Repository navigation
feat: v2.1 TS 补齐 webui 弹网页 + verify_cache 验站 - #15
Merged
Merged
Conversation
- ts/src/webui/server.ts：安全骨架全量对齐（Host 校验 / 一次性 token / 90s 超时 / 脱敏）+ 勾选回写 + 断点可视化 - ts/tools/verify_cache.ts：两步验证 PASS/PARTIAL/FAIL + 降级重试 + 伪造告警 - TS 版新增 3 项测试，59 项单测 + 25 项冒烟全过，typecheck 0 error - ts/README、根 README、CHANGELOG 同步
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
范围
PR #14 的 ts/ 移植留白两块，本 PR 补齐——至此 ts/ 与 Python 版功能对齐仅剩 experiments/（研究脚本）。
ts/src/webui/server.ts：弹网页仪表盘移植。安全骨架全量对齐：127.0.0.1 绑定 / 运行时随机端口 / Host 头校验防 DNS rebinding / URL 一次性 token / 90s 超时兜底 / 记忆默认脱敏截断；记忆勾选裁剪经 saveCallback 回写状态层；4 断点缓存前缀可视化。实现细节：listen 异步，await 端口分配后再返回 URL（否则调用方拿到 port 0）ts/tools/verify_cache.ts：验站脚本移植。两步验证（预热看 creation → 复发看 read），PASS/PARTIAL/FAIL 三档 + max_tokens:0 被拒降级 1 + 伪造缓存字段告警；TS 版恒直连，--use-proxy 保留兼容为 no-op测试（TS 版新增 3 项，共 59 项单测全过 + 25 项冒烟全过 + typecheck 0 error）