UHD_Media_Tool/packages/contracts/src/settings.ts

import { z } from "zod";
import { Id, Timestamp } from "./common.ts";
import { SiteRateLimit } from "./sources.ts";

// 全局设置:存于 settings 表(key → jsonb)。每个顶层分组对应一个 settings.key。
// schema 本身不带 .default()(zod 4 在 partial 里仍会套默认值,会让 PATCH 覆盖现值);
// 缺省值统一放在 DEFAULT_SETTINGS,服务端读取时 `{ ...DEFAULT_SETTINGS[key], ...stored }` 后再 parse。

const Percent = z.number().min(1).max(100);

export const AutomationSettings = z.object({
  /** 自动化总开关:关闭后所有自动收录/下载/整理停止,只读查询与手动操作可用 */
  enabled: z.boolean(),
  /** 恢复后的只读对账模式(REQ §8.5):开启时禁止自动写入 */
  readOnlyReconcile: z.boolean(),
});
export type AutomationSettings = z.infer<typeof AutomationSettings>;

const CacheShape = z.object({
  /** 缓存卷使用率硬阈值:达到即停止新增下载并暂停纳管下载中任务 */
  hardThresholdPercent: Percent,
  /** 恢复水位:降到此值以下恢复因阈值暂停的任务 */
  resumePercent: Percent,
  checkIntervalSec: z.number().int().min(10).max(3600),
  /** 缓存清理的目标使用率(低水位) */
  cleanupTargetPercent: Percent,
});
/** 下载缓存卷硬阈值与恢复水位(REQ §8.4.1) */
export const CacheSettings = CacheShape.refine((v) => v.resumePercent < v.hardThresholdPercent, {
  message: "恢复水位必须低于硬阈值",
}).refine((v) => v.cleanupTargetPercent <= v.resumePercent, { message: "清理目标不得高于恢复水位" });
export type CacheSettings = z.infer<typeof CacheSettings>;

export const OrganizeMode = z.enum(["copy", "move"]);
export type OrganizeMode = z.infer<typeof OrganizeMode>;
export const OrganizeSettings = z.object({
  defaultMode: OrganizeMode,
  /** 跨卷 Move 采用 Copy→核验→删源;EXDEV 不静默降级 */
  allowCrossVolumeMove: z.boolean(),
});
export type OrganizeSettings = z.infer<typeof OrganizeSettings>;

export const RetentionSettings = z.object({
  /** Copy 入库后下载源在缓存中至少保留的天数(与 H&R 要求分开判断) */
  seedRetentionDays: z.number().int().min(0).max(365),
  /** 观察/日志类数据保留天数 */
  logRetentionDays: z.number().int().min(1).max(3650),
});
export type RetentionSettings = z.infer<typeof RetentionSettings>;

export const ThinkingLevel = z.enum(["off", "minimal", "low", "medium", "high", "xhigh"]);
export type ThinkingLevel = z.infer<typeof ThinkingLevel>;

/**
 * Pi Agent 设置(REQ §10.5)。W7-A 起上游改为 pi_upstream 表(多上游共存,见 contracts/pi.ts 与 /pi/upstreams),
 * 这里只留默认上游与运行预算(上下文预算/压缩/子代理)。
 *
 * provider / baseUrl / model / thinkingLevel / apiKeySecretRef 是 v0.1 的旧字段(DEPRECATED_SETTINGS_FIELDS):
 * 0027 迁移已把保存的旧值转成一条上游并设为默认。W8-A 起服务端不再读取、PATCH 不再接受(传了会被丢弃),
 * 设置页不展示;保留在 schema 里只为兼容已存的 JSON。runAgent 只走上游,没有上游直接失败。
 */
export const PiSettings = z.object({
  /** 缺省上游(runAgent 未指定 upstreamId 时使用);null = 未配置,Agent 运行直接失败 */
  defaultUpstreamId: Id.nullable(),
  /** @deprecated 旧字段,不再读取,见上 */
  provider: z.string().min(1),
  /** @deprecated */
  baseUrl: z.url().nullable(),
  /** @deprecated */
  model: z.string().min(1).nullable(),
  /** @deprecated 上游级 thinkingLevel 见 pi_upstream */
  thinkingLevel: ThinkingLevel,
  /** 上下文预算(token) */
  contextBudget: z.number().int().min(4096).max(2_000_000),
  compaction: z.object({
    enabled: z.boolean(),
    /** 达到上下文预算的该比例时触发压缩 */
    thresholdRatio: z.number().min(0.3).max(0.95),
  }),
  /** @deprecated 同 subagents.enabled(合并设置时两者保持一致);新代码读 subagents.enabled */
  subagentsEnabled: z.boolean(),
  /**
   * 子代理(agent.spawn,W7-B):关闭时不向模型提供派生能力、服务端拒绝派生;
   * maxConcurrent = 一个会话同时在跑的子会话上限,maxDepth = 派生层数上限(1 = 子会话不能再派生)。
   */
  subagents: z.object({
    enabled: z.boolean(),
    maxConcurrent: z.number().int().min(1).max(8),
    maxDepth: z.number().int().min(1).max(3),
  }),
  /** @deprecated */
  apiKeySecretRef: Id.nullable(),
});
export type PiSettings = z.infer<typeof PiSettings>;

/**
 * Agent 运行参数(REQ §10.5、§10.7):单次运行预算、后台自动调查、fake 演示脚本。
 * 上游/模型/思考档位在 pi_upstream(见 contracts/pi.ts);provider = "fake" 的上游使用脚本化假模型(不联网,演示与 e2e 用)。
 */
export const AgentRuntimeSettings = z.object({
  /** 识别歧义 / 下载失败诊断等待处理事项创建时,自动发起有界调查 */
  autoInvestigate: z.boolean(),
  /**
   * 自动调查的模式:investigate = 只读调查,结论交还人工;
   * recover = 在已发布策略 / 持续授权范围内可执行恢复类能力(task.retry、download.recheck、identity.resolve),
   * 换源、删除、清理始终排除;没有覆盖的授权时自动降级为 investigate。
   */
  autoInvestigateMode: z.enum(["investigate", "recover"]),
  /** 同一根因(decision 去重键)最多自动恢复几次;用尽后只交还人工,不再唤醒模型 */
  investigateMaxAttempts: z.number().int().min(1).max(10),
  /** 恢复动作后等待业务事实(下载状态 / 任务状态)核实的最长时间(秒) */
  recoverVerifySec: z
    .number()
    .int()
    .min(5)
    .max(24 * 3600),
  /** 单次运行:工具调用次数上限 */
  maxToolCalls: z.number().int().min(1).max(500),
  /** 单次运行:时长上限(秒) */
  maxDurationSec: z
    .number()
    .int()
    .min(10)
    .max(24 * 3600),
  /** 单次运行:token 上限(null = 不限) */
  maxTokensPerRun: z.number().int().positive().nullable(),
  /** 单次运行:费用上限(美元,null = 不限) */
  maxCostUsdPerRun: z.number().positive().nullable(),
  /** 后台自动调查的工具调用上限(比用户委托更小) */
  investigateMaxToolCalls: z.number().int().min(1).max(100),
  /** 等待目标关联的下载/入库结束时的轮询间隔(秒) */
  goalPollSec: z.number().int().min(1).max(3600),
  /** 等待目标完成的最长时间(小时),超时后以"仍在等待"汇报结束 */
  goalWaitHours: z
    .number()
    .min(0)
    .max(24 * 30),
  /** fake 模式脚本(JSON,FakeScript 的可序列化子集);null 用内置演示脚本 */
  fakeScript: z.string().max(100_000).nullable(),
  /**
   * Agent JSONL 会话目录(绝对路径,api 与 worker 进程都要能读写);
   * null = 部署默认(环境变量 AGENT_SESSION_DIR,缺省 DATA_DIR/agent-sessions)
   */
  sessionDir: z.string().max(1024).regex(/^\//, "必须是绝对路径").nullable(),
});
export type AgentRuntimeSettings = z.infer<typeof AgentRuntimeSettings>;

/** 元数据源(TMDB):密钥只存 secret 引用;未配置时回退环境变量 TMDB_API_KEY / TMDB_ACCESS_TOKEN */
export const MetadataSettings = z.object({
  tmdbApiKeySecretRef: Id.nullable(),
  /** 自建反代或测试 mock;null 用官方地址 */
  tmdbBaseUrl: z.url().nullable(),
});
export type MetadataSettings = z.infer<typeof MetadataSettings>;

/** 固定桌面 Chrome UA(账号未设 UA 时使用) */
export const DEFAULT_SITE_USER_AGENT =
  "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36";

/** 站点默认(site-center §8):站点行的限流 / 快照周期为空时继承;站点和凭证在站点页管理 */
export const SitesSettings = z.object({
  /** 站点 rate_limit 为空时使用 */
  defaultRateLimit: SiteRateLimit,
  /** 站点未设快照周期时使用(秒) */
  defaultSnapshotIntervalSec: z
    .number()
    .int()
    .min(300)
    .max(7 * 24 * 3600),
  /** 账号未设 UA 时使用 */
  userAgent: z.string().min(1).max(500),
  /** 站点开"使用代理"时生效;null = 不用代理 */
  proxyUrl: z.url().nullable(),
  /** 用户数据做种分页上限 */
  userDataMaxSeedingPages: z.number().int().min(1).max(50),
});
export type SitesSettings = z.infer<typeof SitesSettings>;

/** 每日预算与并发(REQ §6.4、§10.5) */
export const BudgetSettings = z.object({
  maxNewTitlesPerDay: z.number().int().min(0),
  maxDownloadBytesPerDay: z.number().int().min(0),
  maxConcurrentDownloads: z.number().int().min(1).max(100),
  agentMaxRunsPerDay: z.number().int().min(0),
  agentMaxCostUsdPerDay: z.number().min(0),
});
export type BudgetSettings = z.infer<typeof BudgetSettings>;

export const GlobalSettings = z.object({
  automation: AutomationSettings,
  cache: CacheSettings,
  organize: OrganizeSettings,
  retention: RetentionSettings,
  pi: PiSettings,
  budget: BudgetSettings,
  agent: AgentRuntimeSettings,
  metadata: MetadataSettings,
  sites: SitesSettings,
});
export type GlobalSettings = z.infer<typeof GlobalSettings>;

/** settings 表的合法 key */
export const SettingsKey = GlobalSettings.keyof();
export type SettingsKey = z.infer<typeof SettingsKey>;

/** 缺省设置(settings 表缺 key 或缺字段时使用) */
export const DEFAULT_SETTINGS: GlobalSettings = {
  automation: { enabled: true, readOnlyReconcile: false },
  cache: { hardThresholdPercent: 90, resumePercent: 85, checkIntervalSec: 60, cleanupTargetPercent: 80 },
  organize: { defaultMode: "copy", allowCrossVolumeMove: true },
  retention: { seedRetentionDays: 7, logRetentionDays: 180 },
  pi: {
    defaultUpstreamId: null,
    provider: "anthropic",
    baseUrl: null,
    model: null,
    thinkingLevel: "medium",
    contextBudget: 128_000,
    compaction: { enabled: true, thresholdRatio: 0.8 },
    subagentsEnabled: false,
    subagents: { enabled: false, maxConcurrent: 2, maxDepth: 1 },
    apiKeySecretRef: null,
  },
  budget: {
    maxNewTitlesPerDay: 20,
    maxDownloadBytesPerDay: 500 * 1024 ** 3,
    maxConcurrentDownloads: 5,
    agentMaxRunsPerDay: 50,
    agentMaxCostUsdPerDay: 5,
  },
  agent: {
    autoInvestigate: false,
    autoInvestigateMode: "investigate",
    investigateMaxAttempts: 2,
    recoverVerifySec: 600,
    maxToolCalls: 40,
    maxDurationSec: 900,
    maxTokensPerRun: null,
    maxCostUsdPerRun: null,
    investigateMaxToolCalls: 8,
    goalPollSec: 60,
    goalWaitHours: 72,
    fakeScript: null,
    sessionDir: null,
  },
  metadata: { tmdbApiKeySecretRef: null, tmdbBaseUrl: null },
  sites: {
    defaultRateLimit: { requestsPerMinute: 20, concurrency: 1 },
    defaultSnapshotIntervalSec: 3600,
    userAgent: DEFAULT_SITE_USER_AGENT,
    proxyUrl: null,
    userDataMaxSeedingPages: 10,
  },
};

/** PATCH /settings:按分组部分更新;服务端与现值合并后用 GlobalSettings 整体再校验 */
export const GlobalSettingsUpdate = z.object({
  automation: AutomationSettings.partial().optional(),
  cache: CacheShape.partial().optional(),
  organize: OrganizeSettings.partial().optional(),
  retention: RetentionSettings.partial().optional(),
  /**
   * defaultUpstreamId 只能经 /pi/upstreams(makeDefault)修改,保证指向存在的上游;
   * 旧字段(provider / baseUrl / model / thinkingLevel / apiKey)不再接受,传了会被丢弃。
   */
  pi: PiSettings.omit({
    apiKeySecretRef: true,
    defaultUpstreamId: true,
    provider: true,
    baseUrl: true,
    model: true,
    thinkingLevel: true,
  })
    .partial()
    .extend({
      compaction: PiSettings.shape.compaction.partial().optional(),
      subagents: PiSettings.shape.subagents.partial().optional(),
    })
    .optional(),
  budget: BudgetSettings.partial().optional(),
  agent: AgentRuntimeSettings.partial().optional(),
  metadata: MetadataSettings.omit({ tmdbApiKeySecretRef: true })
    .partial()
    .extend({
      /** 只写:TMDB API Key(v3 key 或 v4 read token),服务端存为 secret 并回填 tmdbApiKeySecretRef;null 清除 */
      tmdbApiKey: z.string().min(1).max(4096).nullable().optional(),
    })
    .optional(),
  sites: SitesSettings.partial().optional(),
});
export type GlobalSettingsUpdate = z.infer<typeof GlobalSettingsUpdate>;

/** 合并部分更新(纯函数,web 乐观更新与 server 共用) */
export function mergeSettings(current: GlobalSettings, patch: GlobalSettingsUpdate): GlobalSettings {
  const { compaction, subagents, ...pi } = patch.pi ?? {};
  const { tmdbApiKey: _tmdbApiKey, ...metadata } = patch.metadata ?? {};
  return {
    automation: { ...current.automation, ...patch.automation },
    cache: { ...current.cache, ...patch.cache },
    organize: { ...current.organize, ...patch.organize },
    retention: { ...current.retention, ...patch.retention },
    pi: mergePi(current.pi, pi, compaction, subagents),
    budget: { ...current.budget, ...patch.budget },
    agent: { ...current.agent, ...patch.agent },
    metadata: { ...current.metadata, ...metadata },
    sites: { ...(current.sites ?? DEFAULT_SETTINGS.sites), ...patch.sites },
  };
}

/** 子代理开关:subagents.enabled 优先,旧字段 subagentsEnabled 作别名,合并后两者一致 */
function mergePi(
  current: PiSettings,
  pi: Partial<Omit<PiSettings, "compaction" | "subagents">>,
  compaction: Partial<PiSettings["compaction"]> | undefined,
  subagents: Partial<PiSettings["subagents"]> | undefined,
): PiSettings {
  const base = current.subagents ?? DEFAULT_SETTINGS.pi.subagents;
  const enabled = subagents?.enabled ?? pi.subagentsEnabled ?? base.enabled;
  return {
    ...current,
    ...pi,
    compaction: { ...current.compaction, ...compaction },
    subagents: { ...base, ...subagents, enabled },
    subagentsEnabled: enabled,
  };
}

/** settings 表行 */
export const SettingEntry = z.object({
  key: SettingsKey,
  value: z.unknown(),
  updatedAt: Timestamp,
});
export type SettingEntry = z.infer<typeof SettingEntry>;

/** 已弃用、不归属任何设置分区的旧字段(见 PiSettings 注释) */
export const DEPRECATED_SETTINGS_FIELDS = [
  "pi.provider",
  "pi.baseUrl",
  "pi.model",
  "pi.thinkingLevel",
  "pi.apiKeySecretRef",
] as const;

// ── 设置页分区(docs/design/console-ia.md §3.4) ──
// 只是"展示分区 → 字段"的映射,不改存储 key;除 DEPRECATED_SETTINGS_FIELDS 外每个字段恰好归属一个分区(测试断言)。
// 非 settings 表的对象(实例、站点、API Key、Pi 上游、账户)用 resources 标注,不进 fields。

export const SettingsSectionId = z.enum([
  "automation",
  "sites",
  "downloaders",
  "library",
  "media-servers",
  "metadata",
  "agent",
  "api-keys",
  "account",
]);
export type SettingsSectionId = z.infer<typeof SettingsSectionId>;

export type SettingsSectionDef = {
  id: SettingsSectionId;
  label: string;
  description: string;
  /** 旧 `?tab=` 值 → 本分区(可带分区内锚点) */
  legacyTabs: { tab: string; anchor?: string }[];
  /** 分区内锚点(节),顺序即页面顺序 */
  anchors: { id: string; label: string }[];
  /** 归属本分区的 settings 字段(`key.field`,compaction 这类嵌套对象按整体算) */
  fields: string[];
  /** 本分区管理的非 settings 对象 */
  resources: string[];
};

export const SETTINGS_SECTIONS: readonly SettingsSectionDef[] = [
  {
    id: "automation",
    label: "自动化",
    description: "总开关、缓存水位、每日预算、保留天数",
    legacyTabs: [{ tab: "automation" }, { tab: "storage", anchor: "cache" }],
    anchors: [
      { id: "switches", label: "开关" },
      { id: "cache", label: "缓存水位" },
      { id: "budget", label: "每日预算" },
      { id: "retention", label: "保留" },
    ],
    fields: [
      "automation.enabled",
      "automation.readOnlyReconcile",
      "cache.hardThresholdPercent",
      "cache.resumePercent",
      "cache.checkIntervalSec",
      "cache.cleanupTargetPercent",
      "budget.maxNewTitlesPerDay",
      "budget.maxDownloadBytesPerDay",
      "budget.maxConcurrentDownloads",
      "retention.seedRetentionDays",
      "retention.logRetentionDays",
    ],
    resources: [],
  },
  {
    id: "sites",
    label: "站点默认",
    description: "新站点的限流、快照周期、UA 和代理;站点和凭证在站点页管理",
    legacyTabs: [{ tab: "site-credentials" }],
    anchors: [{ id: "defaults", label: "站点默认" }],
    fields: [
      "sites.defaultRateLimit",
      "sites.defaultSnapshotIntervalSec",
      "sites.userAgent",
      "sites.proxyUrl",
      "sites.userDataMaxSeedingPages",
    ],
    resources: [],
  },
  {
    id: "downloaders",
    label: "下载器",
    description: "qBittorrent 实例、连通测试、路径映射",
    legacyTabs: [{ tab: "downloaders" }, { tab: "path-mappings" }],
    anchors: [{ id: "instances", label: "实例" }],
    fields: [],
    resources: ["downloader-instances", "path-mappings"],
  },
  {
    id: "library",
    label: "媒体库与目录",
    description: "库根、哨兵状态、默认整理方式",
    legacyTabs: [{ tab: "library-roots", anchor: "roots" }],
    anchors: [
      { id: "roots", label: "库根" },
      { id: "organize", label: "整理方式" },
    ],
    fields: ["organize.defaultMode", "organize.allowCrossVolumeMove"],
    resources: ["library-roots"],
  },
  {
    id: "media-servers",
    label: "媒体服务器",
    description: "Emby / Jellyfin 实例、连通测试、路径映射",
    legacyTabs: [{ tab: "media-servers" }],
    anchors: [{ id: "instances", label: "实例" }],
    fields: [],
    resources: ["media-server-instances", "path-mappings"],
  },
  {
    id: "metadata",
    label: "元数据",
    description: "TMDB API Key 与地址",
    legacyTabs: [],
    anchors: [{ id: "tmdb", label: "TMDB" }],
    fields: ["metadata.tmdbApiKeySecretRef", "metadata.tmdbBaseUrl"],
    resources: [],
  },
  {
    id: "agent",
    label: "Agent",
    description: "Agent 上游、运行预算、自动调查",
    legacyTabs: [{ tab: "pi" }],
    anchors: [
      { id: "upstream", label: "上游" },
      { id: "runtime", label: "上下文与子会话" },
      { id: "budget", label: "预算" },
      { id: "investigate", label: "自动调查" },
      { id: "advanced", label: "高级" },
    ],
    fields: [
      "pi.defaultUpstreamId",
      "pi.contextBudget",
      "pi.compaction",
      "pi.subagentsEnabled",
      "pi.subagents",
      "budget.agentMaxRunsPerDay",
      "budget.agentMaxCostUsdPerDay",
      "agent.autoInvestigate",
      "agent.autoInvestigateMode",
      "agent.investigateMaxAttempts",
      "agent.recoverVerifySec",
      "agent.maxToolCalls",
      "agent.maxDurationSec",
      "agent.maxTokensPerRun",
      "agent.maxCostUsdPerRun",
      "agent.investigateMaxToolCalls",
      "agent.goalPollSec",
      "agent.goalWaitHours",
      "agent.fakeScript",
      "agent.sessionDir",
    ],
    resources: ["pi-upstreams"],
  },
  {
    id: "api-keys",
    label: "API Key",
    description: "签发给外部程序的 Key",
    legacyTabs: [{ tab: "api-keys" }],
    anchors: [{ id: "keys", label: "API Key" }],
    fields: [],
    resources: ["api-keys"],
  },
  {
    id: "account",
    label: "账户与安全",
    description: "密码、二次验证、会话、快捷键",
    legacyTabs: [],
    anchors: [
      { id: "password", label: "密码" },
      { id: "totp", label: "二次验证" },
      { id: "session", label: "会话" },
      { id: "shortcuts", label: "快捷键" },
    ],
    fields: [],
    resources: ["auth"],
  },
];

/** 旧 `?tab=` → 分区与锚点;不认识的返回 null */
export function settingsSectionForLegacyTab(tab: string): { section: SettingsSectionId; anchor?: string } | null {
  for (const s of SETTINGS_SECTIONS) {
    const hit = s.legacyTabs.find((t) => t.tab === tab);
    if (hit) return { section: s.id, anchor: hit.anchor };
  }
  return null;
}