Files
chenlin 0d986f60bd
web-platform-ci / Standalone decision service (no cloud credentials) (push) Has been cancelled
web-platform-ci / TypeScript, lint, unit, build (push) Has been cancelled
web-platform-ci / Playwright E2E (push) Has been cancelled
lekiwi-compatibility / cpu-compatibility (push) Has been cancelled
feat: release v1.0.2 LeKiwi 语言控制与网站嵌入
集成服务器托管模型、自然语言移动与有界抓放、内置 LeKiwi URL 导入和双摄像头;同步部署契约与指定域名 iframe 白名单,保留原有物理安全、会话及调用预算防护。

更新 npm 包及锁文件版本、CHANGELOG 与发布文档。提交前 typecheck、120 项定向前端测试和 44 项后端测试通过(3 项可选跳过);真实 v2 云模型抓放仍待单独验收,不包含运行密钥或构建产物。
2026-09-24 15:29:49 +08:00

112 lines
4.5 KiB
Python

"""Run with the existing .venv; no training/MuJoCo imports or env-file discovery."""
import argparse
from pathlib import Path
from urllib.parse import urlsplit
from aiohttp import web
from .credentials import deepseek_llm, openrouter_jev
from .server import STATE, create_app
def main():
parser = argparse.ArgumentParser(description="LeKiwi 本机模型服务(仅回环地址)")
parser.add_argument("--port", type=int, default=8768)
parser.add_argument("--state-dir", type=Path)
parser.add_argument("--website-origin", help="显式网站同源模式")
parser.add_argument("--website-key-file", type=Path, help="显式服务器密钥文件,仅两项固定角色")
parser.add_argument(
"--website-budget-file", type=Path, help="共享调用限额 SQLite 文件,重启不重置"
)
parser.add_argument("--website-dev", action="store_true", help="仅回环 HTTP 开发模式")
parser.add_argument("--bind", default="127.0.0.1", choices=["127.0.0.1", "0.0.0.0"])
parser.add_argument("--trusted-proxy", action="append", default=[])
parser.add_argument("--max-sessions", type=int, default=128)
parser.add_argument("--max-inference", type=int, default=8)
parser.add_argument("--max-codex", type=int, default=2)
parser.add_argument(
"--openrouter-env",
type=Path,
help="显式只读取 OPENROUTER_API_KEY,配置 Jev;不自动发起请求",
)
parser.add_argument(
"--deepseek-env",
type=Path,
help="显式只读取 DEEPSEEK_API_KEY,配置 deepseek-flash;不自动调用",
)
parser.add_argument("--origin", action="append", help="额外允许的本机工作台 Origin")
args = parser.parse_args()
if not 1 <= args.port <= 65535:
parser.error("端口不合法")
if args.website_origin:
from .web_server import create_website_app
from .web_sessions import Limits
if args.openrouter_env or args.deepseek_env or args.origin:
parser.error("网站模式不接受共享凭据或额外 Origin")
if min(args.max_sessions, args.max_inference, args.max_codex) < 1:
parser.error("网站容量必须大于零")
defaults = budget = None
if bool(args.website_key_file) != bool(args.website_budget_file):
parser.error("服务器密钥必须同时配置持久化调用限额")
if args.website_key_file:
from .hosted_budget import HostedBudget
defaults = {
"llm": deepseek_llm(args.website_key_file),
"jev": openrouter_jev(args.website_key_file),
}
budget = HostedBudget(args.website_budget_file)
app = create_website_app(
args.website_origin,
args.state_dir,
development=args.website_dev,
trusted_proxies=args.trusted_proxy,
defaults=defaults,
budget=budget,
limits=Limits(
sessions=args.max_sessions, inference=args.max_inference, codex=args.max_codex
),
)
web.run_app(app, host=args.bind, port=args.port, access_log=None, handler_cancellation=True)
return
if (
args.bind != "127.0.0.1"
or args.website_dev
or args.trusted_proxy
or args.website_key_file
or args.website_budget_file
):
parser.error("本机模式必须仅回环监听")
origins = {
"http://localhost:5173",
"http://127.0.0.1:5173",
"http://localhost:4173",
"http://127.0.0.1:4173",
}
for origin in args.origin or []:
url = urlsplit(origin)
if (
url.scheme not in ("http", "https")
or url.hostname not in ("127.0.0.1", "localhost", "::1")
or url.path
or url.query
or url.fragment
or url.username
or url.password
):
parser.error("Origin 必须是完整的本机来源,不支持通配符")
origins.add(origin)
app = create_app(args.state_dir, origins=origins, port=args.port)
if args.openrouter_env:
app[STATE].connections.values["jev"] = openrouter_jev(args.openrouter_env)
if args.deepseek_env:
app[STATE].connections.values["llm"] = deepseek_llm(args.deepseek_env)
print("服务令牌(仅当前进程有效,工作台内填写,不要保存到浏览器或 Git):", app[STATE].token)
web.run_app(app, host="127.0.0.1", port=args.port, access_log=None, handler_cancellation=True)
if __name__ == "__main__":
main()