@fieldwangai/agentflow 0.1.29 → 0.1.30

package/agents/agentflow-node-executor-code.md

@@ -11,7 +11,8 @@ readonly: true
 
 执行时**只引用本节的变量**，勿自行推导或拼接路径：
 
-- workspaceRoot：${workspaceRoot}（工作区根目录）
+- workspaceRoot：${workspaceRoot}（当前执行工作区根目录，可能由 CD Workspace 节点切换）
+- pipelineWorkspace：${pipelineWorkspace}（流水线所在工作区，写 AgentFlow 结果时使用）
 - flowName：${flowName}
 - uuid：${uuid}
 - instanceId：${instanceId}
@@ -28,5 +29,5 @@ ${taskBody}
 
 以代码实现为核心：理清需求与接口，编写或修改代码，确保可运行、通过类型检查与项目规范，节点中如有写入文件的操作可以执行。任务完成后直接退出，结果由系统自动标记成功。**仅当任务明确失败时**，执行以下命令报告失败（`agentflow` 是可直接在终端运行的 CLI 命令）：
 ```bash
-agentflow apply -ai write-result ${workspaceRoot} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
+agentflow apply -ai write-result ${pipelineWorkspace} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
 ```

package/agents/agentflow-node-executor-planning.md

@@ -11,7 +11,8 @@ readonly: true
 
 执行时**只引用本节的变量**，勿自行推导或拼接路径：
 
-- workspaceRoot：${workspaceRoot}（工作区根目录）
+- workspaceRoot：${workspaceRoot}（当前执行工作区根目录，可能由 CD Workspace 节点切换）
+- pipelineWorkspace：${pipelineWorkspace}（流水线所在工作区，写 AgentFlow 结果时使用）
 - flowName：${flowName}
 - uuid：${uuid}
 - instanceId：${instanceId}
@@ -28,5 +29,5 @@ ${taskBody}
 
 先做规划（目标拆解、步骤与依赖、可选方案），再按规划执行并产出结果，节点中如有写入文件的操作可以执行。任务完成后直接退出，结果由系统自动标记成功。**仅当任务明确失败时**，执行以下命令报告失败（`agentflow` 是可直接在终端运行的 CLI 命令）：
 ```bash
-agentflow apply -ai write-result ${workspaceRoot} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
+agentflow apply -ai write-result ${pipelineWorkspace} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
 ```

package/agents/agentflow-node-executor-requirement.md

@@ -11,7 +11,8 @@ readonly: true
 
 执行时**只引用本节的变量**，勿自行推导或拼接路径：
 
-- workspaceRoot：${workspaceRoot}（工作区根目录）
+- workspaceRoot：${workspaceRoot}（当前执行工作区根目录，可能由 CD Workspace 节点切换）
+- pipelineWorkspace：${pipelineWorkspace}（流水线所在工作区，写 AgentFlow 结果时使用）
 - flowName：${flowName}
 - uuid：${uuid}
 - instanceId：${instanceId}
@@ -28,5 +29,5 @@ ${taskBody}
 
 侧重需求理解与拆解，按上述任务完成执行，节点中如有写入文件的操作可以执行。任务完成后直接退出，结果由系统自动标记成功。**仅当任务明确失败时**，执行以下命令报告失败（`agentflow` 是可直接在终端运行的 CLI 命令）：
 ```bash
-agentflow apply -ai write-result ${workspaceRoot} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
+agentflow apply -ai write-result ${pipelineWorkspace} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
 ```

package/agents/agentflow-node-executor-test.md

@@ -11,7 +11,8 @@ readonly: true
 
 执行时**只引用本节的变量**，勿自行推导或拼接路径：
 
-- workspaceRoot：${workspaceRoot}（工作区根目录）
+- workspaceRoot：${workspaceRoot}（当前执行工作区根目录，可能由 CD Workspace 节点切换）
+- pipelineWorkspace：${pipelineWorkspace}（流水线所在工作区，写 AgentFlow 结果时使用）
 - flowName：${flowName}
 - uuid：${uuid}
 - instanceId：${instanceId}
@@ -28,5 +29,5 @@ ${taskBody}
 
 侧重测试与验证，执行并产出结果，节点中如有写入文件的操作可以执行。任务完成后直接退出，结果由系统自动标记成功。**仅当任务明确失败时**，执行以下命令报告失败（`agentflow` 是可直接在终端运行的 CLI 命令）：
 ```bash
-agentflow apply -ai write-result ${workspaceRoot} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
+agentflow apply -ai write-result ${pipelineWorkspace} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
 ```

package/agents/agentflow-node-executor-ui.md

@@ -11,7 +11,8 @@ readonly: true
 
 执行时**只引用本节的变量**，勿自行推导或拼接路径：
 
-- workspaceRoot：${workspaceRoot}（工作区根目录）
+- workspaceRoot：${workspaceRoot}（当前执行工作区根目录，可能由 CD Workspace 节点切换）
+- pipelineWorkspace：${pipelineWorkspace}（流水线所在工作区，写 AgentFlow 结果时使用）
 - flowName：${flowName}
 - uuid：${uuid}
 - instanceId：${instanceId}
@@ -28,5 +29,5 @@ ${taskBody}
 
 理解设计稿或规格（Figma、标注、描述），实现或调整组件与样式，保证布局、间距、层级、断点与 RTL 等与设计一致；必要时做走查与修正，节点中如有写入文件的操作可以执行。任务完成后直接退出，结果由系统自动标记成功。**仅当任务明确失败时**，执行以下命令报告失败（`agentflow` 是可直接在终端运行的 CLI 命令）：
 ```bash
-agentflow apply -ai write-result ${workspaceRoot} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
+agentflow apply -ai write-result ${pipelineWorkspace} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
 ```

package/agents/agentflow-node-executor.md

@@ -11,7 +11,8 @@ readonly: true
 
 执行时**只引用本节的变量**，勿自行推导或拼接路径：
 
-- workspaceRoot：${workspaceRoot}（工作区根目录）
+- workspaceRoot：${workspaceRoot}（当前执行工作区根目录，可能由 CD Workspace 节点切换）
+- pipelineWorkspace：${pipelineWorkspace}（流水线所在工作区，写 AgentFlow 结果时使用）
 - flowName：${flowName}
 - uuid：${uuid}
 - instanceId：${instanceId}
@@ -28,5 +29,5 @@ ${taskBody}
 
 按上述任务完成执行，节点中如有写入文件的操作可以执行。任务完成后直接退出，结果由系统自动标记成功。**仅当任务明确失败时**，执行以下命令报告失败（`agentflow` 是可直接在终端运行的 CLI 命令）：
 ```bash
-agentflow apply -ai write-result ${workspaceRoot} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
+agentflow apply -ai write-result ${pipelineWorkspace} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
 ```

package/agents/en/agentflow-node-executor.md

@@ -11,7 +11,8 @@ You are a flow node executor. Complete the work described in the node context an
 
 **Only reference the variables in this section** during execution. Do not derive or concatenate paths on your own:
 
-- workspaceRoot: ${workspaceRoot} (workspace root directory)
+- workspaceRoot: ${workspaceRoot} (current execution workspace root; may be switched by a CD Workspace node)
+- pipelineWorkspace: ${pipelineWorkspace} (pipeline workspace; use this when writing AgentFlow results)
 - flowName: ${flowName}
 - uuid: ${uuid}
 - instanceId: ${instanceId}
@@ -28,5 +29,5 @@ ${taskBody}
 
 Complete the task as described above. If the node involves file writing operations, they can be executed. Exit when done — the system automatically marks the result as success. **Only if the task explicitly fails**, run the following command to report failure (`agentflow` is a CLI command available directly in the terminal):
 ```bash
-agentflow apply -ai write-result ${workspaceRoot} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"reason for failure"}'
+agentflow apply -ai write-result ${pipelineWorkspace} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"reason for failure"}'
 ```

package/agents/zh/agentflow-node-executor.md

@@ -11,7 +11,8 @@ readonly: true
 
 执行时**只引用本节的变量**，勿自行推导或拼接路径：
 
-- workspaceRoot：${workspaceRoot}（工作区根目录）
+- workspaceRoot：${workspaceRoot}（当前执行工作区根目录，可能由 CD Workspace 节点切换）
+- pipelineWorkspace：${pipelineWorkspace}（流水线所在工作区，写 AgentFlow 结果时使用）
 - flowName：${flowName}
 - uuid：${uuid}
 - instanceId：${instanceId}
@@ -28,5 +29,5 @@ ${taskBody}
 
 按上述任务完成执行，节点中如有写入文件的操作可以执行。任务完成后直接退出，结果由系统自动标记成功。**仅当任务明确失败时**，执行以下命令报告失败（`agentflow` 是可直接在终端运行的 CLI 命令）：
 ```bash
-agentflow apply -ai write-result ${workspaceRoot} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
+agentflow apply -ai write-result ${pipelineWorkspace} ${flowName} ${uuid} ${instanceId} --json '{"status":"failed","message":"失败原因"}'
 ```

package/bin/lib/agent-runners.mjs

@@ -10,6 +10,16 @@ import { appendRunLogLine } from "./run-events.mjs";
 import { writeWithPrefix } from "./terminal.mjs";
 import { t } from "./i18n.mjs";
 
+function shouldPassCursorModelArg(model) {
+  const text = String(model || "").trim();
+  return text !== "" && !/^auto$/i.test(text);
+}
+
+function childEnv(options = {}, extra = {}) {
+  const optEnv = options && options.env && typeof options.env === "object" ? options.env : {};
+  return { ...process.env, ...optEnv, ...extra };
+}
+
 /**
  * Run Cursor CLI with stream-json, forward events to stdout, return success/failure.
  */
@@ -25,8 +35,11 @@ export function runCursorAgentForNode(
   const outputDir = instanceId ? path.join(absRunDir, "output", instanceId) : path.join(absRunDir, "output");
   if (instanceId) fs.mkdirSync(outputDir, { recursive: true });
   const absWorkspaceRoot = path.resolve(workspaceRoot);
+  const execWorkspaceRoot = path.resolve(options.execWorkspaceRoot || workspaceRoot);
   const replacements = {
-    workspaceRoot: absWorkspaceRoot,
+    workspaceRoot: execWorkspaceRoot,
+    executionWorkspaceRoot: execWorkspaceRoot,
+    pipelineWorkspace: absWorkspaceRoot,
     promptPath: absPromptPath,
     nodeContext: nodeContext ?? "",
     taskBody: taskBody ?? "",
@@ -61,11 +74,11 @@ export function runCursorAgentForNode(
 
   return new Promise((resolve, reject) => {
     const agentCmd = process.env.CURSOR_AGENT_CMD || "agent";
-    const args = ["--print", "--output-format", "stream-json", "--trust", "--workspace", workspaceRoot];
+    const args = ["--print", "--output-format", "stream-json", "--trust", "--workspace", execWorkspaceRoot];
     const approveMcps = process.env.AGENTFLOW_CURSOR_APPROVE_MCPS !== "0" && process.env.AGENTFLOW_CURSOR_APPROVE_MCPS !== "false";
     if (approveMcps) args.push("--approve-mcps");
     if (options.force) args.push("--force");
-    args.push("--model", model);
+    if (shouldPassCursorModelArg(model)) args.push("--model", model);
     args.push(promptText);
     if (options.flowName && options.uuid) {
       const argvLog = args.slice(0, -1).concat([`(prompt ${args[args.length - 1].length} chars)`]);
@@ -81,9 +94,10 @@ export function runCursorAgentForNode(
     }
     const useStderrInherit = process.env.AGENTFLOW_CURSOR_STDERR_INHERIT === "1" || process.env.AGENTFLOW_CURSOR_STDERR_INHERIT === "true";
     const child = spawn(agentCmd, args, {
-      cwd: workspaceRoot,
+      cwd: execWorkspaceRoot,
       stdio: ["ignore", "pipe", useStderrInherit ? "inherit" : "pipe"],
       shell: false,
+      env: childEnv(options),
     });
 
     let lastResult = null;
@@ -286,8 +300,11 @@ export function runOpenCodeAgentForNode(
   const outputDir = instanceId ? path.join(absRunDir, "output", instanceId) : path.join(absRunDir, "output");
   if (instanceId) fs.mkdirSync(outputDir, { recursive: true });
   const absWorkspaceRoot = path.resolve(workspaceRoot);
+  const execWorkspaceRoot = path.resolve(options.execWorkspaceRoot || workspaceRoot);
   const replacements = {
-    workspaceRoot: absWorkspaceRoot,
+    workspaceRoot: execWorkspaceRoot,
+    executionWorkspaceRoot: execWorkspaceRoot,
+    pipelineWorkspace: absWorkspaceRoot,
     promptPath: absPromptPath,
     nodeContext: nodeContext ?? "",
     taskBody: taskBody ?? "",
@@ -325,16 +342,17 @@ export function runOpenCodeAgentForNode(
     if (model) {
       args.push("--model", model);
     }
-    args.push("--dir", workspaceRoot);
+    args.push("--dir", execWorkspaceRoot);
     args.push("--", promptText);
     const spawnOpts = {
-      cwd: workspaceRoot,
+      cwd: execWorkspaceRoot,
       stdio: ["ignore", "pipe", "pipe"],
       shell: false,
+      env: childEnv(options),
     };
     if (options.force) {
       spawnOpts.env = {
-        ...process.env,
+        ...spawnOpts.env,
         OPENCODE_CONFIG_CONTENT: JSON.stringify({
           permission: { external_directory: "allow" },
         }),
@@ -426,8 +444,11 @@ export function runClaudeCodeAgentForNode(
   const outputDir = instanceId ? path.join(absRunDir, "output", instanceId) : path.join(absRunDir, "output");
   if (instanceId) fs.mkdirSync(outputDir, { recursive: true });
   const absWorkspaceRoot = path.resolve(workspaceRoot);
+  const execWorkspaceRoot = path.resolve(options.execWorkspaceRoot || workspaceRoot);
   const replacements = {
-    workspaceRoot: absWorkspaceRoot,
+    workspaceRoot: execWorkspaceRoot,
+    executionWorkspaceRoot: execWorkspaceRoot,
+    pipelineWorkspace: absWorkspaceRoot,
     promptPath: absPromptPath,
     nodeContext: nodeContext ?? "",
     taskBody: taskBody ?? "",
@@ -464,7 +485,7 @@ export function runClaudeCodeAgentForNode(
     const bypassPermissions =
       process.env.AGENTFLOW_CLAUDE_CODE_BYPASS_PERMISSIONS !== "0" &&
       process.env.AGENTFLOW_CLAUDE_CODE_BYPASS_PERMISSIONS !== "false";
-    const args = ["-p", "--output-format", "stream-json", "--verbose", "--add-dir", workspaceRoot];
+    const args = ["-p", "--output-format", "stream-json", "--verbose", "--add-dir", execWorkspaceRoot, "--add-dir", absWorkspaceRoot];
     if (bypassPermissions) args.push("--dangerously-skip-permissions");
     if (model) args.push("--model", model);
     args.push(promptText);
@@ -490,9 +511,10 @@ export function runClaudeCodeAgentForNode(
       process.env.AGENTFLOW_CLAUDE_CODE_STDERR_INHERIT === "1" ||
       process.env.AGENTFLOW_CLAUDE_CODE_STDERR_INHERIT === "true";
     const child = spawn(claudeCmd, args, {
-      cwd: workspaceRoot,
+      cwd: execWorkspaceRoot,
       stdio: ["ignore", "pipe", useStderrInherit ? "inherit" : "pipe"],
       shell: false,
+      env: childEnv(options),
     });
 
     let lastResult = null;
@@ -743,7 +765,7 @@ export function runCursorAgentWithPrompt(cliWorkspace, promptText, options = {})
   const approveMcps = process.env.AGENTFLOW_CURSOR_APPROVE_MCPS !== "0" && process.env.AGENTFLOW_CURSOR_APPROVE_MCPS !== "false";
   if (approveMcps) args.push("--approve-mcps");
   args.push("--force");
-  args.push("--model", model);
+  if (shouldPassCursorModelArg(model)) args.push("--model", model);
   args.push(promptText);
 
   const useStderrInherit = process.env.AGENTFLOW_CURSOR_STDERR_INHERIT === "1" || process.env.AGENTFLOW_CURSOR_STDERR_INHERIT === "true";
@@ -751,6 +773,7 @@ export function runCursorAgentWithPrompt(cliWorkspace, promptText, options = {})
     cwd: ws,
     stdio: ["ignore", "pipe", useStderrInherit ? "inherit" : "pipe"],
     shell: false,
+    env: childEnv(options),
   });
 
   let lastResult = null;
@@ -939,10 +962,11 @@ export function runOpenCodeAgentWithPrompt(cliWorkspace, promptText, options = {
     cwd: ws,
     stdio: ["ignore", "pipe", "pipe"],
     shell: false,
+    env: childEnv(options),
   };
   if (options.force) {
     spawnOpts.env = {
-      ...process.env,
+      ...spawnOpts.env,
       OPENCODE_CONFIG_CONTENT: JSON.stringify({
         permission: { external_directory: "allow" },
       }),
@@ -1047,6 +1071,7 @@ export function runClaudeCodeAgentWithPrompt(cliWorkspace, promptText, options =
     cwd: ws,
     stdio: ["ignore", "pipe", useStderrInherit ? "inherit" : "pipe"],
     shell: false,
+    env: childEnv(options),
   });
 
   let lastResult = null;

package/bin/lib/api-runner.mjs

@@ -315,6 +315,7 @@ export function parseApiModel(str) {
  */
 export async function runApiAgentForNode(workspaceRoot, { promptPath, nodeContext, taskBody, subagent, instanceId }, options = {}) {
   const absRoot = path.resolve(workspaceRoot);
+  const execRoot = path.resolve(options.execWorkspaceRoot || workspaceRoot);
   const flowName = options.flowName ?? null;
   const uuid = options.uuid ?? null;
 
@@ -329,7 +330,9 @@ export async function runApiAgentForNode(workspaceRoot, { promptPath, nodeContex
 
   // ── 读取 Agent 角色提示，注入 nodeContext/taskBody ────────────────────────
   const replacements = {
-    workspaceRoot: absRoot,
+    workspaceRoot: execRoot,
+    executionWorkspaceRoot: execRoot,
+    pipelineWorkspace: absRoot,
     nodeContext: nodeContext ?? "",
     taskBody: taskBody ?? "",
     flowName: flowName ?? "",
@@ -349,12 +352,12 @@ export async function runApiAgentForNode(workspaceRoot, { promptPath, nodeContex
   if (provider === "anthropic") {
     const key = process.env.ANTHROPIC_API_KEY;
     if (!key) throw new Error("[api-runner] ANTHROPIC_API_KEY is required for api:anthropic/* models");
-    await runAnthropicLoop(key, model, systemPrompt, userContent, absRoot, log, options);
+    await runAnthropicLoop(key, model, systemPrompt, userContent, execRoot, log, options);
   } else {
     const key = process.env.OPENAI_API_KEY;
     if (!key) throw new Error("[api-runner] OPENAI_API_KEY is required for api:openai/* models");
     const baseUrl = (process.env.OPENAI_BASE_URL ?? DEFAULT_OPENAI_BASE).trim();
-    await runOpenAiLoop(key, baseUrl, model, systemPrompt, userContent, absRoot, log, options);
+    await runOpenAiLoop(key, baseUrl, model, systemPrompt, userContent, execRoot, log, options);
   }
 
   log(`done instanceId=${instanceId ?? "-"}`);

package/bin/lib/auth.mjs

@@ -0,0 +1,240 @@
+import crypto from "crypto";
+import fs from "fs";
+import path from "path";
+import {
+  ARCHIVED_PIPELINES_DIR_NAME,
+  getAgentflowDataRoot,
+  getUserPipelinesRoot,
+  sanitizeAgentflowUserId,
+} from "./paths.mjs";
+
+const SESSION_COOKIE = "af_session";
+const SESSION_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+
+function authRoot() {
+  return path.join(getAgentflowDataRoot(), "auth");
+}
+
+function usersPath() {
+  return path.join(authRoot(), "users.json");
+}
+
+function sessionsPath() {
+  return path.join(authRoot(), "sessions.json");
+}
+
+function readJsonObject(filePath) {
+  try {
+    if (!fs.existsSync(filePath)) return {};
+    const data = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+    return data && typeof data === "object" && !Array.isArray(data) ? data : {};
+  } catch {
+    return {};
+  }
+}
+
+function writeJsonObject(filePath, data) {
+  fs.mkdirSync(path.dirname(filePath), { recursive: true });
+  fs.writeFileSync(filePath, JSON.stringify(data && typeof data === "object" ? data : {}, null, 2) + "\n", "utf-8");
+}
+
+function hashPassword(password, salt = crypto.randomBytes(16).toString("hex")) {
+  const hash = crypto.scryptSync(String(password), salt, 64).toString("hex");
+  return { salt, hash };
+}
+
+function verifyPassword(password, record) {
+  if (!record || typeof record.salt !== "string" || typeof record.hash !== "string") return false;
+  const next = hashPassword(password, record.salt).hash;
+  try {
+    return crypto.timingSafeEqual(Buffer.from(next, "hex"), Buffer.from(record.hash, "hex"));
+  } catch {
+    return false;
+  }
+}
+
+function hashToken(token) {
+  return crypto.createHash("sha256").update(String(token)).digest("hex");
+}
+
+function parseCookies(header) {
+  const out = {};
+  for (const part of String(header || "").split(";")) {
+    const idx = part.indexOf("=");
+    if (idx <= 0) continue;
+    const key = part.slice(0, idx).trim();
+    const value = part.slice(idx + 1).trim();
+    if (!key) continue;
+    try {
+      out[key] = decodeURIComponent(value);
+    } catch {
+      out[key] = value;
+    }
+  }
+  return out;
+}
+
+export function readAuthUsers() {
+  return readJsonObject(usersPath());
+}
+
+export function authSetupRequired() {
+  return Object.keys(readAuthUsers()).length === 0;
+}
+
+function listFlowDirs(root) {
+  try {
+    if (!fs.existsSync(root) || !fs.statSync(root).isDirectory()) return [];
+    return fs.readdirSync(root, { withFileTypes: true })
+      .filter((entry) => entry.isDirectory())
+      .filter((entry) => entry.name !== ARCHIVED_PIPELINES_DIR_NAME)
+      .filter((entry) => fs.existsSync(path.join(root, entry.name, "flow.yaml")))
+      .map((entry) => entry.name)
+      .sort((a, b) => a.localeCompare(b));
+  } catch {
+    return [];
+  }
+}
+
+function copyMissingFlowDirs(sourceRoot, targetRoot, relativeRoot = "") {
+  const fromRoot = path.join(sourceRoot, relativeRoot);
+  const toRoot = path.join(targetRoot, relativeRoot);
+  const copied = [];
+  const skipped = [];
+  for (const name of listFlowDirs(fromRoot)) {
+    const fromDir = path.join(fromRoot, name);
+    const toDir = path.join(toRoot, name);
+    if (fs.existsSync(toDir)) {
+      skipped.push(path.join(relativeRoot, name).replace(/\\/g, "/"));
+      continue;
+    }
+    fs.mkdirSync(path.dirname(toDir), { recursive: true });
+    fs.cpSync(fromDir, toDir, { recursive: true });
+    copied.push(path.join(relativeRoot, name).replace(/\\/g, "/"));
+  }
+  return { copied, skipped };
+}
+
+export function migrateLegacyPipelinesToAdminUser(userId) {
+  const safeUserId = sanitizeAgentflowUserId(userId);
+  if (!safeUserId) return { copied: [], skipped: [], source: "", target: "", error: "invalid userId" };
+
+  const source = getUserPipelinesRoot("");
+  const target = getUserPipelinesRoot(safeUserId);
+  if (path.resolve(source) === path.resolve(target)) {
+    return { copied: [], skipped: [], source, target };
+  }
+  if (!fs.existsSync(source)) {
+    return { copied: [], skipped: [], source, target };
+  }
+
+  const active = copyMissingFlowDirs(source, target);
+  const archived = copyMissingFlowDirs(source, target, ARCHIVED_PIPELINES_DIR_NAME);
+  return {
+    copied: [...active.copied, ...archived.copied],
+    skipped: [...active.skipped, ...archived.skipped],
+    source,
+    target,
+  };
+}
+
+export function getSessionCookieName() {
+  return SESSION_COOKIE;
+}
+
+export function buildSessionCookie(token) {
+  const attrs = [
+    `${SESSION_COOKIE}=${encodeURIComponent(token)}`,
+    "Path=/",
+    "HttpOnly",
+    "SameSite=Lax",
+    `Max-Age=${Math.floor(SESSION_TTL_MS / 1000)}`,
+  ];
+  return attrs.join("; ");
+}
+
+export function buildClearSessionCookie() {
+  return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;
+}
+
+export function getAuthUserFromRequest(req) {
+  const token = parseCookies(req.headers.cookie || "")[SESSION_COOKIE];
+  if (!token) return null;
+  const sessions = readJsonObject(sessionsPath());
+  const key = hashToken(token);
+  const session = sessions[key];
+  if (!session || typeof session.userId !== "string") return null;
+  if (Number(session.expiresAt) <= Date.now()) {
+    delete sessions[key];
+    writeJsonObject(sessionsPath(), sessions);
+    return null;
+  }
+  const users = readAuthUsers();
+  const user = users[session.userId];
+  if (!user) return null;
+  return {
+    userId: session.userId,
+    username: user.username || session.userId,
+    isAdmin: Boolean(user.isAdmin),
+  };
+}
+
+export function loginOrCreateUser(username, password) {
+  const userId = sanitizeAgentflowUserId(username);
+  if (!userId) {
+    return { ok: false, error: "用户名须以字母开头，仅可使用字母、数字、下划线与连字符，最多 64 字符" };
+  }
+  const pwd = String(password || "");
+  if (pwd.length < 4) return { ok: false, error: "密码至少 4 位" };
+
+  const users = readAuthUsers();
+  const firstUser = Object.keys(users).length === 0;
+  let user = users[userId];
+  if (!user) {
+    const hashed = hashPassword(pwd);
+    user = {
+      userId,
+      username: String(username).trim(),
+      salt: hashed.salt,
+      hash: hashed.hash,
+      isAdmin: firstUser,
+      createdAt: new Date().toISOString(),
+    };
+    users[userId] = user;
+    writeJsonObject(usersPath(), users);
+  } else if (!verifyPassword(pwd, user)) {
+    return { ok: false, error: "用户名或密码错误" };
+  }
+
+  let migration = null;
+  if (Boolean(user.isAdmin)) {
+    try {
+      migration = migrateLegacyPipelinesToAdminUser(userId);
+    } catch (e) {
+      migration = { copied: [], skipped: [], error: (e && e.message) || String(e) };
+    }
+  }
+
+  const token = crypto.randomBytes(32).toString("base64url");
+  const sessions = readJsonObject(sessionsPath());
+  sessions[hashToken(token)] = {
+    userId,
+    createdAt: Date.now(),
+    expiresAt: Date.now() + SESSION_TTL_MS,
+  };
+  writeJsonObject(sessionsPath(), sessions);
+  return {
+    ok: true,
+    token,
+    user: { userId, username: user.username || userId, isAdmin: Boolean(user.isAdmin) },
+    migration,
+  };
+}
+
+export function logoutRequest(req) {
+  const token = parseCookies(req.headers.cookie || "")[SESSION_COOKIE];
+  if (!token) return;
+  const sessions = readJsonObject(sessionsPath());
+  delete sessions[hashToken(token)];
+  writeJsonObject(sessionsPath(), sessions);
+}

package/bin/lib/catalog-agents.mjs

@@ -278,10 +278,10 @@ description: ${description != null ? String(description).replace(/\n/g, " ") : "
   }
 }
 
-export function copyBuiltinJson(workspaceRoot, flowId, targetFlowId) {
+export function copyBuiltinJson(workspaceRoot, flowId, targetFlowId, opts = {}) {
   const destId = (targetFlowId && targetFlowId.trim()) || flowId;
   const srcDir = path.join(PACKAGE_BUILTIN_PIPELINES_DIR, flowId);
-  const pipelinesRoot = getUserPipelinesRoot();
+  const pipelinesRoot = getUserPipelinesRoot(opts.userId);
   const destDir = path.join(pipelinesRoot, destId);
   if (!fs.existsSync(srcDir) || !fs.existsSync(path.join(srcDir, "flow.yaml"))) {
     return { success: false, error: t("catalog.builtin_flow_not_found") };