@nextclaw/app-runtime 0.4.0 → 0.4.1

package/dist/index.d.ts

@@ -31,6 +31,7 @@ import { PermissionsCommand } from "./commands/permissions.controller.js";
 import { AppMarketplaceMetadata, AppPublishFile, AppPublishPayload, AppPublishResult, DEFAULT_APP_MARKETPLACE_API_BASE } from "./publish/app-publish.types.js";
 import { AppMarketplaceClientService } from "./publish/app-marketplace-client.service.js";
 import { AppMarketplaceMetadataService } from "./publish/app-marketplace-metadata.service.js";
+import { PlatformAuthStateService, PlatformPublishAuthState } from "./publish/platform-auth-state.service.js";
 import { AppPublishService } from "./publish/app-publish.service.js";
 import { PublishCommand } from "./commands/publish.controller.js";
 import { RegistryCommand } from "./commands/registry.controller.js";
@@ -39,4 +40,4 @@ import { UpdateCommand } from "./commands/update.controller.js";
 import { UninstallCommand } from "./commands/uninstall.controller.js";
 import { AppHostHandle, AppHostService, AppHostStartOptions } from "./host/app-host.service.js";
 import { UiServerService } from "./ui/ui-server.service.js";
-export { AppBundleChecksums, AppBundleExtractResult, AppBundleMetadata, AppBundlePackResult, AppBundleService, AppDocumentAccessMode, AppDocumentAccessScope, AppDocumentGrantMap, AppDocumentGrantMutationResult, AppDocumentGrantState, AppGrantService, AppHomeService, AppHostHandle, AppHostService, AppHostStartOptions, AppInfoResult, AppInstallResult, AppInstallSourceKind, AppInstallationService, AppInstalledPermissionState, AppInstanceService, AppLaunchResolution, AppMainManifest, AppManifest, AppManifestBundle, AppManifestService, AppManifestSummary, AppMarketplaceClientService, AppMarketplaceMetadata, AppMarketplaceMetadataService, AppPermissionSummary, AppPermissions, AppPermissionsService, AppPublishFile, AppPublishPayload, AppPublishResult, AppPublishService, AppPublisher, AppRegistry, AppRegistryAppRecord, AppRegistryConfig, AppRegistryConfigService, AppRegistryConfigSnapshot, AppRegistryInstalledVersion, AppRegistryService, AppRemoteRegistryClientService, AppRemoteRegistryDocument, AppRemoteRegistryResolution, AppRemoteRegistryVersion, AppRunResult, AppRuntimeCliService, AppRuntimeOptionsService, AppUiManifest, AppUninstallResult, AppUpdateResult, CreateCliOptions, CreateCommand, DEFAULT_APP_MARKETPLACE_API_BASE, DEFAULT_APP_REGISTRY_URL, GrantCliOptions, GrantCommand, HostBridgeServer, InfoCommand, InstallCliOptions, InstallCommand, InstalledAppListItem, JsonOnlyCliOptions, ListCommand, MainRunRequest, MainRunResult, MainRunnerService, PackCliOptions, PackCommand, PermissionsCommand, PublishCliOptions, PublishCommand, RegistryCommand, ResolvedDocumentGrant, ResolvedPermissions, RevokeCliOptions, RevokeCommand, RuntimeCliOptions, UiServerService, UninstallCliOptions, UninstallCommand, UpdateCliOptions, UpdateCommand, WasmDocumentSummaryInput, WasmMainRunnerService, WasmSidecarClientService };
+export { AppBundleChecksums, AppBundleExtractResult, AppBundleMetadata, AppBundlePackResult, AppBundleService, AppDocumentAccessMode, AppDocumentAccessScope, AppDocumentGrantMap, AppDocumentGrantMutationResult, AppDocumentGrantState, AppGrantService, AppHomeService, AppHostHandle, AppHostService, AppHostStartOptions, AppInfoResult, AppInstallResult, AppInstallSourceKind, AppInstallationService, AppInstalledPermissionState, AppInstanceService, AppLaunchResolution, AppMainManifest, AppManifest, AppManifestBundle, AppManifestService, AppManifestSummary, AppMarketplaceClientService, AppMarketplaceMetadata, AppMarketplaceMetadataService, AppPermissionSummary, AppPermissions, AppPermissionsService, AppPublishFile, AppPublishPayload, AppPublishResult, AppPublishService, AppPublisher, AppRegistry, AppRegistryAppRecord, AppRegistryConfig, AppRegistryConfigService, AppRegistryConfigSnapshot, AppRegistryInstalledVersion, AppRegistryService, AppRemoteRegistryClientService, AppRemoteRegistryDocument, AppRemoteRegistryResolution, AppRemoteRegistryVersion, AppRunResult, AppRuntimeCliService, AppRuntimeOptionsService, AppUiManifest, AppUninstallResult, AppUpdateResult, CreateCliOptions, CreateCommand, DEFAULT_APP_MARKETPLACE_API_BASE, DEFAULT_APP_REGISTRY_URL, GrantCliOptions, GrantCommand, HostBridgeServer, InfoCommand, InstallCliOptions, InstallCommand, InstalledAppListItem, JsonOnlyCliOptions, ListCommand, MainRunRequest, MainRunResult, MainRunnerService, PackCliOptions, PackCommand, PermissionsCommand, PlatformAuthStateService, PlatformPublishAuthState, PublishCliOptions, PublishCommand, RegistryCommand, ResolvedDocumentGrant, ResolvedPermissions, RevokeCliOptions, RevokeCommand, RuntimeCliOptions, UiServerService, UninstallCliOptions, UninstallCommand, UpdateCliOptions, UpdateCommand, WasmDocumentSummaryInput, WasmMainRunnerService, WasmSidecarClientService };

package/dist/index.js

@@ -25,6 +25,7 @@ import { PermissionsCommand } from "./commands/permissions.controller.js";
 import { DEFAULT_APP_MARKETPLACE_API_BASE } from "./publish/app-publish.types.js";
 import { AppMarketplaceClientService } from "./publish/app-marketplace-client.service.js";
 import { AppMarketplaceMetadataService } from "./publish/app-marketplace-metadata.service.js";
+import { PlatformAuthStateService } from "./publish/platform-auth-state.service.js";
 import { AppPublishService } from "./publish/app-publish.service.js";
 import { PublishCommand } from "./commands/publish.controller.js";
 import { RegistryCommand } from "./commands/registry.controller.js";
@@ -33,4 +34,4 @@ import { UninstallCommand } from "./commands/uninstall.controller.js";
 import { UpdateCommand } from "./commands/update.controller.js";
 import { AppRuntimeOptionsService } from "./cli/app-runtime-options.service.js";
 import { AppRuntimeCliService } from "./cli/app-runtime-cli.service.js";
-export { AppBundleService, AppGrantService, AppHomeService, AppHostService, AppInstallationService, AppInstanceService, AppManifestService, AppMarketplaceClientService, AppMarketplaceMetadataService, AppPermissionsService, AppPublishService, AppRegistryConfigService, AppRegistryService, AppRemoteRegistryClientService, AppRuntimeCliService, AppRuntimeOptionsService, CreateCommand, DEFAULT_APP_MARKETPLACE_API_BASE, DEFAULT_APP_REGISTRY_URL, GrantCommand, HostBridgeServer, InfoCommand, InstallCommand, ListCommand, MainRunnerService, PackCommand, PermissionsCommand, PublishCommand, RegistryCommand, RevokeCommand, UiServerService, UninstallCommand, UpdateCommand, WasmMainRunnerService, WasmSidecarClientService };
+export { AppBundleService, AppGrantService, AppHomeService, AppHostService, AppInstallationService, AppInstanceService, AppManifestService, AppMarketplaceClientService, AppMarketplaceMetadataService, AppPermissionsService, AppPublishService, AppRegistryConfigService, AppRegistryService, AppRemoteRegistryClientService, AppRuntimeCliService, AppRuntimeOptionsService, CreateCommand, DEFAULT_APP_MARKETPLACE_API_BASE, DEFAULT_APP_REGISTRY_URL, GrantCommand, HostBridgeServer, InfoCommand, InstallCommand, ListCommand, MainRunnerService, PackCommand, PermissionsCommand, PlatformAuthStateService, PublishCommand, RegistryCommand, RevokeCommand, UiServerService, UninstallCommand, UpdateCommand, WasmMainRunnerService, WasmSidecarClientService };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.4.0";
+var version = "0.4.1";
 //#endregion
 export { version };

package/dist/publish/app-marketplace-client.service.js

@@ -3,8 +3,8 @@ import "./app-publish.types.js";
 var AppMarketplaceClientService = class {
 	publish = async (params) => {
 		const apiBaseUrl = this.normalizeApiBase(params.apiBaseUrl ?? "https://apps-registry.nextclaw.io");
-		const token = params.token?.trim() || process.env.NEXTCLAW_MARKETPLACE_ADMIN_TOKEN?.trim();
-		if (!token) throw new Error("缺少 marketplace admin token，请传 --token 或设置 NEXTCLAW_MARKETPLACE_ADMIN_TOKEN。");
+		const token = params.token?.trim();
+		if (!token) throw new Error("缺少 marketplace publish token。请先登录 NextClaw，或传入 --token。");
 		const response = await fetch(`${apiBaseUrl}/api/v1/apps/publish`, {
 			method: "POST",
 			headers: {

package/dist/publish/app-publish.service.d.ts

@@ -3,6 +3,7 @@ import { AppBundleService } from "../bundle/app-bundle.service.js";
 import { AppPublishResult } from "./app-publish.types.js";
 import { AppMarketplaceClientService } from "./app-marketplace-client.service.js";
 import { AppMarketplaceMetadataService } from "./app-marketplace-metadata.service.js";
+import { PlatformAuthStateService } from "./platform-auth-state.service.js";
 
 //#region src/publish/app-publish.service.d.ts
 declare class AppPublishService {
@@ -10,13 +11,19 @@ declare class AppPublishService {
   private readonly bundleService;
   private readonly metadataService;
   private readonly marketplaceClient;
-  constructor(manifestService?: AppManifestService, bundleService?: AppBundleService, metadataService?: AppMarketplaceMetadataService, marketplaceClient?: AppMarketplaceClientService);
+  private readonly authStateService;
+  constructor(manifestService?: AppManifestService, bundleService?: AppBundleService, metadataService?: AppMarketplaceMetadataService, marketplaceClient?: AppMarketplaceClientService, authStateService?: PlatformAuthStateService);
   publish: (params: {
     appDirectory: string;
     metadataPath?: string;
     apiBaseUrl?: string;
     token?: string;
   }) => Promise<AppPublishResult>;
+  private resolvePublishActor;
+  private fetchCurrentPlatformUser;
+  private resolvePlatformApiBase;
+  private buildUserPublisher;
+  private buildOfficialPublisher;
 }
 //#endregion
 export { AppPublishService };

package/dist/publish/app-publish.service.js

@@ -2,16 +2,19 @@ import { AppManifestService } from "../manifest/app-manifest.service.js";
 import { AppBundleService } from "../bundle/app-bundle.service.js";
 import { AppMarketplaceClientService } from "./app-marketplace-client.service.js";
 import { AppMarketplaceMetadataService } from "./app-marketplace-metadata.service.js";
+import { PlatformAuthStateService } from "./platform-auth-state.service.js";
 import { readFile } from "node:fs/promises";
 import { createHash } from "node:crypto";
 import path from "node:path";
 //#region src/publish/app-publish.service.ts
+const DEFAULT_PLATFORM_API_BASE = "https://ai-gateway-api.nextclaw.io";
 var AppPublishService = class {
-	constructor(manifestService = new AppManifestService(), bundleService = new AppBundleService(), metadataService = new AppMarketplaceMetadataService(), marketplaceClient = new AppMarketplaceClientService()) {
+	constructor(manifestService = new AppManifestService(), bundleService = new AppBundleService(), metadataService = new AppMarketplaceMetadataService(), marketplaceClient = new AppMarketplaceClientService(), authStateService = new PlatformAuthStateService()) {
 		this.manifestService = manifestService;
 		this.bundleService = bundleService;
 		this.metadataService = metadataService;
 		this.marketplaceClient = marketplaceClient;
+		this.authStateService = authStateService;
 	}
 	publish = async (params) => {
 		const { appDirectory: inputAppDirectory, metadataPath, apiBaseUrl, token } = params;
@@ -22,6 +25,11 @@ var AppPublishService = class {
 			manifest: manifestBundle.manifest,
 			metadataPath
 		});
+		const actor = await this.resolvePublishActor({
+			apiBaseUrl,
+			explicitToken: token,
+			appId: manifestBundle.manifest.id
+		});
 		const bundle = await this.bundleService.packAppDirectory({ appDirectory });
 		const bundleBytes = Buffer.from(await readFile(bundle.bundlePath));
 		const bundleSha256 = createHash("sha256").update(bundleBytes).digest("hex");
@@ -43,11 +51,7 @@ var AppPublishService = class {
 			sourceRepo: metadata.sourceRepo,
 			homepage: metadata.homepage,
 			featured: metadata.featured ?? false,
-			publisher: metadata.publisher ?? {
-				id: "nextclaw",
-				name: "NextClaw",
-				url: "https://nextclaw.io"
-			},
+			publisher: actor.publisher,
 			manifest: manifestBundle.manifest,
 			permissions: manifestBundle.manifest.permissions ?? {},
 			bundleBase64: bundleBytes.toString("base64"),
@@ -61,7 +65,7 @@ var AppPublishService = class {
 			...await this.marketplaceClient.publish({
 				payload,
 				apiBaseUrl,
-				token
+				token: actor.token
 			}),
 			bundle: {
 				path: bundle.bundlePath,
@@ -69,6 +73,82 @@ var AppPublishService = class {
 			}
 		};
 	};
+	resolvePublishActor = async (params) => {
+		const explicitToken = params.explicitToken?.trim();
+		const envAdminToken = process.env.NEXTCLAW_MARKETPLACE_ADMIN_TOKEN?.trim();
+		if (explicitToken) {
+			const token = explicitToken;
+			if (!token) throw new Error("缺少 publish token。");
+			const me = await this.fetchCurrentPlatformUser({
+				token,
+				platformApiBase: this.resolvePlatformApiBase()
+			});
+			return {
+				token,
+				publisher: this.buildUserPublisher(me, params.appId)
+			};
+		}
+		const authState = this.authStateService.readCurrentAuthState();
+		const platformToken = authState.token?.trim();
+		if (platformToken) {
+			const me = await this.fetchCurrentPlatformUser({
+				token: platformToken,
+				platformApiBase: this.resolvePlatformApiBase(authState.apiBaseUrl)
+			});
+			return {
+				token: platformToken,
+				publisher: this.buildUserPublisher(me, params.appId)
+			};
+		}
+		if (envAdminToken) return {
+			token: envAdminToken,
+			publisher: this.buildOfficialPublisher()
+		};
+		throw new Error("发布需要 NextClaw 平台登录态。请先运行 nextclaw login，或传入 --token。");
+	};
+	fetchCurrentPlatformUser = async (params) => {
+		const response = await fetch(`${params.platformApiBase}/platform/auth/me`, { headers: {
+			authorization: `Bearer ${params.token}`,
+			accept: "application/json"
+		} });
+		const payload = await response.json().catch(() => null);
+		if (!response.ok) {
+			const message = typeof payload === "object" && payload && "error" in payload && typeof payload.error?.message === "string" ? payload.error.message : `${response.status} ${response.statusText}`;
+			throw new Error(`读取 NextClaw 登录态失败：${message}`);
+		}
+		const user = typeof payload === "object" && payload && "data" in payload && typeof payload.data?.user === "object" && payload.data.user ? payload.data.user : null;
+		const id = typeof user?.id === "string" ? user.id.trim() : "";
+		const username = typeof user?.username === "string" ? user.username.trim() : "";
+		const role = user?.role === "admin" ? "admin" : "user";
+		if (!id) throw new Error("平台登录态缺少用户 id。");
+		return {
+			id,
+			username: username || null,
+			role
+		};
+	};
+	resolvePlatformApiBase = (configuredApiBase) => {
+		const source = configuredApiBase?.trim() || process.env.NEXTCLAW_PLATFORM_API_BASE?.trim() || DEFAULT_PLATFORM_API_BASE;
+		const normalized = new URL(source);
+		normalized.pathname = normalized.pathname.replace(/\/v1\/?$/, "/");
+		return normalized.toString().replace(/\/+$/, "");
+	};
+	buildUserPublisher = (user, appId) => {
+		if (appId.startsWith("nextclaw.") && user.role === "admin") return this.buildOfficialPublisher();
+		if (!user.username) throw new Error("当前 NextClaw 账号还没有 username，无法发布个人 scope app。请先在平台账号页设置用户名。");
+		return {
+			id: user.username,
+			name: user.username,
+			url: `https://platform.nextclaw.io/account`
+		};
+	};
+	buildOfficialPublisher = () => {
+		return {
+			id: "nextclaw",
+			name: "NextClaw",
+			url: "https://nextclaw.io"
+		};
+	};
 };
 //#endregion
 export { AppPublishService };

package/dist/publish/platform-auth-state.service.d.ts

@@ -0,0 +1,11 @@
+//#region src/publish/platform-auth-state.service.d.ts
+type PlatformPublishAuthState = {
+  token: string | null;
+  apiBaseUrl?: string;
+};
+declare class PlatformAuthStateService {
+  readCurrentAuthState: () => PlatformPublishAuthState;
+  private resolveConfigPath;
+}
+//#endregion
+export { PlatformAuthStateService, PlatformPublishAuthState };

package/dist/publish/platform-auth-state.service.js

@@ -0,0 +1,26 @@
+import { resolve } from "node:path";
+import { homedir } from "node:os";
+import { existsSync, readFileSync } from "node:fs";
+//#region src/publish/platform-auth-state.service.ts
+var PlatformAuthStateService = class {
+	readCurrentAuthState = () => {
+		const configPath = this.resolveConfigPath();
+		if (!existsSync(configPath)) return { token: null };
+		try {
+			const raw = readFileSync(configPath, "utf-8");
+			const provider = JSON.parse(raw).providers?.nextclaw;
+			return {
+				token: typeof provider?.apiKey === "string" && provider.apiKey.trim().length > 0 ? provider.apiKey.trim() : null,
+				apiBaseUrl: typeof provider?.apiBase === "string" && provider.apiBase.trim().length > 0 ? provider.apiBase.trim() : void 0
+			};
+		} catch {
+			return { token: null };
+		}
+	};
+	resolveConfigPath = () => {
+		const nextclawHome = process.env.NEXTCLAW_HOME?.trim();
+		return resolve(nextclawHome && nextclawHome.length > 0 ? resolve(nextclawHome) : resolve(homedir(), ".nextclaw"), "config.json");
+	};
+};
+//#endregion
+export { PlatformAuthStateService };

package/dist/scaffold/app-scaffold.service.js

@@ -216,12 +216,7 @@ var AppScaffoldService = class {
 			],
 			sourceRepo: "https://github.com/Peiiii/nextclaw",
 			homepage: "https://nextclaw.io",
-			featured: false,
-			publisher: {
-				id: "nextclaw",
-				name: "NextClaw",
-				url: "https://nextclaw.io"
-			}
+			featured: false
 		};
 	};
 	buildReadme = (appName, appId) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextclaw/app-runtime",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "private": false,
   "description": "Standalone micro app runtime and CLI for NextClaw apps.",
   "type": "module",