coding-tool-x 3.8.9 → 3.9.0

package/src/platforms/drivers/codex/channels-implementation.js

@@ -2,8 +2,8 @@ const fs = require('fs');
 const path = require('path');
 const crypto = require('crypto');
 const toml = require('toml');
-const tomlStringify = require('@iarna/toml').stringify;
 const { PATHS } = require('../../../config/paths');
+const { writeTomlFile } = require('../../../utils/native-config-patcher');
 const { getCodexDir } = require('./config');
 const { isProxyConfig, readConfig } = require('./native-config-implementation');
 const { syncCodexUserEnvironment } = require('./env-manager');
@@ -175,21 +175,24 @@ function syncAllChannelEnvVars() {
   }
 }
 
-function writeAnnotatedCodexConfig(configPath, config, comments = []) {
-  let tomlContent = tomlStringify(config);
-  if (comments.length > 0) {
-    tomlContent = comments.join('\n') + '\n\n' + tomlContent;
-  }
-  fs.writeFileSync(configPath, tomlContent, 'utf8');
+function writeAnnotatedCodexConfig(configPath, config) {
+  writeTomlFile(configPath, config, { atomic: true });
 }
 
-function pruneManagedProviders(existingProviders, currentProviderKey, allChannels) {
-  const knownKeys = new Set(allChannels.map(ch => ch.providerKey).filter(Boolean));
-  for (const key of Object.keys(existingProviders)) {
-    if (key === 'cc-proxy' || (key !== currentProviderKey && knownKeys.has(key))) {
-      delete existingProviders[key];
-    }
+function mergeCodexProviderConfig(existing = {}, channel = {}) {
+  const provider = {
+    ...existing,
+    name: channel.name,
+    base_url: channel.baseUrl,
+    wire_api: channel.wireApi || 'responses',
+    env_key: CODEX_MANAGED_ENV_KEY,
+    requires_openai_auth: channelRequiresOpenaiAuth(channel)
+  };
+  delete provider.query_params;
+  if (channel.queryParams && Object.keys(channel.queryParams).length > 0) {
+    provider.query_params = channel.queryParams;
   }
+  return provider;
 }
 
 function writeCodexConfigForMultiChannel(channels) {
@@ -201,8 +204,7 @@ function writeCodexConfigForMultiChannel(channels) {
     try {
       config = toml.parse(fs.readFileSync(configPath, 'utf8'));
     } catch (err) {
-      console.warn('[Codex Channels] Failed to parse existing config.toml:', err.message);
-      config = {};
+      throw new Error(`Failed to parse existing config.toml: ${err.message}`);
     }
   }
 
@@ -229,26 +231,17 @@ function writeCodexConfigForMultiChannel(channels) {
     config.model_provider = primary.providerKey;
 
     for (const ch of enabledChannels) {
-      config.model_providers[ch.providerKey] = {
-        name: ch.name,
-        base_url: ch.baseUrl,
-        wire_api: ch.wireApi || 'responses',
-        env_key: CODEX_MANAGED_ENV_KEY,
-        requires_openai_auth: channelRequiresOpenaiAuth(ch)
-      };
-      if (ch.queryParams && Object.keys(ch.queryParams).length > 0) {
-        config.model_providers[ch.providerKey].query_params = ch.queryParams;
-      }
+      config.model_providers[ch.providerKey] = mergeCodexProviderConfig(
+        config.model_providers[ch.providerKey],
+        ch
+      );
     }
   } else {
     clearManagedCodexConfig();
     return;
   }
 
-  writeAnnotatedCodexConfig(configPath, config, [
-    '# Codex Configuration',
-    '# Managed by Coding-Tool (multi-channel)'
-  ]);
+  writeAnnotatedCodexConfig(configPath, config);
 }
 
 // ── CodexChannelService ──
@@ -315,6 +308,12 @@ class CodexChannelService extends BaseChannelService {
         this._applyToNativeSettings(_next);
         return;
       }
+      if (_old.enabled !== false && _next.enabled === false) {
+        const activeChannel = resolveCurrentManagedChannel(allChannels);
+        if (activeChannel) this._applyToNativeSettings(activeChannel);
+        else clearManagedCodexConfig();
+        return;
+      }
       const activeChannel = resolveCurrentManagedChannel(allChannels);
       if (_next.enabled !== false && activeChannel?.id === _next.id) {
         this._applyToNativeSettings(_next);
@@ -347,7 +346,7 @@ class CodexChannelService extends BaseChannelService {
       try {
         config = toml.parse(fs.readFileSync(configPath, 'utf8'));
       } catch (err) {
-        config = {};
+        throw new Error(`Failed to parse existing config.toml: ${err.message}`);
       }
     }
 
@@ -356,26 +355,12 @@ class CodexChannelService extends BaseChannelService {
     if (!config.model_providers || typeof config.model_providers !== 'object') {
       config.model_providers = {};
     }
-    const data = this.loadChannels();
-    pruneManagedProviders(config.model_providers, channel.providerKey, data.channels);
-
-    config.model_providers[channel.providerKey] = {
-      name: channel.name,
-      base_url: channel.baseUrl,
-      wire_api: channel.wireApi || 'responses',
-      env_key: CODEX_MANAGED_ENV_KEY,
-      requires_openai_auth: channelRequiresOpenaiAuth(channel)
-    };
-
-    if (channel.queryParams && Object.keys(channel.queryParams).length > 0) {
-      config.model_providers[channel.providerKey].query_params = channel.queryParams;
-    }
+    config.model_providers[channel.providerKey] = mergeCodexProviderConfig(
+      config.model_providers[channel.providerKey],
+      channel
+    );
 
-    writeAnnotatedCodexConfig(configPath, config, [
-      '# Codex Configuration',
-      '# Managed by Coding-Tool',
-      `# Current provider: ${channel.name}`
-    ]);
+    writeAnnotatedCodexConfig(configPath, config);
     console.log(`[Codex Channels] Applied channel ${channel.name} to config.toml`);
     syncAllChannelEnvVars();
   }

package/src/platforms/drivers/codex/native-config-implementation.js

@@ -1,7 +1,7 @@
 const fs = require('fs');
 const path = require('path');
 const toml = require('toml');
-const tomlStringify = require('@iarna/toml').stringify;
+const { writeTomlFile } = require('../../../utils/native-config-patcher');
 const { NATIVE_PATHS } = require('../../../config/paths');
 const { syncCodexUserEnvironment } = require('./env-manager');
 const DEFAULT_NATIVE_PATHS = NATIVE_PATHS.codex;
@@ -83,53 +83,10 @@ function readConfig() {
   }
 }
 
-// 将配置对象转换为 TOML 字符串
-function configToToml(config) {
-  let content = `# Codex Configuration
-# Managed by Coding-Tool (Proxy Mode)
-
-`;
-
-  // 写入顶级字段
-  for (const [key, value] of Object.entries(config)) {
-    if (key === 'model_providers') continue; // 稍后处理
-    if (typeof value === 'string') {
-      content += `${key} = "${value}"\n`;
-    } else if (typeof value === 'boolean') {
-      content += `${key} = ${value}\n`;
-    } else if (typeof value === 'number') {
-      content += `${key} = ${value}\n`;
-    }
-  }
-
-  content += '\n';
-
-  // 写入 model_providers
-  if (config.model_providers) {
-    for (const [providerKey, providerConfig] of Object.entries(config.model_providers)) {
-      content += `[model_providers.${providerKey}]\n`;
-      for (const [key, value] of Object.entries(providerConfig)) {
-        if (typeof value === 'string') {
-          content += `${key} = "${value}"\n`;
-        } else if (typeof value === 'boolean') {
-          content += `${key} = ${value}\n`;
-        } else if (typeof value === 'number') {
-          content += `${key} = ${value}\n`;
-        }
-      }
-      content += '\n';
-    }
-  }
-
-  return content;
-}
-
 // 写入 config.toml
 function writeConfig(config) {
   try {
-    const safeConfig = JSON.parse(JSON.stringify(config || {}));
-    const content = tomlStringify(safeConfig);
-    fs.writeFileSync(getConfigPath(), content, 'utf8');
+    writeTomlFile(getConfigPath(), config || {}, { atomic: true });
   } catch (err) {
     throw new Error('Failed to write config.toml: ' + err.message);
   }
@@ -254,12 +211,7 @@ function setProxyConfig(proxyPort) {
     }
 
     // 读取当前配置（不存在时使用空配置）
-    let config;
-    try {
-      config = readConfig();
-    } catch (err) {
-      config = {};
-    }
+    const config = configExists() ? readConfig() : {};
 
     // 设置 model_provider 为 proxy
     config.model_provider = 'cc-proxy';

package/src/platforms/drivers/dsh/api-operations.js

@@ -186,7 +186,7 @@ function createDriver(context = {}) {
 
   // Keep the aggregate DSH API driver compatible with the manifest consistency
   // contract. Actual descriptor requests are still dispatched by capability.
-  for (const operation of ['list', 'current', 'enabled', 'create', 'update', 'remove', 'applyToSettings', 'sync', 'order', 'models', 'probeModels', 'speedTest', 'speedTestAll']) {
+  for (const operation of ['list', 'current', 'enabled', 'create', 'update', 'remove', 'applyToSettings', 'sync', 'order', 'models', 'probeModels', 'speedTest']) {
     driver[operation] = (...args) => channels[operation](...args);
   }
   for (const operation of ['status', 'start', 'stop']) {

package/src/platforms/drivers/dsh/channels-implementation.js

@@ -4,11 +4,12 @@ const fs = require('fs');
 const path = require('path');
 const { getPlatformStatePath: resolveStatePath } = require('../../../config/paths');
 const BaseChannelService = require('../../../shared/base-channel-service');
+const { writeYamlFile } = require('../../../utils/native-config-patcher');
 const {
   resolvePaths,
   readYamlFile,
   writeAtomic,
-  dumpYaml,
+  DSH_YAML_SOURCE_TAGS,
   isObject
 } = require('./common');
 
@@ -202,7 +203,7 @@ class DshChannelService extends BaseChannelService {
   }
 
   _activeChannel(channels = []) {
-    return channels.find(channel => channel.enabled !== false) || channels[0] || null;
+    return channels.find(channel => channel.enabled !== false) || null;
   }
 
   _onAfterCreate(channel) {
@@ -217,9 +218,8 @@ class DshChannelService extends BaseChannelService {
       this._removeNativeProvider(oldChannel.providerKey);
     }
     const active = this._activeChannel(allChannels);
-    if (active?.id === nextChannel.id || (oldChannel.enabled !== false && nextChannel.enabled === false)) {
-      if (active) this._applyToNativeSettings(active);
-    }
+    if (active) this._applyToNativeSettings(active);
+    else this._removeNativeProvider(nextChannel.providerKey);
   }
 
   _onAfterDelete(channel, allChannels) {
@@ -234,7 +234,11 @@ class DshChannelService extends BaseChannelService {
   }
 
   _writeNativeSettings(settings) {
-    writeAtomic(this.nativePaths.settings, dumpYaml(settings), 0o600);
+    writeYamlFile(this.nativePaths.settings, settings, {
+      atomic: true,
+      mode: 0o600,
+      customTags: DSH_YAML_SOURCE_TAGS
+    });
   }
 
   _removeNativeProvider(providerKey) {
@@ -246,6 +250,15 @@ class DshChannelService extends BaseChannelService {
     if (!Object.prototype.hasOwnProperty.call(providers, key)) return;
     delete providers[key];
     settings['llm-pi-ai'] = { ...llm, providers };
+    const selected = isObject(settings['agent-default-model'])
+      ? { ...settings['agent-default-model'] }
+      : null;
+    if (selected?.provider === key) {
+      delete selected.provider;
+      delete selected.model;
+      if (Object.keys(selected).length > 0) settings['agent-default-model'] = selected;
+      else delete settings['agent-default-model'];
+    }
     this._writeNativeSettings(settings);
   }
 
@@ -255,7 +268,11 @@ class DshChannelService extends BaseChannelService {
     if (!isObject(credentials.refs)) credentials.refs = {};
     credentials.refs[channel.apiKeyEnv] = channel.apiKey || '';
     if (!isObject(credentials.records)) credentials.records = {};
-    writeAtomic(this.nativePaths.credentials, dumpYaml(credentials), 0o600);
+    writeYamlFile(this.nativePaths.credentials, credentials, {
+      atomic: true,
+      mode: 0o600,
+      customTags: DSH_YAML_SOURCE_TAGS
+    });
   }
 
   _providerEntry(channel, baseUrl = channel.baseUrl, models = channel.models) {
@@ -273,7 +290,10 @@ class DshChannelService extends BaseChannelService {
     const settings = this._nativeSettings();
     const llm = isObject(settings['llm-pi-ai']) ? { ...settings['llm-pi-ai'] } : {};
     const providers = isObject(llm.providers) ? { ...llm.providers } : {};
-    providers[channel.providerKey] = this._providerEntry(channel);
+    providers[channel.providerKey] = {
+      ...(isObject(providers[channel.providerKey]) ? providers[channel.providerKey] : {}),
+      ...this._providerEntry(channel)
+    };
     settings['llm-pi-ai'] = { ...llm, providers };
     settings['agent-default-model'] = {
       ...(isObject(settings['agent-default-model']) ? settings['agent-default-model'] : {}),

package/src/platforms/drivers/dsh/channels.js

@@ -149,24 +149,6 @@ function createDriver(context = {}) {
         { authSourceType: 'dsh' }
       );
     }),
-    speedTestAll: request => withAsyncResult(request, 'speedTestAll', async () => {
-      const { testMultipleChannels } = require('../../../server/services/speed-test');
-      const body = bodyOf(request);
-      const channels = implementation.getServiceInstance().getEnabledChannels();
-      const groups = new Map();
-      for (const channel of channels) {
-        const type = channelTypeForSpeed(channel);
-        const group = groups.get(type) || [];
-        group.push(channel);
-        groups.set(type, group);
-      }
-      const groupedResults = await Promise.all([...groups.entries()].map(([type, group]) => (
-        testMultipleChannels(group, body.timeout, type, body.concurrency)
-      )));
-      const resultById = new Map(groupedResults.flat().map(result => [result.channelId, result]));
-      const results = channels.map(channel => resultById.get(channel.id)).filter(Boolean);
-      return { results };
-    }),
     saveOrder: request => withResult(request, 'order', () => {
       const body = bodyOf(request);
       implementation.getServiceInstance().saveChannelOrder(body.order || body.ids || []);

package/src/platforms/drivers/dsh/common.js

@@ -23,6 +23,12 @@ const DSH_YAML_SCHEMA = yaml.DEFAULT_SCHEMA.extend([
   })
 ]);
 
+const DSH_YAML_SOURCE_TAGS = [{
+  tag: 'tag:yaml.org,2002:js',
+  resolve: value => `!!js ${value}`,
+  stringify: item => String(item.value).replace(/^!!js\s*/, '')
+}];
+
 function clone(value) {
   if (value === undefined) return undefined;
   return JSON.parse(JSON.stringify(value));
@@ -548,6 +554,7 @@ module.exports = {
   resolvePaths,
   isObject,
   readYamlFile,
+  DSH_YAML_SOURCE_TAGS,
   readJsonFile,
   fileRevision,
   writeAtomic,

package/src/platforms/drivers/dsh/native-config.js

@@ -1,7 +1,8 @@
 'use strict';
 
 const fs = require('fs');
-const { resolvePaths, readYamlFile, writeAtomic, dumpYaml, mergeSettings, fileRevision, credentialMetadata, redactSecrets, listProfiles, listProfilePlugins, listProfileMcp, listProfilePrompts } = require('./common');
+const { writeYamlFile } = require('../../../utils/native-config-patcher');
+const { resolvePaths, readYamlFile, mergeSettings, fileRevision, credentialMetadata, redactSecrets, listProfiles, listProfilePlugins, listProfileMcp, listProfilePrompts, DSH_YAML_SOURCE_TAGS } = require('./common');
 const { resolveSkillRoots } = require('./resources');
 
 function createDriver(context = {}) {
@@ -35,7 +36,11 @@ function createDriver(context = {}) {
       }
       const current = readYamlFile(paths.settings, {});
       const next = mergeSettings(current, body.namespace, body.patch, body.replace === true);
-      writeAtomic(paths.settings, dumpYaml(next), 0o600);
+      writeYamlFile(paths.settings, next, {
+        atomic: true,
+        mode: 0o600,
+        customTags: DSH_YAML_SOURCE_TAGS
+      });
       return this.getConfig();
     },
     getConfigCapabilities() {

package/src/platforms/drivers/gemini/channels-implementation.js

@@ -3,8 +3,9 @@ const path = require('path');
 const crypto = require('crypto');
 const { PATHS, NATIVE_PATHS } = require('../../../config/paths');
 const { resolveChannelWebsiteUrl } = require('../../../config/channel-preset-websites');
-const { clearNativeOAuth, readNativeOAuth, clearGeminiChannelConfig } = require('../../native-oauth-adapters');
+const { readNativeOAuth, clearGeminiChannelConfig } = require('../../native-oauth-adapters');
 const { normalizeGatewaySourceType } = require('../../../shared/proxy-utils');
+const { readJsoncFile, updateJsoncFile, updateEnvFile } = require('../../../utils/native-config-patcher');
 const {
   createSkippedResult,
   isLocalProxyBaseUrl,
@@ -84,12 +85,16 @@ function applyNativeGeminiOAuth(channel) {
   clearGeminiChannelConfig();
 
   const settingsPath = configuredNative.settings;
-  const settings = readGeminiSettings();
-  settings.security = settings.security || {};
-  settings.security.auth = settings.security.auth || {};
-  settings.security.auth.selectedType = 'oauth-personal';
-  fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
-  fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2), 'utf8');
+  updateJsoncFile(settingsPath, (settings) => {
+    settings.security = settings.security && typeof settings.security === 'object' && !Array.isArray(settings.security)
+      ? settings.security
+      : {};
+    settings.security.auth = settings.security.auth && typeof settings.security.auth === 'object'
+      && !Array.isArray(settings.security.auth)
+      ? settings.security.auth
+      : {};
+    settings.security.auth.selectedType = 'oauth-personal';
+  });
   console.log(`[Gemini Channels] Applied native OAuth channel ${channel.name}`);
   return channel;
 }
@@ -168,14 +173,11 @@ function readExistingGeminiEnv() {
 
 function writeGeminiEnv(env = {}) {
   const envPath = path.join(getGeminiDir(), '.env');
-  const content = Object.entries(env)
-    .map(([key, value]) => `${key}=${value}`)
-    .join('\n');
-
-  fs.writeFileSync(envPath, content ? `${content}\n` : '', 'utf8');
-  if (process.platform !== 'win32') {
-    fs.chmodSync(envPath, 0o600);
-  }
+  const managedKeys = ['GOOGLE_GEMINI_BASE_URL', 'GEMINI_API_KEY', 'GEMINI_MODEL'];
+  updateEnvFile(envPath, Object.fromEntries(managedKeys.map(key => [
+    key,
+    Object.prototype.hasOwnProperty.call(env, key) ? env[key] : undefined
+  ])), { atomic: true, mode: 0o600 });
 }
 
 // 检查是否在代理模式
@@ -515,8 +517,6 @@ function applyChannelToSettings(channelId, channels = null) {
     return applyNativeGeminiOAuth(channel);
   }
 
-  clearNativeOAuth('gemini');
-
   const geminiDir = getGeminiDir();
 
   if (!fs.existsSync(geminiDir)) {
@@ -532,22 +532,16 @@ function applyChannelToSettings(channelId, channels = null) {
 
   // 确保 settings.json 存在并配置正确的认证模式
   const settingsPath = path.join(geminiDir, 'settings.json');
-  let settings = {};
-
-  if (fs.existsSync(settingsPath)) {
-    try {
-      settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
-    } catch (err) {
-      console.warn('[Gemini Channels] Failed to read settings.json, creating new');
-    }
-  }
-
-  // 设置认证模式为 gemini-api-key（第三方 API）
-  settings.security = settings.security || {};
-  settings.security.auth = settings.security.auth || {};
-  settings.security.auth.selectedType = 'gemini-api-key';
-
-  fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2), 'utf8');
+  updateJsoncFile(settingsPath, (settings) => {
+    settings.security = settings.security && typeof settings.security === 'object' && !Array.isArray(settings.security)
+      ? settings.security
+      : {};
+    settings.security.auth = settings.security.auth && typeof settings.security.auth === 'object'
+      && !Array.isArray(settings.security.auth)
+      ? settings.security.auth
+      : {};
+    settings.security.auth.selectedType = 'gemini-api-key';
+  });
 
   console.log(`[Gemini Channels] Applied channel ${channel.name} to .env`);
   return channel;
@@ -600,6 +594,17 @@ function writeGeminiConfigForMultiChannel(allChannels) {
     delete env.GEMINI_API_KEY;
     delete env.GEMINI_MODEL;
     writeGeminiEnv(env);
+    const settingsPath = path.join(geminiDir, 'settings.json');
+    if (fs.existsSync(settingsPath)) {
+      updateJsoncFile(settingsPath, (settings) => {
+        const auth = settings.security?.auth;
+        if (auth?.selectedType === 'gemini-api-key') {
+          delete auth.selectedType;
+          if (Object.keys(auth).length === 0) delete settings.security.auth;
+          if (Object.keys(settings.security).length === 0) delete settings.security;
+        }
+      });
+    }
     return;
   }
 
@@ -611,22 +616,13 @@ function writeGeminiConfigForMultiChannel(allChannels) {
 
   // 确保 settings.json 存在并配置正确的认证模式
   const settingsPath = path.join(geminiDir, 'settings.json');
-  let settings = {};
-
-  if (fs.existsSync(settingsPath)) {
-    try {
-      settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
-    } catch (err) {
-      console.warn('[Gemini Channels] Failed to read settings.json, creating new');
-    }
-  }
-
-  // 设置认证模式为 gemini-api-key（第三方 API）
-  settings.security = settings.security || {};
-  settings.security.auth = settings.security.auth || {};
-  settings.security.auth.selectedType = 'gemini-api-key';
-
-  fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2), 'utf8');
+  updateJsoncFile(settingsPath, (settings) => {
+    settings.security = settings.security && typeof settings.security === 'object' ? settings.security : {};
+    settings.security.auth = settings.security.auth && typeof settings.security.auth === 'object'
+      ? settings.security.auth
+      : {};
+    settings.security.auth.selectedType = 'gemini-api-key';
+  });
 }
 
 // 获取所有启用的渠道（供调度器使用）
@@ -682,7 +678,7 @@ function disableAllChannels() {
   data.channels.forEach(ch => { ch.enabled = false; });
   saveChannels(data);
   if (!getGeminiProxyState().running) {
-    clearGeminiChannelConfig();
+    writeGeminiConfigForMultiChannel(data.channels);
   }
 }
 
@@ -691,11 +687,7 @@ function readGeminiSettings() {
   if (!settingsPath || !fs.existsSync(settingsPath)) {
     return {};
   }
-  try {
-    return JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
-  } catch {
-    return {};
-  }
+  return readJsoncFile(settingsPath);
 }
 
 function normalizeGeminiChannel(channel = {}) {

package/src/platforms/drivers/gemini/native-config-implementation.js

@@ -1,6 +1,7 @@
 const fs = require('fs');
 const path = require('path');
 const { NATIVE_PATHS } = require('../../../config/paths');
+const { readJsoncFile, writeJsoncFile, updateEnvFile } = require('../../../utils/native-config-patcher');
 const DEFAULT_NATIVE_PATHS = NATIVE_PATHS.gemini;
 let nativePaths = DEFAULT_NATIVE_PATHS;
 
@@ -64,25 +65,14 @@ function readEnv() {
   }
 }
 
-// 将环境对象转换为 .env 字符串
-function envToString(env) {
-  let content = '';
-  for (const [key, value] of Object.entries(env)) {
-    content += `${key}=${value}\n`;
-  }
-  return content;
-}
-
 // 写入 .env
 function writeEnv(env) {
   try {
-    const content = envToString(env);
-    fs.writeFileSync(getEnvPath(), content, 'utf8');
-
-    // 设置文件权限为 600 (仅所有者可读写)
-    if (process.platform !== 'win32') {
-      fs.chmodSync(getEnvPath(), 0o600);
-    }
+    const managedKeys = ['GOOGLE_GEMINI_BASE_URL', 'GEMINI_API_KEY', 'GEMINI_MODEL'];
+    updateEnvFile(getEnvPath(), Object.fromEntries(managedKeys.map(key => [
+      key,
+      Object.prototype.hasOwnProperty.call(env || {}, key) ? env[key] : undefined
+    ])), { atomic: true, mode: 0o600 });
   } catch (err) {
     throw new Error('Failed to write .env: ' + err.message);
   }
@@ -94,8 +84,7 @@ function readSettings() {
     if (!settingsExists()) {
       return {};
     }
-    const content = fs.readFileSync(getSettingsPath(), 'utf8');
-    return JSON.parse(content);
+    return readJsoncFile(getSettingsPath());
   } catch (err) {
     throw new Error('Failed to read settings.json: ' + err.message);
   }
@@ -104,8 +93,7 @@ function readSettings() {
 // 写入 settings.json
 function writeSettings(settings) {
   try {
-    const content = JSON.stringify(settings, null, 2);
-    fs.writeFileSync(getSettingsPath(), content, 'utf8');
+    writeJsoncFile(getSettingsPath(), settings);
   } catch (err) {
     throw new Error('Failed to write settings.json: ' + err.message);
   }

package/src/platforms/drivers/generic-native-config.js

@@ -0,0 +1,20 @@
+'use strict';
+
+const { createNativeSnapshotMethods } = require('./native-config-snapshot');
+
+function createDriver(context = {}) {
+  return {
+    platform: context.platform,
+    capability: 'nativeConfig',
+    ...context,
+    ...createNativeSnapshotMethods({}, {
+      platform: context.platform,
+      runtime: context.runtime,
+      manifest: context.manifest,
+      pathContext: context.pathContext,
+      paths: context.paths
+    })
+  };
+}
+
+module.exports = { createDriver };