chainlesschain 0.166.77 → 0.166.78

package/src/lib/token-tracker.js

@@ -7,45 +7,7 @@
 
 import { createHash } from "crypto";
 
-/**
- * Pricing data per million tokens (USD)
- */
-const PRICING = {
-  ollama: { input: 0, output: 0 },
-  openai: {
-    "gpt-4o": { input: 2.5, output: 10 },
-    "gpt-4o-mini": { input: 0.15, output: 0.6 },
-    "gpt-4-turbo": { input: 10, output: 30 },
-    "gpt-3.5-turbo": { input: 0.5, output: 1.5 },
-    o1: { input: 15, output: 60 },
-    _default: { input: 2.5, output: 10 },
-  },
-  anthropic: {
-    // Current Anthropic list prices (USD/1M), verified 2026-06-21 vs the
-    // claude-api reference. Lookup is EXACT-key (calculateCost), so keep current
-    // model ids listed or they fall back to the Sonnet _default and mis-price —
-    // e.g. claude-opus-4-8 would otherwise be billed at $3/$15 not $5/$25. The
-    // Opus tier dropped to $5/$25 with Opus 4.5; Haiku 4.5 is $1/$5.
-    "claude-opus-4-8": { input: 5, output: 25 },
-    "claude-opus-4-7": { input: 5, output: 25 },
-    "claude-opus-4-6": { input: 5, output: 25 },
-    "claude-opus-4-5": { input: 5, output: 25 },
-    "claude-sonnet-4-6": { input: 3, output: 15 },
-    "claude-haiku-4-5": { input: 1, output: 5 },
-    "claude-haiku-4-5-20251001": { input: 1, output: 5 },
-    "claude-fable-5": { input: 10, output: 50 },
-    _default: { input: 3, output: 15 },
-  },
-  deepseek: {
-    "deepseek-chat": { input: 0.14, output: 0.28 },
-    _default: { input: 0.14, output: 0.28 },
-  },
-  dashscope: {
-    "qwen-turbo": { input: 0.3, output: 0.6 },
-    "qwen-plus": { input: 0.8, output: 2 },
-    _default: { input: 0.3, output: 0.6 },
-  },
-};
+import { estimateCost } from "./llm-pricing.js";
 
 function ensureTokenTable(db) {
   db.exec(`
@@ -67,19 +29,22 @@ function ensureTokenTable(db) {
 /**
  * Calculate cost for a given usage
  */
-export function calculateCost(provider, model, inputTokens, outputTokens) {
-  const providerPricing = PRICING[provider];
-  if (!providerPricing) return 0;
-
-  // Ollama is free
-  if (provider === "ollama") return 0;
-
-  const modelPricing = providerPricing[model] || providerPricing._default;
-  if (!modelPricing) return 0;
-
-  const inputCost = (inputTokens / 1_000_000) * modelPricing.input;
-  const outputCost = (outputTokens / 1_000_000) * modelPricing.output;
-  return inputCost + outputCost;
+export function calculateCost(
+  provider,
+  model,
+  inputTokens,
+  outputTokens,
+  options = {},
+) {
+  const estimate = estimateCost({
+    ...options,
+    provider,
+    model,
+    inputTokens,
+    outputTokens,
+  });
+  // SQL NULL represents unpriced usage; it must never be confused with free.
+  return estimate.matched ? estimate.totalCost : null;
 }
 
 /**
@@ -98,7 +63,13 @@ export function recordUsage(db, params) {
   } = params;
 
   const totalTokens = inputTokens + outputTokens;
-  const costUsd = calculateCost(provider, model, inputTokens, outputTokens);
+  const costUsd = calculateCost(
+    provider,
+    model,
+    inputTokens,
+    outputTokens,
+    params,
+  );
 
   const id = createHash("sha256")
     .update(`${Date.now()}-${Math.random()}`)
@@ -120,7 +91,7 @@ export function recordUsage(db, params) {
     endpoint,
   );
 
-  return { id, totalTokens, costUsd };
+  return { id, totalTokens, costUsd, priced: costUsd !== null };
 }
 
 /**
@@ -132,6 +103,7 @@ export function getUsageStats(db, options = {}) {
   const { startDate, endDate, provider, model } = options;
   let sql = `SELECT
     COUNT(*) as total_calls,
+    COUNT(cost_usd) as priced_calls,
     COALESCE(SUM(input_tokens), 0) as total_input_tokens,
     COALESCE(SUM(output_tokens), 0) as total_output_tokens,
     COALESCE(SUM(total_tokens), 0) as total_tokens,
@@ -165,6 +137,11 @@ export function getUsageStats(db, options = {}) {
     total_tokens: result?.total_tokens || 0,
     total_cost_usd: result?.total_cost_usd || 0,
     avg_response_time_ms: result?.avg_response_time_ms || 0,
+    unpriced_calls: Math.max(
+      0,
+      (result?.total_calls || 0) -
+        (result?.priced_calls ?? result?.total_calls ?? 0),
+    ),
   };
 }
 
@@ -178,6 +155,7 @@ export function getCostBreakdown(db) {
     .prepare(
       `SELECT provider, model,
        COUNT(*) as calls,
+       COUNT(*) - COUNT(cost_usd) as unpriced_calls,
        SUM(input_tokens) as input_tokens,
        SUM(output_tokens) as output_tokens,
        SUM(total_tokens) as total_tokens,

package/src/lib/usage-pricing-context.js

@@ -0,0 +1,93 @@
+import {
+  DOCUMENTED_OPENAI_MODELS,
+  GPT6_PRICING_TERMS,
+} from "./model-context-catalog.js";
+
+/** Only bounded, non-secret pricing labels may enter the durable usage ledger. */
+export function projectUsagePricingContext(usage = {}) {
+  const projected = {};
+  for (const [key, alias] of [
+    ["service_tier", "serviceTier"],
+    ["regional_processing", "regionalProcessing"],
+  ]) {
+    if (!Object.hasOwn(usage, key) && !Object.hasOwn(usage, alias)) continue;
+    if (
+      Object.hasOwn(usage, key) &&
+      Object.hasOwn(usage, alias) &&
+      usage[key] !== usage[alias]
+    ) {
+      throw new TypeError(`usage pricing aliases conflict: ${key}`);
+    }
+    const value = Object.hasOwn(usage, key) ? usage[key] : usage[alias];
+    if (key === "service_tier") {
+      projected[key] =
+        typeof value === "string" &&
+        Object.hasOwn(GPT6_PRICING_TERMS.serviceMultipliers, value)
+          ? value
+          : "unknown";
+    } else {
+      if (typeof value !== "boolean")
+        throw new TypeError("usage regional processing must be boolean");
+      projected[key] = value;
+    }
+  }
+  return projected;
+}
+
+/** Preserve per-request thresholds in a bounded set of aggregate price buckets. */
+export function mergeUsagePricingBucket(entry, usage) {
+  if (
+    String(entry.provider).toLowerCase() !== "openai" ||
+    !DOCUMENTED_OPENAI_MODELS[String(entry.model).toLowerCase()]?.pricing
+  )
+    return;
+  const metadata = projectUsagePricingContext(usage);
+  const promptTokens =
+    usage.requestInputTokens ??
+    usage.inputTokens +
+      (usage.cacheReadTokens || 0) +
+      (usage.cacheCreationTokens || 0);
+  const long = promptTokens > GPT6_PRICING_TERMS.longContext.threshold;
+  const serviceTier = metadata.service_tier || "standard";
+  const regionalProcessing = metadata.regional_processing === true;
+  entry.pricingBuckets ||= [];
+  let bucket = entry.pricingBuckets.find(
+    (item) =>
+      item.serviceTier === serviceTier &&
+      item.regionalProcessing === regionalProcessing &&
+      item.requestInputTokens > GPT6_PRICING_TERMS.longContext.threshold ===
+        long,
+  );
+  if (!bucket) {
+    bucket = {
+      inputTokens: 0,
+      outputTokens: 0,
+      cacheReadTokens: 0,
+      cacheCreationTokens: 0,
+      totalTokens: 0,
+      calls: 0,
+      serviceTier,
+      regionalProcessing,
+      requestInputTokens: promptTokens,
+    };
+    entry.pricingBuckets.push(bucket);
+  }
+  for (const key of [
+    "inputTokens",
+    "outputTokens",
+    "cacheReadTokens",
+    "cacheCreationTokens",
+    "totalTokens",
+    "calls",
+  ]) {
+    const value = usage[key] ?? (key === "calls" ? 1 : 0);
+    if (
+      !Number.isSafeInteger(value) ||
+      value < 0 ||
+      !Number.isSafeInteger(bucket[key] + value)
+    ) {
+      throw new TypeError(`invalid pricing bucket ${key}`);
+    }
+    bucket[key] += value;
+  }
+}

package/src/runtime/headless-stream.js

@@ -52,6 +52,12 @@ import {
 } from "../lib/policy-decision-event.js";
 import { runWithHostHooksV2Workspace } from "../lib/hooks-v2-workspace-context.js";
 import { bootstrap } from "./bootstrap.js";
+import {
+  appendSessionInputWithReceipt,
+  readSessionInputReceipt,
+  inputSubmissionDigest,
+  validateClientMessageId,
+} from "../lib/session-input-receipt.js";
 import {
   buildSystemPrompt,
   chatWithTools as coreChatWithTools,
@@ -78,6 +84,7 @@ import {
   buildUserContent,
   resolveVisionLlm,
 } from "../lib/image-input.js";
+import { MAX_INPUT_IMAGES } from "../lib/image-file-boundary.js";
 import {
   buildIdePromptContext,
   expandIdeMentions,
@@ -115,6 +122,7 @@ import { IterationBudget } from "../lib/iteration-budget.js";
 import { CostBudget } from "../lib/cost-budget.js";
 import {
   resolvePermissionMode,
+  normalizePermissionMode,
   resolveEnabledTools,
   parseToolList,
   installPipeSafety,
@@ -171,6 +179,10 @@ import { createMcpHostRecoveryRuntime } from "../lib/mcp-host-recovery-runtime.j
 import { operationIdempotencyKey } from "../lib/idempotency.js";
 import { TurnBindingLog, createTurnBindingFeed } from "../lib/turn-binding.js";
 import { TURN_BINDING_EVENT } from "../lib/turn-binding-store.js";
+import {
+  transcriptMessageEventId,
+  transcriptResultReferences,
+} from "../lib/session-transcript-reference.js";
 import { getPlanModeManager } from "../lib/plan-mode.js";
 import {
   SESSION_SLASH_COMMANDS,
@@ -710,6 +722,14 @@ export function parseInputEvent(line) {
     };
   }
   const msg = obj && typeof obj === "object" ? obj.message || obj : {};
+  let clientMessageId;
+  if (obj?.client_message_id !== undefined) {
+    try {
+      clientMessageId = validateClientMessageId(obj.client_message_id);
+    } catch (error) {
+      return { error: error.message };
+    }
+  }
   let content = msg.content ?? obj.text ?? obj.prompt;
   if (Array.isArray(content)) {
     content = content
@@ -738,7 +758,9 @@ export function parseInputEvent(line) {
       content = detected.text;
     }
   }
-  images = [...new Set(images)].slice(0, 8);
+  images = [...new Set(images)];
+  if (images.length > MAX_INPUT_IMAGES)
+    return { error: `Attach at most ${MAX_INPUT_IMAGES} images per message` };
   // §3.5.10 接线6: optional per-turn LLM override (PDH privacy-tier switch) —
   // {"type":"user","text":…,"llm":{"provider","model","baseUrl"?,"apiKey"?}}.
   // Switches THIS turn's model (e.g. cloud → your own PC Ollama) without
@@ -750,6 +772,7 @@ export function parseInputEvent(line) {
     // An image-only turn is valid — give the model something to act on.
     if (images.length) {
       const r = { text: "Please look at the attached image(s).", images };
+      if (clientMessageId) r.clientMessageId = clientMessageId;
       if (obj.worklog_session_id !== undefined)
         r.worklogSessionId = obj.worklog_session_id;
       if (llm) r.llm = llm;
@@ -758,6 +781,7 @@ export function parseInputEvent(line) {
     return null;
   }
   const result = images.length ? { text: content, images } : { text: content };
+  if (clientMessageId) result.clientMessageId = clientMessageId;
   if (obj.worklog_session_id !== undefined)
     result.worklogSessionId = obj.worklog_session_id;
   if (llm) result.llm = llm;
@@ -2085,6 +2109,12 @@ async function runAgentHeadlessStreamInWorkspace(
     sessionExists: deps.sessionExists || jsonlSessionExists,
     startSession: deps.startSession || jsonlStartSession,
     appendUserMessage: deps.appendUserMessage || jsonlAppendUserMessage,
+    appendInputWithReceipt:
+      deps.appendInputWithReceipt ||
+      (hasInjectedSessionStore ? null : appendSessionInputWithReceipt),
+    readInputReceipt:
+      deps.readInputReceipt ||
+      (hasInjectedSessionStore ? null : readSessionInputReceipt),
     appendAssistantMessage:
       deps.appendAssistantMessage || jsonlAppendAssistantMessage,
     appendTokenUsage: deps.appendTokenUsage || jsonlAppendTokenUsage,
@@ -3106,10 +3136,37 @@ async function runAgentHeadlessStreamInWorkspace(
     protocol_version: STREAM_PROTOCOL_VERSION,
     session_id: sessionId,
     session_persistence: persist,
+    input_receipts: {
+      version:
+        persist && store.appendInputWithReceipt && store.readInputReceipt
+          ? 1
+          : 0,
+    },
     task_worklog: taskWorklog ? { version: 1, path: taskWorklog.file } : null,
     model,
     provider,
     permission_mode: options.permissionMode || "default",
+    // Correlates display state with this exact IDE child. This echo grants no
+    // authority: effective mode is derived only from validated CLI options.
+    ...(/^[a-zA-Z0-9-]{1,80}$/.test(process.env.CC_IDE_MODE_REQUEST_ID || "")
+      ? {
+          permission_mode_state: {
+            correlation_id: process.env.CC_IDE_MODE_REQUEST_ID,
+            requested: ["default", "acceptEdits", "bypassPermissions"].includes(
+              process.env.CC_IDE_REQUESTED_MODE,
+            )
+              ? process.env.CC_IDE_REQUESTED_MODE
+              : "default",
+            effective: normalizePermissionMode(options.permissionMode),
+            policy_revision: computePolicyDigest({
+              permissionMode: options.permissionMode,
+              allowedTools: options.allowedTools,
+              disallowedTools: disabledTools,
+              permissionRules,
+            }),
+          },
+        }
+      : {}),
     tools: enabledToolNames,
     tools_hash: computeToolsHash(enabledToolNames),
     policy_digest: computePolicyDigest({
@@ -4087,6 +4144,89 @@ async function runAgentHeadlessStreamInWorkspace(
       continue;
     }
 
+    // Bind the receipt to the submitted input, before commands, hooks, file
+    // expansion or image reads can change it. A repeated ID never replays work.
+    const inputSubmission = parsed.clientMessageId
+      ? {
+          text: parsed.text,
+          images: parsed.images || [],
+          llm: parsed.llm || null,
+          worklogSessionId: parsed.worklogSessionId || null,
+        }
+      : null;
+    const acknowledgeInput = (receipt) => {
+      emit({
+        type: "system",
+        subtype: "input_accepted",
+        session_id: sessionId,
+        client_message_id: parsed.clientMessageId,
+        receipt,
+      });
+      if (receipt.duplicate)
+        emit({
+          type: "result",
+          subtype: "input_already_accepted",
+          is_error: false,
+          session_id: sessionId,
+          client_message_id: parsed.clientMessageId,
+          execution_status: "not-reexecuted",
+          result:
+            "Input was already accepted. No work was re-executed; inspect the session for its outcome.",
+        });
+    };
+    if (parsed.clientMessageId) {
+      if (
+        !persist ||
+        !store.appendInputWithReceipt ||
+        !store.readInputReceipt
+      ) {
+        emit({
+          type: "result",
+          subtype: "error_input_receipt",
+          is_error: true,
+          session_id: sessionId,
+          client_message_id: parsed.clientMessageId,
+          acceptance: "rejected",
+          error: "Durable input receipts require canonical session persistence",
+        });
+        sawError = true;
+        continue;
+      }
+      try {
+        const prior = requireSynchronousRecoveryResult(
+          store.readInputReceipt(sessionId, parsed.clientMessageId),
+          "readInputReceipt",
+        );
+        if (prior?.accepted) {
+          const receipt = prior.receipt;
+          if (
+            !/^[a-f0-9]{64}$/u.test(receipt?.eventHash || "") ||
+            receipt.sessionId !== sessionId ||
+            receipt.clientMessageId !== parsed.clientMessageId ||
+            receipt.inputDigest !== inputSubmissionDigest(inputSubmission)
+          )
+            throw new Error("Input receipt conflicts with submission");
+          acknowledgeInput({ ...receipt, duplicate: true });
+          continue;
+        }
+        if (prior?.accepted !== false)
+          throw new Error("Invalid input receipt lookup");
+      } catch {
+        emit({
+          type: "result",
+          subtype: "error_input_receipt",
+          is_error: true,
+          session_id: sessionId,
+          client_message_id: parsed.clientMessageId,
+          acceptance: "unknown",
+          error:
+            "Cannot verify input acceptance; inspect the canonical session before sending again",
+        });
+        sawError = true;
+        continue;
+      }
+    }
+
     // Manual `/compact` uses the same provider-backed structured handoff as the
     // other long-lived hosts. Provider/schema failures degrade to the shared
     // extractive handoff instead of silently dropping all but recent turns.
@@ -4879,11 +5019,38 @@ async function runAgentHeadlessStreamInWorkspace(
       else turnContent = [{ type: "text", text: historyPart }, ...turnContent];
     }
     updateWorklog((log) => log.user(parsed.text));
-    messages.push({ role: "user", content: turnContent });
     let persistenceFailure = null;
+    let inputReceipt = null;
+    let userEventId = null;
     if (persist) {
       try {
-        store.appendUserMessage(sessionId, turnContent);
+        if (parsed.clientMessageId) {
+          if (!store.appendInputWithReceipt)
+            throw new Error("Durable input receipts are unavailable");
+          inputReceipt = requireSynchronousRecoveryResult(
+            store.appendInputWithReceipt(
+              sessionId,
+              turnContent,
+              parsed.clientMessageId,
+              inputSubmission,
+            ),
+            "appendInputWithReceipt",
+          );
+          if (
+            !/^[a-f0-9]{64}$/u.test(inputReceipt?.eventHash || "") ||
+            inputReceipt.sessionId !== sessionId ||
+            inputReceipt.clientMessageId !== parsed.clientMessageId ||
+            inputReceipt.inputDigest !==
+              inputSubmissionDigest(inputSubmission) ||
+            typeof inputReceipt.duplicate !== "boolean"
+          )
+            throw new Error("Invalid durable input receipt");
+          userEventId = inputReceipt.eventHash;
+        } else {
+          userEventId = transcriptMessageEventId(
+            store.appendUserMessage(sessionId, turnContent),
+          );
+        }
       } catch (error) {
         const persistenceError = createSessionPersistenceFailure(error, {
           sessionId,
@@ -4893,6 +5060,20 @@ async function runAgentHeadlessStreamInWorkspace(
           persistenceError,
           { phase: "before-model" },
         );
+        if (parsed.clientMessageId && !persistenceFailure) {
+          emit({
+            type: "result",
+            subtype: "error_input_receipt",
+            is_error: true,
+            session_id: sessionId,
+            client_message_id: parsed.clientMessageId,
+            acceptance: "unknown",
+            error:
+              "Cannot verify durable input append; inspect the canonical session before sending again",
+          });
+          sawError = true;
+          break;
+        }
         if (persistenceFailure) {
           try {
             deps.onPersistenceFailure?.(persistenceFailure);
@@ -4902,6 +5083,11 @@ async function runAgentHeadlessStreamInWorkspace(
         }
       }
     }
+    if (inputReceipt && !persistenceFailure) {
+      acknowledgeInput(inputReceipt);
+      if (inputReceipt.duplicate) continue; // Never re-run an accepted input.
+    }
+    messages.push({ role: "user", content: turnContent });
     turns += 1;
     approvalGrantLedger.beginTurn(turns);
     if (persistenceFailure) {
@@ -5215,9 +5401,12 @@ async function runAgentHeadlessStreamInWorkspace(
 
     // Grow the conversation so the next turn has context.
     messages.push({ role: "assistant", content: outcome.finalText });
+    let assistantEventId = null;
     if (persist) {
       try {
-        store.appendAssistantMessage(sessionId, outcome.finalText);
+        assistantEventId = transcriptMessageEventId(
+          store.appendAssistantMessage(sessionId, outcome.finalText),
+        );
       } catch (error) {
         const persistenceError = createSessionPersistenceFailure(error, {
           sessionId,
@@ -5248,6 +5437,14 @@ async function runAgentHeadlessStreamInWorkspace(
       outcome.endReason === "no-response" ||
       Boolean(persistenceFailure);
     if (isError) sawError = true;
+    const transcriptRefs = !persistenceFailure
+      ? transcriptResultReferences({
+          sessionId,
+          userEventId,
+          assistantEventId,
+          clientMessageId: parsed.clientMessageId || null,
+        })
+      : null;
 
     if (costStopped) {
       emit({
@@ -5275,6 +5472,7 @@ async function runAgentHeadlessStreamInWorkspace(
       session_id: sessionId,
       turn: turns,
       usage: outcome.usage,
+      ...(transcriptRefs ? { transcript_refs: transcriptRefs } : {}),
       ...(persistenceFailure ? { persistence: persistenceFailure } : {}),
     });
 

package/src/assets/web-panel/assets/EvolutionSettings-CmtU0XmM.js

@@ -1 +0,0 @@
-import{I as r,J as T,U as c,c as a,K as o,S as L,V as C,o as M,r as k,a as V,b as I,P as R,Q as d,R as m,F as H,Z as W}from"./vendor-Bn1JzzAn.js";import{_ as A,u as N,d as i}from"./index-hSzyoXri.js";import{R as F}from"./icons-DG5UD-6K.js";function B(P){return["ask","agent"].map(t=>{const n=P?.readiness?.[t],e=n?.state==="admitted",f=n?.scope==="deployment-admission"&&n.runtimeVerification==="not_checked"&&Array.isArray(n.requiredCommands)&&n.requiredCommands.includes(t)&&(e?n.ready===!0&&n.taskReady===null:["not_configured","disabled","invalid","command_not_allowed"].includes(n.state)&&n.ready===!1&&n.taskReady===!1);return{command:t,state:f?n.state:"unknown",summary:f?e?"部署准入通过":"部署准入被阻断":"未提供准入诊断",detail:f&&typeof n.detail=="string"?n.detail:"当前 CLI 未提供可识别的部署准入诊断，请更新 CLI。",remediation:f&&typeof n.remediation=="string"?n.remediation:""}})}function U(P,t){for(const n of Object.keys(P))delete P[n];Object.assign(P,{source:"none",effectiveEnabled:!1,profileEnabled:!1,verified:!1,commands:[],readiness:null},t||{})}const J={__name:"EvolutionSettings",setup(P,{expose:t}){t();const n=N(),e=k(!1),f=k(!1),S=k(!1),p=k(!1),w=k(!1),g=k(""),_=k(""),E=k(""),v=V({source:"none",effectiveEnabled:!1,profileEnabled:!1,verified:!1,commands:[]}),x=I(()=>e.value||f.value||S.value||p.value||w.value),h=I(()=>B(v));function b(s){U(v,s),_.value=v.descriptorPath||"",E.value=v.trustRootPath||"",g.value=v.modulePath||g.value||""}async function u(s,z=3e4){return await n.waitConnected(8e3),(await n.sendRaw(s,z)).result}async function y(){e.value=!0;try{b(await u({type:"evolution.deployment.status"}))}catch(s){i.error("读取配置失败："+s.message)}finally{e.value=!1}}async function D(){if(!_.value.trim()||!E.value.trim()){i.warning("请填写描述符和信任根公钥的绝对路径");return}f.value=!0;try{b(await u({type:"evolution.deployment.configure",descriptorPath:_.value.trim(),trustRootPath:E.value.trim()},6e4)),i.success("签名校验通过，配置已保存并启用；自动发布仍为 HOLD")}catch(s){i.error("配置失败："+s.message)}finally{f.value=!1}}async function O(){if(!g.value.trim()){i.warning("请填写测试部署宿主模块的服务器绝对路径");return}p.value=!0;try{b(await u({type:"evolution.deployment.init-test",modulePath:g.value.trim()},6e4)),i.success("TEST 测试开发环境已生成并启用；禁止用于生产")}catch(s){i.error("生成测试环境失败："+s.message)}finally{p.value=!1}}async function l(){if(!_.value.trim()||!E.value.trim()){i.warning("请填写正式描述符和正式信任根公钥的绝对路径");return}w.value=!0;try{b(await u({type:"evolution.deployment.replace-test",descriptorPath:_.value.trim(),trustRootPath:E.value.trim()},6e4)),i.success("测试根已安全轮换为正式受管证书；请重启 cc ui、IDE 或 Desktop 长驻进程后做正式验证")}catch(s){i.error("替换失败："+s.message)}finally{w.value=!1}}async function q(){S.value=!0;try{b(await u({type:"evolution.deployment.set-enabled",enabled:!v.profileEnabled})),i.success(v.profileEnabled?"已启用":"已停用")}catch(s){i.error("更新失败："+s.message)}finally{S.value=!1}}M(y);const j={ws:n,loading:e,saving:f,toggling:S,initializingTest:p,replacingTest:w,modulePath:g,descriptorPath:_,trustRootPath:E,status:v,busy:x,readinessRows:h,apply:b,request:u,loadStatus:y,save:D,initTest:O,replaceTest:l,toggle:q,computed:I,onMounted:M,reactive:V,ref:k,get ReloadOutlined(){return F},get message(){return i},get useWsStore(){return N},get deploymentReadinessRows(){return B},get replaceDeploymentStatus(){return U}};return Object.defineProperty(j,"__isScriptSetup",{enumerable:!1,value:!0}),j}},Z={class:"page-head"},K={class:"mono"},Q={class:"mono"},Y={class:"admission-status","aria-live":"polite"},G=["data-admission-command"],X={class:"mono"},$={key:0,class:"mono"};function ee(P,t,n,e,f,S){const p=r("a-button"),w=r("a-alert"),g=r("a-input"),_=r("a-form-item"),E=r("a-divider"),v=r("a-space"),x=r("a-form"),h=r("a-card"),b=r("a-col"),u=r("a-tag"),y=r("a-descriptions-item"),D=r("a-descriptions"),O=r("a-row");return R(),T("div",null,[c("div",Z,[t[4]||(t[4]=c("div",null,[c("h2",{class:"page-title"},"Skill 自进化配置"),c("p",{class:"page-sub"},"统一配置受治理部署；CLI、IDE 插件与 cc ui 共享。")],-1)),a(p,{loading:e.loading,onClick:e.loadStatus},{icon:o(()=>[a(e.ReloadOutlined)]),default:o(()=>[t[3]||(t[3]=d("刷新 ",-1))]),_:1},8,["loading"])]),a(w,{message:"不会开启自动发布",description:"此开关只启用经过签名的 Skill 自进化运行时。候选项进入 active 前仍需人工审核，自动发布始终保持 HOLD。",type:"warning","show-icon":"",class:"notice"}),e.status.deploymentMode==="test"?(R(),L(w,{key:0,message:"当前为 TEST 测试开发环境",description:"本机自动生成的测试密钥不能用于生产。正式 descriptor 和 trust root 到位后，请使用下方“一键替换测试证书并转正式”。",type:"error","show-icon":"",class:"notice"})):C("v-if",!0),a(O,{gutter:16},{default:o(()=>[a(b,{xs:24,xl:15},{default:o(()=>[a(h,{title:"上线前测试与正式部署",class:"panel-card"},{default:o(()=>[a(x,{layout:"vertical"},{default:o(()=>[a(_,{label:"测试部署宿主模块"},{extra:o(()=>[...t[5]||(t[5]=[d("首次填写后点击一次即可生成 Ed25519 测试密钥、签名描述符并启用；宿主模块修改后再次点击可刷新。",-1)])]),default:o(()=>[a(g,{value:e.modulePath,"onUpdate:value":t[0]||(t[0]=l=>e.modulePath=l),disabled:e.busy,placeholder:"运行 cc ui 的机器上 deployment host .mjs/.js 的绝对路径"},null,8,["value","disabled"])]),_:1}),a(p,{type:"primary",loading:e.initializingTest,onClick:e.initTest},{default:o(()=>[...t[6]||(t[6]=[d("一键生成/刷新测试环境",-1)])]),_:1},8,["loading"]),a(E),a(_,{label:"签名部署描述符"},{extra:o(()=>[...t[7]||(t[7]=[d("Web 页面不能读取本机文件选择器，请填写运行 cc ui 的机器上的绝对路径。",-1)])]),default:o(()=>[a(g,{value:e.descriptorPath,"onUpdate:value":t[1]||(t[1]=l=>e.descriptorPath=l),disabled:e.busy,placeholder:"deployment descriptor JSON 的服务器绝对路径"},null,8,["value","disabled"])]),_:1}),a(_,{label:"Ed25519 信任根公钥"},{default:o(()=>[a(g,{value:e.trustRootPath,"onUpdate:value":t[2]||(t[2]=l=>e.trustRootPath=l),disabled:e.busy,placeholder:"信任根 public key 的服务器绝对路径"},null,8,["value","disabled"])]),_:1}),a(v,null,{default:o(()=>[a(p,{type:"primary",loading:e.saving,onClick:e.save},{default:o(()=>[...t[8]||(t[8]=[d("校验、保存并启用",-1)])]),_:1},8,["loading"]),a(p,{danger:e.status.profileEnabled,disabled:!e.status.descriptorPath,loading:e.toggling,onClick:e.toggle},{default:o(()=>[d(m(e.status.profileEnabled?"停用":"启用"),1)]),_:1},8,["danger","disabled","loading"]),e.status.deploymentMode==="test"?(R(),L(p,{key:0,loading:e.replacingTest,onClick:e.replaceTest},{default:o(()=>[...t[9]||(t[9]=[d("一键替换测试证书并转正式",-1)])]),_:1},8,["loading"])):C("v-if",!0)]),_:1})]),_:1})]),_:1})]),_:1}),a(b,{xs:24,xl:9},{default:o(()=>[a(h,{title:"治理状态",class:"panel-card status-card"},{default:o(()=>[a(D,{column:1,size:"small"},{default:o(()=>[a(y,{label:"部署模式"},{default:o(()=>[a(u,{color:e.status.deploymentMode==="test"?"red":"blue"},{default:o(()=>[d(m(e.status.deploymentMode==="test"?"TEST（仅限上线前联调）":e.status.deploymentMode||"none"),1)]),_:1},8,["color"])]),_:1}),a(y,{label:"生效状态"},{default:o(()=>[a(u,{color:e.status.effectiveEnabled?"green":"default"},{default:o(()=>[d(m(e.status.effectiveEnabled?"已启用":"未启用"),1)]),_:1},8,["color"])]),_:1}),a(y,{label:"生效来源"},{default:o(()=>[d(m(e.status.source||"none"),1)]),_:1}),a(y,{label:"签名校验"},{default:o(()=>[a(u,{color:e.status.verified?"green":"red"},{default:o(()=>[d(m(e.status.verified?"已通过":"未通过"),1)]),_:1},8,["color"])]),_:1}),a(y,{label:"自动发布"},{default:o(()=>[a(u,{color:"orange"},{default:o(()=>[...t[10]||(t[10]=[d("HOLD",-1)])]),_:1})]),_:1}),a(y,{label:"配置文件"},{default:o(()=>[c("span",K,m(e.status.profilePath||"—"),1)]),_:1}),a(y,{label:"允许命令"},{default:o(()=>[c("span",Q,m((e.status.commands||[]).join(", ")||"—"),1)]),_:1})]),_:1}),c("section",Y,[t[11]||(t[11]=c("h3",null,"模型命令部署准入",-1)),t[12]||(t[12]=c("p",null,"这里只检查部署准入，实际任务运行尚未验证。",-1)),(R(!0),T(H,null,W(e.readinessRows,l=>(R(),T("div",{key:l.command,"data-admission-command":l.command},[c("strong",null,m(l.command)+"："+m(l.summary),1),c("p",X,m(l.detail),1),l.remediation?(R(),T("p",$,m(l.remediation),1)):C("v-if",!0)],8,G))),128))]),e.status.error?(R(),L(w,{key:0,message:e.status.error,type:"error","show-icon":"",class:"error"},null,8,["message"])):C("v-if",!0)]),_:1})]),_:1})]),_:1})])}const le=A(J,[["render",ee],["__scopeId","data-v-5a42105e"],["__file","/tmp/cc-web-panel-6ZYRLD/repo/packages/web-panel/src/views/EvolutionSettings.vue"]]);export{le as default};

package/src/assets/web-panel/assets/devWarning-CmgDNkoO.js

@@ -1 +0,0 @@
-import{Q as r}from"./index-hSzyoXri.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-BpIZ2S01.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-DJz8iFOR.js";import{a0 as t}from"./index-hSzyoXri.js";import"./vendor-Bn1JzzAn.js";import"./index-BO6XvO-C.js";import"./icons-DG5UD-6K.js";const s=t(o);export{s as default};

package/src/assets/web-panel/assets/index-C-VmKuyv.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-Dh77m3NZ.js";import{a0 as t}from"./index-hSzyoXri.js";import"./vendor-Bn1JzzAn.js";import"./responsiveObserve-D-PmXO9M.js";import"./useFlexGapSupport-B2wO2r36.js";import"./styleChecker-DOr9rk68.js";import"./index-BO6XvO-C.js";import"./icons-DG5UD-6K.js";const l=t(o);export{l as default};