bothouse-dsh 0.1.46 → 0.1.47

package/collab/desk.mjs

@@ -2,8 +2,8 @@
 //
 // 事件契约见 Issue #876：`board-events.jsonl` 与 board.jsonl 同目录（BOARD_DIR），
 // 一行一个 JSON，只追加；这里只读不改，写入归 gate 的 board.py。
-import { closeSync, openSync, readFileSync, readSync, statSync } from 'node:fs';
-import { join } from 'node:path';
+import { closeSync, mkdirSync, openSync, readFileSync, readSync, renameSync, statSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
 import { CollabError, publicMessage } from './store.mjs';
 // #876 P: 回放消息的 @ 由这里解析，规则与 hub 路由同一套（mentions.mjs），页面不再自己猜文本。
 import { mentions as mentionsOf } from './mentions.mjs';
@@ -130,8 +130,56 @@ export function deskPage() {
   try { return readFileSync(new URL('./desk/index.html', import.meta.url), 'utf8'); } catch { return PLACEHOLDER_PAGE; }
 }
 
-/** /collab/desk 与 /collab/api/desk/replay；返回 true 表示已处理，未匹配返回 undefined。 */
-export function deskRoute(req, res, url, { store, boardDir, members = [] }) {
+// 名牌自定义名：成员 id → 名字，存插件数据目录，刷新、换设备都还在；空名 = 恢复默认（roster.name）。
+export const DESK_NAMES_FILE = 'desk-names.json';
+export const DESK_NAME_MAX = 24;
+
+export function readDeskNames(file) {
+  if (!file) return {};
+  try {
+    const value = JSON.parse(readFileSync(file, 'utf8'));
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+  } catch { return {}; }
+}
+
+/** 改一个成员的名牌名；name 去空白后为空就删掉，回到默认名。返回改后的全表。 */
+export function setDeskName(file, id, name) {
+  const key = String(id ?? '').trim();
+  if (!key) throw new CollabError('invalid', 'id is required');
+  const value = String(name ?? '').replace(/\s+/g, ' ').trim();
+  if (Array.from(value).length > DESK_NAME_MAX) throw new CollabError('invalid', `name must be at most ${DESK_NAME_MAX} characters`);
+  const names = readDeskNames(file);
+  if (value) names[key] = value; else delete names[key];
+  mkdirSync(dirname(file), { recursive: true });
+  const tmp = `${file}.${process.pid}.tmp`;
+  writeFileSync(tmp, JSON.stringify(names, null, 2) + '\n');
+  renameSync(tmp, file);
+  return names;
+}
+
+function sendJson(res, status, value) {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' });
+  res.end(JSON.stringify(value));
+}
+
+async function namesRoute(req, res, namesFile) {
+  if (!namesFile) return sendJson(res, 404, { error: 'desk names are not configured' });
+  if (req.method === 'GET') return sendJson(res, 200, { names: readDeskNames(namesFile) });
+  let raw = '';
+  try {
+    for await (const chunk of req) { raw += chunk; if (raw.length > 4096) return sendJson(res, 413, { error: 'body too large' }); }
+    const body = JSON.parse(raw || '{}');
+    return sendJson(res, 200, { names: setDeskName(namesFile, body?.id, body?.name) });
+  } catch (error) {
+    if (error instanceof CollabError) return sendJson(res, 400, { error: error.message, code: error.code });
+    if (error instanceof SyntaxError) return sendJson(res, 400, { error: 'invalid JSON body' });
+    return sendJson(res, 500, { error: 'save failed' });
+  }
+}
+
+/** /collab/desk、/collab/api/desk/replay、/collab/api/desk/names；返回 true（或 Promise）表示已处理，未匹配返回 undefined。 */
+export function deskRoute(req, res, url, { store, boardDir, members = [], namesFile } = {}) {
+  if (url.pathname.replace(/\/+$/, '') === '/collab/api/desk/names' && (req.method === 'GET' || req.method === 'PUT')) return namesRoute(req, res, namesFile);
   if (url.pathname.replace(/\/+$/, '') !== '/collab/desk' && url.pathname.replace(/\/+$/, '') !== '/collab/api/desk/replay') return undefined;
   if (req.method !== 'GET') return undefined;
   if (url.pathname.replace(/\/+$/, '') === '/collab/desk') {

package/collab/dsh-member.mjs

@@ -203,9 +203,34 @@ export function friendlyFailure(raw) {
   if (/model.{0,30}(not found|unavailable|not available|unsupported)|unknown model|模型.*不可用|404/i.test(text)) return '这个模型暂时不可用，请检查模型名称或换一个模型。';
   if (/login|log.?in|auth|unauthorized|401|未登录/i.test(text)) return '模型或 CLI 还没有登录，或登录已过期。请先登录后再试。';
   if (/exit|ENOENT|spawn|没有输出文字/i.test(text)) return '本机 CLI 未能正常运行或已退出，请检查安装和登录状态。';
+  // A Host older than this plugin has no scope lease on its preset registry, so no member can be
+  // composed. Name the cause and the fix instead of showing the bare TypeError.
+  if (/agentPresets\.\w+ is not a function/i.test(text)) return '当前 DSH 宿主缺少频道插件需要的预设接口（agentPresets），成员无法启动。请把 DSH 升级到与本插件匹配的版本后重试。';
   return `这次没能完成，请检查配置后重试。原始错误：${text}`;
 }
 
+/**
+ * Lease one preset revision while an Agent joins it, or undefined when the Host's
+ * registry has no scope lease. `acquireScope` shipped in a later registry than
+ * `resolve`/`mount`, so a Host can serve presets without it; the lease only keeps
+ * that revision alive during assembly. Skipping it there keeps members usable
+ * instead of failing every turn with a bare "is not a function" TypeError.
+ * @param ctx - Host context carrying the preset registry.
+ * @param presetId - Preset identity the Agent joins.
+ * @returns Something with an async disposer, or undefined when unsupported.
+ */
+export async function presetScope(ctx, presetId) {
+  const registry = ctx?.agentPresets;
+  if (typeof registry?.acquireScope !== 'function') return undefined;
+  return await registry.acquireScope(presetId);
+}
+
+/** Release a presetScope result; a Host without the lease releases nothing. */
+export async function releasePresetScope(scope) {
+  const dispose = scope?.[Symbol.asyncDispose];
+  if (typeof dispose === 'function') await dispose();
+}
+
 /**
  * Card text of one approval request, in cc-connect's permission prompt layout:
  * the tool, what it wants to run (the call's first argument), and DSH's reason.
@@ -911,7 +936,7 @@ export class DshMembers {
   async createAgent(member, room) {
     const { ctx } = this.rt;
     const preset = await ctx.agentPresets.resolve(member.agentPreset);
-    const scope = await ctx.agentPresets.acquireScope(preset.id);
+    const scope = await presetScope(ctx, preset.id);
     const sessionId = `collab-${randomUUID()}`;
     let handle;
     let workspace;
@@ -932,7 +957,7 @@ export class DshMembers {
         },
       });
     } finally {
-      await scope[Symbol.asyncDispose]();
+      await releasePresetScope(scope);
     }
     await workspace.attachSession(sessionId);
     // setup ran before the Agent existed, so record it here: liveAgent must not hook it again.
@@ -1006,7 +1031,7 @@ export class DshMembers {
     // Installing only the request hook left a resumed Session with just the
     // built-in tools after a DSH restart.
     const preset = await ctx.agentPresets.resolve(member.agentPreset);
-    const scope = await ctx.agentPresets.acquireScope(preset.id);
+    const scope = await presetScope(ctx, preset.id);
     let handle;
     try {
       handle = await ctx.agents.resume({
@@ -1018,7 +1043,7 @@ export class DshMembers {
         },
       });
     } finally {
-      await scope[Symbol.asyncDispose]();
+      await releasePresetScope(scope);
     }
     this.hooked.add(handle.agent);
     if (member.permissionPreset !== undefined) ctx.permissionPresets.set(handle.agent.session, member.permissionPreset);

package/collab/page.html

@@ -505,6 +505,8 @@
 <div class="scrim" id="scrim" aria-hidden="true"></div>
 
 <script>
+// 经面板 /dsh/ 转发时页面挂在前缀下：接口和链接都按当前地址带上前缀，直连时前缀为空。
+const ROOT = (location.pathname.match(/^(.*?)\/collab(?:\/|$)/) || ['', ''])[1];
 const state = { me: 'owner', rooms: [], members: [], thinking: {}, room: null, synced: 0, mode: 'mixed' };
 const $ = id => document.getElementById(id);
 // crypto.randomUUID only exists in secure contexts (https/localhost); plain-http LAN/Tailscale pages fall back to getRandomValues.
@@ -527,7 +529,7 @@ const GROUP_WINDOW_MS = 5 * 60 * 1000;
 // 768px 是 U2 交接里定的窄屏阈值
 const narrow = window.matchMedia('(max-width: 768px)');
 
-const avatarSrc = v => !v ? '' : /^https?:/.test(v) ? v : '/collab/avatars/' + encodeURIComponent(v) + '.png';
+const avatarSrc = v => !v ? '' : /^https?:/.test(v) ? v : ROOT + '/collab/avatars/' + encodeURIComponent(v) + '.png';
 function avatar(id, name) {
   const m = state.members.find(m => m.id === id);
   const a = el('div', 'avatar', (name || id).slice(0, 1)); a.style.background = color(id);
@@ -634,7 +636,7 @@ function messageNode(m) {
       const bar = el('div', 'actions');
       for (const a of meta.actions) {
         const b = el('button', '', a.label);
-        b.onclick = () => { bar.querySelectorAll('button').forEach(x => { x.disabled = true; }); api(`/collab/api/messages/${m.id}/permission`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ decision: a.decision }) }); };
+        b.onclick = () => { bar.querySelectorAll('button').forEach(x => { x.disabled = true; }); api(`${ROOT}/collab/api/messages/${m.id}/permission`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ decision: a.decision }) }); };
         bar.append(b);
       }
       card.append(bar);
@@ -702,10 +704,10 @@ async function openRoom(id) {
   $('input').disabled = true;
   closeDrawer();
   try {
-    const setting = await api(`/collab/api/rooms/${id}/mode`);
+    const setting = await api(`${ROOT}/collab/api/rooms/${id}/mode`);
     state.mode = setting.dispatch_mode;
     renderRooms(); renderMembers();
-    const { messages } = await api(`/collab/api/rooms/${id}/messages?limit=100`);
+    const { messages } = await api(`${ROOT}/collab/api/rooms/${id}/messages?limit=100`);
     if (state.room !== id) return;
     const log = $('log');
     log.querySelector('.state')?.remove();
@@ -725,7 +727,7 @@ async function openRoom(id) {
 $('mode').addEventListener('change', async (e) => {
   if (state.room == null) return;
   try {
-    const result = await api(`/collab/api/rooms/${state.room}/mode`, {
+    const result = await api(`${ROOT}/collab/api/rooms/${state.room}/mode`, {
       method: 'PATCH', headers: { 'content-type': 'application/json' },
       body: JSON.stringify({ dispatch_mode: e.target.value }),
     });
@@ -739,7 +741,7 @@ async function catchUp() {
   const room = state.room;
   if (room == null) return;
   for (;;) {
-    const { messages } = await api(`/collab/api/rooms/${room}/messages?after=${state.synced}&limit=200`);
+    const { messages } = await api(`${ROOT}/collab/api/rooms/${room}/messages?after=${state.synced}&limit=200`);
     if (state.room !== room) return;
     messages.forEach(upsert);
     if (messages.length) state.synced = messages[messages.length - 1].id;
@@ -748,7 +750,7 @@ async function catchUp() {
 }
 
 function connect() {
-  const es = new EventSource('/collab/api/events');
+  const es = new EventSource(ROOT + '/collab/api/events');
   es.onopen = () => catchUp().catch(console.warn);
   es.onmessage = (e) => {
     const ev = JSON.parse(e.data);
@@ -769,7 +771,7 @@ $('form').addEventListener('submit', async (e) => {
   if (!text || state.room == null) return;
   $('input').value = ''; $('input').style.height = 'auto';
   try {
-    const { message } = await api(`/collab/api/rooms/${state.room}/messages`, {
+    const { message } = await api(`${ROOT}/collab/api/rooms/${state.room}/messages`, {
       method: 'POST', headers: { 'content-type': 'application/json' },
       body: JSON.stringify({ text, client_key: uuid() }),
     });
@@ -778,7 +780,7 @@ $('form').addEventListener('submit', async (e) => {
 });
 
 (async () => {
-  const s = await api('/collab/api/state');
+  const s = await api(ROOT + '/collab/api/state');
   Object.assign(state, { me: s.me, rooms: s.rooms, members: s.members, thinking: s.thinking });
   connect();
   await openRoom(s.rooms[0].id);

package/collab/panel.mjs

@@ -0,0 +1,160 @@
+// The bothouse management panel inside DSH (#105): the sidebar's "bothouse" entry frames
+// /collab/panel/, and this owner-only route forwards it to the bridge management server.
+//
+// The panel API needs the management token. The browser must not hold it, so on each
+// request the route reads [management] from the bridge config file and signs the upstream
+// call itself. The panel page learns it is behind such a proxy from an injected
+// <meta name="bothouse-auth" content="proxy">, and <base href> is rewritten to the mount
+// path so its relative asset and API URLs land back here (bridge/web/src/lib/basePath.ts).
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { Readable } from 'node:stream';
+
+export const PANEL_PREFIX = '/collab/panel';
+// 来源：bothouse 管理接口默认端口（bridge config.example.toml [management] port）
+const DEFAULT_PORT = 9820;
+// Request headers the panel page may pass upstream; everything else (cookies, Authorization,
+// Origin, Host) stays on this side.
+const PASS_REQUEST = ['accept', 'accept-language', 'content-type', 'if-none-match', 'if-modified-since', 'range'];
+// Response headers worth keeping; Set-Cookie and CORS headers from the panel are dropped.
+const PASS_RESPONSE = ['content-type', 'cache-control', 'etag', 'last-modified', 'content-disposition', 'content-range', 'accept-ranges'];
+
+/**
+ * Default bridge config path: $BOTHOUSE_CONFIG, else <data dir>/config.toml.
+ * @param {NodeJS.ProcessEnv} env
+ * @returns {string}
+ */
+export function defaultBridgeConfig(env = process.env) {
+  const explicit = String(env.BOTHOUSE_CONFIG ?? '').trim();
+  if (explicit !== '') return explicit;
+  const dataDir = String(env.BOTHOUSE_DATA_DIR ?? '').trim() || join(env.HOME || homedir(), '.bothouse');
+  return join(dataDir, 'config.toml');
+}
+
+/** Value of one TOML scalar (quoted string, number or bare word); comments stripped. */
+function scalar(raw) {
+  const s = raw.trim();
+  const quoted = /^"((?:[^"\\]|\\.)*)"|^'([^']*)'/.exec(s);
+  if (quoted !== null) return quoted[1] !== undefined ? JSON.parse(`"${quoted[1]}"`) : quoted[2];
+  return s.replace(/\s+#.*$/, '').trim();
+}
+
+/**
+ * Read host/port/token/enabled from the [management] table of a bridge config.
+ * Only flat `key = value` lines are needed, so a full TOML parser is not pulled in.
+ * @param {string} text - config.toml contents.
+ * @returns {{ enabled: boolean, host: string, port: number, token: string }}
+ */
+export function managementSettings(text) {
+  const out = { enabled: false, host: '', port: DEFAULT_PORT, token: '' };
+  let inside = false;
+  for (const line of text.split(/\r?\n/)) {
+    const header = /^\s*\[\s*([^\]]+?)\s*\]/.exec(line);
+    if (header !== null) { inside = header[1] === 'management'; continue; }
+    if (!inside) continue;
+    const kv = /^\s*([A-Za-z_][A-Za-z0-9_-]*)\s*=\s*(.*)$/.exec(line);
+    if (kv === null) continue;
+    const value = scalar(kv[2]);
+    if (kv[1] === 'enabled') out.enabled = value === 'true';
+    else if (kv[1] === 'host') out.host = String(value);
+    else if (kv[1] === 'port' && Number.isInteger(Number(value)) && Number(value) > 0) out.port = Number(value);
+    else if (kv[1] === 'token') out.token = String(value);
+  }
+  return out;
+}
+
+/** Loopback address to dial for a configured listen host. */
+function dialHost(host) {
+  if (host === '' || host === '0.0.0.0' || host === '::' || host === '[::]') return '127.0.0.1';
+  return host.includes(':') && !host.startsWith('[') ? `[${host}]` : host;
+}
+
+function sendJSON(res, status, body) {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' });
+  res.end(JSON.stringify(body));
+}
+
+/** Text shown inside the frame when the panel cannot be reached. */
+function sendNotice(res, status, reason) {
+  res.writeHead(status, { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' });
+  res.end(`<!doctype html><meta charset="utf-8"><title>bothouse</title><body style="font:14px system-ui;padding:24px;color:#888">打不开 bothouse 管理面板：${reason
+    .replace(/[&<>"]/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' })[c])}</body>`);
+}
+
+/**
+ * Point the panel page at the mount path and mark it as proxy-signed.
+ * @param {string} html - the panel's index.html.
+ * @param {string} prefix - mount path, e.g. /collab/panel.
+ * @returns {string}
+ */
+export function rewritePanelHTML(html, prefix = PANEL_PREFIX) {
+  const head = `<base href="${prefix}/" />\n    <meta name="bothouse-auth" content="proxy" />`;
+  if (/<base\s[^>]*>/i.test(html)) return html.replace(/<base\s[^>]*>/i, head);
+  return html.replace(/<head(\s[^>]*)?>/i, m => `${m}\n    ${head}`);
+}
+
+/**
+ * Forward /collab/panel/* to the bridge management server. Callers must have checked the owner.
+ * @returns {Promise<true> | undefined} undefined when the path is not ours.
+ */
+export function panelRoute(req, res, url, { bridgeConfig, fetchImpl = fetch }) {
+  if (url.pathname !== PANEL_PREFIX && !url.pathname.startsWith(`${PANEL_PREFIX}/`)) return undefined;
+  if (url.pathname === PANEL_PREFIX) {
+    res.writeHead(308, { location: `${PANEL_PREFIX}/${url.search}` });
+    res.end();
+    return Promise.resolve(true);
+  }
+  return (async () => {
+    const rest = url.pathname.slice(PANEL_PREFIX.length) || '/';
+    const isAPI = rest.startsWith('/api/');
+    const fail = (status, reason) => (isAPI ? sendJSON(res, status, { ok: false, error: reason }) : sendNotice(res, status, reason), true);
+    let settings;
+    try {
+      settings = managementSettings(readFileSync(bridgeConfig, 'utf8'));
+    } catch {
+      return fail(503, '读不到主桥配置');
+    }
+    if (!settings.enabled) return fail(503, '主桥配置里管理接口没打开');
+    const upstream = `http://${dialHost(settings.host)}:${settings.port}${rest}${url.search}`;
+    const headers = {};
+    for (const name of PASS_REQUEST) {
+      const v = req.headers[name];
+      if (typeof v === 'string') headers[name] = v;
+    }
+    if (settings.token !== '') headers.authorization = `Bearer ${settings.token}`;
+    const hasBody = req.method !== 'GET' && req.method !== 'HEAD';
+    let reply;
+    try {
+      reply = await fetchImpl(upstream, {
+        method: req.method,
+        headers,
+        body: hasBody ? Readable.toWeb(req) : undefined,
+        duplex: hasBody ? 'half' : undefined,
+        redirect: 'manual',
+      });
+    } catch {
+      return fail(502, '连不上主桥管理接口');
+    }
+    const out = {};
+    for (const name of PASS_RESPONSE) {
+      const v = reply.headers.get(name);
+      if (v !== null) out[name] = v;
+    }
+    const type = reply.headers.get('content-type') ?? '';
+    if (!isAPI && type.startsWith('text/html')) {
+      const html = rewritePanelHTML(await reply.text());
+      res.writeHead(reply.status, { ...out, 'cache-control': 'no-store' });
+      res.end(html);
+      return true;
+    }
+    res.writeHead(reply.status, out);
+    if (reply.body === null || req.method === 'HEAD') { res.end(); return true; }
+    // Stream so NDJSON/SSE answers (plugin install, logs) arrive as they are produced.
+    const body = Readable.fromWeb(reply.body);
+    body.on('error', () => res.destroy());
+    req.on('close', () => body.destroy());
+    body.pipe(res);
+    return true;
+  })();
+}

package/collab/plugin.mjs

@@ -4,7 +4,7 @@ import { personaLibrary } from './personas.mjs';
 //   - insert:
 //       - id: conest-collab
 //         name: /abs/path/dsh/collab/plugin.mjs
-//         config: { dataDir, workspacePath, leadFile?, fallbackLead?, botTokenEnv?, ownerName?, rooms?, dshMembers?, maxRelay?, boardDir?, teamStatusDir?, wikiDir? }
+//         config: { dataDir, workspacePath, leadFile?, fallbackLead?, botTokenEnv?, ownerName?, rooms?, dshMembers?, maxRelay?, boardDir?, teamStatusDir?, wikiDir?, bridgeConfig? }
 import { createRequire } from 'node:module';
 import { readFileSync, realpathSync, statSync } from 'node:fs';
 import { isAbsolute, join } from 'node:path';
@@ -24,8 +24,9 @@ import { LeadState } from './lead-state.mjs';
 import { Attachments, INLINE_IMAGE } from './attachments.mjs';
 import { Later, registerLater } from './later.mjs';
 import { QuotaCooling, quotaDirectory } from './quota-cooling.mjs';
-import { DeskEvents, deskRoute } from './desk.mjs';
+import { DeskEvents, DESK_NAMES_FILE, deskRoute } from './desk.mjs';
 import { wikiGalaxyRoute } from './wiki-galaxy.mjs';
+import { defaultBridgeConfig, panelRoute } from './panel.mjs';
 import { TeamStatus } from './team-status.mjs';
 
 export const name = 'conest-collab';
@@ -93,7 +94,10 @@ export function resolveConfig(config, env = process.env) {
   // Wiki 星河读的 wiki 目录：配置或 CONEST_WIKI_DIR，都没给就是 ~/wiki（只读）。
   const wikiDir = String(c.wikiDir ?? env.CONEST_WIKI_DIR ?? '').trim() || (env.HOME ? join(env.HOME, 'wiki') : undefined);
   if (wikiDir !== undefined && !isAbsolute(wikiDir)) throw Error('conest-collab: wikiDir must be an absolute path');
-  return { dataDir: c.dataDir, workspacePath: c.workspacePath, leadFile, fallbackLead, boardDir, teamStatusDir, wikiDir, rooms, dshMembers: members, maxRelay, botTokenEnv, botToken, ownerName: c.ownerName ?? '我' };
+  // #105 侧栏「bothouse」：读这份主桥配置的 [management] 段，在服务端转发管理面板（令牌不进浏览器）。
+  const bridgeConfig = String(c.bridgeConfig ?? '').trim() || defaultBridgeConfig(env);
+  if (!isAbsolute(bridgeConfig)) throw Error('conest-collab: bridgeConfig must be an absolute path');
+  return { dataDir: c.dataDir, workspacePath: c.workspacePath, leadFile, fallbackLead, boardDir, teamStatusDir, wikiDir, bridgeConfig, rooms, dshMembers: members, maxRelay, botTokenEnv, botToken, ownerName: c.ownerName ?? '我' };
 }
 
 /** Resolve a package from the running DSH installation, never a second copy. */
@@ -237,10 +241,12 @@ export async function apply(ctx, rawConfig) {
       return refuse(req, res);
     }
     // #876 P: 回放里的 @ 用 hub 的成员表解析（routable = 真实角色，不含主人）。
-    const deskHandled = deskRoute(req, res, url, { store, boardDir: config.boardDir, members: hub.routable() });
+    const deskHandled = deskRoute(req, res, url, { store, boardDir: config.boardDir, members: hub.routable(), namesFile: join(config.dataDir, DESK_NAMES_FILE) });
     if (deskHandled !== undefined) return deskHandled;
     const galaxyHandled = wikiGalaxyRoute(req, res, url, { wikiDir: config.wikiDir });
     if (galaxyHandled !== undefined) return galaxyHandled;
+    const panelHandled = panelRoute(req, res, url, { bridgeConfig: config.bridgeConfig });
+    if (panelHandled !== undefined) return panelHandled;
     if (path === '/collab' && req.method === 'GET') return text(res, 200, 'text/html; charset=utf-8', PAGE);
     if (path === '/collab/api/personas' && req.method === 'GET') return json(res, 200, personaLibrary(url.searchParams.get('lang') ?? 'zh'));
     if (path === '/collab/api/state' && req.method === 'GET') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bothouse-dsh",
-  "version": "0.1.46",
+  "version": "0.1.47",
   "description": "BotHouse channels for DeepSeek Harness: Discord-style rooms where DSH models and local CLIs (Claude Code, Codex, Gemini) are members",
   "type": "module",
   "main": "./collab/plugin.mjs",