@tianshu-ai/tianshu 0.3.0

package/packages/server/dist/cli.js

@@ -0,0 +1,329 @@
+// `tianshu` CLI — top-level dispatch.
+//
+// Commands:
+//   tianshu doctor [--probe-providers] [--probe-sandbox] [--json]
+//   tianshu setup [--wizard] [--non-interactive --provider X --api-key Y [--base-url URL] [--default-model Z]] [--force] [--dry-run] [--use-env]
+//   tianshu start | stop | restart | status [--json] [--no-wait]
+//   tianshu logs [--follow] [--lines=N] [--stream=out|err|both]
+//   tianshu tenant list [--json] [--plain] | create <id> | delete <id>
+//   tianshu user create <tenantId> <userId> [--provider=dev] [--external-id=<x>]
+//   tianshu version
+//   tianshu help [<command>]
+//
+// Service lifecycle commands wrap launchctl so users (and
+// debugging agents) don't need to know launchd plist paths
+// and `bootstrap gui/$(id -u) ~/Library/LaunchAgents/...`
+// invocations. `tianshu logs` reads the same files the wizard
+// configured the agent to write into.
+import fs from "node:fs";
+import path from "node:path";
+import { GlobalOps, InvalidTenantIdError, TenantAlreadyExistsError, TenantNotFoundError, getTianshuHome, loadGlobalConfig, } from "./core/index.js";
+import { loadEnv } from "./setup/load-env.js";
+import { runDoctor } from "./setup/doctor.js";
+import { runSetupWizard } from "./setup/wizard.js";
+import { runStart, runStop, runRestart, runStatus, runLogs, } from "./setup/service.js";
+// Load .env up front, same as the server boot path. Without this,
+// `tianshu doctor` would diagnose the user's setup using whatever
+// the shell happens to export — typically nothing — and report
+// every provider as 'API key not set' even though the keys are
+// sitting in .env right next to the config it just validated.
+loadEnv();
+export function parseArgs(argv) {
+    const positional = [];
+    const options = {};
+    const flags = new Set();
+    for (const arg of argv) {
+        if (arg.startsWith("--")) {
+            const eq = arg.indexOf("=");
+            if (eq > 0) {
+                options[arg.slice(2, eq)] = arg.slice(eq + 1);
+            }
+            else {
+                flags.add(arg.slice(2));
+            }
+        }
+        else {
+            positional.push(arg);
+        }
+    }
+    const [command, ...rest] = positional;
+    return { command: command ?? "", positional: rest, options, flags };
+}
+function topLevelUsage() {
+    return [
+        "Usage:",
+        "  tianshu doctor [--probe-providers] [--probe-sandbox] [--json]",
+        "  tianshu setup [--wizard] [--non-interactive --provider X --api-key Y [--base-url URL] [--default-model Z]] [--use-env]",
+        "  tianshu start | stop | restart | status [--json] [--no-wait]",
+        "  tianshu logs [--follow] [--lines=N] [--stream=out|err|both]",
+        "  tianshu tenant list [--json] [--plain] | create <id> | delete <id>",
+        "  tianshu user create <tenantId> <userId> [--provider=dev] [--external-id=<x>]",
+        "  tianshu version",
+        "  tianshu help [<command>]",
+        "",
+        `TIANSHU_HOME currently resolves to: ${getTianshuHome()}`,
+    ].join("\n");
+}
+async function getPackageVersion() {
+    // Single source of truth: the root package.json. The CLI is
+    // short-lived so reading from disk per invocation is fine.
+    try {
+        const fs = await import("node:fs");
+        const url = new URL("../../../package.json", import.meta.url);
+        const json = JSON.parse(fs.readFileSync(url, "utf8"));
+        return json.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+export async function main(argv) {
+    const parsed = parseArgs(argv);
+    // Top-level lifecycle commands first.
+    switch (parsed.command) {
+        case "":
+        case "help": {
+            const target = parsed.positional[0];
+            if (!target) {
+                console.log(topLevelUsage());
+                return 0;
+            }
+            // For now help <cmd> just prints the same top-level usage —
+            // sub-commands' own help is implicit. Easy to expand later.
+            console.log(topLevelUsage());
+            return 0;
+        }
+        case "version":
+        case "--version":
+        case "-v":
+            console.log(await getPackageVersion());
+            return 0;
+        case "doctor":
+            return runDoctor({
+                probeProviders: parsed.flags.has("probe-providers"),
+                probeSandbox: parsed.flags.has("probe-sandbox"),
+                json: parsed.flags.has("json"),
+            });
+        case "setup": {
+            try {
+                const res = await runSetupWizard({
+                    nonInteractive: parsed.flags.has("non-interactive"),
+                    provider: parsed.options.provider,
+                    apiKey: parsed.options["api-key"],
+                    baseUrl: parsed.options["base-url"],
+                    defaultModel: parsed.options["default-model"],
+                    force: parsed.flags.has("force"),
+                    dryRun: parsed.flags.has("dry-run"),
+                    useEnv: parsed.flags.has("use-env"),
+                });
+                if (parsed.flags.has("non-interactive")) {
+                    for (const note of res.notes)
+                        console.log(note);
+                }
+                return 0;
+            }
+            catch (err) {
+                console.error(`setup failed: ${err instanceof Error ? err.message : String(err)}`);
+                return 1;
+            }
+        }
+        case "start":
+            return runStart({
+                wait: !parsed.flags.has("no-wait"),
+                json: parsed.flags.has("json"),
+            });
+        case "stop":
+            return runStop({ json: parsed.flags.has("json") });
+        case "restart":
+            return runRestart({
+                wait: !parsed.flags.has("no-wait"),
+                json: parsed.flags.has("json"),
+            });
+        case "status":
+            return runStatus({ json: parsed.flags.has("json") });
+        case "logs": {
+            const linesOpt = parsed.options.lines;
+            const streamOpt = parsed.options.stream;
+            const stream = streamOpt === "out" || streamOpt === "err" || streamOpt === "both"
+                ? streamOpt
+                : undefined;
+            return runLogs({
+                follow: parsed.flags.has("follow") || parsed.flags.has("f"),
+                lines: linesOpt ? Number.parseInt(linesOpt, 10) : undefined,
+                stream,
+            });
+        }
+    }
+    // Tenant / user commands keep their original semantics.
+    const ops = new GlobalOps();
+    try {
+        if (parsed.command === "tenant" && parsed.positional[0] === "list") {
+            // Default output is a tree of tenants → users → dev URLs,
+            // because the bare list of tenant ids isn't useful by
+            // itself — the typical follow-up question is "and who's
+            // in each", and the typical follow-up action is "copy a
+            // URL to share with that user". --plain restores the
+            // legacy one-id-per-line format for shell scripting.
+            // --json emits the same data structurally for consumers
+            // who can parse it.
+            const ids = ops.list();
+            const wantJson = parsed.flags.has("json");
+            const wantPlain = parsed.flags.has("plain");
+            if (ids.length === 0) {
+                if (wantJson)
+                    console.log("[]");
+                else
+                    console.log("(no tenants)");
+                return 0;
+            }
+            if (wantPlain) {
+                for (const id of ids)
+                    console.log(id);
+                return 0;
+            }
+            const webBase = resolveWebBaseUrl();
+            const tree = ids.map((tenantId) => ({
+                tenantId,
+                users: listTenantUsers(tenantId),
+            }));
+            if (wantJson) {
+                console.log(JSON.stringify(tree.map((t) => ({
+                    tenantId: t.tenantId,
+                    users: t.users,
+                    urls: t.users.map((u) => ({
+                        userId: u,
+                        url: `${webBase}/tenants/${t.tenantId}/users/${u}/`,
+                    })),
+                })), null, 2));
+                return 0;
+            }
+            // Human-readable tree. Indent + URL per (tenant, user)
+            // makes it copyable straight from the terminal into a
+            // browser or share message.
+            for (const t of tree) {
+                if (t.users.length === 0) {
+                    console.log(`${t.tenantId}  (no users)`);
+                    continue;
+                }
+                console.log(t.tenantId);
+                for (const u of t.users) {
+                    console.log(`  ${u.padEnd(16)} ${webBase}/tenants/${t.tenantId}/users/${u}/`);
+                }
+            }
+            return 0;
+        }
+        if (parsed.command === "tenant" && parsed.positional[0] === "create") {
+            const id = parsed.positional[1];
+            if (!id) {
+                console.error("missing <id>\n" + topLevelUsage());
+                return 2;
+            }
+            const ctx = ops.create(id);
+            console.log(`created tenant ${ctx.tenantId} at ${ctx.root}`);
+            return 0;
+        }
+        if (parsed.command === "tenant" && parsed.positional[0] === "delete") {
+            const id = parsed.positional[1];
+            if (!id) {
+                console.error("missing <id>\n" + topLevelUsage());
+                return 2;
+            }
+            ops.softDelete(id);
+            console.log(`soft-deleted tenant ${id} (renamed to ${id}.deleted.<ts>)`);
+            return 0;
+        }
+        if (parsed.command === "user" && parsed.positional[0] === "create") {
+            const [, tenantId, userId] = parsed.positional;
+            if (!tenantId || !userId) {
+                console.error("missing <tenantId> or <userId>\n" + topLevelUsage());
+                return 2;
+            }
+            const ctx = ops.open(tenantId);
+            ops.ensureUser(ctx, {
+                userId,
+                provider: parsed.options.provider ?? "dev",
+                externalId: parsed.options["external-id"] ?? `${userId}@local`,
+                displayName: parsed.options["display-name"],
+            });
+            console.log(`ensured user ${userId} in tenant ${ctx.tenantId}`);
+            return 0;
+        }
+        console.error(topLevelUsage());
+        return 2;
+    }
+    catch (err) {
+        if (err instanceof InvalidTenantIdError) {
+            console.error(`error: ${err.message}`);
+            return 2;
+        }
+        if (err instanceof TenantAlreadyExistsError ||
+            err instanceof TenantNotFoundError) {
+            console.error(`error: ${err.message}`);
+            return 1;
+        }
+        console.error(err instanceof Error ? err.stack ?? err.message : String(err));
+        return 1;
+    }
+    finally {
+        ops.closePool();
+    }
+}
+/**
+ * List user ids under a tenant by reading
+ * `<TIANSHU_HOME>/tenants/<id>/workspace/users/`. We don't go
+ * through a higher-level API because GlobalOps doesn't expose
+ * users; this surface is the same one
+ * checks/tenants.ts uses and the two should not drift. If a
+ * proper UsersOps lands in core, swap to it.
+ */
+function listTenantUsers(tenantId) {
+    const usersDir = path.join(getTianshuHome(), "tenants", tenantId, "workspace", "users");
+    if (!fs.existsSync(usersDir))
+        return [];
+    try {
+        return fs
+            .readdirSync(usersDir, { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            .map((d) => d.name)
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Best-effort "where does the user open this in a browser?".
+ * Resolution order:
+ *   1. TIANSHU_WEB_URL env       (explicit override, e.g.
+ *                                 cloudflare tunnel hostname)
+ *   2. global config server.publicUrl
+ *   3. http://localhost:<webPort>  where webPort comes from
+ *      .env's WEB_PORT or the default 5183
+ * The fallback uses the *web* port (vite dev server), not the
+ * server port — the URL we print is what the user opens, not
+ * what fetch hits.
+ */
+function resolveWebBaseUrl() {
+    const envUrl = process.env.TIANSHU_WEB_URL;
+    if (envUrl)
+        return envUrl.replace(/\/+$/, "");
+    try {
+        const cfg = loadGlobalConfig();
+        const pub = cfg.server?.publicUrl;
+        if (pub)
+            return pub.replace(/\/+$/, "");
+    }
+    catch {
+        /* no global config yet — fall through */
+    }
+    const webPort = process.env.WEB_PORT ?? "5183";
+    return `http://localhost:${webPort}`;
+}
+// Direct invocation: `node dist/cli.js …`. The `bin/tianshu.mjs`
+// shim also calls `main()` after dynamic-importing this module,
+// so we only auto-run when the module *is* the entry point.
+if (import.meta.url === `file://${process.argv[1]}`) {
+    const code = await main(process.argv.slice(2));
+    process.exit(code);
+}
+//# sourceMappingURL=cli.js.map

package/packages/server/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,YAAY;AACZ,kEAAkE;AAClE,iJAAiJ;AACjJ,iEAAiE;AACjE,gEAAgE;AAChE,uEAAuE;AACvE,iFAAiF;AACjF,oBAAoB;AACpB,6BAA6B;AAC7B,EAAE;AACF,0DAA0D;AAC1D,2DAA2D;AAC3D,0DAA0D;AAC1D,8DAA8D;AAC9D,sCAAsC;AAEtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,OAAO,EACP,UAAU,EACV,SAAS,EACT,OAAO,GACR,MAAM,oBAAoB,CAAC;AAE5B,kEAAkE;AAClE,kEAAkE;AAClE,+DAA+D;AAC/D,+DAA+D;AAC/D,8DAA8D;AAC9D,OAAO,EAAE,CAAC;AASV,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC;IACtC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,aAAa;IACpB,OAAO;QACL,QAAQ;QACR,iEAAiE;QACjE,0HAA0H;QAC1H,gEAAgE;QAChE,+DAA+D;QAC/D,sEAAsE;QACtE,gFAAgF;QAChF,mBAAmB;QACnB,4BAA4B;QAC5B,EAAE;QACF,uCAAuC,cAAc,EAAE,EAAE;KAC1D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,4DAA4D;IAC5D,2DAA2D;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAEnD,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE/B,sCAAsC;IACtC,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;gBAC7B,OAAO,CAAC,CAAC;YACX,CAAC;YACD,4DAA4D;YAC5D,4DAA4D;YAC5D,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC;QAEX,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;gBACf,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACnD,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;gBAC/C,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;aAC/B,CAAC,CAAC;QAEL,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC;oBAC/B,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC;oBACnD,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;oBACjC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;oBACjC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;oBACnC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;oBAC7C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;oBAChC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;oBACnC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;iBACpC,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK;wBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClD,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CACX,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpE,CAAC;gBACF,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAED,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC;gBACd,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;gBAClC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;aAC/B,CAAC,CAAC;QACL,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC;gBAChB,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;gBAClC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;aAC/B,CAAC,CAAC;QACL,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YACtC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACxC,MAAM,MAAM,GACV,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,MAAM;gBAChE,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;YAChB,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAC3D,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3D,MAAM;aACP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,MAAM,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACnE,0DAA0D;YAC1D,sDAAsD;YACtD,wDAAwD;YACxD,wDAAwD;YACxD,qDAAqD;YACrD,qDAAqD;YACrD,wDAAwD;YACxD,oBAAoB;YACpB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,IAAI,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;oBAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACjC,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,MAAM,EAAE,IAAI,GAAG;oBAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtC,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAClC,QAAQ;gBACR,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC;aACjC,CAAC,CAAC,CAAC;YACJ,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACf,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACxB,MAAM,EAAE,CAAC;wBACT,GAAG,EAAE,GAAG,OAAO,YAAY,CAAC,CAAC,QAAQ,UAAU,CAAC,GAAG;qBACpD,CAAC,CAAC;iBACJ,CAAC,CAAC,EACH,IAAI,EACJ,CAAC,CACF,CACF,CAAC;gBACF,OAAO,CAAC,CAAC;YACX,CAAC;YACD,uDAAuD;YACvD,sDAAsD;YACtD,4BAA4B;YAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,cAAc,CAAC,CAAC;oBACzC,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACxB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,YAAY,CAAC,CAAC,QAAQ,UAAU,CAAC,GAAG,CACjE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,KAAK,CAAC,gBAAgB,GAAG,aAAa,EAAE,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,QAAQ,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,KAAK,CAAC,gBAAgB,GAAG,aAAa,EAAE,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC;YACX,CAAC;YACD,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;YACzE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;YAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CAAC,kCAAkC,GAAG,aAAa,EAAE,CAAC,CAAC;gBACpE,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE;gBAClB,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK;gBAC1C,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,MAAM,QAAQ;gBAC9D,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;aAC5C,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IACE,GAAG,YAAY,wBAAwB;YACvC,GAAG,YAAY,mBAAmB,EAClC,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,SAAS,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,cAAc,EAAE,EAChB,SAAS,EACT,QAAQ,EACR,WAAW,EACX,OAAO,CACR,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,EAAE;aACN,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC;IAC/C,OAAO,oBAAoB,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,iEAAiE;AACjE,gEAAgE;AAChE,4DAA4D;AAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/packages/server/dist/core/agent-seeds.d.ts

@@ -0,0 +1,25 @@
+import type { AgentSeedContribution } from "@tianshu/plugin-sdk";
+export interface SeedAgentDirsArgs {
+    tenantId: string;
+    /** Plugin id, used in log lines + collision warnings. */
+    pluginId: string;
+    /** Plugin's manifest dir. Seed paths in the contribution are
+     *  resolved against this. */
+    pluginDir: string;
+    /** Manifest-declared seeds. Empty / missing → no-op. */
+    seeds: readonly AgentSeedContribution[];
+    /** Override for tests. */
+    home?: string;
+    /** Optional sink — defaults to console.warn. */
+    onWarn?: (msg: string) => void;
+}
+export interface SeedAgentDirsResult {
+    /** Slugs that just got copied in. */
+    inserted: string[];
+    /** Slugs already on disk (untouched). */
+    preserved: string[];
+    /** Slugs whose source path didn't exist or wasn't a directory. */
+    invalid: string[];
+}
+export declare function seedAgentDirs(args: SeedAgentDirsArgs): SeedAgentDirsResult;
+//# sourceMappingURL=agent-seeds.d.ts.map

package/packages/server/dist/core/agent-seeds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-seeds.d.ts","sourceRoot":"","sources":["../../src/core/agent-seeds.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAGjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB;iCAC6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACxC,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,qCAAqC;IACrC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,yCAAyC;IACzC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,CA0D1E"}

package/packages/server/dist/core/agent-seeds.js

@@ -0,0 +1,69 @@
+// Plugin-contributed worker-agent seed copy.
+//
+// The mechanism mirrors `ensureTenantConfigDefaults` (templates):
+// once per (tenant, plugin, seed.id) we copy the bundle into
+// `<tenant>/_tenant/config/workers/<seed.id>/` if the slot is
+// empty. Existing slots are never touched, so:
+//
+//   * a user edit (e.g. swapping the model in agent.json) is
+//     preserved across plugin upgrades
+//   * a deleted seed stays deleted — re-seeding only happens when
+//     the slot is missing, which means the user explicitly nuked it
+//     OR the tenant is brand-new
+//
+// Cross-plugin slug collisions are resolved last-writer-wins with
+// a console warning. We don't try to be clever about it; plugin
+// authors should pick globally distinctive ids.
+//
+// This runs synchronously after a plugin successfully `activate()`s.
+// It's filesystem-only (no DB), idempotent, and cheap (one stat
+// per seed in the common case).
+import fs from "node:fs";
+import path from "node:path";
+import { getTenantConfigDir } from "./paths.js";
+export function seedAgentDirs(args) {
+    const { tenantId, pluginId, pluginDir, seeds, home, onWarn } = args;
+    const inserted = [];
+    const preserved = [];
+    const invalid = [];
+    const warn = onWarn ?? ((msg) => console.warn(msg));
+    if (!seeds || seeds.length === 0) {
+        return { inserted, preserved, invalid };
+    }
+    const workersRoot = path.join(getTenantConfigDir(tenantId, home), "workers");
+    fs.mkdirSync(workersRoot, { recursive: true });
+    for (const seed of seeds) {
+        if (!seed.id || !seed.path) {
+            warn(`[agent-seeds:${pluginId}] skipping seed with missing id/path: ${JSON.stringify(seed)}`);
+            continue;
+        }
+        if (!/^[a-z0-9][a-z0-9-]{0,62}$/i.test(seed.id)) {
+            warn(`[agent-seeds:${pluginId}] seed id "${seed.id}" rejected (kebab-case [a-z0-9][a-z0-9-]*)`);
+            continue;
+        }
+        const srcDir = path.resolve(pluginDir, seed.path);
+        if (!fs.existsSync(srcDir) || !fs.statSync(srcDir).isDirectory()) {
+            warn(`[agent-seeds:${pluginId}] seed "${seed.id}" path not a directory: ${srcDir}`);
+            invalid.push(seed.id);
+            continue;
+        }
+        const dstDir = path.join(workersRoot, seed.id);
+        if (fs.existsSync(dstDir)) {
+            // Existing slot wins. Cross-plugin collision: log it but
+            // keep going \u2014 the first plugin to seed this slug owns it
+            // until the user removes the directory.
+            preserved.push(seed.id);
+            continue;
+        }
+        try {
+            fs.cpSync(srcDir, dstDir, { recursive: true });
+            inserted.push(seed.id);
+        }
+        catch (err) {
+            warn(`[agent-seeds:${pluginId}] failed to copy seed "${seed.id}": ${err instanceof Error ? err.message : String(err)}`);
+            invalid.push(seed.id);
+        }
+    }
+    return { inserted, preserved, invalid };
+}
+//# sourceMappingURL=agent-seeds.js.map

package/packages/server/dist/core/agent-seeds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-seeds.js","sourceRoot":"","sources":["../../src/core/agent-seeds.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,kEAAkE;AAClE,6DAA6D;AAC7D,8DAA8D;AAC9D,+CAA+C;AAC/C,EAAE;AACF,6DAA6D;AAC7D,uCAAuC;AACvC,kEAAkE;AAClE,oEAAoE;AACpE,iCAAiC;AACjC,EAAE;AACF,kEAAkE;AAClE,gEAAgE;AAChE,gDAAgD;AAChD,EAAE;AACF,qEAAqE;AACrE,gEAAgE;AAChE,gCAAgC;AAEhC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA0BhD,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACpE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAEpD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAC3B,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAClC,SAAS,CACV,CAAC;IACF,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CACF,gBAAgB,QAAQ,yCAAyC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAChD,IAAI,CACF,gBAAgB,QAAQ,cAAc,IAAI,CAAC,EAAE,4CAA4C,CAC1F,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACjE,IAAI,CACF,gBAAgB,QAAQ,WAAW,IAAI,CAAC,EAAE,2BAA2B,MAAM,EAAE,CAC9E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,yDAAyD;YACzD,+DAA+D;YAC/D,wCAAwC;YACxC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CACF,gBAAgB,QAAQ,0BAA0B,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClH,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC"}

package/packages/server/dist/core/config.d.ts

@@ -0,0 +1,172 @@
+/** Plugin enable/disable map (per ADR-0003 §4). Keys are plugin ids. */
+export type PluginsConfig = Record<string, {
+    enabled?: boolean;
+    /** Opaque per-plugin config; the host doesn't interpret it. */
+    config?: Record<string, unknown>;
+}>;
+/** Fields that BOTH global and tenant configs can set. Tenant wins on conflict. */
+export interface OverridableConfig {
+    defaultModel?: string;
+    /** Per-plugin enable/disable. Listed-but-disabled and not-listed are
+     *  distinct: not listed = invisible everywhere. See ADR-0003 §4. */
+    plugins?: PluginsConfig;
+    /**
+     * Provider catalog. Mirrors the closed-source `tianshu.models.json`
+     * format so existing config files transplant cleanly. The shape is
+     * `{ providers: { <providerId>: ProviderEntry } }`.
+     *
+     * `apiKey` strings support `${VAR}` and `${VAR:-fallback}` placeholders
+     * that we resolve at request time (not at config-load time, so secrets
+     * never sit in memory longer than necessary).
+     */
+    models?: ModelsCatalog;
+    /**
+     * @deprecated 2026-06-21 — never wired up in the open-source
+     *   repo. The three sub-keys (count / pollMs / model) had no
+     *   runtime consumers: workboard sizes its pool from the
+     *   agent-seeds bundle (one worker per enabled agent.json),
+     *   there is no polling (task ready queue is SQLite-driven),
+     *   and model selection is per-worker via agent.json's
+     *   `modelId` (falling back to the resolved tenant
+     *   defaultModel). Field kept in the type for backwards
+     *   compat (so config files that already set it don't fail to
+     *   parse), but doctor flags it as ignored and cli-agent
+     *   refuses to write it. If/when an actual cross-cutting
+     *   worker config is needed, wire the consumers first and
+     *   then resurrect with a real shape.
+     */
+    worker?: WorkerSettings;
+    oauth?: OAuthProviderConfig[];
+    branding?: BrandingConfig;
+    apiKeys?: Record<string, string>;
+    /**
+     * User-managed MCP servers (additional to whatever active plugins
+     * contribute). Each entry becomes a `McpToolset` instance owned
+     * by the host's `McpManager`, so reflected tools land in the
+     * agent's tool list alongside plugin-contributed toolsets.
+     *
+     * Stored on the tenant config so per-tenant servers don't leak
+     * across tenants and so `tianshu/.config.json` survives a server
+     * restart. The host writes this surface through the `/api/mcp`
+     * routes; users can also hand-edit — we re-read on every config
+     * cycle.
+     */
+    mcp?: McpUserConfig;
+}
+export interface McpUserConfig {
+    servers?: McpServerEntry[];
+}
+export interface McpServerEntry {
+    /** Local id used in URLs + logs. Lowercase letters, digits, dashes. */
+    id: string;
+    /** Display name in the admin UI. Defaults to `id`. */
+    displayName?: string;
+    /** Tool name prefix. Defaults to `<id>_`. Pass `""` to disable. */
+    prefix?: string;
+    /** Streamable HTTP MCP endpoint URL (must include `/mcp` path). */
+    url: string;
+    /** Optional Host header override (when fronting an upstream that
+     *  validates Host — e.g. Playwright MCP behind a port forward). */
+    upstreamHost?: string;
+    /** Whether the server is currently active. Stored on the entry
+     *  rather than as a separate map so `mcp.servers[]` is a single
+     *  source of truth. Default true. */
+    enabled?: boolean;
+}
+/** Fields that ONLY the global config controls. Tenant config attempting these is rejected. */
+export interface GlobalOnlyConfig {
+    server?: {
+        port?: number;
+        corsOrigin?: string;
+        publicUrl?: string;
+    };
+    logging?: {
+        level?: "debug" | "info" | "warn" | "error";
+        /**
+         * When true, every assembled system prompt (main chat agent +
+         * worker agents) is dumped to
+         * `<tenantHomeDir>/logs/system-prompt-<role>-<userId>.txt`,
+         * overwriting on each run. Off by default; debug-only switch
+         * for inspecting plugin fragment / SOUL / skill stitching
+         * without booting tracing infrastructure.
+         *
+         * Global-only because it writes to disk and the tenant
+         * shouldn't be able to silently turn host-side logging on.
+         */
+        dumpSystemPrompt?: boolean;
+    };
+    /** Auto-create a `default` tenant if no tenants exist on first boot. */
+    autoCreateDefault?: boolean;
+    /** Override builtinConfig directory (handy for tests / Docker). */
+    builtinConfigDir?: string;
+}
+export interface ModelsCatalog {
+    providers: Record<string, ProviderEntry>;
+}
+export interface ProviderEntry {
+    baseUrl?: string;
+    api?: "anthropic-messages" | "openai-completions" | "google-generative-ai" | string;
+    apiKey?: string;
+    group?: string;
+    models?: ModelEntry[];
+}
+export interface ModelEntry {
+    id: string;
+    name?: string;
+    reasoning?: boolean;
+    contextWindow?: number;
+    maxTokens?: number;
+    supportsImages?: boolean;
+    /** Per-image byte cap before we hand it to the provider. Defaults
+     *  by provider when omitted (see resolveImageMaxBytes). Override
+     *  for self-hosted gateways with custom limits. */
+    imageMaxBytes?: number;
+    mode?: "chat" | "image-gen" | string;
+    /** Free-form provider-specific compat flags. */
+    compat?: Record<string, unknown>;
+}
+export interface WorkerSettings {
+    count?: number;
+    pollMs?: number;
+    model?: string;
+}
+export interface OAuthProviderConfig {
+    id: string;
+    type: "github" | "google" | "oidc" | "lark";
+    clientId?: string;
+    clientSecret?: string;
+    issuer?: string;
+    scopes?: string[];
+}
+export interface BrandingConfig {
+    name?: string;
+    emoji?: string;
+}
+export type GlobalConfig = OverridableConfig & GlobalOnlyConfig;
+export type TenantConfig = OverridableConfig;
+/** Result of merging global ⊕ tenant. */
+export interface ResolvedConfig extends OverridableConfig, GlobalOnlyConfig {
+}
+export declare const DEFAULTS: Required<Pick<GlobalOnlyConfig, "autoCreateDefault">> & Pick<GlobalOnlyConfig, "server" | "logging">;
+export declare class TenantConfigForbiddenFieldError extends Error {
+    readonly tenantId: string;
+    readonly field: string;
+    readonly code: "TENANT_CONFIG_FORBIDDEN_FIELD";
+    constructor(tenantId: string, field: string);
+}
+export declare function loadGlobalConfig(home?: string): GlobalConfig;
+export declare function loadTenantConfig(tenantId: string, home?: string): TenantConfig;
+/** Compute the effective config for a tenant. */
+export declare function resolveTenantConfig(tenantId: string, home?: string): ResolvedConfig;
+/**
+ * Merge global and tenant configs. Tenant wins on overridable fields.
+ *
+ * - Scalars and arrays: tenant replaces global wholesale.
+ * - Objects (worker, branding, apiKeys): shallow-merge so tenant can override
+ *   single keys without restating the whole object.
+ */
+export declare function mergeConfigs(global: GlobalConfig, tenant: TenantConfig): ResolvedConfig;
+/** Atomic write. Writes to a temp file first, then rename. */
+export declare function writeTenantConfig(tenantId: string, cfg: TenantConfig, home?: string): void;
+export declare function writeGlobalConfig(cfg: GlobalConfig, home?: string): void;
+//# sourceMappingURL=config.d.ts.map

package/packages/server/dist/core/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAqBA,wEAAwE;AACxE,MAAM,MAAM,aAAa,GAAG,MAAM,CAChC,MAAM,EACN;IACE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CACF,CAAC;AAEF,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;wEACoE;IACpE,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;;;;;;OAWG;IACH,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ;uEACmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;yCAEqC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;QAC5C;;;;;;;;;;WAUG;QACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,GAAG,sBAAsB,GAAG,MAAM,CAAC;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;uDAEmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACrC,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAE7C,yCAAyC;AACzC,MAAM,WAAW,cAAe,SAAQ,iBAAiB,EAAE,gBAAgB;CAAG;AAI9E,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,GAC1E,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,CAI5C,CAAC;AAgBF,qBAAa,+BAAgC,SAAQ,KAAK;aAE5B,QAAQ,EAAE,MAAM;aAAkB,KAAK,EAAE,MAAM;IAD3E,QAAQ,CAAC,IAAI,EAAG,+BAA+B,CAAU;gBAC7B,QAAQ,EAAE,MAAM,EAAkB,KAAK,EAAE,MAAM;CAM5E;AA4BD,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAyB,GAAG,YAAY,CAG9E;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,MAAyB,GAAG,YAAY,CAIhG;AAED,iDAAiD;AACjD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,MAAyB,GAAG,cAAc,CAIrG;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,GAAG,cAAc,CAoDvF;AAED,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,YAAY,EACjB,IAAI,GAAE,MAAyB,GAC9B,IAAI,CAQN;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,GAAE,MAAyB,GAAG,IAAI,CAM1F"}