LocalRouter v0.1.0-alpha.6

LocalRouter v0.1.0-alpha.6 修复请求转发、用量统计和工作流恢复中的问题，并补齐控制台的任务与列表操作。

本次更新

• 阻止外站 Origin 和非回环 Host 访问本机入口，禁止上游重定向转发供应商凭据。
• POST 遇到连接错误或上游 5xx 后停止自动换渠道重放；非流式响应读取失败返回错误。
• 修复 multipart 模型路由、模型目录协议过滤，以及大请求和 chunked 请求的模型限制。
• 请求限额计数跨重启保留；长流式响应能够保留开始事件中的输入用量，并合并后续用量事件。
• 工作流网络等待不再占用全局状态锁；取消支持中断正在等待的请求，并使用独立的清理次数预算。中断后的不确定执行标为 outcome_unknown，避免自动重复提交。
• 控制台加载全部渠道和 Agent，日志支持翻页；单个数据接口失败不阻塞其他页面。任务页新增结果、错误详情和确认取消。
• 增加 GitHub 版本检查及控制台提示，只检查和提示，不自动下载或安装。
• 全文重写 README，重新整理安装、服务配置、Agent 接入、权限和恢复说明。

安装

下载适合设备架构的 Linux 压缩包，核对 checksums.txt 后解压，在包内执行。

./tools/install-localrouter.sh install

发行包包含预编译程序，无需 Go 或 Bun。默认安装会启动 systemd 用户服务，控制台位于 http://127.0.0.1:8317/。

公开发行包不包含供应商 Pack、账号或私有配置，新安装需要自行接入上游。升级前请备份现有配置和数据；安装会重启服务，正在进行的调用可能被中断。

验证范围

本版本执行前端测试、Go 回归与竞态检查、协议和 LAN 隔离验收、Docker 验收、密钥与依赖漏洞扫描，以及 amd64/arm64 发行包检查和隔离安装验收。控制台任务、日志和故障提示已通过本机浏览器验证。

测试使用隔离的虚构上游。真实供应商付费调用未纳入本次验收。

LocalRouter v0.1.0-alpha.5

Highlights

• Adds an opt-in LAN service listener for authenticated consumer APIs while keeping the console, /local/api, and /manage/mcp loopback-only.
• Adds a pinned multi-stage Docker build and hardened host-network Compose deployment: non-root runtime, read-only root filesystem, dropped capabilities, persistent private volumes, graceful shutdown, and configurable health checks.
• Lets lr use an operator-approved LAN endpoint only after unauthenticated discovery proves it is a service-only surface with maintenance unavailable.
• Improves exact Pack-qualified model discovery, catalogue timeouts, model_cls and media catalogues, request-schema enum models, and dynamic-input compatibility matching.
• Improves pooled readiness probes with distinct-credential retry and prompt rechecks after unhealthy credentials enter cooldown.
• Includes the request usage ledger, unified service management, retired Token-locator migration, and stale-draft rejection added since alpha.4.

Verification

• Full Go, race, Web, Protocol Pack, REST, SSE, binary, workflow, LAN, install, and open-source release suites passed.
• The real Docker image passed non-root, read-only, capability-drop, route-isolation, authentication, graceful-shutdown, health, and persistent-Token recreation checks.
• Physical LAN operation was verified from a separate workstation against Docker Engine on a second Linux host.
• Gitleaks, govulncheck, and OSV Scanner reported no release-blocking issue.
• The published Linux amd64 archive was installed and exercised; the Linux arm64 archive and both checksums were inspected by the release workflow.

See docs/DOCKER.md for fresh Docker deployment, LAN access, browser-origin policy, and migration from an existing native installation.

This is an alpha pre-release. Public source and archives contain no private provider Packs, credentials, pool contents, or private upstream addresses.

LocalRouter v0.1.0-alpha.4

Highlights

• Makes loopback console password protection optional and disabled by default, so local operators can open the console without entering an API key.
• Adds an explicit enable, rotate, and disable flow for a custom console password, with mode-0600 persisted state and status visibility that never exposes the secret.
• Keeps Agent maintenance isolated behind the separate /manage/mcp administrator or maintenance-token boundary.
• Extends CLI help, global Agent guidance, Web UI guidance, and security documentation around consumer tokens, console access, and maintenance authority.
• Adds end-to-end coverage for password-free startup, protected reload and unlock, password rotation, disablement, installation, release archives, secret scanning, vulnerability scanning, and amd64/arm64 artifacts.

This is an alpha pre-release. Public archives contain no private provider Packs, credentials, pool contents, or private upstream addresses.

LocalRouter v0.1.0-alpha.3

Highlights

• Installs one managed LocalRouter consumer contract and Protocol Pack Skill for shared Agents, Codex, and OMP.
• Adds bounded service/model catalogs, exact provider-qualified model selection, one-shot service tree, and verified OpenAI runtime handoff at /p//v1.
• Makes blocked preflight and routing failures nonzero, structured, and actionable with ready alternatives.
• Accepts catalog-published operation_key values directly in describe, preflight, call, and run while preserving workflow IDs.
• Adds full race, secret, vulnerability, dual-architecture archive, and isolated archive-install release gates.

This is an alpha pre-release. Public archives contain no private provider Packs, credentials, pool contents, or private upstream addresses.

v0.1.0-alpha.2

Changelog

• f984298 feat: release provider-neutral LocalRouter v0.1.0-alpha.2