@downcity/plugins 1.0.152 → 1.0.156

package/bin/chat/access/ChatAccessService.js

@@ -0,0 +1,281 @@
+/**
+ * Chat Access 应用服务。
+ *
+ * 关键点（中文）
+ * - 所有平台共用相同的 Principal、Grant、Request 和 Audit 业务规则。
+ * - Chat Access 只做准入判定，不向 Agent Session 或其他 Plugin 传播权限。
+ * - 每个方法自行打开并关闭项目级 Store，避免 Channel 生命周期遗漏连接释放。
+ */
+import path from "node:path";
+import { ChatAccessStore } from "../../chat/access/ChatAccessStore.js";
+const CHANNELS = ["telegram", "feishu", "qq"];
+function normalize_text(value) {
+    return String(value || "").trim();
+}
+/** 判断是否为 Chat Access 支持渠道。 */
+export function is_chat_access_channel(value) {
+    return CHANNELS.includes(normalize_text(value).toLowerCase());
+}
+/** 解析管理输入范围。 */
+export function resolve_chat_access_scopes(scope) {
+    if (scope === "all")
+        return ["direct", "group"];
+    if (scope === "direct" || scope === "group")
+        return [scope];
+    throw new Error(`Invalid Chat Access scope: ${scope}`);
+}
+/** 根据平台会话类型解析准入范围。 */
+export function resolve_chat_access_scope(channel, chat_type) {
+    const type = normalize_text(chat_type).toLowerCase();
+    if (!type)
+        return "direct";
+    if (channel === "telegram")
+        return type === "private" ? "direct" : "group";
+    if (channel === "feishu")
+        return type === "p2p" ? "direct" : "group";
+    return type === "private" || type === "c2c" ? "direct" : "group";
+}
+/**
+ * 当前 Agent 的 Chat Access 应用服务。
+ */
+export class ChatAccessService {
+    project_root;
+    constructor(options) {
+        this.project_root = path.resolve(normalize_text(options.project_root) || ".");
+    }
+    with_store(operation) {
+        const store = new ChatAccessStore(this.project_root);
+        try {
+            return operation(store);
+        }
+        finally {
+            store.close();
+        }
+    }
+    /** 观测并规范化平台主体。 */
+    observe_identity(input) {
+        const channel = input.channel;
+        const issuer = normalize_text(input.issuer);
+        const subject_id = normalize_text(input.subject_id);
+        const chat_id = normalize_text(input.chat_id);
+        if (!is_chat_access_channel(channel))
+            throw new Error(`Invalid Chat Access channel: ${channel}`);
+        if (!issuer)
+            throw new Error("Chat Access issuer is required");
+        if (!subject_id)
+            throw new Error("Chat Access subject_id is required");
+        if (!chat_id)
+            throw new Error("Chat Access chat_id is required");
+        return this.with_store((store) => store.upsert_principal({
+            channel,
+            issuer,
+            subject_id,
+            display_name: normalize_text(input.display_name) || undefined,
+            chat_id,
+            chat_type: normalize_text(input.chat_type) || undefined,
+        }));
+    }
+    /** 判定当前消息是否允许进入 Agent。 */
+    evaluate(input) {
+        const scope = resolve_chat_access_scope(input.channel, input.chat_type);
+        const issuer = normalize_text(input.issuer);
+        const subject_id = normalize_text(input.subject_id);
+        const chat_id = normalize_text(input.chat_id);
+        if (!issuer || !subject_id || !chat_id) {
+            return {
+                allowed: false,
+                principal_id: "",
+                scope,
+                reason: "identity_missing",
+            };
+        }
+        return this.with_store((store) => store.transaction(() => {
+            const principal = store.upsert_principal({
+                channel: input.channel,
+                issuer,
+                subject_id,
+                display_name: normalize_text(input.display_name) || undefined,
+                chat_id,
+                chat_type: normalize_text(input.chat_type) || undefined,
+            });
+            const grant = store.get_grant(principal.principal_id, scope);
+            if (grant?.effect === "deny") {
+                store.insert_audit_event({
+                    principal_id: principal.principal_id,
+                    action: "message_blocked",
+                    scope,
+                    decision: "deny",
+                    detail: { reason: "grant_denied" },
+                });
+                return {
+                    allowed: false,
+                    principal_id: principal.principal_id,
+                    scope,
+                    reason: "grant_denied",
+                };
+            }
+            if (grant?.effect === "allow") {
+                store.insert_audit_event({
+                    principal_id: principal.principal_id,
+                    action: "message_allowed",
+                    scope,
+                    decision: "allow",
+                });
+                return {
+                    allowed: true,
+                    principal_id: principal.principal_id,
+                    scope,
+                    reason: "grant_allowed",
+                };
+            }
+            const request_result = store.create_or_touch_request({
+                principal_id: principal.principal_id,
+                scope,
+                chat_id,
+                chat_type: normalize_text(input.chat_type),
+            });
+            store.insert_audit_event({
+                principal_id: principal.principal_id,
+                request_id: request_result.request.request_id,
+                action: request_result.created ? "request_created" : "request_reused",
+                scope,
+                decision: "block",
+            });
+            return {
+                allowed: false,
+                principal_id: principal.principal_id,
+                scope,
+                reason: "request_pending",
+                request_id: request_result.request.request_id,
+            };
+        }));
+    }
+    /** 批准待处理请求。 */
+    approve_request(input) {
+        return this.resolve_request_with_effect({
+            request_id: input.request_id,
+            scope: input.scope,
+            operator: input.operator,
+            effect: "allow",
+        });
+    }
+    /** 拒绝待处理请求。 */
+    deny_request(input) {
+        return this.resolve_request_with_effect({
+            request_id: input.request_id,
+            scope: input.scope,
+            operator: input.operator,
+            effect: "deny",
+        });
+    }
+    resolve_request_with_effect(input) {
+        const request_id = normalize_text(input.request_id);
+        const operator = normalize_text(input.operator) || "unknown";
+        if (!request_id)
+            throw new Error("Chat Access request_id is required");
+        return this.with_store((store) => store.transaction(() => {
+            const request = store.get_request(request_id);
+            if (!request || request.status !== "pending") {
+                throw new Error(`Pending Chat Access request not found: ${request_id}`);
+            }
+            const scopes = resolve_chat_access_scopes(input.scope || request.scope);
+            const grants = scopes.map((scope) => store.upsert_grant({
+                principal_id: request.principal_id,
+                scope,
+                effect: input.effect,
+                operator,
+            }));
+            const status = input.effect === "allow" ? "approved" : "denied";
+            store.resolve_pending_requests({
+                principal_id: request.principal_id,
+                scopes,
+                status,
+                operator,
+            });
+            store.insert_audit_event({
+                principal_id: request.principal_id,
+                request_id,
+                action: input.effect === "allow" ? "request_approved" : "request_denied",
+                scope: request.scope,
+                decision: input.effect,
+                operator,
+                detail: { scopes },
+            });
+            return grants;
+        }));
+    }
+    /** 直接设置已知主体的 Allow/Deny。 */
+    set_principal_effect(input) {
+        const principal_id = normalize_text(input.principal_id);
+        const operator = normalize_text(input.operator) || "unknown";
+        if (!principal_id)
+            throw new Error("Chat Access principal_id is required");
+        return this.with_store((store) => store.transaction(() => {
+            const principal = store.get_principal(principal_id);
+            if (!principal)
+                throw new Error(`Chat Access principal not found: ${principal_id}`);
+            const scopes = resolve_chat_access_scopes(input.scope);
+            const grants = scopes.map((scope) => store.upsert_grant({
+                principal_id,
+                scope,
+                effect: input.effect,
+                operator,
+            }));
+            store.resolve_pending_requests({
+                principal_id,
+                scopes,
+                status: input.effect === "allow" ? "approved" : "denied",
+                operator,
+            });
+            store.insert_audit_event({
+                principal_id,
+                action: "grant_updated",
+                decision: input.effect,
+                operator,
+                detail: { scopes },
+            });
+            return grants;
+        }));
+    }
+    /** 撤销主体指定范围的 Grant。 */
+    revoke_grant(input) {
+        const principal_id = normalize_text(input.principal_id);
+        const operator = normalize_text(input.operator) || "unknown";
+        if (!principal_id)
+            throw new Error("Chat Access principal_id is required");
+        return this.with_store((store) => store.transaction(() => {
+            const principal = store.get_principal(principal_id);
+            if (!principal)
+                throw new Error(`Chat Access principal not found: ${principal_id}`);
+            const scopes = resolve_chat_access_scopes(input.scope);
+            let removed_count = 0;
+            for (const scope of scopes) {
+                if (store.delete_grant(principal_id, scope))
+                    removed_count += 1;
+            }
+            store.insert_audit_event({
+                principal_id,
+                action: "grant_revoked",
+                operator,
+                detail: { scopes, removed_count },
+            });
+            return removed_count;
+        }));
+    }
+    /** 列出主体和 Grant。 */
+    list_principals() {
+        return this.with_store((store) => store.list_principals());
+    }
+    /** 列出 Access Request。 */
+    list_requests(status) {
+        return this.with_store((store) => store.list_requests(status));
+    }
+    /** 读取完整 Chat Access 快照。 */
+    snapshot() {
+        return this.with_store((store) => ({
+            principals: store.list_principals(),
+            requests: store.list_requests(),
+        }));
+    }
+}
+//# sourceMappingURL=ChatAccessService.js.map

package/bin/chat/access/ChatAccessService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChatAccessService.js","sourceRoot":"","sources":["../../../src/chat/access/ChatAccessService.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAqBnE,MAAM,QAAQ,GAA0B,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAErE,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAyB,CAAC,CAAC;AACvF,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,0BAA0B,CAAC,KAA2B;IACpE,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,sBAAsB;AACtB,MAAM,UAAU,yBAAyB,CACvC,OAA4B,EAC5B,SAAkB;IAElB,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC3B,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3E,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACrE,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,YAAY,CAAS;IACtC,YAAY,OAAiC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC;IAChF,CAAC;IAEO,UAAU,CAAI,SAAwC;QAC5D,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,gBAAgB,CAAC,KAA8B;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;YACvD,OAAO;YACP,MAAM;YACN,UAAU;YACV,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,SAAS;YAC7D,OAAO;YACP,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS;SACxD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,0BAA0B;IAC1B,QAAQ,CAAC,KAA8B;QACrC,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,EAAE;gBAChB,KAAK;gBACL,MAAM,EAAE,kBAAkB;aAC3B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;YACvD,MAAM,SAAS,GAAG,KAAK,CAAC,gBAAgB,CAAC;gBACvC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM;gBACN,UAAU;gBACV,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,SAAS;gBAC7D,OAAO;gBACP,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS;aACxD,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7B,KAAK,CAAC,kBAAkB,CAAC;oBACvB,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,MAAM,EAAE,iBAAiB;oBACzB,KAAK;oBACL,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE;iBACnC,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,KAAK;oBACL,MAAM,EAAE,cAAc;iBACvB,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,KAAK,CAAC,kBAAkB,CAAC;oBACvB,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,MAAM,EAAE,iBAAiB;oBACzB,KAAK;oBACL,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,KAAK;oBACL,MAAM,EAAE,eAAe;iBACxB,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,uBAAuB,CAAC;gBACnD,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,KAAK;gBACL,OAAO;gBACP,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;aAC3C,CAAC,CAAC;YACH,KAAK,CAAC,kBAAkB,CAAC;gBACvB,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU;gBAC7C,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB;gBACrE,KAAK;gBACL,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,KAAK;gBACL,MAAM,EAAE,iBAAiB;gBACzB,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU;aAC9C,CAAC;QACJ,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,eAAe;IACf,eAAe,CAAC,KAAoC;QAClD,OAAO,IAAI,CAAC,2BAA2B,CAAC;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC;IAED,eAAe;IACf,YAAY,CAAC,KAAiC;QAC5C,OAAO,IAAI,CAAC,2BAA2B,CAAC;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IAEO,2BAA2B,CAAC,KAKnC;QACC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;QAC7D,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;YACvD,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;gBACtD,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,KAAK;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ;aACT,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;YAChE,KAAK,CAAC,wBAAwB,CAAC;gBAC7B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM;gBACN,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;YACH,KAAK,CAAC,kBAAkB,CAAC;gBACvB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU;gBACV,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB;gBACxE,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,QAAQ;gBACR,MAAM,EAAE,EAAE,MAAM,EAAE;aACnB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,4BAA4B;IAC5B,oBAAoB,CAAC,KAAwC;QAC3D,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;QAC7D,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;YACvD,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,YAAY,EAAE,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;gBACtD,YAAY;gBACZ,KAAK;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ;aACT,CAAC,CAAC,CAAC;YACJ,KAAK,CAAC,wBAAwB,CAAC;gBAC7B,YAAY;gBACZ,MAAM;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;gBACxD,QAAQ;aACT,CAAC,CAAC;YACH,KAAK,CAAC,kBAAkB,CAAC;gBACvB,YAAY;gBACZ,MAAM,EAAE,eAAe;gBACvB,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,QAAQ;gBACR,MAAM,EAAE,EAAE,MAAM,EAAE;aACnB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,uBAAuB;IACvB,YAAY,CAAC,KAAiC;QAC5C,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;QAC7D,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;YACvD,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,YAAY,EAAE,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC;oBAAE,aAAa,IAAI,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,CAAC,kBAAkB,CAAC;gBACvB,YAAY;gBACZ,MAAM,EAAE,eAAe;gBACvB,QAAQ;gBACR,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;aAClC,CAAC,CAAC;YACH,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,mBAAmB;IACnB,eAAe;QACb,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,yBAAyB;IACzB,aAAa,CAAC,MAAgC;QAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,2BAA2B;IAC3B,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjC,UAAU,EAAE,KAAK,CAAC,eAAe,EAAE;YACnC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE;SAChC,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/bin/chat/access/ChatAccessStore.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Chat Access SQLite Store。
+ *
+ * 关键点（中文）
+ * - 该 Store 是当前 Agent Chat Access 的唯一持久化入口。
+ * - 所有字段先归一化再写入，避免平台适配器差异污染查询键。
+ * - Service 负责业务编排，Store 只负责结构化读写和事务。
+ */
+import type { ChatAccessGrant, ChatAccessPrincipal, ChatAccessPrincipalView, ChatAccessRequest, ChatAccessRequestStatus, ChatAccessRequestView, ChatAccessScope, CreateChatAccessRequestInput, CreateChatAccessRequestResult, InsertChatAccessAuditEventInput, ResolveChatAccessRequestStoreInput, ResolvePendingChatAccessRequestsInput, UpsertChatAccessGrantInput, UpsertChatAccessPrincipalInput } from "../../chat/types/ChatAccess.js";
+import type { ChatDispatchChannel } from "../../chat/types/ChatDispatcher.js";
+/**
+ * 返回项目级 Chat Access 数据库路径。
+ */
+export declare function get_chat_access_db_path(project_root: string): string;
+/**
+ * 当前 Agent 的 Chat Access SQLite Store。
+ */
+export declare class ChatAccessStore {
+    private readonly database;
+    /**
+     * 打开当前项目 Chat Access 数据库。
+     */
+    constructor(project_root: string);
+    /** 关闭数据库连接。 */
+    close(): void;
+    /** 在单个 SQLite 事务中执行操作。 */
+    transaction<T>(operation: () => T): T;
+    /** 读取 Store 元信息。 */
+    get_meta(key: string): string | null;
+    /** 写入 Store 元信息。 */
+    set_meta(key: string, value: string): void;
+    /** 判断是否已经存在业务数据。 */
+    has_access_data(): boolean;
+    /** 读取指定平台身份对应主体。 */
+    get_principal_by_identity(input: {
+        channel: ChatDispatchChannel;
+        issuer: string;
+        subject_id: string;
+    }): ChatAccessPrincipal | null;
+    /** 按 Principal ID 读取主体。 */
+    get_principal(principal_id: string): ChatAccessPrincipal | null;
+    /** 新增或更新观测主体。 */
+    upsert_principal(input: UpsertChatAccessPrincipalInput): ChatAccessPrincipal;
+    /** 读取指定主体和范围的 Grant。 */
+    get_grant(principal_id: string, scope: ChatAccessScope): ChatAccessGrant | null;
+    /** 新增或更新 Grant。 */
+    upsert_grant(input: UpsertChatAccessGrantInput): ChatAccessGrant;
+    /** 删除指定主体和范围的 Grant。 */
+    delete_grant(principal_id: string, scope: ChatAccessScope): boolean;
+    /** 读取指定主体全部 Grant。 */
+    list_grants(principal_id: string): ChatAccessGrant[];
+    /** 读取 Request。 */
+    get_request(request_id: string): ChatAccessRequest | null;
+    /** 创建或复用 pending Request。 */
+    create_or_touch_request(input: CreateChatAccessRequestInput): CreateChatAccessRequestResult;
+    /** 解决指定 Request。 */
+    resolve_request(input: ResolveChatAccessRequestStoreInput): ChatAccessRequest;
+    /** 解决指定主体和范围内的全部 pending Request。 */
+    resolve_pending_requests(input: ResolvePendingChatAccessRequestsInput): void;
+    /** 列出 Request 及主体详情。 */
+    list_requests(status?: ChatAccessRequestStatus): ChatAccessRequestView[];
+    /** 列出所有主体和 Grant。 */
+    list_principals(): ChatAccessPrincipalView[];
+    /** 写入审计事件。 */
+    insert_audit_event(input: InsertChatAccessAuditEventInput): void;
+}
+//# sourceMappingURL=ChatAccessStore.d.ts.map

package/bin/chat/access/ChatAccessStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChatAccessStore.d.ts","sourceRoot":"","sources":["../../../src/chat/access/ChatAccessStore.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAEV,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,+BAA+B,EAC/B,kCAAkC,EAClC,qCAAqC,EACrC,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAI1E;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEpE;AAoFD;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAE7C;;OAEG;gBACS,YAAY,EAAE,MAAM;IAYhC,eAAe;IACf,KAAK,IAAI,IAAI;IAIb,0BAA0B;IAC1B,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;IAIrC,oBAAoB;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAOpC,oBAAoB;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAW1C,oBAAoB;IACpB,eAAe,IAAI,OAAO;IAU1B,oBAAoB;IACpB,yBAAyB,CAAC,KAAK,EAAE;QAC/B,OAAO,EAAE,mBAAmB,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,mBAAmB,GAAG,IAAI;IAa9B,2BAA2B;IAC3B,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAS/D,iBAAiB;IACjB,gBAAgB,CAAC,KAAK,EAAE,8BAA8B,GAAG,mBAAmB;IAgC5E,wBAAwB;IACxB,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,eAAe,GAAG,IAAI;IAS/E,mBAAmB;IACnB,YAAY,CAAC,KAAK,EAAE,0BAA0B,GAAG,eAAe;IA0BhE,wBAAwB;IACxB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO;IAQnE,sBAAsB;IACtB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,EAAE;IASpD,kBAAkB;IAClB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IASzD,6BAA6B;IAC7B,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,6BAA6B;IA4C3F,oBAAoB;IACpB,eAAe,CAAC,KAAK,EAAE,kCAAkC,GAAG,iBAAiB;IAqB7E,qCAAqC;IACrC,wBAAwB,CAAC,KAAK,EAAE,qCAAqC,GAAG,IAAI;IAoB5E,wBAAwB;IACxB,aAAa,CAAC,MAAM,CAAC,EAAE,uBAAuB,GAAG,qBAAqB,EAAE;IAsBxE,qBAAqB;IACrB,eAAe,IAAI,uBAAuB,EAAE;IAiB5C,cAAc;IACd,kBAAkB,CAAC,KAAK,EAAE,+BAA+B,GAAG,IAAI;CAkBjE"}