@numa-tech/numa 1.23.1 → 1.25.0

package/README.md

@@ -36,6 +36,10 @@ numa notion page create --grant 41 --file page.json --json
 
 写入使用 JSON 文件，归档必须提供 `--yes`。所有 Notion 命令输出 `{ok,data}`，`data` 保留 Notion 字段与用户属性名；写请求不会因 401、限流或网络中断自动重放。机器模式通过环境变量 `NUMA_KEYCLOAK_AUTH_MODE=client_credentials`、`NUMA_KEYCLOAK_CLIENT_ID` 与 `NUMA_KEYCLOAK_CLIENT_SECRET` 启用，短期 JWT 仅存进程内存，运行 `numa profile --json` 可查看身份，无需浏览器登录。
 
+## Jev 企业决策（开发中）
+
+Jev 企业接入已开始实施：定制 Skill 指导 Agent 调用平台原生 MCP，平台统一授权并经指定代理访问 OpenRouter。终端 Agent、ChatGPT 和 K8s Agent 的接口、身份及验收边界见 [Jev 详细设计](docs/design/jev-integration.md)，源码包见 [numa-jev Skill](skills/numa-jev/SKILL.md) 和 [应用示例](examples/jev/README.md)。当前是未发布源码；ChatGPT 远程 OAuth 仍按设计待实施，Skill 安装不等于 MCP 已连接。
+
 ## 应用默认组
 
 支持该 API 的 DevOps 后端部署后，普通用户 CLI 登录成功会显式初始化本人应用成员资格和默认组；不是给全部 realm 用户授权。`auth status` 和以下 status 命令均只读，机器及已暂停/撤销成员不自动入组：

package/dist/authorization/application-client.d.ts

@@ -487,6 +487,92 @@ export declare class ApplicationClient {
     subjectAccess(subject: string, environmentId: string, ownerClientId?: string): Promise<Record<string, unknown>>;
     private validatePublicationProtocol;
     plan(input: unknown): Promise<{
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        execution?: {
+            [x: string]: unknown;
+            status: "QUEUED" | "RETRY_WAIT" | "RUNNING" | "SUCCEEDED" | "TERMINATED" | "WAITING_MANUAL";
+            currentStep?: number | null | undefined;
+            attempts?: number | undefined;
+            errorCode?: string | null | undefined;
+            errorDetails?: Record<string, unknown> | null | undefined;
+            javascriptPolicyDeletionConfirmed?: boolean | undefined;
+            verifiedAt?: string | null | undefined;
+            observedBundleDigest?: string | null | undefined;
+        } | undefined;
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "MANAGED_KEYCLOAK_IMPORT";
+        plan: {
+            [x: string]: unknown;
+            applicationId: number;
+            configurationBundle: {
+                [x: string]: unknown;
+                status: "BLOCKED" | "READY";
+                bundleDigest: string;
+                javascriptPolicyDeletionRequired?: boolean | undefined;
+                objects: {
+                    [x: string]: unknown;
+                    key: string;
+                    kind: string;
+                    logicalId: string;
+                    action: string;
+                    dependencies: string[];
+                    desired?: unknown;
+                    observed?: unknown;
+                    baseline?: unknown;
+                }[];
+                differences: {
+                    [x: string]: unknown;
+                    objectKey: string;
+                    field: string;
+                    action: string;
+                    current?: unknown;
+                    desired?: unknown;
+                    baseline?: unknown;
+                }[];
+                blockers: {
+                    [x: string]: unknown;
+                    code: string;
+                    objectKey?: string | undefined;
+                    message?: string | undefined;
+                }[];
+            };
+            managedConfiguration: {
+                [x: string]: unknown;
+                configuration: {
+                    [x: string]: unknown;
+                    schemaVersion: "1";
+                    kind: "KEYCLOAK_API_KEY_CONFIGURATION";
+                    target: {
+                        issuerId: string;
+                        applicationId: number;
+                        platformEnvironmentId: number;
+                    };
+                };
+            };
+        };
+    } | {
         [x: string]: unknown;
         id: string;
         applicationId: number;
@@ -769,6 +855,92 @@ export declare class ApplicationClient {
         credentialOperation: Record<string, unknown>;
     }>;
     preview(input: unknown): Promise<{
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        execution?: {
+            [x: string]: unknown;
+            status: "QUEUED" | "RETRY_WAIT" | "RUNNING" | "SUCCEEDED" | "TERMINATED" | "WAITING_MANUAL";
+            currentStep?: number | null | undefined;
+            attempts?: number | undefined;
+            errorCode?: string | null | undefined;
+            errorDetails?: Record<string, unknown> | null | undefined;
+            javascriptPolicyDeletionConfirmed?: boolean | undefined;
+            verifiedAt?: string | null | undefined;
+            observedBundleDigest?: string | null | undefined;
+        } | undefined;
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "MANAGED_KEYCLOAK_IMPORT";
+        plan: {
+            [x: string]: unknown;
+            applicationId: number;
+            configurationBundle: {
+                [x: string]: unknown;
+                status: "BLOCKED" | "READY";
+                bundleDigest: string;
+                javascriptPolicyDeletionRequired?: boolean | undefined;
+                objects: {
+                    [x: string]: unknown;
+                    key: string;
+                    kind: string;
+                    logicalId: string;
+                    action: string;
+                    dependencies: string[];
+                    desired?: unknown;
+                    observed?: unknown;
+                    baseline?: unknown;
+                }[];
+                differences: {
+                    [x: string]: unknown;
+                    objectKey: string;
+                    field: string;
+                    action: string;
+                    current?: unknown;
+                    desired?: unknown;
+                    baseline?: unknown;
+                }[];
+                blockers: {
+                    [x: string]: unknown;
+                    code: string;
+                    objectKey?: string | undefined;
+                    message?: string | undefined;
+                }[];
+            };
+            managedConfiguration: {
+                [x: string]: unknown;
+                configuration: {
+                    [x: string]: unknown;
+                    schemaVersion: "1";
+                    kind: "KEYCLOAK_API_KEY_CONFIGURATION";
+                    target: {
+                        issuerId: string;
+                        applicationId: number;
+                        platformEnvironmentId: number;
+                    };
+                };
+            };
+        };
+    } | {
         [x: string]: unknown;
         id: string;
         applicationId: number;
@@ -1056,6 +1228,92 @@ export declare class ApplicationClient {
         page: number;
         size: number;
         items: ({
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            execution?: {
+                [x: string]: unknown;
+                status: "QUEUED" | "RETRY_WAIT" | "RUNNING" | "SUCCEEDED" | "TERMINATED" | "WAITING_MANUAL";
+                currentStep?: number | null | undefined;
+                attempts?: number | undefined;
+                errorCode?: string | null | undefined;
+                errorDetails?: Record<string, unknown> | null | undefined;
+                javascriptPolicyDeletionConfirmed?: boolean | undefined;
+                verifiedAt?: string | null | undefined;
+                observedBundleDigest?: string | null | undefined;
+            } | undefined;
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "MANAGED_KEYCLOAK_IMPORT";
+            plan: {
+                [x: string]: unknown;
+                applicationId: number;
+                configurationBundle: {
+                    [x: string]: unknown;
+                    status: "BLOCKED" | "READY";
+                    bundleDigest: string;
+                    javascriptPolicyDeletionRequired?: boolean | undefined;
+                    objects: {
+                        [x: string]: unknown;
+                        key: string;
+                        kind: string;
+                        logicalId: string;
+                        action: string;
+                        dependencies: string[];
+                        desired?: unknown;
+                        observed?: unknown;
+                        baseline?: unknown;
+                    }[];
+                    differences: {
+                        [x: string]: unknown;
+                        objectKey: string;
+                        field: string;
+                        action: string;
+                        current?: unknown;
+                        desired?: unknown;
+                        baseline?: unknown;
+                    }[];
+                    blockers: {
+                        [x: string]: unknown;
+                        code: string;
+                        objectKey?: string | undefined;
+                        message?: string | undefined;
+                    }[];
+                };
+                managedConfiguration: {
+                    [x: string]: unknown;
+                    configuration: {
+                        [x: string]: unknown;
+                        schemaVersion: "1";
+                        kind: "KEYCLOAK_API_KEY_CONFIGURATION";
+                        target: {
+                            issuerId: string;
+                            applicationId: number;
+                            platformEnvironmentId: number;
+                        };
+                    };
+                };
+            };
+        } | {
             [x: string]: unknown;
             id: string;
             applicationId: number;
@@ -1331,14 +1589,100 @@ export declare class ApplicationClient {
                 };
                 steps: {
                     [x: string]: unknown;
-                    kind: "CREDENTIAL_ROTATE";
-                    targetId: string;
+                    kind: "CREDENTIAL_ROTATE";
+                    targetId: string;
+                }[];
+            };
+            credentialOperation: Record<string, unknown>;
+        })[];
+    }>;
+    job(jobId: string): Promise<{
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        execution?: {
+            [x: string]: unknown;
+            status: "QUEUED" | "RETRY_WAIT" | "RUNNING" | "SUCCEEDED" | "TERMINATED" | "WAITING_MANUAL";
+            currentStep?: number | null | undefined;
+            attempts?: number | undefined;
+            errorCode?: string | null | undefined;
+            errorDetails?: Record<string, unknown> | null | undefined;
+            javascriptPolicyDeletionConfirmed?: boolean | undefined;
+            verifiedAt?: string | null | undefined;
+            observedBundleDigest?: string | null | undefined;
+        } | undefined;
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "MANAGED_KEYCLOAK_IMPORT";
+        plan: {
+            [x: string]: unknown;
+            applicationId: number;
+            configurationBundle: {
+                [x: string]: unknown;
+                status: "BLOCKED" | "READY";
+                bundleDigest: string;
+                javascriptPolicyDeletionRequired?: boolean | undefined;
+                objects: {
+                    [x: string]: unknown;
+                    key: string;
+                    kind: string;
+                    logicalId: string;
+                    action: string;
+                    dependencies: string[];
+                    desired?: unknown;
+                    observed?: unknown;
+                    baseline?: unknown;
+                }[];
+                differences: {
+                    [x: string]: unknown;
+                    objectKey: string;
+                    field: string;
+                    action: string;
+                    current?: unknown;
+                    desired?: unknown;
+                    baseline?: unknown;
+                }[];
+                blockers: {
+                    [x: string]: unknown;
+                    code: string;
+                    objectKey?: string | undefined;
+                    message?: string | undefined;
                 }[];
             };
-            credentialOperation: Record<string, unknown>;
-        })[];
-    }>;
-    job(jobId: string): Promise<{
+            managedConfiguration: {
+                [x: string]: unknown;
+                configuration: {
+                    [x: string]: unknown;
+                    schemaVersion: "1";
+                    kind: "KEYCLOAK_API_KEY_CONFIGURATION";
+                    target: {
+                        issuerId: string;
+                        applicationId: number;
+                        platformEnvironmentId: number;
+                    };
+                };
+            };
+        };
+    } | {
         [x: string]: unknown;
         id: string;
         applicationId: number;
@@ -1621,6 +1965,92 @@ export declare class ApplicationClient {
         credentialOperation: Record<string, unknown>;
     }>;
     jobAction(jobId: string, action: "validate" | "cancel" | "prepare" | "review" | "apply" | "recheck" | "terminate" | "repreview" | "execute" | "resume" | "abandon", input: unknown): Promise<{
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        execution?: {
+            [x: string]: unknown;
+            status: "QUEUED" | "RETRY_WAIT" | "RUNNING" | "SUCCEEDED" | "TERMINATED" | "WAITING_MANUAL";
+            currentStep?: number | null | undefined;
+            attempts?: number | undefined;
+            errorCode?: string | null | undefined;
+            errorDetails?: Record<string, unknown> | null | undefined;
+            javascriptPolicyDeletionConfirmed?: boolean | undefined;
+            verifiedAt?: string | null | undefined;
+            observedBundleDigest?: string | null | undefined;
+        } | undefined;
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "MANAGED_KEYCLOAK_IMPORT";
+        plan: {
+            [x: string]: unknown;
+            applicationId: number;
+            configurationBundle: {
+                [x: string]: unknown;
+                status: "BLOCKED" | "READY";
+                bundleDigest: string;
+                javascriptPolicyDeletionRequired?: boolean | undefined;
+                objects: {
+                    [x: string]: unknown;
+                    key: string;
+                    kind: string;
+                    logicalId: string;
+                    action: string;
+                    dependencies: string[];
+                    desired?: unknown;
+                    observed?: unknown;
+                    baseline?: unknown;
+                }[];
+                differences: {
+                    [x: string]: unknown;
+                    objectKey: string;
+                    field: string;
+                    action: string;
+                    current?: unknown;
+                    desired?: unknown;
+                    baseline?: unknown;
+                }[];
+                blockers: {
+                    [x: string]: unknown;
+                    code: string;
+                    objectKey?: string | undefined;
+                    message?: string | undefined;
+                }[];
+            };
+            managedConfiguration: {
+                [x: string]: unknown;
+                configuration: {
+                    [x: string]: unknown;
+                    schemaVersion: "1";
+                    kind: "KEYCLOAK_API_KEY_CONFIGURATION";
+                    target: {
+                        issuerId: string;
+                        applicationId: number;
+                        platformEnvironmentId: number;
+                    };
+                };
+            };
+        };
+    } | {
         [x: string]: unknown;
         id: string;
         applicationId: number;
@@ -2002,6 +2432,92 @@ export declare class ApplicationClient {
         createdAt: string;
         updatedAt: string;
         publicationJob: {
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            execution?: {
+                [x: string]: unknown;
+                status: "QUEUED" | "RETRY_WAIT" | "RUNNING" | "SUCCEEDED" | "TERMINATED" | "WAITING_MANUAL";
+                currentStep?: number | null | undefined;
+                attempts?: number | undefined;
+                errorCode?: string | null | undefined;
+                errorDetails?: Record<string, unknown> | null | undefined;
+                javascriptPolicyDeletionConfirmed?: boolean | undefined;
+                verifiedAt?: string | null | undefined;
+                observedBundleDigest?: string | null | undefined;
+            } | undefined;
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "MANAGED_KEYCLOAK_IMPORT";
+            plan: {
+                [x: string]: unknown;
+                applicationId: number;
+                configurationBundle: {
+                    [x: string]: unknown;
+                    status: "BLOCKED" | "READY";
+                    bundleDigest: string;
+                    javascriptPolicyDeletionRequired?: boolean | undefined;
+                    objects: {
+                        [x: string]: unknown;
+                        key: string;
+                        kind: string;
+                        logicalId: string;
+                        action: string;
+                        dependencies: string[];
+                        desired?: unknown;
+                        observed?: unknown;
+                        baseline?: unknown;
+                    }[];
+                    differences: {
+                        [x: string]: unknown;
+                        objectKey: string;
+                        field: string;
+                        action: string;
+                        current?: unknown;
+                        desired?: unknown;
+                        baseline?: unknown;
+                    }[];
+                    blockers: {
+                        [x: string]: unknown;
+                        code: string;
+                        objectKey?: string | undefined;
+                        message?: string | undefined;
+                    }[];
+                };
+                managedConfiguration: {
+                    [x: string]: unknown;
+                    configuration: {
+                        [x: string]: unknown;
+                        schemaVersion: "1";
+                        kind: "KEYCLOAK_API_KEY_CONFIGURATION";
+                        target: {
+                            issuerId: string;
+                            applicationId: number;
+                            platformEnvironmentId: number;
+                        };
+                    };
+                };
+            };
+        } | {
             [x: string]: unknown;
             id: string;
             applicationId: number;
@@ -2335,6 +2851,92 @@ export declare class ApplicationClient {
         createdAt: string;
         updatedAt: string;
         publicationJob: {
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            execution?: {
+                [x: string]: unknown;
+                status: "QUEUED" | "RETRY_WAIT" | "RUNNING" | "SUCCEEDED" | "TERMINATED" | "WAITING_MANUAL";
+                currentStep?: number | null | undefined;
+                attempts?: number | undefined;
+                errorCode?: string | null | undefined;
+                errorDetails?: Record<string, unknown> | null | undefined;
+                javascriptPolicyDeletionConfirmed?: boolean | undefined;
+                verifiedAt?: string | null | undefined;
+                observedBundleDigest?: string | null | undefined;
+            } | undefined;
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "MANAGED_KEYCLOAK_IMPORT";
+            plan: {
+                [x: string]: unknown;
+                applicationId: number;
+                configurationBundle: {
+                    [x: string]: unknown;
+                    status: "BLOCKED" | "READY";
+                    bundleDigest: string;
+                    javascriptPolicyDeletionRequired?: boolean | undefined;
+                    objects: {
+                        [x: string]: unknown;
+                        key: string;
+                        kind: string;
+                        logicalId: string;
+                        action: string;
+                        dependencies: string[];
+                        desired?: unknown;
+                        observed?: unknown;
+                        baseline?: unknown;
+                    }[];
+                    differences: {
+                        [x: string]: unknown;
+                        objectKey: string;
+                        field: string;
+                        action: string;
+                        current?: unknown;
+                        desired?: unknown;
+                        baseline?: unknown;
+                    }[];
+                    blockers: {
+                        [x: string]: unknown;
+                        code: string;
+                        objectKey?: string | undefined;
+                        message?: string | undefined;
+                    }[];
+                };
+                managedConfiguration: {
+                    [x: string]: unknown;
+                    configuration: {
+                        [x: string]: unknown;
+                        schemaVersion: "1";
+                        kind: "KEYCLOAK_API_KEY_CONFIGURATION";
+                        target: {
+                            issuerId: string;
+                            applicationId: number;
+                            platformEnvironmentId: number;
+                        };
+                    };
+                };
+            };
+        } | {
             [x: string]: unknown;
             id: string;
             applicationId: number;

package/dist/authorization/application-client.js

@@ -344,7 +344,7 @@ export class ApplicationClient {
         if (action === "repreview")
             this.validatePublicationProtocol(result, body);
         if ((action === "execute" || action === "resume") &&
-            (result.operation !== "IDENTITY_PUBLICATION" || !result.plan.configurationBundle || !result.execution ||
+            ((result.operation !== "IDENTITY_PUBLICATION" && result.operation !== "MANAGED_KEYCLOAK_IMPORT") || !result.plan.configurationBundle || !result.execution ||
                 result.planDigest !== body.expectedDigest ||
                 result.plan.configurationBundle.bundleDigest !== body.expectedBundleDigest))
             invalid("Configuration execution response lacks bundle or readback evidence.");