@xyit/wellspring 0.0.0-stage → 1.1.0

package/dist/config/credentials.js

@@ -0,0 +1,214 @@
+/*
+ * API Key 凭据（支持多个模型供应商）。
+ *
+ * 与 app-setting.json 分开存放：配置文件可能被分享或进版本库，凭据单独放
+ * <configDir>/credentials.json，权限 0600。v2 结构按供应商分槽，v1 只有 openai 槽。
+ * 读取顺序：显式参数 > 供应商指定的环境变量（内置为 OPENAI_API_KEY）> 本地凭据。
+ * 明文只进请求，界面/日志一律用掩码。
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { Result } from "../api/result/result.js";
+import { CONFIG_CODES } from "./codes.js";
+import { readJsonIfExists, writeJsonAtomic } from "../platform/file.js";
+import { readEnv } from "../platform/os.js";
+import { getPaths } from "../platform/path.js";
+/** 凭据文件在 config 根目录下的文件名 */
+export const CREDENTIALS_FILE_NAME = "credentials.json";
+/** 凭据文件结构版本；v2 增加 providers 分槽，v1 只认 openai */
+export const CREDENTIALS_VERSION = 2;
+/** 单个 key 的长度上限，避免把异常输入写进文件 */
+export const MAX_API_KEY_CHARS = 4096;
+/** 内置供应商的 id；它的 key 放在 openai 槽，兼容 v1 与 OPENAI_API_KEY */
+export const BUILTIN_PROVIDER_ID = "openai";
+/** 默认凭据路径；测试/多环境时可显式传 configDir */
+export function credentialsFile(configDir = getPaths().configDir) {
+    return join(configDir, CREDENTIALS_FILE_NAME);
+}
+/** 列表展示用的掩码；短 key 直接全遮 */
+export function maskApiKey(apiKey) {
+    const trimmed = apiKey.trim();
+    if (trimmed.length <= 8) {
+        return "••••";
+    }
+    const head = trimmed.slice(0, 3);
+    return `${head}…${trimmed.slice(-4)}`;
+}
+/** 校验并规范化用户输入的 key；空白、含控制字符或超长都视为非法 */
+export function normalizeApiKey(raw) {
+    if (typeof raw !== "string") {
+        return null;
+    }
+    const trimmed = raw.trim();
+    if (trimmed === "" || trimmed.length > MAX_API_KEY_CHARS) {
+        return null;
+    }
+    if (/[\s\u0000-\u001f\u007f]/.test(trimmed)) {
+        return null;
+    }
+    return trimmed;
+}
+function parseCredentials(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return null;
+    }
+    const record = value;
+    const openaiRaw = record["openai"];
+    const openai = typeof openaiRaw === "object" && openaiRaw !== null
+        ? openaiRaw
+        : null;
+    const providersRaw = record["providers"];
+    const providers = {};
+    if (typeof providersRaw === "object" && providersRaw !== null) {
+        for (const [id, raw] of Object.entries(providersRaw)) {
+            providers[id] = normalizeApiKey(raw);
+        }
+    }
+    return {
+        version: typeof record["version"] === "number" ? record["version"] : 1,
+        openai: openai === null ? null : { apiKey: normalizeApiKey(openai["apiKey"]) },
+        providers,
+    };
+}
+function readFileValue(file) {
+    let text;
+    try {
+        text = readFileSync(file, "utf8");
+    }
+    catch {
+        return null;
+    }
+    try {
+        return parseCredentials(JSON.parse(text));
+    }
+    catch {
+        return null;
+    }
+}
+async function readFileValueAsync(file) {
+    try {
+        return parseCredentials(await readJsonIfExists(file));
+    }
+    catch {
+        return null;
+    }
+}
+function storedKey(value, providerId) {
+    if (value === null) {
+        return null;
+    }
+    if (providerId === BUILTIN_PROVIDER_ID) {
+        return normalizeApiKey(value.openai?.apiKey);
+    }
+    return normalizeApiKey(value.providers?.[providerId]);
+}
+function envKey(provider) {
+    const envVar = provider.apiKeyEnv ?? (provider.id === BUILTIN_PROVIDER_ID ? "OPENAI_API_KEY" : null);
+    if (envVar === null) {
+        return null;
+    }
+    const raw = normalizeApiKey(readEnv(envVar));
+    return raw === null ? null : { apiKey: raw, envVar };
+}
+/** 某个供应商本地保存的 key（同步） */
+export function readProviderApiKeySync(providerId, file = credentialsFile()) {
+    return storedKey(readFileValue(file), providerId);
+}
+/** 某个供应商本地保存的 key（异步） */
+export async function readProviderApiKey(providerId, file = credentialsFile()) {
+    return storedKey(await readFileValueAsync(file), providerId);
+}
+/** 默认（内置 openai）供应商本地保存的 key */
+export function readStoredApiKeySync(file = credentialsFile()) {
+    return readProviderApiKeySync(BUILTIN_PROVIDER_ID, file);
+}
+export async function readStoredApiKey(file = credentialsFile()) {
+    return await readProviderApiKey(BUILTIN_PROVIDER_ID, file);
+}
+/** 解析某个供应商的 key：环境变量优先于本地凭据 */
+export function resolveProviderApiKeySync(provider, file = credentialsFile()) {
+    const fromEnv = envKey(provider);
+    if (fromEnv !== null) {
+        return { apiKey: fromEnv.apiKey, source: "env" };
+    }
+    const stored = readProviderApiKeySync(provider.id, file);
+    return stored === null ? null : { apiKey: stored, source: "credentials" };
+}
+/** 解析默认供应商的 key：OPENAI_API_KEY 优先于本地凭据 */
+export function resolveApiKeySync(file = credentialsFile()) {
+    return resolveProviderApiKeySync({ id: BUILTIN_PROVIDER_ID, apiKeyEnv: null }, file);
+}
+/** 默认供应商的状态（CLI 与 API Key 弹窗用） */
+export function apiKeyStatusSync(file = credentialsFile()) {
+    return providerKeyStatusSync({ id: BUILTIN_PROVIDER_ID, apiKeyEnv: null }, file);
+}
+/** 指定供应商的 Key 状态（掩码） */
+export function providerKeyStatusSync(provider, file = credentialsFile()) {
+    const resolved = resolveProviderApiKeySync(provider, file);
+    const envVar = provider.apiKeyEnv ?? (provider.id === BUILTIN_PROVIDER_ID ? "OPENAI_API_KEY" : null);
+    return {
+        configured: resolved !== null,
+        source: resolved?.source ?? null,
+        masked: resolved === null ? null : maskApiKey(resolved.apiKey),
+        file,
+        envOverride: envKey(provider) !== null,
+        stored: readProviderApiKeySync(provider.id, file) !== null,
+        envVar,
+    };
+}
+async function writeCredentials(file, value) {
+    try {
+        await writeJsonAtomic(file, value, { mode: 0o600 });
+    }
+    catch {
+        return Result.error(CONFIG_CODES.credentialsWriteFailed);
+    }
+    return Result.success();
+}
+/** 保存某个供应商的 key；providerId=openai 时写内置槽 */
+export async function saveProviderApiKey(providerId, raw, file = credentialsFile()) {
+    const apiKey = normalizeApiKey(raw);
+    if (apiKey === null) {
+        return Result.error(CONFIG_CODES.invalidApiKey);
+    }
+    const current = readFileValue(file);
+    if (providerId === BUILTIN_PROVIDER_ID) {
+        return await writeCredentials(file, {
+            version: CREDENTIALS_VERSION,
+            openai: { apiKey },
+            providers: current?.providers ?? {},
+        });
+    }
+    return await writeCredentials(file, {
+        version: CREDENTIALS_VERSION,
+        openai: current?.openai ?? { apiKey: null },
+        providers: { ...(current?.providers ?? {}), [providerId]: apiKey },
+    });
+}
+/** 清除某个供应商的 key；内置槽清除后 OPENAI_API_KEY 仍可能生效 */
+export async function clearProviderApiKey(providerId, file = credentialsFile()) {
+    const current = readFileValue(file);
+    if (providerId === BUILTIN_PROVIDER_ID) {
+        return await writeCredentials(file, {
+            version: CREDENTIALS_VERSION,
+            openai: { apiKey: null },
+            providers: current?.providers ?? {},
+        });
+    }
+    const providers = { ...(current?.providers ?? {}) };
+    delete providers[providerId];
+    return await writeCredentials(file, {
+        version: CREDENTIALS_VERSION,
+        openai: current?.openai ?? { apiKey: null },
+        providers,
+    });
+}
+/** 保存默认供应商的 key（兼容旧调用） */
+export async function saveStoredApiKey(raw, file = credentialsFile()) {
+    return await saveProviderApiKey(BUILTIN_PROVIDER_ID, raw, file);
+}
+/** 清除默认供应商的本地 key（兼容旧调用） */
+export async function clearStoredApiKey(file = credentialsFile()) {
+    return await clearProviderApiKey(BUILTIN_PROVIDER_ID, file);
+}
+//# sourceMappingURL=credentials.js.map

package/dist/config/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/config/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,4BAA4B;AAC5B,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAA;AAEvD,+CAA+C;AAC/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAA;AAEpC,+BAA+B;AAC/B,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAErC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAA;AA2C3C,mCAAmC;AACnC,MAAM,UAAU,eAAe,CAAC,SAAS,GAAW,QAAQ,EAAE,CAAC,SAAS;IACpE,OAAO,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAA;AACjD,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,UAAU,CAAC,MAAc;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAA;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAChC,OAAO,GAAG,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACzC,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,eAAe,CAAC,GAAY;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAA;IACf,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACvD,OAAO,IAAI,CAAA;IACf,CAAC;IACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAA;IACf,CAAC;IACD,OAAO,OAAO,CAAA;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAA;IACf,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IAClC,MAAM,MAAM,GACR,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;QAC/C,CAAC,CAAE,SAAqC;QACxC,CAAC,CAAC,IAAI,CAAA;IACd,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;IACxC,MAAM,SAAS,GAAkC,EAAE,CAAA;IACnD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC5D,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAuC,CAAC,EAAE,CAAC;YAC9E,SAAS,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QACxC,CAAC;IACL,CAAC;IACD,OAAO;QACH,OAAO,EAAE,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE;QAC9E,SAAS;KACZ,CAAA;AACL,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAC/B,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACD,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAA;IACf,CAAC;IACD,IAAI,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAA;IACf,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAM,gBAAgB,CAAU,IAAI,CAAC,CAAC,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAA;IACf,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAA6B,EAAE,UAAkB;IAChE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,IAAI,CAAA;IACf,CAAC;IACD,IAAI,UAAU,KAAK,mBAAmB,EAAE,CAAC;QACrC,OAAO,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,MAAM,CAAC,QAAwB;IACpC,MAAM,MAAM,GACR,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACzF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,CAAA;IACf,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5C,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;AACxD,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,sBAAsB,CAClC,UAAkB,EAClB,IAAI,GAAW,eAAe,EAAE;IAEhC,OAAO,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAA;AACrD,CAAC;AAED,yBAAyB;AACzB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,UAAkB,EAClB,IAAI,GAAW,eAAe,EAAE;IAEhC,OAAO,SAAS,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAA;AAChE,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,oBAAoB,CAAC,IAAI,GAAW,eAAe,EAAE;IACjE,OAAO,sBAAsB,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAI,GAAW,eAAe,EAAE;IACnE,OAAO,MAAM,kBAAkB,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;AAC9D,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,yBAAyB,CACrC,QAAwB,EACxB,IAAI,GAAW,eAAe,EAAE;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;IACxD,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;AAC7E,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,iBAAiB,CAAC,IAAI,GAAW,eAAe,EAAE;IAC9D,OAAO,yBAAyB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAA;AACxF,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,gBAAgB,CAAC,IAAI,GAAW,eAAe,EAAE;IAC7D,OAAO,qBAAqB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAA;AACpF,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,qBAAqB,CACjC,QAAwB,EACxB,IAAI,GAAW,eAAe,EAAE;IAEhC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC1D,MAAM,MAAM,GACR,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACzF,OAAO;QACH,UAAU,EAAE,QAAQ,KAAK,IAAI;QAC7B,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI;QAChC,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9D,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI;QACtC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,IAAI;QAC1D,MAAM;KACT,CAAA;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAsB;IAChE,IAAI,CAAC;QACD,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAA;AAC3B,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,UAAkB,EAClB,GAAY,EACZ,IAAI,GAAW,eAAe,EAAE;IAEhC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,UAAU,KAAK,mBAAmB,EAAE,CAAC;QACrC,OAAO,MAAM,gBAAgB,CAAC,IAAI,EAAE;YAChC,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,EAAE,MAAM,EAAE;YAClB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;SACtC,CAAC,CAAA;IACN,CAAC;IACD,OAAO,MAAM,gBAAgB,CAAC,IAAI,EAAE;QAChC,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC3C,SAAS,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;KACrE,CAAC,CAAA;AACN,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,UAAkB,EAClB,IAAI,GAAW,eAAe,EAAE;IAEhC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,UAAU,KAAK,mBAAmB,EAAE,CAAC;QACrC,OAAO,MAAM,gBAAgB,CAAC,IAAI,EAAE;YAChC,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACxB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;SACtC,CAAC,CAAA;IACN,CAAC;IACD,MAAM,SAAS,GAAkC,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,CAAA;IAClF,OAAO,SAAS,CAAC,UAAU,CAAC,CAAA;IAC5B,OAAO,MAAM,gBAAgB,CAAC,IAAI,EAAE;QAChC,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC3C,SAAS;KACZ,CAAC,CAAA;AACN,CAAC;AAED,0BAA0B;AAC1B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,GAAY,EACZ,IAAI,GAAW,eAAe,EAAE;IAEhC,OAAO,MAAM,kBAAkB,CAAC,mBAAmB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;AACnE,CAAC;AAED,4BAA4B;AAC5B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,GAAW,eAAe,EAAE;IACpE,OAAO,MAAM,mBAAmB,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;AAC/D,CAAC"}

package/dist/config/defaults.d.ts

@@ -0,0 +1,5 @@
+import { type AppSetting, type ModelsSetting } from "./types.js";
+/** 单供应商时代的默认模型设置；旧配置缺 models 时用它兜底 */
+export declare const DEFAULT_MODELS: ModelsSetting;
+/** 缺省配置。缺文件或读取失败时作为回退 */
+export declare const DEFAULT_SETTINGS: AppSetting;

package/dist/config/defaults.js

@@ -0,0 +1,31 @@
+import { SETTING_VERSION } from "./types.js";
+/** 单供应商时代的默认模型设置；旧配置缺 models 时用它兜底 */
+export const DEFAULT_MODELS = Object.freeze({
+    providers: Object.freeze([]),
+    activeProvider: "openai",
+    activeModel: null,
+    activeReasoning: "off",
+});
+/** 缺省配置。缺文件或读取失败时作为回退 */
+export const DEFAULT_SETTINGS = Object.freeze({
+    version: SETTING_VERSION,
+    logger: Object.freeze({ level: "info" }),
+    openai: Object.freeze({
+        baseUrl: null,
+        model: "gpt-4o-mini",
+        timeoutMs: 60_000,
+        maxRetries: 2,
+    }),
+    models: DEFAULT_MODELS,
+    network: Object.freeze({ proxy: null }),
+    sandbox: Object.freeze({
+        mode: "strict",
+        backend: "auto",
+        access: "read-only",
+        maxConcurrent: 2,
+        defaultTimeoutMs: 60_000,
+        defaultMemoryMB: 512,
+        outputLimitBytes: 16 * 1024 * 1024,
+    }),
+});
+//# sourceMappingURL=defaults.js.map

package/dist/config/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAuC,MAAM,YAAY,CAAA;AAEjF,sCAAsC;AACtC,MAAM,CAAC,MAAM,cAAc,GAAkB,MAAM,CAAC,MAAM,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5B,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,KAAK;CACzB,CAAC,CAAA;AAEF,yBAAyB;AACzB,MAAM,CAAC,MAAM,gBAAgB,GAAe,MAAM,CAAC,MAAM,CAAC;IACtD,OAAO,EAAE,eAAe;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAe,EAAE,CAAC;IACjD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,CAAC;KAChB,CAAC;IACF,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,QAAiB;QACvB,OAAO,EAAE,MAAe;QACxB,MAAM,EAAE,WAAoB;QAC5B,aAAa,EAAE,CAAC;QAChB,gBAAgB,EAAE,MAAM;QACxB,eAAe,EAAE,GAAG;QACpB,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KACrC,CAAC;CACL,CAAC,CAAA"}

package/dist/config/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./codes.js";
+export * from "./defaults.js";
+export * from "./loader.js";
+export * from "./types.js";
+export * from "./validate.js";

package/dist/config/index.js

@@ -0,0 +1,10 @@
+/*
+ * 配置层入口。
+ * 校验、默认值与读写；错误以 Result code 返回，不抛异常。
+ */
+export * from "./codes.js";
+export * from "./defaults.js";
+export * from "./loader.js";
+export * from "./types.js";
+export * from "./validate.js";
+//# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA"}

package/dist/config/loader.d.ts

@@ -0,0 +1,10 @@
+import { Result } from "../api/result/result.js";
+import type { AppSetting } from "./types.js";
+/** 配置文件在 config 根目录下的文件名 */
+export declare const SETTING_FILE_NAME = "app-setting.json";
+/** 默认配置路径 */
+export declare function settingsFile(): string;
+/** 读取配置。文件不存在时创建默认配置 */
+export declare function loadSettings(file?: string): Promise<Result<AppSetting>>;
+/** 校验后原子写回；字段不合法时不落盘 */
+export declare function saveSettings(settings: AppSetting, file?: string): Promise<Result<void>>;

package/dist/config/loader.js

@@ -0,0 +1,68 @@
+/*
+ * 配置读写。
+ * 默认路径为用户配置目录下的 app-setting.json；缺文件时写入默认值。
+ * 失败时 Result 的 code 说明原因，getData() 回退默认配置，供调用方决定是否继续启动。
+ */
+import { join } from "node:path";
+import { Result } from "../api/result/result.js";
+import { readTextIfExists, writeJsonAtomic } from "../platform/file.js";
+import { getPaths } from "../platform/path.js";
+import { CONFIG_CODES } from "./codes.js";
+import { DEFAULT_SETTINGS } from "./defaults.js";
+import { validateSettings } from "./validate.js";
+/** 配置文件在 config 根目录下的文件名 */
+export const SETTING_FILE_NAME = "app-setting.json";
+/** 默认配置路径 */
+export function settingsFile() {
+    return join(getPaths().configDir, SETTING_FILE_NAME);
+}
+/** 读取配置。文件不存在时创建默认配置 */
+export async function loadSettings(file = settingsFile()) {
+    let text;
+    try {
+        text = await readTextIfExists(file);
+    }
+    catch {
+        return Result.errorWithData(DEFAULT_SETTINGS, CONFIG_CODES.readFailed);
+    }
+    if (text === null) {
+        return await writeDefaults(file);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        // 损坏文件不覆盖，留给调用方决定是否备份
+        return Result.errorWithData(DEFAULT_SETTINGS, CONFIG_CODES.parseFailed);
+    }
+    const validated = validateSettings(parsed);
+    if (!validated.isSuccess()) {
+        return Result.errorWithData(DEFAULT_SETTINGS, validated.getCode() ?? CONFIG_CODES.invalid);
+    }
+    return validated;
+}
+/** 校验后原子写回；字段不合法时不落盘 */
+export async function saveSettings(settings, file = settingsFile()) {
+    const validated = validateSettings(settings);
+    if (!validated.isSuccess()) {
+        return Result.error(validated.getCode() ?? CONFIG_CODES.invalid);
+    }
+    try {
+        await writeJsonAtomic(file, validated.getData());
+    }
+    catch {
+        return Result.error(CONFIG_CODES.writeFailed);
+    }
+    return Result.success();
+}
+async function writeDefaults(file) {
+    try {
+        await writeJsonAtomic(file, DEFAULT_SETTINGS);
+    }
+    catch {
+        return Result.errorWithData(DEFAULT_SETTINGS, CONFIG_CODES.writeFailed);
+    }
+    return Result.successWithData(DEFAULT_SETTINGS);
+}
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAEhD,4BAA4B;AAC5B,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAA;AAEnD,aAAa;AACb,MAAM,UAAU,YAAY;IACxB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAA;AACxD,CAAC;AAED,wBAAwB;AACxB,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAI,GAAW,YAAY,EAAE;IAC5D,IAAI,IAAmB,CAAA;IACvB,IAAI,CAAC;QACD,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,aAAa,CAAa,gBAAgB,EAAE,YAAY,CAAC,UAAU,CAAC,CAAA;IACtF,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAChB,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACL,sBAAsB;QACtB,OAAO,MAAM,CAAC,aAAa,CAAa,gBAAgB,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;IACvF,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,aAAa,CACvB,gBAAgB,EAChB,SAAS,CAAC,OAAO,EAAE,IAAI,YAAY,CAAC,OAAO,CAC9C,CAAA;IACL,CAAC;IACD,OAAO,SAAS,CAAA;AACpB,CAAC;AAED,wBAAwB;AACxB,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,QAAoB,EACpB,IAAI,GAAW,YAAY,EAAE;IAE7B,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,YAAY,CAAC,OAAO,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,CAAC;QACD,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAA;AAC3B,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACrC,IAAI,CAAC;QACD,MAAM,eAAe,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,aAAa,CAAa,gBAAgB,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;IACvF,CAAC;IACD,OAAO,MAAM,CAAC,eAAe,CAAa,gBAAgB,CAAC,CAAA;AAC/D,CAAC"}

package/dist/config/providers.d.ts

@@ -0,0 +1,30 @@
+import { BUILTIN_PROVIDER_ID } from "./credentials.js";
+import type { AppSetting, ModelProviderSetting, ModelsSetting } from "./types.js";
+export { BUILTIN_PROVIDER_ID };
+/** 解析后的供应商：内置项同样带 builtin 标记与可用的模型列表 */
+export interface ResolvedModelProvider extends ModelProviderSetting {
+    readonly builtin: boolean;
+}
+/** 旧配置没有 models 节时用默认值 */
+export declare function modelsSetting(settings: AppSetting): ModelsSetting;
+/** 供应商列表：内置 openai 永远排第一，自定义按配置顺序 */
+export declare function listModelProviders(settings: AppSetting): readonly ResolvedModelProvider[];
+export declare function findModelProvider(settings: AppSetting, id: string): ResolvedModelProvider | null;
+/** 当前生效的供应商；配置里的 id 失效时退回内置 openai */
+export declare function activeModelProvider(settings: AppSetting): ResolvedModelProvider;
+/**
+ * 某次请求实际使用的模型：
+ * 显式覆盖 > 全局 activeModel（仅当前供应商）> 供应商 defaultModel > 模型列表第一个 > 全局 openai.model
+ */
+export declare function effectiveModel(settings: AppSetting, provider: ResolvedModelProvider, override?: string | null): string;
+/** 某次请求使用的供应商：请求里带了就用它，否则用全局当前供应商 */
+export declare function requestProvider(settings: AppSetting, providerId?: string | null): ResolvedModelProvider;
+/**
+ * 某次请求的推理强度：
+ * 显式覆盖 > 全局 activeReasoning（仅当前供应商）> off
+ */
+export declare function effectiveReasoning(settings: AppSetting, provider: ResolvedModelProvider, override?: string | null): string;
+/** 供应商对应的 OpenAI 设置（baseUrl + 实际模型） */
+export declare function providerOpenAISettings(settings: AppSetting, provider: ResolvedModelProvider, model?: string | null): AppSetting["openai"];
+/** 供应商的 key：环境变量优先，然后本地凭据；没有返回 null */
+export declare function providerApiKey(provider: ResolvedModelProvider, configDir: string): string | null;

package/dist/config/providers.js

@@ -0,0 +1,97 @@
+/*
+ * 模型供应商与模型解析。
+ *
+ * 内置供应商 id 为 openai，由 app-setting.json 的 openai.* 描述；
+ * 自定义供应商来自 models.providers，接口都按 OpenAI 兼容处理（baseUrl + key）。
+ */
+import { BUILTIN_PROVIDER_ID, credentialsFile, resolveProviderApiKeySync } from "./credentials.js";
+import { DEFAULT_MODELS } from "./defaults.js";
+export { BUILTIN_PROVIDER_ID };
+/** 旧配置没有 models 节时用默认值 */
+export function modelsSetting(settings) {
+    return settings.models ?? DEFAULT_MODELS;
+}
+/** 供应商列表：内置 openai 永远排第一，自定义按配置顺序 */
+export function listModelProviders(settings) {
+    const builtin = {
+        id: BUILTIN_PROVIDER_ID,
+        name: settings.openai.baseUrl === null ? "OpenAI（默认）" : "默认供应商",
+        baseUrl: settings.openai.baseUrl,
+        models: [settings.openai.model],
+        defaultModel: settings.openai.model,
+        apiKeyEnv: "OPENAI_API_KEY",
+        builtin: true,
+    };
+    return [
+        builtin,
+        ...modelsSetting(settings).providers.map((provider) => ({ ...provider, builtin: false })),
+    ];
+}
+export function findModelProvider(settings, id) {
+    return listModelProviders(settings).find((provider) => provider.id === id) ?? null;
+}
+/** 当前生效的供应商；配置里的 id 失效时退回内置 openai */
+export function activeModelProvider(settings) {
+    const active = findModelProvider(settings, modelsSetting(settings).activeProvider);
+    return active ?? listModelProviders(settings)[0];
+}
+/**
+ * 某次请求实际使用的模型：
+ * 显式覆盖 > 全局 activeModel（仅当前供应商）> 供应商 defaultModel > 模型列表第一个 > 全局 openai.model
+ */
+export function effectiveModel(settings, provider, override) {
+    const explicit = typeof override === "string" ? override.trim() : "";
+    if (explicit !== "") {
+        return explicit;
+    }
+    const models = modelsSetting(settings);
+    if (provider.id === models.activeProvider && models.activeModel !== null) {
+        return models.activeModel;
+    }
+    if (provider.defaultModel !== null && provider.defaultModel !== "") {
+        return provider.defaultModel;
+    }
+    if (provider.models.length > 0) {
+        return provider.models[0];
+    }
+    return settings.openai.model;
+}
+/** 某次请求使用的供应商：请求里带了就用它，否则用全局当前供应商 */
+export function requestProvider(settings, providerId) {
+    const requested = typeof providerId === "string" ? providerId.trim() : "";
+    if (requested !== "") {
+        const found = findModelProvider(settings, requested);
+        if (found !== null) {
+            return found;
+        }
+    }
+    return activeModelProvider(settings);
+}
+/**
+ * 某次请求的推理强度：
+ * 显式覆盖 > 全局 activeReasoning（仅当前供应商）> off
+ */
+export function effectiveReasoning(settings, provider, override) {
+    const explicit = typeof override === "string" ? override.trim() : "";
+    if (explicit !== "") {
+        return explicit;
+    }
+    const models = modelsSetting(settings);
+    if (provider.id === models.activeProvider) {
+        return models.activeReasoning;
+    }
+    return "off";
+}
+/** 供应商对应的 OpenAI 设置（baseUrl + 实际模型） */
+export function providerOpenAISettings(settings, provider, model) {
+    return {
+        ...settings.openai,
+        baseUrl: provider.baseUrl,
+        model: effectiveModel(settings, provider, model),
+    };
+}
+/** 供应商的 key：环境变量优先，然后本地凭据；没有返回 null */
+export function providerApiKey(provider, configDir) {
+    return (resolveProviderApiKeySync({ id: provider.id, apiKeyEnv: provider.apiKeyEnv }, credentialsFile(configDir))?.apiKey ?? null);
+}
+//# sourceMappingURL=providers.js.map

package/dist/config/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/config/providers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAClG,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAG9C,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAO9B,0BAA0B;AAC1B,MAAM,UAAU,aAAa,CAAC,QAAoB;IAC9C,OAAO,QAAQ,CAAC,MAAM,IAAI,cAAc,CAAA;AAC5C,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,kBAAkB,CAAC,QAAoB;IACnD,MAAM,OAAO,GAA0B;QACnC,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO;QAC/D,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO;QAChC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/B,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;QACnC,SAAS,EAAE,gBAAgB;QAC3B,OAAO,EAAE,IAAI;KAChB,CAAA;IACD,OAAO;QACH,OAAO;QACP,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;KAC5F,CAAA;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAoB,EAAE,EAAU;IAC9D,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAA;AACtF,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,mBAAmB,CAAC,QAAoB;IACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,CAAA;IAClF,OAAO,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAA;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC1B,QAAoB,EACpB,QAA+B,EAC/B,QAAwB;IAExB,MAAM,QAAQ,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACpE,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,QAAQ,CAAA;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,WAAW,CAAA;IAC7B,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,IAAI,QAAQ,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,QAAQ,CAAC,YAAY,CAAA;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,CAAA;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAA;AAChC,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,eAAe,CAC3B,QAAoB,EACpB,UAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QACpD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,KAAK,CAAA;QAChB,CAAC;IACL,CAAC;IACD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAC9B,QAAoB,EACpB,QAA+B,EAC/B,QAAwB;IAExB,MAAM,QAAQ,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACpE,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,QAAQ,CAAA;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,eAAe,CAAA;IACjC,CAAC;IACD,OAAO,KAAK,CAAA;AAChB,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,sBAAsB,CAClC,QAAoB,EACpB,QAA+B,EAC/B,KAAqB;IAErB,OAAO;QACH,GAAG,QAAQ,CAAC,MAAM;QAClB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC;KACnD,CAAA;AACL,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,cAAc,CAAC,QAA+B,EAAE,SAAiB;IAC7E,OAAO,CACH,yBAAyB,CACrB,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,EAClD,eAAe,CAAC,SAAS,CAAC,CAC7B,EAAE,MAAM,IAAI,IAAI,CACpB,CAAA;AACL,CAAC"}

package/dist/config/types.d.ts

@@ -0,0 +1,75 @@
+import type { LevelWithSilent } from "pino";
+/** 配置文件结构版本，字段变更时递增并在 loader 中迁移 */
+export declare const SETTING_VERSION = 1;
+export interface LoggerSetting {
+    readonly level: LevelWithSilent;
+}
+export interface OpenAISetting {
+    /** 兼容网关地址；null 表示使用 SDK 默认值或 OPENAI_BASE_URL */
+    readonly baseUrl: string | null;
+    readonly model: string;
+    readonly timeoutMs: number;
+    readonly maxRetries: number;
+}
+/** 自定义模型供应商（OpenAI 兼容接口）；内置供应商 openai 由 openai.* 字段描述 */
+export interface ModelProviderSetting {
+    /** 供应商标识，1-32 位 [a-z0-9-_.]；不能叫 openai */
+    readonly id: string;
+    readonly name: string;
+    /** null 表示使用 SDK 默认地址 */
+    readonly baseUrl: string | null;
+    /** 预置模型列表；可手动维护，也可从供应商接口拉取 */
+    readonly models: readonly string[];
+    /** 该供应商缺省模型；null 时取列表第一个或全局 openai.model */
+    readonly defaultModel: string | null;
+    /** 可选：用这个环境变量提供该供应商的 API Key（优先级高于本地凭据） */
+    readonly apiKeyEnv: string | null;
+}
+/** 推理强度；参考 Harness：off / low / high / max */
+export type ReasoningLevel = "off" | "low" | "high" | "max";
+export declare const REASONING_LEVELS: readonly ReasoningLevel[];
+export interface ModelsSetting {
+    /** 自定义供应商；内置 openai 不在列表里 */
+    readonly providers: readonly ModelProviderSetting[];
+    /** 当前使用的供应商 id；openai 表示内置 */
+    readonly activeProvider: string;
+    /** 当前使用的模型；null 表示用供应商缺省模型 */
+    readonly activeModel: string | null;
+    /** 当前推理强度；off 表示不发推理参数 */
+    readonly activeReasoning: ReasoningLevel;
+}
+/** 代理类型，一期只支持 http/https 代理 */
+export type ProxyType = "http";
+export interface ProxySetting {
+    readonly type: ProxyType;
+    /** 代理地址，认证信息可写在 URL 里 */
+    readonly url: string;
+    /** 不走代理的主机后缀，例如 example.com、.internal */
+    readonly noProxy: readonly string[];
+}
+export interface NetworkSetting {
+    /** null 表示直连 */
+    readonly proxy: ProxySetting | null;
+}
+export type SandboxMode = "off" | "strict" | "best-effort";
+export type SandboxBackend = "auto" | "bwrap" | "nsjail";
+export type SandboxAccess = "read-only" | "workspace-write" | "danger-full-access";
+/** OS 级 sandbox 配置 */
+export interface SandboxSetting {
+    readonly mode: SandboxMode;
+    readonly backend: SandboxBackend;
+    readonly access: SandboxAccess;
+    readonly maxConcurrent: number;
+    readonly defaultTimeoutMs: number;
+    readonly defaultMemoryMB: number;
+    readonly outputLimitBytes: number;
+}
+export interface AppSetting {
+    readonly version: number;
+    readonly logger: LoggerSetting;
+    readonly openai: OpenAISetting;
+    /** 多供应商/模型设置；旧配置没有这一节时按默认值处理 */
+    readonly models?: ModelsSetting;
+    readonly network: NetworkSetting;
+    readonly sandbox: SandboxSetting;
+}

package/dist/config/types.js

@@ -0,0 +1,4 @@
+/** 配置文件结构版本，字段变更时递增并在 loader 中迁移 */
+export const SETTING_VERSION = 1;
+export const REASONING_LEVELS = ["off", "low", "high", "max"];
+//# sourceMappingURL=types.js.map

package/dist/config/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAEA,oCAAoC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAA;AAgChC,MAAM,CAAC,MAAM,gBAAgB,GAA8B,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA"}

package/dist/config/validate.d.ts

@@ -0,0 +1,4 @@
+import { Result } from "../api/result/result.js";
+import { type AppSetting } from "./types.js";
+/** 校验并补齐默认值；未声明字段忽略，不做保留 */
+export declare function validateSettings(input: unknown): Result<AppSetting>;