@downcity/agent 1.1.1

package/bin/daemon/ProjectSetup.js

@@ -0,0 +1,101 @@
+/**
+ * ProjectSetup：runtime 启动前项目结构准备模块。
+ *
+ * 关键点（中文）
+ * - 统一校验初始化必要文件（PROFILE.md / downcity.json）。
+ * - 统一确保 `.downcity/*` 目录结构存在，避免调用方重复拼装目录逻辑。
+ */
+import fs from "fs-extra";
+import path from "node:path";
+import { loadDowncityConfig } from "../config/Config.js";
+import { ConsoleStore } from "../shared/utils/store/index.js";
+import { readProjectPrimaryModelId, } from "../agent/project/ProjectExecutionBinding.js";
+import { getCacheDirPath, getLogsDirPath, getProfileMdPath, getDowncityConfigDirPath, getDowncityDataDirPath, getDowncityDebugDirPath, getDowncityDirPath, getDowncityJsonPath, getDowncityProfileDirPath, getDowncityPublicDirPath, getDowncitySessionRootDirPath, getDowncityTasksDirPath, } from "../config/Paths.js";
+/**
+ * 校验项目初始化关键文件。
+ */
+function ensureContextFiles(projectRoot) {
+    // Check if initialized（启动入口一次性确认工程根目录与关键文件）
+    if (!fs.existsSync(getProfileMdPath(projectRoot))) {
+        console.error('❌ Project not initialized. Please run "city agent create" first');
+        process.exit(1);
+    }
+    if (!fs.existsSync(getDowncityJsonPath(projectRoot))) {
+        console.error('❌ downcity.json does not exist. Please run "city agent create" first');
+        process.exit(1);
+    }
+}
+/**
+ * 确保 `.downcity` 运行目录结构完整。
+ */
+function ensureShipDirectories(projectRoot) {
+    // 关键点（中文）：尽量只在启动时确保目录结构存在，避免在 Agent/Tool 执行过程中反复 ensure。
+    fs.ensureDirSync(getDowncityDirPath(projectRoot));
+    fs.ensureDirSync(getDowncityTasksDirPath(projectRoot));
+    fs.ensureDirSync(getLogsDirPath(projectRoot));
+    fs.ensureDirSync(getCacheDirPath(projectRoot));
+    fs.ensureDirSync(getDowncityProfileDirPath(projectRoot));
+    fs.ensureDirSync(getDowncityDataDirPath(projectRoot));
+    fs.ensureDirSync(getDowncitySessionRootDirPath(projectRoot));
+    fs.ensureDirSync(getDowncityPublicDirPath(projectRoot));
+    fs.ensureDirSync(getDowncityConfigDirPath(projectRoot));
+    fs.ensureDirSync(path.join(getDowncityDirPath(projectRoot), "schema"));
+    fs.ensureDirSync(getDowncityDebugDirPath(projectRoot));
+}
+/**
+ * runtime 启动前准备项目结构。
+ */
+export function ensureRuntimeProjectReady(projectRoot) {
+    ensureContextFiles(projectRoot);
+    ensureShipDirectories(projectRoot);
+}
+/**
+ * 校验项目执行绑定是否可用于启动。
+ *
+ * 关键点（中文）
+ * - `downcity.json.execution` 必须存在且合法。
+ * - 若走 API 模式，则 `execution.modelId` 必须在 console 模型池中可解析。
+ * - 若走 local 模式，则 `lmp` plugin 必须启用且本地模型文件必须存在。
+ * - 若模型被 pause，也要在启动前直接拒绝，避免进程拉起后秒退。
+ */
+export function ensureRuntimeExecutionBindingReady(projectRoot) {
+    let primaryModelId = "";
+    try {
+        const config = loadDowncityConfig(projectRoot);
+        primaryModelId = readProjectPrimaryModelId(config);
+    }
+    catch (error) {
+        console.error("❌ Invalid downcity.json execution binding");
+        console.error(`   project: ${projectRoot}`);
+        console.error(`   error: ${error instanceof Error ? error.message : String(error)}`);
+        process.exit(1);
+    }
+    if (!primaryModelId) {
+        console.error("❌ Invalid downcity.json execution binding");
+        console.error(`   project: ${projectRoot}`);
+        console.error('   error: "execution" must be { "type": "api", "modelId": "..." }');
+        process.exit(1);
+    }
+    const store = new ConsoleStore();
+    try {
+        const model = store.getModel(primaryModelId);
+        if (!model) {
+            console.error("❌ Model not found in console model pool");
+            console.error(`   project: ${projectRoot}`);
+            console.error(`   execution.modelId: ${primaryModelId}`);
+            console.error("   fix: run `city model create` or `city model list`");
+            process.exit(1);
+        }
+        if (model.isPaused === true) {
+            console.error("❌ Model is paused");
+            console.error(`   project: ${projectRoot}`);
+            console.error(`   execution.modelId: ${primaryModelId}`);
+            console.error(`   fix: run \`city model pause ${primaryModelId} --enabled false\``);
+            process.exit(1);
+        }
+    }
+    finally {
+        store.close();
+    }
+}
+//# sourceMappingURL=ProjectSetup.js.map

package/bin/daemon/ProjectSetup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectSetup.js","sourceRoot":"","sources":["../../src/daemon/ProjectSetup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAEL,yBAAyB,GAC1B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAE3B;;GAEG;AACH,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,4CAA4C;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,KAAK,CACX,iEAAiE,CAClE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,KAAK,CACX,sEAAsE,CACvE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,WAAmB;IAChD,yDAAyD;IACzD,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/C,EAAE,CAAC,aAAa,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7D,EAAE,CAAC,aAAa,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,EAAE,CAAC,aAAa,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,WAAmB;IAC3D,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAChC,qBAAqB,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kCAAkC,CAAC,WAAmB;IACpE,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC/C,cAAc,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,KAAK,CAAC,yBAAyB,cAAc,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,KAAK,CAAC,yBAAyB,cAAc,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,kCAAkC,cAAc,oBAAoB,CAAC,CAAC;YACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/bin/http/Server.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Agent HTTP Server 装配模块。
+ *
+ * 职责说明：
+ * 1. 创建主 Hono 应用并挂载各路由模块。
+ * 2. 管理 Node HTTP Server 的启动与停止。
+ * 3. 保持 server 层只做协议装配，不混入具体路由实现。
+ */
+import { Hono } from "hono";
+import http from "node:http";
+/**
+ * Server 启动参数。
+ */
+export interface ServerStartOptions {
+    /** HTTP 服务监听端口。 */
+    port: number;
+    /** HTTP 服务监听主机。 */
+    host: string;
+}
+/**
+ * Server 运行实例。
+ */
+export interface ServerInstance {
+    /** Hono 应用实例。 */
+    app: Hono;
+    /** 原生 HTTP Server 实例。 */
+    server: http.Server;
+    /** 停止当前服务。 */
+    stop(): Promise<void>;
+}
+/**
+ * 创建主 Hono 应用。
+ */
+export declare function createServerApp(): Hono;
+/**
+ * 启动主 HTTP 服务。
+ */
+export declare function startServer(options: ServerStartOptions): Promise<ServerInstance>;
+//# sourceMappingURL=Server.d.ts.map

package/bin/http/Server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.d.ts","sourceRoot":"","sources":["../../src/http/Server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,IAAI,MAAM,WAAW,CAAC;AAuB7B;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,iBAAiB;IACjB,GAAG,EAAE,IAAI,CAAC;IACV,yBAAyB;IACzB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;IACpB,cAAc;IACd,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAoCtC;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,cAAc,CAAC,CAyBzB"}

package/bin/http/Server.js

@@ -0,0 +1,122 @@
+/**
+ * Agent HTTP Server 装配模块。
+ *
+ * 职责说明：
+ * 1. 创建主 Hono 应用并挂载各路由模块。
+ * 2. 管理 Node HTTP Server 的启动与停止。
+ * 3. 保持 server 层只做协议装配，不混入具体路由实现。
+ */
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { logger } from "hono/logger";
+import http from "node:http";
+import { logger as serverLogger } from "../shared/utils/logger/Logger.js";
+import { executeRouter } from "../http/execute/execute.js";
+import { healthRouter } from "../http/health/health.js";
+import { ensureServiceActionRoutesRegistered, servicesRouter, } from "../http/services/services.js";
+import { pluginsRouter } from "../http/plugins/plugins.js";
+import { staticRouter } from "../http/static/static.js";
+import { dashboardRouter } from "../http/dashboard/Router.js";
+import { registerAuthRoutes } from "../http/auth/AuthRoutes.js";
+import { AuthService } from "../http/auth/AuthService.js";
+import { createRouteAuthGuardMiddleware, SERVER_AUTH_ROUTE_POLICIES, } from "../http/auth/RoutePolicy.js";
+import { listBuiltinPluginRuntimeAuthPolicies, registerBuiltinPluginHttpRoutes, } from "../plugin/HttpRoutes.js";
+import { getAgentContext } from "../agent/AgentRuntime.js";
+/**
+ * 创建主 Hono 应用。
+ */
+export function createServerApp() {
+    const app = new Hono();
+    const authService = new AuthService();
+    const authPolicies = [
+        ...SERVER_AUTH_ROUTE_POLICIES,
+        ...listBuiltinPluginRuntimeAuthPolicies(),
+    ];
+    app.use("*", logger());
+    app.use("*", cors({
+        origin: "*",
+        allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+        allowHeaders: ["Content-Type", "Authorization"],
+    }));
+    app.use("*", createRouteAuthGuardMiddleware(authService, authPolicies));
+    // 关键点（中文）：service action 路由在 runtime ready 后再注册，避免命令级 import 副作用。
+    ensureServiceActionRoutesRegistered();
+    // 关键点（中文）：按路由域挂载，server 模块只保留装配职责。
+    app.route("/", staticRouter);
+    app.route("/", healthRouter);
+    app.route("/", servicesRouter);
+    app.route("/", pluginsRouter);
+    app.route("/", executeRouter);
+    app.route("/", dashboardRouter);
+    registerBuiltinPluginHttpRoutes({
+        app,
+        getContext: getAgentContext,
+    });
+    registerAuthRoutes({ app, authService });
+    return app;
+}
+/**
+ * 启动主 HTTP 服务。
+ */
+export async function startServer(options) {
+    const app = createServerApp();
+    const server = createNodeServer(app, options);
+    await new Promise((resolve) => {
+        server.listen(options.port, options.host, () => {
+            serverLogger.info(`🚀 Agent Server started: http://${options.host}:${options.port}`);
+            serverLogger.info("Available APIs:");
+            resolve();
+        });
+    });
+    return {
+        app,
+        server,
+        async stop() {
+            await serverLogger.saveAllLogs();
+            await new Promise((resolve) => {
+                server.close(() => resolve());
+            });
+            serverLogger.info("Agent Server stopped");
+        },
+    };
+}
+/**
+ * 创建 Node HTTP Server 适配层。
+ */
+function createNodeServer(app, options) {
+    return http.createServer(async (req, res) => {
+        try {
+            const url = new URL(req.url || "/", `http://${options.host}:${options.port}`);
+            const method = req.method || "GET";
+            const bodyBuffer = await readRequestBody(req);
+            const request = new Request(url.toString(), {
+                method,
+                headers: new Headers(req.headers),
+                body: bodyBuffer.length > 0 ? bodyBuffer : undefined,
+            });
+            const response = await app.fetch(request);
+            res.statusCode = response.status;
+            for (const [key, value] of response.headers.entries()) {
+                res.setHeader(key, value);
+            }
+            const body = await response.text();
+            res.end(body);
+        }
+        catch {
+            res.statusCode = 500;
+            res.end("Internal Server Error");
+        }
+    });
+}
+/**
+ * 读取原生请求体。
+ */
+async function readRequestBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on("data", (chunk) => chunks.push(chunk));
+        req.on("end", () => resolve(Buffer.concat(chunks)));
+        req.on("error", reject);
+    });
+}
+//# sourceMappingURL=Server.js.map

package/bin/http/Server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.js","sourceRoot":"","sources":["../../src/http/Server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oCAAoC,EACpC,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAwB1D;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IACtC,MAAM,YAAY,GAAG;QACnB,GAAG,0BAA0B;QAC7B,GAAG,oCAAoC,EAAE;KAC1C,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACvB,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,GAAG;QACX,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;QACzD,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;KAChD,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,8BAA8B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAExE,kEAAkE;IAClE,mCAAmC,EAAE,CAAC;IAEtC,mCAAmC;IACnC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC9B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC9B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAChC,+BAA+B,CAAC;QAC9B,GAAG;QACH,UAAU,EAAE,eAAe;KAC5B,CAAC,CAAC;IACH,kBAAkB,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IAEzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B;IAE3B,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE9C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;YAC7C,YAAY,CAAC,IAAI,CACf,mCAAmC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAClE,CAAC;YACF,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG;QACH,MAAM;QACN,KAAK,CAAC,IAAI;YACR,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAS,EAAE,OAA2B;IAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YACnC,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAC1C,MAAM;gBACN,OAAO,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,OAAiC,CAAC;gBAC3D,IAAI,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;aACrD,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAAC,GAAyB;IACtD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bin/http/auth/AuthEnv.d.ts

@@ -0,0 +1,45 @@
+/**
+ * AuthEnv：统一认证环境变量与 token 解析辅助模块。
+ *
+ * 关键点（中文）
+ * - 收敛 `DC_AUTH_TOKEN` 的变量名与 Bearer 归一化逻辑。
+ * - 通用子进程默认不继承任何 Bearer Token，避免隐式走本地 HTTP。
+ */
+/**
+ * 用户显式覆盖 Bearer Token 的环境变量名。
+ */
+export declare const CLI_AUTH_TOKEN_ENV_KEY = "DC_AUTH_TOKEN";
+/**
+ * 归一化 Bearer Token。
+ *
+ * 关键点（中文）
+ * - 允许传入纯 token 或 `Bearer xxx`。
+ * - 空字符串与无效值统一归一化为 `null`。
+ */
+export declare function normalizeBearerToken(value: unknown): string | null;
+/**
+ * 解析本次调用应使用的 token。
+ *
+ * 优先级（中文）
+ * 1. 显式传入 token
+ * 2. 用户显式覆盖环境变量 `DC_AUTH_TOKEN`
+ * 3. 调用方传入的本地存储 token
+ */
+export declare function resolveInvocationToken(params?: {
+    explicitToken?: string;
+    env?: NodeJS.ProcessEnv;
+    storedToken?: string;
+}): string | undefined;
+/**
+ * 从通用子进程环境中剥离 Bearer Token。
+ *
+ * 关键点（中文）
+ * - shell / task script / ACP 等通用执行面不应默认继承任何 HTTP 鉴权信息。
+ * - 这样可以强制这些链路优先走 RPC，而不是通过环境变量隐式改走本地 HTTP。
+ */
+export declare function stripInvocationAuthEnv(targetEnv: NodeJS.ProcessEnv): void;
+/**
+ * 生成标准 Authorization 头值。
+ */
+export declare function formatBearerHeaderValue(tokenInput: string | undefined): string | undefined;
+//# sourceMappingURL=AuthEnv.d.ts.map

package/bin/http/auth/AuthEnv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthEnv.d.ts","sourceRoot":"","sources":["../../../src/http/auth/AuthEnv.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AAEtD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAMlE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,GAAE;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,GAAG,SAAS,CAU1B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAGzE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAG1F"}

package/bin/http/auth/AuthEnv.js

@@ -0,0 +1,63 @@
+/**
+ * AuthEnv：统一认证环境变量与 token 解析辅助模块。
+ *
+ * 关键点（中文）
+ * - 收敛 `DC_AUTH_TOKEN` 的变量名与 Bearer 归一化逻辑。
+ * - 通用子进程默认不继承任何 Bearer Token，避免隐式走本地 HTTP。
+ */
+/**
+ * 用户显式覆盖 Bearer Token 的环境变量名。
+ */
+export const CLI_AUTH_TOKEN_ENV_KEY = "DC_AUTH_TOKEN";
+/**
+ * 归一化 Bearer Token。
+ *
+ * 关键点（中文）
+ * - 允许传入纯 token 或 `Bearer xxx`。
+ * - 空字符串与无效值统一归一化为 `null`。
+ */
+export function normalizeBearerToken(value) {
+    const raw = String(value || "").trim();
+    if (!raw)
+        return null;
+    const bearerMatch = /^Bearer\s+(.+)$/i.exec(raw);
+    const token = bearerMatch?.[1]?.trim() || raw;
+    return token || null;
+}
+/**
+ * 解析本次调用应使用的 token。
+ *
+ * 优先级（中文）
+ * 1. 显式传入 token
+ * 2. 用户显式覆盖环境变量 `DC_AUTH_TOKEN`
+ * 3. 调用方传入的本地存储 token
+ */
+export function resolveInvocationToken(params = {}) {
+    const explicitToken = normalizeBearerToken(params.explicitToken);
+    if (explicitToken)
+        return explicitToken;
+    const env = params.env || process.env;
+    const envAuthToken = normalizeBearerToken(env[CLI_AUTH_TOKEN_ENV_KEY]);
+    if (envAuthToken)
+        return envAuthToken;
+    return normalizeBearerToken(params.storedToken) || undefined;
+}
+/**
+ * 从通用子进程环境中剥离 Bearer Token。
+ *
+ * 关键点（中文）
+ * - shell / task script / ACP 等通用执行面不应默认继承任何 HTTP 鉴权信息。
+ * - 这样可以强制这些链路优先走 RPC，而不是通过环境变量隐式改走本地 HTTP。
+ */
+export function stripInvocationAuthEnv(targetEnv) {
+    delete targetEnv[CLI_AUTH_TOKEN_ENV_KEY];
+    delete targetEnv.DC_AGENT_TOKEN;
+}
+/**
+ * 生成标准 Authorization 头值。
+ */
+export function formatBearerHeaderValue(tokenInput) {
+    const token = normalizeBearerToken(tokenInput);
+    return token ? `Bearer ${token}` : undefined;
+}
+//# sourceMappingURL=AuthEnv.js.map

package/bin/http/auth/AuthEnv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthEnv.js","sourceRoot":"","sources":["../../../src/http/auth/AuthEnv.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC;IAC9C,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAInC,EAAE;IACJ,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACjE,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEtC,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACvE,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,OAAO,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAA4B;IACjE,OAAO,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACzC,OAAO,SAAS,CAAC,cAAc,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAA8B;IACpE,MAAM,KAAK,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC"}

package/bin/http/auth/AuthError.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Auth 领域错误定义。
+ *
+ * 关键点（中文）
+ * - 用统一错误类把 HTTP 状态码和业务语义绑在一起。
+ * - 路由层只负责把错误转成响应，不负责猜测状态码。
+ */
+/**
+ * Auth 业务错误。
+ */
+export declare class AuthError extends Error {
+    /**
+     * HTTP 状态码。
+     */
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+/**
+ * 判断是否为 AuthError。
+ */
+export declare function isAuthError(error: unknown): error is AuthError;
+//# sourceMappingURL=AuthError.d.ts.map

package/bin/http/auth/AuthError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthError.d.ts","sourceRoot":"","sources":["../../../src/http/auth/AuthError.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D"}

package/bin/http/auth/AuthError.js

@@ -0,0 +1,28 @@
+/**
+ * Auth 领域错误定义。
+ *
+ * 关键点（中文）
+ * - 用统一错误类把 HTTP 状态码和业务语义绑在一起。
+ * - 路由层只负责把错误转成响应，不负责猜测状态码。
+ */
+/**
+ * Auth 业务错误。
+ */
+export class AuthError extends Error {
+    /**
+     * HTTP 状态码。
+     */
+    status;
+    constructor(message, status) {
+        super(message);
+        this.name = "AuthError";
+        this.status = status;
+    }
+}
+/**
+ * 判断是否为 AuthError。
+ */
+export function isAuthError(error) {
+    return error instanceof AuthError;
+}
+//# sourceMappingURL=AuthError.js.map

package/bin/http/auth/AuthError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthError.js","sourceRoot":"","sources":["../../../src/http/auth/AuthError.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC;;OAEG;IACM,MAAM,CAAS;IAExB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,SAAS,CAAC;AACpC,CAAC"}

package/bin/http/auth/AuthMiddleware.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Auth 中间件。
+ *
+ * 关键点（中文）
+ * - 当前先服务 `/api/auth/*` 的受保护子路由。
+ * - 后续把更多控制面路由切到 Bearer 鉴权时，可直接复用这一层。
+ */
+import type { Context, MiddlewareHandler } from "hono";
+import type { AuthPrincipal } from "../../shared/types/auth/AuthTypes.js";
+import type { AuthService } from "./AuthService.js";
+/**
+ * Hono Context 中保存 principal 的 key。
+ */
+export declare const AUTH_PRINCIPAL_CONTEXT_KEY = "authPrincipal";
+/**
+ * Auth 中间件变量映射。
+ */
+export interface AuthMiddlewareVariables {
+    /**
+     * 当前请求的认证主体。
+     */
+    authPrincipal: AuthPrincipal;
+}
+/**
+ * 生成 Bearer 鉴权中间件。
+ */
+export declare function createRequireAuthMiddleware(authService: AuthService): MiddlewareHandler<{
+    Variables: AuthMiddlewareVariables;
+}>;
+/**
+ * 从 Context 中读取 principal。
+ */
+export declare function getAuthPrincipal(context: Context<{
+    Variables: AuthMiddlewareVariables;
+}>): AuthPrincipal;
+//# sourceMappingURL=AuthMiddleware.d.ts.map

package/bin/http/auth/AuthMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMiddleware.d.ts","sourceRoot":"","sources":["../../../src/http/auth/AuthMiddleware.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;GAEG;AACH,eAAO,MAAM,0BAA0B,kBAAkB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,WAAW,GACvB,iBAAiB,CAAC;IAAE,SAAS,EAAE,uBAAuB,CAAA;CAAE,CAAC,CAkB3D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,CAAC;IAAE,SAAS,EAAE,uBAAuB,CAAA;CAAE,CAAC,GACvD,aAAa,CAEf"}

package/bin/http/auth/AuthMiddleware.js

@@ -0,0 +1,37 @@
+/**
+ * Auth 中间件。
+ *
+ * 关键点（中文）
+ * - 当前先服务 `/api/auth/*` 的受保护子路由。
+ * - 后续把更多控制面路由切到 Bearer 鉴权时，可直接复用这一层。
+ */
+import { isAuthError } from "./AuthError.js";
+/**
+ * Hono Context 中保存 principal 的 key。
+ */
+export const AUTH_PRINCIPAL_CONTEXT_KEY = "authPrincipal";
+/**
+ * 生成 Bearer 鉴权中间件。
+ */
+export function createRequireAuthMiddleware(authService) {
+    return async (c, next) => {
+        try {
+            const principal = authService.authenticateBearerHeader(c.req.header("authorization"));
+            c.set(AUTH_PRINCIPAL_CONTEXT_KEY, principal);
+            await next();
+        }
+        catch (error) {
+            if (isAuthError(error)) {
+                return c.json({ success: false, error: error.message }, error.status);
+            }
+            return c.json({ success: false, error: String(error) }, 500);
+        }
+    };
+}
+/**
+ * 从 Context 中读取 principal。
+ */
+export function getAuthPrincipal(context) {
+    return context.get(AUTH_PRINCIPAL_CONTEXT_KEY);
+}
+//# sourceMappingURL=AuthMiddleware.js.map

package/bin/http/auth/AuthMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMiddleware.js","sourceRoot":"","sources":["../../../src/http/auth/AuthMiddleware.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAe,CAAC;AAY1D;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,WAAwB;IAExB,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,WAAW,CAAC,wBAAwB,CACtD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAC5B,CAAC;YACF,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;YAC7C,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EACxC,KAAK,CAAC,MAAa,CACpB,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAwD;IAExD,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AACjD,CAAC"}

package/bin/http/auth/AuthRoutes.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Auth API 路由。
+ *
+ * 关键点（中文）
+ * - 本模块只承接 Bearer Token 模型下的最小认证接口。
+ * - 路由层不做领域判断，所有业务逻辑统一委托给 `AuthService`。
+ */
+import { Hono } from "hono";
+import type { AuthService } from "./AuthService.js";
+/**
+ * 注册 auth 路由。
+ */
+export declare function registerAuthRoutes(params: {
+    app: Hono;
+    authService?: AuthService;
+}): void;
+//# sourceMappingURL=AuthRoutes.d.ts.map

package/bin/http/auth/AuthRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthRoutes.d.ts","sourceRoot":"","sources":["../../../src/http/auth/AuthRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AASpD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,GAAG,EAAE,IAAI,CAAC;IACV,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,GAAG,IAAI,CAiEP"}

package/bin/http/auth/AuthRoutes.js

@@ -0,0 +1,78 @@
+/**
+ * Auth API 路由。
+ *
+ * 关键点（中文）
+ * - 本模块只承接 Bearer Token 模型下的最小认证接口。
+ * - 路由层不做领域判断，所有业务逻辑统一委托给 `AuthService`。
+ */
+import { Hono } from "hono";
+import { AuthService as DefaultAuthService } from "./AuthService.js";
+import { isAuthError } from "./AuthError.js";
+import { createRequireAuthMiddleware, getAuthPrincipal, } from "./AuthMiddleware.js";
+/**
+ * 注册 auth 路由。
+ */
+export function registerAuthRoutes(params) {
+    const authService = params.authService || new DefaultAuthService();
+    const router = new Hono();
+    const protectedRouter = new Hono();
+    const requireAuth = createRequireAuthMiddleware(authService);
+    router.get("/status", (c) => {
+        const initialized = authService.hasLocalCliAccess();
+        return c.json({
+            success: true,
+            initialized,
+            requireToken: initialized,
+        });
+    });
+    protectedRouter.get("/me", requireAuth, (c) => {
+        const principal = getAuthPrincipal(c);
+        return c.json({
+            success: true,
+            user: authService.getCurrentUser(principal),
+        });
+    });
+    protectedRouter.get("/token/list", requireAuth, (c) => {
+        const principal = getAuthPrincipal(c);
+        return c.json({
+            success: true,
+            tokens: authService.listTokens(principal),
+        });
+    });
+    protectedRouter.post("/token/create", requireAuth, async (c) => {
+        try {
+            const principal = getAuthPrincipal(c);
+            const body = (await c.req.json().catch(() => ({})));
+            return c.json({
+                success: true,
+                token: authService.createToken(principal, {
+                    name: String(body.name || ""),
+                    expiresAt: typeof body.expiresAt === "string" ? body.expiresAt : undefined,
+                }),
+            });
+        }
+        catch (error) {
+            return toErrorResponse(c, error);
+        }
+    });
+    protectedRouter.post("/token/delete", requireAuth, async (c) => {
+        try {
+            const principal = getAuthPrincipal(c);
+            const body = (await c.req.json().catch(() => ({})));
+            authService.deleteToken(principal, String(body.tokenId || ""));
+            return c.json({ success: true });
+        }
+        catch (error) {
+            return toErrorResponse(c, error);
+        }
+    });
+    router.route("/", protectedRouter);
+    params.app.route("/api/auth", router);
+}
+function toErrorResponse(c, error) {
+    if (isAuthError(error)) {
+        return c.json({ success: false, error: error.message }, error.status);
+    }
+    return c.json({ success: false, error: String(error) }, 500);
+}
+//# sourceMappingURL=AuthRoutes.js.map

package/bin/http/auth/AuthRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthRoutes.js","sourceRoot":"","sources":["../../../src/http/auth/AuthRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EACL,2BAA2B,EAC3B,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAE7B;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAGlC;IACC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,kBAAkB,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,eAAe,GAAG,IAAI,IAAI,EAA0C,CAAC;IAC3E,MAAM,WAAW,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;IAE7D,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,WAAW;YACX,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGjD,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE;oBACxC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC7B,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBAC3E,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEjD,CAAC;YACF,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,CAAU,EAAE,KAAc;IACjD,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EACxC,KAAK,CAAC,MAAa,CACpB,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC"}