Repository navigation
Feat/1030 add dosage interface - #122
Open
zhangyi970212 wants to merge 5 commits into
Open
zhangyi970212 wants to merge 5 commits into
zhangyi970212 wants to merge 5 commits into
Conversation
新增 listModelUsage / listToolUsage 对接 app-control usage.listModelUsage / usage.listToolUsage， 支持 workspace/agent/session 三种 scope 与毫秒级 time_range 交叉校验（session 禁止、其余必传）， 公开 UsageScope、ModelUsagePage、ToolUsagePage 等类型；apps/server 暴露 POST /api/usage/models、 POST /api/usage/tools 并刷新 OpenAPI 快照与 webui 生成类型。REST 映射已与 usage 契约方确认为 AgentStudio 资源风格，公网环境启用端点后即通。附 changeset 触发 @openagentpack/sdk minor 版本。
webui 经 openapi-typescript / @redocly/openapi-core 引入 minimatch<11.0.1 （GHSA-g3hv-75wg-m249，moderate，globparts 放大 DoS），root overrides 强制 11.0.3， bun.lock 同步重解析；openapi-typescript 生成回归与全量测试通过。
bun.lock 由 bun 1.4.4 生成，CI 的 1.3.5 消费新格式 lock 在冷缓存 runner 上 连续两次挂起在 Install dependencies（本地 1.3.5/1.4.4 均可正常安装）。 统一全部 workflow 的 bun 至 1.4.4，与 lock 生成版本一致，audit/install 均已在该版本本地验证。
此前在本机重新解析依赖时，本机 npm 配置的公司内网镜像地址（registry.anpm.alibaba-inc.com） 被写入 bun.lock 的 492 个 tarball URL，GitHub runner 公网环境无法访问，导致发布流水线 Install dependencies 无限挂起。用官方 registry 重新生成 lock（恢复默认源的紧凑格式，与 历史成功发布一致），依赖版本顺带升级至最新修复线（zod 4.6.7 / hono 4.13.16 / @hono/node-server 2.1.5 / vite 8.3.5）；@biomejs/biome 重解析到 2.6.4 后二进制在 macOS 上执行即被 SIGKILL，直接依赖声明锁定 2.5.3。CI 同款 bun 1.3.5/1.4.4 验证 audit 归零、全量测试通过。
依赖重解析后 @clack/prompts 1.5.1→1.8.1，isCancel 谓词不再把 string | symbol 收窄为 string，init 命令的 provider 传入 parseProvider 报 TS2345。取消分支已提前退出，显式断言 string，运行时行为不变。 全 workspace typecheck 与 cli 测试通过。
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Why
Type
Surface area
Checklist
bun run verify:fullpassesBehavior / risk
Validation