feat: expand commercial ai drama platform

scripts/smoke-model-connectors.mjs

@@ -4,6 +4,7 @@ import { withTransaction, dbRun } from "../server/db.mjs";
 
 const api = process.env.AI_DRAMA_API_BASE || "http://127.0.0.1:8787";
 const runnerPort = Number(process.env.AI_DRAMA_SMOKE_MODEL_PORT || 8792);
+const secretEnv = "AI_DRAMA_SMOKE_MISSING_SECRET";
 const scope = {
   "x-organization-id": "org-studio-lab",
   "x-workspace-id": "ws-local-aidrama",
@@ -69,12 +70,16 @@ try {
       kind: "http-json",
       capability: ["text-to-image", "single-frame"],
       costMode: "local",
+      authEnv: secretEnv,
       protocol: { healthRoute: "health" }
     })
   });
   assert.equal(created.response.status, 201, "本地自定义 Runner 注册失败");
   modelId = created.payload.model.id;
   assert.equal(created.payload.model.approvalRequired, false, "本地连接器不应被强制标记为外部审批");
+  assert.equal(created.payload.model.secretPolicy.authEnv, secretEnv, "连接器必须只返回密钥环境变量名");
+  assert.equal(created.payload.model.secretPolicy.status, "missing", "未设置的密钥环境变量必须显示为 missing");
+  assert.equal(created.payload.model.endpointPolicy.localOnlySafe, true, "本地连接器 endpoint 应被识别为 local-only safe");
 
   const edited = await request(`/api/platform/models/${encodeURIComponent(modelId)}`, owner, {
     method: "PATCH",