@tianshu-ai/tianshu 0.3.0

package/packages/server/dist/setup/checks/plugins.js

@@ -0,0 +1,194 @@
+// Builtin-plugin manifest sanity check + per-tenant enablement.
+//
+// Two questions in one report:
+//   1. Are the plugin manifests on disk shaped correctly?
+//      (A baseline before the registry even tries to load them.)
+//   2. For each tenant, which of those plugins are *enabled*
+//      vs sitting installed-but-off?
+//
+// Why the second part exists: a user looking at "tianshu doctor"
+// sees `✓ files / ✓ microsandbox / ✓ web-search / ✓ workboard`
+// and reasonably concludes everything is on. Then they open the
+// chat shell's Plugin Manager UI and find three of them disabled.
+// The doctor's "✓" was about manifest shape (a developer concern)
+// not user intent (the only thing the user cares about).
+//
+// We don't boot the registry from inside doctor — that would
+// couple half the server to a read-only check. We just read each
+// tenant's config.json and merge with the global config to figure
+// out per-tenant enablement, exactly like resolveTenantConfig.
+import fs from "node:fs";
+import path from "node:path";
+import { getBuiltinConfigDir } from "../../core/plugins/discovery.js";
+import { loadGlobalConfig, loadTenantConfig, } from "../../core/config.js";
+import { getTianshuHome } from "../../core/paths.js";
+export function checkPlugins(opts = {}) {
+    const lines = [];
+    // --- Stage 1: discover manifests on disk. --------------------
+    let dir;
+    try {
+        dir = opts.builtinConfigDir ?? getBuiltinConfigDir();
+    }
+    catch (err) {
+        lines.push({
+            severity: "warning",
+            text: "builtinConfig dir not found",
+            detail: err instanceof Error ? err.message : String(err),
+        });
+        return { title: "Builtin plugins", lines };
+    }
+    const pluginsRoot = path.join(dir, "plugins");
+    if (!fs.existsSync(pluginsRoot)) {
+        lines.push({
+            severity: "warning",
+            text: "no builtin plugins shipped",
+            detail: `${pluginsRoot} doesn't exist; \`npm run sync:plugins\` may not have run yet.`,
+        });
+        return { title: "Builtin plugins", lines };
+    }
+    const manifests = [];
+    for (const entry of fs.readdirSync(pluginsRoot, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+            continue;
+        const manifestPath = path.join(pluginsRoot, entry.name, "manifest.json");
+        if (!fs.existsSync(manifestPath)) {
+            lines.push({
+                severity: "warning",
+                text: `${entry.name}: manifest.json missing`,
+                detail: manifestPath,
+            });
+            continue;
+        }
+        try {
+            const m = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+            if (!m.id) {
+                lines.push({
+                    severity: "warning",
+                    text: `${entry.name}: manifest missing \`id\``,
+                    detail: manifestPath,
+                });
+                continue;
+            }
+            manifests.push({
+                pluginId: m.id,
+                name: m.name && m.name !== m.id ? m.name : undefined,
+                manifestPath,
+            });
+        }
+        catch (err) {
+            lines.push({
+                severity: "warning",
+                text: `${entry.name}: manifest unreadable`,
+                detail: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    if (manifests.length === 0) {
+        lines.push({
+            severity: "warning",
+            text: "no valid plugin manifests found",
+            detail: pluginsRoot,
+        });
+        return { title: "Builtin plugins", lines };
+    }
+    // --- Stage 2: per-tenant enablement. -------------------------
+    // We resolve enablement in the same shape resolveTenantConfig
+    // would: tenant overrides global, "not listed" = disabled, only
+    // explicit `enabled: true` counts as on.
+    const home = opts.home ?? getTianshuHome();
+    const globalCfg = safeLoadGlobalConfig(home);
+    const tenantIds = listTenants(home);
+    // tenantIds may be empty (fresh install / pre-wizard). Surface
+    // that explicitly rather than letting the section render blank.
+    if (tenantIds.length === 0) {
+        for (const m of manifests) {
+            lines.push({
+                severity: "ok",
+                text: `${m.pluginId} (installed, no tenants yet)`,
+                detail: m.name,
+            });
+        }
+        return { title: "Builtin plugins", lines };
+    }
+    // Render one line per plugin summarising its enablement across
+    // tenants. Most installs have one tenant ("default") so this
+    // collapses to "enabled" / "disabled" — clean and honest.
+    for (const m of manifests) {
+        const enabledIn = [];
+        const disabledIn = [];
+        for (const t of tenantIds) {
+            const tenantCfg = safeLoadTenantConfig(t, home);
+            const merged = mergePlugins(globalCfg.plugins, tenantCfg.plugins);
+            const entry = merged[m.pluginId];
+            if (entry?.enabled === true)
+                enabledIn.push(t);
+            else
+                disabledIn.push(t);
+        }
+        if (enabledIn.length === tenantIds.length) {
+            lines.push({
+                severity: "ok",
+                text: `${m.pluginId} (enabled in all tenants)`,
+                detail: m.name,
+            });
+        }
+        else if (enabledIn.length === 0) {
+            // Not a "warning" — disabled is a valid choice. We mark
+            // it ok-but-info so it doesn't pollute the doctor tally.
+            lines.push({
+                severity: "ok",
+                text: `${m.pluginId} (installed, disabled in all tenants)`,
+                detail: m.name ??
+                    "Enable via Plugin Manager UI in the chat shell, or `tianshu` cli-agent's plugin_enable tool.",
+            });
+        }
+        else {
+            lines.push({
+                severity: "ok",
+                text: `${m.pluginId} (enabled: ${enabledIn.join(", ")} | disabled: ${disabledIn.join(", ")})`,
+                detail: m.name,
+            });
+        }
+    }
+    return { title: "Builtin plugins", lines };
+}
+function listTenants(home) {
+    const tenantsDir = path.join(home, "tenants");
+    if (!fs.existsSync(tenantsDir))
+        return [];
+    try {
+        return fs
+            .readdirSync(tenantsDir, { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            // soft-deleted tenants (renamed to <id>.deleted.<ts>) shouldn't
+            // show up in the report — they're trivially "off everywhere".
+            .filter((d) => !d.name.includes(".deleted."))
+            .map((d) => d.name);
+    }
+    catch {
+        return [];
+    }
+}
+function safeLoadGlobalConfig(home) {
+    try {
+        return loadGlobalConfig(home);
+    }
+    catch {
+        return {};
+    }
+}
+function safeLoadTenantConfig(tenantId, home) {
+    try {
+        return loadTenantConfig(tenantId, home);
+    }
+    catch {
+        // A malformed tenant config shouldn't take the whole doctor
+        // down. Return empty; the merge will treat the plugin as
+        // unlisted (= disabled).
+        return {};
+    }
+}
+function mergePlugins(globalPlugins, tenantPlugins) {
+    return { ...(globalPlugins ?? {}), ...(tenantPlugins ?? {}) };
+}
+//# sourceMappingURL=plugins.js.map

package/packages/server/dist/setup/checks/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../../src/setup/checks/plugins.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,+BAA+B;AAC/B,0DAA0D;AAC1D,iEAAiE;AACjE,6DAA6D;AAC7D,qCAAqC;AACrC,EAAE;AACF,iEAAiE;AACjE,+DAA+D;AAC/D,gEAAgE;AAChE,kEAAkE;AAClE,kEAAkE;AAClE,yDAAyD;AACzD,EAAE;AACF,6DAA6D;AAC7D,iEAAiE;AACjE,kEAAkE;AAClE,+DAA+D;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAerD,MAAM,UAAU,YAAY,CAAC,OAAyB,EAAE;IACtD,MAAM,KAAK,GAAwB,EAAE,CAAC;IAEtC,gEAAgE;IAChE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,gBAAgB,IAAI,mBAAmB,EAAE,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,6BAA6B;YACnC,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,4BAA4B;YAClC,MAAM,EAAE,GAAG,WAAW,gEAAgE;SACvF,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,yBAAyB;gBAC5C,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAGzD,CAAC;YACF,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,2BAA2B;oBAC9C,MAAM,EAAE,YAAY;iBACrB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,CAAC,CAAC,EAAE;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACpD,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,uBAAuB;gBAC1C,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,iCAAiC;YACvC,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,gEAAgE;IAChE,8DAA8D;IAC9D,gEAAgE;IAChE,yCAAyC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAEpC,+DAA+D;IAC/D,gEAAgE;IAChE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,8BAA8B;gBACjD,MAAM,EAAE,CAAC,CAAC,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,+DAA+D;IAC/D,6DAA6D;IAC7D,0DAA0D;IAC1D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,KAAK,EAAE,OAAO,KAAK,IAAI;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBAC1C,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,2BAA2B;gBAC9C,MAAM,EAAE,CAAC,CAAC,IAAI;aACf,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,wDAAwD;YACxD,yDAAyD;YACzD,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,uCAAuC;gBAC1D,MAAM,EACJ,CAAC,CAAC,IAAI;oBACN,8FAA8F;aACjG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC7F,MAAM,EAAE,CAAC,CAAC,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,EAAE;aACN,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAChD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/B,gEAAgE;YAChE,8DAA8D;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;aAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,IAAY;IAC1D,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;QAC5D,yDAAyD;QACzD,yBAAyB;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,aAAwC,EACxC,aAAwC;IAExC,OAAO,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/packages/server/dist/setup/checks/providers.d.ts

@@ -0,0 +1,12 @@
+import { type GlobalConfig } from "../../core/config.js";
+import { CheckGroup } from "../render.js";
+export interface ProvidersCheckOpts {
+    home?: string;
+    /** When true, hit each provider's models endpoint. */
+    probe?: boolean;
+    probeTimeoutMs?: number;
+    /** Inject pre-loaded config (test seam). */
+    config?: GlobalConfig;
+}
+export declare function checkProviders(opts?: ProvidersCheckOpts): Promise<CheckGroup>;
+//# sourceMappingURL=providers.d.ts.map

package/packages/server/dist/setup/checks/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../src/setup/checks/providers.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAmED,wBAAsB,cAAc,CAClC,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,UAAU,CAAC,CA2OrB"}

package/packages/server/dist/setup/checks/providers.js

@@ -0,0 +1,368 @@
+// LLM provider check: at least one provider configured, each
+// provider's apiKey resolves to a non-empty value, defaultModel
+// points at something real.
+//
+// Optional reachability probe (`probe: true`) hits each provider's
+// /v1/models or equivalent with a short timeout. Off by default
+// because the startup hook can't afford 5s per provider.
+import { loadGlobalConfig, } from "../../core/config.js";
+import { loadKnownModels } from "./known-models.js";
+const PLACEHOLDER_PATTERN = /^\$\{([A-Z_][A-Z0-9_]*)(?::-(.*))?\}$/;
+/**
+ * The `api` values pi-ai's register-builtins.ts knows. Anything
+ * outside this set throws "No API provider registered" at first
+ * use. Mirrored manually rather than imported because pi-ai
+ * doesn't export the list — if pi adds a new api, refresh this
+ * set + the suggestion map below.
+ */
+const KNOWN_API_TYPES = new Set([
+    "anthropic-messages",
+    "openai-completions",
+    "openai-responses",
+    "azure-openai-responses",
+    "openai-codex-responses",
+    "mistral-conversations",
+    "google-generative-ai",
+    "google-vertex",
+    "bedrock-converse-stream",
+]);
+/**
+ * Common typos / wrong guesses we've seen real users (and the
+ * cli-agent before it learned the schema) emit, mapped to the
+ * actual value. Returned as a one-line "did you mean" hint.
+ */
+function suggestApiType(bad) {
+    const map = {
+        "openai-chat": "openai-completions",
+        "chat-completions": "openai-completions",
+        "openai": "openai-completions",
+        "openai-chat-completions": "openai-completions",
+        "anthropic": "anthropic-messages",
+        "claude": "anthropic-messages",
+        "messages": "anthropic-messages",
+        "google": "google-generative-ai",
+        "gemini": "google-generative-ai",
+        "bedrock": "bedrock-converse-stream",
+    };
+    return map[bad.toLowerCase()] ?? null;
+}
+/** Mirrors core/llm.ts's `${VAR}` / `${VAR:-fallback}` resolution
+ *  but tells us *what* it resolved (env var name, fallback) so we
+ *  can produce useful diagnostics. */
+function resolveKey(raw) {
+    if (!raw)
+        return { literal: null, envVar: null, fallback: null };
+    const m = PLACEHOLDER_PATTERN.exec(raw.trim());
+    if (!m)
+        return { literal: raw, envVar: null, fallback: null };
+    const [, name, fallback] = m;
+    const fromEnv = process.env[name];
+    const literal = fromEnv && fromEnv.length > 0 ? fromEnv : (fallback ?? null);
+    return {
+        literal: literal && literal.length > 0 ? literal : null,
+        envVar: name ?? null,
+        fallback: fallback ?? null,
+    };
+}
+export async function checkProviders(opts = {}) {
+    const lines = [];
+    let config;
+    try {
+        config = opts.config ?? loadGlobalConfig(opts.home);
+    }
+    catch (err) {
+        return {
+            title: "LLM providers",
+            lines: [
+                {
+                    severity: "blocker",
+                    text: "config.json failed to load",
+                    detail: err instanceof Error ? err.message : String(err),
+                },
+            ],
+        };
+    }
+    const providers = config.models?.providers ?? {};
+    const ids = Object.keys(providers);
+    if (ids.length === 0) {
+        lines.push({
+            severity: "blocker",
+            text: "no providers configured",
+            detail: "Add at least one entry under `models.providers` in config.json (or run `tianshu setup --wizard`).",
+        });
+        return { title: "LLM providers", lines };
+    }
+    for (const id of ids) {
+        const entry = providers[id];
+        // The `api` field MUST be one of the values pi-ai's
+        // register-builtins.ts hard-codes. A typo here (most often
+        // `openai-chat` from agent-generated configs, but also seen:
+        // `chat-completions`, `openai`, bare `gpt`) makes pi throw
+        // "No API provider registered for api: <bad>" at first
+        // chat send. The error surfaces via stream_error now, but
+        // doctor should catch it pre-flight so the user / setup
+        // agent doesn't have to discover it the painful way.
+        if (!entry.api) {
+            lines.push({
+                severity: "warning",
+                text: `${id}: \`api\` field missing`,
+                detail: `Add "api": "openai-completions" (or the right one for this provider) under \`models.providers.${id}\` in config.json.`,
+            });
+        }
+        else if (!KNOWN_API_TYPES.has(entry.api)) {
+            const suggestion = suggestApiType(entry.api);
+            lines.push({
+                severity: "warning",
+                text: `${id}: unknown \`api\` value "${entry.api}"`,
+                detail: (suggestion ? `Did you mean "${suggestion}"? ` : "") +
+                    `pi-ai accepts: ${[...KNOWN_API_TYPES].sort().join(", ")}. ` +
+                    `Edit \`models.providers.${id}.api\` in config.json.`,
+            });
+        }
+        const resolved = resolveKey(entry.apiKey);
+        if (!resolved.literal) {
+            lines.push({
+                severity: "blocker",
+                text: `${id}: API key not set`,
+                detail: resolved.envVar
+                    ? `apiKey references \${${resolved.envVar}} but that env var is empty. Set it in .env or your shell.`
+                    : `apiKey field is missing on this provider.`,
+            });
+            continue;
+        }
+        const modelCount = entry.models?.length ?? 0;
+        const baseDetail = resolved.envVar
+            ? `${modelCount} model(s); key from \${${resolved.envVar}}`
+            : `${modelCount} model(s)`;
+        // Per-model contextWindow / maxTokens sanity. We don't try
+        // to maintain a "known correct" table here — provider docs
+        // change weekly and a stale curated list would mislead users
+        // who know better. Three checks instead, all internal:
+        //
+        //   1. logically-impossible: maxTokens > contextWindow.
+        //      Output can't be bigger than the whole window; this is
+        //      always a copy-paste error.
+        //   2. missing fields: server falls back to 128_000 / 4_096
+        //      (see core/llm.ts buildModelInfoFromEntry). Caught
+        //      this 2026-06-21 on dashscope/qwen3-max-preview which
+        //      had maxTokens=8192 in catalog; pi-ai would have
+        //      capped at that even though dashscope itself allows
+        //      32768. Tell the user the field is missing so they
+        //      can fill in the real upper bound from provider docs.
+        //   3. suspiciously small: maxTokens < 4096. Modern models
+        //      are all far above this; if you wrote 1024 / 2048 /
+        //      4096 it's almost certainly stale and you're leaving
+        //      capability on the floor. Soft hint, not a block.
+        //
+        // Each line scoped under the provider so the cli-agent's
+        // doctor JSON keeps provider → model nesting via section
+        // adjacency.
+        const known = loadKnownModels();
+        for (const m of entry.models ?? []) {
+            const fullId = `${id}/${m.id}`;
+            // image-gen models have a fundamentally different
+            // ctx/max semantics: ctx is text-prompt context (often
+            // small, e.g. 32k), and `maxTokens` is the per-image
+            // generation budget (counts internal image tokens, can
+            // legitimately exceed ctx). Skip the consistency check
+            // for these; doctor still surfaces the model in the
+            // listing but doesn't enforce ctx>=max. Caught when our
+            // own startup-time invariant rejected
+            // google/gemini-3-pro-image-preview which has
+            // ctx=32768, max=65536 — documented values, not a bug.
+            if (m.mode === "image-gen") {
+                continue;
+            }
+            const ctx = m.contextWindow;
+            const mx = m.maxTokens;
+            const ref = known.get(m.id);
+            if (typeof ctx === "number" && typeof mx === "number" && mx > ctx) {
+                lines.push({
+                    severity: "blocker",
+                    text: `  ${fullId}: maxTokens (${mx}) > contextWindow (${ctx})`,
+                    detail: "maxTokens is the *output* cap; contextWindow is the entire window (input + output). Output can't exceed the window. Check the provider's docs for both values — this is almost always a swap or stale copy.",
+                });
+            }
+            else {
+                if (typeof ctx !== "number") {
+                    lines.push({
+                        severity: "warning",
+                        text: `  ${fullId}: contextWindow not set`,
+                        detail: "Server falls back to 128_000 tokens. Most current models support 200k–1M+; check the provider's docs and set the real value to avoid silent truncation on long inputs." +
+                            (ref ? ` docs/known-models.md records ${ref.contextWindow} for this model id (verified ${ref.lastVerified}).` : ""),
+                    });
+                }
+                else if (ref && ctx < ref.contextWindow) {
+                    // Soft suggestion: catalog set a smaller window than
+                    // the table records. We don't push above the table
+                    // (user might know something we don't); we only suggest
+                    // bumping up.
+                    lines.push({
+                        severity: "warning",
+                        text: `  ${fullId}: contextWindow=${ctx} below known ceiling`,
+                        detail: `docs/known-models.md records ${ref.contextWindow} for ${m.id} (verified ${ref.lastVerified}; source ${ref.source}). Bump if you want full window.`,
+                    });
+                }
+                if (typeof mx !== "number") {
+                    lines.push({
+                        severity: "warning",
+                        text: `  ${fullId}: maxTokens not set`,
+                        detail: "Server falls back to 4_096 output tokens — modern models support far more (8k–64k+ depending on the model). Check the provider's docs and set the real upper bound so long responses don't get truncated." +
+                            (ref ? ` docs/known-models.md records ${ref.maxTokens} for this model id (verified ${ref.lastVerified}).` : ""),
+                    });
+                }
+                else if (mx < 4096) {
+                    lines.push({
+                        severity: "warning",
+                        text: `  ${fullId}: maxTokens=${mx} looks low`,
+                        detail: "Most modern models support ≥8192 output tokens (many 32k+). If this isn't a deliberate per-model cap, check the provider's docs and bump it." +
+                            (ref ? ` docs/known-models.md records ${ref.maxTokens} (verified ${ref.lastVerified}).` : ""),
+                    });
+                }
+                else if (ref && mx < ref.maxTokens) {
+                    lines.push({
+                        severity: "warning",
+                        text: `  ${fullId}: maxTokens=${mx} below known ceiling`,
+                        detail: `docs/known-models.md records ${ref.maxTokens} for ${m.id} (verified ${ref.lastVerified}; source ${ref.source}). Bump if you want full output capacity.`,
+                    });
+                }
+            }
+        }
+        if (opts.probe) {
+            const probeRes = await probeProvider(id, entry, opts.probeTimeoutMs ?? 5000);
+            if (probeRes.ok) {
+                lines.push({
+                    severity: "ok",
+                    text: `${id} reachable`,
+                    detail: `${baseDetail}; ${probeRes.latencyMs}ms`,
+                });
+            }
+            else {
+                lines.push({
+                    severity: "warning",
+                    text: `${id}: probe failed`,
+                    detail: `${baseDetail}. ${probeRes.error}`,
+                });
+            }
+        }
+        else {
+            lines.push({
+                severity: "ok",
+                text: `${id} configured`,
+                detail: baseDetail,
+            });
+        }
+    }
+    // defaultModel should resolve to one of the configured providers.
+    const def = config.defaultModel;
+    if (!def) {
+        lines.push({
+            severity: "warning",
+            text: "no defaultModel set",
+            detail: "callers without an explicit modelId will fail. Set `defaultModel` in config.json.",
+        });
+    }
+    else {
+        const slash = def.indexOf("/");
+        const provId = slash > 0 ? def.slice(0, slash) : null;
+        if (provId && providers[provId]) {
+            lines.push({
+                severity: "ok",
+                text: `defaultModel resolves`,
+                detail: def,
+            });
+        }
+        else {
+            lines.push({
+                severity: "blocker",
+                text: `defaultModel references unknown provider`,
+                detail: `\`${def}\` — provider id is "${provId ?? "(missing /)"}"; known: ${ids.join(", ")}`,
+            });
+        }
+    }
+    // Deprecated `worker:` block on global config — same fate as on
+    // tenant configs; flag so users / cli-agent don't think they're
+    // configuring anything real.
+    if (config.worker !== undefined) {
+        const w = config.worker ?? {};
+        const keys = Object.keys(w).join(", ") || "(empty)";
+        lines.push({
+            severity: "warning",
+            text: `deprecated 'worker' field set (keys: ${keys})`,
+            detail: "The `worker.{count,pollMs,model}` field has no runtime effect in the open-source repo. Workboard sizes the pool from agent-seeds (one worker per enabled agent.json) and selects model per-worker via agent.json's modelId, falling back to the resolved defaultModel. Safe to delete from config.json.",
+        });
+    }
+    return { title: "LLM providers", lines };
+}
+async function probeProvider(id, entry, timeoutMs) {
+    const start = Date.now();
+    const url = pickProbeUrl(entry);
+    if (!url) {
+        return {
+            ok: false,
+            latencyMs: 0,
+            error: `no probe URL known for api=${entry.api ?? "(none)"}`,
+        };
+    }
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), timeoutMs);
+    try {
+        const res = await fetch(url, {
+            headers: probeHeaders(entry),
+            signal: ac.signal,
+        });
+        const latencyMs = Date.now() - start;
+        if (!res.ok) {
+            return {
+                ok: false,
+                latencyMs,
+                error: `HTTP ${res.status} from ${url}`,
+            };
+        }
+        return { ok: true, latencyMs };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            latencyMs: Date.now() - start,
+            error: err instanceof Error
+                ? err.name === "AbortError"
+                    ? `timeout after ${timeoutMs}ms`
+                    : err.message
+                : String(err),
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function pickProbeUrl(entry) {
+    const base = entry.baseUrl?.replace(/\/+$/, "");
+    // OpenAI-style providers expose /v1/models. Anthropic /v1/messages
+    // requires a POST so we just probe /v1/models which 404s but
+    // confirms reachability + auth — actually, we use the OpenAI-
+    // compat `/v1/models` against our gateway. Real Anthropic URL is
+    // also fine to skip the probe (network present is enough).
+    if (entry.api === "openai-completions" && base)
+        return `${base}/v1/models`;
+    if (entry.api === "anthropic-messages" && base)
+        return `${base}/v1/models`;
+    if (entry.api === "google-generative-ai" && base)
+        return `${base}/v1/models`;
+    return undefined;
+}
+function probeHeaders(entry) {
+    const apiKey = resolveKey(entry.apiKey).literal;
+    const headers = { Accept: "application/json" };
+    if (!apiKey)
+        return headers;
+    if (entry.api === "anthropic-messages") {
+        headers["x-api-key"] = apiKey;
+        headers["anthropic-version"] = "2023-06-01";
+    }
+    else {
+        headers["Authorization"] = `Bearer ${apiKey}`;
+    }
+    return headers;
+}
+//# sourceMappingURL=providers.js.map

package/packages/server/dist/setup/checks/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../src/setup/checks/providers.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,gEAAgE;AAChE,4BAA4B;AAC5B,EAAE;AACF,mEAAmE;AACnE,gEAAgE;AAChE,yDAAyD;AAEzD,OAAO,EACL,gBAAgB,GAGjB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAWpD,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;IACvB,sBAAsB;IACtB,eAAe;IACf,yBAAyB;CAC1B,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAA2B;QAClC,aAAa,EAAE,oBAAoB;QACnC,kBAAkB,EAAE,oBAAoB;QACxC,QAAQ,EAAE,oBAAoB;QAC9B,yBAAyB,EAAE,oBAAoB;QAC/C,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,oBAAoB;QAC9B,UAAU,EAAE,oBAAoB;QAChC,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,sBAAsB;QAChC,SAAS,EAAE,yBAAyB;KACrC,CAAC;IACF,OAAO,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;AACxC,CAAC;AAQD;;sCAEsC;AACtC,SAAS,UAAU,CAAC,GAAuB;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9D,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;IAC7E,OAAO;QACL,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACvD,MAAM,EAAE,IAAI,IAAI,IAAI;QACpB,QAAQ,EAAE,QAAQ,IAAI,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA2B,EAAE;IAE7B,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,KAAK,EAAE;gBACL;oBACE,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACzD;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,mGAAmG;SAC5G,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAkB,CAAC;QAE7C,oDAAoD;QACpD,2DAA2D;QAC3D,6DAA6D;QAC7D,2DAA2D;QAC3D,uDAAuD;QACvD,0DAA0D;QAC1D,wDAAwD;QACxD,qDAAqD;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,GAAG,EAAE,yBAAyB;gBACpC,MAAM,EAAE,iGAAiG,EAAE,oBAAoB;aAChI,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,GAAG,EAAE,4BAA4B,KAAK,CAAC,GAAG,GAAG;gBACnD,MAAM,EACJ,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,UAAU,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,kBAAkB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAC5D,2BAA2B,EAAE,wBAAwB;aACxD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,GAAG,EAAE,mBAAmB;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACrB,CAAC,CAAC,wBAAwB,QAAQ,CAAC,MAAM,4DAA4D;oBACrG,CAAC,CAAC,2CAA2C;aAChD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM;YAChC,CAAC,CAAC,GAAG,UAAU,0BAA0B,QAAQ,CAAC,MAAM,GAAG;YAC3D,CAAC,CAAC,GAAG,UAAU,WAAW,CAAC;QAE7B,2DAA2D;QAC3D,2DAA2D;QAC3D,6DAA6D;QAC7D,uDAAuD;QACvD,EAAE;QACF,wDAAwD;QACxD,6DAA6D;QAC7D,kCAAkC;QAClC,4DAA4D;QAC5D,yDAAyD;QACzD,4DAA4D;QAC5D,uDAAuD;QACvD,0DAA0D;QAC1D,yDAAyD;QACzD,4DAA4D;QAC5D,2DAA2D;QAC3D,0DAA0D;QAC1D,2DAA2D;QAC3D,wDAAwD;QACxD,EAAE;QACF,yDAAyD;QACzD,yDAAyD;QACzD,aAAa;QACb,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/B,kDAAkD;YAClD,uDAAuD;YACvD,qDAAqD;YACrD,uDAAuD;YACvD,uDAAuD;YACvD,oDAAoD;YACpD,wDAAwD;YACxD,sCAAsC;YACtC,8CAA8C;YAC9C,uDAAuD;YACvD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;YAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC;YACvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;gBAClE,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,KAAK,MAAM,gBAAgB,EAAE,sBAAsB,GAAG,GAAG;oBAC/D,MAAM,EACJ,6MAA6M;iBAChN,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC5B,KAAK,CAAC,IAAI,CAAC;wBACT,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,KAAK,MAAM,yBAAyB;wBAC1C,MAAM,EACJ,wKAAwK;4BACxK,CAAC,GAAG,CAAC,CAAC,CAAC,iCAAiC,GAAG,CAAC,aAAa,gCAAgC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;qBACtH,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;oBAC1C,qDAAqD;oBACrD,mDAAmD;oBACnD,wDAAwD;oBACxD,cAAc;oBACd,KAAK,CAAC,IAAI,CAAC;wBACT,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,KAAK,MAAM,mBAAmB,GAAG,sBAAsB;wBAC7D,MAAM,EAAE,gCAAgC,GAAG,CAAC,aAAa,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,YAAY,YAAY,GAAG,CAAC,MAAM,kCAAkC;qBAC5J,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAC3B,KAAK,CAAC,IAAI,CAAC;wBACT,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,KAAK,MAAM,qBAAqB;wBACtC,MAAM,EACJ,2MAA2M;4BAC3M,CAAC,GAAG,CAAC,CAAC,CAAC,iCAAiC,GAAG,CAAC,SAAS,gCAAgC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;qBAClH,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;oBACrB,KAAK,CAAC,IAAI,CAAC;wBACT,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,KAAK,MAAM,eAAe,EAAE,YAAY;wBAC9C,MAAM,EACJ,8IAA8I;4BAC9I,CAAC,GAAG,CAAC,CAAC,CAAC,iCAAiC,GAAG,CAAC,SAAS,cAAc,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChG,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC;wBACT,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,KAAK,MAAM,eAAe,EAAE,sBAAsB;wBACxD,MAAM,EAAE,gCAAgC,GAAG,CAAC,SAAS,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,YAAY,YAAY,GAAG,CAAC,MAAM,2CAA2C;qBACjK,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;YAC7E,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,GAAG,EAAE,YAAY;oBACvB,MAAM,EAAE,GAAG,UAAU,KAAK,QAAQ,CAAC,SAAS,IAAI;iBACjD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,GAAG,EAAE,gBAAgB;oBAC3B,MAAM,EAAE,GAAG,UAAU,KAAK,QAAQ,CAAC,KAAK,EAAE;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,GAAG,EAAE,aAAa;gBACxB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,mFAAmF;SAC5F,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,IAAI,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,0CAA0C;gBAChD,MAAM,EAAE,KAAK,GAAG,wBAAwB,MAAM,IAAI,aAAa,aAAa,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC7F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,gEAAgE;IAChE,6BAA6B;IAC7B,IAAK,MAA+B,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAI,MAA+C,CAAC,MAAM,IAAI,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,wCAAwC,IAAI,GAAG;YACrD,MAAM,EACJ,ySAAyS;SAC5S,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAQD,KAAK,UAAU,aAAa,CAC1B,EAAU,EACV,KAAoB,EACpB,SAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,CAAC;YACZ,KAAK,EAAE,8BAA8B,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;SAC7D,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;YAC5B,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,SAAS;gBACT,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,SAAS,GAAG,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC7B,KAAK,EACH,GAAG,YAAY,KAAK;gBAClB,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY;oBACzB,CAAC,CAAC,iBAAiB,SAAS,IAAI;oBAChC,CAAC,CAAC,GAAG,CAAC,OAAO;gBACf,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAClB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,mEAAmE;IACnE,6DAA6D;IAC7D,8DAA8D;IAC9D,iEAAiE;IACjE,2DAA2D;IAC3D,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,YAAY,CAAC;IAC3E,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,YAAY,CAAC;IAC3E,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,YAAY,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;IAChD,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACvE,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,EAAE,CAAC;QACvC,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC;QAC9B,OAAO,CAAC,mBAAmB,CAAC,GAAG,YAAY,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/packages/server/dist/setup/checks/runtime.d.ts

@@ -0,0 +1,3 @@
+import { CheckGroup } from "../render.js";
+export declare function checkRuntime(): CheckGroup;
+//# sourceMappingURL=runtime.d.ts.map

package/packages/server/dist/setup/checks/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/setup/checks/runtime.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI1C,wBAAgB,YAAY,IAAI,UAAU,CAuCzC"}

package/packages/server/dist/setup/checks/runtime.js

@@ -0,0 +1,44 @@
+// Runtime environment check: Node version + OS.
+//
+// Cheap, sync, no external IO. Run at startup-hook AND in
+// `tianshu doctor`.
+import os from "node:os";
+const MIN_NODE_MAJOR = 22;
+export function checkRuntime() {
+    const lines = [];
+    // Node version
+    const v = process.versions.node;
+    const major = Number.parseInt(v.split(".")[0] ?? "0", 10);
+    if (major >= MIN_NODE_MAJOR) {
+        lines.push({
+            severity: "ok",
+            text: `Node ${v}`,
+            detail: `(>= ${MIN_NODE_MAJOR})`,
+        });
+    }
+    else {
+        lines.push({
+            severity: "blocker",
+            text: `Node ${v} is too old`,
+            detail: `Tianshu needs Node >= ${MIN_NODE_MAJOR}. Upgrade and re-run.`,
+        });
+    }
+    // Platform — informational, not a blocker. Microsandbox needs
+    // macOS-Apple-Silicon or Linux+KVM, but we surface that under
+    // checks/sandbox.ts (its own quick-boot probe). Here we only
+    // print what we see.
+    const platform = os.platform();
+    const arch = os.arch();
+    const release = os.release();
+    const supported = (platform === "darwin" && arch === "arm64") ||
+        platform === "linux";
+    lines.push({
+        severity: supported ? "ok" : "warning",
+        text: `${platform} ${release} (${arch})`,
+        detail: supported
+            ? undefined
+            : "Sandbox features need macOS Apple Silicon or Linux. Other platforms can run the chat surface but exec/browser tools won't work.",
+    });
+    return { title: "Runtime", lines };
+}
+//# sourceMappingURL=runtime.js.map