mslxdff 0.1.236 → 0.1.238

package/src/cli/commands/provider/bench.js

@@ -1,141 +1,141 @@
-import { probeModels } from "../../../bench/probe.js";
-import { runOne } from "../../../bench/runner.js";
-import { formatReport } from "../../../bench/report.js";
-import { defaultModelsPath, defaultChatPath } from "../../../state/provider-config.js";
-import { isRefreshToken } from "../../../providers/cline/headers.js";
-import { refreshTokenForBase } from "../../../providers/cline/auth.js";
-import { clineBenchOne } from "../../../bench/cline-bench.js";
-import { workbuddyBenchOne } from "../../../bench/workbuddy-bench.js";
-import { buildHeadersForProvider, filterBenchModels, handleVia } from "./bench-via.js";
-import { compatFetch } from "../../../compat.js";
-
-function parseBenchArgs(rest) {
-  const opts = { json: false, prompt: "hi", maxTokens: 32, timeoutMs: 30000, via: false, includeOpencode: false, samples: 1, apply: false };
-  for (let i = 0; i < rest.length; i++) {
-    const a = rest[i];
-    if (a === "--json" || a === "-json") opts.json = true;
-    else if (a === "--via" || a === "--bench-via") opts.via = true;
-    else if (a === "--apply" || a === "--write" || a === "--save") opts.apply = true;
-    else if (a === "--include-opencode") opts.includeOpencode = true;
-    else if (a === "--samples" && rest[i + 1]) opts.samples = Number(rest[++i]) || 1;
-    else if (a.startsWith("--samples=")) opts.samples = Number(a.split("=")[1]) || 1;
-    else if (a === "--prompt" && rest[i + 1]) opts.prompt = rest[++i];
-    else if (a.startsWith("--prompt=")) opts.prompt = a.slice(9);
-    else if (a === "--max-tokens" && rest[i + 1]) opts.maxTokens = Number(rest[++i]) || 32;
-    else if (a.startsWith("--max-tokens=")) opts.maxTokens = Number(a.split("=")[1]) || 32;
-    else if (a === "--timeout" && rest[i + 1]) opts.timeoutMs = Number(rest[++i]) || 30000;
-    else if (a.startsWith("--timeout=")) opts.timeoutMs = Number(a.split("=")[1]) || 30000;
-  }
-  return opts;
-}
-
-export async function handleProviderBench(id, sub, rest, args, deps = {}) {
-  const _restArr = rest || [];
-  const _hasVia = _restArr.includes("--via") || _restArr.includes("--bench-via");
-  const _isBenchViaAll = (String(id) === "bench" || String(id) === "all") && _hasVia;
-  const isBench = sub === "bench" || sub === "benchmark" || sub === "eval" || sub === "test" || _isBenchViaAll;
-  if (!isBench) return false;
-  const opts = parseBenchArgs(_restArr);
-  if (opts.via) {
-    const stateMod = await import("../../../state.js");
-    const loadConfigs = deps.loadProviderConfigs || stateMod.loadProviderConfigs;
-    const loadKeys = deps.loadProviderKeys || stateMod.loadProviderKeys;
-    const loadAllowed = deps.loadProviderAllowedModels || stateMod.loadProviderAllowedModels;
-    const loadBaseUrl = deps.loadProviderBaseUrl || stateMod.loadProviderBaseUrl;
-    const viaPid = _isBenchViaAll ? "bench" : String(id || "").trim();
-    if (!viaPid) { console.error("usage: mslxdff -provider <id> bench --via [--json] [--include-opencode]"); process.exit(1); }
-    await handleVia({ providerId: viaPid, opts, fetchImpl: deps.fetchImpl || compatFetch, loadConfigs, loadKeys, loadAllowed, loadBaseUrl, loadAllowAny: deps.loadProviderAllowAnyModels || stateMod.loadProviderAllowAnyModels, loadModelPicks: deps.loadModelPicks, getOnlinePeersFn: deps.getOnlinePeers });
-    return true;
-  }
-  const fetchImpl = deps.fetchImpl || compatFetch;
-  const loadConfigs = deps.loadProviderConfigs || (await import("../../../state.js")).loadProviderConfigs;
-  const loadKeys = deps.loadProviderKeys || (await import("../../../state.js")).loadProviderKeys;
-  const loadAllowed = deps.loadProviderAllowedModels || (await import("../../../state.js")).loadProviderAllowedModels;
-  const loadAllowAny = deps.loadProviderAllowAnyModels || (await import("../../../state.js")).loadProviderAllowAnyModels;
-  const loadBaseUrl = deps.loadProviderBaseUrl || (await import("../../../state.js")).loadProviderBaseUrl;
-  const providerId = String(id || "").trim();
-  if (!providerId) { console.error("usage: mslxdff -provider <id> bench [--json] [--prompt hi] [--max-tokens 32]"); process.exit(1); }
-  const configs = loadConfigs();
-  const cfg = configs[providerId] || {};
-  const keys = loadKeys(providerId) || [];
-  const allowed = loadAllowed(providerId) || [];
-  const allowAny = loadAllowAny(providerId);
-  let picks = [];
-  try {
-    const m = await import("../../../state.js");
-    picks = typeof deps.loadModelPicks === "function" ? (deps.loadModelPicks() || []) : (typeof m.loadModelPicks === "function" ? m.loadModelPicks() || [] : []);
-  } catch { picks = []; }
-  const picked = filterBenchModels({ providerId, allowed, picks, allowAny });
-  const baseUrl = (loadBaseUrl(providerId) || cfg.baseUrl || "").trim();
-  let auths = [];
-  try { const m = await import("../../../state.js"); auths = m.loadProviderAuths ? m.loadProviderAuths(providerId) : []; } catch {}
-  if (!baseUrl) { console.error(`provider ${providerId}: missing baseUrl — 先设置: mslxdff -provider ${providerId} set-url https://api.example.com/v1`); process.exit(1); }
-  if (!keys.length) { console.error(`provider ${providerId}: 未配置 Key — 先设置: mslxdff -provider ${providerId} <key>`); process.exit(1); }
-  if (!allowed.length) {
-    const modelsPath = cfg.modelsPath || defaultModelsPath(providerId);
-    console.log(`provider ${providerId}: 未设置 allowlist（allowAny=${allowAny ? "ON" : "OFF"}），不发起测速，仅探活模型列表...`);
-    console.log(`尝试：GET ${baseUrl}${modelsPath} → GET ${baseUrl}/v1/models → GET ${baseUrl}/models`);
-    const headers = buildHeadersForProvider(providerId, keys[0], auths[0]);
-    const probed = await probeModels({ baseUrl, modelsPath, headers, fetchImpl, timeoutMs: 8000 });
-    if (!probed.ok) { console.error(`探活失败：${probed.error}`); console.error(`已尝试：${probed.tried.join(", ")}`); console.error(`请手动设置 allowlist：mslxdff -provider ${providerId} allowlist set <model>`); if (opts.json) console.log(JSON.stringify({ ok: false, error: probed.error, tried: probed.tried }, null, 2)); process.exit(1); }
-    const list = probed.data || [];
-    if (!list.length) { console.log("探活成功但返回空列表，请确认上游是否暴露 /v1/models"); if (opts.json) console.log(JSON.stringify({ ok: true, data: [] }, null, 2)); process.exit(0); }
-    console.log(`\n发现 ${list.length} 个模型：`);
-    for (const m of list.slice(0, 30)) console.log(`  - ${m.id || m.model || m.name || JSON.stringify(m).slice(0, 80)}`);
-    if (list.length > 30) console.log(`  ... 还有 ${list.length - 30} 个未展示`);
-    console.log(`\n下一步：勾选后再测（只测勾选，避免扣费）`);
-    console.log(`  mslxdff -provider ${providerId} allowlist set ${list.slice(0, 2).map((m) => m.id).join(" ")}`);
-    console.log(`  mslxdff -provider ${providerId} bench${opts.json ? " --json" : ""}`);
-    if (opts.json) console.log(JSON.stringify({ ok: true, data: list, hint: `pick then bench` }, null, 2));
-    process.exit(0);
-  }
-  if (picks.length && !picked.models.length) {
-    console.log(`provider ${providerId}: allowlist ${allowed.length} 个模型都不在全局 picks 中，不测速（只测勾选）。`);
-    if (picked.pickedBlocked.length) console.log(`已勾选但未进 allowlist：${picked.pickedBlocked.join(" ")} → mslxdff -provider ${providerId} allowlist set <model>`);
-    else console.log(`先勾选：mslxdff -model pick ${providerId}/<model>`);
-    process.exit(0);
-  }
-  const log = (s) => (opts.json ? console.error(s) : console.log(s));
-  log(`bench ${providerId}: 共 ${picked.models.length} 个已勾选模型，逐个测速（串行，${opts.timeoutMs}ms 超时）...`);
-  if (picked.skippedUnpicked) log(`跳过 ${picked.skippedUnpicked} 个未勾选模型`);
-  if (!opts.json) console.log(`prompt="${opts.prompt}" maxTokens=${opts.maxTokens}\n`);
-  const chatPath = cfg.chatPath || defaultChatPath(providerId);
-  const rtKeys = keys.filter((k) => isRefreshToken(k, providerId));
-  const normBase = String(baseUrl).replace(/\/+$/, "");
-  const clineChatBase = normBase.endsWith("/api/v1") ? normBase.slice(0, -7) : normBase;
-  const results = [];
-  const benchModels = picked.models;
-  for (let i = 0; i < benchModels.length; i++) {
-    const raw = benchModels[i];
-    const model = String(raw || "").trim();
-    if (!opts.json) process.stdout.write(`  [${i + 1}/${benchModels.length}] ${model} ... `);
-    const kIdx = i % (keys.length || 1);
-    const aIdx = Math.min(kIdx, Math.max(auths.length - 1, 0));
-    const key = keys[kIdx];
-    const auth = auths[aIdx] || auths[0] || null;
-    if (String(providerId).toLowerCase() === "workbuddy") {
-      const r = await workbuddyBenchOne({ baseUrl, chatPath, model, apiKey: key, auth, prompt: opts.prompt, maxTokens: opts.maxTokens, timeoutMs: opts.timeoutMs, fetchImpl });
-      results.push(r);
-      if (!opts.json) { if (r.ok) console.log(`OK  TTFB ${r.ttfbMs}ms  总 ${r.totalMs}ms  ${r.tps != null ? `${r.tps} t/s` : r.charsPerSec != null ? `${r.charsPerSec} 字/秒` : "—"}`); else console.log(`FAIL ${r.label} ${r.error ? `(${r.error.slice(0, 60)})` : ""}`); }
-      continue;
-    }
-    if (rtKeys.length) {
-      const rt = rtKeys[kIdx % rtKeys.length];
-      const at = await refreshTokenForBase({ refreshToken: rt, baseUrl: normBase, fetchImpl });
-      if (!at) { const r = { id: model, ok: false, error: "refreshToken 换 accessToken 失败", label: "鉴权失败", ttfbMs: null, totalMs: 0, tps: null, charsPerSec: null, tokens: null }; results.push(r); if (!opts.json) console.log(`FAIL ${r.label} (${r.error})`); continue; }
-      const r = await clineBenchOne({ baseUrl: clineChatBase, model, accessToken: at, prompt: opts.prompt, maxTokens: opts.maxTokens, timeoutMs: opts.timeoutMs, fetchImpl });
-      results.push(r);
-      if (!opts.json) { if (r.ok) console.log(`OK  TTFB ${r.ttfbMs}ms  总 ${r.totalMs}ms  ${r.tps != null ? `${r.tps} t/s` : r.charsPerSec != null ? `${r.charsPerSec} 字/秒` : "—"}`); else console.log(`FAIL ${r.label} ${r.error ? `(${r.error.slice(0, 60)})` : ""}`); }
-      continue;
-    }
-    const headers = buildHeadersForProvider(providerId, key, auth);
-    const r = await runOne({ baseUrl, chatPath, model, providerId, apiKey: key, headers, prompt: opts.prompt, maxTokens: opts.maxTokens, timeoutMs: opts.timeoutMs, fetchImpl });
-    results.push(r);
-    if (!opts.json) { if (r.ok) console.log(`OK  TTFB ${r.ttfbMs}ms  总 ${r.totalMs}ms  ${r.tps != null ? `${r.tps} t/s` : r.charsPerSec != null ? `${r.charsPerSec} 字/秒` : "—"}`); else console.log(`FAIL ${r.label} ${r.error ? `(${r.error.slice(0, 60)})` : ""}`); }
-  }
-  const report = formatReport(results, { json: opts.json });
-  console.log("\n" + report.text);
-  const failed = results.filter((r) => !r.ok).length;
-  if (failed && !opts.json) console.log(`\n提示：失败 ${failed} 个多为 402余额不足/429限流/超时，可清冷却或换 Key 后重试`);
-  process.exit(failed ? 2 : 0);
-}
+import { probeModels } from "../../../bench/probe.js";
+import { runOne } from "../../../bench/runner.js";
+import { formatReport } from "../../../bench/report.js";
+import { defaultModelsPath, defaultChatPath } from "../../../state/provider-config.js";
+import { isRefreshToken } from "../../../providers/cline/headers.js";
+import { refreshTokenForBase } from "../../../providers/cline/auth.js";
+import { clineBenchOne } from "../../../bench/cline-bench.js";
+import { workbuddyBenchOne } from "../../../bench/workbuddy-bench.js";
+import { buildHeadersForProvider, filterBenchModels, handleVia } from "./bench-via.js";
+import { compatFetch } from "../../../compat.js";
+
+function parseBenchArgs(rest) {
+  const opts = { json: false, prompt: "hi", maxTokens: 32, timeoutMs: 30000, via: false, includeOpencode: false, samples: 1, apply: false };
+  for (let i = 0; i < rest.length; i++) {
+    const a = rest[i];
+    if (a === "--json" || a === "-json") opts.json = true;
+    else if (a === "--via" || a === "--bench-via") opts.via = true;
+    else if (a === "--apply" || a === "--write" || a === "--save") opts.apply = true;
+    else if (a === "--include-opencode") opts.includeOpencode = true;
+    else if (a === "--samples" && rest[i + 1]) opts.samples = Number(rest[++i]) || 1;
+    else if (a.startsWith("--samples=")) opts.samples = Number(a.split("=")[1]) || 1;
+    else if (a === "--prompt" && rest[i + 1]) opts.prompt = rest[++i];
+    else if (a.startsWith("--prompt=")) opts.prompt = a.slice(9);
+    else if (a === "--max-tokens" && rest[i + 1]) opts.maxTokens = Number(rest[++i]) || 32;
+    else if (a.startsWith("--max-tokens=")) opts.maxTokens = Number(a.split("=")[1]) || 32;
+    else if (a === "--timeout" && rest[i + 1]) opts.timeoutMs = Number(rest[++i]) || 30000;
+    else if (a.startsWith("--timeout=")) opts.timeoutMs = Number(a.split("=")[1]) || 30000;
+  }
+  return opts;
+}
+
+export async function handleProviderBench(id, sub, rest, args, deps = {}) {
+  const _restArr = rest || [];
+  const _hasVia = _restArr.includes("--via") || _restArr.includes("--bench-via");
+  const _isBenchViaAll = (String(id) === "bench" || String(id) === "all") && _hasVia;
+  const isBench = sub === "bench" || sub === "benchmark" || sub === "eval" || sub === "test" || _isBenchViaAll;
+  if (!isBench) return false;
+  const opts = parseBenchArgs(_restArr);
+  if (opts.via) {
+    const stateMod = await import("../../../state.js");
+    const loadConfigs = deps.loadProviderConfigs || stateMod.loadProviderConfigs;
+    const loadKeys = deps.loadProviderKeys || stateMod.loadProviderKeys;
+    const loadAllowed = deps.loadProviderAllowedModels || stateMod.loadProviderAllowedModels;
+    const loadBaseUrl = deps.loadProviderBaseUrl || stateMod.loadProviderBaseUrl;
+    const viaPid = _isBenchViaAll ? "bench" : String(id || "").trim();
+    if (!viaPid) { console.error("usage: mslxdff -provider <id> bench --via [--json] [--include-opencode]"); process.exit(1); }
+    await handleVia({ providerId: viaPid, opts, fetchImpl: deps.fetchImpl || compatFetch, loadConfigs, loadKeys, loadAllowed, loadBaseUrl, loadAllowAny: deps.loadProviderAllowAnyModels || stateMod.loadProviderAllowAnyModels, loadModelPicks: deps.loadModelPicks, getOnlinePeersFn: deps.getOnlinePeers });
+    return true;
+  }
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const loadConfigs = deps.loadProviderConfigs || (await import("../../../state.js")).loadProviderConfigs;
+  const loadKeys = deps.loadProviderKeys || (await import("../../../state.js")).loadProviderKeys;
+  const loadAllowed = deps.loadProviderAllowedModels || (await import("../../../state.js")).loadProviderAllowedModels;
+  const loadAllowAny = deps.loadProviderAllowAnyModels || (await import("../../../state.js")).loadProviderAllowAnyModels;
+  const loadBaseUrl = deps.loadProviderBaseUrl || (await import("../../../state.js")).loadProviderBaseUrl;
+  const providerId = String(id || "").trim();
+  if (!providerId) { console.error("usage: mslxdff -provider <id> bench [--json] [--prompt hi] [--max-tokens 32]"); process.exit(1); }
+  const configs = loadConfigs();
+  const cfg = configs[providerId] || {};
+  const keys = loadKeys(providerId) || [];
+  const allowed = loadAllowed(providerId) || [];
+  const allowAny = loadAllowAny(providerId);
+  let picks = [];
+  try {
+    const m = await import("../../../state.js");
+    picks = typeof deps.loadModelPicks === "function" ? (deps.loadModelPicks() || []) : (typeof m.loadModelPicks === "function" ? m.loadModelPicks() || [] : []);
+  } catch { picks = []; }
+  const picked = filterBenchModels({ providerId, allowed, picks, allowAny });
+  const baseUrl = (loadBaseUrl(providerId) || cfg.baseUrl || "").trim();
+  let auths = [];
+  try { const m = await import("../../../state.js"); auths = m.loadProviderAuths ? m.loadProviderAuths(providerId) : []; } catch {}
+  if (!baseUrl) { console.error(`provider ${providerId}: missing baseUrl — 先设置: mslxdff -provider ${providerId} set-url https://api.example.com/v1`); process.exit(1); }
+  if (!keys.length) { console.error(`provider ${providerId}: 未配置 Key — 先设置: mslxdff -provider ${providerId} <key>`); process.exit(1); }
+  if (!allowed.length) {
+    const modelsPath = cfg.modelsPath || defaultModelsPath(providerId);
+    console.log(`provider ${providerId}: 未设置 allowlist（allowAny=${allowAny ? "ON" : "OFF"}），不发起测速，仅探活模型列表...`);
+    console.log(`尝试：GET ${baseUrl}${modelsPath} → GET ${baseUrl}/v1/models → GET ${baseUrl}/models`);
+    const headers = buildHeadersForProvider(providerId, keys[0], auths[0]);
+    const probed = await probeModels({ baseUrl, modelsPath, headers, fetchImpl, timeoutMs: 8000 });
+    if (!probed.ok) { console.error(`探活失败：${probed.error}`); console.error(`已尝试：${probed.tried.join(", ")}`); console.error(`请手动设置 allowlist：mslxdff -provider ${providerId} allowlist set <model>`); if (opts.json) console.log(JSON.stringify({ ok: false, error: probed.error, tried: probed.tried }, null, 2)); process.exit(1); }
+    const list = probed.data || [];
+    if (!list.length) { console.log("探活成功但返回空列表，请确认上游是否暴露 /v1/models"); if (opts.json) console.log(JSON.stringify({ ok: true, data: [] }, null, 2)); process.exit(0); }
+    console.log(`\n发现 ${list.length} 个模型：`);
+    for (const m of list.slice(0, 30)) console.log(`  - ${m.id || m.model || m.name || JSON.stringify(m).slice(0, 80)}`);
+    if (list.length > 30) console.log(`  ... 还有 ${list.length - 30} 个未展示`);
+    console.log(`\n下一步：勾选后再测（只测勾选，避免扣费）`);
+    console.log(`  mslxdff -provider ${providerId} allowlist set ${list.slice(0, 2).map((m) => m.id).join(" ")}`);
+    console.log(`  mslxdff -provider ${providerId} bench${opts.json ? " --json" : ""}`);
+    if (opts.json) console.log(JSON.stringify({ ok: true, data: list, hint: `pick then bench` }, null, 2));
+    process.exit(0);
+  }
+  if (picks.length && !picked.models.length) {
+    console.log(`provider ${providerId}: allowlist ${allowed.length} 个模型都不在全局 picks 中，不测速（只测勾选）。`);
+    if (picked.pickedBlocked.length) console.log(`已勾选但未进 allowlist：${picked.pickedBlocked.join(" ")} → mslxdff -provider ${providerId} allowlist set <model>`);
+    else console.log(`先勾选：mslxdff -model pick ${providerId}/<model>`);
+    process.exit(0);
+  }
+  const log = (s) => (opts.json ? console.error(s) : console.log(s));
+  log(`bench ${providerId}: 共 ${picked.models.length} 个已勾选模型，逐个测速（串行，${opts.timeoutMs}ms 超时）...`);
+  if (picked.skippedUnpicked) log(`跳过 ${picked.skippedUnpicked} 个未勾选模型`);
+  if (!opts.json) console.log(`prompt="${opts.prompt}" maxTokens=${opts.maxTokens}\n`);
+  const chatPath = cfg.chatPath || defaultChatPath(providerId);
+  const rtKeys = keys.filter((k) => isRefreshToken(k, providerId));
+  const normBase = String(baseUrl).replace(/\/+$/, "");
+  const clineChatBase = normBase.endsWith("/api/v1") ? normBase.slice(0, -7) : normBase;
+  const results = [];
+  const benchModels = picked.models;
+  for (let i = 0; i < benchModels.length; i++) {
+    const raw = benchModels[i];
+    const model = String(raw || "").trim();
+    if (!opts.json) process.stdout.write(`  [${i + 1}/${benchModels.length}] ${model} ... `);
+    const kIdx = i % (keys.length || 1);
+    const aIdx = Math.min(kIdx, Math.max(auths.length - 1, 0));
+    const key = keys[kIdx];
+    const auth = auths[aIdx] || auths[0] || null;
+    if (String(providerId).toLowerCase() === "workbuddy") {
+      const r = await workbuddyBenchOne({ baseUrl, chatPath, model, apiKey: key, auth, prompt: opts.prompt, maxTokens: opts.maxTokens, timeoutMs: opts.timeoutMs, fetchImpl });
+      results.push(r);
+      if (!opts.json) { if (r.ok) console.log(`OK  TTFB ${r.ttfbMs}ms  总 ${r.totalMs}ms  ${r.tps != null ? `${r.tps} t/s` : r.charsPerSec != null ? `${r.charsPerSec} 字/秒` : "—"}`); else console.log(`FAIL ${r.label} ${r.error ? `(${r.error.slice(0, 60)})` : ""}`); }
+      continue;
+    }
+    if (rtKeys.length) {
+      const rt = rtKeys[kIdx % rtKeys.length];
+      const at = await refreshTokenForBase({ refreshToken: rt, baseUrl: normBase, fetchImpl });
+      if (!at) { const r = { id: model, ok: false, error: "refreshToken 换 accessToken 失败", label: "鉴权失败", ttfbMs: null, totalMs: 0, tps: null, charsPerSec: null, tokens: null }; results.push(r); if (!opts.json) console.log(`FAIL ${r.label} (${r.error})`); continue; }
+      const r = await clineBenchOne({ baseUrl: clineChatBase, model, accessToken: at, prompt: opts.prompt, maxTokens: opts.maxTokens, timeoutMs: opts.timeoutMs, fetchImpl });
+      results.push(r);
+      if (!opts.json) { if (r.ok) console.log(`OK  TTFB ${r.ttfbMs}ms  总 ${r.totalMs}ms  ${r.tps != null ? `${r.tps} t/s` : r.charsPerSec != null ? `${r.charsPerSec} 字/秒` : "—"}`); else console.log(`FAIL ${r.label} ${r.error ? `(${r.error.slice(0, 60)})` : ""}`); }
+      continue;
+    }
+    const headers = buildHeadersForProvider(providerId, key, auth);
+    const r = await runOne({ baseUrl, chatPath, model, providerId, apiKey: key, headers, prompt: opts.prompt, maxTokens: opts.maxTokens, timeoutMs: opts.timeoutMs, fetchImpl });
+    results.push(r);
+    if (!opts.json) { if (r.ok) console.log(`OK  TTFB ${r.ttfbMs}ms  总 ${r.totalMs}ms  ${r.tps != null ? `${r.tps} t/s` : r.charsPerSec != null ? `${r.charsPerSec} 字/秒` : "—"}`); else console.log(`FAIL ${r.label} ${r.error ? `(${r.error.slice(0, 60)})` : ""}`); }
+  }
+  const report = formatReport(results, { json: opts.json });
+  console.log("\n" + report.text);
+  const failed = results.filter((r) => !r.ok).length;
+  if (failed && !opts.json) console.log(`\n提示：失败 ${failed} 个多为 402余额不足/429限流/超时，可清冷却或换 Key 后重试`);
+  process.exit(failed ? 2 : 0);
+}

package/src/cli/commands/provider/index.js

@@ -1,139 +1,139 @@
-import { readFileSync } from "node:fs";
-import { normalizeProviderId } from "../../../providers/model-id.js";
-import { defaultStateFile } from "../../../state.js";
-
-export async function handleProviders(args) {
-  if (!(args.includes("-providers") || args.includes("--providers"))) return false;
-  const idx = args.findIndex((x) => x === "-providers" || x === "--providers");
-  const sub = args[idx + 1];
-  if (!sub || sub === "list" || sub === "status") {
-    const { buildProviderRows, formatProviderSection } = await import("../../provider-row.js");
-    const rows = buildProviderRows({});
-    const enabled = rows.filter((r) => r.enabled).length;
-    console.log(`providers  ${rows.length} 个 · ${enabled} 已启用  —  mslxdff -provider <id> list 查看详情`);
-    console.log(formatProviderSection(rows));
-    console.log(`\n提示: mslxdff -provider <id> list 单看一个 · allowlist set <model...> 限制模型 · allowAny on|off 空名单放行/阻断`);
-    process.exit(0);
-  }
-  console.error("usage: mslxdff -providers list");
-  process.exit(1);
-}
-
-export async function handleProvider(args) {
-  if (!(args.includes("-provider") || args.includes("--provider"))) return false;
-  const idx = args.findIndex((x) => x === "-provider" || x === "--provider");
-  const id = args[idx + 1];
-  const sub = args[idx + 2];
-  const rest = args.slice(idx + 2);
-  if (!id) {
-    console.error("usage: mslxdff -provider <id> [key...|add|remove|list|models|clear|set-url|allowlist|allowAny]");
-    console.error("       e.g. mslxdff -provider openrouter sk-1 sk-2 sk-3      set multiple keys (replaces all)");
-    console.error("            mslxdff -provider openrouter add sk-4             append one key");
-    console.error("            mslxdff -provider openrouter remove sk-1          remove a key by value");
-    console.error("            mslxdff -provider openrouter list                 list all keys (masked)");
-    console.error("            mslxdff -provider openrouter models [--json]      list provider models (allowlist filtered)");
-    console.error("            mslxdff -provider openrouter set-url https://api.example.com/v1");
-    console.error("            mslxdff -provider openrouter set-models-path /v1/models");
-    console.error("            mslxdff -provider openrouter set-chat-path /v1/chat/completions");
-    console.error("            mslxdff -provider openrouter allowlist set gpt-4 gpt-3.5  manage allowed models (empty=block unless allowAny ON)");
-    console.error("            mslxdff -provider openrouter allowAny on|off     empty allowlist = allow all or block all (default OFF, secure)");
-    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx   add generic OpenAI-compatible provider");
-    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx gpt-4  add with allowlist");
-    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx --models-path /v1/models --chat-path /v1/chat/completions");
-    console.error("            mslxdff -provider openrouter                      interactive hidden input (append)");
-    console.error("            mslxdff -provider codearts login          华为云 CodeArts PKCE 授权（浏览器登录 → 凭证 blob 落盘，ADR-0027）");
-    console.error("            mslxdff -provider qoder login [--region cn|global]   Qoder 设备授权（国际站默认，国内站 --region cn）");
-    console.error("            mslxdff -provider qoder checkin [--json] [--region cn|global] [--any] [--dry]  每日签到领积分（cn=daily-check-in，global=campaigns）");
-    console.error("            mslxdff -provider zcode login [--bigmodel]       ZCode 授权（智谱免费额度，Start/Coding Plan）");
-    console.error("            mslxdff -provider zcode quota [--json]          查看套餐/余量（未登录给重登指引）");
-    console.error("            mslxdff -provider raccoon login                   Raccoon（商汤小浣熊）扫码登录（终端二维码，免验证码）");
-    console.error("            mslxdff -provider raccoon login --password        Raccoon 手机号+密码登录（多号免扫码；密码输入不回显）");
-    console.error("            mslxdff -provider raccoon quota|checkin [--json]   查积分余额 / 每日积分结算+补领登录奖励");
-    console.error("            mslxdff -provider traework login|checkin|quota [--json]  SOLO 国内号：登录 / 每日签到领积分 / 查签到与积分额度（quota 只读，不烧配额）");
-    console.error("            mslxdff -provider openrouter clear                remove all keys");
-    process.exit(1);
-  }
-  if (id === "list" || id === "status") {
-    const { buildProviderRows, formatProviderSection } = await import("../../provider-row.js");
-    const rows = buildProviderRows({});
-    const enabled = rows.filter((r) => r.enabled).length;
-    console.log(`providers  ${rows.length} 个 · ${enabled} 已启用  —  mslxdff -provider <id> list 单看一个`);
-    console.log(formatProviderSection(rows));
-    process.exit(0);
-  }
-  if (id === "add") {
-    const { handleProviderAdd } = await import("./add.js");
-    await handleProviderAdd(id, sub, rest);
-    return true;
-  }
-  if ((id === "opencode" || id === "oc") && sub !== "allowlist" && sub !== "allow" && sub !== "allowed" && sub !== "whitelist" && sub !== "list" && sub !== "status" && sub !== "allowAny" && sub !== "allow-any" && sub !== "allow_any" && sub !== "allowany") {
-    console.log("opencode is the default (bare) provider — it needs no API key and can never be shared with peers");
-    console.log("(its IP-based rate limit is spread by peer forwarding itself)");
-    console.log(`  allowlist: mslxdff -provider opencode allowlist [list|set|add|remove|clear]  — restrict models (empty=allow all)`);
-    process.exit(0);
-  }
-  const { handleClineLogin } = await import("./cline-login.js");
-  if (await handleClineLogin(id, sub)) return true;
-  const { handleWorkbuddyLogin } = await import("./workbuddy-login.js");
-  if (await handleWorkbuddyLogin(id, sub, rest)) return true;
-  const { handleWorkbuddyQuota } = await import("./workbuddy-quota.js");
-  if (await handleWorkbuddyQuota(id, sub, rest)) return true;
-  const { handleCodeartsLogin } = await import("./codearts-login.js");
-  if (await handleCodeartsLogin(id, sub, rest)) return true;
-  const { handleTraeworkLogin } = await import("./traework-login.js");
-  if (await handleTraeworkLogin(id, sub, rest)) return true;
-  const { handleTraeworkCheckin, handleTraeworkQuota } = await import("./traework-checkin.js");
-  if (await handleTraeworkCheckin(id, sub, rest)) return true;
-  if (await handleTraeworkQuota(id, sub, rest)) return true;
-const { handleQoderLogin } = await import("./qoder-login.js");
-  if (await handleQoderLogin(id, sub, rest)) return true;
-  const { handleQoderCheckin } = await import("./qoder-checkin.js");
-  if (await handleQoderCheckin(id, sub, rest)) return true;
-  const { handleQwenworkLogin } = await import("./qwenwork-login.js");
-  if (await handleQwenworkLogin(id, sub, rest)) return true;
-  const { handleGlobalQwenworkLogin } = await import("./globalqwenwork-login.js");
-  if (await handleGlobalQwenworkLogin(id, sub, rest)) return true;
-  const { handleZcodeLogin } = await import("./zcode-login.js");
-  if (await handleZcodeLogin(id, sub, rest)) return true;
-  const { handleZcodeQuota } = await import("./zcode-quota.js");
-  if (await handleZcodeQuota(id, sub, rest)) return true;
-
-  const { handleRaccoonLogin } = await import("./raccoon-login.js");
-  if (await handleRaccoonLogin(id, sub, rest)) return true;
-  const { handleRaccoonQuota } = await import("./raccoon-quota.js");
-  if (await handleRaccoonQuota(id, sub, rest)) return true;
-  const { handleProviderConfig } = await import("./config.js");
-  if (await handleProviderConfig(id, sub, rest)) return true;
-  const { handleProviderAllowlist } = await import("./allowlist.js");
-  if (await handleProviderAllowlist(id, sub, rest)) return true;
-  const { handleProviderModels } = await import("./models.js");
-  if (await handleProviderModels(id, sub, args, rest)) return true;
-  const { handleProviderBench } = await import("./bench.js");
-  if (await handleProviderBench(id, sub, rest, args)) return true;
-  const { handleClineFree } = await import("./cline-free.js");
-  if (await handleClineFree(id, sub, rest, args)) return true;
-  const { handleClineQuota } = await import("./cline-quota.js");
-  if (await handleClineQuota(id, sub, rest, args)) return true;
-  if (normalizeProviderId(id) === "cline" && sub === "migrate") {
-    const { runStateMigrations } = await import("../../../state/migrations.js");
-    const dryRun = args.includes("--dry-run") || args.includes("--dryrun");
-    const r = await runStateMigrations({ dryRun });
-    const d = r.details["cline-unify"] || {};
-    if (r.errors.length) console.error(`❌ 迁移失败: ${r.errors.map((e) => `${e.id}: ${e.error}`).join("; ")}`);
-    if (dryRun) {
-      console.log(d.changed
-        ? `cline migrate 干跑：将合并遗留 cline id 配置（keys ${d.before.keys} → ${d.after.keys} / allowlist ${d.before.allowedModels} → ${d.after.allowedModels}），未写入`
-        : "cline migrate 干跑：无需迁移（未发现 providerConfigs.clinebot / cline-bot）");
-    } else if (d.applied) {
-      console.log(`✅ cline migrate 完成：keys ${d.before.keys} → ${d.after.keys} / allowlist ${d.before.allowedModels} → ${d.after.allowedModels}`);
-      if (d.backup) console.log(`   备份：${d.backup}`);
-      console.log("   生效：mslxdff -restart");
-    } else {
-      console.log("cline migrate：无需迁移（未发现 providerConfigs.clinebot / cline-bot）");
-    }
-    process.exit(r.errors.length ? 1 : 0);
-  }
-  const { handleProviderKeys } = await import("./keys.js");
-  await handleProviderKeys(id, sub, rest, args);
-  return true;
-}
+import { readFileSync } from "node:fs";
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { defaultStateFile } from "../../../state.js";
+
+export async function handleProviders(args) {
+  if (!(args.includes("-providers") || args.includes("--providers"))) return false;
+  const idx = args.findIndex((x) => x === "-providers" || x === "--providers");
+  const sub = args[idx + 1];
+  if (!sub || sub === "list" || sub === "status") {
+    const { buildProviderRows, formatProviderSection } = await import("../../provider-row.js");
+    const rows = buildProviderRows({});
+    const enabled = rows.filter((r) => r.enabled).length;
+    console.log(`providers  ${rows.length} 个 · ${enabled} 已启用  —  mslxdff -provider <id> list 查看详情`);
+    console.log(formatProviderSection(rows));
+    console.log(`\n提示: mslxdff -provider <id> list 单看一个 · allowlist set <model...> 限制模型 · allowAny on|off 空名单放行/阻断`);
+    process.exit(0);
+  }
+  console.error("usage: mslxdff -providers list");
+  process.exit(1);
+}
+
+export async function handleProvider(args) {
+  if (!(args.includes("-provider") || args.includes("--provider"))) return false;
+  const idx = args.findIndex((x) => x === "-provider" || x === "--provider");
+  const id = args[idx + 1];
+  const sub = args[idx + 2];
+  const rest = args.slice(idx + 2);
+  if (!id) {
+    console.error("usage: mslxdff -provider <id> [key...|add|remove|list|models|clear|set-url|allowlist|allowAny]");
+    console.error("       e.g. mslxdff -provider openrouter sk-1 sk-2 sk-3      set multiple keys (replaces all)");
+    console.error("            mslxdff -provider openrouter add sk-4             append one key");
+    console.error("            mslxdff -provider openrouter remove sk-1          remove a key by value");
+    console.error("            mslxdff -provider openrouter list                 list all keys (masked)");
+    console.error("            mslxdff -provider openrouter models [--json]      list provider models (allowlist filtered)");
+    console.error("            mslxdff -provider openrouter set-url https://api.example.com/v1");
+    console.error("            mslxdff -provider openrouter set-models-path /v1/models");
+    console.error("            mslxdff -provider openrouter set-chat-path /v1/chat/completions");
+    console.error("            mslxdff -provider openrouter allowlist set gpt-4 gpt-3.5  manage allowed models (empty=block unless allowAny ON)");
+    console.error("            mslxdff -provider openrouter allowAny on|off     empty allowlist = allow all or block all (default OFF, secure)");
+    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx   add generic OpenAI-compatible provider");
+    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx gpt-4  add with allowlist");
+    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx --models-path /v1/models --chat-path /v1/chat/completions");
+    console.error("            mslxdff -provider openrouter                      interactive hidden input (append)");
+    console.error("            mslxdff -provider codearts login          华为云 CodeArts PKCE 授权（浏览器登录 → 凭证 blob 落盘，ADR-0027）");
+    console.error("            mslxdff -provider qoder login [--region cn|global]   Qoder 设备授权（国际站默认，国内站 --region cn）");
+    console.error("            mslxdff -provider qoder checkin [--json] [--region cn|global] [--any] [--dry]  每日签到领积分（cn=daily-check-in，global=campaigns）");
+    console.error("            mslxdff -provider zcode login [--bigmodel]       ZCode 授权（智谱免费额度，Start/Coding Plan）");
+    console.error("            mslxdff -provider zcode quota [--json]          查看套餐/余量（未登录给重登指引）");
+    console.error("            mslxdff -provider raccoon login                   Raccoon（商汤小浣熊）扫码登录（终端二维码，免验证码）");
+    console.error("            mslxdff -provider raccoon login --password        Raccoon 手机号+密码登录（多号免扫码；密码输入不回显）");
+    console.error("            mslxdff -provider raccoon quota|checkin [--json]   查积分余额 / 每日积分结算+补领登录奖励");
+    console.error("            mslxdff -provider traework login|checkin|quota [--json]  SOLO 国内号：登录 / 每日签到领积分 / 查签到与积分额度（quota 只读，不烧配额）");
+    console.error("            mslxdff -provider openrouter clear                remove all keys");
+    process.exit(1);
+  }
+  if (id === "list" || id === "status") {
+    const { buildProviderRows, formatProviderSection } = await import("../../provider-row.js");
+    const rows = buildProviderRows({});
+    const enabled = rows.filter((r) => r.enabled).length;
+    console.log(`providers  ${rows.length} 个 · ${enabled} 已启用  —  mslxdff -provider <id> list 单看一个`);
+    console.log(formatProviderSection(rows));
+    process.exit(0);
+  }
+  if (id === "add") {
+    const { handleProviderAdd } = await import("./add.js");
+    await handleProviderAdd(id, sub, rest);
+    return true;
+  }
+  if ((id === "opencode" || id === "oc") && sub !== "allowlist" && sub !== "allow" && sub !== "allowed" && sub !== "whitelist" && sub !== "list" && sub !== "status" && sub !== "allowAny" && sub !== "allow-any" && sub !== "allow_any" && sub !== "allowany") {
+    console.log("opencode is the default (bare) provider — it needs no API key and can never be shared with peers");
+    console.log("(its IP-based rate limit is spread by peer forwarding itself)");
+    console.log(`  allowlist: mslxdff -provider opencode allowlist [list|set|add|remove|clear]  — restrict models (empty=allow all)`);
+    process.exit(0);
+  }
+  const { handleClineLogin } = await import("./cline-login.js");
+  if (await handleClineLogin(id, sub)) return true;
+  const { handleWorkbuddyLogin } = await import("./workbuddy-login.js");
+  if (await handleWorkbuddyLogin(id, sub, rest)) return true;
+  const { handleWorkbuddyQuota } = await import("./workbuddy-quota.js");
+  if (await handleWorkbuddyQuota(id, sub, rest)) return true;
+  const { handleCodeartsLogin } = await import("./codearts-login.js");
+  if (await handleCodeartsLogin(id, sub, rest)) return true;
+  const { handleTraeworkLogin } = await import("./traework-login.js");
+  if (await handleTraeworkLogin(id, sub, rest)) return true;
+  const { handleTraeworkCheckin, handleTraeworkQuota } = await import("./traework-checkin.js");
+  if (await handleTraeworkCheckin(id, sub, rest)) return true;
+  if (await handleTraeworkQuota(id, sub, rest)) return true;
+const { handleQoderLogin } = await import("./qoder-login.js");
+  if (await handleQoderLogin(id, sub, rest)) return true;
+  const { handleQoderCheckin } = await import("./qoder-checkin.js");
+  if (await handleQoderCheckin(id, sub, rest)) return true;
+  const { handleQwenworkLogin } = await import("./qwenwork-login.js");
+  if (await handleQwenworkLogin(id, sub, rest)) return true;
+  const { handleGlobalQwenworkLogin } = await import("./globalqwenwork-login.js");
+  if (await handleGlobalQwenworkLogin(id, sub, rest)) return true;
+  const { handleZcodeLogin } = await import("./zcode-login.js");
+  if (await handleZcodeLogin(id, sub, rest)) return true;
+  const { handleZcodeQuota } = await import("./zcode-quota.js");
+  if (await handleZcodeQuota(id, sub, rest)) return true;
+
+  const { handleRaccoonLogin } = await import("./raccoon-login.js");
+  if (await handleRaccoonLogin(id, sub, rest)) return true;
+  const { handleRaccoonQuota } = await import("./raccoon-quota.js");
+  if (await handleRaccoonQuota(id, sub, rest)) return true;
+  const { handleProviderConfig } = await import("./config.js");
+  if (await handleProviderConfig(id, sub, rest)) return true;
+  const { handleProviderAllowlist } = await import("./allowlist.js");
+  if (await handleProviderAllowlist(id, sub, rest)) return true;
+  const { handleProviderModels } = await import("./models.js");
+  if (await handleProviderModels(id, sub, args, rest)) return true;
+  const { handleProviderBench } = await import("./bench.js");
+  if (await handleProviderBench(id, sub, rest, args)) return true;
+  const { handleClineFree } = await import("./cline-free.js");
+  if (await handleClineFree(id, sub, rest, args)) return true;
+  const { handleClineQuota } = await import("./cline-quota.js");
+  if (await handleClineQuota(id, sub, rest, args)) return true;
+  if (normalizeProviderId(id) === "cline" && sub === "migrate") {
+    const { runStateMigrations } = await import("../../../state/migrations.js");
+    const dryRun = args.includes("--dry-run") || args.includes("--dryrun");
+    const r = await runStateMigrations({ dryRun });
+    const d = r.details["cline-unify"] || {};
+    if (r.errors.length) console.error(`❌ 迁移失败: ${r.errors.map((e) => `${e.id}: ${e.error}`).join("; ")}`);
+    if (dryRun) {
+      console.log(d.changed
+        ? `cline migrate 干跑：将合并遗留 cline id 配置（keys ${d.before.keys} → ${d.after.keys} / allowlist ${d.before.allowedModels} → ${d.after.allowedModels}），未写入`
+        : "cline migrate 干跑：无需迁移（未发现 providerConfigs.clinebot / cline-bot）");
+    } else if (d.applied) {
+      console.log(`✅ cline migrate 完成：keys ${d.before.keys} → ${d.after.keys} / allowlist ${d.before.allowedModels} → ${d.after.allowedModels}`);
+      if (d.backup) console.log(`   备份：${d.backup}`);
+      console.log("   生效：mslxdff -restart");
+    } else {
+      console.log("cline migrate：无需迁移（未发现 providerConfigs.clinebot / cline-bot）");
+    }
+    process.exit(r.errors.length ? 1 : 0);
+  }
+  const { handleProviderKeys } = await import("./keys.js");
+  await handleProviderKeys(id, sub, rest, args);
+  return true;
+}

package/src/cli/commands/provider/keys-guard.js

@@ -10,6 +10,8 @@ import { AUTH_DOC_PROVIDER_IDS } from "../../../runtime/provider-gate.js";
 // 保留子命令：这些词归 provider/ 下别的 handler 管，掉到 keys 兜底 = 该 provider 没接线。
 // 名单 = 各 handler 实际比对的 sub 值全集（keys.js 自己认的 list/status/add/remove/clear 不在内）。
 // 新增 handler 时同步这里；漏收的后果是那个词能被当 key 写盘。
+/** 覆盖式写 keys 时，单个候选 token 的最小可信长度（闸 3 判据：真 key 都远长于此）。 */
+export const MIN_KEY_CHARS = 11;
 export const RESERVED_PROVIDER_SUBS = new Set([
   "login", "auth", "oauth", "checkin", "signin", "quota", "credits", "balance",
   "migrate", "free", "bench", "benchmark", "eval", "test",
@@ -17,6 +19,7 @@ export const RESERVED_PROVIDER_SUBS = new Set([
   "set-url", "set-models-path", "set-chat-path", "url", "seturl", "setmodelspath", "setchatpath",
   "allowlist", "allow", "allowed", "allowany", "allow-any", "allow_any", "whitelist",
   "del", "delete", "rm", "remove-provider", "del-provider", "import", "import-desktop", "from-desktop",
+  "help", "usage", "usage-all",
 ]);
 
 /**
@@ -46,5 +49,22 @@ export function keysWriteDenial(id, sub, rest = []) {
       `  确知自己在做什么 → 末尾加 --force 重跑`,
     ];
   }
+  // 闸 3：形状闸。2026-10-24 复现同类事故 —— `mslxdff -provider codearts help` 里 `help` 既不是
+  // 保留 verb（闸 1 名单里没有它），codearts 又不属于 auth 号型六家（闸 2 不管它），于是 `help` 一路
+  // 掉进「未知即当 key」的兜底分支，把 providerConfigs.codearts.keys 的 2 条真凭据整组覆盖成 "help"。
+  // 判据：真 key 的长度都远超 10 字符（openrouter ~73、traework accessToken 实测 1004、codearts blob
+  // 上千），而 ≤10 字符的裸词几乎必然是打错位置的子命令/模型名/文件名 —— 覆盖式 set 写进去就是当场废号。
+  // 逃生阀：`--force`，或改走只追加、不覆盖的 `add`。
+  const shortTokens = rest
+    .map((k) => String(k || "").trim())
+    .filter((k) => k && !k.startsWith("-") && k.length < MIN_KEY_CHARS);
+  if (shortTokens.length && !rest.includes("--force")) {
+    return [
+      `✗ -provider ${id} ${sub}：疑似把「${shortTokens.join("、")}」当 API key 覆盖 ${id} 现有 keys —— 已拒绝，配置未改动`,
+      `  拦截原因：key 长度不足 ${MIN_KEY_CHARS} 字符（真 key 都远长于此），多半是子命令/模型名打错了位置。`,
+      `  ${id} 支持什么：mslxdff -provider ${id} list`,
+      `  确知是短 key（自建桩服务）→ 末尾加 --force 重跑，或走只追加的 mslxdff -provider ${id} add <key>`,
+    ];
+  }
   return null;
 }