@lark-apaas/coding-miaoda-sandbox-skills 0.1.34 → 0.1.35

package/miaoda/authz-cli/SKILL.md

@@ -217,17 +217,17 @@ CREATE TABLE IF NOT EXISTS authz_role_permissions (
 
 ```sql
 -- 按「权限点位定义」表
-INSERT INTO authz_permissions (action, subject, description) VALUES
-  ('read', 'Task', '查看任务'),
-  ('create', 'Task', '创建任务'),
-  ('update', 'Task', '编辑任务'),
-  ('delete', 'Task', '删除任务');
+INSERT INTO authz_permissions (action, subject, description, creator) VALUES
+  ('read', 'Task', '查看任务', ROW('<当前妙搭 user_id>')::user_profile),
+  ('create', 'Task', '创建任务', ROW('<当前妙搭 user_id>')::user_profile),
+  ('update', 'Task', '编辑任务', ROW('<当前妙搭 user_id>')::user_profile),
+  ('delete', 'Task', '删除任务', ROW('<当前妙搭 user_id>')::user_profile);
 
 -- 按「角色-点位初始映射」表
-INSERT INTO authz_role_permissions (role_key, permission_id) VALUES
-  ('admin', (SELECT id FROM authz_permissions WHERE action='read' AND subject='Task')),
-  ('admin', (SELECT id FROM authz_permissions WHERE action='create' AND subject='Task')),
-  ('member', (SELECT id FROM authz_permissions WHERE action='read' AND subject='Task'));
+INSERT INTO authz_role_permissions (role_key, permission_id, creator) VALUES
+  ('admin', (SELECT id FROM authz_permissions WHERE action='read' AND subject='Task'), ROW('<当前妙搭 user_id>')::user_profile),
+  ('admin', (SELECT id FROM authz_permissions WHERE action='create' AND subject='Task'), ROW('<当前妙搭 user_id>')::user_profile),
+  ('member', (SELECT id FROM authz_permissions WHERE action='read' AND subject='Task'), ROW('<当前妙搭 user_id>')::user_profile);
 ```
 
 > 以上 SQL 仅为示例，实际数据根据权限设计方案生成。
@@ -238,12 +238,12 @@ INSERT INTO authz_role_permissions (role_key, permission_id) VALUES
 
 ```sql
 -- 1. 新增点位定义（authz_permissions 表）
-INSERT INTO authz_permissions (action, subject, description) VALUES
-  ('export', 'Task', '导出任务');
+INSERT INTO authz_permissions (action, subject, description, creator) VALUES
+  ('export', 'Task', '导出任务', ROW('<当前妙搭 user_id>')::user_profile);
 
 -- 2. 为需要该权限的角色添加映射（authz_role_permissions 表）
-INSERT INTO authz_role_permissions (role_key, permission_id) VALUES
-  ('admin', (SELECT id FROM authz_permissions WHERE action='export' AND subject='Task'));
+INSERT INTO authz_role_permissions (role_key, permission_id, creator) VALUES
+  ('admin', (SELECT id FROM authz_permissions WHERE action='export' AND subject='Task'), ROW('<当前妙搭 user_id>')::user_profile);
 ```
 
 > **必须同步**：

package/miaoda/lark-apps-authz/SKILL.md

@@ -218,18 +218,24 @@ lark-cli apps +role-member-remove --app-id "$app_id" --role-id <role_id> --all -
 按权限设计方案的「权限点位定义」和「角色-点位初始映射」表预填：
 
 ```sql
--- 按「权限点位定义」表
-INSERT INTO authz_permissions (action, subject, description) VALUES
+-- 权限点位
+INSERT INTO authz_permissions (action, subject, description, creator)
+SELECT action, subject, description, ROW('<当前妙搭 user_id>')::user_profile
+FROM (VALUES
   ('read', 'Task', '查看任务'),
   ('create', 'Task', '创建任务'),
   ('update', 'Task', '编辑任务'),
-  ('delete', 'Task', '删除任务');
+  ('delete', 'Task', '删除任务')
+) AS v(action, subject, description);
 
--- 按「角色-点位初始映射」表
-INSERT INTO authz_role_permissions (role_key, permission_id) VALUES
+-- 角色-点位映射
+INSERT INTO authz_role_permissions (role_key, permission_id, creator)
+SELECT role_key, permission_id, ROW('<当前妙搭 user_id>')::user_profile
+FROM (VALUES
   ('admin', (SELECT id FROM authz_permissions WHERE action='read' AND subject='Task')),
   ('admin', (SELECT id FROM authz_permissions WHERE action='create' AND subject='Task')),
-  ('member', (SELECT id FROM authz_permissions WHERE action='read' AND subject='Task'));
+  ('member', (SELECT id FROM authz_permissions WHERE action='read' AND subject='Task'))
+) AS v(role_key, permission_id);
 ```
 
 > 以上 SQL 仅为示例，实际数据根据权限设计方案生成。
@@ -239,13 +245,13 @@ INSERT INTO authz_role_permissions (role_key, permission_id) VALUES
 新功能上线时，新增点位 + 初始映射 + 同步鉴权代码：
 
 ```sql
--- 1. 新增点位定义（authz_permissions 表）
-INSERT INTO authz_permissions (action, subject, description) VALUES
-  ('export', 'Task', '导出任务');
+-- 新增权限点位
+INSERT INTO authz_permissions (action, subject, description, creator) VALUES
+  ('export', 'Task', '导出任务', ROW('<当前妙搭 user_id>')::user_profile);
 
--- 2. 为需要该权限的角色添加映射（authz_role_permissions 表）
-INSERT INTO authz_role_permissions (role_key, permission_id) VALUES
-  ('admin', (SELECT id FROM authz_permissions WHERE action='export' AND subject='Task'));
+-- 新增角色-点位映射
+INSERT INTO authz_role_permissions (role_key, permission_id, creator) VALUES
+  ('admin', (SELECT id FROM authz_permissions WHERE action='export' AND subject='Task'), ROW('<当前妙搭 user_id>')::user_profile);
 ```
 
 > **必须同步**：

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/coding-miaoda-sandbox-skills",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "Miaoda 合并沙箱 skills 包（包含原 miaoda-skills 的 miaoda / miaoda-modern / miaoda-design / shared 四条业务线）；发布公网 npm，随沙箱运行时经 update-skills 同步到 .agent/skills/",
   "type": "module",
   "files": [