weifuwu 0.82.1 → 0.82.2

package/dist/ai/agent.d.ts

@@ -30,6 +30,9 @@ export interface AgentTool {
 }
 export interface AgentConfig {
     model?: string;
+    /** BYOK：per-call 覆盖全局 apiKey/baseUrl（租户自带模型 Key——商业化 G4） */
+    apiKey?: string;
+    baseUrl?: string;
     systemPrompt: string;
     tools: AgentTool[];
     /** 默认 10 */

package/dist/ai/types.d.ts

@@ -140,6 +140,10 @@ export interface ToolDefinition {
 }
 export interface ChatParams {
     model?: string;
+    /** BYOK：per-call 覆盖全局 apiKey（租户自带模型 Key——商业化 G4） */
+    apiKey?: string;
+    /** BYOK：per-call 覆盖全局端点（OpenAI 兼容任意服务商） */
+    baseUrl?: string;
     messages: ChatMessage[];
     temperature?: number;
     max_tokens?: number;

package/dist/index.js

@@ -1696,6 +1696,28 @@ function userSystem(options) {
         currentUser = user;
         return { ...session, user };
       },
+      async ssoLogin(email2, opts) {
+        const normalized = normalizeEmail(email2);
+        let user;
+        const existing = await sql.query.from(USERS_TABLE).select("id", "email", "name", "role", "tenant").where({ email: normalized }).run();
+        if (existing.length) {
+          user = existing[0];
+        } else {
+          const rows = await sql.query.insert(USERS_TABLE).values({ email: normalized, password_hash: null, name: opts?.name ?? null, role: null, tenant: null }).returning("id", "email", "name", "role", "tenant").run();
+          user = rows[0];
+        }
+        let appId;
+        if (opts?.appId) {
+          const member = await findMemberRole(opts.appId, user.id);
+          if (!member) {
+            await sql.query.insert(MEMBER_TABLE).values({ app_id: opts.appId, user_id: user.id, role: "member", invited_by: null }).run();
+          }
+          appId = opts.appId;
+        }
+        const session = await issueSession(user, appId ? { appId, role: "member" } : void 0);
+        currentUser = user;
+        return { ...session, user };
+      },
       async createInvite(appId, opts) {
         if (!currentUser) throw new HttpError("Unauthorized", 401);
         const role = await findMemberRole(appId, currentUser.id);
@@ -1736,7 +1758,7 @@ function userSystem(options) {
       CREATE TABLE IF NOT EXISTS ${USERS_TABLE} (
         id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
         email TEXT NOT NULL UNIQUE,
-        password_hash TEXT NOT NULL,
+        password_hash TEXT,
         name TEXT,
         role TEXT,
         tenant TEXT,
@@ -1744,6 +1766,7 @@ function userSystem(options) {
         created_at TIMESTAMPTZ NOT NULL DEFAULT now()
       )
     `);
+    await sql.unsafe(`ALTER TABLE ${USERS_TABLE} ALTER COLUMN password_hash DROP NOT NULL`);
     await sql.unsafe(`
       CREATE TABLE IF NOT EXISTS ${SESSIONS_TABLE} (
         token_hash TEXT PRIMARY KEY,
@@ -2941,9 +2964,14 @@ function createEmbeddingClient(ebd) {
   };
 }
 function createAiClient(opts) {
-  const endpoint = `${opts.baseUrl.replace(/\/$/, "")}/chat/completions`;
-  const headers = { "Content-Type": "application/json", Authorization: `Bearer ${opts.apiKey}` };
   const embedding = createEmbeddingClient(opts.embedding);
+  function endpointFor(params) {
+    const base2 = params.baseUrl ?? opts.baseUrl;
+    return `${base2.replace(/\/$/, "")}/chat/completions`;
+  }
+  function headersFor(params) {
+    return { "Content-Type": "application/json", Authorization: `Bearer ${params.apiKey ?? opts.apiKey}` };
+  }
   const approvals = /* @__PURE__ */ new Map();
   function approve(response) {
     const resolve3 = approvals.get(response.id);
@@ -2985,9 +3013,9 @@ function createAiClient(opts) {
     return calls;
   }
   async function chat(params, options) {
-    const res = await fetch(endpoint, {
+    const res = await fetch(endpointFor(params), {
       method: "POST",
-      headers,
+      headers: headersFor(params),
       body: JSON.stringify({ ...params, model: params.model ?? opts.defaultModel, stream: false }),
       signal: options?.signal
     });
@@ -3020,9 +3048,9 @@ function createAiClient(opts) {
     const { emit, signal } = stepOpts;
     let res;
     try {
-      res = await fetch(endpoint, {
+      res = await fetch(endpointFor(params), {
         method: "POST",
-        headers,
+        headers: headersFor(params),
         body: JSON.stringify({ ...params, model: params.model ?? opts.defaultModel, stream: true }),
         signal
       });
@@ -3169,7 +3197,7 @@ function createAgent(client, config) {
       emit("wf:step", { type: "llm" });
       let finish = { content: "", toolCalls: [] };
       await client.streamStep(
-        { model: config.model, messages: all, tools: toolDefs },
+        { model: config.model, apiKey: config.apiKey, baseUrl: config.baseUrl, messages: all, tools: toolDefs },
         {
           emit,
           signal,

package/dist/user/index.d.ts

@@ -136,6 +136,15 @@ export interface AuthApi {
         refreshToken: string;
         user: User;
     }>;
+    /** SSO 登录（无密码）：按 email 找或建平台账号；带 appId 时自动加成员并签发应用会话 */
+    ssoLogin(email: string, opts?: {
+        appId?: string;
+        name?: string;
+    }): Promise<{
+        token: string;
+        refreshToken: string;
+        user: User;
+    }>;
     /** owner 生成邀请 token（7 天有效，可选绑定 email/role） */
     createInvite(appId: string, opts: {
         email?: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "weifuwu",
   "type": "module",
-  "version": "0.82.1",
+  "version": "0.82.2",
   "description": "AI SaaS framework — (req, ctx) => Response",
   "exports": {
     ".": {