@jingyi0605/codingns 0.3.6 → 0.5.0

package/dist/server/middlewares/auth-guard.d.ts

@@ -1,4 +1,8 @@
 import type { FastifyReply, FastifyRequest } from "fastify";
 import type { AuthService } from "../modules/auth/auth-service.js";
+export declare const ASSISTANT_REQUEST_SOURCE_HEADER = "x-codingns-assistant-source";
+export declare const ASSISTANT_CALLER_KIND_HEADER = "x-codingns-assistant-caller-kind";
+export declare const ASSISTANT_CLI_REQUEST_SOURCE = "assistant-cli";
+export declare const BUTLER_UI_REQUEST_SOURCE = "butler-ui";
 export declare function isPublicRoute(method: string, routePath: string): boolean;
 export declare function createAuthGuard(authService: AuthService): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;

package/dist/server/middlewares/auth-guard.js

@@ -6,9 +6,38 @@ const PUBLIC_ROUTE_RULES = new Set([
     "POST:/api/auth/refresh",
     "POST:/api/providers/claude-code/hook-bridge/events"
 ]);
+export const ASSISTANT_REQUEST_SOURCE_HEADER = "x-codingns-assistant-source";
+export const ASSISTANT_CALLER_KIND_HEADER = "x-codingns-assistant-caller-kind";
+export const ASSISTANT_CLI_REQUEST_SOURCE = "assistant-cli";
+export const BUTLER_UI_REQUEST_SOURCE = "butler-ui";
 export function isPublicRoute(method, routePath) {
     return PUBLIC_ROUTE_RULES.has(`${method.toUpperCase()}:${routePath}`);
 }
+function isAssistantRoute(routePath) {
+    return routePath.startsWith("/api/assistant/");
+}
+function readAssistantRequestSource(request) {
+    const header = request.headers[ASSISTANT_REQUEST_SOURCE_HEADER];
+    const value = Array.isArray(header) ? header[0] : header;
+    if (typeof value !== "string") {
+        return null;
+    }
+    const normalized = value.trim().toLowerCase();
+    return normalized.length > 0 ? normalized : null;
+}
+function isReadOnlyAssistantMethod(method) {
+    const normalizedMethod = method.trim().toUpperCase();
+    return normalizedMethod === "GET" || normalizedMethod === "HEAD";
+}
+function isAllowedAssistantCaller(callerKind, requestSource, method) {
+    if (callerKind === "assistant_runtime") {
+        return true;
+    }
+    if (callerKind === "interactive_user" && isReadOnlyAssistantMethod(method)) {
+        return true;
+    }
+    return requestSource === BUTLER_UI_REQUEST_SOURCE;
+}
 export function createAuthGuard(authService) {
     return async function authGuard(request, reply) {
         const routePath = request.url.split("?")[0] ?? request.url;
@@ -26,10 +55,19 @@ export function createAuthGuard(authService) {
             return;
         }
         const accessToken = authorization.slice("Bearer ".length).trim();
-        request.auth = {
-            accessToken,
-            user: authService.authenticateAccessToken(accessToken)
-        };
+        const authContext = authService.authenticateAccessToken(accessToken);
+        if (isAssistantRoute(routePath)) {
+            const requestSource = readAssistantRequestSource(request);
+            if (!isAllowedAssistantCaller(authContext.callerKind, requestSource, request.method)) {
+                sendError(reply, 403, "ASSISTANT_CALLER_NOT_ALLOWED", "当前调用者没有访问助手能力面的权限", undefined, {
+                    callerKind: authContext.callerKind,
+                    requestSource
+                });
+                return;
+            }
+            reply.header(ASSISTANT_CALLER_KIND_HEADER, authContext.callerKind);
+        }
+        request.auth = authContext;
     };
 }
 //# sourceMappingURL=auth-guard.js.map

package/dist/server/middlewares/auth-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-guard.js","sourceRoot":"","sources":["../../../src/middlewares/auth-guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAG5D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,kCAAkC;IAClC,wBAAwB;IACxB,sBAAsB;IACtB,wBAAwB;IACxB,oDAAoD;CACrD,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,SAAiB;IAC7D,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAwB;IACtD,OAAO,KAAK,UAAU,SAAS,CAAC,OAAuB,EAAE,KAAmB;QAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;QAE3D,qCAAqC;QACrC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEpD,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAEjE,OAAO,CAAC,IAAI,GAAG;YACb,WAAW;YACX,IAAI,EAAE,WAAW,CAAC,uBAAuB,CAAC,WAAW,CAAC;SACvD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"auth-guard.js","sourceRoot":"","sources":["../../../src/middlewares/auth-guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAG5D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,kCAAkC;IAClC,wBAAwB;IACxB,sBAAsB;IACtB,wBAAwB;IACxB,oDAAoD;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GAAG,kCAAkC,CAAC;AAC/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,eAAe,CAAC;AAC5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC;AAEpD,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,SAAiB;IAC7D,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAuB;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAc;IAC/C,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,OAAO,gBAAgB,KAAK,KAAK,IAAI,gBAAgB,KAAK,MAAM,CAAC;AACnE,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAA0B,EAC1B,aAA4B,EAC5B,MAAc;IAEd,IAAI,UAAU,KAAK,mBAAmB,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,KAAK,kBAAkB,IAAI,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,aAAa,KAAK,wBAAwB,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAwB;IACtD,OAAO,KAAK,UAAU,SAAS,CAAC,OAAuB,EAAE,KAAmB;QAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;QAE3D,qCAAqC;QACrC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEpD,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,WAAW,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAErE,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,aAAa,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;YAE1D,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrF,SAAS,CACP,KAAK,EACL,GAAG,EACH,8BAA8B,EAC9B,mBAAmB,EACnB,SAAS,EACT;oBACE,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,aAAa;iBACd,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,KAAK,CAAC,MAAM,CAAC,4BAA4B,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,WAAW,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/modules/assistant-capability/assistant-capability-controller.d.ts

@@ -11,14 +11,50 @@ interface AssistantProjectParams {
 interface AssistantSessionParams {
     sessionId: string;
 }
+interface AssistantSandboxParams {
+    sandboxId: string;
+}
 interface AssistantTerminalParams {
     terminalId: string;
 }
+interface AssistantTimerParams {
+    timerId: string;
+}
+interface AssistantAutomationParams {
+    automationId: string;
+}
+interface AssistantFollowUpParams {
+    taskId: string;
+}
 interface AssistantMessagesQuery {
     cursor?: string;
     limit?: string;
     direction?: string;
 }
+interface AssistantTimerListQuery {
+    status?: "active" | "completed" | "cancelled" | "failed";
+    controlSessionId?: string;
+    limit?: string;
+}
+interface AssistantAutomationListQuery {
+    status?: "active" | "completed" | "cancelled" | "failed";
+    controlSessionId?: string;
+    limit?: string;
+}
+interface AssistantAutomationRecentRunsQuery {
+    controlSessionId?: string;
+    limit?: string;
+}
+interface AssistantFollowUpListQuery {
+    status?: "active" | "waiting_user" | "completed" | "failed" | "cancelled";
+    projectId?: string;
+    sessionId?: string;
+    limit?: string;
+}
+interface AssistantSandboxListQuery {
+    status?: "active" | "archived" | "expired" | "orphaned" | "deleted";
+    controlSessionId?: string;
+}
 interface AssistantTerminalListQuery {
     workspaceId?: string;
     projectId?: string;
@@ -49,6 +85,18 @@ interface AssistantSendMessageBody {
     reasoningLevel?: string | null;
     permissionMode?: string | null;
 }
+interface AssistantStartProjectSessionBody {
+    content?: string;
+    providerId?: "codex" | "claude-code" | null;
+    model?: string | null;
+    reasoningLevel?: string | null;
+    permissionMode?: string | null;
+}
+interface AssistantStartSessionBody extends AssistantStartProjectSessionBody {
+    projectId?: string | null;
+    workspaceId?: string | null;
+    sandboxId?: string | null;
+}
 interface AssistantForkBody {
     sourceType?: "session" | "message";
     sourceMessageId?: string | null;
@@ -58,6 +106,104 @@ interface AssistantForkBody {
 interface AssistantTerminalInputBody {
     content?: string;
 }
+interface AssistantCreateTimerBody {
+    controlSessionId?: string | null;
+    projectId?: string | null;
+    targetSessionId?: string | null;
+    title?: string | null;
+    content?: string;
+    dueAt?: string | null;
+    afterSeconds?: number | string | null;
+}
+interface AssistantCreateFollowUpBody {
+    projectId?: string;
+    butlerSessionId?: string;
+    providerId?: "codex" | "claude-code" | null;
+    objective?: string;
+    completionCriteria?: string | null;
+    maxAutoContinueCount?: number | string | null;
+    checkIntervalSeconds?: number | string | null;
+}
+interface AssistantContinueFollowUpBody {
+    summary?: string;
+    continuePrompt?: string;
+}
+interface AssistantWaitingUserFollowUpBody {
+    summary?: string;
+    waitingReason?: string;
+}
+interface AssistantCompleteFollowUpBody {
+    summary?: string;
+}
+interface AssistantFailFollowUpBody {
+    summary?: string;
+    reason?: string | null;
+}
+interface AssistantCreateAutomationBody {
+    controlSessionId?: string | null;
+    projectId?: string | null;
+    targetSessionId?: string | null;
+    title?: string | null;
+    content?: string;
+    triggerType?: "once" | "interval" | "cron" | "condition" | null;
+    dueAt?: string | null;
+    afterSeconds?: number | string | null;
+    everySeconds?: number | string | null;
+    everyMinutes?: number | string | null;
+    everyHours?: number | string | null;
+    stopAt?: string | null;
+    cronMinute?: number | string | null;
+    cronHour?: number | string | null;
+    cronDaysOfWeek?: Array<number | string> | string | null;
+    conditionKind?: "git.remote_tag_changed" | "session.runtime_idle" | null;
+    repositoryUrl?: string | null;
+    pollIntervalSeconds?: number | string | null;
+    expiresAt?: string | null;
+    maxChecks?: number | string | null;
+    conditionSessionId?: string | null;
+    includeTriggerContext?: boolean | null;
+}
+interface AssistantUpdateAutomationBody {
+    title?: string | null;
+    content?: string | null;
+    includeTriggerContext?: boolean | null;
+    dueAt?: string | null;
+    everySeconds?: number | string | null;
+    everyMinutes?: number | string | null;
+    everyHours?: number | string | null;
+    stopAt?: string | null;
+    cronMinute?: number | string | null;
+    cronHour?: number | string | null;
+    cronDaysOfWeek?: Array<number | string> | string | null;
+    pollIntervalSeconds?: number | string | null;
+    expiresAt?: string | null;
+    maxChecks?: number | string | null;
+}
+interface AssistantCreateSandboxBody {
+    title?: string | null;
+    description?: string | null;
+    purpose?: string | null;
+    expiresAt?: string | null;
+    sourceKind?: "blank" | "clone" | null;
+    repositoryUrl?: string | null;
+    directoryName?: string | null;
+    auth?: {
+        mode?: "none";
+    } | {
+        mode: "basic";
+        username?: string;
+        password?: string;
+    } | {
+        mode: "token";
+        username?: string;
+        token?: string;
+    };
+}
+interface AssistantPromoteSandboxBody {
+    mode?: "pin" | "project";
+    projectName?: string | null;
+    defaultProvider?: "codex" | "claude-code" | null;
+}
 interface AssistantCreateWorkspaceDirectoryBody {
     parentPath?: string;
     directoryName?: string;
@@ -127,9 +273,19 @@ export declare class AssistantCapabilityController {
     readonly listProjectSessions: (request: FastifyRequest<{
         Params: AssistantProjectParams;
     }>, reply: FastifyReply) => Promise<void>;
+    readonly startProjectSession: (request: FastifyRequest<{
+        Params: AssistantProjectParams;
+        Body: AssistantStartProjectSessionBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly startSession: (request: FastifyRequest<{
+        Body: AssistantStartSessionBody;
+    }>, reply: FastifyReply) => Promise<void>;
     readonly getSession: (request: FastifyRequest<{
         Params: AssistantSessionParams;
     }>, reply: FastifyReply) => Promise<void>;
+    readonly deleteSession: (request: FastifyRequest<{
+        Params: AssistantSessionParams;
+    }>, reply: FastifyReply) => Promise<void>;
     readonly listSessionMessages: (request: FastifyRequest<{
         Params: AssistantSessionParams;
         Querystring: AssistantMessagesQuery;
@@ -145,6 +301,84 @@ export declare class AssistantCapabilityController {
         Params: AssistantSessionParams;
         Body: AssistantForkBody;
     }>, reply: FastifyReply) => Promise<void>;
+    readonly listTimers: (request: FastifyRequest<{
+        Querystring: AssistantTimerListQuery;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly getTimer: (request: FastifyRequest<{
+        Params: AssistantTimerParams;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly createTimer: (request: FastifyRequest<{
+        Body: AssistantCreateTimerBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly cancelTimer: (request: FastifyRequest<{
+        Params: AssistantTimerParams;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly listFollowUps: (request: FastifyRequest<{
+        Querystring: AssistantFollowUpListQuery;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly getFollowUp: (request: FastifyRequest<{
+        Params: AssistantFollowUpParams;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly createFollowUp: (request: FastifyRequest<{
+        Body: AssistantCreateFollowUpBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly continueFollowUp: (request: FastifyRequest<{
+        Params: AssistantFollowUpParams;
+        Body: AssistantContinueFollowUpBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly markFollowUpWaitingUser: (request: FastifyRequest<{
+        Params: AssistantFollowUpParams;
+        Body: AssistantWaitingUserFollowUpBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly completeFollowUp: (request: FastifyRequest<{
+        Params: AssistantFollowUpParams;
+        Body: AssistantCompleteFollowUpBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly failFollowUp: (request: FastifyRequest<{
+        Params: AssistantFollowUpParams;
+        Body: AssistantFailFollowUpBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly listAutomations: (request: FastifyRequest<{
+        Querystring: AssistantAutomationListQuery;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly getAutomation: (request: FastifyRequest<{
+        Params: AssistantAutomationParams;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly createAutomation: (request: FastifyRequest<{
+        Body: AssistantCreateAutomationBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly updateAutomation: (request: FastifyRequest<{
+        Params: AssistantAutomationParams;
+        Body: AssistantUpdateAutomationBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly cancelAutomation: (request: FastifyRequest<{
+        Params: AssistantAutomationParams;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly skipAutomationWait: (request: FastifyRequest<{
+        Params: AssistantAutomationParams;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly listAutomationRuns: (request: FastifyRequest<{
+        Params: AssistantAutomationParams;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly listRecentAutomationRuns: (request: FastifyRequest<{
+        Querystring: AssistantAutomationRecentRunsQuery;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly listSandboxes: (request: FastifyRequest<{
+        Querystring: AssistantSandboxListQuery;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly createSandbox: (request: FastifyRequest<{
+        Body: AssistantCreateSandboxBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly promoteSandbox: (request: FastifyRequest<{
+        Params: AssistantSandboxParams;
+        Body: AssistantPromoteSandboxBody;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly expireSandbox: (request: FastifyRequest<{
+        Params: AssistantSandboxParams;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly removeSandbox: (request: FastifyRequest<{
+        Params: AssistantSandboxParams;
+    }>, reply: FastifyReply) => Promise<void>;
     readonly listTerminals: (request: FastifyRequest<{
         Querystring: AssistantTerminalListQuery;
     }>, reply: FastifyReply) => Promise<void>;