@undefineds.co/xpod 0.2.44 → 0.3.0

package/dist/cli/commands/config.js

@@ -1,18 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.configCommand = exports.OAUTH_PROVIDERS = exports.PROVIDER_BASE_URLS = exports.UDFS_NS = void 0;
+exports.configCommand = exports.PROVIDER_BASE_URLS = exports.CREDENTIAL_NS = exports.AI_NS = void 0;
 exports.maskSecret = maskSecret;
 exports.credentialId = credentialId;
 exports.buildProviderSparql = buildProviderSparql;
 exports.buildCredentialSparql = buildCredentialSparql;
 exports.buildResetSparql = buildResetSparql;
+const models_1 = require("@undefineds.co/models");
 const credentials_store_1 = require("../lib/credentials-store");
 const solid_auth_1 = require("../lib/solid-auth");
 /**
- * Config 子命令：配置 SecretaryAI 使用的 AI 服务。
+ * Config 子命令：配置 Pod 中的 AI provider。
  *
  * 写入 Pod 的两个资源，与服务端 PodChatKitStore.getAiConfig() 对齐：
- *   /settings/ai/providers.ttl#{provider}       — Provider (baseUrl, displayName)
+ *   /settings/providers/{provider}.ttl          — Provider + optional Model
  *   /settings/credentials.ttl#cred-{provider}   — Credential (apiKey, service=ai, status=active, provider link)
  *
  * 用法:
@@ -21,7 +22,8 @@ const solid_auth_1 = require("../lib/solid-auth");
  *   xpod config show
  *   xpod config reset
  */
-exports.UDFS_NS = 'https://undefineds.co/ns#';
+exports.AI_NS = models_1.XPOD_AI.NAMESPACE;
+exports.CREDENTIAL_NS = models_1.XPOD_CREDENTIAL.NAMESPACE;
 /** provider name → default baseUrl */
 exports.PROVIDER_BASE_URLS = {
     openai: 'https://api.openai.com/v1',
@@ -33,10 +35,8 @@ exports.PROVIDER_BASE_URLS = {
     mistral: 'https://api.mistral.ai/v1',
     cohere: 'https://api.cohere.ai/v1',
     zhipu: 'https://open.bigmodel.cn/api/paas/v4',
-    codebuddy: 'https://api.codebuddy.ai/v1', // OAuth provider
+    codebuddy: 'https://api.codebuddy.ai/v1',
 };
-/** OAuth providers that require browser login */
-exports.OAUTH_PROVIDERS = new Set(['codebuddy']);
 function maskSecret(value) {
     if (value.length <= 8)
         return '****';
@@ -68,16 +68,48 @@ async function resolveAuth(argv) {
     return { accessToken: tokenResult.accessToken, podUrl };
 }
 /**
- * Build SPARQL UPDATE to upsert a Provider at /settings/ai/providers.ttl#{id}
+ * Build SPARQL UPDATE to upsert a Provider at /settings/providers/{id}.ttl
  */
-function buildProviderSparql(resourceUrl, providerId) {
+function buildProviderSparql(resourceUrl, providerId, fields = {}) {
     const baseUrl = exports.PROVIDER_BASE_URLS[providerId.toLowerCase()];
-    const displayName = providerId.charAt(0).toUpperCase() + providerId.slice(1);
-    const subject = `<${resourceUrl}#${providerId}>`;
-    return `PREFIX udfs: <${exports.UDFS_NS}>
-DELETE { ${subject} udfs:baseUrl ?oldBase . ${subject} udfs:displayName ?oldName }
-INSERT { ${subject} a udfs:Provider ; udfs:displayName "${displayName}"${baseUrl ? ` ; udfs:baseUrl "${baseUrl}"` : ''} }
-WHERE { OPTIONAL { ${subject} udfs:baseUrl ?oldBase } OPTIONAL { ${subject} udfs:displayName ?oldName } }`;
+    const displayName = (0, models_1.getAIConfigProviderMetadata)(providerId).displayName
+        ?? providerId.charAt(0).toUpperCase() + providerId.slice(1);
+    const subject = `<${resourceUrl}>`;
+    const deletes = [
+        `${subject} ai:baseUrl ?oldBase .`,
+        `${subject} ai:displayName ?oldName .`,
+    ];
+    const providerPredicates = [
+        `a ai:Provider`,
+        `ai:displayName "${displayName}"`,
+    ];
+    const insertTriples = [];
+    const optionals = [
+        `OPTIONAL { ${subject} ai:baseUrl ?oldBase }`,
+        `OPTIONAL { ${subject} ai:displayName ?oldName }`,
+    ];
+    if (baseUrl) {
+        providerPredicates.push(`ai:baseUrl "${baseUrl}"`);
+    }
+    if (fields.model) {
+        const modelRef = (0, models_1.aiConfigModelRef)(providerId, fields.model);
+        const fragmentIndex = modelRef.indexOf('#');
+        const modelSubject = fragmentIndex >= 0
+            ? `<${resourceUrl}#${modelRef.slice(fragmentIndex + 1)}>`
+            : `<${resourceUrl}#${fields.model}>`;
+        deletes.push(`${subject} ai:defaultModel ?oldDefaultModel .`);
+        deletes.push(`${subject} ai:hasModel ?oldHasModel .`);
+        optionals.push(`OPTIONAL { ${subject} ai:defaultModel ?oldDefaultModel }`);
+        optionals.push(`OPTIONAL { ${subject} ai:hasModel ?oldHasModel }`);
+        providerPredicates.push(`ai:defaultModel ${modelSubject}`);
+        providerPredicates.push(`ai:hasModel ${modelSubject}`);
+        insertTriples.push(`${modelSubject} a ai:Model ; ai:displayName "${fields.model}" ; ai:modelType "chat" ; ai:isProvidedBy ${subject} ; ai:status "active" .`);
+    }
+    insertTriples.unshift(`${subject} ${providerPredicates.join(' ;\n  ')} .`);
+    return `PREFIX ai: <${exports.AI_NS}>
+DELETE { ${deletes.join(' ')} }
+INSERT { ${insertTriples.join('\n  ')} }
+WHERE { ${optionals.join(' ')} }`;
 }
 /**
  * Build SPARQL UPDATE to upsert a Credential at /settings/credentials.ttl#cred-{provider}
@@ -85,29 +117,24 @@ WHERE { OPTIONAL { ${subject} udfs:baseUrl ?oldBase } OPTIONAL { ${subject} udfs
 function buildCredentialSparql(resourceUrl, podUrl, provider, fields) {
     const credId = credentialId(provider);
     const subject = `<${resourceUrl}#${credId}>`;
-    const providerUri = `<${podUrl}settings/ai/providers.ttl#${provider}>`;
+    const providerUri = `<${podUrl.replace(/\/$/, '')}${(0, models_1.aiConfigProviderRef)(provider)}>`;
     const deletes = [];
     const inserts = [
-        `${subject} a udfs:Credential`,
-        `udfs:service "ai"`,
-        `udfs:status "active"`,
-        `udfs:provider ${providerUri}`,
+        `${subject} a cred:Credential`,
+        `cred:service "ai"`,
+        `cred:status "active"`,
+        `cred:provider ${providerUri}`,
     ];
     const optionals = [];
     // Always delete+reinsert provider link
-    deletes.push(`${subject} udfs:provider ?oldProv .`);
-    optionals.push(`OPTIONAL { ${subject} udfs:provider ?oldProv }`);
+    deletes.push(`${subject} cred:provider ?oldProv .`);
+    optionals.push(`OPTIONAL { ${subject} cred:provider ?oldProv }`);
     if (fields.apiKey) {
-        deletes.push(`${subject} udfs:apiKey ?oldKey .`);
-        optionals.push(`OPTIONAL { ${subject} udfs:apiKey ?oldKey }`);
-        inserts.push(`udfs:apiKey "${fields.apiKey}"`);
-    }
-    if (fields.model) {
-        deletes.push(`${subject} udfs:defaultModel ?oldModel .`);
-        optionals.push(`OPTIONAL { ${subject} udfs:defaultModel ?oldModel }`);
-        inserts.push(`udfs:defaultModel "${fields.model}"`);
+        deletes.push(`${subject} cred:apiKey ?oldKey .`);
+        optionals.push(`OPTIONAL { ${subject} cred:apiKey ?oldKey }`);
+        inserts.push(`cred:apiKey "${fields.apiKey}"`);
     }
-    return `PREFIX udfs: <${exports.UDFS_NS}>
+    return `PREFIX cred: <${exports.CREDENTIAL_NS}>
 DELETE { ${deletes.join(' ')} }
 INSERT { ${inserts.join(' ;\n  ')} }
 WHERE { ${optionals.join(' ')} }`;
@@ -118,11 +145,11 @@ WHERE { ${optionals.join(' ')} }`;
 function buildResetSparql(resourceUrl, provider) {
     const credId = credentialId(provider);
     const subject = `<${resourceUrl}#${credId}>`;
-    return `PREFIX udfs: <${exports.UDFS_NS}>\nDELETE WHERE { ${subject} ?p ?o }`;
+    return `PREFIX cred: <${exports.CREDENTIAL_NS}>\nDELETE WHERE { ${subject} ?p ?o }`;
 }
-async function writeProvider(podUrl, accessToken, providerId) {
-    const resource = `${podUrl}settings/ai/providers.ttl`;
-    const sparql = buildProviderSparql(resource, providerId);
+async function writeProvider(podUrl, accessToken, providerId, fields) {
+    const resource = `${podUrl.replace(/\/$/, '')}${(0, models_1.aiConfigProviderRef)(providerId)}`;
+    const sparql = buildProviderSparql(resource, providerId, fields);
     const res = await (0, solid_auth_1.authenticatedFetch)(resource, accessToken, {
         method: 'PATCH',
         headers: { 'Content-Type': 'application/sparql-update' },
@@ -142,7 +169,7 @@ async function writeCredential(podUrl, accessToken, provider, fields) {
 }
 const setCommand = {
     command: 'set',
-    describe: 'Configure SecretaryAI (provider, model, api-key — one or more)',
+    describe: 'Configure Pod AI provider (provider, model, api-key — one or more)',
     builder: (yargs) => yargs
         .option('provider', { type: 'string', description: `AI provider (${Object.keys(exports.PROVIDER_BASE_URLS).join(', ')})` })
         .option('model', { type: 'string', description: 'Default model name' })
@@ -160,7 +187,7 @@ const setCommand = {
         const { accessToken, podUrl } = await resolveAuth(argv);
         const provider = argv.provider;
         // Write provider
-        const provOk = await writeProvider(podUrl, accessToken, provider);
+        const provOk = await writeProvider(podUrl, accessToken, provider, { model: argv.model });
         if (!provOk) {
             console.error('Failed to write provider config.');
             process.exit(1);
@@ -179,12 +206,12 @@ const setCommand = {
             console.log(`  model:    ${argv.model}`);
         if (argv['api-key'])
             console.log(`  api-key:  ${maskSecret(argv['api-key'])}`);
-        console.log('SecretaryAI config saved.');
+        console.log('Pod AI provider config saved.');
     },
 };
 const showCommand = {
     command: 'show',
-    describe: 'Show current SecretaryAI config',
+    describe: 'Show current Pod AI provider config',
     builder: (yargs) => yargs,
     handler: async (argv) => {
         const { accessToken, podUrl } = await resolveAuth(argv);
@@ -193,7 +220,7 @@ const showCommand = {
             headers: { Accept: 'text/turtle' },
         });
         if (!res.ok) {
-            console.log('No SecretaryAI config found. Use `xpod config set --provider openai --api-key sk-xxx` to configure.');
+            console.log('No Pod AI provider config found. Use `xpod config set --provider openai --api-key sk-xxx` to configure.');
             return;
         }
         const turtle = await res.text();
@@ -204,24 +231,21 @@ const showCommand = {
             if (!block.includes('service') || !block.includes('"ai"'))
                 continue;
             found = true;
-            const providerMatch = block.match(/providers\.ttl#(\w+)/);
+            const providerMatch = block.match(/settings\/providers\/([^/\s>]+)\.ttl/);
             const apiKeyMatch = block.match(/apiKey\s+"([^"]+)"/);
-            const modelMatch = block.match(/defaultModel\s+"([^"]+)"/);
             if (providerMatch)
                 console.log(`  provider: ${providerMatch[1]}`);
-            if (modelMatch)
-                console.log(`  model:    ${modelMatch[1]}`);
             if (apiKeyMatch)
                 console.log(`  api-key:  ${maskSecret(apiKeyMatch[1])}`);
         }
         if (!found) {
-            console.log('No SecretaryAI config found. Use `xpod config set --provider openai --api-key sk-xxx` to configure.');
+            console.log('No Pod AI provider config found. Use `xpod config set --provider openai --api-key sk-xxx` to configure.');
         }
     },
 };
 const resetCommand = {
     command: 'reset',
-    describe: 'Remove SecretaryAI config',
+    describe: 'Remove Pod AI provider config',
     builder: (yargs) => yargs.option('provider', {
         type: 'string',
         description: 'Provider to remove',
@@ -238,7 +262,7 @@ const resetCommand = {
             body: sparql,
         });
         if (res.ok) {
-            console.log(`SecretaryAI config for ${provider} removed.`);
+            console.log(`Pod AI provider config for ${provider} removed.`);
         }
         else {
             const text = await res.text();
@@ -249,7 +273,7 @@ const resetCommand = {
 };
 exports.configCommand = {
     command: 'config',
-    describe: 'SecretaryAI configuration (provider, model, api-key)',
+    describe: 'Pod AI provider configuration (provider, model, api-key)',
     builder: (yargs) => yargs
         .option('url', {
         alias: 'u',

package/dist/cli/commands/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/cli/commands/config.ts"],"names":[],"mappings":";;;AAgDA,gCAGC;AAED,oCAEC;AAiCD,kDASC;AAKD,sDAsCC;AAKD,4CAIC;AApJD,gEAAiF;AACjF,kDAAuE;AAavE;;;;;;;;;;;;GAYG;AAEU,QAAA,OAAO,GAAG,2BAA2B,CAAC;AAEnD,sCAAsC;AACzB,QAAA,kBAAkB,GAA2B;IACxD,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,yDAAyD;IACjE,SAAS,EAAE,8BAA8B;IACzC,QAAQ,EAAE,6BAA6B;IACvC,UAAU,EAAE,8BAA8B;IAC1C,MAAM,EAAE,2BAA2B;IACnC,OAAO,EAAE,2BAA2B;IACpC,MAAM,EAAE,0BAA0B;IAClC,KAAK,EAAE,sCAAsC;IAC7C,SAAS,EAAE,6BAA6B,EAAG,iBAAiB;CAC7D,CAAC;AAEF,iDAAiD;AACpC,QAAA,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAEtD,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAgB,YAAY,CAAC,QAAgB;IAC3C,OAAO,QAAQ,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAgB;IACzC,MAAM,KAAK,GAAG,IAAA,mCAAe,GAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAA,wCAAoB,EAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE7D,MAAM,WAAW,GAAG,MAAM,IAAA,2BAAc,EAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,uGAAuG,CAAC,CAAC;QACvH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IAErD,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,WAAmB,EAAE,UAAkB;IACzE,MAAM,OAAO,GAAG,0BAAkB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,WAAW,IAAI,UAAU,GAAG,CAAC;IAEjD,OAAO,iBAAiB,eAAO;WACtB,OAAO,4BAA4B,OAAO;WAC1C,OAAO,wCAAwC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,oBAAoB,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE;qBACjG,OAAO,uCAAuC,OAAO,gCAAgC,CAAC;AAC3G,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CACnC,WAAmB,EACnB,MAAc,EACd,QAAgB,EAChB,MAA2C;IAE3C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,WAAW,IAAI,MAAM,GAAG,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,MAAM,6BAA6B,QAAQ,GAAG,CAAC;IAEvE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa;QACxB,GAAG,OAAO,oBAAoB;QAC9B,mBAAmB;QACnB,sBAAsB;QACtB,iBAAiB,WAAW,EAAE;KAC/B,CAAC;IACF,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,uCAAuC;IACvC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,2BAA2B,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,cAAc,OAAO,2BAA2B,CAAC,CAAC;IAEjE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,wBAAwB,CAAC,CAAC;QACjD,SAAS,CAAC,IAAI,CAAC,cAAc,OAAO,wBAAwB,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,gCAAgC,CAAC,CAAC;QACzD,SAAS,CAAC,IAAI,CAAC,cAAc,OAAO,gCAAgC,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,iBAAiB,eAAO;WACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;WACjB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;UACvB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,WAAmB,EAAE,QAAgB;IACpE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,WAAW,IAAI,MAAM,GAAG,CAAC;IAC7C,OAAO,iBAAiB,eAAO,qBAAqB,OAAO,UAAU,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,WAAmB,EAAE,UAAkB;IAClF,MAAM,QAAQ,GAAG,GAAG,MAAM,2BAA2B,CAAC;IACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,QAAQ,EAAE,WAAW,EAAE;QAC1D,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;QACxD,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,WAAmB,EACnB,QAAgB,EAChB,MAA2C;IAE3C,MAAM,QAAQ,GAAG,GAAG,MAAM,0BAA0B,CAAC;IACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,QAAQ,EAAE,WAAW,EAAE;QAC1D,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;QACxD,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAuC;IACrD,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,MAAM,CAAC,IAAI,CAAC,0BAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SAClH,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;SACtE,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;SAC7D,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAS,CAAC;QAEhC,iBAAiB;QACjB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE;YAClE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;CACF,CAAC;AAEF,MAAM,WAAW,GAA0C;IACzD,OAAO,EAAE,MAAM;IACf,QAAQ,EAAE,iCAAiC;IAC3C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,GAAG,MAAM,0BAA0B,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,QAAQ,EAAE,WAAW,EAAE;YAC1D,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;YACnH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,0DAA0D;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACpD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpE,KAAK,GAAG,IAAI,CAAC;YAEb,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAE3D,IAAI,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,UAAU;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,IAAI,WAAW;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAuC;IACvD,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,2BAA2B;IACrC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;QACvB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,oBAAoB;QACjC,YAAY,EAAE,IAAI;KACnB,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAS,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAG,MAAM,0BAA0B,CAAC;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEpD,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,QAAQ,EAAE,WAAW,EAAE;YAC1D,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;YACxD,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,WAAW,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF,CAAC;AAEW,QAAA,aAAa,GAAsC;IAC9D,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,0CAA0C;KACxD,CAAC;SACD,OAAO,CAAC,UAAU,CAAC;SACnB,OAAO,CAAC,WAAW,CAAC;SACpB,OAAO,CAAC,YAAY,CAAC;SACrB,aAAa,CAAC,CAAC,EAAE,oCAAoC,CAAC;IAC3D,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;CAClB,CAAC","sourcesContent":["import type { CommandModule } from 'yargs';\nimport { loadCredentials, getClientCredentials } from '../lib/credentials-store';\nimport { getAccessToken, authenticatedFetch } from '../lib/solid-auth';\n\ninterface ConfigArgs {\n  url?: string;\n}\n\ninterface SetArgs extends ConfigArgs {\n  provider?: string;\n  model?: string;\n  'api-key'?: string;\n  type?: 'api-key' | 'oauth';  // 认证类型\n}\n\n/**\n * Config 子命令：配置 SecretaryAI 使用的 AI 服务。\n *\n * 写入 Pod 的两个资源，与服务端 PodChatKitStore.getAiConfig() 对齐：\n *   /settings/ai/providers.ttl#{provider}       — Provider (baseUrl, displayName)\n *   /settings/credentials.ttl#cred-{provider}   — Credential (apiKey, service=ai, status=active, provider link)\n *\n * 用法:\n *   xpod config set --provider openai --model gpt-4o --api-key sk-xxx\n *   xpod config set --api-key sk-new-key          # 更新已有 provider 的 key\n *   xpod config show\n *   xpod config reset\n */\n\nexport const UDFS_NS = 'https://undefineds.co/ns#';\n\n/** provider name → default baseUrl */\nexport const PROVIDER_BASE_URLS: Record<string, string> = {\n  openai: 'https://api.openai.com/v1',\n  google: 'https://generativelanguage.googleapis.com/v1beta/openai',\n  anthropic: 'https://api.anthropic.com/v1',\n  deepseek: 'https://api.deepseek.com/v1',\n  openrouter: 'https://openrouter.ai/api/v1',\n  ollama: 'http://localhost:11434/v1',\n  mistral: 'https://api.mistral.ai/v1',\n  cohere: 'https://api.cohere.ai/v1',\n  zhipu: 'https://open.bigmodel.cn/api/paas/v4',\n  codebuddy: 'https://api.codebuddy.ai/v1',  // OAuth provider\n};\n\n/** OAuth providers that require browser login */\nexport const OAUTH_PROVIDERS = new Set(['codebuddy']);\n\nexport function maskSecret(value: string): string {\n  if (value.length <= 8) return '****';\n  return value.slice(0, 4) + '****' + value.slice(-4);\n}\n\nexport function credentialId(provider: string): string {\n  return `cred-${provider.toLowerCase()}`;\n}\n\nasync function resolveAuth(argv: ConfigArgs): Promise<{ accessToken: string; podUrl: string }> {\n  const creds = loadCredentials();\n  if (!creds) {\n    console.error('No credentials found. Run `xpod auth create-credentials` first.');\n    process.exit(1);\n  }\n\n  const clientCreds = getClientCredentials(creds);\n  if (!clientCreds) {\n    console.error('OAuth authentication not yet supported. Please use client credentials.');\n    process.exit(1);\n  }\n\n  const baseUrl = (argv.url ?? creds.url).replace(/\\/?$/, '/');\n\n  const tokenResult = await getAccessToken(clientCreds.clientId, clientCreds.clientSecret, baseUrl);\n  if (!tokenResult) {\n    console.error('Failed to obtain access token. Credentials may be expired — run `xpod auth create-credentials` again.');\n    process.exit(1);\n  }\n\n  const webIdUrl = new URL(creds.webId);\n  const pathParts = webIdUrl.pathname.split('/').filter(Boolean);\n  const podUrl = `${webIdUrl.origin}/${pathParts[0]}/`;\n\n  return { accessToken: tokenResult.accessToken, podUrl };\n}\n\n/**\n * Build SPARQL UPDATE to upsert a Provider at /settings/ai/providers.ttl#{id}\n */\nexport function buildProviderSparql(resourceUrl: string, providerId: string): string {\n  const baseUrl = PROVIDER_BASE_URLS[providerId.toLowerCase()];\n  const displayName = providerId.charAt(0).toUpperCase() + providerId.slice(1);\n  const subject = `<${resourceUrl}#${providerId}>`;\n\n  return `PREFIX udfs: <${UDFS_NS}>\nDELETE { ${subject} udfs:baseUrl ?oldBase . ${subject} udfs:displayName ?oldName }\nINSERT { ${subject} a udfs:Provider ; udfs:displayName \"${displayName}\"${baseUrl ? ` ; udfs:baseUrl \"${baseUrl}\"` : ''} }\nWHERE { OPTIONAL { ${subject} udfs:baseUrl ?oldBase } OPTIONAL { ${subject} udfs:displayName ?oldName } }`;\n}\n\n/**\n * Build SPARQL UPDATE to upsert a Credential at /settings/credentials.ttl#cred-{provider}\n */\nexport function buildCredentialSparql(\n  resourceUrl: string,\n  podUrl: string,\n  provider: string,\n  fields: { apiKey?: string; model?: string },\n): string {\n  const credId = credentialId(provider);\n  const subject = `<${resourceUrl}#${credId}>`;\n  const providerUri = `<${podUrl}settings/ai/providers.ttl#${provider}>`;\n\n  const deletes: string[] = [];\n  const inserts: string[] = [\n    `${subject} a udfs:Credential`,\n    `udfs:service \"ai\"`,\n    `udfs:status \"active\"`,\n    `udfs:provider ${providerUri}`,\n  ];\n  const optionals: string[] = [];\n\n  // Always delete+reinsert provider link\n  deletes.push(`${subject} udfs:provider ?oldProv .`);\n  optionals.push(`OPTIONAL { ${subject} udfs:provider ?oldProv }`);\n\n  if (fields.apiKey) {\n    deletes.push(`${subject} udfs:apiKey ?oldKey .`);\n    optionals.push(`OPTIONAL { ${subject} udfs:apiKey ?oldKey }`);\n    inserts.push(`udfs:apiKey \"${fields.apiKey}\"`);\n  }\n  if (fields.model) {\n    deletes.push(`${subject} udfs:defaultModel ?oldModel .`);\n    optionals.push(`OPTIONAL { ${subject} udfs:defaultModel ?oldModel }`);\n    inserts.push(`udfs:defaultModel \"${fields.model}\"`);\n  }\n\n  return `PREFIX udfs: <${UDFS_NS}>\nDELETE { ${deletes.join(' ')} }\nINSERT { ${inserts.join(' ;\\n  ')} }\nWHERE { ${optionals.join(' ')} }`;\n}\n\n/**\n * Build SPARQL UPDATE to delete a Credential\n */\nexport function buildResetSparql(resourceUrl: string, provider: string): string {\n  const credId = credentialId(provider);\n  const subject = `<${resourceUrl}#${credId}>`;\n  return `PREFIX udfs: <${UDFS_NS}>\\nDELETE WHERE { ${subject} ?p ?o }`;\n}\n\nasync function writeProvider(podUrl: string, accessToken: string, providerId: string): Promise<boolean> {\n  const resource = `${podUrl}settings/ai/providers.ttl`;\n  const sparql = buildProviderSparql(resource, providerId);\n  const res = await authenticatedFetch(resource, accessToken, {\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/sparql-update' },\n    body: sparql,\n  });\n  return res.ok;\n}\n\nasync function writeCredential(\n  podUrl: string,\n  accessToken: string,\n  provider: string,\n  fields: { apiKey?: string; model?: string },\n): Promise<boolean> {\n  const resource = `${podUrl}settings/credentials.ttl`;\n  const sparql = buildCredentialSparql(resource, podUrl, provider, fields);\n  const res = await authenticatedFetch(resource, accessToken, {\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/sparql-update' },\n    body: sparql,\n  });\n  return res.ok;\n}\n\nconst setCommand: CommandModule<ConfigArgs, SetArgs> = {\n  command: 'set',\n  describe: 'Configure SecretaryAI (provider, model, api-key — one or more)',\n  builder: (yargs) =>\n    yargs\n      .option('provider', { type: 'string', description: `AI provider (${Object.keys(PROVIDER_BASE_URLS).join(', ')})` })\n      .option('model', { type: 'string', description: 'Default model name' })\n      .option('api-key', { type: 'string', description: 'API key' })\n      .check((argv) => {\n        if (!argv.provider && !argv.model && !argv['api-key']) {\n          throw new Error('Specify at least one of --provider, --model, or --api-key');\n        }\n        if ((argv.model || argv['api-key']) && !argv.provider) {\n          throw new Error('--provider is required when setting --model or --api-key');\n        }\n        return true;\n      }),\n  handler: async (argv) => {\n    const { accessToken, podUrl } = await resolveAuth(argv);\n    const provider = argv.provider!;\n\n    // Write provider\n    const provOk = await writeProvider(podUrl, accessToken, provider);\n    if (!provOk) {\n      console.error('Failed to write provider config.');\n      process.exit(1);\n    }\n\n    // Write credential\n    const credOk = await writeCredential(podUrl, accessToken, provider, {\n      apiKey: argv['api-key'],\n      model: argv.model,\n    });\n    if (!credOk) {\n      console.error('Failed to write credential config.');\n      process.exit(1);\n    }\n\n    console.log(`  provider: ${provider}`);\n    if (argv.model) console.log(`  model:    ${argv.model}`);\n    if (argv['api-key']) console.log(`  api-key:  ${maskSecret(argv['api-key'])}`);\n    console.log('SecretaryAI config saved.');\n  },\n};\n\nconst showCommand: CommandModule<ConfigArgs, ConfigArgs> = {\n  command: 'show',\n  describe: 'Show current SecretaryAI config',\n  builder: (yargs) => yargs,\n  handler: async (argv) => {\n    const { accessToken, podUrl } = await resolveAuth(argv);\n    const resource = `${podUrl}settings/credentials.ttl`;\n    const res = await authenticatedFetch(resource, accessToken, {\n      headers: { Accept: 'text/turtle' },\n    });\n\n    if (!res.ok) {\n      console.log('No SecretaryAI config found. Use `xpod config set --provider openai --api-key sk-xxx` to configure.');\n      return;\n    }\n\n    const turtle = await res.text();\n    // Parse simple triples from turtle to find AI credentials\n    const credBlocks = turtle.split(/(?=<[^>]*#cred-)/);\n    let found = false;\n    for (const block of credBlocks) {\n      if (!block.includes('service') || !block.includes('\"ai\"')) continue;\n      found = true;\n\n      const providerMatch = block.match(/providers\\.ttl#(\\w+)/);\n      const apiKeyMatch = block.match(/apiKey\\s+\"([^\"]+)\"/);\n      const modelMatch = block.match(/defaultModel\\s+\"([^\"]+)\"/);\n\n      if (providerMatch) console.log(`  provider: ${providerMatch[1]}`);\n      if (modelMatch) console.log(`  model:    ${modelMatch[1]}`);\n      if (apiKeyMatch) console.log(`  api-key:  ${maskSecret(apiKeyMatch[1])}`);\n    }\n\n    if (!found) {\n      console.log('No SecretaryAI config found. Use `xpod config set --provider openai --api-key sk-xxx` to configure.');\n    }\n  },\n};\n\nconst resetCommand: CommandModule<ConfigArgs, SetArgs> = {\n  command: 'reset',\n  describe: 'Remove SecretaryAI config',\n  builder: (yargs) =>\n    yargs.option('provider', {\n      type: 'string',\n      description: 'Provider to remove',\n      demandOption: true,\n    }),\n  handler: async (argv) => {\n    const { accessToken, podUrl } = await resolveAuth(argv);\n    const provider = argv.provider!;\n    const resource = `${podUrl}settings/credentials.ttl`;\n    const sparql = buildResetSparql(resource, provider);\n\n    const res = await authenticatedFetch(resource, accessToken, {\n      method: 'PATCH',\n      headers: { 'Content-Type': 'application/sparql-update' },\n      body: sparql,\n    });\n\n    if (res.ok) {\n      console.log(`SecretaryAI config for ${provider} removed.`);\n    } else {\n      const text = await res.text();\n      console.error(`Failed to reset config: ${res.status} ${text.slice(0, 200)}`);\n      process.exit(1);\n    }\n  },\n};\n\nexport const configCommand: CommandModule<object, ConfigArgs> = {\n  command: 'config',\n  describe: 'SecretaryAI configuration (provider, model, api-key)',\n  builder: (yargs) =>\n    yargs\n      .option('url', {\n        alias: 'u',\n        type: 'string',\n        description: 'Server base URL (default: from ~/.xpod/)',\n      })\n      .command(setCommand)\n      .command(showCommand)\n      .command(resetCommand)\n      .demandCommand(1, 'Please specify a config subcommand'),\n  handler: () => {},\n};\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/cli/commands/config.ts"],"names":[],"mappings":";;;AA8CA,gCAGC;AAED,oCAEC;AAiCD,kDA2CC;AAKD,sDAiCC;AAKD,4CAIC;AA/KD,kDAAqI;AACrI,gEAAiF;AACjF,kDAAuE;AAYvE;;;;;;;;;;;;GAYG;AAEU,QAAA,KAAK,GAAG,gBAAO,CAAC,SAAS,CAAC;AAC1B,QAAA,aAAa,GAAG,wBAAe,CAAC,SAAS,CAAC;AAEvD,sCAAsC;AACzB,QAAA,kBAAkB,GAA2B;IACxD,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,yDAAyD;IACjE,SAAS,EAAE,8BAA8B;IACzC,QAAQ,EAAE,6BAA6B;IACvC,UAAU,EAAE,8BAA8B;IAC1C,MAAM,EAAE,2BAA2B;IACnC,OAAO,EAAE,2BAA2B;IACpC,MAAM,EAAE,0BAA0B;IAClC,KAAK,EAAE,sCAAsC;IAC7C,SAAS,EAAE,6BAA6B;CACzC,CAAC;AAEF,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAgB,YAAY,CAAC,QAAgB;IAC3C,OAAO,QAAQ,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAgB;IACzC,MAAM,KAAK,GAAG,IAAA,mCAAe,GAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAA,wCAAoB,EAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE7D,MAAM,WAAW,GAAG,MAAM,IAAA,2BAAc,EAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,uGAAuG,CAAC,CAAC;QACvH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IAErD,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,WAAmB,EAAE,UAAkB,EAAE,SAA6B,EAAE;IAC1G,MAAM,OAAO,GAAG,0BAAkB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAA,oCAA2B,EAAC,UAAU,CAAC,CAAC,WAAW;WAClE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,WAAW,GAAG,CAAC;IACnC,MAAM,OAAO,GAAG;QACd,GAAG,OAAO,wBAAwB;QAClC,GAAG,OAAO,4BAA4B;KACvC,CAAC;IACF,MAAM,kBAAkB,GAAG;QACzB,eAAe;QACf,mBAAmB,WAAW,GAAG;KAClC,CAAC;IACF,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG;QAChB,cAAc,OAAO,wBAAwB;QAC7C,cAAc,OAAO,4BAA4B;KAClD,CAAC;IAEF,IAAI,OAAO,EAAE,CAAC;QACZ,kBAAkB,CAAC,IAAI,CAAC,eAAe,OAAO,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,aAAa,IAAI,CAAC;YACrC,CAAC,CAAC,IAAI,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG;YACzD,CAAC,CAAC,IAAI,WAAW,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,qCAAqC,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,6BAA6B,CAAC,CAAC;QACtD,SAAS,CAAC,IAAI,CAAC,cAAc,OAAO,qCAAqC,CAAC,CAAC;QAC3E,SAAS,CAAC,IAAI,CAAC,cAAc,OAAO,6BAA6B,CAAC,CAAC;QACnE,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;QAC3D,kBAAkB,CAAC,IAAI,CAAC,eAAe,YAAY,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,IAAI,CAAC,GAAG,YAAY,iCAAiC,MAAM,CAAC,KAAK,6CAA6C,OAAO,yBAAyB,CAAC,CAAC;IAChK,CAAC;IACD,aAAa,CAAC,OAAO,CAAC,GAAG,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE3E,OAAO,eAAe,aAAK;WAClB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;WACjB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;UAC3B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CACnC,WAAmB,EACnB,MAAc,EACd,QAAgB,EAChB,MAA2C;IAE3C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,WAAW,IAAI,MAAM,GAAG,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAA,4BAAmB,EAAC,QAAQ,CAAC,GAAG,CAAC;IAErF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa;QACxB,GAAG,OAAO,oBAAoB;QAC9B,mBAAmB;QACnB,sBAAsB;QACtB,iBAAiB,WAAW,EAAE;KAC/B,CAAC;IACF,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,uCAAuC;IACvC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,2BAA2B,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,cAAc,OAAO,2BAA2B,CAAC,CAAC;IAEjE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,wBAAwB,CAAC,CAAC;QACjD,SAAS,CAAC,IAAI,CAAC,cAAc,OAAO,wBAAwB,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,iBAAiB,qBAAa;WAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;WACjB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;UACvB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,WAAmB,EAAE,QAAgB;IACpE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,WAAW,IAAI,MAAM,GAAG,CAAC;IAC7C,OAAO,iBAAiB,qBAAa,qBAAqB,OAAO,UAAU,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,WAAmB,EAAE,UAAkB,EAAE,MAA0B;IAC9G,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAA,4BAAmB,EAAC,UAAU,CAAC,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,QAAQ,EAAE,WAAW,EAAE;QAC1D,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;QACxD,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,WAAmB,EACnB,QAAgB,EAChB,MAA2C;IAE3C,MAAM,QAAQ,GAAG,GAAG,MAAM,0BAA0B,CAAC;IACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,QAAQ,EAAE,WAAW,EAAE;QAC1D,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;QACxD,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAuC;IACrD,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,MAAM,CAAC,IAAI,CAAC,0BAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SAClH,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;SACtE,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;SAC7D,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAS,CAAC;QAEhC,iBAAiB;QACjB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE;YAClE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;CACF,CAAC;AAEF,MAAM,WAAW,GAA0C;IACzD,OAAO,EAAE,MAAM;IACf,QAAQ,EAAE,qCAAqC;IAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,GAAG,MAAM,0BAA0B,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,QAAQ,EAAE,WAAW,EAAE;YAC1D,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,yGAAyG,CAAC,CAAC;YACvH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,0DAA0D;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACpD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpE,KAAK,GAAG,IAAI,CAAC;YAEb,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1E,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAEtD,IAAI,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,WAAW;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,yGAAyG,CAAC,CAAC;QACzH,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAuC;IACvD,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,+BAA+B;IACzC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;QACvB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,oBAAoB;QACjC,YAAY,EAAE,IAAI;KACnB,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAS,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAG,MAAM,0BAA0B,CAAC;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEpD,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAkB,EAAC,QAAQ,EAAE,WAAW,EAAE;YAC1D,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;YACxD,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,8BAA8B,QAAQ,WAAW,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF,CAAC;AAEW,QAAA,aAAa,GAAsC;IAC9D,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,0CAA0C;KACxD,CAAC;SACD,OAAO,CAAC,UAAU,CAAC;SACnB,OAAO,CAAC,WAAW,CAAC;SACpB,OAAO,CAAC,YAAY,CAAC;SACrB,aAAa,CAAC,CAAC,EAAE,oCAAoC,CAAC;IAC3D,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;CAClB,CAAC","sourcesContent":["import type { CommandModule } from 'yargs';\nimport { aiConfigModelRef, aiConfigProviderRef, getAIConfigProviderMetadata, XPOD_AI, XPOD_CREDENTIAL } from '@undefineds.co/models';\nimport { loadCredentials, getClientCredentials } from '../lib/credentials-store';\nimport { getAccessToken, authenticatedFetch } from '../lib/solid-auth';\n\ninterface ConfigArgs {\n  url?: string;\n}\n\ninterface SetArgs extends ConfigArgs {\n  provider?: string;\n  model?: string;\n  'api-key'?: string;\n}\n\n/**\n * Config 子命令：配置 Pod 中的 AI provider。\n *\n * 写入 Pod 的两个资源，与服务端 PodChatKitStore.getAiConfig() 对齐：\n *   /settings/providers/{provider}.ttl          — Provider + optional Model\n *   /settings/credentials.ttl#cred-{provider}   — Credential (apiKey, service=ai, status=active, provider link)\n *\n * 用法:\n *   xpod config set --provider openai --model gpt-4o --api-key sk-xxx\n *   xpod config set --api-key sk-new-key          # 更新已有 provider 的 key\n *   xpod config show\n *   xpod config reset\n */\n\nexport const AI_NS = XPOD_AI.NAMESPACE;\nexport const CREDENTIAL_NS = XPOD_CREDENTIAL.NAMESPACE;\n\n/** provider name → default baseUrl */\nexport const PROVIDER_BASE_URLS: Record<string, string> = {\n  openai: 'https://api.openai.com/v1',\n  google: 'https://generativelanguage.googleapis.com/v1beta/openai',\n  anthropic: 'https://api.anthropic.com/v1',\n  deepseek: 'https://api.deepseek.com/v1',\n  openrouter: 'https://openrouter.ai/api/v1',\n  ollama: 'http://localhost:11434/v1',\n  mistral: 'https://api.mistral.ai/v1',\n  cohere: 'https://api.cohere.ai/v1',\n  zhipu: 'https://open.bigmodel.cn/api/paas/v4',\n  codebuddy: 'https://api.codebuddy.ai/v1',\n};\n\nexport function maskSecret(value: string): string {\n  if (value.length <= 8) return '****';\n  return value.slice(0, 4) + '****' + value.slice(-4);\n}\n\nexport function credentialId(provider: string): string {\n  return `cred-${provider.toLowerCase()}`;\n}\n\nasync function resolveAuth(argv: ConfigArgs): Promise<{ accessToken: string; podUrl: string }> {\n  const creds = loadCredentials();\n  if (!creds) {\n    console.error('No credentials found. Run `xpod auth create-credentials` first.');\n    process.exit(1);\n  }\n\n  const clientCreds = getClientCredentials(creds);\n  if (!clientCreds) {\n    console.error('OAuth authentication not yet supported. Please use client credentials.');\n    process.exit(1);\n  }\n\n  const baseUrl = (argv.url ?? creds.url).replace(/\\/?$/, '/');\n\n  const tokenResult = await getAccessToken(clientCreds.clientId, clientCreds.clientSecret, baseUrl);\n  if (!tokenResult) {\n    console.error('Failed to obtain access token. Credentials may be expired — run `xpod auth create-credentials` again.');\n    process.exit(1);\n  }\n\n  const webIdUrl = new URL(creds.webId);\n  const pathParts = webIdUrl.pathname.split('/').filter(Boolean);\n  const podUrl = `${webIdUrl.origin}/${pathParts[0]}/`;\n\n  return { accessToken: tokenResult.accessToken, podUrl };\n}\n\n/**\n * Build SPARQL UPDATE to upsert a Provider at /settings/providers/{id}.ttl\n */\nexport function buildProviderSparql(resourceUrl: string, providerId: string, fields: { model?: string } = {}): string {\n  const baseUrl = PROVIDER_BASE_URLS[providerId.toLowerCase()];\n  const displayName = getAIConfigProviderMetadata(providerId).displayName\n    ?? providerId.charAt(0).toUpperCase() + providerId.slice(1);\n  const subject = `<${resourceUrl}>`;\n  const deletes = [\n    `${subject} ai:baseUrl ?oldBase .`,\n    `${subject} ai:displayName ?oldName .`,\n  ];\n  const providerPredicates = [\n    `a ai:Provider`,\n    `ai:displayName \"${displayName}\"`,\n  ];\n  const insertTriples: string[] = [];\n  const optionals = [\n    `OPTIONAL { ${subject} ai:baseUrl ?oldBase }`,\n    `OPTIONAL { ${subject} ai:displayName ?oldName }`,\n  ];\n\n  if (baseUrl) {\n    providerPredicates.push(`ai:baseUrl \"${baseUrl}\"`);\n  }\n\n  if (fields.model) {\n    const modelRef = aiConfigModelRef(providerId, fields.model);\n    const fragmentIndex = modelRef.indexOf('#');\n    const modelSubject = fragmentIndex >= 0\n      ? `<${resourceUrl}#${modelRef.slice(fragmentIndex + 1)}>`\n      : `<${resourceUrl}#${fields.model}>`;\n    deletes.push(`${subject} ai:defaultModel ?oldDefaultModel .`);\n    deletes.push(`${subject} ai:hasModel ?oldHasModel .`);\n    optionals.push(`OPTIONAL { ${subject} ai:defaultModel ?oldDefaultModel }`);\n    optionals.push(`OPTIONAL { ${subject} ai:hasModel ?oldHasModel }`);\n    providerPredicates.push(`ai:defaultModel ${modelSubject}`);\n    providerPredicates.push(`ai:hasModel ${modelSubject}`);\n    insertTriples.push(`${modelSubject} a ai:Model ; ai:displayName \"${fields.model}\" ; ai:modelType \"chat\" ; ai:isProvidedBy ${subject} ; ai:status \"active\" .`);\n  }\n  insertTriples.unshift(`${subject} ${providerPredicates.join(' ;\\n  ')} .`);\n\n  return `PREFIX ai: <${AI_NS}>\nDELETE { ${deletes.join(' ')} }\nINSERT { ${insertTriples.join('\\n  ')} }\nWHERE { ${optionals.join(' ')} }`;\n}\n\n/**\n * Build SPARQL UPDATE to upsert a Credential at /settings/credentials.ttl#cred-{provider}\n */\nexport function buildCredentialSparql(\n  resourceUrl: string,\n  podUrl: string,\n  provider: string,\n  fields: { apiKey?: string; model?: string },\n): string {\n  const credId = credentialId(provider);\n  const subject = `<${resourceUrl}#${credId}>`;\n  const providerUri = `<${podUrl.replace(/\\/$/, '')}${aiConfigProviderRef(provider)}>`;\n\n  const deletes: string[] = [];\n  const inserts: string[] = [\n    `${subject} a cred:Credential`,\n    `cred:service \"ai\"`,\n    `cred:status \"active\"`,\n    `cred:provider ${providerUri}`,\n  ];\n  const optionals: string[] = [];\n\n  // Always delete+reinsert provider link\n  deletes.push(`${subject} cred:provider ?oldProv .`);\n  optionals.push(`OPTIONAL { ${subject} cred:provider ?oldProv }`);\n\n  if (fields.apiKey) {\n    deletes.push(`${subject} cred:apiKey ?oldKey .`);\n    optionals.push(`OPTIONAL { ${subject} cred:apiKey ?oldKey }`);\n    inserts.push(`cred:apiKey \"${fields.apiKey}\"`);\n  }\n\n  return `PREFIX cred: <${CREDENTIAL_NS}>\nDELETE { ${deletes.join(' ')} }\nINSERT { ${inserts.join(' ;\\n  ')} }\nWHERE { ${optionals.join(' ')} }`;\n}\n\n/**\n * Build SPARQL UPDATE to delete a Credential\n */\nexport function buildResetSparql(resourceUrl: string, provider: string): string {\n  const credId = credentialId(provider);\n  const subject = `<${resourceUrl}#${credId}>`;\n  return `PREFIX cred: <${CREDENTIAL_NS}>\\nDELETE WHERE { ${subject} ?p ?o }`;\n}\n\nasync function writeProvider(podUrl: string, accessToken: string, providerId: string, fields: { model?: string }): Promise<boolean> {\n  const resource = `${podUrl.replace(/\\/$/, '')}${aiConfigProviderRef(providerId)}`;\n  const sparql = buildProviderSparql(resource, providerId, fields);\n  const res = await authenticatedFetch(resource, accessToken, {\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/sparql-update' },\n    body: sparql,\n  });\n  return res.ok;\n}\n\nasync function writeCredential(\n  podUrl: string,\n  accessToken: string,\n  provider: string,\n  fields: { apiKey?: string; model?: string },\n): Promise<boolean> {\n  const resource = `${podUrl}settings/credentials.ttl`;\n  const sparql = buildCredentialSparql(resource, podUrl, provider, fields);\n  const res = await authenticatedFetch(resource, accessToken, {\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/sparql-update' },\n    body: sparql,\n  });\n  return res.ok;\n}\n\nconst setCommand: CommandModule<ConfigArgs, SetArgs> = {\n  command: 'set',\n  describe: 'Configure Pod AI provider (provider, model, api-key — one or more)',\n  builder: (yargs) =>\n    yargs\n      .option('provider', { type: 'string', description: `AI provider (${Object.keys(PROVIDER_BASE_URLS).join(', ')})` })\n      .option('model', { type: 'string', description: 'Default model name' })\n      .option('api-key', { type: 'string', description: 'API key' })\n      .check((argv) => {\n        if (!argv.provider && !argv.model && !argv['api-key']) {\n          throw new Error('Specify at least one of --provider, --model, or --api-key');\n        }\n        if ((argv.model || argv['api-key']) && !argv.provider) {\n          throw new Error('--provider is required when setting --model or --api-key');\n        }\n        return true;\n      }),\n  handler: async (argv) => {\n    const { accessToken, podUrl } = await resolveAuth(argv);\n    const provider = argv.provider!;\n\n    // Write provider\n    const provOk = await writeProvider(podUrl, accessToken, provider, { model: argv.model });\n    if (!provOk) {\n      console.error('Failed to write provider config.');\n      process.exit(1);\n    }\n\n    // Write credential\n    const credOk = await writeCredential(podUrl, accessToken, provider, {\n      apiKey: argv['api-key'],\n      model: argv.model,\n    });\n    if (!credOk) {\n      console.error('Failed to write credential config.');\n      process.exit(1);\n    }\n\n    console.log(`  provider: ${provider}`);\n    if (argv.model) console.log(`  model:    ${argv.model}`);\n    if (argv['api-key']) console.log(`  api-key:  ${maskSecret(argv['api-key'])}`);\n    console.log('Pod AI provider config saved.');\n  },\n};\n\nconst showCommand: CommandModule<ConfigArgs, ConfigArgs> = {\n  command: 'show',\n  describe: 'Show current Pod AI provider config',\n  builder: (yargs) => yargs,\n  handler: async (argv) => {\n    const { accessToken, podUrl } = await resolveAuth(argv);\n    const resource = `${podUrl}settings/credentials.ttl`;\n    const res = await authenticatedFetch(resource, accessToken, {\n      headers: { Accept: 'text/turtle' },\n    });\n\n    if (!res.ok) {\n      console.log('No Pod AI provider config found. Use `xpod config set --provider openai --api-key sk-xxx` to configure.');\n      return;\n    }\n\n    const turtle = await res.text();\n    // Parse simple triples from turtle to find AI credentials\n    const credBlocks = turtle.split(/(?=<[^>]*#cred-)/);\n    let found = false;\n    for (const block of credBlocks) {\n      if (!block.includes('service') || !block.includes('\"ai\"')) continue;\n      found = true;\n\n      const providerMatch = block.match(/settings\\/providers\\/([^/\\s>]+)\\.ttl/);\n      const apiKeyMatch = block.match(/apiKey\\s+\"([^\"]+)\"/);\n\n      if (providerMatch) console.log(`  provider: ${providerMatch[1]}`);\n      if (apiKeyMatch) console.log(`  api-key:  ${maskSecret(apiKeyMatch[1])}`);\n    }\n\n    if (!found) {\n      console.log('No Pod AI provider config found. Use `xpod config set --provider openai --api-key sk-xxx` to configure.');\n    }\n  },\n};\n\nconst resetCommand: CommandModule<ConfigArgs, SetArgs> = {\n  command: 'reset',\n  describe: 'Remove Pod AI provider config',\n  builder: (yargs) =>\n    yargs.option('provider', {\n      type: 'string',\n      description: 'Provider to remove',\n      demandOption: true,\n    }),\n  handler: async (argv) => {\n    const { accessToken, podUrl } = await resolveAuth(argv);\n    const provider = argv.provider!;\n    const resource = `${podUrl}settings/credentials.ttl`;\n    const sparql = buildResetSparql(resource, provider);\n\n    const res = await authenticatedFetch(resource, accessToken, {\n      method: 'PATCH',\n      headers: { 'Content-Type': 'application/sparql-update' },\n      body: sparql,\n    });\n\n    if (res.ok) {\n      console.log(`Pod AI provider config for ${provider} removed.`);\n    } else {\n      const text = await res.text();\n      console.error(`Failed to reset config: ${res.status} ${text.slice(0, 200)}`);\n      process.exit(1);\n    }\n  },\n};\n\nexport const configCommand: CommandModule<object, ConfigArgs> = {\n  command: 'config',\n  describe: 'Pod AI provider configuration (provider, model, api-key)',\n  builder: (yargs) =>\n    yargs\n      .option('url', {\n        alias: 'u',\n        type: 'string',\n        description: 'Server base URL (default: from ~/.xpod/)',\n      })\n      .command(setCommand)\n      .command(showCommand)\n      .command(resetCommand)\n      .demandCommand(1, 'Please specify a config subcommand'),\n  handler: () => {},\n};\n"]}

package/dist/cli/commands/login.d.ts

@@ -1,9 +1,11 @@
-/**
- * xpod login - OAuth login for AI providers
- *
- * Usage:
- *   xpod login codebuddy
- *   xpod login anthropic
- */
 import type { CommandModule } from 'yargs';
-export declare const loginCommandModule: CommandModule;
+interface LoginArgs {
+    url?: string;
+    email?: string;
+    password?: string;
+    'web-id'?: string;
+    name?: string;
+    output?: boolean;
+}
+export declare const loginCommandModule: CommandModule<object, LoginArgs>;
+export {};

package/dist/cli/commands/login.js

@@ -1,106 +1,106 @@
 "use strict";
-/**
- * xpod login - OAuth login for AI providers
- *
- * Usage:
- *   xpod login codebuddy
- *   xpod login anthropic
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loginCommandModule = void 0;
+const css_account_1 = require("../lib/css-account");
 const credentials_store_1 = require("../lib/credentials-store");
-const solid_auth_1 = require("../lib/solid-auth");
-const pi_optional_1 = require("../lib/pi-optional");
-const oauth_credential_manager_1 = require("../lib/oauth-credential-manager");
-const oauth_providers_1 = require("../lib/oauth-providers");
 const prompt_1 = require("../lib/prompt");
-const loginCommand = {
-    command: 'login [provider]',
-    describe: 'Login to an AI provider (OAuth)',
-    builder: (yargs) => yargs.positional('provider', {
+function resolveUrl(url) {
+    const raw = url || process.env.CSS_BASE_URL || 'http://localhost:3000';
+    return raw.endsWith('/') ? raw : `${raw}/`;
+}
+async function resolveWebId(baseUrl, token, explicitWebId) {
+    if (explicitWebId) {
+        return explicitWebId;
+    }
+    const accountRes = await fetch(`${baseUrl}.account/`, {
+        headers: {
+            Accept: 'application/json',
+            Authorization: `CSS-Account-Token ${token}`,
+        },
+    });
+    if (!accountRes.ok) {
+        return undefined;
+    }
+    const accountData = await accountRes.json();
+    const webIds = accountData.webIds;
+    if (!webIds || typeof webIds !== 'object') {
+        return undefined;
+    }
+    return Object.keys(webIds)[0];
+}
+exports.loginCommandModule = {
+    command: 'login',
+    describe: 'Login to xpod/Solid and store CLI client credentials',
+    builder: (yargs) => yargs
+        .option('url', {
+        alias: 'u',
         type: 'string',
-        description: 'Provider name (e.g., codebuddy, anthropic)',
-    }),
+        description: 'Server base URL',
+        default: process.env.CSS_BASE_URL || 'http://localhost:3000',
+    })
+        .option('email', { type: 'string', description: 'Account email (will prompt if not provided)' })
+        .option('password', { type: 'string', description: 'Account password (will prompt securely if not provided)' })
+        .option('web-id', { type: 'string', description: 'WebID to bind credentials to' })
+        .option('name', { type: 'string', description: 'Credential label' })
+        .option('output', { type: 'boolean', default: false, description: 'Print credentials instead of saving to ~/.xpod/' }),
     handler: async (argv) => {
-        // 1. 检查 Solid credentials
-        const creds = (0, credentials_store_1.loadCredentials)();
-        if (!creds) {
-            console.error('Error: No Solid credentials found.');
-            console.error('Please run: xpod auth create-credentials');
+        const baseUrl = resolveUrl(argv.url);
+        if (!(await (0, css_account_1.checkServer)(baseUrl))) {
+            console.error(`Cannot reach server at ${baseUrl}`);
             process.exit(1);
         }
-        const clientCreds = (0, credentials_store_1.getClientCredentials)(creds);
-        if (!clientCreds) {
-            console.error('Error: Client credentials not found.');
-            process.exit(1);
+        let email = argv.email;
+        if (!email) {
+            email = await (0, prompt_1.promptText)('Email: ');
+            if (!email) {
+                console.error('Email is required');
+                process.exit(1);
+            }
         }
-        // 2. 认证到 Pod
-        let auth;
-        try {
-            auth = await (0, solid_auth_1.authenticate)(clientCreds.clientId, clientCreds.clientSecret, creds.url);
+        let password = argv.password;
+        if (!password) {
+            password = await (0, prompt_1.promptPassword)('Password: ');
+            if (!password) {
+                console.error('Password is required');
+                process.exit(1);
+            }
         }
-        catch (error) {
-            console.error(`Error: Failed to authenticate. ${error instanceof Error ? error.message : String(error)}`);
+        const token = await (0, css_account_1.login)(email, password, baseUrl);
+        if (!token) {
+            console.error('Login failed.');
             process.exit(1);
         }
-        const { session } = auth;
-        const podUrl = creds.url.endsWith('/') ? creds.url : `${creds.url}/`;
-        await (0, oauth_providers_1.registerCustomOAuthProviders)();
-        // 3. 获取 provider
-        let providerId = argv.provider;
-        if (!providerId) {
-            console.log('Available OAuth providers:');
-            console.log('  codebuddy    - CodeBuddy (Tencent AI)');
-            console.log('  anthropic    - Anthropic (Claude Pro/Max)');
-            console.log('  github-copilot - GitHub Copilot');
-            console.log('');
-            providerId = await (0, prompt_1.promptText)('Enter provider name: ');
-            if (!providerId) {
-                console.error('Provider name is required');
-                process.exit(1);
-            }
+        const controls = await (0, css_account_1.getAccountControls)(token, baseUrl);
+        if (!controls?.clientCredentials) {
+            console.error('Cannot find client credentials endpoint.');
+            process.exit(1);
         }
-        const { getOAuthProvider } = await (0, pi_optional_1.loadPiAiOAuthUtils)();
-        const provider = getOAuthProvider(providerId);
-        if (!provider) {
-            console.error(`Error: Unknown provider: ${providerId}`);
-            console.error('Available providers: codebuddy, anthropic, github-copilot');
+        const webId = await resolveWebId(baseUrl, token, argv['web-id']);
+        if (!webId) {
+            console.error('No WebID found. Specify --web-id explicitly.');
             process.exit(1);
         }
-        // 4. OAuth 登录
-        console.log(`\n🔐 Starting ${provider.name} OAuth login...\n`);
-        try {
-            const credentials = await provider.login({
-                onAuth: (info) => {
-                    console.log(info.instructions || 'Please login in your browser');
-                    console.log(`\nURL: ${info.url}\n`);
-                },
-                onPrompt: async (prompt) => {
-                    return await (0, prompt_1.promptText)(prompt.message + (prompt.placeholder ? ` (${prompt.placeholder})` : '') + ': ');
-                },
-                onProgress: (message) => {
-                    console.log(message);
+        const credential = await (0, css_account_1.createClientCredentials)(token, controls.clientCredentials, webId, argv.name);
+        if (!credential) {
+            console.error('Failed to create client credentials.');
+            process.exit(1);
+        }
+        console.log('Credentials created:');
+        console.log(`  client_id:     ${credential.id}`);
+        console.log(`  client_secret: ${credential.secret}`);
+        console.log(`  webId:         ${webId}`);
+        if (!argv.output) {
+            (0, credentials_store_1.saveCredentials)({
+                url: baseUrl,
+                webId,
+                authType: 'client_credentials',
+                secrets: {
+                    clientId: credential.id,
+                    clientSecret: credential.secret ?? '',
                 },
             });
-            // 5. 保存到 Pod
-            const providerUri = `${podUrl}settings/ai/providers.ttl#${providerId}`;
-            await (0, oauth_credential_manager_1.saveOAuthCredential)(session, providerId, providerUri, credentials, `${provider.name} OAuth`);
-            console.log(`\n✓ ${provider.name} credentials saved to your Pod!`);
-            console.log('You can now use the AI agent with this provider.\n');
-            await session.logout();
-        }
-        catch (error) {
-            console.error(`\nError during OAuth login: ${error instanceof Error ? error.message : String(error)}`);
-            process.exit(1);
+            console.log(`\nSaved to ${(0, credentials_store_1.getConfigPath)().replace('/config.json', '/')}`);
         }
     },
 };
-exports.loginCommandModule = {
-    command: 'login',
-    describe: 'OAuth login for AI providers',
-    builder: (yargs) => yargs.command(loginCommand),
-    handler: () => {
-        // Parent command, delegate to subcommands
-    },
-};
 //# sourceMappingURL=login.js.map