diff --git a/install.sh b/install.sh
index 3a407d3..ebfd4f0 100644
--- a/install.sh
+++ b/install.sh
@@ -1,18 +1,18 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-REPO_OWNER="uton88"
-REPO_NAME="dan-binary-releases"
-
-COMPONENT="dan-web"
-INSTALL_DIR="$PWD/dan-runtime"
-VERSION="latest"
-CPA_BASE_URL=""
-CPA_TOKEN=""
-MAIL_API_URL=""
-MAIL_API_KEY=""
-THREADS="68"
-WEB_TOKEN="linuxdo"
+#!/usr/bin/env bash
+set -euo pipefail
+
+REPO_OWNER="uton88"
+REPO_NAME="dan-binary-releases"
+
+COMPONENT="dan-web"
+INSTALL_DIR="$PWD/dan-runtime"
+VERSION="latest"
+CPA_BASE_URL=""
+CPA_TOKEN=""
+MAIL_API_URL=""
+MAIL_API_KEY=""
+THREADS="68"
+WEB_TOKEN="linuxdo"
 CLIENT_API_TOKEN="linuxdo"
 PORT="25666"
 DEFAULT_PROXY=""
@@ -22,21 +22,21 @@ SERVICE_NAME="dan-web"
 BACKGROUND="0"
 LOG_FILE=""
 PID_FILE=""
-
-usage() {
-  cat <<'EOF'
-Usage:
-  install.sh [options]
-
-Options:
-  --component dan-web|dan|dan-token-refresh
-  --install-dir DIR
-  --version latest|vX.Y.Z
-  --cpa-base-url URL
-  --cpa-token TOKEN
-  --mail-api-url URL
-  --mail-api-key KEY
-  --threads N
+
+usage() {
+  cat <<'EOF'
+Usage:
+  install.sh [options]
+
+Options:
+  --component dan-web|dan|dan-token-refresh
+  --install-dir DIR
+  --version latest|vX.Y.Z
+  --cpa-base-url URL
+  --cpa-token TOKEN
+  --mail-api-url URL
+  --mail-api-key KEY
+  --threads N
   --web-token TOKEN
   --client-api-token TOKEN
   --port N
@@ -45,21 +45,21 @@ Options:
   --service-name NAME
   --background
   --log-file PATH
-  --pid-file PATH
-  -h, --help
-EOF
-}
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --component) COMPONENT="${2:-}"; shift 2 ;;
-    --install-dir) INSTALL_DIR="${2:-}"; shift 2 ;;
-    --version) VERSION="${2:-}"; shift 2 ;;
-    --cpa-base-url) CPA_BASE_URL="${2:-}"; shift 2 ;;
-    --cpa-token) CPA_TOKEN="${2:-}"; shift 2 ;;
-    --mail-api-url) MAIL_API_URL="${2:-}"; shift 2 ;;
-    --mail-api-key) MAIL_API_KEY="${2:-}"; shift 2 ;;
-    --threads) THREADS="${2:-}"; shift 2 ;;
+  --pid-file PATH
+  -h, --help
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --component) COMPONENT="${2:-}"; shift 2 ;;
+    --install-dir) INSTALL_DIR="${2:-}"; shift 2 ;;
+    --version) VERSION="${2:-}"; shift 2 ;;
+    --cpa-base-url) CPA_BASE_URL="${2:-}"; shift 2 ;;
+    --cpa-token) CPA_TOKEN="${2:-}"; shift 2 ;;
+    --mail-api-url) MAIL_API_URL="${2:-}"; shift 2 ;;
+    --mail-api-key) MAIL_API_KEY="${2:-}"; shift 2 ;;
+    --threads) THREADS="${2:-}"; shift 2 ;;
     --web-token) WEB_TOKEN="${2:-}"; shift 2 ;;
     --client-api-token) CLIENT_API_TOKEN="${2:-}"; shift 2 ;;
     --port) PORT="${2:-}"; shift 2 ;;
@@ -67,28 +67,28 @@ while [[ $# -gt 0 ]]; do
     --systemd) SYSTEMD="1"; shift ;;
     --service-name) SERVICE_NAME="${2:-}"; shift 2 ;;
     --background) BACKGROUND="1"; shift ;;
-    --log-file) LOG_FILE="${2:-}"; shift 2 ;;
-    --pid-file) PID_FILE="${2:-}"; shift 2 ;;
-    -h|--help) usage; exit 0 ;;
-    *) echo "Unknown argument: $1" >&2; usage >&2; exit 1 ;;
-  esac
-done
-
-require_cmd() {
-  if ! command -v "$1" >/dev/null 2>&1; then
-    echo "Missing required command: $1" >&2
-    exit 1
-  fi
-}
-
-require_cmd curl
-
+    --log-file) LOG_FILE="${2:-}"; shift 2 ;;
+    --pid-file) PID_FILE="${2:-}"; shift 2 ;;
+    -h|--help) usage; exit 0 ;;
+    *) echo "Unknown argument: $1" >&2; usage >&2; exit 1 ;;
+  esac
+done
+
+require_cmd() {
+  if ! command -v "$1" >/dev/null 2>&1; then
+    echo "Missing required command: $1" >&2
+    exit 1
+  fi
+}
+
+require_cmd curl
+
 json_escape() {
   local value="${1-}"
   value=${value//\\/\\\\}
   value=${value//\"/\\\"}
   value=${value//$'\n'/\\n}
-  value=${value//$'\r'/\\r}
+  value=${value//$'\r'/\\r}
   value=${value//$'\t'/\\t}
   printf '%s' "$value"
 }
@@ -137,87 +137,87 @@ fetch_domains_json() {
 detect_os() {
   case "$(uname -s)" in
     Linux) printf 'linux' ;;
-    Darwin) printf 'darwin' ;;
-    MINGW*|MSYS*|CYGWIN*) printf 'windows' ;;
-    *) echo "Unsupported operating system: $(uname -s)" >&2; exit 1 ;;
-  esac
-}
-
-detect_arch() {
-  case "$(uname -m)" in
-    x86_64|amd64) printf 'amd64' ;;
-    arm64|aarch64) printf 'arm64' ;;
-    *) echo "Unsupported architecture: $(uname -m)" >&2; exit 1 ;;
-  esac
-}
-
-build_release_base() {
-  if [[ "$VERSION" == "latest" ]]; then
-    printf 'https://github.com/%s/%s/releases/latest/download' "$REPO_OWNER" "$REPO_NAME"
-  else
-    printf 'https://github.com/%s/%s/releases/download/%s' "$REPO_OWNER" "$REPO_NAME" "$VERSION"
-  fi
-}
-
-OS="$(detect_os)"
-ARCH="$(detect_arch)"
-
-if [[ "$OS" == "windows" ]]; then
-  echo "Use install.ps1 on Windows." >&2
-  exit 1
-fi
-
-if [[ "$SYSTEMD" == "1" && "$OS" != "linux" ]]; then
-  echo "--systemd is only supported on Linux." >&2
-  exit 1
-fi
-
-if [[ "$SYSTEMD" == "1" && "$BACKGROUND" == "1" ]]; then
-  echo "--systemd and --background cannot be used together." >&2
-  exit 1
-fi
-
-if [[ "$SYSTEMD" == "1" && "$INSTALL_DIR" == "$PWD/dan-runtime" ]]; then
-  INSTALL_DIR="/opt/dan-runtime"
-fi
-
-case "$COMPONENT" in
-  dan|dan-web|dan-token-refresh) ;;
-  *) echo "Unsupported component: $COMPONENT" >&2; exit 1 ;;
-esac
-
-ASSET_NAME="${COMPONENT}-${OS}-${ARCH}"
-LOCAL_BINARY="$COMPONENT"
-RELEASE_BASE="$(build_release_base)"
-DOWNLOAD_URL="${RELEASE_BASE}/${ASSET_NAME}"
-CHECKSUM_URL="${RELEASE_BASE}/SHA256SUMS.txt"
-
-mkdir -p "$INSTALL_DIR/config"
-
-echo "Downloading ${ASSET_NAME}..."
-curl -fL "$DOWNLOAD_URL" -o "$INSTALL_DIR/$LOCAL_BINARY"
-chmod +x "$INSTALL_DIR/$LOCAL_BINARY"
-
-echo "Downloading SHA256SUMS.txt..."
-curl -fL "$CHECKSUM_URL" -o "$INSTALL_DIR/SHA256SUMS.txt"
-tr -d '\r' < "$INSTALL_DIR/SHA256SUMS.txt" > "$INSTALL_DIR/SHA256SUMS.unix.txt"
-
-if command -v sha256sum >/dev/null 2>&1; then
-  expected="$(awk -v name="$ASSET_NAME" '$2 == name { print $1; exit }' "$INSTALL_DIR/SHA256SUMS.unix.txt")"
-  [[ -n "$expected" ]] || { echo "Missing checksum entry for ${ASSET_NAME}." >&2; exit 1; }
-  (
-    cd "$INSTALL_DIR"
-    printf '%s  %s\n' "$expected" "$LOCAL_BINARY" | sha256sum -c -
-  )
-elif command -v shasum >/dev/null 2>&1; then
-  expected="$(awk -v name="$ASSET_NAME" '$2 == name { print $1; exit }' "$INSTALL_DIR/SHA256SUMS.unix.txt")"
-  [[ -n "$expected" ]] || { echo "Missing checksum entry for ${ASSET_NAME}." >&2; exit 1; }
-  actual="$(shasum -a 256 "$INSTALL_DIR/$LOCAL_BINARY" | awk '{print $1}')"
-  [[ "$expected" == "$actual" ]] || { echo "Checksum verification failed." >&2; exit 1; }
-else
-  echo "No checksum tool found; skipped verification."
-fi
-
+    Darwin) printf 'darwin' ;;
+    MINGW*|MSYS*|CYGWIN*) printf 'windows' ;;
+    *) echo "Unsupported operating system: $(uname -s)" >&2; exit 1 ;;
+  esac
+}
+
+detect_arch() {
+  case "$(uname -m)" in
+    x86_64|amd64) printf 'amd64' ;;
+    arm64|aarch64) printf 'arm64' ;;
+    *) echo "Unsupported architecture: $(uname -m)" >&2; exit 1 ;;
+  esac
+}
+
+build_release_base() {
+  if [[ "$VERSION" == "latest" ]]; then
+    printf 'https://github.com/%s/%s/releases/latest/download' "$REPO_OWNER" "$REPO_NAME"
+  else
+    printf 'https://github.com/%s/%s/releases/download/%s' "$REPO_OWNER" "$REPO_NAME" "$VERSION"
+  fi
+}
+
+OS="$(detect_os)"
+ARCH="$(detect_arch)"
+
+if [[ "$OS" == "windows" ]]; then
+  echo "Use install.ps1 on Windows." >&2
+  exit 1
+fi
+
+if [[ "$SYSTEMD" == "1" && "$OS" != "linux" ]]; then
+  echo "--systemd is only supported on Linux." >&2
+  exit 1
+fi
+
+if [[ "$SYSTEMD" == "1" && "$BACKGROUND" == "1" ]]; then
+  echo "--systemd and --background cannot be used together." >&2
+  exit 1
+fi
+
+if [[ "$SYSTEMD" == "1" && "$INSTALL_DIR" == "$PWD/dan-runtime" ]]; then
+  INSTALL_DIR="/opt/dan-runtime"
+fi
+
+case "$COMPONENT" in
+  dan|dan-web|dan-token-refresh) ;;
+  *) echo "Unsupported component: $COMPONENT" >&2; exit 1 ;;
+esac
+
+ASSET_NAME="${COMPONENT}-${OS}-${ARCH}"
+LOCAL_BINARY="$COMPONENT"
+RELEASE_BASE="$(build_release_base)"
+DOWNLOAD_URL="${RELEASE_BASE}/${ASSET_NAME}"
+CHECKSUM_URL="${RELEASE_BASE}/SHA256SUMS.txt"
+
+mkdir -p "$INSTALL_DIR/config"
+
+echo "Downloading ${ASSET_NAME}..."
+curl -fL "$DOWNLOAD_URL" -o "$INSTALL_DIR/$LOCAL_BINARY"
+chmod +x "$INSTALL_DIR/$LOCAL_BINARY"
+
+echo "Downloading SHA256SUMS.txt..."
+curl -fL "$CHECKSUM_URL" -o "$INSTALL_DIR/SHA256SUMS.txt"
+tr -d '\r' < "$INSTALL_DIR/SHA256SUMS.txt" > "$INSTALL_DIR/SHA256SUMS.unix.txt"
+
+if command -v sha256sum >/dev/null 2>&1; then
+  expected="$(awk -v name="$ASSET_NAME" '$2 == name { print $1; exit }' "$INSTALL_DIR/SHA256SUMS.unix.txt")"
+  [[ -n "$expected" ]] || { echo "Missing checksum entry for ${ASSET_NAME}." >&2; exit 1; }
+  (
+    cd "$INSTALL_DIR"
+    printf '%s  %s\n' "$expected" "$LOCAL_BINARY" | sha256sum -c -
+  )
+elif command -v shasum >/dev/null 2>&1; then
+  expected="$(awk -v name="$ASSET_NAME" '$2 == name { print $1; exit }' "$INSTALL_DIR/SHA256SUMS.unix.txt")"
+  [[ -n "$expected" ]] || { echo "Missing checksum entry for ${ASSET_NAME}." >&2; exit 1; }
+  actual="$(shasum -a 256 "$INSTALL_DIR/$LOCAL_BINARY" | awk '{print $1}')"
+  [[ "$expected" == "$actual" ]] || { echo "Checksum verification failed." >&2; exit 1; }
+else
+  echo "No checksum tool found; skipped verification."
+fi
+
 rm -f "$INSTALL_DIR/SHA256SUMS.unix.txt"
 
 DOMAINS_API_URL="$(resolve_domains_api_url)"
@@ -226,23 +226,23 @@ DOMAINS_JSON="$(fetch_domains_json "$DOMAINS_API_URL")"
 
 cat > "$INSTALL_DIR/config.json" <<EOF
 {
-  "ak_file": "ak.txt",
-  "rk_file": "rk.txt",
-  "token_json_dir": "codex_tokens",
-  "server_config_url": "",
-  "server_api_token": "",
-  "domain_report_url": "",
-  "upload_api_url": "https://example.com/v0/management/auth-files",
-  "upload_api_token": "replace-me",
-  "oauth_issuer": "https://auth.openai.com",
-  "oauth_client_id": "app_EMoamEEZ73f0CkXaXp7hrann",
-  "oauth_redirect_uri": "http://localhost:1455/auth/callback",
-  "enable_oauth": true,
-  "oauth_required": true
-}
-EOF
-
-cat > "$INSTALL_DIR/config/web_config.json" <<EOF
+  "ak_file": "ak.txt",
+  "rk_file": "rk.txt",
+  "token_json_dir": "codex_tokens",
+  "server_config_url": "",
+  "server_api_token": "",
+  "domain_report_url": "",
+  "upload_api_url": "https://example.com/v0/management/auth-files",
+  "upload_api_token": "replace-me",
+  "oauth_issuer": "https://auth.openai.com",
+  "oauth_client_id": "app_EMoamEEZ73f0CkXaXp7hrann",
+  "oauth_redirect_uri": "http://localhost:1455/auth/callback",
+  "enable_oauth": true,
+  "oauth_required": true
+}
+EOF
+
+cat > "$INSTALL_DIR/config/web_config.json" <<EOF
 {
   "target_min_tokens": 15000,
   "auto_fill_start_gap": 1,
@@ -260,81 +260,81 @@ cat > "$INSTALL_DIR/config/web_config.json" <<EOF
   "default_proxy": "$(json_escape "$DEFAULT_PROXY")",
   "use_registration_proxy": $([[ -n "${DEFAULT_PROXY// }" ]] && printf 'true' || printf 'false'),
   "cpa_base_url": "$(json_escape "$CPA_BASE_URL")",
-  "cpa_token": "$(json_escape "$CPA_TOKEN")",
-  "mail_api_url": "$(json_escape "$MAIL_API_URL")",
-  "mail_api_key": "$(json_escape "$MAIL_API_KEY")",
-  "port": ${PORT}
-}
-EOF
-
-if [[ "$SYSTEMD" == "1" ]]; then
-  if [[ "$(id -u)" -ne 0 ]]; then
-    echo "--systemd requires root." >&2
-    exit 1
-  fi
-  if ! command -v systemctl >/dev/null 2>&1; then
-    echo "systemctl is not available on this host." >&2
-    exit 1
-  fi
-
-  cat > "/etc/systemd/system/${SERVICE_NAME}.service" <<EOF
-[Unit]
-Description=${SERVICE_NAME}
-After=network.target
-
-[Service]
-Type=simple
-WorkingDirectory=${INSTALL_DIR}
-ExecStart=${INSTALL_DIR}/${LOCAL_BINARY}
-Restart=always
-RestartSec=5
-User=root
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-  systemctl daemon-reload
-  systemctl enable --now "${SERVICE_NAME}.service"
-fi
-
-if [[ "$BACKGROUND" == "1" ]]; then
-  LOG_FILE="${LOG_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.log}"
-  PID_FILE="${PID_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.pid}"
-
-  if [[ -f "$PID_FILE" ]]; then
-    old_pid="$(cat "$PID_FILE" 2>/dev/null || true)"
-    if [[ -n "$old_pid" ]] && kill -0 "$old_pid" 2>/dev/null; then
-      kill "$old_pid" 2>/dev/null || true
-      sleep 1
-    fi
-  fi
-
-  (
-    cd "$INSTALL_DIR"
-    nohup "./${LOCAL_BINARY}" >> "$LOG_FILE" 2>&1 &
-    echo $! > "$PID_FILE"
-  )
-fi
-
-echo
-echo "Installed to: $INSTALL_DIR"
-echo "Binary: $INSTALL_DIR/$LOCAL_BINARY"
-echo "Config: $INSTALL_DIR/config/web_config.json"
-echo
-if [[ "$SYSTEMD" == "1" ]]; then
-  echo "Service: ${SERVICE_NAME}.service"
-  echo "Check:"
-  echo "  systemctl status ${SERVICE_NAME}.service"
-  echo "  journalctl -u ${SERVICE_NAME}.service -f"
-elif [[ "$BACKGROUND" == "1" ]]; then
-  echo "Background process started."
-  echo "Log: ${LOG_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.log}"
-  echo "PID: ${PID_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.pid}"
-  echo "Check:"
-  echo "  tail -f ${LOG_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.log}"
-  echo "  cat ${PID_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.pid}"
-else
-  echo "Start command:"
-  echo "  cd \"$INSTALL_DIR\" && ./${LOCAL_BINARY}"
-fi
+  "cpa_token": "$(json_escape "$CPA_TOKEN")",
+  "mail_api_url": "$(json_escape "$MAIL_API_URL")",
+  "mail_api_key": "$(json_escape "$MAIL_API_KEY")",
+  "port": ${PORT}
+}
+EOF
+
+if [[ "$SYSTEMD" == "1" ]]; then
+  if [[ "$(id -u)" -ne 0 ]]; then
+    echo "--systemd requires root." >&2
+    exit 1
+  fi
+  if ! command -v systemctl >/dev/null 2>&1; then
+    echo "systemctl is not available on this host." >&2
+    exit 1
+  fi
+
+  cat > "/etc/systemd/system/${SERVICE_NAME}.service" <<EOF
+[Unit]
+Description=${SERVICE_NAME}
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=${INSTALL_DIR}
+ExecStart=${INSTALL_DIR}/${LOCAL_BINARY}
+Restart=always
+RestartSec=5
+User=root
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+  systemctl daemon-reload
+  systemctl enable --now "${SERVICE_NAME}.service"
+fi
+
+if [[ "$BACKGROUND" == "1" ]]; then
+  LOG_FILE="${LOG_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.log}"
+  PID_FILE="${PID_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.pid}"
+
+  if [[ -f "$PID_FILE" ]]; then
+    old_pid="$(cat "$PID_FILE" 2>/dev/null || true)"
+    if [[ -n "$old_pid" ]] && kill -0 "$old_pid" 2>/dev/null; then
+      kill "$old_pid" 2>/dev/null || true
+      sleep 1
+    fi
+  fi
+
+  (
+    cd "$INSTALL_DIR"
+    nohup "./${LOCAL_BINARY}" >> "$LOG_FILE" 2>&1 &
+    echo $! > "$PID_FILE"
+  )
+fi
+
+echo
+echo "Installed to: $INSTALL_DIR"
+echo "Binary: $INSTALL_DIR/$LOCAL_BINARY"
+echo "Config: $INSTALL_DIR/config/web_config.json"
+echo
+if [[ "$SYSTEMD" == "1" ]]; then
+  echo "Service: ${SERVICE_NAME}.service"
+  echo "Check:"
+  echo "  systemctl status ${SERVICE_NAME}.service"
+  echo "  journalctl -u ${SERVICE_NAME}.service -f"
+elif [[ "$BACKGROUND" == "1" ]]; then
+  echo "Background process started."
+  echo "Log: ${LOG_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.log}"
+  echo "PID: ${PID_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.pid}"
+  echo "Check:"
+  echo "  tail -f ${LOG_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.log}"
+  echo "  cat ${PID_FILE:-$INSTALL_DIR/${LOCAL_BINARY}.pid}"
+else
+  echo "Start command:"
+  echo "  cd \"$INSTALL_DIR\" && ./${LOCAL_BINARY}"
+fi