Group permissions
群組權限
Assign providers and models by group. Owners, administrators, compliance reviewers and members have different capabilities.
依群組分配供應商與模型。擁有者、管理員、法遵審核者與成員各有不同權限。
For teams running their own AI workspace給自己管理 AI 工作空間的團隊
One place to chat. Clear controls around it.
一起使用 AI，權限與紀錄都清楚。
Give employees access to the models their group can use. Inspect requests and responses, reserve budgets before calls, and keep a record of what happened on infrastructure you operate.
讓員工使用群組獲准的模型。在呼叫前後檢查內容、事先保留預算，並在自己管理的基礎架構上留下操作紀錄。
Self-hosted自行架設Your provider credentials使用自己的供應商憑證Public source v0.1.0公開原始碼 v0.1.0
A request through the workspace一個請求經過工作空間
✓Check group access檢查群組權限
✓Inspect content and reserve budget檢查內容並保留預算
✓Call the selected provider呼叫選定的供應商
✓Inspect the reply and record usage檢查回覆並記錄用量
What it does能做什麼
A workspace with rules you can inspect.
規則看得見的工作空間。
Content checks
內容檢查
Inspect prompts, extracted uploads and responses for sensitive content. Apply configured actions from flagging and redaction to blocking or approval.
檢查提示詞、上傳檔案擷取文字與回覆中的敏感內容，依設定標記、遮蔽、阻擋或要求核准。
Budget control
預算控制
Reserve spend before a provider request and settle actual usage afterward, including when the browser closes.
在請求供應商之前保留費用，之後依實際用量結算，瀏覽器中途關閉也會處理。
Audit exports
稽核匯出
Keep append-only, hash-chained audit records and export CSV, JSON or NDJSON for review.
保留只能附加、以雜湊鏈串接的稽核紀錄，並匯出 CSV、JSON 或 NDJSON 供檢視。
Retention and holds
資料保留與保存
Apply workspace retention windows and scoped legal holds. Overdue content is removed in bounded batches.
套用工作空間的保留期限與指定範圍的法律保存，過期內容以有上限的批次清除。
Files and models
檔案與模型
Extract text from common office files and PDFs. Connect configured APIs from seven built-in providers or a validated HTTPS endpoint.
從常見 Office 檔案與 PDF 擷取文字，連接七家內建供應商的已設定 API，或通過驗證的 HTTPS 端點。
Start here從這裡開始
Prepare your server and provider access.
準備自己的主機與模型連線。
Use a Linux amd64 or arm64 server with Docker, a domain and model-provider credentials. The README covers normal HTTPS and Cloudflare Tunnel deployment, storage, first login and recovery.
準備 Linux amd64 或 arm64 主機、Docker、網域與模型供應商憑證。README 說明一般 HTTPS 與 Cloudflare Tunnel 部署、儲存、首次登入和復原。
Deploy
部署
Follow the repository installation guide for your chosen access mode.
依儲存庫的安裝指南選擇連線模式。
Configure
設定
Create the owner account, configure provider credentials and assign model access.
建立擁有者帳號、設定供應商憑證並分配模型權限。
Verify
確認
Try a bounded workflow and review its budget, content checks and audit records.
先試一段有限範圍的工作流程，檢查預算、內容處置與稽核紀錄。
Current scope目前範圍
Public source, for your own deployment.
公開原始碼，自行部署使用。
Version 0.1.0 is available as source. There is no tagged product release or hosted service supplied by this repository.
目前以原始碼提供 0.1.0，尚無加上 tag 的產品發行版，也不由這個儲存庫提供託管服務。
Works today
目前可用
- Local accounts, optional TOTP, group model access and account recovery.
- 本機帳號、選用 TOTP、群組模型權限與帳號復原。
- Content checks, budget settlement, audit exports and retention controls are described in the public source and README.
- 公開原始碼與 README 記錄內容檢查、預算結算、稽核匯出與保留控制。
Limits and not yet
限制與尚未完成
- Selected features send data to configured providers and other documented external services; self-hosting does not make those calls local.
- 選用功能會把資料送到已設定的供應商及文件列出的外部服務；自行架設不會讓這些呼叫變成本機處理。
- The audit chain has no external anchor and cannot prove integrity against an attacker who rewrites the entire database.
- 稽核鏈沒有外部錨點，不能對抗改寫整份資料庫並重算鏈結的攻擊者。
- Deployments need their own capacity, backup and operational acceptance. Review the project privacy and security documents before enabling external features.
- 部署環境需要自己的容量、備份與維運驗收。開啟對外功能前，先閱讀專案的隱私與安全文件。
- Version版本
- 0.1.0 (source)
- License授權
- MIT
- Stack技術
- TypeScript · React · SQLite · Docker
- Host主機
- Linux amd64 / arm64
- Reviewed查核日期
- 2026-10-23
More from Ted Huang. Every public project has a page like this one, in English and Traditional Chinese.
Ted Huang 的其他作品。每個公開專案都有一頁像這樣的中英雙語介紹。
All projects →全部專案 →