OpenCode
62c692c5a1
AES-256-GCM encryption (KeyCipher) with master key from NEXUS_MASTER_KEY, never persisted. ProvidersStore in SQLite: CRUD, enable/disable, default, encrypted api keys, masked views for UI. KeyResolver applies env>DB precedence and supports multiple providers. context.ts registers providers dynamically from resolved config; backward compatible with env-only setups.
87 lines
2.8 KiB
TypeScript
87 lines
2.8 KiB
TypeScript
import {
|
|
Journal,
|
|
KeyCipher,
|
|
KeyResolver,
|
|
MediaStorage,
|
|
ProviderRegistry,
|
|
ProvidersStore,
|
|
createNordRouterProviders,
|
|
loadConfig,
|
|
LocalWhisperProvider,
|
|
createLogger,
|
|
type NexusConfig,
|
|
} from '@nexusai/core';
|
|
|
|
const log = createLogger('context');
|
|
|
|
export interface AppContext {
|
|
config: NexusConfig;
|
|
registry: ProviderRegistry;
|
|
storage: MediaStorage;
|
|
journal: Journal;
|
|
providersStore: ProvidersStore;
|
|
/** Effective default provider name after resolving DB/env. */
|
|
defaultProvider: string;
|
|
}
|
|
|
|
/** Built-in providers always considered, even without a DB row. */
|
|
const BUILTINS = [{ name: 'nordrouter', defaultBaseUrl: 'https://nordrouter.com' }];
|
|
|
|
/**
|
|
* Wire up providers, storage, journal and the encrypted providers store.
|
|
* API keys resolve with ENV > DB precedence (see KeyResolver).
|
|
*/
|
|
export function buildContext(): AppContext {
|
|
const config = loadConfig();
|
|
const storage = new MediaStorage(config.mediaDir);
|
|
const journal = new Journal(config.dbPath);
|
|
const registry = new ProviderRegistry();
|
|
|
|
const cipher = new KeyCipher(config.masterKey);
|
|
const providersStore = new ProvidersStore(config.providersDbPath, cipher);
|
|
const resolver = new KeyResolver(config, providersStore);
|
|
|
|
if (!cipher.enabled) {
|
|
log.warn('NEXUS_MASTER_KEY not set — DB-stored API keys are unavailable; using env keys only');
|
|
}
|
|
|
|
const resolved = resolver.resolveAll(BUILTINS);
|
|
const defaultProvider = resolver.resolveDefault(resolved);
|
|
|
|
for (const p of resolved) {
|
|
if (!p.enabled) {
|
|
log.info(`provider "${p.name}" disabled — skipped`);
|
|
continue;
|
|
}
|
|
if (p.type === 'nordrouter') {
|
|
if (!p.apiKey) {
|
|
log.warn(`provider "${p.name}" has no API key (env or DB) — tools will error when used`);
|
|
}
|
|
try {
|
|
const nr = createNordRouterProviders({
|
|
config: { apiKey: p.apiKey, baseUrl: p.baseUrl },
|
|
storage,
|
|
save: true,
|
|
});
|
|
// Register under the provider's own name so multiple nordrouter-type
|
|
// providers with different keys can coexist.
|
|
Object.defineProperty(nr.media, 'name', { value: p.name });
|
|
Object.defineProperty(nr.search, 'name', { value: p.name });
|
|
registry.registerMedia(nr.media);
|
|
registry.registerSearch(nr.search);
|
|
log.info(`registered provider "${p.name}" (media + search, key: ${p.keySource})`);
|
|
} catch (err) {
|
|
log.warn(`failed to register "${p.name}"`, err instanceof Error ? err.message : String(err));
|
|
}
|
|
} else {
|
|
log.warn(`provider type "${p.type}" (${p.name}) not implemented yet — skipped`);
|
|
}
|
|
}
|
|
|
|
registry.registerStt(new LocalWhisperProvider(config.stt));
|
|
log.info('registered local STT provider');
|
|
log.info(`default provider: ${defaultProvider}`);
|
|
|
|
return { config, registry, storage, journal, providersStore, defaultProvider };
|
|
}
|