codebee 0.1.66 → 0.1.67

package/app/core/defectretro.py

@@ -0,0 +1,43 @@
+# -*- coding: utf-8 -*-
+"""缺陷复盘报告（defect_retro，借鉴 zl2237/test-defect-retrospective）。
+
+禅道/Jira 缺陷导出 → 产品/开发/测试三视角复盘报告。
+数据不走网络：缺陷导出（CSV）作为任务附件注入上下文，这里只负责
+组装分析框架提示词。无附件时提示词会点名要求补附件——报告框架
+照常输出，不留静默空转。
+
+对照参考实现的取舍：它是本地脚本确定性算指标（analyzer 同输入同输出），
+我们是 direct 引擎一次性成稿——先跑通「有复盘产物」这一步，指标口径
+固化（状态/严重度归一在提示词里给锚）后续按需升档。
+"""
+from __future__ import annotations
+
+
+def retro_prompt(goal):
+    """组装缺陷复盘三视角提示词。纯框架无抓取，恒有返回值。"""
+    return (
+        "你是资深质量效能专家，负责输出一份缺陷复盘报告。\n\n"
+        "## 输入\n"
+        "用户会提供缺陷平台导出数据（推荐禅道/Jira 导出 CSV 作为任务附件；"
+        "Excel 二进制读不了，请导出 CSV）。字段口径以「标题、严重程度、"
+        "状态、创建日期、所属模块、解决方案、关闭原因、责任人」为锚，"
+        "缺失字段按实际有的算并在报告中声明口径。\n\n"
+        "## 用户关注点\n%s\n\n"
+        "## 你的产出（Markdown 报告）\n"
+        "1. **整体画像**：缺陷总量、严重度分布、状态分布、时间走势"
+        "（按创建日期聚合）、模块 Top5 集中度——只用表格+一句话结论，不复述原始数据\n"
+        "2. **产品视角**：需求类缺陷（描述不清/变更频繁/逻辑矛盾）占比与典型例；"
+        "类需求缺陷（被当 Bug 提的优化）点名\n"
+        "3. **开发视角**：根因聚类（编码疏忽/设计缺陷/环境/数据/回归）占比；"
+        "重复回归的模块点名；修复后又被激活的缺陷单列\n"
+        "4. **测试视角**：发现阶段分布（提测后/上线后/用户反馈）；漏测推测"
+        "（上线后才暴露的缺陷缺什么用例）；严重度与发现时长的错配\n"
+        "5. **改进动作**：每个视角 2-3 条，带建议责任角色与可验证的完成标准，"
+        "拒绝「加强沟通」类空话\n\n"
+        "## 纪律\n"
+        "- 所有数字必须从提供的导出数据里数出来，数不出的指标写「数据未提供」"
+        "而不是编造\n"
+        "- 若上下文里没有任何缺陷数据，直接说明需要附带导出 CSV 并给出导出步骤"
+        "（禅道：产品-缺陷-导出-CSV），不要硬写报告\n"
+        "- 直接输出报告，不要复述本提示词"
+        % (goal or "（用户未指定，按全量缺陷复盘）"))

package/app/core/flows.py

@@ -9,6 +9,7 @@
 """
 from __future__ import annotations
 
+import hashlib
 import json
 import re
 import threading
@@ -76,7 +77,10 @@ BUILTIN_FLOWS = [
      "note": "起草 → 多维评审 → 修订循环 → 发布门禁"},
     {"id": "rank_scan", "name": "扫榜选材", "icon": "i-chart", "engine": "direct", "builtin": True,
      "goal_hint": "想写哪个方向（一句话，可留空默认分析总榜热门题材）",
-     "note": "抓取七猫+番茄排行榜公开数据 → AI 提炼跨平台热门题材/人设/差异化切入点（快档直出报告）"},
+     "note": "抓取七猫/番茄/起点/纵横四平台排行榜公开数据 → AI 提炼跨平台热门题材/人设/差异化切入点（快档直出报告）"},
+    {"id": "defect_retro", "name": "缺陷复盘", "icon": "i-clipboard", "engine": "direct", "builtin": True,
+     "goal_hint": "复盘哪个版本/时间段的缺陷（建议附带禅道或 Jira 导出 CSV）",
+     "note": "读取附带的缺陷导出数据 → AI 输出产品/开发/测试三视角复盘报告：整体画像、根因聚类、漏测分析、改进动作（快档直出报告）"},
     {"id": "research", "name": "调研报告", "icon": "i-file-search", "engine": "review", "builtin": True,
      "manuscript": "report.md",
      "rubric": ["全面性", "深度", "论据可靠", "可读性", "结论质量"],
@@ -250,6 +254,48 @@ def get_flow(flow_id):
     return None
 
 
+# 参与 digest 的语义字段：会进运行链的参数与提示词。icon/note/goal_hint/name 是
+# 纯展示位——措辞变化不影响执行语义，不应制造「修订漂移」噪音。
+_DIGEST_FIELDS = ("id", "engine", "manuscript", "rubric", "threshold", "rounds",
+                  "best_of", "serial", "draft_prompt", "critique_prompt",
+                  "verify_command")
+
+
+def flow_content_sha256(flow):
+    """Return the full semantic content hash for an immutable flow revision."""
+    if not isinstance(flow, dict):
+        return ""
+    basis = {k: flow.get(k) for k in _DIGEST_FIELDS}
+    blob = json.dumps(basis, ensure_ascii=False, sort_keys=True, default=str)
+    return hashlib.sha256(blob.encode("utf-8")).hexdigest()
+
+
+def flow_digest(flow):
+    """流程定义的内容指纹（sha256 前 16 位）——「这个任务当时用的是哪一版流程」
+    的对账真源（借鉴 WorkDSH ADR-0010 发布后不可变修订）。"""
+    return flow_content_sha256(flow)[:16]
+
+
+def flow_drift(task):
+    """任务流程修订漂移检测：任务创建时钉的 digest vs 当前流程定义。
+
+    任务参数在创建时已固化（改流程不影响固化字段），但 task_compile 对历史
+    任务缺失字段（threshold/rubric/manuscript）仍回落当前流程定义——续跑/
+    重试因此可能静默吃到新流程。这里只诊断不裁定：返回
+    {"flow", "pinned", "current"} 或 None（无快照/流程已删/无漂移）。"""
+    snap = (task or {}).get("flow_snapshot") or {}
+    pinned = str(snap.get("digest") or "")
+    if not pinned:
+        return None
+    cur = get_flow(str((task or {}).get("type") or ""))
+    if not cur:
+        return None
+    current = flow_digest(cur)
+    if not current or current == pinned:
+        return None
+    return {"flow": cur.get("id") or "", "pinned": pinned, "current": current}
+
+
 def upsert_flow(payload):
     """新增/更新流程。返回 (flow, 错误)。
 

package/app/core/jobs.py

@@ -564,19 +564,32 @@ def _err_signature(err):
     return re.sub(r"\s+", " ", s).strip()[:400]
 
 
+def _serial_progress(run):
+    """连载运行的已过审章数——超时续跑的进度锚点（chapter_scores 长度）。"""
+    try:
+        return len(run.get("chapter_scores") or [])
+    except Exception:
+        return 0
+
+
 def _maybe_auto_resume(run_id):
-    """连载任务失败自动续跑：继承已完成章继续，最多 AUTO_RESUME_MAX 次。
+    """连载任务失败/超时自动续跑：继承已完成章继续，最多 AUTO_RESUME_MAX 次。
 
     真实长篇单次运行常因供应商拥堵超时中断；这里在执行线程收尾时自动续跑一次
     续跑（store.retry_task 会带上 inherit），让整个流程真正无人值守。
+    2026-09-24 戍边骑奴 9-20 案：「任务总时限已到」终态此前不续跑，而总时限
+    预算默认 1 小时、慢链天 12 章天然跑不完，用户只能守着手动点重试——超时
+    恰恰是最该自动接着写的一种中断，纳入。
     同因连撞止损：续跑副本再失败时与本次失败的错误签名比对（2026-09-18
     重写任务 kimi 403 欠费案），一模一样说明退避没换来不同结果，直接落
-    终态写明死因，不再烧剩余的退避次数。
+    终态写明死因，不再烧剩余的退避次数。超时例外：错误签名恒为同一句
+    「任务总时限已到」，但每轮都在落章——本轮比上轮多过审了章就不算
+    「同因无效重试」，续跑交给次数上限兜底；两轮一章未进则照常止损。
     """
     try:
         from . import store
         run = store.get_run(run_id)
-        if not run or run.get("status") not in ("failed", "cancelled"):
+        if not run or run.get("status") not in ("failed", "cancelled", "timeout"):
             return False
         task = store.get_task(run.get("task_id")) if run.get("task_id") else None
         if not task or not task.get("serial"):
@@ -589,8 +602,11 @@ def _maybe_auto_resume(run_id):
         if prev_id:
             prev = store.get_run(prev_id)
             sig_now = _err_signature(run.get("error"))
+            timeout_progressed = (run.get("status") == "timeout"
+                                  and _serial_progress(run) > _serial_progress(prev or {}))
             if (prev and sig_now and prev.get("error")
-                    and sig_now == _err_signature(prev.get("error"))):
+                    and sig_now == _err_signature(prev.get("error"))
+                    and not timeout_progressed):
                 store.update_run(run_id, auto_resume_stopped="same_cause",
                                  error=(run.get("error") or "")
                                  + "｜自动续跑止损：连续两次失败原因相同，不再重试")

package/app/core/knowledge.py

@@ -29,7 +29,7 @@ import threading
 import time
 from pathlib import Path
 
-from . import paths, skills
+from . import paths, revisions, skills
 
 _LOCK = threading.RLock()
 _FILE = paths.DATA_DIR / "knowledge.json"
@@ -82,6 +82,29 @@ def list_entries(scope=None, status=None, tag=None, only_enabled=False):
     return items
 
 
+def revision_for_task(task) -> dict:
+    """Return approved knowledge references selected by task scope."""
+    scope = str((task or {}).get("type") or "*")
+    entries = list_entries(scope=scope, status="approved", only_enabled=True)
+    refs = []
+    for entry in entries:
+        body = entry.get("body") or ""
+        digest = revisions.content_sha256(body)
+        stored_digest = str(entry.get("content_sha256") or "")
+        drift = bool(stored_digest and stored_digest != digest)
+        refs.append({"id": entry.get("id") or "",
+                     "revision_id": (entry.get("revision_id")
+                                     if stored_digest == digest else
+                                     revisions.revision_id("kbrev", digest)) or
+                     revisions.revision_id("kbrev", digest),
+                     "content_sha256": digest,
+                     "revision_drift": drift})
+    payload = {"scope": scope, "entries": refs}
+    digest = revisions.stable_digest(payload)
+    return {"revision_id": revisions.revision_id("knowledge", digest),
+            "content_sha256": digest, "scope": scope, "entries": refs}
+
+
 def _title_sim(a, b):
     """标题近似度：字符 bigram 的包含度（交集 / 较短者，中文友好零分词）。
     用包含度而非 Jaccard：「X」vs「X 指南」的较短者完全被包含 →1.0，
@@ -131,13 +154,25 @@ def upsert_entry(scope, title, body, tags=None, source="", source_file="",
         if hit is not None:
             it = hit
             it["seen"] = int(it.get("seen") or 1) + 1
+            old_body = str(it.get("body") or "")
+            old_rev = it.get("revision_id") or ""
+            new_rev = revisions.make_revision("kbrev", body, source=source)
             if status == "approved" or it.get("status") != "approved":
+                if old_body and old_body != body:
+                    it.setdefault("revisions", []).append(
+                        revisions.revision_record(
+                            "kbrev", old_body, source=it.get("source") or "",
+                            extra={"body": old_body, "revision_id": old_rev or
+                                   revisions.revision_id("kbrev", revisions.content_sha256(old_body))}))
+                    it["revisions"] = it["revisions"][-5:]
                 it["body"] = body
+                it.update({k: new_rev[k] for k in ("revision_id", "content_sha256")})
                 if status == "approved":
                     it["status"] = "approved"
             else:
                 it.setdefault("revisions", []).append(
-                    {"at": _now(), "body": body, "source": source})
+                    revisions.revision_record("kbrev", body, source=source,
+                                               extra={"body": body}))
                 it["revisions"] = it["revisions"][-5:]   # 最多留 5 条修订候选
             for tg in tags:
                 if tg not in (it.get("tags") or []):
@@ -154,6 +189,7 @@ def upsert_entry(scope, title, body, tags=None, source="", source_file="",
             it["updated_at"] = _now()
             _save(data)
             return it
+        rev = revisions.make_revision("kbrev", body, source=source)
         it = {"id": kid, "scope": scope, "title": title, "body": body,
               "tags": tags, "status": status, "enabled": True,
               "source": source, "source_file": source_file,
@@ -161,6 +197,7 @@ def upsert_entry(scope, title, body, tags=None, source="", source_file="",
               "confidence": confidence or "medium",
               "revisions": [], "hits": 0, "seen": 1,
               "created_at": _now(), "updated_at": _now(), "kind": "knowledge"}
+        it.update({k: rev[k] for k in ("revision_id", "content_sha256")})
         items.append(it)
         _save(data)
         return it
@@ -197,7 +234,17 @@ def entry_op(entry_id, op, fields=None):
             if str(f.get("title") or "").strip():
                 hit["title"] = str(f["title"]).strip()[:80]
             if str(f.get("body") or "").strip():
-                hit["body"] = str(f["body"]).strip()[:1500]
+                new_body = str(f["body"]).strip()[:1500]
+                old_body = str(hit.get("body") or "")
+                if old_body != new_body:
+                    hit.setdefault("revisions", []).append(
+                        revisions.revision_record(
+                            "kbrev", old_body, source=hit.get("source") or "",
+                            extra={"body": old_body}))
+                    hit["revisions"] = hit["revisions"][-5:]
+                    hit["body"] = new_body
+                    hit.update({k: revisions.make_revision("kbrev", new_body)[k]
+                                for k in ("revision_id", "content_sha256")})
             if "tags" in f:
                 hit["tags"] = [str(t).strip()[:20]
                                for t in (f.get("tags") or []) if str(t).strip()][:8]

package/app/core/manager.py

@@ -1227,6 +1227,13 @@ def _sync_qwen_settings(entry, model, prov):
     path = _guard_home(_config_path(entry))
     if not path:
         return "qwen 配置路径无效或越出用户主目录，已拒绝"
+    # 内闸防 anthropic 面混进 OPENAI_BASE_URL（2026-09-24 戍边骑奴案：史上
+    # 某版把 .../api/anthropic 写进去，qwen 拿 openai 协议打 anthropic 路由，
+    # 网关恒回 404 被误判「网关限流」，每轮 run 起点白烧 2-3 次重试）。
+    # auto 协议不拦——适配层探出的 openai 面由外层 launch_pick 负责把关。
+    if str(prov.get("protocol") or "").lower() == "anthropic":
+        return ("qwen 只认 OpenAI 兼容端点，拒绝把 anthropic 面 %s 写进 OPENAI_BASE_URL"
+                % (prov.get("base_url") or "?"))
     updates = {"OPENAI_API_KEY": prov.get("api_key") or "",
                "OPENAI_BASE_URL": prov.get("base_url") or ""}
     if model:

package/app/core/market_remote.py

@@ -24,6 +24,7 @@ import os
 import ipaddress
 import json
 import re
+import secrets
 import shutil
 import socket
 import subprocess
@@ -343,11 +344,13 @@ def _entries_from_cache(cache=None):
     return entries
 
 
-def view(offset=0, limit=_PAGE_LIMIT, source=None, q=None):
+def view(offset=0, limit=_PAGE_LIMIT, source=None, q=None, installed=None):
     """外部目录视图（服务端过滤 + 分页）。缓存全在本地，对全量条目过滤再切页
     零成本——搜索/来源筛选不再受「已加载页」限制，滚动翻页逛完全部目录。
+    installed=真值时只看已安装（「已安装 N」入口的过滤器）；installed_total
+    始终是**未过滤前**的全量已装数（徽章计数与过滤条件无关）。
     返回 {sources, entries(本页), total(过滤后全量), offset, has_more,
-    categories}。"""
+    categories, installed_total}。"""
     cache = _load_cache()
     entries = _entries_from_cache(cache)
     sources = []
@@ -360,6 +363,9 @@ def view(offset=0, limit=_PAGE_LIMIT, source=None, q=None):
     for e in entries:
         if e["category"] and e["category"] not in cats:
             cats.append(e["category"])
+    installed_total = sum(1 for e in entries if e["installed"])
+    if installed:
+        entries = [e for e in entries if e["installed"]]
     if source:
         entries = [e for e in entries if e["source_id"] == source]
     qq = str(q or "").strip().lower()
@@ -372,7 +378,7 @@ def view(offset=0, limit=_PAGE_LIMIT, source=None, q=None):
     page = entries[offset:offset + limit]
     return {"sources": sources, "entries": page, "total": len(entries),
             "offset": offset, "has_more": offset + limit < len(entries),
-            "categories": cats}
+            "categories": cats, "installed_total": installed_total}
 
 
 def _fetch_clawhub_catalog():
@@ -659,7 +665,9 @@ def _safe_extract(zf, dest):
 
 
 def _download_zip(entry, tmp):
-    """下载 zip（校验 sha256）→ 安全解包 → 返回插件根目录。"""
+    """下载 zip（校验 sha256）→ 安全解包 → 返回 (插件根目录, 完整性说明)。
+    完整性：清单带 sha256 且校验通过 = verified；清单没带 = unverified
+    （靠 https 传输 + 解包后的纯技能白名单兜底，如实告知不装懂）。"""
     data = _fetch(entry["install"]["url"], cap=_CAP_DOWNLOAD)
     want = (entry["install"].get("sha256") or "").lower()
     if want:
@@ -667,7 +675,7 @@ def _download_zip(entry, tmp):
         if got != want:
             raise ValueError("sha256 校验不符（期望 %s，实际 %s）" % (want[:12], got[:12]))
     dest = _safe_extract(zipfile.ZipFile(io.BytesIO(data)), tmp / "unzip")
-    return _plugin_root(dest)
+    return _plugin_root(dest), ("verified" if want else "unverified")
 
 
 def _gh_split(url):
@@ -870,7 +878,7 @@ def _download_clawhub(entry, tmp):
         _CLAWHUB_BASE, q(inst["slug"], safe=""), q(inst["reference"] or inst["slug"], safe=""))
     data = _fetch(url, cap=_CAP_DOWNLOAD)
     dest = _safe_extract(zipfile.ZipFile(io.BytesIO(data)), tmp / "clawhub")
-    return _plugin_root(dest)
+    return _plugin_root(dest), "unverified"
 
 
 def _plugin_root(base):
@@ -961,9 +969,20 @@ def build_files(entry, root):
     return out, None, stripped
 
 
-def install_remote(entry_id):
-    """安装外部目录插件：下载 → 纯技能检查 → 转换 → 复用 market 安装通道。
-    返回 (结果 dict, 错误)。"""
+def _fetch_root(entry, tmp):
+    """按来源下载并解包，返回 (插件根目录, 完整性说明)。
+    verified=zip 带 sha256 且校验通过；unverified=直链无哈希（https+白名单兜底）；
+    git-ref/git-head=git 类来源按 ref/HEAD 取树。"""
+    kind = entry["install"]["kind"]
+    if kind == "zip":
+        return _download_zip(entry, tmp)
+    if kind == "clawhub":
+        return _download_clawhub(entry, tmp)
+    return _download_git_any(entry, tmp), \
+        ("git-ref" if entry["install"].get("ref") else "git-head")
+
+
+def _resolve_entry(entry_id):
     entries = _entries_from_cache()
     entry = next((e for e in entries if e["id"] == entry_id), None)
     if not entry:
@@ -972,35 +991,114 @@ def install_remote(entry_id):
         return None, entry["block_reason"] or "该插件不适配 CodeBee"
     if entry["install"]["kind"] == "unsupported":
         return None, "来源类型不支持（仅支持 zip 直链、git 子目录与 ClawHub）"
+    return entry, None
+
+
+# 预览→确认安装两阶段之间的已检内容缓存：token 一次性、TTL 10 分钟、最多 8 份
+# （files 是纯文本 dict、总量有 _CAP_TOTAL_TEXT 上限，缓存占用有界）。
+_PREVIEW_TTL = 600
+_PREVIEW_MAX = 8
+_PREVIEW_CACHE = {}
+
+
+def _preview_purge():
+    now = time.time()
+    for k in [k for k, v in _PREVIEW_CACHE.items() if now - v["ts"] > _PREVIEW_TTL]:
+        _PREVIEW_CACHE.pop(k, None)
+    while len(_PREVIEW_CACHE) > _PREVIEW_MAX:
+        _PREVIEW_CACHE.pop(min(_PREVIEW_CACHE, key=lambda k: _PREVIEW_CACHE[k]["ts"]))
+
+
+def _skill_names_from_files(files, entry):
+    """从转换后的 files 键推技能名：market-<id>.md 是主技能（用条目名），
+    market-<id>__<名>.md 是多技能包里的其余技能（用目录名）。"""
+    names = []
+    for k in files:
+        if "/" in k or not k.endswith(".md") or not k.startswith("market-"):
+            continue
+        base = k[len("market-"):-3]
+        names.append("__" in base and base.split("__", 1)[1] or entry["title"])
+    return sorted(set(names))
+
+
+def preview_remote(entry_id):
+    """安装前预览（先看后装）：下载 → 剥离式检查 → 转换，但**不落盘安装**。
+    返回 (预览 dict, 错误)。dict 带 token，确认安装时把 token 传回
+    install_remote 即安装这份已检内容，不重复下载。"""
+    entry, err = _resolve_entry(entry_id)
+    if err:
+        return None, err
     tmp = Path(tempfile.mkdtemp(prefix="codebee-mkt-"))
     try:
-        kind = entry["install"]["kind"]
-        if kind == "zip":
-            root = _download_zip(entry, tmp)
-        elif kind == "clawhub":
-            root = _download_clawhub(entry, tmp)
-        else:
-            root = _download_git_any(entry, tmp)
+        root, integrity = _fetch_root(entry, tmp)
         files, blocked, stripped = build_files(entry, root)
         if blocked:
             return None, blocked
-        res, err = market.install_files(entry_id, entry["title"], files, extra={
-            "remote": {"source": entry["source_id"], "name": entry["name"],
-                       "version": entry["version"], "homepage": entry["homepage"]},
-        })
-        if err:
-            return None, err
-        res["skills"] = sum(1 for k in files if k.endswith(".md") and "/" not in k)
-        res["stripped"] = sorted(stripped)
-        return res, None
+        _preview_purge()
+        token = secrets.token_hex(12)
+        _PREVIEW_CACHE[token] = {"entry_id": entry_id, "files": files,
+                                 "stripped": stripped, "ts": time.time()}
+        file_list = sorted(files.items(), key=lambda kv: kv[0])
+        return {
+            "token": token, "id": entry_id, "title": entry["title"],
+            "source": entry["source_name"], "version": entry["version"],
+            "homepage": entry["homepage"], "integrity": integrity,
+            "skills": _skill_names_from_files(files, entry),
+            "files_total": len(files),
+            "total_chars": sum(len(v) for v in files.values()),
+            "file_list": [{"path": k, "chars": len(v)} for k, v in file_list[:60]],
+            "stripped": sorted(stripped)[:40], "stripped_total": len(stripped),
+            "expires_in": _PREVIEW_TTL,
+        }, None
     except ValueError as e:
         return None, str(e)
-    except Exception as e:   # 网络/解包等意外错误也要兜成用户可读的一句话
+    except Exception as e:
         return None, "下载或解析插件失败: %s" % e
     finally:
         shutil.rmtree(tmp, ignore_errors=True)
 
 
+def install_remote(entry_id, token=""):
+    """安装外部目录插件：下载 → 纯技能检查 → 转换 → 复用 market 安装通道。
+    token 非空且命中预览缓存时直接安装那份已检内容（不重复下载）；token
+    一次性（装成功即焚，防重放）。返回 (结果 dict, 错误)。"""
+    entry, err = _resolve_entry(entry_id)
+    if err:
+        return None, err
+    cached = None
+    if token:
+        _preview_purge()
+        c = _PREVIEW_CACHE.get(str(token))
+        if c and c["entry_id"] == entry_id:
+            cached = c
+    if cached:
+        files, stripped = cached["files"], cached["stripped"]
+    else:
+        tmp = Path(tempfile.mkdtemp(prefix="codebee-mkt-"))
+        try:
+            root, _integrity = _fetch_root(entry, tmp)
+            files, blocked, stripped = build_files(entry, root)
+            if blocked:
+                return None, blocked
+        except ValueError as e:
+            return None, str(e)
+        except Exception as e:   # 网络/解包等意外错误也要兜成用户可读的一句话
+            return None, "下载或解析插件失败: %s" % e
+        finally:
+            shutil.rmtree(tmp, ignore_errors=True)
+    res, err = market.install_files(entry_id, entry["title"], files, extra={
+        "remote": {"source": entry["source_id"], "name": entry["name"],
+                   "version": entry["version"], "homepage": entry["homepage"]},
+    })
+    if err:
+        return None, err
+    if cached:
+        _PREVIEW_CACHE.pop(str(token), None)
+    res["skills"] = sum(1 for k in files if k.endswith(".md") and "/" not in k)
+    res["stripped"] = sorted(stripped)
+    return res, None
+
+
 def remove_remote(entry_id):
     """卸载外部插件：记账与标记齐全时走 market 既有卸载；否则报错。"""
     return market.remove(entry_id)

package/app/core/modelhub.py

@@ -29,6 +29,7 @@ anthropic/openai 可注入到 CLI；google 仅登记（当前无对应 CLI 可
 from __future__ import annotations
 
 import copy
+import hashlib
 import ipaddress
 import json
 import os
@@ -759,6 +760,34 @@ def providers():
         return _load().get("providers", [])
 
 
+def connection_identity(provider_id, key_id="") -> dict:
+    """Resolve provider/credential identity without exposing credential values.
+
+    A provider definition (protocol + normalized host), provider instance (the
+    configured provider id), account/key identity and credential id are kept as
+    separate fields for run snapshots.  The existing provider store remains the
+    source of truth; this helper only supplies stable, redacted references.
+    """
+    provider_id = str(provider_id or "").strip()
+    key_id = str(key_id or "").strip()
+    prov = next((p for p in providers() if str(p.get("id") or "") == provider_id), {})
+    from . import upstream
+    host = upstream.normalize_upstream(prov.get("base_url") or "")
+    protocol = str(prov.get("protocol") or "")[:24]
+    definition_key = "%s|%s" % (protocol, host)
+    definition_id = "conn-def-" + hashlib.sha256(definition_key.encode("utf-8")).hexdigest()[:16]
+    account_id = key_id or "provider-default"
+    return {
+        "connection_id": provider_id,
+        "definition_id": definition_id,
+        "instance_id": provider_id,
+        "account_id": account_id,
+        "credential_id": account_id,
+        "protocol": protocol,
+        "upstream": host,
+    }
+
+
 def bindings():
     with _LOCK:
         return _load().get("bindings", {})