@modesto_ma/dsh-channels 0.5.0-beta.3 → 0.5.0-beta.4

package/lib/client.js

@@ -32,6 +32,8 @@ window.__ModuleLoader__.load({
 		const ACCESS_GROUPS_ROUTE = "/dsh-channels/access/groups";
 		/** 用户白名单增删（POST/DELETE，body `{ userId, name? }` / `{ userId }`）。 */
 		const ACCESS_USERS_ROUTE = "/dsh-channels/access/users";
+		/** 知识库白名单增删（POST/DELETE，body `{ userId, name? }` / `{ userId }`）。 */
+		const ACCESS_WIKI_USERS_ROUTE = "/dsh-channels/access/wiki-users";
 		/** 结算一条待处理授权申请（POST，body `{ token, decision }`）。 */
 		const ACCESS_REQUESTS_ROUTE = "/dsh-channels/access/requests";
 		/**
@@ -68,6 +70,10 @@ window.__ModuleLoader__.load({
 				id: "access",
 				label: "访问授权"
 			},
+			{
+				id: "wiki",
+				label: "知识库"
+			},
 			{
 				id: "advanced",
 				label: "高级"
@@ -84,6 +90,7 @@ window.__ModuleLoader__.load({
 			model: ["model"],
 			workspace: ["workspace"],
 			access: ["access"],
+			wiki: ["wiki"],
 			advanced: ["streaming"]
 		};
 		/** Section heading for one field group inside its tab. */
@@ -94,7 +101,8 @@ window.__ModuleLoader__.load({
 			tools: "模型工具",
 			model: "模型与推理",
 			streaming: "流式卡片与日志",
-			access: "准入与授权"
+			access: "准入与授权",
+			wiki: "知识库工具"
 		};
 		/** Display labels for the panel header/cards (kept on the wire so the client owns no copy). */
 		const PANEL_COPY = {
@@ -178,6 +186,7 @@ window.__ModuleLoader__.load({
 			modelTabHelp: "飞书会话使用的模型服务商、模型、推理档位与 Agent 预设；下拉选项来自宿主机实时目录，保存后对新会话生效。",
 			workspaceTabHelp: "每个用户一个工作区（模型/工具产生文件的落点），每个话题在其中拥有独立工作目录；只影响之后新建的话题。入站附件默认存于 DSH 原生附件库，不占用话题目录。插件不会自动删除工作区或话题目录；过期目录可手动删除，话题下次对话时会重建空目录。",
 			accessTabHelp: "准入采用 fail-closed：管理员不受白名单限制，非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。",
+			wikiTabHelp: "知识库工具以应用身份访问「知识库范围」内的文档、电子表格和多维表格。只有管理员或知识库白名单里的用户发起的话题能用；每次打开、新建、修改仍需话题发起人在授权卡上确认。",
 			advancedTabHelp: "流式刷新等低层参数、Web 覆盖文件与只读信息。",
 			save: "保存更改",
 			saving: "保存中…",
@@ -216,6 +225,13 @@ window.__ModuleLoader__.load({
 			enabled: "已启用",
 			disabled: "已关闭",
 			credentialRemoveConfirm: "确定移除已存储的凭据值？移除后不会回显，需要时须重新填写。",
+			analyzeTokenCard: "日志分析接口令牌",
+			analyzeTokenCardHelp: "日志平台调用分析接口时 Authorization: Bearer 后面的值。经 DSH 凭据服务写入本机凭据库，面板永不回显；保存或移除后下一次请求即生效，无需重连。未配置时接口对所有请求返回 503。",
+			analyzeTokenLabel: "访问令牌",
+			analyzeTokenPlaceholder: "填写新令牌（建议 32 位以上随机串）",
+			saveAnalyzeToken: "保存令牌",
+			analyzeTokenSaved: "令牌已保存，下一次请求生效",
+			analyzeTokenRemoved: "令牌已移除，接口将拒绝所有请求",
 			accessNotLoaded: "飞书连接建立后加载授权列表",
 			loading: "加载中…",
 			loadFailed: "设置面板加载失败",
@@ -263,6 +279,11 @@ window.__ModuleLoader__.load({
 			accessRequestAllowed: "已授权",
 			accessRequestDenied: "已忽略",
 			accessHints: "三种授权入口：群内 /auth 命令、入群与用户授权卡、本面板。撤销立即生效；白名单只约束非管理员（管理员在任何私聊/群聊都直接放行），非管理员需要群和用户两层同时命中。",
+			wikiUsersCard: "知识库白名单",
+			wikiUsersHelp: "与「访问授权」里的用户白名单相互独立：这里的用户（以及管理员）发起的话题可以使用知识库工具。也可以在飞书里发送 /auth wiki add @用户 或 /auth wiki remove @用户；移除立即生效。",
+			wikiUsersEmpty: "知识库白名单为空：目前只有管理员发起的话题能使用知识库工具。",
+			wikiUserAdded: "已加入知识库白名单",
+			wikiUserRemoved: "已移出知识库白名单",
 			accessChatIdHint: "chat_id 可从入群群信息卡或群内 /groupid 获取；user_id 可私聊机器人发送 /userid 获取。"
 		};
 		//#endregion
@@ -469,6 +490,17 @@ window.__ModuleLoader__.load({
 		async function removeAccessUser(userId) {
 			return mutateAccess(ACCESS_USERS_ROUTE, "DELETE", { userId });
 		}
+		/** Add one user `user_id` to the wiki whitelist. */
+		async function addWikiUser(userId, name) {
+			return mutateAccess(ACCESS_WIKI_USERS_ROUTE, "POST", name === void 0 || name === "" ? { userId } : {
+				userId,
+				name
+			});
+		}
+		/** Remove one user from the wiki whitelist (takes effect on the next wiki tool call). */
+		async function removeWikiUser(userId) {
+			return mutateAccess(ACCESS_WIKI_USERS_ROUTE, "DELETE", { userId });
+		}
 		/** Settle one pending authorization request (same resolver as the Feishu card). */
 		async function resolveAccessRequest(token, decision) {
 			return mutateAccess(ACCESS_REQUESTS_ROUTE, "POST", {
@@ -1245,10 +1277,7 @@ window.__ModuleLoader__.load({
 			const { access } = panel;
 			const [groupChatId, setGroupChatId] = (0, react.useState)("");
 			const [groupName, setGroupName] = (0, react.useState)("");
-			const [userUserId, setUserUserId] = (0, react.useState)("");
-			const [userName, setUserName] = (0, react.useState)("");
 			const groups = access.groups;
-			const users = access.users;
 			const requests = access.requests;
 			const working = busy === "access";
 			const disabled = busy !== null || locked || !access.loaded;
@@ -1259,13 +1288,6 @@ window.__ModuleLoader__.load({
 					setGroupName("");
 				}
 			};
-			const submitUser = async () => {
-				if (userUserId.trim() === "") return;
-				if (await onAddUser(userUserId, userName)) {
-					setUserUserId("");
-					setUserName("");
-				}
-			};
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				className: "dsh-channels-cfg__card",
 				children: [
@@ -1371,77 +1393,15 @@ window.__ModuleLoader__.load({
 								})
 							]
 						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__accessSection",
-							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "dsh-channels-cfg__labelRow",
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__label",
-										children: PANEL_COPY.accessUsersTitle
-									}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-										className: "dsh-channels-cfg__cardMeta",
-										children: [users.length, " 个"]
-									})]
-								}),
-								users.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "dsh-channels-cfg__help",
-									children: PANEL_COPY.accessUsersEmpty
-								}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-									className: "dsh-channels-cfg__accessList",
-									children: users.map((user) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
-										className: "dsh-channels-cfg__accessRow",
-										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-											className: "dsh-channels-cfg__accessMain",
-											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: user.name ?? user.userId }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-												className: "dsh-channels-cfg__accessMeta",
-												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-													className: "dsh-channels-cfg__mono",
-													children: user.userId
-												}), ` · ${accessSourceLabel(user.source)} · ${formatAccessDate(user.addedAt)}`]
-											})]
-										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "dsh-channels-cfg__btn",
-											disabled,
-											onClick: () => onRemoveUser(user.userId),
-											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessRemove
-										})]
-									}, user.userId))
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "dsh-channels-cfg__accessAdd",
-									children: [
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-											type: "text",
-											className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
-											value: userUserId,
-											placeholder: PANEL_COPY.accessUserIdPlaceholder,
-											"aria-label": PANEL_COPY.accessUserIdPlaceholder,
-											disabled,
-											onChange: (event) => setUserUserId(event.target.value)
-										}),
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-											type: "text",
-											className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
-											value: userName,
-											placeholder: PANEL_COPY.accessUserNamePlaceholder,
-											"aria-label": PANEL_COPY.accessUserNamePlaceholder,
-											disabled,
-											onChange: (event) => setUserName(event.target.value)
-										}),
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-											disabled: disabled || userUserId.trim() === "",
-											onClick: () => {
-												submitUser();
-											},
-											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessAddUser
-										})
-									]
-								})
-							]
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(UserWhitelist, {
+							title: PANEL_COPY.accessUsersTitle,
+							empty: PANEL_COPY.accessUsersEmpty,
+							addLabel: PANEL_COPY.accessAddUser,
+							users: access.users,
+							disabled,
+							working,
+							onAdd: onAddUser,
+							onRemove: onRemoveUser
 						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 							className: "dsh-channels-cfg__accessSection",
@@ -1521,6 +1481,91 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
+		/** One user whitelist (user `user_id` list with add/remove), shared by the access and wiki tabs. */
+		function UserWhitelist(props) {
+			const { title, empty, addLabel, users, disabled, working, onAdd, onRemove } = props;
+			const [userUserId, setUserUserId] = (0, react.useState)("");
+			const [userName, setUserName] = (0, react.useState)("");
+			const submitUser = async () => {
+				if (userUserId.trim() === "") return;
+				if (await onAdd(userUserId, userName)) {
+					setUserUserId("");
+					setUserName("");
+				}
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-channels-cfg__accessSection",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__labelRow",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__label",
+							children: title
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							className: "dsh-channels-cfg__cardMeta",
+							children: [users.length, " 个"]
+						})]
+					}),
+					users.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__help",
+						children: empty
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+						className: "dsh-channels-cfg__accessList",
+						children: users.map((user) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+							className: "dsh-channels-cfg__accessRow",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+								className: "dsh-channels-cfg__accessMain",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: user.name ?? user.userId }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+									className: "dsh-channels-cfg__accessMeta",
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dsh-channels-cfg__mono",
+										children: user.userId
+									}), ` · ${accessSourceLabel(user.source)} · ${formatAccessDate(user.addedAt)}`]
+								})]
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-channels-cfg__btn",
+								disabled,
+								onClick: () => onRemove(user.userId),
+								children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessRemove
+							})]
+						}, user.userId))
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__accessAdd",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								type: "text",
+								className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
+								value: userUserId,
+								placeholder: PANEL_COPY.accessUserIdPlaceholder,
+								"aria-label": PANEL_COPY.accessUserIdPlaceholder,
+								disabled,
+								onChange: (event) => setUserUserId(event.target.value)
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								type: "text",
+								className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
+								value: userName,
+								placeholder: PANEL_COPY.accessUserNamePlaceholder,
+								"aria-label": PANEL_COPY.accessUserNamePlaceholder,
+								disabled,
+								onChange: (event) => setUserName(event.target.value)
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
+								disabled: disabled || userUserId.trim() === "",
+								onClick: () => {
+									submitUser();
+								},
+								children: working ? PANEL_COPY.accessWorking : addLabel
+							})
+						]
+					})
+				]
+			});
+		}
 		//#endregion
 		//#region src/client/panel/access-tab.tsx
 		/**
@@ -2178,15 +2223,108 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/panel/analyze-token-card.tsx
+		/**
+		* 日志分析接口令牌编辑器：值经 Host 的 DSH 凭据服务写入本机凭据库，面板只显示
+		* 「已配置 / 未配置」，不回显已存值；保存或移除后下一次接口请求即生效，不触发重连。
+		*
+		* @module dsh-channels/client/panel/analyze-token-card
+		*/
+		function AnalyzeTokenCard(props) {
+			const { panel, token } = props;
+			const state = panel.config.credentials.analyzeToken;
+			const disabled = token.busy !== null || token.locked || !state.writable;
+			const issue = token.issues.find((item) => item.key === "analyzeToken");
+			const inputClass = `dsh-channels-cfg__input${issue === void 0 ? "" : " dsh-channels-cfg__input--invalid"}`;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsh-channels-cfg__card",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__cardHead",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__cardTitle",
+							children: PANEL_COPY.analyzeTokenCard
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: `dsh-channels-cfg__badge dsh-channels-cfg__badge--${state.configured ? "ok" : "muted"}`,
+							children: state.configured ? PANEL_COPY.credentialConfigured : PANEL_COPY.credentialMissing
+						})]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__help",
+						children: PANEL_COPY.analyzeTokenCardHelp
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__field",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-channels-cfg__label",
+								children: PANEL_COPY.analyzeTokenLabel
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dsh-channels-cfg__cred",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "password",
+									className: inputClass,
+									value: token.value,
+									placeholder: PANEL_COPY.analyzeTokenPlaceholder,
+									autoComplete: "new-password",
+									"aria-label": PANEL_COPY.analyzeTokenLabel,
+									disabled,
+									onChange: (event) => token.onChange(event.target.value)
+								}), state.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsh-channels-cfg__btn",
+									disabled,
+									onClick: token.onClear,
+									children: token.busy === "credentials-clear" ? PANEL_COPY.removingCredential : PANEL_COPY.removeCredential
+								}) : null]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+								className: "dsh-channels-cfg__help",
+								children: [
+									PANEL_COPY.credentialsRef,
+									"：",
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dsh-channels-cfg__mono",
+										children: state.ref
+									}),
+									state.source === void 0 ? "" : ` · ${state.source}`
+								]
+							}),
+							issue === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-channels-cfg__fieldError",
+								children: issue.message
+							})
+						]
+					}),
+					state.writable ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__fieldError",
+						children: PANEL_COPY.credentialReadOnly
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__footer",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
+							onClick: token.onSave,
+							disabled: disabled || token.value.trim() === "",
+							children: token.busy === "credentials" ? PANEL_COPY.savingCredentials : PANEL_COPY.saveAnalyzeToken
+						})
+					})
+				]
+			});
+		}
+		//#endregion
 		//#region src/client/panel/sessions-tab.tsx
 		/**
 		* 「会话与行为」tab：行为 + 内容与附件两组字段（私聊/群聊触发方式、
-		* 首次引导、权限切换、附件接收）。表单字段完全由 Host 描述驱动。
+		* 首次引导、权限切换、附件接收、日志分析接口）。表单字段完全由 Host 描述驱动；
+		* 日志分析接口令牌是凭据，单独一张卡片。
 		*
 		* @module dsh-channels/client/panel/sessions-tab
 		*/
 		function SessionsTab(props) {
-			const { form } = props;
+			const { form, analyzeToken } = props;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsh-channels-cfg__tabBody",
 				children: [
@@ -2198,6 +2336,74 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
 						form,
 						tab: "sessions"
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AnalyzeTokenCard, {
+						panel: form.panel,
+						token: analyzeToken
+					})
+				]
+			});
+		}
+		//#endregion
+		//#region src/client/panel/wiki-tab.tsx
+		/**
+		* 「知识库」tab：知识库工具字段表单（读取/写入开关、知识库范围）+ 知识库
+		* 白名单卡。表单保存走全局 draft，白名单增删是独立即时 mutation。
+		*
+		* @module dsh-channels/client/panel/wiki-tab
+		*/
+		function WikiTab(props) {
+			const { form, accessNotice, accessError, onAddUser, onRemoveUser } = props;
+			const { access } = form.panel;
+			const disabled = form.busy !== null || form.locked || !access.loaded;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-channels-cfg__tabBody",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TabHelp, { text: PANEL_COPY.wikiTabHelp }),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsCard, {
+						form,
+						groups: TAB_FIELD_GROUPS.wiki
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
+						form,
+						tab: "wiki"
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+						className: "dsh-channels-cfg__card",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dsh-channels-cfg__cardHead",
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsh-channels-cfg__cardTitle",
+									children: PANEL_COPY.wikiUsersCard
+								})
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-channels-cfg__help",
+								children: PANEL_COPY.wikiUsersHelp
+							}),
+							!access.loaded ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(EmptyState, { text: PANEL_COPY.accessNotLoaded }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UserWhitelist, {
+								title: PANEL_COPY.wikiUsersCard,
+								empty: PANEL_COPY.wikiUsersEmpty,
+								addLabel: PANEL_COPY.accessAddUser,
+								users: access.wikiUsers,
+								disabled,
+								working: form.busy === "access",
+								onAdd: onAddUser,
+								onRemove: onRemoveUser
+							}),
+							accessNotice === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
+								role: "status",
+								"aria-live": "polite",
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: accessNotice })
+							}),
+							accessError === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-channels-cfg__fieldError",
+								role: "alert",
+								children: accessError
+							})
+						]
 					})
 				]
 			});
@@ -2250,6 +2456,7 @@ window.__ModuleLoader__.load({
 			const [pollError, setPollError] = (0, react.useState)(null);
 			const [appIdInput, setAppIdInput] = (0, react.useState)("");
 			const [appSecretInput, setAppSecretInput] = (0, react.useState)("");
+			const [analyzeTokenInput, setAnalyzeTokenInput] = (0, react.useState)("");
 			const [catalog, setCatalog] = (0, react.useState)(null);
 			const [catalogBusy, setCatalogBusy] = (0, react.useState)(false);
 			const [accessNotice, setAccessNotice] = (0, react.useState)(null);
@@ -2278,6 +2485,7 @@ window.__ModuleLoader__.load({
 					setDraft({});
 					setAppIdInput("");
 					setAppSecretInput("");
+					setAnalyzeTokenInput("");
 				} catch (error) {
 					setLoad({
 						phase: "error",
@@ -2664,18 +2872,19 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [applyAccess]);
-			const onAddAccessUser = (0, react.useCallback)(async (userId, name) => {
+			/** Add one user to a whitelist; resolves true when the input should clear. */
+			const addUser = (0, react.useCallback)(async (add, userId, name, notice) => {
 				setBusy("access");
 				setAccessError(null);
 				setAccessNotice(null);
 				try {
-					const result = await addAccessUser(userId, name);
+					const result = await add(userId, name);
 					if (!result.ok) {
 						setAccessError(result.error);
 						return false;
 					}
 					applyAccess(result.access);
-					setAccessNotice(PANEL_COPY.accessUserAdded);
+					setAccessNotice(notice);
 					return true;
 				} catch (error) {
 					setAccessError(messageOf(error));
@@ -2684,18 +2893,18 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [applyAccess]);
-			const onRemoveAccessUser = (0, react.useCallback)(async (userId) => {
+			const removeUser = (0, react.useCallback)(async (remove, userId, notice) => {
 				setBusy("access");
 				setAccessError(null);
 				setAccessNotice(null);
 				try {
-					const result = await removeAccessUser(userId);
+					const result = await remove(userId);
 					if (!result.ok) {
 						setAccessError(result.error);
 						return;
 					}
 					applyAccess(result.access);
-					setAccessNotice(PANEL_COPY.accessUserRemoved);
+					setAccessNotice(notice);
 				} catch (error) {
 					setAccessError(messageOf(error));
 				} finally {
@@ -2759,6 +2968,40 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [appIdInput, appSecretInput]);
+			/** Save the analyze API token; it applies to the next request, no reconnect. */
+			const onSaveAnalyzeToken = (0, react.useCallback)(async () => {
+				if (analyzeTokenInput.trim() === "") return;
+				setBusy("credentials");
+				setNotice(null);
+				try {
+					const result = await saveCredentials({ analyzeToken: analyzeTokenInput });
+					if (!result.ok) {
+						setNotice({
+							kind: "error",
+							text: result.error,
+							issues: result.issues
+						});
+						return;
+					}
+					setLoad({
+						phase: "ready",
+						panel: result.panel
+					});
+					setStatus(result.panel.status);
+					setAnalyzeTokenInput("");
+					setNotice({
+						kind: "ok",
+						text: PANEL_COPY.analyzeTokenSaved
+					});
+				} catch (error) {
+					setNotice({
+						kind: "error",
+						text: messageOf(error)
+					});
+				} finally {
+					setBusy(null);
+				}
+			}, [analyzeTokenInput]);
 			const onClearCredential = (0, react.useCallback)(async (field) => {
 				if (!(typeof window.confirm === "function" ? window.confirm(PANEL_COPY.credentialRemoveConfirm) : true)) return;
 				setBusy("credentials-clear");
@@ -2780,7 +3023,7 @@ window.__ModuleLoader__.load({
 					setStatus(result.panel.status);
 					setNotice({
 						kind: "ok",
-						text: result.reconnect === "pending" ? PANEL_COPY.credentialRemovedPending : PANEL_COPY.credentialRemoved
+						text: field === "analyzeToken" ? PANEL_COPY.analyzeTokenRemoved : result.reconnect === "pending" ? PANEL_COPY.credentialRemovedPending : PANEL_COPY.credentialRemoved
 					});
 				} catch (error) {
 					setNotice({
@@ -2862,6 +3105,26 @@ window.__ModuleLoader__.load({
 				onClearCredential,
 				onSaveCredentials
 			]);
+			const analyzeToken = (0, react.useMemo)(() => ({
+				value: analyzeTokenInput,
+				issues,
+				busy,
+				locked: hostBusy,
+				onChange: setAnalyzeTokenInput,
+				onSave: () => {
+					onSaveAnalyzeToken();
+				},
+				onClear: () => {
+					onClearCredential("analyzeToken");
+				}
+			}), [
+				analyzeTokenInput,
+				busy,
+				hostBusy,
+				issues,
+				onClearCredential,
+				onSaveAnalyzeToken
+			]);
 			if (load.phase === "loading") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 				className: "dsh-channels-cfg",
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -2921,7 +3184,10 @@ window.__ModuleLoader__.load({
 									onReconnect();
 								}
 							}) : null,
-							activeTab === "sessions" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SessionsTab, { form }) : null,
+							activeTab === "sessions" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SessionsTab, {
+								form,
+								analyzeToken
+							}) : null,
 							activeTab === "model" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ModelTab, {
 								form,
 								catalogBusy
@@ -2935,14 +3201,23 @@ window.__ModuleLoader__.load({
 								onRemoveGroup: (chatId) => {
 									onRemoveAccessGroup(chatId);
 								},
-								onAddUser: onAddAccessUser,
+								onAddUser: (userId, name) => addUser(addAccessUser, userId, name, PANEL_COPY.accessUserAdded),
 								onRemoveUser: (userId) => {
-									onRemoveAccessUser(userId);
+									removeUser(removeAccessUser, userId, PANEL_COPY.accessUserRemoved);
 								},
 								onResolveRequest: (token, decision) => {
 									onResolveAccessRequest(token, decision);
 								}
 							}) : null,
+							activeTab === "wiki" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WikiTab, {
+								form,
+								accessNotice,
+								accessError,
+								onAddUser: (userId, name) => addUser(addWikiUser, userId, name, PANEL_COPY.wikiUserAdded),
+								onRemoveUser: (userId) => {
+									removeUser(removeWikiUser, userId, PANEL_COPY.wikiUserRemoved);
+								}
+							}) : null,
 							activeTab === "advanced" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AdvancedTab, {
 								form,
 								onClear: () => {