cortico-world-simple-trpg-check 0.4.2 → 0.4.3

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.4.3 - 2026-11-13
+
+- Save a Jev API key for the selected service directly in the configuration panel. Existing keys and legacy key lookup remain supported.
+
 ## 0.4.2 - 2026-10-21
 
 - Shorten the environment prompt while retaining narrative and reward bookkeeping rules.

package/README.md

@@ -33,7 +33,7 @@ corepack pnpm add --ignore-workspace cortico-world-simple-trpg-check
 
 默认 JEV 模型使用现有技能评分校准。Luna 与其他模型显示“未校准”，按档位代表值取期望；财富与信用评级仍使用专用标尺。
 
-决策服务密钥保存在部署目录的 `.env` 中，配置页的“打开密钥文件”可打开该文件。同一服务的模型共用密钥。填写并保存后，下一次模型请求读取密钥。
+在配置页选择决策服务，输入该服务的 API Key 并点击“保存密钥”。同一服务的模型共用密钥。填写并保存后，下一次模型请求读取密钥。
 
 | 决策服务 | 密钥变量 |
 | --- | --- |

package/dist/webui.js

@@ -183,23 +183,27 @@ async function mountConfig(ctx) {
       }
       if (key === "jevSource") {
         const sourceName = config.jevSource === "openrouter" ? "OpenRouter" : config.jevSource === "custom" ? "\u81EA\u5B9A\u4E49\u670D\u52A1" : "TypeSafe";
-        const keyStatus = ui.msgline(state.keySet ? "\u5BC6\u94A5\u5DF2\u914D\u7F6E" : "\u5BC6\u94A5\u672A\u914D\u7F6E");
-        const open = ui.button(`\u6253\u5F00 ${sourceName} \u5BC6\u94A5\u6587\u4EF6`, {
-          onClick: () => {
-            open.disabled = true;
-            void ctx.invoke("openKeyFile", [config.jevSource]).then(({ file }) => {
-              keyStatus.textContent = `\u5DF2\u6253\u5F00 ${file}`;
-            }).catch((error) => {
-              keyStatus.textContent = `\u6253\u5F00\u5931\u8D25\uFF1A${error instanceof Error ? error.message : String(error)}`;
-              keyStatus.classList.add("bad");
-            }).finally(() => {
-              open.disabled = false;
-            });
-          }
-        });
+        const keyStatus = ui.pill(state.keySet ? "\u5BC6\u94A5\u5DF2\u914D\u7F6E" : "\u5BC6\u94A5\u672A\u914D\u7F6E", state.keySet ? "on" : "off");
+        const input = ui.input({ type: "password", cls: "mono", onCommit: () => saveKey.click() });
+        const saveKey = ui.button("\u4FDD\u5B58\u5BC6\u94A5", { size: "sm", variant: "primary", onClick: () => {
+          if (!input.value.trim()) return;
+          saveKey.disabled = true;
+          void ctx.invoke("saveKey", [config.jevSource, input.value]).then((next) => {
+            state = next;
+            status = "\u5DF2\u4FDD\u5B58";
+            failed = false;
+            render();
+            void ctx.refresh().catch(() => void 0);
+          }).catch((error) => {
+            result.textContent = error instanceof Error ? error.message : "\u4FDD\u5B58\u5931\u8D25";
+            result.classList.add("bad");
+          }).finally(() => {
+            saveKey.disabled = false;
+          });
+        } });
         const keyRow = ui.rowbar();
-        keyRow.append(field, keyStatus, open);
-        fields.appendChild(keyRow);
+        keyRow.append(input, saveKey);
+        fields.append(field, keyStatus, ui.field(`${sourceName} API Key`, keyRow));
       } else fields.appendChild(field);
       if (key === "jevModel" && !hasCalibratedReadout(decisionModel(config))) {
         fields.appendChild(ui.msgline("\u672A\u6821\u51C6\uFF1A\u6280\u80FD\u6C34\u5E73\u6309\u6863\u4F4D\u4EE3\u8868\u503C\u53D6\u671F\u671B\u3002"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cortico-world-simple-trpg-check",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "type": "module",
   "description": "Cortico 的 TRPG 技能检定 World 扩展，使用本地或远程模型评估技能水平，支持 d100 掷骰、组合与对抗检定。",
   "license": "MIT",

package/src/webui/client.ts

@@ -98,21 +98,25 @@ async function mountConfig(ctx: WebUiPanelContext): Promise<void> {
       }
       if (key === 'jevSource') {
         const sourceName = config.jevSource === 'openrouter' ? 'OpenRouter' : config.jevSource === 'custom' ? '自定义服务' : 'TypeSafe';
-        const keyStatus = ui.msgline(state.keySet ? '密钥已配置' : '密钥未配置');
-        const open = ui.button(`打开 ${sourceName} 密钥文件`, {
-          onClick: () => {
-            open.disabled = true;
-            void ctx.invoke<{ file: string }>('openKeyFile', [config.jevSource]).then(({ file }) => {
-              keyStatus.textContent = `已打开 ${file}`;
-            }).catch((error) => {
-              keyStatus.textContent = `打开失败：${error instanceof Error ? error.message : String(error)}`;
-              keyStatus.classList.add('bad');
-            }).finally(() => { open.disabled = false; });
-          },
-        });
+        const keyStatus = ui.pill(state.keySet ? '密钥已配置' : '密钥未配置', state.keySet ? 'on' : 'off');
+        const input = ui.input({ type: 'password', cls: 'mono', onCommit: () => saveKey.click() });
+        const saveKey = ui.button('保存密钥', { size: 'sm', variant: 'primary', onClick: () => {
+          if (!input.value.trim()) return;
+          saveKey.disabled = true;
+          void ctx.invoke<ConfigState>('saveKey', [config.jevSource, input.value]).then(next => {
+            state = next;
+            status = '已保存';
+            failed = false;
+            render();
+            void ctx.refresh().catch(() => undefined);
+          }).catch(error => {
+            result.textContent = error instanceof Error ? error.message : '保存失败';
+            result.classList.add('bad');
+          }).finally(() => { saveKey.disabled = false; });
+        } });
         const keyRow = ui.rowbar();
-        keyRow.append(field, keyStatus, open);
-        fields.appendChild(keyRow);
+        keyRow.append(input, saveKey);
+        fields.append(field, keyStatus, ui.field(`${sourceName} API Key`, keyRow));
       } else fields.appendChild(field);
       if (key === 'jevModel' && !hasCalibratedReadout(decisionModel(config))) {
         fields.appendChild(ui.msgline('未校准：技能水平按档位代表值取期望。'));

package/src/world.ts

@@ -35,7 +35,6 @@ import { formatContest, formatReceipt, type ContestSide, type SkillCheck } from
 import { SystemOneSkillScorer, type SkillScorer } from './model.ts';
 import { budgetViolation, checksLabel, type CheckRequest, type CheckSpec } from './request.ts';
 import { discoverCondaPythonOptions } from './conda-environments.ts';
-import { ensureSecretPlaceholder, openSecretFile } from './secret-file.ts';
 
 const ENV_PROMPT_FILE = fileURLToPath(new URL('./ENV_PROMPT.md', import.meta.url));
 
@@ -175,7 +174,6 @@ export class SimpleTrpgCheckWorld implements World {
     private readonly ctx: WorldContext<SimpleTrpgCheckConfigSection>,
     scorer?: SkillScorer,
     private readonly roll: () => number = () => randomInt(1, 101),
-    private readonly openFile: (path: string) => void | Promise<void> = openSecretFile,
   ) {
     this.scorer = scorer ?? new SystemOneSkillScorer(ctx);
   }
@@ -255,16 +253,19 @@ export class SimpleTrpgCheckWorld implements World {
             return { ok: false, error: error instanceof Error ? error.message : String(error) };
           }
         }
-        if (method === 'openKeyFile') {
+        if (method === 'saveKey') {
           const source = args[0];
           if (source !== this.ctx.cfg.jevSource || this.ctx.cfg.backend !== 'jev') {
             throw new Error('决策服务已改变，请重试');
           }
           const secretName = this.ctx.cfg.jevSource === 'openrouter' ? SIMPLE_TRPG_CHECK_OPENROUTER_SECRET
             : this.ctx.cfg.jevSource === 'custom' ? SIMPLE_TRPG_CHECK_CUSTOM_SECRET : SIMPLE_TRPG_CHECK_TYPESAFE_SECRET;
-          const file = ensureSecretPlaceholder(this.ctx.botDir, secretName);
-          await this.openFile(file);
-          return { file };
+          const value = args[1];
+          if (typeof value !== 'string') throw new Error('密钥须为文本');
+          const key = value.trim();
+          if (/\s/.test(key)) throw new Error('密钥不能包含空白字符');
+          if (key) this.ctx.storeSecret(secretName, key);
+          return { config: { ...this.ctx.cfg }, keySet: this.hasJevKey() };
         }
         throw new Error('未知操作');
       },

package/src/secret-file.ts

@@ -1,23 +0,0 @@
-import { spawn } from 'node:child_process';
-import { appendFileSync, existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-export function ensureSecretPlaceholder(botDir: string, name: string): string {
-  const file = join(botDir, '.env');
-  const contents = existsSync(file) ? readFileSync(file, 'utf8') : '';
-  if (!new RegExp(`^${name}=`, 'm').test(contents)) {
-    const line = `${contents && !contents.endsWith('\n') ? '\n' : ''}${name}=\n`;
-    if (existsSync(file)) appendFileSync(file, line);
-    else writeFileSync(file, line, { mode: 0o600 });
-  }
-  return file;
-}
-
-export function openSecretFile(file: string): Promise<void> {
-  const command = process.platform === 'win32' ? 'notepad.exe' : process.platform === 'darwin' ? 'open' : 'xdg-open';
-  return new Promise((resolve, reject) => {
-    const child = spawn(command, [file], { detached: true, stdio: 'ignore' });
-    child.once('error', reject);
-    child.once('spawn', () => { child.unref(); resolve(); });
-  });
-}