mslxdff 0.1.91 → 0.1.93

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mslxdff",
-  "version": "0.1.91",
+  "version": "0.1.93",
   "description": "测试项目，请勿使用。",
   "type": "module",
   "bin": {

package/src/cli/commands/provider/bench-via.js

@@ -25,9 +25,37 @@ export function buildHeadersForProvider(providerId, apiKey, auth) {
   return h;
 }
 
-export async function handleVia({ providerId, opts, fetchImpl, loadConfigs, loadKeys, loadAllowed, loadBaseUrl }) {
+// bench 取数口径：只测（allowlist ∩ 全局 picks）交集。
+// 两套勾选会分叉（allowlist 管上游放行，picks 是用户 curated 集），直接测 allowlist 会打到未勾选模型、漏掉已勾选模型。
+// picks 为空时原样通过（兼容纯 allowlist 用户）。
+export function filterBenchModels({ providerId, allowed, picks, allowAny = false } = {}) {
+  const pid = String(providerId ?? "");
+  const isOpen = pid.toLowerCase() === "opencode";
+  let list = [...new Set((Array.isArray(allowed) ? allowed : []).map((m) => String(m ?? "").trim()).filter(Boolean))];
+  const all = [...new Set((Array.isArray(picks) ? picks : []).map((p) => String(p ?? "").trim()).filter(Boolean))];
+  // opencode 默认 allowAny 且 allowlist 常空：候选即裸 picks
+  if (!list.length && allowAny && isOpen && all.length) {
+    list = [];
+    for (const p of all) {
+      if (!p.includes("/")) list.push(p);
+      else if (p.toLowerCase().startsWith("opencode/")) list.push(p.slice(9));
+    }
+    list = [...new Set(list.map((m) => m.trim()).filter(Boolean))];
+  }
+  if (!all.length) return { models: list, skippedUnpicked: 0, pickedBlocked: [] };
+  const hit = (m) => all.includes(`${pid}/${m}`) || (isOpen && (all.includes(m) || all.includes(`opencode/${m}`)));
+  const models = list.filter(hit);
+  const inAllowed = new Set(list);
+  const pickedBlocked = all.filter((p) => {
+    if (isOpen) return !p.includes("/") && !inAllowed.has(p);
+    return p.startsWith(`${pid}/`) && !inAllowed.has(p.slice(pid.length + 1));
+  });
+  return { models, skippedUnpicked: list.length - models.length, pickedBlocked };
+}
+
+export async function handleVia({ providerId, opts, fetchImpl, loadConfigs, loadKeys, loadAllowed, loadBaseUrl, loadAllowAny, loadModelPicks, getOnlinePeersFn }) {
   const { getOnlinePeers, orchestrateVia, resolveIncludeOpencode } = await import("../../../bench/via.js");
-  const peers = await getOnlinePeers();
+  const peers = await (typeof getOnlinePeersFn === "function" ? getOnlinePeersFn() : getOnlinePeers());
   if (!peers.length) {
     const msg = "未加入组或无在线 peer，--via 无意义。先 mslxdff -group list / -addtogroup";
     if (opts.json) console.log(JSON.stringify({ meta: { at: new Date().toISOString(), samples: opts.samples, timeout: opts.timeoutMs, includeOpencode: false, peers: [], opencodeSkipped: true }, results: [], advice: msg }, null, 2));
@@ -47,9 +75,23 @@ export async function handleVia({ providerId, opts, fetchImpl, loadConfigs, load
     const log = (s) => (opts.json ? console.error(s) : console.log(s));
     includeOpencode = await resolveIncludeOpencode({ includeOpencode, isTTY, confirmFn, log });
   }
-  const { loadToken } = await import("../../../state.js");
+  const stateMod = await import("../../../state.js");
+  const { loadToken } = stateMod;
   let token = "";
   try { token = (await loadToken()).token || ""; } catch {}
+  let picks = [];
+  try {
+    picks = typeof loadModelPicks === "function"
+      ? (loadModelPicks() || [])
+      : (typeof stateMod.loadModelPicks === "function" ? stateMod.loadModelPicks() || [] : []);
+  } catch { picks = []; }
+  const allowAnyOf = (pid) => {
+    try {
+      if (typeof loadAllowAny === "function") return loadAllowAny(pid);
+      if (typeof stateMod.loadProviderAllowAnyModels === "function") return stateMod.loadProviderAllowAnyModels(pid);
+    } catch {}
+    return String(pid || "").toLowerCase() === "opencode";
+  };
   let targetIds = [];
   const isAll = providerId === "bench" || providerId === "all";
   if (isAll) {
@@ -68,6 +110,10 @@ export async function handleVia({ providerId, opts, fetchImpl, loadConfigs, load
       for (const k of Object.keys(raw.providerKeys || {})) if (!targetIds.includes(k) && (loadAllowed(k) || []).length) targetIds.push(k);
     } catch {}
     if (!targetIds.length) targetIds = ["openrouter", "workbuddy", "clinebot"].filter((p) => (loadAllowed(p) || []).length);
+    // opencode 默认 allowAny 但 allowlist 常空：有裸 picks 且确认包含 opencode 时纳入
+    if (includeOpencode && !targetIds.includes("opencode") && picks.some((p) => !String(p).includes("/") || String(p).toLowerCase().startsWith("opencode/"))) {
+      targetIds.push("opencode");
+    }
   } else {
     targetIds = [providerId];
   }
@@ -80,13 +126,20 @@ export async function handleVia({ providerId, opts, fetchImpl, loadConfigs, load
     const keys = loadKeys(pid) || [];
     const allowed = loadAllowed(pid) || [];
     const baseUrl = (loadBaseUrl(pid) || cfg.baseUrl || "").trim();
-    if (!allowed.length) { viaLog(`provider ${pid}: 无勾选模型，跳过`); continue; }
+    const picked = filterBenchModels({ providerId: pid, allowed, picks, allowAny: allowAnyOf(pid) });
+    if (!picked.models.length) {
+      if (!allowed.length && !(pid === "opencode" && allowAnyOf(pid))) viaLog(`provider ${pid}: 无勾选模型，跳过`);
+      else viaLog(`provider ${pid}: allowlist ${allowed.length} 个模型都不在全局 picks 中，跳过（如需测请 -model pick）`);
+      if (picked.pickedBlocked.length) viaLog(`  已勾选但未进 allowlist（先 allowlist set）：${picked.pickedBlocked.join(" ")}`);
+      continue;
+    }
+    if (picked.skippedUnpicked) viaLog(`provider ${pid}: 跳过 ${picked.skippedUnpicked} 个未勾选模型，只测 ${picked.models.length} 个已勾选`);
     if (!baseUrl && pid !== "opencode") { viaLog(`provider ${pid}: missing baseUrl 跳过`); continue; }
     if (!keys.length && pid !== "opencode") { viaLog(`provider ${pid}: 未配置 Key 跳过`); continue; }
     const chatPath = cfg.chatPath || defaultChatPath(pid);
     let auths = [];
     try { const m = await import("../../../state.js"); auths = m.loadProviderAuths ? m.loadProviderAuths(pid) : []; } catch {}
-    const models = allowed.map((id) => ({ provider: pid, model: String(id), id: String(id) }));
+    const models = picked.models.map((id) => ({ provider: pid, model: String(id), id: String(id) }));
     const directRunner = async ({ provider, model }) => {
       const p = provider || pid;
       const idx = models.findIndex((x) => x.model === model);

package/src/cli/commands/provider/bench.js

@@ -6,7 +6,7 @@ import { isRefreshToken } from "../../../providers/cline/headers.js";
 import { refreshTokenForBase } from "../../../providers/cline/auth.js";
 import { clineBenchOne } from "../../../bench/cline-bench.js";
 import { workbuddyBenchOne } from "../../../bench/workbuddy-bench.js";
-import { buildHeadersForProvider, handleVia } from "./bench-via.js";
+import { buildHeadersForProvider, filterBenchModels, handleVia } from "./bench-via.js";
 
 function parseBenchArgs(rest) {
   const opts = { json: false, prompt: "hi", maxTokens: 32, timeoutMs: 30000, via: false, includeOpencode: false, samples: 1, apply: false };
@@ -36,13 +36,14 @@ export async function handleProviderBench(id, sub, rest, args, deps = {}) {
   if (!isBench) return false;
   const opts = parseBenchArgs(_restArr);
   if (opts.via) {
-    const loadConfigs = deps.loadProviderConfigs || (await import("../../../state.js")).loadProviderConfigs;
-    const loadKeys = deps.loadProviderKeys || (await import("../../../state.js")).loadProviderKeys;
-    const loadAllowed = deps.loadProviderAllowedModels || (await import("../../../state.js")).loadProviderAllowedModels;
-    const loadBaseUrl = deps.loadProviderBaseUrl || (await import("../../../state.js")).loadProviderBaseUrl;
+    const stateMod = await import("../../../state.js");
+    const loadConfigs = deps.loadProviderConfigs || stateMod.loadProviderConfigs;
+    const loadKeys = deps.loadProviderKeys || stateMod.loadProviderKeys;
+    const loadAllowed = deps.loadProviderAllowedModels || stateMod.loadProviderAllowedModels;
+    const loadBaseUrl = deps.loadProviderBaseUrl || stateMod.loadProviderBaseUrl;
     const viaPid = _isBenchViaAll ? "bench" : String(id || "").trim();
     if (!viaPid) { console.error("usage: mslxdff -provider <id> bench --via [--json] [--include-opencode]"); process.exit(1); }
-    await handleVia({ providerId: viaPid, opts, fetchImpl: deps.fetchImpl || globalThis.fetch, loadConfigs, loadKeys, loadAllowed, loadBaseUrl });
+    await handleVia({ providerId: viaPid, opts, fetchImpl: deps.fetchImpl || globalThis.fetch, loadConfigs, loadKeys, loadAllowed, loadBaseUrl, loadAllowAny: deps.loadProviderAllowAnyModels || stateMod.loadProviderAllowAnyModels, loadModelPicks: deps.loadModelPicks, getOnlinePeersFn: deps.getOnlinePeers });
     return true;
   }
   const fetchImpl = deps.fetchImpl || globalThis.fetch;
@@ -58,6 +59,12 @@ export async function handleProviderBench(id, sub, rest, args, deps = {}) {
   const keys = loadKeys(providerId) || [];
   const allowed = loadAllowed(providerId) || [];
   const allowAny = loadAllowAny(providerId);
+  let picks = [];
+  try {
+    const m = await import("../../../state.js");
+    picks = typeof deps.loadModelPicks === "function" ? (deps.loadModelPicks() || []) : (typeof m.loadModelPicks === "function" ? m.loadModelPicks() || [] : []);
+  } catch { picks = []; }
+  const picked = filterBenchModels({ providerId, allowed, picks, allowAny });
   const baseUrl = (loadBaseUrl(providerId) || cfg.baseUrl || "").trim();
   let auths = [];
   try { const m = await import("../../../state.js"); auths = m.loadProviderAuths ? m.loadProviderAuths(providerId) : []; } catch {}
@@ -81,18 +88,26 @@ export async function handleProviderBench(id, sub, rest, args, deps = {}) {
     if (opts.json) console.log(JSON.stringify({ ok: true, data: list, hint: `pick then bench` }, null, 2));
     process.exit(0);
   }
+  if (picks.length && !picked.models.length) {
+    console.log(`provider ${providerId}: allowlist ${allowed.length} 个模型都不在全局 picks 中，不测速（只测勾选）。`);
+    if (picked.pickedBlocked.length) console.log(`已勾选但未进 allowlist：${picked.pickedBlocked.join(" ")} → mslxdff -provider ${providerId} allowlist set <model>`);
+    else console.log(`先勾选：mslxdff -model pick ${providerId}/<model>`);
+    process.exit(0);
+  }
   const log = (s) => (opts.json ? console.error(s) : console.log(s));
-  log(`bench ${providerId}: 共 ${allowed.length} 个已勾选模型，逐个测速（串行，${opts.timeoutMs}ms 超时）...`);
+  log(`bench ${providerId}: 共 ${picked.models.length} 个已勾选模型，逐个测速（串行，${opts.timeoutMs}ms 超时）...`);
+  if (picked.skippedUnpicked) log(`跳过 ${picked.skippedUnpicked} 个未勾选模型`);
   if (!opts.json) console.log(`prompt="${opts.prompt}" maxTokens=${opts.maxTokens}\n`);
   const chatPath = cfg.chatPath || defaultChatPath(providerId);
   const rtKeys = keys.filter((k) => isRefreshToken(k, providerId));
   const normBase = String(baseUrl).replace(/\/+$/, "");
   const clineChatBase = normBase.endsWith("/api/v1") ? normBase.slice(0, -7) : normBase;
   const results = [];
-  for (let i = 0; i < allowed.length; i++) {
-    const raw = allowed[i];
+  const benchModels = picked.models;
+  for (let i = 0; i < benchModels.length; i++) {
+    const raw = benchModels[i];
     const model = String(raw || "").trim();
-    if (!opts.json) process.stdout.write(`  [${i + 1}/${allowed.length}] ${model} ... `);
+    if (!opts.json) process.stdout.write(`  [${i + 1}/${benchModels.length}] ${model} ... `);
     const kIdx = i % (keys.length || 1);
     const aIdx = Math.min(kIdx, Math.max(auths.length - 1, 0));
     const key = keys[kIdx];

package/src/cli/commands/provider/cline-login.js

@@ -7,17 +7,48 @@ export async function handleClineLogin(id, sub) {
   const WORKOS_AUTH = "https://api.workos.com/user_management/authenticate";
   const CLINE_REGISTER = "https://api.cline.bot/api/v1/auth/register";
 
+  // 网络层：支持代理（读环境变量）+ 超时 + 人话报错。
+  // 直连 api.workos.com 在部分网络下 TCP 会被墙（DNS 通但 443 超时），此时必须走代理。
+  const PROXY_URL = (process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || "").trim();
+  let dispatcher = null;
+  if (PROXY_URL) {
+    try {
+      const { ProxyAgent } = await import("undici");
+      dispatcher = new ProxyAgent(PROXY_URL);
+    } catch (e) {
+      console.error(`⚠️ 代理变量 ${PROXY_URL} 不可用（${e.message}），回退直连`);
+    }
+  }
+  function netHint(e, url) {
+    const host = (() => { try { return new URL(url).host; } catch { return url; } })();
+    const cause = e?.cause || e;
+    const code = cause?.code || cause?.name || "";
+    if (code === "ENOTFOUND" || code === "EAI_AGAIN") return `DNS 解析失败（${host}），检查 DNS/网络`;
+    if (code === "ECONNREFUSED") return `连接被拒（${host}），检查代理是否开启`;
+    if (code === "ETIMEDOUT" || code === "UND_ERR_CONNECT_TIMEOUT" || e?.name === "TimeoutError") return `连接 ${host} 超时（直连可能被墙），请开代理后重试：set HTTPS_PROXY=http://127.0.0.1:7890 再跑 login`;
+    if (!PROXY_URL && /workos\.com|cline\.bot/.test(host)) return `直连 ${host} 失败（${code || e.message}），疑似被墙，请开代理后重试`;
+    return `${code || e.message}`;
+  }
+  // 注意：dispatcher 为 null 时不能显式传给 fetch（undici 会断言失败），有代理才带。
+  const extraOpts = dispatcher ? { dispatcher } : {};
   async function postForm(url, form) {
     const body = new URLSearchParams(form).toString();
-    const res = await fetch(url, { method: "POST", headers: { "Content-Type": "application/x-www-form-urlencoded" }, body });
+    let res;
+    try {
+      res = await fetch(url, { method: "POST", headers: { "Content-Type": "application/x-www-form-urlencoded" }, body, ...extraOpts, signal: AbortSignal.timeout(20000) });
+    } catch (e) { throw new Error(`连不上 WorkOS：${netHint(e, url)}`); }
     const txt = await res.text();
     try { return JSON.parse(txt); } catch { throw new Error(`WorkOS 返回非 JSON: ${txt.slice(0, 200)}`); }
   }
   async function postJson(url, obj) {
-    const res = await fetch(url, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(obj) });
+    let res;
+    try {
+      res = await fetch(url, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(obj), ...extraOpts, signal: AbortSignal.timeout(20000) });
+    } catch (e) { throw new Error(`连不上 Cline：${netHint(e, url)}`); }
     const txt = await res.text();
     try { return JSON.parse(txt); } catch { throw new Error(`Cline 返回非 JSON: ${txt.slice(0, 200)}`); }
   }
+  if (PROXY_URL && dispatcher) console.log(`🌐 检测到代理：${PROXY_URL}\n`);
 
   console.log("🚀 启动 Cline WorkOS 设备授权流程...\n");
   let device;

package/src/cli/commands/provider/index.js

@@ -65,6 +65,8 @@ export async function handleProvider(args) {
   }
   const { handleClineLogin } = await import("./cline-login.js");
   if (await handleClineLogin(id, sub)) return true;
+  const { handleWorkbuddyLogin } = await import("./workbuddy-login.js");
+  if (await handleWorkbuddyLogin(id, sub, rest)) return true;
   const { handleProviderConfig } = await import("./config.js");
   if (await handleProviderConfig(id, sub, rest)) return true;
   const { handleProviderAllowlist } = await import("./allowlist.js");

package/src/cli/commands/provider/workbuddy-login.js

@@ -0,0 +1,152 @@
+// mslxdff -provider workbuddy login — WorkBuddy 官方设备授权流（对标 clinebot login）。
+// 学自 Sliverkiss/workbuddy2api（cmd/login）：POST /v2/plugin/auth/state 拿 state+authUrl →
+// 浏览器登录 → GET /v2/plugin/auth/token?state= 轮询 → GET /v2/plugin/login/account?state= 拿 uid。
+// 不走 whistle/MITM，不依赖 codebuddy CLI，自然支持多账号追加。
+
+const BASE = "https://copilot.tencent.com";
+// UA 是上游指纹：集中一处，版本过期时改这里或用 MSLXDFF_WORKBUDDY_UA 覆盖。
+const UA = process.env.MSLXDFF_WORKBUDDY_UA || "CLI/2.63.2 CodeBuddy/2.63.2";
+const ORIGIN = "https://www.codebuddy.cn";
+
+function baseHeaders() {
+  return {
+    "Content-Type": "application/json",
+    Accept: "application/json, text/plain, */*",
+    "X-Requested-With": "XMLHttpRequest",
+    Origin: ORIGIN,
+    Referer: `${ORIGIN}/`,
+    "User-Agent": UA,
+  };
+}
+
+async function readEnvelope(res) {
+  const txt = await res.text();
+  let j;
+  try { j = JSON.parse(txt); } catch { throw new Error(`WorkBuddy 返回非 JSON: ${txt.slice(0, 200)}`); }
+  return j;
+}
+
+export async function requestDeviceState(fetchImpl = globalThis.fetch) {
+  const res = await fetchImpl(`${BASE}/v2/plugin/auth/state?platform=CLI`, {
+    method: "POST",
+    headers: baseHeaders(),
+    body: "{}",
+    signal: AbortSignal.timeout(20000),
+  });
+  const j = await readEnvelope(res);
+  if (j.code !== 0 || !j.data?.state || !j.data?.authUrl) {
+    throw new Error(`获取授权失败: code=${j.code} ${j.msg || ""}`.trim());
+  }
+  return { state: j.data.state, authUrl: j.data.authUrl };
+}
+
+// 单次轮询：pending（业务 code 非 0）返回 null；HTTP 5xx 抛错；成功返回 token bundle。
+export async function pollDeviceToken(fetchImpl = globalThis.fetch, state) {
+  let res;
+  try {
+    res = await fetchImpl(`${BASE}/v2/plugin/auth/token?state=${encodeURIComponent(state)}`, {
+      headers: baseHeaders(),
+      signal: AbortSignal.timeout(20000),
+    });
+  } catch (e) { throw new Error(`轮询失败: ${e.message}`); }
+  if (res.status >= 500) throw new Error(`token 端点故障: HTTP ${res.status}`);
+  const j = await readEnvelope(res);
+  if (j.code !== 0 || !j.data?.accessToken) return null; // pending: "login ing"
+  return {
+    accessToken: j.data.accessToken,
+    refreshToken: j.data.refreshToken || "",
+    expiresIn: Number(j.data.expiresIn) || 5184000,
+    domain: j.data.domain || "www.codebuddy.cn",
+  };
+}
+
+export async function fetchDeviceAccount(fetchImpl = globalThis.fetch, state, accessToken) {
+  const res = await fetchImpl(`${BASE}/v2/plugin/login/account?state=${encodeURIComponent(state)}`, {
+    headers: { ...baseHeaders(), Authorization: `Bearer ${accessToken}` },
+    signal: AbortSignal.timeout(20000),
+  });
+  const j = await readEnvelope(res);
+  if (j.code !== 0 || !j.data?.uid) throw new Error(`获取账号失败: code=${j.code} ${j.msg || ""}`.trim());
+  return { uid: j.data.uid, enterpriseId: j.data.enterpriseId || "", nickname: j.data.nickname || "" };
+}
+
+// 从本机桌面端登录态直接导入（学自 xiaofan6ya/workbuddy2api）：
+// 桌面端明文存着当前登录号的 token，定位逻辑在 desktop-info.js（跨平台发现，不硬编码盘符/厂商目录）。
+// 桌面已登录新号时用这个，无需浏览器、无需抓包。
+export async function importDesktopAccount({ file, localAppData, roots, save } = {}) {
+  const { resolveDesktopInfoPath, readDesktopAccount } = await import("../../../providers/workbuddy/desktop-info.js");
+  const { homedir } = await import("node:os");
+  const { path: fp, via } = resolveDesktopInfoPath({ file, roots, extraRoots: localAppData ? [localAppData] : [], homedir: homedir() });
+  const saveFn = save || (await import("../../../providers/workbuddy/account-store.js")).saveWorkbuddyAccount;
+  const saved = await saveFn(readDesktopAccount(fp));
+  return { ...saved, desktopFile: fp, via };
+}
+
+export async function handleWorkbuddyLogin(id, sub, rest = [], deps = {}) {
+  if (id !== "workbuddy" && id !== "wb") return false;
+  if (sub === "import" || sub === "import-desktop" || sub === "from-desktop") {
+    const fileArg = rest.find((x) => String(x).startsWith("--file="))?.slice("--file=".length);
+    try {
+      const saved = await importDesktopAccount({ file: fileArg, save: deps.saveAccount });
+      console.log(`✅ 已从桌面端导入账号（现 ${saved.accounts} 个账号）：${saved.file}`);
+      console.log("下一步：mslxdff -workbuddy balance  验证余额");
+    } catch (e) {
+      console.error(`❌ ${e.message}`);
+      process.exit(1);
+    }
+    process.exit(0);
+  }
+  if (sub !== "login" && sub !== "auth" && sub !== "oauth") return false;
+  const fetchImpl = deps.fetchImpl || globalThis.fetch;
+
+  console.log("🚀 启动 WorkBuddy 设备授权流程...\n");
+  let dev;
+  try {
+    dev = await requestDeviceState(fetchImpl);
+  } catch (e) {
+    console.error(`❌ 获取授权失败: ${e.message}`);
+    process.exit(1);
+  }
+  console.log("=".repeat(60));
+  console.log("1️⃣  在浏览器打开下面这个链接（用要添加的账号登录）：");
+  console.log(`    ${dev.authUrl}`);
+  console.log("2️⃣  登录成功后回到这里，无需回车，自动继续");
+  console.log("=".repeat(60));
+  console.log("\n🔄 等待你登录（自动轮询，每 5s，最多 5 分钟）...\n");
+
+  const deadline = Date.now() + 5 * 60 * 1000;
+  let bundle = null;
+  while (Date.now() < deadline) {
+    await new Promise((r) => setTimeout(r, 5000));
+    try {
+      bundle = await pollDeviceToken(fetchImpl, dev.state);
+      if (bundle) break;
+      process.stdout.write(".");
+    } catch (e) {
+      console.log(`\n   轮询出错: ${e.message}`);
+    }
+  }
+  if (!bundle) {
+    console.error("\n❌ 登录超时，请确认浏览器已完成登录后重跑 mslxdff -provider workbuddy login");
+    process.exit(1);
+  }
+  console.log("\n✅ 授权成功！获取账号信息...");
+  let acct;
+  try {
+    acct = await fetchDeviceAccount(fetchImpl, dev.state, bundle.accessToken);
+  } catch (e) {
+    console.error(`❌ ${e.message}`);
+    process.exit(1);
+  }
+  const expiresAt = Math.floor(Date.now() / 1000) + bundle.expiresIn;
+  const save = deps.saveAccount || (await import("../../../providers/workbuddy/account-store.js")).saveWorkbuddyAccount;
+  const saved = await save({ uid: acct.uid, enterpriseId: acct.enterpriseId, nickname: acct.nickname, accessToken: bundle.accessToken, refreshToken: bundle.refreshToken, expiresAt, domain: bundle.domain });
+  console.log("=".repeat(60));
+  console.log(`✅ 登录成功! 账号: ${acct.nickname || acct.uid} (${acct.uid.slice(0, 8)}…，现 ${saved.accounts} 个账号${saved.updated ? "·旧号凭证已更新" : ""})`);
+  console.log("=".repeat(60));
+  console.log("\n下一步：");
+  console.log("  mslxdff -restart                         重启网关使新账号生效");
+  console.log("  mslxdff -workbuddy balance               看多号余额（新号次日自动纳入每日签到）");
+  console.log("\n多账号：重复 login 追加，每号独立 uid，对话自动轮换");
+  process.exit(0);
+}

package/src/providers/workbuddy/account-store.js

@@ -0,0 +1,41 @@
+// WorkBuddy 账号落盘：auths/workbuddy-<uid>.json（0600 tmp+rename）+ state.json keys/auths 按 uid 去重追加。
+// token-auto 与 device-login 共用，保证两种入口写出完全一致。
+import { writeFileSync, mkdirSync, existsSync, renameSync, unlinkSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { tmpdir } from "node:os";
+
+export function resolveAuthDir() {
+  if (process.env.WORKBUDDY_AUTH_DIR) return process.env.WORKBUDDY_AUTH_DIR;
+  const sf = process.env.MSLXDFF_STATE_FILE || "";
+  if (sf.includes("mslxdff-test") || process.env.NODE_ENV === "test") return join(tmpdir(), "mslxdff-test-auths");
+  if (sf && sf.includes("mslxdff-")) return join(dirname(sf), "auths");
+  return join(process.cwd(), "auths");
+}
+
+export async function saveWorkbuddyAccount({ uid, enterpriseId = "", nickname = "", accessToken, refreshToken = "", expiresAt = 0, domain = "www.codebuddy.cn", file } = {}) {
+  if (!uid || !accessToken) throw new Error("saveWorkbuddyAccount: 缺少 uid/accessToken");
+  const authDir = resolveAuthDir();
+  mkdirSync(authDir, { recursive: true });
+  const exp = expiresAt || Math.floor(Date.now() / 1000) + 5184000;
+  const doc = { account: { uid, enterpriseId, nickname }, auth: { accessToken, refreshToken, expiresAt: exp, domain } };
+  const fp = join(authDir, `workbuddy-${uid}.json`);
+  const tmp = `${fp}.tmp`;
+  writeFileSync(tmp, JSON.stringify(doc, null, 2), { mode: 0o600 });
+  try {
+    if (existsSync(fp)) unlinkSync(fp);
+    renameSync(tmp, fp);
+  } catch {
+    writeFileSync(fp, JSON.stringify(doc, null, 2), { mode: 0o600 });
+  }
+  // 同步 state（对话轮换只读 state）
+  const { loadProviderConfigs, saveProviderConfig } = await import("../../state.js");
+  const cfg = (loadProviderConfigs(file ? { file } : {})?.workbuddy) || {};
+  const keys = [...(Array.isArray(cfg.keys) ? cfg.keys : [])];
+  const auths = [...(Array.isArray(cfg.auths) ? cfg.auths : [])];
+  const row = { uid, domain, enterpriseId, refreshToken };
+  const atIdx = auths.findIndex((a) => a?.uid === uid);
+  if (atIdx >= 0) { keys[atIdx] = accessToken; auths[atIdx] = row; }
+  else { keys.push(accessToken); auths.push(row); }
+  saveProviderConfig("workbuddy", { baseUrl: cfg.baseUrl || "https://copilot.tencent.com", keys, auths }, file ? { file } : {});
+  return { file: fp, accounts: keys.length, updated: atIdx >= 0 };
+}

package/src/providers/workbuddy/checkin.js

@@ -0,0 +1,74 @@
+// WorkBuddy 每日签到 core：纯逻辑 + fetch 注入，被 daemon scheduler 与 CLI 共用。
+// 接口：双域 POST /v2/billing/meter/daily-checkin，code 0=新签成功，10001=已签（幂等成功）。
+
+export const CHECKIN_ENDPOINTS = [
+  "https://www.codebuddy.cn/v2/billing/meter/daily-checkin",
+  "https://copilot.tencent.com/v2/billing/meter/daily-checkin",
+];
+
+function checkinHeaders({ at, uid, domain, enterpriseId }) {
+  return {
+    Authorization: `Bearer ${at}`,
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    "X-User-Id": uid,
+    "X-Domain": domain || "www.codebuddy.cn",
+    "X-Product": "SaaS",
+    "User-Agent": "CLI/2.115.0 WorkBuddy/2.115.0",
+    Origin: "https://www.codebuddy.cn",
+    Referer: "https://www.codebuddy.cn/",
+    ...(enterpriseId ? { "X-Enterprise-Id": enterpriseId } : {}),
+  };
+}
+
+export async function checkinOne({ uid, at, domain, enterpriseId, fetchImpl = globalThis.fetch, timeoutMs = 15000 } = {}) {
+  const headers = checkinHeaders({ at, uid, domain, enterpriseId });
+  let last = null;
+  for (const url of CHECKIN_ENDPOINTS) {
+    try {
+      const res = await fetchImpl(url, {
+        method: "POST",
+        headers,
+        body: "{}",
+        signal: AbortSignal.timeout(timeoutMs),
+      });
+      const text = await res.text();
+      let j;
+      try { j = JSON.parse(text); } catch { j = { code: res.status, msg: text.slice(0, 200) }; }
+      last = { url, status: res.status, body: j };
+      if (j.code === 0 || j.code === 10001 || String(j.msg || "").includes("已签到")) {
+        return { ok: true, already: j.code === 10001, ...last };
+      }
+      // 401/403 = token 过期：标记给上层 refresh，不浪费第二域
+      if (res.status === 401 || res.status === 403) return { ok: false, needRefresh: true, ...last };
+    } catch (e) {
+      last = { url, error: String(e?.message || e).slice(0, 200) };
+    }
+  }
+  return { ok: false, ...last };
+}
+
+// 多账号签到：逐个独立，失败不挡别人；返回按 uid 排序的 rows。
+export async function checkinAll({ accounts = [], fetchImpl = globalThis.fetch, concurrency = 3, onAccount } = {}) {
+  const list = (Array.isArray(accounts) ? accounts : []).filter((a) => a && a.uid && a.at);
+  const results = new Array(list.length);
+  let idx = 0;
+  async function worker() {
+    while (idx < list.length) {
+      const i = idx++;
+      const a = list[i];
+      let row;
+      try {
+        const r = await checkinOne({ uid: a.uid, at: a.at, domain: a.domain, enterpriseId: a.enterpriseId, fetchImpl });
+        row = { uid: a.uid, ok: r.ok, already: !!r.already, needRefresh: !!r.needRefresh, code: r.body?.code, msg: r.body?.msg || r.error || "", url: r.url };
+      } catch (e) {
+        row = { uid: a.uid, ok: false, msg: String(e?.message || e).slice(0, 200) };
+      }
+      if (typeof onAccount === "function") { try { await onAccount(row, a); } catch {} }
+      results[i] = row;
+    }
+  }
+  await Promise.all(Array.from({ length: Math.min(Math.max(concurrency, 1), Math.max(list.length, 1)) }, () => worker()));
+  results.sort((a, b) => String(a.uid).localeCompare(String(b.uid)));
+  return results;
+}

package/src/providers/workbuddy/desktop-info.js

@@ -0,0 +1,78 @@
+// 桌面端登录态定位：跨机器可用，不硬编码盘符/厂商目录名。
+// 优先级：显式 file > MSLXDFF_WORKBUDDY_DESKTOP_INFO > 已知后缀快查 > 按文件名 BFS（depth≤6，多命中取 mtime 最新）。
+import { existsSync, readdirSync, statSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+
+export const DESKTOP_INFO_NAME = "workbuddy-desktop.info";
+const KNOWN_SUFFIX = join("CodeBuddyExtension", "Data", "Public", "auth", DESKTOP_INFO_NAME);
+const MAX_DEPTH = 6;
+const MAX_ENTRIES = 30000;
+
+export function candidateRoots({ platform = process.platform, env = process.env, homedir = "" } = {}) {
+  if (platform === "win32") return [env.LOCALAPPDATA, env.APPDATA].filter(Boolean);
+  if (platform === "darwin") return [join(homedir, "Library", "Application Support")].filter(Boolean);
+  return [join(homedir, ".config"), join(homedir, ".local", "share")].filter(Boolean);
+}
+
+function searchByName(roots) {
+  const hits = [];
+  let seen = 0;
+  for (const root of roots) {
+    const queue = [{ dir: root, depth: 0 }];
+    while (queue.length && seen < MAX_ENTRIES) {
+      const { dir, depth } = queue.shift();
+      let names;
+      try { names = readdirSync(dir); } catch { continue; }
+      for (const n of names) {
+        if (++seen > MAX_ENTRIES) break;
+        const fp = join(dir, n);
+        let st;
+        try { st = statSync(fp); } catch { continue; }
+        if (st.isFile() && n === DESKTOP_INFO_NAME) hits.push({ path: fp, mtimeMs: st.mtimeMs });
+        else if (st.isDirectory() && depth < MAX_DEPTH) queue.push({ dir: fp, depth: depth + 1 });
+      }
+    }
+  }
+  hits.sort((a, b) => b.mtimeMs - a.mtimeMs);
+  return hits;
+}
+
+export function resolveDesktopInfoPath({ file, env = process.env, platform = process.platform, homedir = "", extraRoots = [], roots: rootsArg = null } = {}) {
+  const explicit = file || env.MSLXDFF_WORKBUDDY_DESKTOP_INFO;
+  if (explicit) {
+    if (!existsSync(explicit)) throw new Error(`桌面登录态文件不存在: ${explicit}`);
+    return { path: explicit, via: explicit === file ? "file" : "env" };
+  }
+  const roots = rootsArg ?? [...extraRoots, ...candidateRoots({ platform, env, homedir })];
+  for (const r of roots) {
+    const fast = join(r, KNOWN_SUFFIX);
+    if (existsSync(fast)) return { path: fast, via: "known-path" };
+  }
+  const hits = searchByName(roots);
+  if (hits.length) return { path: hits[0].path, via: "search" };
+  throw new Error(
+    `找不到桌面端登录态（已搜: ${roots.join("; ") || "无可用根目录"}）。` +
+    "确认桌面端已登录，或用 --file=路径 / MSLXDFF_WORKBUDDY_DESKTOP_INFO 显式指定 workbuddy-desktop.info"
+  );
+}
+
+export function readDesktopAccount(fp) {
+  let j;
+  try {
+    j = JSON.parse(readFileSync(fp, "utf8"));
+  } catch (e) {
+    throw new Error(`读桌面登录态失败: ${fp}（${e.message}，确认桌面端已登录）`);
+  }
+  if (!j?.account?.uid || !j?.auth?.accessToken) throw new Error(`桌面登录态不完整（无 uid/accessToken）: ${fp}`);
+  let exp = Number(j.auth.expiresAt) || 0;
+  if (exp > 1e12) exp = Math.floor(exp / 1000);
+  return {
+    uid: j.account.uid,
+    enterpriseId: "",
+    nickname: j.account.nickname || j.account.phoneNumber || "",
+    accessToken: j.auth.accessToken,
+    refreshToken: j.auth.refreshToken || "",
+    expiresAt: exp,
+    domain: j.auth.domain || "www.codebuddy.cn",
+  };
+}

package/src/runtime/bootstrap.js

@@ -19,4 +19,9 @@ export async function startDaemonMain(VERSION) {
 
   const { setupAutoUpdate } = await import("./auto-update.js");
   setupAutoUpdate({ VERSION, bus, logs });
+
+  const { setupWorkbuddyCheckin } = await import("./workbuddy-checkin.js");
+  void setupWorkbuddyCheckin({ bus, logs }).catch((e) => {
+    try { logs.appendEvent({ ts: Date.now(), type: "workbuddy-checkin-setup-failed", error: String(e?.message || e).slice(0, 200) }); } catch {}
+  });
 }

package/src/runtime/workbuddy-checkin.js

@@ -0,0 +1,119 @@
+// daemon 内置 WorkBuddy 每日自动签到（A 方案）：多账号全签 + 启动补签 + 每日定时。
+// 开关：MSLXDFF_WORKBUDDY_CHECKIN=0 关闭（默认开）；时间：MSLXDFF_WORKBUDDY_CHECKIN_HOUR（默认 9 点本地时）。
+// 幂等：上游 code 10001（今天已签）视为成功；落盘 workbuddyCheckin {date} 防重复。
+
+export function isCheckinEnabled(env = process.env) {
+  const v = String(env.MSLXDFF_WORKBUDDY_CHECKIN ?? "1").trim().toLowerCase();
+  return !["0", "false", "off", "no"].includes(v);
+}
+
+export function getCheckinHour(env = process.env) {
+  const h = Number(env.MSLXDFF_WORKBUDDY_CHECKIN_HOUR);
+  return Number.isInteger(h) && h >= 0 && h <= 23 ? h : 9;
+}
+
+export function todayKey(d = new Date()) {
+  const m = String(d.getMonth() + 1).padStart(2, "0");
+  const day = String(d.getDate()).padStart(2, "0");
+  return `${d.getFullYear()}-${m}-${day}`;
+}
+
+// 到下一次计划点的毫秒数（今天未到点→今天，已过→明天同时）。
+export function nextRunDelayMs(now = new Date(), hour = 9) {
+  const next = new Date(now);
+  next.setHours(hour, 0, 0, 0);
+  if (next.getTime() <= now.getTime()) next.setDate(next.getDate() + 1);
+  return next.getTime() - now.getTime();
+}
+
+// 启动补签：已过今日计划点、且（从没签过 或 上次不是今天）。
+export function shouldCatchUp({ lastDate, now = new Date(), hour = 9 } = {}) {
+  const point = new Date(now);
+  point.setHours(hour, 0, 0, 0);
+  if (now.getTime() < point.getTime()) return false;
+  return !lastDate || lastDate !== todayKey(now);
+}
+
+export async function setupWorkbuddyCheckin({ bus, logs } = {}) {
+  function emit(type, data = {}) {
+    const entry = { ts: Date.now(), type, ...data };
+    try { bus?.emit(entry); } catch {}
+    try { logs?.appendEvent?.(entry); } catch {}
+    console.log(`[workbuddy-checkin] ${type} ${JSON.stringify(data)}`.slice(0, 500));
+  }
+  if (!isCheckinEnabled()) {
+    console.log("[workbuddy-checkin] disabled (set MSLXDFF_WORKBUDDY_CHECKIN=1 to enable)");
+    emit("workbuddy-checkin-disabled");
+    return { enabled: false };
+  }
+  const hour = getCheckinHour();
+  console.log(`[workbuddy-checkin] enabled: daily ${String(hour).padStart(2, "0")}:00 local, multi-account`);
+  emit("workbuddy-checkin-enabled", { hour });
+
+  const stateMod = await import("../state.js");
+  const { checkinAll } = await import("../providers/workbuddy/checkin.js");
+  const { createAuthService, decodeJwtExp } = await import("../providers/workbuddy/auth.js");
+
+  let running = false;
+  async function runOnce(reason) {
+    if (running) return { skipped: "already-running" };
+    running = true;
+    try {
+      const cfg = stateMod.loadProviderConfigs().workbuddy || {};
+      const keys = [...(Array.isArray(cfg.keys) ? cfg.keys : [])];
+      const authList = [...(Array.isArray(cfg.auths) ? cfg.auths : [])];
+      if (!keys.length) {
+        emit("workbuddy-checkin-no-accounts", { reason });
+        return { ok: false, reason: "no-accounts" };
+      }
+      // 先给过期 token 续期（复用 chat 同款 refresh，落盘回 state）
+      const authService = createAuthService({
+        fetchImpl: globalThis.fetch,
+        store: { keys, authList },
+      });
+      await Promise.all(authList.map(async (auth, i) => {
+        try {
+          const exp = typeof decodeJwtExp === "function" ? decodeJwtExp(keys[i]) : null;
+          if (exp && exp - Date.now() / 1000 < 3600) await authService.refreshTokenFor(keys[i], auth);
+        } catch {}
+      }));
+      const accounts = authList.map((a, i) => ({ uid: a.uid, at: keys[i], domain: a.domain, enterpriseId: a.enterpriseId })).filter((a) => a.uid && a.at);
+      const rows = await checkinAll({ accounts, concurrency: 3 });
+      const okCount = rows.filter((r) => r.ok).length;
+      const date = todayKey();
+      try {
+        stateMod.writeStateImmediate(stateMod.defaultStateFile(), {
+          workbuddyCheckin: { date, at: Date.now(), ok: okCount, total: rows.length, accounts: rows.map((r) => ({ uid: r.uid, ok: r.ok, already: r.already })) },
+        });
+      } catch {}
+      for (const r of rows) {
+        emit("workbuddy-checkin-account", { uid: String(r.uid).slice(0, 8), ok: r.ok, already: !!r.already, msg: String(r.msg || "").slice(0, 120), reason });
+      }
+      emit("workbuddy-checkin-done", { date, ok: okCount, total: rows.length, reason });
+      return { ok: okCount > 0, okCount, total: rows.length, rows };
+    } catch (e) {
+      emit("workbuddy-checkin-failed", { error: String(e?.message || e).slice(0, 200), reason });
+      return { ok: false, error: String(e?.message || e).slice(0, 200) };
+    } finally {
+      running = false;
+    }
+  }
+
+  // 启动补签：昨天没签且已过今天计划点，60s 后跑（等网络/上游就绪）
+  try {
+    const lastDate = stateMod.readState(stateMod.defaultStateFile())?.workbuddyCheckin?.date || "";
+    if (shouldCatchUp({ lastDate, hour })) {
+      setTimeout(() => { runOnce("catch-up").catch(() => {}); }, 60_000).unref?.();
+      console.log(`[workbuddy-checkin] catch-up scheduled (last=${lastDate || "never"})`);
+    }
+  } catch {}
+  // 每日定时：对齐到下一个计划点，跑完再约 24h 后
+  function arm() {
+    const delay = nextRunDelayMs(new Date(), hour);
+    setTimeout(() => {
+      runOnce("daily").catch(() => {}).finally(arm);
+    }, delay).unref?.();
+  }
+  arm();
+  return { enabled: true, hour, runOnce };
+}