ellm-proxy 0.0.3 → 0.0.7

package/bin/commands/service.js

@@ -1,107 +1,107 @@
-// 服务生命周期 CLI 命令：start / stop / restart（restart = stop + start，保证最新参数生效）。
-// 进程编排核心在 utils/service.js，本文件只做命令装配与人读输出（摘要文案）。
-import { join } from "node:path";
-import { APP_NAME, MANAGER_APP_NAME, pkgRoot, defaultAppDir, absolutize } from "../../utils/paths.js";
-import { withPm2, findApp } from "../../utils/pm2.js";
-import { doStart, doStop, resolvePort } from "../../utils/service.js";
-import { ICONS, say, field } from "../../utils/ui.js";
-
-/** 摘要块（start/restart 成功 与 默认命令已运行 共用的输出形态，图标 + 对齐标签） */
-function printInfo({ appDir, port, managerPort, logsHint }) {
-  if (port) {
-    field(ICONS.gateway, "网关端点", `http://localhost:${port}`);
-    field(ICONS.api, "管理台 API", `http://localhost:${port}/api/*`);
-    if (managerPort) field(ICONS.webui, "管理界面", `http://127.0.0.1:${managerPort}/`);
-  } else {
-    field(
-      ICONS.question,
-      "访问入口",
-      "端口未知（请检查配置）：网关 = http://localhost:<端口> · 管理界面 = http://127.0.0.1:<主端口+1>/",
-    );
-  }
-  field(
-    ICONS.api,
-    "管理服务",
-    `${managerPort ? `http://127.0.0.1:${managerPort}` : "端口未知（= 网关端口 + 1）"}（启停/代理开关接口，进程名 ${MANAGER_APP_NAME}）`,
-  );
-  field(ICONS.folder, "应用目录", appDir);
-  field(ICONS.status, "运行状态", `pm2 ls（进程名 ${APP_NAME}）· 日志 ${logsHint ?? "<应用目录>/logs/"}`);
-}
-
-/** 启动摘要（start/restart 成功后输出） */
-function printSummary(appDir, config) {
-  printInfo({
-    appDir,
-    port: resolvePort(process.env.ELLM_PORT, config),
-    managerPort: process.env.ELLM_MANAGER_PORT,
-  });
-}
-
-/** 运行中服务的信息（默认命令：ellm-proxy 不带参数时已运行则展示此信息）。
- *  端口/路径以 pm2 记录的进程 env 为准（与当前 CLI 会话 env 无关） */
-function printRunningInfo(proc) {
-  const pmEnv = proc.pm2_env?.env ?? {};
-  const appDir = pmEnv.ELLM_APP_DIR || proc.pm2_env?.pm_cwd || defaultAppDir;
-  const uptime = proc.pm2_env?.pm_uptime ? new Date(proc.pm2_env.pm_uptime).toLocaleString() : "";
-  say(`${APP_NAME} 已在运行（pid ${proc.pid}${uptime ? ` · 自 ${uptime} 起` : ""}）`, ICONS.running);
-  printInfo({
-    appDir,
-    port: resolvePort(pmEnv.ELLM_PORT, pmEnv.ELLM_CONFIG),
-    managerPort: pmEnv.ELLM_MANAGER_PORT,
-    logsHint: join(appDir, "logs"),
-  });
-}
-
-/** start 成功后的统一输出 */
-function printStarted({ proc, managerProc, appDir, config }) {
-  console.log();
-  say(`启动完成（主服务 pid ${proc.pid}${managerProc ? ` · 管理服务 pid ${managerProc.pid}` : ""}）`, ICONS.success);
-  console.log();
-  printSummary(appDir, config);
-}
-
-/** 默认命令（ellm-proxy 不带参数）：已运行则打印服务信息，未运行则启动（同 start） */
-export async function doStartOrInfo(opts) {
-  const existing = await withPm2(() => findApp());
-  if (existing) return printRunningInfo(existing);
-  printStarted(await doStart(absolutize(opts)));
-}
-
-/** start/restart/默认命令共用的选项集 */
-export function withStartOptions(cmd) {
-  return cmd
-    .option("--port <n>", "监听端口（也可用 ELLM_PORT 环境变量）")
-    .option("--config <path>", "配置文件路径（也可用 ELLM_CONFIG 环境变量）")
-    .option("--data-dir <path>", "数据目录（也可用 ELLM_DATA_DIR 环境变量；默认 <appDir>/data）")
-    .option("--working-dir <path>", "应用目录（配置/数据/日志基目录 ELLM_APP_DIR，默认 ~/.ellm-proxy）")
-    .option("--server-js <path>", "显式指定 dist/server.js 路径（默认本包 dist/server.js）");
-}
-
-export function register(cli, run) {
-  withStartOptions(cli.command("start", "pm2 后台守护启动（崩溃自动重启；首次自动创建配置）")).action((opts) =>
-    run(() => doStart(absolutize(opts)).then(printStarted)),
-  );
-
-  withStartOptions(cli.command("restart", "重启服务（先 stop 后 start，保证最新参数生效，选项同 start）")).action(
-    (opts) =>
-      run(async () => {
-        const stopped = await doStop();
-        if (!stopped.main && !stopped.manager) say(`${APP_NAME} 未在运行（可能已停止）。`, ICONS.idle);
-        printStarted(await doStart(absolutize(opts)));
-      }),
-  );
-
-  cli.command("stop", "停止服务（pm2 删除守护进程，不影响其他 node 进程）").action(() =>
-    run(async () => {
-      const stopped = await doStop();
-      if (!stopped.main && !stopped.manager) {
-        say(`${APP_NAME} 未在运行（可能已停止）。`, ICONS.idle);
-        return;
-      }
-      say(
-        stopped.manager ? `${APP_NAME} 已停止（管理服务 ${MANAGER_APP_NAME} 一并停止）。` : `${APP_NAME} 已停止。`,
-        ICONS.stopped,
-      );
-    }),
-  );
-}
+// 服务生命周期 CLI 命令：start / stop / restart（restart = stop + start，保证最新参数生效）。
+// 进程编排核心在 utils/service.js，本文件只做命令装配与人读输出（摘要文案）。
+import { join } from "node:path";
+import { APP_NAME, MANAGER_APP_NAME, pkgRoot, defaultAppDir, absolutize } from "../../utils/paths.js";
+import { withPm2, findApp } from "../../utils/pm2.js";
+import { doStart, doStop, resolvePort } from "../../utils/service.js";
+import { ICONS, say, field } from "../../utils/ui.js";
+
+/** 摘要块（start/restart 成功 与 默认命令已运行 共用的输出形态，图标 + 对齐标签） */
+function printInfo({ appDir, port, managerPort, logsHint }) {
+  if (port) {
+    field(ICONS.gateway, "网关端点", `http://localhost:${port}`);
+    field(ICONS.api, "管理台 API", `http://localhost:${port}/api/*`);
+    if (managerPort) field(ICONS.webui, "管理界面", `http://127.0.0.1:${managerPort}/`);
+  } else {
+    field(
+      ICONS.question,
+      "访问入口",
+      "端口未知（请检查配置）：网关 = http://localhost:<端口> · 管理界面 = http://127.0.0.1:<主端口+1>/",
+    );
+  }
+  field(
+    ICONS.api,
+    "管理服务",
+    `${managerPort ? `http://127.0.0.1:${managerPort}` : "端口未知（= 网关端口 + 1）"}（启停/代理开关接口，进程名 ${MANAGER_APP_NAME}）`,
+  );
+  field(ICONS.folder, "应用目录", appDir);
+  field(ICONS.status, "运行状态", `pm2 ls（进程名 ${APP_NAME}）· 日志 ${logsHint ?? "<应用目录>/logs/"}`);
+}
+
+/** 启动摘要（start/restart 成功后输出） */
+function printSummary(appDir, config) {
+  printInfo({
+    appDir,
+    port: resolvePort(process.env.ELLM_PORT, config),
+    managerPort: process.env.ELLM_MANAGER_PORT,
+  });
+}
+
+/** 运行中服务的信息（默认命令：ellm-proxy 不带参数时已运行则展示此信息）。
+ *  端口/路径以 pm2 记录的进程 env 为准（与当前 CLI 会话 env 无关） */
+function printRunningInfo(proc) {
+  const pmEnv = proc.pm2_env?.env ?? {};
+  const appDir = pmEnv.ELLM_APP_DIR || proc.pm2_env?.pm_cwd || defaultAppDir;
+  const uptime = proc.pm2_env?.pm_uptime ? new Date(proc.pm2_env.pm_uptime).toLocaleString() : "";
+  say(`${APP_NAME} 已在运行（pid ${proc.pid}${uptime ? ` · 自 ${uptime} 起` : ""}）`, ICONS.running);
+  printInfo({
+    appDir,
+    port: resolvePort(pmEnv.ELLM_PORT, pmEnv.ELLM_CONFIG),
+    managerPort: pmEnv.ELLM_MANAGER_PORT,
+    logsHint: join(appDir, "logs"),
+  });
+}
+
+/** start 成功后的统一输出 */
+function printStarted({ proc, managerProc, appDir, config }) {
+  console.log();
+  say(`启动完成（主服务 pid ${proc.pid}${managerProc ? ` · 管理服务 pid ${managerProc.pid}` : ""}）`, ICONS.success);
+  console.log();
+  printSummary(appDir, config);
+}
+
+/** 默认命令（ellm-proxy 不带参数）：已运行则打印服务信息，未运行则启动（同 start） */
+export async function doStartOrInfo(opts) {
+  const existing = await withPm2(() => findApp());
+  if (existing) return printRunningInfo(existing);
+  printStarted(await doStart(absolutize(opts)));
+}
+
+/** start/restart/默认命令共用的选项集 */
+export function withStartOptions(cmd) {
+  return cmd
+    .option("--port <n>", "监听端口（也可用 ELLM_PORT 环境变量）")
+    .option("--config <path>", "配置文件路径（也可用 ELLM_CONFIG 环境变量）")
+    .option("--data-dir <path>", "数据目录（也可用 ELLM_DATA_DIR 环境变量；默认 <appDir>/data）")
+    .option("--working-dir <path>", "应用目录（配置/数据/日志基目录 ELLM_APP_DIR，默认 ~/.ellm-proxy）")
+    .option("--server-js <path>", "显式指定 dist/server.js 路径（默认本包 dist/server.js）");
+}
+
+export function register(cli, run) {
+  withStartOptions(cli.command("start", "pm2 后台守护启动（崩溃自动重启；首次自动创建配置）")).action((opts) =>
+    run(() => doStart(absolutize(opts)).then(printStarted)),
+  );
+
+  withStartOptions(cli.command("restart", "重启服务（先 stop 后 start，保证最新参数生效，选项同 start）")).action(
+    (opts) =>
+      run(async () => {
+        const stopped = await doStop();
+        if (!stopped.main && !stopped.manager) say(`${APP_NAME} 未在运行（可能已停止）。`, ICONS.idle);
+        printStarted(await doStart(absolutize(opts)));
+      }),
+  );
+
+  cli.command("stop", "停止服务（pm2 删除守护进程，不影响其他 node 进程）").action(() =>
+    run(async () => {
+      const stopped = await doStop();
+      if (!stopped.main && !stopped.manager) {
+        say(`${APP_NAME} 未在运行（可能已停止）。`, ICONS.idle);
+        return;
+      }
+      say(
+        stopped.manager ? `${APP_NAME} 已停止（管理服务 ${MANAGER_APP_NAME} 一并停止）。` : `${APP_NAME} 已停止。`,
+        ICONS.stopped,
+      );
+    }),
+  );
+}

package/bin/ellm-proxy.js

@@ -1,61 +1,64 @@
-#!/usr/bin/env node
-// ellm-proxy CLI 入口（bin，cac 框架）：仅做命令装配，实现在 commands/（命令）与 utils/（共享工具）。
-//
-// 命令：（无参数 = 默认启动）start / stop / restart / pm2 <args...> / autostart on|off / config / -h / --version（选项详见 -h）
-//
-// 运行时布局（默认 ~/.ellm-proxy/，均可被选项/环境变量覆盖）：
-//   配置: --config > ELLM_CONFIG 环境变量 > ~/.ellm-proxy/ellm.config.json（首次自动创建）
-//   数据: ELLM_DATA_DIR 环境变量 > ~/.ellm-proxy/data
-//   日志: <appDir>/logs/ellm-out.log · ellm-err.log（主服务）+ manager-out.log · manager-err.log（管理服务）
-//
-// 进程管理（跨平台，pm2 JS API 封装见 utils/pm2.js，编排核心见 utils/service.js）：
-//   start 会一并托管两个进程——主服务 dist/server.js（name=ellm-proxy）与管理服务 manager/index.js
-//   （name=ellm-proxy-manager，启停/重启主服务 + Claude Code/Codex 代理开关）。
-//   崩溃自动重启、日志落盘、dump/resurrect（开机自启一并恢复）。服务要求的 Node >=22.13.0 通过
-//   interpreter 保证（utils/interpreter.js），pm2 daemon 的 node 版本无关紧要。
-//   start/stop 成功后自动 pm2 dump，供开机自启 resurrect 恢复。`ellm-proxy pm2 <args>` 可透传
-//   任意 pm2 子命令（list/logs/monit/...，用包内局部 pm2，无需自装全局）。
-//
-// 开机自启（commands/autostart.js，跨平台）：登录时触发、无需管理员——Windows 写启动文件夹
-// .cmd（shell:startup）、macOS 写 LaunchAgent plist（launchctl load）、Linux 写 systemd user
-// unit（systemctl --user enable）；内容一致 = pm2 resurrect 恢复最后一次 dump。
-
-import { cac } from "cac";
-import { pkg } from "../utils/paths.js";
-import { error as uiError } from "../utils/ui.js";
-import * as serviceCmd from "./commands/service.js";
-import * as autostartCmd from "./commands/autostart.js";
-import * as configCmd from "./commands/config.js";
-import * as pm2Cmd from "./commands/pm2.js";
-
-const cli = cac("ellm-proxy");
-
-/** 统一错误出口：命令实现抛错 → 打印中文错误信息并以退出码 1 结束 */
-async function run(action) {
-  try {
-    await action();
-  } catch (err) {
-    console.error();
-    uiError(`错误：${err?.message ?? err}`);
-    process.exit(1);
-  }
-}
-
-serviceCmd.register(cli, run);
-autostartCmd.register(cli, run);
-configCmd.register(cli);
-pm2Cmd.register(cli, run);
-
-// pm2 透传：在 cac 解析前拦截 `ellm-proxy pm2 <...args>`，pm2 的 -- 选项原样可达（cac 会吞掉未知 -- 选项）
-if (process.argv[2] === "pm2") {
-  run(() => pm2Cmd.doPassthrough(process.argv.slice(3)));
-} else {
-  // 默认命令（无参数）：启动服务，已运行则显示服务信息（选项同 start）
-  serviceCmd
-    .withStartOptions(cli.command("", "启动服务（已运行则显示服务信息，选项同 start）"))
-    .action((opts) => run(() => serviceCmd.doStartOrInfo(opts)));
-
-  cli.help();
-  cli.version(pkg.version);
-  cli.parse();
-}
+#!/usr/bin/env node
+// ellm-proxy CLI 入口（bin，cac 框架）：仅做命令装配，实现在 commands/（命令）与 utils/（共享工具）。
+//
+// 命令：（无参数 = 默认启动）start / stop / restart / pm2 <args...> / autostart on|off / config /
+// master-key / account / -h / --version（选项详见 -h）
+//
+// 运行时布局（默认 ~/.ellm-proxy/，均可被选项/环境变量覆盖）：
+//   配置: --config > ELLM_CONFIG 环境变量 > ~/.ellm-proxy/ellm.config.json（首次自动创建）
+//   数据: ELLM_DATA_DIR 环境变量 > ~/.ellm-proxy/data
+//   日志: <appDir>/logs/ellm-out.log · ellm-err.log（主服务）+ manager-out.log · manager-err.log（管理服务）
+//
+// 进程管理（跨平台，pm2 JS API 封装见 utils/pm2.js，编排核心见 utils/service.js）：
+//   start 会一并托管两个进程——主服务 dist/server.js（name=ellm-proxy）与管理服务 manager/index.js
+//   （name=ellm-proxy-manager，启停/重启主服务 + Claude Code/Codex 代理开关）。
+//   崩溃自动重启、日志落盘、dump/resurrect（开机自启一并恢复）。服务要求的 Node >=22.13.0 通过
+//   interpreter 保证（utils/interpreter.js），pm2 daemon 的 node 版本无关紧要。
+//   start/stop 成功后自动 pm2 dump，供开机自启 resurrect 恢复。`ellm-proxy pm2 <args>` 可透传
+//   任意 pm2 子命令（list/logs/monit/...，用包内局部 pm2，无需自装全局）。
+//
+// 开机自启（commands/autostart.js，跨平台）：登录时触发、无需管理员——Windows 写启动文件夹
+// .cmd（shell:startup）、macOS 写 LaunchAgent plist（launchctl load）、Linux 写 systemd user
+// unit（systemctl --user enable）；内容一致 = pm2 resurrect 恢复最后一次 dump。
+
+import { cac } from "cac";
+import { pkg } from "../utils/paths.js";
+import { error as uiError } from "../utils/ui.js";
+import * as serviceCmd from "./commands/service.js";
+import * as autostartCmd from "./commands/autostart.js";
+import * as configCmd from "./commands/config.js";
+import * as credentialsCmd from "./commands/credentials.js";
+import * as pm2Cmd from "./commands/pm2.js";
+
+const cli = cac("ellm-proxy");
+
+/** 统一错误出口：命令实现抛错 → 打印中文错误信息并以退出码 1 结束 */
+async function run(action) {
+  try {
+    await action();
+  } catch (err) {
+    console.error();
+    uiError(`错误：${err?.message ?? err}`);
+    process.exit(1);
+  }
+}
+
+serviceCmd.register(cli, run);
+autostartCmd.register(cli, run);
+configCmd.register(cli);
+credentialsCmd.register(cli, run);
+pm2Cmd.register(cli, run);
+
+// pm2 透传：在 cac 解析前拦截 `ellm-proxy pm2 <...args>`，pm2 的 -- 选项原样可达（cac 会吞掉未知 -- 选项）
+if (process.argv[2] === "pm2") {
+  run(() => pm2Cmd.doPassthrough(process.argv.slice(3)));
+} else {
+  // 默认命令（无参数）：启动服务，已运行则显示服务信息（选项同 start）
+  serviceCmd
+    .withStartOptions(cli.command("", "启动服务（已运行则显示服务信息，选项同 start）"))
+    .action((opts) => run(() => serviceCmd.doStartOrInfo(opts)));
+
+  cli.help();
+  cli.version(pkg.version);
+  cli.parse();
+}

package/dist/server.js

@@ -10739,7 +10739,14 @@ function saveConfigFile(config3) {
   writeFileSync(CONFIG_PATH, JSON.stringify(config3, null, 2) + "\n", "utf-8");
 }
 function validateConfig(config3) {
-  const { masterKey: _masterKey, "web-ui": _webUi, logs: _logs, ...gatewayConfig } = config3;
+  const {
+    masterKey: _masterKey,
+    "web-ui": _webUi,
+    logs: _logs,
+    setup: _setup,
+    autoUpdate: _autoUpdate,
+    ...gatewayConfig
+  } = config3;
   return expandConfig(gatewayConfig);
 }
 
@@ -10763,6 +10770,19 @@ function resolveLoginAccount() {
   const envPassword = process.env["WEBUI_PASSWORD"] || "admin";
   return { username: fileUsername ?? envUsername, password: filePassword ?? envPassword };
 }
+function resolveSetupState() {
+  let setup;
+  try {
+    setup = loadConfigFile()?.setup;
+  } catch {
+    setup = void 0;
+  }
+  if (setup === void 0) return { completed: true, deployment: void 0 };
+  return {
+    completed: setup.completed === true,
+    deployment: setup.deployment === "server" ? "server" : "local"
+  };
+}
 function resolveLogRetention() {
   const logs = loadConfigFile()?.["logs"];
   const days = (value, fallback) => typeof value === "number" && Number.isFinite(value) && value >= 0 ? Math.floor(value) : fallback;
@@ -11363,6 +11383,37 @@ function redactHeaders(headers) {
   }
   return changed ? out : headers;
 }
+var REDACTED_QUERY_PARAM_NAMES = /* @__PURE__ */ new Set([
+  "key",
+  "apikey",
+  "accesskey",
+  "accesstoken",
+  "token",
+  "authtoken",
+  "sig",
+  "signature",
+  "secret",
+  "password"
+]);
+function normalizeParamName(name) {
+  return name.toLowerCase().replace(/[-_]/g, "");
+}
+function redactUrl(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return url;
+  }
+  let changed = false;
+  for (const [name, value] of Array.from(parsed.searchParams.entries())) {
+    if (REDACTED_QUERY_PARAM_NAMES.has(normalizeParamName(name))) {
+      parsed.searchParams.set(name, `***redacted(${String(value.length)})***`);
+      changed = true;
+    }
+  }
+  return changed ? parsed.toString() : url;
+}
 function createSqliteTraceSink() {
   return {
     write(trace) {
@@ -11382,12 +11433,12 @@ function createSqliteTraceSink() {
           _capture: true,
           // 与 upstream_request 同形（url/headers/body 三件套）："客户端发什么就存什么"
           inbound_request: {
-            url: trace.http.url,
+            url: redactUrl(trace.http.url),
             headers: redactHeaders(trace.inbound.headers),
             body: trace.inbound.body ?? null
           },
           upstream_request: upstream.url ? {
-            url: upstream.url,
+            url: redactUrl(upstream.url),
             headers: redactHeaders(upstream.requestHeaders),
             body: parseOrRaw(upstream.requestBody)
           } : null,
@@ -11523,6 +11574,88 @@ async function authMiddleware(c, next) {
 }
 var auth_default = app;
 
+// ../backend/src/api/setup.ts
+import { randomBytes } from "node:crypto";
+var MIN_MASTER_KEY_LENGTH = 8;
+var MIN_PASSWORD_LENGTH = 6;
+function createSetupApp() {
+  const app3 = new Hono2();
+  app3.get("/status", (c) => {
+    const state = resolveSetupState();
+    return c.json({
+      initialized: state.completed,
+      deployment: state.deployment,
+      masterKeySet: resolveMasterKey() !== ""
+    });
+  });
+  app3.post("/master-key", async (c) => {
+    if (resolveSetupState().completed) {
+      return c.json({ error: "\u5DF2\u5B8C\u6210\u521D\u59CB\u5316\uFF0C\u8BF7\u5230\u8BBE\u7F6E\u9875\u4FEE\u6539\u4E3B\u5BC6\u94A5" }, 403);
+    }
+    const body = await c.req.json().catch(() => null);
+    if (body === null || typeof body !== "object") {
+      return c.json({ error: "\u8BF7\u6C42\u4F53\u683C\u5F0F\u9519\u8BEF" }, 400);
+    }
+    let masterKey;
+    if (body.mode === "generate") {
+      masterKey = randomBytes(32).toString("base64url");
+    } else if (body.mode === "custom") {
+      masterKey = (body.masterKey ?? "").trim();
+      if (masterKey.length < MIN_MASTER_KEY_LENGTH) {
+        return c.json({ error: `\u4E3B\u5BC6\u94A5\u81F3\u5C11 ${String(MIN_MASTER_KEY_LENGTH)} \u4F4D` }, 400);
+      }
+    } else {
+      return c.json({ error: "mode \u5FC5\u987B\u662F generate \u6216 custom" }, 400);
+    }
+    const config3 = loadConfigFile();
+    if (config3 === null) return c.json({ error: "\u914D\u7F6E\u6587\u4EF6\u4E0D\u5B58\u5728" }, 500);
+    saveConfigFile({ ...config3, masterKey });
+    return c.json({ masterKey });
+  });
+  app3.post("/finish", async (c) => {
+    if (resolveSetupState().completed) {
+      return c.json({ error: "\u5DF2\u5B8C\u6210\u521D\u59CB\u5316\uFF0C\u8BF7\u5230\u8BBE\u7F6E\u9875\u4FEE\u6539" }, 403);
+    }
+    const body = await c.req.json().catch(() => null);
+    if (body === null || typeof body !== "object") {
+      return c.json({ error: "\u8BF7\u6C42\u4F53\u683C\u5F0F\u9519\u8BEF" }, 400);
+    }
+    const deployment = body.deployment;
+    if (deployment !== "local" && deployment !== "server") {
+      return c.json({ error: "deployment \u5FC5\u987B\u662F local \u6216 server" }, 400);
+    }
+    if (deployment === "server" && resolveMasterKey() === "") {
+      return c.json({ error: "\u670D\u52A1\u5668\u90E8\u7F72\u5FC5\u987B\u8BBE\u7F6E\u4E3B\u5BC6\u94A5\uFF0C\u9632\u6B62 /v1 \u7F51\u5173\u88AB\u4ED6\u4EBA\u76D7\u7528" }, 400);
+    }
+    const username = (body.username ?? "").trim();
+    const password = body.password ?? "";
+    const hasAccount = username !== "" || password !== "";
+    if (hasAccount) {
+      if (username === "" || password === "") {
+        return c.json({ error: "\u7528\u6237\u540D\u548C\u5BC6\u7801\u9700\u540C\u65F6\u63D0\u4F9B" }, 400);
+      }
+      if (password.length < MIN_PASSWORD_LENGTH) {
+        return c.json({ error: `\u5BC6\u7801\u81F3\u5C11 ${String(MIN_PASSWORD_LENGTH)} \u4F4D` }, 400);
+      }
+    } else if (deployment === "server") {
+      return c.json({ error: "\u670D\u52A1\u5668\u90E8\u7F72\u5FC5\u987B\u8BBE\u7F6E\u767B\u5F55\u8D26\u53F7\u5BC6\u7801\uFF0C\u9632\u6B62\u7BA1\u7406\u53F0\u88AB\u964C\u751F\u4EBA\u767B\u5F55" }, 400);
+    }
+    if (deployment === "server" && username === "admin" && password === "admin") {
+      return c.json({ error: "\u670D\u52A1\u5668\u90E8\u7F72\u4E0D\u80FD\u4F7F\u7528\u9ED8\u8BA4\u7684 admin/admin \u8D26\u53F7\u5BC6\u7801" }, 400);
+    }
+    const config3 = loadConfigFile();
+    if (config3 === null) return c.json({ error: "\u914D\u7F6E\u6587\u4EF6\u4E0D\u5B58\u5728" }, 500);
+    const next = {
+      ...config3,
+      setup: { completed: true, deployment },
+      ...hasAccount ? { "web-ui": { ...config3["web-ui"], "login-account": { username, password } } } : {}
+    };
+    saveConfigFile(next);
+    return c.json({ message: hasAccount ? "\u521D\u59CB\u5316\u5B8C\u6210\uFF0C\u8BF7\u4F7F\u7528\u65B0\u8D26\u53F7\u767B\u5F55" : "\u521D\u59CB\u5316\u5B8C\u6210" });
+  });
+  return app3;
+}
+
 // ../backend/src/api/config.ts
 function createConfigApp(holder) {
   const app3 = new Hono2();
@@ -11552,7 +11685,7 @@ function createConfigApp(holder) {
         throw error;
       }
       saveConfigFile(config3);
-      const { masterKey: _masterKey, "web-ui": _webUi, ...gatewayConfig } = config3;
+      const { masterKey: _masterKey, "web-ui": _webUi, setup: _setup, autoUpdate: _autoUpdate, ...gatewayConfig } = config3;
       holder.runtime.rebuild(gatewayConfig);
       return c.json({ message: "\u914D\u7F6E\u5DF2\u4FDD\u5B58\u5E76\u751F\u6548" });
     } catch (error) {
@@ -12099,6 +12232,7 @@ function createApp(runtime2) {
     if (c.req.header("origin")) c.header("Access-Control-Allow-Credentials", "true");
   });
   app3.route("/api/auth", auth_default);
+  app3.route("/api/setup", createSetupApp());
   app3.use("/api/*", authMiddleware);
   app3.route("/api/config", createConfigApp({ runtime: runtime2 }));
   app3.route("/api/test", createTestApp(runtime2));
@@ -12163,6 +12297,9 @@ serve({ fetch: app2.fetch, port, hostname }, (info) => {
     console.log(`  \u5C40\u57DF\u7F51\u8BBF\u95EE: http://${ip}:${String(info.port)}`);
   }
   console.log(`  \u6A21\u578B\u6570\u91CF: ${String(runtime.current.expanded.deployments.names.length)}`);
+  if (!resolveSetupState().completed) {
+    console.log(`  \u26A0 \u9996\u6B21\u542F\u52A8\uFF1A\u8BF7\u6253\u5F00 http://127.0.0.1:${String(info.port + 1)}/ \u5B8C\u6210\u521D\u59CB\u5316\u5411\u5BFC\uFF08\u8BBE\u7F6E\u4E3B\u5BC6\u94A5\u4E0E\u767B\u5F55\u8D26\u53F7\uFF09`);
+  }
   console.log("========================================");
 });
 function lanAddresses() {

package/dist/web-ui/assets/DashboardView-BCwrFrE2.js

@@ -0,0 +1 @@
+import{d as H,p as J,e as h,g as o,w as s,c as V,i as B,r as y,A as T,a as _,j as Q,o as c,b as W,k as Y,t as u,f as l,h as p,F as X,q as Z,l as N,_ as ee}from"./index-X5PdkJlA.js";import{u as te}from"./providers-H_9x778D.js";import{u as ae}from"./useToast-MtbkGJiM.js";import"./config-CRWaUFQc.js";const le={class:"flex-col-gap"},oe=["onClick"],se={key:1},ne={class:"flex-between"},de={class:"flex-gap-8"},ue={class:"usage-grid"},ie={class:"usage-cell"},re={class:"usage-num orange"},ce={class:"usage-cell"},ve={class:"usage-num blue"},_e={class:"usage-cell"},pe={class:"usage-num green"},ge={class:"usage-cell"},me={class:"usage-num purple"},fe={class:"usage-cell"},he={class:"usage-num purple"},ye={key:0,class:"usage-cell"},be={class:"usage-num gray"},we={key:0},ke=["onClick"],De=H({__name:"DashboardView",setup(Ce){const k=te(),{toast:M}=ae(),i=y(null),b=y(!0),D=y(""),v=y(null),w=y("today"),C=a=>{const e=a.getFullYear(),t=String(a.getMonth()+1).padStart(2,"0"),r=String(a.getDate()).padStart(2,"0");return`${e}-${t}-${r}`},F=a=>{const e=new Date;let t,r=e;if(a==="today")t=e;else if(a==="yesterday")t=new Date(e),t.setDate(e.getDate()-1),r=t;else if(a==="beforeYesterday")t=new Date(e),t.setDate(e.getDate()-2),r=t;else if(a==="last3days")t=new Date(e),t.setDate(e.getDate()-2);else if(a==="week"){t=new Date(e);const S=(e.getDay()+6)%7;t.setDate(e.getDate()-S)}else if(a==="month")t=new Date(e.getFullYear(),e.getMonth(),1);else return;w.value=a,v.value=[C(t),C(r)],f()},U=a=>{a?F(a):(w.value="",v.value=null,f())},A=()=>{w.value="",f()},I=N(()=>{var e;const a=new Set;for(const t of k.suppliers)for(const r of t.models)a.add(r.modelName);if((e=i.value)!=null&&e.models)for(const t of i.value.models)a.add(t.model);return[...a].sort()}),f=async()=>{var a;b.value=!0;try{const e=new URLSearchParams;D.value&&e.set("model",D.value),((a=v.value)==null?void 0:a.length)===2&&(e.set("startDate",v.value[0]),e.set("endDate",v.value[1]));const t=e.toString();i.value=await T.get(`/api/usage${t?`?${t}`:""}`)}catch(e){console.error(e)}finally{b.value=!1}},R=async()=>{var a;try{const[e]=await Promise.all([T.get("/api/usage"),k.loadProviders(),T.get("/api/status").then(t=>x.value=t.listenPort).catch(()=>x.value)]);if(i.value=e,!((a=v.value)!=null&&a.length)){const t=new Date;v.value=[C(t),C(t)],await f()}}catch(e){console.error(e)}finally{b.value=!1}},L=window.location.hostname,x=y(Number(window.location.port)||null),q=N(()=>`http://${L}${x.value?`:${x.value}`:""}`),g=a=>a.toLocaleString(),E=a=>a==null||a<=0?"-":a>=1e3?(a/1e3).toFixed(2)+"s":Math.round(a)+"ms",$=async a=>{try{await navigator.clipboard.writeText(a),M("已复制到剪贴板","success")}catch{const e=document.createElement("textarea");e.value=a,e.style.position="fixed",e.style.opacity="0",document.body.appendChild(e),e.select();try{document.execCommand("copy"),M("已复制到剪贴板","success")}catch{M("复制失败","error")}document.body.removeChild(e)}};return J(R),(a,e)=>{const t=_("el-table-column"),r=_("el-table"),S=_("el-card"),m=_("el-option"),P=_("el-select"),j=_("el-date-picker"),z=_("el-button"),K=_("el-tag"),O=_("el-empty"),G=Q("loading");return c(),h("div",le,[o(S,{shadow:"never"},{header:s(()=>[...e[3]||(e[3]=[l("span",{class:"fw-600"},"服务信息",-1)])]),default:s(()=>[W((c(),V(r,{border:"",data:[{key:"API 地址",value:q.value},{key:"供应商数量",value:String(Y(k).providerCount)},{key:"模型总数",value:String(Y(k).totalModelCount)}],"show-header":!1,class:"full-width"},{default:s(()=>[o(t,{prop:"key",width:"160"}),o(t,null,{default:s(({row:d})=>[d.key==="API 地址"?(c(),h("span",{key:0,class:"copy-text",onClick:n=>$(d.value)},u(d.value),9,oe)):(c(),h("span",se,u(d.value),1))]),_:1})]),_:1},8,["data"])),[[G,b.value]])]),_:1}),i.value?(c(),V(S,{key:0,shadow:"never"},{header:s(()=>[l("div",ne,[e[5]||(e[5]=l("span",{class:"fw-600"},"用量统计",-1)),l("div",de,[o(P,{modelValue:D.value,"onUpdate:modelValue":e[0]||(e[0]=d=>D.value=d),placeholder:"全部模型",clearable:"",filterable:"",style:{width:"220px"},onChange:f},{default:s(()=>[(c(!0),h(X,null,Z(I.value,d=>(c(),V(m,{key:d,label:d,value:d},null,8,["label","value"]))),128))]),_:1},8,["modelValue"]),o(P,{modelValue:w.value,"onUpdate:modelValue":e[1]||(e[1]=d=>w.value=d),placeholder:"时间范围",clearable:"",style:{width:"130px"},onChange:U},{default:s(()=>[o(m,{label:"今天",value:"today"}),o(m,{label:"昨天",value:"yesterday"}),o(m,{label:"前天",value:"beforeYesterday"}),o(m,{label:"近三天",value:"last3days"}),o(m,{label:"本周",value:"week"}),o(m,{label:"本月",value:"month"})]),_:1},8,["modelValue"]),o(j,{modelValue:v.value,"onUpdate:modelValue":e[2]||(e[2]=d=>v.value=d),type:"daterange","range-separator":"至","start-placeholder":"开始日期","end-placeholder":"结束日期","value-format":"YYYY-MM-DD",style:{width:"260px"},onChange:A},null,8,["modelValue"]),o(z,{loading:b.value,onClick:f},{default:s(()=>[...e[4]||(e[4]=[p("刷新",-1)])]),_:1},8,["loading"])]),o(K,{type:"info"},{default:s(()=>[p(u(i.value.total.calls)+" 次调用",1)]),_:1})])]),default:s(()=>{var d;return[l("div",ue,[l("div",ie,[l("div",re,u(g(i.value.total.total_tokens)),1),e[6]||(e[6]=l("div",{class:"usage-label"},"总 Token",-1))]),l("div",ce,[l("div",ve,u(g(i.value.total.input_tokens)),1),e[7]||(e[7]=l("div",{class:"usage-label"},"输入 Token",-1))]),l("div",_e,[l("div",pe,u(g(i.value.total.output_tokens)),1),e[8]||(e[8]=l("div",{class:"usage-label"},"输出 Token",-1))]),l("div",ge,[l("div",me,u(g(i.value.total.cache_read_tokens)),1),e[9]||(e[9]=l("div",{class:"usage-label"},"缓存读取",-1))]),l("div",fe,[l("div",he,u(i.value.total.cache_rate!=null?i.value.total.cache_rate+"%":"-"),1),e[10]||(e[10]=l("div",{class:"usage-label"},"缓存命中率",-1))]),i.value.logStorageMB!=null?(c(),h("div",ye,[l("div",be,u(i.value.logStorageMB),1),e[11]||(e[11]=l("div",{class:"usage-label"},"日志占用 (MB)",-1))])):B("",!0)]),(d=i.value.models)!=null&&d.length?(c(),h("div",we,[e[12]||(e[12]=l("div",{class:"section-title"},"模型用量",-1)),o(r,{data:i.value.models,border:"",stripe:"",class:"full-width"},{default:s(()=>[o(t,{prop:"model",label:"模型","min-width":"200"},{default:s(({row:n})=>[l("span",{class:"copy-text",onClick:xe=>$(n.model)},u(n.model),9,ke)]),_:1}),o(t,{label:"调用次数",width:"90",align:"center"},{default:s(({row:n})=>[p(u(n.calls),1)]),_:1}),o(t,{label:"平均耗时",width:"110",align:"center"},{default:s(({row:n})=>[p(u(E(n.avg_duration)),1)]),_:1}),o(t,{label:"总 Token",width:"140",align:"center"},{default:s(({row:n})=>[p(u(g(n.total_tokens)),1)]),_:1}),o(t,{label:"输入 Token",width:"140",align:"center"},{default:s(({row:n})=>[p(u(g(n.input_tokens)),1)]),_:1}),o(t,{label:"输出 Token",width:"140",align:"center"},{default:s(({row:n})=>[p(u(g(n.output_tokens)),1)]),_:1}),o(t,{label:"缓存读取",width:"130",align:"center"},{default:s(({row:n})=>[p(u(g(n.cache_read_tokens)),1)]),_:1}),o(t,{label:"缓存命中率",width:"110",align:"center"},{default:s(({row:n})=>[p(u(n.cache_rate!=null?n.cache_rate+"%":"-"),1)]),_:1})]),_:1},8,["data"])])):(c(),V(O,{key:1,description:"暂无调用记录","image-size":60}))]}),_:1})):B("",!0)])}}}),$e=ee(De,[["__scopeId","data-v-de31ace5"]]);export{$e as default};

package/dist/web-ui/assets/DashboardView-BHG4xIdN.css

@@ -0,0 +1 @@
+.copy-text[data-v-de31ace5]{color:#409eff;cursor:pointer}.copy-text[data-v-de31ace5]:hover{text-decoration:underline}

package/dist/web-ui/assets/LayoutView-BUA8-IzK.css

@@ -0,0 +1 @@
+.mt-12[data-v-e326b723]{margin-top:12px}.check-body[data-v-e326b723]{min-height:80px}.version-row[data-v-e326b723]{display:flex;align-items:center;gap:8px;margin-bottom:8px}.version-label[data-v-e326b723]{color:var(--el-text-color-secondary);font-size:13px}

package/dist/web-ui/assets/LayoutView-BePJfgia.js

@@ -0,0 +1 @@
+import{d as E,u as N,c as b,w as e,r as f,a,o as _,b as W,e as D,F as z,f as i,g as o,h as u,t as x,i as $,E as I,j as L,_ as S,k as F,l as R,m as j,n as O}from"./index-X5PdkJlA.js";import{m as T}from"./useManagerApi-C1_COxKg.js";import{u as q}from"./useToast-MtbkGJiM.js";const G={class:"check-body"},H={class:"version-row"},J={class:"version-row"},K=E({__name:"UpdateCheckDialog",props:{modelValue:{type:Boolean,default:!1},modelModifiers:{}},emits:["update:modelValue"],setup(B){const{toast:w}=q(),g=N(B,"modelValue"),d=f(!1),c=f(!1),n=f(null),v=f(null),p=f(null),r=async()=>{n.value=null,v.value=null,p.value=null,d.value=!0;try{n.value=await T.checkUpdate()}catch(l){v.value=l.message||"检查更新失败"}finally{d.value=!1}},t=async()=>{if(n.value){try{await I.confirm(`确定更新到 ${n.value.latestVersion}？更新期间主服务将短暂中断（停服安装后自动重启），管理服务随后自重启。`,"更新确认",{confirmButtonText:"立即更新",cancelButtonText:"取消",type:"warning"})}catch{return}c.value=!0;try{const l=await T.applyUpdate();p.value=l.note??`已更新 ${l.fromVersion} → ${l.toVersion}`,w("更新完成","success"),n.value={hasUpdate:!1,currentVersion:l.toVersion,latestVersion:l.toVersion,checkedAt:Date.now()}}catch(l){w(l.message||"更新失败","error")}finally{c.value=!1}}};return(l,s)=>{const k=a("el-tag"),V=a("el-alert"),y=a("el-button"),h=a("el-empty"),C=a("el-dialog"),U=L("loading");return _(),b(C,{modelValue:g.value,"onUpdate:modelValue":s[2]||(s[2]=m=>g.value=m),title:"检查更新",width:"420px","close-on-click-modal":!c.value,onOpen:r},{footer:e(()=>{var m;return[(m=n.value)!=null&&m.hasUpdate?(_(),b(y,{key:0,type:"primary",loading:c.value,onClick:t},{default:e(()=>[u(x(c.value?"更新中...":"立即更新"),1)]),_:1},8,["loading"])):$("",!0),o(y,{onClick:s[1]||(s[1]=A=>g.value=!1)},{default:e(()=>[...s[6]||(s[6]=[u("关闭",-1)])]),_:1})]}),default:e(()=>[W((_(),D("div",G,[n.value?(_(),D(z,{key:0},[i("div",H,[s[3]||(s[3]=i("span",{class:"version-label"},"当前版本",-1)),o(k,{size:"small"},{default:e(()=>[u(x(n.value.currentVersion),1)]),_:1})]),i("div",J,[s[4]||(s[4]=i("span",{class:"version-label"},"最新版本",-1)),o(k,{type:n.value.hasUpdate?"warning":"success",size:"small","disable-transitions":""},{default:e(()=>[u(x(n.value.latestVersion),1)]),_:1},8,["type"])]),o(V,{title:n.value.hasUpdate?`发现新版本 ${n.value.latestVersion}`:"已是最新版本",type:n.value.hasUpdate?"warning":"success","show-icon":"",closable:!1,class:"mt-12"},null,8,["title","type"])],64)):!d.value&&v.value?(_(),b(h,{key:1,description:v.value},{default:e(()=>[o(y,{type:"primary",onClick:r},{default:e(()=>[...s[5]||(s[5]=[u("重试",-1)])]),_:1})]),_:1},8,["description"])):$("",!0)])),[[U,d.value]]),p.value?(_(),b(V,{key:0,title:p.value,type:"info","show-icon":"",class:"mt-12",onClose:s[0]||(s[0]=m=>p.value=null)},null,8,["title"])):$("",!0)]),_:1},8,["modelValue","close-on-click-modal"])}}}),P=S(K,[["__scopeId","data-v-e326b723"]]),Q={class:"layout"},X={class:"header-nav"},Y={class:"header-actions"},Z={class:"main"},ee={class:"page"},se=E({__name:"LayoutView",setup(B){const w=O(),g=j(),d=f(!1),c=(()=>{const r=localStorage.getItem("webui_token")||"";try{return atob(r).split(":")[0]||"用户"}catch{return"用户"}})(),n=R(()=>{const r=w.path;return r==="/"?"/":r.startsWith("/providers")?"/providers":r.startsWith("/settings")?"/settings":r.startsWith("/logs")?"/logs":r.startsWith("/process")?"/process":"/"}),v=()=>{localStorage.removeItem("webui_token"),g.push("/login")},p=r=>{r==="logout"&&v(),r==="check-update"&&(d.value=!0)};return(r,t)=>{const l=a("el-menu-item"),s=a("el-menu"),k=a("ArrowDown"),V=a("el-icon"),y=a("el-button"),h=a("el-dropdown-item"),C=a("el-dropdown-menu"),U=a("el-dropdown"),m=a("el-header"),A=a("router-view");return _(),D("div",Q,[o(m,{class:"header"},{default:e(()=>[t[8]||(t[8]=i("h1",null,[i("span",null,"E"),u("LLM")],-1)),i("nav",X,[o(s,{mode:"horizontal","default-active":n.value,ellipsis:!1,router:"",class:"header-menu"},{default:e(()=>[o(l,{index:"/"},{default:e(()=>[...t[1]||(t[1]=[u("首页",-1)])]),_:1}),o(l,{index:"/providers"},{default:e(()=>[...t[2]||(t[2]=[u("供应商管理",-1)])]),_:1}),o(l,{index:"/logs"},{default:e(()=>[...t[3]||(t[3]=[u("日志",-1)])]),_:1}),o(l,{index:"/settings"},{default:e(()=>[...t[4]||(t[4]=[u("设置",-1)])]),_:1}),o(l,{index:"/process"},{default:e(()=>[...t[5]||(t[5]=[u("进程管理",-1)])]),_:1})]),_:1},8,["default-active"])]),i("div",Y,[o(U,{trigger:"click",onCommand:p,class:"ml-12"},{dropdown:e(()=>[o(C,null,{default:e(()=>[o(h,{command:"check-update"},{default:e(()=>[...t[6]||(t[6]=[u("检查更新",-1)])]),_:1}),o(h,{command:"logout",divided:""},{default:e(()=>[...t[7]||(t[7]=[u("退出",-1)])]),_:1})]),_:1})]),default:e(()=>[o(y,null,{default:e(()=>[u(x(F(c))+" ",1),o(V,{class:"el-icon--right"},{default:e(()=>[o(k)]),_:1})]),_:1})]),_:1})])]),_:1}),i("main",Z,[i("div",ee,[o(A)])]),o(P,{modelValue:d.value,"onUpdate:modelValue":t[0]||(t[0]=M=>d.value=M)},null,8,["modelValue"])])}}});export{se as default};

package/dist/web-ui/assets/LoginView-Dp7NmXtf.js

@@ -0,0 +1 @@
+import{d as h,e as b,g as o,w as l,a,o as _,f as k,Z as x,a3 as f,c as C,i as L,h as B,r as i,A as N,m as I,_ as K}from"./index-X5PdkJlA.js";const A={class:"login-wrap"},E=h({__name:"LoginView",setup(M){const v=I(),n=i(""),s=i(""),t=i(""),d=i(!1);async function r(){if(!n.value){t.value="请输入用户名";return}if(!s.value){t.value="请输入密码";return}d.value=!0,t.value="";try{const u=await N.post("/api/auth/login",{username:n.value.trim(),password:s.value});localStorage.setItem("webui_token",u.token),v.push("/")}catch(u){t.value=u.message||"登录失败"}finally{d.value=!1}}return(u,e)=>{const p=a("el-input"),m=a("el-form-item"),w=a("el-alert"),g=a("el-button"),V=a("el-form"),y=a("el-card");return _(),b("div",A,[o(y,{shadow:"hover",class:"login-card"},{default:l(()=>[e[3]||(e[3]=k("h2",{class:"login-title"},"ELLM",-1)),o(V,{"label-position":"top",onSubmit:x(r,["prevent"])},{default:l(()=>[o(m,{label:"用户名"},{default:l(()=>[o(p,{modelValue:n.value,"onUpdate:modelValue":e[0]||(e[0]=c=>n.value=c),placeholder:"请输入用户名",onKeyup:f(r,["enter"])},null,8,["modelValue"])]),_:1}),o(m,{label:"密码"},{default:l(()=>[o(p,{modelValue:s.value,"onUpdate:modelValue":e[1]||(e[1]=c=>s.value=c),type:"password",placeholder:"请输入密码","show-password":"",onKeyup:f(r,["enter"])},null,8,["modelValue"])]),_:1}),t.value?(_(),C(w,{key:0,title:t.value,type:"error","show-icon":"",class:"mb-16"},null,8,["title"])):L("",!0),o(g,{type:"primary",class:"full-width",loading:d.value,onClick:r},{default:l(()=>[...e[2]||(e[2]=[B(" 登录 ",-1)])]),_:1},8,["loading"])]),_:1})]),_:1})])}}}),U=K(E,[["__scopeId","data-v-c944978e"]]);export{U as default};

package/dist/web-ui/assets/LoginView-DrhfslIY.css

@@ -0,0 +1 @@
+.login-card[data-v-c944978e]{max-width:400px;width:100%}.login-title[data-v-c944978e]{text-align:center;margin-bottom:24px;color:#3b82f6}