@modesto_ma/dsh-guanxiang 0.1.0 → 0.2.0-beta.2

package/src/client/page.tsx

@@ -1,13 +1,13 @@
 /**
- * 左侧栏「观象」主区页面：应用仓库、访问令牌、日志下载、高级（含 SKILL 改进）四个分页，共用
- * 一份草稿和底部保存条；令牌值不进草稿，单独存入 DSH 凭据库。仓库拉取中时
- * 每 2 秒刷新状态。
+ * 左侧栏「观象」主区页面：应用仓库、访问令牌、日志下载、分析接口、高级（含 SKILL 改进）五个
+ * 分页，共用一份草稿和底部保存条；令牌值不进草稿，单独存入 DSH 凭据库。
+ * 仓库拉取中时每 2 秒刷新状态。
  *
  * @module dsh-guanxiang/client/page
  */
 
 import { useCallback, useEffect, useMemo, useState } from 'react'
-import type { EditableKey, EditableSettings, GitCredentialSpec, RepoSpec, RepoStatusWire, StateWire, TokenStatusWire } from '../settings/contract.ts'
+import type { AnalyzeWire, EditableKey, EditableSettings, GitCredentialSpec, RepoSpec, RepoStatusWire, StateWire, TokenStatusWire } from '../settings/contract.ts'
 import { clearToken, fetchState, messageOf, resetSettings, saveSettings, saveToken, syncRepos } from './api.ts'
 
 /** Sidebar label and page title. */
@@ -17,12 +17,13 @@ const KB = 1024
 const MB = 1024 * 1024
 const MINUTE = 60 * 1000
 
-type TabId = 'repos' | 'tokens' | 'download' | 'advanced'
+type TabId = 'repos' | 'tokens' | 'download' | 'analyze' | 'advanced'
 
 const TABS: readonly { id: TabId; label: string }[] = [
   { id: 'repos', label: '应用仓库' },
   { id: 'tokens', label: '访问令牌' },
   { id: 'download', label: '日志下载' },
+  { id: 'analyze', label: '分析接口' },
   { id: 'advanced', label: '高级' },
 ]
 
@@ -40,6 +41,7 @@ interface Draft {
   skillUpdatesEnabled: boolean
   skillMaxFiles: string
   skillMaxKb: string
+  analyzeEnabled: boolean
 }
 
 function trimNumber(value: number): string {
@@ -60,6 +62,7 @@ function toDraft(settings: EditableSettings): Draft {
     skillUpdatesEnabled: settings.skillUpdates.enabled,
     skillMaxFiles: String(settings.skillUpdates.maxFiles),
     skillMaxKb: trimNumber(settings.skillUpdates.maxFileBytes / KB),
+    analyzeEnabled: settings.analyze.enabled,
   }
 }
 
@@ -77,7 +80,12 @@ function fromDraft(draft: Draft): EditableSettings {
   return {
     reposDir: draft.reposDir.trim(),
     repos: draft.repos.map(repo => repo.branch === undefined || repo.branch.trim() === '' ? { url: repo.url.trim() } : { url: repo.url.trim(), branch: repo.branch.trim() }),
-    gitCredentials: draft.gitCredentials.map(credential => ({ url: credential.url.trim(), username: credential.username.trim(), tokenEnv: credential.tokenEnv.trim() })),
+    gitCredentials: draft.gitCredentials.map(credential => ({
+      url: credential.url.trim(),
+      ...credential.alias === undefined || credential.alias.trim() === '' ? {} : { alias: credential.alias.trim() },
+      username: credential.username.trim(),
+      tokenEnv: credential.tokenEnv.trim(),
+    })),
     fetchIntervalMs: Math.round(positive(draft.fetchIntervalMin, '更新间隔', true) * MINUTE),
     maxAppsPerRequest: maxApps,
     dispatchTimeoutMs: Math.round(positive(draft.dispatchTimeoutMin, '派发超时') * MINUTE),
@@ -91,6 +99,7 @@ function fromDraft(draft: Draft): EditableSettings {
       maxFiles,
       maxFileBytes: Math.round(positive(draft.skillMaxKb, '提议单文件大小上限') * KB),
     },
+    analyze: { enabled: draft.analyzeEnabled },
   }
 }
 
@@ -174,16 +183,17 @@ export function GuanxiangPanel(): JSX.Element {
 
   const dirty = state !== undefined && draft !== undefined && !sameSettings(draft, state.settings)
 
-  const run = async (action: () => Promise<StateWire>, success: string, resetDraft: boolean): Promise<boolean> => {
+  const run = async (action: () => Promise<StateWire>, success: string, resetDraft: boolean): Promise<StateWire | undefined> => {
     setBusy(true)
     setNotice(undefined)
     try {
-      adopt(await action(), resetDraft)
+      const next = await action()
+      adopt(next, resetDraft)
       setNotice({ kind: 'ok', text: success })
-      return true
+      return next
     } catch (error) {
       setNotice({ kind: 'error', text: messageOf(error) })
-      return false
+      return undefined
     } finally {
       setBusy(false)
     }
@@ -236,11 +246,30 @@ export function GuanxiangPanel(): JSX.Element {
               setDraft={setDraft}
               state={state}
               busy={busy}
-              onSave={(tokenEnv, value) => run(() => saveToken(tokenEnv, value), `已保存 ${tokenEnv}，使用它的仓库会重新拉取`, false)}
-              onClear={(tokenEnv) => run(() => clearToken(tokenEnv), `已清除面板保存的 ${tokenEnv}`, false)}
+              onAdd={async (credential, token) => {
+                const saved = await run(() => saveSettings({ ...state.settings, gitCredentials: [...state.settings.gitCredentials, credential] }), token === '' ? `已添加 ${credential.url}，请填入令牌` : `已添加 ${credential.url}`, false)
+                const added = saved?.settings.gitCredentials[state.settings.gitCredentials.length]
+                if (added === undefined) return false
+                setDraft(current => current === undefined || current.gitCredentials.some(item => item.url === added.url) ? current : { ...current, gitCredentials: [...current.gitCredentials, added] })
+                return token === '' || await run(() => saveToken(added.tokenEnv, token), `已添加 ${added.url} 并保存令牌，使用它的仓库会重新拉取`, false) !== undefined
+              }}
+              onSave={async (tokenEnv, value) => await run(() => saveToken(tokenEnv, value), `已保存 ${tokenEnv}，使用它的仓库会重新拉取`, false) !== undefined}
+              onClear={(tokenEnv) => { void run(() => clearToken(tokenEnv), `已清除面板保存的 ${tokenEnv}`, false) }}
             />
           : null}
         {tab === 'download' ? <DownloadTab draft={draft} setDraft={setDraft} overridden={state.overridden} /> : null}
+        {tab === 'analyze'
+          ? <AnalyzeTab
+              draft={draft}
+              setDraft={setDraft}
+              analyze={state.analyze}
+              credentialsAvailable={state.credentials.available}
+              overridden={state.overridden}
+              busy={busy}
+              onSave={async value => await run(() => saveToken(state.analyze.tokenEnv, value), '已保存分析接口令牌，下一个请求起生效', false) !== undefined}
+              onClear={() => { void run(() => clearToken(state.analyze.tokenEnv), '已清除面板保存的分析接口令牌', false) }}
+            />
+          : null}
         {tab === 'advanced' ? <AdvancedTab draft={draft} setDraft={setDraft} overridden={state.overridden} busy={busy} onReset={() => { void run(resetSettings, '已恢复为 cordis.yml 中的配置', true) }} /> : null}
       </div>
       {notice === undefined ? null : <div className={`gx__notice gx__notice--${notice.kind}`}>{notice.text}</div>}
@@ -314,7 +343,8 @@ function ReposTab({ draft, setDraft, state, busy, onSync }: TabProps & { state:
 }
 
 const DEFAULT_USERNAME = 'oauth2'
-const DEFAULT_TOKEN_ENV = 'GITLAB_TOKEN'
+/** Prefix of the credential keys the panel allocates; namespaced so an unrelated `GITLAB_TOKEN` in the environment is not picked up. */
+const DEFAULT_TOKEN_ENV = 'GUANXIANG_GITLAB_TOKEN'
 
 /** Credential store layers of `@deepseek-ai/dsh-credentials-local` other than its own file. */
 const TOKEN_SOURCES: Readonly<Record<string, string>> = { 'env': '启动环境变量', 'project-env': '项目 .env', 'user-env': '$DSH_HOME/.env' }
@@ -327,54 +357,84 @@ function tokenPill(token: TokenStatusWire | undefined): JSX.Element {
   return <span className="gx__pill gx__pill--ok"><span className="gx__dot" />已设置{source === undefined ? '' : `（来自${source}）`}</span>
 }
 
-function TokensTab({ draft, setDraft, state, busy, onSave, onClear }: TabProps & {
+/**
+ * First of `GUANXIANG_GITLAB_TOKEN`, `GUANXIANG_GITLAB_TOKEN_2`, … that no
+ * saved or drafted entry uses.
+ * @param used - keys already in use.
+ * @returns a free key.
+ */
+function freeTokenEnv(used: ReadonlySet<string>): string {
+  if (!used.has(DEFAULT_TOKEN_ENV)) return DEFAULT_TOKEN_ENV
+  let index = 2
+  while (used.has(`${DEFAULT_TOKEN_ENV}_${index}`)) index += 1
+  return `${DEFAULT_TOKEN_ENV}_${index}`
+}
+
+function TokensTab({ draft, setDraft, state, busy, onAdd, onSave, onClear }: TabProps & {
   state: StateWire
   busy: boolean
+  /** Saves the entry, then its token; resolves whether both succeeded. */
+  onAdd: (credential: GitCredentialSpec, token: string) => Promise<boolean>
   onSave: (tokenEnv: string, value: string) => Promise<boolean>
-  onClear: (tokenEnv: string) => Promise<boolean>
+  onClear: (tokenEnv: string) => void
 }): JSX.Element {
   const [url, setUrl] = useState('')
-  const [username, setUsername] = useState(DEFAULT_USERNAME)
-  const [tokenEnv, setTokenEnv] = useState(DEFAULT_TOKEN_ENV)
+  const [alias, setAlias] = useState('')
+  const [token, setToken] = useState('')
+  const [addError, setAddError] = useState<string | undefined>()
+  // Spans both requests of one addition; `busy` drops between them.
+  const [adding, setAdding] = useState(false)
   const [values, setValues] = useState<Record<string, string>>({})
-  const tokens = useMemo(() => new Map(state.credentials.tokens.map(token => [token.tokenEnv, token])), [state.credentials.tokens])
+  const tokens = useMemo(() => new Map(state.credentials.tokens.map(item => [item.tokenEnv, item])), [state.credentials.tokens])
   const saved = useMemo(() => new Set(state.settings.gitCredentials.map(credential => credential.tokenEnv)), [state.settings.gitCredentials])
+  const complete = url.trim() !== '' && alias.trim() !== '' && token.trim() !== ''
   const add = (): void => {
-    const trimmed = url.trim()
-    if (trimmed === '' || draft.gitCredentials.some(credential => credential.url === trimmed)) return
-    setDraft({ ...draft, gitCredentials: [...draft.gitCredentials, { url: trimmed, username: username.trim() === '' ? DEFAULT_USERNAME : username.trim(), tokenEnv: tokenEnv.trim() === '' ? DEFAULT_TOKEN_ENV : tokenEnv.trim() }] })
-    setUrl('')
+    if (!complete || busy || adding) return
+    const address = url.trim()
+    if (state.settings.gitCredentials.some(credential => credential.url === address)) {
+      setAddError('这个地址已经添加过了，请在上面的列表里更新它的令牌。')
+      return
+    }
+    setAddError(undefined)
+    setAdding(true)
+    const tokenEnv = freeTokenEnv(new Set([...saved, ...draft.gitCredentials.map(credential => credential.tokenEnv)]))
+    void onAdd({ url: address, alias: alias.trim(), username: DEFAULT_USERNAME, tokenEnv }, token.trim()).then((ok) => {
+      if (!ok) return
+      setUrl('')
+      setAlias('')
+      setToken('')
+    }).finally(() => { setAdding(false) })
   }
   const save = (name: string): void => {
     const value = values[name]?.trim() ?? ''
-    if (value === '') return
+    if (value === '' || busy || adding) return
     void onSave(name, value).then((ok) => { if (ok) setValues(current => ({ ...current, [name]: '' })) })
   }
+  const submitOnEnter = (event: { key: string }): void => { if (event.key === 'Enter') add() }
   return (
     <section className="gx__sec">
-      <h2 className="gx__secTitle">HTTPS 访问令牌 <Overridden keys={state.overridden} name="gitCredentials" /></h2>
+      <h2 className="gx__secTitle">GitLab 访问令牌 <Overridden keys={state.overridden} name="gitCredentials" /></h2>
       {state.credentials.available ? null : <div className="gx__notice gx__notice--error">当前 DSH 组合没有加载凭据服务（@deepseek-ai/dsh-credentials-local），无法保存或读取令牌。</div>}
       <div className="gx__list">
-        {draft.gitCredentials.length === 0 ? <div className="gx__emptyRow">还没有访问令牌。用 https 地址拉取 GitLab 等私有仓库时，添加服务器地址后保存，再填入个人访问令牌。</div> : null}
+        {draft.gitCredentials.length === 0 ? <div className="gx__emptyRow">还没有访问令牌。用 https 地址拉取 GitLab 私有仓库时，在下面填入 GitLab 地址、令牌别名和令牌。</div> : null}
         {draft.gitCredentials.map((credential, index) => {
-          const token = saved.has(credential.tokenEnv) ? tokens.get(credential.tokenEnv) : undefined
+          const status = saved.has(credential.tokenEnv) ? tokens.get(credential.tokenEnv) : undefined
           const value = values[credential.tokenEnv] ?? ''
           return (
             <div key={credential.url} className="gx__row gx__row--top">
               <div className="gx__rowText">
                 <div className="gx__rowLabel">
-                  <span className="gx__mono">{credential.url}</span>
-                  <span className="gx__tag">用户名 {credential.username}</span>
-                  {tokenPill(token)}
+                  <span>{credential.alias ?? credential.url}</span>
+                  {tokenPill(status)}
                 </div>
-                <div className="gx__rowSummary">令牌名称 <span className="gx__mono">{credential.tokenEnv}</span></div>
-                {token?.error === undefined ? null : <div className="gx__rowError">{token.error}</div>}
-                {token !== undefined && token.writable
+                {credential.alias === undefined ? null : <div className="gx__rowSummary gx__mono">{credential.url}</div>}
+                {status?.error === undefined ? null : <div className="gx__rowError">{status.error}</div>}
+                {status !== undefined && status.writable
                   ? (
                       <div className="gx__addRow gx__addRow--flush">
-                        <input className="gx__input gx__mono" type="password" autoComplete="new-password" spellCheck={false} placeholder={token.configured ? '输入新令牌以替换' : '粘贴个人访问令牌，例如 glpat-…'} value={value} onChange={(event) => { setValues({ ...values, [credential.tokenEnv]: event.target.value }) }} onKeyDown={(event) => { if (event.key === 'Enter') save(credential.tokenEnv) }} />
-                        <button type="button" className="gx__btn" disabled={busy || value.trim() === ''} onClick={() => { save(credential.tokenEnv) }}>保存令牌</button>
-                        {token.configured && token.source === 'file' ? <button type="button" className="gx__btn gx__btn--ghost" disabled={busy} onClick={() => { void onClear(credential.tokenEnv) }}>清除</button> : null}
+                        <input className="gx__input gx__mono" type="password" autoComplete="new-password" spellCheck={false} placeholder={status.configured ? '输入新令牌以替换' : '粘贴令牌'} value={value} onChange={(event) => { setValues({ ...values, [credential.tokenEnv]: event.target.value }) }} onKeyDown={(event) => { if (event.key === 'Enter') save(credential.tokenEnv) }} />
+                        <button type="button" className="gx__btn" disabled={busy || adding || value.trim() === ''} onClick={() => { save(credential.tokenEnv) }}>保存令牌</button>
+                        {status.configured && status.source === 'file' ? <button type="button" className="gx__btn gx__btn--ghost" disabled={busy} onClick={() => { onClear(credential.tokenEnv) }}>清除</button> : null}
                       </div>
                     )
                   : null}
@@ -385,14 +445,17 @@ function TokensTab({ draft, setDraft, state, busy, onSave, onClear }: TabProps &
             </div>
           )
         })}
-        <div className="gx__addRow">
-          <input className="gx__input" placeholder="服务器地址，例如 https://gitlab.example.com" value={url} onChange={(event) => { setUrl(event.target.value) }} onKeyDown={(event) => { if (event.key === 'Enter') add() }} />
-          <input className="gx__input gx__input--branch" placeholder={`用户名（默认 ${DEFAULT_USERNAME}）`} value={username} onChange={(event) => { setUsername(event.target.value) }} onKeyDown={(event) => { if (event.key === 'Enter') add() }} />
-          <input className="gx__input gx__input--branch gx__mono" placeholder="令牌名称" value={tokenEnv} onChange={(event) => { setTokenEnv(event.target.value) }} onKeyDown={(event) => { if (event.key === 'Enter') add() }} />
-          <button type="button" className="gx__btn" disabled={url.trim() === ''} onClick={add}>添加</button>
+        <div className="gx__addForm">
+          <div className="gx__addRow gx__addRow--flush">
+            <label className="gx__field">GitLab 地址<input className="gx__input" placeholder="https://gitlab.example.com" value={url} onChange={(event) => { setUrl(event.target.value) }} onKeyDown={submitOnEnter} /></label>
+            <label className="gx__field">令牌别名<input className="gx__input" placeholder="例如 guanxiang" value={alias} onChange={(event) => { setAlias(event.target.value) }} onKeyDown={submitOnEnter} /></label>
+            <label className="gx__field">令牌<input className="gx__input gx__mono" type="password" autoComplete="new-password" spellCheck={false} placeholder="粘贴个人访问令牌" value={token} onChange={(event) => { setToken(event.target.value) }} onKeyDown={submitOnEnter} /></label>
+            <button type="button" className="gx__btn gx__btn--end" disabled={busy || adding || !complete} onClick={add}>添加</button>
+          </div>
+          {addError === undefined ? null : <div className="gx__rowError">{addError}</div>}
         </div>
       </div>
-      <p className="gx__secFoot">地址在这个前缀下的 https 仓库使用对应令牌拉取（多个匹配时取路径最长的），ssh 地址不受影响。GitLab 个人访问令牌需要 read_repository 权限，用户名填 oauth2 即可。令牌保存在 DSH 凭据库（默认 $DSH_HOME/.credentials.yaml，仅本机用户可读），面板只显示是否已设置；也可以设置与令牌名称同名的环境变量。拉取时令牌只经环境变量交给 git，不写入仓库配置、日志或模型上下文。</p>
+      <p className="gx__secFoot">地址在这个前缀下的 https 仓库使用对应令牌（多个匹配时取路径最长的），ssh 地址不受影响。拉取需要 read_repository 权限，开启 SKILL 改进时还需要 write_repository。令牌保存在 DSH 凭据库（默认 $DSH_HOME/.credentials.yaml，仅本机用户可读），面板只显示是否已设置；令牌只经环境变量交给 git，不写入设置文件、仓库配置、日志或模型上下文。</p>
     </section>
   )
 }
@@ -435,6 +498,74 @@ function DownloadTab({ draft, setDraft, overridden }: TabProps & { overridden: r
   )
 }
 
+const TOPICS_STATUS: Readonly<Record<AnalyzeWire['topics'], { pill: string; text: string }>> = {
+  ready: { pill: 'gx__pill--ok', text: '飞书渠道就绪' },
+  missing: { pill: 'gx__pill--bad', text: '未找到飞书渠道' },
+  incompatible: { pill: 'gx__pill--bad', text: '飞书渠道版本不兼容' },
+}
+
+function AnalyzeTab({ draft, setDraft, analyze, credentialsAvailable, overridden, busy, onSave, onClear }: TabProps & {
+  analyze: AnalyzeWire
+  credentialsAvailable: boolean
+  overridden: readonly EditableKey[]
+  busy: boolean
+  onSave: (value: string) => Promise<boolean>
+  onClear: () => void
+}): JSX.Element {
+  const [value, setValue] = useState('')
+  const token = analyze.token
+  const save = (): void => {
+    const trimmed = value.trim()
+    if (trimmed === '' || busy) return
+    void onSave(trimmed).then((ok) => { if (ok) setValue('') })
+  }
+  const topics = TOPICS_STATUS[analyze.topics]
+  const endpoint = new URL(analyze.route.slice(1), document.baseURI).href
+  return (
+    <>
+      <section className="gx__sec">
+        <h2 className="gx__secTitle">日志平台分析接口</h2>
+        <div className="gx__list">
+          <div className="gx__row">
+            <div className="gx__rowText">
+              <div className="gx__rowLabel">开启接口 <Overridden keys={overridden} name="analyze" /><span className={`gx__pill ${topics.pill}`}><span className="gx__dot" />{topics.text}</span></div>
+              <div className="gx__rowSummary">日志平台调用接口后，观象经飞书渠道（dsh-channels 0.8 及以上）在目标群发出分析卡片，并在卡片下的话题里开始分析；群内成员都可以在话题里继续追问。关闭时接口回复 404。</div>
+              {analyze.topics === 'ready' ? null : <div className="gx__rowError">{analyze.topics === 'missing' ? '接口需要 dsh-channels 0.8 及以上版本并已加载；dsh-channels 0.7 自带同名接口，升级前由它提供。' : '请把观象与 dsh-channels 升级到相互兼容的版本。'}</div>}
+            </div>
+            <div className="gx__rowCtl"><input type="checkbox" className="gx__check" aria-label="开启分析接口" checked={draft.analyzeEnabled} onChange={(event) => { setDraft({ ...draft, analyzeEnabled: event.target.checked }) }} /></div>
+          </div>
+          <div className="gx__row gx__row--top">
+            <div className="gx__rowText">
+              <div className="gx__rowLabel">访问令牌 <span className="gx__tag gx__mono">{analyze.tokenEnv}</span>{credentialsAvailable ? tokenPill(token) : null}</div>
+              <div className="gx__rowSummary">日志平台以 <span className="gx__mono">Authorization: Bearer &lt;令牌&gt;</span> 调用接口。令牌未设置时接口回复 503。</div>
+              {credentialsAvailable ? null : <div className="gx__rowError">当前 DSH 组合没有加载凭据服务（@deepseek-ai/dsh-credentials-local），无法保存或读取令牌。</div>}
+              {token?.error === undefined ? null : <div className="gx__rowError">{token.error}</div>}
+              {token !== undefined && token.writable
+                ? (
+                    <div className="gx__addRow gx__addRow--flush">
+                      <input className="gx__input gx__mono" type="password" autoComplete="new-password" spellCheck={false} placeholder={token.configured ? '输入新令牌以替换' : '粘贴令牌'} value={value} onChange={(event) => { setValue(event.target.value) }} onKeyDown={(event) => { if (event.key === 'Enter') save() }} />
+                      <button type="button" className="gx__btn" disabled={busy || value.trim() === ''} onClick={save}>保存令牌</button>
+                      {token.configured && token.source === 'file' ? <button type="button" className="gx__btn gx__btn--ghost" disabled={busy} onClick={onClear}>清除</button> : null}
+                    </div>
+                  )
+                : null}
+            </div>
+          </div>
+        </div>
+      </section>
+      <section className="gx__sec">
+        <h2 className="gx__secTitle">调用方式</h2>
+        <div className="gx__list">
+          <div className="gx__row"><div className="gx__rowText"><div className="gx__rowLabel">地址</div><div className="gx__rowSummary gx__mono">POST {endpoint}</div></div></div>
+          <div className="gx__row"><div className="gx__rowText"><div className="gx__rowLabel">请求头</div><div className="gx__rowSummary gx__mono">Authorization: Bearer &lt;令牌&gt; · Idempotency-Key: &lt;1-200 个可见 ASCII 字符&gt; · Content-Type: application/json</div></div></div>
+          <div className="gx__row"><div className="gx__rowText"><div className="gx__rowLabel">请求体</div><div className="gx__rowSummary gx__mono">requesterUserId, triggeredAt, app, errorCode, logDetails[{'{'}name, url{'}'}], chatId, prompt</div></div></div>
+          <div className="gx__row"><div className="gx__rowText"><div className="gx__rowLabel">响应</div><div className="gx__rowSummary">202 已发出分析卡片（同一 Idempotency-Key 重试返回同一张卡片）；400/401/404/405/409/413/415 请求问题；403 目标群未授权；502 卡片发送失败；503 飞书未连接或令牌未设置。字段说明见观象 README。</div></div></div>
+        </div>
+      </section>
+    </>
+  )
+}
+
 function AdvancedTab({ draft, setDraft, overridden, busy, onReset }: TabProps & { overridden: readonly EditableKey[]; busy: boolean; onReset: () => void }): JSX.Element {
   return (
     <>

package/src/client/styles.ts

@@ -51,6 +51,10 @@ const CSS = `
 .gx__addRow .gx__input{flex:1 1 160px;width:auto}
 .gx__addRow .gx__input--branch{flex:0 1 140px}
 .gx__addRow--flush{padding:6px 0 0}
+.gx__addForm{display:flex;flex-direction:column;gap:6px;padding:10px 14px}
+.gx__field{display:flex;flex-direction:column;gap:2px;flex:1 1 160px;color:var(--gx-fg3);font-size:12px}
+.gx__field .gx__input{flex:none;width:100%}
+.gx__btn--end{align-self:flex-end;height:30px}
 .gx__emptyRow{padding:11px 14px;color:var(--gx-fg3);font-size:12px}
 .gx__btn{box-sizing:border-box;display:inline-flex;align-items:center;justify-content:center;gap:4px;height:28px;padding:0 12px;border:1px solid var(--gx-line);border-radius:7px;background:transparent;color:inherit;font:inherit;font-size:13px;cursor:pointer;white-space:nowrap}
 .gx__btn:hover:not(:disabled){background:var(--gx-hover)}

package/src/config.ts

@@ -8,7 +8,8 @@
 import { homedir } from 'node:os'
 import { isAbsolute, join, resolve } from 'node:path'
 import { z } from 'zod'
-import { normalizeCredentialUrl, TOKEN_ENV_PATTERN } from './repos/credentials.ts'
+import { normalizeCredentialUrl } from './repos/credentials.ts'
+import { TOKEN_ENV_PATTERN } from './settings/contract.ts'
 import type { EditableSettings, GitCredentialSpec, RepoSpec } from './settings/contract.ts'
 
 /** Largest delay Node's `setTimeout` honors (2^31 − 1 ms). */
@@ -61,8 +62,10 @@ const credentialSchema = z.object({
   url: z.string().trim()
     .refine(value => normalizeCredentialUrl(value) !== undefined, '令牌地址不合法：填 https://主机[:端口][/路径]，不含用户名、查询参数或片段')
     .transform(value => normalizeCredentialUrl(value) as string),
+  alias: z.string().trim().max(64, '令牌别名不能超过 64 个字符').regex(/^[^\u0000-\u001f\u007f]*$/, '令牌别名不能包含控制字符').optional()
+    .transform(value => value === '' ? undefined : value),
   username: z.string().trim().regex(/^\S+$/, '用户名不能为空或包含空白').default('oauth2'),
-  tokenEnv: z.string().trim().regex(TOKEN_ENV_PATTERN, '令牌名称只能包含字母、数字和下划线，且不能以数字开头'),
+  tokenEnv: z.string().trim().regex(TOKEN_ENV_PATTERN, '令牌名称只能包含字母、数字和下划线，且不能以数字开头（它是凭据库中的键名，不是令牌本身）'),
 }).strict()
 
 const hostSchema = z.string().trim().toLowerCase()
@@ -83,6 +86,10 @@ const skillUpdatesSchema = z.object({
   maxFileBytes: z.number().int().min(1).max(16 * 1024 * 1024).default(256 * 1024),
 }).strict()
 
+const analyzeSchema = z.object({
+  enabled: z.boolean().default(false),
+}).strict()
+
 const authorSchema = z.object({
   name: z.string().trim().min(1, '提交作者名不能为空').refine(value => !/[<>\n]/.test(value), '提交作者名不能包含 < > 或换行'),
   email: z.string().trim().min(1, '提交作者邮箱不能为空').refine(value => !/[<>\s]/.test(value), '提交作者邮箱不能包含 < > 或空白'),
@@ -110,6 +117,7 @@ export const editableFields = {
   dispatchTimeoutMs: durationMs(1000),
   download: downloadSchema,
   skillUpdates: skillUpdatesSchema,
+  analyze: analyzeSchema,
 }
 
 const configSchema = z.object({
@@ -122,6 +130,12 @@ const configSchema = z.object({
   dispatchTimeoutMs: editableFields.dispatchTimeoutMs.default(30 * 60 * 1000),
   download: downloadSchema.prefault({}),
   skillUpdates: skillUpdatesSchema.prefault({}),
+  analyze: analyzeSchema.prefault({}),
+  /**
+   * Credential reference (environment-variable name) whose value is the
+   * analyze API's bearer token.
+   */
+  analyzeTokenRef: z.string().trim().regex(TOKEN_ENV_PATTERN, '令牌名称只能包含字母、数字和下划线，且不能以数字开头').default('GUANXIANG_ANALYZE_TOKEN'),
   /**
    * Author and committer of SKILL improvement commits; omitted uses the git
    * identity configured on the host (`user.name` / `user.email`).
@@ -160,6 +174,7 @@ export const overlaySchema = z.object({
   dispatchTimeoutMs: editableFields.dispatchTimeoutMs.optional(),
   download: downloadSchema.optional(),
   skillUpdates: skillUpdatesSchema.optional(),
+  analyze: analyzeSchema.optional(),
 }).strict()
 
 /** Validated panel overlay. */
@@ -219,7 +234,12 @@ function copyRepos(repos: readonly RepoSpec[]): RepoSpec[] {
 }
 
 function copyCredentials(credentials: readonly GitCredentialSpec[]): GitCredentialSpec[] {
-  return credentials.map(credential => ({ url: credential.url, username: credential.username, tokenEnv: credential.tokenEnv }))
+  return credentials.map(credential => ({
+    url: credential.url,
+    ...credential.alias === undefined ? {} : { alias: credential.alias },
+    username: credential.username,
+    tokenEnv: credential.tokenEnv,
+  }))
 }
 
 /**
@@ -239,6 +259,7 @@ export function defaultsOf(config: GuanxiangConfig, env: NodeJS.ProcessEnv = pro
     dispatchTimeoutMs: config.dispatchTimeoutMs,
     download: { ...config.download, allowedHosts: [...config.download.allowedHosts] },
     skillUpdates: { ...config.skillUpdates },
+    analyze: { ...config.analyze },
   }
 }
 
@@ -259,5 +280,6 @@ export function applyOverlay(defaults: EditableSettings, overlay: SettingsOverla
     dispatchTimeoutMs: overlay.dispatchTimeoutMs ?? defaults.dispatchTimeoutMs,
     download: overlay.download ?? defaults.download,
     skillUpdates: overlay.skillUpdates ?? defaults.skillUpdates,
+    analyze: overlay.analyze ?? defaults.analyze,
   }
 }

package/src/index.ts

@@ -8,11 +8,13 @@
  * 改进时的 `guanxiang_propose_skill` 工具（经用户授权后把子 Agent 的 SKILL
  * 修改提议推送到新分支并创建合并请求）。应用仓库在设置
  * 面板中只填 git 地址，由插件拉取；应用描述来自各仓库的
- * `.dsh/guanxiang.yaml`。
+ * `.dsh/guanxiang.yaml`。另提供日志平台分析接口 `POST /open-api/logalyze`，
+ * 经 dsh-channels 的 `feishuTopics` 服务在飞书群话题中开始分析。
  *
  * @module dsh-guanxiang
  */
 
+import { mountAnalyzeRoute } from './analyze/server.ts'
 import { resolveConfig } from './config.ts'
 import type { HostContext } from './host.ts'
 import { GuanxiangService } from './service.ts'
@@ -32,7 +34,9 @@ export { ENTRY_SKILL_NAME, renderEntrySkill } from './skill/entry.ts'
 export { RepoRegistry } from './repos/registry.ts'
 export { readAppManifest, MANIFEST_PATH } from './repos/manifest.ts'
 export { GuanxiangService } from './service.ts'
-export { SETTINGS_ROUTE, STATE_ROUTE, SYNC_ROUTE } from './settings/contract.ts'
+export { ANALYZE_ROUTE, SETTINGS_ROUTE, STATE_ROUTE, SYNC_ROUTE } from './settings/contract.ts'
+export { analyzeRequestHash, parseAnalyzeRequest } from './analyze/contract.ts'
+export type { AnalyzeAccepted, AnalyzeRefused, AnalyzeRequest } from './analyze/contract.ts'
 
 /** Cordis plugin name. */
 export const name = 'guanxiang'
@@ -50,8 +54,9 @@ export interface GuanxiangPluginOptions extends ServiceOptions {
 }
 
 /**
- * Install the entry skill, the dispatch and SKILL proposal tools, and the settings routes, then
- * clone or update the configured repositories in the background.
+ * Install the entry skill, the dispatch and SKILL proposal tools, the settings
+ * routes, and the analyze route, then clone or update the configured
+ * repositories in the background.
  * @param ctx - plugin context.
  * @param config - loader-validated configuration.
  * @param options - test seams.
@@ -61,6 +66,7 @@ export function apply(ctx: HostContext, config?: unknown, options: GuanxiangPlug
   service.registerSkill()
   service.registerTool()
   mountSettingsRoutes(ctx, service)
+  mountAnalyzeRoute(ctx, service.analyzeGate())
   ctx.effect(() => {
     void service.boot().catch((error: unknown) => {
       ctx.logger?.error?.('guanxiang: 启动失败：%s', error instanceof Error ? error.message : String(error))

package/src/repos/credentials.ts

@@ -9,6 +9,8 @@
 
 import type { GitCredentialSpec } from '../settings/contract.ts'
 
+export { TOKEN_ENV_PATTERN } from '../settings/contract.ts'
+
 /** Environment variables the helper reads; set only on git child processes. */
 const USERNAME_VARIABLE = 'GUANXIANG_GIT_USERNAME'
 const TOKEN_VARIABLE = 'GUANXIANG_GIT_TOKEN'
@@ -16,9 +18,6 @@ const TOKEN_VARIABLE = 'GUANXIANG_GIT_TOKEN'
 /** Answers git's `get` request from the two variables and ignores `store` and `erase`. */
 const HELPER = `!f() { test "$1" = get || exit 0; printf 'username=%s\\npassword=%s\\n' "$${USERNAME_VARIABLE}" "$${TOKEN_VARIABLE}"; }; f`
 
-/** Credential reference grammar of `@deepseek-ai/dsh-credentials` (a POSIX shell identifier). */
-export const TOKEN_ENV_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/
-
 /** Longest accepted token; personal access tokens are far shorter. */
 export const MAX_TOKEN_LENGTH = 4096
 

package/src/service.ts

@@ -9,13 +9,16 @@ import { z } from 'zod'
 import { applyOverlay, defaultsOf, describeIssue, editableSettingsSchema, expandHome } from './config.ts'
 import type { GuanxiangConfig, SettingsOverlay } from './config.ts'
 import { abortable } from './abort.ts'
+import type { AnalyzeGate } from './analyze/server.ts'
+import { FEISHU_TOPICS_SERVICE, lookupTopics } from './analyze/topics.ts'
 import { Dispatcher, isDelegatedAgent, isInside } from './dispatch/tool.ts'
 import type { HostApproval, HostContext, HostCredentials, ToolActivationContext, WorkingDirectoryService } from './host.ts'
 import { credentialEnvironment, credentialFor, isAcceptedToken, MAX_TOKEN_LENGTH } from './repos/credentials.ts'
 import { runGit } from './repos/git.ts'
 import type { GitRunner } from './repos/git.ts'
 import { RepoRegistry } from './repos/registry.ts'
-import type { CredentialsWire, EditableSettings, StateWire, TokenStatusWire } from './settings/contract.ts'
+import { ANALYZE_ROUTE } from './settings/contract.ts'
+import type { AnalyzeWire, CredentialsWire, EditableSettings, StateWire, TokenStatusWire } from './settings/contract.ts'
 import { diffOverlay, overriddenKeys } from './settings/overlay.ts'
 import type { OverlayStore } from './settings/overlay.ts'
 import { createEntrySkillProvider } from './skill/entry.ts'
@@ -47,6 +50,7 @@ export class GuanxiangService {
   private readonly skill: ReturnType<typeof createEntrySkillProvider>
   private active = true
   private readonly refreshWaitMs: number
+  private readonly analyzeTokenRef: string
   private readonly booted = Promise.withResolvers<void>()
 
   /**
@@ -63,6 +67,7 @@ export class GuanxiangService {
   ) {
     this.defaults = defaultsOf(config)
     this.refreshWaitMs = config.refreshWaitMs
+    this.analyzeTokenRef = config.analyzeTokenRef
     this.current = this.defaults
     const git = options.git ?? runGit
     this.registry = new RepoRegistry({
@@ -195,6 +200,33 @@ export class GuanxiangService {
       ...this.overlayError === undefined ? {} : { overlayError: this.overlayError },
       repos: this.registry.status(),
       credentials: await this.credentialsState(),
+      analyze: await this.analyzeState(),
+    }
+  }
+
+  /** @returns the analyze route's switch and bearer token, read per request. */
+  analyzeGate(): AnalyzeGate {
+    return {
+      enabled: () => this.current.analyze.enabled,
+      tokenEnv: () => this.analyzeTokenRef,
+      token: async () => {
+        try {
+          return (await this.credentialStore()?.resolve(this.analyzeTokenRef))?.value
+        } catch (error) {
+          this.ctx.logger?.warn?.('guanxiang: 读取分析接口令牌 %s 失败：%s', this.analyzeTokenRef, error instanceof Error ? error.message : String(error))
+          return undefined
+        }
+      },
+    }
+  }
+
+  private async analyzeState(): Promise<AnalyzeWire> {
+    const store = this.credentialStore()
+    return {
+      route: ANALYZE_ROUTE,
+      tokenEnv: this.analyzeTokenRef,
+      ...store === undefined ? {} : { token: await describeToken(store, this.analyzeTokenRef) },
+      topics: lookupTopics(this.ctx.get?.(FEISHU_TOPICS_SERVICE)).availability,
     }
   }
 
@@ -206,14 +238,7 @@ export class GuanxiangService {
     const store = this.credentialStore()
     if (store === undefined) return { available: false, tokens: [] }
     const names = [...new Set(this.current.gitCredentials.map(credential => credential.tokenEnv))]
-    const tokens = await Promise.all(names.map(async (tokenEnv): Promise<TokenStatusWire> => {
-      try {
-        const info = await store.describe(tokenEnv)
-        return { tokenEnv, configured: info.configured, ...info.source === undefined ? {} : { source: info.source }, writable: info.writable }
-      } catch (error) {
-        return { tokenEnv, configured: false, writable: false, error: error instanceof Error ? error.message : String(error) }
-      }
-    }))
+    const tokens = await Promise.all(names.map(tokenEnv => describeToken(store, tokenEnv)))
     return { available: true, tokens }
   }
 
@@ -237,10 +262,11 @@ export class GuanxiangService {
 
   /**
    * Store the token of one access-token configuration in DSH's credential
-   * store, then re-sync the repositories that use it.
+   * store, then re-sync the repositories that use it; or store the analyze
+   * API's bearer token (`analyzeTokenRef`), which applies from the next request.
    * @param raw - request body `{ tokenEnv, value }`.
    * @returns the new panel state.
-   * @throws SettingsError when the body is invalid, the name is not referenced by the saved settings, or no credential store is loaded.
+   * @throws SettingsError when the body is invalid, the name is neither referenced by the saved settings nor `analyzeTokenRef`, or no credential store is loaded.
    */
   async setToken(raw: unknown): Promise<StateWire> {
     const parsed = tokenSetSchema.safeParse(raw)
@@ -262,7 +288,7 @@ export class GuanxiangService {
   }
 
   private async writeToken(tokenEnv: string, value: string | undefined): Promise<StateWire> {
-    if (!this.current.gitCredentials.some(credential => credential.tokenEnv === tokenEnv)) throw new SettingsError(`${tokenEnv} 不是已保存的访问令牌配置引用的名称`)
+    if (tokenEnv !== this.analyzeTokenRef && !this.current.gitCredentials.some(credential => credential.tokenEnv === tokenEnv)) throw new SettingsError(`${tokenEnv} 不是已保存的访问令牌配置引用的名称`)
     const store = this.credentialStore()
     if (store === undefined) throw new SettingsError('当前 DSH 组合没有凭据服务（@deepseek-ai/dsh-credentials-local），无法保存令牌')
     if (value === undefined) await store.unset(tokenEnv)
@@ -329,3 +355,12 @@ export class GuanxiangService {
     this.skill.invalidate()
   }
 }
+
+async function describeToken(store: HostCredentials, tokenEnv: string): Promise<TokenStatusWire> {
+  try {
+    const info = await store.describe(tokenEnv)
+    return { tokenEnv, configured: info.configured, ...info.source === undefined ? {} : { source: info.source }, writable: info.writable }
+  } catch (error) {
+    return { tokenEnv, configured: false, writable: false, error: error instanceof Error ? error.message : String(error) }
+  }
+}