@allbluecn/web-app 0.12.0 → 0.12.3

package/src/server/ai-gateway/types.ts

@@ -21,6 +21,22 @@ export type AppContext = {
   userId: string
   db: PrismaClient
   knowledgeBaseIds?: string[]
+  threadId?: string
+  /** 计量归属工作区（经成员关系校验，非客户端裸值）；null = 该用户尚无工作区 */
+  workspaceId?: string | null
+  /** 实际调用的 provider adapterKind（客户端声明的 provider 不可信，不用） */
+  provider?: string
+  /** 实际调用的模型名（回落到 provider 默认模型后的真值） */
+  model?: string
+  /** 当前 runId（durable run 用；harness 路由由 chat-stream-builder 铸造） */
+  runId?: string
+  /** 当前请求级工具白名单（供 delegate_task 等透传给子 agent） */
+  allowedTools?: string[]
+  /** 代码工作区上下文（harness 路由选中工作区后注入，支持 github/local/cloud 三种类型） */
+  workspaceContext?:
+    | { type: "github"; owner: string; repo: string; defaultBranch: string }
+    | { type: "local"; path: string }
+    | { type: "cloud"; workspaceId: string }
 }
 
 export type AiConfig = {

package/src/server/ai-gateway/unified-router.ts

@@ -28,23 +28,45 @@ import {
   resolveDefaultProviderConfig,
 } from './provider-router'
 import { buildChatStreamWithTools } from './chat-stream-builder'
+import type { PgStreamDurabilityFactory } from './durability/pg-stream'
+import { resolveByokApiKey, resolveByokProviderMeta } from './byok'
+import { resolveSourceMode } from './source-mode'
+import { GUEST_USER_ID } from '@/server/desktop-guest'
+import type { AiSourceMode } from '@allbluecn/kernel'
+import { AI_SOURCE_MODES } from '@allbluecn/kernel'
 
 export interface UnifiedAiRequest {
   userId: string
   messages: Array<{ role: 'user' | 'assistant' | 'tool'; content: string }>
   model?: string
+  /** 客户端选中的 provider adapterKind（BYOK 高隐私档用于定位 x-byok-<kind> header） */
+  provider?: string
   workspaceId?: string
   systemPrompts?: string[]
   allowedTools?: string[]
   knowledgeBaseIds?: string[]
   temperature?: number
   webSearchEnabled?: boolean
+  /** 请求级编排模式开关；仅本地链路（buildChatStreamWithTools）消费 */
+  codeModeEnabled?: boolean
+  /** 请求级沙箱执行开关；仅本地链路消费。经 `...req` 透传给 buildChatStreamWithTools。 */
+  sandbox?: boolean
+  /** 多实例 durable runs 装配链；仅本地链路消费，desktop 为 undefined。 */
+  durabilityFactory?: PgStreamDurabilityFactory
   threadId?: string
   runId?: string
-  resume?: Array<unknown>
-  signal?: AbortSignal
-  request?: Request
-}
+  parentRunId?: string
+   resume?: Array<unknown>
+   signal?: AbortSignal
+   request?: Request
+   /** GitHub 代码工作区上下文（harness 路由选中仓库后注入） */
+   workspaceContext?:
+     | { type: "github"; owner: string; repo: string; defaultBranch: string }
+     | { type: "local"; path: string }
+     | { type: "cloud"; workspaceId: string }
+   /** 已解析的模型来源模式（由 chat-handler 从 session 注入，跳过 per-request DB findUnique） */
+   aiSourceMode?: string | null
+  }
 
 export type UnifiedAiStream = AsyncIterable<StreamChunk>
 
@@ -84,7 +106,35 @@ export async function resolveUnifiedAiRoute(
   req: UnifiedAiRequest,
   request?: Request,
 ): Promise<UnifiedAiRoute> {
-  const byok = await tryByok(req)
+  // aiSourceMode 是第一优先级互斥开关：选中模式后其余路由层全部跳过
+  // （P0-4 修复：客户端 byokProvider 回调使 x-byok header 常态携带，固定顺序下 BYOK 会劫持模式 2/1）
+  // 优先使用 chat-handler 从 session 注入的已解析值，避免 per-request DB findUnique
+  // 严格收窄：非法值忽略，回落 DB 读；null 表示未设置（走 byok 现状链）
+  let mode: AiSourceMode | null = null
+  const rawMode = req.aiSourceMode
+  if (rawMode && AI_SOURCE_MODES.includes(rawMode as AiSourceMode)) {
+    mode = rawMode as AiSourceMode
+  }
+  if (mode === null) {
+    mode = await resolveSourceMode({ userId: req.userId, isGuest: req.userId === GUEST_USER_ID })
+  }
+
+  if (mode === 'local-agent') {
+    // M1 阶段占位：本地 Agent 会话在 M5（AcpSession）落地前，配置了该模式的用户得到明确错误
+    // 而非静默回落 BYOK（静默回落会掩盖用户的模式选择）
+    const configured = false // TODO(M5): resolveLocalAgentConfig(req.userId, req.model)
+    if (!configured) {
+      throw new NoAiAvailableError('local-agent-unconfigured：本地 Agent 模式尚未配置可用 CLI')
+    }
+  }
+  if (mode === 'hosted') {
+    const hosted = await tryHosted(req, request)
+    if (hosted) return hosted
+    throw new NoAiAvailableError('hosted-unavailable：平台托管服务不可用')
+  }
+
+  // mode === 'byok' | null：现状顺序
+  const byok = await tryByok(req, request ?? req.request)
   if (byok) return byok
   const remote = await tryRemoteRoute(req)
   if (remote) return remote
@@ -102,7 +152,41 @@ export async function resolveUnifiedAiStream(
   throw new Error('remote route requires chat-handler forwarding')
 }
 
-async function tryByok(req: UnifiedAiRequest): Promise<UnifiedAiRoute | null> {
+async function tryByok(
+  req: UnifiedAiRequest,
+  request?: Request,
+): Promise<UnifiedAiRoute | null> {
+  // BYOK 高隐私档优先：x-byok-<kind> header 命中即用（不落库、不进日志），
+  // 借用 DB 里 provider 的 baseUrl / providerId / model 元数据（不要求 apiKey）。
+  if (request && req.provider) {
+    const byokKey = resolveByokApiKey(request, req.provider)
+    if (byokKey) {
+      const meta = await resolveByokProviderMeta(
+        req.userId,
+        req.provider,
+        req.model,
+      )
+      if (meta) {
+        const byokModel = meta.model ?? req.model ?? 'gpt-4o-mini'
+        const adapter = await createProviderAdapter(meta.providerId, {
+          model: byokModel,
+          apiKey: byokKey,
+          baseUrl: meta.baseUrl,
+        })
+        return {
+          kind: 'local',
+          stream: await buildChatStreamWithTools({
+            adapter,
+            ...req,
+            providerConfigKind: meta.adapterKind,
+            usageProvider: meta.adapterKind,
+            usageModel: byokModel,
+          }),
+        }
+      }
+    }
+  }
+
   if (req.model) {
     const providerConfig = await resolveAiConfigForModel(req.userId, req.model)
     if (providerConfig) {
@@ -113,10 +197,12 @@ async function tryByok(req: UnifiedAiRequest): Promise<UnifiedAiRoute | null> {
       })
       return {
         kind: 'local',
-        stream: buildChatStreamWithTools({
+        stream: await buildChatStreamWithTools({
           adapter,
           ...req,
           providerConfigKind: providerConfig.adapterKind,
+          usageProvider: providerConfig.adapterKind,
+          usageModel: providerConfig.model,
         }),
       }
     }
@@ -130,10 +216,12 @@ async function tryByok(req: UnifiedAiRequest): Promise<UnifiedAiRoute | null> {
     })
     return {
       kind: 'local',
-      stream: buildChatStreamWithTools({
+      stream: await buildChatStreamWithTools({
         adapter,
         ...req,
         providerConfigKind: defaultConfig.adapterKind,
+        usageProvider: defaultConfig.adapterKind,
+        usageModel: defaultConfig.model,
       }),
     }
   }
@@ -142,10 +230,12 @@ async function tryByok(req: UnifiedAiRequest): Promise<UnifiedAiRoute | null> {
   const adapter = createAdapter(fallbackConfig)
   return {
     kind: 'local',
-    stream: buildChatStreamWithTools({
+    stream: await buildChatStreamWithTools({
       adapter,
       ...req,
       providerConfigKind: 'openrouter',
+      usageProvider: fallbackConfig.provider,
+      usageModel: fallbackConfig.model,
     }),
   }
 }

package/src/server/ai-ports.ts

@@ -17,12 +17,13 @@
 
 import { decryptApiKey } from "@/lib/crypto/api-key-cipher"
 import { getCurrentSession } from "@/lib/session"
+import { invalidateProfileCache } from "@/lib/auth/auth.config"
 import { readRemoteAuth } from "@/server/remote-auth"
 import { requireFeature } from "@/server/entitlements"
 import { searchWeb } from "@/server/serverFns/web-search"
 import { checkAiRateLimit } from "@/server/middlewares/rate-limit-server-fn"
 import { ragSearch } from "@/lib/rag"
-import { deleteEmbeddings } from "@/lib/pgvector"
+import { getVectorStore } from "@/lib/vector-store"
 import {
   indexDocumentEmbeddings as knowledgeIndexDocumentEmbeddings,
   resolveAiConfig as resolveKnowledgeAiConfigRaw,
@@ -43,7 +44,7 @@ registerGatewayPorts({
     },
   },
   accessPolicy: { requireFeature },
-  auth: { getSession: getCurrentSession },
+  auth: { getSession: getCurrentSession, invalidateProfileCache },
   remoteAuth: { read: readRemoteAuth },
   webSearch: {
     search: async (query: string, limit: number, userId?: string) => {
@@ -71,6 +72,9 @@ registerGatewayPorts({
         source: "env",
       } satisfies AiConfig
     },
-    deleteEmbeddings,
+    deleteEmbeddings: async (table: string, field: string, value: string) => {
+      const store = await getVectorStore()
+      return store.deleteEmbeddings(table, field, value)
+    },
   },
 } satisfies PartialGatewayPorts)

package/src/server/entitlements-token.ts

@@ -1,5 +1,6 @@
 import { randomUUID } from 'crypto'
 import type { FeatureKey } from '@allbluecn/kernel'
+import { decodeBase64Url, encodeBase64Url } from '@/lib/crypto/base64'
 
 export interface EntitlementsTokenPayload {
   sub: string
@@ -22,21 +23,8 @@ export interface EntitlementsToken {
 export const TOKEN_TTL_MS = 24 * 60 * 60 * 1000
 export const TOKEN_GRACE_MS = 72 * 60 * 60 * 1000
 
-function base64urlEncode(data: Uint8Array): string {
-  return Buffer.from(data)
-    .toString('base64')
-    .replace(/\+/g, '-')
-    .replace(/\//g, '_')
-    .replace(/=/g, '')
-}
-
-function base64urlDecode(str: string): Uint8Array {
-  const base64 = str
-    .replace(/-/g, '+')
-    .replace(/_/g, '/')
-    .padEnd(str.length + ((4 - str.length % 4) % 4), '=')
-  return new Uint8Array(Buffer.from(base64, 'base64'))
-}
+const base64urlEncode = encodeBase64Url
+const base64urlDecode = decodeBase64Url
 
 async function getSigningKey(): Promise<CryptoKey | null> {
   const secret = process.env.ENTITLEMENTS_SIGNING_SECRET

package/src/server/entitlements.ts

@@ -38,6 +38,11 @@ export class FeatureForbiddenError extends Error {
   }
 }
 
+/** desktop（Tauri 壳 + 本机 SQLite）部署判定——沙箱权益点式豁免的唯一入口。 */
+export function isDesktopDeployment(): boolean {
+  return (process.env.DEPLOY_TARGET ?? '').trim() === 'desktop'
+}
+
 export type EntitlementsSource =
   | 'subscription'
   | 'license'
@@ -80,6 +85,10 @@ export async function requireFeature(
 
   if (meta.tier === 'oss') return
 
+  // 点式豁免（P3/P4e）：沙箱与媒体生成为 desktop 用户 BYOK 自担能力（P4c §8.5 承诺），
+  // 桌面端无订阅体系。仅豁免这两个 key——不引入「desktop 全放行」的机制级旁路。
+  if ((feature === 'sandboxExecution' || feature === 'mediaGeneration') && isDesktopDeployment()) return
+
   if (meta.module && getProService(meta.module as ProFeature) === null) {
     throw new FeatureUnavailableError(feature)
   }

package/src/server/middlewares/security-headers.ts

@@ -26,51 +26,18 @@ import { createMiddleware } from '@tanstack/react-start'
 // （SSR HTML 与静态资源均正常，仅浏览器端崩溃；Pro 生产 2026-09-11 已复现）。
 // ⚠ va.vercel-scripts.com：Vercel Analytics / Speed Insights 的脚本域名
 // （__root.tsx 的 <Analytics /> / <SpeedInsights />），缺失则脚本被静默阻止。
-const PROD_CSP = [
-  "default-src 'self'",
-  "script-src 'self' 'unsafe-inline' https://va.vercel-scripts.com",
-  "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data: blob: https:",
-  "font-src 'self' data:",
-  "connect-src 'self' https: wss:",
-  "media-src 'self' blob: https:",
-  "object-src 'none'",
-  "base-uri 'self'",
-  "form-action 'self'",
-  "child-src 'none'",
-  "frame-src 'none'",
-  "worker-src 'self' blob:",
-  "frame-ancestors 'none'",
-  "upgrade-insecure-requests",
-].join('; ')
-
-const DEV_CSP = [
-  "default-src 'self' 'unsafe-inline' data: blob:",
-  "script-src 'self' 'unsafe-inline' data: blob: https://va.vercel-scripts.com",
-  "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data: blob: https: http:",
-  "font-src 'self' data:",
-  "connect-src 'self' ws: wss: http: https:",
-  "media-src 'self' blob: https: http:",
-  "object-src 'none'",
-  "base-uri 'self'",
-  "form-action 'self'",
-  "child-src 'none'",
-  "frame-src 'none'",
-  "worker-src 'self' blob:",
-  "frame-ancestors 'none'",
-].join('; ')
-
-export function buildSecurityHeaders(prod: boolean): Record<string, string> {
+export function buildSecurityHeaders(prod: boolean, allowIframe = false): Record<string, string> {
   const headers: Record<string, string> = {
     'X-Content-Type-Options': 'nosniff',
-    'X-Frame-Options': 'DENY',
+    ...(allowIframe
+      ? {}
+      : { 'X-Frame-Options': 'DENY' }),
     'Cross-Origin-Resource-Policy': 'same-origin',
     'Cross-Origin-Opener-Policy': 'same-origin',
     'Permissions-Policy':
       'camera=(), microphone=(), geolocation=(), payment=(), usb=(), fullscreen=(self)',
     'Referrer-Policy': 'strict-origin-when-cross-origin',
-    'Content-Security-Policy': prod ? PROD_CSP : DEV_CSP,
+    'Content-Security-Policy': buildCsp(prod, allowIframe),
   }
   if (prod) {
     headers['Strict-Transport-Security'] = 'max-age=63072000; includeSubDomains; preload'
@@ -78,6 +45,47 @@ export function buildSecurityHeaders(prod: boolean): Record<string, string> {
   return headers
 }
 
+function buildCsp(prod: boolean, allowIframe: boolean): string {
+  // Devframe iframe dock 需要允许同源页面被 iframe 嵌入（frame-ancestors），
+  // 同时允许 iframe 内的页面加载 /src/devframe-docks/*.tsx 脚本（script-src 'self' 已覆盖）。
+  // frame-ancestors 'self' 限制仅同源可嵌（比 'none' 更松，比 '*' 更严），符合最小权限。
+  const frameAncestors = allowIframe ? "frame-ancestors 'self'" : "frame-ancestors 'none'"
+  const prodParts = [
+    "default-src 'self'",
+    "script-src 'self' 'unsafe-inline' https://va.vercel-scripts.com",
+    "style-src 'self' 'unsafe-inline'",
+    "img-src 'self' data: blob: https:",
+    "font-src 'self' data:",
+    "connect-src 'self' https: wss:",
+    "media-src 'self' blob: https:",
+    "object-src 'none'",
+    "base-uri 'self'",
+    "form-action 'self'",
+    "child-src 'none'",
+    "frame-src 'self'",
+    "worker-src 'self' blob:",
+    frameAncestors,
+    "upgrade-insecure-requests",
+  ]
+  const devParts = [
+    "default-src 'self' 'unsafe-inline' data: blob:",
+    "script-src 'self' 'unsafe-inline' data: blob: https://va.vercel-scripts.com",
+    "style-src 'self' 'unsafe-inline'",
+    "img-src 'self' data: blob: https: http:",
+    "font-src 'self' data:",
+    "connect-src 'self' ws: wss: http: https:",
+    "media-src 'self' blob: https: http:",
+    "object-src 'none'",
+    "base-uri 'self'",
+    "form-action 'self'",
+    "child-src 'none'",
+    "frame-src 'self'",
+    "worker-src 'self' blob:",
+    frameAncestors,
+  ]
+  return (prod ? prodParts : devParts).join('; ')
+}
+
 function mergeSecurityHeaders(source: Headers, headers: Record<string, string>): Headers {
   const entries = Object.entries(headers)
   try {
@@ -102,8 +110,20 @@ function withSecurityHeaders(result: Response, headers: Record<string, string>):
   })
 }
 
-export const securityHeadersMiddleware = createMiddleware().server(async ({ next }: any) => {
-  const headers = buildSecurityHeaders(process.env.NODE_ENV === 'production')
+export const securityHeadersMiddleware = createMiddleware().server(async ({ request, next }: any) => {
+  // Devframe iframe dock 需在同源内互相嵌入，`/devframe-docks/*` 是被 iframe 加载
+  // 的子页面（session-iframe.html / ai-chat-iframe.html），需要豁免 X-Frame-Options
+  // 与 CSP frame-ancestors 'none'，否则浏览器报 `Refused to display in a frame`。
+  // `/__devframe/` 是 Hub 页面（嵌入方），无需豁免；但其 iframe 内容来自
+  // `/devframe-docks/`，由上一条覆盖。
+  let pathname = ''
+  try {
+    pathname = new URL(request?.url ?? '').pathname
+  } catch {
+    pathname = ''
+  }
+  const allowIframe = pathname.startsWith('/devframe-docks/')
+  const headers = buildSecurityHeaders(process.env.NODE_ENV === 'production', allowIframe)
   const result = await next() as any
 
   if (result instanceof Response) return withSecurityHeaders(result, headers)

package/src/server/resources.ts

@@ -38,6 +38,9 @@ const PLAN_LIMIT_SELECT = {
   aiQuotaMonthly: true,
   agentQuota: true,
   skillQuota: true,
+  sandboxMinutesMonthly: true,
+  mediaGenerationsMonthly: true,
+  galleryStorageMb: true,
 } as const
 
 interface PlanLimits {
@@ -47,6 +50,9 @@ interface PlanLimits {
   aiQuotaMonthly: number | null
   agentQuota: number | null
   skillQuota: number | null
+  sandboxMinutesMonthly: number | null
+  mediaGenerationsMonthly: number | null
+  galleryStorageMb: number | null
 }
 
 async function resolveAccountPlanLimits(userId: string): Promise<{
@@ -143,6 +149,12 @@ export async function getResourceSnapshots(
   const aiLimit = limits?.aiQuotaMonthly == null ? 'unlimited' : limits.aiQuotaMonthly
   const agentLimit = limits?.agentQuota == null ? 'unlimited' : limits.agentQuota
   const skillLimit = limits?.skillQuota == null ? 'unlimited' : limits.skillQuota
+  const sandboxMinutesLimit =
+    limits?.sandboxMinutesMonthly == null ? 'unlimited' : limits.sandboxMinutesMonthly
+  const mediaGenerationsLimit =
+    limits?.mediaGenerationsMonthly == null ? 'unlimited' : limits.mediaGenerationsMonthly
+  const galleryStorageLimit =
+    limits?.galleryStorageMb == null ? 'unlimited' : limits.galleryStorageMb
 
   const [seatUsage, guestSeatUsage] = await Promise.all([
     prisma.teamMembership.count({
@@ -153,6 +165,25 @@ export async function getResourceSnapshots(
     }),
   ])
 
+  // 媒体生成次数：AiUsageLog.activity IN (image, video, speech, transcription) 本月 count
+  const mediaGenerationsUsage = await prisma.aiUsageLog.count({
+    where: {
+      userId,
+      activity: { in: ['image', 'video', 'speech', 'transcription'] },
+      createdAt: { gte: startOfCurrentMonth() },
+    },
+  })
+
+  // 画廊存储：GenerationRun.artifacts 持久化的 blob size 汇总（MB）
+  // 简化实现：统计 GenerationRun 数量作为代理指标（实际应查对象存储大小）
+  const galleryStorageUsage = await prisma.generationRun.count({
+    where: {
+      userId,
+      status: 'completed',
+      startedAt: { gte: startOfCurrentMonth() },
+    },
+  })
+
   return {
     seats: { limit: seatLimit, usage: seatUsage },
     guestSeats: { limit: guestSeatLimit, usage: guestSeatUsage },
@@ -180,6 +211,29 @@ export async function getResourceSnapshots(
       limit: skillLimit,
       usage: await prisma.userSkill.count({ where: { userId, isDeleted: false } }),
     },
+    // 沙箱时长按分钟计（不是次数）：AiUsageLog.activity='sandbox' 的 durationMs 求和后
+    // 向上取整——不足一分钟也算一分钟，避免「每次 30 秒、跑两次」绕过配额。
+    sandboxMinutesMonthly: {
+      limit: sandboxMinutesLimit,
+      usage: Math.ceil(
+        (await prisma.aiUsageLog.aggregate({
+          _sum: { durationMs: true },
+          where: {
+            userId,
+            activity: 'sandbox',
+            createdAt: { gte: startOfCurrentMonth() },
+          },
+        }))._sum.durationMs ?? 0
+      ) / 60_000,
+    },
+    mediaGenerationsMonthly: {
+      limit: mediaGenerationsLimit,
+      usage: mediaGenerationsUsage,
+    },
+    galleryStorageMb: {
+      limit: galleryStorageLimit,
+      usage: galleryStorageUsage,
+    },
   }
 }
 

package/src/server/serverFns/__tests__/ai-hosted-models.test.ts

@@ -0,0 +1,68 @@
+// @vitest-environment node
+import { describe, expect, it, vi, beforeEach } from 'vitest'
+
+// ① createServerFn chain builder mock（与 ai-source-mode.test.ts 相同）
+vi.mock('@tanstack/react-start', () => {
+  const createServerFn = () => {
+    const api: any = {
+      handler(fn: Function) {
+        return async (args: { data: unknown }) => fn(args)
+      },
+    }
+    return api
+  }
+  return { createServerFn }
+})
+vi.mock('@tanstack/react-start/server', () => ({
+  getRequest: () => ({}),
+}))
+
+// ② seam mock
+const mocks = vi.hoisted(() => ({
+  currentSession: vi.fn(),
+}))
+
+vi.mock('@allbluecn/kernel', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('@allbluecn/kernel')>()
+  const UnauthorizedError = class UnauthorizedError extends Error {
+    constructor(message = 'UNAUTHORIZED') { super(message); this.name = 'UnauthorizedError' }
+  }
+  return {
+    ...actual,
+    getServerSeam: () => ({
+      requireAuth: async () => {
+        const session = await mocks.currentSession()
+        if (!session?.user?.id) throw new UnauthorizedError()
+        return session
+      },
+    }),
+  }
+})
+
+// ③ pro-services mock
+vi.mock('@/server/ai-gateway/pro-services', () => ({
+  getProService: vi.fn(),
+}))
+
+import { listHostedModelsFn } from '@/plugins/core/prd/serverFns/ai/hosted-models'
+import { getProService } from '@/server/ai-gateway/pro-services'
+
+describe('listHostedModelsFn', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    delete process.env.DEPLOY_TARGET
+  })
+
+  it('非 SUPER_ADMIN 返回空且 enabled=false', async () => {
+    mocks.currentSession.mockResolvedValue({ user: { id: 'u1', role: 'USER' } })
+    const result = await (listHostedModelsFn as (args: unknown) => Promise<unknown>)({})
+    expect(result).toEqual({ models: [], enabled: false })
+  })
+
+  it('SUPER_ADMIN 在 OSS（无 Pro 服务）得到空列表 + enabled=false', async () => {
+    mocks.currentSession.mockResolvedValue({ user: { id: 'u1', role: 'SUPER_ADMIN' } })
+    vi.mocked(getProService).mockReturnValue(null)
+    const result = await (listHostedModelsFn as (args: unknown) => Promise<unknown>)({})
+    expect(result).toEqual({ models: [], enabled: false })
+  })
+})