mslxdff 0.1.203 → 0.1.208

package/src/api-kind.js

@@ -1,31 +1,31 @@
-/**
- * 入站协议门短码（api kind）——「这一发是从哪扇门进来的」的唯一判定。
- *
- * 为什么单独成模块：三道门（`/v1/chat/completions`、`/v1/responses`、`/v1/messages`）汇入同一条
- * ChatPipeline、同一批模型，四类日志形状完全相同 → 门信息一旦在各写点各判一次，就会出现第二份
- * 前缀匹配并迟早互相漂移。故判定**只做一次**（ChatPipeline inlet），结果随 `handlerCtx` 透传。
- *
- * 缺值口径：认不出的路 = `other`（恒有值、绝不空串/undefined）；**写点拿不到值时省略该字段**，
- * 使「缺字段」只可能是旧行或漏传，而不会被误读成一次未知门的判定。
- */
-
-export const API_KINDS = ["chat", "responses", "messages", "other"];
-export const API_KIND_OTHER = "other";
-
-/**
- * 路径 → 短码。只认段边界：`/v1/messagesXYZ` 不是 `/v1/messages` 的子段（那是别的路由，不许冒充门）。
- * query（`?beta=true`）与 `count_tokens` 子路径都归同一扇门。
- */
-export function apiKindOfUrl(url) {
-  if (typeof url !== "string" || !url) return API_KIND_OTHER;
-  const path = url.split("?")[0].split("#")[0];
-  if (path === "/v1/chat/completions" || path.startsWith("/v1/chat/completions/")) return "chat";
-  if (path === "/v1/responses" || path.startsWith("/v1/responses/")) return "responses";
-  if (path === "/v1/messages" || path.startsWith("/v1/messages/")) return "messages";
-  return API_KIND_OTHER;
-}
-
-/** req → 短码（读 `req.url`；缺失/非字符串 = `other`）。 */
-export function apiKindOf(req) {
-  return apiKindOfUrl(req && typeof req === "object" ? req.url : undefined);
-}
+/**
+ * 入站协议门短码（api kind）——「这一发是从哪扇门进来的」的唯一判定。
+ *
+ * 为什么单独成模块：三道门（`/v1/chat/completions`、`/v1/responses`、`/v1/messages`）汇入同一条
+ * ChatPipeline、同一批模型，四类日志形状完全相同 → 门信息一旦在各写点各判一次，就会出现第二份
+ * 前缀匹配并迟早互相漂移。故判定**只做一次**（ChatPipeline inlet），结果随 `handlerCtx` 透传。
+ *
+ * 缺值口径：认不出的路 = `other`（恒有值、绝不空串/undefined）；**写点拿不到值时省略该字段**，
+ * 使「缺字段」只可能是旧行或漏传，而不会被误读成一次未知门的判定。
+ */
+
+export const API_KINDS = ["chat", "responses", "messages", "other"];
+export const API_KIND_OTHER = "other";
+
+/**
+ * 路径 → 短码。只认段边界：`/v1/messagesXYZ` 不是 `/v1/messages` 的子段（那是别的路由，不许冒充门）。
+ * query（`?beta=true`）与 `count_tokens` 子路径都归同一扇门。
+ */
+export function apiKindOfUrl(url) {
+  if (typeof url !== "string" || !url) return API_KIND_OTHER;
+  const path = url.split("?")[0].split("#")[0];
+  if (path === "/v1/chat/completions" || path.startsWith("/v1/chat/completions/")) return "chat";
+  if (path === "/v1/responses" || path.startsWith("/v1/responses/")) return "responses";
+  if (path === "/v1/messages" || path.startsWith("/v1/messages/")) return "messages";
+  return API_KIND_OTHER;
+}
+
+/** req → 短码（读 `req.url`；缺失/非字符串 = `other`）。 */
+export function apiKindOf(req) {
+  return apiKindOfUrl(req && typeof req === "object" ? req.url : undefined);
+}

package/src/autostart.js

@@ -1,288 +1,288 @@
-import { execFile } from "node:child_process";
-import { existsSync, mkdirSync, writeFileSync, readFileSync, rmSync } from "node:fs";
-import { homedir, userInfo } from "node:os";
-import { join, dirname } from "node:path";
-import { fileURLToPath } from "node:url";
-import { daemonDir, readPid } from "./daemon.js";
-import { writeExitMarker } from "./runtime/lifecycle-forensics.js";
-
-const TASK_NAME = "mslxdff";
-const SERVICE_NAME = "mslxdff";
-
-function isWin() { return process.platform === "win32"; }
-
-function nodePath() { return process.execPath; }
-
-function scriptPath() {
-  // src/autostart.js -> ../bin/mslxdff.js
-  return join(dirname(fileURLToPath(import.meta.url)), "..", "bin", "mslxdff.js");
-}
-
-function execAsync(file, args, opts = {}) {
-  return new Promise((resolve) => {
-    execFile(file, args, { windowsHide: true, timeout: 8000, ...opts }, (err, stdout, stderr) => {
-      resolve({ err, stdout: String(stdout || ""), stderr: String(stderr || ""), code: err?.code ?? 0 });
-    });
-  });
-}
-
-// ---------- Windows: schtasks ----------
-async function winRegQuery() {
-  const r = await execAsync("reg", ["query", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", "/v", TASK_NAME]);
-  if (!r.err && r.stdout.includes(TASK_NAME)) return { exists: true, raw: r.stdout, method: "registry" };
-  return { exists: false, raw: r.stdout || r.stderr };
-}
-
-async function winQuery() {
-  const r = await execAsync("schtasks", ["/query", "/tn", TASK_NAME, "/fo", "LIST", "/v"]);
-  if (!r.err) {
-    const out = r.stdout || "";
-    if (out.includes(TASK_NAME)) return { exists: true, raw: out, method: "schtasks" };
-  }
-  // 回退查注册表
-  const reg = await winRegQuery();
-  if (reg.exists) return { exists: true, raw: reg.raw, method: "registry" };
-  return { exists: false, raw: r.stderr || r.stdout };
-}
-
-async function winRegEnable() {
-  const node = nodePath();
-  const script = scriptPath();
-  const cmd = `"${node}" "${script}"`;
-  const r = await execAsync("reg", ["add", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", "/v", TASK_NAME, "/t", "REG_SZ", "/d", cmd, "/f"]);
-  if (!r.err) return { ok: true, method: "registry:HKCU\\Run", stdout: r.stdout };
-  return { ok: false, error: (r.stderr || r.stdout || r.err?.message || "").slice(0, 800) };
-}
-
-async function winEnable() {
-  const node = nodePath();
-  const script = scriptPath();
-  const tr = `"${node}" "${script}"`;
-  // 1) schtasks ONLOGON（需任务计划权限，部分受限环境会拒绝访问）
-  let r = await execAsync("schtasks", ["/create", "/tn", TASK_NAME, "/tr", tr, "/sc", "onlogon", "/f"]);
-  if (!r.err) return { ok: true, method: "schtasks:onlogon", stdout: r.stdout };
-  r = await execAsync("schtasks", ["/create", "/tn", TASK_NAME, "/tr", tr, "/sc", "onlogon", "/rl", "highest", "/f"]);
-  if (!r.err) return { ok: true, method: "schtasks:onlogon:highest", stdout: r.stdout };
-  // 2) 回退注册表 HKCU Run（无需管理员，当前用户登录即起，最兼容）
-  const reg = await winRegEnable();
-  if (reg.ok) return reg;
-  // 3) 最后尝试 ONSTART + SYSTEM
-  r = await execAsync("schtasks", ["/create", "/tn", TASK_NAME, "/tr", tr, "/sc", "onstart", "/ru", "SYSTEM", "/f"]);
-  if (!r.err) return { ok: true, method: "schtasks:onstart:SYSTEM", stdout: r.stdout };
-  const msg = r.stderr || r.stdout || reg.error || "";
-  // 若错误含拒绝访问，明确提示注册表已成功则不报错
-  if (reg.ok) return reg;
-  return { ok: false, error: (msg || "schtasks failed").slice(0, 800), stdout: r.stdout, stderr: r.stderr };
-}
-
-async function winRegDisable() {
-  const r = await execAsync("reg", ["delete", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", "/v", TASK_NAME, "/f"]);
-  if (!r.err) return { ok: true, stdout: r.stdout };
-  const msg = r.stderr || r.stdout || "";
-  if (/ERROR.*cannot find/i.test(msg) || /找不到/.test(msg) || /未找到/.test(msg)) return { ok: true, stdout: "already disabled" };
-  return { ok: false, error: msg.slice(0, 800) };
-}
-
-async function winDisable() {
-  let r = await execAsync("schtasks", ["/delete", "/tn", TASK_NAME, "/f"]);
-  let okSchtasks = !r.err;
-  let regR = await winRegDisable();
-  if (okSchtasks || regR.ok) return { ok: true, stdout: (r.stdout || "") + (regR.stdout || "") };
-  const msg = r.stderr || r.stdout || "";
-  if (/ERROR.*cannot find/i.test(msg) || /找不到/.test(msg)) {
-    if (regR.ok) return { ok: true, stdout: "already disabled" };
-  }
-  // 若两者都失败但注册表已清，也算成功
-  if (regR.ok) return { ok: true };
-  return { ok: false, error: (msg || regR.error || "").slice(0, 800) };
-}
-
-async function winStatus() {
-  const q = await winQuery();
-  if (!q.exists) return { enabled: false, detail: "未启用（无任务计划也无注册表）" };
-  if (q.method === "registry") {
-    const m = q.raw.match(/mslxdff\s+REG_SZ\s+(.+)/);
-    return { enabled: true, detail: `已启用 · 注册表 HKCU\\Run（登录即起，无需管理员）`, taskToRun: m ? m[1].trim() : "", raw: q.raw };
-  }
-  const m = q.raw.match(/Status:\s*(.+)/i) || q.raw.match(/状态:\s*(.+)/);
-  const last = q.raw.match(/Last Run Result:\s*(.+)/i) || q.raw.match(/上次运行结果:\s*(.+)/);
-  const tr = q.raw.match(/Task To Run:\s*(.+)/i) || q.raw.match(/要运行的任务:\s*(.+)/);
-  return {
-    enabled: true,
-    detail: `已启用 · ${m ? m[1].trim() : "Ready"}${last ? ` · 上次结果 ${last[1].trim()}` : ""}`,
-    taskToRun: tr ? tr[1].trim() : "",
-    raw: q.raw,
-  };
-}
-
-// ---------- Linux: systemd user ----------
-function systemdUnitPath() {
-  return join(homedir(), ".config", "systemd", "user", `${SERVICE_NAME}.service`);
-}
-
-function systemdUnitContent() {
-  const node = nodePath();
-  const script = scriptPath();
-  return `[Unit]
-Description=mslxdff daemon — OpenCode Free proxy
-After=network.target
-
-[Service]
-Type=simple
-Environment=MSLXDFF_DAEMON=1
-ExecStart=${node} ${script} --daemon
-Restart=always
-RestartSec=3
-
-[Install]
-WantedBy=default.target
-`;
-}
-
-async function linuxEnable() {
-  const unit = systemdUnitPath();
-  try {
-    mkdirSync(dirname(unit), { recursive: true });
-    writeFileSync(unit, systemdUnitContent(), "utf8");
-  } catch (e) {
-    return { ok: false, error: `write unit failed: ${e.message}` };
-  }
-  // best-effort: enable linger so user service survives logout/SSH disconnect
-  let lingerRes = null;
-  try {
-    let who = "";
-    try { who = userInfo().username; } catch {}
-    who = who || process.env.USER || process.env.USERNAME || process.env.LOGNAME || "";
-    if (who) {
-      const lr = await execAsync("loginctl", ["enable-linger", who]);
-      lingerRes = lr.err ? (lr.stderr || lr.stdout || lr.err.message || "").slice(0, 200) : "ok";
-    }
-  } catch {}
-  // stop bare detached daemon that may hold the port, let systemd take over (best-effort, wait for port free)
-  try {
-    // 路径相对**本文件**解析：本文件在 src/ 下，daemon.js 与 server.js 都在 src/ 内。
-    // 旧写的 `../daemon.js` / `../server.js` 从 src/ 出发指向仓库根 —— 两处都不存在，
-    // 整个「停裸 daemon → 等端口释放 → 让 systemd 接管」的分支被后面的 catch {} 静默吞掉、从未执行过。
-    const { isPidAlive, stopDaemon } = await import("./daemon.js");
-    const { resolvePort } = await import("./server.js");
-    const port = resolvePort();
-    const pidFile = join(homedir(), ".config", "mslxdff", "daemon.pid");
-    const { existsSync: exists2, readFileSync: read2 } = await import("node:fs");
-    let pidToWait = null;
-    try {
-      if (exists2(pidFile)) {
-        const raw = read2(pidFile, "utf8").trim().split("\n")[0];
-        const n = Number(raw);
-        if (Number.isInteger(n) && n > 0 && isPidAlive(n)) pidToWait = n;
-      }
-    } catch {}
-    try { stopDaemon(); } catch {}
-    // ensure bare daemon really exits (SIGTERM -> SIGKILL)
-    for (let i = 0; i < 15; i++) {
-      if (pidToWait && isPidAlive(pidToWait)) {
-        if (i === 7) try { process.kill(pidToWait, "SIGKILL"); } catch {}
-        await new Promise((r2) => setTimeout(r2, 200));
-      } else break;
-    }
-    // robust: scan ss for any holder of :port (covers stale pidFile, fuser not installed)
-    const killHolders = async () => {
-      let killed = 0;
-      try {
-        const r = await execAsync("ss", ["-lptn", `sport = :${port}`]);
-        const out = r.stdout || "";
-        const re = /pid=(\d+)/g;
-        let m;
-        const pids = new Set();
-        while ((m = re.exec(out))) pids.add(Number(m[1]));
-        // fallback: full ss if sport filter empty (busybox ss)
-        if (!pids.size) {
-          const r2 = await execAsync("ss", ["-lptn"]);
-          const out2 = r2.stdout || "";
-          // only consider lines containing :port
-          for (const line of out2.split("\n")) {
-            if (!line.includes(`:${port}`)) continue;
-            const re2 = /pid=(\d+)/g;
-            let m2;
-            while ((m2 = re2.exec(line))) pids.add(Number(m2[1]));
-          }
-        }
-        for (const p of pids) {
-          if (p === process.pid) continue;
-          if (p === readPid()) { try { writeExitMarker(daemonDir(), { reason: "autostart-cleanup", prevPid: p, prevVersion: null, byPid: process.pid }); } catch {} }
-          try { process.kill(p, "SIGTERM"); killed++; } catch {}
-        }
-        if (killed) await new Promise((r2) => setTimeout(r2, 400));
-        for (const p of pids) {
-          try { if (isPidAlive(p)) process.kill(p, "SIGKILL"); } catch {}
-        }
-      } catch {}
-      // fuser as extra best-effort (may not exist)
-      try { await execAsync("fuser", ["-k", `${port}/tcp`]); } catch {}
-      return killed;
-    };
-    await killHolders();
-    // stop any leftover systemd instance before start (avoid double)
-    try { await execAsync("systemctl", ["--user", "stop", SERVICE_NAME]); } catch {}
-    // wait for :port to be free (ss probe)
-    for (let i = 0; i < 20; i++) {
-      const chk = await execAsync("ss", ["-ltn"]);
-      if (!chk.stdout.includes(`:${port}`)) break;
-      if (i === 6 || i === 12) await killHolders();
-      await new Promise((r2) => setTimeout(r2, 250));
-    }
-  } catch {}
-  let r = await execAsync("systemctl", ["--user", "daemon-reload"]);
-  if (r.err) return { ok: false, error: (r.stderr || r.stdout).slice(0, 500) };
-  r = await execAsync("systemctl", ["--user", "enable", SERVICE_NAME]);
-  if (r.err) return { ok: false, error: (r.stderr || r.stdout).slice(0, 500) };
-  r = await execAsync("systemctl", ["--user", "start", SERVICE_NAME]);
-  // Verify actually active; if not, surface journal hint
-  const chk = await execAsync("systemctl", ["--user", "is-active", SERVICE_NAME]);
-  const active = !chk.err && /active/i.test(chk.stdout);
-  if (!active) {
-    const st = await execAsync("systemctl", ["--user", "status", SERVICE_NAME, "--no-pager", "-l"]);
-    const hint = (st.stdout || st.stderr || r.stderr || r.stdout || "").slice(0, 600);
-    return { ok: false, error: `start failed (not active): ${hint || "check journalctl --user -u mslxdff"}`, unit, linger: lingerRes };
-  }
-  return { ok: true, method: "systemd:user", unit, linger: lingerRes };
-}
-
-async function linuxDisable() {
-  await execAsync("systemctl", ["--user", "disable", SERVICE_NAME]);
-  await execAsync("systemctl", ["--user", "stop", SERVICE_NAME]);
-  try { rmSync(systemdUnitPath(), { force: true }); } catch {}
-  await execAsync("systemctl", ["--user", "daemon-reload"]);
-  return { ok: true };
-}
-
-async function linuxStatus() {
-  const unit = systemdUnitPath();
-  const exists = existsSync(unit);
-  if (!exists) return { enabled: false, detail: "未启用（无 systemd user unit）" };
-  const r = await execAsync("systemctl", ["--user", "is-enabled", SERVICE_NAME]);
-  const enabled = !r.err && /enabled/i.test(r.stdout);
-  const r2 = await execAsync("systemctl", ["--user", "is-active", SERVICE_NAME]);
-  const active = !r2.err && /active/i.test(r2.stdout);
-  return { enabled, detail: `${enabled ? "已启用" : "已禁用"} · ${active ? "运行中" : "未运行"} · ${unit}`, unit };
-}
-
-// ---------- facade ----------
-export async function enableAutostart() {
-  if (isWin()) return winEnable();
-  return linuxEnable();
-}
-
-export async function disableAutostart() {
-  if (isWin()) return winDisable();
-  return linuxDisable();
-}
-
-export async function getAutostartStatus() {
-  if (isWin()) return winStatus();
-  return linuxStatus();
-}
-
-export function autostartHelp() {
-  if (isWin()) return `Windows: schtasks 任务 "mslxdff"（ONLOGON，最高权限，当前用户登录即自启）`;
-  return `Linux: systemd user unit ~/.config/systemd/user/mslxdff.service`;
-}
+import { execFile } from "node:child_process";
+import { existsSync, mkdirSync, writeFileSync, readFileSync, rmSync } from "node:fs";
+import { homedir, userInfo } from "node:os";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { daemonDir, readPid } from "./daemon.js";
+import { writeExitMarker } from "./runtime/lifecycle-forensics.js";
+
+const TASK_NAME = "mslxdff";
+const SERVICE_NAME = "mslxdff";
+
+function isWin() { return process.platform === "win32"; }
+
+function nodePath() { return process.execPath; }
+
+function scriptPath() {
+  // src/autostart.js -> ../bin/mslxdff.js
+  return join(dirname(fileURLToPath(import.meta.url)), "..", "bin", "mslxdff.js");
+}
+
+function execAsync(file, args, opts = {}) {
+  return new Promise((resolve) => {
+    execFile(file, args, { windowsHide: true, timeout: 8000, ...opts }, (err, stdout, stderr) => {
+      resolve({ err, stdout: String(stdout || ""), stderr: String(stderr || ""), code: err?.code ?? 0 });
+    });
+  });
+}
+
+// ---------- Windows: schtasks ----------
+async function winRegQuery() {
+  const r = await execAsync("reg", ["query", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", "/v", TASK_NAME]);
+  if (!r.err && r.stdout.includes(TASK_NAME)) return { exists: true, raw: r.stdout, method: "registry" };
+  return { exists: false, raw: r.stdout || r.stderr };
+}
+
+async function winQuery() {
+  const r = await execAsync("schtasks", ["/query", "/tn", TASK_NAME, "/fo", "LIST", "/v"]);
+  if (!r.err) {
+    const out = r.stdout || "";
+    if (out.includes(TASK_NAME)) return { exists: true, raw: out, method: "schtasks" };
+  }
+  // 回退查注册表
+  const reg = await winRegQuery();
+  if (reg.exists) return { exists: true, raw: reg.raw, method: "registry" };
+  return { exists: false, raw: r.stderr || r.stdout };
+}
+
+async function winRegEnable() {
+  const node = nodePath();
+  const script = scriptPath();
+  const cmd = `"${node}" "${script}"`;
+  const r = await execAsync("reg", ["add", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", "/v", TASK_NAME, "/t", "REG_SZ", "/d", cmd, "/f"]);
+  if (!r.err) return { ok: true, method: "registry:HKCU\\Run", stdout: r.stdout };
+  return { ok: false, error: (r.stderr || r.stdout || r.err?.message || "").slice(0, 800) };
+}
+
+async function winEnable() {
+  const node = nodePath();
+  const script = scriptPath();
+  const tr = `"${node}" "${script}"`;
+  // 1) schtasks ONLOGON（需任务计划权限，部分受限环境会拒绝访问）
+  let r = await execAsync("schtasks", ["/create", "/tn", TASK_NAME, "/tr", tr, "/sc", "onlogon", "/f"]);
+  if (!r.err) return { ok: true, method: "schtasks:onlogon", stdout: r.stdout };
+  r = await execAsync("schtasks", ["/create", "/tn", TASK_NAME, "/tr", tr, "/sc", "onlogon", "/rl", "highest", "/f"]);
+  if (!r.err) return { ok: true, method: "schtasks:onlogon:highest", stdout: r.stdout };
+  // 2) 回退注册表 HKCU Run（无需管理员，当前用户登录即起，最兼容）
+  const reg = await winRegEnable();
+  if (reg.ok) return reg;
+  // 3) 最后尝试 ONSTART + SYSTEM
+  r = await execAsync("schtasks", ["/create", "/tn", TASK_NAME, "/tr", tr, "/sc", "onstart", "/ru", "SYSTEM", "/f"]);
+  if (!r.err) return { ok: true, method: "schtasks:onstart:SYSTEM", stdout: r.stdout };
+  const msg = r.stderr || r.stdout || reg.error || "";
+  // 若错误含拒绝访问，明确提示注册表已成功则不报错
+  if (reg.ok) return reg;
+  return { ok: false, error: (msg || "schtasks failed").slice(0, 800), stdout: r.stdout, stderr: r.stderr };
+}
+
+async function winRegDisable() {
+  const r = await execAsync("reg", ["delete", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", "/v", TASK_NAME, "/f"]);
+  if (!r.err) return { ok: true, stdout: r.stdout };
+  const msg = r.stderr || r.stdout || "";
+  if (/ERROR.*cannot find/i.test(msg) || /找不到/.test(msg) || /未找到/.test(msg)) return { ok: true, stdout: "already disabled" };
+  return { ok: false, error: msg.slice(0, 800) };
+}
+
+async function winDisable() {
+  let r = await execAsync("schtasks", ["/delete", "/tn", TASK_NAME, "/f"]);
+  let okSchtasks = !r.err;
+  let regR = await winRegDisable();
+  if (okSchtasks || regR.ok) return { ok: true, stdout: (r.stdout || "") + (regR.stdout || "") };
+  const msg = r.stderr || r.stdout || "";
+  if (/ERROR.*cannot find/i.test(msg) || /找不到/.test(msg)) {
+    if (regR.ok) return { ok: true, stdout: "already disabled" };
+  }
+  // 若两者都失败但注册表已清，也算成功
+  if (regR.ok) return { ok: true };
+  return { ok: false, error: (msg || regR.error || "").slice(0, 800) };
+}
+
+async function winStatus() {
+  const q = await winQuery();
+  if (!q.exists) return { enabled: false, detail: "未启用（无任务计划也无注册表）" };
+  if (q.method === "registry") {
+    const m = q.raw.match(/mslxdff\s+REG_SZ\s+(.+)/);
+    return { enabled: true, detail: `已启用 · 注册表 HKCU\\Run（登录即起，无需管理员）`, taskToRun: m ? m[1].trim() : "", raw: q.raw };
+  }
+  const m = q.raw.match(/Status:\s*(.+)/i) || q.raw.match(/状态:\s*(.+)/);
+  const last = q.raw.match(/Last Run Result:\s*(.+)/i) || q.raw.match(/上次运行结果:\s*(.+)/);
+  const tr = q.raw.match(/Task To Run:\s*(.+)/i) || q.raw.match(/要运行的任务:\s*(.+)/);
+  return {
+    enabled: true,
+    detail: `已启用 · ${m ? m[1].trim() : "Ready"}${last ? ` · 上次结果 ${last[1].trim()}` : ""}`,
+    taskToRun: tr ? tr[1].trim() : "",
+    raw: q.raw,
+  };
+}
+
+// ---------- Linux: systemd user ----------
+function systemdUnitPath() {
+  return join(homedir(), ".config", "systemd", "user", `${SERVICE_NAME}.service`);
+}
+
+function systemdUnitContent() {
+  const node = nodePath();
+  const script = scriptPath();
+  return `[Unit]
+Description=mslxdff daemon — OpenCode Free proxy
+After=network.target
+
+[Service]
+Type=simple
+Environment=MSLXDFF_DAEMON=1
+ExecStart=${node} ${script} --daemon
+Restart=always
+RestartSec=3
+
+[Install]
+WantedBy=default.target
+`;
+}
+
+async function linuxEnable() {
+  const unit = systemdUnitPath();
+  try {
+    mkdirSync(dirname(unit), { recursive: true });
+    writeFileSync(unit, systemdUnitContent(), "utf8");
+  } catch (e) {
+    return { ok: false, error: `write unit failed: ${e.message}` };
+  }
+  // best-effort: enable linger so user service survives logout/SSH disconnect
+  let lingerRes = null;
+  try {
+    let who = "";
+    try { who = userInfo().username; } catch {}
+    who = who || process.env.USER || process.env.USERNAME || process.env.LOGNAME || "";
+    if (who) {
+      const lr = await execAsync("loginctl", ["enable-linger", who]);
+      lingerRes = lr.err ? (lr.stderr || lr.stdout || lr.err.message || "").slice(0, 200) : "ok";
+    }
+  } catch {}
+  // stop bare detached daemon that may hold the port, let systemd take over (best-effort, wait for port free)
+  try {
+    // 路径相对**本文件**解析：本文件在 src/ 下，daemon.js 与 server.js 都在 src/ 内。
+    // 旧写的 `../daemon.js` / `../server.js` 从 src/ 出发指向仓库根 —— 两处都不存在，
+    // 整个「停裸 daemon → 等端口释放 → 让 systemd 接管」的分支被后面的 catch {} 静默吞掉、从未执行过。
+    const { isPidAlive, stopDaemon } = await import("./daemon.js");
+    const { resolvePort } = await import("./server.js");
+    const port = resolvePort();
+    const pidFile = join(homedir(), ".config", "mslxdff", "daemon.pid");
+    const { existsSync: exists2, readFileSync: read2 } = await import("node:fs");
+    let pidToWait = null;
+    try {
+      if (exists2(pidFile)) {
+        const raw = read2(pidFile, "utf8").trim().split("\n")[0];
+        const n = Number(raw);
+        if (Number.isInteger(n) && n > 0 && isPidAlive(n)) pidToWait = n;
+      }
+    } catch {}
+    try { stopDaemon(); } catch {}
+    // ensure bare daemon really exits (SIGTERM -> SIGKILL)
+    for (let i = 0; i < 15; i++) {
+      if (pidToWait && isPidAlive(pidToWait)) {
+        if (i === 7) try { process.kill(pidToWait, "SIGKILL"); } catch {}
+        await new Promise((r2) => setTimeout(r2, 200));
+      } else break;
+    }
+    // robust: scan ss for any holder of :port (covers stale pidFile, fuser not installed)
+    const killHolders = async () => {
+      let killed = 0;
+      try {
+        const r = await execAsync("ss", ["-lptn", `sport = :${port}`]);
+        const out = r.stdout || "";
+        const re = /pid=(\d+)/g;
+        let m;
+        const pids = new Set();
+        while ((m = re.exec(out))) pids.add(Number(m[1]));
+        // fallback: full ss if sport filter empty (busybox ss)
+        if (!pids.size) {
+          const r2 = await execAsync("ss", ["-lptn"]);
+          const out2 = r2.stdout || "";
+          // only consider lines containing :port
+          for (const line of out2.split("\n")) {
+            if (!line.includes(`:${port}`)) continue;
+            const re2 = /pid=(\d+)/g;
+            let m2;
+            while ((m2 = re2.exec(line))) pids.add(Number(m2[1]));
+          }
+        }
+        for (const p of pids) {
+          if (p === process.pid) continue;
+          if (p === readPid()) { try { writeExitMarker(daemonDir(), { reason: "autostart-cleanup", prevPid: p, prevVersion: null, byPid: process.pid }); } catch {} }
+          try { process.kill(p, "SIGTERM"); killed++; } catch {}
+        }
+        if (killed) await new Promise((r2) => setTimeout(r2, 400));
+        for (const p of pids) {
+          try { if (isPidAlive(p)) process.kill(p, "SIGKILL"); } catch {}
+        }
+      } catch {}
+      // fuser as extra best-effort (may not exist)
+      try { await execAsync("fuser", ["-k", `${port}/tcp`]); } catch {}
+      return killed;
+    };
+    await killHolders();
+    // stop any leftover systemd instance before start (avoid double)
+    try { await execAsync("systemctl", ["--user", "stop", SERVICE_NAME]); } catch {}
+    // wait for :port to be free (ss probe)
+    for (let i = 0; i < 20; i++) {
+      const chk = await execAsync("ss", ["-ltn"]);
+      if (!chk.stdout.includes(`:${port}`)) break;
+      if (i === 6 || i === 12) await killHolders();
+      await new Promise((r2) => setTimeout(r2, 250));
+    }
+  } catch {}
+  let r = await execAsync("systemctl", ["--user", "daemon-reload"]);
+  if (r.err) return { ok: false, error: (r.stderr || r.stdout).slice(0, 500) };
+  r = await execAsync("systemctl", ["--user", "enable", SERVICE_NAME]);
+  if (r.err) return { ok: false, error: (r.stderr || r.stdout).slice(0, 500) };
+  r = await execAsync("systemctl", ["--user", "start", SERVICE_NAME]);
+  // Verify actually active; if not, surface journal hint
+  const chk = await execAsync("systemctl", ["--user", "is-active", SERVICE_NAME]);
+  const active = !chk.err && /active/i.test(chk.stdout);
+  if (!active) {
+    const st = await execAsync("systemctl", ["--user", "status", SERVICE_NAME, "--no-pager", "-l"]);
+    const hint = (st.stdout || st.stderr || r.stderr || r.stdout || "").slice(0, 600);
+    return { ok: false, error: `start failed (not active): ${hint || "check journalctl --user -u mslxdff"}`, unit, linger: lingerRes };
+  }
+  return { ok: true, method: "systemd:user", unit, linger: lingerRes };
+}
+
+async function linuxDisable() {
+  await execAsync("systemctl", ["--user", "disable", SERVICE_NAME]);
+  await execAsync("systemctl", ["--user", "stop", SERVICE_NAME]);
+  try { rmSync(systemdUnitPath(), { force: true }); } catch {}
+  await execAsync("systemctl", ["--user", "daemon-reload"]);
+  return { ok: true };
+}
+
+async function linuxStatus() {
+  const unit = systemdUnitPath();
+  const exists = existsSync(unit);
+  if (!exists) return { enabled: false, detail: "未启用（无 systemd user unit）" };
+  const r = await execAsync("systemctl", ["--user", "is-enabled", SERVICE_NAME]);
+  const enabled = !r.err && /enabled/i.test(r.stdout);
+  const r2 = await execAsync("systemctl", ["--user", "is-active", SERVICE_NAME]);
+  const active = !r2.err && /active/i.test(r2.stdout);
+  return { enabled, detail: `${enabled ? "已启用" : "已禁用"} · ${active ? "运行中" : "未运行"} · ${unit}`, unit };
+}
+
+// ---------- facade ----------
+export async function enableAutostart() {
+  if (isWin()) return winEnable();
+  return linuxEnable();
+}
+
+export async function disableAutostart() {
+  if (isWin()) return winDisable();
+  return linuxDisable();
+}
+
+export async function getAutostartStatus() {
+  if (isWin()) return winStatus();
+  return linuxStatus();
+}
+
+export function autostartHelp() {
+  if (isWin()) return `Windows: schtasks 任务 "mslxdff"（ONLOGON，最高权限，当前用户登录即自启）`;
+  return `Linux: systemd user unit ~/.config/systemd/user/mslxdff.service`;
+}