ework-web 0.6.0 → 0.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/coordination.ts

@@ -7,6 +7,16 @@ export interface DaemonInfo {
   endpoint: string;
 }
 
+export interface DaemonDetail {
+  id: number;
+  displayName: string;
+  endpoint: string;
+  capacity: number;
+  lastHeartbeat: string | null;
+  status: string;
+  registeredAt: string | null;
+}
+
 const HEARTBEAT_STALE_MS = 120_000;
 
 export async function getActiveDaemons(): Promise<DaemonInfo[]> {
@@ -30,3 +40,31 @@ export async function getActiveDaemons(): Promise<DaemonInfo[]> {
     return [];
   }
 }
+
+export async function listAllDaemons(): Promise<DaemonDetail[]> {
+  try {
+    const rows = await getDB().all<{
+      id: number;
+      display_name: string | null;
+      internal_endpoint: string;
+      capacity: number | null;
+      last_heartbeat: string | null;
+      status: string | null;
+      registered_at: string | null;
+    }>(
+      `SELECT id, display_name, internal_endpoint, capacity, last_heartbeat, status, registered_at FROM {{d_daemons}} ORDER BY id`,
+    );
+    return rows.map((r) => ({
+      id: r.id,
+      displayName: r.display_name ?? `daemon-${r.id}`,
+      endpoint: r.internal_endpoint,
+      capacity: r.capacity ?? 0,
+      lastHeartbeat: r.last_heartbeat,
+      status: r.status ?? "unknown",
+      registeredAt: r.registered_at,
+    }));
+  } catch (e) {
+    log.info(`coordination: list daemons failed (${e instanceof Error ? e.message : String(e)})`);
+    return [];
+  }
+}

package/src/index.ts

@@ -5,8 +5,8 @@ import { spawn } from "child_process";
 import { homedir } from "os";
 import { loadConfig, DB_OVERRIDABLE, parseOverride, resolveTtsBackend } from "./config";
 import type { Config } from "./config";
-import { setConfig, initDB } from "./db";
-import { getActiveDaemons } from "./coordination";
+import { setConfig, initDB, getDB } from "./db";
+import { getActiveDaemons, listAllDaemons } from "./coordination";
 import { testMysqlConnection, migrateSqliteToMysql, writeMysqlEnv, migrateMysqlToSqlite, writeSqliteEnv, migrateDaemonSqliteToMysql } from "./db-admin";
 import type { MysqlTargetOpts } from "./db-admin";
 import { checkAuth, makeAuthCookieHeader, clearAuthCookieHeader, loginHTML, sanitizeNext, ensureBootstrapAdmin, ensureBootstrapSystem, isReservedSystemLogin } from "./auth";
@@ -88,6 +88,7 @@ import {
 import { classifyActor, type CommentView } from "./render/components";
 import { buildWebhooksPage } from "./views/webhooks";
 import { buildWebhookDeliveriesPage } from "./views/webhookDeliveries";
+import { browseRemoteFile, proxyFileSince, RemoteFileError } from "./remote-file";
 import { buildProjectMembersPage } from "./views/projectMembers";
 import { buildProjectUpstreamsPage, trySetUpstreamUrls } from "./views/projectUpstreams";
 import { buildProjectModelPage } from "./views/projectModel";
@@ -410,6 +411,7 @@ function chunkTextTTS(text: string, max = 120): string[] {
 async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean; user: UserRow | null }): Promise<Response> {
   if (url.pathname === "/static/app.js") return staticAsset("app.js", "text/javascript; charset=utf-8", req);
   if (url.pathname === "/static/db-wizard.js") return staticAsset("db-wizard.js", "text/javascript; charset=utf-8", req);
+  if (url.pathname === "/static/daemon-mgr.js") return staticAsset("daemon-mgr.js", "text/javascript; charset=utf-8", req);
   if (url.pathname === "/static/session.js") return staticAsset("session.js", "text/javascript; charset=utf-8", req);
   if (url.pathname === "/static/file.js") return staticAsset("file.js", "text/javascript; charset=utf-8", req);
   if (url.pathname === "/static/tts.js") return staticAsset("tts.js", "text/javascript; charset=utf-8", req);
@@ -599,6 +601,18 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
 
   if (url.pathname === "/file") {
     const rawPath = url.searchParams.get("path") ?? "";
+    const daemonParam = url.searchParams.get("daemon");
+    if (daemonParam && !isLocalhost(daemonParam)) {
+      try {
+        const mode = url.searchParams.get("mode") ?? "tail";
+        const order = url.searchParams.get("order") ?? "desc";
+        const { html: body } = await browseRemoteFile(daemonParam, rawPath, mode, order, ctx.user?.login);
+        return html(body);
+      } catch (e) {
+        const status = e instanceof RemoteFileError ? e.status : 500;
+        return html(errorPage(status === 404 ? "文件不存在" : "远程访问失败", errMsg(e)), status);
+      }
+    }
     const mode = url.searchParams.get("mode") ?? undefined;
     const order = url.searchParams.get("order") ?? undefined;
     try {
@@ -628,6 +642,15 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     const rawPath = url.searchParams.get("path") ?? "";
     const after = Number(url.searchParams.get("after") ?? "0");
     if (!Number.isFinite(after) || after < 0) return json({ error: "bad after" }, 400);
+    const daemonParam = url.searchParams.get("daemon");
+    if (daemonParam && !isLocalhost(daemonParam)) {
+      try {
+        return json(await proxyFileSince(daemonParam, rawPath, after));
+      } catch (e) {
+        const status = e instanceof RemoteFileError ? e.status : 500;
+        return json({ error: errMsg(e) }, status);
+      }
+    }
     try {
       const delta = readFileSince(cfg, rawPath, after);
       return json(delta);
@@ -809,6 +832,73 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     return json({ ...result, targetPath, restarting: true });
   }
 
+  if (req.method === "GET" && url.pathname === "/api/daemons") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    return json(await listAllDaemons());
+  }
+
+  if (req.method === "POST" && url.pathname === "/api/daemons") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    if (!rateLimit(`daemons-add:${ip}`, 5, 5 / 3600)) return json({ error: "rate limited" }, 429);
+    const payload = await req.json().catch(() => ({} as unknown));
+    const port = (payload && typeof payload === "object" && "port" in payload
+      ? (payload as { port?: unknown }).port
+      : undefined);
+    const args = ["add-daemon"];
+    if (typeof port === "number" && Number.isFinite(port) && port > 0 && port < 65536) {
+      args.push(String(Math.trunc(port)));
+    } else if (port !== undefined && port !== null) {
+      return json({ ok: false, error: "invalid port" }, 400);
+    }
+    let child: import("child_process").ChildProcessByStdio<null, import("stream").Readable, import("stream").Readable>;
+    try {
+      child = spawn("ework-aio", args, { stdio: ["ignore", "pipe", "pipe"] });
+    } catch {
+      return json({ ok: false, error: "ework-aio not found" });
+    }
+    const result = await new Promise<{ ok: boolean; output?: string; error?: string }>((resolve) => {
+      const ac = new AbortController();
+      const timer = setTimeout(() => {
+        ac.abort();
+        try { child.kill("SIGKILL"); } catch { /* already dead */ }
+      }, 30_000);
+      let stdout = "";
+      let stderr = "";
+      let settled = false;
+      const finish = (r: { ok: boolean; output?: string; error?: string }) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        resolve(r);
+      };
+      child.stdout.on("data", (b: Buffer) => { stdout += b.toString("utf-8"); });
+      child.stderr.on("data", (b: Buffer) => { stderr += b.toString("utf-8"); });
+      child.once("error", () => finish({ ok: false, error: "ework-aio not found" }));
+      child.once("exit", (code) => {
+        if (code === 0) finish({ ok: true, output: stdout });
+        else finish({ ok: false, error: stderr.trim() || `ework-aio add-daemon exited with code ${code}` });
+      });
+      ac.signal.addEventListener("abort", () => {
+        finish({ ok: false, error: "timeout: ework-aio add-daemon did not exit within 30s" });
+      });
+    });
+    return json(result, result.ok ? 200 : 422);
+  }
+
+  const daemonIdRe = /^\/api\/daemons\/(\d+)$/;
+  if (req.method === "DELETE" && daemonIdRe.test(url.pathname)) {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    const match = url.pathname.match(daemonIdRe);
+    const id = match ? Number(match[1]) : NaN;
+    if (!Number.isFinite(id)) return json({ error: "invalid id" }, 400);
+    try {
+      await getDB().run(`UPDATE {{d_daemons}} SET status = 'drained' WHERE id = ?`, [id]);
+    } catch (e) {
+      return json({ ok: false, error: errMsg(e) });
+    }
+    return json({ ok: true });
+  }
+
   if (url.pathname === "/settings") {
     if (req.method === "GET") {
       return html(buildSettingsPage(cfg, url.searchParams.get("saved") === "1", ctx.user!, await listCachedModels()).html);

package/src/remote-file.ts

@@ -0,0 +1,206 @@
+import { THEME_CSS, escapeHtml, tabNavHTML } from "./render/layout";
+
+export class RemoteFileError extends Error {
+  status: number;
+  constructor(message: string, status: number) {
+    super(message);
+    this.name = "RemoteFileError";
+    this.status = status;
+  }
+}
+
+interface DirEntry {
+  name: string;
+  isDir: boolean;
+  size: number;
+  mtime: number;
+}
+
+interface DirListing {
+  path: string;
+  entries: DirEntry[];
+}
+
+interface FileContent {
+  path: string;
+  size: number;
+  rows: { n: number; t: string }[];
+  mode: string;
+  byteCapped: boolean;
+  note: string;
+}
+
+function fmtSize(n: number): string {
+  if (n < 1024) return `${n}B`;
+  if (n < 1024 * 1024) return `${(n / 1024).toFixed(1)}KB`;
+  return `${(n / (1024 * 1024)).toFixed(1)}MB`;
+}
+
+function fmtMtime(ms: number): string {
+  if (!ms) return "";
+  const diff = Date.now() - ms;
+  if (diff < 60000) return "刚刚";
+  if (diff < 3600000) return `${Math.floor(diff / 60000)}分前`;
+  if (diff < 86400000) return `${Math.floor(diff / 3600000)}时前`;
+  return new Date(ms).toISOString().slice(5, 16);
+}
+
+async function fetchDaemon(
+  endpoint: string,
+  apiPath: string,
+  params: Record<string, string>
+): Promise<Response> {
+  const url = new URL(`${endpoint}${apiPath}`);
+  for (const [k, v] of Object.entries(params)) url.searchParams.set(k, v);
+  const resp = await fetch(url.toString(), { signal: AbortSignal.timeout(10_000) });
+  return resp;
+}
+
+export async function browseRemoteFile(
+  endpoint: string,
+  rawPath: string,
+  mode: string,
+  order: string,
+  viewerLogin?: string
+): Promise<{ html: string }> {
+  const daemonLabel = escapeHtml(endpoint);
+
+  const listResp = await fetchDaemon(endpoint, "/api/files/list", { path: rawPath });
+  if (listResp.ok) {
+    const data = (await listResp.json()) as DirListing;
+    return { html: renderDirListing(data, endpoint, daemonLabel, viewerLogin) };
+  }
+  if (listResp.status !== 400) {
+    const err = await listResp.json().catch(() => ({ error: "unknown" })) as { error?: string };
+    throw new RemoteFileError(err.error ?? `daemon returned ${listResp.status}`, listResp.status);
+  }
+
+  const readResp = await fetchDaemon(endpoint, "/api/files/read", {
+    path: rawPath,
+    mode: mode === "head" ? "head" : "tail",
+    order: order === "asc" ? "asc" : "desc",
+  });
+  if (!readResp.ok) {
+    const err = await readResp.json().catch(() => ({ error: "unknown" })) as { error?: string };
+    throw new RemoteFileError(err.error ?? `daemon returned ${readResp.status}`, readResp.status);
+  }
+  const data = (await readResp.json()) as FileContent;
+  return { html: renderFileContent(data, endpoint, daemonLabel, viewerLogin) };
+}
+
+function renderDirListing(
+  data: DirListing,
+  endpoint: string,
+  daemonLabel: string,
+  viewerLogin?: string
+): string {
+  const enc = encodeURIComponent;
+  const daemonParam = `&daemon=${enc(endpoint)}`;
+  const parentPath = data.path.split("/").slice(0, -1).join("/") || "/";
+  const rows = data.entries.map((e) => {
+    const childPath = `${data.path.replace(/\/$/, "")}/${e.name}`;
+    const icon = e.isDir ? "📁" : "📄";
+    const size = e.isDir ? "—" : fmtSize(e.size);
+    return `<tr>
+      <td><a href="/file?path=${enc(childPath)}${daemonParam}">${icon} ${escapeHtml(e.name)}</a></td>
+      <td class="ms">${size}</td>
+      <td class="ts">${fmtMtime(e.mtime)}</td>
+    </tr>`;
+  }).join("") || `<tr><td colspan="3" class="empty">空目录</td></tr>`;
+
+  const user = viewerLogin ? { login: viewerLogin, is_admin: 0 } : undefined;
+  return `<!doctype html>
+<html lang="zh"><head><meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<link rel="icon" type="image/svg+xml" href="/favicon.svg">
+<title>ework-web · ${escapeHtml(data.path)}</title>
+<style>${THEME_CSS}
+.nav{display:flex;align-items:center;gap:.5rem;padding:.55rem 1rem;background:var(--header-bg);color:var(--header-text);font-size:13px}
+.nav a{color:var(--header-text);opacity:.95}
+.wrap{max-width:900px;margin:0 auto;padding:1rem}
+h1{font-size:15px;margin:0 0 .3rem;font-family:ui-monospace,monospace;word-break:break-all}
+.remote-badge{display:inline-block;background:#1f6feb33;color:#58a6ff;padding:2px 8px;border-radius:10px;font-size:11px;font-weight:600;margin-left:.5rem}
+.dtable{width:100%;border-collapse:collapse;font-size:13px;margin-top:.6rem}
+.dtable th,.dtable td{border:1px solid var(--border);padding:.3rem .5rem;text-align:left}
+.dtable th{background:var(--bg);color:var(--text-muted);font-weight:600}
+.dtable a{color:var(--accent);text-decoration:none}
+.dtable a:hover{text-decoration:underline}
+.dtable .ms,.dtable .ts{color:var(--text-muted);white-space:nowrap;font-size:12px}
+.empty{color:var(--text-muted);text-align:center;padding:.6rem}
+.parent-link{font-size:13px;margin-bottom:.4rem}
+.parent-link a{color:var(--text-muted)}
+.tabs{display:flex;gap:.3rem;padding:.5rem 1rem;border-bottom:1px solid var(--border);font-size:13px}
+.tab{padding:.3rem .7rem;border-radius:6px 6px 0 0;text-decoration:none;color:var(--text-muted)}
+.tab.active{background:var(--accent);color:#fff}
+</style></head><body>
+<header class="nav"><a href="/" style="color:var(--header-text)">🏠 ework-web</a></header>
+${tabNavHTML("sessions", user)}
+<main class="wrap">
+<div class="parent-link">📁 <a href="/file?path=${enc(parentPath)}${daemonParam}">..</a></div>
+<h1>${escapeHtml(data.path)}<span class="remote-badge">远程 ${daemonLabel}</span></h1>
+<table class="dtable"><thead><tr>
+  <th>名称</th><th>大小</th><th>修改时间</th>
+</tr></thead><tbody>${rows}</tbody></table>
+</main></body></html>`;
+}
+
+function renderFileContent(
+  data: FileContent,
+  endpoint: string,
+  daemonLabel: string,
+  viewerLogin?: string
+): string {
+  const enc = encodeURIComponent;
+  const daemonParam = `&daemon=${enc(endpoint)}`;
+  const user = viewerLogin ? { login: viewerLogin, is_admin: 0 } : undefined;
+  const lines = data.rows.map((r) =>
+    `<div class="l"><span class="ln">${r.n}</span><span class="lt">${escapeHtml(r.t)}</span></div>`
+  ).join("");
+
+  return `<!doctype html>
+<html lang="zh"><head><meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<link rel="icon" type="image/svg+xml" href="/favicon.svg">
+<title>ework-web · ${escapeHtml(data.path)}</title>
+<style>${THEME_CSS}
+.nav{display:flex;align-items:center;gap:.5rem;padding:.55rem 1rem;background:var(--header-bg);color:var(--header-text);font-size:13px}
+.nav a{color:var(--header-text);opacity:.95}
+.wrap{max-width:1000px;margin:0 auto;padding:1rem}
+h1{font-size:14px;margin:0 0 .3rem;font-family:ui-monospace,monospace;word-break:break-all}
+.remote-badge{display:inline-block;background:#1f6feb33;color:#58a6ff;padding:2px 8px;border-radius:10px;font-size:11px;font-weight:600;margin-left:.5rem}
+.note{color:var(--text-muted);font-size:12px;margin:0 0 .5rem}
+.parent-link{font-size:13px;margin-bottom:.4rem}
+.parent-link a{color:var(--text-muted)}
+.fview{background:var(--bg-elev);border:1px solid var(--border);border-radius:6px;overflow:auto;max-height:80vh;font-size:12.5px;font-family:ui-monospace,monospace}
+.l{display:flex}
+.ln{color:var(--text-muted);min-width:3.5rem;text-align:right;padding:0 .5rem;user-select:none;border-right:1px solid var(--border)}
+.lt{padding:0 .5rem;white-space:pre-wrap;word-break:break-all;flex:1}
+.tabs{display:flex;gap:.3rem;padding:.5rem 1rem;border-bottom:1px solid var(--border);font-size:13px}
+.tab{padding:.3rem .7rem;border-radius:6px 6px 0 0;text-decoration:none;color:var(--text-muted)}
+.tab.active{background:var(--accent);color:#fff}
+</style></head><body>
+<header class="nav"><a href="/" style="color:var(--header-text)">🏠 ework-web</a></header>
+${tabNavHTML("sessions", user)}
+<main class="wrap">
+<div class="parent-link">📁 <a href="/file?path=${enc(data.path.split("/").slice(0, -1).join("/") || "/")}${daemonParam}">..</a></div>
+<h1>${escapeHtml(data.path)}<span class="remote-badge">远程 ${daemonLabel}</span></h1>
+${data.note ? `<p class="note">${escapeHtml(data.note)}</p>` : ""}
+<div class="fview">${lines}</div>
+</main></body></html>`;
+}
+
+export async function proxyFileSince(
+  endpoint: string,
+  rawPath: string,
+  after: number
+): Promise<{ rows: { n: number; t: string }[]; size: number; rotated: boolean; capped: boolean }> {
+  const resp = await fetchDaemon(endpoint, "/api/files/since", {
+    path: rawPath,
+    after: String(after),
+  });
+  if (!resp.ok) {
+    const err = await resp.json().catch(() => ({ error: "unknown" })) as { error?: string };
+    throw new RemoteFileError(err.error ?? `daemon returned ${resp.status}`, resp.status);
+  }
+  return await resp.json();
+}

package/src/static/daemon-mgr.js

@@ -0,0 +1,145 @@
+// Daemon cluster manager (settings page). External file because CSP
+// script-src 'self' blocks inline scripts — see index.ts SEC_HEADERS.
+(function () {
+  "use strict";
+  var listEl = document.getElementById('daemon-list');
+  if (!listEl) return;
+  var resultEl = document.getElementById('daemon-result');
+  var addBtn = document.getElementById('daemon-add');
+  var portInput = document.getElementById('daemon-port');
+  var refreshTimer = null;
+  var inFlight = false;
+
+  function esc(s) {
+    return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
+      return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
+    });
+  }
+
+  function fmtTime(s) {
+    if (!s) return '—';
+    var t = Date.parse(String(s).includes('T') ? s : String(s).replace(' ', 'T') + 'Z');
+    if (Number.isNaN(t)) return esc(s);
+    var d = new Date(t);
+    var pad = function (n) { return n < 10 ? '0' + n : '' + n; };
+    return esc(d.getFullYear() + '-' + pad(d.getMonth() + 1) + '-' + pad(d.getDate()) +
+      ' ' + pad(d.getHours()) + ':' + pad(d.getMinutes()) + ':' + pad(d.getSeconds()));
+  }
+
+  function statusPill(status) {
+    var raw = String(status || 'unknown').toLowerCase();
+    var cls = raw === 'active' ? 'active' : raw === 'drained' ? 'drained' : (raw === 'dead' ? 'dead' : 'unknown');
+    return '<span class="pill ' + cls + '">' + esc(raw) + '</span>';
+  }
+
+  function render(daemons) {
+    if (!Array.isArray(daemons) || daemons.length === 0) {
+      listEl.innerHTML = '<div class="daemon-empty">暂无 daemon 注册。可在下方启动新实例。</div>';
+      return;
+    }
+    var rows = daemons.map(function (d) {
+      var stopBtn = String(d.status || '').toLowerCase() === 'active'
+        ? '<button type="button" class="stop" data-id="' + d.id + '">停止</button>'
+        : '';
+      return '<tr>' +
+        '<td class="cap">' + d.id + '</td>' +
+        '<td class="endpoint">' + esc(d.endpoint || '') + '</td>' +
+        '<td class="cap">' + esc(d.capacity != null ? d.capacity : '') + '</td>' +
+        '<td class="heartbeat">' + fmtTime(d.lastHeartbeat) + '</td>' +
+        '<td class="registered">' + fmtTime(d.registeredAt) + '</td>' +
+        '<td>' + statusPill(d.status) + '</td>' +
+        '<td>' + stopBtn + '</td>' +
+        '</tr>';
+    }).join('');
+    listEl.innerHTML =
+      '<table><thead><tr>' +
+      '<th>ID</th><th>Endpoint</th><th>容量</th><th>心跳</th><th>注册于</th><th>状态</th><th></th>' +
+      '</tr></thead><tbody>' + rows + '</tbody></table>';
+    listEl.querySelectorAll('button.stop').forEach(function (b) {
+      b.addEventListener('click', function () { stopDaemon(Number(b.getAttribute('data-id'))); });
+    });
+  }
+
+  function setResult(text, kind) {
+    if (!resultEl) return;
+    resultEl.className = 'db-result db-' + (kind === 'ok' ? 'ok' : kind === 'err' ? 'err' : 'loading');
+    resultEl.textContent = text;
+  }
+
+  async function loadDaemons() {
+    if (inFlight) return;
+    inFlight = true;
+    try {
+      var res = await fetch('/api/daemons', { headers: { 'Accept': 'application/json' } });
+      if (!res.ok) {
+        var errBody = await res.json().catch(function () { return { error: 'HTTP ' + res.status }; });
+        listEl.innerHTML = '<div class="daemon-empty">加载失败：' + esc(errBody.error || res.status) + '</div>';
+        return;
+      }
+      render(await res.json());
+    } catch (e) {
+      listEl.innerHTML = '<div class="daemon-empty">加载失败：' + esc(e.message || String(e)) + '</div>';
+    } finally {
+      inFlight = false;
+    }
+  }
+
+  async function addDaemon() {
+    if (addBtn) addBtn.disabled = true;
+    setResult('正在启动 daemon…', 'loading');
+    var body = {};
+    var portVal = portInput && portInput.value ? Number(portInput.value) : NaN;
+    if (portInput && portInput.value.trim() !== '' && Number.isFinite(portVal)) {
+      body.port = portVal;
+    }
+    try {
+      var res = await fetch('/api/daemons', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body)
+      });
+      var data = await res.json();
+      if (data.ok) {
+        setResult('✓ daemon 启动成功' + (data.output ? ':\n' + data.output : ''), 'ok');
+        if (portInput) portInput.value = '';
+        await loadDaemons();
+      } else {
+        setResult('✗ ' + (data.error || '未知错误'), 'err');
+      }
+    } catch (e) {
+      setResult('✗ ' + (e.message || String(e)), 'err');
+    } finally {
+      if (addBtn) addBtn.disabled = false;
+    }
+  }
+
+  async function stopDaemon(id) {
+    if (!confirm('确认停止 daemon #' + id + '？\n只会标记为 drained（不再接新任务），需手动 kill 进程。')) return;
+    setResult('正在标记 daemon #' + id + ' 为 drained…', 'loading');
+    try {
+      var res = await fetch('/api/daemons/' + id, { method: 'DELETE' });
+      var data = await res.json();
+      if (data.ok) {
+        setResult('✓ daemon #' + id + ' 已标记为 drained', 'ok');
+        await loadDaemons();
+      } else {
+        setResult('✗ ' + (data.error || '未知错误'), 'err');
+      }
+    } catch (e) {
+      setResult('✗ ' + (e.message || String(e)), 'err');
+    }
+  }
+
+  if (addBtn) addBtn.addEventListener('click', addDaemon);
+  document.addEventListener('visibilitychange', function () {
+    if (document.hidden) {
+      if (refreshTimer) { clearInterval(refreshTimer); refreshTimer = null; }
+    } else if (!refreshTimer) {
+      loadDaemons();
+      refreshTimer = setInterval(loadDaemons, 10000);
+    }
+  });
+
+  loadDaemons();
+  refreshTimer = setInterval(loadDaemons, 10000);
+})();

package/src/views/settings.ts

@@ -67,6 +67,21 @@ ${isMysql ? `<hr style="border:0;border-top:1px solid var(--border);margin:1rem
 </section>`;
 }
 
+function buildDaemonSection(viewer: UserRow): string {
+  if (viewer.is_admin !== 1) return "";
+  return `<section class="sg daemon-section">
+<h2>Daemon 集群</h2>
+<p class="db-badge">运行中的 daemon 实例。新 daemon 通过 <code>ework-aio add-daemon</code> 启动；停止只标记为 drained，需手动结束进程。</p>
+<div id="daemon-list" class="daemon-list">加载中…</div>
+<div class="db-controls">
+<label class="sf" style="margin:0"><span>端口（可选）</span><input type="number" id="daemon-port" min="1" max="65535" placeholder="自动分配" autocomplete="off"></label>
+<button type="button" id="daemon-add">添加 Daemon</button>
+</div>
+<div id="daemon-result" class="db-result"></div>
+<script src="/static/daemon-mgr.js"></script>
+</section>`;
+}
+
 export function buildSettingsPage(cfg: Config, saved: boolean, viewer: UserRow, models: CachedModel[]): { html: string } {
   const groups = SETTINGS_GROUPS.map(
     (g) =>
@@ -109,6 +124,20 @@ button.secondary{background:transparent;color:var(--text-muted);border:1px solid
 .db-result.db-loading{background:var(--bg);color:var(--text-muted)}
 .db-result.db-ok{background:rgba(40,167,69,.15);color:#5eb88a}
 .db-result.db-err{background:rgba(220,53,69,.15);color:#e87c7c}
+.daemon-list{margin-bottom:.7rem}
+.daemon-list table{width:100%;border-collapse:collapse;font-size:12px}
+.daemon-list th,.daemon-list td{padding:.35rem .4rem;border-bottom:1px solid var(--border);text-align:left;vertical-align:top}
+.daemon-list th{color:var(--text-muted);font-weight:normal;font-size:11px;text-transform:uppercase;letter-spacing:.03em}
+.daemon-list td.endpoint{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px;word-break:break-all}
+.daemon-list td.cap{text-align:right;font-variant-numeric:tabular-nums}
+.daemon-list td.heartbeat,.daemon-list td.registered{color:var(--text-muted);font-size:11px;white-space:nowrap}
+.daemon-list .pill{display:inline-block;padding:.12rem .5rem;border-radius:99px;font-size:11px;line-height:1.4}
+.daemon-list .pill.active{background:rgba(40,167,69,.18);color:#5eb88a}
+.daemon-list .pill.drained{background:rgba(255,193,7,.18);color:#d4a942}
+.daemon-list .pill.dead,.daemon-list .pill.unknown{background:rgba(220,53,69,.18);color:#e87c7c}
+.daemon-list button.stop{padding:.25rem .6rem;font-size:11px;background:transparent;color:#e87c7c;border:1px solid rgba(220,53,69,.4)}
+.daemon-list button.stop:hover{background:rgba(220,53,69,.12)}
+.daemon-empty{color:var(--text-muted);font-size:13px;padding:.5rem 0}
 </style></head><body>
 <header class="nav"><a href="/" style="color:var(--header-text)">🏠 ework-web</a><span style="opacity:.8"> · 设置</span></header>
 <main class="wrap">
@@ -121,6 +150,7 @@ ${banner}
 ${modelRefreshForm}
 ${ttsLink}
 ${buildDbSection(viewer)}
+${buildDaemonSection(viewer)}
 </main></body></html>`;
   return { html };
 }