@thincoder/core 0.9.1

package/config-io.mjs

@@ -0,0 +1,277 @@
+/**
+ * config-io.mjs — 核内 config.json 的**单一读写面** + provider 持久化面 + 监视钩子
+ * （CORE-UNIFICATION §2.5 CONFIG 组：#131「融合：核内单一读写 + 面板写面按端注入」·
+ * #132 监视面按端注入 · #177「纯持久化函数取一侧 + UI 壳按端注入」）。
+ *
+ * 组成与来源（逐条可追）：
+ *  - `configDir` / `configPath` / `_setConfigPathForTest` / `_resetConfigPathForTest` /
+ *    `_configPath` —— CLI `config.mjs` 的路径与测试缝（逐字随迁；拆档以容纳 500 行硬限）。
+ *  - `writeConfigAtomic` —— CLI `config.mjs`（R10 F5b mtime 门控：stat→read 序 + 冲突放弃
+ *    + `.bak` 留现场 + 0600）。**核内唯一写盘执行体**。
+ *  - `$schema` 写盘 —— VSC `config-io.mjs` 的 `saveRaw` 会写 `$schema` 指针、CLI 不写
+ *    （§2.5 #80 端差）⇒ 以 `opts.schema` **按端注入**，默认不写（= CLI 语义，零行为变）。
+ *  - `loadRaw` / `resolveProviders` —— VSC `config-io.mjs`（老形态迁移先行；providers 归一 +
+ *    默认渠道派生）。迁移写回经核内唯一写盘执行体（与 CLI `loadConfig` 同一条链路）。
+ *  - `persistRaw` / `conflictError` / `CONFIG_CONFLICT_HINT` —— VSC `config-io.mjs`（读-改-写
+ *    链 + 冲突提示串；执行体 = `writeConfigAtomic`）。
+ *  - `onConfigSelfWrite` —— VSC `config-io.mjs` 的自写通知（监视面属端侧，订阅挂在核内写面）。
+ *  - `cascadeRemoveProvider` —— VSC `config-consult.mjs`（删渠道的悬挂引用级联清理，逐字随迁）。
+ *  - `setProviderKey` / `removeProviderKeyFromConfig` / `addProviderEntry` / `removeProviderEntry`
+ *    —— VSC `config-io.mjs` + `extension/provider-flows.mjs` 的**纯持久化函数**（无 UI；UI 壳
+ *    QuickPick / TUI picker 留端侧）。
+ */
+
+import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs"
+import { homedir } from "node:os"
+import { dirname, join } from "node:path"
+import { migrateLegacyModelFields } from "./config-migrate.mjs"
+import { PROVIDER_PRESETS, presetToEntry } from "./config-presets.mjs"
+
+export { PROVIDER_PRESETS, presetToEntry }
+
+export const configDir = join(homedir(), ".thincoder")
+export const configPath = join(configDir, "config.json")
+
+/** Test seam: override the config file location (mirrors the CLI / VSC seams). */
+let _pathOverride = null
+export function _setConfigPathForTest(p) { _pathOverride = p }
+export function _resetConfigPathForTest() { _pathOverride = null }
+export function _configPath() { return _pathOverride ?? configPath }
+
+/** F5b 冲突提示文案（D-F5b 同型——调用方展示 / 抛出）。 */
+export const CONFIG_CONFLICT_HINT = "config changed on disk concurrently — retry"
+
+/**
+ * Read → mutate → write（CLI `writeConfigAtomic`）——**核内唯一写盘执行体**。
+ *
+ * - t0 = 写前重 stat 的比对基线，取在**新鲜读之前**（stat→read 序）：若对端在本端 stat 与
+ *   read 之间的微窗口写入，只会造成假冲突（放弃重试），绝不会带着旧内容覆盖对端新值——
+ *   read→stat 序存在漏检窗口（stat 已反映对端新 mtime → 门控放行旧内容）。
+ * - 写前重 stat ≠ t0 → **放弃**本次写；先 copy `.bak-{ts}` 留现场（仅冲突时）。
+ * - 返回 { ok:false, reason:"mtime-conflict" }，调用方提示 CONFIG_CONFLICT_HINT——不自动合并。
+ * - 文件缺失（首写）→ t0 = null；对端在本端读后创建 → null ≠ 新 mtime → 冲突放弃。
+ * - 畸形文件拒写（throw，绝不静默覆盖）；写后 chmod 0600 尽力而为。
+ *
+ * @param path config.json 路径（生产默认 configPath；测试注入 tmp 路径）
+ * @param mutate 在磁盘新鲜 raw 上执行单操作的同步回调
+ * @param {{schema?: string}} [opts] schema = 端注入的 `$schema` 指针（未给不写——§2.5 #80）
+ */
+export function writeConfigAtomic(path, mutate, opts = {}) {
+  const mtimeOf = (p) => {
+    try { return statSync(p).mtimeMs } catch { return null } // 缺失 → null（t0 比对基线）
+  }
+  const t0 = mtimeOf(path) // stat 先于 read（安全方向——见上）
+  const text = existsSync(path) ? readFileSync(path, "utf8") : null
+  let raw = {}
+  if (text !== null) {
+    try {
+      raw = JSON.parse(text)
+    } catch (error) {
+      throw new Error(`config file not parseable — refusing to overwrite: ${path} — ${error.message}`, { cause: error })
+    }
+  }
+  mutate(raw)
+  // §2.5 #80：`$schema` 写盘按端差注入（VSC 写 schema 指针、CLI 不写）——默认关闭（CLI 语义）。
+  if (opts.schema) raw.$schema = opts.schema
+  const t1 = mtimeOf(path)
+  if (t0 !== t1) {
+    try { if (existsSync(path)) copyFileSync(path, `${path}.bak-${Date.now()}`) } catch { /* 现场保留失败不阻断冲突报告 */ }
+    return { ok: false, reason: "mtime-conflict" }
+  }
+  mkdirSync(dirname(path), { recursive: true })
+  // 0600: config.json contains API keys, must not be world-readable (POSIX; chmod is best-effort on Windows)
+  writeFileSync(path, JSON.stringify(raw, null, 2) + "\n", { encoding: "utf8", mode: 0o600 })
+  try { chmodSync(path, 0o600) } catch { /* may fail on Windows, ignore */ }
+  for (const fn of [...selfWriteFns]) {
+    try { fn() } catch (e) { console.warn(`[config] self-write subscriber failed: ${e.message}`) }
+  }
+  return { ok: true }
+}
+
+/** 读 → 改写 → 写（VSC `persistRaw` / CLI `tui persistRaw` / `cli setup-wizard` 同一链）。 */
+export function persistRaw(mutate, opts = {}) {
+  return writeConfigAtomic(opts.path ?? _configPath(), mutate, opts)
+}
+
+/** 冲突判定收口：写结果 → CONFIG_CONFLICT_HINT 或 null。 */
+export function conflictError(result) {
+  return result?.reason === "mtime-conflict" ? CONFIG_CONFLICT_HINT : null
+}
+
+// ─── Self-write notifications（§2.5 #131 / #132：监视面按端注入，订阅挂在核内写面）───
+// 写成功后的同步回调让外部写感知面（配置监视）把基线刷到当前元组——自写 ⇒ 事件到达时
+// 元组已等于基线 ⇒ 零推送（不抖动消费者）；冲突放弃路径（无写）不回调。
+const selfWriteFns = new Set()
+
+/** 订阅写盘成功后的同步回调；返回退订函数（监视面的 dispose 随退）。 */
+export function onConfigSelfWrite(fn) {
+  if (typeof fn !== "function") return () => {}
+  selfWriteFns.add(fn)
+  return () => { selfWriteFns.delete(fn) }
+}
+
+/**
+ * Read the raw config object ({} when missing). Throws on invalid JSON — same as CLI loadConfig.
+ * 老形态检测 → 内存迁移态先行；写回失败绝不阻断（冲突 → 下次读重试——幂等）。
+ */
+export function loadRaw() {
+  const path = _configPath()
+  if (!existsSync(path)) return {}
+  let raw
+  try {
+    raw = JSON.parse(readFileSync(path, "utf8"))
+  } catch (error) {
+    throw new Error(`Config file is not valid JSON, check or delete it: ${path}\n  ${error.message}`, { cause: error })
+  }
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {}
+  if (migrateLegacyModelFields(raw)) {
+    try {
+      const r = writeConfigAtomic(path, migrateLegacyModelFields)
+      if (r && r.ok === false) console.warn(`[config] model-merge migration write-back skipped (${r.reason}) — memory state continues, retried on next load`)
+    } catch (e) {
+      console.warn(`[config] model-merge migration write-back failed — memory state continues, retried on next load: ${e.message}`)
+    }
+  }
+  return raw
+}
+
+/** Module-level one-time warn dedupe for invalid providers[].context (PROVIDER.md §15 D-C1). */
+const warnedContext = new Set()
+
+/**
+ * Resolve providers list + active name from disk（VSC `config-io.mjs` 逐字随迁）。BaseURL
+ * trailing slashes normalized. `activeProvider` 语义 = config.defaultModel 的渠道；缺失/失效
+ * → 回退首 provider。渠道单值 `model` 归一：非字符串/空串删除。
+ */
+export function resolveProviders() {
+  const raw = loadRaw()
+  const providers = Array.isArray(raw.providers)
+    ? raw.providers.filter((p) => p && typeof p === "object" && p.name)
+    : []
+  for (const p of providers) {
+    if (typeof p.baseURL === "string") p.baseURL = p.baseURL.replace(/\/+$/, "")
+    if (typeof p.model === "string" && p.model.trim()) p.model = p.model.trim()
+    else delete p.model
+    // PROVIDER.md §15 D-C1: providers[].context must be a positive integer (K units).
+    if (p.context != null) {
+      const n = Number(p.context)
+      if (!Number.isInteger(n) || n <= 0) {
+        if (!warnedContext.has(p.name)) {
+          warnedContext.add(p.name)
+          console.warn(`[config] provider "${p.name}" has invalid context ${JSON.stringify(p.context)} — ignored (expected a positive integer in K units, e.g. 128 = 128K); using the model spec value.`)
+        }
+        delete p.context
+      }
+    }
+  }
+  let activeProvider = ""
+  if (typeof raw.defaultModel === "string" && raw.defaultModel.includes(":")) {
+    const dmProvider = raw.defaultModel.slice(0, raw.defaultModel.indexOf(":"))
+    if (providers.some((p) => p.name === dmProvider)) activeProvider = dmProvider
+  }
+  if (!activeProvider) activeProvider = providers[0]?.name ?? ""
+  return { providers, activeProvider }
+}
+
+/** 级联清理（删渠道的共享写点）：raw 移除 name 渠道后清悬挂——
+ *  consultModels 条目 / subagentModels 角色值（=== name 或 "name:…"）/ advisor.provider。纯 mutate。 */
+export function cascadeRemoveProvider(raw, name) {
+  const a = raw?.agent
+  if (!a || typeof a !== "object" || Array.isArray(a)) return
+  if (Array.isArray(a.consultModels)) {
+    const keep = a.consultModels.filter((m) => m?.provider !== name)
+    if (keep.length) a.consultModels = keep
+    else delete a.consultModels
+  }
+  if (a.subagentModels && typeof a.subagentModels === "object" && !Array.isArray(a.subagentModels)) {
+    for (const role of Object.keys(a.subagentModels)) {
+      const v = a.subagentModels[role]
+      if (typeof v === "string" && (v === name || v.startsWith(`${name}:`))) delete a.subagentModels[role]
+    }
+    if (!Object.keys(a.subagentModels).length) delete a.subagentModels
+  }
+  if (a.advisor && typeof a.advisor === "object" && !Array.isArray(a.advisor) && a.advisor.provider === name) {
+    delete a.advisor.provider
+  }
+}
+
+// ─── Provider 持久化面（§2.5 #177「纯持久化函数取一侧 + UI 壳按端注入」）───
+
+/** 写一个渠道的 key（整 providers[] 重写）。冲突 → CONFIG_CONFLICT_HINT；成功 null。 */
+export function setProviderKey(name, key) {
+  const r = persistRaw((raw) => {
+    raw.providers = Array.isArray(raw.providers) ? raw.providers : []
+    const entry = raw.providers.find((p) => p?.name === name)
+    if (entry) entry.apiKey = key
+  })
+  return conflictError(r)
+}
+
+/** 移除一个渠道的 key（保留渠道条目）。冲突提示同 setProviderKey。 */
+export function removeProviderKeyFromConfig(name) {
+  const r = persistRaw((raw) => {
+    const entry = Array.isArray(raw.providers) ? raw.providers.find((p) => p?.name === name) : null
+    if (entry) delete entry.apiKey
+  })
+  return conflictError(r)
+}
+
+const FORMATS = ["openai", "anthropic", "google"]
+
+/** 新增渠道。payload: { preset?: name, custom?: { name, baseURL, model, format }, key? }
+ *  返回错误串或 null。 */
+export function addProviderEntry({ preset, custom, key } = {}) {
+  let providers
+  try {
+    ({ providers } = resolveProviders())
+  } catch (e) {
+    return e.message
+  }
+  const existing = new Set(providers.map((p) => p.name))
+
+  let entry
+  if (preset) {
+    if (!PROVIDER_PRESETS[preset]) return `Unknown preset: ${preset}`
+    if (existing.has(preset)) return `Provider "${preset}" already exists`
+    entry = presetToEntry(preset)
+  } else if (custom) {
+    const name = (custom.name || "").trim()
+    if (!name) return "Provider name is required"
+    if (existing.has(name) || PROVIDER_PRESETS[name]) return `Name "${name}" is already in use`
+    const baseURL = (custom.baseURL || "").trim().replace(/\/+$/, "")
+    if (!baseURL) return "Base URL is required"
+    const model = (custom.model || "").trim()
+    if (!model) return "Model is required"
+    const format = (custom.format || "openai").trim()
+    if (!FORMATS.includes(format)) return `Unknown API format: ${format} (expected ${FORMATS.join("/")})`
+    entry = { name, baseURL, model } // MODEL-SELECTION：渠道单值默认模型（候选清单字段已退场）
+    if (format !== "openai") entry.format = format
+  } else {
+    return "Add provider needs a preset or a custom config"
+  }
+
+  const r = persistRaw((raw) => { (raw.providers ??= []).push(entry) })
+  const err = conflictError(r)
+  if (err) return err // F5b：config 被并发方改过——放弃 + 提示重试（决策① A）
+  const k = (key || "").trim()
+  if (k) setProviderKey(entry.name, k)
+  return null
+}
+
+/** 移除渠道。激活渠道受保护（CLI parity）。返回错误串或 null。 */
+export function removeProviderEntry(name) {
+  let providers, activeProvider
+  try {
+    ({ providers, activeProvider } = resolveProviders())
+  } catch (e) {
+    return e.message
+  }
+  if (!providers.some((p) => p.name === name)) return `No provider named "${name}"`
+  if (name === activeProvider) return "The active provider cannot be removed — switch active first"
+  const r = persistRaw((raw) => {
+    raw.providers = (raw.providers ?? []).filter((p) => p?.name !== name)
+    // F-4 (IKCDMR——AC-4 级联)：删渠道同步清 consultModels/subagentModels/advisor.provider 悬挂引用
+    cascadeRemoveProvider(raw, name)
+  })
+  return conflictError(r) // F5b：冲突 → 错误串提示（调用方 providerError 通道展示）
+}

package/config-migrate.mjs

@@ -0,0 +1,178 @@
+/**
+ * config-migrate.mjs — model-schema legacy-shape migration core (MODEL-SELECTION v2, §16.2 M7).
+ * Split out of config.mjs (500-line hard limit). Pure function, zero imports — the
+ * write-back orchestration (writeConfigAtomic / persistRaw, failure tolerance) stays in
+ * the caller (CLI: config.mjs loadConfig; VSC: config-io.mjs loadRaw — same rule, 双端各自
+ * 独立实现——不做同步依赖).
+ *
+ * 目标形态 C：每渠道恰好一个默认模型（`providers[].model` 单值）+ 顶层 `defaultModel` 复合。
+ * 老形态迁移（v2）：
+ * - A：`providers[].model` + `activeProvider/activeModel` → `p.model` **保留**（不再搬入 models）；
+ *   `activeProvider/activeModel` → `defaultModel` 复合（`activeModel` 优先；AP 不存在/AM 空 → 首渠道回退）
+ * - B：`providers[].models[]` → `p.model = defaultModel 属本渠道的模型段 ?? 现有 p.model（非空字符串）
+ *   ?? models[] 首个非空字符串`，然后 `delete p.models`
+ * - 混合/垃圾：非数组 `p.models` / 非字符串（空串）`p.model` → 删除（清理）
+ * - 顺序：先构造/读取有效 `defaultModel` 值（含老 active* 转换），再按它给各渠道播种 `p.model`
+ * - 幂等：无老字段（无 `models` / 无 active* / 无垃圾值）→ 返回 false 不动；slot 旧字段
+ *   （会话文件内）不迁移——读侧容忍
+ * - 空结果合法：渠道无模型来源 → `p.model` 不设（模型选择经 `/models` 拉取候选——M8/M9）
+ *
+ * ── 核内合并（CORE-UNIFICATION §2.5 #79 · CONFIG 组「取并集」）──
+ * ② `migrateCore`（VS Code 旧设置 / 密钥库迁移遍——VSC 侧逐字随迁 + 依赖面收核为注入参数）：
+ *    CLI 侧无此通道，VSC 侧「不迁即丢密钥」⇒ 进核。读-改-写编排（loadRaw / saveRaw /
+ *    conflictError——写回失败绝不阻断）由调用方注入（核内 = `config.mjs`）；
+ *    本档被 `config.mjs` import ⇒ 不得反向 import（循环）——故 ② 保持纯函数形态。
+ */
+
+export function migrateLegacyModelFields(raw) {
+  if (!raw || typeof raw !== "object") return false
+  const providers = Array.isArray(raw.providers) ? raw.providers : []
+  let changed = false
+
+  // ── ① 有效 defaultModel 值（含老 active* 转换）──
+  if (raw.activeProvider !== undefined || raw.activeModel !== undefined) {
+    const rawAP = typeof raw.activeProvider === "string" && raw.activeProvider.trim() ? raw.activeProvider : ""
+    const rawAM = typeof raw.activeModel === "string" && raw.activeModel.trim() ? raw.activeModel : ""
+    const ap = rawAP ? providers.find((p) => p?.name === rawAP) : null
+    if (ap && rawAM) {
+      if (raw.defaultModel == null) { raw.defaultModel = `${rawAP}:${rawAM}`; changed = true }
+    } else {
+      // AP 已不存在 / AM 无法归属 → 首渠道回退（该渠道有模型来源才可用——迁移产物必可用）
+      const first = providers.find((p) => seedModel(p) != null)
+      if (first && raw.defaultModel == null) { raw.defaultModel = `${first.name}:${seedModel(first)}`; changed = true }
+    }
+    delete raw.activeProvider
+    delete raw.activeModel
+    changed = true
+  }
+
+  // ── ② 渠道播种单值 `p.model` + 清 models ──
+  const dm = typeof raw.defaultModel === "string" && raw.defaultModel.trim() ? raw.defaultModel : null
+  const dmSep = dm ? dm.indexOf(":") : -1
+  const dmProvider = dmSep > 0 ? dm.slice(0, dmSep) : null
+  const dmModel = dmSep > 0 && dmSep < dm.length - 1 ? dm.slice(dmSep + 1) : null
+  for (const p of providers) {
+    if (!p || typeof p !== "object") continue
+    if (Array.isArray(p.models)) {
+      const next = (p.name === dmProvider && dmModel)
+        ? dmModel
+        : (typeof p.model === "string" && p.model.trim() ? p.model : seedModel(p))
+      if (next == null) delete p.model
+      else p.model = next
+      delete p.models
+      changed = true
+      continue
+    }
+    if (p.models !== undefined) { delete p.models; changed = true } // 非数组 models —— 垃圾清理
+    if (p.model !== undefined && !(typeof p.model === "string" && p.model.trim())) { delete p.model; changed = true }
+  }
+  return changed
+}
+
+/** 渠道级模型来源读数（迁移用）：现有 `p.model`（非空字符串优先）或 `models[]` 首个非空字符串。 */
+function seedModel(p) {
+  if (typeof p?.model === "string" && p.model.trim()) return p.model
+  const models = Array.isArray(p?.models) ? p.models : []
+  return models.find((m) => typeof m === "string" && m.trim()) ?? null
+}
+
+/**
+ * ② VS Code 旧设置 / 密钥库迁移遍（CORE-UNIFICATION §2.5 #79——**取并集**：CLI 侧无此通道，
+ * VSC 侧「不迁即丢密钥」）。来源 = `thincoder-vscode/src/config-migrate.mjs` 的 `migrateCore`
+ * ——逐字随迁，**依赖面收核**（原 import 的 `PROVIDER_PRESETS` / `presetToEntry` 与
+ * `loadRaw` / `saveRaw` / `conflictError` 改为**注入参数**——本档由 `config.mjs` import，
+ * 不得反向 import `config.mjs`（循环）⇒ 纯函数形态保留，调用方供应依赖）。
+ *
+ * Pure function:
+ *   deps.secrets            — { get(key), delete(key) } (async, may throw)
+ *   deps.flags              — { get(): Promise<boolean>, set(): Promise<void> } (one-shot guard)
+ *   deps.legacySettings     — the old `thincoder.providers` settings value (object or undefined)
+ *   deps.clearLegacySettings— async fn that deletes the legacy settings key
+ *   deps.loadRaw / deps.saveRaw / deps.conflictError — 核内单一读写面（config.mjs）
+ *   deps.presets / deps.presetToEntry                — 核内预设表（config.mjs）
+ *
+ * Never overwrites an apiKey already present in config.json (the CLI may have written it first).
+ * Builtin preset names missing from providers[] are created from PROVIDER_PRESETS; unknown
+ * names are only created when baseURL/model metadata is recoverable.
+ */
+export async function migrateCore(deps) {
+  const { secrets, flags, legacySettings, clearLegacySettings } = deps
+  const loadRaw = deps.loadRaw
+  const saveRaw = deps.saveRaw
+  const conflictError = deps.conflictError
+  const PROVIDER_PRESETS = deps.presets
+  const presetToEntry = deps.presetToEntry
+  if (await flags.get()) return
+
+  const raw = loadRaw()
+  const providers = Array.isArray(raw.providers) ? raw.providers : []
+  raw.providers = providers
+  const byName = new Map(providers.filter((p) => p && typeof p === "object" && p.name).map((p) => [p.name, p]))
+
+  const legacyMeta = {}
+  for (const [name, entry] of Object.entries(legacySettings || {})) {
+    if (entry && typeof entry === "object") legacyMeta[name] = entry
+  }
+
+  function applyKey(name, key) {
+    if (!key) return
+    let entry = byName.get(name)
+    if (!entry) {
+      if (PROVIDER_PRESETS[name]) {
+        entry = presetToEntry(name)
+      } else {
+        const meta = legacyMeta[name]
+        if (!meta?.baseURL || !meta?.model) return // orphan key, no way to reconstruct
+        entry = { name, baseURL: meta.baseURL, model: meta.model }
+        // PROVIDER.md §15 D-C4: migrate-settings is the same source — a legacy
+        // settings entry carrying context (K units) rides along into config.json.
+        if (meta.context != null) entry.context = meta.context
+      }
+      entry.apiKey = key
+      providers.push(entry)
+      byName.set(name, entry)
+      return
+    }
+    if (!entry.apiKey) entry.apiKey = key // never clobber an existing key
+  }
+
+  // SecretStorage keys first, then settings.json keys (both are legacy; config.json wins)
+  const legacyNames = [...Object.keys(PROVIDER_PRESETS), "custom"]
+  for (const name of legacyNames) {
+    try { applyKey(name, await secrets.get(`thincoder.provider.${name}`)) } catch { /* ignore */ }
+  }
+  for (const [name, entry] of Object.entries(legacySettings || {})) {
+    applyKey(name, typeof entry === "string" ? entry : entry?.key)
+  }
+
+  // Embedding key (legacy SecretStorage → config.embedding)
+  try {
+    const embKey = await secrets.get("thincoder.embedding.apiKey")
+    if (embKey) {
+      const emb = raw.embedding && typeof raw.embedding === "object" ? raw.embedding : {}
+      if (!emb.apiKey) emb.apiKey = embKey
+      if (!emb.baseURL) emb.baseURL = EMBEDDING_DEFAULTS.baseURL
+      if (!emb.model) emb.model = EMBEDDING_DEFAULTS.model
+      raw.embedding = emb
+    }
+  } catch { /* ignore */ }
+
+  // Legacy MCP servers were removed together with the `thincoder.mcpServers`
+  // setting itself (pre-release, no migration — see package.json history).
+
+  // F5b（R10——MULTI-INSTANCE-COLLAB.md D-F5b）：迁移是读-改-写链（读后多 await 异步
+  // 窗口）——saveRaw 写前 mtime 门控冲突（{ok:false, reason:"mtime-conflict"}）→ 放弃
+  // 本次迁移：legacy 存储不清理、flags 不置位——下次启动自动重试（绝不能清了 legacy
+  // 又丢了 config 写——密钥才会真正丢失）。
+  if (conflictError(saveRaw(raw))) return
+
+  // Clean up legacy stores so nothing reads them again
+  for (const name of legacyNames) {
+    try { await secrets.delete(`thincoder.provider.${name}`) } catch { /* ignore */ }
+  }
+  try { await secrets.delete("thincoder.embedding.apiKey") } catch { /* ignore */ }
+  try { await clearLegacySettings() } catch { /* ignore */ }
+  await flags.set()
+}
+
+const EMBEDDING_DEFAULTS = { baseURL: "https://api.siliconflow.cn/v1", model: "BAAI/bge-m3" }

package/config-presets.mjs

@@ -0,0 +1,49 @@
+/**
+ * config-presets.mjs — provider preset table + entry builder（核内单一预设面）。
+ *
+ * 来源（#129 融合：自 CLI / VSC 两张逐条同值的预设表取一侧）：
+ *  - `PROVIDER_PRESETS` = 取 CLI 侧为单一权威（VSC 侧现经由
+ *    `@thincoder/core/config.mjs` 取用，无独立镜像档；本档 = 两表
+ *    融合后的唯一定义处）。
+ *  - `presetToEntry` = 取 VSC 侧独有导出（CLI 侧对应实现在
+ *    `cli/setup-wizard.mjs`，同字节语义）。
+ *
+ * 预先声明（MODEL-SELECTION v2，2026-09-10）：每个预设恰好携带一个默认模型（`model` ——
+ * 新装启动种子 / 槽位空兜底；候选清单字段不再预置——运行期从 provider 拉取）。
+ */
+
+/** Built-in provider presets: shared by /provider add <preset> and first-run wizard. */
+export const PROVIDER_PRESETS = {
+  deepseek: { baseURL: "https://api.deepseek.com", model: "deepseek-flash", thinking: { type: "enabled" }, reasoningEffort: "max", maxTokens: 393216, desc: "DeepSeek" },
+  kimi:     { baseURL: "https://api.moonshot.cn/v1", model: "kimi-k3", thinking: null, reasoningEffort: "max", maxTokens: 131072, desc: "Kimi / Moonshot" },
+  "kimi-code": { baseURL: "https://api.kimi.com/coding/v1", model: "k3", thinking: null, reasoningEffort: "max", maxTokens: 131072, desc: "Kimi For Coding (platform.kimi.com — sk-kimi- keys; NOT interchangeable with Moonshot)" },
+  glm:      { baseURL: "https://open.bigmodel.cn/api/paas/v4", model: "glm-5.2", thinking: { type: "enabled" }, reasoningEffort: "max", maxTokens: 128000, desc: "Zhipu GLM" },
+  "glm-code": { baseURL: "https://open.bigmodel.cn/api/coding/paas/v4", model: "glm-5.2", thinking: { type: "enabled" }, reasoningEffort: "max", maxTokens: 128000, desc: "Zhipu GLM Coding Plan (coding endpoint — same key as GLM; server-forced thinking)" },
+  qwen:     { baseURL: "https://dashscope.aliyuncs.com/compatible-mode/v1", model: "qwen3.7-max", reasoningEffort: "high", maxTokens: 131072, desc: "Qwen / Alibaba" },
+  qwenplan: { baseURL: "https://token-plan.cn-beijing.maas.aliyuncs.com/compatible-mode/v1", model: "qwen3.7-max", reasoningEffort: "high", maxTokens: 131072, desc: "Qwen Token Plan (百炼套餐)" },
+  mimo:     { baseURL: "https://api.xiaomimimo.com/v1", model: "mimo-v2.5-pro", thinking: { type: "enabled" }, maxTokens: 131072, desc: "MiMo (Xiaomi)" },
+  mimoplan: { baseURL: "https://token-plan-cn.xiaomimimo.com/v1", model: "mimo-v2.5-pro", thinking: { type: "enabled" }, maxTokens: 131072, desc: "MiMo Token Plan (小米套餐 — tp- keys; 与按量付费 sk- 密钥不通用)" },
+  minimax:  { baseURL: "https://api.minimaxi.com/v1", model: "MiniMax-M3", thinking: { type: "adaptive" }, maxTokens: 128000, chatPath: "/text/chatcompletion_v2", desc: "MiniMax" },
+  openai:   { baseURL: "https://api.openai.com/v1", model: "gpt-4o", desc: "OpenAI" },
+  claude:   { baseURL: "https://api.anthropic.com/v1", model: "claude-sonnet-4", format: "anthropic", maxTokens: 8192, desc: "Claude (Anthropic)" },
+  gemini:   { baseURL: "https://generativelanguage.googleapis.com/v1beta", model: "gemini-2.5-flash", format: "google", maxTokens: 8192, desc: "Gemini (Google)" },
+  grok:     { baseURL: "https://api.x.ai/v1", model: "grok-4.5", maxTokens: 65536, desc: "Grok (xAI)" },
+  mistral:  { baseURL: "https://api.mistral.ai/v1", model: "mistral-large", maxTokens: 32768, desc: "Mistral" },
+  volcengine: { baseURL: "https://ark.cn-beijing.volces.com/api/v3", model: "doubao-seed-2-0-code-preview-260215", maxTokens: 131072, desc: "Volcengine Ark (豆包)" },
+  hunyuan:  { baseURL: "https://api.hunyuan.cloud.tencent.com/v1", model: "hunyuan-pro", maxTokens: 32768, desc: "Hunyuan (腾讯混元)" },
+  // TokenHub = Tencent MaaS 聚合网关（另一主机；`hy3` 在本规格表有行）。`thinking` / `reasoningEffort` /
+  // `maxTokens` 一律**不设 = 不发**（两新渠道的 thinking 载荷与 max_tokens 行为未测 —— MODEL-SPECS §9.6 D-13）。
+  tokenhub: { baseURL: "https://tokenhub.tencentmaas.com/v1", model: "hy3", desc: "Tencent TokenHub (腾讯混元网关)" },
+  siliconflow: { baseURL: "https://api.siliconflow.cn/v1", model: "deepseek-ai/DeepSeek-V3", maxTokens: 32768, desc: "SiliconFlow (硅基流动)" },
+  openrouter: { baseURL: "https://openrouter.ai/api/v1", model: "anthropic/claude-sonnet-4", maxTokens: 32768, desc: "OpenRouter" },
+  groq:     { baseURL: "https://api.groq.com/openai/v1", model: "llama-3.3-70b-versatile", maxTokens: 32768, desc: "Groq" },
+}
+
+/** Build the stored provider entry from a preset — strip the display field, keep the rest
+ *  （含单值 `model`——候选清单不再由预设播种）。 */
+export function presetToEntry(name) {
+  const preset = PROVIDER_PRESETS[name]
+  if (!preset) return null
+  const { desc: _, ...entry } = preset
+  return { name, ...entry }
+}