Console-global config is now unified in ~/.downcity/downcity.db with encrypted sensitive fields

Console Config Storage (downcity.db)

From current versions, Console no longer uses:

Console-global config is unified in:

What is stored

downcity.db contains these major groups:

Model pool (providers/models)
Console-global env (global_env)
Agent-private env (agent_env)
Bot account vault (channel_accounts)
Chat user authorization (chat_auth_roles, chat_auth_role_permissions, chat_auth_channel_defaults, chat_auth_user_roles)

Sensitive fields (such as API keys) are stored encrypted.

These files remain agent-project-level config (unchanged):

So the split is:

Current versions use explicit layers:

Console-global shared env: global_env
Agent-private env in DB: agent_env
Agent-local env overlay: <agent>/.env (user-managed)
Chat channel credentials: channel_accounts (bound by downcity.json channelAccountId)
Chat user authorization: chat_auth_* structured tables (city-global)

Key behavior:

Agent env map is agent_env + <agent>/.env (.env wins).
.env remains agent-local and does not mutate global process.env.
downcity.json stores channel binding (channelAccountId) instead of plaintext secrets.
Bot credentials are resolved from channel_accounts.
Chat user permissions are resolved from chat_auth_* tables, not from an agent project.
Plugin parameters are read from project downcity.json, while plugin enable/disable belongs to Console global state.

Initialize Console (writes into downcity.db):

city init

Read/update project plugin parameters:

city config get plugins.asr
city config set plugins.asr.modelId '\"SenseVoiceSmall\"'

Toggle city-level plugin lifecycle:

city asr on
city asr off

Manage model pool:

city model list
city model create

These process-state files stay in filesystem (not config):