ai-fly 0.3.2 → 0.4.0-alpha.1

package/dist/ai-fly.js

@@ -61,17 +61,17 @@ async function dispatch(command, rest) {
 	const lazy = (load) => {
 		return (argv, ctx) => load().then((m) => m.run([...argv], ctx));
 	};
-	return match(command).with("serve", () => lazy(() => import("./serve-DSBlodTF.mjs"))(rest)).with("daemon", () => lazy(() => import("./daemon-ZWUSWAgM.mjs"))(rest)).with("presets", () => lazy(() => import("./presets-C73CAMZ6.mjs"))(rest)).with("secret", () => lazy(() => import("./secret-COdVHzjH.mjs"))(rest)).with("settings", async () => (await import("./settings-DU0YqNDt.mjs")).runAsSettings(rest, {})).with("relay", async () => (await import("./settings-DU0YqNDt.mjs")).runAsRelay(rest, {})).with("test", () => lazy(() => import("./test-mlaZC1y5.mjs"))(rest)).with("service", () => lazy(() => import("./service-B5uORhl3.mjs"))(rest)).with("group", () => lazy(() => import("./group-B96IKEDF.mjs"))(rest)).with("share", () => lazy(() => import("./share-Cug0944N.mjs"))(rest)).with("revoke", () => lazy(() => import("./revoke-CkpvK33Q.mjs"))(rest)).with("join", () => lazy(() => import("./join-CaFx5yoF.mjs"))(rest)).with("import", () => lazy(() => import("./import-rpBFh_pa.mjs"))(rest)).with("run", () => lazy(() => import("./run-3pdPsD8e.mjs"))(rest)).with("ports", () => lazy(() => import("./ports-BRXd5UXh.mjs"))(rest)).with("forget", () => lazy(() => import("./forget-BXL2x4Wv.mjs"))(rest)).with("key", () => {
-		if (rest[0] === "add") return lazy(() => import("./key-KcUU3yhJ.mjs"))(rest);
-		return lazy(() => import("./key-BiEp995L.mjs"))(rest);
+	return match(command).with("serve", () => lazy(() => import("./serve-FjBsmK5n.mjs"))(rest)).with("daemon", () => lazy(() => import("./daemon-C4kj0IwL.mjs"))(rest)).with("presets", () => lazy(() => import("./presets-DRO5N4Vm.mjs"))(rest)).with("secret", () => lazy(() => import("./secret-DKN75Vry.mjs"))(rest)).with("settings", async () => (await import("./settings-Dho5hk5Z.mjs")).runAsSettings(rest, {})).with("relay", async () => (await import("./settings-Dho5hk5Z.mjs")).runAsRelay(rest, {})).with("test", () => lazy(() => import("./test-Dxkkc-KN.mjs"))(rest)).with("service", () => lazy(() => import("./service-DnQhGK4m.mjs"))(rest)).with("group", () => lazy(() => import("./group-CjwGDch3.mjs"))(rest)).with("share", () => lazy(() => import("./share-DpQPO1eC.mjs"))(rest)).with("revoke", () => lazy(() => import("./revoke-CXTcFgoT.mjs"))(rest)).with("join", () => lazy(() => import("./join-BJMcNGV-.mjs"))(rest)).with("import", () => lazy(() => import("./import-Zy3LL_PR.mjs"))(rest)).with("run", () => lazy(() => import("./run-W7DBz_bR.mjs"))(rest)).with("ports", () => lazy(() => import("./ports-Csv91JOD.mjs"))(rest)).with("forget", () => lazy(() => import("./forget-oMwM-SsU.mjs"))(rest)).with("key", () => {
+		if (rest[0] === "add") return lazy(() => import("./key-BcNxtRJx.mjs"))(rest);
+		return lazy(() => import("./key-TP7lZeqW.mjs"))(rest);
 	}).with("status", async () => {
 		const [scope, ...tail] = rest;
 		const wantProvider = scope === "provider" || scope !== "consumer" && providerDirExists();
 		const wantConsumer = scope === "consumer" || scope !== "provider" && consumersRootExists();
 		const argv = scope === "provider" || scope === "consumer" ? tail : rest;
 		let code = 0;
-		if (wantProvider) code = Math.max(code, await lazy(() => import("./status-SkNsxGnk.mjs"))(argv));
-		if (wantConsumer) code = Math.max(code, await lazy(() => import("./status-Bttb9aPj.mjs"))(argv));
+		if (wantProvider) code = Math.max(code, await lazy(() => import("./status-Ce-lxy52.mjs"))(argv));
+		if (wantConsumer) code = Math.max(code, await lazy(() => import("./status-BaRyycxh.mjs"))(argv));
 		if (!wantProvider && !wantConsumer) process.stdout.write("nothing to report: no provider storage and no imported consumers\n");
 		return code;
 	}).otherwise(() => {

package/dist/{common-CqxqIg6D.mjs → common-BwKEJKOZ.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as resolveRelayUrls, t as loadConfig } from "./config-BlZnFqx7.mjs";
-import { t as ProviderStore } from "./store-CrTUwskE.mjs";
-import { t as loadSettings } from "./settings-C1Hb4zwd.mjs";
+import { t as ProviderStore } from "./store-YUMvMCBg.mjs";
+import { t as loadSettings } from "./settings-BAa8I7Ww.mjs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 //#region src/cli/commands/provider/common.ts

package/dist/{common-CgxCXeTt.mjs → common-Cr7D8JyX.mjs}

@@ -1,6 +1,6 @@
 import { n as resolveRelayUrls, t as loadConfig } from "./config-BlZnFqx7.mjs";
 import { n as loadSdk, t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { t as loadSettings } from "./settings-C1Hb4zwd.mjs";
+import { t as loadSettings } from "./settings-BAa8I7Ww.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/common.ts
 function ctxOut(ctx) {

package/dist/{daemon-ZWUSWAgM.mjs → daemon-C4kj0IwL.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError, t as CliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { r as settingsPath, t as loadSettings } from "./settings-C1Hb4zwd.mjs";
+import { r as settingsPath, t as loadSettings } from "./settings-BAa8I7Ww.mjs";
 import { a as killHard, c as terminateGracefully, i as isAlive, l as writeLastStart, n as daemonDir, o as readLastStart, r as ensureDaemonDir, s as readPid, t as clearPid, u as writePid } from "./daemon-state-CYkiW3SA.mjs";
-import { r as openStore } from "./common-CqxqIg6D.mjs";
+import { r as openStore } from "./common-BwKEJKOZ.mjs";
 import { openSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { isAbsolute, resolve } from "node:path";
@@ -99,7 +99,7 @@ async function start(startArgv, home) {
 	process.on("exit", () => {
 		clearPid(home);
 	});
-	const { run: serveRun } = await import("./serve-DSBlodTF.mjs");
+	const { run: serveRun } = await import("./serve-FjBsmK5n.mjs");
 	return serveRun([...startArgv], { homedir: home });
 }
 /** 后台 pid（活性核验；陈旧 pidfile 就地清理返回 null）。 */

package/dist/{forget-BXL2x4Wv.mjs → forget-oMwM-SsU.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as removeKeyring, n as consumersRoot } from "./store-CQShpYar.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-CgxCXeTt.mjs";
+import { d as removeKeyring, n as consumersRoot } from "./store-jmpkM28T.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-Cr7D8JyX.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/forget.ts
 async function run(argv, ctx = {}) {

package/dist/{group-B96IKEDF.mjs → group-CjwGDch3.mjs}

@@ -1,6 +1,6 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as str, l as resolveDataDir, n as multi, r as openStore, s as parsePositiveInt } from "./common-CqxqIg6D.mjs";
+import { d as str, l as resolveDataDir, n as multi, r as openStore, s as parsePositiveInt } from "./common-BwKEJKOZ.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/group.ts
 const SPEC = {

package/dist/{import-rpBFh_pa.mjs → import-Zy3LL_PR.mjs}

@@ -1,9 +1,9 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot, s as listKeyrings } from "./store-CQShpYar.mjs";
-import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-CgxCXeTt.mjs";
-import { a as importLink, i as formatLinkPreview, n as decodeShareLink, r as formatKeyringSummary } from "./join-u1DqTU3U.mjs";
-import { n as createFabricProviderTransport, t as startEngine } from "./runtime-DNs9GtGp.mjs";
+import { n as consumersRoot, s as listKeyrings } from "./store-jmpkM28T.mjs";
+import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-Cr7D8JyX.mjs";
+import { a as importLink, i as formatLinkPreview, n as decodeShareLink, r as formatKeyringSummary } from "./join-CdKKj7QS.mjs";
+import { n as createFabricProviderTransport, t as startEngine } from "./runtime-CGF9Sndm.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/import.ts
 async function run(argv, ctx = {}) {

package/dist/{join-CaFx5yoF.mjs → join-BJMcNGV-.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot } from "./store-CQShpYar.mjs";
-import { n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-CgxCXeTt.mjs";
-import { o as joinDevice } from "./join-u1DqTU3U.mjs";
+import { n as consumersRoot } from "./store-jmpkM28T.mjs";
+import { n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-Cr7D8JyX.mjs";
+import { o as joinDevice } from "./join-CdKKj7QS.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/join.ts
 async function run(argv, ctx = {}) {

package/dist/{join-u1DqTU3U.mjs → join-CdKKj7QS.mjs}

@@ -1,7 +1,7 @@
 import { t as CliError } from "./errors-BGtxPkM7.mjs";
-import { o as decodeZ32, s as randomZ32 } from "./rpc-contract-5qyWzT5t.mjs";
+import { o as decodeZ32, s as randomZ32 } from "./rpc-contract-CdiRZhUn.mjs";
 import { l as SERVICE_ENTRY_SCHEMA } from "./frames-BDqvhB2Y.mjs";
-import { a as hasFabricIdentity, c as loadKeyring, f as saveKeyring, h as upsertKey, i as findKeyringDir, l as mergeImportView, o as keyringDir, r as fabricDir } from "./store-CQShpYar.mjs";
+import { a as hasFabricIdentity, c as loadKeyring, f as saveKeyring, h as upsertKey, i as findKeyringDir, l as mergeImportView, o as keyringDir, r as fabricDir } from "./store-jmpkM28T.mjs";
 import { existsSync, mkdirSync, renameSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import { z } from "zod";

package/dist/{key-KcUU3yhJ.mjs → key-BcNxtRJx.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot } from "./store-CQShpYar.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-CgxCXeTt.mjs";
-import { r as formatKeyringSummary, t as addKey } from "./join-u1DqTU3U.mjs";
+import { n as consumersRoot } from "./store-jmpkM28T.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-Cr7D8JyX.mjs";
+import { r as formatKeyringSummary, t as addKey } from "./join-CdKKj7QS.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/key.ts
 async function run(argv, ctx = {}) {

package/dist/{key-BiEp995L.mjs → key-TP7lZeqW.mjs}

@@ -1,6 +1,6 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { c as requireString, d as str, l as resolveDataDir, r as openStore } from "./common-CqxqIg6D.mjs";
+import { c as requireString, d as str, l as resolveDataDir, r as openStore } from "./common-BwKEJKOZ.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/key.ts
 const SPEC = {

package/dist/{local-test-C3HGjGY3.mjs → local-test-DbpiPEsD.mjs}

@@ -1,4 +1,4 @@
-import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-5qyWzT5t.mjs";
+import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-CdiRZhUn.mjs";
 //#region src/consumer/local-test.ts
 const DEFAULT_TIMEOUT_MS = 2e4;
 const BODY_EXCERPT_MAX = 2e3;

package/dist/{models-dev-2UfQoIpQ.mjs → models-dev-7CclWuHF.mjs}

@@ -1,4 +1,4 @@
-import { t as PRESET_SCHEMA } from "./rpc-contract-5qyWzT5t.mjs";
+import { t as PRESET_SCHEMA } from "./rpc-contract-CdiRZhUn.mjs";
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
@@ -58,6 +58,22 @@ var providers_default = {
 			}],
 			"notes": "OpenAI-compatible at /v1/* (chat completions + responses, codex-ready); Anthropic-compatible surface at /anthropic/* (per vendor docs).",
 			"source": "https://models.dev/api.json + https://api-docs.deepseek.com/guides/anthropic_api"
+		},
+		{
+			"id": "codex",
+			"label": "Codex (ChatGPT backend)",
+			"apiForm": "openai-responses",
+			"baseUrl": "https://chatgpt.com",
+			"defaultPort": 4306,
+			"matchDomains": ["chatgpt.com"],
+			"routes": [{
+				"forms": ["openai-responses"],
+				"localPrefix": "/codex",
+				"upstreamPrefix": "/backend-api/codex"
+			}],
+			"authHeader": "$file:~/.codex/auth.json#.tokens.access_token?bearer",
+			"notes": "ChatGPT Codex backend (Responses API). Auth reads ~/.codex/auth.json per request (codex CLI login state; no key needed). Point agents at OPENAI_BASE_URL=http://127.0.0.1:<port>/codex with wire_api=responses. WS clients: ws://127.0.0.1:<port>/codex/responses upgrades to wss upstream.",
+			"source": "https://github.com/openai/codex (~/.codex/auth.json login state)"
 		}
 	]
 };

package/dist/{mux-CS1zhF4W.mjs → mux-BEXBL7rE.mjs}

@@ -1,4 +1,4 @@
-import { s as randomZ32 } from "./rpc-contract-5qyWzT5t.mjs";
+import { s as randomZ32 } from "./rpc-contract-CdiRZhUn.mjs";
 import { a as FRAME_TYPE_NAME, d as isKnownFrameType, i as FRAME_TYPE, r as FRAME_HEADER_SCHEMAS, t as ERROR_CODE, u as classifySchemaFailure } from "./frames-BDqvhB2Y.mjs";
 //#region src/wire/codec.ts
 const WIRE_MAGIC_PREFIX = "aifly";

package/dist/{ports-BRXd5UXh.mjs → ports-Csv91JOD.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { m as setPort, n as consumersRoot, s as listKeyrings } from "./store-CQShpYar.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-CgxCXeTt.mjs";
+import { m as setPort, n as consumersRoot, s as listKeyrings } from "./store-jmpkM28T.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-Cr7D8JyX.mjs";
 import { i as validatePortArg, n as desiredPortFor } from "./ports-pI59MtmI.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/ports.ts

package/dist/{presets-C73CAMZ6.mjs → presets-DRO5N4Vm.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { t as loadSettings } from "./settings-C1Hb4zwd.mjs";
-import { n as loadCuratedPresets, r as modelsDevCachePath, t as fetchModelsDevPresets } from "./models-dev-2UfQoIpQ.mjs";
+import { t as loadSettings } from "./settings-BAa8I7Ww.mjs";
+import { n as loadCuratedPresets, r as modelsDevCachePath, t as fetchModelsDevPresets } from "./models-dev-7CclWuHF.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/presets.ts
 const SPEC = { json: { type: "boolean" } };

package/dist/{revoke-CkpvK33Q.mjs → revoke-CXTcFgoT.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { d as str, l as resolveDataDir, u as resolvedRelayUrls } from "./common-CqxqIg6D.mjs";
-import { t as openExistingFabric } from "./serve-Be4zdKVj.mjs";
+import { d as str, l as resolveDataDir, u as resolvedRelayUrls } from "./common-BwKEJKOZ.mjs";
+import { t as openExistingFabric } from "./serve-GRJthOwO.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/revoke.ts
 const SPEC = {

package/dist/{rewrite-xZHWnyJk.mjs → rewrite-BL3jNnFZ.mjs}

@@ -1,6 +1,9 @@
-import { a as routeLocalPrefix } from "./rpc-contract-5qyWzT5t.mjs";
+import { a as routeLocalPrefix } from "./rpc-contract-CdiRZhUn.mjs";
 import { n as FORBIDDEN_REQ_HEADER_NAMES } from "./frames-BDqvhB2Y.mjs";
-import { a as parseUpstreamUrl, c as matchRequestPath, o as expandUriTemplate, s as compileMatchPattern } from "./store-CrTUwskE.mjs";
+import { a as parseUpstreamUrl, c as matchRequestPath, o as expandUriTemplate, s as compileMatchPattern } from "./store-YUMvMCBg.mjs";
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
 const ENV_REF_PREFIX = "$env:";
 /** $secret 引用前缀（密钥库名；与 $env 同样按引用整体掩码）。 */
 const SECRET_REF_PREFIX = "$secret:";
@@ -121,18 +124,85 @@ var SecretMissingError = class extends Error {
 	}
 };
 /**
-* 头值解析：literal 原样；`$secret:<name>` 优先于 `$env:` 判定——命中密钥库返回
-* 完整值，未命中（含空名/空值/未注入密钥源）抛 SecretMissingError（不回退空值、
-* 不省略该头）；`$env:<VAR>` 语义保持——空串/未设置返回 undefined（= 省略该头）。
-* 两者可并存于不同头（逐头独立解析）。
+* 解析 `$file:` 引用。path 支持 `~` 前缀（解析时展开）；jsonPath 为 jq 风格
+* 点径（`.tokens.access_token`，支持 `[n]` 数组下标）；`?bearer` 后缀给非空
+* 值拼 `Bearer ` 前缀。格式非法（缺 `#`）抛 SecretMissingError 同族的
+* UsageError 语义由调用方决定——此处返回 null 交由上层按未命中处理。
 */
-function resolveHeaderValue(value, env, secrets) {
+function parseFileRef(value) {
+	const body = value.slice(6);
+	const hash = body.indexOf("#");
+	if (hash <= 0) return null;
+	let spec = body.slice(hash + 1);
+	let bearer = false;
+	if (spec.endsWith("?bearer")) {
+		bearer = true;
+		spec = spec.slice(0, -7);
+	}
+	if (spec === "" || !spec.startsWith(".")) return null;
+	return {
+		path: body.slice(0, hash),
+		jsonPath: spec,
+		bearer
+	};
+}
+/** jq 风格点径求值（`.a.b` / `.a[0].b`；起点须以 `.` 开头）。未命中返回 undefined。 */
+function evalJsonPath(root, jsonPath) {
+	if (!jsonPath.startsWith(".")) return void 0;
+	let cur = root;
+	const segments = jsonPath.slice(1).split(/(?=\[)|\./).filter((s) => s !== "");
+	for (const seg of segments) {
+		if (cur === null || cur === void 0) return void 0;
+		const arr = /^\[(\d+)\]$/.exec(seg);
+		if (arr !== null) {
+			if (!Array.isArray(cur)) return void 0;
+			cur = cur[Number(arr[1])];
+			continue;
+		}
+		if (typeof cur !== "object") return void 0;
+		cur = cur[seg];
+	}
+	return cur;
+}
+/** 默认文件凭据源：读文件 + JSON 解析 + 点径求值（仅字符串值；`~` 已在上层展开）。 */
+const defaultFileCredentialSource = (path, jsonPath) => {
+	let raw;
+	try {
+		raw = readFileSync(path, "utf8");
+	} catch {
+		return;
+	}
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return;
+	}
+	const value = evalJsonPath(parsed, jsonPath);
+	return typeof value === "string" && value !== "" ? value : void 0;
+};
+/**
+* 头值解析：literal 原样；`$secret:<name>` 优先于 `$env:`/`$file:` 判定——命中
+* 密钥库返回完整值，未命中（含空名/空值/未注入密钥源）抛 SecretMissingError
+* （不回退空值、不省略该头）；`$file:<path>#<json-path>[?bearer]` 每请求读盘
+* （文件/键/空值未命中同抛 SecretMissingError；`?bearer` 拼前缀）；
+* `$env:<VAR>` 语义保持——空串/未设置返回 undefined（= 省略该头）。
+* 各源可并存于不同头（逐头独立解析）。
+*/
+function resolveHeaderValue(value, env, secrets, files = defaultFileCredentialSource) {
 	if (value.startsWith("$secret:")) {
 		const name = value.slice(8);
 		const resolved = secrets?.(name);
 		if (resolved === void 0 || resolved === "") throw new SecretMissingError();
 		return resolved;
 	}
+	if (value.startsWith("$file:")) {
+		const ref = parseFileRef(value);
+		if (ref === null) throw new SecretMissingError();
+		const resolved = files(ref.path.startsWith("~/") ? join(homedir(), ref.path.slice(1)) : ref.path, ref.jsonPath);
+		if (resolved === void 0 || resolved === "") throw new SecretMissingError();
+		return ref.bearer ? `Bearer ${resolved}` : resolved;
+	}
 	if (!value.startsWith("$env:")) return value;
 	const name = value.slice(5);
 	if (name === "") return void 0;

package/dist/{route-test-Oew0CO1U.mjs → route-test-DqKRThLp.mjs}

@@ -1,6 +1,6 @@
-import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-5qyWzT5t.mjs";
-import { t as formProbe } from "./local-test-C3HGjGY3.mjs";
-import { i as buildUpstreamRequest, t as PathNotOfferedError } from "./rewrite-xZHWnyJk.mjs";
+import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-CdiRZhUn.mjs";
+import { t as formProbe } from "./local-test-DbpiPEsD.mjs";
+import { i as buildUpstreamRequest, t as PathNotOfferedError } from "./rewrite-BL3jNnFZ.mjs";
 //#region src/provider/route-test.ts
 const DEFAULT_TIMEOUT_MS = 2e4;
 const BODY_EXCERPT_MAX = 2e3;

package/dist/{rpc-contract-5qyWzT5t.mjs → rpc-contract-CdiRZhUn.mjs}

@@ -228,6 +228,7 @@ const CONSUMER_PROVIDER_STATUS_SCHEMA = z.object({
 });
 const API_FORM_SCHEMA = z.enum([
 	"openai-completions",
+	"openai-responses",
 	"anthropic-messages",
 	"gemini-native"
 ]);
@@ -240,6 +241,9 @@ const PRESET_SCHEMA = z.strictObject({
 	iconId: z.string().min(1).max(128).optional(),
 	/** 惯用环境变量名（仅用于 $env 注入建议与文档；本地运行时模板无此字段）。 */
 	keyEnv: z.string().min(1).max(256).optional(),
+	/** 预填 authorization 头值模板（如 `$file:~/.codex/auth.json#.tokens.access_token?bearer`）；
+	*  优先级：显式 secretName > authHeader > keyEnv。 */
+	authHeader: z.string().min(3).max(2048).optional(),
 	/** 使用方本地端口建议（避开 <1024 特权段）。 */
 	defaultPort: z.number().int().min(1024).max(65535),
 	/** 官方域名集（exact/suffix 建议的生成源）。 */

package/dist/{run-3pdPsD8e.mjs → run-W7DBz_bR.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError, t as CliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot, s as listKeyrings } from "./store-CQShpYar.mjs";
-import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-CgxCXeTt.mjs";
-import { n as createFabricProviderTransport, t as startEngine } from "./runtime-DNs9GtGp.mjs";
+import { n as consumersRoot, s as listKeyrings } from "./store-jmpkM28T.mjs";
+import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-Cr7D8JyX.mjs";
+import { n as createFabricProviderTransport, t as startEngine } from "./runtime-CGF9Sndm.mjs";
 import { a as killHard, c as terminateGracefully, i as isAlive, l as writeLastStart, n as daemonDir, o as readLastStart, r as ensureDaemonDir, s as readPid, t as clearPid, u as writePid } from "./daemon-state-CYkiW3SA.mjs";
 import { openSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";

package/dist/{runtime-DNs9GtGp.mjs → runtime-CGF9Sndm.mjs}

@@ -1,6 +1,6 @@
 import { i as FRAME_TYPE, o as HTTP_METHODS } from "./frames-BDqvhB2Y.mjs";
-import { c as loadKeyring, f as saveKeyring, p as setActualPorts, t as applyCatalog, u as reconcileKeyMetadata } from "./store-CQShpYar.mjs";
-import { i as splitBody, n as FabricWireAdapter, t as WireSession } from "./mux-CS1zhF4W.mjs";
+import { c as loadKeyring, f as saveKeyring, p as setActualPorts, t as applyCatalog, u as reconcileKeyMetadata } from "./store-jmpkM28T.mjs";
+import { i as splitBody, n as FabricWireAdapter, t as WireSession } from "./mux-BEXBL7rE.mjs";
 import { n as desiredPortFor, r as listenWithFallback, t as LOOPBACK_HOST } from "./ports-pI59MtmI.mjs";
 import { Hono } from "hono";
 import { createAdaptorServer } from "@hono/node-server";

package/dist/{secret-COdVHzjH.mjs → secret-DKN75Vry.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as str, l as resolveDataDir } from "./common-CqxqIg6D.mjs";
-import { t as SecretsStore } from "./secrets-BYI6ooTJ.mjs";
+import { d as str, l as resolveDataDir } from "./common-BwKEJKOZ.mjs";
+import { t as SecretsStore } from "./secrets-DFdwYE_V.mjs";
 import { homedir } from "node:os";
 import process from "node:process";
 import { createInterface } from "node:readline";

package/dist/secrets-BKKxR3iB.mjs

@@ -0,0 +1,2 @@
+import { t as SecretsStore } from "./secrets-DFdwYE_V.mjs";
+export { SecretsStore };

package/dist/{secrets-BYI6ooTJ.mjs → secrets-DFdwYE_V.mjs}

@@ -1,5 +1,5 @@
-import { r as SECRET_NAME_SCHEMA } from "./rpc-contract-5qyWzT5t.mjs";
-import { i as ensurePrivateDir, n as StoreError, r as atomicWriteFileSync } from "./store-CrTUwskE.mjs";
+import { r as SECRET_NAME_SCHEMA } from "./rpc-contract-CdiRZhUn.mjs";
+import { i as ensurePrivateDir, n as StoreError, r as atomicWriteFileSync } from "./store-YUMvMCBg.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { z } from "zod";

package/dist/{serve-DSBlodTF.mjs → serve-FjBsmK5n.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { d as str, l as resolveDataDir, u as resolvedRelayUrls } from "./common-CqxqIg6D.mjs";
-import { n as startProviderDaemon } from "./serve-Be4zdKVj.mjs";
+import { d as str, l as resolveDataDir, u as resolvedRelayUrls } from "./common-BwKEJKOZ.mjs";
+import { n as startProviderDaemon } from "./serve-GRJthOwO.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/serve.ts
 const SPEC = {

package/dist/{serve-Be4zdKVj.mjs → serve-GRJthOwO.mjs}

@@ -1,9 +1,9 @@
 import { c as RESP_META_HEADER_WHITELIST, i as FRAME_TYPE, s as REJECTED_CODE, t as ERROR_CODE } from "./frames-BDqvhB2Y.mjs";
 import { n as loadSdk } from "./proxy-D7VMUVEg.mjs";
-import { i as ensurePrivateDir, r as atomicWriteFileSync, t as ProviderStore } from "./store-CrTUwskE.mjs";
-import { n as FabricWireAdapter, r as DEFAULT_BODY_CHUNK_BYTES, t as WireSession } from "./mux-CS1zhF4W.mjs";
-import { a as collectEnvVarNames, i as buildUpstreamRequest, n as RewriteError, r as SecretMissingError, s as buildServiceEntry, t as PathNotOfferedError } from "./rewrite-xZHWnyJk.mjs";
-import { t as SecretsStore } from "./secrets-BYI6ooTJ.mjs";
+import { i as ensurePrivateDir, r as atomicWriteFileSync, t as ProviderStore } from "./store-YUMvMCBg.mjs";
+import { n as FabricWireAdapter, r as DEFAULT_BODY_CHUNK_BYTES, t as WireSession } from "./mux-BEXBL7rE.mjs";
+import { a as collectEnvVarNames, i as buildUpstreamRequest, n as RewriteError, r as SecretMissingError, s as buildServiceEntry, t as PathNotOfferedError } from "./rewrite-BL3jNnFZ.mjs";
+import { t as SecretsStore } from "./secrets-DFdwYE_V.mjs";
 import { appendFileSync, existsSync, readFileSync, readdirSync, watch } from "node:fs";
 import "node:os";
 import { dirname, join } from "node:path";

package/dist/{service-B5uORhl3.mjs → service-DnQhGK4m.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { a as parseMatchSpec, d as str, i as parseHeaderSetSpec, l as resolveDataDir, n as multi, o as parsePortNumber, r as openStore, t as buildRewrite } from "./common-CqxqIg6D.mjs";
-import { n as loadCuratedPresets } from "./models-dev-2UfQoIpQ.mjs";
+import { a as parseMatchSpec, d as str, i as parseHeaderSetSpec, l as resolveDataDir, n as multi, o as parsePortNumber, r as openStore, t as buildRewrite } from "./common-BwKEJKOZ.mjs";
+import { n as loadCuratedPresets } from "./models-dev-7CclWuHF.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/service.ts
 const SPEC = {
@@ -75,6 +75,10 @@ function add(options, positionals, home) {
 		name: "authorization",
 		value: `\$secret:${str(options.secret)}`
 	});
+	else if (preset?.authHeader !== void 0 && !headerSetSpecs.some((h) => h.name.toLowerCase() === "authorization")) headerSetSpecs.push({
+		name: "authorization",
+		value: preset.authHeader
+	});
 	const dataDir = resolveDataDir(str(options.data), home);
 	const service = openStore(dataDir).addService({
 		name,
@@ -203,18 +207,28 @@ function get(options, positionals, home) {
 async function test(options, positionals, home) {
 	const name = positionals[1];
 	if (name === void 0) throw new UsageError("error: service test requires a <name> argument");
-	const formRaw = options.form === void 0 ? "openai-chat" : str(options.form);
-	if (!ROUTE_FORMS.includes(formRaw)) throw new UsageError(`error: --form must be one of ${ROUTE_FORMS.join(", ")}`);
 	const dataDir = resolveDataDir(str(options.data), home);
 	const service = openStore(dataDir).getServiceByName(name);
 	if (service === void 0) throw new UsageError(`error: service '${name}' not found`);
-	const { testServiceRoute } = await import("./route-test-Oew0CO1U.mjs");
-	const { SecretsStore } = await import("./secrets-u19-8EyW.mjs");
+	let formRaw;
+	if (options.form !== void 0) formRaw = str(options.form);
+	else {
+		const localPrefix = options["local-prefix"] !== void 0 ? str(options["local-prefix"]) : void 0;
+		const routes = (service.routes ?? []).filter((r) => r.mode !== "pattern");
+		formRaw = (localPrefix !== void 0 ? routes.find((r) => r.localPrefix === localPrefix) : routes.length === 1 ? routes[0] : void 0)?.forms[0] ?? "openai-chat";
+	}
+	if (!ROUTE_FORMS.includes(formRaw)) throw new UsageError(`error: --form must be one of ${ROUTE_FORMS.join(", ")}`);
+	const { testServiceRoute } = await import("./route-test-DqKRThLp.mjs");
+	const { SecretsStore } = await import("./secrets-BKKxR3iB.mjs");
 	const secretsStore = SecretsStore.open(dataDir);
+	const hitLocalPrefix = options["local-prefix"] !== void 0 ? str(options["local-prefix"]) : (() => {
+		const routes = (service.routes ?? []).filter((r) => r.mode !== "pattern");
+		return routes.length === 1 ? routes[0].localPrefix : void 0;
+	})();
 	const result = await testServiceRoute({
 		service,
 		form: formRaw,
-		...options["local-prefix"] !== void 0 ? { localPrefix: str(options["local-prefix"]) } : {},
+		...hitLocalPrefix !== void 0 ? { localPrefix: hitLocalPrefix } : {},
 		...options.model !== void 0 ? { model: str(options.model) } : {},
 		...options.content !== void 0 ? { content: str(options.content) } : {},
 		secrets: (secretName) => secretsStore.resolve(secretName)?.headerValue

package/dist/{settings-C1Hb4zwd.mjs → settings-BAa8I7Ww.mjs}

@@ -1,5 +1,5 @@
-import { i as SETTINGS_SCHEMA } from "./rpc-contract-5qyWzT5t.mjs";
-import { i as ensurePrivateDir, r as atomicWriteFileSync } from "./store-CrTUwskE.mjs";
+import { i as SETTINGS_SCHEMA } from "./rpc-contract-CdiRZhUn.mjs";
+import { i as ensurePrivateDir, r as atomicWriteFileSync } from "./store-YUMvMCBg.mjs";
 import { readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";

package/dist/{settings-DU0YqNDt.mjs → settings-Dho5hk5Z.mjs}

@@ -1,6 +1,6 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as saveSettings, r as settingsPath, t as loadSettings } from "./settings-C1Hb4zwd.mjs";
+import { n as saveSettings, r as settingsPath, t as loadSettings } from "./settings-BAa8I7Ww.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/settings.ts
 const SPEC = { default: { type: "boolean" } };

package/dist/{share-Cug0944N.mjs → share-DpQPO1eC.mjs}

@@ -2,10 +2,10 @@ import { r as reportCliError, t as CliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv, r as parseDurationMs, t as assertDurationRange } from "./args-CSxXW9eD.mjs";
 import { l as SERVICE_ENTRY_SCHEMA } from "./frames-BDqvhB2Y.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { n as StoreError } from "./store-CrTUwskE.mjs";
-import { c as requireString, d as str, l as resolveDataDir, r as openStore, u as resolvedRelayUrls } from "./common-CqxqIg6D.mjs";
-import { t as openExistingFabric } from "./serve-Be4zdKVj.mjs";
-import { s as buildServiceEntry } from "./rewrite-xZHWnyJk.mjs";
+import { n as StoreError } from "./store-YUMvMCBg.mjs";
+import { c as requireString, d as str, l as resolveDataDir, r as openStore, u as resolvedRelayUrls } from "./common-BwKEJKOZ.mjs";
+import { t as openExistingFabric } from "./serve-GRJthOwO.mjs";
+import { s as buildServiceEntry } from "./rewrite-BL3jNnFZ.mjs";
 import { homedir } from "node:os";
 import { z } from "zod";
 //#region src/provider/link.ts

package/dist/{status-Bttb9aPj.mjs → status-BaRyycxh.mjs}

@@ -1,7 +1,7 @@
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot, s as listKeyrings } from "./store-CQShpYar.mjs";
-import { a as ringsForRun, n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-CgxCXeTt.mjs";
-import { n as createFabricProviderTransport, t as startEngine } from "./runtime-DNs9GtGp.mjs";
+import { n as consumersRoot, s as listKeyrings } from "./store-jmpkM28T.mjs";
+import { a as ringsForRun, n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-Cr7D8JyX.mjs";
+import { n as createFabricProviderTransport, t as startEngine } from "./runtime-CGF9Sndm.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/status.ts
 /** 状态显示名（spec 六态）。 */

package/dist/{status-SkNsxGnk.mjs → status-Ce-lxy52.mjs}

@@ -1,9 +1,9 @@
 import { r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { d as str, l as resolveDataDir, r as openStore, u as resolvedRelayUrls } from "./common-CqxqIg6D.mjs";
-import { t as openExistingFabric } from "./serve-Be4zdKVj.mjs";
-import { c as detailDisplayLines, o as buildServiceDetail } from "./rewrite-xZHWnyJk.mjs";
+import { d as str, l as resolveDataDir, r as openStore, u as resolvedRelayUrls } from "./common-BwKEJKOZ.mjs";
+import { t as openExistingFabric } from "./serve-GRJthOwO.mjs";
+import { c as detailDisplayLines, o as buildServiceDetail } from "./rewrite-BL3jNnFZ.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/status.ts
 const SPEC = {

package/dist/{store-CrTUwskE.mjs → store-YUMvMCBg.mjs}

@@ -1,4 +1,4 @@
-import { n as ROUTE_LOCAL_PREFIX, s as randomZ32 } from "./rpc-contract-5qyWzT5t.mjs";
+import { n as ROUTE_LOCAL_PREFIX, s as randomZ32 } from "./rpc-contract-CdiRZhUn.mjs";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { z } from "zod";

package/dist/{store-CQShpYar.mjs → store-jmpkM28T.mjs}

@@ -1,5 +1,5 @@
 import { t as CliError } from "./errors-BGtxPkM7.mjs";
-import { s as randomZ32 } from "./rpc-contract-5qyWzT5t.mjs";
+import { s as randomZ32 } from "./rpc-contract-CdiRZhUn.mjs";
 import { l as SERVICE_ENTRY_SCHEMA } from "./frames-BDqvhB2Y.mjs";
 import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{test-mlaZC1y5.mjs → test-Dxkkc-KN.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot, s as listKeyrings } from "./store-CQShpYar.mjs";
+import { n as consumersRoot, s as listKeyrings } from "./store-jmpkM28T.mjs";
 import { n as desiredPortFor } from "./ports-pI59MtmI.mjs";
-import { n as testLocalService } from "./local-test-C3HGjGY3.mjs";
+import { n as testLocalService } from "./local-test-DbpiPEsD.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/test.ts
 const SPEC = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-fly",
-  "version": "0.3.2",
+  "version": "0.4.0-alpha.1",
   "description": "ai-fly — peer-to-peer HTTP/WebSocket bridge with AI-ready presets, over OpenDWeb fabric",
   "license": "MIT OR Apache-2.0",
   "type": "module",

package/dist/secrets-u19-8EyW.mjs

@@ -1,2 +0,0 @@
-import { t as SecretsStore } from "./secrets-BYI6ooTJ.mjs";
-export { SecretsStore };