@zonease/aiworker-cli 0.4.4 → 0.4.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -1
- package/aiworker.js +269 -260
- package/package.json +1 -1
- package/web/fleet/assets/index-CPgh_dNz.js +20 -0
- package/web/fleet/assets/index-DWftflwL.css +2 -0
- package/web/fleet/index.html +2 -2
- package/web/worker/assets/index-DWftflwL.css +2 -0
- package/web/worker/assets/index-Y4_n8iCO.js +30 -0
- package/web/worker/index.html +2 -2
- package/web/fleet/assets/index-BkCxuWAF.js +0 -20
- package/web/fleet/assets/index-Czxa0E7b.css +0 -2
- package/web/worker/assets/index-CsmNHJI_.js +0 -30
- package/web/worker/assets/index-Czxa0E7b.css +0 -2
package/README.md
CHANGED
|
@@ -337,7 +337,10 @@ apps/{api, cli, web} + packages/{core, gateway, gateway-proto, shared, storage-s
|
|
|
337
337
|
| `WORKER_DB_PATH` | worker | 默认 `$AIWORKER_HOME/worker.db` |
|
|
338
338
|
| `AIWORKER_FLEET_DB_PATH` | gateway | 默认 `$AIWORKER_HOME/fleet.db` |
|
|
339
339
|
| `AIWORKER_GATEWAY_PORT` | gateway | 默认 `9218` |
|
|
340
|
+
| `AIWORKER_GATEWAY_HOST` | gateway | 默认 `127.0.0.1`；非 loopback 需 `INTERNAL_SHARED_SECRET` |
|
|
340
341
|
| `PORT` | worker | 默认 `9217` |
|
|
342
|
+
| `AIWORKER_WORKER_HOST` | worker CLI | 默认 `127.0.0.1`；`aiworker serve --host` 可覆盖 |
|
|
343
|
+
| `AIWORKER_ADMIN_EXTERNAL_AUTH` | gateway / worker CLI | `1` / `true` 表示 `/admin/*` 已由 Caddy / Access / allowlist 等外部层保护 |
|
|
341
344
|
| `AIWORKER_ENROLL_OTP_TTL_SEC` | gateway | OTP 过期秒数，默认 300，[30, 3600] |
|
|
342
345
|
|
|
343
346
|
完整列表：`apps/api/.env.example` + `ops/compose/.env.example`。
|
|
@@ -362,7 +365,7 @@ apps/{api, cli, web} + packages/{core, gateway, gateway-proto, shared, storage-s
|
|
|
362
365
|
- **timing-safe** bearer 比较
|
|
363
366
|
- **5 channel webhook 强制验签**（Telegram / WhatsApp / Lark / LINE / Web binding token）
|
|
364
367
|
- **Caddy 路径分流**：`/ws` basicauth 守 operator + 已配对 worker，`/enroll-ws` 仅接受 OTP submit；fail-closed（缺 `/etc/caddy/auth.snippet` 直接拒启动，BUG-007）
|
|
365
|
-
- **`/admin/*`（fleet + worker UI）** 与 `/ws`、`/api/*`
|
|
368
|
+
- **`/admin/*`（fleet + worker UI）** 与 `/ws`、`/api/*` 同等级，公网必须走 basicauth / Cloudflare Access / IP allowlist / Logto 等外部鉴权。`aiworker {gateway start, serve}` 默认挂 `/admin/*`，但在非 loopback host 上实际服务 admin bundle 时会 fail closed：要么绑定 `127.0.0.1`，要么 `--no-serve-web` / `AIWORKER_*_NO_SERVE_WEB=1` 关闭 admin，要么确认外部鉴权已覆盖后设置 `AIWORKER_ADMIN_EXTERNAL_AUTH=1`。这不是应用内登录开关，只是防止误把公开 admin 静态资源裸跑。
|
|
366
369
|
|
|
367
370
|
---
|
|
368
371
|
|