cortico 0.1.1 → 0.1.2

package/src/providers/transport/responses-input.ts

@@ -1,22 +1,45 @@
 /** Stateless native Responses input: the whole context is replayed on every request. */
 import type { Request } from '../../protocol/open-responses/index.ts';
-import { inputItem } from '../../protocol/open-responses/context.ts';
+import { inputItem, itemText, type ContextRecord } from '../../protocol/open-responses/context.ts';
 import type { GenerateOptions } from '../../core/generation.ts';
 import { requestContext } from './native-input.ts';
 import type { CompatMediaOptions } from './history.ts';
 
 type Item = Record<string, unknown>;
 
+/**
+ * How past reasoning re-enters the context. `encrypted`: the signed `encrypted_content` block, only
+ * when the recorded origin matches this request. `plaintext`: the reasoning text itself, for
+ * endpoints whose thinking mode requires the text of every tool-call turn back.
+ */
+export const REASONING_REPLAYS = ['encrypted', 'plaintext'] as const;
+export type ReasoningReplay = (typeof REASONING_REPLAYS)[number];
+
+/**
+ * Default `reasoning_text` sent before a function call without a recorded origin in plaintext
+ * replay. A missing field, an empty `content`, an empty string and a summary without
+ * `reasoning_text` are each rejected, so the padding is one character; it is non-whitespace in case
+ * an endpoint trims. It carries no prose by default: what these calls are is the Persona's to say.
+ * The operator replaces it per endpoint.
+ */
+export const SYNTHETIC_REASONING_TEXT = '-';
+
 export interface ResponsesInputOptions {
   media?: CompatMediaOptions;
   /** Whether past reasoning re-enters the context; the first synthetic turn is exempt. */
   keepThinking?: () => boolean;
+  /** Default `encrypted`. */
+  reasoningReplay?: ReasoningReplay;
+  /** Plaintext replay only; defaults to `SYNTHETIC_REASONING_TEXT`. Endpoints reject an empty one. */
+  syntheticReasoningText?: string;
 }
 
 /**
- * Replay reasoning only when encrypted_content exists and the recorded instance, module,
- * compatibility domain and model match this request. These are local eligibility checks.
- * Plaintext reasoning is omitted. System and developer text is joined into instructions.
+ * Encrypted replay: a reasoning item re-enters only with `encrypted_content` and when the recorded
+ * instance, module, compatibility domain and model match this request. Plaintext replay: a reasoning
+ * item re-enters as `reasoning_text`; the turn after the last user message is always replayed, earlier
+ * turns follow `keepThinking`; a function call without an origin gets a synthetic reasoning item
+ * unless one already precedes it. System and developer text is joined into instructions.
  */
 export function responsesInput(
   request: Request,
@@ -25,20 +48,37 @@ export function responsesInput(
 ): { input: Item[]; instructions: string | undefined } {
   const input: Item[] = [];
   const systems = request.instructions ? [request.instructions] : [];
-  for (const entry of requestContext(request, options)) {
+  const plaintext = opts.reasoningReplay === 'plaintext';
+  const entries = requestContext(request, options);
+  const roundStart = plaintext ? lastUserMessage(entries) : -1;
+  entries.forEach((entry, index) => {
     const item = entry.item;
     if (item.type === 'reasoning') {
-      if (!item.encrypted_content) continue;
-      if (!entry.context.head && opts.keepThinking?.() === false) continue;
+      if (plaintext) {
+        const text = itemText(item);
+        if (!text && !item.encrypted_content) return;
+        if (!entry.context.head && index < roundStart && opts.keepThinking?.() === false) return;
+        const wire = inputItem(entry) as Item;
+        if (text) wire.content = [{ type: 'reasoning_text', text }];
+        input.push(wire);
+        return;
+      }
+      if (!item.encrypted_content) return;
+      if (!entry.context.head && opts.keepThinking?.() === false) return;
       const owner = entry.context.origin;
       const current = options.origin;
       if (!owner || !current || owner.instance !== current.instance || owner.module !== current.module
-        || owner.compatibilityDomain !== current.compatibilityDomain || owner.model !== request.model) continue;
+        || owner.compatibilityDomain !== current.compatibilityDomain || owner.model !== request.model) return;
     }
     if (item.type === 'message' && (item.role === 'system' || item.role === 'developer')) {
       systems.push(typeof item.content === 'string' ? item.content : item.content.map(part => 'text' in part ? part.text : '').join(''));
-      continue;
+      return;
     }
+    if (plaintext && item.type === 'function_call' && !entry.context.origin && input.at(-1)?.type !== 'reasoning')
+      input.push({
+        type: 'reasoning', id: `rs_${item.call_id}`, summary: [],
+        content: [{ type: 'reasoning_text', text: opts.syntheticReasoningText ?? SYNTHETIC_REASONING_TEXT }],
+      });
     const wire = inputItem(entry) as Item;
     if (opts.media?.enabled() && entry.context.blobs?.length && (item.type === 'message' || item.type === 'function_call_output')) {
       const field = item.type === 'message' ? 'content' : 'output';
@@ -51,6 +91,15 @@ export function responsesInput(
       wire[field] = parts;
     }
     input.push(wire);
-  }
+  });
   return { input, instructions: systems.length ? systems.join('\n') : undefined };
 }
+
+/** Index of the last user message, -1 when there is none. */
+function lastUserMessage(entries: readonly ContextRecord[]): number {
+  for (let index = entries.length - 1; index >= 0; index--) {
+    const item = entries[index].item;
+    if (item.type === 'message' && item.role === 'user') return index;
+  }
+  return -1;
+}

package/src/web/README.md

@@ -1,4 +1,4 @@
-<!-- Owner: src/web/server.ts, src/web/shared/console-protocol.ts, src/web/shared/client-panel.ts -->
+<!-- Owner: src/web/server.ts, src/web/auth.ts, src/web/shared/console-protocol.ts, src/web/shared/client-panel.ts, src/web/client/console-pages/host.ts, src/web/client/console-pages/builtins/llm-settings/panel.ts, src/web/client/console-pages/builtins/llm-settings/pricing-panel.ts, src/web/client/features/providers/index.ts, src/web/client/features/live/index.ts -->
 
 # src/web
 
@@ -43,8 +43,11 @@ manifest 的 `CONSOLE_PROTOCOL_VERSION` 不匹配时，浏览器拒绝加载。
 
 `WebApp` 默认监听 `127.0.0.1`，支持由依赖配置指定监听地址。从首选端口起最多尝试五个端口；
 端口为 0 时仅申请一次系统分配。WebSocket 使用 `noServer` 分派 `/ws/debug`、`/ws/sessions` 和面板流。
-所有请求与 upgrade 先校验 Host 头：只接受回环名或显式绑定的地址，绑到通配地址时不校验。
-写请求与 upgrade 再按 Host 校验 Origin，拒绝不匹配或无效的 Origin；缺少 Origin 时放行。
+所有请求与 upgrade 先校验 Host 头：只接受回环名、显式绑定的地址和 `allowedHosts` 里的名字，绑到通配地址时不校验。
+写请求与 upgrade 再按 Host 校验 Origin，拒绝不匹配或无效的 Origin；缺少 Origin 时放行，Origin 是
+`allowedHosts` 里的名字时放行。监听非回环地址而没有设访问密码时启动记一条 warn。
+`auth.ts` 的 `ConsoleAuth` 在设了密码时把未登录的请求挡在各路由与 body 解析之前:`/` 给登录页,其余 401,
+upgrade 断开;登录态是 HttpOnly Cookie 里的无状态签名令牌(见 [console.md](../../docs/console.md))。
 
 `/assets` 提供 `dist/web` 资源。首页在最后一个 `</body>` 前注入带 hash 的入口。
 扩展面板通过 `/assets/extensions/<包>/<版本>/<文件>` 提供，仅允许 manifest 声明的脚本与样式文件。
@@ -53,6 +56,12 @@ manifest 的 `CONSOLE_PROTOCOL_VERSION` 不匹配时，浏览器拒绝加载。
 
 ## 浏览器
 
+`features/providers` 一次编辑一条端点,改动只进浏览器暂存,保存时整条提交。模块面板挂在所选端点
+的作用域里,面板的 `setConfig` 同样进暂存;`llm-settings` 的服务接口保留,旧的 `llm:<kind>` 路由
+转到这一页。`features/providers/drafts.ts` 的暂存按部署分 scope 存进 localStorage,不含 API Key;
+这一页自己拦切换端点,并向路由登记离开保护。端点保存、删除或设为当前之后推送状态帧,终端页顶部
+的统计行显示当前端点的名称与模型,点开进该端点。
+
 `main.ts` 的 `FEATURES` 包含 `live`、`core`、`usage`、`provider`、`world`、`extensions`、`prompts`、
 `appearance`、`settings`。贡献页由 manifest 加载，保留路由段 `provider` 交由 `ConsolePageHost` 处理。
 `features/config/view.ts` 与 `features/storage/view.ts` 是配置组与存储清单的通用视图,运行诊断页与

package/src/web/auth.ts

@@ -0,0 +1,80 @@
+/**
+ * 控制台访问密码。密码为空时不启用，所有请求照常放行。
+ * 登录令牌无状态：由密码与数据目录里的随机盐导出的 HMAC，进程重启后仍有效，改密码使它失效；
+ * 令牌自身不设到期，有效到改密码或退出登录为止。令牌放在 HttpOnly Cookie 里，
+ * WebSocket 升级与只能带 URL 的 GET 调用随之携带。
+ */
+import { createHash, createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+
+export const SESSION_COOKIE = 'cortico_session';
+export const AUTH_KEY_FILE = 'web-auth.key';
+/** 盐的字节数；文件解码后不是这个长度即视同不存在，重新生成。 */
+export const SALT_BYTES = 32;
+/** Cookie 的 Max-Age：浏览器对 Cookie 寿命的上限是 400 天（RFC 6265bis），取它即一直保留。 */
+export const SESSION_COOKIE_MAX_AGE_SEC = 400 * 24 * 60 * 60;
+/**
+ * 每次失败的登录等这么久才回应，且失败串行处理：并发再多，猜测的总速率也不超过每秒一次。
+ * 八位随机字母数字的密码空间约 2.8e14，按此速率穷举以百万年计；不设延迟时局域网内每秒可试数千次。
+ * 正确的密码不进这条队列。
+ */
+export const FAILED_LOGIN_DELAY_MS = 1000;
+
+function sameText(a: string, b: string): boolean {
+  const digest = (text: string): Buffer => createHash('sha256').update(text, 'utf8').digest();
+  return timingSafeEqual(digest(a), digest(b));
+}
+
+/** 取 Cookie 头里的一个值；没有或头不是字符串时为 null。 */
+export function cookieValue(header: unknown, name: string): string | null {
+  if (typeof header !== 'string') return null;
+  for (const part of header.split(';')) {
+    const at = part.indexOf('=');
+    if (at > 0 && part.slice(0, at).trim() === name) return part.slice(at + 1).trim();
+  }
+  return null;
+}
+
+export class ConsoleAuth {
+  private token: string | null = null;
+  private failures: Promise<void> = Promise.resolve();
+
+  constructor(
+    private readonly password: string,
+    private readonly keyFile: string,
+    private readonly failedDelayMs: number = FAILED_LOGIN_DELAY_MS,
+  ) {}
+
+  get enabled(): boolean {
+    return this.password !== '';
+  }
+
+  /** 这个密码在这个数据目录下的登录令牌；盐文件在第一次用到时生成，解码后不是 SALT_BYTES 字节时重新生成。 */
+  issue(): string {
+    if (this.token === null) {
+      let salt = existsSync(this.keyFile) ? Buffer.from(readFileSync(this.keyFile, 'utf8').trim(), 'hex') : Buffer.alloc(0);
+      if (salt.length !== SALT_BYTES) {
+        salt = randomBytes(SALT_BYTES);
+        mkdirSync(dirname(this.keyFile), { recursive: true });
+        writeFileSync(this.keyFile, `${salt.toString('hex')}\n`, { encoding: 'utf8', mode: 0o600 });
+      }
+      const key = createHmac('sha256', salt).update(this.password, 'utf8').digest();
+      this.token = createHmac('sha256', key).update(SESSION_COOKIE, 'utf8').digest('hex');
+    }
+    return this.token;
+  }
+
+  verify(token: string | null): boolean {
+    return token !== null && token !== '' && sameText(token, this.issue());
+  }
+
+  /** 密码正确立即返回 true；错误的排队等 failedDelayMs 后返回 false。 */
+  async login(candidate: string): Promise<boolean> {
+    if (sameText(candidate, this.password)) return true;
+    const turn = this.failures.then(() => new Promise<void>((resolve) => setTimeout(resolve, this.failedDelayMs)));
+    this.failures = turn;
+    await turn;
+    return false;
+  }
+}

package/src/web/client/console-pages/builtins/llm-settings/panel.ts

@@ -13,6 +13,7 @@ import type {
 } from '../../../../shared/client-panel.ts';
 import { pricingEditor, type ModelQuote } from './pricing-panel.ts';
 import { panel } from './strings.ts';
+import { configField, type ConfigGroupEntry } from '../../../features/config/view.ts';
 
 /** 每个端点实例的模型与推理配置。 */
 interface Spec {
@@ -45,6 +46,7 @@ interface Instance {
   entry: Entry;
   quotes: ModelQuote[];
   secretConfigured: 'env' | 'file' | 'none';
+  config: ConfigGroupEntry[];
 }
 interface SettingsState {
   active: string;
@@ -59,7 +61,7 @@ interface ModelEntry {
   id: string;
   contextWindow?: number;
 }
-interface ProbeResult {
+export interface ProbeResult {
   ok: boolean;
   status: number | null;
   elapsedMs: number;
@@ -104,7 +106,8 @@ function datalist(ui: ConsoleUi, id: string, values: readonly string[]): HTMLDat
   return list;
 }
 
-function probeCard(ui: ConsoleUi, S: typeof panel.zh, result: ProbeResult): HTMLElement {
+/** 探活结果的呈现,模块页与连接卡片共用。 */
+export function probeCard(ui: ConsoleUi, S: typeof panel.zh, result: ProbeResult): HTMLElement {
   const fmt: ConsoleFormat = ui.fmt;
   const usage = result.usage;
   const rows = [
@@ -255,26 +258,37 @@ export const llmSettingsPanel: ConsolePanel = {
       const spec: Spec = structuredClone(entry.spec) ?? { model: '', thinking: open };
       const saveSpec = () => void patch({ spec });
 
+      function configInput(suffix: string, label: string, changed?: (value: unknown) => void | Promise<void>): HTMLElement {
+        const path = `providers.${current!.name}.${suffix}`;
+        const { group, values } = current!.config.find(({ group }) => path in group.schema.properties!)!;
+        const field = configField(ui, group.schema.properties![path], values?.[path], () => {
+          void (async () => {
+            const raw = field.read!();
+            const value = typeof raw === 'string' ? raw.trim() : raw;
+            try {
+              await ctx.setConfig(group.id, { [path]: value });
+              report.textContent = S.saved;
+              await ctx.refresh();
+              await changed?.(value);
+            } catch (error) {
+              report.textContent = String(error);
+            }
+          })();
+        }, ctx.signal);
+        (field.node.querySelector('input, select, textarea') ?? field.node).setAttribute('aria-label', label);
+        return field.node;
+      }
+
       // ---- 连接 ----
       const connection = ui.sheet({ title: S.connectionTitle, desc: S.connectionDescription });
       const options = entry.options ?? {};
-      let endpointPath =
+      const endpointPath =
         typeof options.endpointPath === 'string' ? options.endpointPath : DEFAULT_ENDPOINT_PATH;
       const jsonText = (value: unknown) =>
         value === undefined ? '' : JSON.stringify(value, null, 2);
-      const baseUrlInput = ui.input({
-        value: entry.baseUrl,
-        cls: 'mono',
-        onChange: (value) => void connectionChanged({ baseUrl: value.trim() }),
-      });
-      baseUrlInput.setAttribute('aria-label', S.baseUrl);
-      const secretNameInput = ui.input({
-        value: entry.secret ?? '',
-        placeholder: S.secretNamePlaceholder,
-        cls: 'mono',
-        onChange: (value) => void connectionChanged({ secret: value.trim() }),
-      });
-      secretNameInput.setAttribute('aria-label', S.secretName);
+      const baseUrlInput = configInput('baseUrl', S.baseUrl, connectionChanged);
+      const secretNameInput = configInput('secret', S.secretName, connectionChanged);
+      (secretNameInput as HTMLInputElement).placeholder = S.secretNamePlaceholder;
       connection.body.append(
         ui.field(S.baseUrl, baseUrlInput),
         ui.field(S.secretName, secretNameInput),
@@ -294,24 +308,18 @@ export const llmSettingsPanel: ConsolePanel = {
         connection.body.append(ui.field(S.secretStatus, row));
         if (!entry.secret) connection.body.append(ui.msgline(S.secretNameFirst));
       }
-      connection.body.append(
-        ui.checkbox(S.multimodal, {
-          checked: entry.multimodal === true,
-          onChange: (checked) => void patch({ multimodal: checked }),
-        }).el,
-      );
+      connection.body.append(ui.field(S.multimodal, configInput('multimodal', S.multimodal)));
       let extraHeaders: HTMLTextAreaElement | null = null;
       let extraBody: HTMLTextAreaElement | null = null;
+      let path: HTMLInputElement | null = null;
       if (open) {
-        const path = ui.input({
-          value: endpointPath,
-          cls: 'mono',
-          onChange: (value) => {
-            endpointPath = value.trim();
-            saveOptions();
-          },
-        });
-        path.setAttribute('aria-label', S.endpointPath);
+        const pathKey = `providers.${current.name}.options.endpointPath`;
+        const hasPath = current.config.some(({ group }) => pathKey in group.schema.properties!);
+        path = hasPath ? configInput('options.endpointPath', S.endpointPath) as HTMLInputElement : null;
+        if (path) {
+          path.value = endpointPath;
+          path.placeholder = DEFAULT_ENDPOINT_PATH;
+        }
         extraHeaders = ui.textarea({
           rows: 3,
           cls: 'mono',
@@ -328,7 +336,7 @@ export const llmSettingsPanel: ConsolePanel = {
         extraBody.setAttribute('aria-label', S.extraBody);
         connection.body.append(
           ui.section(S.advancedProtocolTitle, S.advancedProtocolDescription),
-          ui.field(S.endpointPath, path),
+          ...(path ? [ui.field(S.endpointPath, path)] : []),
           ui.field(S.extraHeaders, extraHeaders),
           ui.field(S.extraBody, extraBody),
         );
@@ -346,7 +354,7 @@ export const llmSettingsPanel: ConsolePanel = {
           return parsed;
         };
         const edited: Record<string, unknown> = {
-          endpointPath,
+          endpointPath: path?.value.trim() ?? options.endpointPath,
           extraHeaders: object(extraHeaders!, S.extraHeaders),
           extraBody: object(extraBody!, S.extraBody),
         };
@@ -431,8 +439,7 @@ export const llmSettingsPanel: ConsolePanel = {
         if (!ctx.signal.aborted) renderModelField();
       }
       /** 地址或密钥改过就重取目录:换了端点,上一份模型表不作数。 */
-      async function connectionChanged(fields: Record<string, unknown>): Promise<void> {
-        if (!(await patch(fields))) return;
+      async function connectionChanged(): Promise<void> {
         catalog = [];
         await fetchCatalog();
       }

package/src/web/client/console-pages/builtins/llm-settings/pricing-panel.ts

@@ -70,6 +70,7 @@ export function pricingEditor(
   quotes: ModelQuote[],
   commit: (pricing: unknown[]) => void,
   language?: Language,
+  draft?: { raw?: string; onRaw(value: string): void },
 ) {
   const S = language === 'en' ? panel.en : panel.zh;
   const card = ui.sheet({
@@ -78,7 +79,6 @@ export function pricingEditor(
   });
   const labels: Record<string, string> = S.meters;
   for (const row of quotes) {
-    if (!row.quotes.length) card.body.append(ui.msgline(S.quoteUnknown(row.model)));
     for (const quote of row.quotes) {
       card.body.append(
         ui.kv([
@@ -101,11 +101,16 @@ export function pricingEditor(
     }
   }
   const unset = saved.length === 0;
-  if (unset) card.body.append(ui.msgline(S.pricingUnset));
+  const pricingNote = ui.h('p', 'field-note pricing-note');
+  const updateNote = (pricing: unknown[]) => {
+    pricingNote.textContent = pricing.length ? '' : S.pricingUnset;
+    pricingNote.hidden = pricing.length > 0;
+  };
+  updateNote(saved); card.body.append(pricingNote);
   const simple: SimpleCost | null = unset ? null : readSimple(saved);
   const raw = ui.textarea({
     rows: 10,
-    value: JSON.stringify(simple ? writeSimple(simple) : saved, null, 2),
+    value: draft?.raw ?? JSON.stringify(simple ? writeSimple(simple) : saved, null, 2),
     onChange: commitDraft,
   });
   const currency = ui.input({ value: simple?.currency ?? 'USD', onChange: writeThrough });
@@ -139,15 +144,23 @@ export function pricingEditor(
     commitDraft();
   }
   /** 完整规则那格可以写坏;解析不过就停在这张卡上说清楚,不往端点写。 */
-  function commitDraft(): void {
+  function commitDraft(): boolean {
     try {
-      const pricing = JSON.parse(raw.value) as unknown[];
+      const pricing: unknown = JSON.parse(raw.value.trim() || '[]');
+      if (!Array.isArray(pricing)) throw new Error(S.pricingTitle + ': JSON array required');
       problem.textContent = '';
       problem.classList.remove('bad');
+      raw.setAttribute('aria-invalid', 'false');
+      updateNote(pricing);
       commit(pricing);
+      draft?.onRaw(raw.value);
+      return true;
     } catch (error) {
       problem.textContent = String(error);
       problem.classList.add('bad');
+      raw.setAttribute('aria-invalid', 'true');
+      draft?.onRaw(raw.value);
+      return false;
     }
   }
   card.body.append(
@@ -155,14 +168,15 @@ export function pricingEditor(
     ...rates.map((input, i) => ui.field(rateLabels[i], input)),
     ui.msgline(simple || unset ? S.costFormNote : S.costFormOverridden),
   );
-  const advanced = ui.h('details');
+  const advanced = ui.h('details', 'pricing-rules');
   advanced.open = !simple && !unset;
   advanced.append(ui.h('summary', null, S.editFull), raw, ui.msgline(S.fullNote), problem);
-  const preview = ui.h('details');
+  const preview = ui.h('details', 'pricing-snapshot');
   preview.append(
     ui.h('summary', null, S.viewSnapshot),
     ui.h('pre', 'mono', JSON.stringify(quotes, null, 2)),
   );
   card.body.append(advanced, preview);
-  return { el: card.el };
+  if (draft?.raw !== undefined) commitDraft();
+  return { el: card.el, body: card.body, validate: commitDraft };
 }

package/src/web/client/console-pages/builtins/llm-settings/strings.ts

@@ -76,7 +76,7 @@ const zh = {
   deleted: '已删除。',
   pricingTitle: '报价',
   pricingDescription: '历史流水固定使用请求时的报价。自定义报价按模型与费用口径覆盖模块默认值。',
-  pricingUnset: '未设报价：这个端点的调用在用量与成本页只计 token，不计金额。',
+  pricingUnset: '未设自定义报价：优先使用模块价目；若无适用价目，仅记录 token，不计金额。',
   meters: {
     input: '输入',
     cachedInput: '缓存命中',
@@ -85,7 +85,6 @@ const zh = {
     reasoning: '推理',
     total: '总量',
   },
-  quoteUnknown: (model: string) => `${model}：报价未知`,
   marginal: '边际费用',
   equivalent: 'API 等价费用',
   perMillion: (label: string, rate: number) => `${label} ${rate}/百万`,
@@ -182,7 +181,7 @@ const en: typeof zh = {
   pricingTitle: 'Pricing',
   pricingDescription:
     'Historical records keep the quote in effect at request time. Custom quotes override module defaults per model and cost basis.',
-  pricingUnset: 'No pricing set: calls on this endpoint count tokens but no amount on the usage page.',
+  pricingUnset: 'No custom pricing: module prices apply when available; otherwise only tokens are recorded.',
   meters: {
     input: 'Input',
     cachedInput: 'Cache hit',
@@ -191,7 +190,6 @@ const en: typeof zh = {
     reasoning: 'Reasoning',
     total: 'Total',
   },
-  quoteUnknown: (model: string) => `${model}: quote unknown`,
   marginal: 'Marginal cost',
   equivalent: 'API-equivalent cost',
   perMillion: (label: string, rate: number) => `${label} ${rate}/M`,

package/src/web/client/console-pages/host.ts

@@ -8,7 +8,7 @@ import {
   type ConsolePageManifest,
   type ConsolePanelManifest,
 } from '../../shared/console-protocol.ts';
-import type { ConsoleMemo, ConsolePanel, Disposable } from '../../shared/client-panel.ts';
+import type { ConsoleMemo, ConsolePanel, ConsolePanelContext, Disposable } from '../../shared/client-panel.ts';
 import { get, post } from '../core/api.ts';
 import { Lifecycle } from '../core/lifecycle.ts';
 import type { Router } from '../core/router.ts';
@@ -121,6 +121,23 @@ export class ConsolePageHost {
     this.emitNav();
   }
 
+  /** Mount module panels inside a connection editor while its adapter stages configuration edits. */
+  async mountConnection(pageId: string, root: HTMLElement, scope: Readonly<Record<string, string>>,
+    adapt: (context: ConsolePanelContext) => ConsolePanelContext): Promise<Disposable> {
+    const lifecycle = new Lifecycle(this.deps.onError);
+    const page = this.find(pageId);
+    for (const panel of asArray(page?.panels).filter(panel => panel.id !== 'settings')) {
+      const box = this.deps.doc.createElement('div'); root.append(box);
+      try {
+        const impl = panel.builtin ? this.builtinPanel(panel.builtin) : await this.deps.loader.resolvePanel(pageId, panel.id, page?.client);
+        if (lifecycle.disposed) break;
+        const result = await impl.mount(adapt(this.panelContext(pageId, panel.id, box, lifecycle, this.generation, scope)));
+        if (result) lifecycle.own(result);
+      } catch (error) { box.textContent = String(error); }
+    }
+    return lifecycle;
+  }
+
   /** 重取 manifest 并刷新导航与当前页头，**不重挂面板**。 */
   async refresh(): Promise<void> {
     await this.load();
@@ -515,7 +532,8 @@ export class ConsolePageHost {
         ? page.lamps ?? []
         : [{ label: S.assembly, state: 'offline', hint: page.availability === 'missing' ? S.notInstalled : S.notActivated }],
     ));
-    head.append(title, ui.h('p', 'pagedesc', page.id));
+    head.appendChild(title);
+    chrome.append(head, ui.h('p', 'pagedesc', page.id));
     const bar = ui.rowbar();
 
     for (const badge of asArray(page.badges)) {
@@ -547,9 +565,8 @@ export class ConsolePageHost {
       });
       bar.appendChild(open);
     }
-    head.appendChild(bar);
-    if (page.reason) head.appendChild(ui.msgline(page.reason, true));
-    chrome.appendChild(head);
+    if (bar.children.length > 1) chrome.appendChild(bar);
+    if (page.reason) chrome.appendChild(ui.msgline(page.reason, true));
 
     const panels = tabbed(page);
     const prompts = asArray(page.prompts);

package/src/web/client/core/api.ts

@@ -6,6 +6,7 @@
  */
 
 import {
+  CONSOLE_AUTH_HEADER,
   CONSOLE_MANIFEST_ROUTE,
   panelRoute,
   type ConsoleManifest,
@@ -57,12 +58,15 @@ function normalizeError(err: unknown, status: number): never {
 
 async function send(path: string, init: RequestInit, opts?: RequestOptions): Promise<Response> {
   try {
-    return await fetch(path, {
+    const res = await fetch(path, {
       ...init,
       headers: { ...languageHeaders(), ...(init.headers as Record<string, string> | undefined) },
       ...(opts?.signal ? { signal: opts.signal } : {}),
       ...(opts?.keepalive ? { keepalive: true } : {}),
     });
+    // 登录态失效:重新载入入口页,服务端在那里给出登录页。
+    if (res.status === 401 && res.headers.get(CONSOLE_AUTH_HEADER) !== null) location.reload();
+    return res;
   } catch (err) {
     // fetch reject = 网络层没走到 HTTP，没有状态码可言，记 0。
     normalizeError(err, 0);

package/src/web/client/core/router.ts

@@ -70,6 +70,7 @@ export class Router {
   private readonly deps: RouterDeps;
   private readonly listeners = new Set<(route: Route) => void>();
   private readonly guards = new Set<LeaveGuard>();
+  private readonly decisions = new Set<() => Promise<boolean>>();
   private current: Route;
   /** 待处理的回拨 hash；写入相同 hash 不触发 hashchange，因此按目标值识别回拨。 */
   private pendingRevert: string | null = null;
@@ -108,6 +109,11 @@ export class Router {
     return toDisposable(() => this.guards.delete(guard));
   }
 
+  addLeaveDecision(decide: () => Promise<boolean>): Disposable {
+    this.decisions.add(decide);
+    return toDisposable(() => this.decisions.delete(decide));
+  }
+
   navigate(segments: readonly string[], query?: Record<string, string>): void {
     this.go(buildHash(segments, query), (hash) => { this.deps.win.location.hash = hash; });
   }
@@ -166,6 +172,15 @@ export class Router {
       return;
     }
 
+    if (this.decisions.size) {
+      this.confirming = true;
+      let allowed = true;
+      try {
+        for (const decide of this.decisions) if (!(await decide())) { allowed = false; break; }
+      } catch (error) { allowed = false; this.deps.onError?.(error); }
+      finally { this.confirming = false; }
+      if (!allowed) { this.revertTo(this.current.raw); return; }
+    }
     const block = this.firstBlock();
     if (block) {
       this.confirming = true;