mslxdff 0.1.55 → 0.1.56

package/bin/mslxdff.js

@@ -8,7 +8,7 @@ import { DEFAULT_PORT, defaultStateFile } from "../src/state.js";
 import { createRouter } from "../src/routes.js";
 import { createUpstreamClient } from "../src/upstream.js";
 import { createModelsService } from "../src/models.js";
-import { loadToken, refreshToken, setPort, getPort, loadGroupsJoined, saveGroupsJoined, loadModelErrors, savePreferredModel, loadPreferredModel, loadModelPicks, saveModelPicks } from "../src/state.js";
+import { loadToken, refreshToken, setPort, getPort, loadGroupsJoined, saveGroupsJoined, loadModelErrors, savePreferredModel, loadPreferredModel, loadModelPicks, saveModelPicks, loadProviderKey, loadProviderKeys, loadProviderAuths, loadProviderConfigs as loadProviderConfigsState } from "../src/state.js";
 import { getPreferredModel } from "../src/auto.js";
 import { normalizeModel } from "../src/reasoning.js";
 import { syncToWorkbuddy, workbuddyModelsPath } from "../src/sync-workbuddy.js";
@@ -19,6 +19,8 @@ import { createEventBus } from "../src/events.js";
 import { createGroupsService, createBansService, refreshGroupMembers, syncPeersFromMembers } from "../src/groups.js";
 import { logDir, recentCalls, lastError, appendCall, appendError, appendEvent, recentEvents, eventsFile, callsFile, errorsFile } from "../src/logs.js";
 import { loadPlugins, runHook, pluginsDir, resolvePluginDirs } from "../src/plugins.js";
+import { createOpenCodeProvider } from "../src/providers/opencode.js";
+import { fmtShanghai, fmtShanghaiYMDHM, fmtShanghaiHMS } from "../src/time.js";
 
 const logs = { appendCall, appendError, appendEvent };
 
@@ -134,6 +136,17 @@ if (args.includes("-plugins") || args.includes("--plugins")) {
   process.exit(0);
 }
 
+if (args.includes("-chat") || args.includes("--chat")) {
+  const idx = args.findIndex((x) => x === "-chat" || x === "--chat");
+  const rest = args.slice(idx + 1);
+  // rest 中若全是空白或以 - 开头的“选项”，仍视作本次对话的输入（单次模式）；
+  // 无 rest 则进入常驻 REPL。REPL 本身就是前台独立进程，与 daemon 无父子关系，daemon 重启不影响它。
+  const singleShot = rest.length ? rest.join(" ").trim() : null;
+  const { startChat } = await import("../src/chat/index.js");
+  await startChat({ singleShot: singleShot || undefined });
+  process.exit(0);
+}
+
 if (args.includes("-status") || args.includes("--status") || args.includes("-s")) {
   await printStatus();
   process.exit(0);
@@ -174,9 +187,7 @@ if (args.includes("-model") || args.includes("-models")) {
       const e = statuses[id];
       const st = typeof e === "number" ? "error" : e?.status || "normal";
       const at = typeof e === "number" ? e : e?.at;
-      const when = at
-        ? `  (${new Date(at).toISOString().slice(5, 19).replace("T", " ")})`
-        : "";
+      const when = at ? `  (${fmtShanghai(at)})` : "";
       const extra = e?.code ? `  HTTP ${e.code}` : "";
       console.log(`  ${id}  ${st}${when}${extra}`);
     }
@@ -289,7 +300,7 @@ if (args.includes("-model") || args.includes("-models")) {
       console.log(`saved ${result.size} picked model(s): ${[...result].join(", ") || "(none — auto uses full list)"}`);
       process.exit(0);
     }
-    const at = cachedAt ? ` (cached ${new Date(cachedAt).toISOString().slice(0, 16).replace("T", " ")})` : "";
+    const at = cachedAt ? ` (cached ${fmtShanghaiYMDHM(cachedAt)})` : "";
     const pickedIds = loadModelPicks();
     const mark = (id) => (pickedIds.includes(id) ? "*" : " ");
     console.log(`${ids.length} free model(s)${at} (${pickedIds.length} picked, * = picked):`);
@@ -370,6 +381,556 @@ if (args.includes("-setto") || args.includes("--setto")) {
   process.exit(0);
 }
 
+// -workbuddy checkin/balance/list/remove : WorkBuddy 多号管理
+if (args.includes("-workbuddy") || args.includes("--workbuddy") || args.includes("-wb")) {
+  const idx = args.findIndex((x) => x === "-workbuddy" || x === "--workbuddy" || x === "-wb");
+  const sub = args[idx + 1];
+  if (!sub || sub === "checkin" || sub === "daily-checkin" || sub === "check-in") {
+    const { spawn } = await import("node:child_process");
+    const script = join(dirname(fileURLToPath(import.meta.url)), "..", "workbuddy-checkin.js");
+    const child = spawn(process.execPath, [script, ...args.slice(idx + 2)], { stdio: "inherit" });
+    child.on("close", (code) => process.exit(code ?? 0));
+    child.on("error", (err) => { console.error(`workbuddy checkin failed: ${err.message}`); process.exit(1); });
+    await new Promise(() => {});
+  } else if (sub === "balance" || sub === "balances" || sub === "credit" || sub === "credits") {
+    const asJson = args.includes("--json") || args.includes("-json");
+    const { loadProviderConfigs } = await import("../src/state.js");
+    const { fetchBalance } = await import("../src/providers/workbuddy-balance.js");
+    const cfg = loadProviderConfigs().workbuddy || {};
+    const auths = Array.isArray(cfg.auths) ? cfg.auths : [];
+    const keys = Array.isArray(cfg.keys) ? cfg.keys : [];
+    // fallback scan auths dir if state empty
+    let items = auths.map((a,i)=> ({ uid:a.uid, domain:a.domain, key: keys[i]||"" , auth:a }));
+    if (!items.length) {
+      try {
+        const { readdirSync, readFileSync, existsSync } = await import("node:fs");
+        const { join } = await import("node:path");
+        const dir = process.env.WORKBUDDY_AUTH_DIR || join(process.cwd(), "auths");
+        if (existsSync(dir)) {
+          for (const f of readdirSync(dir).filter(x=>x.startsWith("workbuddy-")&&x.endsWith(".json"))) {
+            try { const j=JSON.parse(readFileSync(join(dir,f),"utf8")); if(j?.account?.uid) items.push({uid:j.account.uid, domain:j.auth.domain||"www.codebuddy.cn", key:j.auth.accessToken, auth:{uid:j.account.uid, domain:j.auth.domain||"www.codebuddy.cn", enterpriseId:j.account.enterpriseId||""}}); } catch {}
+          }
+        }
+      } catch {}
+    }
+    if (!items.length) { console.log("no workbuddy accounts — run node workbuddy-token-auto.js"); process.exit(0); }
+    const results=[];
+    for (const it of items) {
+      const b = await fetchBalance({ uid: it.uid, key: it.key, auth: it.auth }).catch(()=>null);
+      results.push({ uid: it.uid, domain: it.domain, balance: b });
+    }
+    if (asJson) { console.log(JSON.stringify({ results }, null, 2)); process.exit(0); }
+    console.log(`workbuddy balances (${results.length}):`);
+    for (const r of results) {
+      const b=r.balance;
+      if (!b) console.log(`  ${r.uid}  (balance unavailable)  domain=${r.domain}`);
+      else console.log(`  ${r.uid}  total=${b.totalStr||b.total}  dailyPacks=${b.dailyPacks}  active=${b.activeCount}  nextExpire=${b.nextExpire||"-"}  domain=${r.domain}`);
+    }
+    process.exit(0);
+  } else if (sub === "list" || sub === "ls" || sub === "status") {
+    const { loadProviderConfigs } = await import("../src/state.js");
+    const cfg = loadProviderConfigs().workbuddy || {};
+    const auths = Array.isArray(cfg.auths) ? cfg.auths : [];
+    const keys = Array.isArray(cfg.keys) ? cfg.keys : [];
+    if (!auths.length) { console.log("no workbuddy accounts in state — check auths/workbuddy-*.json"); process.exit(0); }
+    console.log(`workbuddy accounts (${auths.length}):`);
+    auths.forEach((a,i)=> {
+      const k=(keys[i]||"").slice(0,4);
+      console.log(`  [${i+1}] uid=${a.uid} domain=${a.domain||"www.codebuddy.cn"} enterprise=${a.enterpriseId||"-"} key=${k?k+"…":"(none)"} refresh=${a.refreshToken?"yes":"no"}`);
+    });
+    process.exit(0);
+  } else if (sub === "remove" || sub === "rm" || sub === "del" || sub === "delete") {
+    const target = args[idx+2];
+    if (!target) { console.error("usage: mslxdff -workbuddy remove <uid> [--keep-file]"); process.exit(1); }
+    const keep = args.includes("--keep-file");
+    const { loadProviderConfigs, saveProviderConfig } = await import("../src/state.js");
+    const cfg = loadProviderConfigs().workbuddy || {};
+    let auths = Array.isArray(cfg.auths)? [...cfg.auths]:[];
+    let keys = Array.isArray(cfg.keys)? [...cfg.keys]:[];
+    // support prefix match 6 chars
+    let rmIdx = auths.findIndex(a=> a.uid===target || a.uid.startsWith(target));
+    if (rmIdx<0) { console.error(`uid not found: ${target}`); process.exit(1); }
+    const uid = auths[rmIdx].uid;
+    auths.splice(rmIdx,1); keys.splice(rmIdx,1);
+    saveProviderConfig("workbuddy", { baseUrl: cfg.baseUrl||"https://copilot.tencent.com", keys, auths });
+    if (!keep) {
+      try {
+        const { existsSync, unlinkSync } = await import("node:fs");
+        const { join } = await import("node:path");
+        const dir = process.env.WORKBUDDY_AUTH_DIR || join(process.cwd(), "auths");
+        const fp = join(dir, `workbuddy-${uid}.json`);
+        if (existsSync(fp)) { unlinkSync(fp); console.log(`removed file ${fp}`); }
+      } catch {}
+    }
+    try { const { getBalanceCache } = await import("../src/providers/workbuddy-balance.js"); getBalanceCache().delete(uid); } catch {}
+    console.log(`removed workbuddy ${uid} (now ${auths.length} account(s))`);
+    process.exit(0);
+  } else {
+    console.error("usage: mslxdff -workbuddy checkin | balance [--json] | list | remove <uid>");
+    process.exit(1);
+  }
+}
+
+// -providers list : list all deployed upstream providers (opencode + openrouter + generic)
+if (args.includes("-providers") || args.includes("--providers")) {
+  const idx = args.findIndex((x) => x === "-providers" || x === "--providers");
+  const sub = args[idx + 1];
+  if (!sub || sub === "list" || sub === "status") {
+    const { loadProviderConfigs, loadProviderKeys, loadProviderShareKeys, loadProviderBaseUrl, loadProviderAllowedModels } = await import("../src/state.js");
+    const configs = loadProviderConfigs();
+    const opencodeEnabled = true;
+    const opencodeBase = process.env.UPSTREAM_BASE_URL || "https://opencode.ai";
+    const orKeys = loadProviderKeys("openrouter");
+    const orBase = "https://openrouter.ai/api/v1";
+    const orShare = loadProviderShareKeys("openrouter");
+    const orAllowed = loadProviderAllowedModels("openrouter");
+    // collect generic ids from configs + legacy providerKeys
+    const genericIds = new Set(Object.keys(configs).filter((id) => id !== "opencode" && id !== "openrouter"));
+    try {
+      const raw = JSON.parse(readFileSync(defaultStateFile(), "utf8"));
+      const pk = raw.providerKeys || {};
+      for (const id of Object.keys(pk)) if (id !== "opencode" && id !== "openrouter") genericIds.add(id);
+      const cfgRaw = raw.providerConfigs || {};
+      for (const id of Object.keys(cfgRaw)) if (id !== "opencode" && id !== "openrouter") genericIds.add(id);
+    } catch {}
+    // also include env-only generic ids (scan env for MSLXDFF_*_KEY)
+    for (const k of Object.keys(process.env)) {
+      const m = k.match(/^MSLXDFF_(.+)_KEY$/);
+      if (m) {
+        const id = m[1].toLowerCase().replace(/__/g, "-");
+        if (id !== "openrouter" && id !== "opencode") genericIds.add(id);
+      }
+    }
+    // include providers that only have allowlist (no keys yet) — exclude built-ins already listed
+    try {
+      const raw = JSON.parse(readFileSync(defaultStateFile(), "utf8"));
+      const cfgs = raw.providerConfigs || {};
+      for (const id of Object.keys(cfgs)) {
+        if (id === "opencode" || id === "openrouter") continue;
+        const am = cfgs[id]?.allowedModels;
+        if (Array.isArray(am) && am.length) genericIds.add(id);
+      }
+    } catch {}
+    const list = [];
+    const opAllowed = loadProviderAllowedModels("opencode");
+    list.push({ id: "opencode", enabled: opencodeEnabled, baseUrl: opencodeBase, keys: [], share: false, allowed: opAllowed, note: "built-in, no key, cannot share" });
+    list.push({ id: "openrouter", enabled: orKeys.length > 0, baseUrl: orBase, keys: orKeys, share: orShare, allowed: orAllowed, note: orKeys.length ? "" : "no keys" });
+    for (const gid of [...genericIds].sort()) {
+      const cfg = configs[gid];
+      const keys = loadProviderKeys(gid);
+      const baseUrl = loadProviderBaseUrl(gid) || cfg?.baseUrl || "";
+      const share = loadProviderShareKeys(gid);
+      const allowed = loadProviderAllowedModels(gid);
+      const enabled = Boolean(baseUrl && keys.length);
+      let note = "";
+      if (!baseUrl && !keys.length && !allowed.length) note = "no baseUrl, no keys";
+      else if (!baseUrl && !allowed.length) note = "missing baseUrl";
+      else if (!keys.length && !allowed.length) note = "no keys";
+      else if (!baseUrl) note = "missing baseUrl";
+      else if (!keys.length) note = "no keys";
+      list.push({ id: gid, enabled, baseUrl: baseUrl || "(none)", keys, share, allowed, note });
+    }
+    console.log(`providers (${list.length}):`);
+    for (const p of list) {
+      const state = p.enabled ? "enabled " : "disabled";
+      const keysInfo = p.keys.length ? `${p.keys.length} key${p.keys.length > 1 ? "s" : ""} ${p.keys.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")}` : "0 keys";
+      const shareInfo = p.id === "opencode" ? "cannot share" : `share=${p.share ? "ON" : "off"}`;
+      const allowInfo = p.allowed.length ? `allow=${p.allowed.length}(${p.allowed.slice(0, 3).join(",")}${p.allowed.length > 3 ? "..." : ""})` : "allow=all";
+      const note = p.note ? `  (${p.note})` : "";
+      console.log(`  ${p.id.padEnd(12)} ${state}  ${keysInfo.padEnd(28)}  ${allowInfo.padEnd(22)}  baseUrl=${p.baseUrl}  ${shareInfo}${note}`);
+    }
+    console.log(`\nuse: mslxdff -provider <id> list  to inspect one,  mslxdff -provider <id> allowlist set <model...>  to restrict`);
+    process.exit(0);
+  }
+  console.error("usage: mslxdff -providers list");
+  process.exit(1);
+}
+
+// -provider <id> [key...|add|remove|list|clear]: 配置需鉴权的供应商 API key（如 openrouter）。
+// 行为：无参数且 TTY → 交互式隐藏输入（多行直到空行，逐一追加）；非 TTY → 打印用法。key 持久化到 state。
+if (args.includes("-provider") || args.includes("--provider")) {
+  const idx = args.findIndex((x) => x === "-provider" || x === "--provider");
+  const id = args[idx + 1];
+  const sub = args[idx + 2];
+  const rest = args.slice(idx + 2);
+  if (!id) {
+    console.error("usage: mslxdff -provider <id> [key...|add|remove|list|clear|share|set-url|allowlist]");
+    console.error("       e.g. mslxdff -provider openrouter sk-1 sk-2 sk-3      set multiple keys (replaces all)");
+    console.error("            mslxdff -provider openrouter add sk-4             append one key");
+    console.error("            mslxdff -provider openrouter remove sk-1          remove a key by value");
+    console.error("            mslxdff -provider openrouter list                 list all keys (masked)");
+    console.error("            mslxdff -provider openrouter share on|off         share keys with peers on outgoing forward (ADR-0008)");
+    console.error("            mslxdff -provider openrouter set-url https://api.example.com/v1");
+    console.error("            mslxdff -provider openrouter allowlist set gpt-4 gpt-3.5  manage allowed models (empty=allow all)");
+    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx   add generic OpenAI-compatible provider");
+    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx gpt-4  add with allowlist");
+    console.error("            mslxdff -provider openrouter                      interactive hidden input (append)");
+    console.error("            mslxdff -provider openrouter clear                remove all keys");
+    process.exit(1);
+  }
+  // alias: mslxdff -provider list  (same as -providers list) — list all providers
+  if (id === "list" || id === "status") {
+    const { loadProviderConfigs, loadProviderKeys, loadProviderShareKeys, loadProviderBaseUrl } = await import("../src/state.js");
+    const configs = loadProviderConfigs();
+    const opencodeBase = process.env.UPSTREAM_BASE_URL || "https://opencode.ai";
+    const orKeys = loadProviderKeys("openrouter");
+    const orBase = "https://openrouter.ai/api/v1";
+    const orShare = loadProviderShareKeys("openrouter");
+    const genericIds = new Set(Object.keys(configs).filter((x) => x !== "opencode" && x !== "openrouter"));
+    try {
+      const raw = JSON.parse(readFileSync(defaultStateFile(), "utf8"));
+      const pk = raw.providerKeys || {};
+      for (const k of Object.keys(pk)) if (k !== "opencode" && k !== "openrouter") genericIds.add(k);
+    } catch {}
+    for (const k of Object.keys(process.env)) {
+      const m = k.match(/^MSLXDFF_(.+)_KEY$/);
+      if (m) {
+        const gid = m[1].toLowerCase().replace(/__/g, "-");
+        if (gid !== "openrouter" && gid !== "opencode") genericIds.add(gid);
+      }
+    }
+    const list = [];
+    list.push({ id: "opencode", enabled: true, baseUrl: opencodeBase, keys: [], share: false, note: "built-in, no key, cannot share" });
+    list.push({ id: "openrouter", enabled: orKeys.length > 0, baseUrl: orBase, keys: orKeys, share: orShare, note: orKeys.length ? "" : "no keys" });
+    for (const gid of [...genericIds].sort()) {
+      const cfg = configs[gid];
+      const keys = loadProviderKeys(gid);
+      const baseUrl = loadProviderBaseUrl(gid) || cfg?.baseUrl || "";
+      const share = loadProviderShareKeys(gid);
+      const enabled = Boolean(baseUrl && keys.length);
+      let note = "";
+      if (!baseUrl && !keys.length) note = "no baseUrl, no keys";
+      else if (!baseUrl) note = "missing baseUrl";
+      else if (!keys.length) note = "no keys";
+      list.push({ id: gid, enabled, baseUrl: baseUrl || "(none)", keys, share, note });
+    }
+    console.log(`providers (${list.length}):`);
+    for (const p of list) {
+      const state = p.enabled ? "enabled " : "disabled";
+      const keysInfo = p.keys.length ? `${p.keys.length} key${p.keys.length > 1 ? "s" : ""} ${p.keys.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")}` : "0 keys";
+      const shareInfo = p.id === "opencode" ? "cannot share" : `share=${p.share ? "ON" : "off"}`;
+      const note = p.note ? `  (${p.note})` : "";
+      console.log(`  ${p.id.padEnd(12)} ${state}  ${keysInfo.padEnd(28)}  baseUrl=${p.baseUrl}  ${shareInfo}${note}`);
+    }
+    console.log(`\nuse: mslxdff -provider <id> list  to inspect one,  mslxdff -provider add <id> <baseUrl> <key>  to add generic`);
+    process.exit(0);
+  }
+  // 通用供应商快捷添加：mslxdff -provider add <id> <baseUrl> <key> [allowedModel...]
+  if (id === "add") {
+    const gid = sub;
+    const gBase = rest[1];
+    const gKey = rest[2];
+    if (!gid || !gBase || !gKey) {
+      console.error("usage: mslxdff -provider add <id> <baseUrl> <key> [allowedModel...]");
+      console.error("       e.g. mslxdff -provider add myapi https://api.example.com/v1 sk-xxx");
+      console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx gpt-4 gpt-3.5");
+      process.exit(1);
+    }
+    if (gid === "opencode" || gid === "oc" || gid === "openrouter") {
+      console.error(`provider "${gid}" is built-in — use: mslxdff -provider ${gid} add <key>  or  mslxdff -provider ${gid} set-url <url>`);
+      process.exit(1);
+    }
+    const { saveProviderConfig, loadProviderConfig, loadProviderShareKeys, loadProviderAllowedModels } = await import("../src/state.js");
+    const { normalizeProviderId } = await import("../src/providers/model-id.js");
+    const nid = normalizeProviderId(gid);
+    if (!nid) { console.error(`invalid provider id: ${gid}`); process.exit(1); }
+    if (!/^https?:\/\/.+/.test(String(gBase).trim())) { console.error(`invalid baseUrl: ${gBase} (must start with http:// or https://)`); process.exit(1); }
+    const cur = loadProviderConfig(nid) || { baseUrl: "", keys: [], allowedModels: [], auths: [] };
+    let keys, auths, baseUrl;
+    baseUrl = String(gBase).trim();
+    const extraModels = rest.slice(3).filter((x) => x && !String(x).startsWith("-")).map((m) => String(m).trim()).filter(Boolean);
+    const allowedModels = extraModels.length ? [...new Set([...(cur.allowedModels || []), ...extraModels])] : (cur.allowedModels || []);
+    if (nid === "workbuddy") {
+      // workbuddy: keys/auths 一一对应，需解析 uid
+      const token = String(gKey).trim();
+      let uid = "";
+      try { const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64").toString()); uid = payload.uid || payload.sub || payload.userId || payload.user_id || ""; } catch {}
+      if (!uid) uid = "manual-" + token.slice(-8);
+      const curKeys = Array.isArray(cur.keys) ? [...cur.keys] : [];
+      const curAuths = Array.isArray(cur.auths) ? [...cur.auths] : [];
+      let idx = curAuths.findIndex(a => a.uid === uid);
+      if (idx < 0) idx = curKeys.findIndex(k => k === token);
+      let newKeys, newAuths;
+      if (idx >= 0) {
+        newKeys = [...curKeys]; newKeys[idx] = token;
+        newAuths = [...curAuths]; newAuths[idx] = { uid, domain: "www.codebuddy.cn", enterpriseId: "", refreshToken: "" };
+        // if auths shorter than keys, pad
+        while (newAuths.length < newKeys.length) newAuths.push({ uid: `manual-${newKeys[newAuths.length].slice(-8)}`, domain: "www.codebuddy.cn", enterpriseId: "", refreshToken: "" });
+      } else {
+        newKeys = [...new Set([...curKeys, token].filter(Boolean))];
+        newAuths = [...curAuths, { uid, domain: "www.codebuddy.cn", enterpriseId: "", refreshToken: "" }];
+        // align lengths
+        while (newAuths.length < newKeys.length) newAuths.push({ uid: `manual-${newKeys[newAuths.length].slice(-8)}`, domain: "www.codebuddy.cn", enterpriseId: "", refreshToken: "" });
+        while (newKeys.length < newAuths.length) newKeys.push(token);
+      }
+      keys = newKeys; auths = newAuths;
+      saveProviderConfig(nid, { baseUrl, keys, auths, allowedModels });
+      // 同步写 auths/workbuddy-<uid>.json 供 checkin 使用
+      try {
+        const { writeFileSync, mkdirSync } = await import("node:fs");
+        const { join } = await import("node:path");
+        const dir = process.env.WORKBUDDY_AUTH_DIR || join(process.cwd(), "auths");
+        mkdirSync(dir, { recursive: true });
+        const fp = join(dir, `workbuddy-${uid}.json`);
+        const doc = { account: { uid, enterpriseId: "", nickname: "" }, auth: { accessToken: token, refreshToken: "", expiresAt: Math.floor(Date.now()/1000)+3600, domain: "www.codebuddy.cn" } };
+        writeFileSync(fp + ".tmp", JSON.stringify(doc, null, 2), { mode: 0o600 });
+        try { const { renameSync, unlinkSync, existsSync } = await import("node:fs"); if (existsSync(fp)) unlinkSync(fp); renameSync(fp + ".tmp", fp); } catch { writeFileSync(fp, JSON.stringify(doc, null, 2), { mode: 0o600 }); }
+      } catch {}
+    } else {
+      keys = [...new Set([...(cur.keys || []), String(gKey).trim()].filter(Boolean))];
+      auths = undefined;
+      saveProviderConfig(nid, { baseUrl, keys, allowedModels });
+    }
+    console.log(`added generic provider: ${nid}`);
+    console.log(`  baseUrl: ${String(gBase).trim().replace(/\/+$/, "")}`);
+    console.log(`  keys: ${keys.length} (${keys.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")})`);
+    if (allowedModels.length) console.log(`  allowedModels: ${allowedModels.length} (${allowedModels.join(", ")})`);
+    else console.log(`  allowedModels: (none — allow all, set via: mslxdff -provider ${nid} allowlist set <model...>)`);
+    console.log(`  share: ${loadProviderShareKeys(nid) ? "ON" : "off"}   (mslxdff -provider ${nid} share on|off)`);
+    console.log(`  use as: ${nid}/<model-id>  — restart daemon to activate`);
+    process.exit(0);
+  }
+  if ((id === "opencode" || id === "oc") && sub !== "allowlist" && sub !== "allow" && sub !== "allowed" && sub !== "whitelist" && sub !== "list" && sub !== "status") {
+    console.log("opencode is the default (bare) provider — it needs no API key and can never be shared with peers");
+    console.log("(its IP-based rate limit is spread by peer forwarding itself)");
+    console.log(`  allowlist: mslxdff -provider opencode allowlist [list|set|add|remove|clear]  — restrict models (empty=allow all)`);
+    process.exit(0);
+  }
+  const { loadProviderKeys, saveProviderKeys, addProviderKey, removeProviderKeys, loadProviderShareKeys, saveProviderShareKeys, loadProviderConfig, saveProviderConfig, saveProviderBaseUrl, loadProviderConfigs } = await import("../src/state.js");
+  if (sub === "clear") {
+    const configs = loadProviderConfigs();
+    if (configs[id]) {
+      saveProviderConfig(id, { baseUrl: "", keys: [] });
+    } else {
+      saveProviderKeys(id, []);
+    }
+    console.log(`cleared ${id} API keys (provider disabled on next daemon start)`);
+    process.exit(0);
+  }
+  if (sub === "set-url" || sub === "setUrl" || sub === "url") {
+    const url = rest[1];
+    if (!url) {
+      console.error(`usage: mslxdff -provider ${id} set-url <baseUrl>`);
+      process.exit(1);
+    }
+    if (!/^https?:\/\/.+/.test(String(url).trim())) {
+      console.error(`invalid baseUrl: ${url} (must start with http:// or https://)`);
+      process.exit(1);
+    }
+    const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
+    saveProviderConfig(id, { baseUrl: String(url).trim(), keys: cur.keys || [] });
+    console.log(`set ${id} baseUrl: ${String(url).trim().replace(/\/+$/, "")} — restart daemon to activate`);
+    process.exit(0);
+  }
+  if (sub === "share") {
+    const on = rest[1];
+    if (!on) {
+      console.log(`share keys to peers: ${loadProviderShareKeys(id) ? "ON" : "off"}`);
+      process.exit(0);
+    }
+    if (!["on", "off", "1", "0", "true", "false"].includes(String(on).toLowerCase())) {
+      console.error("usage: mslxdff -provider openrouter share on|off");
+      process.exit(1);
+    }
+    const state = ["on", "1", "true"].includes(String(on).toLowerCase());
+    saveProviderShareKeys(id, state);
+    console.log(`share keys to peers: ${state ? "ON" : "off"} — restart daemon to activate`);
+    process.exit(0);
+  }
+  // allowlist 管理：白名单为空 = 不限；非空 = 仅名单内可用（防昂贵模型）
+  if (sub === "allowlist" || sub === "allow" || sub === "allowed" || sub === "whitelist") {
+    const { loadProviderAllowedModels, saveProviderAllowedModels, loadProviderConfig } = await import("../src/state.js");
+    const action = rest[1];
+    const rawTargets = rest.slice(2);
+    // 兼容：mslxdff -provider <id> allowlist  （无 action）→ list
+    if (!action || action === "list" || action === "status") {
+      const list = loadProviderAllowedModels(id);
+      const cfg = loadProviderConfig(id);
+      const baseUrl = cfg?.baseUrl || "";
+      console.log(`provider: ${id}${baseUrl ? `  baseUrl: ${baseUrl}` : ""}`);
+      if (!list.length) {
+        console.log(`  allowedModels: (none — allow all)`);
+        console.log(`  set via: mslxdff -provider ${id} allowlist set <model1> <model2> ...`);
+        console.log(`  add:     mslxdff -provider ${id} allowlist add <model>`);
+      } else {
+        console.log(`  allowedModels: ${list.length} model${list.length > 1 ? "s" : ""} (only these can be used)`);
+        list.forEach((m, i) => console.log(`  [${i + 1}]  ${m}`));
+        console.log(`  manage: mslxdff -provider ${id} allowlist add <model> | remove <model> | set <m1> <m2> ... | clear`);
+      }
+      console.log(`  NOTE: empty allowlist = allow all (hot-reloaded, no restart needed)`);
+      process.exit(0);
+    }
+    if (action === "clear") {
+      saveProviderAllowedModels(id, []);
+      console.log(`cleared ${id} allowlist (now allow all) — takes effect immediately (hot-reloaded)`);
+      process.exit(0);
+    }
+    if (action === "set") {
+      const models = rawTargets.filter((x) => x && !String(x).startsWith("-")).map((m) => String(m).trim()).filter(Boolean);
+      // 支持逗号分隔的一串：model1,model2
+      const flat = models.flatMap((m) => String(m).split(",")).map((m) => m.trim()).filter(Boolean);
+      if (!flat.length) {
+        console.error(`usage: mslxdff -provider ${id} allowlist set <model1> <model2> ...`);
+        process.exit(1);
+      }
+      const saved = saveProviderAllowedModels(id, flat);
+      console.log(`set ${id} allowlist: ${saved.length} model${saved.length > 1 ? "s" : ""} (${saved.join(", ")}) — takes effect immediately (hot-reloaded)`);
+      process.exit(0);
+    }
+    if (action === "add") {
+      const models = rawTargets.filter((x) => x && !String(x).startsWith("-")).map((m) => String(m).trim()).filter(Boolean);
+      const flat = models.flatMap((m) => String(m).split(",")).map((m) => m.trim()).filter(Boolean);
+      if (!flat.length) {
+        console.error(`usage: mslxdff -provider ${id} allowlist add <model> [model2 ...]`);
+        process.exit(1);
+      }
+      const cur = loadProviderAllowedModels(id);
+      const next = [...new Set([...cur, ...flat])];
+      saveProviderAllowedModels(id, next);
+      console.log(`added ${flat.length} model${flat.length > 1 ? "s" : ""} to ${id} allowlist (now ${next.length}: ${next.join(", ")}) — takes effect immediately (hot-reloaded)`);
+      process.exit(0);
+    }
+    if (action === "remove" || action === "rm" || action === "del") {
+      const models = rawTargets.filter((x) => x && !String(x).startsWith("-")).map((m) => String(m).trim()).filter(Boolean);
+      const flat = models.flatMap((m) => String(m).split(",")).map((m) => m.trim()).filter(Boolean);
+      if (!flat.length) {
+        console.error(`usage: mslxdff -provider ${id} allowlist remove <model> [model2 ...]`);
+        process.exit(1);
+      }
+      const cur = loadProviderAllowedModels(id);
+      const set = new Set(flat);
+      const next = cur.filter((m) => !set.has(m));
+      saveProviderAllowedModels(id, next);
+      console.log(`removed ${cur.length - next.length} model${cur.length - next.length !== 1 ? "s" : ""} from ${id} allowlist (now ${next.length ? next.join(", ") : "(allow all)"}) — takes effect immediately (hot-reloaded)`);
+      process.exit(0);
+    }
+    console.error(`usage: mslxdff -provider ${id} allowlist [list|set|add|remove|clear] [models...]`);
+    process.exit(1);
+  }
+  if (sub === "list" || sub === "status") {
+    const keys = loadProviderKeys(id);
+    const cfg = loadProviderConfig(id);
+    const { loadProviderAllowedModels } = await import("../src/state.js");
+    const allowed = loadProviderAllowedModels(id);
+    const baseUrl = cfg?.baseUrl || "";
+    if (baseUrl) console.log(`provider: ${id}  baseUrl: ${baseUrl}`);
+    else console.log(`provider: ${id}${id === "openrouter" ? " (built-in baseUrl: https://openrouter.ai/api/v1)" : ""}`);
+    if (keys.length) {
+      console.log(`  keys: ${keys.length} key${keys.length > 1 ? "s" : ""}`);
+      keys.forEach((k, i) => console.log(`  [${i + 1}]  ${k.slice(0, 4)}…${k.slice(-4)} (${k.length} chars)`));
+      console.log(`  remove by: mslxdff -provider ${id} remove <seq> [seq...] | <key-value>`);
+    } else {
+      console.log(`  keys: (no keys configured)`);
+    }
+    console.log(`  share keys to peers:   ${loadProviderShareKeys(id) ? "ON" : "off"}   (mslxdff -provider ${id} share on|off)`);
+    if (allowed.length) console.log(`  allowedModels: ${allowed.length} (${allowed.join(", ")})  — only these can be used`);
+    else console.log(`  allowedModels: (none — allow all)  (mslxdff -provider ${id} allowlist set <model...>)`);
+    if (baseUrl) console.log(`  set url: mslxdff -provider ${id} set-url <baseUrl>`);
+    console.log(`  NOTE: opencode is the default provider and can never be shared`);
+    process.exit(0);
+  }
+  if (sub === "add") {
+    const key = rest[1];
+    if (!key) {
+      console.error("usage: mslxdff -provider openrouter add <key>");
+      process.exit(1);
+    }
+    // 通用供应商：keys 存 providerConfigs，需保留 baseUrl
+    const configs = loadProviderConfigs();
+    if (configs[id]) {
+      const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
+      const keys = [...new Set([...(cur.keys || []), String(key).trim()].filter(Boolean))];
+      saveProviderConfig(id, { baseUrl: cur.baseUrl || "", keys });
+      console.log(`added ${id} API key (now ${keys.length} total) — restart daemon to activate`);
+    } else {
+      const added = addProviderKey(id, key);
+      console.log(`added ${id} API key (now ${added.length} total) — restart daemon to activate`);
+    }
+    process.exit(0);
+  }
+  if (sub === "remove") {
+    const targets = rest.slice(1).filter((k) => !k.startsWith("-"));
+    if (!targets.length) {
+      console.error("usage: mslxdff -provider openrouter remove <seq|key> [seq|key ...]   (seq = index shown by 'list')");
+      process.exit(1);
+    }
+    const current = loadProviderKeys(id);
+    const toRemove = [];
+    for (const raw of targets.flatMap((t) => String(t).split(","))) {
+      const t = raw.trim();
+      if (!t) continue;
+      if (/^\d+$/.test(t)) {
+        const seq = Number(t);
+        const idx = seq - 1;
+        if (Number.isInteger(seq) && idx >= 0 && idx < current.length) toRemove.push(current[idx]);
+        else console.log(`  ! no key at sequence ${seq} (provider has ${current.length}) — skipped`);
+      } else {
+        toRemove.push(t);
+      }
+    }
+    if (!toRemove.length) {
+      console.log("nothing to remove");
+      process.exit(0);
+    }
+    const configs = loadProviderConfigs();
+    let remaining;
+    if (configs[id]) {
+      const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
+      const set = new Set([...new Set(toRemove)].map((k) => String(k).trim()));
+      const keys = (cur.keys || []).filter((k) => !set.has(k));
+      saveProviderConfig(id, { baseUrl: cur.baseUrl || "", keys });
+      remaining = keys;
+    } else {
+      remaining = removeProviderKeys(id, [...new Set(toRemove)]);
+    }
+    console.log(`removed ${current.length - remaining.length} ${id} API key(s) (now ${remaining.length} total) — restart daemon to activate`);
+    process.exit(0);
+  }
+  if (sub && !sub.startsWith("-")) {
+    const keys = rest.filter((k) => !k.startsWith("-"));
+    if (!keys.length) {
+      console.error("no key given");
+      process.exit(1);
+    }
+    const configs = loadProviderConfigs();
+    if (configs[id]) {
+      const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
+      const clean = [...new Set(keys.map((k) => String(k).trim()).filter(Boolean))];
+      saveProviderConfig(id, { baseUrl: cur.baseUrl || "", keys: clean });
+      console.log(`set ${id} API keys (${clean.length}: ${clean.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")}) — restart daemon to activate`);
+    } else {
+      saveProviderKeys(id, keys);
+      console.log(`set ${id} API keys (${keys.length}: ${keys.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")}) — restart daemon to activate`);
+    }
+    process.exit(0);
+  }
+  // 交互式隐藏输入：多行直到空行，逐一追加到现有 keys
+  if (process.stdin.isTTY && process.stdout.isTTY) {
+    const readline = await import("node:readline/promises");
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout, terminal: true });
+    console.log(`Enter ${id} API keys, one per line (input hidden). Blank line to finish:`);
+    const existing = loadProviderKeys(id);
+    const collected = [];
+    for (;;) {
+      const key = await rl.question(existing.length || collected.length ? "" : "");
+      const clean = String(key || "").trim();
+      if (!clean) break;
+      collected.push(clean);
+    }
+    rl.close();
+    if (!collected.length) {
+      console.log("empty input — nothing changed");
+      process.exit(0);
+    }
+    for (const k of collected) addProviderKey(id, k);
+    const total = (await import("../src/state.js")).loadProviderKeys(id).length;
+    console.log(`added ${collected.length} ${id} API key(s) (now ${total} total) — restart daemon to activate`);
+    process.exit(0);
+  }
+  console.error("provide keys inline (non-TTY): mslxdff -provider openrouter <key1> [key2 ...]");
+  process.exit(1);
+}
+
 // 交互式选择器：↑/↓ 移动，Enter 确认，q/Esc 取消；ANSI 原地重绘
 async function pickInteractive(items, startCursor = 0) {
   const { renderChooser, renderChooserHelp, parseKey } = await import("../src/chooser.js");
@@ -931,27 +1492,103 @@ if (loadedPlugins.length) {
   console.log(`plugins loaded (${loadedPlugins.length}): ${loadedPlugins.map((p) => `${p.name}${p.version ? `@${p.version}` : ""}`).join(", ")}`);
   appendEvent({ ts: Date.now(), type: "plugins-loaded", plugins: loadedPlugins.map((p) => ({ name: p.name, version: p.version })) });
 }
+// 多供应商通道：默认 opencode + 可选 openrouter（MSLXDFF_OPENROUTER_KEY 启用）
+// 插件 createUpstream 仍是"整体替换式"外部 provider（单通道，保留原语义）
 const upstreamHooks = loadedPlugins.length
   ? (name, ctx) => runHook(loadedPlugins, name, ctx)
   : null;
-// 插件可提供 createUpstream(ctx) 整体替换上游（接任意 provider）；取第一个声明者
 const providerPlugin = loadedPlugins.find((p) => typeof p.createUpstream === "function");
 let upstream;
+const baseUrl = process.env.UPSTREAM_BASE_URL || "https://opencode.ai";
+let providers = [];
 if (providerPlugin) {
-  try {
-    upstream = await providerPlugin.createUpstream({ baseUrl: process.env.UPSTREAM_BASE_URL || "https://opencode.ai", authToken: process.env.UPSTREAM_AUTH_TOKEN || "public", env: process.env });
-    console.log(`upstream provider replaced by plugin: ${providerPlugin.name}`);
-    appendEvent({ ts: Date.now(), type: "plugin-upstream-active", plugin: providerPlugin.name });
-  } catch (err) {
-    console.log(`plugin upstream (${providerPlugin.name}) failed: ${errMsg(err)} — falling back to default`);
-    appendEvent({ ts: Date.now(), type: "plugin-upstream-error", plugin: providerPlugin.name, error: errMsg(err) });
+  // 插件整体替换：沿用旧单通道路径
+  if (!upstream) {
+    try {
+      upstream = await providerPlugin.createUpstream({ baseUrl, authToken: process.env.UPSTREAM_AUTH_TOKEN || "public", env: process.env });
+      console.log(`upstream provider replaced by plugin: ${providerPlugin.name}`);
+      appendEvent({ ts: Date.now(), type: "plugin-upstream-active", plugin: providerPlugin.name });
+    } catch (err) {
+      console.log(`plugin upstream (${providerPlugin.name}) failed: ${errMsg(err)} — falling back to default`);
+      appendEvent({ ts: Date.now(), type: "plugin-upstream-error", plugin: providerPlugin.name, error: errMsg(err) });
+    }
   }
+  if (!upstream) upstream = createUpstreamClient({ hooks: upstreamHooks });
+} else {
+  // 内置多 Provider：opencode 恒启用，openrouter 有 key 才启用
+  const opencodeClient = createUpstreamClient({ hooks: upstreamHooks });
+  const opencodeModels = createModelsService({
+    baseUrl,
+    headers: opencodeClient.headers,
+    refreshMs: refreshIntervalMs(),
+    cacheFile: join(logDir(), "models.json"),
+  });
+  providers.push(createOpenCodeProvider({ upstream: opencodeClient, modelsService: opencodeModels }));
+  const orKeys = loadProviderKeys("openrouter");
+  if (orKeys.length) {
+    const { createOpenRouterProvider } = await import("../src/providers/openrouter.js");
+    providers.push(createOpenRouterProvider({ apiKeys: orKeys }));
+    console.log(`provider enabled: openrouter (${orKeys.length} key${orKeys.length > 1 ? "s" : ""})`);
+    appendEvent({ ts: Date.now(), type: "provider-enabled", provider: "openrouter", keys: orKeys.length });
+  }
+  // 通用 OpenAI 兼容供应商：读 providerConfigs，逐个创建 generic provider
+  const { loadProviderConfigs } = await import("../src/state.js");
+  const genericConfigs = loadProviderConfigs();
+  for (const [gid, cfg] of Object.entries(genericConfigs)) {
+    if (gid === "opencode" || gid === "openrouter") continue;
+    if (gid === "workbuddy") {
+      const base = String(cfg?.baseUrl || "").trim() || "https://copilot.tencent.com";
+      const keys = Array.isArray(cfg?.keys) ? cfg.keys.filter((k) => typeof k === "string" && k.trim()) : [];
+      const auths = Array.isArray(cfg?.auths) ? cfg.auths : [];
+      if (!keys.length) continue;
+      try {
+        const { createWorkbuddyProvider } = await import("../src/providers/workbuddy.js");
+        providers.push(createWorkbuddyProvider({ baseUrl: base, apiKeys: keys, auths }));
+        console.log(`provider enabled: workbuddy (${keys.length} key${keys.length > 1 ? "s" : ""}) baseUrl=${base}`);
+        appendEvent({ ts: Date.now(), type: "provider-enabled", provider: gid, keys: keys.length, baseUrl: base });
+      } catch (err) {
+        console.log(`provider ${gid} failed: ${err?.message || err}`);
+        appendEvent({ ts: Date.now(), type: "provider-error", provider: gid, error: String(err?.message || err) });
+      }
+      continue;
+    }
+    const base = String(cfg?.baseUrl || "").trim();
+    const keys = Array.isArray(cfg?.keys) ? cfg.keys.filter((k) => typeof k === "string" && k.trim()) : [];
+    if (!base || !keys.length) continue;
+    try {
+      const { createGenericProvider } = await import("../src/providers/generic.js");
+      providers.push(createGenericProvider({ id: gid, baseUrl: base, apiKeys: keys }));
+      console.log(`provider enabled: ${gid} (${keys.length} key${keys.length > 1 ? "s" : ""}) baseUrl=${base}`);
+      appendEvent({ ts: Date.now(), type: "provider-enabled", provider: gid, keys: keys.length, baseUrl: base });
+    } catch (err) {
+      console.log(`provider ${gid} failed: ${err?.message || err}`);
+      appendEvent({ ts: Date.now(), type: "provider-error", provider: gid, error: String(err?.message || err) });
+    }
+  }
+  // workbuddy via env-only (no providerConfigs entry but MSLXDFF_WORKBUDDY_KEY set)
+  if (!genericConfigs["workbuddy"]) {
+    const wbKeys = loadProviderKeys("workbuddy");
+    if (wbKeys.length) {
+      try {
+        const { createWorkbuddyProvider } = await import("../src/providers/workbuddy.js");
+        const wbAuths = loadProviderAuths("workbuddy");
+        providers.push(createWorkbuddyProvider({ apiKeys: wbKeys, auths: wbAuths }));
+        console.log(`provider enabled: workbuddy (${wbKeys.length} key${wbKeys.length > 1 ? "s" : ""}) baseUrl=https://copilot.tencent.com (env)`);
+        appendEvent({ ts: Date.now(), type: "provider-enabled", provider: "workbuddy", keys: wbKeys.length, baseUrl: "https://copilot.tencent.com" });
+      } catch (err) {
+        console.log(`provider workbuddy failed: ${err?.message || err}`);
+      }
+    }
+  }
+  const { createProviderDispatcher } = await import("../src/providers/dispatcher.js");
+  upstream = createProviderDispatcher(providers);
+  appendEvent({ ts: Date.now(), type: "providers", providers: providers.map((p) => p.id) });
 }
-if (!upstream) upstream = createUpstreamClient({ hooks: upstreamHooks });
-const baseUrl = process.env.UPSTREAM_BASE_URL || "https://opencode.ai";
+const opencodeProvider = providers.find((p) => p.id === "opencode");
 const models = createModelsService({
+  providers: providers.length > 1 ? providers : undefined,
   baseUrl,
-  headers: upstream.headers,
+  headers: upstream.headers || opencodeProvider?.upstream?.headers,
   refreshMs: refreshIntervalMs(),
   cacheFile: join(logDir(), "models.json"),
 });
@@ -1357,6 +1994,12 @@ Usage:
   mslxdff -showtoken               print the current auth token
   mslxdff -refresh-token           rotate the auth token (prints the new one)
   mslxdff -setto workbuddy [modelId]  set default model and sync to WorkBuddy models.json (insert or update 127.0.0.1/v1 entry)
+  mslxdff -provider add <id> <baseUrl> <key> [allowedModel...]  add a generic OpenAI-compatible provider (myapi/gpt-4, baseUrl https://api.example.com/v1; extra models = allowlist)
+  mslxdff -provider add workbuddy https://copilot.tencent.com <key> [allow...]  add WorkBuddy专用供应商（workbuddy/hy3 前缀路由，auths 与 keys 一一对应）
+  mslxdff -provider <id> [key...|add|remove|list|clear|share|set-url]  configure provider API keys/URL (multiple keys = rotating, set-url for generic)
+  mslxdff -provider <id> allowlist [list|set|add|remove|clear]  manage allowed models (empty=allow all, non-empty=only listed) 
+  mslxdff -workbuddy checkin        daily 100 credits（双域幂等，已签 code 10001 视为成功）
+  mslxdff -providers list          list all configured upstream providers (opencode, openrouter, generic, workbuddy)
   mslxdff -creategroup <name>      create a group on this node (the group name is the password)
   mslxdff -addtogroup <leader-host> <name> [--broadband]  join a group via its leader host (default port 8989) — broadband: 宽带动态IP成员（经Leader中继，无需公网入站，默认127.0.0.1）
   mslxdff -group sync              pull the freshest member list for all joined groups
@@ -1365,6 +2008,7 @@ Usage:
   mslxdff -group remove <seq>      leader only: kick a member by its list sequence number
   mslxdff -leavegroup              leave every joined group as a member (leaders: use -delgroup)
   mslxdff -delgroup <name>         disband a group this node leads (deletes it and its members)
+  mslxdff -chat ["prompt"]       chat REPL（mimo-v2.5-free 优先/big-pickle 兜底，自然语言转命令，模糊匹配由模型完成，历史持久化，超长自动压缩，仅拦 -uninstall，daemon 重启不影响）
   mslxdff -resetban [ip]           clear join-failure bans (all, or one ip)
   mslxdff -help                    show this help
 
@@ -1374,6 +2018,7 @@ Environment:
   MSLXDFF_DAEMON_DIR      daemon pid/log/models dir
   UPSTREAM_BASE_URL       upstream base (default https://opencode.ai)
   UPSTREAM_AUTH_TOKEN     upstream bearer value (default "public")
+  MSLXDFF_OPENROUTER_KEY  openrouter provider API keys(s) (single env value; multiple use "mslxdff -provider openrouter k1 k2 ..." to persist)
   UPSTREAM_CONNECT_TIMEOUT_MS  upstream connect timeout (default 30000)
   MODELS_REFRESH_MS       model-list background refresh interval (default 7200000)
   MSLXDFF_MODEL_COOLDOWN_MS  fallback cooldown after a model error (default 60000)
@@ -1516,9 +2161,9 @@ async function printStatus() {
 
 function fmtStatus(id, statuses) {
   const e = statuses[id];
-  if (typeof e === "number") return `error ${fmtTs(new Date(e).toISOString())}`;
+  if (typeof e === "number") return `error ${fmtTs(e)}`;
   if (!e?.status || e.status === "normal") return "";
-  const when = e.at ? ` ${fmtTs(new Date(e.at).toISOString())}` : "";
+  const when = e.at ? ` ${fmtTs(e.at)}` : "";
   const code = e.code ? ` HTTP ${e.code}` : "";
   return `${e.status}${when}${code}`;
 }
@@ -1529,7 +2174,7 @@ function fmtDur(ms) {
 }
 
 function fmtEvent(e) {
-  const t = e?.ts ? new Date(e.ts).toISOString().slice(11, 19) : "--:--:--";
+  const t = e?.ts ? fmtShanghaiHMS(e.ts) : "--:--:--";
   const head = `[${t}]`;
   const m = (x) => x || "-";
   const fallbackTag = e.fallback?.fallback ? ` fallback=${e.fallback.requested_model || e.requested}->${e.fallback.actual_model || e.actual}(${e.fallback.reason || e.reason})` : "";
@@ -1578,7 +2223,7 @@ function fmtEvent(e) {
     case "relay-forward":
       return `${head} relay fwd     ${e.target || e.peer || "?"} via leader model=${m(e.model)} hops=${e.hops || 0}`;
     case "relay-heartbeat":
-      return `${head} relay hb      ${e.member || "?"} ip=${e.ip || "?"} lastSeen=${e.lastSeen ? new Date(e.lastSeen).toISOString().slice(11,19) : "?"}`;
+      return `${head} relay hb      ${e.member || "?"} ip=${e.ip || "?"} lastSeen=${e.lastSeen ? fmtShanghaiHMS(e.lastSeen) : "?"}`;
     case "client-abort":
       return `${head} client abort  ${m(e.model)} total=${fmtDur(e.totalMs)}`;
     case "result":
@@ -1617,12 +2262,7 @@ function fmtEvent(e) {
 }
 
 function fmtTs(iso) {
-  if (!iso) return "-";
-  try {
-    return new Date(iso).toISOString().replace("T", " ").slice(5, 19);
-  } catch {
-    return "-";
-  }
+  return fmtShanghai(iso);
 }
 
 function npmCmd() {