feat: TUI 模型配置、启动构建与 LLM 厂商注册表

- 后端：新增 llm-provider-registry，listProviders 返回全量厂商；createLLM 使用注册表默认 Base URL
- TUI：解包 Nest 响应信封；SetApiKey 使用 apiKey/baseUrl；厂商列表 merge 兜底与类型拆分
- 启动：根目录 prestart 与 start:stack 每次构建后端；TUI pretui 后运行 dist/cli.js；无 TTY 时 npm run tui
- chore：start:latest 避免与 start:stack 重复编译；根目录 /dist/ 加入 .gitignore
- docs：LLM_PROVIDERS 说明以 llm-provider-registry 为准

Made-with: Cursor

Author: iammm0

.gitignore

@@ -7,6 +7,7 @@ yarn-error.log*
 # TypeScript 构建产物
 server/dist/
 terminal-ui/dist/
+/dist/
 desktop/dist/
 *.tsbuildinfo
 

docs/LLM_PROVIDERS.md

@@ -121,4 +121,4 @@ https://<resource-name>.openai.azure.com/openai/v1
 ## 注意事项
 
 - 厂商侧模型与 Base URL 可能会变化，文档只保证与当前代码的配置逻辑一致
-- 如果要看默认模型建议值，请以 `server/src/modules/system/system.service.ts` 中的 `PROVIDER_REGISTRY` 为准
+- 厂商清单与默认 OpenAI 兼容网关以 `server/src/modules/system/llm-provider-registry.ts` 中的 `LLM_PROVIDER_REGISTRY` 为准（`listProviders` 与此同步）

package-lock.json

@@ -21,6 +21,7 @@
     "clean": "node -e \"require('node:fs').rmSync('server/dist',{recursive:true,force:true})\"",
     "build": "tsc -p server/tsconfig.json",
     "dev": "tsx watch server/src/main.ts",
+    "prestart": "npm run build",
     "start": "node server/dist/main.js",
     "start:stack": "node scripts/start_stack.js",
     "start:latest": "node scripts/start_latest.js",

package.json

@@ -158,18 +158,17 @@ async function main() {
     log('Skipping npm install due to --no-install');
   }
 
-  log('Building backend...');
-  await runNpm(['run', 'build']);
-
   log(`Stopping old backend on port ${DEFAULT_PORT} (if any)...`);
   await stopListeningProcessOnPort(DEFAULT_PORT);
 
   if (PREPARE_ONLY) {
+    log('Building backend...');
+    await runNpm(['run', 'build']);
     log('Prepare-only completed.');
     return;
   }
 
-  log('Launching full stack...');
+  log('Launching full stack (start:stack will build backend then start TUI)...');
   await runNpm(['run', 'start:stack']);
 }
 

scripts/start_latest.js

@@ -3,6 +3,7 @@
 'use strict';
 
 const fs = require('node:fs');
+const os = require('node:os');
 const path = require('node:path');
 const { spawn } = require('node:child_process');
 
@@ -73,9 +74,9 @@ function runNpm(args, options = {}) {
   });
 }
 
-async function ensureBackendBuild() {
-  if (fs.existsSync(BACKEND_ENTRY)) return;
-  log('Backend dist not found, building TypeScript backend...');
+/** 每次启动均编译后端，避免沿用旧的 server/dist */
+async function buildBackendLatest() {
+  log('Building TypeScript backend (latest sources)...');
   await runNpm(['run', 'build']);
 }
 
@@ -133,12 +134,34 @@ async function stopProcess(proc) {
   }
 }
 
+/**
+ * IDE 集成终端通常无真实 TTY，Ink 无法在同一进程内运行。在 Windows 上通过「新控制台窗口」启动 TUI。
+ */
+function launchTuiInNewWindowsConsole(baseUrl) {
+  const batPath = path.join(os.tmpdir(), `secbot-tui-${process.pid}-${Date.now()}.bat`);
+  const safeUrl = baseUrl.replace(/"/g, '').replace(/\r?\n/g, '');
+  const safeDir = TUI_DIR.replace(/"/g, '""');
+  const body = [
+    '@echo off',
+    `set "SECBOT_API_URL=${safeUrl}"`,
+    `cd /d "${safeDir}"`,
+    'call npm.cmd run tui',
+  ].join('\r\n');
+  fs.writeFileSync(batPath, `${body}\r\n`, 'utf8');
+
+  const child = spawn('cmd.exe', ['/c', 'start', 'Secbot TUI', batPath], {
+    cwd: ROOT,
+    stdio: 'ignore',
+    windowsHide: false,
+    detached: true,
+  });
+  child.unref();
+}
+
 async function main() {
-  if (!process.stdin.isTTY || !process.stdout.isTTY) {
-    log('Current terminal has no real TTY; open CMD/PowerShell/Windows Terminal to run TUI.');
-  }
+  const hasTTY = Boolean(process.stdin.isTTY && process.stdout.isTTY);
 
-  await ensureBackendBuild();
+  await buildBackendLatest();
   await ensureTuiDeps();
 
   const port = String(process.env.PORT || 8000);
@@ -174,25 +197,43 @@ async function main() {
     log(`Using existing backend at ${baseUrl}`);
   }
 
-  log('Starting terminal TUI...');
-  const tuiNpm = npmInvocation(['run', 'tui']);
-  const tuiProc = spawn(tuiNpm.cmd, tuiNpm.argv, {
-    cwd: TUI_DIR,
-    env: tuiEnv,
-    stdio: 'inherit',
-    shell: tuiNpm.shell,
-    windowsHide: true,
-  });
-
   const shutdown = async () => {
     if (startedBackend) {
       await stopProcess(backendProc);
     }
   };
 
+  let tuiProc = null;
+  let tuiInSameTerminal = true;
+
+  if (!hasTTY && process.platform === 'win32') {
+    log('当前无真实 TTY（常见于 Cursor/VS Code 集成终端），将在新控制台窗口中启动 TUI。');
+    log('Starting terminal TUI in a new window...');
+    launchTuiInNewWindowsConsole(baseUrl);
+    log('TUI 已在新窗口启动；本终端将保持后端运行，按 Ctrl+C 可停止后端。');
+    tuiInSameTerminal = false;
+  } else if (!hasTTY) {
+    log('当前终端无真实 TTY，无法在此进程内启动 Ink TUI。');
+    log('请在系统终端中执行：npm run start:stack，或 Windows 下双击 scripts\\start-cli.bat');
+    await shutdown();
+    process.exit(1);
+  } else {
+    log('Starting terminal TUI...');
+    const tuiNpm = npmInvocation(['run', 'tui']);
+    tuiProc = spawn(tuiNpm.cmd, tuiNpm.argv, {
+      cwd: TUI_DIR,
+      env: tuiEnv,
+      stdio: 'inherit',
+      shell: tuiNpm.shell,
+      windowsHide: true,
+    });
+  }
+
   process.on('SIGINT', async () => {
     try {
-      if (tuiProc.exitCode === null) tuiProc.kill('SIGINT');
+      if (tuiInSameTerminal && tuiProc && tuiProc.exitCode === null) {
+        tuiProc.kill('SIGINT');
+      }
       await shutdown();
     } finally {
       process.exit(130);
@@ -201,13 +242,21 @@ async function main() {
 
   process.on('SIGTERM', async () => {
     try {
-      if (tuiProc.exitCode === null) tuiProc.kill('SIGTERM');
+      if (tuiInSameTerminal && tuiProc && tuiProc.exitCode === null) {
+        tuiProc.kill('SIGTERM');
+      }
       await shutdown();
     } finally {
       process.exit(143);
     }
   });
 
+  if (!tuiInSameTerminal) {
+    // 后端子进程已启动时，本进程需保持运行直至用户 Ctrl+C（见 SIGINT）；否则仅新开 TUI 窗口时也可仅靠子进程存活
+    await new Promise(() => {});
+    return;
+  }
+
   const tuiCode = await new Promise((resolve, reject) => {
     tuiProc.once('error', reject);
     tuiProc.once('close', (code) => resolve(code ?? 0));

scripts/start_stack.js

@@ -35,5 +35,3 @@ import { VulnDbModule } from './modules/vuln-db/vuln-db.module';
   ],
 })
 export class AppModule {}
-
-

server/src/app.module.ts

@@ -84,11 +84,7 @@ export class EventBus {
     }
   }
 
-  emitSimple(
-    type: EventType,
-    data: Record<string, unknown> = {},
-    iteration = 0,
-  ): void {
+  emitSimple(type: EventType, data: Record<string, unknown> = {}, iteration = 0): void {
     this.emit({
       type,
       data,

server/src/common/event-bus.ts

@@ -1,10 +1,4 @@
-import {
-  ArgumentsHost,
-  Catch,
-  ExceptionFilter,
-  HttpException,
-  HttpStatus,
-} from '@nestjs/common';
+import { ArgumentsHost, Catch, ExceptionFilter, HttpException, HttpStatus } from '@nestjs/common';
 import { Request, Response } from 'express';
 
 @Catch()
@@ -15,18 +9,11 @@ export class HttpExceptionFilter implements ExceptionFilter {
     const request = ctx.getRequest<Request>();
 
     const isHttpException = exception instanceof HttpException;
-    const status = isHttpException
-      ? exception.getStatus()
-      : HttpStatus.INTERNAL_SERVER_ERROR;
+    const status = isHttpException ? exception.getStatus() : HttpStatus.INTERNAL_SERVER_ERROR;
 
-    const message = isHttpException
-      ? exception.getResponse()
-      : 'Internal server error';
+    const message = isHttpException ? exception.getResponse() : 'Internal server error';
 
-    const body =
-      typeof message === 'string'
-        ? { message }
-        : (message as Record<string, unknown>);
+    const body = typeof message === 'string' ? { message } : (message as Record<string, unknown>);
 
     response.status(status).json({
       success: false,
@@ -37,4 +24,3 @@ export class HttpExceptionFilter implements ExceptionFilter {
     });
   }
 }
-