cortico 0.1.0 → 0.1.2

package/src/web/auth.ts

@@ -0,0 +1,80 @@
+/**
+ * 控制台访问密码。密码为空时不启用，所有请求照常放行。
+ * 登录令牌无状态：由密码与数据目录里的随机盐导出的 HMAC，进程重启后仍有效，改密码使它失效；
+ * 令牌自身不设到期，有效到改密码或退出登录为止。令牌放在 HttpOnly Cookie 里，
+ * WebSocket 升级与只能带 URL 的 GET 调用随之携带。
+ */
+import { createHash, createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+
+export const SESSION_COOKIE = 'cortico_session';
+export const AUTH_KEY_FILE = 'web-auth.key';
+/** 盐的字节数；文件解码后不是这个长度即视同不存在，重新生成。 */
+export const SALT_BYTES = 32;
+/** Cookie 的 Max-Age：浏览器对 Cookie 寿命的上限是 400 天（RFC 6265bis），取它即一直保留。 */
+export const SESSION_COOKIE_MAX_AGE_SEC = 400 * 24 * 60 * 60;
+/**
+ * 每次失败的登录等这么久才回应，且失败串行处理：并发再多，猜测的总速率也不超过每秒一次。
+ * 八位随机字母数字的密码空间约 2.8e14，按此速率穷举以百万年计；不设延迟时局域网内每秒可试数千次。
+ * 正确的密码不进这条队列。
+ */
+export const FAILED_LOGIN_DELAY_MS = 1000;
+
+function sameText(a: string, b: string): boolean {
+  const digest = (text: string): Buffer => createHash('sha256').update(text, 'utf8').digest();
+  return timingSafeEqual(digest(a), digest(b));
+}
+
+/** 取 Cookie 头里的一个值；没有或头不是字符串时为 null。 */
+export function cookieValue(header: unknown, name: string): string | null {
+  if (typeof header !== 'string') return null;
+  for (const part of header.split(';')) {
+    const at = part.indexOf('=');
+    if (at > 0 && part.slice(0, at).trim() === name) return part.slice(at + 1).trim();
+  }
+  return null;
+}
+
+export class ConsoleAuth {
+  private token: string | null = null;
+  private failures: Promise<void> = Promise.resolve();
+
+  constructor(
+    private readonly password: string,
+    private readonly keyFile: string,
+    private readonly failedDelayMs: number = FAILED_LOGIN_DELAY_MS,
+  ) {}
+
+  get enabled(): boolean {
+    return this.password !== '';
+  }
+
+  /** 这个密码在这个数据目录下的登录令牌；盐文件在第一次用到时生成，解码后不是 SALT_BYTES 字节时重新生成。 */
+  issue(): string {
+    if (this.token === null) {
+      let salt = existsSync(this.keyFile) ? Buffer.from(readFileSync(this.keyFile, 'utf8').trim(), 'hex') : Buffer.alloc(0);
+      if (salt.length !== SALT_BYTES) {
+        salt = randomBytes(SALT_BYTES);
+        mkdirSync(dirname(this.keyFile), { recursive: true });
+        writeFileSync(this.keyFile, `${salt.toString('hex')}\n`, { encoding: 'utf8', mode: 0o600 });
+      }
+      const key = createHmac('sha256', salt).update(this.password, 'utf8').digest();
+      this.token = createHmac('sha256', key).update(SESSION_COOKIE, 'utf8').digest('hex');
+    }
+    return this.token;
+  }
+
+  verify(token: string | null): boolean {
+    return token !== null && token !== '' && sameText(token, this.issue());
+  }
+
+  /** 密码正确立即返回 true；错误的排队等 failedDelayMs 后返回 false。 */
+  async login(candidate: string): Promise<boolean> {
+    if (sameText(candidate, this.password)) return true;
+    const turn = this.failures.then(() => new Promise<void>((resolve) => setTimeout(resolve, this.failedDelayMs)));
+    this.failures = turn;
+    await turn;
+    return false;
+  }
+}

package/src/web/client/console-pages/builtins/llm-settings/panel.ts

@@ -61,7 +61,7 @@ interface ModelEntry {
   id: string;
   contextWindow?: number;
 }
-interface ProbeResult {
+export interface ProbeResult {
   ok: boolean;
   status: number | null;
   elapsedMs: number;
@@ -80,7 +80,7 @@ interface ProbeResult {
 
 const DEFAULT_ENDPOINT_PATH = '/responses';
 
-/** 当前端点的模块面板插槽。 */
+/** 模块自有段落挂在这个插槽里，排在连接与模型档之间。 */
 const MODULE_SLOT = 'instance';
 
 /** 开放模式的 effort 格 ↔ spec 的 thinking/reasoningEffort。 */
@@ -106,7 +106,8 @@ function datalist(ui: ConsoleUi, id: string, values: readonly string[]): HTMLDat
   return list;
 }
 
-function probeCard(ui: ConsoleUi, S: typeof panel.zh, result: ProbeResult): HTMLElement {
+/** 探活结果的呈现,模块页与连接卡片共用。 */
+export function probeCard(ui: ConsoleUi, S: typeof panel.zh, result: ProbeResult): HTMLElement {
   const fmt: ConsoleFormat = ui.fmt;
   const usage = result.usage;
   const rows = [
@@ -159,7 +160,7 @@ export const llmSettingsPanel: ConsolePanel = {
     let selected = '';
     /** 模块段落的句柄，重画前先结束上一批。 */
     let sections: Disposable | null = null;
-    /** 仅最新一次 load 可以更新 DOM。 */
+    /** 重画代号：慢一步回来的那次 load 不再往 DOM 上贴。 */
     let generation = 0;
     const report = ui.msgline();
     const body = ui.h('div');

package/src/web/client/console-pages/builtins/llm-settings/pricing-panel.ts

@@ -70,6 +70,7 @@ export function pricingEditor(
   quotes: ModelQuote[],
   commit: (pricing: unknown[]) => void,
   language?: Language,
+  draft?: { raw?: string; onRaw(value: string): void },
 ) {
   const S = language === 'en' ? panel.en : panel.zh;
   const card = ui.sheet({
@@ -78,7 +79,6 @@ export function pricingEditor(
   });
   const labels: Record<string, string> = S.meters;
   for (const row of quotes) {
-    if (!row.quotes.length) card.body.append(ui.msgline(S.quoteUnknown(row.model)));
     for (const quote of row.quotes) {
       card.body.append(
         ui.kv([
@@ -101,11 +101,16 @@ export function pricingEditor(
     }
   }
   const unset = saved.length === 0;
-  if (unset) card.body.append(ui.msgline(S.pricingUnset));
+  const pricingNote = ui.h('p', 'field-note pricing-note');
+  const updateNote = (pricing: unknown[]) => {
+    pricingNote.textContent = pricing.length ? '' : S.pricingUnset;
+    pricingNote.hidden = pricing.length > 0;
+  };
+  updateNote(saved); card.body.append(pricingNote);
   const simple: SimpleCost | null = unset ? null : readSimple(saved);
   const raw = ui.textarea({
     rows: 10,
-    value: JSON.stringify(simple ? writeSimple(simple) : saved, null, 2),
+    value: draft?.raw ?? JSON.stringify(simple ? writeSimple(simple) : saved, null, 2),
     onChange: commitDraft,
   });
   const currency = ui.input({ value: simple?.currency ?? 'USD', onChange: writeThrough });
@@ -139,15 +144,23 @@ export function pricingEditor(
     commitDraft();
   }
   /** 完整规则那格可以写坏;解析不过就停在这张卡上说清楚,不往端点写。 */
-  function commitDraft(): void {
+  function commitDraft(): boolean {
     try {
-      const pricing = JSON.parse(raw.value) as unknown[];
+      const pricing: unknown = JSON.parse(raw.value.trim() || '[]');
+      if (!Array.isArray(pricing)) throw new Error(S.pricingTitle + ': JSON array required');
       problem.textContent = '';
       problem.classList.remove('bad');
+      raw.setAttribute('aria-invalid', 'false');
+      updateNote(pricing);
       commit(pricing);
+      draft?.onRaw(raw.value);
+      return true;
     } catch (error) {
       problem.textContent = String(error);
       problem.classList.add('bad');
+      raw.setAttribute('aria-invalid', 'true');
+      draft?.onRaw(raw.value);
+      return false;
     }
   }
   card.body.append(
@@ -155,14 +168,15 @@ export function pricingEditor(
     ...rates.map((input, i) => ui.field(rateLabels[i], input)),
     ui.msgline(simple || unset ? S.costFormNote : S.costFormOverridden),
   );
-  const advanced = ui.h('details');
+  const advanced = ui.h('details', 'pricing-rules');
   advanced.open = !simple && !unset;
   advanced.append(ui.h('summary', null, S.editFull), raw, ui.msgline(S.fullNote), problem);
-  const preview = ui.h('details');
+  const preview = ui.h('details', 'pricing-snapshot');
   preview.append(
     ui.h('summary', null, S.viewSnapshot),
     ui.h('pre', 'mono', JSON.stringify(quotes, null, 2)),
   );
   card.body.append(advanced, preview);
-  return { el: card.el };
+  if (draft?.raw !== undefined) commitDraft();
+  return { el: card.el, body: card.body, validate: commitDraft };
 }

package/src/web/client/console-pages/builtins/llm-settings/strings.ts

@@ -27,12 +27,12 @@ const zh = {
   extraBody: '附加请求体（JSON 对象）',
   jsonObjectRequired: (label: string) => `${label} 必须是 JSON 对象`,
   advancedProtocolTitle: '协议与请求扩展',
-  advancedProtocolDescription: '',
+  advancedProtocolDescription: '针对 OpenAI Responses 兼容端点的高级配置（端点路径与附加 JSON 字段）。',
   modelFieldLabel: '模型标识',
   effortFieldLabel: '推理强度',
   temperatureFieldLabel: '采样温度',
   specTitle: '模型档',
-  specDescription: '此端点的每次调用共用这份模型配置；fork 使用创建时的快照。',
+  specDescription: '配置此实例调用的模型及推理、温度和 Token 限制等生成参数。',
   modelName: '明确模型名',
   fetchModels: '取模型列表',
   modelsFetched: (count: number) => `取到 ${count} 个模型。`,
@@ -76,7 +76,7 @@ const zh = {
   deleted: '已删除。',
   pricingTitle: '报价',
   pricingDescription: '历史流水固定使用请求时的报价。自定义报价按模型与费用口径覆盖模块默认值。',
-  pricingUnset: '未设报价：这个端点的调用在用量与成本页只计 token，不计金额。',
+  pricingUnset: '未设自定义报价：优先使用模块价目；若无适用价目，仅记录 token，不计金额。',
   meters: {
     input: '输入',
     cachedInput: '缓存命中',
@@ -85,7 +85,6 @@ const zh = {
     reasoning: '推理',
     total: '总量',
   },
-  quoteUnknown: (model: string) => `${model}：报价未知`,
   marginal: '边际费用',
   equivalent: 'API 等价费用',
   perMillion: (label: string, rate: number) => `${label} ${rate}/百万`,
@@ -131,12 +130,12 @@ const en: typeof zh = {
   extraBody: 'Extra body (JSON object)',
   jsonObjectRequired: (label: string) => `${label} must be a JSON object`,
   advancedProtocolTitle: 'Protocol & Request Overrides',
-  advancedProtocolDescription: '',
+  advancedProtocolDescription: 'Advanced options for OpenAI Responses compatible endpoints (custom path and extra JSON fields).',
   modelFieldLabel: 'Model identifier',
   effortFieldLabel: 'Reasoning effort',
   temperatureFieldLabel: 'Sampling temperature',
   specTitle: 'Model',
-  specDescription: 'Calls on this endpoint share its model configuration; forks use the snapshot from their creation.',
+  specDescription: 'Configure model identifier, reasoning effort, temperature and token limits for this instance.',
   modelName: 'Exact model name',
   fetchModels: 'Fetch models',
   modelsFetched: (count: number) => `Fetched ${count} models.`,
@@ -182,7 +181,7 @@ const en: typeof zh = {
   pricingTitle: 'Pricing',
   pricingDescription:
     'Historical records keep the quote in effect at request time. Custom quotes override module defaults per model and cost basis.',
-  pricingUnset: 'No pricing set: calls on this endpoint count tokens but no amount on the usage page.',
+  pricingUnset: 'No custom pricing: module prices apply when available; otherwise only tokens are recorded.',
   meters: {
     input: 'Input',
     cachedInput: 'Cache hit',
@@ -191,7 +190,6 @@ const en: typeof zh = {
     reasoning: 'Reasoning',
     total: 'Total',
   },
-  quoteUnknown: (model: string) => `${model}: quote unknown`,
   marginal: 'Marginal cost',
   equivalent: 'API-equivalent cost',
   perMillion: (label: string, rate: number) => `${label} ${rate}/M`,

package/src/web/client/console-pages/host.ts

@@ -8,7 +8,7 @@ import {
   type ConsolePageManifest,
   type ConsolePanelManifest,
 } from '../../shared/console-protocol.ts';
-import type { ConsoleMemo, ConsolePanel, Disposable } from '../../shared/client-panel.ts';
+import type { ConsoleMemo, ConsolePanel, ConsolePanelContext, Disposable } from '../../shared/client-panel.ts';
 import { get, post } from '../core/api.ts';
 import { Lifecycle } from '../core/lifecycle.ts';
 import type { Router } from '../core/router.ts';
@@ -121,6 +121,23 @@ export class ConsolePageHost {
     this.emitNav();
   }
 
+  /** Mount module panels inside a connection editor while its adapter stages configuration edits. */
+  async mountConnection(pageId: string, root: HTMLElement, scope: Readonly<Record<string, string>>,
+    adapt: (context: ConsolePanelContext) => ConsolePanelContext): Promise<Disposable> {
+    const lifecycle = new Lifecycle(this.deps.onError);
+    const page = this.find(pageId);
+    for (const panel of asArray(page?.panels).filter(panel => panel.id !== 'settings')) {
+      const box = this.deps.doc.createElement('div'); root.append(box);
+      try {
+        const impl = panel.builtin ? this.builtinPanel(panel.builtin) : await this.deps.loader.resolvePanel(pageId, panel.id, page?.client);
+        if (lifecycle.disposed) break;
+        const result = await impl.mount(adapt(this.panelContext(pageId, panel.id, box, lifecycle, this.generation, scope)));
+        if (result) lifecycle.own(result);
+      } catch (error) { box.textContent = String(error); }
+    }
+    return lifecycle;
+  }
+
   /** 重取 manifest 并刷新导航与当前页头，**不重挂面板**。 */
   async refresh(): Promise<void> {
     await this.load();
@@ -380,11 +397,11 @@ export class ConsolePageHost {
 
   /** Persona 页才有工具表页签,且要部署挂着 /api/tool-schemas。 */
   private toolsTabOf(page: ConsolePageManifest): boolean {
-    if (page.kind !== 'persona') return false;
+    if (page.kind !== 'persona' || page.availability !== 'active') return false;
     return this.snapshot?.framework?.capabilities?.toolSchemas !== false;
   }
 
-  /** 工具表包含主循环与装配层补充的工具声明。 */
+  /** 工具表是整份装配结果,不按页筛:模型看见的那一张表就是这一张。 */
   private async showTools(pageId: string, gen: number): Promise<void> {
     const { slot } = this.ensurePanes();
     const lifecycle = new Lifecycle(this.deps.onError);
@@ -515,7 +532,8 @@ export class ConsolePageHost {
         ? page.lamps ?? []
         : [{ label: S.assembly, state: 'offline', hint: page.availability === 'missing' ? S.notInstalled : S.notActivated }],
     ));
-    head.append(title, ui.h('p', 'pagedesc', page.id));
+    head.appendChild(title);
+    chrome.append(head, ui.h('p', 'pagedesc', page.id));
     const bar = ui.rowbar();
 
     for (const badge of asArray(page.badges)) {
@@ -547,9 +565,8 @@ export class ConsolePageHost {
       });
       bar.appendChild(open);
     }
-    head.appendChild(bar);
-    if (page.reason) head.appendChild(ui.msgline(page.reason, true));
-    chrome.appendChild(head);
+    if (bar.children.length > 1) chrome.appendChild(bar);
+    if (page.reason) chrome.appendChild(ui.msgline(page.reason, true));
 
     const panels = tabbed(page);
     const prompts = asArray(page.prompts);

package/src/web/client/core/api.ts

@@ -6,6 +6,7 @@
  */
 
 import {
+  CONSOLE_AUTH_HEADER,
   CONSOLE_MANIFEST_ROUTE,
   panelRoute,
   type ConsoleManifest,
@@ -57,12 +58,15 @@ function normalizeError(err: unknown, status: number): never {
 
 async function send(path: string, init: RequestInit, opts?: RequestOptions): Promise<Response> {
   try {
-    return await fetch(path, {
+    const res = await fetch(path, {
       ...init,
       headers: { ...languageHeaders(), ...(init.headers as Record<string, string> | undefined) },
       ...(opts?.signal ? { signal: opts.signal } : {}),
       ...(opts?.keepalive ? { keepalive: true } : {}),
     });
+    // 登录态失效:重新载入入口页,服务端在那里给出登录页。
+    if (res.status === 401 && res.headers.get(CONSOLE_AUTH_HEADER) !== null) location.reload();
+    return res;
   } catch (err) {
     // fetch reject = 网络层没走到 HTTP，没有状态码可言，记 0。
     normalizeError(err, 0);

package/src/web/client/core/router.ts

@@ -70,6 +70,7 @@ export class Router {
   private readonly deps: RouterDeps;
   private readonly listeners = new Set<(route: Route) => void>();
   private readonly guards = new Set<LeaveGuard>();
+  private readonly decisions = new Set<() => Promise<boolean>>();
   private current: Route;
   /** 待处理的回拨 hash；写入相同 hash 不触发 hashchange，因此按目标值识别回拨。 */
   private pendingRevert: string | null = null;
@@ -108,6 +109,11 @@ export class Router {
     return toDisposable(() => this.guards.delete(guard));
   }
 
+  addLeaveDecision(decide: () => Promise<boolean>): Disposable {
+    this.decisions.add(decide);
+    return toDisposable(() => this.decisions.delete(decide));
+  }
+
   navigate(segments: readonly string[], query?: Record<string, string>): void {
     this.go(buildHash(segments, query), (hash) => { this.deps.win.location.hash = hash; });
   }
@@ -166,6 +172,15 @@ export class Router {
       return;
     }
 
+    if (this.decisions.size) {
+      this.confirming = true;
+      let allowed = true;
+      try {
+        for (const decide of this.decisions) if (!(await decide())) { allowed = false; break; }
+      } catch (error) { allowed = false; this.deps.onError?.(error); }
+      finally { this.confirming = false; }
+      if (!allowed) { this.revertTo(this.current.raw); return; }
+    }
     const block = this.firstBlock();
     if (block) {
       this.confirming = true;

package/src/web/client/features/core/strings.ts

@@ -12,7 +12,7 @@ const zh = {
   subData: '数据',
   subConfig: '配置',
   dataTitle: 'Core 的数据',
-  dataDesc: '',
+  dataDesc: '事件库、session、运行日志、用量流水这些 Core 自己攒下的存储。',
   configTitle: 'Core 配置',
   configDesc: '修改自动保存到 config.json。标有重启要求的配置在重启后生效,其余立即生效。',
   configEmpty: 'Core 没有可调配置。',
@@ -89,7 +89,7 @@ const en: typeof zh = {
   subData: 'Data',
   subConfig: 'Config',
   dataTitle: 'Core data',
-  dataDesc: '',
+  dataDesc: 'Storage Core accumulates on its own: the event store, the session, run logs and the usage ledger.',
   configTitle: 'Core config',
   configDesc: 'Changes save to config.json automatically. Settings marked for restart apply after restarting; the rest apply immediately.',
   configEmpty: 'Core has no tunable settings.',