@modesto_ma/dsh-guanxiang 0.2.0-beta.2 → 0.2.0-beta.4

package/lib/client.js

@@ -48,8 +48,12 @@ window.__ModuleLoader__.load({
 		const SETTINGS_ROUTE = "/guanxiang/settings";
 		/** POST：立即重新拉取全部仓库，或 body `{ url }` 指定的一个仓库。 */
 		const SYNC_ROUTE = "/guanxiang/sync";
-		/** PUT：body `{ tokenEnv, value }` 把令牌存入 DSH 凭据库；DELETE：body `{ tokenEnv }` 删除已存的值。只接受已保存的访问令牌配置引用的名称和分析接口令牌的名称。 */
+		/** PUT：body `{ tokenEnv, value }` 把分析接口令牌存入 DSH 凭据库；DELETE：body `{ tokenEnv }` 删除已存的值。只接受分析接口令牌的名称。 */
 		const TOKEN_ROUTE = "/guanxiang/token";
+		/** POST：body {@link HostAddRequest} 经 dsh-repo 添加主机；DELETE：body `{ url }` 删除面板添加的主机。 */
+		const HOSTS_ROUTE = "/guanxiang/hosts";
+		/** PUT：body `{ url, value }` 经 dsh-repo 保存主机令牌；DELETE：body `{ url }` 清除已存的令牌。 */
+		const HOST_TOKEN_ROUTE = "/guanxiang/host-token";
 		//#endregion
 		//#region src/client/api.ts
 		/**
@@ -129,8 +133,8 @@ window.__ModuleLoader__.load({
 			})).state;
 		}
 		/**
-		* Store an access token in DSH's credential store.
-		* @param tokenEnv - credential reference named by a saved access-token configuration.
+		* Store the analyze token in DSH's credential store.
+		* @param tokenEnv - the analyze token's credential reference.
 		* @param value - token value.
 		* @returns the new state, which reports only whether the token is set.
 		*/
@@ -144,8 +148,8 @@ window.__ModuleLoader__.load({
 			})).state;
 		}
 		/**
-		* Remove a stored access token.
-		* @param tokenEnv - credential reference named by a saved access-token configuration.
+		* Remove the stored analyze token.
+		* @param tokenEnv - the analyze token's credential reference.
 		* @returns the new state.
 		*/
 		async function clearToken(tokenEnv) {
@@ -154,11 +158,60 @@ window.__ModuleLoader__.load({
 				body: JSON.stringify({ tokenEnv })
 			})).state;
 		}
+		/**
+		* Add a dsh-repo host, with its token.
+		* @param host - kind, address, alias, and token.
+		* @returns the new state.
+		*/
+		async function addHost(host) {
+			return (await request(HOSTS_ROUTE, {
+				method: "POST",
+				body: JSON.stringify(host)
+			})).state;
+		}
+		/**
+		* Remove a host added from a panel.
+		* @param url - host address.
+		* @returns the new state.
+		*/
+		async function removeHost(url) {
+			return (await request(HOSTS_ROUTE, {
+				method: "DELETE",
+				body: JSON.stringify({ url })
+			})).state;
+		}
+		/**
+		* Store a host's token.
+		* @param url - host address.
+		* @param value - token value.
+		* @returns the new state, which reports only whether the token is set.
+		*/
+		async function saveHostToken(url, value) {
+			return (await request(HOST_TOKEN_ROUTE, {
+				method: "PUT",
+				body: JSON.stringify({
+					url,
+					value
+				})
+			})).state;
+		}
+		/**
+		* Remove a host's stored token.
+		* @param url - host address.
+		* @returns the new state.
+		*/
+		async function clearHostToken(url) {
+			return (await request(HOST_TOKEN_ROUTE, {
+				method: "DELETE",
+				body: JSON.stringify({ url })
+			})).state;
+		}
 		//#endregion
 		//#region src/client/page.tsx
 		/**
 		* 左侧栏「观象」主区页面：应用仓库、访问令牌、日志下载、分析接口、高级（含 SKILL 改进）五个
-		* 分页，共用一份草稿和底部保存条；令牌值不进草稿，单独存入 DSH 凭据库。
+		* 分页，共用一份草稿和底部保存条。访问令牌分页管理 dsh-repo 的主机，改动立即
+		* 生效，不进草稿；令牌值存入 DSH 凭据库。
 		* 仓库拉取中时每 2 秒刷新状态。
 		*
 		* @module dsh-guanxiang/client/page
@@ -195,9 +248,7 @@ window.__ModuleLoader__.load({
 		}
 		function toDraft(settings) {
 			return {
-				reposDir: settings.reposDir,
 				repos: settings.repos.map((repo) => ({ ...repo })),
-				gitCredentials: settings.gitCredentials.map((credential) => ({ ...credential })),
 				fetchIntervalMin: trimNumber(settings.fetchIntervalMs / MINUTE),
 				maxAppsPerRequest: String(settings.maxAppsPerRequest),
 				dispatchTimeoutMin: trimNumber(settings.dispatchTimeoutMs / MINUTE),
@@ -221,17 +272,10 @@ window.__ModuleLoader__.load({
 			const maxFiles = positive(draft.skillMaxFiles, "提议文件数上限");
 			if (!Number.isInteger(maxFiles)) throw new Error("提议文件数上限必须是整数");
 			return {
-				reposDir: draft.reposDir.trim(),
 				repos: draft.repos.map((repo) => repo.branch === void 0 || repo.branch.trim() === "" ? { url: repo.url.trim() } : {
 					url: repo.url.trim(),
 					branch: repo.branch.trim()
 				}),
-				gitCredentials: draft.gitCredentials.map((credential) => ({
-					url: credential.url.trim(),
-					...credential.alias === void 0 || credential.alias.trim() === "" ? {} : { alias: credential.alias.trim() },
-					username: credential.username.trim(),
-					tokenEnv: credential.tokenEnv.trim()
-				})),
 				fetchIntervalMs: Math.round(positive(draft.fetchIntervalMin, "更新间隔", true) * MINUTE),
 				maxAppsPerRequest: maxApps,
 				dispatchTimeoutMs: Math.round(positive(draft.dispatchTimeoutMin, "派发超时") * MINUTE),
@@ -465,25 +509,15 @@ window.__ModuleLoader__.load({
 								}
 							}) : null,
 							tab === "tokens" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(TokensTab, {
-								draft,
-								setDraft,
 								state,
 								busy,
-								onAdd: async (credential, token) => {
-									const added = (await run(() => saveSettings({
-										...state.settings,
-										gitCredentials: [...state.settings.gitCredentials, credential]
-									}), token === "" ? `已添加 ${credential.url}，请填入令牌` : `已添加 ${credential.url}`, false))?.settings.gitCredentials[state.settings.gitCredentials.length];
-									if (added === void 0) return false;
-									setDraft((current) => current === void 0 || current.gitCredentials.some((item) => item.url === added.url) ? current : {
-										...current,
-										gitCredentials: [...current.gitCredentials, added]
-									});
-									return token === "" || await run(() => saveToken(added.tokenEnv, token), `已添加 ${added.url} 并保存令牌，使用它的仓库会重新拉取`, false) !== void 0;
+								onAdd: async (host) => await run(() => addHost(host), `已添加 ${host.url}，仓库会重新拉取`, false) !== void 0,
+								onSave: async (url, value) => await run(() => saveHostToken(url, value), `已保存 ${url} 的令牌，仓库会重新拉取`, false) !== void 0,
+								onClear: (url) => {
+									run(() => clearHostToken(url), `已清除面板保存的 ${url} 令牌`, false);
 								},
-								onSave: async (tokenEnv, value) => await run(() => saveToken(tokenEnv, value), `已保存 ${tokenEnv}，使用它的仓库会重新拉取`, false) !== void 0,
-								onClear: (tokenEnv) => {
-									run(() => clearToken(tokenEnv), `已清除面板保存的 ${tokenEnv}`, false);
+								onRemove: (url) => {
+									run(() => removeHost(url), `已删除 ${url}`, false);
 								}
 							}) : null,
 							tab === "download" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(DownloadTab, {
@@ -495,7 +529,7 @@ window.__ModuleLoader__.load({
 								draft,
 								setDraft,
 								analyze: state.analyze,
-								credentialsAvailable: state.credentials.available,
+								credentialsAvailable: state.credentialsAvailable,
 								overridden: state.overridden,
 								busy,
 								onSave: async (value) => await run(() => saveToken(state.analyze.tokenEnv, value), "已保存分析接口令牌，下一个请求起生效", false) !== void 0,
@@ -636,11 +670,10 @@ window.__ModuleLoader__.load({
 													formatTime(current.commitTime),
 													"）· 拉取于 ",
 													formatTime(current.syncedAt),
-													" · ",
-													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													current.dir === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [" · ", /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 														className: "gx__mono",
 														children: current.dir
-													})
+													})] })
 												]
 											}) : null,
 											saved && current.error !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -708,15 +741,21 @@ window.__ModuleLoader__.load({
 							})
 						]
 					}),
+					state.hosts.availability === "ready" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "gx__notice gx__notice--error",
+						children: state.hosts.availability === "missing" ? "没有加载 dsh-repo 插件，仓库无法拉取。请安装 dsh-repo。" : "dsh-repo 版本过旧，仓库无法拉取。请升级 dsh-repo。"
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 						className: "gx__secFoot",
 						children: [
-							"使用本机已有的 git 凭据（SSH key 或 credential helper）拉取；https 地址可在「访问令牌」中配置个人访问令牌。不留分支时跟随远端默认分支。每个仓库需包含 ",
+							"由 dsh-repo 拉取到它的镜像目录",
+							state.hosts.mirrorDir === void 0 ? "" : `（${state.hosts.mirrorDir}）`,
+							"。https 地址使用「访问令牌」中对应主机的令牌，ssh 地址和其他主机使用本机已有的 git 凭据（SSH key 或 credential helper）。不留分支时跟随远端默认分支。每个仓库需包含 ",
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								className: "gx__mono",
 								children: ".dsh/guanxiang.yaml"
 							}),
-							" 与其中声明的日志分析 SKILL。删除地址不会删除本地目录。"
+							" 与其中声明的日志分析 SKILL。删除地址不会删除本地镜像。"
 						]
 					}),
 					state.repos.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
@@ -731,15 +770,19 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
-		const DEFAULT_USERNAME = "oauth2";
-		/** Prefix of the credential keys the panel allocates; namespaced so an unrelated `GITLAB_TOKEN` in the environment is not picked up. */
-		const DEFAULT_TOKEN_ENV = "GUANXIANG_GITLAB_TOKEN";
 		/** Credential store layers of `@deepseek-ai/dsh-credentials-local` other than its own file. */
 		const TOKEN_SOURCES = {
 			"env": "启动环境变量",
 			"project-env": "项目 .env",
 			"user-env": "$DSH_HOME/.env"
 		};
+		const HOST_KINDS = [{
+			id: "gitlab",
+			label: "GitLab"
+		}, {
+			id: "github",
+			label: "GitHub"
+		}];
 		function tokenPill(token) {
 			if (token === void 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 				className: "gx__pill",
@@ -763,89 +806,75 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
-		/**
-		* First of `GUANXIANG_GITLAB_TOKEN`, `GUANXIANG_GITLAB_TOKEN_2`, … that no
-		* saved or drafted entry uses.
-		* @param used - keys already in use.
-		* @returns a free key.
-		*/
-		function freeTokenEnv(used) {
-			if (!used.has(DEFAULT_TOKEN_ENV)) return DEFAULT_TOKEN_ENV;
-			let index = 2;
-			while (used.has(`${DEFAULT_TOKEN_ENV}_${index}`)) index += 1;
-			return `${DEFAULT_TOKEN_ENV}_${index}`;
-		}
-		function TokensTab({ draft, setDraft, state, busy, onAdd, onSave, onClear }) {
+		function TokensTab({ state, busy, onAdd, onSave, onClear, onRemove }) {
+			const [kind, setKind] = (0, react.useState)("gitlab");
 			const [url, setUrl] = (0, react.useState)("");
 			const [alias, setAlias] = (0, react.useState)("");
 			const [token, setToken] = (0, react.useState)("");
-			const [addError, setAddError] = (0, react.useState)();
-			const [adding, setAdding] = (0, react.useState)(false);
 			const [values, setValues] = (0, react.useState)({});
-			const tokens = (0, react.useMemo)(() => new Map(state.credentials.tokens.map((item) => [item.tokenEnv, item])), [state.credentials.tokens]);
-			const saved = (0, react.useMemo)(() => new Set(state.settings.gitCredentials.map((credential) => credential.tokenEnv)), [state.settings.gitCredentials]);
+			const { availability, hosts, error } = state.hosts;
 			const complete = url.trim() !== "" && alias.trim() !== "" && token.trim() !== "";
 			const add = () => {
-				if (!complete || busy || adding) return;
-				const address = url.trim();
-				if (state.settings.gitCredentials.some((credential) => credential.url === address)) {
-					setAddError("这个地址已经添加过了，请在上面的列表里更新它的令牌。");
-					return;
-				}
-				setAddError(void 0);
-				setAdding(true);
-				const tokenEnv = freeTokenEnv(/* @__PURE__ */ new Set([...saved, ...draft.gitCredentials.map((credential) => credential.tokenEnv)]));
+				if (!complete || busy) return;
 				onAdd({
-					url: address,
+					kind,
+					url: url.trim(),
 					alias: alias.trim(),
-					username: DEFAULT_USERNAME,
-					tokenEnv
-				}, token.trim()).then((ok) => {
+					token: token.trim()
+				}).then((ok) => {
 					if (!ok) return;
 					setUrl("");
 					setAlias("");
 					setToken("");
-				}).finally(() => {
-					setAdding(false);
 				});
 			};
-			const save = (name) => {
-				const value = values[name]?.trim() ?? "";
-				if (value === "" || busy || adding) return;
-				onSave(name, value).then((ok) => {
+			const save = (address) => {
+				const value = values[address]?.trim() ?? "";
+				if (value === "" || busy) return;
+				onSave(address, value).then((ok) => {
 					if (ok) setValues((current) => ({
 						...current,
-						[name]: ""
+						[address]: ""
 					}));
 				});
 			};
 			const submitOnEnter = (event) => {
 				if (event.key === "Enter") add();
 			};
+			if (availability !== "ready") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "gx__sec",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
+					className: "gx__secTitle",
+					children: "访问令牌"
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: "gx__notice gx__notice--error",
+					children: availability === "missing" ? "访问令牌由 dsh-repo 插件管理，当前没有加载 dsh-repo。请安装 dsh-repo。" : "dsh-repo 版本过旧，不能在这里管理访问令牌。请升级 dsh-repo。"
+				})]
+			});
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				className: "gx__sec",
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("h2", {
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
 						className: "gx__secTitle",
-						children: ["GitLab 访问令牌 ", /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Overridden, {
-							keys: state.overridden,
-							name: "gitCredentials"
-						})]
+						children: "访问令牌"
 					}),
-					state.credentials.available ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					state.credentialsAvailable ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 						className: "gx__notice gx__notice--error",
 						children: "当前 DSH 组合没有加载凭据服务（@deepseek-ai/dsh-credentials-local），无法保存或读取令牌。"
 					}),
+					error === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "gx__notice gx__notice--error",
+						children: ["无法读取 dsh-repo 的主机：", error]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "gx__list",
 						children: [
-							draft.gitCredentials.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							hosts.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 								className: "gx__emptyRow",
-								children: "还没有访问令牌。用 https 地址拉取 GitLab 私有仓库时，在下面填入 GitLab 地址、令牌别名和令牌。"
+								children: "还没有主机。用 https 地址拉取私有仓库时，在下面填入 GitLab 或 GitHub 地址、别名和令牌。"
 							}) : null,
-							draft.gitCredentials.map((credential, index) => {
-								const status = saved.has(credential.tokenEnv) ? tokens.get(credential.tokenEnv) : void 0;
-								const value = values[credential.tokenEnv] ?? "";
+							hosts.map((host) => {
+								const value = values[host.url] ?? "";
 								return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									className: "gx__row gx__row--top",
 									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -853,17 +882,28 @@ window.__ModuleLoader__.load({
 										children: [
 											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 												className: "gx__rowLabel",
-												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: credential.alias ?? credential.url }), tokenPill(status)]
+												children: [
+													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: host.alias ?? host.url }),
+													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+														className: "gx__tag",
+														children: host.kind === "github" ? "GitHub" : "GitLab"
+													}),
+													host.origin === "config" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+														className: "gx__tag",
+														children: "cordis.yml"
+													}) : null,
+													tokenPill(host.token)
+												]
 											}),
-											credential.alias === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+											host.alias === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 												className: "gx__rowSummary gx__mono",
-												children: credential.url
+												children: host.url
 											}),
-											status?.error === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+											host.token.error === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 												className: "gx__rowError",
-												children: status.error
+												children: host.token.error
 											}),
-											status !== void 0 && status.writable ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											host.token.writable ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 												className: "gx__addRow gx__addRow--flush",
 												children: [
 													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
@@ -871,33 +911,33 @@ window.__ModuleLoader__.load({
 														type: "password",
 														autoComplete: "new-password",
 														spellCheck: false,
-														placeholder: status.configured ? "输入新令牌以替换" : "粘贴令牌",
+														placeholder: host.token.configured ? "输入新令牌以替换" : "粘贴令牌",
 														value,
 														onChange: (event) => {
 															setValues({
 																...values,
-																[credential.tokenEnv]: event.target.value
+																[host.url]: event.target.value
 															});
 														},
 														onKeyDown: (event) => {
-															if (event.key === "Enter") save(credential.tokenEnv);
+															if (event.key === "Enter") save(host.url);
 														}
 													}),
 													/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 														type: "button",
 														className: "gx__btn",
-														disabled: busy || adding || value.trim() === "",
+														disabled: busy || value.trim() === "",
 														onClick: () => {
-															save(credential.tokenEnv);
+															save(host.url);
 														},
 														children: "保存令牌"
 													}),
-													status.configured && status.source === "file" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+													host.token.configured && host.token.source === "file" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 														type: "button",
 														className: "gx__btn gx__btn--ghost",
 														disabled: busy,
 														onClick: () => {
-															onClear(credential.tokenEnv);
+															onClear(host.url);
 														},
 														children: "清除"
 													}) : null
@@ -906,30 +946,42 @@ window.__ModuleLoader__.load({
 										]
 									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 										className: "gx__rowCtl",
-										children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										children: host.origin === "added" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
 											className: "gx__btn gx__btn--danger",
+											disabled: busy,
 											onClick: () => {
-												setDraft({
-													...draft,
-													gitCredentials: draft.gitCredentials.filter((_, position) => position !== index)
-												});
+												onRemove(host.url);
 											},
 											children: "删除"
-										})
+										}) : null
 									})]
-								}, credential.url);
+								}, host.url);
 							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 								className: "gx__addForm",
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									className: "gx__addRow gx__addRow--flush",
 									children: [
 										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 											className: "gx__field",
-											children: ["GitLab 地址", /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											children: ["类型", /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
+												className: "gx__input",
+												value: kind,
+												onChange: (event) => {
+													setKind(event.target.value);
+												},
+												children: HOST_KINDS.map((item) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+													value: item.id,
+													children: item.label
+												}, item.id))
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											className: "gx__field",
+											children: ["地址", /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 												className: "gx__input",
-												placeholder: "https://gitlab.example.com",
+												placeholder: kind === "github" ? "https://github.com" : "https://gitlab.example.com",
 												value: url,
 												onChange: (event) => {
 													setUrl(event.target.value);
@@ -939,9 +991,9 @@ window.__ModuleLoader__.load({
 										}),
 										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 											className: "gx__field",
-											children: ["令牌别名", /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											children: ["别名", /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 												className: "gx__input",
-												placeholder: "例如 guanxiang",
+												placeholder: "例如 公司 GitLab",
 												value: alias,
 												onChange: (event) => {
 													setAlias(event.target.value);
@@ -967,21 +1019,18 @@ window.__ModuleLoader__.load({
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
 											className: "gx__btn gx__btn--end",
-											disabled: busy || adding || !complete,
+											disabled: busy || !complete,
 											onClick: add,
 											children: "添加"
 										})
 									]
-								}), addError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-									className: "gx__rowError",
-									children: addError
-								})]
+								})
 							})
 						]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						className: "gx__secFoot",
-						children: "地址在这个前缀下的 https 仓库使用对应令牌（多个匹配时取路径最长的），ssh 地址不受影响。拉取需要 read_repository 权限，开启 SKILL 改进时还需要 write_repository。令牌保存在 DSH 凭据库（默认 $DSH_HOME/.credentials.yaml，仅本机用户可读），面板只显示是否已设置；令牌只经环境变量交给 git，不写入设置文件、仓库配置、日志或模型上下文。"
+						children: "主机和令牌由 dsh-repo 管理，添加、删除和保存令牌立即生效，不需要点保存。该主机下的 https 仓库使用对应令牌，ssh 地址不受影响。GitLab 拉取需要 read_repository 权限，开启 SKILL 改进时需要 api 权限；GitHub 需要 Contents 与 Pull requests 读写权限。令牌保存在 DSH 凭据库（默认 $DSH_HOME/.credentials.yaml，仅本机用户可读），面板只显示是否已设置。cordis.yml 中配置的主机只能在这里更新令牌。"
 					})
 				]
 			});
@@ -1320,36 +1369,9 @@ window.__ModuleLoader__.load({
 					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
 						className: "gx__secTitle",
 						children: "仓库"
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 						className: "gx__list",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "gx__row",
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								className: "gx__rowText",
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "gx__rowLabel",
-									children: ["拉取目录 ", /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Overridden, {
-										keys: overridden,
-										name: "reposDir"
-									})]
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-									className: "gx__rowSummary",
-									children: "每个仓库拉取到该目录下的同名子目录，观象只读使用。"
-								})]
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-								className: "gx__rowCtl",
-								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-									className: "gx__input gx__input--wide gx__mono",
-									value: draft.reposDir,
-									onChange: (event) => {
-										setDraft({
-											...draft,
-											reposDir: event.target.value
-										});
-									}
-								})
-							})]
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NumberRow, {
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NumberRow, {
 							label: "更新间隔",
 							summary: "输入 /guanxiang 时，距上次拉取超过该时间的仓库会先更新；0 表示每次都更新。",
 							unit: "分钟",
@@ -1361,7 +1383,7 @@ window.__ModuleLoader__.load({
 									fetchIntervalMin: value
 								});
 							}
-						})]
+						})
 					})]
 				}),
 				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
@@ -1418,7 +1440,7 @@ window.__ModuleLoader__.load({
 										})]
 									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 										className: "gx__rowSummary",
-										children: "子 Agent 发现应用的日志分析 SKILL 有欠缺时可以写出修改提议；经用户授权后，观象用访问令牌把它推送到新分支并创建合并请求（GitLab，令牌需要 write_repository 权限）。"
+										children: "子 Agent 发现应用的日志分析 SKILL 有欠缺时可以写出修改提议；经用户授权后，观象经 dsh-repo 把它提交到新分支并创建合并请求（GitLab 或 GitHub，需要安装 dsh-repo 并配置该仓库主机的令牌）。"
 									})]
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 									className: "gx__rowCtl",