@downcity/agent 1.1.1

package/bin/http/auth/RoutePolicy.js

@@ -0,0 +1,229 @@
+/**
+ * 统一账户路由策略与全局守卫。
+ *
+ * 关键点（中文）
+ * - 这里负责把“哪些接口需要登录、需要什么权限”集中配置。
+ * - 当系统还没有任何统一账户用户时，受保护接口默认放行，避免首次 bootstrap 被锁死。
+ */
+import { isAuthError as isAuthDomainError } from "./AuthError.js";
+import { AUTH_PRINCIPAL_CONTEXT_KEY } from "./AuthMiddleware.js";
+/**
+ * Server 侧路由权限矩阵。
+ */
+export const SERVER_AUTH_ROUTE_POLICIES = [
+    { path: "/api/auth/*", method: "*", requireAuth: false },
+    { path: "/health", method: "GET", requireAuth: false },
+    {
+        path: "/api/execute",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["agent.execute"],
+    },
+    {
+        path: "/api/services/list",
+        method: "GET",
+        requireAuth: true,
+        anyPermissions: ["service.read"],
+    },
+    {
+        path: "/api/services/control",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["service.write"],
+    },
+    {
+        path: "/api/services/command",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["service.write"],
+    },
+    {
+        path: "/api/plugins/list",
+        method: "GET",
+        requireAuth: true,
+        anyPermissions: ["plugin.read"],
+    },
+    {
+        path: "/api/plugins/availability",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["plugin.read"],
+    },
+    {
+        path: "/api/plugins/action",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["plugin.write"],
+    },
+    {
+        path: "/api/dashboard/authorization",
+        method: "GET",
+        requireAuth: true,
+        anyPermissions: ["auth.read"],
+    },
+    {
+        path: "/api/dashboard/authorization/config",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["auth.write"],
+    },
+    {
+        path: "/api/dashboard/authorization/action",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["auth.write"],
+    },
+    {
+        path: "/api/dashboard/*",
+        method: "*",
+        requireAuth: true,
+    },
+];
+/**
+ * Console 网关侧路由权限矩阵。
+ */
+export const CONSOLE_AUTH_ROUTE_POLICIES = [
+    { path: "/api/auth/*", method: "*", requireAuth: false },
+    { path: "/health", method: "GET", requireAuth: false },
+    {
+        path: "/api/ui/agents",
+        method: "GET",
+        requireAuth: true,
+        anyPermissions: ["agent.read"],
+    },
+    {
+        path: "/api/ui/agents/create",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["agent.write"],
+    },
+    {
+        path: "/api/ui/agents/start",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["agent.write"],
+    },
+    {
+        path: "/api/ui/agents/restart",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["agent.write"],
+    },
+    {
+        path: "/api/ui/agents/stop",
+        method: "POST",
+        requireAuth: true,
+        anyPermissions: ["agent.write"],
+    },
+    {
+        path: "/api/ui/model*",
+        method: "*",
+        requireAuth: true,
+        anyPermissions: ["model.read"],
+    },
+    {
+        path: "/api/ui/env*",
+        method: "*",
+        requireAuth: true,
+        anyPermissions: ["env.read"],
+    },
+    {
+        path: "/api/ui/channel*",
+        method: "*",
+        requireAuth: true,
+        anyPermissions: ["channel.read"],
+    },
+    {
+        path: "/api/ui/plugins*",
+        method: "*",
+        requireAuth: true,
+        anyPermissions: ["plugin.read"],
+    },
+    {
+        path: "/api/ui/*",
+        method: "*",
+        requireAuth: true,
+    },
+];
+/**
+ * 根据路径与方法解析匹配的策略。
+ */
+export function resolveAuthRoutePolicy(path, method, policies) {
+    const normalizedPath = String(path || "").trim() || "/";
+    const normalizedMethod = String(method || "GET").trim().toUpperCase();
+    for (const policy of policies) {
+        if (!matchesMethod(policy.method, normalizedMethod))
+            continue;
+        if (!matchesPath(policy.path, normalizedPath))
+            continue;
+        return policy;
+    }
+    return null;
+}
+/**
+ * 创建全局路由鉴权中间件。
+ */
+export function createRouteAuthGuardMiddleware(authService, policies = SERVER_AUTH_ROUTE_POLICIES) {
+    return async (c, next) => {
+        const policy = resolveAuthRoutePolicy(c.req.path, c.req.method, policies);
+        if (!policy || policy.requireAuth !== true) {
+            await next();
+            return;
+        }
+        if (!authService.hasLocalCliAccess()) {
+            await next();
+            return;
+        }
+        try {
+            const principal = authService.authenticateBearerHeader(c.req.header("authorization"));
+            ensurePermissions(principal.permissions, policy.anyPermissions);
+            c.set(AUTH_PRINCIPAL_CONTEXT_KEY, principal);
+            await next();
+        }
+        catch (error) {
+            if (isRouteGuardError(error)) {
+                return c.json({ success: false, error: error.message }, error.status);
+            }
+            return c.json({ success: false, error: String(error) }, 500);
+        }
+    };
+}
+function matchesMethod(expectedMethod, actualMethod) {
+    const expected = String(expectedMethod || "*").trim().toUpperCase();
+    return expected === "*" || expected === actualMethod;
+}
+function matchesPath(patternInput, actualPath) {
+    const pattern = String(patternInput || "").trim();
+    if (!pattern)
+        return false;
+    if (pattern.endsWith("*")) {
+        const prefix = pattern.slice(0, -1);
+        return actualPath.startsWith(prefix);
+    }
+    return actualPath === pattern;
+}
+function ensurePermissions(userPermissions, anyPermissions) {
+    if (!anyPermissions || anyPermissions.length === 0)
+        return;
+    if (anyPermissions.some((permission) => userPermissions.includes(permission)))
+        return;
+    throw new ErrorWithStatus("Permission denied", 403);
+}
+class ErrorWithStatus extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.name = "AuthPermissionError";
+        this.status = status;
+    }
+}
+function isAuthErrorLike(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "status" in error &&
+        typeof error.status === "number");
+}
+function isRouteGuardError(error) {
+    return isAuthDomainError(error) || isAuthErrorLike(error);
+}
+//# sourceMappingURL=RoutePolicy.js.map

package/bin/http/auth/RoutePolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoutePolicy.js","sourceRoot":"","sources":["../../../src/http/auth/RoutePolicy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAElE,OAAO,EAAE,0BAA0B,EAAgC,MAAM,qBAAqB,CAAC;AAE/F;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE;IACxD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;IACtD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,eAAe,CAAC;KAClC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,cAAc,CAAC;KACjC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,eAAe,CAAC;KAClC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,eAAe,CAAC;KAClC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,aAAa,CAAC;KAChC;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,aAAa,CAAC;KAChC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,cAAc,CAAC;KACjC;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,WAAW,CAAC;KAC9B;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,YAAY,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,YAAY,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,IAAI;KAClB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE;IACxD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;IACtD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,YAAY,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,aAAa,CAAC;KAChC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,aAAa,CAAC;KAChC;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,aAAa,CAAC;KAChC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,aAAa,CAAC;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,YAAY,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,UAAU,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,cAAc,CAAC;KACjC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,CAAC,aAAa,CAAC;KAChC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,IAAI;KAClB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,MAAc,EACd,QAA2B;IAE3B,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;IACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;YAAE,SAAS;QAC9D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC;YAAE,SAAS;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,WAAwB,EACxB,WAA8B,0BAA0B;IAExD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,WAAW,CAAC,wBAAwB,CACpD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAC9B,CAAC;YACF,iBAAiB,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YAChE,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;YAC7C,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EACxC,KAAK,CAAC,MAAa,CACpB,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,cAAsB,EAAE,YAAoB;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,YAAY,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,YAAoB,EAAE,UAAkB;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,OAAO,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,UAAU,KAAK,OAAO,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CACxB,eAAoC,EACpC,cAAiD;IAEjD,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC3D,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO;IACtF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,eAAgB,SAAQ,KAAK;IACxB,MAAM,CAAS;IAExB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,QAAQ,IAAI,KAAK;QACjB,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC"}

package/bin/http/auth/TokenService.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Bearer Token 工具。
+ *
+ * 关键点（中文）
+ * - 明文 token 只在签发时生成一次。
+ * - 存储层始终只保存哈希值，避免数据库泄漏时直接暴露访问凭证。
+ */
+/**
+ * 生成新的明文 token。
+ */
+export declare function generateAccessToken(): string;
+/**
+ * 计算 token 哈希。
+ */
+export declare function hashAccessToken(tokenInput: string): string;
+/**
+ * 从 Authorization 头提取 Bearer Token。
+ */
+export declare function extractBearerToken(headerValue: string | undefined): string | null;
+//# sourceMappingURL=TokenService.d.ts.map

package/bin/http/auth/TokenService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenService.d.ts","sourceRoot":"","sources":["../../../src/http/auth/TokenService.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAOjF"}

package/bin/http/auth/TokenService.js

@@ -0,0 +1,34 @@
+/**
+ * Bearer Token 工具。
+ *
+ * 关键点（中文）
+ * - 明文 token 只在签发时生成一次。
+ * - 存储层始终只保存哈希值，避免数据库泄漏时直接暴露访问凭证。
+ */
+import { createHash, randomBytes } from "node:crypto";
+/**
+ * 生成新的明文 token。
+ */
+export function generateAccessToken() {
+    return `dc_${randomBytes(24).toString("hex")}`;
+}
+/**
+ * 计算 token 哈希。
+ */
+export function hashAccessToken(tokenInput) {
+    return createHash("sha256").update(String(tokenInput || ""), "utf8").digest("hex");
+}
+/**
+ * 从 Authorization 头提取 Bearer Token。
+ */
+export function extractBearerToken(headerValue) {
+    const header = String(headerValue || "").trim();
+    if (!header)
+        return null;
+    const match = /^Bearer\s+(.+)$/i.exec(header);
+    if (!match?.[1])
+        return null;
+    const token = match[1].trim();
+    return token || null;
+}
+//# sourceMappingURL=TokenService.js.map

package/bin/http/auth/TokenService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenService.js","sourceRoot":"","sources":["../../../src/http/auth/TokenService.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA+B;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC"}

package/bin/http/dashboard/AuthDashboardService.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Dashboard Authorization Service。
+ *
+ * 关键点（中文）
+ * - 这是 main/dashboard 侧的 auth 管理面 facade。
+ * - 它通过 auth plugin action 读取与写入授权数据，但自身不属于 plugin 内核。
+ * - 这样调用方不需要知道 plugin action 名称，也不需要依赖 `plugins/auth/*` 目录。
+ */
+import type { AgentContext } from "../../types/agent/AgentContext.js";
+import type { AuthDashboardPayload } from "../../shared/types/AuthDashboard.js";
+import type { AuthSetUserRolePayload, ChatAuthorizationConfig } from "../../shared/types/AuthPlugin.js";
+/**
+ * 读取 authorization 页面所需的完整数据。
+ */
+export declare function readAuthDashboardPayload(context: AgentContext): Promise<AuthDashboardPayload>;
+/**
+ * 覆盖写入授权配置，并返回最新 dashboard payload。
+ */
+export declare function writeAuthDashboardConfig(params: {
+    context: AgentContext;
+    config: ChatAuthorizationConfig;
+}): Promise<AuthDashboardPayload>;
+/**
+ * 设置用户角色，并返回最新 dashboard payload。
+ */
+export declare function setAuthDashboardUserRole(params: {
+    context: AgentContext;
+    input: AuthSetUserRolePayload;
+}): Promise<AuthDashboardPayload>;
+//# sourceMappingURL=AuthDashboardService.d.ts.map

package/bin/http/dashboard/AuthDashboardService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthDashboardService.d.ts","sourceRoot":"","sources":["../../../src/http/dashboard/AuthDashboardService.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EACV,sBAAsB,EAEtB,uBAAuB,EAExB,MAAM,8BAA8B,CAAC;AAiGtC;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAW/B;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAMhC;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,sBAAsB,CAAC;CAC/B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAQhC"}

package/bin/http/dashboard/AuthDashboardService.js

@@ -0,0 +1,120 @@
+/**
+ * Dashboard Authorization Service。
+ *
+ * 关键点（中文）
+ * - 这是 main/dashboard 侧的 auth 管理面 facade。
+ * - 它通过 auth plugin action 读取与写入授权数据，但自身不属于 plugin 内核。
+ * - 这样调用方不需要知道 plugin action 名称，也不需要依赖 `plugins/auth/*` 目录。
+ */
+import { AUTH_ACTIONS, AUTH_PLUGIN_NAME, CHAT_AUTHORIZATION_CATALOG, } from "../../shared/types/AuthPlugin.js";
+function toRecord(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return {};
+    return value;
+}
+function readSnapshot(value) {
+    const record = toRecord(value);
+    return {
+        config: toRecord(record.config),
+        users: (Array.isArray(record.users) ? record.users : []),
+        chats: (Array.isArray(record.chats) ? record.chats : []),
+    };
+}
+/**
+ * 读取 auth plugin 快照。
+ */
+async function readAuthorizationSnapshotViaPlugin(context) {
+    const result = await context.plugins.runAction({
+        plugin: AUTH_PLUGIN_NAME,
+        action: AUTH_ACTIONS.snapshot,
+    });
+    if (!result.success) {
+        throw new Error(result.error || result.message || "auth snapshot failed");
+    }
+    return readSnapshot(result.data);
+}
+/**
+ * 读取 auth plugin 配置。
+ */
+async function readAuthorizationConfigViaPlugin(context) {
+    const result = await context.plugins.runAction({
+        plugin: AUTH_PLUGIN_NAME,
+        action: AUTH_ACTIONS.readConfig,
+    });
+    if (!result.success) {
+        throw new Error(result.error || result.message || "auth read-config failed");
+    }
+    return toRecord(result.data);
+}
+/**
+ * 通过 auth plugin 覆盖写入授权配置。
+ */
+async function writeAuthorizationConfigViaPlugin(params) {
+    const result = await params.context.plugins.runAction({
+        plugin: AUTH_PLUGIN_NAME,
+        action: AUTH_ACTIONS.writeConfig,
+        payload: {
+            config: params.config,
+        },
+    });
+    if (!result.success) {
+        throw new Error(result.error || result.message || "auth write-config failed");
+    }
+    return toRecord(result.data);
+}
+/**
+ * 通过 auth plugin 设置用户角色。
+ */
+async function setAuthorizationUserRoleViaPlugin(params) {
+    const result = await params.context.plugins.runAction({
+        plugin: AUTH_PLUGIN_NAME,
+        action: AUTH_ACTIONS.setUserRole,
+        payload: {
+            channel: params.channel,
+            userId: params.userId,
+            roleId: params.roleId,
+        },
+    });
+    if (!result.success) {
+        throw new Error(result.error || result.message || "auth set-user-role failed");
+    }
+    return toRecord(result.data);
+}
+/**
+ * 读取 authorization 页面所需的完整数据。
+ */
+export async function readAuthDashboardPayload(context) {
+    const [config, snapshot] = await Promise.all([
+        readAuthorizationConfigViaPlugin(context),
+        readAuthorizationSnapshotViaPlugin(context),
+    ]);
+    return {
+        catalog: CHAT_AUTHORIZATION_CATALOG,
+        config,
+        users: snapshot.users,
+        chats: snapshot.chats,
+    };
+}
+/**
+ * 覆盖写入授权配置，并返回最新 dashboard payload。
+ */
+export async function writeAuthDashboardConfig(params) {
+    await writeAuthorizationConfigViaPlugin({
+        context: params.context,
+        config: params.config,
+    });
+    return readAuthDashboardPayload(params.context);
+}
+/**
+ * 设置用户角色，并返回最新 dashboard payload。
+ */
+export async function setAuthDashboardUserRole(params) {
+    await setAuthorizationUserRoleViaPlugin({
+        context: params.context,
+        channel: params.input.channel,
+        userId: params.input.userId,
+        roleId: params.input.roleId,
+    });
+    return readAuthDashboardPayload(params.context);
+}
+//# sourceMappingURL=AuthDashboardService.js.map

package/bin/http/dashboard/AuthDashboardService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthDashboardService.js","sourceRoot":"","sources":["../../../src/http/dashboard/AuthDashboardService.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AAEtC,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAuC;QACrE,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAuC;QAC9F,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAuC;KAC/F,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kCAAkC,CAC/C,OAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,YAAY,CAAC,QAAQ;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,sBAAsB,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gCAAgC,CAC7C,OAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,YAAY,CAAC,UAAU;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,yBAAyB,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAuC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iCAAiC,CAAC,MAGhD;IACC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QACpD,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,YAAY,CAAC,WAAW;QAChC,OAAO,EAAE;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;SAC6B;KACrD,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,0BAA0B,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAuC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iCAAiC,CAAC,MAKhD;IACC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QACpD,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,YAAY,CAAC,WAAW;QAChC,OAAO,EAAE;YACP,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SAC6B;KACrD,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAuC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAqB;IAErB,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,gCAAgC,CAAC,OAAO,CAAC;QACzC,kCAAkC,CAAC,OAAO,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,0BAA0B;QACnC,MAAM;QACN,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAG9C;IACC,MAAM,iCAAiC,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,OAAO,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAG9C;IACC,MAAM,iCAAiC,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;QAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;KAC5B,CAAC,CAAC;IACH,OAAO,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC"}

package/bin/http/dashboard/CommonHelpers.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Dashboard 通用 helper。
+ *
+ * 关键点（中文）
+ * - 聚合 query/path/文本裁剪 等基础工具。
+ * - 不依赖任何业务状态。
+ */
+/**
+ * 解析 limit 参数并做边界裁剪。
+ */
+export declare function toLimit(raw: string | undefined, fallback?: number): number;
+/**
+ * 转成可选字符串。
+ */
+export declare function toOptionalString(input: unknown): string | undefined;
+/**
+ * 安全 decodeURIComponent。
+ */
+export declare function decodeMaybe(value: string): string;
+/**
+ * 文本截断。
+ */
+export declare function truncateText(text: string, maxChars: number): string;
+//# sourceMappingURL=CommonHelpers.d.ts.map

package/bin/http/dashboard/CommonHelpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommonHelpers.d.ts","sourceRoot":"","sources":["../../../src/http/dashboard/CommonHelpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;GAEG;AACH,wBAAgB,OAAO,CACrB,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,SAAgB,GACvB,MAAM,CAIR;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGnE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAInE"}

package/bin/http/dashboard/CommonHelpers.js

@@ -0,0 +1,46 @@
+/**
+ * Dashboard 通用 helper。
+ *
+ * 关键点（中文）
+ * - 聚合 query/path/文本裁剪 等基础工具。
+ * - 不依赖任何业务状态。
+ */
+const DEFAULT_LIMIT = 50;
+const MAX_LIMIT = 500;
+/**
+ * 解析 limit 参数并做边界裁剪。
+ */
+export function toLimit(raw, fallback = DEFAULT_LIMIT) {
+    const n = Number.parseInt(String(raw || "").trim(), 10);
+    if (!Number.isFinite(n) || Number.isNaN(n))
+        return fallback;
+    return Math.max(1, Math.min(MAX_LIMIT, n));
+}
+/**
+ * 转成可选字符串。
+ */
+export function toOptionalString(input) {
+    const value = typeof input === "string" ? input.trim() : "";
+    return value ? value : undefined;
+}
+/**
+ * 安全 decodeURIComponent。
+ */
+export function decodeMaybe(value) {
+    try {
+        return decodeURIComponent(String(value || ""));
+    }
+    catch {
+        return String(value || "");
+    }
+}
+/**
+ * 文本截断。
+ */
+export function truncateText(text, maxChars) {
+    const normalized = String(text || "");
+    if (normalized.length <= maxChars)
+        return normalized;
+    return normalized.slice(0, Math.max(0, maxChars - 3)) + "...";
+}
+//# sourceMappingURL=CommonHelpers.js.map

package/bin/http/dashboard/CommonHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommonHelpers.js","sourceRoot":"","sources":["../../../src/http/dashboard/CommonHelpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB;;GAEG;AACH,MAAM,UAAU,OAAO,CACrB,GAAuB,EACvB,QAAQ,GAAG,aAAa;IAExB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,QAAgB;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACtC,IAAI,UAAU,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,UAAU,CAAC;IACrD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAChE,CAAC"}

package/bin/http/dashboard/DashboardApiRoutes.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Dashboard API 路由聚合入口。
+ *
+ * 关键点（中文）
+ * - 本文件只做模块装配，不再承载具体业务逻辑。
+ * - dashboard 子路由按 overview/context@/main/city/model/task/auth 五类拆分，便于继续维护。
+ */
+import type { DashboardRouteRegistrationParams } from "../../shared/types/DashboardRoutes.js";
+/**
+ * 注册 dashboard 数据面路由。
+ */
+export declare function registerDashboardApiRoutes(params: DashboardRouteRegistrationParams): void;
+//# sourceMappingURL=DashboardApiRoutes.d.ts.map

package/bin/http/dashboard/DashboardApiRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DashboardApiRoutes.d.ts","sourceRoot":"","sources":["../../../src/http/dashboard/DashboardApiRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAO1F;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,gCAAgC,GACvC,IAAI,CASN"}

package/bin/http/dashboard/DashboardApiRoutes.js

@@ -0,0 +1,26 @@
+/**
+ * Dashboard API 路由聚合入口。
+ *
+ * 关键点（中文）
+ * - 本文件只做模块装配，不再承载具体业务逻辑。
+ * - dashboard 子路由按 overview/context@/main/city/model/task/auth 五类拆分，便于继续维护。
+ */
+import { registerDashboardAuthorizationRoutes } from "../../http/dashboard/DashboardAuthorizationRoutes.js";
+import { registerDashboardSessionRoutes } from "../../http/dashboard/SessionRoutes.js";
+import { registerDashboardModelRoutes } from "../../http/dashboard/ModelRoutes.js";
+import { registerDashboardOverviewRoutes } from "../../http/dashboard/OverviewRoutes.js";
+import { registerDashboardTaskRoutes } from "../../http/dashboard/TaskRoutes.js";
+/**
+ * 注册 dashboard 数据面路由。
+ */
+export function registerDashboardApiRoutes(params) {
+    registerDashboardAuthorizationRoutes({
+        app: params.app,
+        getAgentContext: params.getAgentContext,
+    });
+    registerDashboardOverviewRoutes(params);
+    registerDashboardSessionRoutes(params);
+    registerDashboardModelRoutes(params);
+    registerDashboardTaskRoutes(params);
+}
+//# sourceMappingURL=DashboardApiRoutes.js.map

package/bin/http/dashboard/DashboardApiRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DashboardApiRoutes.js","sourceRoot":"","sources":["../../../src/http/dashboard/DashboardApiRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,oCAAoC,EAAE,MAAM,kDAAkD,CAAC;AACxG,OAAO,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAE7E;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAwC;IAExC,oCAAoC,CAAC;QACnC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CAAC;IACH,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IACvC,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrC,2BAA2B,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/bin/http/dashboard/DashboardAuthorizationRoutes.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Dashboard Authorization 路由。
+ *
+ * 关键点（中文）
+ * - 单独承接 `/api/dashboard/authorization*`，避免 DashboardApiRoutes 文件继续膨胀。
+ * - 授权页面的数据统一通过 auth plugin API 读取与写入。
+ */
+import type { Hono } from "hono";
+import type { AgentContext } from "../../types/agent/AgentContext.js";
+/**
+ * 注册 authorization 相关路由。
+ */
+export declare function registerDashboardAuthorizationRoutes(params: {
+    app: Hono;
+    getAgentContext: () => AgentContext;
+}): void;
+//# sourceMappingURL=DashboardAuthorizationRoutes.d.ts.map

package/bin/http/dashboard/DashboardAuthorizationRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DashboardAuthorizationRoutes.d.ts","sourceRoot":"","sources":["../../../src/http/dashboard/DashboardAuthorizationRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmBlE;;GAEG;AACH,wBAAgB,oCAAoC,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,IAAI,CAAC;IACV,eAAe,EAAE,MAAM,YAAY,CAAC;CACrC,GAAG,IAAI,CAkEP"}