feat: Implement LLM provider deletion and refactor ConfigManager to preserve unknown payload sections.

build.sh

@@ -5,6 +5,8 @@ set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 cd "$SCRIPT_DIR"
 
+BACKEND_ENV_FILE="$SCRIPT_DIR/backend/.env"
+
 if ! command -v docker >/dev/null 2>&1; then
   echo "Error: docker is not installed or not in PATH."
   exit 1
@@ -19,6 +21,65 @@ else
   exit 1
 fi
 
+ensure_backend_encryption_key() {
+  if command -v python3 >/dev/null 2>&1; then
+    python3 - "$BACKEND_ENV_FILE" <<'PY'
+import base64
+import os
+import sys
+from pathlib import Path
+
+
+def is_valid_fernet_key(raw_value: str) -> bool:
+    value = raw_value.strip()
+    if not value:
+        return False
+
+    try:
+        decoded = base64.urlsafe_b64decode(value.encode())
+    except Exception:
+        return False
+
+    return len(decoded) == 32
+
+
+def generate_fernet_key() -> str:
+    return base64.urlsafe_b64encode(os.urandom(32)).decode()
+
+
+env_path = Path(sys.argv[1])
+env_path.parent.mkdir(parents=True, exist_ok=True)
+
+existing_lines: list[str] = []
+existing_key: str | None = None
+
+if env_path.exists():
+    existing_lines = env_path.read_text(encoding="utf-8").splitlines()
+    for line in existing_lines:
+        if line.startswith("ENCRYPTION_KEY="):
+            candidate = line.partition("=")[2].strip()
+            if is_valid_fernet_key(candidate):
+                existing_key = candidate
+            break
+
+if existing_key is None:
+    generated_key = generate_fernet_key()
+    filtered_lines = [line for line in existing_lines if not line.startswith("ENCRYPTION_KEY=")]
+    filtered_lines.append(f"ENCRYPTION_KEY={generated_key}")
+    env_path.write_text("\n".join(filtered_lines) + "\n", encoding="utf-8")
+    print(f"[build] ENCRYPTION_KEY ensured in {env_path}")
+else:
+    print(f"[build] Existing ENCRYPTION_KEY reused from {env_path}")
+PY
+    return
+  fi
+
+  echo "Error: python3 is required to generate backend/.env with ENCRYPTION_KEY."
+  exit 1
+}
+
+ensure_backend_encryption_key
+
 echo "[1/2] Building project images..."
 "${COMPOSE_CMD[@]}" build