@baize-ai/core 0.3.4 → 0.3.6

package/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to baize-core will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.6] - 2026-08-26
+
+### Added
+- web-console 诊断卡（模型设置页）：服务状态 / agent 会话（含卡登录提示）/ 运行时与认证 / 最近错误——浏览器内排查，无需 SSH
+
+## [0.3.5] - 2026-08-26
+
+### Fixed
+- web-console 重启 agent 会话按当前 runtime 定位 tmux 会话（codex-main/claude-main）——保存 Codex API key 后自动重启生效，不再因会话名不匹配报"无 tmux session"
+
 ## [0.3.4] - 2026-08-26
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@baize-ai/core",
-  "version": "0.3.4",
+  "version": "0.3.6",
   "type": "module",
   "description": "Baize (\u767d\u6cfd) \u2014 autonomous AI agent infrastructure",
   "main": "cli/baize.js",

package/skills/web-console/public/app.js

@@ -2297,6 +2297,62 @@ async function submitA2aTaskForm(basePath) {
   }
 }
 
+/** Diagnostics: service/session/auth/errors rendered from /api/admin/diagnostics. */
+async function renderDiagnostics(basePath) {
+  const runtimeEl = document.getElementById('diag-runtime');
+  const servicesEl = document.getElementById('diag-services');
+  const sessionsEl = document.getElementById('diag-sessions');
+  const errorsEl = document.getElementById('diag-errors');
+  const stateEl = document.getElementById('diag-runtime-state');
+  if (!servicesEl) return;
+  runtimeEl.textContent = '加载中...';
+  let body;
+  try {
+    const r = await adminFetch(basePath, '/api/admin/diagnostics');
+    if (r.status !== 200) throw new Error(r.body?.error || '加载失败');
+    body = r.body;
+  } catch (err) {
+    runtimeEl.textContent = `加载失败：${escapeHtml(err.message)}`;
+    return;
+  }
+  const rt = body.runtime || {};
+  if (stateEl) stateEl.textContent = `runtime: ${escapeHtml(rt.runtime || '?')}`;
+  // runtime + auth
+  const auth = body.auth || {};
+  const authLine = [];
+  if (auth.claude?.configured) authLine.push(`Claude: ${escapeHtml(auth.claude.method)} (${escapeHtml(auth.claude.masked || '')})`);
+  else authLine.push('Claude: 未配置');
+  if (auth.codex?.configured) authLine.push(`Codex: ${escapeHtml(auth.codex.method)} (${escapeHtml(auth.codex.masked || '')})`);
+  else authLine.push('Codex: 未配置');
+  runtimeEl.innerHTML = `<strong>${escapeHtml(rt.runtime || 'claude')}</strong> · ${authLine.join(' · ')}`;
+  // services
+  const svcs = body.services || [];
+  if (!svcs.length) {
+    servicesEl.textContent = 'PM2 未运行或无服务（容器/服务未启动）';
+  } else {
+    servicesEl.innerHTML = '<table class="tasks-table"><thead><tr><th>服务</th><th>状态</th><th>重启</th><th>运行</th></tr></thead><tbody>'
+      + svcs.map((s) => `<tr><td>${escapeHtml(s.name)}</td><td><span class="channel-state ${s.status === 'online' ? 'ok' : 'warn'}">${escapeHtml(s.status)}</span></td><td>${s.restarts}</td><td>${s.uptime != null ? Math.round(s.uptime / 60) + 'm' : '—'}</td></tr>`).join('')
+      + '</tbody></table>';
+  }
+  // sessions
+  const sessions = body.sessions || [];
+  if (!sessions.length) {
+    sessionsEl.innerHTML = '<span class="cred-state">无 agent 会话（tmux 未运行或未拉起）</span>';
+  } else {
+    sessionsEl.innerHTML = sessions.map((s) => {
+      const stuck = /(sign in|login|authenticate)/i.test(s.tail || '') ? '<span class="channel-state warn">⚠ 可能卡在登录</span>' : '<span class="channel-state ok">运行中</span>';
+      return `<div style="margin-bottom:8px"><strong>${escapeHtml(s.name)}</strong> ${stuck}<pre style="font-size:12px;background:var(--bg-2,#1a1a1a);padding:8px;border-radius:6px;white-space:pre-wrap">${escapeHtml(s.tail || '（空）')}</pre></div>`;
+    }).join('');
+  }
+  // errors
+  const errors = body.errors || [];
+  if (!errors.length) {
+    errorsEl.textContent = '无错误日志';
+  } else {
+    errorsEl.innerHTML = errors.map((e) => `<div style="margin-bottom:8px"><strong>${escapeHtml(e.service)}</strong><pre style="font-size:12px;background:var(--bg-2,#1a1a1a);padding:8px;border-radius:6px;white-space:pre-wrap;color:var(--danger,#e5534b)">${escapeHtml(e.tail)}</pre></div>`).join('');
+  }
+}
+
 function showAppView(basePath, view) {
   const chatView = document.getElementById('chat-view');
   const modelView = document.getElementById('model-view');
@@ -2323,6 +2379,7 @@ function showAppView(basePath, view) {
     a2aView.hidden = true;
     schedulerView.hidden = true;
     modelView.hidden = false;
+    renderDiagnostics(basePath);
     setNav(navModel, [navChat, navChannels, navA2a, navScheduler]);
     renderModelSettings(basePath);
   } else if (view === 'channels') {
@@ -2518,6 +2575,7 @@ function initViews(basePath) {
   document.getElementById('nav-channels').addEventListener('click', () => showAppView(basePath, 'channels'));
   document.getElementById('nav-a2a').addEventListener('click', () => showAppView(basePath, 'a2a'));
   document.getElementById('nav-scheduler').addEventListener('click', () => showAppView(basePath, 'scheduler'));
+  document.getElementById('btn-diag-refresh').addEventListener('click', () => renderDiagnostics(basePath));
 
   // D8 two-column layout: Claude official = setup-token form; custom API =
   // per-column quick forms. The standalone api-key forms were removed.

package/skills/web-console/public/index.html

@@ -231,6 +231,28 @@
           </div>
         </section>
       </div>
+        <section class="settings-section">
+          <div class="settings-section-head">
+            <h2>诊断</h2>
+            <p>服务 / 会话 / 认证 / 最近错误——浏览器内排查，无需 SSH。</p>
+          </div>
+          <div class="settings-card">
+            <div class="card-title">运行时与认证 <span class="channel-state" id="diag-runtime-state"></span></div>
+            <div class="cred-state" id="diag-runtime" aria-live="polite">加载中...</div>
+          </div>
+          <div class="settings-card">
+            <div class="card-title">服务状态 <button type="button" class="small-btn" id="btn-diag-refresh">刷新</button></div>
+            <div class="cred-state" id="diag-services" aria-live="polite">加载中...</div>
+          </div>
+          <div class="settings-card">
+            <div class="card-title">Agent 会话</div>
+            <div class="cred-state" id="diag-sessions" aria-live="polite">加载中...</div>
+          </div>
+          <div class="settings-card">
+            <div class="card-title">最近错误</div>
+            <div class="cred-state" id="diag-errors" aria-live="polite">加载中...</div>
+          </div>
+        </section>
     </main>
 
     <main class="settings-view" id="channels-view" hidden>

package/skills/web-console/scripts/admin-auth.js

@@ -37,7 +37,20 @@ export function envFile() { return path.join(baizeDir(), '.env'); }
 function configFile() { return path.join(baizeDir(), '.baize', 'config.json'); }
 function claudeSettings() { return path.join(homeDir(), '.claude', 'settings.json'); }
 function codexAuth() { return path.join(homeDir(), '.codex', 'auth.json'); }
-const CLAUDE_SESSION = process.env.CLAUDE_SESSION || 'claude-main';
+// Session name follows the active runtime: codex runs in 'codex-main',
+// claude in 'claude-main'. Hard-coding 'claude-main' made the web-console
+// restart button report "no tmux session" while the codex session was alive
+// (stuck on login) — a dead end for browser-only recovery.
+function agentSessionName() {
+  if (process.env.CLAUDE_SESSION) return process.env.CLAUDE_SESSION;
+  let runtime = 'claude';
+  try {
+    const cfg = JSON.parse(require('node:fs').readFileSync(
+      require('node:path').join(homeDir(), 'baize', '.baize', 'config.json'), 'utf8'));
+    if (cfg && cfg.runtime) runtime = cfg.runtime;
+  } catch { /* default claude */ }
+  return runtime === 'codex' ? 'codex-main' : 'claude-main';
+}
 const CLI = process.env.BAIZE_CLI || 'baize';
 
 // ── Low-level helpers ────────────────────────────────────────────────────────
@@ -352,14 +365,15 @@ export async function switchRuntime(name) {
  * @returns {Promise<{success: boolean, restarted: boolean, reason?: string}>}
  */
 export async function restartAgentSession() {
+  const session = agentSessionName();
   try {
-    await execFileAsync('tmux', ['has-session', '-t', CLAUDE_SESSION], { timeout: 5000 });
+    await execFileAsync('tmux', ['has-session', '-t', session], { timeout: 5000 });
   } catch {
     return { success: true, restarted: false, reason: 'no_session' };
   }
   try {
-    await execFileAsync('tmux', ['send-keys', '-t', CLAUDE_SESSION, '/exit', 'Enter'], { timeout: 5000 });
-    return { success: true, restarted: true };
+    await execFileAsync('tmux', ['send-keys', '-t', session, '/exit', 'Enter'], { timeout: 5000 });
+    return { success: true, restarted: true, session };
   } catch (err) {
     return { success: false, restarted: false, reason: err.message };
   }

package/skills/web-console/scripts/diagnostics.js

@@ -0,0 +1,141 @@
+/**
+ * Diagnostics for the web console (D26): aggregate service/session/runtime
+ * state so operators can troubleshoot from the browser without SSH.
+ *
+ * readDiagnostics() returns:
+ *   services[]   — PM2 processes (name, status, restarts, uptime)
+ *   sessions[]   — tmux agent sessions (name, exists, last pane lines)
+ *   runtime      — active runtime (claude/codex) + CLI presence
+ *   auth         — claude/codex credential state (masked, never echoed)
+ *   errors       — tail of each service error log (last lines)
+ */
+
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+
+const execFileAsync = promisify(execFile);
+
+function baizeDir() {
+  return process.env.BAIZE_DIR || path.join(os.homedir(), 'baize');
+}
+
+function readJsonSafe(file) {
+  try {
+    return JSON.parse(fs.readFileSync(file, 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+function maskSecret(secret) {
+  if (!secret || typeof secret !== 'string') return null;
+  if (secret.length <= 8) return '****';
+  return `${secret.slice(0, 4)}••••${secret.slice(-4)}`;
+}
+
+/** PM2 process table via `pm2 jlist` (tolerant when pm2 is absent). */
+async function readServices() {
+  try {
+    const { stdout } = await execFileAsync('pm2', ['jlist'], { timeout: 8000, maxBuffer: 4 * 1024 * 1024 });
+    const list = JSON.parse(stdout);
+    return list.map((p) => ({
+      name: p.name,
+      status: p.pm2_env?.status || 'unknown',
+      restarts: p.pm2_env?.restart_time ?? 0,
+      uptime: p.pm2_env?.pm_uptime ? Math.round((Date.now() - p.pm2_env.pm_uptime) / 1000) : null,
+      cpu: p.monit?.cpu ?? null,
+      memory: p.monit?.memory ?? null,
+    }));
+  } catch {
+    return [];
+  }
+}
+
+/** tmux agent sessions: existence + last pane lines (for stuck-login detection). */
+async function readSessions() {
+  const sessions = [];
+  try {
+    const { stdout } = await execFileAsync('tmux', ['ls'], { timeout: 5000 });
+    const names = stdout.split('\n').map((l) => l.split(':')[0]).filter(Boolean);
+    for (const name of names) {
+      if (!/(main|agent)/.test(name)) continue;
+      let tail = '';
+      try {
+        const pane = await execFileAsync('tmux', ['capture-pane', '-t', name, '-p', '-S', '-12'], { timeout: 5000 });
+        tail = pane.stdout.split('\n').filter((l) => l.trim()).slice(-8).join('\n').slice(0, 600);
+      } catch { /* pane read failed */ }
+      sessions.push({ name, tail });
+    }
+  } catch {
+    /* no tmux or no sessions */
+  }
+  return sessions;
+}
+
+/** Active runtime from ~/baize/.baize/config.json. */
+function readRuntime() {
+  const cfg = readJsonSafe(path.join(baizeDir(), '.baize', 'config.json')) || {};
+  return { runtime: cfg.runtime || 'claude', configPresent: !!cfg };
+}
+
+/** Credential state (masked). Never echoes secrets. */
+function readAuth() {
+  const out = { claude: { configured: false, method: null, masked: null }, codex: { configured: false, method: null, masked: null } };
+  // Claude: ~/.claude/settings.json (ANTHROPIC_API_KEY) or env
+  try {
+    const settings = readJsonSafe(path.join(os.homedir(), '.claude', 'settings.json')) || {};
+    const key = settings.env?.ANTHROPIC_API_KEY || process.env.ANTHROPIC_API_KEY;
+    if (key) { out.claude.configured = true; out.claude.method = 'api-key'; out.claude.masked = maskSecret(key); }
+  } catch { /* ignore */ }
+  // Codex: ~/.codex/auth.json (auth_mode apikey/chatgpt)
+  const codexAuth = readJsonSafe(path.join(os.homedir(), '.codex', 'auth.json'));
+  if (codexAuth) {
+    if (codexAuth.auth_mode === 'apikey' && codexAuth.OPENAI_API_KEY) {
+      out.codex.configured = true; out.codex.method = 'api-key'; out.codex.masked = maskSecret(codexAuth.OPENAI_API_KEY);
+    } else if (codexAuth.tokens?.access_token) {
+      out.codex.configured = true; out.codex.method = 'chatgpt-oauth';
+    }
+  }
+  const envKey = process.env.OPENAI_API_KEY;
+  if (envKey && !out.codex.configured) { out.codex.configured = true; out.codex.method = 'env'; out.codex.masked = maskSecret(envKey); }
+  return out;
+}
+
+/** Tail of each service error log under ~/.pm2/logs/. */
+function readErrors() {
+  const logsDir = path.join(os.homedir(), '.pm2', 'logs');
+  const errors = [];
+  try {
+    for (const file of fs.readdirSync(logsDir)) {
+      if (!/error.*\.log$/.test(file)) continue;
+      const full = path.join(logsDir, file);
+      try {
+        const size = fs.statSync(full).size;
+        const fd = fs.openSync(full, 'r');
+        const buf = Buffer.alloc(Math.min(size, 3000));
+        fs.readSync(fd, buf, 0, buf.length, Math.max(0, size - buf.length));
+        fs.closeSync(fd);
+        const tail = buf.toString('utf8').split('\n').filter((l) => l.trim()).slice(-6).join('\n');
+        if (tail) errors.push({ service: file.replace(/-(error|out)\.log$/, ''), tail: tail.slice(0, 500) });
+      } catch { /* unreadable log */ }
+    }
+  } catch { /* no logs dir */ }
+  return errors;
+}
+
+/** Full diagnostics payload. */
+export async function readDiagnostics() {
+  const [services, sessions] = await Promise.all([readServices(), readSessions()]);
+  return {
+    success: true,
+    at: new Date().toISOString(),
+    runtime: readRuntime(),
+    services,
+    sessions,
+    auth: readAuth(),
+    errors: readErrors(),
+  };
+}

package/skills/web-console/scripts/server.js

@@ -77,6 +77,7 @@ import {
   getSchedulerTasks,
 } from './a2a-admin.js';
 import { listInstalledSkills } from './skill-catalog.js';
+import { readDiagnostics } from './diagnostics.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -825,6 +826,14 @@ app.post('/api/admin/codex-key', async (req, res) => {
   }
 });
 
+app.get('/api/admin/diagnostics', async (req, res) => {
+  try {
+    res.json(await readDiagnostics());
+  } catch (err) {
+    jsonError(res, err);
+  }
+});
+
 app.post('/api/admin/runtime', async (req, res) => {
   try {
     const result = await switchRuntime(req.body?.runtime);