@konglx/rotom 2.21.0

package/dist/cli/skill.js

@@ -0,0 +1,173 @@
+/**
+ * rotom skill — 全局 skill 知识库 + (group, agent, skill) 绑定关系管理。
+ *
+ * skill 是全局能力资产,本身无可见性。可见性靠绑定:某群的某 agent 持有某 skill。
+ * `rotom skill mine <groupId>` 查当前 agent 在该群绑定的 skill。
+ */
+import { api, printJson, printTable, fail, flagStr, requireFlag, } from "./common.js";
+import { route, qs, usage } from "./routes.js";
+import { readFileSync } from "node:fs";
+function fmtPreview(s, len = 60) {
+    if (!s)
+        return "";
+    const flat = s.replace(/\n/g, " ");
+    return flat.length > len ? flat.slice(0, len) + "…" : flat;
+}
+/** --content 'foo' 或 --content @path/to/file.md。 */
+function resolveContent(v) {
+    if (v.startsWith("@")) {
+        try {
+            return readFileSync(v.slice(1), "utf-8");
+        }
+        catch (e) {
+            fail(`读取 --content ${v} 失败:${e.message}`);
+        }
+    }
+    return v;
+}
+export async function cmdSkill(agent, rest, flags) {
+    const sub = rest[0];
+    // ── list(全局 skill 索引)─────────────────────────────────────────────
+    if (sub === "list") {
+        const category = flagStr(flags, "category");
+        const url = `${route("/skills")}${qs({ category })}`;
+        const data = await api(agent, "GET", url);
+        printTable(data.map((s) => ({
+            name: s.name,
+            category: s.category ?? "",
+            description: fmtPreview(s.description, 50),
+            views: s.view_count,
+        })), ["name", "category", "description", "views"]);
+        return;
+    }
+    // ── search ───────────────────────────────────────────────────────────
+    if (sub === "search") {
+        const keyword = rest[1];
+        if (!keyword)
+            usage("skill search", "<keyword>");
+        const data = await api(agent, "GET", `${route("/skills/search")}${qs({ q: keyword })}`);
+        printTable(data.map((s) => ({
+            name: s.name,
+            category: s.category ?? "",
+            description: fmtPreview(s.description, 50),
+        })), ["name", "category", "description"]);
+        return;
+    }
+    // ── get(看全文,view_count+1)─────────────────────────────────────────
+    if (sub === "get") {
+        const name = rest[1];
+        if (!name)
+            usage("skill get", "<name>");
+        const data = await api(agent, "GET", route("/skills/:name", name));
+        printJson(data);
+        return;
+    }
+    // ── create ───────────────────────────────────────────────────────────
+    if (sub === "create") {
+        const name = requireFlag(flags, "name");
+        const description = requireFlag(flags, "description");
+        const contentRaw = requireFlag(flags, "content");
+        const content = resolveContent(contentRaw);
+        const category = flagStr(flags, "category");
+        if (!name || !description || !content)
+            fail("--name, --description, --content 都必填");
+        const body = { name: name.trim(), description, content, createdBy: agent.name };
+        if (category)
+            body.category = category;
+        const data = await api(agent, "POST", "/skills", body);
+        printJson(data);
+        return;
+    }
+    // ── update ───────────────────────────────────────────────────────────
+    if (sub === "update") {
+        const name = rest[1];
+        if (!name)
+            usage("skill update", "<name> [--description D] [--content C|@file] [--category C]");
+        const body = {};
+        const description = flagStr(flags, "description");
+        const contentRaw = flagStr(flags, "content");
+        const category = flagStr(flags, "category");
+        if (description !== undefined)
+            body.description = description;
+        if (contentRaw !== undefined)
+            body.content = resolveContent(contentRaw);
+        if (category !== undefined)
+            body.category = category;
+        if (Object.keys(body).length === 0)
+            fail("至少传一个 --description / --content / --category");
+        await api(agent, "PATCH", route("/skills/:name", name), body);
+        printJson({ ok: true });
+        return;
+    }
+    // ── remove ──────────────────────────────────────────────────────────
+    if (sub === "remove") {
+        const name = rest[1];
+        if (!name)
+            usage("skill remove", "<name>");
+        await api(agent, "DELETE", route("/skills/:name", name));
+        printJson({ ok: true });
+        return;
+    }
+    // ── bind / unbind ───────────────────────────────────────────────────
+    if (sub === "bind") {
+        const groupId = rest[1];
+        const agentName = rest[2];
+        const skillName = rest[3];
+        if (!groupId || !agentName || !skillName)
+            usage("skill bind", "<groupId> <agentName> <skillName>");
+        await api(agent, "POST", route("/groups/:groupId/skills/:agent/bind", groupId, agentName), {
+            skillName,
+        });
+        printJson({ ok: true });
+        return;
+    }
+    if (sub === "unbind") {
+        const groupId = rest[1];
+        const agentName = rest[2];
+        const skillName = rest[3];
+        if (!groupId || !agentName || !skillName)
+            usage("skill unbind", "<groupId> <agentName> <skillName>");
+        await api(agent, "DELETE", route("/groups/:groupId/skills/:agent/bind/:skill", groupId, agentName, skillName));
+        printJson({ ok: true });
+        return;
+    }
+    // ── bindings(查绑定关系)───────────────────────────────────────────
+    if (sub === "bindings") {
+        const groupId = rest[1];
+        const agentName = rest[2];
+        const url = `${route("/skills/bindings/all")}${qs({ groupId, agentName })}`;
+        const data = await api(agent, "GET", url);
+        printTable(data.map((b) => ({
+            group: b.group_id?.slice(0, 8) ?? "",
+            agent: b.agent_name,
+            skill: b.skill_name ?? b.skill_id?.slice(0, 8) ?? "",
+        })), ["group", "agent", "skill"]);
+        return;
+    }
+    // ── mine(当前 agent 在该群绑定的 skill)────────────────────────────
+    if (sub === "mine") {
+        const groupId = rest[1];
+        if (!groupId)
+            usage("skill mine", "<groupId>");
+        const data = await api(agent, "GET", route("/groups/:groupId/skills/:agent", groupId, agent.name));
+        printTable(data.map((s) => ({
+            name: s.name,
+            category: s.category ?? "",
+            description: fmtPreview(s.description, 50),
+        })), ["name", "category", "description"]);
+        return;
+    }
+    fail(`unknown skill subcommand: ${sub || "(none)"}
+usage:
+  skill list [--category <c>]
+  skill search <keyword>
+  skill get <name>
+  skill create --name <n> --description <d> --content <c|@file> [--category <c>]
+  skill update <name> [--description <d>] [--content <c|@file>] [--category <c>]
+  skill remove <name>
+  skill bind <groupId> <agentName> <skillName>
+  skill unbind <groupId> <agentName> <skillName>
+  skill bindings [groupId] [agentName]
+  skill mine <groupId>                # 当前 agent 在该群绑定的 skill
+`);
+}

package/dist/cli/team.js

@@ -0,0 +1,106 @@
+/**
+ * rotom team — Federation 团队 CLI(不依赖 dashboard)。
+ *
+ * 通过本机 master 的 REST API 操作 federation 状态:
+ *   rotom team join <coordEndpoint> [--team-name <name>]
+ *   rotom team leave
+ *   rotom team list
+ *   rotom team members [--team-id <id>]
+ *
+ * 不需要 agent 上下文(不带 token),走 masterFetch。
+ * 本机 master 必须先起来;若未起,fail 给清晰提示。
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { ROTOM_HOME, fail, flagStr, printJson, } from "./common.js";
+import { masterFetch, route } from "./routes.js";
+import { resolveLocalMasterUrl } from "./identity.js";
+async function probeLocalMaster(httpBase) {
+    const probe = await masterFetch(`${httpBase}/api/identity`, { method: "GET" }).catch(() => null);
+    if (!probe || probe.status === 0) {
+        fail(`local master unreachable at ${httpBase}. ` +
+            `Start it first (e.g. \`rotom master start --daemon\` or \`rotom run opc\`).`);
+    }
+    if (probe.status >= 500) {
+        fail(`local master returned HTTP ${probe.status}: ${JSON.stringify(probe.data)}`);
+    }
+}
+/** 从 ~/.rotom/team.json 读当前 teamId(member 模式) */
+function readLocalTeamId() {
+    const teamConfigPath = path.join(ROTOM_HOME, "team.json");
+    try {
+        const raw = JSON.parse(fs.readFileSync(teamConfigPath, "utf-8"));
+        if (raw?.id)
+            return raw.id;
+    }
+    catch { /* not joined yet */ }
+    fail(`no ~/.rotom/team.json found — run \`rotom team join <coordEndpoint>\` first, ` +
+        `or pass --team-id explicitly.`);
+}
+export async function cmdTeam(rest, flags) {
+    const sub = rest[0];
+    if (!sub) {
+        fail("usage: rotom team <join|leave|list|members> [args]\n" +
+            "  join <coordEndpoint> [--team-name N]\n" +
+            "  leave\n" +
+            "  list\n" +
+            "  members [--team-id ID]");
+    }
+    const httpBase = resolveLocalMasterUrl();
+    await probeLocalMaster(httpBase);
+    const args = rest.slice(1);
+    switch (sub) {
+        case "join": return cmdTeamJoin(httpBase, args, flags);
+        case "leave": return cmdTeamLeave(httpBase);
+        case "list": return cmdTeamList(httpBase);
+        case "members": return cmdTeamMembers(httpBase, args, flags);
+        default:
+            fail(`unknown team subcommand: ${sub}\nRun 'rotom team' for usage.`);
+    }
+}
+async function cmdTeamJoin(httpBase, args, flags) {
+    const coordEndpoint = args[0];
+    if (!coordEndpoint) {
+        fail("usage: rotom team join <coordEndpoint> [--team-name <name>]\n  coordEndpoint e.g. ws://192.168.1.5:28800");
+    }
+    const teamName = flagStr(flags, "team-name");
+    const body = { coordEndpoint };
+    if (teamName)
+        body.teamName = teamName;
+    const resp = await masterFetch(`${httpBase}/api/teams/join`, {
+        method: "POST",
+        body: JSON.stringify(body),
+    });
+    if (resp.status < 200 || resp.status >= 300) {
+        const err = resp.data?.error ?? JSON.stringify(resp.data);
+        fail(`team join failed (HTTP ${resp.status}): ${err}`);
+    }
+    printJson(resp.data);
+}
+async function cmdTeamLeave(httpBase) {
+    const resp = await masterFetch(`${httpBase}/api/teams/leave`, { method: "POST" });
+    if (resp.status < 200 || resp.status >= 300) {
+        const err = resp.data?.error ?? JSON.stringify(resp.data);
+        fail(`team leave failed (HTTP ${resp.status}): ${err}`);
+    }
+    printJson(resp.data);
+}
+async function cmdTeamList(httpBase) {
+    const resp = await masterFetch(`${httpBase}/api/teams`, { method: "GET" });
+    if (resp.status < 200 || resp.status >= 300) {
+        const err = resp.data?.error ?? JSON.stringify(resp.data);
+        fail(`team list failed (HTTP ${resp.status}): ${err}`);
+    }
+    printJson(resp.data);
+}
+async function cmdTeamMembers(httpBase, args, flags) {
+    const teamIdFlag = flagStr(flags, "team-id");
+    const teamId = teamIdFlag ?? readLocalTeamId();
+    const url = `${httpBase}${route("/api/teams/:id/members", teamId)}`;
+    const resp = await masterFetch(url, { method: "GET" });
+    if (resp.status < 200 || resp.status >= 300) {
+        const err = resp.data?.error ?? JSON.stringify(resp.data);
+        fail(`team members failed (HTTP ${resp.status}): ${err}`);
+    }
+    printJson(resp.data);
+}

package/dist/executor/claude-code-hook.cjs

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+/**
+ * Claude Code PreToolUse hook bridge.
+ *
+ * claude spawns this script (one process per tool call) and feeds it a JSON
+ * payload like:
+ *   { "hook_event_name": "PreToolUse", "tool_name": "Bash", "tool_input": { "command": "rm -rf …" } }
+ * on stdin. The script forwards the payload to the unix-domain-socket server
+ * the ClaudeCodeExecutor opened for this run, waits (possibly for minutes)
+ * for the user's verdict, and prints the claude-shaped response JSON to
+ * stdout:
+ *   { "hookSpecificOutput": { "hookEventName": "PreToolUse",
+ *                              "permissionDecision": "allow" | "deny",
+ *                              "permissionDecisionReason": "…" } }
+ *
+ * The socket path travels via the ROTOM_APPROVAL_SOCKET env var the executor
+ * sets when spawning claude. A shared-secret token in ROTOM_APPROVAL_TOKEN
+ * keeps stray local processes from injecting decisions.
+ *
+ * Fail-closed: if the socket is unreachable we deny the call. The executor
+ * is the one place that should ever auto-allow, and it does that by simply
+ * not configuring the hook (no settings.json, no socket).
+ */
+
+"use strict";
+
+const http = require("node:http");
+
+const socketPath = process.env.ROTOM_APPROVAL_SOCKET || "";
+const token = process.env.ROTOM_APPROVAL_TOKEN || "";
+
+function emitDeny(reason) {
+  process.stdout.write(JSON.stringify({
+    hookSpecificOutput: {
+      hookEventName: "PreToolUse",
+      permissionDecision: "deny",
+      permissionDecisionReason: reason,
+    },
+  }));
+  process.exit(0);
+}
+
+if (!socketPath) {
+  emitDeny("rotom approval bridge: ROTOM_APPROVAL_SOCKET not set");
+}
+
+let raw = "";
+process.stdin.setEncoding("utf8");
+process.stdin.on("data", (chunk) => { raw += chunk; });
+process.stdin.on("end", () => {
+  const req = http.request({
+    socketPath,
+    method: "POST",
+    path: "/approval",
+    headers: {
+      "content-type": "application/json",
+      "x-rotom-token": token,
+    },
+  }, (res) => {
+    let body = "";
+    res.setEncoding("utf8");
+    res.on("data", (c) => { body += c; });
+    res.on("end", () => {
+      if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) {
+        process.stdout.write(body);
+        process.exit(0);
+      } else {
+        emitDeny(`rotom approval bridge: server returned ${res.statusCode}`);
+      }
+    });
+  });
+  req.on("error", (err) => {
+    emitDeny(`rotom approval bridge: ${err.message}`);
+  });
+  req.write(raw);
+  req.end();
+});
+process.stdin.on("error", (err) => {
+  emitDeny(`rotom approval bridge: stdin error ${err.message}`);
+});

package/dist/executor/cli-executor.js

@@ -0,0 +1,8 @@
+/**
+ * Code Agent — CLI Executor interface
+ *
+ * Pluggable interface for spawning CLI tools (Claude Code, Codex, etc.)
+ * to execute issue tasks. Each executor wraps a specific CLI tool and
+ * streams output back via the onOutput callback.
+ */
+export {};