fix: consume safe provider model mappings

Author: NWYLZW

README.md

@@ -18,10 +18,9 @@ filesystem path, raw transport, or Fleet handle.
 
 The candidate pins Protocol `f9b57a6dc665ff471c9bda06d4923be6e2e03b6a`.
 It remains private and unmerged until the matching Host service loader and
-broker authority are formally merged. One contract gap is still open: the v1
-factory projection omits the safe per-provider model mapping stored in the
-CLIProxy runtime configuration. The migration must resolve that public
-projection before claiming feature parity or deleting the Host-built consumer.
+broker authority are formally merged. The branch consumes the formal Protocol v2 safe factory projection so each
+Host-validated provider model mapping reaches the plugin without exposing raw
+service configuration. Protocol v2 is pinned at `cbfd15ef4d2f51bcffa659f393cd65730bbe5f0d`; the matching Host v2 implementation must still be formalized before this plugin can merge.
 
 ## Development
 

README.zh-Hans.md

@@ -14,8 +14,7 @@ Host 继续负责 endpoint 与凭据解析、进程启动、不透明 workspace
 
 候选精确固定 Protocol `f9b57a6dc665ff471c9bda06d4923be6e2e03b6a`。
 在匹配的 Host 服务装载器和 broker authority 正式合入前，包保持 private 且 PR 不合入。
-目前还存在一个公开合同缺口：v1 factory projection 没有携带 CLIProxy runtime 配置中的安全模型映射。
-在宣称功能等价或删除 Host 内置消费者前，必须先解决这个投影缺口。
+当前分支消费正式的 Protocol v2 安全 factory projection，让 Host 校验后的模型映射进入插件，同时不暴露原始服务配置。Protocol v2 已精确固定为 `cbfd15ef4d2f51bcffa659f393cd65730bbe5f0d`；匹配的 Host v2 实现正式合入后，本插件才可合入。
 
 ## 开发
 

package-lock.json

@@ -33,11 +33,12 @@
     "lint": "eslint .",
     "stylelint": "stylelint \"src/**/*.css\" --allow-empty-input",
     "test": "node --test test/*.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "prepare": "npm run build"
   },
   "devDependencies": {
     "@cordisx/eslint-config": "github:cordisx/cordisxmono#c63c2e8c2ba7e11502934a52ad2ce3734e804cdc",
-    "@cordisx/protocol": "github:cordisx/cordisx-protocol#f9b57a6dc665ff471c9bda06d4923be6e2e03b6a",
+    "@cordisx/protocol": "github:cordisx/cordisx-protocol#cbfd15ef4d2f51bcffa659f393cd65730bbe5f0d",
     "@deepseek-ai/cordis": "4.0.1",
     "@deepseek-ai/schemastery": "3.18.1",
     "@projectwallace/stylelint-plugin": "0.7.0",

package.json

@@ -1,11 +1,11 @@
 import type {
   PlatformProviderAdapterV1,
-  PlatformProviderFactoryConfigurationV1,
+  PlatformProviderFactoryConfigurationV2,
   PlatformProviderModelRefV1,
   PlatformProviderResultV1,
   PlatformProviderSessionRefV1,
   PlatformProviderSessionV1,
-} from '@cordisx/protocol/platform-provider/v1'
+} from '@cordisx/protocol/platform-provider/v2'
 import { BrokerClient } from './broker-client.js'
 import { LifecycleProjection } from './lifecycle.js'
 import { model, object, session, sessionDetail, text } from './values.js'
@@ -30,7 +30,7 @@ export class CliProxyPlatformProviderAdapter implements PlatformProviderAdapterV
   constructor(
     readonly providerId: string,
     readonly providerGeneration: string,
-    readonly configuration: PlatformProviderFactoryConfigurationV1,
+    readonly configuration: PlatformProviderFactoryConfigurationV2,
     broker: ConstructorParameters<typeof BrokerClient>[0],
     private readonly signal: AbortSignal,
   ) {

src/service/adapter.ts

@@ -1,7 +1,7 @@
 import type {
-  PlatformProviderDefinitionV1,
-  PlatformProviderServiceApplyV1,
-} from '@cordisx/protocol/platform-provider/v1'
+  PlatformProviderDefinitionV2,
+  PlatformProviderServiceApplyV2,
+} from '@cordisx/protocol/platform-provider/v2'
 import { CliProxyPlatformProviderAdapter } from './adapter.js'
 import { BROKER_BINDINGS } from './bindings.js'
 
@@ -17,10 +17,10 @@ const OPERATIONS = [
   'approvals.decide',
 ] as const
 
-export const apply: PlatformProviderServiceApplyV1 = async (ctx, input) => {
+export const apply: PlatformProviderServiceApplyV2 = async (ctx, input) => {
   for (const configuration of input.configurations) {
     if (!configuration.enabled) continue
-    const definition: PlatformProviderDefinitionV1 = {
+    const definition: PlatformProviderDefinitionV2 = {
       descriptor: {
         $schema:
           'https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/platform-provider-descriptor.v1.schema.json',
@@ -31,9 +31,9 @@ export const apply: PlatformProviderServiceApplyV1 = async (ctx, input) => {
         implementationStatus: 'experimental',
         operations: OPERATIONS,
       },
-      mapping: { models: [] },
+      mapping: configuration.mapping,
       brokerRequest: {
-        bindings: BROKER_BINDINGS as PlatformProviderDefinitionV1['brokerRequest']['bindings'],
+        bindings: BROKER_BINDINGS as PlatformProviderDefinitionV2['brokerRequest']['bindings'],
       },
       createAdapter: async factory => {
         if (factory.owner.ownerHandle !== input.owner.ownerHandle) {

src/service/index.ts

@@ -20,6 +20,7 @@ const configuration = {
   displayName: 'Gateway A',
   enabled: true,
   requestTimeoutMs: 30000,
+  mapping: { models: [{ sourceModelId: 'source-gpt', modelId: 'gpt-test', enabled: true, isDefault: true }] },
 }
 
 function broker() {
@@ -101,6 +102,7 @@ test('registers every enabled provider through the public Host-owned service con
   })
   assert.equal(definition.descriptor.providerId, 'gateway-a')
   assert.equal(definition.brokerRequest.bindings.length, 22)
+  assert.deepEqual(definition.mapping, configuration.mapping)
   assert.deepEqual(definition.descriptor.operations, [
     'models.list',
     'sessions.list',