@modesto_ma/dsh-channels 0.7.0 → 0.8.0-beta.1

package/lib/index.js

@@ -1,4 +1,4 @@
-import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
+import { randomUUID } from "node:crypto";
 import { z } from "zod";
 import { constants, createWriteStream, promises, readFileSync } from "node:fs";
 import { access, mkdir, open, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -180,12 +180,12 @@ var AccessController = class {
 		}, this.config(), this.deps.store.snapshot()).kind === "allow";
 	}
 	/**
-	* Whether the analyze API may post into `chatId`: an authorized group, or
-	* any group in `open` access mode.
+	* Whether a `feishuTopics` launch may post into `chatId`: an authorized
+	* group, or any group in `open` access mode.
 	* @param chatId - target group chat id.
 	* @returns true when the chat is a permitted target.
 	*/
-	mayAnalyzeIn(chatId) {
+	mayLaunchIn(chatId) {
 		if (this.config().accessMode === "open") return true;
 		return this.deps.store.snapshot().groups.has(chatId);
 	}
@@ -1114,7 +1114,7 @@ const routeRecordSchema = z.object({
 	/** Sessions this topic has pointed at, oldest first. Optional for v1 compatibility. */
 	sessionHistory: z.array(sessionHistoryEntrySchema).optional(),
 	/**
-	* Group-shared route (log-platform analysis topics): every member admitted
+	* Group-shared route (topics started through `feishuTopics`): every member admitted
 	* in `chatId` may continue the Session and decide its cards, not only
 	* `senderUserId` (who then names the requester). Absent = owner-only.
 	*/
@@ -1305,36 +1305,67 @@ const processedRecordSchema = z.object({
 	/** Epoch ms when the message was accepted for processing. */
 	processedAt: z.number().int().nonnegative()
 });
+/** {@link TopicRootCard} as stored in a launch record. */
+const topicRootCardSchema = z.object({
+	title: z.string(),
+	taskName: z.string(),
+	lead: z.array(z.object({
+		text: z.string(),
+		bold: z.boolean().optional()
+	})),
+	links: z.object({
+		nameHeader: z.string(),
+		linkHeader: z.string(),
+		rows: z.array(z.object({
+			name: z.string(),
+			url: z.string()
+		}))
+	}).optional()
+});
 /**
-* One accepted analyze API request, keyed by its `Idempotency-Key`. Kept
-* forever: a retried key returns the stored response instead of posting a
-* second analysis, and a reused key with a different body is refused.
+* Root card content written by plugin versions before the `feishuTopics`
+* service (the built-in log-platform analyze API). Read only; converted by
+* {@link rootCardOf}.
 */
-const analyzeRequestRecordSchema = z.object({
-	/** The request's `Idempotency-Key` (also the table key). */
+const legacyAnalyzeSubjectSchema = z.object({
+	requesterUserId: z.string(),
+	triggeredAt: z.string(),
+	app: z.string(),
+	errorCode: z.string(),
+	logDetails: z.array(z.object({
+		name: z.string(),
+		url: z.string()
+	}))
+});
+/**
+* One accepted `feishuTopics` launch, keyed by its idempotency key. Kept
+* forever: a retried key answers the stored root card instead of posting a
+* second topic, and a reused key with another fingerprint is refused. The
+* records live in the `analyze_requests` table, named after the analyze API
+* that wrote the first of them; those older records carry `subject` instead
+* of `requesterUserId` + `card`, and their keys are the analyze API's
+* `Idempotency-Key`s.
+*/
+const topicLaunchRecordSchema = z.object({
+	/** The launch's idempotency key (also the table key). */
 	key: z.string().min(1),
-	/** SHA-256 (hex) of the canonical request body. */
+	/** The launch's fingerprint (older records: SHA-256 of the analyze request). */
 	bodyHash: z.string().min(1),
 	/** Target group chat. */
 	chatId: z.string().min(1),
-	/** Root card message id (the analysis topic's root). */
+	/** Root card message id (the topic's root). */
 	messageId: z.string().min(1),
-	/** Epoch ms when the request was accepted. */
+	/** Epoch ms when the launch was accepted. */
 	acceptedAt: z.number().int().nonnegative(),
-	/** What the root card shows, kept so the card can be redrawn after a restart. */
-	subject: z.object({
-		requesterUserId: z.string(),
-		triggeredAt: z.string(),
-		app: z.string(),
-		errorCode: z.string(),
-		logDetails: z.array(z.object({
-			name: z.string(),
-			url: z.string()
-		}))
-	}),
+	/** Requester @-mentioned on the root card; absent on older records. */
+	requesterUserId: z.string().optional(),
+	/** What the root card shows, kept so the card can be redrawn after a restart; absent on older records. */
+	card: topicRootCardSchema.optional(),
+	/** Root card content of older records. */
+	subject: legacyAnalyzeSubjectSchema.optional(),
 	/**
 	* Root card status. `running` until the first turn settles; a record still
-	* `running` when the channel starts belongs to an analysis the previous
+	* `running` when the channel starts belongs to a topic the previous
 	* instance never finished, and becomes `interrupted`.
 	*/
 	status: z.enum([
@@ -1347,9 +1378,48 @@ const analyzeRequestRecordSchema = z.object({
 	])
 });
 /**
+* The requester and root card content of one launch record, converting the
+* analyze API's older records to the card that API drew.
+* @param record - stored launch record.
+* @returns what to redraw, or undefined for a record carrying neither form.
+*/
+function rootCardOf(record) {
+	if (record.card !== void 0 && record.requesterUserId !== void 0) return {
+		requesterUserId: record.requesterUserId,
+		card: record.card
+	};
+	const subject = record.subject;
+	if (subject === void 0) return void 0;
+	return {
+		requesterUserId: subject.requesterUserId,
+		card: {
+			title: "日志分析",
+			taskName: "分析",
+			lead: [
+				{ text: `于 ${subject.triggeredAt} 发起了对 ` },
+				{
+					text: subject.app,
+					bold: true
+				},
+				{ text: " 应用 " },
+				{
+					text: subject.errorCode,
+					bold: true
+				},
+				{ text: " 错误码不良日志的分析。" }
+			],
+			links: {
+				nameHeader: "日志",
+				linkHeader: "详情页",
+				rows: subject.logDetails
+			}
+		}
+	};
+}
+/**
 * Where one Feishu-routed Session came from, keyed by its DSH session id.
 * Written the first time a route record names the Session (new topic,
-* `/renew`, analyze API) and kept after the route retires, so the Web
+* `/renew`, `feishuTopics` launch) and kept after the route retires, so the Web
 * client can still show the origin of an old Session. Names are resolved
 * live when read, never stored.
 */
@@ -1364,11 +1434,11 @@ const sessionOriginRecordSchema = z.object({
 	chatId: z.string().min(1),
 	/** `p2p` or `group`. */
 	chatType: z.enum(["p2p", "group"]),
-	/** `user_id` of the user who started the Session (the requester for analyze topics). */
+	/** `user_id` of the user who started the Session (the requester for launched topics). */
 	senderUserId: z.string().min(1),
 	/** Epoch ms when the Session was bound to the route. */
 	createdAt: z.number().int().nonnegative(),
-	/** Group-shared route (log-platform analysis topic). */
+	/** Group-shared route (topic started through `feishuTopics`). */
 	shared: z.literal(true).optional()
 });
 /**
@@ -1399,7 +1469,7 @@ const feishuDomain = {
 		access_users: { valueSchema: accessUserRecordSchema },
 		access_requests: { valueSchema: accessRequestRecordSchema },
 		access_wiki_users: { valueSchema: accessUserRecordSchema },
-		analyze_requests: { valueSchema: analyzeRequestRecordSchema },
+		analyze_requests: { valueSchema: topicLaunchRecordSchema },
 		session_origins: { valueSchema: sessionOriginRecordSchema }
 	}
 };
@@ -2833,18 +2903,10 @@ function parsePickAction(value) {
 	};
 }
 //#endregion
-//#region src/cards/analyze.ts
-/**
-* Root card of a log-platform analysis: who started which analysis when, the
-* log-platform detail pages behind it, and a status tag (分析中 → 已完成 /
-* 已停止 / 失败 / 已中断). The analysis itself streams in the topic below the
-* card through the ordinary streaming card.
-*
-* @module dsh-channels/cards/analyze
-*/
+//#region src/cards/topic.ts
 /** Rows per table page (Feishu caps `page_size` at 10). */
 const TABLE_PAGE_SIZE = 10;
-/** Escape markdown emphasis characters in platform-supplied text. */
+/** Escape markdown emphasis characters in caller-supplied text. */
 function plain$1(text) {
 	return text.replace(/([*_~`[\]\\])/gu, "\\$1");
 }
@@ -2853,10 +2915,10 @@ function linkTarget(url) {
 	return url.replace(/[()\s]/gu, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase().padStart(2, "0")}`);
 }
 /** Header tag text, tag color, and header template of each status. */
-function statusLook(status) {
+function statusLook(status, task) {
 	switch (status.kind) {
 		case "running": return {
-			tag: "分析中",
+			tag: `${task}中`,
 			color: "blue",
 			template: "blue"
 		};
@@ -2884,31 +2946,60 @@ function statusLook(status) {
 	}
 }
 /** Footer line of each status. */
-function statusNote(status) {
+function statusNote(status, task) {
 	switch (status.kind) {
-		case "running": return "分析过程在本卡片下的话题内实时输出；群内已授权的成员可以在话题内直接回复追问。";
-		case "done": return "分析已完成，结果见话题；在话题内回复即可继续追问。";
-		case "stopped": return "分析已停止；在话题内回复即可继续。";
-		case "error": return "分析回合失败，原因见话题；在话题内回复即可重试或追问。";
-		case "failed": return `分析未能开始：${plain$1(status.reason)}`;
-		case "interrupted": return "DSH 重启导致分析中断；在话题内回复即可继续。";
+		case "running": return `${task}过程在本卡片下的话题内实时输出；群内已授权的成员可以在话题内直接回复追问。`;
+		case "done": return `${task}已完成，结果见话题；在话题内回复即可继续追问。`;
+		case "stopped": return `${task}已停止；在话题内回复即可继续。`;
+		case "error": return `${task}回合失败，原因见话题；在话题内回复即可重试或追问。`;
+		case "failed": return `${task}未能开始：${plain$1(status.reason)}`;
+		case "interrupted": return `DSH 重启导致${task}中断；在话题内回复即可继续。`;
 	}
 }
 /**
-* The analysis root card.
-* @param subject - the analysis subject.
+* The topic root card.
+* @param requesterUserId - `user_id` @-mentioned before the lead sentence.
+* @param card - what the caller asked the card to show.
 * @param status - the status the card shows.
 * @returns card JSON.
 */
-function buildAnalyzeRootCard(subject, status) {
-	const look = statusLook(status);
+function buildTopicRootCard(requesterUserId, card, status) {
+	const task = plain$1(card.taskName);
+	const look = statusLook(status, card.taskName);
+	const elements = [markdown(`<at id=${requesterUserId}></at> ${card.lead.map((run) => run.bold === true ? `**${plain$1(run.text)}**` : plain$1(run.text)).join("")}`)];
+	if (card.links !== void 0 && card.links.rows.length > 0) elements.push({
+		tag: "table",
+		page_size: TABLE_PAGE_SIZE,
+		row_height: "low",
+		header_style: {
+			background_style: "grey",
+			bold: true,
+			lines: 1
+		},
+		columns: [{
+			name: "name",
+			display_name: card.links.nameHeader,
+			data_type: "text",
+			width: "auto"
+		}, {
+			name: "link",
+			display_name: card.links.linkHeader,
+			data_type: "markdown",
+			width: "auto"
+		}],
+		rows: card.links.rows.map((row) => ({
+			name: row.name,
+			link: `[查看](${linkTarget(row.url)})`
+		}))
+	});
+	elements.push(note(statusNote(status, task)));
 	return {
 		schema: "2.0",
 		config: CARD_CONFIG,
 		header: {
 			title: {
 				tag: "plain_text",
-				content: "日志分析"
+				content: card.title
 			},
 			template: look.template,
 			text_tag_list: [{
@@ -2920,35 +3011,7 @@ function buildAnalyzeRootCard(subject, status) {
 				color: look.color
 			}]
 		},
-		body: { elements: [
-			markdown(`<at id=${subject.requesterUserId}></at> 于 ${plain$1(subject.triggeredAt)} 发起了对 **${plain$1(subject.app)}** 应用 **${plain$1(subject.errorCode)}** 错误码不良日志的分析。`),
-			{
-				tag: "table",
-				page_size: TABLE_PAGE_SIZE,
-				row_height: "low",
-				header_style: {
-					background_style: "grey",
-					bold: true,
-					lines: 1
-				},
-				columns: [{
-					name: "name",
-					display_name: "日志",
-					data_type: "text",
-					width: "auto"
-				}, {
-					name: "link",
-					display_name: "详情页",
-					data_type: "markdown",
-					width: "auto"
-				}],
-				rows: subject.logDetails.map((detail) => ({
-					name: detail.name,
-					link: `[查看](${linkTarget(detail.url)})`
-				}))
-			},
-			note(statusNote(status))
-		] }
+		body: { elements }
 	};
 }
 //#endregion
@@ -6261,7 +6324,8 @@ async function storeFileResource(native, channel, msg, resource) {
 * - p2p:   workspace `<baseDir>/p2p/<user_id>/`
 * - group: workspace `<baseDir>/groups/<chat_id>/<user_id>/`
 * - topic: `<workspace>/topics/<topic-token>/` (the Session's effective cwd)
-* - log-platform analysis: workspace `<baseDir>/analyze/<app>/<errorCode>/`
+* - `feishuTopics` launch: workspace `<baseDir>/<caller segments…>/` (观象's
+*   log analyses use `<baseDir>/analyze/<app>/<errorCode>/`)
 *
 * The workspace root is the Session header cwd: it keeps the Session grouped
 * under the user's project in the GUI and stays the sandbox write boundary.
@@ -6442,26 +6506,35 @@ async function ensureWorkspace(ctx, baseDir, chatType, chatId, senderUserId) {
 	return ctx.workspaceRegistry.create(dir, workspaceTitleFor(chatType, chatId, senderUserId));
 }
 /**
-* Workspace directory of one log-platform analysis subject:
-* `<baseDir>/analyze/<app>/<errorCode>/`. Every analysis of the same
-* application and error code is grouped there, each in its own topic
-* directory.
+* First path segments this module lays out itself; a `feishuTopics` launch
+* workspace may not start with one of them.
 */
-function analyzeWorkspacePathFor(baseDir, app, errorCode) {
-	return path.join(baseDir, "analyze", safeSegment(app, "app"), safeSegment(errorCode, "errorCode"));
-}
-/** Workspace title of one analysis subject in the DSH workspace list. */
-function analyzeWorkspaceTitleFor(app, errorCode) {
-	return `日志分析 · ${app} · ${errorCode}`;
+const RESERVED_WORKSPACE_ROOTS = [
+	"p2p",
+	"groups",
+	"topics",
+	"_staging"
+];
+/**
+* Workspace directory of one `feishuTopics` launch:
+* `<baseDir>/<segments…>/`. Launches with the same segments share it, each in
+* its own topic directory.
+* @throws when a segment is unsafe or the first one is reserved.
+*/
+function launchWorkspacePathFor(baseDir, segments) {
+	if (segments.length === 0) throw new Error("dsh-channels: a launch workspace needs at least one path segment");
+	const safe = segments.map((segment) => safeSegment(segment, "launch workspace segment"));
+	if (RESERVED_WORKSPACE_ROOTS.includes(safe[0])) throw new Error(`dsh-channels: launch workspace may not start with reserved segment ${JSON.stringify(safe[0])}`);
+	return path.join(baseDir, ...safe);
 }
 /**
-* Ensure one analysis subject's workspace exists and is registered (idempotent
-* like {@link ensureWorkspace}).
+* Ensure one launch workspace exists and is registered (idempotent like
+* {@link ensureWorkspace}).
 */
-async function ensureAnalyzeWorkspace(ctx, baseDir, app, errorCode) {
-	const dir = analyzeWorkspacePathFor(baseDir, app, errorCode);
+async function ensureLaunchWorkspace(ctx, baseDir, segments, title) {
+	const dir = launchWorkspacePathFor(baseDir, segments);
 	await mkdir(dir, { recursive: true });
-	return ctx.workspaceRegistry.create(dir, analyzeWorkspaceTitleFor(app, errorCode));
+	return ctx.workspaceRegistry.create(dir, title);
 }
 //#endregion
 //#region src/session/isolation.ts
@@ -6730,7 +6803,7 @@ var InboundRouter = class {
 	*/
 	firstDeliveries = /* @__PURE__ */ new Map();
 	/**
-	* topic id → reservation by an external starter (the analyze launcher) that
+	* topic id → reservation by an external starter (the `feishuTopics` launcher) that
 	* opened the topic but has not published its route yet. A reply in the topic
 	* waits for the release and then routes against the published record, or
 	* falls through as an unbound topic when the start failed.
@@ -7461,117 +7534,22 @@ var InboundRouter = class {
 	}
 };
 //#endregion
-//#region src/analyze/contract.ts
-/**
-* Wire contract of the log-platform analyze API.
-*
-* `POST /open-api/logalyze` on the DSH Web server, with
-* `Authorization: Bearer <token>`, an `Idempotency-Key` header, and a JSON
-* body naming the requester, the trigger time, the subject (application +
-* error code), the log-platform detail pages, the target group, and the
-* prompt. A valid request posts the analysis root card into the group and
-* answers `202`; the analysis then streams in a topic below that card. Log
-* packages are the prompt's business: the analysis skill fetches whatever the
-* prompt names, and the detail pages are only listed on the card.
-*
-* @module dsh-channels/analyze/contract
-*/
-/**
-* Exact DSH Web route of the analyze API. It sits outside DSH's `/api`
-* namespace so a gateway in front of DSH can expose it separately from the
-* login-protected DSH API; the request carries this API's bearer token, not a
-* DSH login.
-*/
-const ANALYZE_ROUTE = "/open-api/logalyze";
-/** Largest accepted request body (the prompt dominates it). */
-const ANALYZE_MAX_BODY_BYTES = 1024 * 1024;
-/** Largest accepted prompt, in characters. */
-const ANALYZE_MAX_PROMPT_CHARS = 1e5;
-/**
-* `Idempotency-Key` format: 1–200 visible ASCII characters without spaces, so
-* a platform can use a UUID or its own `type:id` token.
-*/
-const IDEMPOTENCY_KEY_PATTERN = /^[\x21-\x7E]{1,200}$/u;
-/**
-* Application / error-code segment: it names a workspace directory
-* (`<baseDir>/analyze/<app>/<errorCode>`), so only path-safe characters pass.
-*/
-const SUBJECT_SEGMENT = /^(?!\.{1,2}$)[A-Za-z0-9._-]{1,128}$/u;
-/** JSON body of one analyze request. */
-const analyzeRequestSchema = z.object({
-	/** Feishu user_id of the person who started the analysis on the platform. */
-	requesterUserId: z.string().regex(FEISHU_USER_ID_PATTERN, "must be a Feishu user_id").max(128),
-	/** When the analysis was started on the platform, shown verbatim on the root card. */
-	triggeredAt: z.string().min(1).max(64).refine((value) => value.trim() !== "", "must not be blank"),
-	/** Application the logs belong to (workspace directory segment). */
-	app: z.string().regex(SUBJECT_SEGMENT, "must be 1-128 of A-Z a-z 0-9 . _ -"),
-	/** Error code of the logs (workspace directory segment). */
-	errorCode: z.string().regex(SUBJECT_SEGMENT, "must be 1-128 of A-Z a-z 0-9 . _ -"),
-	/** Log-platform detail pages of the logs that triggered the analysis (listed on the root card). */
-	logDetails: z.array(z.object({
-		/** Row label. */
-		name: z.string().min(1).max(200).refine((value) => value.trim() !== "", "must not be blank"),
-		/** Detail page address. */
-		url: z.url({
-			protocol: /^https?$/u,
-			error: "must be an http(s) URL"
-		}).max(2048)
-	}).strict()).min(1).max(50),
-	/** Target group chat (`oc_…`); must be an authorized group. */
-	chatId: z.string().regex(/^oc_[A-Za-z0-9_-]{1,128}$/u, "must be a Feishu group chat_id (oc_...)"),
-	/** Prompt forwarded verbatim as the analysis Session's first user message. */
-	prompt: z.string().min(1).max(ANALYZE_MAX_PROMPT_CHARS).refine((value) => value.trim() !== "", "must not be blank")
-}).strict();
-/**
-* Fingerprint of one validated request, used to tell a retry of the same
-* request from a reused `Idempotency-Key`. Field order is fixed.
-* @param request - the validated request.
-* @returns SHA-256 hex digest.
-*/
-function analyzeRequestHash(request) {
-	const canonical = JSON.stringify([
-		request.requesterUserId,
-		request.triggeredAt,
-		request.app,
-		request.errorCode,
-		request.logDetails.map((detail) => [detail.name, detail.url]),
-		request.chatId,
-		request.prompt
-	]);
-	return createHash("sha256").update(canonical).digest("hex");
-}
-/**
-* Validate one decoded JSON body.
-* @param raw - the decoded body.
-* @returns the request, or a readable list of field errors.
-*/
-function parseAnalyzeRequest(raw) {
-	const parsed = analyzeRequestSchema.safeParse(raw);
-	if (parsed.success) return {
-		ok: true,
-		value: parsed.data
-	};
-	return {
-		ok: false,
-		error: `请求参数不合法：${parsed.error.issues.map((issue) => `${issue.path.join(".") || "(body)"}: ${issue.message}`).join("; ")}`
-	};
-}
-//#endregion
-//#region src/analyze/launcher.ts
+//#region src/topics/launcher.ts
 /**
-* Log-platform analysis launcher: the business side of the analyze API.
+* The `feishuTopics` service: other plugins start group-shared topics (see
+* `./contract.ts`).
 *
-* Synchronously (before the `202`): service state, target-group permission,
-* `Idempotency-Key` replay, and the root card (分析中). In the background: the
-* topic (opened by the first streaming card, replied in thread below the root
-* card), the `<baseDir>/analyze/<app>/<errorCode>` workspace and its per-topic
-* directory, the Session, the group-shared route, and the first turn: the
-* platform prompt verbatim, streamed into that card like any topic turn. When
-* the first turn settles, the root card's status follows it (已完成 / 已停止 /
-* 失败), and the request record keeps the same status. At channel start,
-* records still `running` belong to analyses a previous instance never
-* finished; {@link AnalyzeLauncher.markInterrupted} marks their cards 已中断.
-* Log packages are fetched by the analysis skill the prompt invokes.
+* Synchronously (before {@link TopicLauncher.launch} settles): spec
+* validation, service state, target-group permission, idempotency replay, and
+* the root card (进行中). In the background: the topic (opened by the first
+* streaming card, replied in thread below the root card), the launch workspace
+* and its per-topic directory, the Session, the group-shared route, and the
+* first turn: the prompt verbatim, streamed into that card like any topic
+* turn. When the first turn settles, the root card's status follows it
+* (已完成 / 已停止 / 失败), and the launch record keeps the same status. At
+* channel start, records still `running` belong to topics a previous instance
+* never finished; {@link TopicLauncher.markInterrupted} marks their cards
+* 已中断.
 *
 * The topic is reserved in the inbound router from its creation until the
 * route and the first prompt are published, so replies posted meanwhile queue
@@ -7581,152 +7559,179 @@ function parseAnalyzeRequest(raw) {
 * root card failed with the reason, closes the streaming card, and leaves no
 * route.
 *
-* @module dsh-channels/analyze/launcher
-*/
+* @module dsh-channels/topics/launcher
+*/
+/** Name the launcher is provided under. */
+const FEISHU_TOPICS_SERVICE = "feishuTopics";
+/** Contract version the launcher implements. */
+const FEISHU_TOPICS_VERSION = 1;
+const text = (max) => z.string().min(1).max(max).refine((value) => value.trim() !== "", "must not be blank");
+/** Launch spec validation: the rules {@link TopicLaunchSpec} documents. */
+const topicLaunchSpecSchema = z.object({
+	key: z.string().regex(/^[\x21-\x7E]{1,200}$/u, "must be 1-200 visible ASCII characters"),
+	fingerprint: z.string().min(1).max(512),
+	chatId: z.string().regex(/^oc_[A-Za-z0-9_-]{1,128}$/u, "must be a Feishu group chat_id (oc_...)"),
+	requesterUserId: z.string().regex(FEISHU_USER_ID_PATTERN, "must be a Feishu user_id").max(128),
+	card: z.object({
+		title: text(100),
+		taskName: text(20),
+		lead: z.array(z.object({
+			text: z.string().max(1e3),
+			bold: z.boolean().optional()
+		}).strict()).min(1).max(20),
+		links: z.object({
+			nameHeader: text(20),
+			linkHeader: text(20),
+			rows: z.array(z.object({
+				name: text(200),
+				url: z.url({
+					protocol: /^https?$/u,
+					error: "must be an http(s) URL"
+				}).max(2048)
+			}).strict()).max(50)
+		}).strict().optional()
+	}).strict(),
+	workspace: z.object({
+		segments: z.array(z.string().regex(/^(?!\.{1,2}$)[A-Za-z0-9._-]{1,128}$/u, "must be 1-128 of A-Z a-z 0-9 . _ -")).min(1).max(8).refine((segments) => !RESERVED_WORKSPACE_ROOTS.includes(segments[0] ?? ""), `must not start with ${RESERVED_WORKSPACE_ROOTS.join(", ")}`),
+		title: text(200)
+	}).strict(),
+	prompt: text(1e5)
+}).strict();
 /** Readable reason of an error value. */
 function messageOf$4(error) {
 	return error instanceof Error ? error.message : String(error);
 }
-var AnalyzeLauncher = class {
+var TopicLauncher = class {
 	deps;
-	/** `Idempotency-Key` → request still being accepted (concurrent retries share it). */
+	version = 1;
+	/** Idempotency key → launch still being accepted (concurrent retries share it). */
 	accepting = /* @__PURE__ */ new Map();
-	/** Background analyses still starting (drained on shutdown). */
+	/** Background topics still starting (drained on shutdown). */
 	running = /* @__PURE__ */ new Set();
-	/** Whether requests are admitted: from {@link open} after start until {@link close}. */
+	/** Whether launches are admitted: from {@link open} after start until {@link close}. */
 	admitting = false;
 	constructor(deps) {
 		this.deps = deps;
 	}
 	/**
-	* Start admitting requests. Called at channel start after
-	* {@link markInterrupted}, so a new request is never marked interrupted.
+	* Start admitting launches. Called at channel start after
+	* {@link markInterrupted}, so a new launch is never marked interrupted.
 	*/
 	open() {
 		this.admitting = true;
 	}
-	/** Stop admitting requests (503) ahead of shutdown. */
+	/** Refuse launches (`not-connected`) ahead of shutdown. */
 	close() {
 		this.admitting = false;
 	}
-	enabled() {
-		return this.deps.config.analyzeEnabled;
-	}
-	async token() {
-		return await this.deps.resolveToken();
-	}
-	async analyze(request, idempotencyKey) {
-		const bodyHash = analyzeRequestHash(request);
-		const pending = this.accepting.get(idempotencyKey);
+	async launch(spec) {
+		const parsed = topicLaunchSpecSchema.safeParse(spec);
+		if (!parsed.success) return refused("invalid", `话题参数不合法：${parsed.error.issues.map((issue) => `${issue.path.join(".") || "(spec)"}: ${issue.message}`).join("; ")}`);
+		const valid = parsed.data;
+		const pending = this.accepting.get(valid.key);
 		if (pending !== void 0) {
-			if (pending.bodyHash !== bodyHash) return reusedKey();
-			return await pending.response;
+			if (pending.fingerprint !== valid.fingerprint) return reusedKey();
+			return await pending.result;
 		}
-		const response = this.accept(request, idempotencyKey, bodyHash);
-		this.accepting.set(idempotencyKey, {
-			bodyHash,
-			response
+		const result = this.accept(valid);
+		this.accepting.set(valid.key, {
+			fingerprint: valid.fingerprint,
+			result
 		});
 		try {
-			return await response;
+			return await result;
 		} finally {
-			this.accepting.delete(idempotencyKey);
+			this.accepting.delete(valid.key);
 		}
 	}
 	/**
-	* Wait for every acceptance in flight, then every background analysis that
-	* is still starting. Called after `started` turns false, so each one ends on
+	* Wait for every acceptance in flight, then every background topic that is
+	* still starting. Called after `started` turns false, so each one ends on
 	* its failure card or, when its first prompt was already sent, as an
 	* ordinary topic.
 	*/
 	async drain() {
-		await Promise.allSettled([...this.accepting.values()].map((pending) => pending.response));
+		await Promise.allSettled([...this.accepting.values()].map((pending) => pending.result));
 		await Promise.allSettled([...this.running]);
 	}
 	/**
-	* Mark every analysis still `running` as interrupted, on its card and in
-	* its record. Called at channel start before admission opens, so each
-	* such record belongs to a previous instance whose first turn never
-	* settled. A card that cannot be updated (deleted, recalled) is logged and
-	* still recorded as interrupted, so it is not retried on every start.
+	* Mark every launch still `running` as interrupted, on its card and in its
+	* record. Called at channel start before admission opens, so each such
+	* record belongs to a previous instance whose first turn never settled. A
+	* card that cannot be updated (deleted, recalled) is logged and still
+	* recorded as interrupted, so it is not retried on every start.
 	*/
 	async markInterrupted() {
 		const channel = this.deps.channel();
 		const domain = this.deps.domain();
 		if (channel === void 0 || domain === void 0) return;
-		for (const [key, record] of [...domain.analyzeRequests.entries()]) {
+		for (const [key, record] of [...domain.topicLaunches.entries()]) {
 			if (record.status !== "running") continue;
-			await channel.updateCard(record.messageId, buildAnalyzeRootCard(record.subject, { kind: "interrupted" })).catch((error) => {
-				this.deps.ctx.logger?.warn?.("dsh-channels: marking analysis card %s interrupted failed: %s", key, String(error));
+			const root = rootCardOf(record);
+			if (root !== void 0) await channel.updateCard(record.messageId, buildTopicRootCard(root.requesterUserId, root.card, { kind: "interrupted" })).catch((error) => {
+				this.deps.ctx.logger?.warn?.("dsh-channels: marking topic card %s interrupted failed: %s", key, String(error));
 			});
 			await this.recordStatus(key, "interrupted");
 		}
 	}
-	async accept(request, key, bodyHash) {
+	async accept(spec) {
 		const channel = this.deps.channel();
 		const domain = this.deps.domain();
-		if (!this.admitting || !this.deps.started() || channel === void 0 || domain === void 0) return refused(503, "飞书渠道尚未连接，请稍后重试");
-		const stored = domain.analyzeRequests.get(key);
+		if (!this.admitting || !this.deps.started() || channel === void 0 || domain === void 0) return refused("not-connected", "飞书渠道尚未连接，请稍后重试");
+		const stored = domain.topicLaunches.get(spec.key);
 		if (stored !== void 0) {
-			if (stored.bodyHash !== bodyHash) return reusedKey();
+			if (stored.bodyHash !== spec.fingerprint) return reusedKey();
 			return {
-				status: 202,
-				body: {
-					ok: true,
-					chatId: stored.chatId,
-					messageId: stored.messageId
-				}
+				ok: true,
+				replayed: true,
+				chatId: stored.chatId,
+				messageId: stored.messageId
 			};
 		}
-		if (!this.deps.mayAnalyzeIn(request.chatId)) return refused(403, "目标群未授权：请管理员在该群发送 /auth group add，或在设置面板「访问与授权」中添加");
-		const subject = subjectOf(request);
+		if (!this.deps.mayLaunchIn(spec.chatId)) return refused("forbidden-chat", "目标群未授权：请管理员在该群发送 /auth group add，或在设置面板「访问与授权」中添加");
+		const card = copyCard(spec.card);
 		let rootId;
 		try {
-			rootId = (await channel.send(request.chatId, { card: buildAnalyzeRootCard(subject, { kind: "running" }) })).messageId;
+			rootId = (await channel.send(spec.chatId, { card: buildTopicRootCard(spec.requesterUserId, card, { kind: "running" }) })).messageId;
 		} catch (error) {
-			return refused(502, `分析卡片发送失败（机器人需在目标群内）：${messageOf$4(error)}`);
+			return refused("send-failed", `${spec.card.taskName}卡片发送失败（机器人需在目标群内）：${messageOf$4(error)}`);
 		}
-		const body = {
-			ok: true,
-			chatId: request.chatId,
-			messageId: rootId
-		};
 		try {
-			await domain.analyzeRequests.put(key, {
-				key,
-				bodyHash,
-				chatId: request.chatId,
+			await domain.topicLaunches.put(spec.key, {
+				key: spec.key,
+				bodyHash: spec.fingerprint,
+				chatId: spec.chatId,
 				messageId: rootId,
 				acceptedAt: Date.now(),
-				subject: {
-					...subject,
-					logDetails: [...subject.logDetails]
-				},
+				requesterUserId: spec.requesterUserId,
+				card,
 				status: "running"
 			});
 		} catch (error) {
-			this.deps.ctx.logger?.warn?.("dsh-channels: recording analyze request %s failed: %s", key, String(error));
+			this.deps.ctx.logger?.warn?.("dsh-channels: recording topic launch %s failed: %s", spec.key, String(error));
 		}
-		const run = this.launch(channel, request, subject, rootId, key);
+		const run = this.start(channel, spec, card, rootId);
 		this.running.add(run);
 		run.finally(() => {
 			this.running.delete(run);
 		});
 		return {
-			status: 202,
-			body
+			ok: true,
+			replayed: false,
+			chatId: spec.chatId,
+			messageId: rootId
 		};
 	}
-	/** Start the analysis below an accepted root card; every failure ends on the cards. */
-	async launch(channel, request, subject, rootId, key) {
+	/** Start the topic below an accepted root card; every failure ends on the cards. */
+	async start(channel, spec, card, rootId) {
 		const warn = (message, ...args) => {
 			this.deps.ctx.logger?.warn?.(message, ...args);
 		};
 		const showStatus = async (status) => {
-			await channel.updateCard(rootId, buildAnalyzeRootCard(subject, status)).catch((error) => {
-				warn("dsh-channels: updating analysis card %s failed: %s", rootId, String(error));
+			await channel.updateCard(rootId, buildTopicRootCard(spec.requesterUserId, card, status)).catch((error) => {
+				warn("dsh-channels: updating topic card %s failed: %s", rootId, String(error));
 			});
-			await this.recordStatus(key, status.kind);
+			await this.recordStatus(spec.key, status.kind);
 		};
 		const sessionId = randomUUID();
 		let handle;
@@ -7735,19 +7740,19 @@ var AnalyzeLauncher = class {
 		let releaseTopic;
 		let published = false;
 		try {
-			const topic = await this.openTopic(channel, request.chatId, rootId, sessionId);
+			const topic = await this.openTopic(channel, spec.chatId, rootId, sessionId);
 			cardId = topic.cardId;
 			threadId = topic.threadId;
 			releaseTopic = this.deps.reserveTopic(threadId);
 			const services = placementServices(this.deps.ctx);
-			const workspace = await ensureAnalyzeWorkspace(this.deps.ctx, this.deps.config.baseDir, request.app, request.errorCode);
+			const workspace = await ensureLaunchWorkspace(this.deps.ctx, this.deps.config.baseDir, spec.workspace.segments, spec.workspace.title);
 			const topicToken = topicTokenFor(threadId, "thread", sessionId);
 			const plan = await planTopic(services, this.deps.config, workspace.path, topicToken, warn);
 			this.assertStarted();
 			handle = await this.deps.sessions.createSession(sessionId, plan.cwd);
 			const placement = await enterTopic(services, handle.agent, plan, workspace.path, topicToken, warn);
 			if (plan.cwd === workspace.path) Promise.resolve(workspace.attachSession(sessionId)).catch((error) => {
-				warn("dsh-channels: attaching analysis session %s to workspace failed: %s", sessionId, String(error));
+				warn("dsh-channels: attaching topic session %s to workspace failed: %s", sessionId, String(error));
 			});
 			await this.deps.sessions.mountGuidance(handle.agent, placement.sessionDir);
 			this.assertStarted();
@@ -7756,9 +7761,9 @@ var AnalyzeLauncher = class {
 				key: threadId,
 				kind: "thread",
 				sessionId,
-				chatId: request.chatId,
+				chatId: spec.chatId,
 				chatType: "group",
-				senderUserId: request.requesterUserId,
+				senderUserId: spec.requesterUserId,
 				workspacePath: workspace.path,
 				sessionDir: placement.sessionDir,
 				...placement.worktreeBranch === void 0 ? {} : { worktreeBranch: placement.worktreeBranch },
@@ -7774,7 +7779,7 @@ var AnalyzeLauncher = class {
 			await this.deps.repair.write({
 				key: cardId,
 				sessionId,
-				chatId: request.chatId,
+				chatId: spec.chatId,
 				triggerMessageId: rootId,
 				cards: [{
 					messageId: cardId,
@@ -7793,13 +7798,13 @@ var AnalyzeLauncher = class {
 				this.deps.streamer()?.attach(agent.session, streamCardId, rootId, void 0, { onSettled: (outcome) => {
 					showStatus({ kind: outcome });
 				} });
-				agent.followup(feishuUserMessage(request.prompt));
+				agent.followup(feishuUserMessage(spec.prompt));
 			});
 		} catch (error) {
 			const reason = messageOf$4(error);
-			warn("dsh-channels: analysis for %s/%s failed to start: %s", request.app, request.errorCode, reason);
+			warn("dsh-channels: topic %s failed to start: %s", spec.key, reason);
 			if (published && threadId !== void 0) await this.deps.routes.remove(threadId).catch((removeError) => {
-				warn("dsh-channels: removing analysis route %s failed: %s", threadId, String(removeError));
+				warn("dsh-channels: removing topic route %s failed: %s", threadId, String(removeError));
 			});
 			await handle?.dispose().catch(() => {});
 			if (cardId !== void 0) {
@@ -7807,7 +7812,7 @@ var AnalyzeLauncher = class {
 				await channel.updateCard(cardId, buildCard({
 					phase: "error",
 					reasoning: "",
-					body: `❌ 分析未能开始：${reason}`,
+					body: `❌ ${card.taskName}未能开始：${reason}`,
 					stats: {
 						sessionId,
 						inputTokens: 0,
@@ -7824,8 +7829,8 @@ var AnalyzeLauncher = class {
 		}
 	}
 	/**
-	* Open the analysis topic: the first streaming card, replied in thread below
-	* the root card. The topic id is read from that card (or the root card, in
+	* Open the topic: the first streaming card, replied in thread below the
+	* root card. The topic id is read from that card (or the root card, in
 	* topic groups).
 	*/
 	async openTopic(channel, chatId, rootId, sessionId) {
@@ -7852,44 +7857,52 @@ var AnalyzeLauncher = class {
 			threadId
 		};
 	}
-	/** Store a root card status in the request record (best-effort; the card already shows it). */
+	/** Store a root card status in the launch record (best-effort; the card already shows it). */
 	async recordStatus(key, status) {
 		const domain = this.deps.domain();
-		const record = domain?.analyzeRequests.get(key);
+		const record = domain?.topicLaunches.get(key);
 		if (domain === void 0 || record === void 0) return;
 		try {
-			await domain.analyzeRequests.put(key, {
+			await domain.topicLaunches.put(key, {
 				...record,
 				status
 			});
 		} catch (error) {
-			this.deps.ctx.logger?.warn?.("dsh-channels: recording analysis %s status failed: %s", key, String(error));
+			this.deps.ctx.logger?.warn?.("dsh-channels: recording topic %s status failed: %s", key, String(error));
 		}
 	}
 	assertStarted() {
-		if (!this.deps.started()) throw new Error("飞书渠道已断开，分析已取消");
+		if (!this.deps.started()) throw new Error("飞书渠道已断开，已取消");
 	}
 };
-function subjectOf(request) {
+/** A detached copy of the card, so the caller cannot change what is recorded. */
+function copyCard(card) {
 	return {
-		requesterUserId: request.requesterUserId,
-		triggeredAt: request.triggeredAt,
-		app: request.app,
-		errorCode: request.errorCode,
-		logDetails: request.logDetails
+		title: card.title,
+		taskName: card.taskName,
+		lead: card.lead.map((run) => run.bold === void 0 ? { text: run.text } : {
+			text: run.text,
+			bold: run.bold
+		}),
+		...card.links === void 0 ? {} : { links: {
+			nameHeader: card.links.nameHeader,
+			linkHeader: card.links.linkHeader,
+			rows: card.links.rows.map((row) => ({
+				name: row.name,
+				url: row.url
+			}))
+		} }
 	};
 }
-function refused(status, error) {
+function refused(code, message) {
 	return {
-		status,
-		body: {
-			ok: false,
-			error
-		}
+		ok: false,
+		code,
+		message
 	};
 }
 function reusedKey() {
-	return refused(409, "Idempotency-Key 已被内容不同的请求使用");
+	return refused("key-conflict", "幂等键已被内容不同的请求使用");
 }
 //#endregion
 //#region src/session/repair.ts
@@ -14982,6 +14995,8 @@ var TurnStreamer = class {
 			toolKind: "",
 			heartbeatTimer: void 0,
 			attempts: /* @__PURE__ */ new Map(),
+			retry: void 0,
+			retries: 0,
 			stopRequested: false,
 			stopDenied: false,
 			queuedDenied: false
@@ -15170,6 +15185,10 @@ var TurnStreamer = class {
 				break;
 			case "assistant/message":
 				if (state.turn === void 0) state.turn = event.data.turn;
+				if (state.retry !== void 0) {
+					state.retry = void 0;
+					this.markDirty(session.id, state);
+				}
 				if (event.data.usage !== void 0) {
 					state.lastUsage = {
 						usage: event.data.usage,
@@ -15251,6 +15270,24 @@ var TurnStreamer = class {
 				}
 				break;
 			}
+			case "llm/retry":
+				if (state.turn === void 0) state.turn = event.data.turn;
+				state.retry = {
+					retry: event.data.retry,
+					maxRetries: event.data.mode === "normal" ? event.data.maxRetries : void 0,
+					code: event.data.failure.code,
+					until: Date.now() + Math.max(0, event.data.delayMs),
+					started: false
+				};
+				state.retries++;
+				this.markDirty(session.id, state);
+				break;
+			case "llm/retry-started":
+				if (state.retry !== void 0 && state.retry.retry === event.data.retry) {
+					state.retry.started = true;
+					this.markDirty(session.id, state);
+				}
+				break;
 			case "turn/end":
 				if (state.turn === void 0) state.turn = event.data.turn;
 				this.finalize(session.id, state, turnFailure(event.data.reason), turnAborted(event.data.reason));
@@ -15279,6 +15316,10 @@ var TurnStreamer = class {
 				break;
 			case "chunk": {
 				const chunk = frame.chunk;
+				if ((chunk.type === "text-delta" || chunk.type === "reasoning-delta") && chunk.text !== "" && state.retry !== void 0) {
+					state.retry = void 0;
+					this.markDirty(session.id, state);
+				}
 				if (chunk.type === "text-delta") {
 					if (chunk.text !== "") this.closeReasoning(state);
 					const last = state.cards[state.cards.length - 1];
@@ -15298,7 +15339,7 @@ var TurnStreamer = class {
 				this.closeReasoning(state);
 				const mark = state.attempts.get(frame.attemptId);
 				state.attempts.delete(frame.attemptId);
-				if (frame.outcome.kind === "abandoned" && mark !== void 0) {
+				if ((frame.outcome.kind === "abandoned" || frame.outcome.eventType === "assistant/attempt") && mark !== void 0) {
 					this.rollbackAttempt(state, mark);
 					this.markDirty(session.id, state);
 				}
@@ -15323,11 +15364,13 @@ var TurnStreamer = class {
 		state.reasoningSince = void 0;
 	}
 	/**
-	* Drop one abandoned attempt's deltas. The attempt's text is a contiguous
+	* Drop one discarded attempt's deltas. The attempt's text is a contiguous
 	* suffix of the logical body: segments created during the attempt are
 	* removed, the segment that was last at `start` is truncated, and the
 	* reasoning tail is cut. Already-delivered plain-text segments cannot be
-	* retracted and stop the removal.
+	* retracted and stop the removal; segment cards already sent (or being
+	* sent) cannot be withdrawn, so they are emptied and kept. The newest
+	* remaining card is reopened so a retry streams into it again.
 	*/
 	rollbackAttempt(state, mark) {
 		const lastIndex = mark.cardCount - 1;
@@ -15335,6 +15378,11 @@ var TurnStreamer = class {
 			const card = state.cards[index];
 			if (card === void 0) continue;
 			if (card.mode === "text" && card.messageId !== void 0) break;
+			if (card.messageId !== void 0 || card.sending) {
+				card.body = "";
+				card.dirty = true;
+				continue;
+			}
 			state.cards.splice(index, 1);
 		}
 		const tail = state.cards[lastIndex];
@@ -15343,6 +15391,9 @@ var TurnStreamer = class {
 			tail.body = tail.body.slice(0, length);
 			tail.dirty = true;
 		}
+		const last = state.cards[state.cards.length - 1];
+		if (last !== void 0) if (last.mode === "text" && last.messageId !== void 0 || last.failed) state.cards.push(this.freshSegment(""));
+		else last.frozen = false;
 		state.reasoning = state.reasoning.slice(0, mark.reasoningLength);
 		state.reasoningMs = mark.reasoningMs;
 		state.reasoningSince = mark.reasoningSince;
@@ -15509,6 +15560,13 @@ var TurnStreamer = class {
 	toolLine(state, now) {
 		if (state.finalized) return "";
 		if (state.awaitingApproval.length > 0) return clipActivity(`⏳ 等待你审批：${[...new Set(state.awaitingApproval)].join("、")}`);
+		const retry = state.retry;
+		if (retry !== void 0) {
+			const count = retry.maxRetries === void 0 ? `${retry.retry}` : `${retry.retry}/${retry.maxRetries}`;
+			if (retry.started) return clipActivity(`🔁 模型请求重试中（第 ${count} 次）`);
+			const wait = Math.max(0, Math.ceil((retry.until - now) / 1e3));
+			return clipActivity(`⚠️ 模型请求失败（${retry.code}），${wait} 秒后第 ${count} 次重试`);
+		}
 		const tool = state.toolActivity;
 		if (tool === void 0) return "";
 		return clipActivity(`${tool.name === "subagent" ? "🤖 调用子代理：" : tool.name === "workflow" ? "🧵 调用工作流：" : "🔧 调用工具："}${tool.label} · ${fmtElapsed(now - tool.since)}`);
@@ -15699,7 +15757,8 @@ var TurnStreamer = class {
 		this.closeReasoning(state);
 		if (failure !== void 0) {
 			const code = failure.code === void 0 ? "" : `\n\n错误码：\`${failure.code}\``;
-			const notice = `❌ **本轮运行失败**\n\n${failure.message}${code}`;
+			const retried = state.retries === 0 ? "" : `\n\n已自动重试 ${state.retries} 次`;
+			const notice = `❌ **本轮运行失败**\n\n${failure.message}${code}${retried}`;
 			const tail = state.cards[state.cards.length - 1];
 			if (tail !== void 0) if (tail.mode === "text" || tail.failed) state.cards.push(this.freshSegment(notice));
 			else {
@@ -15716,6 +15775,7 @@ var TurnStreamer = class {
 			state.heartbeatTimer = void 0;
 		}
 		state.tool = "";
+		state.retry = void 0;
 		this.splitOverflow(sessionId, state);
 		for (const [index] of state.cards.entries()) this.patchCard(sessionId, state, index, true, false);
 		for (const trigger of [state, ...state.mergedTriggers]) this.swapReaction(trigger, failure !== void 0);
@@ -15896,8 +15956,24 @@ const DEFAULT_TOPIC_MESSAGES_TIMEOUT_MS = 2e4;
 * optional context block.
 */
 const DEFAULT_PROMPT_CONTEXT_TIMEOUT_MS = 3e3;
-/** Conventional credential reference holding the log-platform analyze API bearer token. */
-const DEFAULT_ANALYZE_TOKEN_REF = "DSH_CHANNELS_ANALYZE_TOKEN";
+/**
+* Keys of the log-platform analyze API, which moved to 观象
+* (`@modesto_ma/dsh-guanxiang`). A value still set in `cordis.yml` or the Web
+* overlay is ignored; the loader schema passes them through and
+* {@link movedAnalyzeKeysOf} finds them so the deployment is told.
+*/
+const MOVED_ANALYZE_KEYS = ["analyzeEnabled", "analyzeToken"];
+/** Log line naming where the moved analyze API settings went. */
+const MOVED_ANALYZE_NOTICE = "dsh-channels: 日志分析接口已迁到观象（@modesto_ma/dsh-guanxiang），忽略 %s：请在观象面板「分析接口」中开启并保存令牌（GUANXIANG_ANALYZE_TOKEN）";
+/**
+* The moved analyze API keys one raw config or overlay object still sets.
+* @param raw - undecoded `config` or overlay JSON.
+* @returns the keys present, in {@link MOVED_ANALYZE_KEYS} order.
+*/
+function movedAnalyzeKeysOf(raw) {
+	if (typeof raw !== "object" || raw === null) return [];
+	return MOVED_ANALYZE_KEYS.filter((key) => Object.hasOwn(raw, key));
+}
 /** A credential reference: `FEISHU_APP_ID`-style name resolved through ctx.credentials. */
 const credentialRefSchema = z.string().regex(CREDENTIAL_REF_PATTERN, "must be a credential reference name such as FEISHU_APP_ID (resolved through the dsh credentials seam, e.g. $DSH_HOME/.credentials.yaml) — plaintext secrets are not accepted");
 const configSchema = z.object({
@@ -16227,28 +16303,20 @@ const configSchema = z.object({
 	* this window fails closed with an explicit error; a host *timed* wait owns
 	* its own deadline and is left to the host signal instead.
 	*/
-	questionTimeoutMs: z.number().int().min(1e4).max(36e5).default(DEFAULT_QUESTION_TIMEOUT_MS),
-	/**
-	* Switch for the log-platform analyze API (`POST /open-api/logalyze`
-	* on the DSH Web server). Off (default) answers 404; read per request, so
-	* toggling it needs no reconnect. Needs a host with a Web server.
-	*/
-	analyzeEnabled: z.boolean().default(false),
-	/**
-	* Credential reference holding the analyze API bearer token (defaults to
-	* `DSH_CHANNELS_ANALYZE_TOKEN`). Resolved per request, so rotating the value
-	* applies to the next request; an unresolvable token refuses every request.
-	*/
-	analyzeToken: credentialRefSchema.default(DEFAULT_ANALYZE_TOKEN_REF)
+	questionTimeoutMs: z.number().int().min(1e4).max(36e5).default(DEFAULT_QUESTION_TIMEOUT_MS)
 });
 /**
 * DSH loader-facing schema. The bundle patch inserts this plugin without a
 * `config` object; the loader validates that row with `undefined` before the
 * user's patch layer supplies values. Accept that absence and fill the same
 * defaults as {@link resolveConfig}, so enabling the plugin from the Web UI
-* cannot fail with "expected object, received undefined".
+* cannot fail with "expected object, received undefined". The moved analyze
+* keys pass through unchanged so `apply()` can warn about them.
 */
-const pluginConfigSchema = configSchema.prefault({});
+const pluginConfigSchema = configSchema.extend({
+	analyzeEnabled: z.unknown().optional(),
+	analyzeToken: z.unknown().optional()
+}).prefault({});
 /**
 * Validate the raw loader config. Values stay credential *references*; the
 * secrets themselves resolve through `ctx.credentials` at startup.
@@ -16385,7 +16453,6 @@ const EDITABLE_KEYS = [
 	"feishuTools.wikiRead",
 	"feishuTools.wikiWrite",
 	"wikiRoots",
-	"analyzeEnabled",
 	"loggerLevel"
 ];
 /**
@@ -16513,11 +16580,6 @@ const PANEL_COPY = {
 	reconnectDone: "已重启飞书连接",
 	loading: "加载中…",
 	loadFailed: "设置面板加载失败",
-	analyzeTokenLabel: "访问令牌",
-	analyzeTokenSummary: "请求头 Authorization: Bearer 的值，保存后立即生效；未配置时接口拒绝所有请求",
-	analyzeTokenPlaceholder: "填写新令牌（建议 32 位以上随机串）",
-	analyzeTokenSaved: "令牌已保存，下一次请求生效",
-	analyzeTokenRemoved: "令牌已移除，接口将拒绝所有请求",
 	overlayTitle: "Web 覆盖",
 	overlayPath: "覆盖文件",
 	overlayCount: "{n} 项配置由面板覆盖",
@@ -16786,6 +16848,8 @@ var OverlayStore = class {
 			this.logger?.warn?.("dsh-channels: Web 覆盖配置不是合法 JSON（%s），按未覆盖处理：%s", this.file, String(error));
 			return {};
 		}
+		const moved = movedAnalyzeKeysOf(raw);
+		if (moved.length > 0) this.logger?.warn?.(MOVED_ANALYZE_NOTICE, `${this.file} 中的 ${moved.join("、")}`);
 		const parsed = parseOverlay(raw);
 		if (!parsed.ok) {
 			this.logger?.warn?.("dsh-channels: Web 覆盖配置含非法字段（%s），按未覆盖处理：%s", this.file, parsed.issues.map((issue) => `${issue.path}: ${issue.message}`).join("; "));
@@ -16864,7 +16928,7 @@ async function openFeishuDomain(ctx) {
 	const accessUsersRaw = domain.table("access_users");
 	const accessRequestsRaw = domain.table("access_requests");
 	const accessWikiUsersRaw = domain.table("access_wiki_users");
-	const analyzeRequestsRaw = domain.table("analyze_requests");
+	const topicLaunchesRaw = domain.table("analyze_requests");
 	const sessionOriginsRaw = domain.table("session_origins");
 	return {
 		routes: {
@@ -16915,10 +16979,10 @@ async function openFeishuDomain(ctx) {
 			delete: (key) => accessWikiUsersRaw.delete(key),
 			entries: () => accessWikiUsersRaw.entries()
 		},
-		analyzeRequests: {
-			get: (key) => analyzeRequestsRaw.get(key),
-			put: (key, value) => analyzeRequestsRaw.put(key, value),
-			entries: () => analyzeRequestsRaw.entries()
+		topicLaunches: {
+			get: (key) => topicLaunchesRaw.get(key),
+			put: (key, value) => topicLaunchesRaw.put(key, value),
+			entries: () => topicLaunchesRaw.entries()
 		},
 		sessionOrigins: {
 			get: (key) => sessionOriginsRaw.get(key),
@@ -16998,8 +17062,8 @@ var FeishuService = class {
 	messageReader = new MessageReader({ channel: () => this.channel });
 	/** Inbound routing: dedup, admission, decision tree, session establishment. */
 	inbound;
-	/** Log-platform analyze API business side (requests → shared analysis topics). */
-	analyzeLauncher;
+	/** The `feishuTopics` service (other plugins' launches → shared topics). */
+	topicLauncher;
 	/** Agent/session lifecycle: live registry, resume, presets, renew. */
 	sessions;
 	/**
@@ -17254,7 +17318,7 @@ var FeishuService = class {
 				handleSlash: (msg, line) => this.handleSlashMessage(msg, line)
 			}
 		});
-		this.analyzeLauncher = new AnalyzeLauncher({
+		this.topicLauncher = new TopicLauncher({
 			ctx: this.ctx,
 			config: this.config,
 			started: () => this.started,
@@ -17266,8 +17330,7 @@ var FeishuService = class {
 			streamer: () => this.streamer,
 			queue: this.routeOperations,
 			reserveTopic: (threadId) => this.inbound.reserveTopic(threadId),
-			mayAnalyzeIn: (chatId) => this.accessController.mayAnalyzeIn(chatId),
-			resolveToken: () => resolveCredentialRef(this.ctx, this.config.analyzeToken).catch(() => void 0)
+			mayLaunchIn: (chatId) => this.accessController.mayLaunchIn(chatId)
 		});
 	}
 	/** Effective inbound attachment backend (matches the inbound router). */
@@ -17548,9 +17611,9 @@ var FeishuService = class {
 			this.restarting = false;
 		}
 	}
-	/** The analyze API's business side, for the Web route. */
-	analyzeHandler() {
-		return this.analyzeLauncher;
+	/** The `feishuTopics` service, provided by `apply()`. */
+	topics() {
+		return this.topicLauncher;
 	}
 	isRunning() {
 		return this.started;
@@ -18096,15 +18159,10 @@ var FeishuService = class {
 				};
 			}
 		};
-		const [appId, appSecret, analyzeToken] = await Promise.all([
-			read(this.config.appId),
-			read(this.config.appSecret),
-			read(this.config.analyzeToken)
-		]);
+		const [appId, appSecret] = await Promise.all([read(this.config.appId), read(this.config.appSecret)]);
 		return {
 			appId,
-			appSecret,
-			analyzeToken
+			appSecret
 		};
 	}
 	/** The host credentials seam, when mounted. */
@@ -18140,7 +18198,6 @@ var FeishuService = class {
 		switch (field) {
 			case "appId": return this.config.appId;
 			case "appSecret": return this.config.appSecret;
-			case "analyzeToken": return this.config.analyzeToken;
 		}
 	}
 	/** Wire events and open the long connection. */
@@ -18239,8 +18296,8 @@ var FeishuService = class {
 		await channel.connect();
 		this.runScopeCheck(channel, appId, ownerLookup);
 		if (this.config.slashCommandPanel) this.runSlashCommandSync(channel);
-		await this.analyzeLauncher.markInterrupted();
-		this.analyzeLauncher.open();
+		await this.topicLauncher.markInterrupted();
+		this.topicLauncher.open();
 		this.repair.repairAll().catch((error) => {
 			this.ctx.logger?.warn?.("dsh-channels: inflight repair failed: %s", String(error));
 		});
@@ -18275,8 +18332,8 @@ var FeishuService = class {
 	/** Tear down: close the connection and dispose all live agents. */
 	async shutdown() {
 		this.started = false;
-		this.analyzeLauncher.close();
-		await this.analyzeLauncher.drain();
+		this.topicLauncher.close();
+		await this.topicLauncher.drain();
 		for (const controller of this.commandControllers) controller.abort();
 		await Promise.allSettled([...this.commandOperations]);
 		this.commandControllers.clear();
@@ -19490,7 +19547,7 @@ const MAX_BODY_BYTES = 64 * 1024;
 function messageOf$2(error) {
 	return error instanceof Error ? error.message : String(error);
 }
-var HttpError$1 = class extends Error {
+var HttpError = class extends Error {
 	status;
 	constructor(status, message) {
 		super(message);
@@ -19508,17 +19565,17 @@ function json(status, payload) {
 }
 /** Parse a JSON-object body; malformed bodies throw {@link HttpError} (415/413/400). */
 async function readJsonObject(request) {
-	if ((request.headers.get("content-type") ?? "").split(";")[0]?.trim().toLowerCase() !== "application/json") throw new HttpError$1(415, "请求体必须是 application/json");
+	if ((request.headers.get("content-type") ?? "").split(";")[0]?.trim().toLowerCase() !== "application/json") throw new HttpError(415, "请求体必须是 application/json");
 	const text = await request.text();
-	if (Buffer.byteLength(text) > MAX_BODY_BYTES) throw new HttpError$1(413, "请求体过大");
-	if (text === "") throw new HttpError$1(400, "请求体为空");
+	if (Buffer.byteLength(text) > MAX_BODY_BYTES) throw new HttpError(413, "请求体过大");
+	if (text === "") throw new HttpError(400, "请求体为空");
 	let body;
 	try {
 		body = JSON.parse(text);
 	} catch {
-		throw new HttpError$1(400, "请求体不是合法 JSON");
+		throw new HttpError(400, "请求体不是合法 JSON");
 	}
-	if (typeof body !== "object" || body === null || Array.isArray(body)) throw new HttpError$1(400, "请求体必须是 JSON 对象");
+	if (typeof body !== "object" || body === null || Array.isArray(body)) throw new HttpError(400, "请求体必须是 JSON 对象");
 	return body;
 }
 /** Distinct non-empty entries of one comma-separated id query parameter. */
@@ -19536,7 +19593,7 @@ function answered(handler) {
 		try {
 			return await handler(request);
 		} catch (error) {
-			if (error instanceof HttpError$1) return json(error.status, {
+			if (error instanceof HttpError) return json(error.status, {
 				ok: false,
 				error: error.message
 			});
@@ -19602,14 +19659,13 @@ function registerSettingsRoutes(connection, surface) {
 			const values = {};
 			if (payload.appId !== void 0) values.appId = payload.appId;
 			if (payload.appSecret !== void 0) values.appSecret = payload.appSecret;
-			if (payload.analyzeToken !== void 0) values.analyzeToken = payload.analyzeToken;
 			return result(await surface.saveCredentials(values));
 		}),
 		post(CLEAR_CREDENTIAL_ROUTE, async (request) => {
 			const field = (await readJsonObject(request)).field;
-			if (field !== "appId" && field !== "appSecret" && field !== "analyzeToken") return json(400, {
+			if (field !== "appId" && field !== "appSecret") return json(400, {
 				ok: false,
-				error: "field 必须是 appId、appSecret 或 analyzeToken"
+				error: "field 必须是 appId 或 appSecret"
 			});
 			return result(await surface.clearCredential(field));
 		}),
@@ -19673,160 +19729,6 @@ function mountSettingsRoutes(ctx, surface) {
 	attach(ctx);
 }
 //#endregion
-//#region src/analyze/server.ts
-/**
-* The analyze API's HTTP route on the DSH Web server.
-*
-* Registers the exact route `POST /open-api/logalyze` (see
-* `./contract.ts`) on the host `webServer`; hosts without one (headless) have
-* no analyze API. This module owns the transport-level checks, in order:
-* path, the `analyzeEnabled` switch, method, bearer token, `Idempotency-Key`,
-* media type, body size, and JSON validation; everything after validation
-* belongs to the {@link AnalyzeHandler}. Bodies, tokens, and prompts are never
-* logged.
-*
-* @module dsh-channels/analyze/server
-*/
-var HttpError = class extends Error {
-	status;
-	constructor(status, message) {
-		super(message);
-		this.status = status;
-	}
-};
-function send(res, response) {
-	const body = JSON.stringify(response.body);
-	res.writeHead(response.status, {
-		"content-type": "application/json; charset=utf-8",
-		"cache-control": "no-store",
-		"content-length": Buffer.byteLength(body)
-	});
-	res.end(body);
-}
-function refuse(res, status, error, headers = {}) {
-	for (const [name, value] of Object.entries(headers)) res.setHeader(name, value);
-	send(res, {
-		status,
-		body: {
-			ok: false,
-			error
-		}
-	});
-}
-/** Constant-time token comparison over fixed-length digests. */
-function tokenMatches(presented, expected) {
-	return timingSafeEqual(createHash("sha256").update(presented).digest(), createHash("sha256").update(expected).digest());
-}
-/** The bearer credential of one request, or undefined. */
-function bearerOf(req) {
-	const header = req.headers.authorization;
-	if (header === void 0) return void 0;
-	return /^Bearer[ \t]+(\S+)[ \t]*$/iu.exec(header)?.[1];
-}
-/** Read the body up to {@link ANALYZE_MAX_BODY_BYTES}; larger bodies fail with 413. */
-async function readBody(req) {
-	const declared = Number(req.headers["content-length"]);
-	if (Number.isFinite(declared) && declared > 1048576) throw new HttpError(413, `请求体超过 ${ANALYZE_MAX_BODY_BYTES} 字节`);
-	const chunks = [];
-	let size = 0;
-	for await (const chunk of req) {
-		const buffer = chunk;
-		size += buffer.length;
-		if (size > 1048576) throw new HttpError(413, `请求体超过 ${ANALYZE_MAX_BODY_BYTES} 字节`);
-		chunks.push(buffer);
-	}
-	return Buffer.concat(chunks).toString("utf8");
-}
-/**
-* Handle one HTTP request against the analyze contract.
-* @param req - the incoming request.
-* @param res - its response.
-* @param handler - the business side.
-*/
-async function handleAnalyzeHttp(req, res, handler) {
-	if (new URL(req.url ?? "/", "http://analyze.invalid").pathname !== "/open-api/logalyze") {
-		refuse(res, 404, "未知路径");
-		return;
-	}
-	if (!handler.enabled()) {
-		refuse(res, 404, "日志分析接口未开启，请在设置面板「高级 → 日志分析接口」打开开关");
-		return;
-	}
-	if ((req.method ?? "GET").toUpperCase() !== "POST") {
-		refuse(res, 405, "只接受 POST", { allow: "POST" });
-		return;
-	}
-	const expected = await handler.token();
-	if (expected === void 0 || expected === "") {
-		refuse(res, 503, "分析接口未配置访问令牌，请联系部署者配置 analyzeToken 引用的凭据");
-		return;
-	}
-	const presented = bearerOf(req);
-	if (presented === void 0 || !tokenMatches(presented, expected)) {
-		refuse(res, 401, "访问令牌无效", { "www-authenticate": "Bearer" });
-		return;
-	}
-	const idempotencyKey = req.headers["idempotency-key"];
-	if (typeof idempotencyKey !== "string" || !IDEMPOTENCY_KEY_PATTERN.test(idempotencyKey)) {
-		refuse(res, 400, "缺少或不合法的 Idempotency-Key 请求头（1-200 个可见 ASCII 字符）");
-		return;
-	}
-	if ((req.headers["content-type"] ?? "").split(";")[0]?.trim().toLowerCase() !== "application/json") {
-		refuse(res, 415, "Content-Type 必须是 application/json");
-		return;
-	}
-	let raw;
-	try {
-		raw = JSON.parse(await readBody(req));
-	} catch (error) {
-		if (error instanceof HttpError) {
-			refuse(res, error.status, error.message);
-			return;
-		}
-		refuse(res, 400, "请求体不是合法的 JSON");
-		return;
-	}
-	const parsed = parseAnalyzeRequest(raw);
-	if (!parsed.ok) {
-		refuse(res, 400, parsed.error);
-		return;
-	}
-	send(res, await handler.analyze(parsed.value, idempotencyKey));
-}
-/**
-* Register the analyze route on the host Web server once it is available.
-* Requests skip the DSH login gate on purpose: the bearer token is this API's
-* only credential.
-* @param ctx - the plugin context.
-* @param handler - the business side.
-* @param warn - diagnostics sink for unexpected handler failures.
-*/
-function mountAnalyzeRoute(ctx, handler, warn) {
-	const attach = (webCtx) => {
-		const server = webCtx.get?.("webServer");
-		if (server === void 0) return;
-		webCtx.effect(() => server.register({
-			kind: "exact",
-			path: ANALYZE_ROUTE,
-			handler: async (req, res) => {
-				try {
-					await handleAnalyzeHttp(req, res, handler);
-				} catch (error) {
-					warn("dsh-channels: analyze request failed: %s", String(error));
-					if (!res.headersSent) refuse(res, 500, `分析请求处理失败：${String(error)}`);
-					else res.destroy();
-				}
-			}
-		}), "dsh-channels: analyze route");
-	};
-	const inject = ctx.inject;
-	if (typeof inject === "function") {
-		inject.call(ctx, ["webServer"], attach);
-		return;
-	}
-	attach(ctx);
-}
-//#endregion
 //#region src/settings/surface.ts
 /**
 * Web 设置面板的 Host 视图模型：把 `FeishuService` 的运行时事实、覆盖层与
@@ -19841,11 +19743,7 @@ function mountAnalyzeRoute(ctx, handler, warn) {
 */
 const RESTART_SET = new Set(RESTART_KEYS);
 /** Every credential slot the panel writes, in form order. */
-const CREDENTIAL_FIELDS = [
-	"appId",
-	"appSecret",
-	"analyzeToken"
-];
+const CREDENTIAL_FIELDS = ["appId", "appSecret"];
 /** Optional fields: an empty string in the panel clears the override. */
 const OPTIONAL_TEXT_KEYS = /* @__PURE__ */ new Set([
 	"provider",
@@ -19867,8 +19765,7 @@ const BOOLEAN_KEYS = /* @__PURE__ */ new Set([
 	"feishuTools.topicMessages",
 	"feishuTools.sendFile",
 	"feishuTools.wikiRead",
-	"feishuTools.wikiWrite",
-	"analyzeEnabled"
+	"feishuTools.wikiWrite"
 ]);
 /** Editable keys rendered as `string-list` (one input per entry). */
 const STRING_LIST_FIELDS = { wikiRoots: {
@@ -20309,12 +20206,6 @@ const FIELD_META = {
 		placeholder: "https://<租户>.feishu.cn/wiki/space/<space_id>",
 		wide: true
 	},
-	analyzeEnabled: {
-		label: "日志分析接口",
-		group: "analyze",
-		summary: "关闭时接口返回 404",
-		help: "接口挂在 DSH Web 端口上：POST /open-api/logalyze，请求需带 Authorization: Bearer <访问令牌>。只有带 Web 的 profile 才有这个接口。改后立即生效，不需要重连。"
-	},
 	loggerLevel: {
 		label: "SDK 日志级别",
 		group: "logging"
@@ -20665,10 +20556,6 @@ var SettingsSurface = class {
 			appSecret: {
 				configured: false,
 				writable: false
-			},
-			analyzeToken: {
-				configured: false,
-				writable: false
 			}
 		};
 		try {
@@ -20684,8 +20571,7 @@ var SettingsSurface = class {
 		});
 		const credentials = {
 			appId: toWire(effective.appId, credentialStates.appId),
-			appSecret: toWire(effective.appSecret, credentialStates.appSecret),
-			analyzeToken: toWire(effective.analyzeToken, credentialStates.analyzeToken)
+			appSecret: toWire(effective.appSecret, credentialStates.appSecret)
 		};
 		let access;
 		try {
@@ -20861,11 +20747,6 @@ var SettingsSurface = class {
 				error: messageOf$1(error)
 			};
 		}
-		if (writes.every((write) => write.field === "analyzeToken")) return {
-			ok: true,
-			panel: await this.panel(),
-			reconnect: "not-needed"
-		};
 		return this.finishCredentialChange("save");
 	}
 	/** Remove the stored value behind one credential reference. */
@@ -20884,11 +20765,6 @@ var SettingsSurface = class {
 				error: messageOf$1(error)
 			};
 		}
-		if (field === "analyzeToken") return {
-			ok: true,
-			panel: await this.panel(),
-			reconnect: "not-needed"
-		};
 		return this.finishCredentialChange("clear");
 	}
 	/**
@@ -21415,7 +21291,9 @@ function apply(ctx, config) {
 		ctx.logger?.warn?.(message, ...args);
 	};
 	mountSettingsRoutes(ctx, new SettingsSurface(service, overlay, { warn }, createHostCatalog(ctx, warn), createSettingsDirectoryPicker(ctx)));
-	mountAnalyzeRoute(ctx, service.analyzeHandler(), warn);
+	ctx.provide?.(FEISHU_TOPICS_SERVICE, service.topics());
+	const moved = movedAnalyzeKeysOf(config);
+	if (moved.length > 0) warn(MOVED_ANALYZE_NOTICE, `cordis.yml 中的 ${moved.join("、")}`);
 	ctx.effect(() => {
 		service.boot().catch((error) => {
 			ctx.logger?.error?.("dsh-channels failed to boot: %s", String(error));
@@ -21425,6 +21303,6 @@ function apply(ctx, config) {
 	}, "dsh-channels");
 }
 //#endregion
-export { AUTH_USER_TARGET_ERRORS, AccessController, AccessRequests, AccessStore, ApprovalAnswerer, CARD_MAX_BYTES, CARD_TARGET_BYTES, CATALOG_ROUTE, CHANNEL_COMMAND_NAMES, CLEAR_CONFIG_ROUTE, CLEAR_CREDENTIAL_ROUTE, Config, DM_DENY_TEXT, DM_DENY_WHITELIST_TEXT, DM_UNCONFIGURED_TEXT, DSH_CHANNELS_VERSION, EDITABLE_KEYS, EMPTY_TOTALS, FIELD_DESCRIPTORS, FeishuService, HEALTH_DEPENDENCY_NAMES, INTERRUPTION_NOTICE, LOGICAL_EXPORT_FORMAT, LOGICAL_EXPORT_FORMAT_VERSION, MAX_QUESTION_OPTIONS, MAX_TABLES_PER_CARD, OverlayStore, PANEL_CHEVRON_TOKEN, PANEL_COPY, PANEL_ROUTE, PANEL_TITLES, PICK_DIRECTORY_ROUTE, QuestionAnswerer, REASONING_MAX_BYTES, RECONNECT_ROUTE, RESTART_KEYS, RouteOperationQueue, SAVE_CONFIG_ROUTE, SAVE_CREDENTIALS_ROUTE, SESSION_HISTORY_DISPLAY_LIMIT, STATUS_ROUTE, SUPPORTED_COMMAND_NAMES, SettingsSurface, TRUNCATION_SUFFIX, TurnStreamer, accessGroupRecordSchema, accessRequestRecordSchema, accessUserRecordSchema, addUsage, appendSessionHistory, apply, applyCatalog, applyProjectionViews, armModelCommand, averageDecodeTokensPerSecond, averageTtftMs, buildApprovalCard, buildApprovalSettledCard, buildCard, buildCommandResultCard, buildCompactComparisonCard, buildGroupInfoCard, buildHealthCard, buildInterruptionCard, buildQuestionCard, buildQuestionSettledCard, buildRenewCard, buildRequestSettledCard, buildSessionHistoryCard, buildSessionStatusCard, buildUserRequestCard, buildWorkDirCard, cacheHitPct, cardJsonBytes, chatRouteKey, commandResultCardKind, compactFailureContext, countFiberStates, createHostCatalog, createLogicalSessionExport, createSettingsDirectoryPicker, decideAccess, defaultOverlayPath, emptyCatalog, ensureWorkspace, expiredRouteRecordSchema, feishuDomain, foldAll, foldEvent, foldHealthSnapshot, foldSessionStats, inflightSnapshotSchema, inject, isAdminUserId, isSupportedCommand, maskOpenIdTail, measureSessionContext, mergeOverlay, mountSettingsRoutes, name, normalizeCredentialValue, normalizeOverlay, normalizeRouteRecord, normalizeSessionHistory, parseOverlay, parseSlashCommand, pickEditable, processedRecordSchema, querySessionHistory, readProjectionViews, registerChannelCommands, registerModelCommand, registerSettingsRoutes, resolveAuthUserTarget, resolveDshHome, resolveWorkDir, routeRecordSchema, segmentCardContent, serializeLogicalSession, sessionDirOf, sessionHistoryEntrySchema, splitBodyForCard, stagingPathFor, stagingRoot, stripTables, supportedCommandHelp, supportedCommandList, tableBlocks, topicDirFor, topicTokenFor, usageFromBuckets, withDirectoryBrowse, workspacePathFor, workspaceTitleFor, worktreeBranchFor };
+export { AUTH_USER_TARGET_ERRORS, AccessController, AccessRequests, AccessStore, ApprovalAnswerer, CARD_MAX_BYTES, CARD_TARGET_BYTES, CATALOG_ROUTE, CHANNEL_COMMAND_NAMES, CLEAR_CONFIG_ROUTE, CLEAR_CREDENTIAL_ROUTE, Config, DM_DENY_TEXT, DM_DENY_WHITELIST_TEXT, DM_UNCONFIGURED_TEXT, DSH_CHANNELS_VERSION, EDITABLE_KEYS, EMPTY_TOTALS, FEISHU_TOPICS_SERVICE, FEISHU_TOPICS_VERSION, FIELD_DESCRIPTORS, FeishuService, HEALTH_DEPENDENCY_NAMES, INTERRUPTION_NOTICE, LOGICAL_EXPORT_FORMAT, LOGICAL_EXPORT_FORMAT_VERSION, MAX_QUESTION_OPTIONS, MAX_TABLES_PER_CARD, OverlayStore, PANEL_CHEVRON_TOKEN, PANEL_COPY, PANEL_ROUTE, PANEL_TITLES, PICK_DIRECTORY_ROUTE, QuestionAnswerer, REASONING_MAX_BYTES, RECONNECT_ROUTE, RESTART_KEYS, RouteOperationQueue, SAVE_CONFIG_ROUTE, SAVE_CREDENTIALS_ROUTE, SESSION_HISTORY_DISPLAY_LIMIT, STATUS_ROUTE, SUPPORTED_COMMAND_NAMES, SettingsSurface, TRUNCATION_SUFFIX, TopicLauncher, TurnStreamer, accessGroupRecordSchema, accessRequestRecordSchema, accessUserRecordSchema, addUsage, appendSessionHistory, apply, applyCatalog, applyProjectionViews, armModelCommand, averageDecodeTokensPerSecond, averageTtftMs, buildApprovalCard, buildApprovalSettledCard, buildCard, buildCommandResultCard, buildCompactComparisonCard, buildGroupInfoCard, buildHealthCard, buildInterruptionCard, buildQuestionCard, buildQuestionSettledCard, buildRenewCard, buildRequestSettledCard, buildSessionHistoryCard, buildSessionStatusCard, buildTopicRootCard, buildUserRequestCard, buildWorkDirCard, cacheHitPct, cardJsonBytes, chatRouteKey, commandResultCardKind, compactFailureContext, countFiberStates, createHostCatalog, createLogicalSessionExport, createSettingsDirectoryPicker, decideAccess, defaultOverlayPath, emptyCatalog, ensureWorkspace, expiredRouteRecordSchema, feishuDomain, foldAll, foldEvent, foldHealthSnapshot, foldSessionStats, inflightSnapshotSchema, inject, isAdminUserId, isSupportedCommand, maskOpenIdTail, measureSessionContext, mergeOverlay, mountSettingsRoutes, name, normalizeCredentialValue, normalizeOverlay, normalizeRouteRecord, normalizeSessionHistory, parseOverlay, parseSlashCommand, pickEditable, processedRecordSchema, querySessionHistory, readProjectionViews, registerChannelCommands, registerModelCommand, registerSettingsRoutes, resolveAuthUserTarget, resolveDshHome, resolveWorkDir, routeRecordSchema, segmentCardContent, serializeLogicalSession, sessionDirOf, sessionHistoryEntrySchema, splitBodyForCard, stagingPathFor, stagingRoot, stripTables, supportedCommandHelp, supportedCommandList, tableBlocks, topicDirFor, topicTokenFor, usageFromBuckets, withDirectoryBrowse, workspacePathFor, workspaceTitleFor, worktreeBranchFor };
 
 //# sourceMappingURL=index.js.map