@downcity/plugins 1.0.153 → 1.0.157

package/bin/chat/runtime/ChatAuthorizationRuntime.js

@@ -1,230 +0,0 @@
-/**
- * ChatAuthorizationRuntime：ChatPlugin 内置授权能力。
- *
- * 关键点（中文）
- * - 授权能力归属于 ChatPlugin，不再作为独立 plugin 注册。
- * - chat runtime 仍通过通用 plugin hook / resolve 点调用，保持执行链路统一。
- * - action 名称统一带 `authorization-` 前缀，避免和 chat 会话动作混淆。
- */
-import { createAction } from "@downcity/agent";
-import { z } from "zod";
-import { CHAT_PLUGIN_POINTS } from "../../chat/runtime/PluginPoints.js";
-import { CHAT_AUTHORIZATION_ACTIONS, CHAT_AUTHORIZATION_CATALOG, } from "../../auth/types/AuthPlugin.js";
-import { readChatAuthorizationConfig, setChatAuthorizationUserRole, writeChatAuthorizationConfig, } from "../../auth/runtime/AuthorizationConfig.js";
-import { evaluateIncomingChatAuthorization, resolveAuthorizedUserRole, } from "../../auth/runtime/AuthorizationPolicy.js";
-import { readAuthorizationSnapshot, recordObservedAuthorizationPrincipal, } from "../../auth/runtime/AuthorizationStore.js";
-function toChannel(value) {
-    const text = String(value || "").trim().toLowerCase();
-    if (text === "telegram" || text === "feishu" || text === "qq")
-        return text;
-    return null;
-}
-function toRecord(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        return {};
-    return value;
-}
-function toEvaluateInput(payload) {
-    const channel = toChannel(payload.channel);
-    if (!channel) {
-        throw new Error("chat.authorizeIncoming requires a valid channel");
-    }
-    return {
-        channel,
-        chatId: String(payload.chatId || "").trim(),
-        ...(typeof payload.chatType === "string" ? { chatType: payload.chatType.trim() } : {}),
-        ...(typeof payload.userId === "string" ? { userId: payload.userId.trim() } : {}),
-        ...(typeof payload.username === "string" ? { username: payload.username.trim() } : {}),
-        ...(typeof payload.chatTitle === "string" ? { chatTitle: payload.chatTitle.trim() } : {}),
-    };
-}
-function toSnapshotData(snapshot) {
-    return {
-        catalog: CHAT_AUTHORIZATION_CATALOG,
-        config: snapshot.config,
-        users: snapshot.users,
-        chats: snapshot.chats,
-    };
-}
-/**
- * 创建 ChatPlugin 内置授权 hooks。
- */
-export function createChatAuthorizationHooks() {
-    return {
-        guard: {
-            [CHAT_PLUGIN_POINTS.authorizeIncoming]: [
-                async ({ context, value }) => {
-                    const input = value && typeof value === "object" && !Array.isArray(value)
-                        ? value
-                        : {};
-                    const evaluateInput = toEvaluateInput(input);
-                    const authorizationConfig = readChatAuthorizationConfig(context);
-                    const result = evaluateIncomingChatAuthorization({
-                        config: context.config,
-                        channel: evaluateInput.channel,
-                        input: evaluateInput,
-                        authorizationConfig,
-                    });
-                    if (result.decision !== "allow") {
-                        throw new Error(result.reason || "chat authorization blocked");
-                    }
-                },
-            ],
-        },
-        effect: {
-            [CHAT_PLUGIN_POINTS.observePrincipal]: [
-                async ({ context, value }) => {
-                    const input = toRecord(value);
-                    const channel = toChannel(input.channel);
-                    if (!channel) {
-                        throw new Error("chat.observePrincipal requires a valid channel");
-                    }
-                    await recordObservedAuthorizationPrincipal({
-                        context,
-                        channel,
-                        chatId: String(input.chatId || "").trim(),
-                        ...(typeof input.chatType === "string"
-                            ? { chatType: input.chatType.trim() }
-                            : {}),
-                        ...(typeof input.chatTitle === "string"
-                            ? { chatTitle: input.chatTitle.trim() }
-                            : {}),
-                        ...(typeof input.userId === "string"
-                            ? { userId: input.userId.trim() }
-                            : {}),
-                        ...(typeof input.username === "string"
-                            ? { username: input.username.trim() }
-                            : {}),
-                    });
-                },
-            ],
-        },
-    };
-}
-/**
- * 创建 ChatPlugin 内置授权 resolve 点。
- */
-export function createChatAuthorizationResolves() {
-    return {
-        [CHAT_PLUGIN_POINTS.resolveUserRole]: async ({ context, value }) => {
-            const input = value && typeof value === "object" && !Array.isArray(value)
-                ? value
-                : {};
-            const channel = toChannel(input.channel);
-            if (!channel) {
-                throw new Error("chat.resolveUserRole requires a valid channel");
-            }
-            const role = resolveAuthorizedUserRole({
-                channel,
-                userId: String(input.userId || "").trim(),
-                rootPath: context.rootPath,
-            });
-            return (role || null);
-        },
-    };
-}
-/**
- * 创建 ChatPlugin 内置授权 actions。
- */
-export function createChatAuthorizationActions() {
-    return {
-        [CHAT_AUTHORIZATION_ACTIONS.snapshot]: createAction({
-            description: "Read chat authorization snapshot (catalog/config/users/chats).",
-            input_schema: {
-                zod: z.object({}).passthrough(),
-                json_schema: { type: "object", properties: {} },
-            },
-            execute: async ({ context }) => {
-                const snapshot = await readAuthorizationSnapshot({
-                    context,
-                });
-                return {
-                    success: true,
-                    data: toSnapshotData(snapshot),
-                };
-            },
-        }),
-        [CHAT_AUTHORIZATION_ACTIONS.readConfig]: createAction({
-            description: "Read current chat authorization config.",
-            input_schema: {
-                zod: z.object({}).passthrough(),
-                json_schema: { type: "object", properties: {} },
-            },
-            execute: async ({ context }) => {
-                return {
-                    success: true,
-                    data: readChatAuthorizationConfig(context),
-                };
-            },
-        }),
-        [CHAT_AUTHORIZATION_ACTIONS.writeConfig]: createAction({
-            description: "Write chat authorization config as a full replacement.",
-            input_schema: {
-                zod: z.object({
-                    config: z.record(z.string(), z.unknown()).optional(),
-                }),
-                json_schema: {
-                    type: "object",
-                    properties: {
-                        config: { type: "object", description: "Authorization config." },
-                    },
-                },
-            },
-            execute: async ({ context, input }) => {
-                const body = toRecord(input);
-                const nextConfig = body.config && typeof body.config === "object" && !Array.isArray(body.config)
-                    ? body.config
-                    : {};
-                await writeChatAuthorizationConfig({
-                    context,
-                    nextConfig,
-                });
-                return {
-                    success: true,
-                    data: readChatAuthorizationConfig(context),
-                };
-            },
-        }),
-        [CHAT_AUTHORIZATION_ACTIONS.setUserRole]: createAction({
-            description: "Set the role for a channel user.",
-            input_schema: {
-                zod: z.object({
-                    channel: z.enum(["telegram", "feishu", "qq"]),
-                    userId: z.string(),
-                    roleId: z.string(),
-                }),
-                json_schema: {
-                    type: "object",
-                    required: ["channel", "userId", "roleId"],
-                    properties: {
-                        channel: { type: "string", enum: ["telegram", "feishu", "qq"] },
-                        userId: { type: "string" },
-                        roleId: { type: "string" },
-                    },
-                },
-            },
-            execute: async ({ context, input }) => {
-                const body = toRecord(input);
-                const channel = toChannel(body.channel);
-                if (!channel) {
-                    return {
-                        success: false,
-                        error: "authorization-set-user-role requires a valid channel",
-                        message: "authorization-set-user-role requires a valid channel",
-                    };
-                }
-                await setChatAuthorizationUserRole({
-                    context,
-                    channel,
-                    userId: String(body.userId || "").trim(),
-                    roleId: String(body.roleId || "").trim(),
-                });
-                return {
-                    success: true,
-                    data: readChatAuthorizationConfig(context),
-                };
-            },
-        }),
-    };
-}
-//# sourceMappingURL=ChatAuthorizationRuntime.js.map

package/bin/chat/runtime/ChatAuthorizationRuntime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ChatAuthorizationRuntime.js","sourceRoot":"","sources":["../../../src/chat/runtime/ChatAuthorizationRuntime.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAO3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,iCAAiC,EACjC,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,oCAAoC,GACrC,MAAM,sCAAsC,CAAC;AAE9C,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,OAAgC;IACvD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC3C,GAAG,CAAC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAmC;IACzD,OAAO;QACL,OAAO,EAAE,0BAAkD;QAC3D,MAAM,EAAE,QAAQ,CAAC,MAA8B;QAC/C,KAAK,EAAE,QAAQ,CAAC,KAA6B;QAC7C,KAAK,EAAE,QAAQ,CAAC,KAA6B;KAC9C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,KAAK,EAAE;YACL,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE;gBACtC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,MAAM,KAAK,GACT,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;wBACzD,CAAC,CAAE,KAAiC;wBACpC,CAAC,CAAC,EAAE,CAAC;oBACT,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;oBAC7C,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;oBACjE,MAAM,MAAM,GAAG,iCAAiC,CAAC;wBAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,aAAa,CAAC,OAAO;wBAC9B,KAAK,EAAE,aAAa;wBACpB,mBAAmB;qBACpB,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;wBAChC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC;aACF;SACF;QACD,MAAM,EAAE;YACN,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE;gBACrC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,MAAM,KAAK,GAAG,QAAQ,CACpB,KAAK,CACiD,CAAC;oBACzD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACzC,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;oBACpE,CAAC;oBACD,MAAM,oCAAoC,CAAC;wBACzC,OAAO;wBACP,OAAO;wBACP,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;wBACzC,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;4BACpC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;4BACrC,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;4BACrC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE;4BACvC,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;4BAClC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;4BACjC,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;4BACpC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;4BACrC,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC,CAAC;gBACL,CAAC;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACjE,MAAM,KAAK,GACT,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACzD,CAAC,CAAE,KAAiC;gBACpC,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,IAAI,GAAG,yBAAyB,CAAC;gBACrC,OAAO;gBACP,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,OAAQ,CAAC,IAAI,IAAI,IAAI,CAA0B,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B;IAC5C,OAAO;QACL,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;YAClD,WAAW,EAAE,gEAAgE;YAC7E,YAAY,EAAE;gBACZ,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC/B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;aAChD;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC;oBAC/C,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC;iBAC/B,CAAC;YACJ,CAAC;SACF,CAAC;QACF,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC;YACpD,WAAW,EAAE,yCAAyC;YACtD,YAAY,EAAE;gBACZ,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC/B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;aAChD;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,2BAA2B,CAAC,OAAO,CAAyB;iBACnE,CAAC;YACJ,CAAC;SACF,CAAC;QACF,CAAC,0BAA0B,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC;YACrD,WAAW,EAAE,wDAAwD;YACrE,YAAY,EAAE;gBACZ,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;oBACZ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;iBACrD,CAAC;gBACF,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;qBACjE;iBACF;aACF;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;gBACpC,MAAM,IAAI,GAAG,QAAQ,CACnB,KAAK,CAC4C,CAAC;gBACpD,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC3E,CAAC,CAAE,IAAI,CAAC,MAAkC;oBAC1C,CAAC,CAAC,EAAE,CAAC;gBACT,MAAM,4BAA4B,CAAC;oBACjC,OAAO;oBACP,UAAU;iBACX,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,2BAA2B,CAAC,OAAO,CAAyB;iBACnE,CAAC;YACJ,CAAC;SACF,CAAC;QACF,CAAC,0BAA0B,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC;YACrD,WAAW,EAAE,kCAAkC;YAC/C,YAAY,EAAE;gBACZ,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;oBACZ,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;oBAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;iBACnB,CAAC;gBACF,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBACzC,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;wBAC/D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC3B;iBACF;aACF;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;gBACpC,MAAM,IAAI,GAAG,QAAQ,CACnB,KAAK,CAC4C,CAAC;gBACpD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,sDAAsD;wBAC7D,OAAO,EAAE,sDAAsD;qBAChE,CAAC;gBACJ,CAAC;gBACD,MAAM,4BAA4B,CAAC;oBACjC,OAAO;oBACP,OAAO;oBACP,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBACxC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;iBACzC,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,2BAA2B,CAAC,OAAO,CAAyB;iBACnE,CAAC;YACJ,CAAC;SACF,CAAC;KACH,CAAC;AACJ,CAAC"}

package/bin/chat/runtime/PluginDispatch.d.ts

@@ -1,43 +0,0 @@
-/**
- * PluginDispatch：chat 领域的 plugin 调用辅助。
- *
- * 关键点（中文）
- * - chat plugin runtime 只依赖这里，不直接依赖某个具体 plugin 模块路径。
- * - 这里封装 chat 领域的 plugin 点调用语义，保持 service 边界稳定。
- */
-import type { AgentContext } from "@downcity/agent";
-import type { ChatAuthorizationEvaluateInput, ChatAuthorizationRole } from "../../auth/types/AuthPlugin.js";
-import type { ChatDispatchChannel } from "../../chat/types/ChatDispatcher.js";
-/**
- * 观测入站主体。
- */
-export declare function observeIncomingChatPrincipal(params: {
-    context: AgentContext;
-    channel: ChatDispatchChannel;
-    chatId: string;
-    chatType?: string;
-    chatTitle?: string;
-    userId?: string;
-    username?: string;
-}): Promise<void>;
-/**
- * 校验入站消息是否允许执行。
- *
- * 关键点（中文）
- * - 这是 guard 语义：允许则静默返回，拒绝则直接抛错。
- * - 这样 chat plugin runtime 可以像处理中间件一样串联 guard 点。
- */
-export declare function guardIncomingChat(params: {
-    context: AgentContext;
-    channel: ChatDispatchChannel;
-    input: ChatAuthorizationEvaluateInput;
-}): Promise<void>;
-/**
- * 解析用户角色。
- */
-export declare function resolveIncomingChatUserRole(params: {
-    context: AgentContext;
-    channel: ChatDispatchChannel;
-    userId?: string;
-}): Promise<ChatAuthorizationRole | undefined>;
-//# sourceMappingURL=PluginDispatch.d.ts.map

package/bin/chat/runtime/PluginDispatch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PluginDispatch.d.ts","sourceRoot":"","sources":["../../../src/chat/runtime/PluginDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,KAAK,EAEV,8BAA8B,EAC9B,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAQ1E;;GAEG;AACH,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAShB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE;IAC9C,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,KAAK,EAAE,8BAA8B,CAAC;CACvC,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhB;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAW7C"}

package/bin/chat/runtime/PluginDispatch.js

@@ -1,57 +0,0 @@
-/**
- * PluginDispatch：chat 领域的 plugin 调用辅助。
- *
- * 关键点（中文）
- * - chat plugin runtime 只依赖这里，不直接依赖某个具体 plugin 模块路径。
- * - 这里封装 chat 领域的 plugin 点调用语义，保持 service 边界稳定。
- */
-import { CHAT_PLUGIN_POINTS } from "../../chat/runtime/PluginPoints.js";
-function toRecord(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        return {};
-    return value;
-}
-/**
- * 观测入站主体。
- */
-export async function observeIncomingChatPrincipal(params) {
-    await params.context.plugins.effect(CHAT_PLUGIN_POINTS.observePrincipal, {
-        channel: params.channel,
-        chatId: params.chatId,
-        ...(params.chatType ? { chatType: params.chatType } : {}),
-        ...(params.chatTitle ? { chatTitle: params.chatTitle } : {}),
-        ...(params.userId ? { userId: params.userId } : {}),
-        ...(params.username ? { username: params.username } : {}),
-    });
-}
-/**
- * 校验入站消息是否允许执行。
- *
- * 关键点（中文）
- * - 这是 guard 语义：允许则静默返回，拒绝则直接抛错。
- * - 这样 chat plugin runtime 可以像处理中间件一样串联 guard 点。
- */
-export async function guardIncomingChat(params) {
-    await params.context.plugins.guard(CHAT_PLUGIN_POINTS.authorizeIncoming, {
-        channel: params.channel,
-        chatId: params.input.chatId,
-        ...(params.input.chatType ? { chatType: params.input.chatType } : {}),
-        ...(params.input.userId ? { userId: params.input.userId } : {}),
-        ...(params.input.username ? { username: params.input.username } : {}),
-        ...(params.input.chatTitle ? { chatTitle: params.input.chatTitle } : {}),
-    });
-}
-/**
- * 解析用户角色。
- */
-export async function resolveIncomingChatUserRole(params) {
-    const result = await params.context.plugins.resolve(CHAT_PLUGIN_POINTS.resolveUserRole, {
-        channel: params.channel,
-        ...(params.userId ? { userId: params.userId } : {}),
-    });
-    const role = toRecord(result);
-    if (!role.roleId)
-        return undefined;
-    return role;
-}
-//# sourceMappingURL=PluginDispatch.js.map

package/bin/chat/runtime/PluginDispatch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PluginDispatch.js","sourceRoot":"","sources":["../../../src/chat/runtime/PluginDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,MAQlD;IACC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,EAAE;QACvE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACW,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAIvC;IACC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAChC,kBAAkB,CAAC,iBAAiB,EACpC;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QAC3B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,MAIjD;IACC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CACjD,kBAAkB,CAAC,eAAe,EAClC;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CACF,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACnC,OAAO,IAAwC,CAAC;AAClD,CAAC"}

package/src/auth/runtime/AuthorizationConfig.ts

@@ -1,247 +0,0 @@
-/**
- * Auth 授权配置读写工具。
- *
- * 关键点（中文）
- * - 静态授权规则直接存放在项目 `.downcity/chat/authorization/config.json`。
- * - 授权核心模型为 role / permission / binding。
- */
-
-import fs from "fs-extra";
-import path from "node:path";
-import type { AgentContext } from "@downcity/agent";
-import type {
-  ChatAuthorizationConfig,
-  ChatAuthorizationChannel,
-  ChatAuthorizationPermission,
-  ChatAuthorizationRole,
-  ChatChannelAuthorizationConfig,
-} from "@/auth/types/AuthPlugin.js";
-import {
-  CHAT_AUTHORIZATION_CHANNELS,
-  CHAT_AUTHORIZATION_PERMISSIONS,
-  createDefaultChatAuthorizationRoles,
-} from "@/auth/types/AuthPlugin.js";
-
-const CHANNELS: ChatAuthorizationChannel[] = [...CHAT_AUTHORIZATION_CHANNELS];
-
-export const DEFAULT_CHAT_AUTHORIZATION_PERMISSIONS: ChatAuthorizationPermission[] = [
-  ...CHAT_AUTHORIZATION_PERMISSIONS,
-];
-
-function normalizeText(value: unknown): string | undefined {
-  const text = String(value || "").trim();
-  return text ? text : undefined;
-}
-
-function normalizePermissionList(values: unknown[] | undefined): ChatAuthorizationPermission[] {
-  const allowed = new Set<string>(DEFAULT_CHAT_AUTHORIZATION_PERMISSIONS);
-  if (!Array.isArray(values)) return [];
-  return [
-    ...new Set(
-      values
-        .map((value) => normalizeText(value))
-        .filter(
-          (value): value is ChatAuthorizationPermission =>
-            Boolean(value && allowed.has(value)),
-        ),
-    ),
-  ];
-}
-
-function buildDefaultRole(roleId: "default" | "member" | "admin"): ChatAuthorizationRole {
-  return createDefaultChatAuthorizationRoles()[roleId];
-}
-
-function normalizeRoleMap(input: unknown): Record<string, ChatAuthorizationRole> {
-  const defaultRoles = createDefaultChatAuthorizationRoles();
-  if (!input || typeof input !== "object" || Array.isArray(input)) return defaultRoles;
-  const roles: Record<string, ChatAuthorizationRole> = {};
-  for (const [rawRoleId, rawRole] of Object.entries(input)) {
-    const roleId = normalizeText(rawRoleId);
-    if (!roleId) continue;
-    const roleObj =
-      rawRole && typeof rawRole === "object" && !Array.isArray(rawRole)
-        ? (rawRole as {
-            name?: unknown;
-            description?: unknown;
-            permissions?: unknown[];
-            roleId?: unknown;
-          })
-        : null;
-    if (!roleObj) continue;
-    const builtinRole = defaultRoles[roleId];
-    roles[roleId] = {
-      roleId,
-      name: normalizeText(roleObj.name) || builtinRole?.name || roleId,
-      ...(normalizeText(roleObj.description) || builtinRole?.description
-        ? {
-            description:
-              normalizeText(roleObj.description) || builtinRole?.description || undefined,
-          }
-        : {}),
-      permissions: normalizePermissionList(roleObj.permissions),
-    };
-  }
-  if (Object.keys(roles).length === 0) return defaultRoles;
-  if (!roles.default) roles.default = buildDefaultRole("default");
-  return roles;
-}
-
-function normalizeBindingMap(
-  input: unknown,
-  roles: Record<string, ChatAuthorizationRole>,
-): Record<string, string> {
-  if (!input || typeof input !== "object" || Array.isArray(input)) return {};
-  const out: Record<string, string> = {};
-  for (const [rawId, rawRoleId] of Object.entries(input)) {
-    const entityId = normalizeText(rawId);
-    const roleId = normalizeText(rawRoleId);
-    if (!entityId || !roleId || !roles[roleId]) continue;
-    out[entityId] = roleId;
-  }
-  return out;
-}
-
-function normalizeChannelConfig(
-  input: unknown,
-  roles: Record<string, ChatAuthorizationRole>,
-): ChatChannelAuthorizationConfig {
-  const raw =
-    input && typeof input === "object" && !Array.isArray(input)
-      ? (input as {
-          defaultUserRoleId?: unknown;
-          userRoles?: unknown;
-        })
-      : {};
-  const defaultUserRoleId = normalizeText(raw.defaultUserRoleId) || "default";
-  return {
-    defaultUserRoleId: roles[defaultUserRoleId] ? defaultUserRoleId : "default",
-    userRoles: normalizeBindingMap(raw.userRoles, roles),
-  };
-}
-
-function normalizeAuthorizationConfig(input: unknown): ChatAuthorizationConfig {
-  const raw =
-    input && typeof input === "object" && !Array.isArray(input)
-      ? (input as { roles?: unknown; channels?: Record<string, unknown> })
-      : {};
-  const roles = normalizeRoleMap(raw.roles);
-  const channels: Partial<Record<ChatAuthorizationChannel, ChatChannelAuthorizationConfig>> = {};
-  for (const channel of CHANNELS) {
-    channels[channel] = normalizeChannelConfig(raw.channels?.[channel], roles);
-  }
-  return { roles, channels };
-}
-
-function cloneAuthorizationConfig(
-  input: ChatAuthorizationConfig | undefined,
-): ChatAuthorizationConfig {
-  return normalizeAuthorizationConfig(input ? JSON.parse(JSON.stringify(input)) : {});
-}
-
-function getChatAuthorizationConfigPath(projectRoot: string): string {
-  return path.join(projectRoot, ".downcity", "chat", "authorization", "config.json");
-}
-
-function readAuthorizationConfigFromProjectRoot(projectRoot: string): ChatAuthorizationConfig {
-  const normalizedProjectRoot = normalizeText(projectRoot);
-  if (!normalizedProjectRoot) return normalizeAuthorizationConfig({});
-  const file = getChatAuthorizationConfigPath(normalizedProjectRoot);
-  if (!fs.existsSync(file)) return normalizeAuthorizationConfig({});
-  try {
-    return normalizeAuthorizationConfig(fs.readJsonSync(file));
-  } catch {
-    return normalizeAuthorizationConfig({});
-  }
-}
-
-async function writeAuthorizationConfigToPlatform(params: {
-  projectRoot: string;
-  nextConfig: ChatAuthorizationConfig;
-}): Promise<void> {
-  const normalizedProjectRoot = normalizeText(params.projectRoot);
-  if (!normalizedProjectRoot) throw new Error("projectRoot is required");
-  const file = getChatAuthorizationConfigPath(normalizedProjectRoot);
-  await fs.ensureDir(path.dirname(file));
-  await fs.writeJson(file, normalizeAuthorizationConfig(params.nextConfig), {
-    spaces: 2,
-  });
-}
-
-function ensureChannelConfig(
-  config: ChatAuthorizationConfig,
-  channel: ChatAuthorizationChannel,
-): ChatChannelAuthorizationConfig {
-  config.roles = normalizeRoleMap(config.roles);
-  config.channels ??= {};
-  config.channels[channel] = normalizeChannelConfig(config.channels[channel], config.roles);
-  return config.channels[channel] as ChatChannelAuthorizationConfig;
-}
-
-/**
- * 同步读取当前 agent 的授权配置。
- */
-export function readChatAuthorizationConfigSync(projectRoot: string): ChatAuthorizationConfig {
-  return readAuthorizationConfigFromProjectRoot(projectRoot);
-}
-
-/**
- * 读取当前 agent 的授权配置。
- */
-export function readChatAuthorizationConfig(
-  contextOrProjectRoot: Pick<AgentContext, "rootPath"> | string,
-): ChatAuthorizationConfig {
-  if (typeof contextOrProjectRoot === "string") {
-    return readAuthorizationConfigFromProjectRoot(contextOrProjectRoot);
-  }
-  return readAuthorizationConfigFromProjectRoot(contextOrProjectRoot.rootPath);
-}
-
-/**
- * 覆盖写入整份授权配置。
- */
-export async function writeChatAuthorizationConfig(params: {
-  context: Pick<AgentContext, "rootPath">;
-  nextConfig: ChatAuthorizationConfig;
-}): Promise<void> {
-  await writeAuthorizationConfigToPlatform({
-    projectRoot: params.context.rootPath,
-    nextConfig: params.nextConfig,
-  });
-}
-
-/**
- * 读取角色列表。
- */
-export function listChatAuthorizationRoles(params: {
-  config: ChatAuthorizationConfig;
-}): ChatAuthorizationRole[] {
-  const config = normalizeAuthorizationConfig(params.config);
-  return Object.values(config.roles || {}).sort((a, b) => a.roleId.localeCompare(b.roleId));
-}
-
-/**
- * 设置用户角色。
- */
-export async function setChatAuthorizationUserRole(params: {
-  context: Pick<AgentContext, "rootPath">;
-  channel: ChatAuthorizationChannel;
-  userId: string;
-  roleId: string;
-}): Promise<void> {
-  const userId = normalizeText(params.userId);
-  const roleId = normalizeText(params.roleId);
-  if (!userId || !roleId) throw new Error("userId and roleId are required");
-  const authorization = cloneAuthorizationConfig(
-    readAuthorizationConfigFromProjectRoot(params.context.rootPath),
-  );
-  authorization.roles = normalizeRoleMap(authorization.roles);
-  const channelConfig = ensureChannelConfig(authorization, params.channel);
-  if (!authorization.roles?.[roleId]) throw new Error(`Unknown roleId: ${roleId}`);
-  channelConfig.userRoles ??= {};
-  channelConfig.userRoles[userId] = roleId;
-  await writeAuthorizationConfigToPlatform({
-    projectRoot: params.context.rootPath,
-    nextConfig: authorization,
-  });
-}