@rezti/dsh-rez-suite 0.1.25 → 0.1.27

package/lib/index.js

@@ -1,10 +1,11 @@
 import { createRequire } from "node:module";
 import { homedir } from "node:os";
 import { dirname, join, relative } from "node:path";
-import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStartError, mergeConnections, secretConfigured, writeManagedCredential } from "@rezti/dsh-rez-sso";
+import { REZ_CREDENTIAL_REFS, REZ_DEFAULT_CONNECTIONS, REZ_SYSTEMS, lastMcpStartError, loadRezConnections, mergeConnections, secretConfigured, startMcpWhenSecret, writeManagedCredential } from "@rezti/dsh-rez-sso";
 import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { DatabaseSync } from "node:sqlite";
 import { fileURLToPath } from "node:url";
+import { spawn } from "node:child_process";
 //#region ../../node_modules/.pnpm/@deepseek-ai+cosmokit@1.8.2/node_modules/@deepseek-ai/cosmokit/lib/index.js
 /** Return true when a value is `null` or `undefined`. */
 function isNullable(value) {
@@ -2857,7 +2858,8 @@ const COMPOSED_SERVERS = [
 	"wechat",
 	"homeassistant",
 	"tapd",
-	"gsc"
+	"gsc",
+	"tianyancha"
 ];
 function mcpToolPrefix(server) {
 	return "mcp__" + server + "__";
@@ -2919,7 +2921,7 @@ function observeServer(server, input) {
 	};
 }
 function observeComposedServers(input) {
-	return COMPOSED_SERVERS.map((server) => observeServer(server, input));
+	return (input.config.role === "boss" ? COMPOSED_SERVERS : COMPOSED_SERVERS.filter((server) => server !== "tianyancha")).map((server) => observeServer(server, input));
 }
 function testComposedServers(input) {
 	return observeComposedServers(input).map((row) => {
@@ -2957,7 +2959,8 @@ const REZ_API = {
 	audit: "/api/dsh-rez-suite/audit",
 	auditReset: "/api/dsh-rez-suite/audit/reset",
 	weixin: "/api/dsh-rez-suite/weixin",
-	weixinVerify: "/api/dsh-rez-suite/weixin/verify"
+	weixinVerify: "/api/dsh-rez-suite/weixin/verify",
+	update: "/api/dsh-rez-suite/update"
 };
 //#endregion
 //#region src/store.ts
@@ -3047,6 +3050,12 @@ function publicConfig(config) {
 				siteUrl: connections.gsc.siteUrl,
 				secretConfigured: secretConfigured("gsc"),
 				secretRef: REZ_CREDENTIAL_REFS.gsc
+			},
+			tianyancha: {
+				enabled: connections.tianyancha.enabled,
+				url: connections.tianyancha.url,
+				secretConfigured: secretConfigured("tianyancha"),
+				secretRef: REZ_CREDENTIAL_REFS.tianyancha
 			}
 		},
 		billing: { ...config.billing }
@@ -3220,7 +3229,7 @@ function applyPublicPatch(current, patch) {
 }
 /** Build every /api/dsh-rez-suite route (exact paths). */
 function makeRoutes(deps) {
-	const { getConfig, updateConfig, host, tokens, onCredentialWritten } = deps;
+	const { getConfig, updateConfig, host, tokens, onCredentialWritten, selfUpdate } = deps;
 	const guard = (req, res, method) => {
 		if (!isLoopbackRequest(req)) {
 			writeJson(res, 403, { error: "forbidden: loopback-only" });
@@ -3292,6 +3301,31 @@ function makeRoutes(deps) {
 				tokens.reset();
 				writeJson(res, 200, { ok: true });
 			}
+		},
+		{
+			kind: "exact",
+			path: REZ_API.update,
+			handler: async (req, res) => {
+				const method = req.method === "POST" ? "POST" : "GET";
+				if (!guard(req, res, method)) return;
+				if (selfUpdate === void 0) {
+					writeJson(res, 501, { error: "self-update is not available" });
+					return;
+				}
+				try {
+					if (method === "GET") {
+						writeJson(res, 200, await selfUpdate.status());
+						return;
+					}
+					const result = await selfUpdate.apply();
+					writeJson(res, 200, result);
+					if (result.restarting) setTimeout(() => {
+						selfUpdate.relaunch();
+					}, 400);
+				} catch (error) {
+					writeJson(res, 502, { error: error instanceof Error ? error.message : String(error) });
+				}
+			}
 		}
 	];
 }
@@ -7906,6 +7940,212 @@ function mountRezWorkspaces(ctx, getRole) {
 	return run;
 }
 //#endregion
+//#region src/self-update.ts
+/**
+* In-place upgrade of @rezti/dsh-rez-suite inside the running dsh profile.
+* pnpm add writes the new bits; Node cannot replace an already-imported host
+* module, so we respawn the same argv after the HTTP response flushes.
+*/
+const SUITE_PACKAGE = "@rezti/dsh-rez-suite";
+const NPM_LATEST = "https://registry.npmjs.org/@rezti/dsh-rez-suite/latest";
+const PNPM_TIMEOUT_MS = 18e4;
+function compareVersions(left, right) {
+	const a = left.split(".").map((part) => Number.parseInt(part, 10) || 0);
+	const b = right.split(".").map((part) => Number.parseInt(part, 10) || 0);
+	const n = Math.max(a.length, b.length);
+	for (let i = 0; i < n; i += 1) {
+		const av = a[i] ?? 0;
+		const bv = b[i] ?? 0;
+		if (av > bv) return 1;
+		if (av < bv) return -1;
+	}
+	return 0;
+}
+function readInstalledVersion(packageDir) {
+	const raw = JSON.parse(readFileSync(join(packageDir, "package.json"), "utf8"));
+	if (typeof raw.version !== "string" || raw.version === "") throw new Error("suite package.json missing version");
+	return raw.version;
+}
+function findProfileDir(startDir) {
+	let dir = startDir;
+	for (let i = 0; i < 12; i += 1) {
+		const manifest = join(dir, "package.json");
+		if (existsSync(manifest)) try {
+			const raw = JSON.parse(readFileSync(manifest, "utf8"));
+			if (Array.isArray(raw.dsh?.profile?.bundles)) return dir;
+		} catch {}
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	throw new Error("cannot find dsh profile directory (no package.json with dsh.profile.bundles)");
+}
+function shellQuote(value) {
+	return `'${value.replaceAll("'", `'\\''`)}'`;
+}
+function relaunchScript(argv, parentPid) {
+	return `while kill -0 ${parentPid} 2>/dev/null; do sleep 0.15; done; sleep 0.25; exec ${argv.map(shellQuote).join(" ")}`;
+}
+async function fetchLatestVersion(fetchImpl = fetch) {
+	const response = await fetchImpl(NPM_LATEST, { headers: { accept: "application/json" } });
+	if (!response.ok) throw new Error(`npm registry HTTP ${response.status}`);
+	const body = await response.json();
+	if (typeof body.version !== "string" || body.version === "") throw new Error("npm registry missing version");
+	return body.version;
+}
+function runPnpmAdd(cwd, spec, env = process.env) {
+	return new Promise((resolve, reject) => {
+		const child = spawn("pnpm", ["add", spec], {
+			cwd,
+			env,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		let stderr = "";
+		child.stderr.on("data", (chunk) => {
+			stderr += chunk.toString();
+		});
+		const timer = setTimeout(() => {
+			child.kill("SIGTERM");
+			reject(/* @__PURE__ */ new Error("pnpm add timed out after 3 minutes"));
+		}, PNPM_TIMEOUT_MS);
+		child.on("error", (error) => {
+			clearTimeout(timer);
+			reject(error);
+		});
+		child.on("close", (code) => {
+			clearTimeout(timer);
+			if (code === 0) resolve();
+			else reject(new Error(stderr.trim() || `pnpm add exited ${String(code)}`));
+		});
+	});
+}
+function spawnRelaunch(argv, parentPid, cwd, env = process.env) {
+	spawn("/bin/bash", ["-c", relaunchScript(argv, parentPid)], {
+		cwd,
+		env,
+		detached: true,
+		stdio: "ignore"
+	}).unref();
+}
+let inflight;
+function createSelfUpdate(io) {
+	const status = async () => {
+		const installed = readInstalledVersion(io.packageDir);
+		const latest = await io.fetchLatest();
+		return {
+			package: SUITE_PACKAGE,
+			installed,
+			latest,
+			outdated: compareVersions(latest, installed) > 0
+		};
+	};
+	const apply = async () => {
+		if (inflight !== void 0) throw new Error("upgrade already running");
+		const work = (async () => {
+			const snapshot = await status();
+			if (!snapshot.outdated) return {
+				...snapshot,
+				restarting: false
+			};
+			const profileDir = findProfileDir(io.packageDir);
+			await io.install(profileDir, `${SUITE_PACKAGE}@${snapshot.latest}`);
+			return {
+				...snapshot,
+				installed: snapshot.latest,
+				outdated: false,
+				restarting: true
+			};
+		})();
+		inflight = work;
+		try {
+			return await work;
+		} finally {
+			inflight = void 0;
+		}
+	};
+	return {
+		status,
+		apply,
+		relaunch: io.relaunch
+	};
+}
+function liveSelfUpdate() {
+	return createSelfUpdate({
+		packageDir: dirname(fileURLToPath(new URL(".", import.meta.url))),
+		fetchLatest: () => fetchLatestVersion(),
+		install: (profileDir, spec) => runPnpmAdd(profileDir, spec),
+		relaunch: () => {
+			spawnRelaunch(process.argv, process.pid, process.cwd());
+			setTimeout(() => {
+				process.exit(0);
+			}, 50);
+		}
+	});
+}
+//#endregion
+//#region src/tianyancha.ts
+const TIANYANCHA_MCP_URL = "https://mcp.tianyancha.com/mcp";
+function shouldStartTianyancha(role) {
+	return role === "boss";
+}
+function bearerAuthorization(secret) {
+	const trimmed = secret.trim();
+	if (/^bearer\s+/i.test(trimmed)) return "Bearer " + trimmed.replace(/^bearer\s+/i, "");
+	return "Bearer " + trimmed;
+}
+function tianyanchaMcpConfig(secret) {
+	const { url } = loadRezConnections().tianyancha;
+	return {
+		serverName: "tianyancha",
+		transport: "streamable-http",
+		url: url.length > 0 ? url : TIANYANCHA_MCP_URL,
+		headers: { Authorization: bearerAuthorization(secret) },
+		failOnStartupError: false
+	};
+}
+/** Start when role is boss; dispose the mcp-client fiber when the identity leaves. */
+function mountTianyanchaMcp(ctx, getRole, start = startMcpWhenSecret) {
+	let session;
+	let pending = false;
+	const ensure = () => {
+		(async () => {
+			if (!shouldStartTianyancha(getRole())) {
+				session?.();
+				session = void 0;
+				return;
+			}
+			if (session !== void 0 || pending) return;
+			pending = true;
+			let raced = false;
+			try {
+				const dispose = await start(ctx, {
+					system: "tianyancha",
+					label: "天眼查",
+					config: tianyanchaMcpConfig
+				});
+				if (!shouldStartTianyancha(getRole())) {
+					raced = true;
+					dispose();
+					return;
+				}
+				session = dispose;
+			} catch (error) {
+				const why = error instanceof Error ? error.message : String(error);
+				console.error("[dsh-rez-suite] tianyancha MCP start failed:", why);
+			} finally {
+				pending = false;
+				if (raced && shouldStartTianyancha(getRole()) && session === void 0) ensure();
+			}
+		})();
+	};
+	ensure();
+	return ensure;
+}
+//#endregion
 //#region src/index.ts
 const name = "rez-suite";
 const inject = [
@@ -7959,7 +8199,11 @@ const Config = Schema.object({
 		gsc: Schema.object({
 			enabled: Schema.boolean().default(true),
 			siteUrl: Schema.string().default(REZ_DEFAULT_CONNECTIONS.gsc.siteUrl)
-		}).default(REZ_DEFAULT_CONNECTIONS.gsc)
+		}).default(REZ_DEFAULT_CONNECTIONS.gsc),
+		tianyancha: Schema.object({
+			enabled: Schema.boolean().default(true),
+			url: Schema.string().default(REZ_DEFAULT_CONNECTIONS.tianyancha.url)
+		}).default(REZ_DEFAULT_CONNECTIONS.tianyancha)
 	}).default(REZ_DEFAULT_CONNECTIONS),
 	billing: Schema.object({
 		inputCostPer1k: Schema.number().default(.001),
@@ -8006,6 +8250,7 @@ function delegatedHost(ctx, getConfig) {
 function apply(ctx, config) {
 	let current = () => normalize(config);
 	const syncWorkspaces = mountRezWorkspaces(ctx, () => current().role);
+	const syncTianyancha = mountTianyanchaMcp(ctx, () => current().role);
 	const tokens = new TokenManager(joinTokenDb());
 	const host = delegatedHost(ctx, () => current());
 	ctx.effect(() => () => {
@@ -8019,6 +8264,7 @@ function apply(ctx, config) {
 			saveConfig(value);
 			current = () => value;
 			syncWorkspaces();
+			syncTianyancha();
 			try {
 				const settings = ctx.get("settings");
 				if (settings?.update !== void 0) await settings.update(REZ_SETTINGS_NAMESPACE, value);
@@ -8032,7 +8278,8 @@ function apply(ctx, config) {
 		onCredentialWritten: (ref) => {
 			const emit = ctx.emit;
 			emit("credentials/updated", ref);
-		}
+		},
+		selfUpdate: liveSelfUpdate()
 	});
 	let disposeRoutes;
 	let disposeTools;
@@ -8075,10 +8322,12 @@ function apply(ctx, config) {
 			current = source;
 			sync();
 			syncWorkspaces();
+			syncTianyancha();
 		},
 		onChange: () => {
 			sync();
 			syncWorkspaces();
+			syncTianyancha();
 		}
 	});
 	sync();

package/lib/style.css

@@ -287,3 +287,84 @@
   font-size: 15px;
   font-weight: 600;
 }
+
+.LOjPTW_upgradeLayer {
+  flex: none;
+  align-items: center;
+  width: 100%;
+  height: 42px;
+  margin: 8px 0 0;
+  display: flex;
+  position: relative;
+}
+
+.LOjPTW_upgradeLayerRail {
+  width: 36px;
+  height: 36px;
+  margin: 0;
+}
+
+.LOjPTW_upgradeButton {
+  width: calc(100% + 4px);
+  height: 42px;
+  color: var(--dsw-alias-label-primary);
+  cursor: pointer;
+  background: none;
+  border: none;
+  border-radius: 12px;
+  align-items: center;
+  gap: 8px;
+  margin: 0 -2px;
+  padding: 0 10px 0 8px;
+  font-family: inherit;
+  font-size: 14px;
+  display: inline-flex;
+  overflow: hidden;
+}
+
+.LOjPTW_upgradeButton:hover, .LOjPTW_upgradeButton[data-outdated] {
+  background: var(--dsw-alias-interactive-bg-hover);
+}
+
+.LOjPTW_upgradeButton:disabled {
+  cursor: progress;
+  opacity: .72;
+}
+
+.LOjPTW_upgradeButton:focus-visible {
+  outline: 2px solid var(--dsw-alias-brand-primary);
+  outline-offset: -2px;
+}
+
+.LOjPTW_upgradeLayerRail .LOjPTW_upgradeButton {
+  border-radius: 50%;
+  justify-content: center;
+  gap: 0;
+  width: 36px;
+  height: 36px;
+  padding: 0;
+}
+
+.LOjPTW_upgradeLabel {
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  min-width: 0;
+  overflow: hidden;
+}
+
+.LOjPTW_upgradeMeta {
+  color: var(--dsw-alias-label-tertiary);
+  font-variant-numeric: tabular-nums;
+  flex: none;
+  margin-left: auto;
+  font-size: 12px;
+  line-height: 16px;
+}
+
+.LOjPTW_upgradeDot {
+  background: var(--dsw-alias-brand-primary);
+  border-radius: 50%;
+  flex: none;
+  width: 7px;
+  height: 7px;
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rezti/dsh-rez-suite",
   "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web update @rezti/dsh-rez-suite",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -30,7 +30,8 @@
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-settings-plugins"
+        "@deepseek-ai/dsh-client-ui-settings-plugins",
+        "@deepseek-ai/dsh-client-ui-sidebar"
       ],
       "platform": "web"
     }
@@ -38,15 +39,15 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^4.4.3",
-    "@rezti/dsh-rez-sso": "0.1.9",
-    "@rezti/dsh-rez-token-manager": "0.1.4",
-    "@rezti/dsh-rez-ha-bridge": "0.1.9",
     "@rezti/dsh-rez-nextcloud": "0.1.9",
-    "@rezti/dsh-rez-tapd": "0.1.0",
+    "@rezti/dsh-rez-gsc": "0.1.0",
     "@rezti/dsh-rez-intent": "0.1.5",
+    "@rezti/dsh-rez-ha-bridge": "0.1.9",
+    "@rezti/dsh-rez-tapd": "0.1.0",
     "@rezti/dsh-rez-odoo": "0.1.9",
+    "@rezti/dsh-rez-token-manager": "0.1.4",
     "@rezti/dsh-rez-wechat": "0.1.14",
-    "@rezti/dsh-rez-gsc": "0.1.0"
+    "@rezti/dsh-rez-sso": "0.1.10"
   },
   "peerDependencies": {
     "react": "^18.2.0",

package/src/client/api.ts

@@ -9,6 +9,8 @@ import {
   type RezServerStatus,
   type RezStatusResponse,
   type RezTestResult,
+  type RezUpdateApplyResult,
+  type RezUpdateStatus,
   type RezWeixinStatus,
 } from '../protocol.ts'
 
@@ -97,4 +99,14 @@ export class RezApi {
     const response = await fetch(REZ_API.weixin, { method: 'DELETE' })
     return readJson<RezWeixinStatus>(response)
   }
+
+  async updateStatus(): Promise<RezUpdateStatus> {
+    const response = await fetch(REZ_API.update)
+    return readJson<RezUpdateStatus>(response)
+  }
+
+  async applyUpdate(): Promise<RezUpdateApplyResult> {
+    const response = await fetch(REZ_API.update, { method: 'POST' })
+    return readJson<RezUpdateApplyResult>(response)
+  }
 }

package/src/client/index.ts

@@ -11,6 +11,7 @@ import type {} from '@deepseek-ai/dsh-client-ui-settings/client'
 import type {} from '@deepseek-ai/dsh-client-ui-slots'
 import { en, zh, type RezKey } from './locales.ts'
 import { RezPluginCard, RezSettingsPage } from './settings-card.tsx'
+import { UpgradeButton } from './upgrade-button.tsx'
 
 const NS = 'dsh-rez-suite'
 
@@ -29,6 +30,11 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
       scope: 'root'
       owner: { children?: never }
     }
+    'sidebar.footer.action': {
+      kind: 'list'
+      scope: 'root'
+      owner: { wide: boolean }
+    }
   }
 }
 
@@ -53,4 +59,12 @@ export function apply(ctx: ClientContext): void {
     label: () => t('settings.title'),
     locale: NS,
   }, RezSettingsPage))
+
+  ctx.slots.inject('sidebar.footer.action', () => ctx.slots.register({
+    name: 'sidebar.footer.action',
+    id: 'rez-upgrade',
+    order: 10,
+    label: () => t('upgrade.label'),
+    locale: NS,
+  }, UpgradeButton))
 }

package/src/client/locales.ts

@@ -52,6 +52,9 @@ export const zh = {
   'config.gsc': 'Google Search Console',
   'config.gsc.siteUrl': '站点 URL',
   'config.gsc.key': '服务账号 JSON 或密钥文件路径',
+  'config.tianyancha': '天眼查（法务助理 · 仅老板）',
+  'config.tianyancha.url': '天眼查 MCP URL',
+  'config.tianyancha.token': 'OpenAPI Token',
   'config.fs': '本地文件 (fs-mcp-server)',
   'config.fs.root': '根目录',
   'config.sqlite': 'SQLite (sqlite-mcp-server)',
@@ -111,6 +114,13 @@ export const zh = {
   'weixin.listening': '通道在听：微信 → 网页「微信」会话（同一条，不另开窗口）→ 回微信。',
   'weixin.loggedIn': '已登录，通道未在听。点「重新连接」即可拉起，不必再扫码。',
   'weixin.loggedOut': '尚未登录。',
+  'upgrade.label': '升级',
+  'upgrade.current': '已最新',
+  'upgrade.aria': '升级 ReZ-TI 插件',
+  'upgrade.running': '升级中…',
+  'upgrade.reloading': '正在重载',
+  'upgrade.already': '已是 {version}',
+  'upgrade.reloadTimeout': '升级完成，但网页还没重新连上。请刷新这一页。',
 } as const
 
 export type RezKey = keyof typeof zh
@@ -164,6 +174,9 @@ export const en: Record<RezKey, string> = {
   'config.gsc': 'Google Search Console',
   'config.gsc.siteUrl': 'Site URL',
   'config.gsc.key': 'Service-account JSON or key file path',
+  'config.tianyancha': 'Tianyancha (Legal assistant, boss only)',
+  'config.tianyancha.url': 'Tianyancha MCP URL',
+  'config.tianyancha.token': 'OpenAPI token',
   'config.fs': 'Local files (fs-mcp-server)',
   'config.fs.root': 'Root directory',
   'config.sqlite': 'SQLite (sqlite-mcp-server)',
@@ -220,6 +233,13 @@ export const en: Record<RezKey, string> = {
   'weixin.listening': 'Channel is live: WeChat → the WeChat folder session on the left → WeChat.',
   'weixin.loggedIn': 'Logged in, listener idle. Click Reconnect — no need to scan again.',
   'weixin.loggedOut': 'Not logged in.',
+  'upgrade.label': 'Upgrade',
+  'upgrade.current': 'Up to date',
+  'upgrade.aria': 'Upgrade the ReZ-TI plugin',
+  'upgrade.running': 'Updating…',
+  'upgrade.reloading': 'Reloading',
+  'upgrade.already': 'Already {version}',
+  'upgrade.reloadTimeout': 'Update finished, but the page did not reconnect. Refresh this tab.',
 }
 
 /** Minimal {name} interpolator shared by the panel helpers. */

package/src/client/panel/ConfigTab.tsx

@@ -24,9 +24,10 @@ type SecretDrafts = {
   homeassistant: string
   tapd: string
   gsc: string
+  tianyancha: string
 }
 
-const EMPTY_SECRETS: SecretDrafts = { odoo: '', nextcloud: '', wechat: '', homeassistant: '', tapd: '', gsc: '' }
+const EMPTY_SECRETS: SecretDrafts = { odoo: '', nextcloud: '', wechat: '', homeassistant: '', tapd: '', gsc: '', tianyancha: '' }
 
 function Field({ label, children }: { label: string; children: ReactNode }) {
   return (
@@ -170,6 +171,7 @@ export function ConfigTab({ api }: { api: RezApi }) {
           homeassistant: { ...config.connections.homeassistant, secret: secrets.homeassistant || undefined },
           tapd: { ...config.connections.tapd, secret: secrets.tapd || undefined },
           gsc: { ...config.connections.gsc, secret: secrets.gsc || undefined },
+          tianyancha: { ...config.connections.tianyancha, secret: secrets.tianyancha || undefined },
         },
       }
       const saved = await api.saveConfig(payload)
@@ -290,6 +292,18 @@ export function ConfigTab({ api }: { api: RezApi }) {
         onSecret={value => { setSecrets(prev => ({ ...prev, gsc: value })) }}
         secretLabel={tt('config.gsc.key')}
       />
+      {config.role === 'boss' && (
+        <McpSection
+          title={tt('config.tianyancha')}
+          row={config.connections.tianyancha}
+          secret={secrets.tianyancha}
+          onEnabled={enabled => { patchConnection('tianyancha', { enabled }) }}
+          onUrl={url => { patchConnection('tianyancha', { url }) }}
+          onSecret={value => { setSecrets(prev => ({ ...prev, tianyancha: value })) }}
+          urlLabel={tt('config.tianyancha.url')}
+          secretLabel={tt('config.tianyancha.token')}
+        />
+      )}
 
       <Section title={tt('config.billing')}>
         <Field label={tt('config.billing.input')}>