@kevisual/cnb 0.0.12 → 0.0.13

package/dist/opencode.js

@@ -1,4 +1,20 @@
+var __create = Object.create;
+var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __toESM = (mod, isNodeMode, target) => {
+  target = mod != null ? __create(__getProtoOf(mod)) : {};
+  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
+  for (let key of __getOwnPropNames(mod))
+    if (!__hasOwnProp.call(to, key))
+      __defProp(to, key, {
+        get: () => mod[key],
+        enumerable: true
+      });
+  return to;
+};
+var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
@@ -9,6 +25,297 @@ var __export = (target, all) => {
     });
 };
 
+// node_modules/.pnpm/dayjs@1.11.19/node_modules/dayjs/dayjs.min.js
+var require_dayjs_min = __commonJS((exports, module) => {
+  (function(t, e) {
+    typeof exports == "object" && typeof module != "undefined" ? module.exports = e() : typeof define == "function" && define.amd ? define(e) : (t = typeof globalThis != "undefined" ? globalThis : t || self).dayjs = e();
+  })(exports, function() {
+    var t = 1000, e = 60000, n = 3600000, r = "millisecond", i = "second", s = "minute", u = "hour", a = "day", o = "week", c = "month", f = "quarter", h = "year", d = "date", l = "Invalid Date", $ = /^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{1,2})?[.:]?(\d+)?$/, y = /\[([^\]]+)]|Y{1,4}|M{1,4}|D{1,2}|d{1,4}|H{1,2}|h{1,2}|a|A|m{1,2}|s{1,2}|Z{1,2}|SSS/g, M = { name: "en", weekdays: "Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"), months: "January_February_March_April_May_June_July_August_September_October_November_December".split("_"), ordinal: function(t2) {
+      var e2 = ["th", "st", "nd", "rd"], n2 = t2 % 100;
+      return "[" + t2 + (e2[(n2 - 20) % 10] || e2[n2] || e2[0]) + "]";
+    } }, m = function(t2, e2, n2) {
+      var r2 = String(t2);
+      return !r2 || r2.length >= e2 ? t2 : "" + Array(e2 + 1 - r2.length).join(n2) + t2;
+    }, v = { s: m, z: function(t2) {
+      var e2 = -t2.utcOffset(), n2 = Math.abs(e2), r2 = Math.floor(n2 / 60), i2 = n2 % 60;
+      return (e2 <= 0 ? "+" : "-") + m(r2, 2, "0") + ":" + m(i2, 2, "0");
+    }, m: function t2(e2, n2) {
+      if (e2.date() < n2.date())
+        return -t2(n2, e2);
+      var r2 = 12 * (n2.year() - e2.year()) + (n2.month() - e2.month()), i2 = e2.clone().add(r2, c), s2 = n2 - i2 < 0, u2 = e2.clone().add(r2 + (s2 ? -1 : 1), c);
+      return +(-(r2 + (n2 - i2) / (s2 ? i2 - u2 : u2 - i2)) || 0);
+    }, a: function(t2) {
+      return t2 < 0 ? Math.ceil(t2) || 0 : Math.floor(t2);
+    }, p: function(t2) {
+      return { M: c, y: h, w: o, d: a, D: d, h: u, m: s, s: i, ms: r, Q: f }[t2] || String(t2 || "").toLowerCase().replace(/s$/, "");
+    }, u: function(t2) {
+      return t2 === undefined;
+    } }, g = "en", D = {};
+    D[g] = M;
+    var p = "$isDayjsObject", S = function(t2) {
+      return t2 instanceof _ || !(!t2 || !t2[p]);
+    }, w = function t2(e2, n2, r2) {
+      var i2;
+      if (!e2)
+        return g;
+      if (typeof e2 == "string") {
+        var s2 = e2.toLowerCase();
+        D[s2] && (i2 = s2), n2 && (D[s2] = n2, i2 = s2);
+        var u2 = e2.split("-");
+        if (!i2 && u2.length > 1)
+          return t2(u2[0]);
+      } else {
+        var a2 = e2.name;
+        D[a2] = e2, i2 = a2;
+      }
+      return !r2 && i2 && (g = i2), i2 || !r2 && g;
+    }, O = function(t2, e2) {
+      if (S(t2))
+        return t2.clone();
+      var n2 = typeof e2 == "object" ? e2 : {};
+      return n2.date = t2, n2.args = arguments, new _(n2);
+    }, b = v;
+    b.l = w, b.i = S, b.w = function(t2, e2) {
+      return O(t2, { locale: e2.$L, utc: e2.$u, x: e2.$x, $offset: e2.$offset });
+    };
+    var _ = function() {
+      function M2(t2) {
+        this.$L = w(t2.locale, null, true), this.parse(t2), this.$x = this.$x || t2.x || {}, this[p] = true;
+      }
+      var m2 = M2.prototype;
+      return m2.parse = function(t2) {
+        this.$d = function(t3) {
+          var { date: e2, utc: n2 } = t3;
+          if (e2 === null)
+            return new Date(NaN);
+          if (b.u(e2))
+            return new Date;
+          if (e2 instanceof Date)
+            return new Date(e2);
+          if (typeof e2 == "string" && !/Z$/i.test(e2)) {
+            var r2 = e2.match($);
+            if (r2) {
+              var i2 = r2[2] - 1 || 0, s2 = (r2[7] || "0").substring(0, 3);
+              return n2 ? new Date(Date.UTC(r2[1], i2, r2[3] || 1, r2[4] || 0, r2[5] || 0, r2[6] || 0, s2)) : new Date(r2[1], i2, r2[3] || 1, r2[4] || 0, r2[5] || 0, r2[6] || 0, s2);
+            }
+          }
+          return new Date(e2);
+        }(t2), this.init();
+      }, m2.init = function() {
+        var t2 = this.$d;
+        this.$y = t2.getFullYear(), this.$M = t2.getMonth(), this.$D = t2.getDate(), this.$W = t2.getDay(), this.$H = t2.getHours(), this.$m = t2.getMinutes(), this.$s = t2.getSeconds(), this.$ms = t2.getMilliseconds();
+      }, m2.$utils = function() {
+        return b;
+      }, m2.isValid = function() {
+        return !(this.$d.toString() === l);
+      }, m2.isSame = function(t2, e2) {
+        var n2 = O(t2);
+        return this.startOf(e2) <= n2 && n2 <= this.endOf(e2);
+      }, m2.isAfter = function(t2, e2) {
+        return O(t2) < this.startOf(e2);
+      }, m2.isBefore = function(t2, e2) {
+        return this.endOf(e2) < O(t2);
+      }, m2.$g = function(t2, e2, n2) {
+        return b.u(t2) ? this[e2] : this.set(n2, t2);
+      }, m2.unix = function() {
+        return Math.floor(this.valueOf() / 1000);
+      }, m2.valueOf = function() {
+        return this.$d.getTime();
+      }, m2.startOf = function(t2, e2) {
+        var n2 = this, r2 = !!b.u(e2) || e2, f2 = b.p(t2), l2 = function(t3, e3) {
+          var i2 = b.w(n2.$u ? Date.UTC(n2.$y, e3, t3) : new Date(n2.$y, e3, t3), n2);
+          return r2 ? i2 : i2.endOf(a);
+        }, $2 = function(t3, e3) {
+          return b.w(n2.toDate()[t3].apply(n2.toDate("s"), (r2 ? [0, 0, 0, 0] : [23, 59, 59, 999]).slice(e3)), n2);
+        }, y2 = this.$W, M3 = this.$M, m3 = this.$D, v2 = "set" + (this.$u ? "UTC" : "");
+        switch (f2) {
+          case h:
+            return r2 ? l2(1, 0) : l2(31, 11);
+          case c:
+            return r2 ? l2(1, M3) : l2(0, M3 + 1);
+          case o:
+            var g2 = this.$locale().weekStart || 0, D2 = (y2 < g2 ? y2 + 7 : y2) - g2;
+            return l2(r2 ? m3 - D2 : m3 + (6 - D2), M3);
+          case a:
+          case d:
+            return $2(v2 + "Hours", 0);
+          case u:
+            return $2(v2 + "Minutes", 1);
+          case s:
+            return $2(v2 + "Seconds", 2);
+          case i:
+            return $2(v2 + "Milliseconds", 3);
+          default:
+            return this.clone();
+        }
+      }, m2.endOf = function(t2) {
+        return this.startOf(t2, false);
+      }, m2.$set = function(t2, e2) {
+        var n2, o2 = b.p(t2), f2 = "set" + (this.$u ? "UTC" : ""), l2 = (n2 = {}, n2[a] = f2 + "Date", n2[d] = f2 + "Date", n2[c] = f2 + "Month", n2[h] = f2 + "FullYear", n2[u] = f2 + "Hours", n2[s] = f2 + "Minutes", n2[i] = f2 + "Seconds", n2[r] = f2 + "Milliseconds", n2)[o2], $2 = o2 === a ? this.$D + (e2 - this.$W) : e2;
+        if (o2 === c || o2 === h) {
+          var y2 = this.clone().set(d, 1);
+          y2.$d[l2]($2), y2.init(), this.$d = y2.set(d, Math.min(this.$D, y2.daysInMonth())).$d;
+        } else
+          l2 && this.$d[l2]($2);
+        return this.init(), this;
+      }, m2.set = function(t2, e2) {
+        return this.clone().$set(t2, e2);
+      }, m2.get = function(t2) {
+        return this[b.p(t2)]();
+      }, m2.add = function(r2, f2) {
+        var d2, l2 = this;
+        r2 = Number(r2);
+        var $2 = b.p(f2), y2 = function(t2) {
+          var e2 = O(l2);
+          return b.w(e2.date(e2.date() + Math.round(t2 * r2)), l2);
+        };
+        if ($2 === c)
+          return this.set(c, this.$M + r2);
+        if ($2 === h)
+          return this.set(h, this.$y + r2);
+        if ($2 === a)
+          return y2(1);
+        if ($2 === o)
+          return y2(7);
+        var M3 = (d2 = {}, d2[s] = e, d2[u] = n, d2[i] = t, d2)[$2] || 1, m3 = this.$d.getTime() + r2 * M3;
+        return b.w(m3, this);
+      }, m2.subtract = function(t2, e2) {
+        return this.add(-1 * t2, e2);
+      }, m2.format = function(t2) {
+        var e2 = this, n2 = this.$locale();
+        if (!this.isValid())
+          return n2.invalidDate || l;
+        var r2 = t2 || "YYYY-MM-DDTHH:mm:ssZ", i2 = b.z(this), s2 = this.$H, u2 = this.$m, a2 = this.$M, o2 = n2.weekdays, c2 = n2.months, f2 = n2.meridiem, h2 = function(t3, n3, i3, s3) {
+          return t3 && (t3[n3] || t3(e2, r2)) || i3[n3].slice(0, s3);
+        }, d2 = function(t3) {
+          return b.s(s2 % 12 || 12, t3, "0");
+        }, $2 = f2 || function(t3, e3, n3) {
+          var r3 = t3 < 12 ? "AM" : "PM";
+          return n3 ? r3.toLowerCase() : r3;
+        };
+        return r2.replace(y, function(t3, r3) {
+          return r3 || function(t4) {
+            switch (t4) {
+              case "YY":
+                return String(e2.$y).slice(-2);
+              case "YYYY":
+                return b.s(e2.$y, 4, "0");
+              case "M":
+                return a2 + 1;
+              case "MM":
+                return b.s(a2 + 1, 2, "0");
+              case "MMM":
+                return h2(n2.monthsShort, a2, c2, 3);
+              case "MMMM":
+                return h2(c2, a2);
+              case "D":
+                return e2.$D;
+              case "DD":
+                return b.s(e2.$D, 2, "0");
+              case "d":
+                return String(e2.$W);
+              case "dd":
+                return h2(n2.weekdaysMin, e2.$W, o2, 2);
+              case "ddd":
+                return h2(n2.weekdaysShort, e2.$W, o2, 3);
+              case "dddd":
+                return o2[e2.$W];
+              case "H":
+                return String(s2);
+              case "HH":
+                return b.s(s2, 2, "0");
+              case "h":
+                return d2(1);
+              case "hh":
+                return d2(2);
+              case "a":
+                return $2(s2, u2, true);
+              case "A":
+                return $2(s2, u2, false);
+              case "m":
+                return String(u2);
+              case "mm":
+                return b.s(u2, 2, "0");
+              case "s":
+                return String(e2.$s);
+              case "ss":
+                return b.s(e2.$s, 2, "0");
+              case "SSS":
+                return b.s(e2.$ms, 3, "0");
+              case "Z":
+                return i2;
+            }
+            return null;
+          }(t3) || i2.replace(":", "");
+        });
+      }, m2.utcOffset = function() {
+        return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
+      }, m2.diff = function(r2, d2, l2) {
+        var $2, y2 = this, M3 = b.p(d2), m3 = O(r2), v2 = (m3.utcOffset() - this.utcOffset()) * e, g2 = this - m3, D2 = function() {
+          return b.m(y2, m3);
+        };
+        switch (M3) {
+          case h:
+            $2 = D2() / 12;
+            break;
+          case c:
+            $2 = D2();
+            break;
+          case f:
+            $2 = D2() / 3;
+            break;
+          case o:
+            $2 = (g2 - v2) / 604800000;
+            break;
+          case a:
+            $2 = (g2 - v2) / 86400000;
+            break;
+          case u:
+            $2 = g2 / n;
+            break;
+          case s:
+            $2 = g2 / e;
+            break;
+          case i:
+            $2 = g2 / t;
+            break;
+          default:
+            $2 = g2;
+        }
+        return l2 ? $2 : b.a($2);
+      }, m2.daysInMonth = function() {
+        return this.endOf(c).$D;
+      }, m2.$locale = function() {
+        return D[this.$L];
+      }, m2.locale = function(t2, e2) {
+        if (!t2)
+          return this.$L;
+        var n2 = this.clone(), r2 = w(t2, e2, true);
+        return r2 && (n2.$L = r2), n2;
+      }, m2.clone = function() {
+        return b.w(this.$d, this);
+      }, m2.toDate = function() {
+        return new Date(this.valueOf());
+      }, m2.toJSON = function() {
+        return this.isValid() ? this.toISOString() : null;
+      }, m2.toISOString = function() {
+        return this.$d.toISOString();
+      }, m2.toString = function() {
+        return this.$d.toUTCString();
+      }, M2;
+    }(), k = _.prototype;
+    return O.prototype = k, [["$ms", r], ["$s", i], ["$m", s], ["$H", u], ["$W", a], ["$M", c], ["$y", h], ["$D", d]].forEach(function(t2) {
+      k[t2[1]] = function(e2) {
+        return this.$g(e2, t2[0], t2[1]);
+      };
+    }), O.extend = function(t2, e2) {
+      return t2.$i || (t2(e2, _, O), t2.$i = true), O;
+    }, O.locale = w, O.isDayjs = S, O.unix = function(t2) {
+      return O(1000 * t2);
+    }, O.en = D[g], O.Ls = D, O.p = {}, O;
+  });
+});
+
 // node_modules/.pnpm/@kevisual+router@0.0.64_typescript@5.9.3/node_modules/@kevisual/router/dist/router.js
 import require$$1, { webcrypto } from "node:crypto";
 import require$$2 from "node:http";
@@ -18226,25 +18533,25 @@ InitEnv.init();
 import { createRequire } from "node:module";
 import fs from "node:fs";
 import path from "node:path";
-var __create = Object.create;
-var __getProtoOf = Object.getPrototypeOf;
+var __create2 = Object.create;
+var __getProtoOf2 = Object.getPrototypeOf;
 var __defProp2 = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __toESM = (mod, isNodeMode, target) => {
-  target = mod != null ? __create(__getProtoOf(mod)) : {};
+var __getOwnPropNames2 = Object.getOwnPropertyNames;
+var __hasOwnProp2 = Object.prototype.hasOwnProperty;
+var __toESM2 = (mod, isNodeMode, target) => {
+  target = mod != null ? __create2(__getProtoOf2(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp2(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
+  for (let key of __getOwnPropNames2(mod))
+    if (!__hasOwnProp2.call(to, key))
       __defProp2(to, key, {
         get: () => mod[key],
         enumerable: true
       });
   return to;
 };
-var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __commonJS2 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
-var require_package = __commonJS((exports, module) => {
+var require_package = __commonJS2((exports, module) => {
   module.exports = {
     name: "dotenv",
     version: "17.2.3",
@@ -18308,7 +18615,7 @@ var require_package = __commonJS((exports, module) => {
     }
   };
 });
-var require_main = __commonJS((exports, module) => {
+var require_main = __commonJS2((exports, module) => {
   var fs2 = __require("fs");
   var path2 = __require("path");
   var os = __require("os");
@@ -18635,7 +18942,7 @@ var require_main = __commonJS((exports, module) => {
   exports.populate = DotenvModule.populate;
   module.exports = DotenvModule;
 });
-var import_dotenv = __toESM(require_main(), 1);
+var import_dotenv = __toESM2(require_main(), 1);
 var fileIsExist = (path2) => {
   try {
     fs.accessSync(path2, fs.constants.F_OK);
@@ -33359,7 +33666,7 @@ app.route({
   path: "cnb",
   key: "user-check",
   description: "检查用户登录状态，参数checkToken,default true; checkCookie, default false",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33404,7 +33711,7 @@ app.route({
   path: "cnb",
   key: "list-repos",
   description: "列出我的代码仓库",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33445,7 +33752,7 @@ app.route({
   path: "cnb",
   key: "create-repo",
   description: "创建代码仓库, 参数name, visibility, description",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33482,7 +33789,7 @@ app.route({
   path: "cnb",
   key: "create-repo-file",
   description: "在代码仓库中创建文件, repoName, filePath, content, encoding",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33517,7 +33824,7 @@ app.route({
   path: "cnb",
   key: "delete-repo",
   description: "删除代码仓库, 参数name",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33543,7 +33850,7 @@ app.route({
   path: "cnb",
   key: "clean-closed-workspace",
   description: "批量删除已停止的cnb工作空间",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33571,6 +33878,39 @@ app.route({
   ctx.forward({ code: 200, message: "已关闭的工作空间删除完成", data: results });
 }).addTo(app);
 
+// node_modules/.pnpm/nanoid@5.1.6/node_modules/nanoid/index.js
+import { webcrypto as crypto2 } from "node:crypto";
+
+// node_modules/.pnpm/nanoid@5.1.6/node_modules/nanoid/url-alphabet/index.js
+var urlAlphabet2 = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
+
+// node_modules/.pnpm/nanoid@5.1.6/node_modules/nanoid/index.js
+var POOL_SIZE_MULTIPLIER2 = 128;
+var pool2;
+var poolOffset2;
+function fillPool2(bytes) {
+  if (!pool2 || pool2.length < bytes) {
+    pool2 = Buffer.allocUnsafe(bytes * POOL_SIZE_MULTIPLIER2);
+    crypto2.getRandomValues(pool2);
+    poolOffset2 = 0;
+  } else if (poolOffset2 + bytes > pool2.length) {
+    crypto2.getRandomValues(pool2);
+    poolOffset2 = 0;
+  }
+  poolOffset2 += bytes;
+}
+function nanoid4(size = 21) {
+  fillPool2(size |= 0);
+  let id2 = "";
+  for (let i = poolOffset2 - size;i < poolOffset2; i++) {
+    id2 += urlAlphabet2[pool2[i] & 63];
+  }
+  return id2;
+}
+
+// agent/routes/workspace/keep.ts
+var import_dayjs = __toESM(require_dayjs_min(), 1);
+
 // src/workspace/keep-live.ts
 import WebSocket from "ws";
 
@@ -33724,7 +34064,7 @@ app.route({
   path: "cnb",
   key: "keep-workspace-alive",
   description: "保持工作空间存活技能,参数wsUrl:工作空间访问URL，cookie:访问工作空间所需的cookie",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: [],
     ...{
@@ -33743,9 +34083,9 @@ app.route({
   if (!cookie) {
     ctx.throw(400, "缺少访问工作空间所需的cookie参数");
   }
-  const existing = keepAliveMap.get(wsUrl);
+  const existing = Array.from(keepAliveMap.values()).find((info) => info.id && info.KeepAlive?.wsUrl === wsUrl);
   if (existing) {
-    ctx.body = { message: `工作空间 ${wsUrl} 的保持存活任务已在运行中` };
+    ctx.body = { message: `工作空间 ${wsUrl} 的保持存活任务已在运行中`, id: existing.id };
     return;
   }
   console.log(`启动保持工作空间 ${wsUrl} 存活的任务`);
@@ -33756,72 +34096,154 @@ app.route({
       console.log(`工作空间 ${wsUrl} 保持存活任务已连接`);
     },
     onMessage: (data) => {
-      const aliveInfo = keepAliveMap.get(wsUrl);
-      if (aliveInfo) {
-        aliveInfo.updatedTime = Date.now();
+      for (const info of keepAliveMap.values()) {
+        if (info.KeepAlive?.wsUrl === wsUrl) {
+          info.updatedTime = Date.now();
+          break;
+        }
       }
     },
     debug: true,
     onExit: (code) => {
       console.log(`工作空间 ${wsUrl} 保持存活任务已退出，退出码: ${code}`);
-      keepAliveMap.delete(wsUrl);
+      for (const [id3, info] of keepAliveMap.entries()) {
+        if (info.KeepAlive?.wsUrl === wsUrl) {
+          keepAliveMap.delete(id3);
+          break;
+        }
+      }
     }
   });
-  keepAliveMap.set(wsUrl, { startTime: Date.now(), updatedTime: Date.now(), KeepAlive: keep });
-  ctx.body = { message: `已启动保持工作空间 ${wsUrl} 存活的任务` };
+  const id2 = nanoid4(6).toLowerCase();
+  keepAliveMap.set(id2, { startTime: Date.now(), updatedTime: Date.now(), KeepAlive: keep, id: id2 });
+  ctx.body = { content: `已启动保持工作空间 ${wsUrl} 存活的任务`, id: id2 };
 }).addTo(app);
 app.route({
   path: "cnb",
   key: "list-keep-alive-tasks",
   description: "获取保持工作空间存活任务列表技能",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: []
   }
 }).define(async (ctx) => {
-  const list = Array.from(keepAliveMap.entries()).map(([wsUrl, info]) => ({
-    wsUrl,
-    startTime: info.startTime,
-    updatedTime: info.updatedTime
-  }));
+  const list = Array.from(keepAliveMap.entries()).map(([id2, info]) => {
+    const now = Date.now();
+    const duration4 = Math.floor((now - info.startTime) / 60000);
+    return {
+      id: id2,
+      wsUrl: info.KeepAlive?.wsUrl,
+      startTime: info.startTime,
+      startTimeStr: import_dayjs.default(info.startTime).format("YYYY-MM-DD HH:mm"),
+      updatedTime: info.updatedTime,
+      updatedTimeStr: import_dayjs.default(info.updatedTime).format("YYYY-MM-DD HH:mm"),
+      duration: duration4
+    };
+  });
   ctx.body = { list };
 }).addTo(app);
 app.route({
   path: "cnb",
   key: "stop-keep-workspace-alive",
-  description: "停止保持工作空间存活技能, 参数wsUrl:工作空间访问URL",
-  middleware: ["auth"],
+  description: "停止保持工作空间存活技能, 参数wsUrl:工作空间访问URL或者id",
+  middleware: ["admin-auth"],
   metadata: {
     tags: [],
     ...{
       args: {
-        wsUrl: tool.schema.string().describe("工作空间的访问URL")
+        wsUrl: tool.schema.string().optional().describe("工作空间的访问URL"),
+        id: tool.schema.string().optional().describe("保持存活任务的唯一标识符")
       }
     }
   }
 }).define(async (ctx) => {
   const wsUrl = ctx.query?.wsUrl;
-  if (!wsUrl) {
-    ctx.throw(400, "缺少工作空间访问URL参数");
+  const id2 = ctx.query?.id;
+  if (!wsUrl && !id2) {
+    ctx.throw(400, "缺少工作空间访问URL参数或唯一标识符");
+  }
+  let targetId;
+  let wsUrlFound;
+  if (id2) {
+    const info = keepAliveMap.get(id2);
+    if (info) {
+      targetId = id2;
+      wsUrlFound = info.KeepAlive?.wsUrl;
+    }
+  } else if (wsUrl) {
+    for (const [key, info] of keepAliveMap.entries()) {
+      if (info.KeepAlive?.wsUrl === wsUrl) {
+        targetId = key;
+        wsUrlFound = wsUrl;
+        break;
+      }
+    }
   }
-  const keepAlive = keepAliveMap.get(wsUrl);
-  if (keepAlive) {
+  if (targetId) {
+    const keepAlive = keepAliveMap.get(targetId);
     const endTime = Date.now();
     const duration4 = endTime - keepAlive.startTime;
     keepAlive?.KeepAlive?.disconnect();
-    keepAliveMap.delete(wsUrl);
-    ctx.body = { message: `已停止保持工作空间 ${wsUrl} 存活的任务，持续时间: ${duration4}ms` };
+    keepAliveMap.delete(targetId);
+    ctx.body = { content: `已停止保持工作空间 ${wsUrlFound} 存活的任务，持续时间: ${duration4}ms`, id: targetId };
   } else {
-    ctx.body = { message: `没有找到工作空间 ${wsUrl} 的保持存活任务` };
+    ctx.body = { content: `没有找到对应的工作空间保持存活任务` };
+  }
+}).addTo(app);
+app.route({
+  path: "cnb",
+  key: "reset-keep-workspace-alive",
+  description: "对存活的工作空间，startTime进行重置",
+  middleware: ["admin-auth"],
+  metadata: {
+    tags: []
+  }
+}).define(async (ctx) => {
+  const now = Date.now();
+  for (const info of keepAliveMap.values()) {
+    info.startTime = now;
   }
+  ctx.body = { content: `已重置所有存活工作空间的开始时间` };
+}).addTo(app);
+app.route({
+  path: "cnb",
+  key: "clear-keep-workspace-alive",
+  description: "对存活的工作空间，超过5小时的进行清理",
+  middleware: ["admin-auth"],
+  metadata: {
+    tags: []
+  }
+}).define(async (ctx) => {
+  const res = clearKeepAlive();
+  ctx.body = {
+    content: `已清理所有存活工作空间中超过5小时的任务` + (res.length ? `，清理项：${res.map((i) => i.wsUrl).join(", ")}` : ""),
+    list: res
+  };
 }).addTo(app);
+var clearKeepAlive = () => {
+  const now = Date.now();
+  let clearedArr = [];
+  for (const [id2, info] of keepAliveMap.entries()) {
+    if (now - info.startTime > FIVE_HOURS) {
+      console.log(`工作空间 ${info.KeepAlive?.wsUrl} 超过5小时，自动停止`);
+      info.KeepAlive?.disconnect?.();
+      keepAliveMap.delete(id2);
+      clearedArr.push({ id: id2, wsUrl: info.KeepAlive?.wsUrl });
+    }
+  }
+  return clearedArr;
+};
+var FIVE_HOURS = 5 * 60 * 60 * 1000;
+setInterval(() => {
+  clearKeepAlive();
+}, FIVE_HOURS);
 
 // agent/routes/workspace/index.ts
 app.route({
   path: "cnb",
   key: "start-workspace",
   description: "启动开发工作空间, 参数 repo",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33852,7 +34274,7 @@ app.route({
   path: "cnb",
   key: "list-workspace",
   description: "获取cnb开发工作空间列表，可选参数 status=running 获取运行中的环境",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33881,7 +34303,7 @@ app.route({
   path: "cnb",
   key: "get-workspace",
   description: "获取工作空间详情，通过 repo 和 sn 获取",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33910,7 +34332,7 @@ app.route({
   path: "cnb",
   key: "delete-workspace",
   description: "删除工作空间，通过 pipelineId 或 sn",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33947,7 +34369,7 @@ app.route({
   path: "cnb",
   key: "stop-workspace",
   description: "停止工作空间，通过 pipelineId 或 sn",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -33971,33 +34393,35 @@ app.route({
 }).addTo(app);
 
 // agent/routes/call/index.ts
-app.route({
-  path: "call",
-  key: "",
-  description: "调用",
-  middleware: ["auth"],
-  metadata: {
-    tags: ["opencode"],
-    ...createSkill({
-      skill: "call-app",
-      title: "调用app应用",
-      summary: "调用router的应用, 参数path, key, payload",
-      args: {
-        path: tool2.schema.string().describe("应用路径，例如 cnb"),
-        key: tool2.schema.string().optional().describe("应用key，例如 list-repos"),
-        payload: tool2.schema.object({}).optional().describe("调用参数")
-      }
-    })
-  }
-}).define(async (ctx) => {
-  const { path: path2, key } = ctx.query;
-  console.log("call app", ctx.query);
-  if (!path2) {
-    ctx.throw("路径path不能为空");
-  }
-  const res = await ctx.run({ path: path2, key, payload: ctx.query.payload || {} });
-  ctx.forward(res);
-}).addTo(app);
+if (!app.hasRoute("call")) {
+  app.route({
+    path: "call",
+    key: "",
+    description: "调用",
+    middleware: ["admin-auth"],
+    metadata: {
+      tags: ["opencode"],
+      ...createSkill({
+        skill: "call-app",
+        title: "调用app应用",
+        summary: "调用router的应用, 参数path, key, payload",
+        args: {
+          path: tool2.schema.string().describe("应用路径，例如 cnb"),
+          key: tool2.schema.string().optional().describe("应用key，例如 list-repos"),
+          payload: tool2.schema.object({}).optional().describe("调用参数")
+        }
+      })
+    }
+  }).define(async (ctx) => {
+    const { path: path2, key } = ctx.query;
+    console.log("call app", ctx.query);
+    if (!path2) {
+      ctx.throw("路径path不能为空");
+    }
+    const res = await ctx.run({ path: path2, key, payload: ctx.query.payload || {} });
+    ctx.forward(res);
+  }).addTo(app);
+}
 
 // src/common/cnb-env.ts
 var CNB_ENV = {
@@ -34024,7 +34448,7 @@ app.route({
   path: "cnb",
   key: "get-cnb-port-uri",
   description: "获取当前cnb工作空间的port代理uri",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -34049,7 +34473,7 @@ app.route({
   path: "cnb",
   key: "get-cnb-vscode-uri",
   description: "获取当前cnb工作空间的vscode代理uri, 包括多种访问方式, 如web、vscode、codebuddy、cursor、ssh",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -34110,7 +34534,7 @@ app.route({
   path: "cnb",
   key: "set-cnb-cookie",
   description: "设置当前cnb工作空间的cookie环境变量",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -34135,7 +34559,7 @@ app.route({
   path: "cnb",
   key: "get-cnb-cookie",
   description: "获取当前cnb工作空间的cookie环境变量",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -34150,17 +34574,17 @@ app.route({
 }).addTo(app);
 
 // node_modules/.pnpm/@kevisual+ai@0.0.24/node_modules/@kevisual/ai/dist/ai-provider-browser.js
-var __create2 = Object.create;
-var __getProtoOf2 = Object.getPrototypeOf;
+var __create3 = Object.create;
+var __getProtoOf3 = Object.getPrototypeOf;
 var __defProp3 = Object.defineProperty;
-var __getOwnPropNames2 = Object.getOwnPropertyNames;
+var __getOwnPropNames3 = Object.getOwnPropertyNames;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __hasOwnProp2 = Object.prototype.hasOwnProperty;
-var __toESM2 = (mod, isNodeMode, target) => {
-  target = mod != null ? __create2(__getProtoOf2(mod)) : {};
+var __hasOwnProp3 = Object.prototype.hasOwnProperty;
+var __toESM3 = (mod, isNodeMode, target) => {
+  target = mod != null ? __create3(__getProtoOf3(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp3(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames2(mod))
-    if (!__hasOwnProp2.call(to, key))
+  for (let key of __getOwnPropNames3(mod))
+    if (!__hasOwnProp3.call(to, key))
       __defProp3(to, key, {
         get: () => mod[key],
         enumerable: true
@@ -34174,14 +34598,14 @@ var __toCommonJS = (from) => {
     return entry;
   entry = __defProp3({}, "__esModule", { value: true });
   if (from && typeof from === "object" || typeof from === "function")
-    __getOwnPropNames2(from).map((key) => !__hasOwnProp2.call(entry, key) && __defProp3(entry, key, {
+    __getOwnPropNames3(from).map((key) => !__hasOwnProp3.call(entry, key) && __defProp3(entry, key, {
       get: () => from[key],
       enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
     }));
   __moduleCache.set(from, entry);
   return entry;
 };
-var __commonJS2 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __commonJS3 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __export2 = (target, all) => {
   for (var name in all)
     __defProp3(target, name, {
@@ -36351,7 +36775,7 @@ var init_events = __esm(() => {
   Object.assign(EventEmitter4, { once: once2, getEventListeners, getMaxListeners: getMaxListeners2, setMaxListeners: setMaxListeners2, EventEmitter: EventEmitter4, usingDomains: false, captureRejectionSymbol, errorMonitor: kErrorMonitor, addAbortListener, init: EventEmitter4, listenerCount: listenerCount2 });
   events_default = EventEmitter4;
 });
-var require_stream = __commonJS2((exports, module) => {
+var require_stream = __commonJS3((exports, module) => {
   var __commonJS22 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
   var require_primordials = __commonJS22((exports2, module2) => {
 
@@ -41412,27 +41836,27 @@ var init_crypto = __esm(() => {
       exports.pbkdf2Sync = nativePBKDF2Sync, exports.pbkdf2 = nativePBKDF2;
   });
   require_browserify_cipher = __commonJS22((exports) => {
-    var crypto2 = (init_crypto(), __toCommonJS(exports_crypto));
-    exports.createCipher = exports.Cipher = crypto2.createCipher;
-    exports.createCipheriv = exports.Cipheriv = crypto2.createCipheriv;
-    exports.createDecipher = exports.Decipher = crypto2.createDecipher;
-    exports.createDecipheriv = exports.Decipheriv = crypto2.createDecipheriv;
-    exports.listCiphers = exports.getCiphers = crypto2.getCiphers;
+    var crypto22 = (init_crypto(), __toCommonJS(exports_crypto));
+    exports.createCipher = exports.Cipher = crypto22.createCipher;
+    exports.createCipheriv = exports.Cipheriv = crypto22.createCipheriv;
+    exports.createDecipher = exports.Decipher = crypto22.createDecipher;
+    exports.createDecipheriv = exports.Decipheriv = crypto22.createDecipheriv;
+    exports.listCiphers = exports.getCiphers = crypto22.getCiphers;
   });
   require_diffie_hellman = __commonJS22((exports) => {
-    var crypto2 = (init_crypto(), __toCommonJS(exports_crypto));
-    exports.DiffieHellmanGroup = crypto2.DiffieHellmanGroup;
-    exports.createDiffieHellmanGroup = crypto2.createDiffieHellmanGroup;
-    exports.getDiffieHellman = crypto2.getDiffieHellman;
-    exports.createDiffieHellman = crypto2.createDiffieHellman;
-    exports.DiffieHellman = crypto2.DiffieHellman;
+    var crypto22 = (init_crypto(), __toCommonJS(exports_crypto));
+    exports.DiffieHellmanGroup = crypto22.DiffieHellmanGroup;
+    exports.createDiffieHellmanGroup = crypto22.createDiffieHellmanGroup;
+    exports.getDiffieHellman = crypto22.getDiffieHellman;
+    exports.createDiffieHellman = crypto22.createDiffieHellman;
+    exports.DiffieHellman = crypto22.DiffieHellman;
   });
   require_browserify_sign = __commonJS22((exports) => {
-    var crypto2 = (init_crypto(), __toCommonJS(exports_crypto));
-    exports.createSign = crypto2.createSign;
-    exports.Sign = crypto2.Sign;
-    exports.createVerify = crypto2.createVerify;
-    exports.Verify = crypto2.Verify;
+    var crypto22 = (init_crypto(), __toCommonJS(exports_crypto));
+    exports.createSign = crypto22.createSign;
+    exports.Sign = crypto22.Sign;
+    exports.createVerify = crypto22.createVerify;
+    exports.Verify = crypto22.Verify;
   });
   require_package2 = __commonJS22((exports, module) => {
     module.exports = { name: "elliptic", version: "6.6.1", description: "EC cryptography", main: "lib/elliptic.js", files: ["lib"], scripts: { lint: "eslint lib test", "lint:fix": "npm run lint -- --fix", unit: "istanbul test _mocha --reporter=spec test/index.js", test: "npm run lint && npm run unit", version: "grunt dist && git add dist/" }, repository: { type: "git", url: "git@github.com:indutny/elliptic" }, keywords: ["EC", "Elliptic", "curve", "Cryptography"], author: "Fedor Indutny <fedor@indutny.com>", license: "MIT", bugs: { url: "https://github.com/indutny/elliptic/issues" }, homepage: "https://github.com/indutny/elliptic", devDependencies: { brfs: "^2.0.2", coveralls: "^3.1.0", eslint: "^7.6.0", grunt: "^1.2.1", "grunt-browserify": "^5.3.0", "grunt-cli": "^1.3.2", "grunt-contrib-connect": "^3.0.0", "grunt-contrib-copy": "^1.0.0", "grunt-contrib-uglify": "^5.0.0", "grunt-mocha-istanbul": "^5.0.2", "grunt-saucelabs": "^9.0.1", istanbul: "^0.4.5", mocha: "^8.0.1" }, dependencies: { "bn.js": "^4.11.9", brorand: "^1.1.0", "hash.js": "^1.0.0", "hmac-drbg": "^1.0.1", inherits: "^2.0.4", "minimalistic-assert": "^1.0.1", "minimalistic-crypto-utils": "^1.0.1" } };
@@ -43011,13 +43435,13 @@ var init_crypto = __esm(() => {
         };
     } else
       try {
-        if (crypto2 = (init_crypto(), __toCommonJS(exports_crypto)), typeof crypto2.randomBytes !== "function")
+        if (crypto22 = (init_crypto(), __toCommonJS(exports_crypto)), typeof crypto22.randomBytes !== "function")
           throw Error("Not supported");
         Rand.prototype._rand = function(n) {
-          return crypto2.randomBytes(n);
+          return crypto22.randomBytes(n);
         };
       } catch (e) {}
-    var crypto2;
+    var crypto22;
   });
   require_base = __commonJS22((exports, module) => {
     var BN = require_bn(), utils = require_utils2(), getNAF = utils.getNAF, getJSF = utils.getJSF, assert3 = utils.assert;
@@ -49218,12 +49642,12 @@ var init_crypto = __esm(() => {
     module.exports = EVP_BytesToKey;
   });
   require_browserify_aes = __commonJS22((exports) => {
-    var crypto2 = (init_crypto(), __toCommonJS(exports_crypto));
-    exports.createCipher = exports.Cipher = crypto2.createCipher;
-    exports.createCipheriv = exports.Cipheriv = crypto2.createCipheriv;
-    exports.createDecipher = exports.Decipher = crypto2.createDecipher;
-    exports.createDecipheriv = exports.Decipheriv = crypto2.createDecipheriv;
-    exports.listCiphers = exports.getCiphers = crypto2.getCiphers;
+    var crypto22 = (init_crypto(), __toCommonJS(exports_crypto));
+    exports.createCipher = exports.Cipher = crypto22.createCipher;
+    exports.createCipheriv = exports.Cipheriv = crypto22.createCipheriv;
+    exports.createDecipher = exports.Decipher = crypto22.createDecipher;
+    exports.createDecipheriv = exports.Decipheriv = crypto22.createDecipheriv;
+    exports.listCiphers = exports.getCiphers = crypto22.getCiphers;
   });
   require_fixProc = __commonJS22((exports, module) => {
     var findProc = /Proc-Type: 4,ENCRYPTED[\n\r]+DEK-Info: AES-((?:128)|(?:192)|(?:256))-CBC,([0-9A-H]+)[\n\r]+([0-9A-z\n\r+/=]+)[\n\r]+/m, startRegex = /^-----BEGIN ((?:.*? KEY)|CERTIFICATE)-----/m, fullRegex = /^-----BEGIN ((?:.*? KEY)|CERTIFICATE)-----([0-9A-z\n\r+/=]+)-----END \1-----$/m, evp = require_evp_bytestokey(), ciphers = require_browserify_aes(), Buffer22 = require_safe_buffer().Buffer;
@@ -52338,22 +52762,22 @@ var init_crypto = __esm(() => {
     };
   });
   require_public_encrypt = __commonJS22((exports) => {
-    var crypto2 = (init_crypto(), __toCommonJS(exports_crypto));
-    if (typeof crypto2.publicEncrypt !== "function")
-      crypto2 = require_browser2();
-    exports.publicEncrypt = crypto2.publicEncrypt;
-    exports.privateDecrypt = crypto2.privateDecrypt;
-    if (typeof crypto2.privateEncrypt !== "function")
+    var crypto22 = (init_crypto(), __toCommonJS(exports_crypto));
+    if (typeof crypto22.publicEncrypt !== "function")
+      crypto22 = require_browser2();
+    exports.publicEncrypt = crypto22.publicEncrypt;
+    exports.privateDecrypt = crypto22.privateDecrypt;
+    if (typeof crypto22.privateEncrypt !== "function")
       exports.privateEncrypt = require_browser2().privateEncrypt;
     else
-      exports.privateEncrypt = crypto2.privateEncrypt;
-    if (typeof crypto2.publicDecrypt !== "function")
+      exports.privateEncrypt = crypto22.privateEncrypt;
+    if (typeof crypto22.publicDecrypt !== "function")
       exports.publicDecrypt = require_browser2().publicDecrypt;
     else
-      exports.publicDecrypt = crypto2.publicDecrypt;
+      exports.publicDecrypt = crypto22.publicDecrypt;
   });
   require_browser3 = __commonJS22((exports) => {
-    var safeBuffer = require_safe_buffer(), randombytes = require_randombytes(), Buffer22 = safeBuffer.Buffer, kBufferMaxLength = safeBuffer.kMaxLength, crypto2 = globalThis.crypto || globalThis.msCrypto, kMaxUint32 = Math.pow(2, 32) - 1;
+    var safeBuffer = require_safe_buffer(), randombytes = require_randombytes(), Buffer22 = safeBuffer.Buffer, kBufferMaxLength = safeBuffer.kMaxLength, crypto22 = globalThis.crypto || globalThis.msCrypto, kMaxUint32 = Math.pow(2, 32) - 1;
     function assertOffset(offset, length) {
       if (typeof offset !== "number" || offset !== offset)
         throw TypeError("offset must be a number");
@@ -52370,7 +52794,7 @@ var init_crypto = __esm(() => {
       if (size + offset > length || size > kBufferMaxLength)
         throw RangeError("buffer too small");
     }
-    crypto2 && crypto2.getRandomValues, exports.randomFill = randomFill, exports.randomFillSync = randomFillSync;
+    crypto22 && crypto22.getRandomValues, exports.randomFill = randomFill, exports.randomFillSync = randomFillSync;
     function randomFill(buf, offset, size, cb) {
       if (!Buffer22.isBuffer(buf) && !(buf instanceof globalThis.Uint8Array))
         throw TypeError('"buf" argument must be a Buffer or Uint8Array');
@@ -52407,9 +52831,9 @@ var init_crypto = __esm(() => {
     }
   });
   require_randomfill = __commonJS22((exports, module) => {
-    var crypto2 = (init_crypto(), __toCommonJS(exports_crypto));
-    if (typeof crypto2.randomFill === "function" && typeof crypto2.randomFillSync === "function")
-      exports.randomFill = crypto2.randomFill, exports.randomFillSync = crypto2.randomFillSync;
+    var crypto22 = (init_crypto(), __toCommonJS(exports_crypto));
+    if (typeof crypto22.randomFill === "function" && typeof crypto22.randomFillSync === "function")
+      exports.randomFill = crypto22.randomFill, exports.randomFillSync = crypto22.randomFillSync;
     else
       module.exports = require_browser3();
   });
@@ -52506,7 +52930,7 @@ https://github.com/browserify/crypto-browserify`);
   webcrypto2 = crypto;
   crypto_default = crypto;
 });
-var require_core = __commonJS2((exports, module) => {
+var require_core = __commonJS3((exports, module) => {
   (function(root, factory) {
     if (typeof exports === "object") {
       module.exports = exports = factory();
@@ -52517,37 +52941,37 @@ var require_core = __commonJS2((exports, module) => {
     }
   })(exports, function() {
     var CryptoJS = CryptoJS || function(Math2, undefined2) {
-      var crypto2;
+      var crypto22;
       if (typeof window !== "undefined" && window.crypto) {
-        crypto2 = window.crypto;
+        crypto22 = window.crypto;
       }
       if (typeof self !== "undefined" && self.crypto) {
-        crypto2 = self.crypto;
+        crypto22 = self.crypto;
       }
       if (typeof globalThis !== "undefined" && globalThis.crypto) {
-        crypto2 = globalThis.crypto;
+        crypto22 = globalThis.crypto;
       }
-      if (!crypto2 && typeof window !== "undefined" && window.msCrypto) {
-        crypto2 = window.msCrypto;
+      if (!crypto22 && typeof window !== "undefined" && window.msCrypto) {
+        crypto22 = window.msCrypto;
       }
-      if (!crypto2 && typeof global !== "undefined" && global.crypto) {
-        crypto2 = global.crypto;
+      if (!crypto22 && typeof global !== "undefined" && global.crypto) {
+        crypto22 = global.crypto;
       }
-      if (!crypto2 && true) {
+      if (!crypto22 && true) {
         try {
-          crypto2 = (init_crypto(), __toCommonJS(exports_crypto));
+          crypto22 = (init_crypto(), __toCommonJS(exports_crypto));
         } catch (err) {}
       }
       var cryptoSecureRandomInt = function() {
-        if (crypto2) {
-          if (typeof crypto2.getRandomValues === "function") {
+        if (crypto22) {
+          if (typeof crypto22.getRandomValues === "function") {
             try {
-              return crypto2.getRandomValues(new Uint32Array(1))[0];
+              return crypto22.getRandomValues(new Uint32Array(1))[0];
             } catch (err) {}
           }
-          if (typeof crypto2.randomBytes === "function") {
+          if (typeof crypto22.randomBytes === "function") {
             try {
-              return crypto2.randomBytes(4).readInt32LE();
+              return crypto22.randomBytes(4).readInt32LE();
             } catch (err) {}
           }
         }
@@ -52789,7 +53213,7 @@ var require_core = __commonJS2((exports, module) => {
     return CryptoJS;
   });
 });
-var require_enc_base64 = __commonJS2((exports, module) => {
+var require_enc_base64 = __commonJS3((exports, module) => {
   (function(root, factory) {
     if (typeof exports === "object") {
       module.exports = exports = factory(require_core());
@@ -52867,7 +53291,7 @@ var require_enc_base64 = __commonJS2((exports, module) => {
     return CryptoJS.enc.Base64;
   });
 });
-var require_md52 = __commonJS2((exports, module) => {
+var require_md52 = __commonJS3((exports, module) => {
   (function(root, factory) {
     if (typeof exports === "object") {
       module.exports = exports = factory(require_core());
@@ -53042,7 +53466,7 @@ var require_md52 = __commonJS2((exports, module) => {
     return CryptoJS.MD5;
   });
 });
-var require_sha1 = __commonJS2((exports, module) => {
+var require_sha1 = __commonJS3((exports, module) => {
   (function(root, factory) {
     if (typeof exports === "object") {
       module.exports = exports = factory(require_core());
@@ -53129,7 +53553,7 @@ var require_sha1 = __commonJS2((exports, module) => {
     return CryptoJS.SHA1;
   });
 });
-var require_hmac2 = __commonJS2((exports, module) => {
+var require_hmac2 = __commonJS3((exports, module) => {
   (function(root, factory) {
     if (typeof exports === "object") {
       module.exports = exports = factory(require_core());
@@ -53189,7 +53613,7 @@ var require_hmac2 = __commonJS2((exports, module) => {
     })();
   });
 });
-var require_evpkdf = __commonJS2((exports, module) => {
+var require_evpkdf = __commonJS3((exports, module) => {
   (function(root, factory, undef) {
     if (typeof exports === "object") {
       module.exports = exports = factory(require_core(), require_sha1(), require_hmac2());
@@ -53246,7 +53670,7 @@ var require_evpkdf = __commonJS2((exports, module) => {
     return CryptoJS.EvpKDF;
   });
 });
-var require_cipher_core = __commonJS2((exports, module) => {
+var require_cipher_core = __commonJS3((exports, module) => {
   (function(root, factory, undef) {
     if (typeof exports === "object") {
       module.exports = exports = factory(require_core(), require_evpkdf());
@@ -53542,7 +53966,7 @@ var require_cipher_core = __commonJS2((exports, module) => {
     }();
   });
 });
-var require_aes = __commonJS2((exports, module) => {
+var require_aes = __commonJS3((exports, module) => {
   (function(root, factory, undef) {
     if (typeof exports === "object") {
       module.exports = exports = factory(require_core(), require_enc_base64(), require_md52(), require_evpkdf(), require_cipher_core());
@@ -53692,7 +54116,7 @@ var require_aes = __commonJS2((exports, module) => {
     return CryptoJS.AES;
   });
 });
-var require_enc_utf8 = __commonJS2((exports, module) => {
+var require_enc_utf8 = __commonJS3((exports, module) => {
   (function(root, factory) {
     if (typeof exports === "object") {
       module.exports = exports = factory(require_core());
@@ -53995,8 +54419,8 @@ class CNBChat extends BaseChat {
     };
   }
 }
-var import_aes = __toESM2(require_aes(), 1);
-var import_enc_utf8 = __toESM2(require_enc_utf8(), 1);
+var import_aes = __toESM3(require_aes(), 1);
+var import_enc_utf8 = __toESM3(require_enc_utf8(), 1);
 var CryptoJS = { AES: import_aes.default, enc: { Utf8: import_enc_utf8.default } };
 
 // agent/routes/knowledge/ai.ts
@@ -54004,7 +54428,7 @@ app.route({
   path: "cnb",
   key: "cnb-ai-chat",
   description: "调用cnb的知识库ai对话功能进行聊天",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -54106,7 +54530,7 @@ app.route({
   path: "cnb",
   key: "cnb-rag-query",
   description: "调用cnb的知识库RAG查询功能进行问答",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -54169,7 +54593,7 @@ app.route({
   path: "cnb",
   key: "list-issues",
   description: "查询 Issue 列表, 参数 repo, state, keyword, labels, page, page_size 等",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -54220,7 +54644,7 @@ app.route({
   path: "cnb",
   key: "create-issue",
   description: "创建 Issue, 参数 repo, title, body, assignees, labels, priority",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -54260,7 +54684,7 @@ app.route({
   path: "cnb",
   key: "complete-issue",
   description: "完成 Issue, 参数 repo, issueNumber",
-  middleware: ["auth"],
+  middleware: ["admin-auth"],
   metadata: {
     tags: ["opencode"],
     ...createSkill({
@@ -66711,7 +67135,7 @@ var ZodNanoID3 = /* @__PURE__ */ $constructor3("ZodNanoID", (inst, def) => {
   $ZodNanoID3.init(inst, def);
   ZodStringFormat3.init(inst, def);
 });
-function nanoid4(params) {
+function nanoid5(params) {
   return _nanoid3(ZodNanoID3, params);
 }
 var ZodCUID5 = /* @__PURE__ */ $constructor3("ZodCUID", (inst, def) => {
@@ -67709,7 +68133,7 @@ var _schemas2 = /* @__PURE__ */ Object.freeze({
   map: map3,
   meta: meta4,
   nan: nan3,
-  nanoid: nanoid4,
+  nanoid: nanoid5,
   nativeEnum: nativeEnum3,
   never: never3,
   nonoptional: nonoptional3,
@@ -68427,7 +68851,7 @@ var z3 = /* @__PURE__ */ Object.freeze({
   minSize: _minSize3,
   multipleOf: _multipleOf3,
   nan: nan3,
-  nanoid: nanoid4,
+  nanoid: nanoid5,
   nativeEnum: nativeEnum3,
   negative: _negative3,
   never: never3,