JX-BPOS/apps/api/src/modules/llm/internal/usecase/llm-service.ts

/**
 * llm 用例 —— LLM 实例的四元绑定管理(编码规范 §5.3;语义出处 OS 02 系统管理)。
 */
import type { LlmInstanceView } from '@contracts';
import type { LlmService, UpsertLlmInstance } from '../../contract.ts';
import type { Clock, IdGenerator, LlmInstanceRepository, ProviderInvoker, SecretBox } from '../../port.ts';
import { pickSystemUse, toPublicView, validateBinding } from '../domain/model-binding.ts';
import type { ModelBinding } from '../domain/model-binding.ts';

export type LlmServiceDeps = {
  readonly instances: LlmInstanceRepository;
  readonly provider: ProviderInvoker;
  readonly secrets: SecretBox;
  readonly clock: Clock;
  readonly ids: IdGenerator;
};

export function createLlmService(deps: LlmServiceDeps): LlmService {
  return {
    async list(): Promise<LlmInstanceView[]> {
      const all = await deps.instances.list();
      return all.map(toPublicView);
    },

    async upsert(input: UpsertLlmInstance): Promise<LlmInstanceView> {
      const existing = input.id === undefined ? undefined : await deps.instances.findById(input.id);
      // 只写不读:apiKey 留空即保持原密文(ADR-009 #4)
      const apiKeyCipher =
        input.apiKey !== undefined && input.apiKey !== ''
          ? deps.secrets.seal(input.apiKey)
          : existing?.apiKeyCipher;

      const binding: ModelBinding = {
        id: existing?.id ?? input.id ?? deps.ids.next(),
        name: input.name,
        provider: input.provider,
        baseUrl: input.baseUrl,
        model: input.model,
        apiKeyCipher,
        systemUse: input.systemUse,
        enabled: input.enabled,
      };
      const saved = await deps.instances.upsert(binding);
      return toPublicView(saved);
    },

    async remove(id) {
      await deps.instances.remove(id);
    },

    async probe(id) {
      const binding = await deps.instances.findById(id);
      if (binding === undefined) return { ok: false, error: '实例不存在' };
      const violations = validateBinding(binding);
      if (violations.length > 0) {
        return { ok: false, error: violations.map((v) => `${v.field}:${v.message}`).join('; ') };
      }
      const started = deps.clock.now().getTime();
      try {
        await deps.provider.invoke({
          binding,
          apiKey: deps.secrets.open(binding.apiKeyCipher!),
          call: { model: binding.name, prompt: 'ping', maxOutputTokens: 8, label: 'probe' },
        });
        return { ok: true, latencyMs: deps.clock.now().getTime() - started };
      } catch (error) {
        return { ok: false, error: error instanceof Error ? error.message : String(error) };
      }
    },

    async assertNamesBound(names) {
      const all = await deps.instances.list();
      const bound = new Set(all.filter((b) => validateBinding(b).length === 0 && b.enabled).map((b) => b.name));
      const missing = [...new Set(names)].filter((n) => !bound.has(n));
      return { ok: missing.length === 0, missing };
    },

    async systemUseBinding() {
      return pickSystemUse(await deps.instances.list());
    },
  };
}