@downcity/plugins 1.0.30 → 1.0.34

package/bin/workboard/runtime/SessionSummary.js

@@ -0,0 +1,51 @@
+/**
+ * Workboard session 摘要采集。
+ *
+ * 关键点（中文）
+ * - workboard 只需要模糊运行态，不复用 Town control 视图模型。
+ * - 这里只读取消息数量、更新时间与执行中状态，不暴露消息内容。
+ */
+import fs from "fs-extra";
+import path from "node:path";
+/**
+ * 采集 workboard 需要的 session 摘要。
+ */
+export async function listWorkboardSessionSummaries(params) {
+    const root_dir = params.context.paths.getDowncitySessionRootDirPath();
+    if (!(await fs.pathExists(root_dir)))
+        return [];
+    const entries = await fs.readdir(root_dir, { withFileTypes: true });
+    const items = [];
+    for (const entry of entries) {
+        if (!entry.isDirectory())
+            continue;
+        const session_id = decodeMaybe(entry.name);
+        if (!session_id)
+            continue;
+        const messages_path = path.join(params.context.paths.getDowncitySessionDirPath(session_id), "messages", "messages.jsonl");
+        const stat = await fs.stat(messages_path).catch(() => null);
+        items.push({
+            sessionId: session_id,
+            messageCount: await countJsonlLines(messages_path),
+            ...(stat ? { updatedAt: stat.mtimeMs } : {}),
+            ...(params.executingSessionIds?.has(session_id) ? { executing: true } : {}),
+        });
+    }
+    items.sort((a, b) => (b.updatedAt || 0) - (a.updatedAt || 0));
+    return items.slice(0, Math.max(1, params.limit));
+}
+async function countJsonlLines(file_path) {
+    const raw = await fs.readFile(file_path, "utf-8").catch(() => "");
+    if (!raw)
+        return 0;
+    return raw.split("\n").filter((line) => line.trim()).length;
+}
+function decodeMaybe(value) {
+    try {
+        return decodeURIComponent(String(value || "")).trim();
+    }
+    catch {
+        return String(value || "").trim();
+    }
+}
+//# sourceMappingURL=SessionSummary.js.map

package/bin/workboard/runtime/SessionSummary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionSummary.js","sourceRoot":"","sources":["../../../src/workboard/runtime/SessionSummary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAyB7B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAanD;IACC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC;IACtE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,KAAK,GAA8B,EAAE,CAAC;IAE5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAC7B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAC1D,UAAU,EACV,gBAAgB,CACjB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC;YACT,SAAS,EAAE,UAAU;YACrB,YAAY,EAAE,MAAM,eAAe,CAAC,aAAa,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,SAAiB;IAC9C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@downcity/plugins",
-  "version": "1.0.30",
+  "version": "1.0.34",
   "type": "module",
   "description": "Downcity 内建 plugin 集合包",
   "main": "./bin/index.js",
@@ -22,7 +22,7 @@
     "node-cron": "^4.2.1",
     "ws": "^8.21.0",
     "zod": "^4.4.3",
-    "@downcity/agent": "^1.1.74"
+    "@downcity/agent": "^1.1.79"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",

package/src/BuiltinPlugins.ts

@@ -9,7 +9,7 @@
 
 import type { AgentRuntime } from "@downcity/agent/internal/types/runtime/agent/AgentRuntime.js";
 import type { BasePlugin } from "@downcity/agent/internal/plugin/core/BasePlugin.js";
-import { AuthPlugin } from "@/auth/Plugin.js";
+import { ChatAuthorizationPlugin } from "@/auth/Plugin.js";
 import { SkillPlugin } from "@/skill/Plugin.js";
 import { WebPlugin } from "@/web/Plugin.js";
 import { AsrPlugin } from "@/asr/Plugin.js";
@@ -32,7 +32,7 @@ export type BuiltinPluginClass<T extends BasePlugin = BasePlugin> = new (
  * 全部内建 plugin classes。
  */
 export const BUILTIN_PLUGIN_CLASSES: BuiltinPluginClass[] = [
-  AuthPlugin,
+  ChatAuthorizationPlugin,
   SkillPlugin,
   WebPlugin,
   AsrPlugin,

package/src/asr/Config.ts

@@ -7,7 +7,7 @@
  */
 
 import type { VoicePluginConfig } from "@/voice/types/VoicePlugin.js";
-import type { AgentPluginConfigRuntime } from "@downcity/agent/internal/types/runtime/host/AgentHost.js";
+import type { AgentPluginConfigRuntime } from "@downcity/agent/internal/types/agent/AgentRuntimeAssembly.js";
 import type { JsonObject, JsonValue } from "@downcity/agent/internal/types/common/Json.js";
 
 /**

package/src/auth/Plugin.ts

@@ -1,10 +1,10 @@
 /**
- * Auth Plugin。
+ * ChatAuthorizationPlugin。
  *
  * 关键点（中文）
- * - auth 是内建且必需的 plugin，不走可选启停语义。
+ * - chat-authorization 是内建且必需的 plugin，不走可选启停语义。
  * - 静态授权配置与动态观测态都收敛在项目 `.downcity/chat/authorization/`。
- * - auth plugin 只负责统一暴露扩展点 / action 边界，不再依赖宿主平台读写授权配置。
+ * - 它只负责聊天主体授权，不负责 Town HTTP Bearer token 或路由访问鉴权。
  */
 
 import type { AgentRuntime } from "@downcity/agent/internal/types/runtime/agent/AgentRuntime.js";
@@ -13,10 +13,12 @@ import type { Plugin } from "@downcity/agent/internal/plugin/types/Plugin.js";
 import type { JsonValue } from "@downcity/agent/internal/types/common/Json.js";
 import { CHAT_PLUGIN_POINTS } from "@/chat/runtime/PluginPoints.js";
 import {
-  AUTH_ACTIONS,
-  type AuthObservePrincipalPayload,
-  type AuthSetUserRolePayload,
-  type AuthWriteConfigPayload,
+  CHAT_AUTHORIZATION_ACTIONS,
+  CHAT_AUTHORIZATION_CATALOG,
+  CHAT_AUTHORIZATION_PLUGIN_NAME,
+  type ChatAuthorizationObservePrincipalPayload,
+  type ChatAuthorizationSetUserRolePayload,
+  type ChatAuthorizationWriteConfigPayload,
   type ChatAuthorizationConfig,
   type ChatAuthorizationEvaluateInput,
   type ChatAuthorizationSnapshot,
@@ -50,7 +52,7 @@ function toRecord(value: unknown): Record<string, unknown> {
 function toEvaluateInput(payload: Record<string, unknown>): ChatAuthorizationEvaluateInput {
   const channel = toChannel(payload.channel);
   if (!channel) {
-    throw new Error("auth.authorize_incoming requires a valid channel");
+    throw new Error("chat-authorization.authorize_incoming requires a valid channel");
   }
   return {
     channel,
@@ -64,158 +66,173 @@ function toEvaluateInput(payload: Record<string, unknown>): ChatAuthorizationEva
 
 function toSnapshotData(snapshot: ChatAuthorizationSnapshot): JsonValue {
   return {
+    catalog: CHAT_AUTHORIZATION_CATALOG as unknown as JsonValue,
     config: snapshot.config as unknown as JsonValue,
     users: snapshot.users as unknown as JsonValue,
     chats: snapshot.chats as unknown as JsonValue,
   };
 }
 
-function createAuthPluginDefinition(): Plugin {
+function createChatAuthorizationPluginDefinition(): Plugin {
   return {
-    name: "auth",
-  title: "User Authorization System",
-  description:
-    "Controls who can talk to the agent in chat channels, records observed users and chats, and resolves each user's effective role for downstream service decisions.",
-  availability() {
-    return {
-      enabled: true,
-      available: true,
-      reasons: [],
-    };
-  },
-  hooks: {
-    guard: {
-      [CHAT_PLUGIN_POINTS.authorizeIncoming]: [
-        async ({ context, value }) => {
-          const input =
-            value && typeof value === "object" && !Array.isArray(value)
-              ? (value as Record<string, unknown>)
-              : {};
-          const evaluateInput = toEvaluateInput(input);
-          const authorizationConfig = readChatAuthorizationConfig(context);
-          const result = evaluateIncomingChatAuthorization({
-            config: context.config,
-            channel: evaluateInput.channel,
-            input: evaluateInput,
-            authorizationConfig,
-          });
-          if (result.decision !== "allow") {
-            throw new Error(result.reason || "chat authorization blocked");
-          }
-        },
-      ],
-    },
-    effect: {
-      [CHAT_PLUGIN_POINTS.observePrincipal]: [
-        async ({ context, value }) => {
-          const input = toRecord(value) as unknown as AuthObservePrincipalPayload;
-          const channel = toChannel(input.channel);
-          if (!channel) {
-            throw new Error("chat.observePrincipal requires a valid channel");
-          }
-          await recordObservedAuthorizationPrincipal({
-            context,
-            channel,
-            chatId: String(input.chatId || "").trim(),
-            ...(typeof input.chatType === "string" ? { chatType: input.chatType.trim() } : {}),
-            ...(typeof input.chatTitle === "string" ? { chatTitle: input.chatTitle.trim() } : {}),
-            ...(typeof input.userId === "string" ? { userId: input.userId.trim() } : {}),
-            ...(typeof input.username === "string" ? { username: input.username.trim() } : {}),
-          });
-        },
-      ],
+    name: CHAT_AUTHORIZATION_PLUGIN_NAME,
+    title: "Chat Authorization",
+    description:
+      "Controls who can talk to the agent in chat channels, records observed users and chats, and resolves each user's effective role for downstream service decisions.",
+    availability() {
+      return {
+        enabled: true,
+        available: true,
+        reasons: [],
+      };
     },
-  },
-  resolves: {
-    [CHAT_PLUGIN_POINTS.resolveUserRole]: async ({ context, value }) => {
-      const input =
-        value && typeof value === "object" && !Array.isArray(value)
-          ? (value as Record<string, unknown>)
-          : {};
-      const channel = toChannel(input.channel);
-      if (!channel) {
-        throw new Error("chat.resolveUserRole requires a valid channel");
-      }
-      const role = resolveAuthorizedUserRole({
-        channel,
-        userId: String(input.userId || "").trim(),
-        rootPath: context.rootPath,
-      });
-      return ((role || null) as unknown) as JsonValue;
-    },
-  },
-  actions: {
-    [AUTH_ACTIONS.snapshot]: {
-      execute: async ({ context }) => {
-        const snapshot = await readAuthorizationSnapshot({
-          context,
-        });
-        return {
-          success: true,
-          data: toSnapshotData(snapshot),
-        };
+    hooks: {
+      guard: {
+        [CHAT_PLUGIN_POINTS.authorizeIncoming]: [
+          async ({ context, value }) => {
+            const input =
+              value && typeof value === "object" && !Array.isArray(value)
+                ? (value as Record<string, unknown>)
+                : {};
+            const evaluateInput = toEvaluateInput(input);
+            const authorizationConfig = readChatAuthorizationConfig(context);
+            const result = evaluateIncomingChatAuthorization({
+              config: context.config,
+              channel: evaluateInput.channel,
+              input: evaluateInput,
+              authorizationConfig,
+            });
+            if (result.decision !== "allow") {
+              throw new Error(result.reason || "chat authorization blocked");
+            }
+          },
+        ],
       },
-    },
-    [AUTH_ACTIONS.readConfig]: {
-      execute: async ({ context }) => {
-        return {
-          success: true,
-          data: readChatAuthorizationConfig(context) as unknown as JsonValue,
-        };
+      effect: {
+        [CHAT_PLUGIN_POINTS.observePrincipal]: [
+          async ({ context, value }) => {
+            const input = toRecord(
+              value,
+            ) as unknown as ChatAuthorizationObservePrincipalPayload;
+            const channel = toChannel(input.channel);
+            if (!channel) {
+              throw new Error("chat.observePrincipal requires a valid channel");
+            }
+            await recordObservedAuthorizationPrincipal({
+              context,
+              channel,
+              chatId: String(input.chatId || "").trim(),
+              ...(typeof input.chatType === "string"
+                ? { chatType: input.chatType.trim() }
+                : {}),
+              ...(typeof input.chatTitle === "string"
+                ? { chatTitle: input.chatTitle.trim() }
+                : {}),
+              ...(typeof input.userId === "string"
+                ? { userId: input.userId.trim() }
+                : {}),
+              ...(typeof input.username === "string"
+                ? { username: input.username.trim() }
+                : {}),
+            });
+          },
+        ],
       },
     },
-    [AUTH_ACTIONS.writeConfig]: {
-      execute: async ({ context, payload }) => {
-        const body = toRecord(payload) as unknown as AuthWriteConfigPayload;
-        const nextConfig =
-          body.config && typeof body.config === "object" && !Array.isArray(body.config)
-            ? (body.config as ChatAuthorizationConfig)
+    resolves: {
+      [CHAT_PLUGIN_POINTS.resolveUserRole]: async ({ context, value }) => {
+        const input =
+          value && typeof value === "object" && !Array.isArray(value)
+            ? (value as Record<string, unknown>)
             : {};
-        await writeChatAuthorizationConfig({
-          context,
-          nextConfig,
+        const channel = toChannel(input.channel);
+        if (!channel) {
+          throw new Error("chat.resolveUserRole requires a valid channel");
+        }
+        const role = resolveAuthorizedUserRole({
+          channel,
+          userId: String(input.userId || "").trim(),
+          rootPath: context.rootPath,
         });
-        return {
-          success: true,
-          data: readChatAuthorizationConfig(context) as unknown as JsonValue,
-        };
+        return ((role || null) as unknown) as JsonValue;
       },
     },
-    [AUTH_ACTIONS.setUserRole]: {
-      execute: async ({ context, payload }) => {
-        const body = toRecord(payload) as unknown as AuthSetUserRolePayload;
-        const channel = toChannel(body.channel);
-        if (!channel) {
+    actions: {
+      [CHAT_AUTHORIZATION_ACTIONS.snapshot]: {
+        execute: async ({ context }) => {
+          const snapshot = await readAuthorizationSnapshot({
+            context,
+          });
           return {
-            success: false,
-            error: "set-user-role requires a valid channel",
-            message: "set-user-role requires a valid channel",
+            success: true,
+            data: toSnapshotData(snapshot),
           };
-        }
-        await setChatAuthorizationUserRole({
-          context,
-          channel,
-          userId: String(body.userId || "").trim(),
-          roleId: String(body.roleId || "").trim(),
-        });
-        return {
-          success: true,
-          data: readChatAuthorizationConfig(context) as unknown as JsonValue,
-        };
+        },
+      },
+      [CHAT_AUTHORIZATION_ACTIONS.readConfig]: {
+        execute: async ({ context }) => {
+          return {
+            success: true,
+            data: readChatAuthorizationConfig(context) as unknown as JsonValue,
+          };
+        },
+      },
+      [CHAT_AUTHORIZATION_ACTIONS.writeConfig]: {
+        execute: async ({ context, payload }) => {
+          const body = toRecord(
+            payload,
+          ) as unknown as ChatAuthorizationWriteConfigPayload;
+          const nextConfig =
+            body.config && typeof body.config === "object" && !Array.isArray(body.config)
+              ? (body.config as ChatAuthorizationConfig)
+              : {};
+          await writeChatAuthorizationConfig({
+            context,
+            nextConfig,
+          });
+          return {
+            success: true,
+            data: readChatAuthorizationConfig(context) as unknown as JsonValue,
+          };
+        },
+      },
+      [CHAT_AUTHORIZATION_ACTIONS.setUserRole]: {
+        execute: async ({ context, payload }) => {
+          const body = toRecord(
+            payload,
+          ) as unknown as ChatAuthorizationSetUserRolePayload;
+          const channel = toChannel(body.channel);
+          if (!channel) {
+            return {
+              success: false,
+              error: "set-user-role requires a valid channel",
+              message: "set-user-role requires a valid channel",
+            };
+          }
+          await setChatAuthorizationUserRole({
+            context,
+            channel,
+            userId: String(body.userId || "").trim(),
+            roleId: String(body.roleId || "").trim(),
+          });
+          return {
+            success: true,
+            data: readChatAuthorizationConfig(context) as unknown as JsonValue,
+          };
+        },
       },
     },
-  },
   };
 }
 
 /**
- * AuthPlugin：统一承载授权能力。
+ * ChatAuthorizationPlugin：统一承载聊天用户授权能力。
  */
-export class AuthPlugin extends BasePlugin {
-  readonly name = "auth";
+export class ChatAuthorizationPlugin extends BasePlugin {
+  readonly name = CHAT_AUTHORIZATION_PLUGIN_NAME;
 
   constructor(agent: AgentRuntime | null = null) {
     super(agent);
-    Object.assign(this, createAuthPluginDefinition());
+    Object.assign(this, createChatAuthorizationPluginDefinition());
   }
 }

package/src/auth/types/AuthPlugin.ts

@@ -1,8 +1,8 @@
 /**
- * Auth Plugin 类型与契约定义。
+ * ChatAuthorizationPlugin 类型与契约定义。
  *
  * 关键点（中文）
- * - 统一维护 auth plugin 的领域类型、扩展点/action 名称、payload 契约。
+ * - 统一维护聊天授权 plugin 的领域类型、扩展点/action 名称、payload 契约。
  * - 业务层不应散落硬编码字符串，如 `chat.authorizeIncoming`、`set-user-role`。
  * - chat / console / plugin 执行链路都从这里共享同一份边界定义。
  */
@@ -11,12 +11,12 @@ import type { ChatDispatchChannel } from "@/chat/types/ChatDispatcher.js";
 import { CHAT_PLUGIN_POINTS } from "@/chat/runtime/PluginPoints.js";
 
 /**
- * auth plugin 稳定名称。
+ * 聊天授权 plugin 稳定名称。
  */
-export const AUTH_PLUGIN_NAME = "auth";
+export const CHAT_AUTHORIZATION_PLUGIN_NAME = "chat-authorization";
 
 /**
- * auth 支持的渠道目录。
+ * 聊天授权支持的渠道目录。
  */
 export const CHAT_AUTHORIZATION_CHANNELS = ["telegram", "feishu", "qq"] as const;
 
@@ -26,18 +26,18 @@ export const CHAT_AUTHORIZATION_CHANNELS = ["telegram", "feishu", "qq"] as const
 export type ChatAuthorizationChannel = (typeof CHAT_AUTHORIZATION_CHANNELS)[number];
 
 /**
- * auth 扩展点名称集合。
+ * 聊天授权扩展点名称集合。
  */
-export const AUTH_PLUGIN_POINTS = {
+export const CHAT_AUTHORIZATION_PLUGIN_POINTS = {
   observePrincipal: CHAT_PLUGIN_POINTS.observePrincipal,
   authorizeIncoming: CHAT_PLUGIN_POINTS.authorizeIncoming,
   resolveUserRole: CHAT_PLUGIN_POINTS.resolveUserRole,
 } as const;
 
 /**
- * auth action 名称集合。
+ * 聊天授权 action 名称集合。
  */
-export const AUTH_ACTIONS = {
+export const CHAT_AUTHORIZATION_ACTIONS = {
   snapshot: "snapshot",
   readConfig: "read-config",
   writeConfig: "write-config",
@@ -50,8 +50,8 @@ export const AUTH_ACTIONS = {
 export const CHAT_AUTHORIZATION_PERMISSIONS = [
   "chat.dm.use",
   "chat.group.use",
-  "auth.manage.users",
-  "auth.manage.roles",
+  "chat.authorization.manage.users",
+  "chat.authorization.manage.roles",
   "agent.view.logs",
   "agent.manage",
 ] as const;
@@ -70,8 +70,8 @@ export const CHAT_AUTHORIZATION_PERMISSION_LABELS: Record<
 > = {
   "chat.dm.use": "DM",
   "chat.group.use": "Group",
-  "auth.manage.users": "Users",
-  "auth.manage.roles": "Roles",
+  "chat.authorization.manage.users": "Users",
+  "chat.authorization.manage.roles": "Roles",
   "agent.view.logs": "Logs",
   "agent.manage": "Agent",
 };
@@ -85,8 +85,8 @@ export const CHAT_AUTHORIZATION_PERMISSION_DESCRIPTIONS: Record<
 > = {
   "chat.dm.use": "允许用户在私聊场景中直接向 agent 发送请求并得到响应。",
   "chat.group.use": "允许用户在群聊或频道场景中触发 agent 执行对话与任务。",
-  "auth.manage.users": "允许修改用户与权限组之间的绑定关系。",
-  "auth.manage.roles": "允许编辑权限组定义，以及调整各渠道的新用户默认组。",
+  "chat.authorization.manage.users": "允许修改聊天用户与权限组之间的绑定关系。",
+  "chat.authorization.manage.roles": "允许编辑聊天权限组定义，以及调整各渠道的新用户默认组。",
   "agent.view.logs": "允许查看当前 agent 的运行日志与排障信息。",
   "agent.manage": "允许执行高权限管理动作，例如变更配置、操作服务与任务。",
 };
@@ -112,11 +112,11 @@ export interface ChatAuthorizationPermissionMeta {
 }
 
 /**
- * auth 目录快照。
+ * 聊天授权目录快照。
  */
 export interface ChatAuthorizationCatalog {
   /**
-   * auth 支持的渠道列表。
+   * 聊天授权支持的渠道列表。
    */
   channels: ChatAuthorizationChannel[];
 
@@ -137,7 +137,7 @@ export interface ChatAuthorizationCatalog {
 }
 
 /**
- * auth 统一目录常量。
+ * 聊天授权统一目录常量。
  */
 export const CHAT_AUTHORIZATION_CATALOG: ChatAuthorizationCatalog = {
   channels: [...CHAT_AUTHORIZATION_CHANNELS],
@@ -207,7 +207,7 @@ export function createDefaultChatAuthorizationRoles(): Record<string, ChatAuthor
 }
 
 /**
- * 判断给定值是否为 auth 支持的渠道。
+ * 判断给定值是否为聊天授权支持的渠道。
  */
 export function isChatAuthorizationChannel(
   value: unknown,
@@ -465,7 +465,7 @@ export interface ChatAuthorizationStateFile {
 /**
  * plugin effect 输入：记录观测主体。
  */
-export interface AuthObservePrincipalPayload {
+export interface ChatAuthorizationObservePrincipalPayload {
   /**
    * 当前渠道。
    */
@@ -495,7 +495,7 @@ export interface AuthObservePrincipalPayload {
 /**
  * plugin effect 输出：记录观测主体结果。
  */
-export interface AuthObservePrincipalResult {
+export interface ChatAuthorizationObservePrincipalResult {
   /**
    * 是否成功落盘。
    */
@@ -505,7 +505,7 @@ export interface AuthObservePrincipalResult {
 /**
  * plugin resolve 输入：查询用户角色。
  */
-export interface AuthResolveUserRolePayload {
+export interface ChatAuthorizationResolveUserRolePayload {
   /**
    * 当前渠道。
    */
@@ -519,7 +519,7 @@ export interface AuthResolveUserRolePayload {
 /**
  * action: 覆盖写入配置输入。
  */
-export interface AuthWriteConfigPayload {
+export interface ChatAuthorizationWriteConfigPayload {
   /**
    * 新配置。
    */
@@ -529,7 +529,7 @@ export interface AuthWriteConfigPayload {
 /**
  * action: 设置用户角色输入。
  */
-export interface AuthSetUserRolePayload {
+export interface ChatAuthorizationSetUserRolePayload {
   /**
    * 当前渠道。
    */

package/src/chat/ChatPlugin.ts

@@ -13,7 +13,7 @@ import { BasePlugin } from "@downcity/agent/internal/plugin/core/BasePlugin.js";
 import type { PluginActions } from "@downcity/agent/internal/plugin/types/Plugin.js";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
 import type { ChatChannelState } from "@/chat/types/ChatRuntime.js";
-import type { StoredChannelAccount } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccount } from "@downcity/agent/internal/types/platform/Store.js";
 import type { ChatQueueWorkerConfig } from "@/chat/types/ChatQueueWorker.js";
 import type {
   ChatPluginFeishuOptions,

package/src/chat/accounts/ChannelAccountManager.ts

@@ -8,7 +8,7 @@
  */
 
 import crypto from "node:crypto";
-import type { StoredChannelAccountChannel } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccountChannel } from "@downcity/agent/internal/types/platform/Store.js";
 import { resolveChatChannelBotInfo } from "@/chat/channels/BotInfoProvider.js";
 import {
   getStoredChannelAccountSync,
@@ -24,7 +24,7 @@ import type {
   ChatChannelAccountProbeResult,
   ChatChannelAccountUpsertInput,
 } from "@/chat/types/ChannelAccount.js";
-import type { StoredChannelAccount } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccount } from "@downcity/agent/internal/types/platform/Store.js";
 
 const SUPPORTED_CHANNELS: readonly StoredChannelAccountChannel[] = [
   "telegram",

package/src/chat/accounts/Store.ts

@@ -20,7 +20,7 @@ import type {
   StoredChannelAccount,
   StoredChannelAccountChannel,
   UpsertChannelAccountInput,
-} from "@downcity/agent/internal/types/runtime/host/Store.js";
+} from "@downcity/agent/internal/types/platform/Store.js";
 
 function nowIso(): string {
   return new Date().toISOString();

package/src/chat/runtime/ChatChannelConfig.ts

@@ -11,7 +11,7 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import type { JsonObject, JsonValue } from "@downcity/agent/internal/types/common/Json.js";
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import type { StoredChannelAccount } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccount } from "@downcity/agent/internal/types/platform/Store.js";
 import type {
   ChatChannelName,
   ChatChannelStateSnapshot,

package/src/chat/runtime/ChatChannelCore.ts

@@ -8,7 +8,7 @@
  */
 
 import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import type { StoredChannelAccount } from "@downcity/agent/internal/types/runtime/host/Store.js";
+import type { StoredChannelAccount } from "@downcity/agent/internal/types/platform/Store.js";
 import type { ChatChannelName } from "@/chat/types/ChannelStatus.js";
 import type { ChatChannelState } from "@/chat/types/ChatRuntime.js";
 import { getStoredChannelAccountSync } from "@/chat/accounts/Store.js";