dsh-cloud 0.2.0__py3-none-any.whl

dsh_cloud_cli/templates/config/pricing.jpy.json

@@ -0,0 +1,96 @@
+{
+  "_comment": "由 server/scripts/gen_pricing.py 生成，请勿手改。基准 1 USD = 7 CNY = 100 积分；其余币种按对美元汇率折算后取整（日元取整到 100）。三档 $10 / $50 / $100，年付一律 7 折、首月一律 7.5 折（名义值；美元档要取整到整元，$10 的 7.5 折是 $7.5 → $8，实际 8 折。其余币种一律按**美元卡上的实际比例**折算，不重新套名义值，否则同一个促销在不同币种上力度不同）。积分包不再多送——100 积分/美元是公示承诺，包的价值在于不随月清零，同价的包也绝不能比同价套餐给得多，否则最高档被自己的加油包压制。",
+  "currency": "JPY",
+  "tiers": {
+    "free": {
+      "name": "Free",
+      "monthly_cents": 0,
+      "monthly_credits": 0,
+      "concurrency": 1,
+      "work_minutes": 180,
+      "signup_credits": 500
+    },
+    "plus": {
+      "name": "Plus",
+      "monthly_cents": 150000,
+      "monthly_credits": 1000,
+      "concurrency": 2,
+      "work_minutes": 6000,
+      "yearly_list_cents": 1800000,
+      "yearly_cents": 1320000,
+      "yearly_per_month_cents": 110000,
+      "monthly_intro_cents": 120000
+    },
+    "pro": {
+      "name": "Pro",
+      "monthly_cents": 750000,
+      "monthly_credits": 5000,
+      "concurrency": 5,
+      "work_minutes": 21600,
+      "yearly_list_cents": 9000000,
+      "yearly_cents": 6360000,
+      "yearly_per_month_cents": 530000,
+      "monthly_intro_cents": 570000
+    },
+    "max": {
+      "name": "Max",
+      "monthly_cents": 1500000,
+      "monthly_credits": 10000,
+      "concurrency": 10,
+      "work_minutes": 32400,
+      "yearly_list_cents": 18000000,
+      "yearly_cents": 12600000,
+      "yearly_per_month_cents": 1050000,
+      "monthly_intro_cents": 1130000
+    }
+  },
+  "packs": {
+    "pack1000": {
+      "name": "1,000 credits",
+      "cents": 150000,
+      "base_credits": 1000,
+      "bonus_pct": 0,
+      "credits": 1000,
+      "valid_days": 365,
+      "name_key": "pricing.pack.pack1000"
+    },
+    "pack5000": {
+      "name": "5,000 credits",
+      "cents": 750000,
+      "base_credits": 5000,
+      "bonus_pct": 0,
+      "credits": 5000,
+      "valid_days": 365,
+      "name_key": "pricing.pack.pack5000"
+    },
+    "pack10000": {
+      "name": "10,000 credits",
+      "cents": 1500000,
+      "base_credits": 10000,
+      "bonus_pct": 0,
+      "credits": 10000,
+      "valid_days": 365,
+      "name_key": "pricing.pack.pack10000"
+    }
+  },
+  "team": {
+    "seat_cents": 380000,
+    "min_seats": 3,
+    "seat_credits": 2500,
+    "seat_minutes": 1200,
+    "volume_tiers": [
+      [
+        10,
+        10
+      ],
+      [
+        25,
+        15
+      ],
+      [
+        50,
+        20
+      ]
+    ]
+  }
+}

dsh_cloud_cli/templates/config/pricing.usd.json

@@ -0,0 +1,96 @@
+{
+  "_comment": "由 server/scripts/gen_pricing.py 生成，请勿手改。基准 1 USD = 7 CNY = 100 积分；其余币种按对美元汇率折算后取整（日元取整到 100）。三档 $10 / $50 / $100，年付一律 7 折、首月一律 7.5 折（名义值；美元档要取整到整元，$10 的 7.5 折是 $7.5 → $8，实际 8 折。其余币种一律按**美元卡上的实际比例**折算，不重新套名义值，否则同一个促销在不同币种上力度不同）。积分包不再多送——100 积分/美元是公示承诺，包的价值在于不随月清零，同价的包也绝不能比同价套餐给得多，否则最高档被自己的加油包压制。",
+  "currency": "USD",
+  "tiers": {
+    "free": {
+      "name": "Free",
+      "monthly_cents": 0,
+      "monthly_credits": 0,
+      "concurrency": 1,
+      "work_minutes": 180,
+      "signup_credits": 500
+    },
+    "plus": {
+      "name": "Plus",
+      "monthly_cents": 1000,
+      "monthly_credits": 1000,
+      "concurrency": 2,
+      "work_minutes": 6000,
+      "yearly_list_cents": 12000,
+      "yearly_cents": 8400,
+      "yearly_per_month_cents": 700,
+      "monthly_intro_cents": 800
+    },
+    "pro": {
+      "name": "Pro",
+      "monthly_cents": 5000,
+      "monthly_credits": 5000,
+      "concurrency": 5,
+      "work_minutes": 21600,
+      "yearly_list_cents": 60000,
+      "yearly_cents": 42000,
+      "yearly_per_month_cents": 3500,
+      "monthly_intro_cents": 3800
+    },
+    "max": {
+      "name": "Max",
+      "monthly_cents": 10000,
+      "monthly_credits": 10000,
+      "concurrency": 10,
+      "work_minutes": 32400,
+      "yearly_list_cents": 120000,
+      "yearly_cents": 84000,
+      "yearly_per_month_cents": 7000,
+      "monthly_intro_cents": 7500
+    }
+  },
+  "packs": {
+    "pack1000": {
+      "name": "1,000 credits",
+      "cents": 1000,
+      "base_credits": 1000,
+      "bonus_pct": 0,
+      "credits": 1000,
+      "valid_days": 365,
+      "name_key": "pricing.pack.pack1000"
+    },
+    "pack5000": {
+      "name": "5,000 credits",
+      "cents": 5000,
+      "base_credits": 5000,
+      "bonus_pct": 0,
+      "credits": 5000,
+      "valid_days": 365,
+      "name_key": "pricing.pack.pack5000"
+    },
+    "pack10000": {
+      "name": "10,000 credits",
+      "cents": 10000,
+      "base_credits": 10000,
+      "bonus_pct": 0,
+      "credits": 10000,
+      "valid_days": 365,
+      "name_key": "pricing.pack.pack10000"
+    }
+  },
+  "team": {
+    "seat_cents": 2500,
+    "min_seats": 3,
+    "seat_credits": 2500,
+    "seat_minutes": 1200,
+    "volume_tiers": [
+      [
+        10,
+        10
+      ],
+      [
+        25,
+        15
+      ],
+      [
+        50,
+        20
+      ]
+    ]
+  }
+}

dsh_cloud_cli/templates/docker-compose.yml

@@ -0,0 +1,159 @@
+# =============================================================================
+#  DSH Cloud (deepseek-harness-cloud) — one-command self-host stack
+#  自部署编排：一条命令起全栈（Caddy + 服务端 + 可选云工作台）
+#
+#    cd deploy/selfhost
+#    cp .env.example .env && $EDITOR .env        # or: scripts/quickstart.sh
+#    docker compose --env-file .env up -d
+#    # Source build instead of the release image:
+#    docker compose --env-file .env -f docker-compose.yml -f compose.build.yml up -d --build
+#
+#  What runs here / 本编排包含:
+#    dhc-caddy         public listener, automatic HTTPS (Let's Encrypt)
+#    dhc-server        the FastAPI app (accounts, LLM gateway, credits, console)
+#    dhc-docker-proxy  scoped docker API for cloud workspaces — only started
+#                      when COMPOSE_PROFILES=work (see .env)
+#
+#  The app is never published on a host port: Caddy is the only way in.
+#  应用不暴露宿主端口，唯一入口是 Caddy。
+# =============================================================================
+name: ${COMPOSE_PROJECT_NAME:-dsh-selfhost}
+
+x-logging: &logging
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+services:
+  # ---------------------------------------------------------------------------
+  # The application. The default path pulls the versioned release image. Source
+  # builds are an explicit compose.build.yml overlay so package installs do not
+  # require a Git checkout or a repository-root Docker build context.
+  # ---------------------------------------------------------------------------
+  dhc-server:
+    image: ${DHC_SERVER_IMAGE:-ghcr.io/agentsdanceai/dsh-cloud-server:0.2.0}
+    pull_policy: missing
+    restart: unless-stopped
+    env_file:
+      - path: .env
+        required: false
+    environment:
+      DHC_DATA_DIR: /app/data
+      # Single source of truth for the public origin: whatever Caddy serves is
+      # exactly what the app believes it is reachable at (OAuth callbacks,
+      # payment return URLs and the workspace gateway URL are derived from it).
+      # Set PUBLIC_BASE in .env only when you front this stack with another
+      # proxy or use a non-standard port.
+      PUBLIC_BASE: ${PUBLIC_BASE:-${SITE_SCHEME:-https}://${DOMAIN:-localhost}}
+    volumes:
+      # SQLite lives here (/app/data/dhc.db, WAL). Back this volume up.
+      # Desktop installers dropped into /app/data/releases are served at
+      # /releases/<file> by the app itself.
+      - dhc-data:/app/data
+      # A source checkout defaults this to ../../server/config. The npm/uv CLIs
+      # generate ./config and set DHC_CONFIG_DIR=./config, so the exact same
+      # Compose file also works when installed from a package.
+      - ${DHC_CONFIG_DIR:-../../server/config}:/srv/dhc/config:ro
+      # Legal pages (/legal/terms ...) render "待发布" until you provide your own
+      # documents. The drafts in ../../legal name the original operator, so they
+      # are NOT mounted by default — write your own, then uncomment:
+      # - ../../legal:/srv/legal:ro
+    networks:
+      - dhc-net
+      - dshwork-net # reach per-user dsh containers (readiness probe + /preview)
+    expose:
+      - "8100"
+    healthcheck:
+      test: ["CMD", "/usr/local/bin/python3", "-I", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8100/readyz')"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 20s
+    security_opt: ["no-new-privileges:true"]
+    logging: *logging
+
+  # ---------------------------------------------------------------------------
+  # TLS termination + reverse proxy. Certificates are obtained automatically for
+  # any site address that starts with https:// and resolves to this host;
+  # http://localhost serves plain HTTP with no certificate at all.
+  # ---------------------------------------------------------------------------
+  dhc-caddy:
+    image: ${CADDY_IMAGE:-caddy:2@sha256:df7f1c2fb114453b951de51a98efc010db1655a92c2e86be6706714e2417a78d}
+    restart: unless-stopped
+    depends_on: [dhc-server]
+    ports:
+      # Trial defaults bind only to loopback. Public operators must opt in with
+      # BIND_ADDRESS=0.0.0.0 (the checked-in .env.example does this explicitly).
+      - "${BIND_ADDRESS:-127.0.0.1}:${HTTP_PORT:-8787}:80"
+      - "${BIND_ADDRESS:-127.0.0.1}:${HTTPS_PORT:-8443}:443"
+      - "${BIND_ADDRESS:-127.0.0.1}:${HTTPS_PORT:-8443}:443/udp" # HTTP/3
+    environment:
+      # Internal Caddy listener. PUBLIC_BASE may contain a host-published port
+      # (trial uses :8787), while Caddy always listens on container 80/443.
+      DSH_SITE: ${DSH_SITE:-${SITE_SCHEME:-https}://${DOMAIN:-localhost}}
+      # Cloud-workspace site. Empty WORK_DOMAIN (workspaces off) falls back to
+      # work.localhost, which Caddy serves from its internal CA — so a disabled
+      # workspace never triggers a certificate request for a domain you do not
+      # own. 关闭云工作台时留空 WORK_DOMAIN，不会去申请证书。
+      DSH_WORK_SITE: https://${WORK_DOMAIN:-work.localhost}
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - caddy-data:/data # issued certificates — persist or you will re-issue
+      - caddy-config:/config
+    networks:
+      - dhc-net
+      - dshwork-net # reverse_proxy target of the workspace forward_auth
+    security_opt: ["no-new-privileges:true"]
+    logging: *logging
+
+  # ---------------------------------------------------------------------------
+  # Cloud workspaces only: a scoped view of the docker engine API.
+  # Started only when COMPOSE_PROFILES=work — with workspaces off, no container
+  # in this stack sees the docker socket at all.
+  #
+  # SECURITY: do NOT widen these flags. The app must create/start/stop
+  # containers and read the image/network/info endpoints. EXEC=0 and VOLUMES=0
+  # deny those dedicated API routes, but the proxy does not inspect HostConfig
+  # fields in a container-create POST. It therefore does not prevent a
+  # compromised control plane from requesting privileged mode, host mounts,
+  # devices, or host namespaces. This optional profile is for a trusted,
+  # single-operator installation, not a hostile multi-tenant boundary.
+  # 这些开关只缩小 API 面，不能过滤容器创建请求体；不要把它当作不可信多租户隔离边界。
+  # ---------------------------------------------------------------------------
+  dhc-docker-proxy:
+    image: ${SOCKET_PROXY_IMAGE:-tecnativa/docker-socket-proxy@sha256:1f5038b54f06c3e18422902cf00ba21803d1c97805aae032e5e6673d532d3459}
+    profiles: ["work"]
+    restart: unless-stopped
+    environment:
+      CONTAINERS: 1
+      NETWORKS: 1
+      IMAGES: 1
+      INFO: 1
+      POST: 1
+      EXEC: 0
+      VOLUMES: 0
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    networks:
+      - dhc-net # reachable by the app as http://dhc-docker-proxy:2375
+    security_opt: ["no-new-privileges:true"]
+    logging: *logging
+
+networks:
+  # Internal network (app <-> caddy <-> docker proxy); compose names it
+  # dsh-selfhost_dhc-net and service names resolve on it.
+  dhc-net:
+  # The workspace network keeps its literal name on purpose: the app passes
+  # WORK_NETWORK to the docker API when it creates a user's container, so the
+  # network compose creates and the name the app uses must be the same string.
+  dshwork-net:
+    name: ${WORK_NETWORK:-dshwork-net}
+
+volumes:
+  dhc-data:
+    name: ${COMPOSE_PROJECT_NAME:-dsh-selfhost}_dhc-data
+  caddy-data:
+    name: ${COMPOSE_PROJECT_NAME:-dsh-selfhost}_caddy-data
+  caddy-config:
+    name: ${COMPOSE_PROJECT_NAME:-dsh-selfhost}_caddy-config