mslxdff 0.1.155 → 0.1.158

package/src/cli/commands/provider/models.js

@@ -1,128 +1,139 @@
-import { join } from "node:path";
-import { defaultStateFile } from "../../../state.js";
-import { logDir } from "../../../logs.js";
-import { normalizeProviderId } from "../../../providers/model-id.js";
-
-export async function handleProviderModels(id, sub, args, rest) {
-  if (!(sub === "models" || sub === "show-models" || sub === "list-models" || sub === "ls")) return false;
-  // 供应商 id 归一（clinebot/cline-bot → cline）：老脚本 `-provider clinebot models` 仍走 cline 直查
-  id = normalizeProviderId(id);
-  const { loadProviderConfig, loadProviderKeys, isModelAllowed } = await import("../../../state.js");
-  const wantsJson = args.includes("--json") || args.includes("-json");
-  const cfg = loadProviderConfig(id);
-  if (id === "opencode" || id === "oc") {
-    try {
-      const cacheFile = join(logDir(), "models.json");
-      const { readFileSync } = await import("node:fs");
-      const raw = JSON.parse(readFileSync(cacheFile, "utf8"));
-      const ids = (raw.data || []).map((m) => m.id).filter((x) => !String(x).includes("/"));
-      if (wantsJson) {
-        console.log(JSON.stringify({ object: "list", data: ids.map((id) => ({ id, object: "model" })) }, null, 2));
-      } else {
-        console.log(`opencode models (${ids.length}):`);
-        for (const mid of ids) console.log(`  ${mid}`);
-      }
-    } catch (e) {
-      console.error(`could not read models cache: ${String(e?.message || e)}`);
-      process.exit(1);
-    }
-    process.exit(0);
-  }
-  try {
-    const { createGenericProvider } = await import("../../../providers/generic.js");
-    const { createWorkbuddyProvider } = await import("../../../providers/workbuddy.js");
-    const baseUrl = cfg?.baseUrl || (id === "workbuddy" ? "https://copilot.tencent.com" : "");
-    const keys = loadProviderKeys(id);
-    const auths = cfg?.auths || [];
-    let provider;
-    if (id === "workbuddy") {
-      provider = createWorkbuddyProvider({ baseUrl, apiKeys: keys, auths, file: defaultStateFile() });
-    } else if (id === "cline") {
-      // 与聚合目录同源：recommended-models 的 free（generic 的 /api/v1/models 是全量目录，含大量不可用条目）
-      const { createClineProvider } = await import("../../../providers/cline.js");
-      provider = createClineProvider({ id, baseUrl: baseUrl || undefined, apiKeys: keys, file: defaultStateFile() });
-    } else if (id === "codearts") {
-      const { createCodeartsProvider } = await import("../../../providers/codearts.js");
-      provider = createCodeartsProvider({ baseUrl: baseUrl || undefined, apiKeys: keys, file: defaultStateFile() });
-    } else if (id === "traework") {
-      const { createTraeworkProvider } = await import("../../../providers/traework.js");
-      provider = createTraeworkProvider({ baseUrl: baseUrl || undefined, apiKeys: keys, auths, file: defaultStateFile() });
-    } else if (id === "qoder") {
-      const { createQoderProvider } = await import("../../../providers/qoder/index.js");
-      provider = createQoderProvider({ id, apiKeys: keys, file: defaultStateFile() });
-    } else {
-      if (!baseUrl) {
-        console.error(`provider ${id}: missing baseUrl — set via: mslxdff -provider ${id} set-url <baseUrl>`);
-        process.exit(1);
-      }
-      provider = createGenericProvider({ id, baseUrl, apiKeys: keys, file: defaultStateFile() });
-    }
-    const all = await provider.listModels();
-    const markAllowed = (mid) => {
-      const raw = String(mid || "").includes("/") ? String(mid).split("/").slice(1).join("/") : String(mid);
-      const checkRaw = mid.startsWith(`${id}/`) ? mid.slice(id.length + 1) : raw;
-      return isModelAllowed(id, checkRaw);
-    };
-    if (wantsJson) {
-      const filtered = all.filter((m) => markAllowed(m.id));
-      console.log(JSON.stringify({ object: "list", data: filtered }, null, 2));
-    } else {
-      const allowedCount = all.filter((m) => markAllowed(m.id)).length;
-      console.log(`${id} models (${all.length} total, ${allowedCount} ✓ allowed${allowedCount !== all.length ? `, ${all.length - allowedCount} x blocked by allowlist` : ""}):`);
-      const fmtPrice = (m) => {
-        const c = String(m.credits || "").trim();
-        if (c) {
-          const m0 = c.match(/x\s*([\d.]+)/i);
-          if (m0) return `x${m0[1]}`;
-          return c.replace(/\s*credits\s*/gi, "").trim().replace(/\s+/g, " ");
-        }
-        if (m.pricing && typeof m.pricing === "object") {
-          const p = m.pricing.prompt ?? m.pricing.input ?? m.pricing.completion ?? "";
-          if (p) return String(p);
-        }
-        if (m.price != null && String(m.price).trim()) return String(m.price).trim();
-        if (String(m.id).endsWith("/auto")) return "浮动";
-        return "—";
-      };
-      const fmtBadge = (m) => {
-        const tags = Array.isArray(m.tags) ? m.tags : [];
-        const b = tags.find((t) => String(t).includes("限时免费") || String(t).toLowerCase().includes("free"));
-        if (!b) return "";
-        const part = String(b).split(":")[1];
-        return part ? ` [${part}]` : ` [${b}]`;
-      };
-      // 能力列：上下文 k + 📷识图 🧠推理 🔧工具调用（workbuddy 原生字段；其他供应商无这些字段则显示 —）
-      const fmtCaps = (m) => {
-        const ctx = Number(m.maxInputTokens) || null;
-        const hasAny = ctx || m.supportsImages != null || m.supportsReasoning != null || m.supportsToolCall != null;
-        if (!hasAny) return "—";
-        const parts = [];
-        if (ctx) parts.push(ctx >= 1_000_000 ? `${Math.round(ctx / 100000) / 10}M` : `${Math.round(ctx / 1000)}k`);
-        if (m.supportsImages && !m.disabledMultimodal) parts.push("📷");
-        if (m.supportsReasoning) parts.push("🧠");
-        if (m.supportsToolCall) parts.push("🔧");
-        return parts.join(" ");
-      };
-      const idW = Math.max(22, ...all.map((m) => String(m.id).length)) + 2;
-      const priceW = Math.max(6, ...all.map((m) => fmtPrice(m).length)) + 2;
-      const capsW = Math.max(4, ...all.map((m) => fmtCaps(m).length)) + 2;
-      for (const m of all) {
-        const ok = markAllowed(m.id);
-        const price = fmtPrice(m);
-        const badge = fmtBadge(m);
-        const name = m.name ? ` ${m.name}` : "";
-        const blocked = ok ? "" : "  [blocked — allowlist]";
-        const line = `  ${ok ? "✓" : "x"} ${String(m.id).padEnd(idW)}${String(price).padEnd(priceW)}${fmtCaps(m).padEnd(capsW)}${name}${badge}${blocked}`;
-        console.log(line);
-      }
-      if (!all.length) console.log(`  (no models — check baseUrl/keys or try: curl ${baseUrl}/models)`);
-      else if (allowedCount === 0) console.log(`  tip: all blocked — mslxdff -provider ${id} allowAny on  或  allowlist set <model...>`);
-      else if (allowedCount !== all.length) console.log(`  tip: blocked 仅影响 /v1/chat 调用，展示已全量列出`);
-    }
-    try { await provider.close?.(); } catch {}
-  } catch (e) {
-    console.error(`could not list ${id} models: ${String(e?.message || e)}`);
-    process.exit(1);
-  }
-  process.exit(0);
-}
+import { join } from "node:path";
+import { defaultStateFile } from "../../../state.js";
+import { logDir } from "../../../logs.js";
+import { normalizeProviderId } from "../../../providers/model-id.js";
+
+export async function handleProviderModels(id, sub, args, rest) {
+  if (!(sub === "models" || sub === "show-models" || sub === "list-models" || sub === "ls")) return false;
+  // 供应商 id 归一（clinebot/cline-bot → cline）：老脚本 `-provider clinebot models` 仍走 cline 直查
+  id = normalizeProviderId(id);
+  const { loadProviderConfig, loadProviderKeys, isModelAllowed } = await import("../../../state.js");
+  const wantsJson = args.includes("--json") || args.includes("-json");
+  const cfg = loadProviderConfig(id);
+  if (id === "opencode" || id === "oc") {
+    try {
+      const cacheFile = join(logDir(), "models.json");
+      const { readFileSync } = await import("node:fs");
+      const raw = JSON.parse(readFileSync(cacheFile, "utf8"));
+      const ids = (raw.data || []).map((m) => m.id).filter((x) => !String(x).includes("/"));
+      if (wantsJson) {
+        console.log(JSON.stringify({ object: "list", data: ids.map((id) => ({ id, object: "model" })) }, null, 2));
+      } else {
+        console.log(`opencode models (${ids.length}):`);
+        for (const mid of ids) console.log(`  ${mid}`);
+      }
+    } catch (e) {
+      console.error(`could not read models cache: ${String(e?.message || e)}`);
+      process.exit(1);
+    }
+    process.exit(0);
+  }
+  try {
+    const { createGenericProvider } = await import("../../../providers/generic.js");
+    const { createWorkbuddyProvider } = await import("../../../providers/workbuddy.js");
+    const baseUrl = cfg?.baseUrl || (id === "workbuddy" ? "https://copilot.tencent.com" : "");
+    const keys = loadProviderKeys(id);
+    const auths = cfg?.auths || [];
+    let provider;
+    if (id === "workbuddy") {
+      provider = createWorkbuddyProvider({ baseUrl, apiKeys: keys, auths, file: defaultStateFile() });
+    } else if (id === "cline") {
+      // 与聚合目录同源：recommended-models 的 free（generic 的 /api/v1/models 是全量目录，含大量不可用条目）
+      const { createClineProvider } = await import("../../../providers/cline.js");
+      provider = createClineProvider({ id, baseUrl: baseUrl || undefined, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "codearts") {
+      const { createCodeartsProvider } = await import("../../../providers/codearts.js");
+      provider = createCodeartsProvider({ baseUrl: baseUrl || undefined, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "traework") {
+      const { createTraeworkProvider } = await import("../../../providers/traework.js");
+      provider = createTraeworkProvider({ baseUrl: baseUrl || undefined, apiKeys: keys, auths, file: defaultStateFile() });
+    } else if (id === "qoder") {
+      const { createQoderProvider } = await import("../../../providers/qoder/index.js");
+      provider = createQoderProvider({ id, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "qwenwork") {
+      const { createQwenworkProvider } = await import("../../../providers/qwenwork/index.js");
+      provider = createQwenworkProvider({ id, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "zcode") {
+      const { createZcodeProvider } = await import("../../../providers/zcode/index.js");
+      provider = createZcodeProvider({ id, apiKeys: keys, file: defaultStateFile() });
+    } else {
+      if (!baseUrl) {
+        console.error(`provider ${id}: missing baseUrl — set via: mslxdff -provider ${id} set-url <baseUrl>`);
+        process.exit(1);
+      }
+      provider = createGenericProvider({ id, baseUrl, apiKeys: keys, file: defaultStateFile() });
+    }
+    const all = await provider.listModels();
+    const markAllowed = (mid) => {
+      const raw = String(mid || "").includes("/") ? String(mid).split("/").slice(1).join("/") : String(mid);
+      const checkRaw = mid.startsWith(`${id}/`) ? mid.slice(id.length + 1) : raw;
+      return isModelAllowed(id, checkRaw);
+    };
+    if (wantsJson) {
+      const filtered = all.filter((m) => markAllowed(m.id));
+      console.log(JSON.stringify({ object: "list", data: filtered }, null, 2));
+    } else {
+      const allowedCount = all.filter((m) => markAllowed(m.id)).length;
+      console.log(`${id} models (${all.length} total, ${allowedCount} ✓ allowed${allowedCount !== all.length ? `, ${all.length - allowedCount} x blocked by allowlist` : ""}):`);
+      const fmtPrice = (m) => {
+        const c = String(m.credits || "").trim();
+        if (c) {
+          const m0 = c.match(/x\s*([\d.]+)/i);
+          if (m0) return `x${m0[1]}`;
+          return c.replace(/\s*credits\s*/gi, "").trim().replace(/\s+/g, " ");
+        }
+        if (m.pricing && typeof m.pricing === "object") {
+          const p = m.pricing.prompt ?? m.pricing.input ?? m.pricing.completion ?? "";
+          if (p) return String(p);
+        }
+        if (m.price_factor != null && String(m.price_factor).trim() !== "") return `x${m.price_factor}`;
+        if (m.price != null && String(m.price).trim()) return String(m.price).trim();
+        if (String(m.id).endsWith("/auto")) return "浮动";
+        return "—";
+      };
+      const fmtBadge = (m) => {
+        const tags = Array.isArray(m.tags) ? m.tags : [];
+        const b = tags.find((t) => String(t).includes("限时免费") || String(t).toLowerCase().includes("free"));
+        if (!b) return "";
+        const part = String(b).split(":")[1];
+        return part ? ` [${part}]` : ` [${b}]`;
+      };
+      // 能力列：上下文 k + 📷识图 🧠推理 🔧工具调用（workbuddy 原生字段；其他供应商无这些字段则显示 —）
+      const fmtCaps = (m) => {
+        const ctx = Number(m.maxInputTokens ?? m.context_length) || null;
+        const reasoning = m.supportsReasoning ?? m.is_reasoning;
+        const hasAny = ctx || m.supportsImages != null || reasoning != null || m.supportsToolCall != null;
+        if (!hasAny) return "—";
+        const parts = [];
+        if (ctx) parts.push(ctx >= 1_000_000 ? `${Math.round(ctx / 100000) / 10}M` : `${Math.round(ctx / 1000)}k`);
+        if (m.supportsImages && !m.disabledMultimodal) parts.push("📷");
+        if (reasoning) parts.push("🧠");
+        if (m.supportsToolCall) parts.push("🔧");
+        return parts.join(" ");
+      };
+      const idW = Math.max(22, ...all.map((m) => String(m.id).length)) + 2;
+      const priceW = Math.max(6, ...all.map((m) => fmtPrice(m).length)) + 2;
+      const capsW = Math.max(4, ...all.map((m) => fmtCaps(m).length)) + 2;
+      for (const m of all) {
+        const ok = markAllowed(m.id);
+        const price = fmtPrice(m);
+        const badge = fmtBadge(m);
+        const name = m.name ? ` ${m.name}` : "";
+        const blocked = ok ? "" : "  [blocked — allowlist]";
+        const line = `  ${ok ? "✓" : "x"} ${String(m.id).padEnd(idW)}${String(price).padEnd(priceW)}${fmtCaps(m).padEnd(capsW)}${name}${badge}${blocked}`;
+        console.log(line);
+      }
+      if (!all.length) console.log(`  (no models — check baseUrl/keys or try: curl ${baseUrl}/models)`);
+      else if (allowedCount === 0) console.log(`  tip: all blocked — mslxdff -provider ${id} allowAny on  或  allowlist set <model...>`);
+      else if (allowedCount !== all.length) console.log(`  tip: blocked 仅影响 /v1/chat 调用，展示已全量列出`);
+      if (id === "zcode") {
+        console.log(`  tip: 目录/额度可用；模型调用需上游一次性验证码参数（x-aliyun-captcha-verify-param，Start Plan 通道），未启用验证码农场前会返回 403 security_reject（code 3007）— 详见 docs/adr/0038`);
+      }
+    }
+    try { await provider.close?.(); } catch {}
+  } catch (e) {
+    console.error(`could not list ${id} models: ${String(e?.message || e)}`);
+    process.exit(1);
+  }
+  process.exit(0);
+}

package/src/cli/commands/provider/qwenwork-login.js

@@ -0,0 +1,119 @@
+// mslxdff -provider qwenwork login — 千问办公设备授权（PKCE + poll），对齐 qoder-login。
+// 授权后落盘 auths/qwenwork-<uid>.json + state 双写，默认 allowAny=false 并种 3 个实测模型（ADR-0037）。
+import { compatFetch } from "../../../compat.js";
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { newDeviceFlow, pollGrant, userInfo, accountContext, expiryUnix } from "../../../providers/qwenwork/upstream.js";
+
+const POLL_MS = 3000;
+const POLL_TIMEOUT_MS = 10 * 60 * 1000;
+
+export async function handleQwenworkLogin(id, sub, rest = [], deps = {}) {
+  if (normalizeProviderId(id) !== "qwenwork") return false;
+  if (sub !== "login" && sub !== "auth" && sub !== "oauth") return false;
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+
+  const flow = await newDeviceFlow();
+  log("=".repeat(60));
+  log("  千问办公（QwenWork）登录");
+  log("=".repeat(60));
+  log("");
+  log("  1. 在浏览器打开下面链接，用已登录千问办公的账号确认授权");
+  log("  2. 授权成功后会自动完成，不要关闭本终端");
+  log("");
+  log(`  ${flow.url}`);
+  log("");
+  log("🔄 等待你授权（自动轮询，每 3 秒，最多 10 分钟）...");
+
+  const deadline = Date.now() + POLL_TIMEOUT_MS;
+  let grant = null;
+  for (;;) {
+    if (Date.now() > deadline) {
+      console.error("\n❌ 授权超时（10 分钟），请重新运行 mslxdff -provider qwenwork login");
+      process.exit(1);
+    }
+    let outcome;
+    try {
+      outcome = await pollGrant(flow.nonce, flow.verifier, fetchImpl);
+    } catch (e) {
+      console.error(`\n❌ 轮询失败: ${e.message}`);
+      process.exit(1);
+    }
+    if (!outcome.pending) { grant = outcome.grant; break; }
+    try { process.stdout.write("."); } catch {}
+    await new Promise((r) => setTimeout(r, POLL_MS));
+  }
+  const accessToken = grant.token || grant.device_token;
+  const refreshToken = grant.refresh_token || "";
+  if (!accessToken) {
+    console.error("\n❌ 未获取到 token");
+    process.exit(1);
+  }
+  log(`\n✅ 授权成功！token=${String(accessToken).slice(0, 12)}...`);
+  if (refreshToken) log(`    refreshToken=${String(refreshToken).slice(0, 12)}...`);
+
+  let uid = String(grant.user_id || "");
+  let name = String(grant.user_name || "");
+  let email = "";
+  try {
+    const info = await userInfo(accessToken, fetchImpl);
+    if (info?.id) uid = String(info.id);
+    if (info?.name) name = String(info.name);
+    if (info?.email) email = String(info.email);
+    log(`    UID: ${uid}  昵称: ${name || "(空)"}  邮箱: ${email || "(空)"}`);
+  } catch (e) {
+    log(`    ⚠️ userinfo 失败: ${e.message}（用 grant 兜底）`);
+    if (!uid) uid = String(accessToken).slice(0, 8);
+  }
+  if (!uid) {
+    console.error("❌ 无法获取用户标识");
+    process.exit(1);
+  }
+
+  const { saveQwenworkAccount } = await import("../../../providers/qwenwork/account-store.js");
+  const save = deps.saveAccount || saveQwenworkAccount;
+  const saved = await save({
+    uid,
+    accessToken,
+    refreshToken,
+    expiresAt: expiryUnix(grant),
+    name,
+    email,
+  });
+
+  log("");
+  log("=".repeat(60));
+  log("✅ 登录完成！");
+  log(`   UID: ${uid}`);
+  log(`   账号数: ${saved.accounts}${saved.updated ? "（旧号凭证已更新）" : ""}`);
+  log(`   数据文件: ${saved.file}`);
+  log("=".repeat(60));
+  // 安全默认：allowAny 关 + 只放 3 个实测模型（与 qoder 惯例故意不同，见 ADR-0037）
+  try {
+    const { saveProviderAllowAnyModels, saveProviderAllowedModels } = await import("../../../state.js");
+    saveProviderAllowAnyModels("qwenwork", false);
+    saveProviderAllowedModels("qwenwork", ["flash", "pro", "qwen3.8-max-preview"]);
+    log("   allowAnyModels=off + allowlist 已种 flash/pro/qwen3.8-max-preview（额度池供应商，防 auto 烧分）");
+  } catch {}
+  // 额度展示
+  try {
+    const ctx = await accountContext(accessToken, fetchImpl);
+    const plan = ctx?.plan || {};
+    const quota = ctx?.quota || {};
+    if (plan?.name || quota?.remaining !== undefined) {
+      log(`   套餐: ${plan?.name || "-"}  积分剩余: ${quota?.remaining ?? "-"}`);
+    }
+  } catch {
+    log("   额度查询失败，不影响使用");
+  }
+
+  log("下一步：");
+  log("  mslxdff -provider qwenwork models                  列模型列表");
+  log("  mslxdff -restart（用户终端跑）                       重启网关使新账号生效");
+  log("  然后 curl http://localhost:8989/v1/chat/completions -d '{\"model\":\"qwenwork/flash\",\"messages\":[{\"role\":\"user\",\"content\":\"hi\"}]}'");
+  log("");
+  log("多账号：重复 `mslxdff -provider qwenwork login` 追加，每号独立 uid，对话自动轮换");
+
+  if (!deps.noExit) process.exit(0);
+  return true;
+}

package/src/cli/commands/provider/zcode-login.js

@@ -0,0 +1,77 @@
+// mslxdff -provider zcode login — ZCode CLI 轮询授权（zai/bigmodel 双入口）。
+// 授权后落盘 auths/zcode-<uid>.json（0600）+ state keys，并把内置目录补齐进 allowlist（开箱可用）。
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { compatFetch, uuid } from "../../../compat.js";
+import { zcodeAppVersion } from "../../../providers/zcode/const.js";
+import { tokenFingerprint } from "../../../providers/zcode/auth.js";
+import { initZcodeFlow, waitForZcodeLogin } from "../../../providers/zcode/oauth.js";
+import { listZcodeAccountDocs, saveZcodeAccount } from "../../../providers/zcode/account-store.js";
+import { seedZcodeAllowlist } from "../../../providers/zcode/models.js";
+
+const LOGIN_SUBS = new Set(["login", "auth", "oauth"]);
+
+export async function handleZcodeLogin(id, sub, rest = [], deps = {}) {
+  if (normalizeProviderId(id) !== "zcode") return false;
+  if (!LOGIN_SUBS.has(sub)) return false;
+
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+  const exit = deps.exit || ((code) => process.exit(code));
+  const provider = rest.includes("--bigmodel") || rest.includes("--bm") ? "bigmodel" : "zai";
+
+  // deviceMid：显式 > 既有 zcode 账号复用（设备身份跟账号走）> 临时生成（登录成功随账号落盘）。
+  const existingMid = (() => {
+    try {
+      const docs = listZcodeAccountDocs(deps.dir ? { dirs: [deps.dir] } : {});
+      return docs.map((d) => d.deviceMid).find(Boolean) || "";
+    } catch {
+      return "";
+    }
+  })();
+  const deviceMid = deps.deviceMid || existingMid || uuid();
+
+  log("=".repeat(60));
+  log("  ZCode 登录（智谱免费额度）");
+  log(`  入口: ${provider === "bigmodel" ? "BigModel（bigmodel.cn）" : "Z.ai（chat.z.ai）"}`);
+  log("=".repeat(60));
+
+  let out;
+  try {
+    const flow = await initZcodeFlow({ provider, fetchImpl, deviceMid, version: zcodeAppVersion() });
+    log("");
+    log("  1. 在浏览器打开下面链接，用智谱账号登录并完成授权");
+    log("  2. 授权完成后本机自动继续（CLI 轮询，无需回调）");
+    log("");
+    log(`  ${flow.authorizeUrl}`);
+    log("");
+    log(`🔄 等待授权（每 ${Math.round(flow.pollIntervalMs / 1000)}s 轮询，最长 ${Math.max(1, Math.round((flow.expiresAtMs - Date.now()) / 1000))}s）...`);
+    out = await waitForZcodeLogin({ flow, fetchImpl, log, sleepFn: deps.sleepFn });
+  } catch (e) {
+    log("");
+    log(`❌ ${e?.message || e}`);
+    log(`   （可重试：mslxdff -provider zcode login${provider === "bigmodel" ? " --bigmodel" : ""}）`);
+    exit(1);
+    return true;
+  }
+
+  const uid = out.user.userId;
+  const save = deps.saveAccount || saveZcodeAccount;
+  const saved = await save({
+    uid,
+    jwt: out.jwt,
+    name: out.user.name,
+    email: out.user.email,
+    provider,
+    deviceMid,
+    dir: deps.dir,
+    file: deps.file,
+  });
+  const allow = seedZcodeAllowlist({ file: deps.file });
+
+  log("");
+  log(`✅ 授权成功！uid=${uid}  昵称=${out.user.name || "(空)"}  token=${tokenFingerprint(out.jwt)}…`);
+  log(`   凭据: ${saved.file}`);
+  if (allow.added.length) log(`   allowlist 已补齐 ${allow.added.length} 个免费模型：${allow.added.join(", ")}`);
+  log("   下一步: mslxdff -provider zcode quota 查看额度 · mslxdff -provider zcode models 查看模型");
+  return true;
+}

package/src/cli/commands/provider/zcode-quota.js

@@ -0,0 +1,55 @@
+// mslxdff -provider zcode quota — 查询 ZCode 免费/订阅额度（billing/balance）。
+// 未登录 → login 指引 + 非零退出；401 → 重登指引；空套餐 → 领取指引（全人话，不出堆栈）。
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { compatFetch } from "../../../compat.js";
+import { loadProviderKeys } from "../../../state.js";
+import { listZcodeAccountDocs } from "../../../providers/zcode/account-store.js";
+import { zcodeAppVersion } from "../../../providers/zcode/const.js";
+import { fetchZcodeBalance, formatZcodeQuota } from "../../../providers/zcode/quota.js";
+
+export async function handleZcodeQuota(id, sub, rest = [], deps = {}) {
+  if (normalizeProviderId(id) !== "zcode") return false;
+  if (String(sub || "").toLowerCase() !== "quota") return false;
+
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+  const exit = deps.exit || ((code) => process.exit(code));
+  const wantsJson = rest.includes("--json") || rest.includes("-json");
+
+  let keys = [];
+  try {
+    keys = loadProviderKeys("zcode", deps.file ? { file: deps.file } : {});
+  } catch {
+    keys = [];
+  }
+  if (!keys.length) {
+    log("zcode quota：尚未登录。先运行：");
+    log("  mslxdff -provider zcode login");
+    log("（授权后即可查看 Start/Coding Plan 额度，全程无需验证码）");
+    exit(1);
+    return true;
+  }
+
+  const token = keys[0];
+  const deviceMid = deps.deviceMid || (() => {
+    try {
+      return listZcodeAccountDocs(deps.dir ? { dirs: [deps.dir] } : {}).map((d) => d.deviceMid).find(Boolean) || "";
+    } catch {
+      return "";
+    }
+  })();
+  const result = await fetchZcodeBalance({ token, deviceMid, fetchImpl, version: deps.version || zcodeAppVersion() });
+
+  if (wantsJson) {
+    const payload = result.ok
+      ? { provider: "zcode", keys: keys.length, ok: true, parsed: result.parsed }
+      : { provider: "zcode", keys: keys.length, ok: false, kind: result.kind, code: result.code, message: result.message };
+    log(JSON.stringify(payload, null, 2));
+    exit(result.ok ? 0 : 1);
+    return true;
+  }
+  log(formatZcodeQuota(result));
+  if (!result.ok) log(`  （已登录账号 ${keys.length} 个；换号/重登：mslxdff -provider zcode login）`);
+  exit(result.ok ? 0 : 1);
+  return true;
+}