@actalk/inkos-studio 1.3.10 → 1.3.11-canary.41.1

package/dist/api/book-create.d.ts

@@ -6,6 +6,7 @@ export interface StudioCreateBookBody {
     readonly platform?: string;
     readonly chapterWordCount?: number;
     readonly targetChapters?: number;
+    readonly blurb?: string;
 }
 export interface StudioBookConfigDraft {
     readonly id: string;

package/dist/api/book-create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"book-create.d.ts","sourceRoot":"","sources":["../../src/api/book-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE7E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,MAAM,GAAG,qBAAqB,CAqBpG;AAMD,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,gBAAgB,CAAC,CAqB3B"}
+{"version":3,"file":"book-create.d.ts","sourceRoot":"","sources":["../../src/api/book-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE7E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,MAAM,GAAG,qBAAqB,CAqBpG;AAMD,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,gBAAgB,CAAC,CAqB3B"}

package/dist/api/book-create.js.map

@@ -1 +1 @@
-{"version":3,"file":"book-create.js","sourceRoot":"","sources":["../../src/api/book-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAiB,MAAM,oBAAoB,CAAC;AAqC7E,MAAM,UAAU,uBAAuB,CAAC,QAAiB;IACvD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAA0B,EAAE,GAAW;IAC3E,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,KAAK;aACX,WAAW,EAAE;aACb,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC;aACvC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,WAAW;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,GAAG;QAC1C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;QAC/C,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI;YACxB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE;YAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI;gBACtB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE;gBAC7B,CAAC,CAAC,EAAE,CAAC;QACT,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,UAAyC,EAAE;IAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;IAEjD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,GAAG,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,MAAM;IACR,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,SAAS,MAAM,yBAAyB,WAAW,YAAY,CAAC,CAAC;AACnF,CAAC"}
+{"version":3,"file":"book-create.js","sourceRoot":"","sources":["../../src/api/book-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAiB,MAAM,oBAAoB,CAAC;AAsC7E,MAAM,UAAU,uBAAuB,CAAC,QAAiB;IACvD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAA0B,EAAE,GAAW;IAC3E,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,KAAK;aACX,WAAW,EAAE;aACb,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC;aACvC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,WAAW;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,GAAG;QAC1C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;QAC/C,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI;YACxB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE;YAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI;gBACtB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE;gBAC7B,CAAC,CAAC,EAAE,CAAC;QACT,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,UAAyC,EAAE;IAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;IAEjD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,GAAG,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,MAAM;IACR,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,SAAS,MAAM,yBAAyB,WAAW,YAAY,CAAC,CAAC;AACnF,CAAC"}

package/dist/api/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAqCL,KAAK,aAAa,EAGnB,MAAM,oBAAoB,CAAC;AA2sB5B,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,8EAmrE5E;AAID,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,SAAO,EACX,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CA8Cf"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAsCL,KAAK,aAAa,EAGnB,MAAM,oBAAoB,CAAC;AAk3B5B,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,8EAouE5E;AAID,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,SAAO,EACX,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CA8Cf"}

package/dist/api/server.js

@@ -2,8 +2,8 @@ import { Hono } from "hono";
 import { cors } from "hono/cors";
 import { streamSSE } from "hono/streaming";
 import { serve } from "@hono/node-server";
-import { StateManager, PipelineRunner, createLLMClient, createLogger, createInteractionToolsFromDeps, computeAnalytics, loadProjectConfig, loadProjectSession, processProjectInteractionRequest, resolveSessionActiveBook, listBookSessions, loadBookSession, appendManualSessionMessages, createAndPersistBookSession, renameBookSession, deleteBookSession, migrateBookSession, SessionAlreadyMigratedError, runAgentSession, buildAgentSystemPrompt, resolveServicePreset, resolveServiceProviderFamily, resolveServiceModelsBaseUrl, resolveServiceModel, loadSecrets, saveSecrets, listModelsForService, isApiKeyOptionalForEndpoint, getAllEndpoints, probeModelsFromUpstream, fetchWithProxy, chatCompletion, buildExportArtifact, GLOBAL_ENV_PATH, } from "@actalk/inkos-core";
-import { access, readFile, readdir, writeFile } from "node:fs/promises";
+import { StateManager, PipelineRunner, createLLMClient, createLogger, createInteractionToolsFromDeps, computeAnalytics, loadProjectConfig, loadProjectSession, processProjectInteractionRequest, resolveSessionActiveBook, listBookSessions, loadBookSession, appendManualSessionMessages, createAndPersistBookSession, renameBookSession, deleteBookSession, migrateBookSession, SessionAlreadyMigratedError, runAgentSession, buildAgentSystemPrompt, resolveServicePreset, resolveServiceProviderFamily, resolveServiceModelsBaseUrl, resolveServiceModel, loadSecrets, saveSecrets, listModelsForService, isApiKeyOptionalForEndpoint, getAllEndpoints, probeModelsFromUpstream, fetchWithProxy, chatCompletion, buildExportArtifact, GLOBAL_ENV_PATH, Scheduler, } from "@actalk/inkos-core";
+import { access, mkdir, readFile, readdir, writeFile } from "node:fs/promises";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { isSafeBookId } from "./safety.js";
 import { ApiError } from "./errors.js";
@@ -49,6 +49,18 @@ function summarizeResult(result) {
     }
     return String(result).slice(0, 200);
 }
+function compareServiceListItems(left, right) {
+    if (left.service === "kkaiapi" && right.service !== "kkaiapi")
+        return -1;
+    if (right.service === "kkaiapi" && left.service !== "kkaiapi")
+        return 1;
+    return 0;
+}
+function isHeaderSafeApiKey(value) {
+    if (!value)
+        return true;
+    return /^[\x21-\x7E]+$/.test(value);
+}
 const NON_TEXT_MODEL_ID_PARTS = [
     "image",
     "embedding",
@@ -59,6 +71,10 @@ const NON_TEXT_MODEL_ID_PARTS = [
     "audio",
     "moderation",
 ];
+const SERVICE_MODELS_PROBE_TIMEOUT_MS = 4_000;
+const SERVICE_CHAT_PROBE_TIMEOUT_MS = 8_000;
+const MAX_DISCOVERED_MODELS_TO_PING = 2;
+const MAX_GENERIC_FALLBACK_MODELS_TO_PING = 2;
 function isTextChatModelId(modelId) {
     const normalized = modelId.trim().toLowerCase();
     if (!normalized)
@@ -344,15 +360,12 @@ function buildProbePlans(preferredApiFormat, preferredStream) {
     };
     if (preferredApiFormat) {
         push(preferredApiFormat, preferredStream ?? false);
-        push(preferredApiFormat, !(preferredStream ?? false));
+        if (preferredStream)
+            push(preferredApiFormat, false);
+        return candidates;
     }
-    const alternate = preferredApiFormat === "responses" ? "chat" : "responses";
-    push(alternate, false);
-    push(alternate, true);
     push("chat", false);
-    push("chat", true);
     push("responses", false);
-    push("responses", true);
     return candidates;
 }
 function buildModelCandidates(args) {
@@ -370,17 +383,103 @@ function buildModelCandidates(args) {
     push(args.preferredModel);
     push(args.configModel);
     push(args.envModel ?? undefined);
-    for (const model of args.discoveredModels)
+    for (const model of args.discoveredModels.slice(0, MAX_DISCOVERED_MODELS_TO_PING))
         push(model.id);
     if (args.includeGenericFallbacks === false)
         return candidates;
-    push("gpt-5.4");
-    push("gpt-4o");
-    push("claude-sonnet-4-6");
-    push("MiniMax-M2.7");
-    push("kimi-k2.5");
+    for (const fallback of [
+        "gpt-5.4",
+        "gpt-4o",
+        "claude-sonnet-4-6",
+        "MiniMax-M2.7",
+        "kimi-k2.5",
+    ].slice(0, MAX_GENERIC_FALLBACK_MODELS_TO_PING)) {
+        push(fallback);
+    }
     return candidates;
 }
+function yamlScalar(value) {
+    return JSON.stringify(String(value ?? ""));
+}
+function radarTimestampForFilename(value) {
+    const date = value ? new Date(value) : new Date();
+    const safeDate = Number.isNaN(date.getTime()) ? new Date() : date;
+    return safeDate.toISOString().replace(/[:.]/g, "-");
+}
+async function saveRadarScan(root, result) {
+    const radarDir = join(root, "radar");
+    await mkdir(radarDir, { recursive: true });
+    const timestamp = typeof result === "object" && result !== null && "timestamp" in result
+        ? String(result.timestamp ?? "")
+        : "";
+    const fileName = `scan-${radarTimestampForFilename(timestamp)}.json`;
+    const filePath = join(radarDir, fileName);
+    await writeFile(filePath, JSON.stringify(result, null, 2), "utf-8");
+    return filePath;
+}
+async function loadRadarHistory(root) {
+    const radarDir = join(root, "radar");
+    let files = [];
+    try {
+        files = await readdir(radarDir);
+    }
+    catch {
+        return [];
+    }
+    const scans = await Promise.all(files
+        .filter((file) => /^scan-.+\.json$/.test(file))
+        .map(async (file) => {
+        try {
+            const raw = await readFile(join(radarDir, file), "utf-8");
+            const result = JSON.parse(raw);
+            const timestamp = typeof result.timestamp === "string"
+                ? result.timestamp
+                : file.replace(/^scan-/, "").replace(/\.json$/, "");
+            const marketSummary = typeof result.marketSummary === "string" ? result.marketSummary : "";
+            return {
+                file,
+                timestamp,
+                marketSummary,
+                summaryPreview: marketSummary.slice(0, 100),
+                result,
+            };
+        }
+        catch {
+            return null;
+        }
+    }));
+    return scans
+        .filter((item) => item !== null)
+        .sort((a, b) => b.file.localeCompare(a.file));
+}
+function fallbackTextModelsForEndpoint(endpoint, preset) {
+    const endpointModels = endpoint?.models
+        .filter((model) => model.enabled !== false)
+        .filter((model) => isTextChatModelId(model.id))
+        .map((model) => ({ id: model.id, name: model.id }))
+        ?? [];
+    if (endpointModels.length > 0)
+        return endpointModels;
+    return preset?.knownModels?.map((id) => ({ id, name: id })) ?? [];
+}
+function shouldTrustStaticModelsWhenLiveListUnavailable(endpoint) {
+    return endpoint?.group === "aggregator";
+}
+async function withTimeout(promise, timeoutMs, label) {
+    let timeout;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_, reject) => {
+                timeout = setTimeout(() => reject(new Error(`${label} 超时（${timeoutMs}ms）`)), timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timeout)
+            clearTimeout(timeout);
+    }
+}
 function formatServiceProbeError(args) {
     const rawDetail = args.error
         .replace(/\n\s*\(baseUrl:[\s\S]*?\)$/m, "")
@@ -434,8 +533,8 @@ async function fetchModelsFromServiceBaseUrl(serviceId, baseUrl, apiKey, proxyUr
     const modelsUrl = modelsBaseUrl.replace(/\/$/, "") + "/models";
     try {
         const res = await fetchWithProxy(modelsUrl, {
-            headers: { Authorization: `Bearer ${apiKey}` },
-            signal: AbortSignal.timeout(10_000),
+            headers: buildBearerAuthHeaders(apiKey),
+            signal: AbortSignal.timeout(SERVICE_MODELS_PROBE_TIMEOUT_MS),
         }, proxyUrl);
         if (!res.ok) {
             const body = await res.text().catch(() => "");
@@ -457,6 +556,15 @@ async function fetchModelsFromServiceBaseUrl(serviceId, baseUrl, apiKey, proxyUr
         };
     }
 }
+function buildBearerAuthHeaders(apiKey) {
+    const trimmed = apiKey?.trim() ?? "";
+    if (!trimmed)
+        return {};
+    if (!/^[\x20-\x7e]+$/.test(trimmed)) {
+        throw new Error("API Key 只能包含英文、数字和常见 ASCII 符号，请检查是否误粘贴了中文说明。");
+    }
+    return { Authorization: `Bearer ${trimmed}` };
+}
 async function probeServiceCapabilities(args) {
     const rawConfig = await loadRawConfig(args.root).catch(() => ({}));
     const llm = rawConfig.llm ?? {};
@@ -476,14 +584,54 @@ async function probeServiceCapabilities(args) {
         };
     }
     const discoveredModels = modelsResponse.models;
-    // For bank services, probe with the service's own check model first — not the global default.
     const endpoint = getAllEndpoints().find((ep) => ep.id === baseService);
     const preset = resolveServicePreset(baseService);
+    const discoveredFirstModel = discoveredModels.find((model) => isTextChatModelId(model.id))?.id
+        ?? discoveredModels[0]?.id;
+    if (discoveredModels.length > 0) {
+        if (!discoveredFirstModel || !isTextChatModelId(discoveredFirstModel)) {
+            return {
+                ok: false,
+                models: discoveredModels,
+                error: "模型列表可访问，但没有发现可用于文本对话的模型。",
+            };
+        }
+        return {
+            ok: true,
+            models: discoveredModels,
+            selectedModel: discoveredFirstModel,
+            apiFormat: args.preferredApiFormat ?? "chat",
+            stream: args.preferredStream ?? false,
+            baseUrl: args.baseUrl,
+            modelsSource: "api",
+        };
+    }
+    if (shouldTrustStaticModelsWhenLiveListUnavailable(endpoint)) {
+        const models = fallbackTextModelsForEndpoint(endpoint, preset);
+        const selectedModel = endpoint?.checkModel && models.some((model) => model.id === endpoint.checkModel)
+            ? endpoint.checkModel
+            : models[0]?.id;
+        if (selectedModel) {
+            return {
+                ok: true,
+                models,
+                selectedModel,
+                apiFormat: args.preferredApiFormat ?? "chat",
+                stream: args.preferredStream ?? false,
+                baseUrl: args.baseUrl,
+                modelsSource: "fallback",
+            };
+        }
+    }
+    // Prefer live /models results; if unavailable, probe with the service's own check model before global defaults.
     const serviceFirstModel = endpoint?.checkModel
         ?? preset?.knownModels?.[0]
         ?? endpoint?.models.find((model) => model.enabled !== false)?.id;
     const useDynamicLocalModels = baseService === "ollama";
-    const useEndpointCheckModel = !useDynamicLocalModels && !isCustomServiceId(args.service) && Boolean(endpoint?.checkModel);
+    const useEndpointCheckModel = !useDynamicLocalModels
+        && !isCustomServiceId(args.service)
+        && discoveredModels.length === 0
+        && Boolean(endpoint?.checkModel);
     const configService = typeof llm.service === "string" ? llm.service : undefined;
     const configModel = !useEndpointCheckModel && configService === args.service
         ? typeof llm.defaultModel === "string"
@@ -492,9 +640,9 @@ async function probeServiceCapabilities(args) {
                 ? llm.model
                 : undefined
         : undefined;
-    const useCustomFallbacks = isCustomServiceId(args.service);
+    const useCustomFallbacks = false;
     const modelCandidates = buildModelCandidates({
-        preferredModel: args.preferredModel ?? (useDynamicLocalModels ? discoveredModels[0]?.id ?? serviceFirstModel : serviceFirstModel),
+        preferredModel: args.preferredModel ?? serviceFirstModel,
         configModel,
         envModel: useCustomFallbacks ? envModel : undefined,
         discoveredModels: useEndpointCheckModel ? [] : discoveredModels,
@@ -518,25 +666,20 @@ async function probeServiceCapabilities(args) {
                 apiKey: args.apiKey.trim(),
                 model,
                 temperature: 0.7,
-                maxTokens: 2048,
+                maxTokens: 16,
                 thinkingBudget: 0,
                 proxyUrl: args.proxyUrl,
                 apiFormat: plan.apiFormat,
                 stream: plan.stream,
             });
             try {
-                await chatCompletion(client, model, [{ role: "user", content: "ping" }], { maxTokens: 2048 });
+                await withTimeout(chatCompletion(client, model, [{ role: "user", content: "Reply with OK only." }], { maxTokens: 16 }), SERVICE_CHAT_PROBE_TIMEOUT_MS, "service connection test");
                 const models = discoveredModels.length > 0
                     ? discoveredModels
-                    : endpoint?.models
-                        .filter((m) => m.enabled !== false)
-                        .filter((m) => isTextChatModelId(m.id))
-                        .map((m) => ({ id: m.id, name: m.id }))
-                        ?? preset?.knownModels?.map((id) => ({ id, name: id }))
-                        ?? [{ id: model, name: model }];
+                    : fallbackTextModelsForEndpoint(endpoint, preset);
                 return {
                     ok: true,
-                    models,
+                    models: models.length > 0 ? models : [{ id: model, name: model }],
                     selectedModel: model,
                     apiFormat: plan.apiFormat,
                     stream: plan.stream,
@@ -574,6 +717,11 @@ export function createStudioServer(initialConfig, root) {
         if (error instanceof ApiError) {
             return c.json({ error: { code: error.code, message: error.message } }, error.status);
         }
+        const message = error instanceof Error ? error.message : String(error);
+        if (message.includes("LLM API key not set") || message.includes("INKOS_LLM_API_KEY not set")) {
+            return c.json({ error: { code: "LLM_CONFIG_ERROR", message } }, 400);
+        }
+        console.error("[studio] Unexpected server error", error);
         return c.json({ error: { code: "INTERNAL_ERROR", message: "Unexpected server error." } }, 500);
     });
     // BookId validation middleware — blocks path traversal on all book routes
@@ -712,6 +860,7 @@ export function createStudioServer(initialConfig, root) {
                 platform: body.platform,
                 chapterWordCount: body.chapterWordCount,
                 targetChapters: body.targetChapters,
+                blurb: body.blurb,
             },
             tools,
         }).then(async (result) => {
@@ -971,7 +1120,7 @@ export function createStudioServer(initialConfig, root) {
             label: ep.label,
             group: ep.group,
             connected: Boolean(secrets.services[ep.id]?.apiKey),
-        }));
+        })).sort(compareServiceListItems);
         // Add custom services from inkos.json
         try {
             const config = await loadRawConfig(root);
@@ -1031,6 +1180,27 @@ export function createStudioServer(initialConfig, root) {
         await saveRawConfig(root, config);
         return c.json({ ok: true });
     });
+    app.delete("/api/v1/services/:service", async (c) => {
+        const service = c.req.param("service");
+        const config = await loadRawConfig(root);
+        const llm = config.llm ?? {};
+        const existingServices = normalizeServiceConfig(llm.services);
+        const nextServices = existingServices.filter((entry) => serviceConfigKey(entry) !== service);
+        if (!config.llm)
+            config.llm = {};
+        const nextLlm = config.llm;
+        nextLlm.services = nextServices;
+        if (nextLlm.service === service) {
+            delete nextLlm.service;
+            delete nextLlm.defaultModel;
+        }
+        await saveRawConfig(root, config);
+        const secrets = await loadSecrets(root);
+        delete secrets.services[service];
+        await saveSecrets(root, secrets);
+        modelListCache.clear();
+        return c.json({ ok: true, service });
+    });
     app.post("/api/v1/services/:service/test", async (c) => {
         const service = c.req.param("service");
         const { apiKey, baseUrl, apiFormat, stream } = await c.req.json();
@@ -1044,7 +1214,10 @@ export function createStudioServer(initialConfig, root) {
             baseUrl: resolvedBaseUrl,
         });
         if (!apiKey?.trim() && !apiKeyOptional) {
-            return c.json({ ok: false, error: "API Key 不能为空" }, 400);
+            return c.json({
+                ok: false,
+                error: "API Key 不能为空",
+            }, 400);
         }
         const rawConfig = await loadRawConfig(root).catch(() => ({}));
         const llm = rawConfig.llm ?? {};
@@ -1091,8 +1264,15 @@ export function createStudioServer(initialConfig, root) {
         const service = c.req.param("service");
         const { apiKey } = await c.req.json();
         const secrets = await loadSecrets(root);
-        if (apiKey?.trim()) {
-            secrets.services[service] = { apiKey: apiKey.trim() };
+        const trimmedKey = apiKey?.trim() ?? "";
+        if (trimmedKey) {
+            if (!isHeaderSafeApiKey(trimmedKey)) {
+                return c.json({
+                    ok: false,
+                    error: "API Key 只能包含可放进 HTTP Authorization header 的非空白 ASCII 字符；请不要粘贴连接失败提示或诊断文本。",
+                }, 400);
+            }
+            secrets.services[service] = { apiKey: trimmedKey };
         }
         else {
             delete secrets.services[service];
@@ -1294,7 +1474,6 @@ export function createStudioServer(initialConfig, root) {
             return c.json({ error: "Daemon already running" }, 400);
         }
         try {
-            const { Scheduler } = await import("@actalk/inkos-core");
             const currentConfig = await loadCurrentProjectConfig();
             const scheduler = new Scheduler({
                 ...(await buildPipelineConfig()),
@@ -2264,15 +2443,15 @@ export function createStudioServer(initialConfig, root) {
         await mkdirFs(genresDir, { recursive: true });
         const frontmatter = [
             "---",
-            `name: ${body.name}`,
-            `id: ${body.id}`,
-            `language: ${body.language ?? "zh"}`,
+            `name: ${yamlScalar(body.name)}`,
+            `id: ${yamlScalar(body.id)}`,
+            `language: ${yamlScalar(body.language ?? "zh")}`,
             `chapterTypes: ${JSON.stringify(body.chapterTypes ?? [])}`,
             `fatigueWords: ${JSON.stringify(body.fatigueWords ?? [])}`,
             `numericalSystem: ${body.numericalSystem ?? false}`,
             `powerScaling: ${body.powerScaling ?? false}`,
             `eraResearch: ${body.eraResearch ?? false}`,
-            `pacingRule: "${body.pacingRule ?? ""}"`,
+            `pacingRule: ${yamlScalar(body.pacingRule ?? "")}`,
             `satisfactionTypes: ${JSON.stringify(body.satisfactionTypes ?? [])}`,
             `auditDimensions: ${JSON.stringify(body.auditDimensions ?? [])}`,
             "---",
@@ -2295,15 +2474,15 @@ export function createStudioServer(initialConfig, root) {
         const p = body.profile;
         const frontmatter = [
             "---",
-            `name: ${p.name ?? genreId}`,
-            `id: ${p.id ?? genreId}`,
-            `language: ${p.language ?? "zh"}`,
+            `name: ${yamlScalar(p.name ?? genreId)}`,
+            `id: ${yamlScalar(p.id ?? genreId)}`,
+            `language: ${yamlScalar(p.language ?? "zh")}`,
             `chapterTypes: ${JSON.stringify(p.chapterTypes ?? [])}`,
             `fatigueWords: ${JSON.stringify(p.fatigueWords ?? [])}`,
             `numericalSystem: ${p.numericalSystem ?? false}`,
             `powerScaling: ${p.powerScaling ?? false}`,
             `eraResearch: ${p.eraResearch ?? false}`,
-            `pacingRule: "${p.pacingRule ?? ""}"`,
+            `pacingRule: ${yamlScalar(p.pacingRule ?? "")}`,
             `satisfactionTypes: ${JSON.stringify(p.satisfactionTypes ?? [])}`,
             `auditDimensions: ${JSON.stringify(p.auditDimensions ?? [])}`,
             "---",
@@ -2469,6 +2648,7 @@ export function createStudioServer(initialConfig, root) {
         try {
             const pipeline = new PipelineRunner(await buildPipelineConfig());
             const result = await pipeline.runRadar();
+            await saveRadarScan(root, result);
             broadcast("radar:complete", { result });
             return c.json(result);
         }
@@ -2477,6 +2657,15 @@ export function createStudioServer(initialConfig, root) {
             return c.json({ error: String(e) }, 500);
         }
     });
+    app.get("/api/v1/radar/history", async (c) => {
+        try {
+            const items = await loadRadarHistory(root);
+            return c.json({ items });
+        }
+        catch (e) {
+            return c.json({ error: String(e) }, 500);
+        }
+    });
     // --- Doctor (environment health check) ---
     app.get("/api/v1/doctor", async (c) => {
         const { existsSync } = await import("node:fs");