ai-fly 0.4.0-alpha.4 → 0.4.0-alpha.6

package/dist/ai-fly.js

@@ -63,7 +63,7 @@ async function dispatch(command, rest) {
 	const lazy = (load) => {
 		return (argv, ctx) => load().then((m) => m.run([...argv], ctx));
 	};
-	return match(command).with("serve", () => lazy(() => import("./serve-CEmNAhX5.mjs"))(rest)).with("app", async () => {
+	return match(command).with("serve", () => lazy(() => import("./serve-B4f79Eqq.mjs"))(rest)).with("app", async () => {
 		const { join, dirname } = await import("node:path");
 		const { fileURLToPath } = await import("node:url");
 		const { spawn } = await import("node:child_process");
@@ -78,17 +78,17 @@ async function dispatch(command, rest) {
 		return await new Promise((resolve) => {
 			child.once("exit", (c) => resolve(c ?? 0));
 		});
-	}).with("daemon", () => lazy(() => import("./daemon-z7hZDf5X.mjs"))(rest)).with("presets", () => lazy(() => import("./presets-B339R3JU.mjs"))(rest)).with("hooks", () => lazy(() => import("./hooks-Da7bL31j.mjs"))(rest)).with("secret", () => lazy(() => import("./secret-BTq8J0Oj.mjs"))(rest)).with("settings", async () => (await import("./settings-BwDXTwUJ.mjs")).runAsSettings(rest, {})).with("relay", async () => (await import("./settings-BwDXTwUJ.mjs")).runAsRelay(rest, {})).with("test", () => lazy(() => import("./test-DtOSl9gb.mjs"))(rest)).with("service", () => lazy(() => import("./service-CBURGJU1.mjs"))(rest)).with("group", () => lazy(() => import("./group-DxTSU3w2.mjs"))(rest)).with("share", () => lazy(() => import("./share-CNYqhoFY.mjs"))(rest)).with("revoke", () => lazy(() => import("./revoke-CA4VYdTU.mjs"))(rest)).with("join", () => lazy(() => import("./join-BvMm1-Qz.mjs"))(rest)).with("import", () => lazy(() => import("./import-DVD6ODYu.mjs"))(rest)).with("run", () => lazy(() => import("./run-Ckodfe9X.mjs"))(rest)).with("ports", () => lazy(() => import("./ports-Bs8NpX1c.mjs"))(rest)).with("forget", () => lazy(() => import("./forget-zXXMWRPE.mjs"))(rest)).with("key", () => {
-		if (rest[0] === "add") return lazy(() => import("./key-DHyfw_xd.mjs"))(rest);
-		return lazy(() => import("./key-BvFO4hCw.mjs"))(rest);
+	}).with("daemon", () => lazy(() => import("./daemon-iqO29D7K.mjs"))(rest)).with("presets", () => lazy(() => import("./presets-Do5DWXfQ.mjs"))(rest)).with("hooks", () => lazy(() => import("./hooks-BeBzkBL-.mjs"))(rest)).with("secret", () => lazy(() => import("./secret-Ds6pIoLP.mjs"))(rest)).with("settings", async () => (await import("./settings-CSran7QD.mjs")).runAsSettings(rest, {})).with("relay", async () => (await import("./settings-CSran7QD.mjs")).runAsRelay(rest, {})).with("test", () => lazy(() => import("./test-BERWIlFb.mjs"))(rest)).with("service", () => lazy(() => import("./service-CYkpuJuc.mjs"))(rest)).with("group", () => lazy(() => import("./group-C13I2bCR.mjs"))(rest)).with("share", () => lazy(() => import("./share-B94HhX_b.mjs"))(rest)).with("revoke", () => lazy(() => import("./revoke-6lrZkjN4.mjs"))(rest)).with("join", () => lazy(() => import("./join-BHhCLh9B.mjs"))(rest)).with("import", () => lazy(() => import("./import-BhasJTGS.mjs"))(rest)).with("run", () => lazy(() => import("./run-BLxeLngt.mjs"))(rest)).with("ports", () => lazy(() => import("./ports-DDM5bbJg.mjs"))(rest)).with("forget", () => lazy(() => import("./forget-BIorc8Rx.mjs"))(rest)).with("key", () => {
+		if (rest[0] === "add") return lazy(() => import("./key-DdZsNmo_.mjs"))(rest);
+		return lazy(() => import("./key-DYeTZ7MI.mjs"))(rest);
 	}).with("status", async () => {
 		const [scope, ...tail] = rest;
 		const wantProvider = scope === "provider" || scope !== "consumer" && providerDirExists();
 		const wantConsumer = scope === "consumer" || scope !== "provider" && consumersRootExists();
 		const argv = scope === "provider" || scope === "consumer" ? tail : rest;
 		let code = 0;
-		if (wantProvider) code = Math.max(code, await lazy(() => import("./status-bV9YPNmT.mjs"))(argv));
-		if (wantConsumer) code = Math.max(code, await lazy(() => import("./status-DlB1AHty.mjs"))(argv));
+		if (wantProvider) code = Math.max(code, await lazy(() => import("./status-BFpr-LHB.mjs"))(argv));
+		if (wantConsumer) code = Math.max(code, await lazy(() => import("./status-C_EI8-b9.mjs"))(argv));
 		if (!wantProvider && !wantConsumer) process.stdout.write("nothing to report: no provider storage and no imported consumers\n");
 		return code;
 	}).otherwise(() => {

package/dist/app/main.js

@@ -378,6 +378,32 @@ const rpcContract = oc.errors(RpcErrorDefinitions).router({
 				localPrefix: z.string().min(1).max(2048).optional()
 			})).output(SERVICE_TEST_RESULT_SCHEMA)
 		},
+		hooks: {
+			/** hooks 脚本清单（内建 + 用户库；fns = 命名规范发现的钩子函数）。 */
+			list: oc.input(z.object({})).output(z.object({ hooks: z.array(z.strictObject({
+				name: z.string(),
+				source: z.enum(["user", "builtin"]),
+				fns: z.array(z.string())
+			})) })),
+			/** 脚本内容查看（含 path）。 */
+			get: oc.input(z.strictObject({ name: z.string().min(1).max(64) })).output(z.strictObject({
+				name: z.string(),
+				source: z.enum(["user", "builtin"]),
+				path: z.string(),
+				content: z.string()
+			})),
+			/** 安装用户脚本（校验：可加载 + 至少一个导出函数；失败回滚）。 */
+			add: oc.input(z.strictObject({
+				name: z.string().min(1).max(64),
+				content: z.string().min(1).max(65536)
+			})).output(z.strictObject({
+				name: z.string(),
+				path: z.string(),
+				fns: z.array(z.string())
+			})),
+			/** 删除（仅用户库；内建拒绝）。 */
+			remove: oc.input(z.strictObject({ name: z.string().min(1).max(64) })).output(z.object({ removed: z.boolean() }))
+		},
 		secrets: {
 			/** 密钥库清单（仅名称与时间戳；值由设计不跨 RPC）。 */
 			list: oc.input(z.object({})).output(z.object({ secrets: z.array(SECRET_ENTRY_SCHEMA) })),
@@ -2624,6 +2650,42 @@ function loadHookScript(name, home = homedir()) {
 		} catch {}
 	}
 }
+function dirScriptNames(dir) {
+	try {
+		return readdirSync(dir).filter((f) => f.endsWith(".cjs")).map((f) => f.slice(0, -4));
+	} catch {
+		return [];
+	}
+}
+/** 枚举可用 hooks 脚本及其钩子清单（用户库优先；内建同名被覆盖不重复列出）。 */
+function discoverHooks(home = homedir()) {
+	const paths = hookScriptPaths(home);
+	const seen = /* @__PURE__ */ new Map();
+	for (const name of dirScriptNames(paths.userDir)) {
+		const mod = loadHookScript(name, home);
+		if (mod === void 0) continue;
+		seen.set(name, {
+			name,
+			source: "user",
+			fns: exportedHookFns(mod)
+		});
+	}
+	for (const name of dirScriptNames(paths.builtinDir)) {
+		if (seen.has(name)) continue;
+		const mod = loadHookScript(name, home);
+		if (mod === void 0) continue;
+		seen.set(name, {
+			name,
+			source: "builtin",
+			fns: exportedHookFns(mod)
+		});
+	}
+	return [...seen.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+/** 模块导出面的钩子函数名（typeof function 且非下划线开头）。 */
+function exportedHookFns(mod) {
+	return Object.keys(mod).filter((k) => !k.startsWith("_") && typeof mod[k] === "function").sort();
+}
 function isAsyncIterable(v) {
 	return v !== null && typeof v === "object" && Symbol.asyncIterator in v;
 }
@@ -2693,6 +2755,65 @@ async function resolveHookValue(fnName, opts) {
 	if (typeof awaited !== "string" || awaited === "") throw new HookMissingError();
 	return awaited;
 }
+/** 脚本名合法性（资源标识符；防路径逃逸）。 */
+function validHookName(name) {
+	return /^[a-z][a-z0-9_-]{0,63}$/.test(name);
+}
+function userHookPath(name, home = homedir()) {
+	return join(hookScriptPaths(home).userDir, `${name}.cjs`);
+}
+/**
+* 安装用户 hooks 脚本（写入 ~/.aifly/hooks/<name>.cjs 并校验可加载、
+* 至少导出一个钩子函数）。内建同名允许覆盖（用户库优先语义）。
+*/
+function installUserHook(name, content, home = homedir()) {
+	if (!validHookName(name)) throw new Error(`invalid hook script name '${name}' (lowercase identifier, 1-64 chars)`);
+	const paths = hookScriptPaths(home);
+	mkdirSync(paths.userDir, { recursive: true });
+	const path = userHookPath(name, home);
+	writeFileSync(path, content, { mode: 384 });
+	const mod = loadHookScript(name, home);
+	if (mod === void 0) {
+		rmSync(path, { force: true });
+		throw new Error("hook script failed to load (syntax error or non-object export)");
+	}
+	const fns = exportedHookFns(mod);
+	if (fns.length === 0) {
+		rmSync(path, { force: true });
+		throw new Error("hook script exports no hook functions (named function exports required)");
+	}
+	return {
+		name,
+		path,
+		fns
+	};
+}
+/** 删除用户脚本（内建库不可删；未命中报错）。 */
+function removeUserHook(name, home = homedir()) {
+	const path = userHookPath(name, home);
+	if (!existsSync(path)) {
+		const builtin = join(hookScriptPaths(home).builtinDir, `${name}.cjs`);
+		if (existsSync(builtin)) throw new Error(`'${name}' is a builtin hook script (cannot be removed)`);
+		throw new Error(`hook script '${name}' not found`);
+	}
+	rmSync(path, { force: true });
+	return { path };
+}
+/** 读取用户脚本内容（get/show；内建脚本返回包内内容）。 */
+function readHookScript(name, home = homedir()) {
+	const user = userHookPath(name, home);
+	if (existsSync(user)) return {
+		path: user,
+		source: "user",
+		content: readFileSync(user, "utf8")
+	};
+	const builtin = join(hookScriptPaths(home).builtinDir, `${name}.cjs`);
+	if (existsSync(builtin)) return {
+		path: builtin,
+		source: "builtin",
+		content: readFileSync(builtin, "utf8")
+	};
+}
 //#endregion
 //#region src/provider/rewrite.ts
 /** 拼接/断言失败（protocol_error 语义）。 */
@@ -7696,6 +7817,44 @@ function createRpcRouter(deps) {
 				list: rpc.provider.keys.list.handler(() => ({ keys: host.providerStore().listKeys().map(keyView) })),
 				revoke: rpc.provider.keys.revoke.handler(({ input }) => ({ key: keyView(host.providerStore().revokeKey(input.keyId)) }))
 			},
+			hooks: {
+				list: rpc.provider.hooks.list.handler(() => ({ hooks: discoverHooks(home()).map((h) => ({
+					name: h.name,
+					source: h.source,
+					fns: h.fns
+				})) })),
+				get: rpc.provider.hooks.get.handler(({ input }) => {
+					const found = readHookScript(input.name, home());
+					if (found === void 0) throw new DomainError("NOT_FOUND", `error: hook script '${input.name}' not found`);
+					return {
+						name: input.name,
+						source: found.source,
+						path: found.path,
+						content: found.content
+					};
+				}),
+				add: rpc.provider.hooks.add.handler(({ input }) => {
+					try {
+						const installed = installUserHook(input.name, input.content, home());
+						return {
+							name: installed.name,
+							path: installed.path,
+							fns: installed.fns
+						};
+					} catch (err) {
+						throw new DomainError("INVALID_INPUT", err.message);
+					}
+				}),
+				remove: rpc.provider.hooks.remove.handler(({ input }) => {
+					try {
+						removeUserHook(input.name, home());
+						return { removed: true };
+					} catch (err) {
+						const msg = err.message;
+						throw new DomainError(msg.includes("not found") || msg.includes("builtin") ? "NOT_FOUND" : "INVALID_INPUT", msg);
+					}
+				})
+			},
 			secrets: {
 				list: rpc.provider.secrets.list.handler(() => ({ secrets: SecretsStore.open(host.providerDataDir).list() })),
 				set: rpc.provider.secrets.set.handler(({ input }) => ({ secret: SecretsStore.open(host.providerDataDir).set(input.name, input.value, { ...input.bearerPrefix !== void 0 ? { bearerPrefix: input.bearerPrefix } : {} }) })),
@@ -8690,6 +8849,8 @@ async function assembleApp(deps) {
 	else {
 		log.info(`tray + app window ready (v${readPackageVersion(root)})`);
 		log.info(`ui entry (one-time token): ${uiUrl}`);
+		const extraTokens = Number.parseInt(process.env.AIFLY_EXTRA_UI_TOKEN ?? "0", 10) || 0;
+		for (let i = 0; i < extraTokens && i < 16; i += 1) log.info(`ui entry (extra one-time token): ${webServer.uiUrl(port)}`);
 	}
 	return {
 		host,

package/dist/{common-DGktbuQT.mjs → common-B6U1vLFw.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as resolveRelayUrls, t as loadConfig } from "./config-BlZnFqx7.mjs";
-import { t as ProviderStore } from "./store-z7qZO_5S.mjs";
-import { t as loadSettings } from "./settings-D1Ukj8bF.mjs";
+import { t as ProviderStore } from "./store-DxU0bd_u.mjs";
+import { t as loadSettings } from "./settings-CY-bC0MJ.mjs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 //#region src/cli/commands/provider/common.ts

package/dist/{common-BerjPDN0.mjs → common-CwlJNk3L.mjs}

@@ -1,6 +1,6 @@
 import { n as resolveRelayUrls, t as loadConfig } from "./config-BlZnFqx7.mjs";
 import { n as loadSdk, t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { t as loadSettings } from "./settings-D1Ukj8bF.mjs";
+import { t as loadSettings } from "./settings-CY-bC0MJ.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/common.ts
 function ctxOut(ctx) {

package/dist/{daemon-z7hZDf5X.mjs → daemon-iqO29D7K.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError, t as CliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { r as settingsPath, t as loadSettings } from "./settings-D1Ukj8bF.mjs";
+import { r as settingsPath, t as loadSettings } from "./settings-CY-bC0MJ.mjs";
 import { a as killHard, c as terminateGracefully, i as isAlive, l as writeLastStart, n as daemonDir, o as readLastStart, r as ensureDaemonDir, s as readPid, t as clearPid, u as writePid } from "./daemon-state-CYkiW3SA.mjs";
-import { r as openStore } from "./common-DGktbuQT.mjs";
+import { r as openStore } from "./common-B6U1vLFw.mjs";
 import { openSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { isAbsolute, resolve } from "node:path";
@@ -99,7 +99,7 @@ async function start(startArgv, home) {
 	process.on("exit", () => {
 		clearPid(home);
 	});
-	const { run: serveRun } = await import("./serve-CEmNAhX5.mjs");
+	const { run: serveRun } = await import("./serve-B4f79Eqq.mjs");
 	return serveRun([...startArgv], { homedir: home });
 }
 /** 后台 pid（活性核验；陈旧 pidfile 就地清理返回 null）。 */

package/dist/{forget-zXXMWRPE.mjs → forget-BIorc8Rx.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as removeKeyring, n as consumersRoot } from "./store-DUMRSQVn.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-BerjPDN0.mjs";
+import { d as removeKeyring, n as consumersRoot } from "./store-DCLn0Df-.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-CwlJNk3L.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/forget.ts
 async function run(argv, ctx = {}) {

package/dist/{group-DxTSU3w2.mjs → group-C13I2bCR.mjs}

@@ -1,6 +1,6 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as str, l as resolveDataDir, n as multi, r as openStore, s as parsePositiveInt } from "./common-DGktbuQT.mjs";
+import { d as str, l as resolveDataDir, n as multi, r as openStore, s as parsePositiveInt } from "./common-B6U1vLFw.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/group.ts
 const SPEC = {

package/dist/{hooks-Da7bL31j.mjs → hooks-BeBzkBL-.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as str, l as resolveDataDir } from "./common-DGktbuQT.mjs";
+import { d as str, l as resolveDataDir } from "./common-B6U1vLFw.mjs";
 import { a as removeUserHook, i as readHookScript, n as disposeHookSubscriptions, o as resolveHookValue, r as installUserHook, t as discoverHooks } from "./hook-CvAMGts4.mjs";
-import { t as SecretsStore } from "./secrets-BkwvIX0M.mjs";
+import { t as SecretsStore } from "./secrets-bHJBznMX.mjs";
 import { readFileSync } from "node:fs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/hooks.ts

package/dist/{import-DVD6ODYu.mjs → import-BhasJTGS.mjs}

@@ -1,9 +1,9 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot, s as listKeyrings } from "./store-DUMRSQVn.mjs";
-import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-BerjPDN0.mjs";
-import { a as importLink, i as formatLinkPreview, n as decodeShareLink, r as formatKeyringSummary } from "./join-BjpRt0Tj.mjs";
-import { n as createFabricProviderTransport, t as startEngine } from "./runtime-CJWL72hJ.mjs";
+import { n as consumersRoot, s as listKeyrings } from "./store-DCLn0Df-.mjs";
+import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-CwlJNk3L.mjs";
+import { a as importLink, i as formatLinkPreview, n as decodeShareLink, r as formatKeyringSummary } from "./join-DiVTFi59.mjs";
+import { n as createFabricProviderTransport, t as startEngine } from "./runtime-D8P29hIl.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/import.ts
 async function run(argv, ctx = {}) {

package/dist/{join-BvMm1-Qz.mjs → join-BHhCLh9B.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot } from "./store-DUMRSQVn.mjs";
-import { n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-BerjPDN0.mjs";
-import { o as joinDevice } from "./join-BjpRt0Tj.mjs";
+import { n as consumersRoot } from "./store-DCLn0Df-.mjs";
+import { n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-CwlJNk3L.mjs";
+import { o as joinDevice } from "./join-DiVTFi59.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/join.ts
 async function run(argv, ctx = {}) {

package/dist/{join-BjpRt0Tj.mjs → join-DiVTFi59.mjs}

@@ -1,7 +1,7 @@
 import { t as CliError } from "./errors-BGtxPkM7.mjs";
-import { o as decodeZ32, s as randomZ32 } from "./rpc-contract-eOK7IGzh.mjs";
+import { o as decodeZ32, s as randomZ32 } from "./rpc-contract-BXviZUtF.mjs";
 import { l as SERVICE_ENTRY_SCHEMA } from "./frames-BDz8buix.mjs";
-import { a as hasFabricIdentity, c as loadKeyring, f as saveKeyring, h as upsertKey, i as findKeyringDir, l as mergeImportView, o as keyringDir, r as fabricDir } from "./store-DUMRSQVn.mjs";
+import { a as hasFabricIdentity, c as loadKeyring, f as saveKeyring, h as upsertKey, i as findKeyringDir, l as mergeImportView, o as keyringDir, r as fabricDir } from "./store-DCLn0Df-.mjs";
 import { existsSync, mkdirSync, renameSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import { z } from "zod";

package/dist/{key-BvFO4hCw.mjs → key-DYeTZ7MI.mjs}

@@ -1,6 +1,6 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { c as requireString, d as str, l as resolveDataDir, r as openStore } from "./common-DGktbuQT.mjs";
+import { c as requireString, d as str, l as resolveDataDir, r as openStore } from "./common-B6U1vLFw.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/key.ts
 const SPEC = {

package/dist/{key-DHyfw_xd.mjs → key-DdZsNmo_.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot } from "./store-DUMRSQVn.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-BerjPDN0.mjs";
-import { r as formatKeyringSummary, t as addKey } from "./join-BjpRt0Tj.mjs";
+import { n as consumersRoot } from "./store-DCLn0Df-.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-CwlJNk3L.mjs";
+import { r as formatKeyringSummary, t as addKey } from "./join-DiVTFi59.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/key.ts
 async function run(argv, ctx = {}) {

package/dist/{local-test-CPOZODTW.mjs → local-test-B1ys1pNo.mjs}

@@ -1,4 +1,4 @@
-import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-eOK7IGzh.mjs";
+import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-BXviZUtF.mjs";
 //#region src/consumer/local-test.ts
 const DEFAULT_TIMEOUT_MS = 2e4;
 const BODY_EXCERPT_MAX = 2e3;

package/dist/{models-dev-DhEP4LJH.mjs → models-dev-DPT_BK_V.mjs}

@@ -1,4 +1,4 @@
-import { t as PRESET_SCHEMA } from "./rpc-contract-eOK7IGzh.mjs";
+import { t as PRESET_SCHEMA } from "./rpc-contract-BXviZUtF.mjs";
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";

package/dist/{mux-BQ1w82tz.mjs → mux-DlwEK4Tt.mjs}

@@ -1,4 +1,4 @@
-import { s as randomZ32 } from "./rpc-contract-eOK7IGzh.mjs";
+import { s as randomZ32 } from "./rpc-contract-BXviZUtF.mjs";
 import { a as FRAME_TYPE_NAME, d as isKnownFrameType, i as FRAME_TYPE, r as FRAME_HEADER_SCHEMAS, t as ERROR_CODE, u as classifySchemaFailure } from "./frames-BDz8buix.mjs";
 //#region src/wire/codec.ts
 const WIRE_MAGIC_PREFIX = "aifly";

package/dist/{ports-Bs8NpX1c.mjs → ports-DDM5bbJg.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { m as setPort, n as consumersRoot, s as listKeyrings } from "./store-DUMRSQVn.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-BerjPDN0.mjs";
+import { m as setPort, n as consumersRoot, s as listKeyrings } from "./store-DCLn0Df-.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-CwlJNk3L.mjs";
 import { i as validatePortArg, n as desiredPortFor } from "./ports-pI59MtmI.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/ports.ts

package/dist/{presets-B339R3JU.mjs → presets-Do5DWXfQ.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { t as loadSettings } from "./settings-D1Ukj8bF.mjs";
-import { n as loadCuratedPresets, r as modelsDevCachePath, t as fetchModelsDevPresets } from "./models-dev-DhEP4LJH.mjs";
+import { t as loadSettings } from "./settings-CY-bC0MJ.mjs";
+import { n as loadCuratedPresets, r as modelsDevCachePath, t as fetchModelsDevPresets } from "./models-dev-DPT_BK_V.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/presets.ts
 const SPEC = { json: { type: "boolean" } };

package/dist/{revoke-CA4VYdTU.mjs → revoke-6lrZkjN4.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { d as str, l as resolveDataDir, u as resolvedRelayUrls } from "./common-DGktbuQT.mjs";
-import { t as openExistingFabric } from "./serve-CvGVQszo.mjs";
+import { d as str, l as resolveDataDir, u as resolvedRelayUrls } from "./common-B6U1vLFw.mjs";
+import { t as openExistingFabric } from "./serve-C8VRRJrt.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/revoke.ts
 const SPEC = {

package/dist/{rewrite-zdPePt_u.mjs → rewrite-vGrkDZx8.mjs}

@@ -1,6 +1,6 @@
-import { a as routeLocalPrefix } from "./rpc-contract-eOK7IGzh.mjs";
+import { a as routeLocalPrefix } from "./rpc-contract-BXviZUtF.mjs";
 import { n as FORBIDDEN_REQ_HEADER_NAMES } from "./frames-BDz8buix.mjs";
-import { a as parseUpstreamUrl, c as matchRequestPath, o as expandUriTemplate, s as compileMatchPattern } from "./store-z7qZO_5S.mjs";
+import { a as parseUpstreamUrl, c as matchRequestPath, o as expandUriTemplate, s as compileMatchPattern } from "./store-DxU0bd_u.mjs";
 import { o as resolveHookValue } from "./hook-CvAMGts4.mjs";
 import "node:module";
 import "node:fs";

package/dist/{route-test-D8se2bKr.mjs → route-test-DfGzFjKw.mjs}

@@ -1,6 +1,6 @@
-import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-eOK7IGzh.mjs";
-import { t as formProbe } from "./local-test-CPOZODTW.mjs";
-import { i as buildUpstreamRequest, t as PathNotOfferedError } from "./rewrite-zdPePt_u.mjs";
+import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-BXviZUtF.mjs";
+import { t as formProbe } from "./local-test-B1ys1pNo.mjs";
+import { i as buildUpstreamRequest, t as PathNotOfferedError } from "./rewrite-vGrkDZx8.mjs";
 //#region src/provider/route-test.ts
 const DEFAULT_TIMEOUT_MS = 2e4;
 const BODY_EXCERPT_MAX = 2e3;

package/dist/{rpc-contract-eOK7IGzh.mjs → rpc-contract-BXviZUtF.mjs}

@@ -412,6 +412,32 @@ oc.errors(RpcErrorDefinitions).router({
 				localPrefix: z.string().min(1).max(2048).optional()
 			})).output(SERVICE_TEST_RESULT_SCHEMA)
 		},
+		hooks: {
+			/** hooks 脚本清单（内建 + 用户库；fns = 命名规范发现的钩子函数）。 */
+			list: oc.input(z.object({})).output(z.object({ hooks: z.array(z.strictObject({
+				name: z.string(),
+				source: z.enum(["user", "builtin"]),
+				fns: z.array(z.string())
+			})) })),
+			/** 脚本内容查看（含 path）。 */
+			get: oc.input(z.strictObject({ name: z.string().min(1).max(64) })).output(z.strictObject({
+				name: z.string(),
+				source: z.enum(["user", "builtin"]),
+				path: z.string(),
+				content: z.string()
+			})),
+			/** 安装用户脚本（校验：可加载 + 至少一个导出函数；失败回滚）。 */
+			add: oc.input(z.strictObject({
+				name: z.string().min(1).max(64),
+				content: z.string().min(1).max(65536)
+			})).output(z.strictObject({
+				name: z.string(),
+				path: z.string(),
+				fns: z.array(z.string())
+			})),
+			/** 删除（仅用户库；内建拒绝）。 */
+			remove: oc.input(z.strictObject({ name: z.string().min(1).max(64) })).output(z.object({ removed: z.boolean() }))
+		},
 		secrets: {
 			/** 密钥库清单（仅名称与时间戳；值由设计不跨 RPC）。 */
 			list: oc.input(z.object({})).output(z.object({ secrets: z.array(SECRET_ENTRY_SCHEMA) })),

package/dist/{run-Ckodfe9X.mjs → run-BLxeLngt.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError, t as CliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot, s as listKeyrings } from "./store-DUMRSQVn.mjs";
-import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-BerjPDN0.mjs";
-import { n as createFabricProviderTransport, t as startEngine } from "./runtime-CJWL72hJ.mjs";
+import { n as consumersRoot, s as listKeyrings } from "./store-DCLn0Df-.mjs";
+import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-CwlJNk3L.mjs";
+import { n as createFabricProviderTransport, t as startEngine } from "./runtime-D8P29hIl.mjs";
 import { a as killHard, c as terminateGracefully, i as isAlive, l as writeLastStart, n as daemonDir, o as readLastStart, r as ensureDaemonDir, s as readPid, t as clearPid, u as writePid } from "./daemon-state-CYkiW3SA.mjs";
 import { openSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";

package/dist/{runtime-CJWL72hJ.mjs → runtime-D8P29hIl.mjs}

@@ -1,6 +1,6 @@
 import { i as FRAME_TYPE, o as HTTP_METHODS } from "./frames-BDz8buix.mjs";
-import { c as loadKeyring, f as saveKeyring, p as setActualPorts, t as applyCatalog, u as reconcileKeyMetadata } from "./store-DUMRSQVn.mjs";
-import { i as splitBody, n as FabricWireAdapter, t as WireSession } from "./mux-BQ1w82tz.mjs";
+import { c as loadKeyring, f as saveKeyring, p as setActualPorts, t as applyCatalog, u as reconcileKeyMetadata } from "./store-DCLn0Df-.mjs";
+import { i as splitBody, n as FabricWireAdapter, t as WireSession } from "./mux-DlwEK4Tt.mjs";
 import { n as desiredPortFor, r as listenWithFallback, t as LOOPBACK_HOST } from "./ports-pI59MtmI.mjs";
 import { Hono } from "hono";
 import { createAdaptorServer } from "@hono/node-server";

package/dist/{secret-BTq8J0Oj.mjs → secret-Ds6pIoLP.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as str, l as resolveDataDir } from "./common-DGktbuQT.mjs";
-import { t as SecretsStore } from "./secrets-BkwvIX0M.mjs";
+import { d as str, l as resolveDataDir } from "./common-B6U1vLFw.mjs";
+import { t as SecretsStore } from "./secrets-bHJBznMX.mjs";
 import { homedir } from "node:os";
 import process from "node:process";
 import { createInterface } from "node:readline";

package/dist/secrets-G2HTT66T.mjs

@@ -0,0 +1,2 @@
+import { t as SecretsStore } from "./secrets-bHJBznMX.mjs";
+export { SecretsStore };

package/dist/{secrets-BkwvIX0M.mjs → secrets-bHJBznMX.mjs}

@@ -1,5 +1,5 @@
-import { r as SECRET_NAME_SCHEMA } from "./rpc-contract-eOK7IGzh.mjs";
-import { i as ensurePrivateDir, n as StoreError, r as atomicWriteFileSync } from "./store-z7qZO_5S.mjs";
+import { r as SECRET_NAME_SCHEMA } from "./rpc-contract-BXviZUtF.mjs";
+import { i as ensurePrivateDir, n as StoreError, r as atomicWriteFileSync } from "./store-DxU0bd_u.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { z } from "zod";

package/dist/{serve-CEmNAhX5.mjs → serve-B4f79Eqq.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { d as str, l as resolveDataDir, u as resolvedRelayUrls } from "./common-DGktbuQT.mjs";
-import { n as startProviderDaemon } from "./serve-CvGVQszo.mjs";
+import { d as str, l as resolveDataDir, u as resolvedRelayUrls } from "./common-B6U1vLFw.mjs";
+import { n as startProviderDaemon } from "./serve-C8VRRJrt.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/serve.ts
 const SPEC = {

package/dist/{serve-CvGVQszo.mjs → serve-C8VRRJrt.mjs}

@@ -1,9 +1,9 @@
 import { c as RESP_META_HEADER_WHITELIST, i as FRAME_TYPE, s as REJECTED_CODE, t as ERROR_CODE } from "./frames-BDz8buix.mjs";
 import { n as loadSdk } from "./proxy-D7VMUVEg.mjs";
-import { i as ensurePrivateDir, r as atomicWriteFileSync, t as ProviderStore } from "./store-z7qZO_5S.mjs";
-import { n as FabricWireAdapter, r as DEFAULT_BODY_CHUNK_BYTES, t as WireSession } from "./mux-BQ1w82tz.mjs";
-import { t as SecretsStore } from "./secrets-BkwvIX0M.mjs";
-import { a as collectEnvVarNames, i as buildUpstreamRequest, n as RewriteError, r as SecretMissingError, s as buildServiceEntry, t as PathNotOfferedError } from "./rewrite-zdPePt_u.mjs";
+import { i as ensurePrivateDir, r as atomicWriteFileSync, t as ProviderStore } from "./store-DxU0bd_u.mjs";
+import { n as FabricWireAdapter, r as DEFAULT_BODY_CHUNK_BYTES, t as WireSession } from "./mux-DlwEK4Tt.mjs";
+import { t as SecretsStore } from "./secrets-bHJBznMX.mjs";
+import { a as collectEnvVarNames, i as buildUpstreamRequest, n as RewriteError, r as SecretMissingError, s as buildServiceEntry, t as PathNotOfferedError } from "./rewrite-vGrkDZx8.mjs";
 import { appendFileSync, existsSync, readFileSync, readdirSync, watch } from "node:fs";
 import "node:os";
 import { dirname, join } from "node:path";

package/dist/{service-CBURGJU1.mjs → service-CYkpuJuc.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { a as parseMatchSpec, d as str, i as parseHeaderSetSpec, l as resolveDataDir, n as multi, o as parsePortNumber, r as openStore, t as buildRewrite } from "./common-DGktbuQT.mjs";
-import { n as loadCuratedPresets } from "./models-dev-DhEP4LJH.mjs";
+import { a as parseMatchSpec, d as str, i as parseHeaderSetSpec, l as resolveDataDir, n as multi, o as parsePortNumber, r as openStore, t as buildRewrite } from "./common-B6U1vLFw.mjs";
+import { n as loadCuratedPresets } from "./models-dev-DPT_BK_V.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/service.ts
 const SPEC = {
@@ -225,8 +225,8 @@ async function test(options, positionals, home) {
 		formRaw = (localPrefix !== void 0 ? routes.find((r) => r.localPrefix === localPrefix) : routes.length === 1 ? routes[0] : void 0)?.forms[0] ?? "openai-chat";
 	}
 	if (!ROUTE_FORMS.includes(formRaw)) throw new UsageError(`error: --form must be one of ${ROUTE_FORMS.join(", ")}`);
-	const { testServiceRoute } = await import("./route-test-D8se2bKr.mjs");
-	const { SecretsStore } = await import("./secrets-DtqxPHvY.mjs");
+	const { testServiceRoute } = await import("./route-test-DfGzFjKw.mjs");
+	const { SecretsStore } = await import("./secrets-G2HTT66T.mjs");
 	const secretsStore = SecretsStore.open(dataDir);
 	const hitLocalPrefix = options["local-prefix"] !== void 0 ? str(options["local-prefix"]) : (() => {
 		const routes = (service.routes ?? []).filter((r) => r.mode !== "pattern");

package/dist/{settings-BwDXTwUJ.mjs → settings-CSran7QD.mjs}

@@ -1,6 +1,6 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as saveSettings, r as settingsPath, t as loadSettings } from "./settings-D1Ukj8bF.mjs";
+import { n as saveSettings, r as settingsPath, t as loadSettings } from "./settings-CY-bC0MJ.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/settings.ts
 const SPEC = { default: { type: "boolean" } };

package/dist/{settings-D1Ukj8bF.mjs → settings-CY-bC0MJ.mjs}

@@ -1,5 +1,5 @@
-import { i as SETTINGS_SCHEMA } from "./rpc-contract-eOK7IGzh.mjs";
-import { i as ensurePrivateDir, r as atomicWriteFileSync } from "./store-z7qZO_5S.mjs";
+import { i as SETTINGS_SCHEMA } from "./rpc-contract-BXviZUtF.mjs";
+import { i as ensurePrivateDir, r as atomicWriteFileSync } from "./store-DxU0bd_u.mjs";
 import { readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";

package/dist/{share-CNYqhoFY.mjs → share-B94HhX_b.mjs}

@@ -2,10 +2,10 @@ import { r as reportCliError, t as CliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv, r as parseDurationMs, t as assertDurationRange } from "./args-CSxXW9eD.mjs";
 import { l as SERVICE_ENTRY_SCHEMA } from "./frames-BDz8buix.mjs";
 import { t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { n as StoreError } from "./store-z7qZO_5S.mjs";
-import { c as requireString, d as str, l as resolveDataDir, r as openStore, u as resolvedRelayUrls } from "./common-DGktbuQT.mjs";
-import { t as openExistingFabric } from "./serve-CvGVQszo.mjs";
-import { s as buildServiceEntry } from "./rewrite-zdPePt_u.mjs";
+import { n as StoreError } from "./store-DxU0bd_u.mjs";
+import { c as requireString, d as str, l as resolveDataDir, r as openStore, u as resolvedRelayUrls } from "./common-B6U1vLFw.mjs";
+import { t as openExistingFabric } from "./serve-C8VRRJrt.mjs";
+import { s as buildServiceEntry } from "./rewrite-vGrkDZx8.mjs";
 import { homedir } from "node:os";
 import { z } from "zod";
 //#region src/provider/link.ts