@downcity/city 1.1.4 → 1.1.5

package/src/cli/service/Services.ts

@@ -0,0 +1,189 @@
+/**
+ * `city service` 命令组。
+ *
+ * 关键点（中文）
+ * - `city service` 现在承担 console 侧静态 service catalog 入口。
+ * - `list/status` 不依赖 agent，仅展示已注册 service 的静态能力。
+ * - 具体 agent runtime lifecycle 应优先通过 `city <service>` 命令访问。
+ */
+
+import type { Command } from "commander";
+import { listRegisteredServices } from "@downcity/agent";
+import { printResult } from "@/utils/cli/CliOutput.js";
+import type { Service } from "@downcity/agent";
+import {
+  runServiceCommandBridge,
+  runServiceControlCommand,
+} from "./ServiceCommandRemote.js";
+import { registerServiceScheduleCommands } from "./ServiceScheduleCommand.js";
+import type { ServiceCliBaseOptions } from "@downcity/agent";
+import { parseBoolean, parsePort } from "../shared/IndexSupport.js";
+
+function toStaticServiceView(service: Service): {
+  name: string;
+  scope: "agent";
+  supportsLifecycle: boolean;
+  supportsCommand: boolean;
+  actions: string[];
+} {
+  return {
+    name: service.name,
+    scope: "agent",
+    supportsLifecycle: Boolean(service.lifecycle?.start || service.lifecycle?.stop),
+    supportsCommand: Object.keys(service.actions || {}).length > 0 || Boolean(service.lifecycle?.command),
+    actions: Object.keys(service.actions || {}).sort((left, right) => left.localeCompare(right)),
+  };
+}
+
+function printStaticServiceList(params?: {
+  asJson?: boolean;
+}): void {
+  const services = listRegisteredServices()
+    .map((service) => toStaticServiceView(service))
+    .sort((left, right) => left.name.localeCompare(right.name));
+  printResult({
+    asJson: params?.asJson,
+    success: true,
+    title: "service catalog",
+    payload: {
+      count: services.length,
+      services,
+    },
+  });
+}
+
+function printStaticServiceStatus(params: {
+  serviceName: string;
+  asJson?: boolean;
+}): void {
+  const service = listRegisteredServices().find((item) => item.name === params.serviceName);
+  if (!service) {
+    printResult({
+      asJson: params.asJson,
+      success: false,
+      title: "service status failed",
+      payload: {
+        error: `Unknown service: ${params.serviceName}`,
+      },
+    });
+    return;
+  }
+
+  printResult({
+    asJson: params.asJson,
+    success: true,
+    title: "service status",
+    payload: {
+      service: toStaticServiceView(service),
+    },
+  });
+}
+
+/**
+ * 注册 `service` 命令组。
+ */
+export function registerServicesCommand(program: Command): void {
+  const service = program
+    .command("service")
+    .description("查看 service catalog，并提供高级 agent 定向入口")
+    .helpOption("--help", "display help for command");
+
+  service
+    .command("list")
+    .description("列出全部已注册 service 的静态能力")
+    .option("--json [enabled]", "以 JSON 输出", parseBoolean, true)
+    .action(async (opts: { json?: boolean }) => {
+      printStaticServiceList({
+        asJson: opts.json !== false,
+      });
+    });
+
+  service
+    .command("status <serviceName>")
+    .description("查看单个 service 的静态能力")
+    .option("--json [enabled]", "以 JSON 输出", parseBoolean, true)
+    .action(async (serviceName: string, opts: { json?: boolean }) => {
+      printStaticServiceStatus({
+        serviceName,
+        asJson: opts.json !== false,
+      });
+    });
+
+  service
+    .command("start <serviceName>")
+    .description("高级用法：按 agent 目标启动 service")
+    .option("--path <path>", "项目根目录（默认当前目录）", ".")
+    .option("--agent <name>", "agent 名称（从 managed agent registry 解析）")
+    .option("--host <host>", "Server host（覆盖自动解析）")
+    .option("--port <port>", "Server port（覆盖自动解析）", parsePort)
+    .option("--token <token>", "覆盖 Bearer Token（仅远程 HTTP 调用需要；默认本地走 IPC）")
+    .option("--json [enabled]", "以 JSON 输出", parseBoolean, true)
+    .action(async (serviceName: string, opts: ServiceCliBaseOptions) => {
+      await runServiceControlCommand({
+        serviceName,
+        action: "start",
+        options: opts,
+      });
+    });
+
+  service
+    .command("stop <serviceName>")
+    .description("高级用法：按 agent 目标停止 service")
+    .option("--path <path>", "项目根目录（默认当前目录）", ".")
+    .option("--agent <name>", "agent 名称（从 managed agent registry 解析）")
+    .option("--host <host>", "Server host（覆盖自动解析）")
+    .option("--port <port>", "Server port（覆盖自动解析）", parsePort)
+    .option("--token <token>", "覆盖 Bearer Token（仅远程 HTTP 调用需要；默认本地走 IPC）")
+    .option("--json [enabled]", "以 JSON 输出", parseBoolean, true)
+    .action(async (serviceName: string, opts: ServiceCliBaseOptions) => {
+      await runServiceControlCommand({
+        serviceName,
+        action: "stop",
+        options: opts,
+      });
+    });
+
+  service
+    .command("restart <serviceName>")
+    .description("高级用法：按 agent 目标重启 service")
+    .option("--path <path>", "项目根目录（默认当前目录）", ".")
+    .option("--agent <name>", "agent 名称（从 managed agent registry 解析）")
+    .option("--host <host>", "Server host（覆盖自动解析）")
+    .option("--port <port>", "Server port（覆盖自动解析）", parsePort)
+    .option("--token <token>", "覆盖 Bearer Token（仅远程 HTTP 调用需要；默认本地走 IPC）")
+    .option("--json [enabled]", "以 JSON 输出", parseBoolean, true)
+    .action(async (serviceName: string, opts: ServiceCliBaseOptions) => {
+      await runServiceControlCommand({
+        serviceName,
+        action: "restart",
+        options: opts,
+      });
+    });
+
+  service
+    .command("command <serviceName> <command>")
+    .description("高级用法：按 agent 目标转发 service command")
+    .option("--payload <json>", "可选 payload（JSON 字符串或普通字符串）")
+    .option("--path <path>", "项目根目录（默认当前目录）", ".")
+    .option("--agent <name>", "agent 名称（从 managed agent registry 解析）")
+    .option("--host <host>", "Server host（覆盖自动解析）")
+    .option("--port <port>", "Server port（覆盖自动解析）", parsePort)
+    .option("--token <token>", "覆盖 Bearer Token（仅远程 HTTP 调用需要；默认本地走 IPC）")
+    .option("--json [enabled]", "以 JSON 输出", parseBoolean, true)
+    .action(
+    async (
+      serviceName: string,
+      command: string,
+      opts: ServiceCliBaseOptions & { payload?: string },
+    ) => {
+      await runServiceCommandBridge({
+        serviceName,
+        command,
+        payloadRaw: opts.payload,
+        options: opts,
+      });
+    },
+  );
+
+  registerServiceScheduleCommands(service);
+}

package/src/cli/shared/ChatAuth.ts

@@ -0,0 +1,203 @@
+/**
+ * `city chat auth` CLI 辅助模块。
+ *
+ * 关键点（中文）
+ * - chat authorization 现在按 agent projectRoot 隔离存储。
+ * - 授权主体使用 `<platform>:<platformUserId>`，例如 `telegram:12345678`。
+ * - 管理员执行 `city chat auth set telegram:12345678` 后交互式选择 role。
+ */
+
+import path from "node:path";
+import prompts from "prompts";
+import type { Command } from "commander";
+import {
+  listChatAuthorizationRoles,
+  readChatAuthorizationConfigSync,
+  resolveAuthorizedUserRole,
+  setChatAuthorizationUserRole,
+} from "@downcity/agent";
+import { emitCliBlock } from "./CliReporter.js";
+import { parseBoolean } from "./IndexSupport.js";
+import {
+  isChatAuthorizationChannel,
+  type ChatAuthorizationChannel,
+  type ChatAuthorizationRole,
+} from "@downcity/agent";
+
+type ChatAuthSetOptions = {
+  /**
+   * 非交互式直接指定 roleId。
+   */
+  role?: string;
+  /**
+   * 目标 agent 项目根目录。
+   */
+  path?: string;
+  /**
+   * 是否以 JSON 输出。
+   */
+  json?: boolean;
+};
+
+type ParsedPrincipal = {
+  /**
+   * 授权主体所在平台。
+   */
+  channel: ChatAuthorizationChannel;
+  /**
+   * 平台用户 ID。
+   */
+  userId: string;
+};
+
+function resolveChatAuthProjectRoot(pathInput?: string): string {
+  return path.resolve(String(pathInput || "."));
+}
+
+function parsePrincipal(principalInput: string): ParsedPrincipal {
+  const principal = String(principalInput || "").trim();
+  const separator = principal.indexOf(":");
+  if (separator <= 0 || separator === principal.length - 1) {
+    throw new Error("principal 格式应为 <platform>:<userId>，例如 telegram:12345678");
+  }
+  const channel = principal.slice(0, separator).trim().toLowerCase();
+  const userId = principal.slice(separator + 1).trim();
+  if (!isChatAuthorizationChannel(channel)) {
+    throw new Error("platform 仅支持 telegram、feishu、qq");
+  }
+  if (!userId) {
+    throw new Error("userId 不能为空");
+  }
+  return { channel, userId };
+}
+
+function findRole(roles: ChatAuthorizationRole[], roleId: string): ChatAuthorizationRole | null {
+  return roles.find((role) => role.roleId === roleId) || null;
+}
+
+async function chooseRole(params: {
+  roles: ChatAuthorizationRole[];
+  currentRoleId?: string;
+}): Promise<ChatAuthorizationRole | null> {
+  const initial = Math.max(
+    0,
+    params.roles.findIndex((role) => role.roleId === params.currentRoleId),
+  );
+  const response = (await prompts({
+    type: "select",
+    name: "roleId",
+    message: "选择新的 auth role",
+    choices: params.roles.map((role) => ({
+      title: role.roleId,
+      description: `${role.name} · ${role.permissions.length} permissions`,
+      value: role.roleId,
+    })),
+    initial,
+  })) as { roleId?: string };
+  const roleId = String(response.roleId || "").trim();
+  if (!roleId) return null;
+  return findRole(params.roles, roleId);
+}
+
+/**
+ * 设置授权主体角色。
+ */
+export async function runChatAuthSet(params: {
+  principal: string;
+  options?: ChatAuthSetOptions;
+}): Promise<void> {
+  const principal = parsePrincipal(params.principal);
+  const projectRoot = resolveChatAuthProjectRoot(params.options?.path);
+  const config = readChatAuthorizationConfigSync(projectRoot);
+  const roles = listChatAuthorizationRoles({ config });
+  const currentRole = resolveAuthorizedUserRole({
+    channel: principal.channel,
+    userId: principal.userId,
+    authorizationConfig: config,
+    rootPath: projectRoot,
+  });
+
+  let nextRole: ChatAuthorizationRole | null = null;
+  const explicitRoleId = String(params.options?.role || "").trim();
+  if (explicitRoleId) {
+    nextRole = findRole(roles, explicitRoleId);
+    if (!nextRole) throw new Error(`Unknown role: ${explicitRoleId}`);
+  } else {
+    emitCliBlock({
+      tone: "info",
+      title: "Chat auth principal",
+      facts: [
+        { label: "Principal", value: `${principal.channel}:${principal.userId}` },
+        { label: "Current role", value: currentRole?.roleId || "default" },
+        { label: "Scope", value: "agent project" },
+        { label: "Project", value: projectRoot },
+      ],
+    });
+    nextRole = await chooseRole({
+      roles,
+      currentRoleId: currentRole?.roleId,
+    });
+  }
+
+  if (!nextRole) return;
+
+  await setChatAuthorizationUserRole({
+    context: {
+      rootPath: projectRoot,
+    },
+    channel: principal.channel,
+    userId: principal.userId,
+    roleId: nextRole.roleId,
+  });
+
+  emitCliBlock({
+    tone: "success",
+    title: "Chat auth role updated",
+    summary: `${principal.channel}:${principal.userId} -> ${nextRole.roleId}`,
+    facts: [
+      { label: "Role", value: nextRole.name },
+      { label: "Scope", value: "agent project" },
+      { label: "Project", value: projectRoot },
+    ],
+  });
+}
+
+/**
+ * 交互式输入授权主体并设置角色。
+ */
+export async function runInteractiveChatAuthSetFlow(options?: ChatAuthSetOptions): Promise<void> {
+  const response = (await prompts({
+    type: "text",
+    name: "principal",
+    message: "输入授权主体（例如 telegram:12345678）",
+  })) as { principal?: string };
+  const principal = String(response.principal || "").trim();
+  if (!principal) return;
+  await runChatAuthSet({
+    principal,
+    options,
+  });
+}
+
+/**
+ * 注册 `city chat auth` 命令。
+ */
+export function registerChatAuthCommands(chat: Command): void {
+  const auth = chat
+    .command("auth")
+    .description("管理当前 agent 项目的 chat authorization")
+    .helpOption("--help", "display help for command");
+
+  auth
+    .command("set <principal>")
+    .description("给授权主体设置角色，例如：city chat auth set telegram:12345678 --path .")
+    .option("--path <path>", "agent 项目根目录（默认当前目录）", ".")
+    .option("--role <roleId>", "直接指定 roleId；不传则交互式选择")
+    .option("--json [enabled]", "以 JSON 输出", parseBoolean, false)
+    .action(async (principal: string, options: ChatAuthSetOptions) => {
+      await runChatAuthSet({
+        principal,
+        options,
+      });
+    });
+}