chenlin
0d986f60bd
web-platform-ci / Standalone decision service (no cloud credentials) (push) Has been cancelled
web-platform-ci / TypeScript, lint, unit, build (push) Has been cancelled
web-platform-ci / Playwright E2E (push) Has been cancelled
lekiwi-compatibility / cpu-compatibility (push) Has been cancelled
集成服务器托管模型、自然语言移动与有界抓放、内置 LeKiwi URL 导入和双摄像头；同步部署契约与指定域名 iframe 白名单，保留原有物理安全、会话及调用预算防护。 更新 npm 包及锁文件版本、CHANGELOG 与发布文档。提交前 typecheck、120 项定向前端测试和 44 项后端测试通过（3 项可选跳过）；真实 v2 云模型抓放仍待单独验收，不包含运行密钥或构建产物。
129 lines
4.2 KiB
Python
129 lines
4.2 KiB
Python
"""Bounded anonymous sessions; per-visitor state stays in memory."""
|
|
|
|
import asyncio
|
|
import secrets
|
|
import shutil
|
|
import time
|
|
from collections import deque
|
|
from dataclasses import dataclass, field
|
|
from pathlib import Path
|
|
|
|
from .protocol import DecisionError
|
|
from .server import Service
|
|
from .web_config import MemoryConnections
|
|
|
|
|
|
@dataclass
|
|
class Limits:
|
|
sessions: int = 128
|
|
idle: int = 1800
|
|
lifetime: int = 28800
|
|
inference: int = 8
|
|
codex: int = 2
|
|
ip_sessions: int = 30
|
|
ip_logins: int = 12
|
|
ip_calls: int = 600
|
|
|
|
|
|
@dataclass
|
|
class Visitor:
|
|
ident: str
|
|
csrf: str
|
|
service: Service
|
|
created: float
|
|
touched: float
|
|
hosted: bool = False
|
|
codex_reserved: bool = False
|
|
login_deadline: float = 0
|
|
closed: bool = False
|
|
account_lock: asyncio.Lock = field(default_factory=asyncio.Lock)
|
|
|
|
|
|
class Sessions:
|
|
def __init__(self, directory, origin, limits=None, *, defaults=None):
|
|
self.directory = Path(directory)
|
|
self.origin = origin
|
|
self.limits = limits or Limits()
|
|
self.values = {}
|
|
self.ip_buckets = {}
|
|
self.inference = 0
|
|
self.http = None
|
|
self.defaults = dict(defaults or {})
|
|
|
|
def rate(self, ip, kind, maximum):
|
|
now = time.monotonic()
|
|
self.ip_buckets = {k: v for k, v in self.ip_buckets.items() if v and now - v[-1] < 3600}
|
|
key = (ip, kind)
|
|
if key not in self.ip_buckets:
|
|
if len(self.ip_buckets) >= 4096:
|
|
raise DecisionError("server_capacity", 429)
|
|
self.ip_buckets[key] = deque()
|
|
bucket = self.ip_buckets[key]
|
|
while bucket and now - bucket[0] >= 3600:
|
|
bucket.popleft()
|
|
if len(bucket) >= maximum:
|
|
raise DecisionError("ip_rate_limit", 429)
|
|
bucket.append(now)
|
|
|
|
def create(self, ip):
|
|
self.rate(ip, "sessions", self.limits.ip_sessions)
|
|
if len(self.values) >= self.limits.sessions:
|
|
raise DecisionError("session_capacity", 429)
|
|
ident = secrets.token_urlsafe(32)
|
|
service = Service(
|
|
self.directory / ident, "", {self.origin}, 8768, connections=MemoryConnections()
|
|
)
|
|
service.connections.values.update(self.defaults)
|
|
service.session = self.http
|
|
now = time.monotonic()
|
|
visitor = Visitor(
|
|
ident, secrets.token_urlsafe(32), service, now, now, hosted=bool(self.defaults)
|
|
)
|
|
self.values[ident] = visitor
|
|
return visitor
|
|
|
|
def reserve_codex(self, visitor):
|
|
if not visitor.codex_reserved:
|
|
if sum(v.codex_reserved for v in self.values.values()) >= self.limits.codex:
|
|
raise DecisionError("subscription_capacity", 429)
|
|
visitor.codex_reserved = True
|
|
|
|
async def close_codex(self, visitor):
|
|
visitor.service.invalidate()
|
|
await visitor.service.codex.close()
|
|
visitor.codex_reserved = False
|
|
visitor.login_deadline = 0
|
|
|
|
async def destroy(self, visitor):
|
|
if visitor.closed:
|
|
return
|
|
visitor.closed = True
|
|
self.values.pop(visitor.ident, None)
|
|
service = visitor.service
|
|
service.invalidate()
|
|
await asyncio.gather(*list(service.active.values()), return_exceptions=True)
|
|
async with visitor.account_lock:
|
|
await self.close_codex(visitor)
|
|
service.connections.values.clear()
|
|
service.records.clear()
|
|
service.runs.clear()
|
|
service.cancelled.clear()
|
|
# Only internally generated session directories; never accept paths from HTTP.
|
|
shutil.rmtree(self.directory / visitor.ident, ignore_errors=True)
|
|
|
|
async def expire(self):
|
|
now = time.monotonic()
|
|
for visitor in list(self.values.values()):
|
|
if (
|
|
now - visitor.touched >= self.limits.idle
|
|
or now - visitor.created >= self.limits.lifetime
|
|
):
|
|
await self.destroy(visitor)
|
|
elif visitor.login_deadline and now >= visitor.login_deadline:
|
|
async with visitor.account_lock:
|
|
if visitor.login_deadline and now >= visitor.login_deadline:
|
|
await self.close_codex(visitor)
|
|
|
|
async def close(self):
|
|
await asyncio.gather(*(self.destroy(v) for v in list(self.values.values())))
|