
+  const { loadProviderAllowedModels, saveProviderAllowedModels } = await import("../../../state.js");
+  const cat = await loadCatalog();
+  const current = loadProviderAllowedModels("cline");
+  const plan = computeNext(current, cat.ids, keepExtra);
+  const dryRun = !(isSync && yes);
+  let written = [];
+  if (isSync && !dryRun) {
+    try {
+      written = saveProviderAllowedModels("cline", plan.next);
+    } catch (e) {
+      console.error(`❌ 写入 allowlist 失败: ${String(e?.message || e)}`);
+      process.exit(1);
+    }
+  }
+  const warning = cat.source === "fallback" ? `上游目录不可达（${cat.error || cat.status}），使用内置兜底目录，可能过期` : null;
+
+  if (wantsJson) {
+    console.log(JSON.stringify({
+      provider: "cline",
+      mode: isSync ? "sync" : "list",
+      source: cat.source,
+      url: cat.url,
+      free: cat.ids,
+      current,
+      next: plan.next,
+      added: plan.added,
+      removed: plan.removed,
+      kept: plan.kept,
+      dryRun,
+      written,
+      ...(warning ? { warning } : {}),
+    }, null, 2));
+    process.exit(0);
+  }
+
+  if (warning) console.error(`⚠️  ${warning}`);
+  renderList(cat, current, plan.next, plan);
+  if (!isSync) {
+    console.log(`\n预览（只读）。一键同步：mslxdff -provider cline free sync --yes   ·   只增不删：加 --keep-extra`);
+  } else if (dryRun) {
+    console.log(`\n预览模式，未写入。执行：mslxdff -provider cline free sync --yes${keepExtra ? " --keep-extra" : ""}`);
+  } else {
+    console.log(`\n✅ 已写入 allowlist：${written.length} 个（providerConfigs.cline.allowedModels）`);
+    console.log(`   生效：mslxdff -restart（daemon 的 /v1/models 聚合有 10 分钟缓存，重启即刷新）`);
+  }
+  process.exit(0);
+}

package/src/cli/commands/provider/cline-login.js

@@ -1,7 +1,8 @@
 import { compatFetch, getUndici, timeoutSignal } from "../../../compat.js";
+import { normalizeProviderId } from "../../../providers/model-id.js";
 export async function handleClineLogin(id, sub) {
   if (sub !== "login" && sub !== "auth" && sub !== "oauth") return false;
-  if (id !== "cline" && id !== "clinebot" && id !== "cline-bot") return false;
+  if (normalizeProviderId(id) !== "cline") return false;
 
   const CLIENT_ID = "client_01K3A541FN8TA3EPPHTD2325AR";
   const WORKOS_DEVICE = "https://api.workos.com/user_management/authorize/device";
@@ -97,7 +98,7 @@ export async function handleClineLogin(id, sub) {
     }
   }
   if (!workos) {
-    console.error("\n❌ 授权超时，请重新运行 mslxdff -provider clinebot login");
+    console.error("\n❌ 授权超时，请重新运行 mslxdff -provider cline login");
     process.exit(1);
   }
   console.log("\n✅ WorkOS 授权成功！\n🔗 用 WorkOS token 在 Cline 注册...");
@@ -117,28 +118,32 @@ export async function handleClineLogin(id, sub) {
   console.log("=".repeat(60));
   console.log(`✅ 登录成功! 账号: ${email}`);
   console.log(`🔑 refreshToken: ${rt.slice(0, 8)}…${rt.slice(-8)} (${rt.length} 字符)`);
-  // 落盘到 state（同时写 cline 与 clinebot 两个 id，兼容）
-  const { loadProviderKeys, saveProviderConfig, loadProviderConfig } = await import("../../../state.js");
-  for (const pid of ["cline", "clinebot"]) {
-    try {
-      const cur = loadProviderKeys(pid);
-      if (cur.includes(rt)) {
-        console.log(`   ℹ️ ${pid} 已存在相同 token，跳过`);
-        continue;
-      }
+  // 落盘到 state（供应商 id 恒为 cline；写盘前先跑一次性迁移，保证老用户不会再写出 clinebot）
+  const { defaultStateFile, loadProviderKeys, saveProviderConfig, loadProviderConfig } = await import("../../../state.js");
+  try {
+    const { runStateMigrations } = await import("../../../state/migrations.js");
+    const mig = await runStateMigrations({ file: defaultStateFile() });
+    if (mig.applied.length) console.log(`   ℹ️ 已合并遗留供应商配置: ${mig.applied.join(", ")}`);
+  } catch {}
+  try {
+    const pid = "cline";
+    const cur = loadProviderKeys(pid);
+    if (cur.includes(rt)) {
+      console.log(`   ℹ️ ${pid} 已存在相同 token，跳过`);
+    } else {
       const cfg = loadProviderConfig(pid) || { baseUrl: "", keys: [] };
       const nextKeys = [...new Set([...(cfg.keys || cur), rt].filter(Boolean))];
       saveProviderConfig(pid, { baseUrl: cfg.baseUrl || "https://api.cline.bot", keys: nextKeys });
       console.log(`   ✅ 已写入 ${pid}（现 ${nextKeys.length} 个账号）`);
-    } catch (e) {
-      console.log(`   ⚠️ 写入 ${pid} 失败: ${e.message}`);
     }
+  } catch (e) {
+    console.log(`   ⚠️ 写入 cline 失败: ${e.message}`);
   }
   console.log("=".repeat(60));
   console.log("\n下一步：");
   console.log("  mslxdff -restart                         重启网关使新账号生效");
-  console.log("  mslxdff -provider clinebot bench --json  测速 deepseek 是否 200");
+  console.log("  mslxdff -provider cline bench --json     测速 deepseek 是否 200");
   console.log("  mslxdff -chat                             直接对话，模型选 deepseek/deepseek-v4-flash");
-  console.log("\n多账号：重复 `mslxdff -provider clinebot login` 追加，二号自动做后备");
+  console.log("\n多账号：重复 `mslxdff -provider cline login` 追加，二号自动做后备");
   process.exit(0);
 }

package/src/cli/commands/provider/codearts-login.js

@@ -0,0 +1,45 @@
+// `-provider codearts login`：浏览器 PKCE 登录华为云 → 凭证 blob 落盘 providerConfigs.codearts。
+// 约定（对齐 cline-login/workbuddy-login）：不匹配返 false 交给下一个 handler；匹配即处理并退出。
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { defaultStateFile, loadProviderKeys, saveProviderConfig, saveProviderAllowAnyModels, loadProviderBaseUrl } from "../../../state.js";
+import { SNAP_BASE } from "../../../providers/codearts/const.js";
+import { runCodeartsLogin, accountToBlob } from "../../../providers/codearts/login.js";
+import { accountFromBlob } from "../../../providers/codearts/auth-pool.js";
+
+export async function handleCodeartsLogin(id, sub, rest = [], deps = {}) {
+  if (normalizeProviderId(id) !== "codearts") return false;
+  if (!(sub === "login" || sub === "auth" || sub === "oauth")) return false;
+  const noAllowAny = (rest || []).includes("--no-allow-any");
+  const file = deps.file || defaultStateFile();
+  const fetchImpl = deps.fetchImpl;
+  const log = deps.log || ((m) => console.log(m));
+
+  try {
+    const { account, state } = await runCodeartsLogin({ fetchImpl, log });
+    const blob = accountToBlob(account, { codeVerifier: state.codeVerifier, dpopJwk: state.dpopJwk, clientId: state.clientId });
+    // 同一账号重复登录：替换旧 blob；新账号：追加（多账号 keyring 轮转）。
+    // 去重键：userId 非空才可信；双方任一为空时退化为 refreshToken 比较
+    // （空 userId==空 userId 的误判会把第二个不同账号当同一账号替换，真机实测恒剩 1 key）
+    const cur = loadProviderKeys("codearts", { file }).filter((k) => {
+      const parsed = accountFromBlob(k);
+      if (!parsed) return false;
+      if (parsed.userId && account.userId) return parsed.userId !== account.userId;
+      return parsed.refreshToken !== account.refreshToken;
+    });
+    const baseUrl = loadProviderBaseUrl("codearts", { file }) || SNAP_BASE;
+    saveProviderConfig("codearts", { baseUrl, keys: [...cur, blob] }, { file });
+    if (!noAllowAny) saveProviderAllowAnyModels("codearts", true, { file });
+
+    log("");
+    log(`✅ codearts 登录成功：${account.userName || account.userId || "(user)"}（剩余账号数：${cur.length + 1}）`);
+    log(`   baseUrl: ${baseUrl}`);
+    log(`   凭证已写入 providerConfigs.codearts.keys（state.json，0600 权限目录，绝不入库）`);
+    if (!noAllowAny) log("   allowAnyModels=on（免费福利供应商默认放行全部模型；收紧：mslxdff -provider codearts allowAny off）");
+    log("   生效：mslxdff -restart（用户终端跑），然后 mslxdff -provider codearts models 验证");
+    process.exit(0);
+  } catch (err) {
+    console.error(`❌ codearts 登录失败：${String(err?.message || err)}`);
+    process.exit(1);
+  }
+  return true;
+}

package/src/cli/commands/provider/index.js

@@ -1,4 +1,5 @@
 import { readFileSync } from "node:fs";
+import { normalizeProviderId } from "../../../providers/model-id.js";
 import { defaultStateFile } from "../../../state.js";
 
 export async function handleProviders(args) {
@@ -40,6 +41,9 @@ export async function handleProvider(args) {
     console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx gpt-4  add with allowlist");
     console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx --models-path /v1/models --chat-path /v1/chat/completions");
     console.error("            mslxdff -provider openrouter                      interactive hidden input (append)");
+    console.error("            mslxdff -provider codearts login          华为云 CodeArts PKCE 授权（浏览器登录 → 凭证 blob 落盘，ADR-0027）");
+    console.error("            mslxdff -provider qoder login [--region cn|global]   Qoder 设备授权（国际站默认，国内站 --region cn）");
+    console.error("            mslxdff -provider qoder checkin [--json] [--region cn|global] [--any] [--dry]  每日签到领积分（cn=daily-check-in，global=campaigns）");
     console.error("            mslxdff -provider openrouter clear                remove all keys");
     process.exit(1);
   }
@@ -66,6 +70,15 @@ export async function handleProvider(args) {
   if (await handleClineLogin(id, sub)) return true;
   const { handleWorkbuddyLogin } = await import("./workbuddy-login.js");
   if (await handleWorkbuddyLogin(id, sub, rest)) return true;
+  const { handleCodeartsLogin } = await import("./codearts-login.js");
+  if (await handleCodeartsLogin(id, sub, rest)) return true;
+  const { handleTraeworkLogin, handleTraeworkCheckin } = await import("./traework-login.js");
+  if (await handleTraeworkLogin(id, sub, rest)) return true;
+  if (await handleTraeworkCheckin(id, sub, rest)) return true;
+const { handleQoderLogin } = await import("./qoder-login.js");
+  if (await handleQoderLogin(id, sub, rest)) return true;
+  const { handleQoderCheckin } = await import("./qoder-checkin.js");
+  if (await handleQoderCheckin(id, sub, rest)) return true;
   const { handleProviderConfig } = await import("./config.js");
   if (await handleProviderConfig(id, sub, rest)) return true;
   const { handleProviderAllowlist } = await import("./allowlist.js");
@@ -74,6 +87,27 @@ export async function handleProvider(args) {
   if (await handleProviderModels(id, sub, args, rest)) return true;
   const { handleProviderBench } = await import("./bench.js");
   if (await handleProviderBench(id, sub, rest, args)) return true;
+  const { handleClineFree } = await import("./cline-free.js");
+  if (await handleClineFree(id, sub, rest, args)) return true;
+  if (normalizeProviderId(id) === "cline" && sub === "migrate") {
+    const { runStateMigrations } = await import("../../../state/migrations.js");
+    const dryRun = args.includes("--dry-run") || args.includes("--dryrun");
+    const r = await runStateMigrations({ dryRun });
+    const d = r.details["cline-unify"] || {};
+    if (r.errors.length) console.error(`❌ 迁移失败: ${r.errors.map((e) => `${e.id}: ${e.error}`).join("; ")}`);
+    if (dryRun) {
+      console.log(d.changed
+        ? `cline migrate 干跑：将合并遗留 cline id 配置（keys ${d.before.keys} → ${d.after.keys} / allowlist ${d.before.allowedModels} → ${d.after.allowedModels}），未写入`
+        : "cline migrate 干跑：无需迁移（未发现 providerConfigs.clinebot / cline-bot）");
+    } else if (d.applied) {
+      console.log(`✅ cline migrate 完成：keys ${d.before.keys} → ${d.after.keys} / allowlist ${d.before.allowedModels} → ${d.after.allowedModels}`);
+      if (d.backup) console.log(`   备份：${d.backup}`);
+      console.log("   生效：mslxdff -restart");
+    } else {
+      console.log("cline migrate：无需迁移（未发现 providerConfigs.clinebot / cline-bot）");
+    }
+    process.exit(r.errors.length ? 1 : 0);
+  }
   const { handleProviderKeys } = await import("./keys.js");
   await handleProviderKeys(id, sub, rest, args);
   return true;

package/src/cli/commands/provider/keys.js

@@ -10,12 +10,23 @@ export async function handleProviderKeys(id, sub, rest, args) {
     else console.log(`provider: ${id}${id === "openrouter" ? " (built-in baseUrl: https://openrouter.ai/api/v1)" : ""}`);
     if (keys.length) {
       console.log(`  keys: ${keys.length} key${keys.length > 1 ? "s" : ""}`);
-      keys.forEach((k, i) => console.log(`  [${i + 1}]  ${k.slice(0, 4)}…${k.slice(-4)} (${k.length} chars)`));
+      if (id === "codearts") {
+        const { accountFromBlob } = await import("../../../providers/codearts/auth-pool.js");
+        for (const [i, k] of keys.entries()) {
+          const a = accountFromBlob(k);
+          if (a) console.log(`  [${i + 1}]  user=${a.userName || "(未识别)"} uid=${a.userId ? `${a.userId.slice(0, 8)}…` : "(空，请删了重登回填)"} domain=${a.domainId ? a.domainId.slice(0, 8) + "…" : "(空)"} (${k.length} chars)`);
+          else console.log(`  [${i + 1}]  ${k.slice(0, 4)}…${k.slice(-4)} (${k.length} chars)`);
+        }
+      } else keys.forEach((k, i) => console.log(`  [${i + 1}]  ${k.slice(0, 4)}…${k.slice(-4)} (${k.length} chars)`));
       console.log(`  remove by: mslxdff -provider ${id} remove <seq> [seq...] | <key-value>`);
     } else {
       console.log(`  keys: (no keys configured)`);
     }
-    console.log(`  share keys to peers:   借出（默认，key 随转发自动附带，ADR-0019）`);
+    try {
+      const { shareableProviderIds } = await import("../../../providers/share-keys.js");
+      const shared = shareableProviderIds().includes(id);
+      console.log(`  share keys to peers:   ${shared ? "借出（随转发自动附带，ADR-0019）" : "不借出（local-only / 硬排除，codearts/cline 恒不借，ADR-0019/0015）"}`);
+    } catch { console.log(`  share keys to peers:   借出（默认，key 随转发自动附带，ADR-0019）`); }
     console.log(`  allowAnyModels: ${allowAny ? "ON (empty allowlist = allow all)" : "OFF (empty allowlist = BLOCK ALL)"}  (mslxdff -provider ${id} allowAny on|off)`);
     if (allowed.length) console.log(`  allowedModels: ${allowed.length} (${allowed.join(", ")})  — only these can be used`);
     else console.log(`  allowedModels: (none — ${allowAny ? "allow all" : "BLOCK ALL"})  (mslxdff -provider ${id} allowlist set <model...>  or  allowAny on)`);

package/src/cli/commands/provider/models.js

@@ -1,9 +1,12 @@
 import { join } from "node:path";
 import { defaultStateFile } from "../../../state.js";
 import { logDir } from "../../../logs.js";
+import { normalizeProviderId } from "../../../providers/model-id.js";
 
 export async function handleProviderModels(id, sub, args, rest) {
   if (!(sub === "models" || sub === "show-models" || sub === "list-models" || sub === "ls")) return false;
+  // 供应商 id 归一（clinebot/cline-bot → cline）：老脚本 `-provider clinebot models` 仍走 cline 直查
+  id = normalizeProviderId(id);
   const { loadProviderConfig, loadProviderKeys, isModelAllowed } = await import("../../../state.js");
   const wantsJson = args.includes("--json") || args.includes("-json");
   const cfg = loadProviderConfig(id);
@@ -34,10 +37,19 @@ export async function handleProviderModels(id, sub, args, rest) {
     let provider;
     if (id === "workbuddy") {
       provider = createWorkbuddyProvider({ baseUrl, apiKeys: keys, auths, file: defaultStateFile() });
-    } else if (id === "cline" || id === "clinebot") {
+    } else if (id === "cline") {
       // 与聚合目录同源：recommended-models 的 free（generic 的 /api/v1/models 是全量目录，含大量不可用条目）
       const { createClineProvider } = await import("../../../providers/cline.js");
       provider = createClineProvider({ id, baseUrl: baseUrl || undefined, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "codearts") {
+      const { createCodeartsProvider } = await import("../../../providers/codearts.js");
+      provider = createCodeartsProvider({ baseUrl: baseUrl || undefined, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "traework") {
+      const { createTraeworkProvider } = await import("../../../providers/traework.js");
+      provider = createTraeworkProvider({ baseUrl: baseUrl || undefined, apiKeys: keys, auths, file: defaultStateFile() });
+    } else if (id === "qoder") {
+      const { createQoderProvider } = await import("../../../providers/qoder/index.js");
+      provider = createQoderProvider({ id, apiKeys: keys, file: defaultStateFile() });
     } else {
       if (!baseUrl) {
         console.error(`provider ${id}: missing baseUrl — set via: mslxdff -provider ${id} set-url <baseUrl>`);