mslxdff 0.1.159 → 0.1.161

package/src/cli/commands/provider/globalqwenwork-login.js

@@ -0,0 +1,126 @@
+// mslxdff -provider globalqwenwork login — 千问办公**国际站**设备授权（PKCE + poll），对齐 qwenwork-login。
+// 与 cn 站的三处实质差异（2026-10-01 现网取证）：
+//  ① auth 域名 gateway.qwenwork.ai ② client_id cc65e5fc…（用 cn 的会整串 query 被判 not_allowed）
+//  ③ 深链 redirect_uri=qwenwork://；三处全部来自 constants.js，本文件不重复硬编码。
+// 授权后落盘 auths/globalqwenwork-<uid>.json + state 双写，默认 allowAny=false 并种 2 个实测模型（ADR-0041）。
+import { compatFetch } from "../../../compat.js";
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { newDeviceFlow, pollGrant, userInfo, accountContext, expiryUnix } from "../../../providers/globalqwenwork/upstream.js";
+
+const POLL_MS = 3000;
+const POLL_TIMEOUT_MS = 10 * 60 * 1000;
+// 国际站实测 qwork 切片恒为这 2 个（价因子 0，仍是额度池供应商 → 保持 allowAny=false 防 auto 烧分）
+const SEED_MODELS = ["qwork-auto", "qwork-advanced"];
+
+export async function handleGlobalQwenworkLogin(id, sub, rest = [], deps = {}) {
+  if (normalizeProviderId(id) !== "globalqwenwork") return false;
+  if (sub !== "login" && sub !== "auth" && sub !== "oauth") return false;
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+
+  const flow = await newDeviceFlow();
+  log("=".repeat(60));
+  log("  千问办公 · 国际站（QwenWork Global）登录");
+  log("=".repeat(60));
+  log("");
+  log("  1. 在浏览器打开下面链接，用已登录**国际版**千问办公的账号确认授权");
+  log("     （cn 站账号无效：实测 cn token 打 .ai userinfo → 401 INVALID_TOKEN）");
+  log("  2. 授权成功后会自动完成，不要关闭本终端");
+  log("");
+  log(`  ${flow.url}`);
+  log("");
+  log("🔄 等待你授权（自动轮询，每 3 秒，最多 10 分钟）...");
+
+  const deadline = Date.now() + POLL_TIMEOUT_MS;
+  let grant = null;
+  for (;;) {
+    if (Date.now() > deadline) {
+      console.error("\n❌ 授权超时（10 分钟），请重新运行 mslxdff -provider globalqwenwork login");
+      process.exit(1);
+    }
+    let outcome;
+    try {
+      outcome = await pollGrant(flow.nonce, flow.verifier, fetchImpl);
+    } catch (e) {
+      console.error(`\n❌ 轮询失败: ${e.message}`);
+      process.exit(1);
+    }
+    if (!outcome.pending) { grant = outcome.grant; break; }
+    try { process.stdout.write("."); } catch {}
+    await new Promise((r) => setTimeout(r, POLL_MS));
+  }
+  const accessToken = grant.token || grant.device_token;
+  const refreshToken = grant.refresh_token || "";
+  if (!accessToken) {
+    console.error("\n❌ 未获取到 token");
+    process.exit(1);
+  }
+  log(`\n✅ 授权成功！token=${String(accessToken).slice(0, 12)}...`);
+  if (refreshToken) log(`    refreshToken=${String(refreshToken).slice(0, 12)}...`);
+
+  let uid = String(grant.user_id || "");
+  let name = String(grant.user_name || "");
+  let email = "";
+  try {
+    const info = await userInfo(accessToken, fetchImpl);
+    if (info?.id) uid = String(info.id);
+    if (info?.name) name = String(info.name);
+    if (info?.email) email = String(info.email);
+    log(`    UID: ${uid}  昵称: ${name || "(空)"}  邮箱: ${email || "(空)"}`);
+  } catch (e) {
+    log(`    ⚠️ userinfo 失败: ${e.message}（用 grant 兜底）`);
+    if (!uid) uid = String(accessToken).slice(0, 8);
+  }
+  if (!uid) {
+    console.error("❌ 无法获取用户标识");
+    process.exit(1);
+  }
+
+  const { saveGlobalQwenworkAccount } = await import("../../../providers/globalqwenwork/account-store.js");
+  const save = deps.saveAccount || saveGlobalQwenworkAccount;
+  const saved = await save({
+    uid,
+    accessToken,
+    refreshToken,
+    expiresAt: expiryUnix(grant),
+    name,
+    email,
+  });
+
+  log("");
+  log("=".repeat(60));
+  log("✅ 登录完成！");
+  log(`   UID: ${uid}`);
+  log(`   账号数: ${saved.accounts}${saved.updated ? "（旧号凭证已更新）" : ""}`);
+  log(`   数据文件: ${saved.file}`);
+  log("=".repeat(60));
+  // 安全默认：allowAny 关 + 只放 2 个实测模型（额度池供应商，与 qwenwork/qoder 惯例一致，见 ADR-0041）
+  try {
+    const { saveProviderAllowAnyModels, saveProviderAllowedModels } = await import("../../../state.js");
+    saveProviderAllowAnyModels("globalqwenwork", false);
+    saveProviderAllowedModels("globalqwenwork", SEED_MODELS);
+    log(`   allowAnyModels=off + allowlist 已种 ${SEED_MODELS.join("/")}（额度池供应商，防 auto 烧分）`);
+  } catch {}
+  // 额度展示：国际站免费档 pid 实测为 subscription-sgp-free（新加坡池，与 cn 积分池独立）
+  try {
+    const ctx = await accountContext(accessToken, fetchImpl);
+    const plan = ctx?.plan || {};
+    const quota = ctx?.quota || {};
+    if (plan?.name || quota?.remaining !== undefined) {
+      log(`   套餐: ${plan?.name || "-"} (${plan?.pid || "-"})  积分剩余: ${quota?.remaining ?? "-"}`);
+    }
+  } catch {
+    log("   额度查询失败，不影响使用");
+  }
+
+  log("下一步：");
+  log("  mslxdff -provider globalqwenwork models                  列模型列表");
+  log("  mslxdff -restart（用户终端跑）                             重启网关使新账号生效");
+  log(`  然后 curl http://localhost:8989/v1/chat/completions -d '{"model":"globalqwenwork/qwork-auto","messages":[{"role":"user","content":"hi"}]}'`);
+  log("");
+  log("多账号：重复 `mslxdff -provider globalqwenwork login` 追加，每号独立 uid，对话自动轮换");
+  log("（与 cn 站 qwenwork 凭证不互通，两站可在同一 state.json 共存，账号文件前缀互不吞）");
+
+  if (!deps.noExit) process.exit(0);
+  return true;
+}

package/src/cli/commands/provider/index.js

@@ -83,6 +83,8 @@ const { handleQoderLogin } = await import("./qoder-login.js");
   if (await handleQoderCheckin(id, sub, rest)) return true;
   const { handleQwenworkLogin } = await import("./qwenwork-login.js");
   if (await handleQwenworkLogin(id, sub, rest)) return true;
+  const { handleGlobalQwenworkLogin } = await import("./globalqwenwork-login.js");
+  if (await handleGlobalQwenworkLogin(id, sub, rest)) return true;
   const { handleZcodeLogin } = await import("./zcode-login.js");
   if (await handleZcodeLogin(id, sub, rest)) return true;
   const { handleZcodeQuota } = await import("./zcode-quota.js");

package/src/cli/commands/provider/models.js

@@ -53,6 +53,9 @@ export async function handleProviderModels(id, sub, args, rest) {
     } else if (id === "qwenwork") {
       const { createQwenworkProvider } = await import("../../../providers/qwenwork/index.js");
       provider = createQwenworkProvider({ id, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "globalqwenwork") {
+      const { createGlobalQwenworkProvider } = await import("../../../providers/globalqwenwork/index.js");
+      provider = createGlobalQwenworkProvider({ id, apiKeys: keys, file: defaultStateFile() });
     } else if (id === "zcode") {
       const { createZcodeProvider } = await import("../../../providers/zcode/index.js");
       provider = createZcodeProvider({ id, apiKeys: keys, file: defaultStateFile() });
@@ -127,7 +130,7 @@ export async function handleProviderModels(id, sub, args, rest) {
       else if (allowedCount === 0) console.log(`  tip: all blocked — mslxdff -provider ${id} allowAny on  或  allowlist set <model...>`);
       else if (allowedCount !== all.length) console.log(`  tip: blocked 仅影响 /v1/chat 调用，展示已全量列出`);
       if (id === "zcode") {
-        console.log(`  tip: 目录/额度可用；模型调用需上游一次性验证码参数（x-aliyun-captcha-verify-param，Start Plan 通道），未启用验证码农场前会返回 403 security_reject（code 3007）— 详见 docs/adr/0038`);
+        console.log(`  tip: 目录/额度/模型调用全通（上游 v3.14.4 起模型请求免验证码，docs/adr/0038）；额度耗尽返回 429 quota_exhausted，按日窗口重置`);
       }
     }
     try { await provider.close?.(); } catch {}

package/src/cli/commands/stats.js

@@ -19,7 +19,9 @@ export function parseStatsArgs(args) {
 }
 
 function fmtTok(n) {
-  const v = Number(n) || 0;
+  // 先判未知：Number(null) || 0 会把「未知」静默渲染成 0，思考列的 — 就永远出不来
+  const v = Number(n);
+  if (n == null || !Number.isFinite(v)) return "—";
   if (v < 1000) return String(v);
   if (v < 1_000_000) return `${(v / 1000).toFixed(1)}k`;
   return `${(v / 1_000_000).toFixed(2)}M`;
@@ -62,11 +64,20 @@ function renderTable(headers, rows, aligns = []) {
 }
 
 function tokenRow(id, r) {
-  return [id, r.requests, fmtTok(r.promptTokens), fmtTok(r.completionTokens), fmtTok(r.reasoningTokens), fmtTok(r.totalTokens)];
+  return [id, r.requests, fmtTok(r.promptTokens), fmtTok(r.completionTokens), reasoningCell(r), fmtTok(r.totalTokens)];
+}
+
+// 思考列的四态渲染：~ 只跟估算/混合来源；none（未知）显示 —，绝不显示成 0 冒充「不思考」
+function reasoningCell(r) {
+  if (r.reasoningSource === "none") return "—";
+  const text = fmtTok(r.reasoningTokens);
+  return r.reasoningSource === "estimated" || r.reasoningSource === "mixed" ? `${text}~` : text;
 }
 
 function performanceRow(id, r) {
-  return [id, fmtMs(r.avgTtfbMs), fmtMs(r.avgTotalMs), fmtTps(r.avgTps)];
+  const samples = Number(r.streamRequests) || 0;
+  const ttfb = samples > 0 ? fmtMs(r.avgTtfbMs) : "—"; // 无流式样本时不拿空样本算出的均值糊人
+  return [id, ttfb, fmtMs(r.avgTotalMs), fmtTps(r.avgTps), `${Number(r.ttfSamples) || 0}/${samples}`];
 }
 
 export function renderStats(report, { hours = 24, model = null } = {}) {
@@ -89,9 +100,13 @@ export function renderStats(report, { hours = 24, model = null } = {}) {
   lines.push(renderTable(["模型", "请求", "输入", "输出", "思考", "合计"], tokenRows, ["left", right, right, right, right, right]));
   lines.push("");
   lines.push("响应性能");
-  lines.push(renderTable(["模型", "首字", "总耗时", "速度"], performanceRows, ["left", right, right, right]));
+  lines.push(renderTable(["模型", "首字", "总耗时", "速度", "首字样本"], performanceRows, ["left", right, right, right, right]));
   lines.push("");
-  lines.push("说明：速度 = 输出 tokens ÷ 生成耗时（总耗时−首字），按窗口加权；只统计成功请求。");
+  lines.push("说明：首字 = 本次上游尝试 → 网关转发首个真实数据帧（含上游排队/建连/预读等待）；非流式请求不进首字。");
+  lines.push("思考：数值后带 ~ = 按思考字符÷4 估算（上游未上报）；— = 未上报且无可估内容；0 = 上游明确上报本轮无思考。");
+  lines.push("首字样本：n/N = 有首字样本数/流式请求数，N=0 时首字显示 —（样本太少的均值不可当全量真值）。");
+  lines.push("速度 = 输出 tokens ÷ 生成耗时（总耗时−首字），按窗口加权；只统计成功请求。");
+  lines.push("口径差异：-status / -model stats 的首字仍取自 state 的终生 EMA（按转发入口量），与本表**不同源**。");
   lines.push("范围：只含经 8989 网关的成功请求；不含失败请求和 -chat 直连。");
   const keepDays = usageKeepDays();
   if (hours > keepDays * 24) {

package/src/cli/commands/system.js

@@ -58,7 +58,7 @@ export async function handleUpdate(args, VERSION) {
   const daemon = readPid();
   if (daemon) {
     console.log("restarting daemon on the new version…");
-    stopDaemon();
+    stopDaemon({ reason: "restart" });
     startDaemon([]);
     await waitForHealth(resolvePort(), 4000);
     console.log(`restarted (pid ${readPid()})`);
@@ -82,7 +82,7 @@ export async function handleShowToken(args) {
 
 export async function handleUninstall(args) {
   if (!(args.includes("-uninstall") || args.includes("--uninstall"))) return false;
-  const { stopped, pid } = stopDaemon();
+  const { stopped, pid } = stopDaemon({ reason: "uninstall" });
   if (stopped) console.log(`mslxdff daemon stopped (pid ${pid})`);
   else console.log("mslxdff daemon not running");
   const stateFile = defaultStateFile();

package/src/cli/format.js

@@ -46,6 +46,12 @@ export function fmtEvent(e) {
       return `${head} upstream ok   ${m(e.model)} HTTP ${e.status}${e.timing ? ` total=${e.timing.totalMs}ms` : ""}`;
     case "upstream-error":
       return `${head} upstream err  ${m(e.model)} ${e.status ? `HTTP ${e.status}` : "network"}: ${m(e.message)}`;
+    case "empty-turn-retry":
+      return `${head} 空转重试    模型零输出 model=${m(e.model)} 第 ${e.retry || "?"}/${e.max || "?"} 次，暂停 ${e.delayMs || 0}ms 后同模型重拉${e.raiseTo ? `（max_tokens ${e.raiseFrom}→${e.raiseTo}）` : ""}${e.nudged ? "（末次已追问）" : ""} reqId=${e.reqId || ""}`;
+    case "empty-turn-recovered":
+      return `${head} 空转救回    重试成功 model=${m(e.model)} 第 ${e.retries || "?"}/${e.max || "?"} 次拿到输出，本轮多花 ${e.waitedMs || 0}ms reqId=${e.reqId || ""}`;
+    case "empty-turn-exhausted":
+      return `${head} 空转耗尽    重试无用 model=${m(e.model)} 已重试 ${e.retries || 0}/${e.max || "?"} 次仍零输出（等 ${e.waitedMs || 0}ms）→ 换候选/报错${e.reason ? ` ${String(e.reason).slice(0, 90)}` : ""} reqId=${e.reqId || ""}`;
     case "upstream-preheat":
       if (e.skipped) return `${head} preheat       跳过 (MSLXDFF_PREHEAT disabled)`;
       return `${head} preheat       预热 opencode models ${e.ok ? "ok" : "fail"} ${e.status ? `HTTP ${e.status}` : e.error || ""} ${e.ms ? `${e.ms}ms` : ""}`;

package/src/cli/policy.js

@@ -60,7 +60,7 @@ export function stopDaemonIfOutdated(VERSION) {
   const runningVersion = readPidVersion();
   if (!runningVersion) {
     console.log(`daemon version unknown — restarting with v${VERSION}...`);
-    stopDaemon();
+    stopDaemon({ reason: "upgrade" });
     return;
   }
   if (runningVersion === VERSION) return;
@@ -70,7 +70,7 @@ export function stopDaemonIfOutdated(VERSION) {
     return;
   }
   console.log(`daemon running v${runningVersion} — upgrading to v${VERSION}, restarting...`);
-  stopDaemon();
+  stopDaemon({ reason: "upgrade" });
 }
 
 export function refreshIntervalMs() {

package/src/cli/provider-row.js

@@ -40,12 +40,12 @@ export function buildProviderRows({ stateFile, env = process.env } = {}) {
     let allowed = [];
     let allowAny = false;
     try { keys = loadProviderKeys(gid, stateFile ? { file: stateFile } : undefined); } catch {}
-    try { baseUrl = loadProviderBaseUrl(gid, stateFile ? { file: stateFile } : undefined) || cfg?.baseUrl || (gid === "openrouter" ? "https://openrouter.ai/api/v1" : gid === "workbuddy" ? "https://copilot.tencent.com" : gid === "traework" ? "https://trae-api-cn.mchost.guru" : gid === "qoder" ? "qoder://native" : gid === "qwenwork" ? "qwenwork://native" : ""); } catch { baseUrl = cfg?.baseUrl || ""; }
+    try { baseUrl = loadProviderBaseUrl(gid, stateFile ? { file: stateFile } : undefined) || cfg?.baseUrl || (gid === "openrouter" ? "https://openrouter.ai/api/v1" : gid === "workbuddy" ? "https://copilot.tencent.com" : gid === "traework" ? "https://trae-api-cn.mchost.guru" : gid === "qoder" ? "qoder://native" : gid === "qwenwork" ? "qwenwork://native" : gid === "globalqwenwork" ? "globalqwenwork://native" : gid === "zcode" ? "zcode://native" : ""); } catch { baseUrl = cfg?.baseUrl || ""; }
     try { allowed = loadProviderAllowedModels(gid, stateFile ? { file: stateFile } : undefined); } catch {}
     try { allowAny = loadProviderAllowAnyModels(gid, stateFile ? { file: stateFile } : undefined); } catch {}
     // openrouter 特殊：opencode 例外默认 allowAny true，其余默认 false
     if (gid === "opencode") allowAny = true;
-    let enabled = Boolean(baseUrl && keys.length) || (gid === "openrouter" && keys.length > 0) || ((gid === "qoder" || gid === "qwenwork" || gid === "traework") && keys.length > 0);
+    let enabled = Boolean(baseUrl && keys.length) || (gid === "openrouter" && keys.length > 0) || ((gid === "qoder" || gid === "qwenwork" || gid === "globalqwenwork" || gid === "traework" || gid === "zcode") && keys.length > 0);
     const auths = gid === "workbuddy" ? (() => { try { return loadProviderAuths(gid, stateFile ? { file: stateFile } : undefined) || []; } catch { return []; } })() : [];
     let note = "";
     const isWorkbuddyStub = gid === "workbuddy" && (keys.includes("k-new") || String(baseUrl).includes("127.0.0.1") || (keys.length === 1 && keys[0].length < 20));

package/src/daemon.js

@@ -3,6 +3,7 @@ import { appendFileSync, existsSync, mkdirSync, openSync, readFileSync, writeFil
 import { join, dirname } from "node:path";
 import os from "node:os";
 import { fileURLToPath } from "node:url";
+import { writeExitMarker } from "./runtime/lifecycle-forensics.js";
 
 export function daemonDir() {
   return process.env.MSLXDFF_DAEMON_DIR || join(os.homedir(), ".config", "mslxdff");
@@ -73,15 +74,19 @@ export function isPidAlive(pid) {
   }
 }
 
-export function stopDaemon() {
+export function stopDaemon({ reason = "stop" } = {}) {
   const pid = readPid();
   if (!pid) return { stopped: false, reason: "no pid file" };
+  // 杀者牌（验尸官的另一半证据）：动手前写、自带死者身份。只给在世者留牌——给尸体留牌
+  // 会让下次验尸把"早已静默死亡"误判成"被本次杀死"。
+  const victimAlive = isPidAlive(pid);
   // 杀者留痕（写 daemon.log）：Windows 的 SIGTERM 是 TerminateProcess 强杀，被杀的 daemon
   // 在 JS 层收不到任何事件（无法自记），故由"杀者"记录调用方 pid——
   // 没有这行 = 非我方所杀（外部 taskkill/任务管理器/崩溃），配合最后一条 heartbeat 定位死亡时刻。
   try {
     appendFileSync(logFile(), `[lifecycle] stopDaemon called by pid=${process.pid} — killing daemon pid=${pid}\n`);
   } catch {}
+  if (victimAlive) { try { writeExitMarker(daemonDir(), { reason, prevPid: pid, prevVersion: readPidVersion(), byPid: process.pid }); } catch {} }
   try {
     process.kill(pid, "SIGTERM");
   } catch (err) {
@@ -92,5 +97,5 @@ export function stopDaemon() {
   } catch {
     // already gone
   }
-  return { stopped: true, pid };
+  return { stopped: true, pid, stale: !victimAlive };
 }

package/src/logs.js

@@ -108,7 +108,20 @@ export function appendError(entry, { file = errorsFile() } = {}) {
 // Structured debug event stream: one JSON line per request/error/forward
 // step, consumed live by `mslxdff -debug`.
 export function appendEvent(entry, { file = eventsFile() } = {}) {
-  appendLine(file, entry);
+  appendLine(file, dropTalk(entry));
+}
+
+// events.log 是 debug 流（1MB 环形），对话正文只准进 talk/*.log。
+// 单点剥掉 detail.talk：任何 relay 路径（含绕过 relay-pipeline 的 exhausted 收尾）都不会
+// 把整段问答灌进 debug 行；留 talkChars 计数，debug 时仍看得出这轮有没有出字。
+function dropTalk(entry) {
+  const t = entry?.detail?.talk;
+  if (!t) return entry;
+  const detail = { ...entry.detail };
+  delete detail.talk;
+  detail.talkChars = (t.content || []).join("").length;
+  detail.talkReasoningChars = (t.reasoning || []).join("").length;
+  return { ...entry, detail };
 }
 
 export function recentEvents(n = 100, { file = eventsFile() } = {}) {

package/src/model-trace.js

@@ -78,7 +78,8 @@ const DECISION_FIELDS = [
   "winPeer", "winTarget", "peer", "peers", "peerLabel", "routeBest", "at",
   "latencyMs", "ttfMs", "hedged", "hops", "hasShare", "elapsedMs", "threshold",
   "stallHits", "maxGapMs", "interrupted", "providers", "via",
-  "retry", "max", "delayMs", "upstream", "account", "pick", "cooled",
+  "retry", "step", "max", "delayMs", "upstream", "account", "pick", "cooled", "nudged", "retries", "waitedMs", "raiseFrom", "raiseTo",
+  "heldOpen", "terminalForm", "requestWaitedMs", "budgetMs", "budgetOut",
 ];
 
 function decisionKv(data = {}) {
@@ -115,7 +116,9 @@ export function formatModelTrace({ type, reqId, model, data = {}, request = null
   else if (type === "exhausted-local" || type === "exhausted-all") detail = `last=${data.lastModel || model || "-"} status=${data.lastStatus ?? "-"} order=${(data.order || []).join(" | ")}`;
   else if (type === "upstream-try") detail = `target=${data.model || model || "-"} attempt=${data.attempt ?? "-"} payload=${kv(data.payload || {})}`;
   else if (type === "upstream-done" || type === "upstream-error") detail = `upstream status=${data.status ?? "-"} timing=${data.timing?.totalMs ?? "-"}ms${data.upstream ? ` via=${data.upstream}` : ""}${data.account ? ` account=${data.account}` : ""}${data.pick ? ` pick=${data.pick}` : ""}${data.cooled ? ` cooled=${data.cooled}` : ""} ${safeText(data.message || data.error || "")}`;
-  else if (type === "empty-turn-retry") detail = `retry ${data.retry ?? "-"}/${data.max ?? "-"} delay=${data.delayMs ?? "-"}ms${data.upstream ? ` after=${data.upstream}` : ""}${data.account ? ` account=${data.account}` : ""}${data.pick ? ` pick=${data.pick}` : ""} reason=empty turn`;
+  else if (type === "empty-turn-retry") detail = `空转重试：retry ${data.retry ?? "-"}/${data.max ?? "-"}${data.step != null ? ` step=${data.step}` : ""} delay=${data.delayMs ?? "-"}ms${data.waitedMs ? ` waited=${data.waitedMs}ms` : ""}${data.requestWaitedMs != null ? ` 请求级累计=${data.requestWaitedMs}ms/预算${data.budgetMs ?? "-"}ms` : ""}${data.raiseTo ? ` max_tokens ${data.raiseFrom}→${data.raiseTo}` : ""}${data.upstream ? ` after=${data.upstream}` : ""}${data.account ? ` account=${data.account}` : ""}${data.pick ? ` pick=${data.pick}` : ""}${data.nudged ? ` nudged=1` : ""} reason=empty turn${data.reason ? ` :: ${safeText(data.reason, 120)}` : ""}`;
+  else if (type === "empty-turn-recovered") detail = `空转重试成功：第 ${data.retries ?? "-"}/${data.max ?? "-"} 次重拉拿到真实输出，本轮共白等 ${data.waitedMs ?? "-"}ms${data.upstream ? ` via=${data.upstream}` : ""}${data.account ? ` account=${data.account}` : ""}${data.pick ? ` pick=${data.pick}` : ""}`;
+  else if (type === "empty-turn-exhausted") detail = `空转重试已用尽：重试 ${data.retries ?? 0}/${data.max ?? "-"} 次仍零输出（累计等待 ${data.waitedMs ?? 0}ms${data.budgetOut ? `，请求级等待预算 ${data.budgetMs ?? "-"}ms 用尽` : ""}），交回换候选${data.heldOpen ? "（响应仍开着，换过去的正文还能送达）" : "（响应已封口，重拉只为省额度）"}${data.upstream ? ` after=${data.upstream}` : ""}${data.account ? ` account=${data.account}` : ""}${data.pick ? ` pick=${data.pick}` : ""}${data.reason ? ` :: ${safeText(data.reason, 120)}` : ""}`;
   else if (type === "peer-request" || type === "peer-forward" || type === "peer-error") detail = `peer=${hostPort(data.peer)} status=${data.status ?? "-"} latency=${data.latencyMs ?? "-"}ms payload=${kv(data.payload || {})} ${safeText(data.message || data.error || "")}`;
   else if (type === "relay-done") {
     const d = data.detail || {};

package/src/providers/AGENTS.md

@@ -0,0 +1,46 @@
+# src/providers — 供应商契约（改任何 provider 前必读）
+
+> 从 `AGENTS.md` 下沉（2026-09-29 分层，就近生效）。改完跑：`npm run docs:check` + 相关 provider 测试 + 裸调验证 `-provider <id> models`。
+> 相关 ADR：0007(前缀路由)/0010(allowlist)/0019(share-keys)/0023(key 直连)/0026(cline id)/0029(qoder)/0033(cline 自动同步)/0037(qwenwork)/0038(zcode)/0041(globalqwenwork)。
+
+## 通用机制（dispatcher / keyring / 门禁）
+
+- `src/providers/` 每供应商一文件，前缀路由 `<provider>/raw`（裸 id 归 opencode），dispatcher 剥前缀转发；`providerKeys: {id:[k1,k2]}` round-robin 30s 冷却；`shareKeys` via `x-mslxdff-share-keys` 瞬时借用且 opencode 恒排除。
+- `providerConfigs.allowAnyModels` 默认 `false`（`opencode:true` 例外）+ `allowlist` 空即 `403`；`isModelAllowed` 对未配置 provider 放行（兼容测试），`listModels` 同步过滤；`providerConfigs.{modelsPath,chatPath}` 可配异形路径（`workbuddy=/console/enterprises/personal/models` & `/v2/chat/completions`，其余默认 `/models` & `/chat/completions`，`b.ai=/v1/models`、`cline=/api/v1/models` 已验证）。
+- `src/models.js` 的 `aggLoad`/`get` 二次过滤：`!allowed.length && !allowAny → 跳过整供应商`；`src/routes/chat/index.js` 的 `isAllowlistBlock` 在 `useAuto` 时软跳 `continue`（显式请求才硬 `403`）。
+- 定制 provider 启用门禁下沉为纯函数 `src/runtime/provider-gate.js` —— auth 号型（workbuddy/traework/qoder）**不要求 baseUrl**，旧门禁 `baseUrl && keys` 曾把 qoder 整家静默跳过（表现：`/v1/models` 零条目 + `Model qoder/x is not supported`，无日志）。
+- CLI：`provider <id> models` 与 `model list --provider` 为直查一级答案（`--json` 供脚本），HTTP `GET /v1/providers/:id/models`；价格列 `x0.00/浮动/—` 对齐展示（workbuddy 按 credits 升序）。
+- 新增 provider 三步走：registry 注册 + classify（local-only 判据见 ADR-0023）+ allowlist 只增不减补齐；必须裸调验证 `free` 是否免 Key；`free` 4 个仅目录免 Key ≠ 对话免 Key（cline 教训）。
+
+## qoder（原生 COSY 栈，ADR-0029/0036）
+
+- 凭证单一源 `auths/qoder-<uid>.json`（0600，含每号 `region` —— `state.normalizeAuths` 会剥该字段，故 region 只能存 auths 文件）；签到按每号 region 选域名（cn=`openapi.qoder.com.cn` 走 `daily-check-in/status→claim`，409=今日已领；global=`openapi.qoder.sh` 该端点 404 → 回落 `/sash/api/v1/me/campaigns→/{id}/claim`）；认证只需 `Bearer <device_token>` + `cosy-clienttype: 10`（**无 COSY 签名、claim 空 body**）；默认只领 `CLAIM_BENEFIT`，促销条目 `VIEW_DETAILS` 需 `-provider qoder checkin --any`（实测能 claim，但奖励是订阅折扣、不进 quota）；余额 `GET /api/v2/quota/usage`；daemon 每日 09:00 自动（`MSLXDFF_QODER_CHECKIN=0` 关，`_CHECKIN_HOUR` 改点）。
+- **流式坏号判决面有两条**：①首包 HTTP 非 200；②**HTTP 200 但 SSE 信封内 `statusCodeValue` 非 200**（限流裹成 `200` + `{"code":"403","message":{"isQueued":true,"retryAfterSeconds":30}}`，只盖①会漏掉②——实测后果：94 次 empty turn 502、0 次恢复）。②的取法：返回 Response **前预读上游首帧**取判决（`PEEK_MAX_FRAMES=8`，遇判决或首个有效载荷即停），预读字节原样回灌给 `reshapeQoderStream`（`prefetched` 参数），对外仍恒 200、状态码只走内部头 `x-mslxdff-qoder-upstream-status`（fetch 异常折 502）。`test/qoder-envelope-status.test.js` 4 例。
+- **同请求粘号**（`scope=reqId`，`MSLXDFF_QODER_STICKY_MS` 默认 600s，`0`=关）：一次客户端请求内复用同一号，仅 401/403/429/5xx 冷却才换；`pick=new|sticky|switch|forced` 经 `x-mslxdff-qoder-account` 回显、冷却经 `x-mslxdff-qoder-cooldown` 回显。`test/qoder-cooldown-stream.test.js` 3 例。
+- `GET /v1/models` 在 `modelPicks` 非空时按勾选集裁剪（`filterByPicks`，空勾选=不裁剪，`?all=1` 绕过），`-models` 交互候选取数恒走 `?all=1`；交互选择器按终端行高开窗分页（`src/chooser.js`，多选行形状 `❯ [✓] <id>`）。
+
+
+## qwenwork（cn）与 globalqwenwork（国际站）— 同协议两租户（ADR-0037/0041）
+
+- 千问办公两站 `gateway.qwenwork.cn` / `gateway.qwenwork.ai`：COSY 签名（**同一枚 RSA 模数**）、SSE 端点 `/algo/api/v2/service/pro/sse/agent_chat_generation`、chat body、refresh `{refresh_token}` **逐字同构**（现网双站实测 200），故 globalqwenwork 的协议模块从 qwenwork 逐字 vendor（仓库约定：provider 目录自包含、不跨目录 import）。**差异只在三处租户参数**：auth 域名、OAuth `client_id`（cn `e883ade2…` / intl `cc65e5fc…`）、深链 `redirect_uri`（`qwenwork-cn://` / `qwenwork://`）；**凭证与积分池两站不互通**（cn token 打 .ai → 401 INVALID_TOKEN）。
+- ⚠ **registry.js 子串陷阱**：qwenwork 的 matcher 是 `includes("qwenwork")`，而 `globalqwenwork` / `globalqwenwork://native` 都含该子串且 `getCustomProviderFactory` first-match-wins —— **globalqwenwork 条目必须排在 qwenwork 之前**，否则国际站 token 被 cn 工厂接管（乱 401 + refresh 污染 cn 号）。`test/globalqwenwork-provider.test.js` 第 2 例锁死该顺序；动 registry 顺序前先跑它。
+- 模型池零交集：cn `flash`/`pro`/`qwen3.8-max-preview`（pf 0.1/1/1.8，reasoning）↔ intl 仅 `qwork-auto`(→qwen3.8-flash)/`qwork-advanced`(→gpt-5.6-sol)（pf 0，非 reasoning，is_vl，max_input 180000）。登录各自种 allowlist、`allowAnyModels=false`（额度池防 auto 烧分）。国际站官方客户端自身走 gRPC `model.chat.ChatService/ChatCompletionStream`（其 `region/endpoints` 在 .ai 404），本仓不走 —— 见 ADR-0041 决策 1。
+## workbuddy
+
+- 专用 `POST /v2/chat/completions` **强制 `stream:true`** + `GET /console/...` 按 credits 升序前缀 `workbuddy/`；401/403 自动 `POST /v2/plugin/auth/token/refresh` 回写 `state.json`+`auths/workbuddy-<uid>.json`（0600 tmp+rename）。
+- 凭据目录 `authDirFor()` 跟账本走 + `authDirCandidates()` 只读兜底旧位置 + `listAccountDocs()` 单一读取出口（provider/CLI/token-auto 四处复制品合一）；`-workbuddy remove` 扫全部候选目录防旧副本「复活」（ADR-0025，`test/workbuddy-authdir.test.js` 6 例）。
+- 接入禁手填 `<key>`，必须 `node workbuddy-token-auto.js` 自动化（whistle MITM :8899；whistle/MITM 取 codex token 路径已证伪）；桌面登录态跨平台发现 `src/providers/workbuddy/desktop-info.js`（显式 `--file`/env > 后缀快查 > 文件名 BFS depth≤6；Win `%LOCALAPPDATA%`/`%APPDATA%`、mac `~/Library/Application Support`、Linux `~/.config`）；设备授权加号（0.1.93）：`POST /v2/plugin/auth/state?platform=CLI` → 浏览器登录 → 轮询 `token?state=`，UA `CLI/2.63.2 CodeBuddy/2.63.2` 可 `MSLXDFF_WORKBUDDY_UA` 覆盖；每日 `workbuddy-checkin.js` 双域幂等 `code 10001` 视为成功。
+- `share` 默认 `off` 需 `MSLXDFF_WORKBUDDY_SHARE_KEYS=1`；`-setto workbuddy [modelId]` 原子写 `~/.workbuddy/models.json`（仅 127.0.0.1/v1）。
+
+## cline
+
+- 指纹头：UA `Cline/3.0.47` + `X-CLIENT-TYPE: cline-sdk` + `X-CLIENT-VERSION` 同 UA；对话链 = `POST /api/v1/auth/refresh`（**每次 refresh 轮换 refreshToken 必须回写**）→ `Bearer workos:<accessToken>` + 固定 `<base>/api/v1/chat/completions`（**baseUrl 已含 /api/v1 时只拼 `/chat/completions`，否则双 /api/v1 会 401/empty response**）；deepseek/z-ai 免费通道必须 `stream:true` + SSE 聚合否则 `500 empty response content`；`X-Task-ID`/`session_id` 每次唯一。
+- 发上游剥 `provider/` 前缀（`cline/deepseek/X→deepseek/X`）恢复 forceStream 聚合 + 非 JSON 响应体 TypeError 加固（`test/cline-chat-id.test.js` 4 用例，0.1.91）。
+- 白名单自动同步（ADR-0033）：`allowlist-sync.js` 纯函数 `planMerge`（只增不减）+ `createAllowlistSync`（无新增不写盘、异常吞掉留痕），由 `cline/index.js` 注入；`cline/models.js` 仅在**上游成功取数**路径调 `notifyRefresh`（内置兜底常量不写盘，防污染）；`MSLXDFF_CLINE_AUTOSYNC=0` 关；**教训：`saveProviderAllowedModels`/`saveProviderConfig` 重建 cfg 时起手 `{baseUrl,keys}` 未带 `allowAnyModels` 会静默抹成 false**（已修，勿回退）。
+- 登录走 WorkOS 设备授权流（client_id `client_01K3A541FN8TA3EPPHTD2325AR`），refreshToken 落 `providerConfigs.{cline}.keys`；bench 检测 keys 含 refreshToken 即走 refresh→指纹头→stream 测速专用分支。
+
+## bench 与额度保护（`src/bench/`）
+
+- `bench/bench --via` 仅测（allowlist ∩ 全局 picks）交集（`filterBenchModels`，picks 空回退 allowlist）；计费模型（无 `-free` 后缀）需显式点名才测（`max_tokens=5` 也计费）；`--via` 额度保护默认跳过 `opencode` 需 `--include-opencode` 且 TTY 二次确认 `y/N`；0.1.84 起完全串行 `直连→逐 peer`（`MSLXDFF_BENCH_DELAY_MS=120`）逐模型实时打印（`--json` 进度走 `stderr`）。
+- `aihubmix gemini 400 no_available_channel` 为上游无通道非 bench bug；peer name 统一短化 `host:port`。
+- **烧额度的实测必须先经用户明确同意**：付费/订阅/按量计费上游的裸调、A/B 长文生成一律先问（2026-09-23 教训）；免费池探针（public 免费模型、短 prompt 微量）可直接跑。

package/src/providers/classify.js

@@ -4,7 +4,7 @@
 // latency-compare：key/token 类，direct vs link+remote 比延迟
 export function classifyProvider(id) {
   const s = String(id || "").trim().toLowerCase();
-  if (s === "workbuddy" || s === "cline" || s === "codearts" || s === "traework" || s === "qoder" || s === "qwenwork" || s === "zcode") return "local-only";
+  if (s === "workbuddy" || s === "cline" || s === "codearts" || s === "traework" || s === "qoder" || s === "qwenwork" || s === "globalqwenwork" || s === "zcode") return "local-only";
   if (s === "opencode") return "quota-pool";
   return "latency-compare";
 }

package/src/providers/globalqwenwork/account-store.js

@@ -0,0 +1,141 @@
+// globalqwenwork 账号落盘单一源：auths/globalqwenwork-<uid>.json（0600 tmp+rename）+ state.json 双写。
+// vendor 自 src/providers/qwenwork/account-store.js 逐字搬，改三处命名空间：
+//  ① 文件名前缀 `globalqwenwork-`（与 cn 的 `qwenwork-` **互不为前缀**，故两站号同目录也不串；
+//     反向亦然：`qwenwork-x.json` 不 startsWith("globalqwenwork-")）
+//  ② state 键 `providerConfigs.globalqwenwork`
+//  ③ auth 目录 env 独立为 `GLOBALQWENWORK_AUTH_DIR`（不与 cn 的 QWENWORK_AUTH_DIR 共享，防两站串号）
+// 国际站与 cn 站凭证**不互通**（实测 cn token 打 .ai userinfo → 401 INVALID_TOKEN），故必须各存各的。
+import { writeFileSync, mkdirSync, existsSync, renameSync, unlinkSync, readdirSync, readFileSync, chmodSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { tmpdir } from "node:os";
+import { isTestEnv, defaultStateFile } from "../../state/store.js";
+
+const PROVIDER_ID = "globalqwenwork";
+const FILE_PREFIX = "globalqwenwork-";
+
+export function authDirFor({ explicit = "", testEnv = false, stateFile } = {}) {
+  if (explicit) return explicit;
+  if (testEnv) return join(tmpdir(), "mslxdff-test-auths-globalqwenwork");
+  return join(dirname(stateFile), "auths");
+}
+
+export function resolveAuthDir() {
+  return authDirFor({
+    explicit: process.env.GLOBALQWENWORK_AUTH_DIR || "",
+    testEnv: isTestEnv(),
+    stateFile: defaultStateFile(),
+  });
+}
+
+export function resolveAuthDirs() {
+  const primary = resolveAuthDir();
+  const cwdDir = join(process.cwd(), "auths");
+  return primary === cwdDir ? [primary] : [primary, cwdDir];
+}
+
+export function listAccountDocs({ dirs } = {}) {
+  const out = [];
+  const seen = new Set();
+  for (const dir of dirs || resolveAuthDirs()) {
+    let files = [];
+    try {
+      if (!existsSync(dir)) continue;
+      files = readdirSync(dir).filter((f) => f.startsWith(FILE_PREFIX) && f.endsWith(".json"));
+    } catch { continue; }
+    for (const f of files) {
+      try {
+        const doc = JSON.parse(readFileSync(join(dir, f), "utf8"));
+        const uid = doc?.account?.uid;
+        if (!uid || !doc?.auth?.accessToken) continue;
+        if (seen.has(String(uid))) continue;
+        seen.add(String(uid));
+        out.push({ uid: String(uid), file: join(dir, f), dir, doc });
+      } catch {}
+    }
+  }
+  return out;
+}
+
+function writeAccountFile({ uid, accessToken, refreshToken = "", expiresAt = 0, name = "", email = "" }) {
+  const authDir = resolveAuthDir();
+  mkdirSync(authDir, { recursive: true });
+  const doc = {
+    account: { uid, name, email },
+    auth: { accessToken, refreshToken, expiresAt },
+  };
+  const fp = join(authDir, `${FILE_PREFIX}${uid}.json`);
+  const tmp = `${fp}.tmp`;
+  writeFileSync(tmp, JSON.stringify(doc, null, 2), { mode: 0o600 });
+  try {
+    if (existsSync(fp)) { try { chmodSync(fp, 0o600); } catch {} unlinkSync(fp); }
+    renameSync(tmp, fp);
+  } catch {
+    writeFileSync(fp, JSON.stringify(doc, null, 2), { mode: 0o600 });
+    try { unlinkSync(tmp); } catch {}
+  }
+  try { chmodSync(fp, 0o600); } catch {}
+  return fp;
+}
+
+// state 落盘：keys[i] 存 JSON blob（{device_token, refresh_token}，对齐家族形状），auths 存 uid 索引行。
+async function persistAccounts(accounts, file) {
+  const { loadProviderConfigs } = await import("../../state.js");
+  const { saveProviderConfig } = await import("../../state.js");
+  const cfg = (loadProviderConfigs(file ? { file } : {})?.[PROVIDER_ID]) || {};
+  const keys = [...(Array.isArray(cfg.keys) ? cfg.keys : [])];
+  const auths = [...(Array.isArray(cfg.auths) ? cfg.auths : [])];
+  let updated = 0;
+  for (const acc of accounts) {
+    if (!acc?.uid || !acc?.accessToken) continue;
+    const blob = JSON.stringify({ device_token: acc.accessToken, refresh_token: acc.refreshToken || "" });
+    const row = { uid: acc.uid, name: acc.name || "", refreshToken: acc.refreshToken || "" };
+    const idx = auths.findIndex((a) => String(a?.uid) === String(acc.uid));
+    if (idx >= 0) { keys[idx] = blob; auths[idx] = row; updated += 1; }
+    else { keys.push(blob); auths.push(row); }
+  }
+  // saveProviderConfig 起手保留 allowAnyModels（已在 state 层修复，见 ADR-0033 字段保留修复）
+  saveProviderConfig(PROVIDER_ID, { baseUrl: cfg.baseUrl || "", keys, auths }, file ? { file } : {});
+  return { keys, auths, updated };
+}
+
+export async function saveGlobalQwenworkAccount({ uid, accessToken, refreshToken = "", expiresAt = 0, name = "", email = "", file } = {}) {
+  if (!uid || !accessToken) throw new Error("saveGlobalQwenworkAccount: 缺少 uid/accessToken");
+  const fp = writeAccountFile({ uid, accessToken, refreshToken, expiresAt, name, email });
+  const st = await persistAccounts([{ uid, accessToken, refreshToken, name }], file);
+  return { file: fp, accounts: st.keys.length, updated: st.updated > 0 };
+}
+
+/** 回写刷新后的 token（上游每次 refresh 会轮换 refreshToken，必须落盘）。 */
+export async function updateGlobalQwenworkTokens({ uid, accessToken, refreshToken = "", expiresAt = 0, file } = {}) {
+  if (!uid || !accessToken) throw new Error("updateGlobalQwenworkTokens: 缺少 uid/accessToken");
+  const docs = listAccountDocs();
+  const hit = docs.find((d) => String(d.uid) === String(uid));
+  const prev = hit?.doc || {};
+  const fp = writeAccountFile({
+    uid,
+    accessToken,
+    refreshToken: refreshToken || prev?.auth?.refreshToken || "",
+    expiresAt: expiresAt || 0,
+    name: prev?.account?.name || "",
+    email: prev?.account?.email || "",
+  });
+  await persistAccounts([{ uid, accessToken, refreshToken: refreshToken || prev?.auth?.refreshToken || "", name: prev?.account?.name || "" }], file);
+  try {
+    const { invalidateSession } = await import("./cosy.js");
+    invalidateSession({ uid, accessToken: prev?.auth?.accessToken });
+  } catch {}
+  return { file: fp };
+}
+
+// 从 provider keys 的 blob 还原凭据（device_token/deviceToken 双形状兼容）
+export function accountFromBlob(blob) {
+  try {
+    const j = JSON.parse(String(blob || "{}"));
+    const accessToken = String(j.device_token || j.accessToken || "");
+    const refreshToken = String(j.refresh_token || j.refreshToken || "");
+    if (!accessToken) return null;
+    return { accessToken, refreshToken };
+  } catch {
+    return null;
+  }
+}