326 Commits

Author SHA1 Message Date
b589e9f155 fix: pass empty {} ns param to sqlExe() calls 2026-05-26 09:05:35 +08:00
2d2dad84d0 feat: add RBAC scripts — list_path_roles.py and find_unauth_files.py 2026-05-26 08:55:49 +08:00
c5d6ec6c8f feat: integrate product_management module - import, load, build loop, RBAC permissions 2026-05-25 15:24:12 +08:00
8260637bf2 bugfix 2026-05-25 15:18:19 +08:00
205547a4e0 add route for dashboard accounting_errors.ui 2026-05-24 17:27:36 +08:00
ad5da620e3 update dashboard_for_sage routes: replace .dspy with .ui endpoints
New routes:
- today_usage.ui, today_amount.ui, total_users.ui,
  concurrent_users.ui, top_models_chart.ui

Removed deprecated .dspy routes:
- api/get_today_usage.dspy, api/get_user_stats.dspy,
  api/get_top_models.dspy, api/dashboard_cards.dspy
2026-05-24 17:20:34 +08:00
cd80c53aaa chore: update dashboard permissions — replace dashboard_content.dspy with dashboard_cards.dspy 2026-05-24 16:44:30 +08:00
00ea7675ac chore: update dashboard_for_sage permissions — remove JS, add dashboard_content.dspy 2026-05-24 16:30:57 +08:00
96b0682a08 Add dashboard_refresh.js at wwwroot root path to RBAC permissions 2026-05-24 14:46:13 +08:00
25105e4f43 Add dashboard_for_sage RBAC permissions to load_path.py 2026-05-24 14:33:55 +08:00
3cda907ba2 Add dashboard_for_sage module: menu submenu, sage.py import/load, build.sh module list 2026-05-24 14:25:00 +08:00
c18c9113cc bugfix 2026-05-23 17:26:57 +08:00
8b387ab71c bugfix 2026-05-23 11:13:51 +08:00
bce275972e bugfix 2026-05-23 00:47:20 +08:00
847c6e314e bugfix 2026-05-22 22:56:14 +08:00
e8c72d2712 bigfox 2026-05-22 17:31:45 +08:00
3a286ad300 bugfix 2026-05-22 13:45:18 +08:00
c2caf97996 bugfix 2026-05-22 13:23:22 +08:00
9fefd971ab bugfix 2026-05-22 13:21:58 +08:00
dffb4ee951 bugfix 2026-05-22 13:20:19 +08:00
d7b3a7bfeb bugfix 2026-05-22 13:19:05 +08:00
4b90e59a42 bugfix 2026-05-21 18:44:25 +08:00
7982a0fd30 bugfix 2026-05-21 18:41:55 +08:00
953a10ac58 bugfix 2026-05-21 18:40:08 +08:00
feb966cba4 bugfix 2026-05-21 18:38:34 +08:00
57d602bd54 bugfix 2026-05-21 14:06:10 +08:00
d557c7266b bugfix 2026-05-19 16:33:34 +08:00
497f143f26 bugfix 2026-05-19 16:14:10 +08:00
3791b65236 bugfix 2026-05-19 16:07:33 +08:00
3de5a1ce91 feat: multi-process architecture with independent backend processes
- Extract backend_accounting from llmage cleanupctx to independent process
- Add bin/backend_accounting.py for standalone LLM billing loop
- Rewrite start.sh with two-phase startup:
  1. Independent backend programs (run once)
  2. Sage Web workers (SO_REUSEPORT on same port)
- Rewrite stop.sh to handle both workers and backend processes
- Add .gitignore for build artifacts and runtime files

Architecture:
- CPU core detection for worker count
- All workers share port 9180 via SO_REUSEPORT
- Backend processes tracked in sage_backend.pid
- Workers tracked in sage.pid
2026-05-17 00:11:53 +08:00
53285aa17e feat: multi-process worker scaling for Sage web app
- Refactor start.sh to launch multiple worker processes based on CPU core count
- Assign dynamic ports to each worker (base_port + offset)
- Update stop.sh to gracefully handle and kill multiple worker PIDs
- Implement PID file management for multi-process tracking
2026-05-16 22:08:52 +08:00
2e86b7a008 feat: add production migration script for llm_catalog_rel 2026-05-16 21:31:50 +08:00
051d15f1af fix: 添加 .wss 后缀映射到 ws 处理器 2026-05-13 16:12:51 +08:00
fbed69ea35 bugfix 2026-05-13 16:09:08 +08:00
ae43ce2c6c 新增 rbac 模块权限初始化脚本
基于角色职责分析的四层权限模型:

1. Public (any): 18个路径 - 登录/注册/认证/静态资源
2. Logined (11角色): 29个路径 - 用户自助服务、API Key CRUD
3. Admin (5角色): 35个路径 - 用户管理、机构管理、供应商/分销商
4. Superuser (1角色): 27个路径 - 角色/权限/机构类型管理

总计: 18 + 29*11 + 35*5 + 27*1 = 592 条权限记录
2026-05-13 14:41:08 +08:00
b1073c6afe fix: 推理菜单submenu指向正确的harnessed_reasoning菜单
之前'推理'菜单的submenu错误指向了/harnessed_agent/menu.ui,
改为/harnessed_reasoning/menu.ui后可以看到:
- 推理控制台
- 推理交互
- 推理会话
- 推理配置
2026-05-13 14:29:35 +08:00
6951ee7ebf 重构权限模型:基于角色职责的四层分级
根据角色职责重新设计权限分级:
- owner.superuser: 系统级管理(机构/角色/权限)
- *.admin: 机构级管理(人员/角色分配)
- reseller.operator: 运营(产品/合同/定价)
- reseller.sale: 销售(客户/折扣)
- reseller.accountant: 财务(充值/对账)
- reseller.maintainer: 运维
- customer.customer: 终端客户

权限模型:
1. Public (any): CSS静态资源
2. Logined (所有登录用户10角色): 控制台、数据查看、用户自己的CRUD、推理、执行
3. Admin (superuser+5种admin): 系统级LLM配置管理
4. Superuser (仅owner.superuser): 技能部署等高危操作
2026-05-13 14:27:53 +08:00
6c62313bb9 补充CRUD目录路径权限(无/index.ui后缀)
ahserver indexes配置自动匹配index.ui,访问 /harnessed_agent/hermes_memory
时RBAC收到的path为 /harnessed_agent/hermes_memory(不含后缀)
同时注册目录路径和index.ui路径确保两种访问方式都能通过权限检查

- harnessed_agent: 12个CRUD目录各新增1个无后缀路径
- harnessed_reasoning: 3个CRUD目录各新增1个无后缀路径
2026-05-13 13:58:50 +08:00
050dd0b2da 补充CRUD生成路径的权限设置
- READ层级: 12个harnessed_agent CRUD目录的index.ui + get_*.dspy
            3个harnessed_reasoning CRUD目录的index.ui + get_*.dspy
- ADMIN层级: 12个harnessed_agent CRUD目录的add/update/delete_*.dspy (36文件)
            3个harnessed_reasoning CRUD目录的add/update/delete_*.dspy (9文件)
- 基于JSON CRUD alias确定目录结构和文件名
2026-05-13 13:55:02 +08:00
8261f9d309 Add RBAC permission init script for harnessed_agent and harnessed_reasoning modules
- Three-tier permission model: public/read/admin
- Public: CSS files for any role
- Read: console UI, data view pages, read-only APIs for logined + admin roles
- Admin: config management, CRUD write ops, execution APIs for admin roles only
- Correct wss path handling (no /wss prefix in RBAC, nginx strips it)
- 420 total permission entries across 8 read roles and 7 admin roles
2026-05-13 13:39:44 +08:00
9d2c89d811 bugfix 2026-05-13 12:52:24 +08:00
65064f0f67 bugfix 2026-05-13 11:00:35 +08:00
a87d34da93 bugfix 2026-05-12 13:32:20 +08:00
818d1ce77e bugfix 2026-05-12 13:19:58 +08:00
c515824bd9 append api doc in Engine, Japense, and Korenes 2026-05-09 12:43:41 +08:00
74da86f7bf add api language version 2026-05-08 19:00:53 +08:00
9a473a19bd bugfix 2026-05-08 18:53:11 +08:00
71afc6c866 bugfix 2026-05-08 18:42:32 +08:00
9815fd1ac8 bugfix 2026-05-06 10:45:02 +08:00
6220e8546a bugfix 2026-04-29 13:41:44 +08:00