ECode常见问题FAQ
常见问题Frequently asked questions
关于部署、模型、账号、安全和客户端。没有找到答案，可以联系我们。
About deployment, models, accounts, security and the client. If your question is not here, contact us.
部署Deployment
ECode 有哪几种部署方式？How can ECode be deployed?
两种。本地 + 云：企业现场一台 GPU 主机，运行控制台、模型网关和本地模型，再接入云端模型。纯云：控制台和网关放在企业自己的一台云服务器上，只接云端模型。两种都由企业自己部署和管理。
Two ways. Local plus cloud: a GPU box at your site runs the Console, the model gateway and local models, and you add cloud models. Cloud only: the Console and gateway run on a cloud VM in your own account, with cloud models only. You deploy and manage both.
没有互联网的内网能用吗？Does it work on a network with no internet access?
能。员工输入控制台地址，或使用一键连接链接，客户端直接访问控制台，不需要查企业目录。模型使用本地模型。
Yes. Employees enter the Console URL or use a one-click link, so the client goes straight to the Console with no directory lookup. Use local models for inference.
谁来部署？Who does the deployment?
1.0 的部署由 ECode 团队和企业一起完成。上线前的步骤见部署指南。
In 1.0, the ECode team deploys together with your IT team. See the deployment guide for the steps.
模型Models
能接哪些模型？Which models can I use?
本地模型运行在企业自己的 GPU 主机上，例如 Qwen 系列开源模型。云端模型可以接任何 OpenAI 兼容或 Anthropic 兼容的供应商。两类模型出现在员工同一个模型列表里。
Local models run on your own GPU box, for example open models from the Qwen family. Cloud models can come from any OpenAI-compatible or Anthropic-compatible provider. Both appear in one model picker for employees.
本地模型可以同时运行几个？How many local models can run at once?
取决于 GPU 显存。显存不够时，控制台不直接启动新模型，而是提示先停止哪个模型，可以一步完成切换。切换时正在用旧模型的员工会收到错误，尽量在没人使用时切换。
That depends on GPU memory. When memory runs short, the Console does not start the new model; it tells you which one to stop first and can switch in one step. Employees using the old model get an error during the switch, so switch when the team is idle.
员工看到哪些模型，由谁决定？Who decides which models employees see?
管理员。客户端的模型列表来自控制台的模型目录，员工能调用哪些模型由他的可用模型决定。改动不需要重新打包客户端。
Your admins. The client's model picker comes from the Console's model catalog, and each employee's allowed models decide what they can call. Changes need no new client build.
账号与额度Accounts and quotas
员工怎么登录？How do employees sign in?
用企业账号，经企业身份源单点登录。控制台支持通用 OIDC（公开客户端，PKCE）和 Microsoft Entra ID。员工第一次登录时自动建档，并获得一把只属于自己的网关密钥。
With their enterprise account, through single sign-on with your identity provider. The Console supports generic OIDC (public client with PKCE) and Microsoft Entra ID. Employees are added at their first sign-in and get a gateway key of their own.
额度怎么设置？How do quotas work?
每位员工有预算、周期、每分钟请求数、每分钟 token 数和可用模型五项设置，可以逐个或批量修改。额度挂在员工身上，删除密钥或重新登录都不会重置。
Each employee has five settings: budget, period, requests per minute, tokens per minute and allowed models. Edit them one at a time or in bulk. Quotas belong to the person, so deleting a key or signing in again never resets them.
停用员工后会发生什么？What happens when I disable an employee?
他的网关密钥立即被封，下一次调用模型就会失败，也不能再登录。重新启用后恢复。1.0 的客户端在这时显示网关的英文原文提示，中文提示在 1.1 提供。
Their gateway key is blocked at once: the next model call fails and they can no longer sign in. Enable them to restore access. In 1.0 the client shows the gateway's own English message at that point; a localized message arrives in 1.1.
员工能在客户端里看到剩余额度吗？Can employees see their remaining quota in the client?
1.0 还不能。管理员在控制台的员工配额页查看每个人的「已用 / 预算」。
Not in 1.0. Admins see each person's spend against budget on the Console's quota page.
安全与数据Security and data
会记录对话内容吗？Are conversations logged?
不会。请求日志只记录时间、员工、模型、token、花费、状态和耗时，不含对话内容。控制台不开启内容记录。
No. The request log records time, employee, model, tokens, spend, status and latency, with no message content. The Console never turns on content logging.
数据会发给 ECode 吗？Does any data go to ECode?
模型请求只经过企业自己的网关。唯一会访问 ECode 公共服务的是企业码查找：客户端用企业码在企业目录里查控制台地址。直接输入控制台地址或使用一键连接链接时，不访问企业目录。详见安全。
Model requests pass only through your own gateway. The one call to a public ECode service is the enterprise code lookup, where the client reads your Console address from the enterprise directory. Entering the Console URL or using a one-click link skips it. See Security.
客户端The client
支持哪些系统？Which systems are supported?
macOS（Apple Silicon）和 Windows x64。
macOS on Apple Silicon, and Windows x64.
为什么第一次打开被系统拦截？Why does the system block the first launch?
1.0 的安装包还没有代码签名。核对 SHA256 后，按首次打开的步骤放行一次即可。
The 1.0 installers are not code-signed yet. Check the SHA256, then allow the app once with the first-launch steps.
客户端会自动更新吗？Does the client update itself?
1.0 关闭了自动更新。管理员在控制台上传新版本后，通知员工重新下载安装。
Auto-update is off in 1.0. Admins upload the new version to the Console and ask employees to reinstall.
几个人可以共用一台电脑吗？Can several people share one computer?
可以，但每名员工要使用自己的系统账户。在同一个系统账户里换人登录，侧边栏仍会列出上一位员工的本地任务。
Yes, as long as each employee has their own OS account. If people take turns in one OS account, the sidebar still lists the previous person's local tasks.