ec-web 0.0.24 → 0.0.25

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 EvolCore contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 EvolCore contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,17 +1,17 @@
-# EC Web
-
-Web console and monitoring dashboard for EvolCore.
-
-## Install
-
-```bash
-npm install -g ec-web
-```
-
-## Run
-
-```bash
-ec-web --home /path/to/runtime-home
-```
-
-Use `ec watch web` when EC Web is managed by the main daemon.
+# EC Web
+
+Web console and monitoring dashboard for EvolCore.
+
+## Install
+
+```bash
+npm install -g ec-web
+```
+
+## Run
+
+```bash
+ec-web --home /path/to/runtime-home
+```
+
+Use `ec watch web` when EC Web is managed by the main daemon.

package/dist/server.js

@@ -796,7 +796,7 @@ export async function startWatchWebServer(opts = {}) {
                 res.end(JSON.stringify({ success: false, error: 'unauthorized' }));
                 return;
             }
-            void handleBasicSettingsApi(req, res, { redactConnectionMaps: !isLocalDirect(req), remoteAccess: !isLocalDirect(req) });
+            void handleBasicSettingsApi(req, res, { redactConnectionMaps: !isLocalDirect(req) });
         }
         else if (req.method === 'GET' && (req.url || '').startsWith('/api/stats/')) {
             // Stats API — 本地直连自动发 token（免鉴权），远程需鉴权

package/dist/sources/basic-settings.js

@@ -767,9 +767,6 @@ export async function handleBasicSettingsApi(req, res, options = {}) {
             return;
         }
         if (req.method === 'GET' && pathname === '/api/basic-settings/secret') {
-            if (options.remoteAccess) {
-                throw Object.assign(new Error('Remote access cannot reveal configuration secrets'), { statusCode: 403 });
-            }
             const file = url.searchParams.get('file') || 'defaults';
             const fieldPath = url.searchParams.get('path') || '';
             if (!requestedSecretPath(file, fieldPath)) {
@@ -785,9 +782,6 @@ export async function handleBasicSettingsApi(req, res, options = {}) {
             return;
         }
         if (req.method === 'PATCH' && pathname === '/api/basic-settings') {
-            if (options.remoteAccess) {
-                throw Object.assign(new Error('Remote access cannot mutate basic settings'), { statusCode: 403 });
-            }
             const body = await readJsonBody(req);
             if (!isRecord(body) || (body.file !== 'daemon' && body.file !== 'defaults'))
                 throw new Error('file must be daemon or defaults');

package/dist/sources/session-codex.js

@@ -205,12 +205,12 @@ function listProjects() {
     if (!db)
         return [];
     try {
-        const rows = db.prepare(`
-      SELECT cwd, COUNT(*) as count, MAX(updated_at) as lastActivity
-      FROM threads
-      WHERE archived = 0
-      GROUP BY cwd
-      ORDER BY lastActivity DESC
+        const rows = db.prepare(`
+      SELECT cwd, COUNT(*) as count, MAX(updated_at) as lastActivity
+      FROM threads
+      WHERE archived = 0
+      GROUP BY cwd
+      ORDER BY lastActivity DESC
     `).all();
         const projects = rows.map(r => {
             const cwd = r.cwd || '';
@@ -382,11 +382,11 @@ function listTranscripts(encoded, cwd) {
     if (!db)
         return [];
     try {
-        const rows = db.prepare(`
-      SELECT id, title, first_user_message, updated_at, rollout_path, source, thread_source
-      FROM threads
-      WHERE cwd = ? AND archived = 0
-      ORDER BY updated_at DESC
+        const rows = db.prepare(`
+      SELECT id, title, first_user_message, updated_at, rollout_path, source, thread_source
+      FROM threads
+      WHERE cwd = ? AND archived = 0
+      ORDER BY updated_at DESC
     `).all(cwd);
         const out = [];
         let parsed = 0, hitMem = 0, hitDisk = 0;

package/dist/sources/stats.js

@@ -46,41 +46,41 @@ export function queryStatsForDashboard() {
     const h24ago = Date.now() - 24 * 60 * 60 * 1000;
     try {
         // Today summary with cost
-        const todayRow = db.prepare(`
-      SELECT
-        COALESCE(SUM(input_tokens),0) AS input_tokens,
-        COALESCE(SUM(output_tokens),0) AS output_tokens,
-        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
-        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
-        COUNT(*) AS call_count,
-        COALESCE(SUM(cost_gateway_usd),0) AS cost_usd,
-        COALESCE(SUM(cost_gateway_cny),0) AS cost_cny
-      FROM usage_events WHERE ts >= ?
+        const todayRow = db.prepare(`
+      SELECT
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count,
+        COALESCE(SUM(cost_gateway_usd),0) AS cost_usd,
+        COALESCE(SUM(cost_gateway_cny),0) AS cost_cny
+      FROM usage_events WHERE ts >= ?
     `).get(todayStart);
         const totalIn = (todayRow.input_tokens ?? 0) + (todayRow.cache_read_tokens ?? 0);
         const hitRate = totalIn > 0 ? (todayRow.cache_read_tokens ?? 0) / totalIn : 0;
         // Hourly (last 24h)
-        const hourly = db.prepare(`
-      SELECT
-        strftime('%Y-%m-%d %H:00', ts/1000, 'unixepoch', 'localtime') AS hour,
-        COALESCE(SUM(input_tokens),0) AS input_tokens,
-        COALESCE(SUM(output_tokens),0) AS output_tokens,
-        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
-        COUNT(*) AS call_count
-      FROM usage_events WHERE ts >= ?
-      GROUP BY hour ORDER BY hour
+        const hourly = db.prepare(`
+      SELECT
+        strftime('%Y-%m-%d %H:00', ts/1000, 'unixepoch', 'localtime') AS hour,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events WHERE ts >= ?
+      GROUP BY hour ORDER BY hour
     `).all(h24ago);
         // Top models (today)
-        const top_models = db.prepare(`
-      SELECT model, SUM(input_tokens+output_tokens) AS total_tokens, COUNT(*) AS call_count
-      FROM usage_events WHERE ts >= ?
-      GROUP BY model ORDER BY total_tokens DESC LIMIT 10
+        const top_models = db.prepare(`
+      SELECT model, SUM(input_tokens+output_tokens) AS total_tokens, COUNT(*) AS call_count
+      FROM usage_events WHERE ts >= ?
+      GROUP BY model ORDER BY total_tokens DESC LIMIT 10
     `).all(todayStart);
         // Top peers (today)
-        const top_peers = db.prepare(`
-      SELECT peer_key, SUM(input_tokens+output_tokens) AS total_tokens, COUNT(*) AS call_count
-      FROM usage_events WHERE ts >= ?
-      GROUP BY peer_key ORDER BY total_tokens DESC LIMIT 5
+        const top_peers = db.prepare(`
+      SELECT peer_key, SUM(input_tokens+output_tokens) AS total_tokens, COUNT(*) AS call_count
+      FROM usage_events WHERE ts >= ?
+      GROUP BY peer_key ORDER BY total_tokens DESC LIMIT 5
     `).all(todayStart);
         return {
             today: { ...todayRow, cache_hit_rate: hitRate },
@@ -124,16 +124,16 @@ export function queryStatsExplorer(params) {
     }
     const where = conds.length ? 'WHERE ' + conds.join(' AND ') : '';
     try {
-        return db.prepare(`
-      SELECT
-        strftime('${strfmt}', ts/1000, 'unixepoch', 'localtime') AS period,
-        COALESCE(SUM(input_tokens),0) AS input_tokens,
-        COALESCE(SUM(output_tokens),0) AS output_tokens,
-        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
-        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
-        COUNT(*) AS call_count
-      FROM usage_events ${where}
-      GROUP BY period ORDER BY period
+        return db.prepare(`
+      SELECT
+        strftime('${strfmt}', ts/1000, 'unixepoch', 'localtime') AS period,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events ${where}
+      GROUP BY period ORDER BY period
     `).all(...p);
     }
     finally {
@@ -162,14 +162,14 @@ export function queryStatsByPeer(params) {
     const where = conds.length ? 'WHERE ' + conds.join(' AND ') : '';
     const limit = params.limit ?? 50;
     try {
-        const rows = db.prepare(`
-      SELECT peer_key, peer_type,
-        COALESCE(SUM(input_tokens),0) AS input_tokens,
-        COALESCE(SUM(output_tokens),0) AS output_tokens,
-        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
-        COUNT(*) AS call_count
-      FROM usage_events ${where}
-      GROUP BY peer_key ORDER BY (COALESCE(SUM(input_tokens),0) + COALESCE(SUM(output_tokens),0)) DESC LIMIT ${limit}
+        const rows = db.prepare(`
+      SELECT peer_key, peer_type,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events ${where}
+      GROUP BY peer_key ORDER BY (COALESCE(SUM(input_tokens),0) + COALESCE(SUM(output_tokens),0)) DESC LIMIT ${limit}
     `).all(...p);
         // 为每个peer添加名称和详细信息
         return rows.map((row) => {
@@ -212,34 +212,34 @@ export function queryStatsOverview(params) {
         }
         const where = conds.length ? 'WHERE ' + conds.join(' AND ') : '';
         // Token and cost aggregation with filters
-        const allRow = db.prepare(`
-      SELECT
-        COALESCE(SUM(input_tokens),0) AS input_tokens,
-        COALESCE(SUM(output_tokens),0) AS output_tokens,
-        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
-        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
-        COUNT(*) AS call_count,
-        COALESCE(SUM(cost_official_usd),0) AS cost_official_usd,
-        COALESCE(SUM(cost_official_cny),0) AS cost_official_cny,
-        COALESCE(SUM(cost_gateway_usd),0) AS cost_usd,
-        COALESCE(SUM(cost_gateway_cny),0) AS cost_cny
-      FROM usage_events ${where}
+        const allRow = db.prepare(`
+      SELECT
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count,
+        COALESCE(SUM(cost_official_usd),0) AS cost_official_usd,
+        COALESCE(SUM(cost_official_cny),0) AS cost_official_cny,
+        COALESCE(SUM(cost_gateway_usd),0) AS cost_usd,
+        COALESCE(SUM(cost_gateway_cny),0) AS cost_cny
+      FROM usage_events ${where}
     `).get(...p);
         // By agent aggregation with filters
-        const byAgentRows = db.prepare(`
-      SELECT agent_aid,
-        COALESCE(SUM(input_tokens),0) AS input_tokens,
-        COALESCE(SUM(output_tokens),0) AS output_tokens,
-        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
-        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
-        COUNT(*) AS call_count,
-        COALESCE(SUM(cost_official_usd),0) AS cost_official_usd,
-        COALESCE(SUM(cost_official_cny),0) AS cost_official_cny,
-        COALESCE(SUM(cost_gateway_usd),0) AS cost_usd,
-        COALESCE(SUM(cost_gateway_cny),0) AS cost_cny
-      FROM usage_events ${where}
-      GROUP BY agent_aid
-      ORDER BY (COALESCE(SUM(input_tokens),0) + COALESCE(SUM(output_tokens),0)) DESC
+        const byAgentRows = db.prepare(`
+      SELECT agent_aid,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count,
+        COALESCE(SUM(cost_official_usd),0) AS cost_official_usd,
+        COALESCE(SUM(cost_official_cny),0) AS cost_official_cny,
+        COALESCE(SUM(cost_gateway_usd),0) AS cost_usd,
+        COALESCE(SUM(cost_gateway_cny),0) AS cost_cny
+      FROM usage_events ${where}
+      GROUP BY agent_aid
+      ORDER BY (COALESCE(SUM(input_tokens),0) + COALESCE(SUM(output_tokens),0)) DESC
     `).all(...p);
         // 为每个agent添加名称
         const byAgentWithNames = byAgentRows.map((row) => ({
@@ -303,14 +303,14 @@ export function queryStatsByAgent(params) {
     const where = conds.length ? 'WHERE ' + conds.join(' AND ') : '';
     const limit = params.limit ?? 50;
     try {
-        const rows = db.prepare(`
-      SELECT agent_aid,
-        COALESCE(SUM(input_tokens),0) AS input_tokens,
-        COALESCE(SUM(output_tokens),0) AS output_tokens,
-        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
-        COUNT(*) AS call_count
-      FROM usage_events ${where}
-      GROUP BY agent_aid ORDER BY (COALESCE(SUM(input_tokens),0) + COALESCE(SUM(output_tokens),0)) DESC LIMIT ${limit}
+        const rows = db.prepare(`
+      SELECT agent_aid,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events ${where}
+      GROUP BY agent_aid ORDER BY (COALESCE(SUM(input_tokens),0) + COALESCE(SUM(output_tokens),0)) DESC LIMIT ${limit}
     `).all(...p);
         // 为每个agent添加名称
         return rows.map((row) => ({
@@ -353,15 +353,15 @@ export function queryUsageDetail(params) {
         const countRow = db.prepare(`SELECT COUNT(*) as total FROM usage_events ${where}`).get(...p);
         const total = countRow?.total || 0;
         // 获取数据
-        const data = db.prepare(`
-      SELECT ts, agent_aid, peer_key, model,
-        input_tokens, output_tokens, cache_creation_tokens, cache_read_tokens,
-        COALESCE(cost_official_usd, 0) AS cost_official_usd,
-        COALESCE(cost_official_cny, 0) AS cost_official_cny,
-        COALESCE(cost_gateway_usd, 0) AS cost_gateway_usd,
-        COALESCE(cost_gateway_cny, 0) AS cost_gateway_cny
-      FROM usage_events ${where}
-      ORDER BY ts DESC LIMIT ${limit} OFFSET ${offset}
+        const data = db.prepare(`
+      SELECT ts, agent_aid, peer_key, model,
+        input_tokens, output_tokens, cache_creation_tokens, cache_read_tokens,
+        COALESCE(cost_official_usd, 0) AS cost_official_usd,
+        COALESCE(cost_official_cny, 0) AS cost_official_cny,
+        COALESCE(cost_gateway_usd, 0) AS cost_gateway_usd,
+        COALESCE(cost_gateway_cny, 0) AS cost_gateway_cny
+      FROM usage_events ${where}
+      ORDER BY ts DESC LIMIT ${limit} OFFSET ${offset}
     `).all(...p);
         // 为每条记录添加agent_name (需要从文件系统读取agent.md)
         const dataWithNames = data.map((row) => ({
@@ -391,10 +391,10 @@ export function queryUsedModels(params) {
     }
     const where = conds.length ? 'WHERE ' + conds.join(' AND ') : '';
     try {
-        const rows = db.prepare(`
-      SELECT DISTINCT model
-      FROM usage_events ${where}
-      ORDER BY model
+        const rows = db.prepare(`
+      SELECT DISTINCT model
+      FROM usage_events ${where}
+      ORDER BY model
     `).all(...p);
         return rows.map((row) => row.model).filter(Boolean);
     }