@modesto_ma/dsh-channels 0.5.0 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modesto_ma/dsh-channels",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "DeepSeek Harness (DSH) 飞书渠道插件：一个 dsh 实例对应一个飞书机器人，私聊/群聊/话题群 @ 触发会话，话题绑定 session，卡片 2.0 流式回复；Web 左侧栏提供「飞书渠道」状态与常用配置面板",
   "repository": {
     "type": "git",
@@ -90,7 +90,7 @@
     "@semantic-release/release-notes-generator": "^14.1.1",
     "@types/node": "^26.6.5",
     "@types/react": "~18.3.31",
-    "conventional-changelog-conventionalcommits": "10.3.0",
+    "conventional-changelog-conventionalcommits": "9.3.1",
     "react": "18.3.1",
     "semantic-release": "^25.0.9",
     "tsdown": "0.22.2",

package/src/analyze/contract.ts

@@ -1,7 +1,7 @@
 /**
  * Wire contract of the log-platform analyze API.
  *
- * `POST /dsh-channels/analyze` on the dedicated `analyzeListen` port, with
+ * `POST /api/dsh-channels.logalyze` on the DSH Web server, with
  * `Authorization: Bearer <token>`, an `Idempotency-Key` header, and a JSON
  * body naming the requester, the trigger time, the subject (application +
  * error code), the log-platform detail pages, the target group, and the
@@ -17,8 +17,12 @@ import { createHash } from 'node:crypto'
 import { z } from 'zod'
 import { FEISHU_USER_ID_PATTERN } from '../domain.ts'
 
-/** The only path the analyze listener serves. */
-export const ANALYZE_ROUTE = '/dsh-channels/analyze'
+/**
+ * Exact DSH Web route of the analyze API. It follows the host's plain-HTTP
+ * `/api/<name>.<method>` naming; an exact route wins over the `/api` RPC prefix
+ * route, so the request carries this API's bearer token, not a DSH login.
+ */
+export const ANALYZE_ROUTE = '/api/dsh-channels.logalyze'
 
 /** Largest accepted request body (the prompt dominates it). */
 export const ANALYZE_MAX_BODY_BYTES = 1024 * 1024

package/src/analyze/launcher.ts

@@ -85,9 +85,28 @@ export class AnalyzeLauncher implements AnalyzeHandler {
   private readonly accepting = new Map<string, PendingAccept>()
   /** Background analyses still starting (drained on shutdown). */
   private readonly running = new Set<Promise<void>>()
+  /** Whether requests are admitted: from {@link open} after start until {@link close}. */
+  private admitting = false
 
   constructor(private readonly deps: AnalyzeLauncherDeps) {}
 
+  /**
+   * Start admitting requests. Called at channel start after
+   * {@link markInterrupted}, so a new request is never marked interrupted.
+   */
+  open(): void {
+    this.admitting = true
+  }
+
+  /** Stop admitting requests (503) ahead of shutdown. */
+  close(): void {
+    this.admitting = false
+  }
+
+  enabled(): boolean {
+    return this.deps.config.analyzeEnabled
+  }
+
   async token(): Promise<string | undefined> {
     return await this.deps.resolveToken()
   }
@@ -109,17 +128,21 @@ export class AnalyzeLauncher implements AnalyzeHandler {
   }
 
   /**
-   * Wait for every background analysis that is still starting. Called after
-   * `started` turns false, so each one ends on its failure card or, when its
-   * first prompt was already sent, as an ordinary topic.
+   * Wait for every acceptance in flight, then every background analysis that
+   * is still starting. Called after `started` turns false, so each one ends on
+   * its failure card or, when its first prompt was already sent, as an
+   * ordinary topic.
    */
   async drain(): Promise<void> {
+    // Acceptances still sending the root card or writing the record finish
+    // first; each one adds its launch to `running` before it settles.
+    await Promise.allSettled([...this.accepting.values()].map(pending => pending.response))
     await Promise.allSettled([...this.running])
   }
 
   /**
    * Mark every analysis still `running` as interrupted, on its card and in
-   * its record. Called at channel start before the listener opens, so each
+   * its record. Called at channel start before admission opens, so each
    * such record belongs to a previous instance whose first turn never
    * settled. A card that cannot be updated (deleted, recalled) is logged and
    * still recorded as interrupted, so it is not retried on every start.
@@ -141,7 +164,7 @@ export class AnalyzeLauncher implements AnalyzeHandler {
   private async accept(request: AnalyzeRequest, key: string, bodyHash: string): Promise<AnalyzeResponse> {
     const channel = this.deps.channel()
     const domain = this.deps.domain()
-    if (!this.deps.started() || channel === undefined || domain === undefined) {
+    if (!this.admitting || !this.deps.started() || channel === undefined || domain === undefined) {
       return refused(503, '飞书渠道尚未连接，请稍后重试')
     }
     const stored = domain.analyzeRequests.get(key)

package/src/analyze/server.ts

@@ -1,26 +1,41 @@
 /**
- * The analyze API's dedicated HTTP listener.
+ * The analyze API's HTTP route on the DSH Web server.
  *
- * Serves exactly `POST /dsh-channels/analyze` (see `./contract.ts`) on the
- * `analyzeListen` address. This module owns the transport-level checks, in
- * order: path, method, bearer token, `Idempotency-Key`, media type, body size,
- * and JSON validation; everything after validation belongs to the
- * {@link AnalyzeHandler}. Bodies, tokens, and prompts are never logged.
+ * Registers the exact route `POST /api/dsh-channels.logalyze` (see
+ * `./contract.ts`) on the host `webServer`; hosts without one (headless) have
+ * no analyze API. This module owns the transport-level checks, in order:
+ * path, the `analyzeEnabled` switch, method, bearer token, `Idempotency-Key`,
+ * media type, body size, and JSON validation; everything after validation
+ * belongs to the {@link AnalyzeHandler}. Bodies, tokens, and prompts are never
+ * logged.
  *
  * @module dsh-channels/analyze/server
  */
 
 import { createHash, timingSafeEqual } from 'node:crypto'
-import { createServer } from 'node:http'
-import type { IncomingMessage, Server, ServerResponse } from 'node:http'
-import type { AddressInfo } from 'node:net'
+import type { IncomingMessage, ServerResponse } from 'node:http'
+import type { HostContext } from '../dsh-types.ts'
 import {
   ANALYZE_MAX_BODY_BYTES, ANALYZE_ROUTE, IDEMPOTENCY_KEY_PATTERN, parseAnalyzeRequest,
 } from './contract.ts'
 import type { AnalyzeRequest, AnalyzeResponse } from './contract.ts'
 
-/** The business side of the listener. */
+/** The narrow `ctx.webServer` surface the analyze route registers into. */
+export interface HostWebServer {
+  register(route: {
+    kind: 'exact'
+    path: string
+    handler: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>
+  }): () => void
+}
+
+/** The business side of the route. */
 export interface AnalyzeHandler {
+  /**
+   * Whether the API is switched on (`analyzeEnabled`), read per request.
+   * @returns false to answer every request with 404.
+   */
+  enabled(): boolean
   /**
    * Resolve the expected bearer token for this request.
    * @returns the token, or undefined when it is not configured.
@@ -35,14 +50,6 @@ export interface AnalyzeHandler {
   analyze(request: AnalyzeRequest, idempotencyKey: string): Promise<AnalyzeResponse>
 }
 
-/** A bound analyze listener. */
-export interface AnalyzeServer {
-  /** The bound address (the real port when `0` was requested). */
-  readonly address: AddressInfo
-  /** Stop accepting connections and close idle ones. */
-  close(): Promise<void>
-}
-
 class HttpError extends Error {
   constructor(readonly status: number, message: string) {
     super(message)
@@ -112,6 +119,10 @@ export async function handleAnalyzeHttp(
     refuse(res, 404, '未知路径')
     return
   }
+  if (!handler.enabled()) {
+    refuse(res, 404, '日志分析接口未开启，请在设置面板「高级 → 日志分析接口」打开开关')
+    return
+  }
   if ((req.method ?? 'GET').toUpperCase() !== 'POST') {
     refuse(res, 405, '只接受 POST', { allow: 'POST' })
     return
@@ -155,47 +166,42 @@ export async function handleAnalyzeHttp(
   send(res, await handler.analyze(parsed.value, idempotencyKey))
 }
 
-/** Split `host:port` (`[v6]:port` allowed) into listen arguments. */
-export function parseListenAddress(listen: string): { host: string; port: number } {
-  const separator = listen.lastIndexOf(':')
-  const host = listen.slice(0, separator).replace(/^\[(.*)\]$/u, '$1')
-  return { host, port: Number(listen.slice(separator + 1)) }
-}
-
 /**
- * Bind the analyze listener.
- * @param listen - `host:port` address (`analyzeListen`).
+ * Register the analyze route on the host Web server once it is available.
+ * Requests skip the DSH login gate on purpose: the bearer token is this API's
+ * only credential.
+ * @param ctx - the plugin context.
  * @param handler - the business side.
  * @param warn - diagnostics sink for unexpected handler failures.
- * @returns the bound server; rejects when the address cannot be bound.
  */
-export async function startAnalyzeServer(
-  listen: string,
+export function mountAnalyzeRoute(
+  ctx: HostContext,
   handler: AnalyzeHandler,
   warn: (message: string, ...args: unknown[]) => void,
-): Promise<AnalyzeServer> {
-  const server: Server = createServer((req, res) => {
-    handleAnalyzeHttp(req, res, handler).catch((error: unknown) => {
-      warn('dsh-channels: analyze request failed: %s', String(error))
-      if (!res.headersSent) refuse(res, 500, `分析请求处理失败：${String(error)}`)
-      else res.destroy()
-    })
-  })
-  const { host, port } = parseListenAddress(listen)
-  await new Promise<void>((resolve, reject) => {
-    const onError = (error: Error): void => { reject(error) }
-    server.once('error', onError)
-    server.listen(port, host, () => {
-      server.off('error', onError)
-      resolve()
-    })
-  })
-  server.on('error', (error) => { warn('dsh-channels: analyze listener error: %s', String(error)) })
-  return {
-    address: server.address() as AddressInfo,
-    close: () => new Promise<void>((resolve) => {
-      server.close(() => { resolve() })
-      server.closeIdleConnections()
-    }),
+): void {
+  const attach = (webCtx: HostContext): void => {
+    const server = webCtx.get?.('webServer') as HostWebServer | undefined
+    if (server === undefined) return
+    webCtx.effect(() => server.register({
+      kind: 'exact',
+      path: ANALYZE_ROUTE,
+      handler: async (req, res) => {
+        try {
+          await handleAnalyzeHttp(req, res, handler)
+        } catch (error) {
+          warn('dsh-channels: analyze request failed: %s', String(error))
+          if (!res.headersSent) refuse(res, 500, `分析请求处理失败：${String(error)}`)
+          else res.destroy()
+        }
+      },
+    }), 'dsh-channels: analyze route')
+  }
+  const inject = (ctx as {
+    inject?: (dependencies: string[], callback: (child: HostContext) => void) => unknown
+  }).inject
+  if (typeof inject === 'function') {
+    inject.call(ctx, ['webServer'], attach)
+    return
   }
+  attach(ctx)
 }

package/src/client/api.ts

@@ -1,24 +1,29 @@
 /**
  * Same-origin HTTP client for the settings panel. No typert contract: the
- * Host half registers plain exact routes and this module fetches them.
+ * Host half registers exact DSH `/api` Fetch routes and this module fetches them.
  *
  * @module dsh-channels/client/api
  */
 
 import {
-  ACCESS_GROUPS_ROUTE,
-  ACCESS_REQUESTS_ROUTE,
   ACCESS_ROUTE,
-  ACCESS_USERS_ROUTE,
-  ACCESS_WIKI_USERS_ROUTE,
+  ADD_ACCESS_GROUP_ROUTE,
+  ADD_ACCESS_USER_ROUTE,
+  ADD_WIKI_USER_ROUTE,
   CATALOG_ROUTE,
-  CONFIG_ROUTE,
-  CREDENTIALS_ROUTE,
+  CLEAR_CONFIG_ROUTE,
+  CLEAR_CREDENTIAL_ROUTE,
   PANEL_ROUTE,
   PICK_DIRECTORY_ROUTE,
   PROFILES_MAX_IDS,
   PROFILES_ROUTE,
   RECONNECT_ROUTE,
+  REMOVE_ACCESS_GROUP_ROUTE,
+  REMOVE_ACCESS_USER_ROUTE,
+  REMOVE_WIKI_USER_ROUTE,
+  RESOLVE_ACCESS_REQUEST_ROUTE,
+  SAVE_CONFIG_ROUTE,
+  SAVE_CREDENTIALS_ROUTE,
   SESSION_ORIGIN_ROUTE,
   STATUS_ROUTE,
 } from '../settings/contract.ts'
@@ -138,8 +143,8 @@ export async function fetchCatalog(provider?: string, model?: string): Promise<C
 
 /** Persist a partial edit. Validation failures come back as `{ok:false}`. */
 export async function saveConfig(values: EditableValues): Promise<SaveConfigResponse> {
-  const response = await request(CONFIG_ROUTE, {
-    method: 'PUT',
+  const response = await request(SAVE_CONFIG_ROUTE, {
+    method: 'POST',
     headers: { 'content-type': 'application/json' },
     body: JSON.stringify({ values }),
   })
@@ -158,7 +163,7 @@ export async function saveConfig(values: EditableValues): Promise<SaveConfigResp
 
 /** Drop every Web override and return the refreshed panel. */
 export async function clearConfig(): Promise<ClearConfigResponse> {
-  const response = await request(CONFIG_ROUTE, { method: 'DELETE' })
+  const response = await request(CLEAR_CONFIG_ROUTE, { method: 'POST' })
   const text = await response.text()
   if (response.status === 400) {
     try {
@@ -205,8 +210,8 @@ export async function pickDirectory(): Promise<PickDirectoryResponse> {
 
 /** Store provided credential values (the request/response never carry stored values). */
 export async function saveCredentials(values: SaveCredentialsRequest): Promise<SaveCredentialsResponse> {
-  const response = await request(CREDENTIALS_ROUTE, {
-    method: 'PUT',
+  const response = await request(SAVE_CREDENTIALS_ROUTE, {
+    method: 'POST',
     headers: { 'content-type': 'application/json' },
     body: JSON.stringify(values),
   })
@@ -224,8 +229,8 @@ export async function saveCredentials(values: SaveCredentialsRequest): Promise<S
 
 /** Remove the stored value behind one credential reference. */
 export async function clearCredential(field: CredentialField): Promise<ClearCredentialResponse> {
-  const response = await request(CREDENTIALS_ROUTE, {
-    method: 'DELETE',
+  const response = await request(CLEAR_CREDENTIAL_ROUTE, {
+    method: 'POST',
     headers: { 'content-type': 'application/json' },
     body: JSON.stringify({ field }),
   })
@@ -247,13 +252,9 @@ export async function fetchAccess(): Promise<AccessWire> {
 }
 
 /** One access write: a 400 body already is the wire union; others throw. */
-async function mutateAccess(
-  path: string,
-  method: 'POST' | 'DELETE',
-  body: unknown,
-): Promise<AccessMutationResponse> {
+async function mutateAccess(path: string, body: unknown): Promise<AccessMutationResponse> {
   const response = await request(path, {
-    method,
+    method: 'POST',
     headers: { 'content-type': 'application/json' },
     body: JSON.stringify(body),
   })
@@ -272,43 +273,40 @@ async function mutateAccess(
 /** Authorize one group; resolves with the refreshed access snapshot. */
 export async function addAccessGroup(chatId: string, name?: string): Promise<AccessMutationResponse> {
   return mutateAccess(
-    ACCESS_GROUPS_ROUTE,
-    'POST',
+    ADD_ACCESS_GROUP_ROUTE,
     name === undefined || name === '' ? { chatId } : { chatId, name },
   )
 }
 
 /** Revoke one group authorization (takes effect on the next message). */
 export async function removeAccessGroup(chatId: string): Promise<AccessMutationResponse> {
-  return mutateAccess(ACCESS_GROUPS_ROUTE, 'DELETE', { chatId })
+  return mutateAccess(REMOVE_ACCESS_GROUP_ROUTE, { chatId })
 }
 
 /** Authorize one user `user_id` (global across authorized groups). */
 export async function addAccessUser(userId: string, name?: string): Promise<AccessMutationResponse> {
   return mutateAccess(
-    ACCESS_USERS_ROUTE,
-    'POST',
+    ADD_ACCESS_USER_ROUTE,
     name === undefined || name === '' ? { userId } : { userId, name },
   )
 }
 
 /** Revoke one user authorization (takes effect on the next message). */
 export async function removeAccessUser(userId: string): Promise<AccessMutationResponse> {
-  return mutateAccess(ACCESS_USERS_ROUTE, 'DELETE', { userId })
+  return mutateAccess(REMOVE_ACCESS_USER_ROUTE, { userId })
 }
 
 /** Add one user `user_id` to the wiki whitelist. */
 export async function addWikiUser(userId: string, name?: string): Promise<AccessMutationResponse> {
   return mutateAccess(
-    ACCESS_WIKI_USERS_ROUTE,
-    'POST',
+    ADD_WIKI_USER_ROUTE,
     name === undefined || name === '' ? { userId } : { userId, name },
   )
 }
 
 /** Remove one user from the wiki whitelist (takes effect on the next wiki tool call). */
 export async function removeWikiUser(userId: string): Promise<AccessMutationResponse> {
-  return mutateAccess(ACCESS_WIKI_USERS_ROUTE, 'DELETE', { userId })
+  return mutateAccess(REMOVE_WIKI_USER_ROUTE, { userId })
 }
 
 /** Settle one pending authorization request (same resolver as the Feishu card). */
@@ -316,5 +314,5 @@ export async function resolveAccessRequest(
   token: string,
   decision: 'allow' | 'deny',
 ): Promise<AccessMutationResponse> {
-  return mutateAccess(ACCESS_REQUESTS_ROUTE, 'POST', { token, decision })
+  return mutateAccess(RESOLVE_ACCESS_REQUEST_ROUTE, { token, decision })
 }

package/src/client/catalog.ts

@@ -1,6 +1,6 @@
 /**
  * 浏览器半区的设置面板选择器目录折叠：把 Host 下发的字段描述与实时目录
- * （`/dsh-channels/catalog`）合成通用表单需要的 select 描述。
+ * （`/api/dsh-channels.catalog`）合成通用表单需要的 select 描述。
  *
  * 拆成独立模块（不含 JSX/React）以便单测；`panel/index.tsx` 只负责串起状态与渲染。
  *

package/src/client/panel/advanced-tab.tsx

@@ -1,5 +1,5 @@
 /**
- * 「高级」tab：日志分析接口（监听地址字段 + 访问令牌凭据行）、SDK 日志级别
+ * 「高级」tab：日志分析接口（开关 + 访问令牌凭据行）、SDK 日志级别
  * 与 Web 覆盖文件（「恢复 profile 配置」删除整个覆盖层，不走 draft）。
  *
  * @module dsh-channels/client/panel/advanced-tab

package/src/config.ts

@@ -83,9 +83,6 @@ export const DEFAULT_PROMPT_CONTEXT_TIMEOUT_MS = 3_000
 /** Conventional credential reference holding the log-platform analyze API bearer token. */
 export const DEFAULT_ANALYZE_TOKEN_REF = 'DSH_CHANNELS_ANALYZE_TOKEN'
 
-/** `host:port` listen address of the analyze API (`[v6]:port` for IPv6 literals). */
-export const ANALYZE_LISTEN_PATTERN = /^(?:\[[0-9A-Fa-f:.]+\]|[A-Za-z0-9.-]+):(?:[1-9][0-9]{0,4})$/u
-
 /** A credential reference: `FEISHU_APP_ID`-style name resolved through ctx.credentials. */
 const credentialRefSchema = z.string().regex(
   CREDENTIAL_REF_PATTERN,
@@ -425,17 +422,11 @@ export const configSchema = z.object({
    */
   questionTimeoutMs: z.number().int().min(10_000).max(3_600_000).default(DEFAULT_QUESTION_TIMEOUT_MS),
   /**
-   * Listen address (`host:port`, e.g. `0.0.0.0:3090`) of the log-platform
-   * analyze API: a dedicated HTTP listener serving only
-   * `POST /dsh-channels/analyze`, separate from the DSH Web port. Unset
-   * (default) keeps the API off. The listener runs while the Feishu connection
-   * is up and is rebound on reconnect.
+   * Switch for the log-platform analyze API (`POST /api/dsh-channels.logalyze`
+   * on the DSH Web server). Off (default) answers 404; read per request, so
+   * toggling it needs no reconnect. Needs a host with a Web server.
    */
-  analyzeListen: z.string().trim().regex(
-    ANALYZE_LISTEN_PATTERN,
-    'must be host:port, e.g. 0.0.0.0:3090 or 127.0.0.1:3090',
-  ).refine(value => Number(value.slice(value.lastIndexOf(':') + 1)) <= 65_535, 'port must be 1-65535')
-    .optional(),
+  analyzeEnabled: z.boolean().default(false),
   /**
    * Credential reference holding the analyze API bearer token (defaults to
    * `DSH_CHANNELS_ANALYZE_TOKEN`). Resolved per request, so rotating the value

package/src/health.ts

@@ -55,8 +55,6 @@ export interface HealthSnapshotInput {
   routeCount: number
   liveAgentCount: number
   inflightTurnCount: number
-  /** Why the configured analyze listener could not bind; absent when it is bound or not configured. */
-  analyzeListenError?: string
 }
 
 export interface HealthSnapshot extends Omit<HealthSnapshotInput, 'fibers' | 'botOpenId'> {
@@ -150,7 +148,6 @@ export function foldHealthSnapshot(input: HealthSnapshotInput): HealthSnapshot {
     || fibers.pending > 0
     || fibers.loading > 0
     || fibers.unloading > 0
-    || input.analyzeListenError !== undefined
   ) {
     level = 'degraded'
   } else {
@@ -179,10 +176,6 @@ export function foldHealthSnapshot(input: HealthSnapshotInput): HealthSnapshot {
     )
   }
 
-  if (input.analyzeListenError !== undefined) {
-    reasons.push(`日志分析接口监听失败：${input.analyzeListenError}`)
-  }
-
   return {
     level,
     fibers,
@@ -193,7 +186,6 @@ export function foldHealthSnapshot(input: HealthSnapshotInput): HealthSnapshot {
     routeCount: input.routeCount,
     liveAgentCount: input.liveAgentCount,
     inflightTurnCount: input.inflightTurnCount,
-    ...(input.analyzeListenError === undefined ? {} : { analyzeListenError: input.analyzeListenError }),
     inactiveFibers: inactive,
     inactiveTotal,
     reasons,
@@ -237,9 +229,5 @@ export function buildHealthCard(snapshot: HealthSnapshot): object {
       tag: 'markdown',
       content: `**dsh-channels**\n${snapshot.started ? 'started' : 'stopped'} · 持久化路由 ${snapshot.routeCount} · live Agent ${snapshot.liveAgentCount} · in-flight turn ${snapshot.inflightTurnCount}`,
     },
-    ...(snapshot.analyzeListenError === undefined ? [] : [{
-      tag: 'markdown',
-      content: `**日志分析接口**\n❌ 监听失败：${snapshot.analyzeListenError}`,
-    }]),
   ])
 }

package/src/host/agent.ts

@@ -35,10 +35,31 @@ export interface AgentRequestConfig {
 
 /** Agent-scoped request override installed before the first prompt assembly. */
 export type AgentRequestListener = (
-  payload: { turn: number; step: number; signal: AbortSignal },
+  payload: { turn: number; step: number; signal: AbortSignal; agent?: Agent },
   next: () => Promise<AgentRequestConfig>,
 ) => Promise<AgentRequestConfig>
 
+/** Complete provider, model, and optional reasoning effort for one Session's model steps. */
+export interface ModelSelection {
+  readonly provider: string
+  readonly model: string
+  /** Absent means the adapter/provider default effort. */
+  readonly reasoningEffort?: string
+}
+
+/**
+ * Agent-owned durable model choice (`agent.model`, DSH 0.2.2-alpha.1 and
+ * later). On these hosts an `agent/request` listener that changes provider,
+ * model, or reasoning effort fails the step, so a switch must go through
+ * `select()` before the next step starts.
+ */
+export interface AgentModel {
+  /** Choice for the next step: recorded selection, then last request, then live options. */
+  current(): Readonly<ModelSelection> | undefined
+  /** Record the next step's complete selection (`model/selection`); an equal recorded choice is a no-op. */
+  select(selection: Readonly<ModelSelection>): void
+}
+
 /** Cordis listener placement used to make an explicit channel override outermost. */
 export interface AgentRequestListenerOptions {
   prepend?: boolean
@@ -133,6 +154,8 @@ export interface AgentContext {
 export interface Agent {
   readonly id: SessionId
   readonly options: AgentOptions
+  /** Durable model choice; absent on DSH 0.2.1 hosts, which route through `agent/request`. */
+  readonly model?: AgentModel
   readonly session: Session
   readonly status: 'idle' | 'running'
   readonly inbox: {

package/src/index.ts

@@ -23,6 +23,7 @@ import { defaultChannelFactory } from './feishu-channel.ts'
 import type { ChannelFactory } from './feishu-channel.ts'
 import { OverlayStore, defaultOverlayPath } from './settings/overlay.ts'
 import { mountSettingsRoutes } from './settings/routes.ts'
+import { mountAnalyzeRoute } from './analyze/server.ts'
 import { SettingsSurface } from './settings/surface.ts'
 import { createHostCatalog } from './settings/catalog.ts'
 import { createSettingsDirectoryPicker } from './settings/directory-picker.ts'
@@ -41,7 +42,7 @@ export type * from './questions.ts'
 export type * from './settings/contract.ts'
 export * from './access/index.ts'
 export type { AccessGroupRecord, AccessRequestRecord, AccessUserRecord } from './domain.ts'
-export { CATALOG_ROUTE, CONFIG_ROUTE, CREDENTIALS_ROUTE, EDITABLE_KEYS, PANEL_COPY, PANEL_ROUTE, PICK_DIRECTORY_ROUTE, RECONNECT_ROUTE, RESTART_KEYS, STATUS_ROUTE } from './settings/contract.ts'
+export { CATALOG_ROUTE, CLEAR_CONFIG_ROUTE, CLEAR_CREDENTIAL_ROUTE, EDITABLE_KEYS, PANEL_COPY, PANEL_ROUTE, PICK_DIRECTORY_ROUTE, RECONNECT_ROUTE, RESTART_KEYS, SAVE_CONFIG_ROUTE, SAVE_CREDENTIALS_ROUTE, STATUS_ROUTE } from './settings/contract.ts'
 export type { PickDirectoryResponse } from './settings/contract.ts'
 export { defaultOverlayPath, mergeOverlay, normalizeOverlay, OverlayStore, parseOverlay, pickEditable, resolveDshHome } from './settings/overlay.ts'
 export { applyCatalog, emptyCatalog, FIELD_DESCRIPTORS, normalizeCredentialValue, SettingsSurface, withDirectoryBrowse } from './settings/surface.ts'
@@ -50,8 +51,8 @@ export { createHostCatalog } from './settings/catalog.ts'
 export type { CatalogWarn, SettingsCatalog } from './settings/catalog.ts'
 export { createSettingsDirectoryPicker } from './settings/directory-picker.ts'
 export type { HostDirectoryPickerService, SettingsDirectoryPicker } from './settings/directory-picker.ts'
-export { isSameOriginRequest, mountSettingsRoutes, registerSettingsRoutes } from './settings/routes.ts'
-export type { HostRequestGate, HostWebServer } from './settings/routes.ts'
+export { mountSettingsRoutes, registerSettingsRoutes } from './settings/routes.ts'
+export type { HostConnection, HostFetchRoute } from './settings/routes.ts'
 export type { ApprovalOutcome, ApprovalRequest, ApprovalAnswererListener, AssistantStreamFrame, AskUserQuestionAnswer, AskUserQuestionAnswerItem, AskUserQuestionItem, AskUserQuestionRequestEvent, UserQuestionAnswererListener, AgentCancelCause, SessionStatsView, TokenUsageView, ContextPressureView, SessionProjections } from './dsh-types.ts'
 export { buildCard, buildInterruptionCard, cardJsonBytes, CARD_MAX_BYTES, CARD_TARGET_BYTES, REASONING_MAX_BYTES, INTERRUPTION_NOTICE, MAX_TABLES_PER_CARD, PANEL_TITLES, PANEL_CHEVRON_TOKEN, segmentCardContent, splitBodyForCard, stripTables, tableBlocks, TRUNCATION_SUFFIX, buildApprovalCard, buildApprovalSettledCard, buildQuestionCard, buildQuestionSettledCard, MAX_QUESTION_OPTIONS } from './cards.ts'
 export { ApprovalAnswerer } from './approvals.ts'
@@ -112,7 +113,7 @@ export function apply(ctx: HostContext, config?: unknown): void {
     { warn: (message, ...args) => ctx.logger?.warn?.(message, ...args) },
   )
   const service = new FeishuService(ctx, resolved, factory, undefined, overlay)
-  // Settings routes ride the host's web server when this deployment has one.
+  // Settings routes ride DSH's authenticated `/api` channel when this deployment has one.
   // The catalog resolves the panel's model selectors from live host services;
   // the optional native directory picker backs the workspace-root「选择目录…」
   // button (absent in headless/remote compositions → plain text input).
@@ -124,6 +125,7 @@ export function apply(ctx: HostContext, config?: unknown): void {
     createHostCatalog(ctx, warn),
     createSettingsDirectoryPicker(ctx),
   ))
+  mountAnalyzeRoute(ctx, service.analyzeHandler(), warn)
   ctx.effect(() => {
     // Boot loads the Web overlay and connects only when the Feishu application
     // credentials are complete; an incomplete configuration or a failed