@rezti/dsh-rez-suite 0.1.25 → 0.1.27

package/src/client/panel/panel.module.css

@@ -294,3 +294,85 @@
   font-weight: 600;
   color: var(--dsw-alias-label-primary);
 }
+
+.upgradeLayer {
+  flex: none;
+  align-items: center;
+  width: 100%;
+  height: 42px;
+  margin: 8px 0 0;
+  display: flex;
+  position: relative;
+}
+
+.upgradeLayerRail {
+  width: 36px;
+  height: 36px;
+  margin: 0;
+}
+
+.upgradeButton {
+  width: calc(100% + 4px);
+  height: 42px;
+  color: var(--dsw-alias-label-primary);
+  cursor: pointer;
+  background: transparent;
+  border: none;
+  border-radius: 12px;
+  align-items: center;
+  gap: 8px;
+  margin: 0 -2px;
+  padding: 0 10px 0 8px;
+  font-family: inherit;
+  font-size: 14px;
+  display: inline-flex;
+  overflow: hidden;
+}
+
+.upgradeButton:hover,
+.upgradeButton[data-outdated] {
+  background: var(--dsw-alias-interactive-bg-hover);
+}
+
+.upgradeButton:disabled {
+  cursor: progress;
+  opacity: 0.72;
+}
+
+.upgradeButton:focus-visible {
+  outline: 2px solid var(--dsw-alias-brand-primary);
+  outline-offset: -2px;
+}
+
+.upgradeLayerRail .upgradeButton {
+  border-radius: 50%;
+  justify-content: center;
+  gap: 0;
+  width: 36px;
+  height: 36px;
+  padding: 0;
+}
+
+.upgradeLabel {
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  min-width: 0;
+  overflow: hidden;
+}
+
+.upgradeMeta {
+  color: var(--dsw-alias-label-tertiary);
+  font-variant-numeric: tabular-nums;
+  flex: none;
+  margin-left: auto;
+  font-size: 12px;
+  line-height: 16px;
+}
+
+.upgradeDot {
+  width: 7px;
+  height: 7px;
+  border-radius: 50%;
+  background: var(--dsw-alias-brand-primary);
+  flex: none;
+}

package/src/client/upgrade-button.tsx

@@ -0,0 +1,115 @@
+/**
+ * Sidebar footer action: upgrade @rezti/dsh-rez-suite without a terminal.
+ * Host code still needs a process respawn; the button does that after pnpm add.
+ */
+
+import { useEffect, useMemo, useState } from 'react'
+import { RezApi } from './api.ts'
+import { tt } from './panel/helpers.ts'
+import css from './panel/panel.module.css'
+import type { RezUpdateStatus } from '../protocol.ts'
+
+function UpgradeIcon() {
+  return (
+    <svg width="16" height="16" viewBox="0 0 16 16" aria-hidden="true">
+      <path
+        d="M8 12.5V4.8M8 4.8 4.8 8M8 4.8 11.2 8M3 13.2h10"
+        fill="none"
+        stroke="currentColor"
+        strokeWidth="1.4"
+        strokeLinecap="round"
+        strokeLinejoin="round"
+      />
+    </svg>
+  )
+}
+
+async function waitUntilHostBack(api: RezApi, timeoutMs = 60_000): Promise<void> {
+  const deadline = Date.now() + timeoutMs
+  await new Promise((resolve) => setTimeout(resolve, 800))
+  while (Date.now() < deadline) {
+    try {
+      await api.updateStatus()
+      return
+    } catch {
+      await new Promise((resolve) => setTimeout(resolve, 700))
+    }
+  }
+  throw new Error(tt('upgrade.reloadTimeout'))
+}
+
+export function UpgradeButton({ wide }: { wide: boolean }) {
+  const api = useMemo(() => new RezApi(), [])
+  const [info, setInfo] = useState<RezUpdateStatus>()
+  const [busy, setBusy] = useState(false)
+  const [note, setNote] = useState('')
+
+  useEffect(() => {
+    let cancelled = false
+    void api.updateStatus().then((value) => {
+      if (!cancelled) setInfo(value)
+    }).catch((error: unknown) => {
+      if (!cancelled) setNote(error instanceof Error ? error.message : String(error))
+    })
+    return () => { cancelled = true }
+  }, [api])
+
+  const label = busy
+    ? tt('upgrade.running')
+    : info?.outdated === true
+      ? tt('upgrade.label')
+      : tt('upgrade.current')
+
+  const meta = note !== ''
+    ? note
+    : info === undefined
+      ? ''
+      : info.outdated
+        ? info.latest
+        : info.installed
+
+  async function onClick(): Promise<void> {
+    if (busy) return
+    setBusy(true)
+    setNote('')
+    try {
+      const snapshot = info ?? await api.updateStatus()
+      setInfo(snapshot)
+      if (!snapshot.outdated) {
+        setNote(tt('upgrade.already', { version: snapshot.installed }))
+        return
+      }
+      const result = await api.applyUpdate()
+      setInfo(result)
+      if (result.restarting) {
+        setNote(tt('upgrade.reloading'))
+        await waitUntilHostBack(api)
+        window.location.reload()
+        return
+      }
+      setNote(tt('upgrade.already', { version: result.installed }))
+    } catch (error) {
+      setNote(error instanceof Error ? error.message : String(error))
+    } finally {
+      setBusy(false)
+    }
+  }
+
+  return (
+    <div className={wide ? css.upgradeLayer : `${css.upgradeLayer} ${css.upgradeLayerRail}`}>
+      <button
+        type="button"
+        className={css.upgradeButton}
+        data-outdated={info?.outdated === true ? '' : undefined}
+        aria-label={tt('upgrade.aria')}
+        disabled={busy}
+        onClick={() => { void onClick() }}
+      >
+        <UpgradeIcon />
+        {wide && <span className={css.upgradeLabel}>{label}</span>}
+        {wide && meta !== '' && <span className={css.upgradeMeta}>{meta}</span>}
+        {!wide && info?.outdated === true && <span className={css.upgradeDot} />}
+      </button>
+    </div>
+  )
+}

package/src/index.ts

@@ -28,6 +28,8 @@ import { TokenManager } from './token-manager.ts'
 import { rezConfigTool, rezStatusTool } from './tools.ts'
 import type { RezConfig } from './protocol.ts'
 import { workspaceGuidanceFor, mountRezWorkspaces } from './boss/mount.ts'
+import { liveSelfUpdate } from './self-update.ts'
+import { mountTianyanchaMcp } from './tianyancha.ts'
 
 export const name = 'rez-suite'
 
@@ -78,6 +80,10 @@ export const Config: z<RezConfig> = z.object({
       enabled: z.boolean().default(true),
       siteUrl: z.string().default(REZ_DEFAULT_CONNECTIONS.gsc.siteUrl),
     }).default(REZ_DEFAULT_CONNECTIONS.gsc),
+    tianyancha: z.object({
+      enabled: z.boolean().default(true),
+      url: z.string().default(REZ_DEFAULT_CONNECTIONS.tianyancha.url),
+    }).default(REZ_DEFAULT_CONNECTIONS.tianyancha),
   }).default(REZ_DEFAULT_CONNECTIONS),
   billing: z.object({
     inputCostPer1k: z.number().default(0.001),
@@ -127,6 +133,7 @@ function delegatedHost(ctx: Context, getConfig: () => RezConfig): McpHost {
 export function apply(ctx: Context, config?: RezConfig): void {
   let current: () => RezConfig = () => normalize(config)
   const syncWorkspaces = mountRezWorkspaces(ctx, () => current().role)
+  const syncTianyancha = mountTianyanchaMcp(ctx, () => current().role)
 
   const tokens = new TokenManager(joinTokenDb())
   const host = delegatedHost(ctx, () => current())
@@ -144,6 +151,7 @@ export function apply(ctx: Context, config?: RezConfig): void {
       saveConfig(value)
       current = () => value
       syncWorkspaces()
+      syncTianyancha()
       try {
         const settings = ctx.get('settings') as { update?: (namespace: unknown, value: unknown) => Promise<void> } | undefined
         if (settings?.update !== undefined) await settings.update(REZ_SETTINGS_NAMESPACE, value)
@@ -158,6 +166,7 @@ export function apply(ctx: Context, config?: RezConfig): void {
       const emit = ctx.emit as unknown as (event: string, value: string) => void
       emit('credentials/updated', ref)
     },
+    selfUpdate: liveSelfUpdate(),
   })
 
   let disposeRoutes: (() => void) | undefined
@@ -196,10 +205,12 @@ export function apply(ctx: Context, config?: RezConfig): void {
       current = source
       sync()
       syncWorkspaces()
+      syncTianyancha()
     },
     onChange: () => {
       sync()
       syncWorkspaces()
+      syncTianyancha()
     },
   })
 

package/src/observe-mcp.ts

@@ -9,7 +9,7 @@
 import { lastMcpStartError, REZ_CREDENTIAL_REFS, secretConfigured, type RezSystem } from '@rezti/dsh-rez-sso'
 import type { RezConfig, RezServerStatus, RezTestResult } from './protocol.ts'
 
-export const COMPOSED_SERVERS = ['odoo', 'nextcloud', 'wechat', 'homeassistant', 'tapd', 'gsc'] as const
+export const COMPOSED_SERVERS = ['odoo', 'nextcloud', 'wechat', 'homeassistant', 'tapd', 'gsc', 'tianyancha'] as const
 
 export type ComposedServer = (typeof COMPOSED_SERVERS)[number]
 
@@ -102,7 +102,10 @@ export function observeServer(
 }
 
 export function observeComposedServers(input: ObserveInput): RezServerStatus[] {
-  return COMPOSED_SERVERS.map(server => observeServer(server, input))
+  const servers = input.config.role === 'boss'
+    ? COMPOSED_SERVERS
+    : COMPOSED_SERVERS.filter((server) => server !== 'tianyancha')
+  return servers.map(server => observeServer(server, input))
 }
 
 export function testComposedServers(input: ObserveInput): RezTestResult[] {

package/src/presets.ts

@@ -127,6 +127,7 @@ const COMPILED: Record<Exclude<RezRoleId, 'all' | 'boss'>, { server: RezServerId
 
 /** Whether one MCP tool may be registered for the selected role. */
 export function isToolAllowed(role: RezRoleId, server: string, rawName: string): boolean {
+  if (server === 'tianyancha') return role === 'boss'
   if (role === 'all' || role === 'boss') return true
   const rules = COMPILED[role]
   return rules.some(rule => rule.server === server && rule.test.test(rawName))

package/src/protocol.ts

@@ -48,6 +48,7 @@ export interface RezConnections {
   homeassistant: { enabled: boolean; url: string }
   tapd: { enabled: boolean; workspaceId: string; nickName: string }
   gsc: { enabled: boolean; siteUrl: string }
+  tianyancha: { enabled: boolean; url: string }
 }
 
 export interface RezPublicConnection {
@@ -90,6 +91,7 @@ export interface RezPublicConfig {
     homeassistant: RezPublicConnection
     tapd: RezPublicConnection
     gsc: RezPublicConnection
+    tianyancha: RezPublicConnection
   }
   billing: { inputCostPer1k: number; outputCostPer1k: number; monthlyBudget: number }
 }
@@ -168,6 +170,18 @@ export interface ApiErrorBody {
   error: string
 }
 
+/** Installed vs npm latest for the suite package. */
+export interface RezUpdateStatus {
+  package: string
+  installed: string
+  latest: string
+  outdated: boolean
+}
+
+export interface RezUpdateApplyResult extends RezUpdateStatus {
+  restarting: boolean
+}
+
 /** Route paths the client calls (shared literals). */
 export const REZ_API_BASE = '/api/dsh-rez-suite' as const
 
@@ -179,4 +193,5 @@ export const REZ_API = {
   auditReset: REZ_API_BASE + '/audit/reset',
   weixin: REZ_API_BASE + '/weixin',
   weixinVerify: REZ_API_BASE + '/weixin/verify',
+  update: REZ_API_BASE + '/update',
 } as const

package/src/routes.ts

@@ -13,7 +13,7 @@ import {
   writeManagedCredential,
   type RezSystem,
 } from '@rezti/dsh-rez-sso'
-import type { RezConfig, RezMcpServerSpec } from './protocol.ts'
+import type { RezConfig, RezMcpServerSpec, RezUpdateApplyResult, RezUpdateStatus } from './protocol.ts'
 import { isRezRoleId, REZ_API } from './protocol.ts'
 import type { McpHost } from './mcp-host.ts'
 import type { TokenManager } from './token-manager.ts'
@@ -135,11 +135,16 @@ export interface RezRoutesDeps {
   host: McpHost
   tokens: TokenManager
   onCredentialWritten?: (ref: string) => void
+  selfUpdate?: {
+    status: () => Promise<RezUpdateStatus>
+    apply: () => Promise<RezUpdateApplyResult>
+    relaunch: () => void
+  }
 }
 
 /** Build every /api/dsh-rez-suite route (exact paths). */
 export function makeRoutes(deps: RezRoutesDeps): WebRoute[] {
-  const { getConfig, updateConfig, host, tokens, onCredentialWritten } = deps
+  const { getConfig, updateConfig, host, tokens, onCredentialWritten, selfUpdate } = deps
 
   const guard = (req: IncomingMessage, res: ServerResponse, method: string): boolean => {
     if (!isLoopbackRequest(req)) {
@@ -215,5 +220,28 @@ export function makeRoutes(deps: RezRoutesDeps): WebRoute[] {
         writeJson(res, 200, { ok: true })
       },
     },
+    {
+      kind: 'exact',
+      path: REZ_API.update,
+      handler: async (req, res) => {
+        const method = req.method === 'POST' ? 'POST' : 'GET'
+        if (!guard(req, res, method)) return
+        if (selfUpdate === undefined) {
+          writeJson(res, 501, { error: 'self-update is not available' })
+          return
+        }
+        try {
+          if (method === 'GET') {
+            writeJson(res, 200, await selfUpdate.status())
+            return
+          }
+          const result = await selfUpdate.apply()
+          writeJson(res, 200, result)
+          if (result.restarting) setTimeout(() => { selfUpdate.relaunch() }, 400)
+        } catch (error) {
+          writeJson(res, 502, { error: error instanceof Error ? error.message : String(error) })
+        }
+      },
+    },
   ]
 }

package/src/self-update.ts

@@ -0,0 +1,155 @@
+/**
+ * In-place upgrade of @rezti/dsh-rez-suite inside the running dsh profile.
+ * pnpm add writes the new bits; Node cannot replace an already-imported host
+ * module, so we respawn the same argv after the HTTP response flushes.
+ */
+import { spawn } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import type { RezUpdateApplyResult, RezUpdateStatus } from './protocol.ts'
+
+export const SUITE_PACKAGE = '@rezti/dsh-rez-suite'
+const NPM_LATEST = 'https://registry.npmjs.org/@rezti/dsh-rez-suite/latest'
+const PNPM_TIMEOUT_MS = 180_000
+
+export function compareVersions(left: string, right: string): number {
+  const a = left.split('.').map((part) => Number.parseInt(part, 10) || 0)
+  const b = right.split('.').map((part) => Number.parseInt(part, 10) || 0)
+  const n = Math.max(a.length, b.length)
+  for (let i = 0; i < n; i += 1) {
+    const av = a[i] ?? 0
+    const bv = b[i] ?? 0
+    if (av > bv) return 1
+    if (av < bv) return -1
+  }
+  return 0
+}
+
+export function readInstalledVersion(packageDir: string): string {
+  const raw = JSON.parse(readFileSync(join(packageDir, 'package.json'), 'utf8')) as { version?: unknown }
+  if (typeof raw.version !== 'string' || raw.version === '') throw new Error('suite package.json missing version')
+  return raw.version
+}
+
+export function findProfileDir(startDir: string): string {
+  let dir = startDir
+  for (let i = 0; i < 12; i += 1) {
+    const manifest = join(dir, 'package.json')
+    if (existsSync(manifest)) {
+      try {
+        const raw = JSON.parse(readFileSync(manifest, 'utf8')) as { dsh?: { profile?: { bundles?: unknown } } }
+        if (Array.isArray(raw.dsh?.profile?.bundles)) return dir
+      } catch {
+        // keep walking
+      }
+    }
+    const parent = dirname(dir)
+    if (parent === dir) break
+    dir = parent
+  }
+  throw new Error('cannot find dsh profile directory (no package.json with dsh.profile.bundles)')
+}
+
+export function shellQuote(value: string): string {
+  return `'${value.replaceAll("'", `'\\''`)}'`
+}
+
+export function relaunchScript(argv: string[], parentPid: number): string {
+  return `while kill -0 ${parentPid} 2>/dev/null; do sleep 0.15; done; sleep 0.25; exec ${argv.map(shellQuote).join(' ')}`
+}
+
+export async function fetchLatestVersion(fetchImpl: typeof fetch = fetch): Promise<string> {
+  const response = await fetchImpl(NPM_LATEST, { headers: { accept: 'application/json' } })
+  if (!response.ok) throw new Error(`npm registry HTTP ${response.status}`)
+  const body = await response.json() as { version?: unknown }
+  if (typeof body.version !== 'string' || body.version === '') throw new Error('npm registry missing version')
+  return body.version
+}
+
+export function runPnpmAdd(cwd: string, spec: string, env: NodeJS.ProcessEnv = process.env): Promise<void> {
+  return new Promise((resolve, reject) => {
+    const child = spawn('pnpm', ['add', spec], { cwd, env, stdio: ['ignore', 'pipe', 'pipe'] })
+    let stderr = ''
+    child.stderr.on('data', (chunk: Buffer) => { stderr += chunk.toString() })
+    const timer = setTimeout(() => {
+      child.kill('SIGTERM')
+      reject(new Error('pnpm add timed out after 3 minutes'))
+    }, PNPM_TIMEOUT_MS)
+    child.on('error', (error) => {
+      clearTimeout(timer)
+      reject(error)
+    })
+    child.on('close', (code) => {
+      clearTimeout(timer)
+      if (code === 0) resolve()
+      else reject(new Error(stderr.trim() || `pnpm add exited ${String(code)}`))
+    })
+  })
+}
+
+export function spawnRelaunch(argv: string[], parentPid: number, cwd: string, env: NodeJS.ProcessEnv = process.env): void {
+  const child = spawn('/bin/bash', ['-c', relaunchScript(argv, parentPid)], {
+    cwd,
+    env,
+    detached: true,
+    stdio: 'ignore',
+  })
+  child.unref()
+}
+
+export interface SelfUpdateIo {
+  packageDir: string
+  fetchLatest: () => Promise<string>
+  install: (profileDir: string, spec: string) => Promise<void>
+  relaunch: () => void
+}
+
+let inflight: Promise<unknown> | undefined
+
+export function createSelfUpdate(io: SelfUpdateIo) {
+  const status = async (): Promise<RezUpdateStatus> => {
+    const installed = readInstalledVersion(io.packageDir)
+    const latest = await io.fetchLatest()
+    return {
+      package: SUITE_PACKAGE,
+      installed,
+      latest,
+      outdated: compareVersions(latest, installed) > 0,
+    }
+  }
+
+  const apply = async (): Promise<RezUpdateApplyResult> => {
+    if (inflight !== undefined) throw new Error('upgrade already running')
+    const work = (async () => {
+      const snapshot = await status()
+      if (!snapshot.outdated) {
+        return { ...snapshot, restarting: false }
+      }
+      const profileDir = findProfileDir(io.packageDir)
+      await io.install(profileDir, `${SUITE_PACKAGE}@${snapshot.latest}`)
+      return { ...snapshot, installed: snapshot.latest, outdated: false, restarting: true }
+    })()
+    inflight = work
+    try {
+      return await work
+    } finally {
+      inflight = undefined
+    }
+  }
+
+  return { status, apply, relaunch: io.relaunch }
+}
+
+export function liveSelfUpdate(): ReturnType<typeof createSelfUpdate> {
+  const packageDir = dirname(fileURLToPath(new URL('.', import.meta.url)))
+  return createSelfUpdate({
+    packageDir,
+    fetchLatest: () => fetchLatestVersion(),
+    install: (profileDir, spec) => runPnpmAdd(profileDir, spec),
+    relaunch: () => {
+      spawnRelaunch(process.argv, process.pid, process.cwd())
+      setTimeout(() => { process.exit(0) }, 50)
+    },
+  })
+}

package/src/store.ts

@@ -125,6 +125,12 @@ export function publicConfig(config: RezConfig): RezPublicConfig {
         secretConfigured: secretConfigured('gsc'),
         secretRef: REZ_CREDENTIAL_REFS.gsc,
       },
+      tianyancha: {
+        enabled: connections.tianyancha.enabled,
+        url: connections.tianyancha.url,
+        secretConfigured: secretConfigured('tianyancha'),
+        secretRef: REZ_CREDENTIAL_REFS.tianyancha,
+      },
     },
     billing: { ...config.billing },
   }

package/src/tianyancha.ts

@@ -0,0 +1,79 @@
+/**
+ * TianyanCha official MCP for the 法务助理 workspace.
+ * Reuse https://mcp.tianyancha.com/mcp via dsh-mcp-client. Do not spawn a
+ * local 162-tool catalog — tools/list only exposes a few agent entrypoints.
+ * Start the client only when suite role is boss so other identities never
+ * see mcp__tianyancha__* in the prompt.
+ */
+import type { Context } from '@deepseek-ai/cordis'
+import { loadRezConnections, startMcpWhenSecret } from '@rezti/dsh-rez-sso'
+import type { RezRoleId } from './protocol.ts'
+
+export const TIANYANCHA_MCP_URL = 'https://mcp.tianyancha.com/mcp'
+
+export function shouldStartTianyancha(role: RezRoleId): boolean {
+  return role === 'boss'
+}
+
+export function bearerAuthorization(secret: string): string {
+  const trimmed = secret.trim()
+  if (/^bearer\s+/i.test(trimmed)) return 'Bearer ' + trimmed.replace(/^bearer\s+/i, '')
+  return 'Bearer ' + trimmed
+}
+
+export function tianyanchaMcpConfig(secret: string): Record<string, unknown> {
+  const { url } = loadRezConnections().tianyancha
+  return {
+    serverName: 'tianyancha',
+    transport: 'streamable-http',
+    url: url.length > 0 ? url : TIANYANCHA_MCP_URL,
+    headers: { Authorization: bearerAuthorization(secret) },
+    failOnStartupError: false,
+  }
+}
+
+/** Start when role is boss; dispose the mcp-client fiber when the identity leaves. */
+export function mountTianyanchaMcp(
+  ctx: Context,
+  getRole: () => RezRoleId,
+  start: typeof startMcpWhenSecret = startMcpWhenSecret,
+): () => void {
+  let session: (() => void) | undefined
+  let pending = false
+
+  const ensure = (): void => {
+    void (async () => {
+      const want = shouldStartTianyancha(getRole())
+      if (!want) {
+        session?.()
+        session = undefined
+        return
+      }
+      if (session !== undefined || pending) return
+      pending = true
+      let raced = false
+      try {
+        const dispose = await start(ctx, {
+          system: 'tianyancha',
+          label: '天眼查',
+          config: tianyanchaMcpConfig,
+        })
+        if (!shouldStartTianyancha(getRole())) {
+          raced = true
+          dispose()
+          return
+        }
+        session = dispose
+      } catch (error: unknown) {
+        const why = error instanceof Error ? error.message : String(error)
+        console.error('[dsh-rez-suite] tianyancha MCP start failed:', why)
+      } finally {
+        pending = false
+        if (raced && shouldStartTianyancha(getRole()) && session === undefined) ensure()
+      }
+    })()
+  }
+
+  ensure()
+  return ensure
+}

package/templates/staff/legal/.agents/skills/staff-legal/SKILL.md

@@ -3,4 +3,4 @@ name: staff-legal
 description: 法务助理。全员可问制度、整理风险；能看哪些合同跟当前 Odoo/Nextcloud 帐号。不下具约束力的法律结论。
 ---
 
-完整规矩在工作区 `AGENTS.md`。先 `mcp__odoo__get_current_context`。不是律师。
+完整规矩在工作区 `AGENTS.md`。先 `mcp__odoo__get_current_context`。不是律师。有 `mcp__tianyancha__*` 才查工商（仅老板身份会挂上）。

package/templates/staff/legal/AGENTS.md

@@ -19,6 +19,10 @@
 
 没有独立的法务 App 时，不要假装有「案件模块」。用订单、伙伴、Nextcloud 文档凑齐材料即可。
 
+## 天眼查（仅老板身份）
+
+出现 `mcp__tianyancha__*` 时，才用来查对方公司工商/司法。官方 `tools/list` 只有搜索、公司画像、`call_tool` 等入口，不要枚举 162 个工具。没有这些工具就当没开通，不要提天眼查。
+
 ## 每次回答
 
 1. **结论**（风险高/中/低或「缺材料」）