@aiscene/aiserver 2.0.6 → 2.0.8

package/dist/debug/websocket-server.js

@@ -18,11 +18,20 @@ import { ExecutorFactory } from '../executor/executor-factory.js';
 import { instrumentCode } from '../executor/code-instrument.js';
 import { playwrightSwipe } from '../core/native-swipe.js';
 import { applyAiMemory } from '../core/ai-memory.js';
+import { FIXED_MODEL_API_KEY } from '../config/index.js';
 import { whistleManager } from '../proxy/whistle-manager.js';
 import { executeAndroidLogin, executeWebLogin, } from '../login/android-login-context.js';
 import { webRecordingManager } from '../recorder/web-recording-manager.js';
 import { resolveTestCaseReferences } from '../task/test-case-reference-resolver.js';
 const logger = createLogger('DebugWebSocket');
+const MODEL_API_KEY_ENV_KEYS = new Set([
+    'MIDSCENE_MODEL_API_KEY',
+    'MIDSCENE_PLANNING_MODEL_API_KEY',
+    'MIDSCENE_INSIGHT_MODEL_API_KEY',
+]);
+function isApiKeyConfigKey(key) {
+    return MODEL_API_KEY_ENV_KEYS.has(key) || /api[_-]?key/i.test(key);
+}
 /** 获取本机可用的非内部 IPv4 地址，供客户端连接投屏 WebSocket */
 function getLocalIP() {
     const interfaces = os.networkInterfaces();
@@ -532,6 +541,150 @@ export class DebugWebSocketServer {
             creator: session?.captureDataPersistence?.creator || '',
         };
     }
+    getModelConfigString(modelConfig, key, fallback) {
+        const value = modelConfig?.[key];
+        if (typeof value === 'string' && value.trim())
+            return value.trim();
+        if (typeof value === 'number' && Number.isFinite(value))
+            return String(value);
+        return fallback || process.env[key] || '';
+    }
+    resolveDebugFallbackModelConfig(primaryModelConfig) {
+        const ai = this.config.ai;
+        const hasFallback = [
+            ai.fallbackModelBaseUrl,
+            ai.fallbackModelApiKey,
+            ai.fallbackModelName,
+            ai.fallbackModelFamily,
+            ai.fallbackPlanningModelBaseUrl,
+            ai.fallbackPlanningModelApiKey,
+            ai.fallbackPlanningModelName,
+            ai.fallbackPlanningModelFamily,
+            ai.fallbackInsightModelBaseUrl,
+            ai.fallbackInsightModelApiKey,
+            ai.fallbackInsightModelName,
+            ai.fallbackInsightModelFamily,
+        ].some(value => typeof value === 'string' && value.trim());
+        if (!hasFallback)
+            return undefined;
+        const primary = {
+            MIDSCENE_MODEL_BASE_URL: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_MODEL_BASE_URL', ai.baseUrl),
+            MIDSCENE_MODEL_API_KEY: FIXED_MODEL_API_KEY,
+            MIDSCENE_MODEL_NAME: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_MODEL_NAME', ai.modelName),
+            MIDSCENE_MODEL_FAMILY: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_MODEL_FAMILY', ai.modelFamily),
+            MIDSCENE_PLANNING_MODEL_BASE_URL: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_PLANNING_MODEL_BASE_URL', ai.planningModelBaseUrl || ai.baseUrl),
+            MIDSCENE_PLANNING_MODEL_API_KEY: FIXED_MODEL_API_KEY,
+            MIDSCENE_PLANNING_MODEL_NAME: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_PLANNING_MODEL_NAME', ai.planningModelName || ai.modelName),
+            MIDSCENE_PLANNING_MODEL_FAMILY: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_PLANNING_MODEL_FAMILY', ai.planningModelFamily || ai.modelFamily),
+            MIDSCENE_INSIGHT_MODEL_BASE_URL: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_INSIGHT_MODEL_BASE_URL', ai.insightModelBaseUrl || ai.baseUrl),
+            MIDSCENE_INSIGHT_MODEL_API_KEY: FIXED_MODEL_API_KEY,
+            MIDSCENE_INSIGHT_MODEL_NAME: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_INSIGHT_MODEL_NAME', ai.insightModelName || ai.modelName),
+            MIDSCENE_INSIGHT_MODEL_FAMILY: this.getModelConfigString(primaryModelConfig, 'MIDSCENE_INSIGHT_MODEL_FAMILY', ai.insightModelFamily || ai.modelFamily),
+        };
+        const fallback = {
+            MIDSCENE_MODEL_BASE_URL: ai.fallbackModelBaseUrl || primary.MIDSCENE_MODEL_BASE_URL,
+            MIDSCENE_MODEL_API_KEY: FIXED_MODEL_API_KEY,
+            MIDSCENE_MODEL_NAME: ai.fallbackModelName || primary.MIDSCENE_MODEL_NAME,
+            MIDSCENE_MODEL_FAMILY: ai.fallbackModelFamily || primary.MIDSCENE_MODEL_FAMILY,
+            MIDSCENE_PLANNING_MODEL_BASE_URL: ai.fallbackPlanningModelBaseUrl || ai.fallbackModelBaseUrl || primary.MIDSCENE_PLANNING_MODEL_BASE_URL,
+            MIDSCENE_PLANNING_MODEL_API_KEY: FIXED_MODEL_API_KEY,
+            MIDSCENE_PLANNING_MODEL_NAME: ai.fallbackPlanningModelName || ai.fallbackModelName || primary.MIDSCENE_PLANNING_MODEL_NAME,
+            MIDSCENE_PLANNING_MODEL_FAMILY: ai.fallbackPlanningModelFamily || ai.fallbackModelFamily || primary.MIDSCENE_PLANNING_MODEL_FAMILY,
+            MIDSCENE_INSIGHT_MODEL_BASE_URL: ai.fallbackInsightModelBaseUrl || ai.fallbackModelBaseUrl || primary.MIDSCENE_INSIGHT_MODEL_BASE_URL,
+            MIDSCENE_INSIGHT_MODEL_API_KEY: FIXED_MODEL_API_KEY,
+            MIDSCENE_INSIGHT_MODEL_NAME: ai.fallbackInsightModelName || ai.fallbackModelName || primary.MIDSCENE_INSIGHT_MODEL_NAME,
+            MIDSCENE_INSIGHT_MODEL_FAMILY: ai.fallbackInsightModelFamily || ai.fallbackModelFamily || primary.MIDSCENE_INSIGHT_MODEL_FAMILY,
+        };
+        const changed = Object.keys(primary).some(key => primary[key] !== fallback[key]);
+        return changed ? fallback : undefined;
+    }
+    applyResolvedModelConfigToEnv(modelConfig, label) {
+        for (const [key, rawValue] of Object.entries(modelConfig)) {
+            const value = MODEL_API_KEY_ENV_KEYS.has(key) || isApiKeyConfigKey(key) ? FIXED_MODEL_API_KEY : rawValue;
+            if (value) {
+                process.env[key] = value;
+                logger.info(`[ModelConfig] Applied ${key} = ${value} (${label})`);
+            }
+        }
+    }
+    isModelRateLimitError(message) {
+        if (!message)
+            return false;
+        return /\b429\b|too many requests|rate.?limit|quota exceeded|insufficient.?quota|requests per/i.test(message);
+    }
+    async executeExecutorWithAbort(executor, config, abortController) {
+        if (abortController.signal.aborted) {
+            return { success: false, errorMessage: 'Action stopped by user' };
+        }
+        let abortHandler;
+        const executePromise = executor.execute(config).catch((error) => ({
+            success: false,
+            errorMessage: error.message,
+        }));
+        const abortPromise = new Promise((resolve) => {
+            abortHandler = () => resolve({ success: false, errorMessage: 'Action stopped by user' });
+            abortController.signal.addEventListener('abort', abortHandler, { once: true });
+        });
+        try {
+            return await Promise.race([executePromise, abortPromise]);
+        }
+        finally {
+            if (abortHandler) {
+                abortController.signal.removeEventListener('abort', abortHandler);
+            }
+        }
+    }
+    async destroyExecutorForRetry(session, executor, logPrefix) {
+        if (!executor || typeof executor.destroy !== 'function')
+            return;
+        try {
+            await executor.destroy();
+        }
+        catch (destroyErr) {
+            logger.warn(`[${logPrefix}] Executor destroy error: ${destroyErr.message}`);
+        }
+        finally {
+            if (session?.executor === executor) {
+                session.executor = undefined;
+            }
+        }
+    }
+    async destroyCurrentExecutor(session, logPrefix) {
+        const executor = session?.executor;
+        await this.destroyExecutorForRetry(session, executor, logPrefix);
+    }
+    async executeWithDebugModelFallback(options) {
+        let executor = options.createExecutor();
+        if (options.session)
+            options.session.executor = executor;
+        let result = await this.executeExecutorWithAbort(executor, options.config, options.abortController);
+        if (options.abortController.signal.aborted)
+            return result;
+        const fallbackModelConfig = this.resolveDebugFallbackModelConfig(options.config.modelConfig);
+        if (!result.success && fallbackModelConfig && this.isModelRateLimitError(result.errorMessage)) {
+            const fallbackLog = '[model-fallback] 429/rate limit detected, retrying once with fallback model config';
+            logger.warn(`[${options.logPrefix}] Model rate limit detected, retrying once with fallback model config`);
+            sessionManager.addLog(options.sessionId, fallbackLog);
+            this.sendMessage(options.ws, {
+                type: 'log_output',
+                sessionId: options.sessionId,
+                content: fallbackLog,
+            }, options.deviceId);
+            await this.destroyExecutorForRetry(options.session, executor, options.logPrefix);
+            if (options.abortController.signal.aborted) {
+                return { success: false, errorMessage: 'Action stopped by user' };
+            }
+            this.applyResolvedModelConfigToEnv(fallbackModelConfig, 'debug fallback model');
+            executor = options.createExecutor();
+            if (options.session)
+                options.session.executor = executor;
+            result = await this.executeExecutorWithAbort(executor, { ...options.config, modelConfig: fallbackModelConfig }, options.abortController);
+            if (!options.abortController.signal.aborted && !result.success && result.errorMessage) {
+                result.errorMessage = `Fallback retry failed: ${result.errorMessage}`;
+            }
+        }
+        return result;
+    }
     async handleStartDebug(ws, request) {
         // Web 分支：支持 sessionId 复用 + 主进程内嵌执行 + 投屏
         if (request.platform === 'web') {
@@ -878,7 +1031,7 @@ export class DebugWebSocketServer {
             session.abortController = abortController;
         // 将前端传来的 modelConfig 应用到环境变量，并获取补全后的 modelConfig（含 Planning/Insight）
         const fullModelConfig = this.applyModelConfig(request.modelConfig);
-        const executor = ExecutorFactory.create('action', {
+        const createExecutor = () => ExecutorFactory.create('action', {
             sessionId,
             onLog: (msg) => {
                 sessionManager.addLog(sessionId, msg);
@@ -891,9 +1044,6 @@ export class DebugWebSocketServer {
                 this.sendMessage(ws, { type: 'execution_line', sessionId, line }, request.deviceId);
             },
         });
-        // 保存 executor 引用到 session，以便 stop_debug 时可以中断
-        if (session)
-            session.executor = executor;
         const config = {
             type: (request.platform === 'ios' ? 'ios' : 'android'),
             testName: createDebugReportGroupName(request),
@@ -925,39 +1075,23 @@ export class DebugWebSocketServer {
         catch (captureErr) {
             logger.warn('[Debug] Failed to start request capture: ' + (captureErr instanceof Error ? captureErr.message : String(captureErr)));
         }
-        // 使用 AbortSignal 监听停止请求
-        const executePromise = executor.execute(config);
-        const abortPromise = new Promise((resolve) => {
-            abortController.signal.addEventListener('abort', () => {
-                resolve({ success: false, errorMessage: 'Action stopped by user' });
-            }, { once: true });
+        const result = await this.executeWithDebugModelFallback({
+            ws,
+            session,
+            sessionId,
+            deviceId: request.deviceId,
+            config,
+            abortController,
+            createExecutor,
+            logPrefix: 'executeRunCodeInProcess',
         });
-        let result;
-        let aborted = false;
-        try {
-            result = await Promise.race([executePromise, abortPromise]);
-            // 检测是否由用户主动停止（handleStopDebug 调用 abortController.abort()）
-            aborted = abortController.signal.aborted;
-        }
-        catch (error) {
-            result = { success: false, errorMessage: error.message };
-        }
         // 如果是用户主动停止，由 handleStopDebug 统一发送结果消息，此处不再重复发送
-        if (aborted) {
+        if (abortController.signal.aborted) {
             logger.info(`[executeRunCodeInProcess] Execution aborted by user, skipping result messages (handleStopDebug will send them)`);
             return;
         }
         // 清理 executor（释放 device/agent 资源 + 清除设备代理）
-        if (executor && typeof executor.destroy === 'function') {
-            try {
-                await executor.destroy();
-            }
-            catch (destroyErr) {
-                logger.warn(`[executeRunCodeInProcess] Executor destroy error: ${destroyErr.message}`);
-            }
-        }
-        if (session)
-            session.executor = undefined;
+        await this.destroyCurrentExecutor(session, 'executeRunCodeInProcess');
         // 停止请求抓包，采集调试期间的所有请求
         let capturedRequests = [];
         let captureDataUrl;
@@ -1055,15 +1189,15 @@ export class DebugWebSocketServer {
             ...process.env,
             WORKER_CONFIG: JSON.stringify(execConfig),
             MIDSCENE_MODEL_BASE_URL: process.env.MIDSCENE_MODEL_BASE_URL || this.config.ai.baseUrl,
-            MIDSCENE_MODEL_API_KEY: process.env.MIDSCENE_MODEL_API_KEY || this.config.ai.apiKey,
+            MIDSCENE_MODEL_API_KEY: FIXED_MODEL_API_KEY,
             MIDSCENE_MODEL_NAME: process.env.MIDSCENE_MODEL_NAME || this.config.ai.modelName,
             MIDSCENE_MODEL_FAMILY: process.env.MIDSCENE_MODEL_FAMILY || this.config.ai.modelFamily,
             MIDSCENE_PLANNING_MODEL_BASE_URL: process.env.MIDSCENE_PLANNING_MODEL_BASE_URL || this.config.ai.planningModelBaseUrl,
-            MIDSCENE_PLANNING_MODEL_API_KEY: process.env.MIDSCENE_PLANNING_MODEL_API_KEY || this.config.ai.planningModelApiKey,
+            MIDSCENE_PLANNING_MODEL_API_KEY: FIXED_MODEL_API_KEY,
             MIDSCENE_PLANNING_MODEL_NAME: process.env.MIDSCENE_PLANNING_MODEL_NAME || this.config.ai.planningModelName,
             MIDSCENE_PLANNING_MODEL_FAMILY: process.env.MIDSCENE_PLANNING_MODEL_FAMILY || this.config.ai.planningModelFamily,
             MIDSCENE_INSIGHT_MODEL_BASE_URL: process.env.MIDSCENE_INSIGHT_MODEL_BASE_URL || this.config.ai.insightModelBaseUrl,
-            MIDSCENE_INSIGHT_MODEL_API_KEY: process.env.MIDSCENE_INSIGHT_MODEL_API_KEY || this.config.ai.insightModelApiKey,
+            MIDSCENE_INSIGHT_MODEL_API_KEY: FIXED_MODEL_API_KEY,
             MIDSCENE_INSIGHT_MODEL_NAME: process.env.MIDSCENE_INSIGHT_MODEL_NAME || this.config.ai.insightModelName,
             MIDSCENE_INSIGHT_MODEL_FAMILY: process.env.MIDSCENE_INSIGHT_MODEL_FAMILY || this.config.ai.insightModelFamily,
         };
@@ -1176,7 +1310,7 @@ export class DebugWebSocketServer {
         // 调试日志：打印收到的模型配置
         logger.info(`>>> [WS] Received execute_action request:`);
         logger.info(`>>> [WS] request.modelName = ${request.modelName}`);
-        logger.info(`>>> [WS] request.modelConfig = ${JSON.stringify(request.modelConfig)}`);
+        logger.info(`>>> [WS] request.modelConfig = ${JSON.stringify(this.forceFixedModelApiKeys(request.modelConfig))}`);
         // 将前端传来的 modelConfig 应用到环境变量，并获取补全后的 modelConfig（含 Planning/Insight）
         const fullModelConfig = this.applyModelConfig(request.modelConfig);
         // 同时处理顶层的 modelName 字段
@@ -1194,7 +1328,7 @@ export class DebugWebSocketServer {
                 platform: request.platform,
                 logPrefix: `[Action ${sessionId}]`,
             });
-            const executor = ExecutorFactory.create('action', {
+            const createExecutor = () => ExecutorFactory.create('action', {
                 sessionId,
                 onLog: (msg) => {
                     sessionManager.addLog(sessionId, msg);
@@ -1207,8 +1341,6 @@ export class DebugWebSocketServer {
                     this.sendMessage(ws, { type: 'execution_line', sessionId, line }, request.deviceId);
                 },
             });
-            // 保存 executor 引用到 session，以便 stop_debug 时可以中断
-            session.executor = executor;
             const config = {
                 type: request.platform || 'android',
                 testName: createDebugReportGroupName(request),
@@ -1239,29 +1371,23 @@ export class DebugWebSocketServer {
             catch (captureErr) {
                 logger.warn('[Action] Failed to start request capture: ' + (captureErr instanceof Error ? captureErr.message : String(captureErr)));
             }
-            // 使用 AbortSignal 监听停止请求
-            const executePromise = executor.execute(config);
-            const abortPromise = new Promise((resolve) => {
-                abortController.signal.addEventListener('abort', () => {
-                    resolve({ success: false, errorMessage: 'Action stopped by user' });
-                }, { once: true });
+            const result = await this.executeWithDebugModelFallback({
+                ws,
+                session,
+                sessionId,
+                deviceId: request.deviceId,
+                config,
+                abortController,
+                createExecutor,
+                logPrefix: 'Action',
             });
-            const result = await Promise.race([executePromise, abortPromise]);
             // 如果是用户主动停止，由 handleStopDebug 统一发送结果消息，此处不再重复发送
             if (abortController.signal.aborted) {
                 logger.info(`[Action] Execution aborted by user, skipping result messages (handleStopDebug will send them)`);
                 return;
             }
             // 清理 executor（释放 device/agent 资源 + 清除设备代理）
-            if (executor && typeof executor.destroy === 'function') {
-                try {
-                    await executor.destroy();
-                }
-                catch (destroyErr) {
-                    logger.warn(`[Action] Executor destroy error: ${destroyErr.message}`);
-                }
-            }
-            session.executor = undefined;
+            await this.destroyCurrentExecutor(session, 'Action');
             // 停止请求抓包，采集执行期间的所有请求
             let capturedRequests = [];
             let captureDataUrl;
@@ -1470,7 +1596,7 @@ export class DebugWebSocketServer {
                 platform: request.platform,
                 logPrefix: `[AiAct ${sessionId}]`,
             });
-            const executor = ExecutorFactory.create('action', {
+            const createExecutor = () => ExecutorFactory.create('action', {
                 sessionId,
                 onLog: (msg) => {
                     sessionManager.addLog(sessionId, msg);
@@ -1480,8 +1606,6 @@ export class DebugWebSocketServer {
                     this.sendMessage(ws, { type: 'action_dump', sessionId, dump }, request.deviceId);
                 },
             });
-            // 保存 executor 引用到 session，以便 stop_debug 时可以中断
-            session.executor = executor;
             const config = {
                 type: request.platform || 'android',
                 testName: createDebugReportGroupName(request),
@@ -1512,14 +1636,16 @@ export class DebugWebSocketServer {
             catch (captureErr) {
                 logger.warn('[Action] Failed to start request capture: ' + (captureErr instanceof Error ? captureErr.message : String(captureErr)));
             }
-            // 使用 AbortSignal 监听停止请求
-            const executePromise = executor.execute(config);
-            const abortPromise = new Promise((resolve) => {
-                abortController.signal.addEventListener('abort', () => {
-                    resolve({ success: false, errorMessage: 'Action stopped by user' });
-                }, { once: true });
+            const result = await this.executeWithDebugModelFallback({
+                ws,
+                session,
+                sessionId,
+                deviceId: request.deviceId,
+                config,
+                abortController,
+                createExecutor,
+                logPrefix: 'AiAct',
             });
-            const result = await Promise.race([executePromise, abortPromise]);
             // 用户主动停止由 handleStopDebug 统一发送结果消息，这里不重复发；同时把 finalSent 置位防止 finally 兜底再发
             if (abortController.signal.aborted) {
                 finalSent = true;
@@ -1527,15 +1653,7 @@ export class DebugWebSocketServer {
                 return;
             }
             // 清理 executor（释放 device/agent 资源 + 清除设备代理）
-            if (executor && typeof executor.destroy === 'function') {
-                try {
-                    await executor.destroy();
-                }
-                catch (destroyErr) {
-                    logger.warn(`[AiAct] Executor destroy error: ${destroyErr.message}`);
-                }
-            }
-            session.executor = undefined;
+            await this.destroyCurrentExecutor(session, 'AiAct');
             // 停止请求抓包，采集执行期间的所有请求
             let captureDataUrl;
             try {
@@ -3209,13 +3327,26 @@ export class DebugWebSocketServer {
      * 将前端传来的 modelConfig 应用到环境变量
      * ActionExecutor 通过环境变量读取模型配置，所以需要同步更新
      */
-    applyModelConfig(modelConfig) {
+    forceFixedModelApiKeys(modelConfig) {
         const result = { ...(modelConfig || {}) };
+        for (const key of MODEL_API_KEY_ENV_KEYS) {
+            result[key] = FIXED_MODEL_API_KEY;
+        }
+        for (const key of Object.keys(result)) {
+            if (isApiKeyConfigKey(key)) {
+                result[key] = FIXED_MODEL_API_KEY;
+            }
+        }
+        return result;
+    }
+    applyModelConfig(modelConfig) {
+        const sanitizedModelConfig = this.forceFixedModelApiKeys(modelConfig);
+        const result = { ...sanitizedModelConfig };
         // 1. If no modelConfig provided, use server config ai defaults for main model
         if (!modelConfig || typeof modelConfig !== 'object' || Object.keys(modelConfig).length === 0) {
             const mainModelDefaults = {
                 MIDSCENE_MODEL_BASE_URL: this.config.ai.baseUrl,
-                MIDSCENE_MODEL_API_KEY: this.config.ai.apiKey,
+                MIDSCENE_MODEL_API_KEY: FIXED_MODEL_API_KEY,
                 MIDSCENE_MODEL_NAME: this.config.ai.modelName,
                 MIDSCENE_MODEL_FAMILY: this.config.ai.modelFamily,
             };
@@ -3235,9 +3366,16 @@ export class DebugWebSocketServer {
                 'MIDSCENE_INSIGHT_MODEL_BASE_URL', 'MIDSCENE_INSIGHT_MODEL_API_KEY', 'MIDSCENE_INSIGHT_MODEL_NAME', 'MIDSCENE_INSIGHT_MODEL_FAMILY',
             ];
             for (const key of envKeys) {
-                const value = modelConfig[key];
+                if (MODEL_API_KEY_ENV_KEYS.has(key)) {
+                    process.env[key] = FIXED_MODEL_API_KEY;
+                    result[key] = FIXED_MODEL_API_KEY;
+                    logger.info(`[ModelConfig] Applied ${key} = ${FIXED_MODEL_API_KEY} (fixed)`);
+                    continue;
+                }
+                const value = sanitizedModelConfig[key];
                 if (value && typeof value === 'string') {
                     process.env[key] = value;
+                    result[key] = value;
                     logger.info(`[ModelConfig] Applied ${key} = ${value}`);
                 }
             }
@@ -3257,7 +3395,7 @@ export class DebugWebSocketServer {
         // 2. Always force-apply Planning model config from server config
         const planningDefaults = {
             MIDSCENE_PLANNING_MODEL_BASE_URL: this.config.ai.planningModelBaseUrl,
-            MIDSCENE_PLANNING_MODEL_API_KEY: this.config.ai.planningModelApiKey,
+            MIDSCENE_PLANNING_MODEL_API_KEY: FIXED_MODEL_API_KEY,
             MIDSCENE_PLANNING_MODEL_NAME: this.config.ai.planningModelName,
             MIDSCENE_PLANNING_MODEL_FAMILY: this.config.ai.planningModelFamily,
         };
@@ -3271,7 +3409,7 @@ export class DebugWebSocketServer {
         // 3. Always force-apply Insight model config from server config
         const insightDefaults = {
             MIDSCENE_INSIGHT_MODEL_BASE_URL: this.config.ai.insightModelBaseUrl,
-            MIDSCENE_INSIGHT_MODEL_API_KEY: this.config.ai.insightModelApiKey,
+            MIDSCENE_INSIGHT_MODEL_API_KEY: FIXED_MODEL_API_KEY,
             MIDSCENE_INSIGHT_MODEL_NAME: this.config.ai.insightModelName,
             MIDSCENE_INSIGHT_MODEL_FAMILY: this.config.ai.insightModelFamily,
         };