mslxdff 0.1.65 → 0.1.67

package/bin/mslxdff.js

@@ -1,3160 +1,4 @@
 #!/usr/bin/env node
-import { execFile } from "node:child_process";
-import { readFileSync, existsSync, statSync, rmSync, writeFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { dirname, join, basename } from "node:path";
-import { startServer, resolvePort } from "../src/server.js";
-import { DEFAULT_PORT, defaultStateFile } from "../src/state.js";
-import { createRouter } from "../src/routes.js";
-import { createUpstreamClient } from "../src/upstream.js";
-import { createModelsService } from "../src/models.js";
-import { homedir } from "node:os";
-import { loadToken, refreshToken, setPort, getPort, loadGroupsJoined, saveGroupsJoined, loadModelErrors, savePreferredModel, loadPreferredModel, loadModelPicks, saveModelPicks, loadProviderKey, loadProviderKeys, loadProviderAuths, loadProviderConfigs as loadProviderConfigsState, loadModelStats, loadModelLatencies, loadProviderConfigs, loadProviderAllowedModels, loadProviderShareKeys, loadProviderBaseUrl } from "../src/state.js";
-import { getPreferredModel } from "../src/auto.js";
-import { normalizeModel } from "../src/reasoning.js";
-import { syncToWorkbuddy, workbuddyModelsPath } from "../src/sync-workbuddy.js";
-import { syncToOpencode, opencodeConfigPath, toExternalAlias, toInternalId } from "../src/sync-opencode.js";
-import { startDaemon, stopDaemon, writePid, pidFile, logFile, readPid, readPidVersion, isPidAlive } from "../src/daemon.js";
-import { createAutoSelector } from "../src/auto.js";
-import { createPeersService } from "../src/peers.js";
-import { createEventBus } from "../src/events.js";
-import { createGroupsService, createBansService, refreshGroupMembers, syncPeersFromMembers } from "../src/groups.js";
-import { logDir, recentCalls, lastError, appendCall, appendError, appendEvent, recentEvents, eventsFile, callsFile, errorsFile } from "../src/logs.js";
-import { loadPlugins, runHook, pluginsDir, resolvePluginDirs } from "../src/plugins.js";
-import { createOpenCodeProvider } from "../src/providers/opencode.js";
-import { fmtShanghai, fmtShanghaiYMDHM, fmtShanghaiHMS } from "../src/time.js";
-
-const logs = { appendCall, appendError, appendEvent };
-
-const args = process.argv.slice(2);
-const VERSION = JSON.parse(readFileSync(join(dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf8")).version;
-const HEALTH_TIMEOUT_MS = 4000;
-
-if (args.includes("-help") || args.includes("--help") || args.includes("-h")) {
-  printHelp();
-  process.exit(0);
-}
-
-if (args.includes("-update") || args.includes("--update")) {
-  await updateSelf();
-  process.exit(0);
-}
-
-if (args.includes("-refresh-token") || args.includes("--refresh-token")) {
-  const token = await refreshToken();
-  console.log(token);
-  process.exit(0);
-}
-
-if (args.includes("-showtoken") || args.includes("--showtoken")) {
-  const { token } = await loadToken();
-  console.log(token);
-  process.exit(0);
-}
-
-if (args.includes("-stop") || args.includes("--stop")) {
-  const { stopped, pid, reason } = stopDaemon();
-  if (stopped) {
-    console.log(`mslxdff daemon stopped (pid ${pid})`);
-  } else {
-    console.log(`mslxdff daemon not running${reason ? ` (${reason})` : ""}`);
-  }
-  process.exit(0);
-}
-
-if (args.includes("-uninstall") || args.includes("--uninstall")) {
-  const { stopped, pid } = stopDaemon();
-  if (stopped) console.log(`mslxdff daemon stopped (pid ${pid})`);
-  else console.log("mslxdff daemon not running");
-
-  const stateFile = defaultStateFile();
-  const dir = dirname(stateFile);
-  const removed = [];
-  for (const f of [
-    stateFile,
-    pidFile(),
-    logFile(),
-    join(dir, "calls.log"),
-    join(dir, "errors.log"),
-    join(dir, "events.log"),
-  ]) {
-    try {
-      rmSync(f, { force: true });
-      removed.push(f);
-    } catch {
-      // already gone, fine
-    }
-  }
-  if (removed.length) console.log(`removed ${removed.length} file(s):\n  ${removed.join("\n  ")}`);
-  else console.log("no state/log files to remove");
-
-  console.log("\npackage still installed — finish with:");
-  console.log("  npm uninstall -g mslxdff");
-  process.exit(0);
-}
-
-if (args.includes("-log") || args.includes("--log") || args.includes("-logs") || args.includes("--logs")) {
-  const idx = args.findIndex((x) => x === "-log" || x === "--log" || x === "-logs" || x === "--logs");
-  const raw = args[idx + 1];
-  const n = Number(raw);
-  const count = Number.isInteger(n) && n > 0 ? n : 10;
-  const file = eventsFile();
-  const dir = logDir();
-  console.log(`log dir: ${dir}`);
-  console.log(`events:  ${file}`);
-  const evts = recentEvents(count);
-  if (!evts.length) {
-    console.log(`(no events yet — file empty or not found)`);
-  } else {
-    console.log(`--- last ${evts.length} event(s) ---`);
-    for (const e of evts) console.log(fmtEvent(e));
-  }
-  // also hint for other logs
-  if (count <= 10) {
-    console.log(`\nhint: mslxdff -log 100  |  calls: ${callsFile()}  errors: ${errorsFile()}  daemon: ${logFile()}`);
-  }
-  process.exit(0);
-}
-
-// -plugins: list plugins in the plugins dirs (and their hooks) without starting the daemon
-if (args.includes("-plugins") || args.includes("--plugins")) {
-  const pkgRoot = dirname(dirname(fileURLToPath(import.meta.url)));
-  const dirs = resolvePluginDirs({ pkgRoot });
-  const labels = ["official (bundled)", "user"];
-  if (dirs.length === 1) labels[0] = "dir";
-  console.log(`plugin dirs:`);
-  dirs.forEach((d, i) => console.log(`  [${labels[i] || `dir${i + 1}`}] ${d}${existsSync(d) ? "" : "  (not created yet)"}`));
-  const { plugins, errors } = await loadPlugins({ dirs });
-  if (!plugins.length && !errors.length) {
-    console.log("(no plugins — drop *.mjs files into a dir above, see docs/plugins.md)");
-  }
-  for (const p of plugins) {
-    const hooks = Object.keys(p.hooks || {});
-    const src = p.file.startsWith(pkgRoot) ? "official" : "user";
-    console.log(`  ${p.name}${p.version ? `@${p.version}` : ""}  [${hooks.join(", ") || "no hooks"}]  (${src})`);
-    if (p.description) console.log(`    ${p.description}`);
-  }
-  for (const e of errors) console.log(`  load error: ${e.file} — ${e.error}`);
-  process.exit(0);
-}
-
-if (args.includes("-chat") || args.includes("--chat")) {
-  const idx = args.findIndex((x) => x === "-chat" || x === "--chat");
-  const rest = args.slice(idx + 1);
-  // rest 中若全是空白或以 - 开头的“选项”，仍视作本次对话的输入（单次模式）；
-  // 无 rest 则进入常驻 REPL。REPL 本身就是前台独立进程，与 daemon 无父子关系，daemon 重启不影响它。
-  const singleShot = rest.length ? rest.join(" ").trim() : null;
-  const { startChat } = await import("../src/chat/index.js");
-  await startChat({ singleShot: singleShot || undefined });
-  process.exit(0);
-}
-
-if (args.includes("-status") || args.includes("--status") || args.includes("-s")) {
-  await printStatus();
-  process.exit(0);
-}
-
-// -model list | -models : show the free models this proxy serves (cache-first)
-// -model refresh : force a fresh fetch from the upstream and update the cache
-if (args.includes("-model") || args.includes("-models")) {
-  const idx = args.findIndex((x) => x === "-model" || x === "-models");
-  const sub = args[idx + 1];
-  if (sub === "refresh") {
-    const models = createModelsService({
-      baseUrl: process.env.UPSTREAM_BASE_URL || "https://opencode.ai",
-      headers: createUpstreamClient({}).headers,
-      refreshMs: 0,
-      cacheFile: join(logDir(), "models.json"),
-    });
-    try {
-      const list = await models.get();
-      const ids = (list.data || []).map((m) => m.id).filter(Boolean);
-      console.log(`refreshed: ${ids.length} free model(s)`);
-      for (const id of ids) console.log(`  ${id}`);
-    } catch (err) {
-      console.error(`could not refresh models: ${String(err?.message || err)}`);
-      process.exit(1);
-    }
-    process.exit(0);
-  }
-  if (sub === "status") {
-    const statuses = loadModelErrors();
-    const cacheFile = join(logDir(), "models.json");
-    const cached = readModelsCache(cacheFile);
-    const ids = new Set([
-      ...(cached?.data || []).map((m) => m.id),
-      ...Object.keys(statuses),
-    ]);
-    for (const id of ids) {
-      const e = statuses[id];
-      const st = typeof e === "number" ? "error" : e?.status || "normal";
-      const at = typeof e === "number" ? e : e?.at;
-      const when = at ? `  (${fmtShanghai(at)})` : "";
-      const extra = e?.code ? `  HTTP ${e.code}` : "";
-      console.log(`  ${id}  ${st}${when}${extra}`);
-    }
-    process.exit(0);
-  }
-  if (sub === "set" && args[idx + 2]) {
-    const id = args[idx + 2];
-    savePreferredModel(id);
-    const picks = [...new Set([...loadModelPicks(), id])];
-    saveModelPicks(picks);
-    console.log(`default model set to: ${id} (daemon hot-reloads on next request)`);
-    console.log(`picked: ${picks.join(", ") || "(none)"} (auto will pick within these)`);
-    process.exit(0);
-  }
-  // -model pick <id> | -model unpick <id> | -model picks : 常用模型勾选集管理（非 TTY 用）
-  if (sub === "pick" && args[idx + 2] && args[idx + 2] !== "clear") {
-    const picks = [...new Set([...loadModelPicks(), args[idx + 2]])];
-    saveModelPicks(picks);
-    console.log(`picked: ${picks.join(", ") || "(none)"} (auto will pick within these)`);
-    process.exit(0);
-  }
-  if (sub === "pick" && args[idx + 2] === "clear") {
-    saveModelPicks([]);
-    console.log("picks cleared — auto uses the full model list again");
-    process.exit(0);
-  }
-  if (sub === "unpick" && args[idx + 2]) {
-    const picks = loadModelPicks().filter((x) => x !== args[idx + 2]);
-    saveModelPicks(picks);
-    console.log(`picked: ${picks.join(", ") || "(none)"}${picks.length === 0 ? " (auto uses full list)" : ""}`);
-    process.exit(0);
-  }
-  if (sub === "picks") {
-    const picks = loadModelPicks();
-    if (!picks.length) {
-      console.log("no picks — auto uses the full model list");
-    } else {
-      console.log(`${picks.length} picked model(s), auto only selects within these:`);
-    }
-    for (const id of picks) console.log(`  ${id}`);
-    process.exit(0);
-  }
-  // -model list supports optional provider filter: -model list --provider <id> | -model list <id> | --json
-  let modelListProvider = null;
-  let modelListJson = false;
-  if (sub === "list") {
-    const restArgs = args.slice(idx + 2);
-    for (let i = 0; i < restArgs.length; i++) {
-      const a = String(restArgs[i] || "");
-      if (a === "--json" || a === "-json") modelListJson = true;
-      else if (a === "--provider" || a === "-provider" || a === "--providerId") { modelListProvider = String(restArgs[i + 1] || "").trim() || null; i++; }
-      else if (!a.startsWith("-") && !modelListProvider) modelListProvider = a;
-    }
-    if (modelListProvider) {
-      const { normalizeProviderId } = await import("../src/providers/model-id.js");
-      const nid = normalizeProviderId(modelListProvider);
-      modelListProvider = nid || modelListProvider.toLowerCase();
-    }
-  }
-  if (sub !== undefined && sub !== "list") {
-    console.error("usage: mslxdff -models (interactive multi-pick) | mslxdff -model list [--provider <id>] [--json] | mslxdff -model set <id> | mslxdff -model pick <id> | mslxdff -model unpick <id> | mslxdff -model pick clear | mslxdff -model picks | mslxdff -model status | mslxdff -model refresh");
-    process.exit(1);
-  }
-  const cacheFile = join(logDir(), "models.json");
-  // 主动刷新：每次执行都尝试拉取上游最新列表（4s 超时），成功则更新缓存，失败则回退到 stale
-  async function tryRefreshModels() {
-    try {
-      const models = createModelsService({
-        baseUrl: process.env.UPSTREAM_BASE_URL || "https://opencode.ai",
-        headers: createUpstreamClient({}).headers,
-        refreshMs: 0,
-        cacheFile,
-      });
-      // 4s 超时，避免阻塞
-      const list = await Promise.race([
-        models.get(),
-        new Promise((_, rej) => setTimeout(() => rej(new Error("refresh timeout")), 4000)),
-      ]);
-      return list;
-    } catch {
-      return null;
-    }
-  }
-  try {
-    let ids = [];
-    let cachedAt = null;
-    let refreshed = null;
-    // 每次都主动尝试刷新
-    refreshed = await tryRefreshModels();
-    if (refreshed?.data) {
-      ids = (refreshed.data || []).map((m) => m.id).filter(Boolean);
-      cachedAt = refreshed.cachedAt || Date.now();
-    } else {
-      const cached = readModelsCache(cacheFile);
-      if (cached) {
-        ids = (cached.data || []).map((m) => m.id).filter(Boolean);
-        cachedAt = cached.cachedAt || null;
-      } else {
-        // 无缓存且刷新失败，尝试一次兜底 fetch（已在 tryRefreshModels 中尝试过，此处直接报错）
-        throw new Error("no cached models and refresh failed");
-      }
-    }
-    // provider filter: bare ids are opencode, prefixed are <provider>/...
-    if (modelListProvider) {
-      const prov = String(modelListProvider).toLowerCase();
-      const filtered = ids.filter((id) => {
-        const slash = String(id).indexOf("/");
-        const p = slash > 0 ? String(id).slice(0, slash).toLowerCase() : "opencode";
-        return p === prov;
-      });
-      // 非 opencode 供应商的模型不在 opencode 缓存中，改从 allowlist 展示（原名+别名）
-      if (prov !== "opencode" && filtered.length === 0) {
-        try {
-          const { loadProviderAllowedModels, loadProviderAllowAnyModels, loadProviderBaseUrl } = await import("../src/state.js");
-          const { loadModelAliases, getAliasForModel } = await import("../src/providers/model-id.js");
-          try { loadModelAliases(); } catch {}
-          const allowed = loadProviderAllowedModels(prov);
-          const allowAny = loadProviderAllowAnyModels(prov);
-          const baseUrl = loadProviderBaseUrl(prov);
-          if (modelListJson) {
-            const data = allowed.length
-              ? allowed.map((raw) => ({ id: `${prov}/${raw}`, object: "model" }))
-              : [];
-            console.log(JSON.stringify({ object: "list", data }, null, 2));
-            process.exit(0);
-          }
-          if (!allowed.length) {
-            if (allowAny) {
-              console.log(`provider "${prov}" allowAny ON (allowlist 空=放行全部)${baseUrl ? `  baseUrl=${baseUrl}` : ""}`);
-              console.log(`  (未设 allowlist，全部模型放行)  查看 live 列表: mslxdff -provider ${prov} models`);
-            } else {
-              console.log(`no models for provider "${prov}" — allowlist 空 + allowAny OFF = 阻塞`);
-              console.log(`  设白名单: mslxdff -provider ${prov} allowlist set <model1> <model2>  或  mslxdff -provider ${prov} allowAny on`);
-              console.log(`  live 查看: mslxdff -provider ${prov} models`);
-            }
-            process.exit(0);
-          }
-          const at2 = cachedAt ? ` (cached ${fmtShanghaiYMDHM(cachedAt)})` : "";
-          console.log(`${allowed.length} model(s) for ${prov}${at2} (allowlist，原名 + 别名):`);
-          const pickedIds2 = loadModelPicks();
-          for (const raw of allowed) {
-            const canonical = `${prov}/${raw}`;
-            let alias = null;
-            try { alias = getAliasForModel(canonical); } catch {}
-            if (!alias && String(canonical).includes("/")) alias = String(canonical).replace(/\//g, "-");
-            const aliasStr = alias && alias !== canonical ? `  (别名: ${alias})` : "";
-            const mark2 = pickedIds2.includes(canonical) || (alias && pickedIds2.includes(alias)) ? "*" : " ";
-            console.log(`  ${mark2} ${canonical}${aliasStr}`);
-          }
-          process.exit(0);
-        } catch {}
-      }
-      ids = filtered;
-      if (modelListJson) {
-        console.log(JSON.stringify({ object: "list", data: ids.map((id) => ({ id, object: "model" })) }, null, 2));
-        process.exit(0);
-      }
-      if (!ids.length) {
-        console.log(`no models for provider "${prov}" — try: mslxdff -provider ${prov} models  or  mslxdff -model refresh`);
-        process.exit(0);
-      }
-    } else if (modelListJson) {
-      console.log(JSON.stringify({ object: "list", data: ids.map((id) => ({ id, object: "model" })) }, null, 2));
-      process.exit(0);
-    }
-    if (!ids.length) {
-      console.log("no models available — try: mslxdff -model refresh");
-      process.exit(0);
-    }
-    // TTY 交互式：`mslxdff -models`（无 list）走交互；` -model list` 默认列表，但交互入口统一为 -models
-    // 为支持“opencode + 其他供应商 allowlist 原名/别名”一起勾选，交互池 = opencode 免费池 + 各供应商 allowlist + 已勾选的遗留 picks
-    if (sub === undefined && process.stdin.isTTY && process.stdout.isTTY) {
-      const statuses = loadModelErrors();
-      const current = getPreferredModel();
-      const pickedIds = loadModelPicks();
-      // 基础：opencode 免费池
-      const combinedIds = [...ids];
-      const seen = new Set(combinedIds);
-      try {
-        const { loadProviderConfigs, loadProviderAllowedModels } = await import("../src/state.js");
-        const configs = loadProviderConfigs();
-        for (const pid of Object.keys(configs).filter((k) => String(k).toLowerCase() !== "opencode")) {
-          const allowed = loadProviderAllowedModels(pid);
-          for (const raw of allowed) {
-            const canonical = `${pid}/${raw}`;
-            if (!seen.has(canonical)) {
-              seen.add(canonical);
-              combinedIds.push(canonical);
-            }
-            // 别名（dash 版）若已被 picks 选中，也确保可见（便于取消）
-            const aliasDash = String(canonical).replace(/\//g, "-");
-            if (aliasDash !== canonical && pickedIds.includes(aliasDash) && !seen.has(aliasDash)) {
-              // 不直接加入 alias 作为独立选项，保留 canonical 即可（canonical 与 alias 视为同一模型，勾选 canonical）
-            }
-          }
-        }
-      } catch {}
-      // 已勾选但不在上述池中的（例如 workbuddy/* 当 allowAny ON 时无 allowlist，或历史 picks），补齐以便取消
-      for (const pid of pickedIds) {
-        if (!seen.has(pid)) {
-          seen.add(pid);
-          combinedIds.push(pid);
-        }
-      }
-      const items = combinedIds.map((id) => {
-        const e = statuses[id];
-        return {
-          id,
-          status: typeof e === "number" ? "error" : e?.status || "normal",
-          current: id === current,
-          picked: pickedIds.includes(id),
-        };
-      });
-      const result = await pickInteractiveMulti(items, new Set(pickedIds), Math.max(0, items.findIndex((x) => x.current)));
-      if (!result) {
-        console.log("cancelled — picks unchanged");
-        process.exit(0);
-      }
-      saveModelPicks([...result]);
-      console.log(`saved ${result.size} picked model(s): ${[...result].join(", ") || "(none — auto uses full list)"}`);
-      process.exit(0);
-    }
-    const at = cachedAt ? ` (cached ${fmtShanghaiYMDHM(cachedAt)})` : "";
-    const pickedIds = loadModelPicks();
-    const mark = (id) => (pickedIds.includes(id) ? "*" : " ");
-    // 分组展示：按供应商前缀分组，opencode 裸 id 归为 opencode
-    const groups = {};
-    for (const id of ids) {
-      const prov = String(id).includes("/") ? String(id).split("/")[0] : "opencode";
-      if (!groups[prov]) groups[prov] = [];
-      groups[prov].push(id);
-    }
-    const order = ["opencode", "workbuddy", "clinebot", "openrouter"];
-    const sortedProvs = Object.keys(groups).sort((a, b) => {
-      const ia = order.indexOf(a), ib = order.indexOf(b);
-      if (ia !== -1 || ib !== -1) {
-        if (ia === -1) return 1;
-        if (ib === -1) return -1;
-        return ia - ib;
-      }
-      return a.localeCompare(b);
-    });
-    if (modelListProvider) {
-      console.log(`${ids.length} model(s) for ${modelListProvider}${at} (${pickedIds.length} picked, * = picked):`);
-      // 加载别名映射，显示原始名+别名
-      let aliasMap = {};
-      try {
-        const { loadModelAliases, getAliasForModel } = await import("../src/providers/model-id.js");
-        loadModelAliases();
-        for (const id of ids) {
-          const alias = getAliasForModel(id);
-          if (alias) aliasMap[id] = alias;
-          else if (String(id).includes("/")) {
-            const dashAlias = String(id).replace(/\//g, "-");
-            if (dashAlias !== id) aliasMap[id] = dashAlias;
-          }
-        }
-      } catch {}
-      for (const prov of sortedProvs) {
-        const list = groups[prov];
-        console.log(`\n  ── ${prov} (${list.length}) ──`);
-        for (const id of list) {
-          const alias = aliasMap[id];
-          const aliasStr = alias ? `  (别名: ${alias})` : "";
-          console.log(`  ${mark(id)} ${id}${aliasStr}`);
-        }
-      }
-      console.log(`\npicked only constrains auto; manage with: mslxdff -models (TTY) | mslxdff -model pick <id> | mslxdff -model unpick <id> | mslxdff -model pick clear`);
-    } else {
-      console.log(`${ids.length} free model(s)${at} (${pickedIds.length} picked, * = picked):`);
-      // 加载别名映射，显示原始名+别名
-      let aliasMap = {};
-      let fullAliases = {};
-      try {
-        const { loadModelAliases, getAliasForModel } = await import("../src/providers/model-id.js");
-        loadModelAliases();
-        for (const id of ids) {
-          const alias = getAliasForModel(id);
-          if (alias) aliasMap[id] = alias;
-          else if (String(id).includes("/")) {
-            const dashAlias = String(id).replace(/\//g, "-");
-            if (dashAlias !== id) aliasMap[id] = dashAlias;
-          }
-        }
-        try {
-          const aliasesFile = join(homedir(), ".config", "mslxdff", "model-aliases.json");
-          const raw = JSON.parse(readFileSync(aliasesFile, "utf8"));
-          if (raw && typeof raw === "object") fullAliases = raw;
-        } catch {}
-      } catch {}
-      for (const prov of sortedProvs) {
-        const list = groups[prov];
-        console.log(`\n  ── ${prov} (${list.length}) ──`);
-        for (const id of list) {
-          const alias = aliasMap[id];
-          const aliasStr = alias ? `  (别名: ${alias})` : "";
-          console.log(`  ${mark(id)} ${id}${aliasStr}`);
-        }
-      }
-      // ── 分隔 + 其他供应商 allowlist（原名 + 别名） ──
-      // 其余供应商的可用模型由 allowlist 决定（空 allowlist + allowAny OFF = 阻塞），此处直接展示 allowlist 条目与别名，不做网络拉取，速度快
-      try {
-        const { loadProviderConfigs, loadProviderAllowedModels, loadProviderAllowAnyModels, loadProviderBaseUrl } = await import("../src/state.js");
-        const { loadModelAliases: _la2, getAliasForModel: _gaf } = await import("../src/providers/model-id.js");
-        try { _la2(); } catch {}
-        const configs = loadProviderConfigs();
-        const otherIds = Object.keys(configs).filter((k) => String(k).toLowerCase() !== "opencode");
-        // 仅展示已配置过的供应商（有 baseUrl/keys/allowlist 任一），按固定顺序 + 字典序
-        const order2 = ["workbuddy", "clinebot", "openrouter", "bai"];
-        otherIds.sort((a, b) => {
-          const ia = order2.indexOf(a), ib = order2.indexOf(b);
-          if (ia !== -1 || ib !== -1) {
-            if (ia === -1) return 1;
-            if (ib === -1) return -1;
-            return ia - ib;
-          }
-          return a.localeCompare(b);
-        });
-        if (otherIds.length) {
-          console.log(`\n────────────────────────────────────────`);
-          console.log(`其他供应商 (allowlist，原名 + 别名) (${otherIds.length} providers):`);
-          for (const pid of otherIds) {
-            const allowed = loadProviderAllowedModels(pid);
-            const allowAny = loadProviderAllowAnyModels(pid);
-            const baseUrl = loadProviderBaseUrl(pid) || configs[pid]?.baseUrl || "";
-            const header = allowAny
-              ? (allowed.length ? `allowlist ${allowed.length} (allowAny ON)` : `allowAny ON (allowlist 空=放行全部)`)
-              : (allowed.length ? `allowlist ${allowed.length} (allowAny OFF)` : `allowlist 空 + allowAny OFF = 阻塞`);
-            console.log(`\n  ── ${pid} (${header})${baseUrl ? `  baseUrl=${baseUrl}` : ""} ──`);
-            if (!allowed.length) {
-              if (allowAny) {
-                console.log(`     (未设 allowlist，全部模型放行)  查看 live 列表: mslxdff -provider ${pid} models`);
-                console.log(`     限制可用模型: mslxdff -provider ${pid} allowlist set <model1> <model2>`);
-              } else {
-                console.log(`     阻塞中：无可用模型 — 设白名单: mslxdff -provider ${pid} allowlist set <model1> <model2>`);
-                console.log(`     或放行全部: mslxdff -provider ${pid} allowAny on`);
-              }
-            } else {
-              for (const raw of allowed) {
-                const canonical = `${pid}/${raw}`;
-                let alias = null;
-                try { alias = _gaf(canonical); } catch {}
-                if (!alias && String(canonical).includes("/")) alias = String(canonical).replace(/\//g, "-");
-                const aliasStr = alias && alias !== canonical ? `  (别名: ${alias})` : "";
-                const pickedMark = pickedIds.includes(canonical) || pickedIds.includes(alias || "") ? "*" : " ";
-                console.log(`     ${pickedMark} ${canonical}${aliasStr}`);
-              }
-              console.log(`     管理: mslxdff -provider ${pid} allowlist [list|add|remove|clear] | allowAny on|off`);
-            }
-          }
-        } else {
-          console.log(`\n────────────────────────────────────────`);
-          console.log(`其他供应商 (allowlist，原名 + 别名): (none — 尚未配置)`);
-          console.log(`  添加示例: mslxdff -provider add myapi https://api.example.com/v1 sk-xxx --models-path /v1/models`);
-        }
-        // 额外兜底：本地别名中不在任何 allowlist 里的，单独提示
-        const aliasEntries = Object.entries(fullAliases).filter(([alias, canonical]) => {
-          if (ids.includes(canonical)) return false;
-          // 已在 allowlist 中展示过的别名不重复
-          for (const pid of otherIds) {
-            const allowed = loadProviderAllowedModels(pid);
-            for (const raw of allowed) {
-              const can = `${pid}/${raw}`;
-              if (can === canonical) return false;
-            }
-          }
-          return true;
-        });
-        if (aliasEntries.length) {
-          console.log(`\n  本地别名 (不在 allowlist 里的遗留映射 ${aliasEntries.length}):`);
-          for (const [alias, canonical] of aliasEntries) {
-            console.log(`     ${canonical}  =>  ${alias}`);
-          }
-        }
-      } catch {}
-      console.log(`\npicked only constrains auto; manage with: mslxdff -models (TTY) | mslxdff -model pick <id> | mslxdff -model unpick <id> | mslxdff -model pick clear`);
-    }
-  } catch (err) {
-    console.error(`could not fetch models: ${String(err?.message || err)}`);
-    process.exit(1);
-  }
-  process.exit(0);
-}
-
-// -setto workbuddy|opencode [modelId]: sync to WorkBuddy / opencode
-if (args.includes("-setto") || args.includes("--setto")) {
-  const idx = args.findIndex((x) => x === "-setto" || x === "--setto");
-  const target = args[idx + 1];
-  if (!["workbuddy", "opencode"].includes(target)) {
-    console.error("usage: mslxdff -setto workbuddy [modelId] | mslxdff -setto opencode [modelId]");
-    process.exit(1);
-  }
-  if (target === "opencode") {
-    const raw = args[idx + 2] && !String(args[idx + 2]).startsWith("-") ? String(args[idx + 2]).trim() : null;
-    let id;
-    let internal;
-    if (raw) {
-      if (raw === "auto" || !raw) {
-        console.error("modelId 不能为 auto 或空");
-        process.exit(1);
-      }
-      const norm = normalizeModel(raw);
-      if (!norm) {
-        console.error("modelId 不能为空");
-        process.exit(1);
-      }
-      savePreferredModel(norm);
-      console.log(`default model set to: ${norm} (daemon hot-reloads on next request)`);
-      internal = toInternalId(norm);
-      id = toExternalAlias(internal);
-    } else {
-      const pref = loadPreferredModel() || getPreferredModel();
-      if (!pref) {
-        console.error("no preferred model set; use: mslxdff -setto opencode <modelId>");
-        process.exit(1);
-      }
-      const norm = normalizeModel(pref);
-      if (!norm) {
-        console.error("modelId 不能为空");
-        process.exit(1);
-      }
-      internal = toInternalId(norm);
-      id = toExternalAlias(internal);
-    }
-    try {
-      const cacheFile = join(logDir(), "models.json");
-      const models = createModelsService({
-        baseUrl: process.env.UPSTREAM_BASE_URL || "https://opencode.ai",
-        headers: createUpstreamClient({}).headers,
-        refreshMs: 0,
-        cacheFile,
-      });
-      const fresh = await Promise.race([
-        models.get(),
-        new Promise((_, rej) => setTimeout(() => rej(new Error("refresh timeout")), 4000)),
-      ]);
-      if (fresh?.data?.length) {
-        const ids = fresh.data.map((m) => m.id);
-        if (!ids.includes(internal) && !ids.includes(id)) {
-          console.log(`warn: "${internal}" not in current free list (${ids.length} models), still syncing to opencode (alias ${id})`);
-        }
-      }
-    } catch {
-      // refresh failed, still proceed
-    }
-    try {
-      const { token } = await loadToken();
-      const persisted = getPort();
-      const envPort = Number(process.env.MSLXDFF_PORT);
-      const port = persisted !== null ? persisted : (Number.isInteger(envPort) && envPort > 0 ? envPort : 8989);
-      const file = opencodeConfigPath();
-      const r = await syncToOpencode({ id, token, port, file });
-      const aliasLabel = r.alias && r.alias !== r.id ? ` (alias ${r.alias} 对应内部 ${r.internal})` : (r.id !== r.internal ? ` (alias for "${r.internal}", 原名仍兼容)` : ` (原名兼容)`);
-      console.log(`synced to opencode: ${r.action} "${r.id}"${aliasLabel} @ ${file}`);
-      console.log(`  url: http://127.0.0.1:${port}/v1`);
-      if (r.id !== r.internal) console.log(`  alias: ${r.id} -> ${r.internal} (opencode 选 mslxdff/${r.id} 直达本地 ${r.internal})`);
-      else console.log(`  alias: ${r.internal} (原名直用，opencode 选 mslxdff/${r.id} 直达本地 ${r.internal})`);
-    } catch (err) {
-      console.error(`failed to sync to opencode: ${String(err?.message || err)}`);
-      process.exit(1);
-    }
-    process.exit(0);
-  }
-  const raw = args[idx + 2] && !String(args[idx + 2]).startsWith("-") ? String(args[idx + 2]).trim() : null;
-  let id;
-  if (raw) {
-    if (raw === "auto" || !raw) {
-      console.error("modelId 不能为 auto 或空");
-      process.exit(1);
-    }
-    const norm = normalizeModel(raw);
-    if (!norm) {
-      console.error("modelId 不能为空");
-      process.exit(1);
-    }
-    savePreferredModel(norm);
-    console.log(`default model set to: ${norm} (daemon hot-reloads on next request)`);
-    id = norm;
-  } else {
-    id = loadPreferredModel() || getPreferredModel();
-    if (!id) {
-      console.error("no preferred model set; use: mslxdff -setto workbuddy <modelId>");
-      process.exit(1);
-    }
-  }
-  // 主动刷新模型列表（每次 -setto 都尝试，保证 deepseek 等最新模型可见；失败不阻断同步）
-  try {
-    const cacheFile = join(logDir(), "models.json");
-    const models = createModelsService({
-      baseUrl: process.env.UPSTREAM_BASE_URL || "https://opencode.ai",
-      headers: createUpstreamClient({}).headers,
-      refreshMs: 0,
-      cacheFile,
-    });
-    const fresh = await Promise.race([
-      models.get(),
-      new Promise((_, rej) => setTimeout(() => rej(new Error("refresh timeout")), 4000)),
-    ]);
-    if (fresh?.data?.length) {
-      const ids = fresh.data.map((m) => m.id);
-      if (!ids.includes(id)) {
-        console.log(`warn: "${id}" not in current free list (${ids.length} models), still syncing to WorkBuddy`);
-      }
-    }
-  } catch {
-    // refresh failed, still proceed with sync using stale/cached list
-  }
-  try {
-    const { token } = await loadToken();
-    const persisted = getPort();
-    const envPort = Number(process.env.MSLXDFF_PORT);
-    const port = persisted !== null ? persisted : (Number.isInteger(envPort) && envPort > 0 ? envPort : 8989);
-    const file = workbuddyModelsPath();
-    const r = await syncToWorkbuddy({ id, token, port, file });
-    console.log(`synced to WorkBuddy: ${r.action} "${id}" @ ${file}`);
-    console.log(`  url: http://127.0.0.1:${port}/v1/chat/completions`);
-  } catch (err) {
-    console.error(`failed to sync to WorkBuddy: ${String(err?.message || err)}`);
-    process.exit(1);
-  }
-  process.exit(0);
-}
-
-// -workbuddy checkin/balance/list/remove : WorkBuddy 多号管理
-if (args.includes("-workbuddy") || args.includes("--workbuddy") || args.includes("-wb")) {
-  const idx = args.findIndex((x) => x === "-workbuddy" || x === "--workbuddy" || x === "-wb");
-  const sub = args[idx + 1];
-  if (!sub || sub === "checkin" || sub === "daily-checkin" || sub === "check-in") {
-    const { spawn } = await import("node:child_process");
-    const script = join(dirname(fileURLToPath(import.meta.url)), "..", "workbuddy-checkin.js");
-    const child = spawn(process.execPath, [script, ...args.slice(idx + 2)], { stdio: "inherit" });
-    child.on("close", (code) => process.exit(code ?? 0));
-    child.on("error", (err) => { console.error(`workbuddy checkin failed: ${err.message}`); process.exit(1); });
-    await new Promise(() => {});
-  } else if (sub === "balance" || sub === "balances" || sub === "credit" || sub === "credits") {
-    const asJson = args.includes("--json") || args.includes("-json");
-    const { loadProviderConfigs } = await import("../src/state.js");
-    const { fetchBalance } = await import("../src/providers/workbuddy-balance.js");
-    const cfg = loadProviderConfigs().workbuddy || {};
-    const auths = Array.isArray(cfg.auths) ? cfg.auths : [];
-    const keys = Array.isArray(cfg.keys) ? cfg.keys : [];
-    // fallback scan auths dir if state empty
-    let items = auths.map((a,i)=> ({ uid:a.uid, domain:a.domain, key: keys[i]||"" , auth:a }));
-    if (!items.length) {
-      try {
-        const { readdirSync, readFileSync, existsSync } = await import("node:fs");
-        const { join } = await import("node:path");
-        const dir = process.env.WORKBUDDY_AUTH_DIR || join(process.cwd(), "auths");
-        if (existsSync(dir)) {
-          for (const f of readdirSync(dir).filter(x=>x.startsWith("workbuddy-")&&x.endsWith(".json"))) {
-            try { const j=JSON.parse(readFileSync(join(dir,f),"utf8")); if(j?.account?.uid) items.push({uid:j.account.uid, domain:j.auth.domain||"www.codebuddy.cn", key:j.auth.accessToken, auth:{uid:j.account.uid, domain:j.auth.domain||"www.codebuddy.cn", enterpriseId:j.account.enterpriseId||""}}); } catch {}
-          }
-        }
-      } catch {}
-    }
-    if (!items.length) { console.log("no workbuddy accounts — run node workbuddy-token-auto.js"); process.exit(0); }
-    const results=[];
-    for (const it of items) {
-      const b = await fetchBalance({ uid: it.uid, key: it.key, auth: it.auth }).catch(()=>null);
-      results.push({ uid: it.uid, domain: it.domain, balance: b });
-    }
-    if (asJson) { console.log(JSON.stringify({ results }, null, 2)); process.exit(0); }
-    console.log(`workbuddy balances (${results.length}):`);
-    for (const r of results) {
-      const b=r.balance;
-      if (!b) console.log(`  ${r.uid}  (balance unavailable)  domain=${r.domain}`);
-      else console.log(`  ${r.uid}  total=${b.totalStr||b.total}  dailyPacks=${b.dailyPacks}  active=${b.activeCount}  nextExpire=${b.nextExpire||"-"}  domain=${r.domain}`);
-    }
-    process.exit(0);
-  } else if (sub === "list" || sub === "ls" || sub === "status") {
-    const { loadProviderConfigs } = await import("../src/state.js");
-    const cfg = loadProviderConfigs().workbuddy || {};
-    const auths = Array.isArray(cfg.auths) ? cfg.auths : [];
-    const keys = Array.isArray(cfg.keys) ? cfg.keys : [];
-    if (!auths.length) { console.log("no workbuddy accounts in state — check auths/workbuddy-*.json"); process.exit(0); }
-    console.log(`workbuddy accounts (${auths.length}):`);
-    auths.forEach((a,i)=> {
-      const k=(keys[i]||"").slice(0,4);
-      console.log(`  [${i+1}] uid=${a.uid} domain=${a.domain||"www.codebuddy.cn"} enterprise=${a.enterpriseId||"-"} key=${k?k+"…":"(none)"} refresh=${a.refreshToken?"yes":"no"}`);
-    });
-    process.exit(0);
-  } else if (sub === "remove" || sub === "rm" || sub === "del" || sub === "delete") {
-    const target = args[idx+2];
-    if (!target) { console.error("usage: mslxdff -workbuddy remove <uid> [--keep-file]"); process.exit(1); }
-    const keep = args.includes("--keep-file");
-    const { loadProviderConfigs, saveProviderConfig } = await import("../src/state.js");
-    const cfg = loadProviderConfigs().workbuddy || {};
-    let auths = Array.isArray(cfg.auths)? [...cfg.auths]:[];
-    let keys = Array.isArray(cfg.keys)? [...cfg.keys]:[];
-    // support prefix match 6 chars
-    let rmIdx = auths.findIndex(a=> a.uid===target || a.uid.startsWith(target));
-    if (rmIdx<0) { console.error(`uid not found: ${target}`); process.exit(1); }
-    const uid = auths[rmIdx].uid;
-    auths.splice(rmIdx,1); keys.splice(rmIdx,1);
-    saveProviderConfig("workbuddy", { baseUrl: cfg.baseUrl||"https://copilot.tencent.com", keys, auths });
-    if (!keep) {
-      try {
-        const { existsSync, unlinkSync } = await import("node:fs");
-        const { join } = await import("node:path");
-        const dir = process.env.WORKBUDDY_AUTH_DIR || join(process.cwd(), "auths");
-        const fp = join(dir, `workbuddy-${uid}.json`);
-        if (existsSync(fp)) { unlinkSync(fp); console.log(`removed file ${fp}`); }
-      } catch {}
-    }
-    try { const { getBalanceCache } = await import("../src/providers/workbuddy-balance.js"); getBalanceCache().delete(uid); } catch {}
-    console.log(`removed workbuddy ${uid} (now ${auths.length} account(s))`);
-    process.exit(0);
-  } else {
-    console.error("usage: mslxdff -workbuddy checkin | balance [--json] | list | remove <uid>");
-    process.exit(1);
-  }
-}
-
-// -enable-autostart / -disable-autostart / -autostart status : 开机自启（Windows schtasks / Linux systemd user）
-if (args.includes("-enable-autostart") || args.includes("--enable-autostart") || args.includes("-disable-autostart") || args.includes("--disable-autostart") || args.includes("-autostart") || args.includes("--autostart")) {
-  const { enableAutostart, disableAutostart, getAutostartStatus, autostartHelp } = await import("../src/autostart.js");
-  if (args.includes("-enable-autostart") || args.includes("--enable-autostart")) {
-    const r = await enableAutostart();
-    if (r.ok) {
-      console.log(`autostart 已启用 · ${r.method || autostartHelp()}`);
-      console.log(`验证: mslxdff -autostart status`);
-    } else {
-      console.error(`启用自启失败: ${r.error || "unknown"}`);
-      console.error(`提示: Windows 需允许任务计划，Linux 需 systemd --user`);
-      process.exit(1);
-    }
-    process.exit(0);
-  }
-  if (args.includes("-disable-autostart") || args.includes("--disable-autostart")) {
-    const r = await disableAutostart();
-    if (r.ok) console.log(`autostart 已禁用`);
-    else { console.error(`禁用失败: ${r.error}`); process.exit(1); }
-    process.exit(0);
-  }
-  // -autostart / -autostart status
-  const idx = args.findIndex((x) => x === "-autostart" || x === "--autostart");
-  const sub = args[idx + 1];
-  if (!sub || sub === "status" || sub === "list") {
-    const s = await getAutostartStatus();
-    console.log(`autostart: ${s.enabled ? "已启用" : "未启用"} · ${s.detail || autostartHelp()}`);
-    if (s.taskToRun) console.log(`  task: ${s.taskToRun}`);
-    if (s.unit) console.log(`  unit: ${s.unit}`);
-    process.exit(0);
-  }
-  console.error("usage: mslxdff -enable-autostart | mslxdff -disable-autostart | mslxdff -autostart status");
-  process.exit(1);
-}
-
-// -free / -free-check / --free / -free-watch : V2EX 限免白嫖雷达（仅 V2EX 单源）
-if (args.includes("-free") || args.includes("--free") || args.includes("-free-check") || args.includes("--free-check") || args.includes("-free-watch") || args.includes("--free-watch")) {
-  const isWatch = args.includes("-free-watch") || args.includes("--free-watch");
-  const { fetchV2exFree } = await import("../src/free-watcher.js");
-  const show = async () => {
-    const hits = await fetchV2exFree({ timeoutMs: 6000 });
-    const ts = new Date().toISOString().replace("T", " ").slice(0, 19);
-    console.log(`[V2EX] free check @ ${ts} — ${hits.length} hit(s)`);
-    if (!hits.length) {
-      console.log("(暂无命中 — 关键词：白嫖|限免|免费额度|注册送|羊毛，来源：/api/topics/latest.json + hot.json)");
-    } else {
-      for (const h of hits) console.log(`  ${h.title} | ${h.url} | ${h.node} ${h.replies}回复`);
-    }
-  };
-  if (!isWatch) {
-    try { await show(); } catch (err) { console.error(`V2EX 拉取失败: ${err?.message || err}`); process.exit(1); }
-    process.exit(0);
-  }
-  console.log("V2EX 白嫖雷达 watch 模式 — 每 5 分钟拉一次 Ctrl+C 退出");
-  const run = async () => {
-    try { await show(); } catch (err) { console.error(`[${new Date().toISOString().slice(11,19)}] 拉取失败: ${err?.message || err}`); }
-    console.log("---");
-  };
-  await run();
-  const timer = setInterval(run, 5 * 60 * 1000);
-  timer.unref?.();
-  // 保持前台常驻
-  await new Promise(() => {});
-}
-
-// -providers list : list all deployed upstream providers (opencode + openrouter + generic)
-if (args.includes("-providers") || args.includes("--providers")) {
-  const idx = args.findIndex((x) => x === "-providers" || x === "--providers");
-  const sub = args[idx + 1];
-  if (!sub || sub === "list" || sub === "status") {
-    const { loadProviderConfigs, loadProviderKeys, loadProviderShareKeys, loadProviderBaseUrl, loadProviderAllowedModels } = await import("../src/state.js");
-    const configs = loadProviderConfigs();
-    const opencodeEnabled = true;
-    const opencodeBase = process.env.UPSTREAM_BASE_URL || "https://opencode.ai";
-    const orKeys = loadProviderKeys("openrouter");
-    const orBase = "https://openrouter.ai/api/v1";
-    const orShare = loadProviderShareKeys("openrouter");
-    const orAllowed = loadProviderAllowedModels("openrouter");
-    // collect generic ids from configs + legacy providerKeys
-    const genericIds = new Set(Object.keys(configs).filter((id) => id !== "opencode" && id !== "openrouter"));
-    try {
-      const raw = JSON.parse(readFileSync(defaultStateFile(), "utf8"));
-      const pk = raw.providerKeys || {};
-      for (const id of Object.keys(pk)) if (id !== "opencode" && id !== "openrouter") genericIds.add(id);
-      const cfgRaw = raw.providerConfigs || {};
-      for (const id of Object.keys(cfgRaw)) if (id !== "opencode" && id !== "openrouter") genericIds.add(id);
-    } catch {}
-    // also include env-only generic ids (scan env for MSLXDFF_*_KEY)
-    for (const k of Object.keys(process.env)) {
-      const m = k.match(/^MSLXDFF_(.+)_KEY$/);
-      if (m) {
-        const id = m[1].toLowerCase().replace(/__/g, "-");
-        if (id !== "openrouter" && id !== "opencode") genericIds.add(id);
-      }
-    }
-    // include providers that only have allowlist (no keys yet) — exclude built-ins already listed
-    try {
-      const raw = JSON.parse(readFileSync(defaultStateFile(), "utf8"));
-      const cfgs = raw.providerConfigs || {};
-      for (const id of Object.keys(cfgs)) {
-        if (id === "opencode" || id === "openrouter") continue;
-        const am = cfgs[id]?.allowedModels;
-        if (Array.isArray(am) && am.length) genericIds.add(id);
-      }
-    } catch {}
-    const list = [];
-    const { loadProviderAllowAnyModels: _la0 } = await import("../src/state.js");
-    const opAllowAny = _la0("opencode");
-    const orAllowAny = _la0("openrouter");
-    const opAllowed = loadProviderAllowedModels("opencode");
-    list.push({ id: "opencode", enabled: opencodeEnabled, baseUrl: opencodeBase, keys: [], share: false, allowed: opAllowed, allowAny: opAllowAny, note: "built-in, no key, cannot share" });
-    list.push({ id: "openrouter", enabled: orKeys.length > 0, baseUrl: orBase, keys: orKeys, share: orShare, allowed: orAllowed, allowAny: orAllowAny, note: orKeys.length ? "" : "no keys" });
-    for (const gid of [...genericIds].sort()) {
-      const cfg = configs[gid];
-      const keys = loadProviderKeys(gid);
-      const baseUrl = loadProviderBaseUrl(gid) || cfg?.baseUrl || "";
-      const share = loadProviderShareKeys(gid);
-      const allowed = loadProviderAllowedModels(gid);
-      const allowAny = _la0(gid);
-      const enabled = Boolean(baseUrl && keys.length);
-      let note = "";
-      if (!baseUrl && !keys.length && !allowed.length && allowAny === false) note = "no baseUrl, no keys, BLOCKED (allowAny OFF)";
-      else if (!baseUrl && !keys.length && !allowed.length) note = "no baseUrl, no keys";
-      else if (!baseUrl && !allowed.length && !allowAny) note = "missing baseUrl, BLOCKED";
-      else if (!keys.length && !allowed.length && !allowAny) note = "no keys, BLOCKED";
-      else if (!baseUrl) note = "missing baseUrl";
-      else if (!keys.length) note = "no keys";
-      list.push({ id: gid, enabled, baseUrl: baseUrl || "(none)", keys, share, allowed, allowAny, note });
-    }
-    console.log(`providers (${list.length}):`);
-    for (const p of list) {
-      const state = p.enabled ? "enabled " : "disabled";
-      const keysInfo = p.keys.length ? `${p.keys.length} key${p.keys.length > 1 ? "s" : ""} ${p.keys.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")}` : "0 keys";
-      const shareInfo = p.id === "opencode" ? "cannot share" : `share=${p.share ? "ON" : "off"}`;
-      const allowInfo = p.allowed.length ? `allow=${p.allowed.length}(${p.allowed.slice(0, 3).join(",")}${p.allowed.length > 3 ? "..." : ""})` : (p.allowAny ? "allow=all" : "allow=none(BLOCKED)");
-      const note = p.note ? `  (${p.note})` : "";
-      console.log(`  ${p.id.padEnd(12)} ${state}  ${keysInfo.padEnd(28)}  ${allowInfo.padEnd(22)}  baseUrl=${p.baseUrl}  ${shareInfo}${note}`);
-    }
-    console.log(`\nuse: mslxdff -provider <id> list  to inspect one,  mslxdff -provider <id> allowlist set <model...>  to restrict`);
-    console.log(`     mslxdff -provider <id> allowAny on|off  (empty allowlist = block or allow all)`);
-    process.exit(0);
-  }
-  console.error("usage: mslxdff -providers list");
-  process.exit(1);
-}
-
-// -provider <id> [key...|add|remove|list|clear]: 配置需鉴权的供应商 API key（如 openrouter）。
-// 行为：无参数且 TTY → 交互式隐藏输入（多行直到空行，逐一追加）；非 TTY → 打印用法。key 持久化到 state。
-if (args.includes("-provider") || args.includes("--provider")) {
-  const idx = args.findIndex((x) => x === "-provider" || x === "--provider");
-  const id = args[idx + 1];
-  const sub = args[idx + 2];
-  const rest = args.slice(idx + 2);
-  if (!id) {
-    console.error("usage: mslxdff -provider <id> [key...|add|remove|list|models|clear|share|set-url|allowlist|allowAny]");
-    console.error("       e.g. mslxdff -provider openrouter sk-1 sk-2 sk-3      set multiple keys (replaces all)");
-    console.error("            mslxdff -provider openrouter add sk-4             append one key");
-    console.error("            mslxdff -provider openrouter remove sk-1          remove a key by value");
-    console.error("            mslxdff -provider openrouter list                 list all keys (masked)");
-    console.error("            mslxdff -provider openrouter models [--json]      list provider models (allowlist filtered)");
-    console.error("            mslxdff -provider openrouter share on|off         share keys with peers on outgoing forward (ADR-0008)");
-    console.error("            mslxdff -provider openrouter set-url https://api.example.com/v1");
-    console.error("            mslxdff -provider openrouter set-models-path /v1/models");
-    console.error("            mslxdff -provider openrouter set-chat-path /v1/chat/completions");
-    console.error("            mslxdff -provider openrouter allowlist set gpt-4 gpt-3.5  manage allowed models (empty=block unless allowAny ON)");
-    console.error("            mslxdff -provider openrouter allowAny on|off     empty allowlist = allow all or block all (default OFF, secure)");
-    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx   add generic OpenAI-compatible provider");
-    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx gpt-4  add with allowlist");
-    console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx --models-path /v1/models --chat-path /v1/chat/completions");
-    console.error("            mslxdff -provider openrouter                      interactive hidden input (append)");
-    console.error("            mslxdff -provider openrouter clear                remove all keys");
-    process.exit(1);
-  }
-  // alias: mslxdff -provider list  (same as -providers list) — list all providers
-  if (id === "list" || id === "status") {
-    const { loadProviderConfigs, loadProviderKeys, loadProviderShareKeys, loadProviderBaseUrl } = await import("../src/state.js");
-    const configs = loadProviderConfigs();
-    const opencodeBase = process.env.UPSTREAM_BASE_URL || "https://opencode.ai";
-    const orKeys = loadProviderKeys("openrouter");
-    const orBase = "https://openrouter.ai/api/v1";
-    const orShare = loadProviderShareKeys("openrouter");
-    const genericIds = new Set(Object.keys(configs).filter((x) => x !== "opencode" && x !== "openrouter"));
-    try {
-      const raw = JSON.parse(readFileSync(defaultStateFile(), "utf8"));
-      const pk = raw.providerKeys || {};
-      for (const k of Object.keys(pk)) if (k !== "opencode" && k !== "openrouter") genericIds.add(k);
-    } catch {}
-    for (const k of Object.keys(process.env)) {
-      const m = k.match(/^MSLXDFF_(.+)_KEY$/);
-      if (m) {
-        const gid = m[1].toLowerCase().replace(/__/g, "-");
-        if (gid !== "openrouter" && gid !== "opencode") genericIds.add(gid);
-      }
-    }
-    const list = [];
-    list.push({ id: "opencode", enabled: true, baseUrl: opencodeBase, keys: [], share: false, note: "built-in, no key, cannot share" });
-    list.push({ id: "openrouter", enabled: orKeys.length > 0, baseUrl: orBase, keys: orKeys, share: orShare, note: orKeys.length ? "" : "no keys" });
-    for (const gid of [...genericIds].sort()) {
-      const cfg = configs[gid];
-      const keys = loadProviderKeys(gid);
-      const baseUrl = loadProviderBaseUrl(gid) || cfg?.baseUrl || "";
-      const share = loadProviderShareKeys(gid);
-      const enabled = Boolean(baseUrl && keys.length);
-      let note = "";
-      if (!baseUrl && !keys.length) note = "no baseUrl, no keys";
-      else if (!baseUrl) note = "missing baseUrl";
-      else if (!keys.length) note = "no keys";
-      list.push({ id: gid, enabled, baseUrl: baseUrl || "(none)", keys, share, note });
-    }
-    console.log(`providers (${list.length}):`);
-    for (const p of list) {
-      const state = p.enabled ? "enabled " : "disabled";
-      const keysInfo = p.keys.length ? `${p.keys.length} key${p.keys.length > 1 ? "s" : ""} ${p.keys.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")}` : "0 keys";
-      const shareInfo = p.id === "opencode" ? "cannot share" : `share=${p.share ? "ON" : "off"}`;
-      const note = p.note ? `  (${p.note})` : "";
-      console.log(`  ${p.id.padEnd(12)} ${state}  ${keysInfo.padEnd(28)}  baseUrl=${p.baseUrl}  ${shareInfo}${note}`);
-    }
-    console.log(`\nuse: mslxdff -provider <id> list  to inspect one,  mslxdff -provider add <id> <baseUrl> <key>  to add generic`);
-    process.exit(0);
-  }
-  // 通用供应商快捷添加：mslxdff -provider add <id> <baseUrl> <key> [allowedModel...]
-  if (id === "add") {
-    const gid = sub;
-    const gBase = rest[1];
-    const gKey = rest[2];
-    if (!gid || !gBase || !gKey) {
-      console.error("usage: mslxdff -provider add <id> <baseUrl> <key> [allowedModel...] [--models-path <path>] [--chat-path <path>]");
-      console.error("       e.g. mslxdff -provider add myapi https://api.example.com/v1 sk-xxx");
-      console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx gpt-4 gpt-3.5");
-      console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx --models-path /v1/models --chat-path /v1/chat/completions");
-      process.exit(1);
-    }
-    if (gid === "opencode" || gid === "oc" || gid === "openrouter") {
-      console.error(`provider "${gid}" is built-in — use: mslxdff -provider ${gid} add <key>  or  mslxdff -provider ${gid} set-url <url>`);
-      process.exit(1);
-    }
-    const { saveProviderConfig, loadProviderConfig, loadProviderShareKeys, loadProviderAllowedModels } = await import("../src/state.js");
-    const { normalizeProviderId } = await import("../src/providers/model-id.js");
-    const nid = normalizeProviderId(gid);
-    if (!nid) { console.error(`invalid provider id: ${gid}`); process.exit(1); }
-    if (!/^https?:\/\/.+/.test(String(gBase).trim())) { console.error(`invalid baseUrl: ${gBase} (must start with http:// or https://)`); process.exit(1); }
-    const cur = loadProviderConfig(nid) || { baseUrl: "", keys: [], allowedModels: [], auths: [], modelsPath: "", chatPath: "" };
-    let keys, auths, baseUrl;
-    baseUrl = String(gBase).trim();
-    // parse --models-path / --chat-path from tail
-    let parsedModelsPath = null;
-    let parsedChatPath = null;
-    const extraTokens = [];
-    for (let _i = 3; _i < rest.length; _i++) {
-      const tok = String(rest[_i] || "");
-      if (tok === "--models-path" || tok === "--modelsPath" || tok === "--models_path") { parsedModelsPath = String(rest[_i + 1] || "").trim() || null; _i++; }
-      else if (tok.startsWith("--models-path=")) { parsedModelsPath = tok.slice("--models-path=".length).trim() || null; }
-      else if (tok === "--chat-path" || tok === "--chatPath" || tok === "--chat_path") { parsedChatPath = String(rest[_i + 1] || "").trim() || null; _i++; }
-      else if (tok.startsWith("--chat-path=")) { parsedChatPath = tok.slice("--chat-path=".length).trim() || null; }
-      else extraTokens.push(tok);
-    }
-    if (parsedModelsPath && !String(parsedModelsPath).startsWith("/")) { console.error(`invalid --models-path: ${parsedModelsPath} (must start with /)`); process.exit(1); }
-    if (parsedChatPath && !String(parsedChatPath).startsWith("/")) { console.error(`invalid --chat-path: ${parsedChatPath} (must start with /)`); process.exit(1); }
-    const extraModels = extraTokens.filter((x) => x && !String(x).startsWith("-")).map((m) => String(m).trim()).filter(Boolean);
-    const allowedModels = extraModels.length ? [...new Set([...(cur.allowedModels || []), ...extraModels])] : (cur.allowedModels || []);
-    if (nid === "workbuddy") {
-      // workbuddy: keys/auths 一一对应，需解析 uid
-      const token = String(gKey).trim();
-      let uid = "";
-      try { const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64").toString()); uid = payload.uid || payload.sub || payload.userId || payload.user_id || ""; } catch {}
-      if (!uid) uid = "manual-" + token.slice(-8);
-      const curKeys = Array.isArray(cur.keys) ? [...cur.keys] : [];
-      const curAuths = Array.isArray(cur.auths) ? [...cur.auths] : [];
-      let idx = curAuths.findIndex(a => a.uid === uid);
-      if (idx < 0) idx = curKeys.findIndex(k => k === token);
-      let newKeys, newAuths;
-      if (idx >= 0) {
-        newKeys = [...curKeys]; newKeys[idx] = token;
-        newAuths = [...curAuths]; newAuths[idx] = { uid, domain: "www.codebuddy.cn", enterpriseId: "", refreshToken: "" };
-        // if auths shorter than keys, pad
-        while (newAuths.length < newKeys.length) newAuths.push({ uid: `manual-${newKeys[newAuths.length].slice(-8)}`, domain: "www.codebuddy.cn", enterpriseId: "", refreshToken: "" });
-      } else {
-        newKeys = [...new Set([...curKeys, token].filter(Boolean))];
-        newAuths = [...curAuths, { uid, domain: "www.codebuddy.cn", enterpriseId: "", refreshToken: "" }];
-        // align lengths
-        while (newAuths.length < newKeys.length) newAuths.push({ uid: `manual-${newKeys[newAuths.length].slice(-8)}`, domain: "www.codebuddy.cn", enterpriseId: "", refreshToken: "" });
-        while (newKeys.length < newAuths.length) newKeys.push(token);
-      }
-      keys = newKeys; auths = newAuths;
-      const cfgToSave = { baseUrl, keys, auths, allowedModels };
-      if (parsedModelsPath) cfgToSave.modelsPath = parsedModelsPath;
-      else if (cur.modelsPath) cfgToSave.modelsPath = cur.modelsPath;
-      if (parsedChatPath) cfgToSave.chatPath = parsedChatPath;
-      else if (cur.chatPath) cfgToSave.chatPath = cur.chatPath;
-      saveProviderConfig(nid, cfgToSave);
-      // 同步写 auths/workbuddy-<uid>.json 供 checkin 使用
-      try {
-        const { writeFileSync, mkdirSync } = await import("node:fs");
-        const { join } = await import("node:path");
-        const dir = process.env.WORKBUDDY_AUTH_DIR || join(process.cwd(), "auths");
-        mkdirSync(dir, { recursive: true });
-        const fp = join(dir, `workbuddy-${uid}.json`);
-        const doc = { account: { uid, enterpriseId: "", nickname: "" }, auth: { accessToken: token, refreshToken: "", expiresAt: Math.floor(Date.now()/1000)+3600, domain: "www.codebuddy.cn" } };
-        writeFileSync(fp + ".tmp", JSON.stringify(doc, null, 2), { mode: 0o600 });
-        try { const { renameSync, unlinkSync, existsSync } = await import("node:fs"); if (existsSync(fp)) unlinkSync(fp); renameSync(fp + ".tmp", fp); } catch { writeFileSync(fp, JSON.stringify(doc, null, 2), { mode: 0o600 }); }
-      } catch {}
-    } else {
-      const trimmed = String(gKey).trim();
-      const already = (cur.keys || []).some((k) => String(k).trim() === trimmed);
-      if (already) {
-        console.log(`key already exists for ${nid} (${trimmed.slice(0, 4)}…${trimmed.slice(-4)}), skipped — still ${cur.keys.length} key(s)`);
-        console.log(`  use: mslxdff -provider ${nid} list  to see keys`);
-        process.exit(0);
-      }
-      keys = [...new Set([...(cur.keys || []), trimmed].filter(Boolean))];
-      auths = undefined;
-      const cfgToSave2 = { baseUrl, keys, allowedModels };
-      if (parsedModelsPath) cfgToSave2.modelsPath = parsedModelsPath;
-      else if (cur.modelsPath) cfgToSave2.modelsPath = cur.modelsPath;
-      if (parsedChatPath) cfgToSave2.chatPath = parsedChatPath;
-      else if (cur.chatPath) cfgToSave2.chatPath = cur.chatPath;
-      saveProviderConfig(nid, cfgToSave2);
-    }
-    console.log(`added generic provider: ${nid}`);
-    console.log(`  baseUrl: ${String(gBase).trim().replace(/\/+$/, "")}`);
-    console.log(`  keys: ${keys.length} (${keys.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")})`);
-    if (allowedModels.length) console.log(`  allowedModels: ${allowedModels.length} (${allowedModels.join(", ")})`);
-    else console.log(`  allowedModels: (none — BLOCKED, otherwise unusable)  → mslxdff -provider ${nid} allowlist set <model...>  OR  mslxdff -provider ${nid} allowAny on (allow all)`);
-    console.log(`  share: ${loadProviderShareKeys(nid) ? "ON" : "off"}   (mslxdff -provider ${nid} share on|off)`);
-    console.log(`  allowAny: OFF (secure, empty allowlist = 403 block before upstream) — enable via: mslxdff -provider ${nid} allowAny on`);
-    console.log(`  use as: ${nid}/<model-id>  — restart daemon to activate`);
-    console.log(`  NOTE: empty allowlist = 403 before upstream, no cost — must set allowlist to use`);
-    process.exit(0);
-  }
-  if ((id === "opencode" || id === "oc") && sub !== "allowlist" && sub !== "allow" && sub !== "allowed" && sub !== "whitelist" && sub !== "list" && sub !== "status" && sub !== "allowAny" && sub !== "allow-any" && sub !== "allow_any" && sub !== "allowany") {
-    console.log("opencode is the default (bare) provider — it needs no API key and can never be shared with peers");
-    console.log("(its IP-based rate limit is spread by peer forwarding itself)");
-    console.log(`  allowlist: mslxdff -provider opencode allowlist [list|set|add|remove|clear]  — restrict models (empty=allow all)`);
-    process.exit(0);
-  }
-  const { loadProviderKeys, saveProviderKeys, addProviderKey, removeProviderKeys, loadProviderShareKeys, saveProviderShareKeys, loadProviderConfig, saveProviderConfig, saveProviderBaseUrl, loadProviderConfigs } = await import("../src/state.js");
-  if (sub === "set-models-path" || sub === "setModelsPath" || sub === "models-path") {
-    const p = rest[1];
-    if (!p) {
-      console.error(`usage: mslxdff -provider ${id} set-models-path <path>  (e.g. /v1/models)`);
-      process.exit(1);
-    }
-    if (!String(p).trim().startsWith("/")) {
-      console.error(`invalid modelsPath: ${p} (must start with /)`);
-      process.exit(1);
-    }
-    const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
-    const { normalizeProviderId } = await import("../src/providers/model-id.js");
-    const nid = normalizeProviderId(id);
-    saveProviderConfig(nid || id, { baseUrl: cur.baseUrl || "", keys: cur.keys || [], modelsPath: String(p).trim() });
-    console.log(`set ${nid || id} modelsPath: ${String(p).trim()} — restart daemon to activate`);
-    process.exit(0);
-  }
-  if (sub === "set-chat-path" || sub === "setChatPath" || sub === "chat-path") {
-    const p = rest[1];
-    if (!p) {
-      console.error(`usage: mslxdff -provider ${id} set-chat-path <path>  (e.g. /v1/chat/completions)`);
-      process.exit(1);
-    }
-    if (!String(p).trim().startsWith("/")) {
-      console.error(`invalid chatPath: ${p} (must start with /)`);
-      process.exit(1);
-    }
-    const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
-    const { normalizeProviderId } = await import("../src/providers/model-id.js");
-    const nid = normalizeProviderId(id);
-    saveProviderConfig(nid || id, { baseUrl: cur.baseUrl || "", keys: cur.keys || [], chatPath: String(p).trim() });
-    console.log(`set ${nid || id} chatPath: ${String(p).trim()} — restart daemon to activate`);
-    process.exit(0);
-  }
-  if (sub === "clear") {
-    const configs = loadProviderConfigs();
-    if (configs[id]) {
-      saveProviderConfig(id, { baseUrl: "", keys: [] });
-    } else {
-      saveProviderKeys(id, []);
-    }
-    console.log(`cleared ${id} API keys (provider disabled on next daemon start)`);
-    process.exit(0);
-  }
-  if (sub === "set-url" || sub === "setUrl" || sub === "url") {
-    const url = rest[1];
-    if (!url) {
-      console.error(`usage: mslxdff -provider ${id} set-url <baseUrl>`);
-      process.exit(1);
-    }
-    if (!/^https?:\/\/.+/.test(String(url).trim())) {
-      console.error(`invalid baseUrl: ${url} (must start with http:// or https://)`);
-      process.exit(1);
-    }
-    const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
-    saveProviderConfig(id, { baseUrl: String(url).trim(), keys: cur.keys || [] });
-    console.log(`set ${id} baseUrl: ${String(url).trim().replace(/\/+$/, "")} — restart daemon to activate`);
-    process.exit(0);
-  }
-  if (sub === "share") {
-    const on = rest[1];
-    if (!on) {
-      console.log(`share keys to peers: ${loadProviderShareKeys(id) ? "ON" : "off"}`);
-      process.exit(0);
-    }
-    if (!["on", "off", "1", "0", "true", "false"].includes(String(on).toLowerCase())) {
-      console.error("usage: mslxdff -provider openrouter share on|off");
-      process.exit(1);
-    }
-    const state = ["on", "1", "true"].includes(String(on).toLowerCase());
-    saveProviderShareKeys(id, state);
-    console.log(`share keys to peers: ${state ? "ON" : "off"} — restart daemon to activate`);
-    process.exit(0);
-  }
-  // allowAnyModels 开关：默认关闭（安全），空 allowlist 时直接 403（防扣费）
-  if (sub === "allowAny" || sub === "allow-any" || sub === "allow_any" || sub === "allowany") {
-    const { loadProviderAllowAnyModels, saveProviderAllowAnyModels } = await import("../src/state.js");
-    const on = rest[1];
-    if (!on) {
-      const cur = loadProviderAllowAnyModels(id);
-      console.log(`allowAnyModels: ${cur ? "ON (allow all when allowlist empty)" : "OFF (empty allowlist = block all)"}`);
-      console.log(`  set: mslxdff -provider ${id} allowAny on|off`);
-      process.exit(0);
-    }
-    if (!["on", "off", "1", "0", "true", "false"].includes(String(on).toLowerCase())) {
-      console.error(`usage: mslxdff -provider ${id} allowAny on|off`);
-      process.exit(1);
-    }
-    const state = ["on", "1", "true"].includes(String(on).toLowerCase());
-    saveProviderAllowAnyModels(id, state);
-    console.log(`allowAnyModels: ${state ? "ON (empty allowlist = allow all)" : "OFF (empty allowlist = block all)"} — takes effect immediately (hot-reloaded)`);
-    process.exit(0);
-  }
-  // allowlist 管理：默认关闭，白名单为空 = 禁止（需显式 allowAny:true 才放行）；非空 = 仅名单内可用（防昂贵模型）
-  if (sub === "allowlist" || sub === "allow" || sub === "allowed" || sub === "whitelist") {
-    const { loadProviderAllowedModels, saveProviderAllowedModels, loadProviderConfig, loadProviderAllowAnyModels } = await import("../src/state.js");
-    const action = rest[1];
-    const rawTargets = rest.slice(2);
-    // 兼容：mslxdff -provider <id> allowlist  （无 action）→ list
-    if (!action || action === "list" || action === "status") {
-      const list = loadProviderAllowedModels(id);
-      const cfg = loadProviderConfig(id);
-      const baseUrl = cfg?.baseUrl || "";
-      const allowAny = loadProviderAllowAnyModels(id);
-      console.log(`provider: ${id}${baseUrl ? `  baseUrl: ${baseUrl}` : ""}`);
-      if (!list.length) {
-        if (allowAny) {
-          console.log(`  allowedModels: (none — allow all, because allowAny=ON)`);
-          console.log(`  to secure: mslxdff -provider ${id} allowAny off  or  mslxdff -provider ${id} allowlist set <model1> <model2> ...`);
-        } else {
-          console.log(`  allowedModels: (none — BLOCK ALL, provider disabled until allowlist set or allowAny ON)`);
-          console.log(`  set via: mslxdff -provider ${id} allowlist set <model1> <model2> ...`);
-          console.log(`  or:      mslxdff -provider ${id} allowAny on   (allow all when allowlist empty)`);
-        }
-      } else {
-        console.log(`  allowedModels: ${list.length} model${list.length > 1 ? "s" : ""} (only these can be used)`);
-        list.forEach((m, i) => console.log(`  [${i + 1}]  ${m}`));
-        console.log(`  manage: mslxdff -provider ${id} allowlist add <model> | remove <model> | set <m1> <m2> ... | clear`);
-        console.log(`  allowAny: ${allowAny ? "ON" : "OFF"} (empty list behavior) — mslxdff -provider ${id} allowAny on|off`);
-      }
-      console.log(`  NOTE: empty allowlist + allowAny OFF = 403 block (hot-reloaded, no restart needed)`);
-      process.exit(0);
-    }
-    if (action === "clear") {
-      saveProviderAllowedModels(id, []);
-      const allowAny = loadProviderAllowAnyModels(id);
-      console.log(`cleared ${id} allowlist (now ${allowAny ? "allow all (allowAny ON)" : "BLOCK ALL (allowAny OFF)"}) — takes effect immediately (hot-reloaded)`);
-      process.exit(0);
-    }
-    if (action === "set") {
-      const models = rawTargets.filter((x) => x && !String(x).startsWith("-")).map((m) => String(m).trim()).filter(Boolean);
-      // 支持逗号分隔的一串：model1,model2
-      const flat = models.flatMap((m) => String(m).split(",")).map((m) => m.trim()).filter(Boolean);
-      if (!flat.length) {
-        console.error(`usage: mslxdff -provider ${id} allowlist set <model1> <model2> ...`);
-        process.exit(1);
-      }
-      const saved = saveProviderAllowedModels(id, flat);
-      console.log(`set ${id} allowlist: ${saved.length} model${saved.length > 1 ? "s" : ""} (${saved.join(", ")}) — takes effect immediately (hot-reloaded)`);
-      process.exit(0);
-    }
-    if (action === "add") {
-      const models = rawTargets.filter((x) => x && !String(x).startsWith("-")).map((m) => String(m).trim()).filter(Boolean);
-      const flat = models.flatMap((m) => String(m).split(",")).map((m) => m.trim()).filter(Boolean);
-      if (!flat.length) {
-        console.error(`usage: mslxdff -provider ${id} allowlist add <model> [model2 ...]`);
-        process.exit(1);
-      }
-      const cur = loadProviderAllowedModels(id);
-      const next = [...new Set([...cur, ...flat])];
-      saveProviderAllowedModels(id, next);
-      console.log(`added ${flat.length} model${flat.length > 1 ? "s" : ""} to ${id} allowlist (now ${next.length}: ${next.join(", ")}) — takes effect immediately (hot-reloaded)`);
-      process.exit(0);
-    }
-    if (action === "remove" || action === "rm" || action === "del") {
-      const models = rawTargets.filter((x) => x && !String(x).startsWith("-")).map((m) => String(m).trim()).filter(Boolean);
-      const flat = models.flatMap((m) => String(m).split(",")).map((m) => m.trim()).filter(Boolean);
-      if (!flat.length) {
-        console.error(`usage: mslxdff -provider ${id} allowlist remove <model> [model2 ...]`);
-        process.exit(1);
-      }
-      const cur = loadProviderAllowedModels(id);
-      const set = new Set(flat);
-      const next = cur.filter((m) => !set.has(m));
-      saveProviderAllowedModels(id, next);
-      const { loadProviderAllowAnyModels: _la } = await import("../src/state.js");
-      const _allowAny = _la(id);
-      console.log(`removed ${cur.length - next.length} model${cur.length - next.length !== 1 ? "s" : ""} from ${id} allowlist (now ${next.length ? next.join(", ") : (_allowAny ? "(allow all)" : "(BLOCK ALL)")}) — takes effect immediately (hot-reloaded)`);
-      process.exit(0);
-    }
-    console.error(`usage: mslxdff -provider ${id} allowlist [list|set|add|remove|clear] [models...]`);
-    console.error(`       mslxdff -provider ${id} allowAny on|off   (empty allowlist = block or allow all)`);
-    process.exit(1);
-  }
-  if (sub === "models" || sub === "show-models" || sub === "list-models" || sub === "ls") {
-    const wantsJson = args.includes("--json") || args.includes("-json");
-    const cfg = loadProviderConfig(id);
-    // opencode: use aggregated cache + provider-specific? For opencode, show bare ids from cache
-    if (id === "opencode" || id === "oc") {
-      try {
-        const cacheFile = join(logDir(), "models.json");
-        const { readFileSync } = await import("node:fs");
-        const raw = JSON.parse(readFileSync(cacheFile, "utf8"));
-        const ids = (raw.data || []).map((m) => m.id).filter((x) => !String(x).includes("/"));
-        if (wantsJson) {
-          console.log(JSON.stringify({ object: "list", data: ids.map((id) => ({ id, object: "model" })) }, null, 2));
-        } else {
-          console.log(`opencode models (${ids.length}):`);
-          for (const mid of ids) console.log(`  ${mid}`);
-        }
-      } catch (e) {
-        console.error(`could not read models cache: ${String(e?.message || e)}`);
-        process.exit(1);
-      }
-      process.exit(0);
-    }
-    // generic/workbuddy: live fetch via provider listModels
-    try {
-      const { createGenericProvider } = await import("../src/providers/generic.js");
-      const { createWorkbuddyProvider } = await import("../src/providers/workbuddy.js");
-      const { isModelAllowed } = await import("../src/state.js");
-      const baseUrl = cfg?.baseUrl || (id === "workbuddy" ? "https://copilot.tencent.com" : "");
-      const keys = loadProviderKeys(id);
-      const auths = cfg?.auths || [];
-      let provider;
-      if (id === "workbuddy") {
-        provider = createWorkbuddyProvider({ baseUrl, apiKeys: keys, auths, file: defaultStateFile() });
-      } else {
-        if (!baseUrl) {
-          console.error(`provider ${id}: missing baseUrl — set via: mslxdff -provider ${id} set-url <baseUrl>`);
-          process.exit(1);
-        }
-        provider = createGenericProvider({ id, baseUrl, apiKeys: keys, file: defaultStateFile() });
-      }
-      const all = await provider.listModels();
-      // show 全部上游模型，仅标注是否被 allowlist 放行（不拦截展示）
-      const markAllowed = (mid) => {
-        const raw = String(mid || "").includes("/") ? String(mid).split("/").slice(1).join("/") : String(mid);
-        const checkRaw = mid.startsWith(`${id}/`) ? mid.slice(id.length + 1) : raw;
-        return isModelAllowed(id, checkRaw);
-      };
-      if (wantsJson) {
-        // --json 仍按 allowlist 过滤（给脚本消费可用模型）
-        const filtered = all.filter((m) => markAllowed(m.id));
-        console.log(JSON.stringify({ object: "list", data: filtered }, null, 2));
-      } else {
-        const allowedCount = all.filter((m) => markAllowed(m.id)).length;
-        console.log(`${id} models (${all.length} total, ${allowedCount} ✓ allowed${allowedCount !== all.length ? `, ${all.length - allowedCount} x blocked by allowlist` : ""}):`);
-        const fmtPrice = (m) => {
-          const c = String(m.credits || "").trim();
-          if (c) {
-            // "x0.00 credits" / "x0.00" → 统一成 "x0.00"
-            const m0 = c.match(/x\s*([\d.]+)/i);
-            if (m0) return `x${m0[1]}`;
-            return c.replace(/\s*credits\s*/gi, "").trim().replace(/\s+/g, " ");
-          }
-          if (m.pricing && typeof m.pricing === "object") {
-            const p = m.pricing.prompt ?? m.pricing.input ?? m.pricing.completion ?? "";
-            if (p) return String(p);
-          }
-          if (m.price != null && String(m.price).trim()) return String(m.price).trim();
-          if (String(m.id).endsWith("/auto")) return "浮动";
-          return "—";
-        };
-        const fmtBadge = (m) => {
-          const tags = Array.isArray(m.tags) ? m.tags : [];
-          const b = tags.find((t) => String(t).includes("限时免费") || String(t).toLowerCase().includes("free"));
-          if (!b) return "";
-          const part = String(b).split(":")[1];
-          return part ? ` [${part}]` : ` [${b}]`;
-        };
-        // 按 credits 升序已在 provider 排好序，展示时对齐价格列便于分辨
-        const idW = Math.max(22, ...all.map((m) => String(m.id).length)) + 2;
-        const priceW = Math.max(6, ...all.map((m) => fmtPrice(m).length)) + 2;
-        for (const m of all) {
-          const ok = markAllowed(m.id);
-          const price = fmtPrice(m);
-          const badge = fmtBadge(m);
-          const name = m.name ? ` ${m.name}` : "";
-          const blocked = ok ? "" : "  [blocked — allowlist]";
-          const line = `  ${ok ? "✓" : "x"} ${String(m.id).padEnd(idW)}${String(price).padEnd(priceW)}${name}${badge}${blocked}`;
-          console.log(line);
-        }
-        if (!all.length) console.log(`  (no models — check baseUrl/keys or try: curl ${baseUrl}/models)`);
-        else if (allowedCount === 0) console.log(`  tip: all blocked — mslxdff -provider ${id} allowAny on  或  allowlist set <model...>`);
-        else if (allowedCount !== all.length) console.log(`  tip: blocked 仅影响 /v1/chat 调用，展示已全量列出`);
-      }
-      try { await provider.close?.(); } catch {}
-    } catch (e) {
-      console.error(`could not list ${id} models: ${String(e?.message || e)}`);
-      process.exit(1);
-    }
-    process.exit(0);
-  }
-  if (sub === "list" || sub === "status") {
-    const keys = loadProviderKeys(id);
-    const cfg = loadProviderConfig(id);
-    const { loadProviderAllowedModels, loadProviderAllowAnyModels } = await import("../src/state.js");
-    const allowed = loadProviderAllowedModels(id);
-    const allowAny = loadProviderAllowAnyModels(id);
-    const baseUrl = cfg?.baseUrl || "";
-    if (baseUrl) console.log(`provider: ${id}  baseUrl: ${baseUrl}`);
-    else console.log(`provider: ${id}${id === "openrouter" ? " (built-in baseUrl: https://openrouter.ai/api/v1)" : ""}`);
-    if (keys.length) {
-      console.log(`  keys: ${keys.length} key${keys.length > 1 ? "s" : ""}`);
-      keys.forEach((k, i) => console.log(`  [${i + 1}]  ${k.slice(0, 4)}…${k.slice(-4)} (${k.length} chars)`));
-      console.log(`  remove by: mslxdff -provider ${id} remove <seq> [seq...] | <key-value>`);
-    } else {
-      console.log(`  keys: (no keys configured)`);
-    }
-    console.log(`  share keys to peers:   ${loadProviderShareKeys(id) ? "ON" : "off"}   (mslxdff -provider ${id} share on|off)`);
-    console.log(`  allowAnyModels: ${allowAny ? "ON (empty allowlist = allow all)" : "OFF (empty allowlist = BLOCK ALL)"}  (mslxdff -provider ${id} allowAny on|off)`);
-    if (allowed.length) console.log(`  allowedModels: ${allowed.length} (${allowed.join(", ")})  — only these can be used`);
-    else console.log(`  allowedModels: (none — ${allowAny ? "allow all" : "BLOCK ALL"})  (mslxdff -provider ${id} allowlist set <model...>  or  allowAny on)`);
-    if (baseUrl) console.log(`  set url: mslxdff -provider ${id} set-url <baseUrl>`);
-    console.log(`  NOTE: opencode is the default provider and can never be shared`);
-    process.exit(0);
-  }
-  if (sub === "add") {
-    const key = rest[1];
-    if (!key) {
-      console.error("usage: mslxdff -provider openrouter add <key>");
-      process.exit(1);
-    }
-    const trimmed = String(key).trim();
-    const curKeys = loadProviderKeys(id);
-    if (curKeys.some((k) => String(k).trim() === trimmed)) {
-      console.log(`key already exists for ${id} (${trimmed.slice(0, 4)}…${trimmed.slice(-4)}), skipped — still ${curKeys.length} key(s)`);
-      console.log(`  use: mslxdff -provider ${id} list  to see keys`);
-      process.exit(0);
-    }
-    // 通用供应商：keys 存 providerConfigs，需保留 baseUrl
-    const configs = loadProviderConfigs();
-    if (configs[id]) {
-      const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
-      const keys = [...new Set([...(cur.keys || []), trimmed].filter(Boolean))];
-      saveProviderConfig(id, { baseUrl: cur.baseUrl || "", keys });
-      console.log(`added ${id} API key (now ${keys.length} total) — restart daemon to activate`);
-    } else {
-      const added = addProviderKey(id, key);
-      console.log(`added ${id} API key (now ${added.length} total) — restart daemon to activate`);
-    }
-    process.exit(0);
-  }
-  if (sub === "remove") {
-    const targets = rest.slice(1).filter((k) => !k.startsWith("-"));
-    if (!targets.length) {
-      console.error("usage: mslxdff -provider openrouter remove <seq|key> [seq|key ...]   (seq = index shown by 'list')");
-      process.exit(1);
-    }
-    const current = loadProviderKeys(id);
-    const toRemove = [];
-    for (const raw of targets.flatMap((t) => String(t).split(","))) {
-      const t = raw.trim();
-      if (!t) continue;
-      if (/^\d+$/.test(t)) {
-        const seq = Number(t);
-        const idx = seq - 1;
-        if (Number.isInteger(seq) && idx >= 0 && idx < current.length) toRemove.push(current[idx]);
-        else console.log(`  ! no key at sequence ${seq} (provider has ${current.length}) — skipped`);
-      } else {
-        toRemove.push(t);
-      }
-    }
-    if (!toRemove.length) {
-      console.log("nothing to remove");
-      process.exit(0);
-    }
-    const configs = loadProviderConfigs();
-    let remaining;
-    if (configs[id]) {
-      const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
-      const set = new Set([...new Set(toRemove)].map((k) => String(k).trim()));
-      const keys = (cur.keys || []).filter((k) => !set.has(k));
-      saveProviderConfig(id, { baseUrl: cur.baseUrl || "", keys });
-      remaining = keys;
-    } else {
-      remaining = removeProviderKeys(id, [...new Set(toRemove)]);
-    }
-    console.log(`removed ${current.length - remaining.length} ${id} API key(s) (now ${remaining.length} total) — restart daemon to activate`);
-    process.exit(0);
-  }
-  if (sub && !sub.startsWith("-")) {
-    const keys = rest.filter((k) => !k.startsWith("-"));
-    if (!keys.length) {
-      console.error("no key given");
-      process.exit(1);
-    }
-    const configs = loadProviderConfigs();
-    if (configs[id]) {
-      const cur = loadProviderConfig(id) || { baseUrl: "", keys: [] };
-      const clean = [...new Set(keys.map((k) => String(k).trim()).filter(Boolean))];
-      saveProviderConfig(id, { baseUrl: cur.baseUrl || "", keys: clean });
-      console.log(`set ${id} API keys (${clean.length}: ${clean.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")}) — restart daemon to activate`);
-    } else {
-      saveProviderKeys(id, keys);
-      console.log(`set ${id} API keys (${keys.length}: ${keys.map((k) => `${k.slice(0, 4)}…${k.slice(-4)}`).join(", ")}) — restart daemon to activate`);
-    }
-    process.exit(0);
-  }
-  // 交互式隐藏输入：多行直到空行，逐一追加到现有 keys
-  if (process.stdin.isTTY && process.stdout.isTTY) {
-    const readline = await import("node:readline/promises");
-    const rl = readline.createInterface({ input: process.stdin, output: process.stdout, terminal: true });
-    console.log(`Enter ${id} API keys, one per line (input hidden). Blank line to finish:`);
-    const existing = loadProviderKeys(id);
-    const collected = [];
-    for (;;) {
-      const key = await rl.question(existing.length || collected.length ? "" : "");
-      const clean = String(key || "").trim();
-      if (!clean) break;
-      collected.push(clean);
-    }
-    rl.close();
-    if (!collected.length) {
-      console.log("empty input — nothing changed");
-      process.exit(0);
-    }
-    for (const k of collected) addProviderKey(id, k);
-    const total = (await import("../src/state.js")).loadProviderKeys(id).length;
-    console.log(`added ${collected.length} ${id} API key(s) (now ${total} total) — restart daemon to activate`);
-    process.exit(0);
-  }
-  console.error("provide keys inline (non-TTY): mslxdff -provider openrouter <key1> [key2 ...]");
-  process.exit(1);
-}
-
-// 交互式选择器：↑/↓ 移动，Enter 确认，q/Esc 取消；ANSI 原地重绘
-async function pickInteractive(items, startCursor = 0) {
-  const { renderChooser, renderChooserHelp, parseKey } = await import("../src/chooser.js");
-  let cursor = Math.min(Math.max(startCursor, 0), items.length - 1);
-  const draw = () => {
-    const lines = [...renderChooser(items, cursor), ...renderChooserHelp()];
-    // PowerShell 兼容：\x1b[2J 清屏 + \x1b[H 回到左上，比 \x1b[G\x1b[J 更可靠
-    process.stdout.write("\x1b[2J\x1b[H" + lines.join("\n"));
-  };
-  draw();
-  return new Promise((resolve) => {
-    const wasRaw = process.stdin.isRaw;
-    process.stdin.setRawMode(true);
-    process.stdin.resume();
-    process.stdin.setEncoding("utf8");
-    const cleanup = () => {
-      process.stdin.removeListener("data", onData);
-      process.stdin.setRawMode(false);
-      process.stdin.pause();
-      process.stdout.write("\n");
-    };
-    const onData = (chunk) => {
-      const key = parseKey(String(chunk));
-      if (key === "up") {
-        cursor = (cursor - 1 + items.length) % items.length;
-        draw();
-      } else if (key === "down") {
-        cursor = (cursor + 1) % items.length;
-        draw();
-      } else if (key === "enter") {
-        cleanup();
-        resolve(items[cursor].id);
-      } else if (key === "cancel") {
-        cleanup();
-        resolve(null);
-      }
-    };
-    process.stdin.on("data", onData);
-  });
-}
-
-// 多选勾选：↑/↓ 移动，Space 勾选/取消，Enter 保存，q/Esc 取消（返回 Set 或 null）
-async function pickInteractiveMulti(items, initialPicked = new Set(), startCursor = 0) {
-  const { renderChooser, renderChooserHelp, parseKey } = await import("../src/chooser.js");
-  let cursor = Math.min(Math.max(startCursor, 0), items.length - 1);
-  const picked = new Set(items.filter((it) => initialPicked.has(it.id)).map((it) => it.id));
-  const draw = () => {
-    const rows = items.map((it, i) => ({ ...it, picked: picked.has(it.id) }));
-    const lines = [...renderChooser(rows, cursor, { multi: true }), ...renderChooserHelp(true)];
-    process.stdout.write("\x1b[2J\x1b[H" + lines.join("\n"));
-  };
-  draw();
-  return new Promise((resolve) => {
-    const wasRaw = process.stdin.isRaw;
-    process.stdin.setRawMode(true);
-    process.stdin.resume();
-    process.stdin.setEncoding("utf8");
-    const cleanup = () => {
-      process.stdin.removeListener("data", onData);
-      process.stdin.setRawMode(false);
-      process.stdin.pause();
-      process.stdout.write("\n");
-    };
-    const onData = (chunk) => {
-      const key = parseKey(String(chunk));
-      if (key === "up") {
-        cursor = (cursor - 1 + items.length) % items.length;
-        draw();
-      } else if (key === "down") {
-        cursor = (cursor + 1) % items.length;
-        draw();
-      } else if (key === "space") {
-        const id = items[cursor].id;
-        if (picked.has(id)) picked.delete(id);
-        else picked.add(id);
-        draw();
-      } else if (key === "enter") {
-        cleanup();
-        resolve(new Set(picked));
-      } else if (key === "cancel") {
-        cleanup();
-        resolve(null);
-      }
-    };
-    process.stdin.on("data", onData);
-  });
-}
-
-// -debug: stop the background daemon and run the server in THIS terminal
-// (foreground), printing every event to stdout in real time via the in-memory
-// event bus — no filesystem polling. Ctrl+C / SIGTERM restarts the daemon in
-// the background, then exits. See the daemon body below for the stream wiring.
-if (args.includes("-debug") || args.includes("--debug")) {
-  // 先停旧 daemon，再清日志，保持 debug 输出干净（仅本次会话）
-  const { stopped, pid } = stopDaemon();
-  if (stopped) console.log(`[debug] stopped background daemon (pid ${pid})`);
-  try {
-    const dir = logDir();
-    const toClear = [eventsFile(), callsFile(), errorsFile(), logFile()];
-    let cleared = 0;
-    for (const f of toClear) {
-      try {
-        if (existsSync(f)) {
-          writeFileSync(f, "");
-          cleared++;
-        }
-      } catch {}
-    }
-    console.log(`[debug] 已清理旧日志 ${cleared} 个文件 (${dir})，本次会话干净输出`);
-  } catch {}
-  console.log("--- live (Ctrl+C: stop debugging and restore background daemon) ---");
-  process.env.MSLXDFF_DEBUG = "1";
-  process.env.MSLXDFF_DAEMON = "1";
-  // fall through to the daemon body below — no process.exit() here
-}
-
-// -creategroup <name> | -group create <name> | -group sync | -group leave <name> | -group list |
-// -addtogroup <leader-host> <name> | -resetban [ip]
-const createGroupArg = argValue("-creategroup", "--creategroup") || groupIs("create", args);
-if (createGroupArg) {
-  const groups = createGroupsService({});
-  const peers = createPeersService({});
-  const name = createGroupArg;
-  const { created } = groups.create(name); // the group name is the password
-  markJoined({ name, leaderUrl: "", myUrl: "", memberName: "leader" });
-  const synced = await syncAllJoinedGroups({ peers, groups });
-  const s = synced.find((x) => x.name === name);
-  console.log(created ? `group created: ${name}` : `group already exists: ${name}`);
-  console.log(`members on this node: ${s ? `${s.total} (failover: ${s.added})` : "?"}`);
-  console.log(`others join with: mslxdff -addtogroup <this-node-host> ${name}`);
-  process.exit(0);
-}
-
-function groupIs(action, argv) {
-  const idx = argv.indexOf("-group");
-  if (idx < 0) return null;
-  return argv[idx + 1] === action ? argv[idx + 2] : null;
-}
-
-const groupCmd = argValue("-group", "--group");
-if (groupCmd && groupCmd !== "create") {
-  const groups = createGroupsService({});
-  const peers = createPeersService({});
-  const rest = args.slice(args.indexOf("-group") + 1);
-  const [action, a] = rest;
-  if (action === "sync") {
-    const synced = await syncAllJoinedGroups({ peers, groups });
-    if (!synced.length) {
-      console.log("not joined to any group (use -addtogroup or -creategroup)");
-    } else {
-      for (const s of synced) {
-        if (s.error) console.log(`${s.name}: sync failed — ${s.error}`);
-        else console.log(`${s.name}: ${s.total} member(s), ${s.added} failover target(s) configured`);
-      }
-    }
-  } else if (action === "leave" && a) {
-    const before = loadGroupsJoined().filter((g) => g.name === a).length;
-    saveGroupsJoined(loadGroupsJoined().filter((g) => g.name !== a));
-    const removed = peers.removeByGroup(a);
-    console.log(before ? `left group "${a}" (${removed} member(s) removed)` : `not a member of group "${a}"`);
-  } else if (action === "list") {
-    const joinedList = loadGroupsJoined();
-    if (!joinedList.length) {
-      console.log("no groups on this node");
-      process.exit(0);
-    }
-    const { token } = await loadToken();
-    const fetchImpl = (url, opts) => fetch(url, { ...opts, signal: AbortSignal.timeout(1500) });
-    for (const g of joinedList) {
-      const isLeader = !g.leaderUrl;
-      let members;
-      if (isLeader) {
-        members = groups.list()[g.name]?.members || {};
-      } else {
-        try {
-          members = await refreshGroupMembers(g.name, {
-            leaderUrl: g.leaderUrl,
-            memberName: g.memberName,
-            url: g.myUrl,
-            token,
-            fetchImpl,
-          });
-        } catch (err) {
-          console.log(`${g.name}  (members unavailable — leader unreachable: ${errMsg(err)})`);
-          continue;
-        }
-      }
-      const entries = Object.entries(members).filter(([id]) => id !== "leader");
-      console.log(`${g.name}  (${entries.length} member${entries.length === 1 ? "" : "s"})`);
-      // probe every member endpoint concurrently for reachability + latency;
-      // display order = state order so the sequence numbers stay stable for -group remove
-      // broadband members (relay://) are not probed — they are reachable via leader
-      const probes = await Promise.all(
-        entries.map(([id, m]) => probeHealth({ id, url: m?.url || id, kind: m?.kind, lastSeen: m?.lastSeen, publicIp: m?.publicIp }))
-      );
-      const leaderEntry = members.leader ? Object.entries(members).find(([id]) => id === "leader") : null;
-      const leaderProbe = leaderEntry ? await probeHealth({ id: "leader", url: leaderEntry[1].url }) : null;
-      const display = leaderProbe ? [...probes, leaderProbe] : probes;
-      let seq = 0;
-      for (const r of display) {
-        const m = entries.find(([eid]) => eid === r.id)?.[1] || (r.id === "leader" ? leaderEntry?.[1] : null);
-        const isBb = r.kind === "broadband" || String(r.url || "").startsWith("relay://") || m?.kind === "broadband";
-        if (isBb) {
-          const ago = r.lastSeen ? `${Math.round((Date.now() - r.lastSeen) / 1000)}s ago` : "no heartbeat yet";
-          const ip = r.publicIp || m?.publicIp || "?";
-          const via = r.stale ? "stale" : `via leader ${ago}`;
-          const stateBb = `${via} ip=${ip}`;
-          if (r.id === "leader") {
-            console.log(`  leader  ${r.url}  ${stateBb}`);
-            continue;
-          }
-          seq += 1;
-          const label = r.id && r.id !== r.url ? `  [${r.id}]` : "";
-          console.log(`  ${seq}. ${r.url}${label}  [broadband] ${stateBb}`);
-          continue;
-        }
-        const state = r.fail ? `fail  ${r.fail}` : `ok    ${r.ms}ms`;
-        if (r.id === "leader") {
-          console.log(`  leader  ${r.url}  ${state}`);
-          continue;
-        }
-        seq += 1;
-        const label = r.id && r.id !== r.url ? `  [${r.id}]` : "";
-        console.log(`  ${seq}. ${r.url}${label}  ${state}`);
-      }
-    }
-    console.log(`\njoined groups (${joinedList.length}):`);
-    for (const g of joinedList) console.log(`  ${g.name}  ${g.leaderUrl || "(this node is the leader)"}`);
-  } else if (action === "remove" && a) {
-    // leader-only: kick a member by its list sequence number (1-based, leader excluded)
-    const seq = Number(a);
-    if (!Number.isInteger(seq) || seq < 1) {
-      console.error(`usage: mslxdff -group remove <seq>`);
-      process.exit(1);
-    }
-    const joined = loadGroupsJoined().find((g) => !g.leaderUrl);
-    if (!joined) {
-      console.error("group remove requires being the leader — this node leads no group");
-      process.exit(1);
-    }
-    const members = groups.list()[joined.name]?.members || {};
-    const entries = Object.entries(members).filter(([id]) => id !== "leader");
-    const target = entries[seq - 1];
-    if (!target) {
-      console.error(`member #${seq} not found — group "${joined.name}" has ${entries.length} member(s)`);
-      process.exit(1);
-    }
-    const [id, m] = target;
-    try {
-      const removed = groups.removeMember(joined.name, { url: m.url });
-      if (removed) console.log(`removed ${m.url} from "${joined.name}"`);
-      else console.log(`member ${m.url} already gone from "${joined.name}"`);
-    } catch (err) {
-      console.error(`remove failed: ${errMsg(err)}`);
-      process.exit(1);
-    }
-  } else {
-    console.error("usage: mslxdff -group sync | -group leave <name> | -group list | -group remove <seq> | -creategroup <name>");
-  }
-  process.exit(0);
-}
-
-// -addtogroup <leader-host> <name> [--broadband]
-const addToGroupIdx = args.findIndex((x) => x === "-addtogroup" || x === "--addtogroup");
-if (addToGroupIdx >= 0) {
-  const rawArgs = args.slice(addToGroupIdx + 1);
-  const isBroadband = rawArgs.includes("--broadband");
-  const filtered = rawArgs.filter((a) => a !== "--broadband");
-  const [leaderHost, name] = filtered;
-  if (!leaderHost || !name || filtered.length > 2) {
-    console.error("usage: mslxdff -addtogroup <leader-host> <name> [--broadband]");
-    process.exit(1);
-  }
-  const groups = createGroupsService({});
-  const peers = createPeersService({});
-  const myToken = (await loadToken()).token;
-  const leaderUrl = leaderHost.includes("://")
-    ? leaderHost.replace(/\/+$/, "")
-    : `http://${leaderHost}${leaderHost.includes(":") ? "" : ":8989"}`;
-  const kind = isBroadband ? "broadband" : "static";
-  let joinBody;
-  if (isBroadband) {
-    const relayId = `relay://${myToken.slice(0, 8)}`;
-    joinBody = { name, key: name, leaderUrl, url: relayId, token: myToken, kind: "broadband" };
-  } else {
-    const myPort = effectivePort();
-    joinBody = { name, key: name, leaderUrl, myPort, token: myToken, kind: "static" };
-  }
-  try {
-    const res = await fetch(`${leaderUrl}/v1/groups/join`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(joinBody),
-    });
-    if (!res.ok) {
-      const text = await res.text().catch(() => "");
-      throw new Error(`join failed (HTTP ${res.status}): ${text}`);
-    }
-    const data = await res.json();
-    const myUrl = data.you?.url || joinBody.url || "";
-    const memberName = isBroadband ? myUrl : myUrl;
-    markJoined({ name, leaderUrl, myUrl, memberName, kind });
-    const synced = await syncAllJoinedGroups({ peers, groups });
-    const s = synced.find((x) => x.name === name);
-    console.log(`joined group "${name}" at ${leaderUrl}${isBroadband ? " [broadband]" : ""}`);
-    if (s?.error) console.log(`  local failover setup failed: ${s.error}`);
-    else console.log(`  ${s?.added ?? 0} failover target(s) configured${isBroadband ? " (broadband via leader, local 127.0.0.1)" : ""}`);
-  } catch (err) {
-    console.error(`join failed: ${err.message}`);
-    process.exit(1);
-  }
-  process.exit(0);
-}
-
-// -resetban [ip]
-const resetBanArg = argValue("-resetban", "--resetban");
-if (resetBanArg !== null || args.includes("-resetban") || args.includes("--resetban")) {
-  const bans = createBansService({});
-  const ip = resetBanArg || null;
-  bans.clear(ip || undefined);
-  console.log(ip ? `ban cleared for ${ip}` : "all bans cleared");
-  process.exit(0);
-}
-
-function markJoined(entry) {
-  const { name } = entry;
-  if (!entry.kind) entry.kind = "static";
-  const list = loadGroupsJoined().filter((g) => g.name !== name);
-  saveGroupsJoined([...list, entry]);
-}
-
-// -leavegroup | -leave-groups: leave every joined group as a member.
-// Leaders cannot "leave" — they must disband with -delgroup <name>.
-const leaveAll = args.includes("-leavegroup") || args.includes("--leavegroup") || args.includes("-leave-groups");
-if (leaveAll) {
-  const peers = createPeersService({});
-  const joined = loadGroupsJoined();
-  if (!joined.length) {
-    console.log("not joined to any group");
-    process.exit(0);
-  }
-  const myToken = (await loadToken()).token;
-  const leaders = [];
-  for (const g of joined) {
-    if (g.leaderUrl) {
-      // member: deregister from the leader so we stop showing up in -group list
-      const peersRemoved = peers.removeByGroup(g.name);
-      try {
-        const res = await fetch(`${g.leaderUrl}/v1/groups/leave`, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${myToken}`,
-          },
-          body: JSON.stringify({ name: g.name }),
-        });
-        if (res.ok) console.log(`${g.name}: left (deregistered from ${g.leaderUrl})`);
-        else console.log(`${g.name}: left locally (leader said: ${await res.text().catch(() => `HTTP ${res.status}`)})`);
-      } catch (err) {
-        console.log(`${g.name}: left locally (leader unreachable: ${errMsg(err)})`);
-      }
-    } else {
-      leaders.push(g.name);
-    }
-  }
-  const left = joined.filter((g) => g.leaderUrl).map((g) => g.name);
-  saveGroupsJoined(loadGroupsJoined().filter((g) => !left.includes(g.name)));
-  console.log(`left ${left.length} group(s)`);
-  if (leaders.length) {
-    console.log(`\nskipped ${leaders.length} group(s) where this node is the leader:`);
-    for (const n of leaders) console.log(`  ${n}  — leaders can't leave; disband it with: mslxdff -delgroup ${n}`);
-  }
-  process.exit(0);
-}
-
-// -delgroup <name>: a leader disbands one of its groups (local groups state +
-// any member records). Fails if this node is not the leader of that group.
-const delGroupName = argValue("-delgroup", "--delgroup");
-if (delGroupName) {
-  const groups = createGroupsService({});
-  const peers = createPeersService({});
-  const local = groups.list()[delGroupName];
-  if (!local) {
-    const joined0 = loadGroupsJoined().find((g) => g.name === delGroupName);
-    if (joined0?.leaderUrl) {
-      console.log(`"${delGroupName}" is led by ${joined0.leaderUrl} — you are a member, use -leavegroup to leave it`);
-    } else if (joined0) {
-      console.log(`"${delGroupName}" exists in local state but has no group definition — nothing to delete`);
-    } else {
-      console.log(`group "${delGroupName}" not found on this node`);
-    }
-    process.exit(1);
-  }
-  const disbanded = groups.delete(delGroupName);
-  const members = Object.values(disbanded?.members || {});
-  peers.removeByGroup(delGroupName);
-  saveGroupsJoined(loadGroupsJoined().filter((g) => g.name !== delGroupName));
-  console.log(`group "${delGroupName}" disbanded (${members.length} member${members.length === 1 ? "" : "s"} removed)`);
-  process.exit(0);
-}
-
-function errMsg(err) { return String(err?.message || err); }
-
-// Probe a member's health endpoint concurrently (v1/health preferred,
-// falling back to /health). Returns { id, url, ms, rank } or { id, url, fail }.
-// broadband relay:// members are not probed — they are reachable via leader relay.
-async function probeHealth({ id, url, kind, lastSeen, publicIp } = {}) {
-  if (!url) return { id, url, fail: "no url", rank: 3 };
-  const isBb = kind === "broadband" || String(url).startsWith("relay://");
-  if (isBb) {
-    const staleMs = Number(process.env.MSLXDFF_BROADBAND_STALE_MS) > 0 ? Number(process.env.MSLXDFF_BROADBAND_STALE_MS) : 90_000;
-    const stale = typeof lastSeen === "number" ? Date.now() - lastSeen > staleMs : true;
-    return { id, url, kind: "broadband", lastSeen, publicIp, stale, rank: stale ? 2 : 0 };
-  }
-  const base = String(url).replace(/\/+$/, "");
-  const startedAt = Date.now();
-  try {
-    const res = await fetch(`${base}/health`, { signal: AbortSignal.timeout(HEALTH_TIMEOUT_MS) });
-    if (!res.ok) return { id, url: base, fail: `HTTP ${res.status}`, rank: 2 };
-    return { id, url: base, ms: Date.now() - startedAt, rank: 0 };
-  } catch (err) {
-    return { id, url: base, fail: errMsg(err), rank: 2 };
-  }
-}
-
-function readModelsCache(cacheFile) {
-  try {
-    return JSON.parse(readFileSync(cacheFile, "utf8"));
-  } catch {
-    return null;
-  }
-}
-
-// Sync every joined group into the local peer list. Leaders read their local
-// groups state; members re-register with the leader (idempotent) to get the
-// freshest member list. Returns per-group results.
-async function syncAllJoinedGroups({ peers, groups }) {
-  const joined = loadGroupsJoined();
-  const myToken = (await loadToken()).token;
-  const results = [];
-  for (const g of joined) {
-    try {
-      if (g.leaderUrl) {
-        const members = await refreshGroupMembers(g.name, {
-          leaderUrl: g.leaderUrl,
-          memberName: g.memberName,
-          url: g.myUrl,
-          token: myToken,
-          kind: g.kind,
-        });
-        results.push({
-          name: g.name,
-          ...syncPeersFromMembers({ peers, members, myUrl: g.myUrl, group: g.name }),
-        });
-      } else {
-        // this node is the leader: […] own entry is always skipped
-        const members = groups.list()[g.name]?.members ?? {};
-        results.push({
-          name: g.name,
-          ...syncPeersFromMembers({ peers, members, myUrl: g.myUrl, group: g.name, skipIds: ["leader"] }),
-        });
-      }
-    } catch (err) {
-      results.push({ name: g.name, error: errMsg(err) });
-    }
-  }
-  return results;
-}
-
-// Upgrade-aware handling of a running daemon: keep it when it already runs
-// our version, otherwise stop it so the spawn below takes over. Cleans up
-// stale pid files (daemon died without -stop).
-function stopDaemonIfOutdated() {
-  const pid = readPid();
-  if (!pid) return;
-  if (!isPidAlive(pid)) {
-    console.log(`daemon pid ${pid} is stale (not running) — starting fresh`);
-    return;
-  }
-  const runningVersion = readPidVersion();
-  if (runningVersion === VERSION) return;
-  console.log(
-    runningVersion
-      ? `daemon running v${runningVersion} — upgrading to v${VERSION}, restarting...`
-      : `daemon version unknown — restarting with v${VERSION}...`
-  );
-  stopDaemon();
-}
-
-// -port N: persist the port, then restart the daemon on it if one is running.
-// Skip when we ARE the daemon child (it already carries the port via args).
-const portArg = argValue("-port", "--port");
-if (portArg && !process.env.MSLXDFF_DAEMON) {
-  const port = Number(portArg);
-  if (!Number.isInteger(port) || port <= 0 || port > 65535) {
-    console.error(`invalid port: ${portArg}`);
-    process.exit(1);
-  }
-  setPort(port);
-  const daemon = readPid();
-  if (daemon) {
-    stopDaemon();
-    startDaemon(["-port", String(port)]);
-    await waitForHealth(port, 4000);
-    console.log(`mslxdff restarted on port ${port} (pid ${readPid()})`);
-    console.log(`endpoint:   http://localhost:${port}/v1`);
-  } else {
-    console.log(`port saved: ${port} (daemon not running; takes effect on next start)`);
-  }
-  process.exit(0);
-}
-
-if (args.includes("-d") || args.includes("--daemon")) {
-  if (!process.env.MSLXDFF_DAEMON) {
-    // foreground: spawn the detached background instance, then wait for health
-    const port = effectivePort();
-    stopDaemonIfOutdated();
-    const spawnedPid = startDaemon(args.filter((a) => a !== "-d" && a !== "--daemon"));
-    await waitForHealth(port, 4000);
-    console.log(`mslxdff daemon started (pid ${spawnedPid})`);
-    console.log(`log: ${logFile()}`);
-    console.log(`pid: ${pidFile()}`);
-    process.exit(0);
-  }
-  // we ARE the daemon; stdout/stderr already point at the log file via startDaemon stdio
-}
-
-// Bare run: show status + help when the daemon is already up; otherwise spawn it
-// as a background daemon and exit — never holds the terminal (npx-friendly).
-if (!process.env.MSLXDFF_DAEMON) {
-  const pid = readPid();
-  if (pid && isPidAlive(pid) && readPidVersion() === VERSION) {
-    await printStatus();
-    printHelp();
-    process.exit(0);
-  }
-  const port = effectivePort();
-  stopDaemonIfOutdated();
-  const spawnedPid = startDaemon([]);
-  await waitForHealth(port, 4000);
-  console.log(`mslxdff v${VERSION} started as a background daemon (pid ${spawnedPid})`);
-  console.log(`endpoint:   http://localhost:${port}/v1`);
-  console.log(`log:        ${logFile()}`);
-  console.log(`pid:        ${pidFile()}`);
-  console.log(`status:     run \`mslxdff\` again (or \`mslxdff -status\`)`);
-  process.exit(0);
-}
-
-const { token, created } = await loadToken();
-// 插件系统：加载（在 upstream 创建前，插件可整体替换上游实现）
-// 双目录：<安装目录>/plugins/（官方插件，随包分发）+ ~/.config/mslxdff/plugins/（用户自定义，升级不丢）
-const pkgRoot = dirname(dirname(fileURLToPath(import.meta.url)));
-const pluginDirs = resolvePluginDirs({ pkgRoot });
-const { plugins: loadedPlugins, errors: pluginErrors } = await loadPlugins({ dirs: pluginDirs });
-for (const e of pluginErrors) {
-  console.log(`plugin load failed: ${e.file} — ${e.error}`);
-  appendEvent({ ts: Date.now(), type: "plugin-load-error", file: e.file, error: e.error });
-}
-if (loadedPlugins.length) {
-  console.log(`plugins loaded (${loadedPlugins.length}): ${loadedPlugins.map((p) => `${p.name}${p.version ? `@${p.version}` : ""}`).join(", ")}`);
-  appendEvent({ ts: Date.now(), type: "plugins-loaded", plugins: loadedPlugins.map((p) => ({ name: p.name, version: p.version })) });
-}
-// 多供应商通道：默认 opencode + 可选 openrouter（MSLXDFF_OPENROUTER_KEY 启用）
-// 插件 createUpstream 仍是"整体替换式"外部 provider（单通道，保留原语义）
-const upstreamHooks = loadedPlugins.length
-  ? (name, ctx) => runHook(loadedPlugins, name, ctx)
-  : null;
-const providerPlugin = loadedPlugins.find((p) => typeof p.createUpstream === "function");
-let upstream;
-const baseUrl = process.env.UPSTREAM_BASE_URL || "https://opencode.ai";
-let providers = [];
-if (providerPlugin) {
-  // 插件整体替换：沿用旧单通道路径
-  if (!upstream) {
-    try {
-      upstream = await providerPlugin.createUpstream({ baseUrl, authToken: process.env.UPSTREAM_AUTH_TOKEN || "public", env: process.env });
-      console.log(`upstream provider replaced by plugin: ${providerPlugin.name}`);
-      appendEvent({ ts: Date.now(), type: "plugin-upstream-active", plugin: providerPlugin.name });
-    } catch (err) {
-      console.log(`plugin upstream (${providerPlugin.name}) failed: ${errMsg(err)} — falling back to default`);
-      appendEvent({ ts: Date.now(), type: "plugin-upstream-error", plugin: providerPlugin.name, error: errMsg(err) });
-    }
-  }
-  if (!upstream) upstream = createUpstreamClient({ hooks: upstreamHooks });
-} else {
-  // 内置多 Provider：opencode 恒启用，openrouter 有 key 才启用
-  const opencodeClient = createUpstreamClient({ hooks: upstreamHooks });
-  const opencodeModels = createModelsService({
-    baseUrl,
-    headers: opencodeClient.headers,
-    refreshMs: refreshIntervalMs(),
-    cacheFile: join(logDir(), "models.json"),
-  });
-  providers.push(createOpenCodeProvider({ upstream: opencodeClient, modelsService: opencodeModels }));
-  const orKeys = loadProviderKeys("openrouter");
-  if (orKeys.length) {
-    const { createOpenRouterProvider } = await import("../src/providers/openrouter.js");
-    providers.push(createOpenRouterProvider({ apiKeys: orKeys }));
-    console.log(`provider enabled: openrouter (${orKeys.length} key${orKeys.length > 1 ? "s" : ""})`);
-    appendEvent({ ts: Date.now(), type: "provider-enabled", provider: "openrouter", keys: orKeys.length });
-  }
-  // 通用 OpenAI 兼容供应商：读 providerConfigs，逐个创建 generic provider
-  const { loadProviderConfigs } = await import("../src/state.js");
-  const genericConfigs = loadProviderConfigs();
-  for (const [gid, cfg] of Object.entries(genericConfigs)) {
-    if (gid === "opencode" || gid === "openrouter") continue;
-    if (gid === "workbuddy") {
-      const base = String(cfg?.baseUrl || "").trim() || "https://copilot.tencent.com";
-      const keys = Array.isArray(cfg?.keys) ? cfg.keys.filter((k) => typeof k === "string" && k.trim()) : [];
-      const auths = Array.isArray(cfg?.auths) ? cfg.auths : [];
-      if (!keys.length) continue;
-      try {
-        const { createWorkbuddyProvider } = await import("../src/providers/workbuddy.js");
-        providers.push(createWorkbuddyProvider({ baseUrl: base, apiKeys: keys, auths }));
-        console.log(`provider enabled: workbuddy (${keys.length} key${keys.length > 1 ? "s" : ""}) baseUrl=${base}`);
-        appendEvent({ ts: Date.now(), type: "provider-enabled", provider: gid, keys: keys.length, baseUrl: base });
-      } catch (err) {
-        console.log(`provider ${gid} failed: ${err?.message || err}`);
-        appendEvent({ ts: Date.now(), type: "provider-error", provider: gid, error: String(err?.message || err) });
-      }
-      continue;
-    }
-    const base = String(cfg?.baseUrl || "").trim();
-    const keys = Array.isArray(cfg?.keys) ? cfg.keys.filter((k) => typeof k === "string" && k.trim()) : [];
-    if (!base || !keys.length) continue;
-    try {
-      const { createGenericProvider } = await import("../src/providers/generic.js");
-      providers.push(createGenericProvider({ id: gid, baseUrl: base, apiKeys: keys }));
-      console.log(`provider enabled: ${gid} (${keys.length} key${keys.length > 1 ? "s" : ""}) baseUrl=${base}`);
-      appendEvent({ ts: Date.now(), type: "provider-enabled", provider: gid, keys: keys.length, baseUrl: base });
-    } catch (err) {
-      console.log(`provider ${gid} failed: ${err?.message || err}`);
-      appendEvent({ ts: Date.now(), type: "provider-error", provider: gid, error: String(err?.message || err) });
-    }
-  }
-  // workbuddy via env-only (no providerConfigs entry but MSLXDFF_WORKBUDDY_KEY set)
-  if (!genericConfigs["workbuddy"]) {
-    const wbKeys = loadProviderKeys("workbuddy");
-    if (wbKeys.length) {
-      try {
-        const { createWorkbuddyProvider } = await import("../src/providers/workbuddy.js");
-        const wbAuths = loadProviderAuths("workbuddy");
-        providers.push(createWorkbuddyProvider({ apiKeys: wbKeys, auths: wbAuths }));
-        console.log(`provider enabled: workbuddy (${wbKeys.length} key${wbKeys.length > 1 ? "s" : ""}) baseUrl=https://copilot.tencent.com (env)`);
-        appendEvent({ ts: Date.now(), type: "provider-enabled", provider: "workbuddy", keys: wbKeys.length, baseUrl: "https://copilot.tencent.com" });
-      } catch (err) {
-        console.log(`provider workbuddy failed: ${err?.message || err}`);
-      }
-    }
-  }
-  const { createProviderDispatcher } = await import("../src/providers/dispatcher.js");
-  upstream = createProviderDispatcher(providers);
-  appendEvent({ ts: Date.now(), type: "providers", providers: providers.map((p) => p.id) });
-}
-const opencodeProvider = providers.find((p) => p.id === "opencode");
-const models = createModelsService({
-  providers: providers.length > 1 ? providers : undefined,
-  baseUrl,
-  headers: upstream.headers || opencodeProvider?.upstream?.headers,
-  refreshMs: refreshIntervalMs(),
-  cacheFile: join(logDir(), "models.json"),
-});
-const auto = createAutoSelector({
-  cooldownMs: modelCooldownMs(),
-  slowCooldownMs: slowCooldownMs(),
-  file: defaultStateFile(),
-  loadCandidates: async () => {
-    try {
-      return (await models.get()).data.map((m) => m.id);
-    } catch {
-      return null;
-    }
-  },
-});
-const peers = createPeersService({ cooldownMs: peerCooldownMs(), heatMs: peerHeatMs() });
-const groups = createGroupsService({});
-const bans = createBansService({ windowMs: banWindowMs(), threshold: banThreshold() });
-
-const isDebug = process.env.MSLXDFF_DEBUG === "1";
-const bus = createEventBus();
-
-// 加载 WorkBuddy 别名映射（clinebot-z-ai → clinebot/z-ai）
-try {
-  const { loadModelAliases } = await import("../src/providers/model-id.js");
-  loadModelAliases();
-} catch {}
-
-const router = createRouter({ token, upstream, models, auto, logs, peers, maxHops: maxHopsValue(), groups, bans, bus, plugins: loadedPlugins });
-const listenHost = effectiveHost();
-const srv = startServer({
-  router,
-  signals: !isDebug,
-  host: listenHost,
-  onBeforeClose: loadedPlugins.length
-    ? () => runHook(loadedPlugins, "server:stop", { version: VERSION }).then(() => {})
-    : undefined,
-});
-
-// -debug: push every event straight to this terminal.
-if (isDebug) {
-  bus.subscribe((e) => {
-    try {
-      console.log(fmtEvent(e));
-    } catch {
-      // malformed event — skip
-    }
-  });
-  // Ctrl+C / SIGTERM: restore the background daemon, then exit.
-  const restore = () => {
-    console.log("\n[debug] restoring background daemon...");
-    try {
-      const restoredPid = startDaemon([]);
-      console.log(`[debug] daemon restored (pid ${restoredPid})`);
-    } catch (err) {
-      console.error(`[debug] could not restore daemon: ${err.message}`);
-    }
-    setTimeout(() => process.exit(0), 300);
-  };
-  process.on("SIGINT", restore);
-  process.on("SIGTERM", restore);
-}
-
-await srv.ready();
-
-// 插件 hook：server:start — 服务就绪后触发（只观察）
-if (loadedPlugins.length) {
-  runHook(loadedPlugins, "server:start", { port: srv.server.address()?.port, host: listenHost, version: VERSION }).catch(() => {});
-  // 插件 onEvent(evt) — 订阅全部事件流（fire-and-forget，错误隔离）
-  const eventPlugins = loadedPlugins.filter((p) => typeof p.onEvent === "function");
-  if (eventPlugins.length) {
-    bus.subscribe((e) => {
-      for (const p of eventPlugins) {
-        try { p.onEvent(e); } catch {}
-      }
-    });
-  }
-}
-
-// 上游 Keep-Alive 预热：首条 TCP+TLS 暖好，100ms 后异步触发，不阻塞 ready
-setTimeout(() => {
-  upstream.preheat().then((r) => {
-    const entry = { ts: Date.now(), type: "upstream-preheat", ...r, baseUrl };
-    try { bus.emit(entry); } catch {}
-    try { logs.appendEvent(entry); } catch {}
-    if (r.skipped) console.log(`[preheat] skipped (MSLXDFF_PREHEAT disabled)`);
-    else if (r.ok) console.log(`[preheat] opencode models ok ${r.status} ${r.ms}ms`);
-    else console.log(`[preheat] opencode models failed ${r.error || r.status || ""} ${r.ms || 0}ms`);
-  }).catch(() => {});
-}, 100).unref?.();
-
-models.startAutoRefresh();
-if (process.env.MSLXDFF_DAEMON) {
-  writePid(process.pid, VERSION);
-}
-const addr = srv.server.address();
-const host = addr.address === "0.0.0.0" || addr.address === "::" ? "localhost" : addr.address;
-console.log(`mslxdff v${VERSION} listening on http://${host}:${addr.port}`);
-if (created) {
-  console.log(`auth token: ${token}`);
-}
-console.log(`endpoint:   http://${host}:${addr.port}/v1`);
-try {
-  const { hedgeDelayMs } = await import("../src/routes/hedge.js");
-  const hd = hedgeDelayMs();
-  console.log(`hedge:      ${hd ? `${hd}ms` : "off"} (MSLXDFF_HEDGE_DELAY_MS)`);
-} catch {}
-
-// Periodically pull the freshest member lists for every joined group so a
-// new member becomes a failover peer on all nodes without manual re-joining.
-syncAllJoinedGroups({ peers, groups })
-  .then((results) => {
-    for (const r of results) {
-      if (r.error) console.log(`group sync ${r.name}: failed — ${r.error}`);
-      else console.log(`group sync ${r.name}: ${r.total} member(s), ${r.added} peer(s)`);
-    }
-  })
-  .catch((err) => console.log(`group sync: ${errMsg(err)}`));
-const groupSyncTimer = setInterval(() => {
-  syncAllJoinedGroups({ peers, groups })
-    .then((results) => {
-      for (const r of results) {
-        if (r.error) console.log(`group sync ${r.name}: failed — ${r.error}`);
-        else if (r.added) console.log(`group sync ${r.name}: ${r.total} member(s), ${r.added} peer(s)`);
-      }
-    })
-    .catch((err) => console.log(`group sync: ${errMsg(err)}`));
-}, groupSyncIntervalMs());
-groupSyncTimer.unref();
-
-// Broadband heartbeat + relay poll (only for broadband members)
-const broadbandGroups = () => loadGroupsJoined().filter((g) => g.kind === "broadband" && g.leaderUrl);
-if (broadbandGroups().length) {
-  const doHeartbeat = async () => {
-    for (const g of broadbandGroups()) {
-      try {
-        const res = await fetch(`${g.leaderUrl}/v1/groups/relay/heartbeat`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": `Bearer ${token}` },
-          body: JSON.stringify({ name: g.name, group: g.name }),
-          signal: AbortSignal.timeout(5000),
-        });
-        if (!res.ok) {
-          const txt = await res.text().catch(() => "");
-          console.log(`broadband heartbeat ${g.name}: ${res.status} ${txt.slice(0, 100)}`);
-        }
-      } catch (err) {
-        console.log(`broadband heartbeat ${g.name}: failed — ${errMsg(err)}`);
-      }
-    }
-  };
-  const doPoll = async () => {
-    for (const g of broadbandGroups()) {
-      try {
-        const pollRes = await fetch(`${g.leaderUrl}/v1/groups/relay/poll`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": `Bearer ${token}` },
-          body: JSON.stringify({ name: g.name, group: g.name }),
-          signal: AbortSignal.timeout(8000),
-        });
-        if (!pollRes.ok) continue;
-        const data = await pollRes.json().catch(() => ({}));
-        const items = data.data || [];
-        for (const item of items) {
-          const { reqId, body } = item;
-          let result;
-          try {
-            const upRes = await upstream.chat(body);
-            const ct = upRes.headers.get("content-type") || "";
-            const isStream = Boolean(body?.stream) || ct.includes("text/event-stream");
-            if (isStream && upRes.body) {
-              // collect stream chunks for relay (simplified: buffer then forward as SSE)
-              let collected = "";
-              for await (const chunk of upRes.body) {
-                collected += Buffer.isBuffer(chunk) ? chunk.toString("utf8") : String(chunk);
-              }
-              result = { status: upRes.status, headers: { "Content-Type": "text/event-stream" }, body: collected };
-            } else {
-              const txt = await upRes.text();
-              let parsed;
-              try { parsed = JSON.parse(txt); } catch { parsed = txt; }
-              result = { status: upRes.status, headers: { "Content-Type": upRes.headers.get("content-type") || "application/json" }, body: typeof parsed === "string" ? parsed : JSON.stringify(parsed) };
-            }
-          } catch (err) {
-            result = { status: 502, headers: { "Content-Type": "application/json" }, body: JSON.stringify({ error: errMsg(err) }) };
-          }
-          try {
-            await fetch(`${g.leaderUrl}/v1/groups/relay/result`, {
-              method: "POST",
-              headers: { "Content-Type": "application/json", "Authorization": `Bearer ${token}` },
-              body: JSON.stringify({ name: g.name, group: g.name, reqId, result }),
-              signal: AbortSignal.timeout(5000),
-            });
-          } catch {}
-        }
-      } catch {}
-    }
-  };
-  // initial heartbeat
-  doHeartbeat().catch(() => {});
-  const hbTimer = setInterval(doHeartbeat, 30_000);
-  hbTimer.unref();
-  const pollTimer = setInterval(doPoll, 1000);
-  pollTimer.unref();
-  console.log(`broadband relay: heartbeat 30s + poll 1s for ${broadbandGroups().length} group(s)`);
-}
-
-// Auto-update: periodically check npm for a newer mslxdff and restart.
-// Default: hourly (no env needed). Disable with MSLXDFF_AUTO_UPDATE=0/off/false.
-// Tuning: MSLXDFF_AUTO_UPDATE=1/true → hourly, or MSLXDFF_AUTO_UPDATE_MS=<ms>.
-const autoUpdateMs = autoUpdateIntervalMs();
-function emitAutoUpdate(type, data = {}) {
-  const entry = { ts: Date.now(), type, ...data };
-  try { bus?.emit(entry); } catch {}
-  try { logs?.appendEvent?.(entry); } catch {}
-  // also to daemon.log for tail
-  const line = `[auto-update] ${type} ${JSON.stringify(data)}`;
-  console.log(line);
-}
-if (autoUpdateMs) {
-  console.log(`auto-update enabled: checking every ${Math.round(autoUpdateMs / 60000)}m`);
-  emitAutoUpdate("auto-update-enabled", { intervalMs: autoUpdateMs, current: VERSION });
-  // run once shortly after start (30s) so a newly deployed fix is picked up quickly,
-  // then on the regular interval
-  setTimeout(() => {
-    emitAutoUpdate("auto-update-check", { current: VERSION });
-    checkAndAutoUpdate().catch((err) => {
-      console.log(`auto-update check failed: ${errMsg(err)}`);
-      emitAutoUpdate("auto-update-failed", { error: errMsg(err) });
-    });
-  }, 30_000).unref?.();
-  const autoUpdateTimer = setInterval(() => {
-    emitAutoUpdate("auto-update-check", { current: VERSION });
-    checkAndAutoUpdate().catch((err) => {
-      console.log(`auto-update check failed: ${errMsg(err)}`);
-      emitAutoUpdate("auto-update-failed", { error: errMsg(err) });
-    });
-  }, autoUpdateMs);
-  autoUpdateTimer.unref();
-} else {
-  console.log(`auto-update disabled (set MSLXDFF_AUTO_UPDATE=1 to enable hourly)`);
-  emitAutoUpdate("auto-update-disabled", { current: VERSION });
-}
-
-async function checkAndAutoUpdate() {
-  emitAutoUpdate("auto-update-query", { current: VERSION });
-  const info = await run(npmCmd(), ["view", "mslxdff", "dist-tags.latest", "--json"]);
-  if (info.err) {
-    emitAutoUpdate("auto-update-query-failed", { error: info.err.message || String(info.stderr || "").slice(0, 500) });
-    throw new Error(info.err.message || String(info.stderr || "").slice(0, 500));
-  }
-  let latest = "";
-  try {
-    latest = JSON.parse(String(info.stdout || "").trim());
-    if (Array.isArray(latest)) latest = latest[latest.length - 1];
-    latest = String(latest || "").replace(/^v/, "").trim();
-  } catch {
-    const raw = String(info.stdout || "").trim();
-    const m = raw.match(/(\d+\.\d+\.\d+[^\s'"]*)/);
-    latest = m ? m[1] : raw.split(/\s+/).pop()?.replace(/['"]/g, "") || "";
-  }
-  latest = latest.replace(/['"]/g, "").trim();
-  emitAutoUpdate("auto-update-queried", { current: VERSION, latest, stdout: String(info.stdout || "").trim().slice(0, 200) });
-  if (!latest || latest === VERSION) {
-    emitAutoUpdate("auto-update-noop", { current: VERSION, latest });
-    return;
-  }
-  if (compareSemver(latest, VERSION) <= 0) {
-    emitAutoUpdate("auto-update-noop", { current: VERSION, latest, reason: "not newer" });
-    return;
-  }
-  emitAutoUpdate("auto-update-found", { current: VERSION, latest });
-  console.log(`auto-update: v${VERSION} -> v${latest}, installing...`);
-  emitAutoUpdate("auto-update-installing", { current: VERSION, latest });
-  const up = await run(npmCmd(), ["install", "-g", `mslxdff@${latest}`]);
-  if (up.err) {
-    emitAutoUpdate("auto-update-install-failed", { current: VERSION, latest, error: up.err.message || String(up.stderr || "").slice(0, 500) });
-    throw new Error(up.err.message || String(up.stderr || "").slice(0, 500));
-  }
-  emitAutoUpdate("auto-update-installed", { current: VERSION, latest, stdout: String(up.stdout || "").slice(0, 500) });
-  console.log(`auto-update: installed v${latest}, restarting daemon...`);
-  emitAutoUpdate("auto-update-restarting", { current: VERSION, latest });
-  try { stopDaemon(); } catch (e) { emitAutoUpdate("auto-update-stop-failed", { error: errMsg(e) }); }
-  const newPid = startDaemon([]);
-  await waitForHealth(resolvePort(), 8000);
-  console.log(`auto-update: restarted as v${latest} (pid ${newPid})`);
-  emitAutoUpdate("auto-update-restarted", { current: VERSION, latest, newPid });
-}
-
-function compareSemver(a, b) {
-  const pa = a.split(".").map((x) => parseInt(x, 10) || 0);
-  const pb = b.split(".").map((x) => parseInt(x, 10) || 0);
-  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
-    const av = pa[i] || 0, bv = pb[i] || 0;
-    if (av !== bv) return av - bv;
-  }
-  return 0;
-}
-
-function argValue(...names) {
-  for (let i = 0; i < args.length; i++) {
-    if (names.includes(args[i])) return args[i + 1];
-  }
-  return null;
-}
-
-function effectivePort() {
-  const arg = argValue("-port", "--port");
-  if (arg) return Number(arg);
-  return resolvePort();
-}
-
-function effectiveHost() {
-  const envHost = process.env.MSLXDFF_HOST || process.env.MSLXDFF_BIND_HOST;
-  if (typeof envHost === "string" && envHost.trim()) return envHost.trim();
-  try {
-    const joined = loadGroupsJoined();
-    if (joined.some((g) => g.kind === "broadband")) return "127.0.0.1";
-  } catch {}
-  return "0.0.0.0";
-}
-
-function refreshIntervalMs() {
-  const n = Number(process.env.MODELS_REFRESH_MS);
-  return Number.isInteger(n) && n > 0 ? n : 2 * 60 * 60 * 1000;
-}
-
-function modelCooldownMs() {
-  const n = Number(process.env.MSLXDFF_MODEL_COOLDOWN_MS);
-  return Number.isInteger(n) && n > 0 ? n : 60_000;
-}
-
-function slowCooldownMs() {
-  const n = Number(process.env.MSLXDFF_SLOW_COOLDOWN_MS);
-  return Number.isInteger(n) && n > 0 ? n : 5 * 60_000;
-}
-
-function peerCooldownMs() {
-  const n = Number(process.env.MSLXDFF_PEER_COOLDOWN_MS);
-  return Number.isInteger(n) && n > 0 ? n : 30_000;
-}
-
-function peerHeatMs() {
-  const n = Number(process.env.MSLXDFF_PEER_HEAT_MS);
-  return Number.isInteger(n) && n > 0 ? n : 5 * 60_000;
-}
-
-function maxHopsValue() {
-  const n = Number(process.env.MSLXDFF_MAX_HOPS);
-  return Number.isInteger(n) && n > 0 ? n : 3;
-}
-
-function groupSyncIntervalMs() {
-  const n = Number(process.env.MSLXDFF_GROUP_SYNC_MS);
-  return Number.isInteger(n) && n > 0 ? n : 60_000;
-}
-
-function autoUpdateIntervalMs() {
-  const raw = process.env.MSLXDFF_AUTO_UPDATE_MS ?? process.env.MSLXDFF_AUTO_UPDATE;
-  // default: hourly when env not set; explicit 0/off/false disables
-  if (raw === undefined || raw === null || raw === "") return 60 * 60 * 1000;
-  const s = String(raw).trim().toLowerCase();
-  if (s === "0" || s === "off" || s === "false" || s === "no" || s === "disable" || s === "disabled") return 0;
-  if (s === "1" || s === "true" || s === "on" || s === "yes" || s === "enable" || s === "enabled") return 60 * 60 * 1000;
-  const n = Number(raw);
-  return Number.isInteger(n) && n > 0 ? n : 60 * 60 * 1000;
-}
-
-function banWindowMs() {
-  const n = Number(process.env.MSLXDFF_BAN_WINDOW_MS);
-  return Number.isInteger(n) && n > 0 ? n : 48 * 60 * 60 * 1000;
-}
-
-function banThreshold() {
-  const n = Number(process.env.MSLXDFF_BAN_THRESHOLD);
-  return Number.isInteger(n) && n > 0 ? n : 5;
-}
-
-async function waitForHealth(port, timeoutMs) {
-  const start = Date.now();
-  while (Date.now() - start < timeoutMs) {
-    try {
-      const res = await fetch(`http://127.0.0.1:${port}/health`);
-      if (res.ok) return;
-    } catch {
-      // not up yet
-    }
-    await new Promise((r) => setTimeout(r, 100));
-  }
-}
-
-function printHelp() {
-  console.log(`mslxdff v${VERSION} — OpenCode Free OpenAI-compatible proxy
-
-Usage:
-  mslxdff                          start as a background daemon and exit (status + help if one is already running)
-  mslxdff -d                       start as a background daemon
-  mslxdff -status                  show current status (daemon/health/port/config, upstream providers, models + metrics/体检表, autostart/plugins, groups/peers, recent calls with ttfb/tps, last error)
-  mslxdff -log [N]                 show last N events (default 10, e.g. -log 100)
-  mslxdff -models                interactive picker: ↑/↓ select a model, Enter sets it as the default (non-TTY: plain list)
-  mslxdff -model list            list the free models this proxy serves (cached)
-  mslxdff -model set <id>        set the default (preferred) model without the interactive picker
-  mslxdff -model status            show per-model health status (normal/limit/error)
-  mslxdff -model refresh           force-refresh the model cache from the upstream
-  mslxdff -debug                   live-follow the daemon event stream (requests, errors, peer forwards)
-  mslxdff -stop                    stop the running daemon
-  mslxdff -uninstall               stop the daemon and delete all state/log files
-  mslxdff -port N                  persist the listen port (restarts the daemon on it if running)
-  mslxdff -update                  update mslxdff to the latest published version
-  mslxdff -showtoken               print the current auth token
-  mslxdff -refresh-token           rotate the auth token (prints the new one)
-  mslxdff -setto workbuddy [modelId]  set default model and sync to WorkBuddy models.json (insert or update 127.0.0.1/v1 entry)
-  mslxdff -provider add <id> <baseUrl> <key> [allowedModel...]  add a generic OpenAI-compatible provider (myapi/gpt-4, baseUrl https://api.example.com/v1; extra models = allowlist)
-  mslxdff -provider add workbuddy https://copilot.tencent.com <key> [allow...]  add WorkBuddy专用供应商（workbuddy/hy3 前缀路由，auths 与 keys 一一对应）
-  mslxdff -provider <id> [key...|add|remove|list|clear|share|set-url]  configure provider API keys/URL (multiple keys = rotating, set-url for generic)
-  mslxdff -provider <id> allowlist [list|set|add|remove|clear]  manage allowed models (empty=allow all, non-empty=only listed) 
-  mslxdff -workbuddy checkin        daily 100 credits（双域幂等，已签 code 10001 视为成功）
-  mslxdff -providers list          list all configured upstream providers (opencode, openrouter, generic, workbuddy)
-  mslxdff -creategroup <name>      create a group on this node (the group name is the password)
-  mslxdff -addtogroup <leader-host> <name> [--broadband]  join a group via its leader host (default port 8989) — broadband: 宽带动态IP成员（经Leader中继，无需公网入站，默认127.0.0.1）
-  mslxdff -group sync              pull the freshest member list for all joined groups
-  mslxdff -group leave <name>      leave a group (removes its members from this node)
-  mslxdff -group list              list groups on this node (numbered members)
-  mslxdff -group remove <seq>      leader only: kick a member by its list sequence number
-  mslxdff -leavegroup              leave every joined group as a member (leaders: use -delgroup)
-  mslxdff -delgroup <name>         disband a group this node leads (deletes it and its members)
-  mslxdff -free                    V2EX 白嫖雷达（仅 V2EX 单源：latest+hot 按 白嫖|限免|免费额度|注册送|羊毛 过滤）
-  mslxdff -free-watch              V2EX 白嫖雷达 watch 模式（每 5 分钟轮询）
-  mslxdff -enable-autostart        开机自启：注册 Windows 任务计划 / Linux systemd user（重启后自动拉起）
-  mslxdff -disable-autostart       关闭开机自启
-  mslxdff -autostart status        查看自启状态
-  mslxdff -chat ["prompt"]       chat REPL（mimo-v2.5-free 优先/big-pickle 兜底，自然语言转命令，模糊匹配由模型完成，历史持久化，超长自动压缩，仅拦 -uninstall，daemon 重启不影响）
-  mslxdff -resetban [ip]           clear join-failure bans (all, or one ip)
-  mslxdff -help                    show this help
-
-Environment:
-  MSLXDFF_PORT          listen port (default 8989; use mslxdff -port N to persist)
-  MSLXDFF_STATE_FILE      token/port state file
-  MSLXDFF_DAEMON_DIR      daemon pid/log/models dir
-  UPSTREAM_BASE_URL       upstream base (default https://opencode.ai)
-  UPSTREAM_AUTH_TOKEN     upstream bearer value (default "public")
-  MSLXDFF_OPENROUTER_KEY  openrouter provider API keys(s) (single env value; multiple use "mslxdff -provider openrouter k1 k2 ..." to persist)
-  UPSTREAM_CONNECT_TIMEOUT_MS  upstream connect timeout (default 30000)
-  MODELS_REFRESH_MS       model-list background refresh interval (default 7200000)
-  MSLXDFF_MODEL_COOLDOWN_MS  fallback cooldown after a model error (default 60000)
-  MSLXDFF_PEER_COOLDOWN_MS   peer failover cooldown (default 30000)
-  MSLXDFF_PEER_HEAT_MS       how long a peer success stays hot for fast reuse (default 300000)
-  MSLXDFF_GROUP_SYNC_MS   group membership sync interval (default 60000)
-  MSLXDFF_MAX_HOPS           max peer-forwarding depth (default 3)
-  MSLXDFF_BAN_THRESHOLD   failed joins before an ip is banned (default 5)
-  MSLXDFF_BAN_WINDOW_MS   ban duration after too many failures (default 48h)
-  MSLXDFF_HEDGE_DELAY_MS  hedge peer race when local stream first chunk slow (default 1000, 0/off to disable)
-  MSLXDFF_AUTO_UPDATE   auto-update: hourly by default, 0/off/false to disable, 1/true or ms
-  MSLXDFF_AUTO_UPDATE_MS  same as above, explicit ms (overrides AUTO_UPDATE)
-`);
-}
-
-async function printStatus() {
-  const daemon = readPid();
-  const alive = daemon ? isPidAlive(daemon) : false;
-  const port = getPort() || resolvePort();
-  const persisted = getPort();
-  const portSrc = persisted != null ? "persisted" : (process.env.MSLXDFF_PORT ? "env MSLXDFF_PORT" : "default 8989");
-  const stateFile = defaultStateFile();
-  const dir = logDir();
-  // daemon uptime from pid file mtime
-  let upStr = "";
-  if (daemon && alive) {
-    try {
-      const st = statSync(pidFile());
-      const ms = Date.now() - st.mtimeMs;
-      upStr = `, up ${fmtUptime(ms)}`;
-    } catch {}
-  }
-  const verNote = daemon && alive ? (() => { const v = readPidVersion(); return v === VERSION ? "version ok" : (v ? `version ${v} → ${VERSION} (restart pending)` : ""); })() : "";
-  console.log(`mslxdff v${VERSION}`);
-  console.log(`daemon:    ${daemon ? (alive ? `running (pid ${daemon}${upStr})` : `stale pid ${daemon} (not alive)`) : "not running"}${verNote ? `  [${verNote}]` : ""}`);
-  // local health probe — 1.2s timeout, 显示端到端可用性
-  let healthLine = "";
-  try {
-    const t0 = Date.now();
-    const r = await fetch(`http://127.0.0.1:${port}/health`, { signal: AbortSignal.timeout(1200) });
-    const ms = Date.now() - t0;
-    healthLine = r.ok ? `health ok ${ms}ms` : `health HTTP ${r.status} ${ms}ms`;
-  } catch (e) {
-    healthLine = daemon && alive ? `health fail (${String(e?.message || e).slice(0, 60)})` : "health — (daemon not running)";
-  }
-  console.log(`endpoint:  http://localhost:${port}/v1  ·  ${healthLine}`);
-  console.log(`config:    port ${port} (${portSrc}) · state ${stateFile} · log ${dir}`);
-  try {
-    const host = process.env.MSLXDFF_HOST || process.env.MSLXDFF_BIND_HOST || "0.0.0.0";
-    if (host !== "0.0.0.0") console.log(`bind:      ${host}`);
-  } catch {}
-
-  // ---- upstream providers（用户最想要的一块）----
-  try {
-    const configs = loadProviderConfigs();
-    const upstreamBase = process.env.UPSTREAM_BASE_URL || "https://opencode.ai";
-    const providerRows = [];
-    // opencode 恒 enabled
-    const opAllowed = loadProviderAllowedModels("opencode");
-    providerRows.push({ id: "opencode", enabled: true, baseUrl: upstreamBase, keys: [], allowed: opAllowed, share: false, note: "built-in, no key, cannot share" });
-    // collect generic ids (configs + legacy providerKeys + env)
-    const genericIds = new Set(Object.keys(configs).filter((id) => id !== "opencode"));
-    try {
-      const raw = JSON.parse(readFileSync(stateFile, "utf8"));
-      const pk = raw.providerKeys || {};
-      for (const id of Object.keys(pk)) if (id !== "opencode") genericIds.add(id);
-      const cfgRaw = raw.providerConfigs || {};
-      for (const id of Object.keys(cfgRaw)) if (id !== "opencode") genericIds.add(id);
-    } catch {}
-    for (const k of Object.keys(process.env)) {
-      const m = k.match(/^MSLXDFF_(.+)_KEY$/);
-      if (m) {
-        const id = m[1].toLowerCase().replace(/__/g, "-");
-        if (id !== "opencode") genericIds.add(id);
-      }
-    }
-    for (const gid of [...genericIds].sort()) {
-      const cfg = configs[gid];
-      const keys = loadProviderKeys(gid);
-      const baseUrl = loadProviderBaseUrl(gid) || cfg?.baseUrl || (gid === "openrouter" ? "https://openrouter.ai/api/v1" : gid === "workbuddy" ? "https://copilot.tencent.com" : "");
-      const share = loadProviderShareKeys(gid);
-      const allowed = loadProviderAllowedModels(gid);
-      let enabled = Boolean(baseUrl && keys.length) || (gid === "openrouter" && keys.length > 0);
-      const auths = gid === "workbuddy" ? (loadProviderAuths(gid) || []) : [];
-      let note = "";
-      // 检测测试桩：workbuddy 的 k-new / 127.0.0.1 / 短 key 均视为未真实配置
-      const isWorkbuddyStub = gid === "workbuddy" && (keys.includes("k-new") || baseUrl.includes("127.0.0.1") || (keys.length === 1 && keys[0].length < 20));
-      if (isWorkbuddyStub) {
-        enabled = false;
-        note = "测试桩 (key=k-new, baseUrl=127.0.0.1) — 请重跑 node workbuddy-token-auto.js 写入真实 JWT";
-      } else if (!enabled) {
-        if (!baseUrl && !keys.length) note = "no baseUrl, no keys";
-        else if (!baseUrl) note = "missing baseUrl";
-        else if (!keys.length) note = "no keys";
-      } else if (gid === "workbuddy" && auths.length && auths.length !== keys.length) {
-        note = `${auths.length} auth(s) / ${keys.length} key(s) — 数量不一致请重跑 workbuddy-token-auto.js`;
-      }
-      providerRows.push({ id: gid, enabled, baseUrl: baseUrl || "(none)", keys, allowed, share, note, authCount: auths.length });
-    }
-    const enabledCount = providerRows.filter((r) => r.enabled).length;
-    console.log(`\nupstream providers (${providerRows.length}, ${enabledCount} enabled)  —  mslxdff -providers list 查看详情`);
-    for (const p of providerRows) {
-      const dot = p.enabled ? "●" : "○";
-      const state = p.enabled ? "enabled " : "disabled";
-      let keysInfo;
-      if (p.id === "opencode") keysInfo = "无需 key (内置)";
-      else keysInfo = p.keys.length ? `${p.keys.length} key${p.keys.length > 1 ? "s" : ""} ${p.keys.map((k) => `${k.slice(0, 3)}…${k.slice(-3)}`).join(", ")}` : "0 keys";
-      const authInfo = p.authCount ? ` ${p.authCount} acc` : "";
-      const allowInfo = p.allowed.length ? `allow=${p.allowed.length}(${p.allowed.slice(0, 2).join(",")}${p.allowed.length > 2 ? "…" : ""})` : "allow=all";
-      const shareInfo = p.id === "opencode" ? "cannot share" : `share=${p.share ? "ON" : "off"}`;
-      const note = p.note ? `  (${p.note})` : "";
-      console.log(`  ${dot} ${p.id.padEnd(12)} ${state}  ${keysInfo}${authInfo}  ${allowInfo.padEnd(18)}  baseUrl=${p.baseUrl}  ${shareInfo}${note}`);
-    }
-    if (enabledCount === 1 && providerRows.length === 1) {
-      console.log(`  (仅 opencode 内置免费通道；按需加：mslxdff -provider add bai https://api.b.ai/v1 <key>  或  node workbuddy-token-auto.js)`);
-    }
-  } catch (e) {
-    console.log(`\nupstream providers: (unavailable — ${String(e?.message || e).slice(0, 80)})`);
-  }
-
-  // ---- models：preferred + picks + 免费缓存 + 体检表 ----
-  try {
-    const statuses = loadModelErrors();
-    const stats = loadModelStats();
-    const picks = loadModelPicks();
-    const preferred = getPreferredModel();
-    const modelsFile = join(dir, "models.json");
-    let freeIds = [];
-    let cachedAt = null;
-    let cacheErr = null;
-    if (existsSync(modelsFile)) {
-      try {
-        const cached = JSON.parse(readFileSync(modelsFile, "utf8"));
-        freeIds = (cached.data || []).map((m) => m.id).filter(Boolean);
-        cachedAt = cached.cachedAt || null;
-      } catch (err) { cacheErr = String(err?.message || err).slice(0, 60); }
-    }
-    const ageStr = cachedAt ? (() => { const ms = Date.now() - cachedAt; const h = Math.floor(ms / 3600000); const m = Math.floor((ms % 3600000) / 60000); return h ? `${h}h${m}m ago` : `${m}m ago`; })() : "";
-    const cacheLine = freeIds.length ? `${freeIds.length} free${cachedAt ? ` (cached ${fmtShanghaiYMDHM(cachedAt)} · ${ageStr})` : ""}` : (cacheErr ? `cache unreadable (${cacheErr})` : "not cached yet (daemon 拉取后出现)");
-    const prefStat = preferred ? (stats[preferred] || stats[`opencode/${preferred}`] || null) : null;
-    const prefErr = preferred ? statuses[preferred] : null;
-    const prefStatus = prefErr ? (typeof prefErr === "number" ? "error" : (prefErr?.status || "error")) : (prefStat ? "normal" : "");
-    const prefLine = preferred ? `${preferred}${prefStatus ? ` [${prefStatus}]` : ""}` : "(none)";
-    const picksLine = picks.length ? `${picks.length} (*${picks.slice(0, 4).join(", *")}${picks.length > 4 ? ` …+${picks.length - 4}` : ""})` : "(空=全量 auto)";
-    console.log(`\nmodels: ${cacheLine}  —  mslxdff -model status 查看详情`);
-    const prefTtfbDisp = prefStat ? (() => { const v = prefStat.avgTtfbMs ?? prefStat.emaTtfbMs; return v != null && v >= 10 ? `首字 ${v}ms` : (v != null && v < 10 ? "首字 — (测试数据)" : ""); })() : "";
-    const prefTotDisp = prefStat?.avgTotalMs && prefStat.avgTotalMs >= 10 ? `总 ${prefStat.avgTotalMs}ms` : "";
-    const prefTpsDisp = prefStat?.avgTps && prefStat.avgTps >= 1 ? `${prefStat.avgTps} tok/s` : "";
-    const prefExtra = prefStat ? `  ${[prefTtfbDisp, prefTotDisp, prefTpsDisp].filter(Boolean).join("  ")}  ${prefStat.count || 0}次` : "";
-    console.log(`  preferred: ${prefLine}${prefExtra}`);
-    console.log(`  picks: ${picksLine}  ${picks.length ? "auto 仅在勾选内" : "auto 用全量免费池"}`);
-    if (freeIds.length) {
-      const ids = freeIds;
-      console.log(`  free list:`);
-      for (const id of ids) {
-        const st = fmtStatus(id, statuses);
-        const full = id.includes("/") ? id : `opencode/${id}`;
-        const ms = stats[full] || stats[id];
-        let extra = "";
-        if (ms) {
-          const v = ms.avgTtfbMs ?? ms.emaTtfbMs;
-          const vStr = v != null ? (v >= 10 ? `avg首字 ${v}ms` : (v < 10 ? "avg首字 —" : "")) : "";
-          const tpsStr = ms.avgTps && ms.avgTps >= 1 ? ` ${ms.avgTps} tok/s` : "";
-          const cntStr = ms.count ? ` ${ms.count}次` : "";
-          extra = `  ${vStr}${tpsStr}${cntStr}`;
-        }
-        console.log(`    ${id}${st ? `  [${st}]` : ""}${extra}`);
-      }
-    }
-    // 体检表 Top（按样本数）—— 来自 modelStats，更能反映“跑得快不快/啰不啰嗦”
-    const allStatIds = Object.keys(stats);
-    if (allStatIds.length) {
-      const sorted = allStatIds.map((full) => ({ full, s: stats[full] })).filter((x) => x.s && x.s.count).sort((a, b) => (b.s.count - a.s.count) || ((b.s.avgTps || 0) - (a.s.avgTps || 0))).slice(0, 7);
-      if (sorted.length) {
-        console.log(`  模型体检 Top${sorted.length}（样本>0, 按次数）：`);
-        console.log(`    ${"模型".padEnd(28)}  ${"首字".padEnd(7)}  ${"总耗时".padEnd(7)}  ${"速度".padEnd(10)}  ${"啰嗦".padEnd(7)}  ${"样本".padEnd(5)}  状态`);
-        for (const { full, s } of sorted) {
-          const ttfb = s.avgTtfbMs ?? s.emaTtfbMs;
-          const total = s.avgTotalMs ?? s.emaTotalMs;
-          const tps = s.avgTps ?? s.emaTps;
-          const verbose = s.avgCompTok != null ? `${s.avgCompTok}tok` : "—";
-          const st = statuses[full] || statuses[full.split("/").slice(1).join("/")] || null;
-          const statusStr = st ? (typeof st === "number" ? "error" : (st.status || "normal")) : "normal";
-          const p95 = s.p95Ttfb && s.p95Ttfb >= 10 ? ` p95:${s.p95Ttfb}ms` : "";
-          const ttfbStr = ttfb != null ? (ttfb >= 10 ? ttfb + "ms" : "—") : "—";
-          const totalStr = total != null ? (total >= 10 ? total + "ms" : "—") : "—";
-          const tpsStr = tps != null && tps >= 1 ? tps + " tok/s" : "—";
-          console.log(`    ${full.padEnd(28)}  ${ttfbStr.padEnd(7)}  ${totalStr.padEnd(7)}  ${tpsStr.padEnd(10)}  ${verbose.padEnd(7)}  ${String(s.count).padEnd(5)}  ${statusStr}${p95}`);
-        }
-      }
-    } else if (!freeIds.length) {
-      console.log(`  (暂无模型样本 — 发一次 mslxdff -chat 后出现，100次后均值更稳)`);
-    }
-  } catch (e) {
-    console.log(`\nmodels: (unavailable — ${String(e?.message || e).slice(0, 80)})`);
-  }
-
-  // ---- autostart + plugins（运维一眼可见）----
-  try {
-    const { getAutostartStatus } = await import("../src/autostart.js");
-    const a = await getAutostartStatus();
-    const detail = a.detail || (a.enabled ? "已启用" : "未启用");
-    // detail 已含“已启用/未启用”，避免重复
-    const label = detail.startsWith("已启用") || detail.startsWith("未启用") ? detail : `${a.enabled ? "已启用" : "未启用"} · ${detail}`;
-    console.log(`\nautostart: ${label}  —  mslxdff -autostart status`);
-    if (a.taskToRun) console.log(`  task: ${a.taskToRun.slice(0, 120)}`);
-    if (a.unit) console.log(`  unit: ${a.unit}`);
-  } catch {}
-  try {
-    const { resolvePluginDirs, loadPlugins } = await import("../src/plugins.js");
-    const pkgRoot = dirname(fileURLToPath(import.meta.url)) + "/..";
-    const dirs = resolvePluginDirs({ pkgRoot });
-    const { plugins, errors } = await loadPlugins({ dirs });
-    if (plugins.length || errors.length) {
-      console.log(`plugins: ${plugins.length} loaded${errors.length ? `, ${errors.length} error(s)` : ""}  —  mslxdff -plugins`);
-      for (const p of plugins) console.log(`  ${p.name}${p.version ? `@${p.version}` : ""}  [${Object.keys(p.hooks || {}).join(", ") || "no hooks"}]`);
-      for (const e of errors) console.log(`  ! ${e.file} — ${e.error}`);
-    } else {
-      console.log(`plugins: (none)  —  放 *.mjs 到 ${dirs[dirs.length - 1] || "~/.config/mslxdff/plugins"} 启用`);
-    }
-  } catch {}
-
-  const groups = createGroupsService({});
-  const joined = loadGroupsJoined();
-  if (joined.length) {
-    console.log(`\njoined groups (${joined.length}):`);
-    const { token } = await loadToken();
-    for (const g of joined) {
-      const isLeader = !g.leaderUrl;
-      console.log(`  ${g.name}  ${isLeader ? "(this node is the leader)" : `leader ${g.leaderUrl}`}`);
-      let members = null;
-      if (isLeader) {
-        members = groups.list()[g.name]?.members ?? {};
-      } else {
-        // registered members can pull the member map back from the leader
-        const fetchImpl = (url, opts) => fetch(url, { ...opts, signal: AbortSignal.timeout(1500) });
-        try {
-          members = await refreshGroupMembers(g.name, {
-            leaderUrl: g.leaderUrl,
-            memberName: g.memberName,
-            url: g.myUrl,
-            token,
-            fetchImpl,
-          });
-        } catch {
-          members = null;
-        }
-      }
-      if (members === null) {
-        console.log("    members: (unavailable — leader unreachable)");
-      } else {
-        const ids = Object.keys(members);
-        if (!ids.length) {
-          console.log("    members: (none yet)");
-        } else {
-          console.log(`    members (${ids.length}):`);
-          for (const id of ids) {
-            const m = members[id];
-            const tags = [];
-            if (id === "leader" && isLeader) tags.push("leader");
-            if (m?.url && m.url === g.myUrl) tags.push("this node");
-            if (m?.kind === "broadband") tags.push("broadband");
-            if (m?.kind === "broadband" && m?.publicIp) tags.push(`ip=${m.publicIp}`);
-            if (m?.kind === "broadband" && m?.lastSeen) {
-              const ago = Math.round((Date.now() - m.lastSeen) / 1000);
-              tags.push(ago < 90 ? `via leader ${ago}s ago` : "stale");
-            }
-            const tag = tags.length ? `  [${tags.join(", ")}]` : "";
-            console.log(`      ${m?.url || id}${tag}`);
-          }
-        }
-      }
-    }
-  } else {
-    console.log("\njoined groups: (none — use -creategroup or -addtogroup)");
-  }
-
-  const peers = createPeersService({});
-  const allPeers = peers.all();
-  if (allPeers.length) {
-    console.log(`\nfailover targets (${allPeers.length}):`);
-    for (const p of allPeers) {
-      const tags = [];
-      if (peers.isCooling(p.url)) tags.push("cooling");
-      if (peers.isHot(p.url)) tags.push("hot");
-      const s = peers.stat(p.url);
-      if (s?.latencyMs != null) tags.push(`${s.latencyMs}ms`);
-      if (s?.fails) tags.push(`${s.fails} fail(s)`);
-      const tag = tags.length ? `  [${tags.join(", ")}]` : "";
-      console.log(`  ${p.name || p.url}  ${p.url}${tag}`);
-    }
-  } else {
-    console.log(`\nfailover: (none — 加组后自动出现，mslxdff -group list)`);
-  }
-
-  const groupNames = Object.keys(groups.list());
-  if (groupNames.length) {
-    console.log(`\ngroups on this node (${groupNames.length}):`);
-    for (const n of groupNames) console.log(`  ${n}`);
-  }
-
-  // recent calls — 补首字/tok/s 信息，原来只看 duration
-  console.log("\nrecent calls: (gateway 持久化，最近5条，含首字/tok/s)");
-  const calls = recentCalls(5);
-  if (calls.length) {
-    let sumDur = 0, sumTps = 0, tpsN = 0;
-    for (const c of calls) {
-      if (Number.isFinite(c.durationMs)) sumDur += c.durationMs;
-      else if (Number.isFinite(c.totalMs)) sumDur += c.totalMs;
-      if (Number.isFinite(c.tps)) { sumTps += c.tps; tpsN++; } else if (Number.isFinite(c.charsPerSec)) { sumTps += c.charsPerSec; tpsN++; }
-    }
-    const avgDur = calls.length ? Math.round(sumDur / calls.length) : null;
-    const avgTps = tpsN ? Math.round(sumTps / tpsN) : null;
-    console.log(`  avg ${avgDur ? avgDur + "ms" : "—"}${avgTps ? ` · ${avgTps} tok/s` : ""}  —  mslxdff -log 20 查看详情`);
-    for (const c of calls) {
-      const dur = c.totalMs ?? c.durationMs;
-      const ttfb = c.ttfbMs != null ? ` 首字${c.ttfbMs}ms` : "";
-      const tps = c.tps != null ? ` ${c.tps}tok/s` : (c.charsPerSec ? ` ${c.charsPerSec}ch/s` : "");
-      const tok = c.usage?.completion_tokens != null ? ` tok${c.usage.completion_tokens}` : (c.chars ? ` ch${c.chars}` : "");
-      const tm = fmtTs(c.ts);
-      console.log(`  ${tm}  ${(c.model || "-").padEnd(28)}  ${String(c.status || "-").padEnd(4)}  ${dur ? dur + "ms" : ""}${ttfb}${tps}${tok}${c.auto ? "  auto" : ""}`);
-    }
-  } else {
-    console.log("  (none yet — 发一次请求后出现，mslxdff -chat hi)");
-  }
-
-  console.log("\nlast error:");
-  const err = lastError();
-  if (err) {
-    console.log(`  ${fmtTs(err.ts)}  ${err.model || "-"}  ${err.status}  ${err.message || ""}`);
-    if (err.stack) console.log(`  ${String(err.stack).slice(0, 200)}`);
-  } else {
-    console.log("  (none — 暂无错误，挺好)");
-  }
-
-  if (daemon && alive) console.log(`\nauth token: use \`mslxdff -showtoken\`  ·  health: http://127.0.0.1:${port}/health`);
-  else console.log(`\nnot running — start with: mslxdff -d  ·  查看日志 mslxdff -log 20`);
-  console.log(`hints: mslxdff -providers list · mslxdff -model status · mslxdff -group list · mslxdff -autostart status`);
-}
-
-function fmtStatus(id, statuses) {
-  const e = statuses[id];
-  if (typeof e === "number") return `error ${fmtTs(e)}`;
-  if (!e?.status || e.status === "normal") return "";
-  const when = e.at ? ` ${fmtTs(e.at)}` : "";
-  const code = e.code ? ` HTTP ${e.code}` : "";
-  return `${e.status}${when}${code}`;
-}
-
-function fmtDur(ms) {
-  if (!Number.isFinite(ms)) return "?";
-  return ms < 1000 ? `${Math.round(ms)}ms` : `${(ms / 1000).toFixed(1)}s`;
-}
-
-function fmtUptime(ms) {
-  if (!Number.isFinite(ms) || ms < 0) return "?";
-  const s = Math.floor(ms / 1000);
-  if (s < 60) return `${s}s`;
-  const m = Math.floor(s / 60);
-  const h = Math.floor(m / 60);
-  const d = Math.floor(h / 24);
-  if (d) return `${d}d${h % 24}h`;
-  if (h) return `${h}h${m % 60}m`;
-  return `${m}m${s % 60}s`;
-}
-
-function fmtEvent(e) {
-  const t = e?.ts ? fmtShanghaiHMS(e.ts) : "--:--:--";
-  const head = `[${t}]`;
-  const m = (x) => x || "-";
-  const fallbackTag = e.fallback?.fallback ? ` fallback=${e.fallback.requested_model || e.requested}->${e.fallback.actual_model || e.actual}(${e.fallback.reason || e.reason})` : "";
-  switch (e?.type) {
-    case "request":
-      return `${head} request       client-> ${m(e.requested || e.model)}${e.auto ? " (auto)" : ""} raw=${m(e.rawModel)} lock=${m(e.lockModel)} hops=${e.hops} from ${e.ip || "?"}${e.stream ? " stream" : ""}${e.prompt ? ` content="${e.prompt}"` : ""} reqId=${e.reqId || ""}`;
-    case "client-request":
-      return `${head} client req    客户端请求 model=${m(e.requested)} raw=${m(e.rawModel)} lock=${m(e.lockModel)} ip=${e.ip || "?"}${e.stream ? " stream" : ""}`;
-    case "ordered":
-      return `${head} ordered       尝试顺序 [${(e.order||[]).join(" -> ")}] canFallback=${e.canFallback} useAuto=${e.useAuto}`;
-    case "model-try":
-      return `${head} model-try     尝试本地 model=${m(e.model)} idx=${e.idx} reqId=${e.reqId || ""}`;
-    case "upstream-try":
-      return `${head} upstream try  上游请求 model=${m(e.model)} attempt=${e.attempt || 1}`;
-    case "upstream-done":
-      return `${head} upstream ok   ${m(e.model)} HTTP ${e.status}${e.timing ? ` total=${e.timing.totalMs}ms` : ""}`;
-    case "upstream-error":
-      return `${head} upstream err  ${m(e.model)} ${e.status ? `HTTP ${e.status}` : "network"}: ${m(e.message)}`;
-    case "upstream-preheat":
-      if (e.skipped) return `${head} preheat       跳过 (MSLXDFF_PREHEAT disabled)`;
-      return `${head} preheat       预热 opencode models ${e.ok ? "ok" : "fail"} ${e.status ? `HTTP ${e.status}` : e.error || ""} ${e.ms ? `${e.ms}ms` : ""}`;
-    case "peer-race-start":
-      return `${head} peer race     开始并发给组员 model=${m(e.model)} peers=${e.peers}`;
-    case "peer-health":
-      return `${head} peer check    ${e.peer} -> ${e.count ? e.healthy.join(", ") : "no healthy models"}${e.strict ? " (strict)" : ""}`;
-    case "peer-request":
-      return `${head} peer req      并发发出 peer=${e.peer} model=${m(e.model)} hops=${e.hops}`;
-    case "peer-forward":
-      return `${head} peer resp     收到响应 peer=${e.peer} model=${m(e.model)} ${e.ok ? "ok" : "fail"} ${e.latencyMs ? `${e.latencyMs}ms` : ""} hops=${e.hops}${e.retry ? " (retry)" : ""}`;
-    case "peer-error":
-      return `${head} peer err      ${e.peer} ${e.status ? `HTTP ${e.status}` : "network"}: ${m(e.message)} model=${m(e.model)}`;
-    case "peer-race-win":
-      return `${head} peer win      选中 peer=${e.winPeer} model=${m(e.winTarget)} latency=${e.latencyMs}ms`;
-    case "peer-race-lose":
-      return `${head} peer lose     组员全部失败 model=${m(e.model)}`;
-    case "fallback":
-      return `${head} fallback      ${m(e.from)} -> ${m(e.to)} reason=${m(e.reason)}`;
-    case "fallback-notice":
-      return `${head} fallback!     客户端请求 ${m(e.requested)} 实际返回 ${m(e.actual)} 原因=${m(e.reason)} via=${m(e.via)} notice=${m(e.notice)}`;
-    case "relay-try":
-      return `${head} relay try     给宽带中继请求 target=${e.target} model=${m(e.model)} via=${e.via}`;
-    case "relay-fail":
-      return `${head} relay fail    ${e.target} ${e.status ? `HTTP ${e.status}` : ""} ${m(e.message)}`;
-    case "relay-ip-change":
-      return `${head} relay ip      ${e.member || e.id || "?"} ${e.oldIp || "?"} -> ${e.newIp || e.publicIp || "?"} via leader`;
-    case "relay-forward":
-      return `${head} relay fwd     ${e.target || e.peer || "?"} via leader model=${m(e.model)} hops=${e.hops || 0}`;
-    case "relay-heartbeat":
-      return `${head} relay hb      ${e.member || "?"} ip=${e.ip || "?"} lastSeen=${e.lastSeen ? fmtShanghaiHMS(e.lastSeen) : "?"}`;
-    case "client-abort":
-      return `${head} client abort  ${m(e.model)} total=${fmtDur(e.totalMs)}`;
-    case "result":
-      return `${head} result        返回客户端 status=${e.status} model=${m(e.model)} via=${e.via} 响应耗时 ${fmtDur(e.durationMs)}${fallbackTag}`;
-    case "client-response":
-      return `${head} client res    返回客户端 客户端请求 ${m(e.requested)} 实际返回 ${m(e.actual)} via=${m(e.via)}${e.fallback?.fallback ? ` fallback=${e.fallback.requested_model}->${e.fallback.actual_model}(${e.fallback.reason})` : " 无fallback"} status=${e.status}`;
-    case "auto-update-enabled":
-      return `${head} auto-update   enabled every ${Math.round((e.intervalMs||0)/60000)}m current=${e.current}`;
-    case "auto-update-disabled":
-      return `${head} auto-update   disabled current=${e.current}`;
-    case "auto-update-check":
-      return `${head} auto-update   checking current=${e.current}`;
-    case "auto-update-query":
-      return `${head} auto-update   querying npm current=${e.current}`;
-    case "auto-update-queried":
-      return `${head} auto-update   queried current=${e.current} latest=${e.latest} raw=${(e.stdout||"").slice(0,80)}`;
-    case "auto-update-noop":
-      return `${head} auto-update   noop current=${e.current} latest=${e.latest}${e.reason?` reason=${e.reason}`:""}`;
-    case "auto-update-found":
-      return `${head} auto-update   NEW v${e.current} -> v${e.latest} 发现新版本`;
-    case "auto-update-installing":
-      return `${head} auto-update   installing v${e.latest}...`;
-    case "auto-update-installed":
-      return `${head} auto-update   installed v${e.latest}`;
-    case "auto-update-restarting":
-      return `${head} auto-update   restarting daemon to v${e.latest}...`;
-    case "auto-update-restarted":
-      return `${head} auto-update   restarted pid=${e.newPid} v${e.current} -> v${e.latest} 升级完成`;
-    case "auto-update-failed":
-    case "auto-update-query-failed":
-    case "auto-update-install-failed":
-      return `${head} auto-update   failed ${e.type} error=${e.error||""}`;
-    default:
-      return `${head} ${e?.type || "?"} ${JSON.stringify(e || {})}`;
-  }
-}
-
-function fmtTs(iso) {
-  return fmtShanghai(iso);
-}
-
-function npmCmd() {
-  return process.platform === "win32" ? "npm.cmd" : "npm";
-}
-
-function run(cmd, args, opts = {}) {
-  const isWin = process.platform === "win32";
-  return new Promise((resolve) => {
-    // npm.cmd is a batch file on Windows — execFile needs shell:true to find it via PATHEXT
-    const execOpts = isWin ? { shell: true, windowsHide: true } : {};
-    execFile(cmd, args, { timeout: 120_000, ...execOpts, ...opts }, (err, stdout, stderr) => resolve({ err, stdout, stderr }));
-  });
-}
-
-async function updateSelf() {
-  console.log(`mslxdff v${VERSION} — checking for updates…`);
-  const info = await run(npmCmd(), ["view", "mslxdff", "dist-tags.latest", "--json"]);
-  if (info.err) {
-    console.error(`could not query npm: ${info.err.message || String(info.stderr || "").slice(0, 500)}`);
-    process.exit(1);
-  }
-  let latest = "";
-  try {
-    latest = JSON.parse(String(info.stdout || "").trim());
-    if (Array.isArray(latest)) latest = latest[latest.length - 1];
-    latest = String(latest || "").trim();
-  } catch {
-    const m = String(info.stdout || "").trim().match(/(\d+\.\d+\.\d+[^\s'"]*)/);
-    latest = m ? m[1] : "";
-  }
-  latest = String(latest || "").replace(/['"]/g, "").trim();
-  const version = VERSION;
-  console.log(`  installed: ${version}`);
-  console.log(`  latest:    ${latest || "unknown"}`);
-  if (!latest || version === latest || compareSemver(latest, version) <= 0) {
-    console.log("already up to date");
-    process.exit(0);
-  }
-  console.log(`updating to ${latest}…`);
-  const up = await run(npmCmd(), ["install", "-g", `mslxdff@${latest}`], { stdio: "inherit" });
-  if (up.err) {
-    console.error(`update failed: ${up.err.message}`);
-    process.exit(1);
-  }
-  console.log(`updated to ${latest}`);
-  const daemon = readPid();
-  if (daemon) {
-    console.log("restarting daemon on the new version…");
-    stopDaemon();
-    startDaemon([]);
-    await waitForHealth(resolvePort(), 4000);
-    console.log(`restarted (pid ${readPid()})`);
-  }
-}
+// thin adapter — all logic lives in src/cli (deep module, single inlet run)
+import { run } from "../src/cli/index.js";
+await run(process.argv.slice(2));