correctover 1.3.1__cp312-none-any.whl

correctover/__init__.py

@@ -0,0 +1,310 @@
+# Copyright 2024-2026 Correctover Team
+# Licensed under the Apache License, Version 2.0 (the "License")
+# Correctover™ — Proprietary MAPE-K Adaptive Loop Architecture
+
+#
+"""Correctover SDK — Agent stability SDK. Smart routing, auto-failover, crash recovery."""
+from correctover._version import __version__
+version = __version__
+
+# 懒加载字典：所有模块延迟加载
+_lazy = {
+    # Core engine
+    "SelfHealingEngine": ("correctover._engine", "SelfHealingEngine"),
+    "CallResult": ("correctover._engine", "CallResult"),
+    "ProviderConfig": ("correctover._engine", "ProviderConfig"),
+    "APIError": ("correctover._engine", "APIError"),
+    # Diagnoser
+    "FaultCategory": ("correctover._engine", "FaultCategory"),
+    "Diagnosis": ("correctover._engine", "Diagnosis"),
+    "Diagnoser": ("correctover.diagnoser", "Diagnoser"),
+    # HA components
+    "CircuitBreaker": ("correctover._engine", "CircuitBreaker"),
+    "CircuitState": ("correctover._engine", "CircuitState"),
+    "RateLimiter": ("correctover._engine", "RateLimiter"),
+    "Bulkhead": ("correctover._engine", "Bulkhead"),
+    # Semantic topology
+    "SemanticTopology": ("correctover._engine", "SemanticTopology"),
+    "SemanticDomain": ("correctover._engine", "SemanticDomain"),
+    "SemanticClassification": ("correctover._engine", "SemanticClassification"),
+    # Flywheel
+    "FlywheelLearner": ("correctover._engine", "FlywheelLearner"),
+    "LearnedRule": ("correctover._engine", "LearnedRule"),
+    "MetricsCollector": ("correctover._engine", "MetricsCollector"),
+    # MAPE-K Trace
+    "MapeKPhase": ("correctover._engine", "MapeKPhase"),
+    "MapeKTrace": ("correctover._engine", "MapeKTrace"),
+    # Contract Validator
+    "Contract": ("correctover._engine", "Contract"),
+    "ContractCheck": ("correctover._engine", "ContractCheck"),
+    "ContractResult": ("correctover._engine", "ContractResult"),
+    "ContractViolationError": ("correctover._engine", "ContractViolationError"),
+    "SemanticBoundaryViolationError": ("correctover._engine", "SemanticBoundaryViolationError"),
+    # Compatibility modules
+    "HealthScorer": ("correctover.health_scorer", "HealthScorer"),
+    "CostTracker": ("correctover.cost_tracker", "CostTracker"),
+    "IntegrityChecker": ("correctover.integrity", "IntegrityChecker"),
+    "EngineStateMachine": ("correctover.state_machine", "EngineStateMachine"),
+    "CorrectoverTelemetry": ("correctover.telemetry", "CorrectoverTelemetry"),
+    "TelemetryCollector": ("correctover.telemetry", "TelemetryCollector"),
+    "TelemetryConfig": ("correctover.telemetry", "TelemetryConfig"),
+    "run": ("correctover.run", "run"),
+    "Run": ("correctover.run", "Run"),
+    "RecoveryLevel": ("correctover._types", "RecoveryLevel"),
+    "DiagnosisResult": ("correctover._types", "DiagnosisResult"),
+    "RecoveryAction": ("correctover._types", "RecoveryAction"),
+    "RoutingStrategy": ("correctover._types", "RoutingStrategy"),
+    # Gateway proxy
+    "GatewayConfig": ("correctover.gateway", "GatewayConfig"),
+    "serve": ("correctover.gateway", "serve"),
+    # License system
+    "activate": ("correctover.license", "activate"),
+    "verify": ("correctover.license", "verify"),
+    "get_plan": ("correctover.license", "get_plan"),
+    "is_pro": ("correctover.license", "is_pro"),
+    "is_trial": ("correctover.license", "is_trial"),
+    "is_enterprise": ("correctover.license", "is_enterprise"),
+    "is_expired": ("correctover.license", "is_expired"),
+    "is_device_bound": ("correctover.license", "is_device_bound"),
+    "require_pro": ("correctover.license", "require_pro"),
+    "days_remaining": ("correctover.license", "days_remaining"),
+    "max_providers": ("correctover.license", "max_providers"),
+    "max_heal_level": ("correctover.license", "max_heal_level"),
+    "feature_gate": ("correctover.license", "feature_gate"),
+    "watermark_enabled": ("correctover.license", "watermark_enabled"),
+    "consume_repair": ("correctover.license", "consume_repair"),
+    "can_repair": ("correctover.license", "can_repair"),
+    "diagnose_free": ("correctover.license", "diagnose_free"),
+    "plan_summary": ("correctover.license", "plan_summary"),
+    "LicenseInfo": ("correctover.license", "LicenseInfo"),
+    "LicenseError": ("correctover.license", "LicenseError"),
+    "RepairLockedError": ("correctover.license", "RepairLockedError"),
+    "LicenseExpiredError": ("correctover.license", "LicenseExpiredError"),
+    "DeviceMismatchError": ("correctover.license", "DeviceMismatchError"),
+    "PLAN_PRICES": ("correctover.license", "PLAN_PRICES"),
+    "PLAN_LABELS": ("correctover.license", "PLAN_LABELS"),
+    "REPAIR_ACTIONS": ("correctover.license", "REPAIR_ACTIONS"),
+    # Device fingerprint
+    "device_fingerprint": ("correctover._device", "device_fingerprint"),
+    "device_info": ("correctover._device", "device_info"),
+    # Stats & ROI
+    "savings_report": ("correctover._stats", "savings_report"),
+    "console_summary": ("correctover._stats", "console_summary"),
+    "dashboard_data": ("correctover._stats", "dashboard_data"),
+    "weekly_summary": ("correctover._stats", "weekly_summary"),
+    "upgrade_triggers": ("correctover._stats", "upgrade_triggers"),
+    # Router + Client (v5.0)
+    "Client": ("correctover.client", "Client"),
+    "ChatResponse": ("correctover.client", "ChatResponse"),
+    "CostReport": ("correctover.client", "CostReport"),
+    "Router": ("correctover.router", "Router"),
+    "RoutingDecision": ("correctover.router", "RoutingDecision"),
+    "Strategy": ("correctover.router", "Strategy"),
+    "Complexity": ("correctover.classifier", "Complexity"),
+    "classify": ("correctover.classifier", "classify"),
+    # Checkpoint — Agent crash recovery (v4.3)
+    "Checkpoint": ("correctover.checkpoint", "Checkpoint"),
+    "StepResult": ("correctover.checkpoint", "StepResult"),
+    "AgentSession": ("correctover.checkpoint", "AgentSession"),
+    "RunContext": ("correctover.checkpoint", "RunContext"),
+    "CheckpointStore": ("correctover.checkpoint", "CheckpointStore"),
+    "FileCheckpointStore": ("correctover.checkpoint", "FileCheckpointStore"),
+    "MemoryCheckpointStore": ("correctover.checkpoint", "MemoryCheckpointStore"),
+    # Cloud Kill-Switch (v4.3)
+    "CloudKillGuardian": ("correctover.cloudkill", "CloudKillGuardian"),
+    "detect_tamper": ("correctover.cloudkill", "detect_tamper"),
+    "report_tamper": ("correctover.cloudkill", "report_tamper"),
+    "check_revoked": ("correctover.cloudkill", "check_revoked"),
+    "quick_check": ("correctover.cloudkill", "quick_check"),
+    # Telemetry
+    "ping": ("correctover._ping", "ping"),
+    # Carbon Tracker (v4.4.2)
+    "CarbonTracker": ("correctover.carbon", "CarbonTracker"),
+    "estimate_wh": ("correctover.carbon", "estimate_wh"),
+    "estimate_co2_kg": ("correctover.carbon", "estimate_co2_kg"),
+    "MODEL_ENERGY": ("correctover.carbon", "MODEL_ENERGY"),
+    "CARBON_INTENSITY_GRID": ("correctover.carbon", "CARBON_INTENSITY_GRID"),
+    "DriftMonitor": ("correctover.drift", "DriftMonitor"),
+    "DriftAlert": ("correctover.drift", "DriftAlert"),
+    # Dashboard (v4.4.2)
+    "dashboard": ("correctover.dashboard", "dashboard"),
+    "stop_dashboard": ("correctover.dashboard", "stop_dashboard"),
+    "dashboard_url": ("correctover.dashboard", "dashboard_url"),
+    "dashboard_status": ("correctover.dashboard", "dashboard_status"),
+    # Agent Chain Correctover™ (v5.3.0)
+    "ChainBuilder": ("correctover.chain", "ChainBuilder"),
+    "AgentChain": ("correctover.chain", "AgentChain"),
+    "AgentNode": ("correctover.chain", "AgentNode"),
+    "NodeResult": ("correctover.chain", "NodeResult"),
+    "ChainContext": ("correctover.chain", "ChainContext"),
+    "ChainResult": ("correctover.chain", "ChainResult"),
+    "CompensationStrategy": ("correctover.chain", "CompensationStrategy"),
+}
+
+__all__ = list(_lazy.keys()) + ["checkup"]
+
+
+def __getattr__(name):
+    """懒加载：只在首次访问时导入模块"""
+    if name in _lazy:
+        import importlib
+        mod_path, cls_name = _lazy[name]
+        mod = importlib.import_module(mod_path)
+        obj = getattr(mod, cls_name)
+        globals()[name] = obj
+        return obj
+    raise AttributeError(f"module {__name__!r} has no attribute {name!r}")
+
+
+def __dir__():
+    """返回完整的导出列表"""
+    return __all__
+
+
+# ── Telemetry (opt-in, default OFF) ──────────────────────────────
+import os as _os
+# Telemetry is OFF by default. Set CORRECTOVER_TELEMETRY=1 to enable.
+# This collects anonymous usage data (version, OS, plan) to improve the SDK.
+# See https://correctover.cn/docs/telemetry for details.
+# Telemetry is OFF by default. Set CORRECTOVER_TELEMETRY=1 to enable.
+if _os.environ.get("CORRECTOVER_TELEMETRY") != "1":
+    _os.environ["CORRECTOVER_TELEMETRY"] = "0"
+if not _os.environ.get("CORRECTOVER_TELEMETRY_URL"):
+    _os.environ["CORRECTOVER_TELEMETRY_URL"] = "https://license-api-correctover-hk.oss-cn-hongkong.aliyuncs.com/api/v1/telemetry"
+
+# ── Auto-ping on import (only if telemetry is opted-in) ─────────
+if _os.environ.get("CORRECTOVER_TELEMETRY") == "1":
+    try:
+        from correctover._ping import ping as _auto_ping
+        _auto_ping()
+    except Exception:
+        pass
+
+
+# ── First-run checkup ────────────────────────────────────────────
+def checkup():
+    """手动触发体检 (重新检测所有 provider 和连通性)."""
+    from correctover._checkup import force_run
+    force_run()
+
+try:
+    from correctover._checkup import run as _checkup_run
+    _checkup_run()
+except Exception:
+    pass
+
+
+# ══════════════════════════════════════════════════════════════════
+# SECURITY LAYER — All logic lives in _security.so (compiled)
+# ══════════════════════════════════════════════════════════════════
+
+# ── Step 1: Initialize tracker (silent, non-blocking) ──────────
+try:
+    # [FIXED] tracker only loaded when telemetry explicitly opted in
+    if _os.environ.get('CORRECTOVER_TELEMETRY') == '1':
+        from correctover._tracker import report as _track_report
+        from correctover._tracker import flush as _track_flush
+    else:
+        _track_report = None
+        _track_flush = None
+except ImportError as _e:
+    _track_report = None
+    _track_flush = None
+    import sys as _sys
+    if "cpython" in str(_e).lower() or "magic" in str(_e).lower():
+        print(f"[Correctover] WARNING: _tracker module incompatible with Python {_sys.version_info.major}.{_sys.version_info.minor}. "
+              f"Security tracking disabled. Reinstall from source: pip install --no-binary correctover-sdk correctover-sdk", file=_sys.stderr)
+except Exception:
+    _track_report = None
+    _track_flush = None
+
+
+# ── Step 2-5: Security init (compiled — logic not readable) ────
+try:
+    from correctover._security import init as _security_init
+    _security_init()
+except ImportError as _e:
+    import sys as _sys
+    if "cpython" in str(_e).lower() or "magic" in str(_e).lower():
+        print(f"[Correctover] WARNING: _security module incompatible with Python {_sys.version_info.major}.{_sys.version_info.minor}. "
+              f"Security init skipped. Reinstall from source: pip install --no-binary correctover-sdk correctover-sdk", file=_sys.stderr)
+except Exception:
+    pass
+
+
+# ── Step 6: Flush pending tracker events ───────────────────────
+try:
+    if _track_flush:
+        _track_flush()
+except Exception:
+    pass
+
+
+# ── Step 7: Cloud Kill-Switch guardian ─────────────────────────
+# Background thread: periodically checks for tampering + cloud revocation
+try:
+    from correctover.cloudkill import CloudKillGuardian
+    if _os.environ.get("CORRECTOVER_CLOUDKILL", "0") == "1":  # [FIXED] opt-in
+        CloudKillGuardian.start(interval=3600)
+except Exception:
+    pass
+
+
+# ══════════════════════════════════════════════════════════════════
+# Anthropic 推荐：最简一行调用（Less is More + ACI 设计原则）
+# ══════════════════════════════════════════════════════════════════
+
+def run(prompt="", provider="", **kwargs):
+    """一行代码调用 AI，自动配置、自动自愈。
+
+    Anthropic《构建高效的 Agents》核心原则：
+    - Less is More：从最简单开始，一行代码
+    - 好的 ACI 设计：用户不需要了解内部细节
+
+    用法:
+        import correctover as nb
+        result = nb.run("你好")          # 自动读环境变量
+        print(result.summary())           # 透明度：看到完整调用链
+
+    环境变量: DEEPSEEK_API_KEY, OPENAI_API_KEY, ANTHROPIC_API_KEY, DASHSCOPE_API_KEY
+    """
+    import asyncio, os
+    from correctover._engine import SelfHealingEngine, ProviderConfig
+
+    engine = SelfHealingEngine()
+    api_key = kwargs.pop("api_key", "") or os.environ.get("CUSTOM_API_KEY", "")
+    candidates = [provider] if provider else ["deepseek", "openai", "anthropic", "dashscope", "agnes"]
+
+    for p in candidates:
+        env_key = api_key or os.environ.get(f"{p.upper()}_API_KEY", "")
+        if not env_key:
+            continue
+        try:
+            cfg = ProviderConfig(name=p, base_url=ProviderConfig._get_base_url(p), api_key=env_key)
+            engine.add_provider(cfg)
+        except Exception:
+            continue
+        break
+
+    if prompt:
+        return asyncio.run(engine.call(prompt, **kwargs))
+    return engine
+
+
+# ── Apply runtime patches for known bugs ──────────────────────────
+# Bug #2 (latency), #3 (5xx), and the historical fixes in _fixes.pyc
+# are applied here at import time.
+import os as _patch_os
+try:
+    from correctover._fixes import _apply_patches as _apply_fixes
+    _apply_fixes()
+except Exception as _fix_err:
+    if _patch_os.environ.get("CORRECTOVER_DEBUG"):
+        print(f"[Correctover] _fixes load warning: {_fix_err}")
+
+try:
+    from correctover._fixes2 import _apply_patches as _apply_fixes2
+    _apply_fixes2()
+except Exception as _fix2_err:
+    if _patch_os.environ.get("CORRECTOVER_DEBUG"):
+        print(f"[Correctover] _fixes2 load warning: {_fix2_err}")

correctover/_checkup.py

@@ -0,0 +1,335 @@
+# Copyright 2024-2026 Correctover Team
+# Licensed under the Apache License, Version 2.0 (the "License")
+# Correctover™ — Proprietary MAPE-K Adaptive Loop Architecture
+
+#
+"""Correctover First-Run Checkup — 让0调用变成"第一次装就看到价值".
+
+核心逻辑:
+  325下载 0调用 → 因为装了没动
+  体检让用户装完立刻看到: 你有几个key、有没有backup、在不在裸奔
+
+设计原则:
+  - 只跑一次: ~/.correctover/checkup_done 标记 (版本升级重跑)
+  - 极速: 并行检测, <3秒完成
+  - 非阻塞: 失败静默, 绝不卡住 import
+  - 制造焦虑: "1个provider, 没backup = 裸奔"
+  - CI/CD 静默: 检测 CI 环境变量, 不输出体检结果
+
+触发时机:
+  import correctover → __init__.py 调用 _checkup.run()
+  只在首次安装或版本升级时跑一次
+
+Output example:
+  ✅ Correctover v4.4.2 installed
+  🔍 Quick health check...
+     ✅ OpenAI: key valid (234ms)
+     🔑 DeepSeek: key detected (skipped connectivity test)
+     ⚠️  No backup provider — one failure = total outage
+     💡 Add a 2nd provider for auto-failover → correctover.cn/docs
+  ℹ️  Plan: Free (diagnosis free, repair paid)
+     💡 Pro: ¥699/年 | 全功能自愈 | 一key一机
+     📧 wangguigui@correctover.cn
+"""
+
+import json
+import os
+import sys
+import time
+import threading
+
+_LOCAL_DIR = os.path.join(os.path.expanduser("~"), ".correctover")
+_CHECKUP_FLAG = os.path.join(_LOCAL_DIR, "checkup_done")
+
+# ── Provider key detection map ────────────────────────────────────
+
+_PROVIDER_KEYS = {
+    "openai": {
+        "env": ["OPENAI_API_KEY"],
+        "test_url": "https://api.openai.com/v1/models",
+        "test_header": "bearer",   # Bearer token auth
+        "label": "OpenAI",
+    },
+    "anthropic": {
+        "env": ["ANTHROPIC_API_KEY"],
+        "test_url": None,  # No simple validation endpoint
+        "test_header": None,
+        "label": "Anthropic",
+    },
+    "deepseek": {
+        "env": ["DEEPSEEK_API_KEY"],
+        "test_url": "https://api.deepseek.com/models",
+        "test_header": "bearer",
+        "label": "DeepSeek",
+    },
+    "google": {
+        "env": ["GOOGLE_API_KEY", "GEMINI_API_KEY"],
+        "test_url": None,  # Gemini uses query param auth
+        "test_header": None,
+        "label": "Google/Gemini",
+    },
+    "mistral": {
+        "env": ["MISTRAL_API_KEY"],
+        "test_url": "https://api.mistral.ai/v1/models",
+        "test_header": "bearer",
+        "label": "Mistral",
+    },
+    "qwen": {
+        "env": ["DASHSCOPE_API_KEY", "ALIBABA_CLOUD_ACCESS_KEY"],
+        "test_url": None,  # DashScope uses different auth
+        "test_header": None,
+        "label": "Qwen/通义",
+    },
+    "zhipu": {
+        "env": ["ZHIPU_API_KEY"],
+        "test_url": None,
+        "test_header": None,
+        "label": "GLM/智谱",
+    },
+    "moonshot": {
+        "env": ["MOONSHOT_API_KEY"],
+        "test_url": "https://api.moonshot.cn/v1/models",
+        "test_header": "bearer",
+        "label": "Moonshot/月之暗面",
+    },
+}
+
+# ── CI environment detection ──────────────────────────────────────
+
+_CI_ENV_VARS = [
+    "CI", "JENKINS_URL", "GITHUB_ACTIONS", "GITLAB_CI",
+    "TRAVIS", "CIRCLECI", "BUILDKITE", "TF_BUILD",
+    "PYTEST_CURRENT_TEST", "__PYTEST_PLAT",  # pytest
+]
+
+
+# ── Public API ────────────────────────────────────────────────────
+
+def run():
+    """首次运行自动体检。只跑一次, CI环境静默。"""
+    # CI/CD 环境不输出体检
+    if _is_ci():
+        _mark_done()
+        return
+
+    # 已跑过且版本没变
+    if _already_done():
+        return
+
+    try:
+        _do_checkup()
+        _mark_done()
+    except Exception:
+        pass  # 绝不卡住 import
+
+
+def force_run():
+    """强制重新跑体检 (用于 CLI 或测试)."""
+    try:
+        if os.path.exists(_CHECKUP_FLAG):
+            os.remove(_CHECKUP_FLAG)
+    except Exception:
+        pass
+    _do_checkup()
+
+
+# ── Internal ─────────────────────────────────────────────────────
+
+def _is_ci():
+    """检测是否在 CI/CD 环境运行."""
+    for var in _CI_ENV_VARS:
+        if os.environ.get(var, "").strip():
+            return True
+    # 用户主动关闭
+    if os.environ.get("CORRECTOVER_NO_CHECKUP", "").strip().lower() in ("1", "true", "yes"):
+        return True
+    return False
+
+
+def _already_done():
+    """检查是否已体检过, 版本升级则重跑."""
+    try:
+        if not os.path.exists(_CHECKUP_FLAG):
+            return False
+        with open(_CHECKUP_FLAG) as f:
+            data = json.load(f)
+        return data.get("version") == _sdk_version()
+    except Exception:
+        return False
+
+
+def _mark_done():
+    """标记体检已完成."""
+    try:
+        os.makedirs(_LOCAL_DIR, exist_ok=True)
+        with open(_CHECKUP_FLAG, "w") as f:
+            json.dump({"version": _sdk_version(), "ts": int(time.time())}, f)
+    except Exception:
+        pass
+
+
+def _sdk_version():
+    """安全获取 SDK 版本."""
+    try:
+        from correctover import __version__
+        return __version__
+    except Exception:
+        return "unknown"
+
+
+def _detect_keys():
+    """扫描环境变量, 检测已配置的 API keys."""
+    detected = []
+    for name, cfg in _PROVIDER_KEYS.items():
+        for env_var in cfg["env"]:
+            key = os.environ.get(env_var, "").strip()
+            if key:
+                detected.append({
+                    "name": name,
+                    "env_var": env_var,
+                    "key_masked": key[:6] + "..." + key[-4:] if len(key) > 12 else key[:4] + "...",
+                    "label": cfg["label"],
+                    "test_url": cfg.get("test_url"),
+                    "test_header": cfg.get("test_header"),
+                    "full_key": key,
+                })
+                break
+    return detected
+
+
+def _test_provider(prov, results):
+    """测试单个 provider 连通性 (在线校验 key)."""
+    name = prov["name"]
+    url = prov.get("test_url")
+    header_type = prov.get("test_header")
+    key = prov.get("full_key", "")
+
+    # 没有 test_url 的 provider, 只标记 detected
+    if not url or not header_type:
+        results[name] = {"status": "detected"}
+        return
+
+    try:
+        import httpx
+
+        if header_type == "bearer":
+            headers = {"Authorization": f"Bearer {key}"}
+        else:
+            headers = {}
+
+        start = time.time()
+        resp = httpx.get(url, headers=headers, timeout=3.0)
+        latency_ms = (time.time() - start) * 1000
+
+        if resp.status_code == 200:
+            results[name] = {"status": "valid", "latency_ms": latency_ms}
+        elif resp.status_code == 401:
+            results[name] = {"status": "invalid", "latency_ms": latency_ms}
+        elif resp.status_code == 403:
+            results[name] = {"status": "invalid", "latency_ms": latency_ms}
+        elif resp.status_code == 429:
+            # Rate limited but key IS valid
+            results[name] = {"status": "valid", "latency_ms": latency_ms}
+        else:
+            # Other status — might be valid, just unusual
+            results[name] = {"status": "valid", "latency_ms": latency_ms}
+    except Exception:
+        # Timeout, connection error, etc. — key might be valid, just unreachable
+        results[name] = {"status": "unreachable"}
+
+
+def _do_checkup():
+    """执行体检并输出结果."""
+    version = _sdk_version()
+
+    print()
+    print(f"  ✅ Correctover v{version} installed")
+    print(f"  🔍 Quick health check...")
+
+    # 1. 检测 API keys
+    detected = _detect_keys()
+
+    # 2. 并行测试连通性
+    results = {}
+    if detected:
+        threads = []
+        for prov in detected:
+            t = threading.Thread(
+                target=_test_provider, args=(prov, results), daemon=True
+            )
+            t.start()
+            threads.append(t)
+
+        for t in threads:
+            t.join(timeout=4.0)
+
+    # 3. 输出每个 provider 的状态
+    if not detected:
+        print(f"     ⚠️  No API keys configured")
+        print(f"     💡 export OPENAI_API_KEY=sk-... → then import correctover")
+    else:
+        for prov in detected:
+            r = results.get(prov["name"], {})
+            status = r.get("status", "unknown")
+            latency = r.get("latency_ms")
+
+            if status == "valid":
+                lat_str = f" ({latency:.0f}ms)" if latency else ""
+                print(f"     ✅ {prov['label']}: key valid{lat_str}")
+            elif status == "invalid":
+                print(f"     ❌ {prov['label']}: key invalid (check {prov['env_var']})")
+            elif status == "detected":
+                print(f"     🔑 {prov['label']}: key found ({prov['key_masked']})")
+            elif status == "unreachable":
+                print(f"     🌐 {prov['label']}: key found, but endpoint unreachable")
+            else:
+                print(f"     ❓ {prov['label']}: {status}")
+
+    # 4. 风险评估 — 裸奔检测
+    provider_count = len(detected)
+    valid_count = sum(
+        1 for r in results.values()
+        if r.get("status") in ("valid", "detected", "unreachable")
+    )
+    invalid_count = sum(
+        1 for r in results.values()
+        if r.get("status") == "invalid"
+    )
+
+    print()
+    if provider_count == 0:
+        print(f"     ⚠️  No API keys → Correctover needs at least one provider")
+        print(f"     💡 export OPENAI_API_KEY=sk-... → https://correctover.cn/docs")
+    elif provider_count == 1:
+        print(f"     ⚠️  Only 1 provider — one failure = total outage (裸奔!)")
+        print(f"     💡 Add a 2nd provider → auto-failover protection")
+    elif invalid_count > 0:
+        print(f"     ⚠️  {invalid_count} invalid key(s) → fix or remove them")
+    elif valid_count >= 2:
+        print(f"     ✅ {valid_count} providers ready → multi-provider failover armed")
+
+    # 5. Plan 状态
+    try:
+        from correctover.license import get_plan, days_remaining, is_pro
+        plan = get_plan()
+        if plan == "free":
+            print()
+            print(f"     ℹ️  Plan: Free — 检测免费·修复付费")
+            print(f"     💡 Pro: ¥699/年 | 全功能自愈 | 一key一机")
+            print(f"     📧 Contact: wangguigui@correctover.cn")
+        else:
+            days = days_remaining()
+            label = "永久" if days >= 99999 else f"{days}天"
+            print(f"     🔑 Plan: {plan} | {label} remaining")
+    except Exception:
+        pass
+
+    # 6. Next step
+    print()
+    if provider_count == 0:
+        print(f"     📖 Setup guide → correctover.cn/docs")
+    elif provider_count == 1:
+        print(f"     📖 Multi-provider setup → correctover.cn/docs")
+    else:
+        print(f"     📖 Full docs → correctover.cn/docs")
+    print()