@pactor-app/skills 1.24.0

package/prd-to-app/template/src/pactor/services.ts

@@ -0,0 +1,185 @@
+/**
+ * 页面 DSL 的 service 数据源注册表（
+ * `services={{...}}` 包装层），经 SitemapApp 的 `services` prop 全局注册。
+ * 实现为 mock（src/pactor/mocks/）；
+ * 列表类服务负责把 DSL 的一族布尔快筛参数还原为数组（表达式引擎不支持数组方法）。
+ */
+import type { ServiceHandler } from "@pactor-app/runtime";
+
+import { queryDashboard } from "./mocks/dashboard-mock";
+import {
+  getProvider,
+  pullProviderModels,
+  queryProviders,
+} from "./mocks/providers-mock";
+import { getModel, queryModels } from "./mocks/models-mock";
+import { getRoute, queryRoutes } from "./mocks/routes-mock";
+import {
+  CLIENT_TAG_FILTERS,
+  clientsByTemplate,
+  getClient,
+  queryClients,
+} from "./mocks/clients-mock";
+import {
+  CLIENT_TEMPLATE_TAG_FILTERS,
+  getClientTemplate,
+  queryClientTemplates,
+} from "./mocks/client-templates-mock";
+import { getCallLog, queryCallLogs } from "./mocks/call-logs-mock";
+import { getCost, queryCosts } from "./mocks/costs-mock";
+import { getAudit, listAuditOperators, queryAudits } from "./mocks/audit-mock";
+import {
+  queryAvailability,
+  queryClientUsage,
+  queryModelUsage,
+  queryProviderUsage,
+} from "./mocks/ops-usage-mock";
+
+function str(value: unknown): string {
+  return typeof value === "string" ? value : "";
+}
+
+function opt(value: unknown): string | undefined {
+  return typeof value === "string" ? value : undefined;
+}
+
+/** 标签 state 键：连字符转下划线（如 team-default → tag_team_default） */
+const tagKey = (value: string) => `tag_${value.replace(/-/g, "_")}`;
+
+/** 快筛值数组：service 直调为数组，http query 序列化后为逗号串；空值返回 undefined */
+function strList(value: unknown): string[] | undefined {
+  if (Array.isArray(value)) {
+    return value.filter((v): v is string => typeof v === "string" && v !== "");
+  }
+  if (typeof value === "string") return value.split(",").filter(Boolean);
+  return undefined;
+}
+
+export const pactorServices: Record<string, ServiceHandler> = {
+  "dashboard.query": (params) =>
+    queryDashboard(str(params.start), str(params.end)),
+
+  // 类型多选：ChipFilter 以 types 数组（http 侧序列化为逗号串）提交；
+  // 旧版 DSL 一族一个布尔参数的写法保留兼容，这里还原为 family 数组
+  "provider.list": (params) =>
+    queryProviders({
+      keyword: str(params.keyword),
+      status: str(params.status) || "all",
+      types:
+        strList(params.types) ??
+        ["openai", "anthropic", "gemini", "dashscope"].filter(
+          (f) => params[f] === true,
+        ),
+    }),
+  "provider.detail": (params) => getProvider(str(params.code)),
+  "provider.pullModels": (params) => pullProviderModels(str(params.code)),
+
+  // 厂商多选：ChipFilter 以 providers 数组（http 侧序列化为逗号串）提交；
+  // 旧版 DSL 一个 Provider 一个布尔参数的写法保留兼容
+  "model.list": (params) =>
+    queryModels({
+      type: str(params.type) || "all",
+      providers:
+        strList(params.providers) ??
+        ["dashscope", "gemini", "openai"].filter((p) => params[p] === true),
+    }),
+  "model.detail": (params) => getModel(str(params.code)),
+
+  // 标签多选：ChipFilter 以 tags 数组（http 侧序列化为逗号串）提交；
+  // 旧版 DSL 一个标签一个布尔参数（连字符转下划线）的写法保留兼容
+  "route.list": (params) =>
+    queryRoutes({
+      status: str(params.status) || "all",
+      type: str(params.type) || "all",
+      tags:
+        strList(params.tags) ??
+        [
+          ["reasoning", "tag_reasoning"],
+          ["premium", "tag_premium"],
+          ["general", "tag_general"],
+          ["coding", "tag_coding"],
+          ["low-cost", "tag_low_cost"],
+          ["mobile", "tag_mobile"],
+          ["vision", "tag_vision"],
+          ["embedding", "tag_embedding"],
+        ]
+          .filter(([, k]) => params[k] === true)
+          .map(([t]) => t),
+    }),
+  "route.detail": (params) => getRoute(str(params.code)),
+
+  "client.list": (params) =>
+    queryClients({
+      status: str(params.status) || "all",
+      name: str(params.name),
+      code: str(params.code),
+      // ChipFilter 以 tags 数组（http 侧为逗号串）提交；旧布尔族写法保留兼容
+      tags:
+        strList(params.tags) ??
+        CLIENT_TAG_FILTERS.filter((t) => params[tagKey(t.value)] === true).map(
+          (t) => t.value,
+        ),
+    }),
+  "client.detail": (params) => getClient(str(params.code)),
+
+  "clientTemplate.list": (params) =>
+    queryClientTemplates({
+      status: str(params.status) || "all",
+      keyword: str(params.keyword),
+      tags:
+        strList(params.tags) ??
+        CLIENT_TEMPLATE_TAG_FILTERS.filter(
+          (t) => params[tagKey(t.value)] === true,
+        ).map((t) => t.value),
+    }),
+  "clientTemplate.detail": (params) => getClientTemplate(str(params.code)),
+  "clientTemplate.createdClients": (params) =>
+    clientsByTemplate(str(params.code)),
+
+  "callLog.list": (params) =>
+    queryCallLogs({
+      start: opt(params.start),
+      end: opt(params.end),
+      status: str(params.status) || "all",
+      model: str(params.model) || "all",
+      provider: str(params.provider) || "all",
+      protocol: str(params.protocol) || "all",
+      routeGroup: str(params.routeGroup) || "all",
+      email: str(params.email),
+      appKey: str(params.appKey),
+    }),
+  "callLog.detail": (params) => getCallLog(str(params.id)),
+
+  "cost.list": (params) =>
+    queryCosts({
+      application: str(params.application),
+      appKey: str(params.appKey),
+      alias: str(params.alias),
+      model: str(params.model) || "all",
+      provider: str(params.provider) || "all",
+      start: opt(params.start),
+      end: opt(params.end),
+    }),
+  "cost.detail": (params) => getCost(str(params.id)),
+
+  "audit.list": (params) =>
+    queryAudits({
+      start: opt(params.start),
+      end: opt(params.end),
+      operator: str(params.operator) || "all",
+      operation: str(params.operation) || "all",
+      resourceType: str(params.resourceType) || "all",
+      resourceId: str(params.resourceId),
+    }),
+  "audit.detail": (params) => getAudit(str(params.id)) ?? null,
+  "audit.operators": () => listAuditOperators(),
+
+  "ops.modelUsage": (params) =>
+    queryModelUsage({ start: opt(params.start), end: opt(params.end) }),
+  "ops.providerUsage": (params) =>
+    queryProviderUsage({ start: opt(params.start), end: opt(params.end) }),
+  "ops.clientUsage": (params) =>
+    queryClientUsage({ start: opt(params.start), end: opt(params.end) }),
+  "ops.availability": (params) =>
+    queryAvailability({ start: opt(params.start), end: opt(params.end) }),
+};

package/prd-to-app/template/src/pactor/skin.ts

@@ -0,0 +1,52 @@
+/**
+ * 皮肤加载：Theme Studio 导出的皮肤 CSS（public/skins/<key>.css）经
+ * `<link rel="stylesheet" data-pactor-skin>` 在 @pactor-app/ui/styles.css
+ * 之后加载（后加载者胜出）。令牌经 var() 运行时解析，替换 link 节点即可
+ * 即时换肤，无需刷新页面（对齐 pactor 文档 guides/theming「运行时切换皮肤」）。
+ *
+ * 首屏由 layout.tsx 内联脚本在 <head> 中同步注入对应 link（避免闪烁），
+ * 本模块供 ThemeSwitcher 在运行时执行换肤 swap。
+ */
+
+export const SKIN_STORAGE_KEY = "mc-skin";
+
+export interface SkinOption {
+  value: string;
+  label: string;
+  color: string;
+}
+
+export const SKINS: SkinOption[] = [
+  { value: "chenwunaifu", label: "晨雾奶芙", color: "#c98a5e" },
+  { value: "taijingshenlin", label: "苔径深林", color: "#3f6b4f" },
+  { value: "xuanzhimoyun", label: "宣纸墨韵", color: "#2f3437" },
+];
+
+export const DEFAULT_SKIN = SKINS[0].value;
+
+export function skinHref(skin: string): string {
+  return `/skins/${skin}.css`;
+}
+
+/**
+ * 运行时换肤：新皮肤 link 加载完成后再移除旧的，避免无样式闪烁。
+ * link 以 data-pactor-skin 属性标记，供本函数识别清理。
+ */
+export function applySkinStylesheet(skin: string): void {
+  const href = skinHref(skin);
+  if (document.querySelector(`link[data-pactor-skin][href="${href}"]`)) {
+    return;
+  }
+  const next = document.createElement("link");
+  next.rel = "stylesheet";
+  next.href = href;
+  next.dataset.pactorSkin = skin;
+  next.onload = () => {
+    document
+      .querySelectorAll("link[data-pactor-skin]")
+      .forEach((el) => {
+        if (el !== next) el.remove();
+      });
+  };
+  document.head.append(next);
+}

package/prd-to-app/template/src/server/accounts.ts

@@ -0,0 +1,63 @@
+/**
+ * 演示账号（mock）：真实项目由后端用户体系替换。
+ * 会话经 httpOnly cookie 传递（pactor_demo_session），sitemap 端点据此裁剪内容。
+ */
+export interface DemoUser {
+  id: string;
+  username: string;
+  name: string;
+  roles: string[];
+  permissions: string[];
+}
+
+export const DEMO_ACCOUNTS: (DemoUser & { password: string })[] = [
+  {
+    id: "u-1",
+    username: "admin",
+    password: "pactor123",
+    name: "演示管理员",
+    roles: ["admin"],
+    permissions: ["report:view", "user:view"],
+  },
+  {
+    id: "u-2",
+    username: "guest",
+    password: "guest123",
+    name: "访客",
+    roles: ["guest"],
+    permissions: [],
+  },
+];
+
+export const SESSION_COOKIE = "pactor_demo_session";
+
+function toDemoUser(account: (typeof DEMO_ACCOUNTS)[number]): DemoUser {
+  return {
+    id: account.id,
+    username: account.username,
+    name: account.name,
+    roles: account.roles,
+    permissions: account.permissions,
+  };
+}
+
+export function findAccount(
+  username: string,
+  password: string,
+): DemoUser | null {
+  const hit = DEMO_ACCOUNTS.find(
+    (a) => a.username === username && a.password === password,
+  );
+  return hit ? toDemoUser(hit) : null;
+}
+
+/** 会话 cookie 值 = username（演示环境明文，生产换成签名 token / session id） */
+export function findUserBySession(
+  cookieValue: string | undefined,
+): DemoUser | null {
+  if (!cookieValue) {
+    return null;
+  }
+  const hit = DEMO_ACCOUNTS.find((a) => a.username === cookieValue);
+  return hit ? toDemoUser(hit) : null;
+}

package/prd-to-app/template/src/server/cors.ts

@@ -0,0 +1,34 @@
+import { NextResponse } from "next/server";
+
+/**
+ * CORS（演示环境放开跨源）：真实项目由后端框架 / 网关统一配置。
+ * 会话经 cookie 传递——Allow-Origin 必须回显请求源（带凭据时不能用 *）
+ * 且带 Allow-Credentials；POST JSON 会触发预检（OPTIONS）。
+ */
+export function corsHeaders(request: Request): Record<string, string> {
+  const origin = request.headers.get("origin");
+  return {
+    "access-control-allow-origin": origin ?? "*",
+    "access-control-allow-credentials": "true",
+    "access-control-allow-methods": "GET, POST, OPTIONS",
+    "access-control-allow-headers": "content-type, authorization",
+    vary: "origin",
+  };
+}
+
+export function corsJson(
+  request: Request,
+  data: unknown,
+  init?: ResponseInit,
+): NextResponse {
+  const response = NextResponse.json(data, init);
+  for (const [key, value] of Object.entries(corsHeaders(request))) {
+    response.headers.set(key, value);
+  }
+  return response;
+}
+
+/** 预检响应（路由中 `export const OPTIONS = corsPreflight`） */
+export function corsPreflight(request: Request): Response {
+  return new Response(null, { status: 204, headers: corsHeaders(request) });
+}

package/prd-to-app/template/src/server/sitemap.ts

@@ -0,0 +1,176 @@
+import { readFileSync, readdirSync } from "node:fs";
+import { join, relative } from "node:path";
+
+import type { PageDsl, PermissionConfig } from "@pactor-app/core";
+import { parseDocument } from "yaml";
+
+import type { LayoutDsl, SitemapResource } from "pactor-app";
+
+import type { DemoUser } from "./accounts";
+
+/**
+ * Mock sitemap 数据源（design/dynamic-page.md 方案 B 示例实现）。
+ * 真实项目由后端接口返回同构对象——端点按会话裁剪：
+ * 匿名 → public 页（登录/注册）；登录后 → 该角色可见的 menus / pages / permissions。
+ *
+ * 入口数据（元数据 / layouts / pages / menus 全量）在 yaml/sitemap.yaml，
+ * 页面 DSL 在 yaml/<域>/<id>.yaml（route / provider / audit / model /
+ * 等，按 PRD 模块树划分）；本文件只负责：
+ * 加载 YAML、按会话裁剪可见性（public / permission / 需登录）、注入会话
+ * 动态字段（updatedAt / user / permissions）。
+ */
+
+/* ---------------- YAML DSL 文件加载（src/server/yaml/，启动时读入内存） ---------------- */
+
+const YAML_DIR = join(process.cwd(), "src/server/yaml");
+
+/** 解析 YAML 文件；语法错误时 fail-fast（parseDocument 默认静默容错，结构会悄悄残缺） */
+function loadYaml<T>(file: string): T {
+  const doc = parseDocument(readFileSync(join(YAML_DIR, file), "utf8"));
+  if (doc.errors.length > 0) {
+    throw new Error(
+      `${file} 解析失败：${doc.errors.map((e) => e.message.split("\n")[0]).join("；")}`,
+    );
+  }
+  return doc.toJS() as T;
+}
+
+/** sitemap.yaml 中的页面声明：可见性标记（public / permission）+ DSL 加载方式（lazy） */
+interface PageEntry {
+  id: string;
+  path: string;
+  title: string;
+  version: number;
+  public?: boolean;
+  permission?: string;
+  /** 不随 sitemap 内联 pageDsl，客户端经 /api/public/pages/{id} 懒加载 */
+  lazy?: boolean;
+}
+
+interface SitemapFile {
+  id: string;
+  resourceType: "sitemap";
+  version: number;
+  dslVersion: string;
+  app: { name: string };
+  layout: string;
+  auth: { loginPath: string };
+  layouts: Record<string, LayoutDsl>;
+  pages: PageEntry[];
+  menus: SitemapResource["menus"];
+}
+
+const site = loadYaml<SitemapFile>("sitemap.yaml");
+
+/** 递归收集 yaml 下所有页面 DSL（含 route / provider / ops 等域子目录；跳过 sitemap.yaml），按 id → 相对路径建索引 */
+function collectPageFiles(dir: string): Map<string, string> {
+  return new Map(
+    readdirSync(dir, { withFileTypes: true }).flatMap((entry) => {
+      const path = join(dir, entry.name);
+      if (entry.isDirectory()) return [...collectPageFiles(path)];
+      if (!entry.name.endsWith(".yaml") || entry.name === "sitemap.yaml") return [];
+      const id = entry.name.slice(0, -".yaml".length);
+      return [[id, relative(YAML_DIR, path)]];
+    }),
+  );
+}
+
+const pageFiles = collectPageFiles(YAML_DIR);
+
+function loadPageDsl(id: string): PageDsl {
+  const file = pageFiles.get(id);
+  if (!file) throw new Error(`页面 DSL 缺失：${id}.yaml`);
+  return loadYaml<PageDsl>(file);
+}
+
+/** 页面 DSL：按 id 约定从 yaml/<域>/<id>.yaml 加载；lazy 页不在此内联 */
+const pageDsls = new Map(
+  site.pages.filter((p) => !p.lazy).map((p) => [p.id, loadPageDsl(p.id)]),
+);
+const lazyPageDsls = new Map(
+  site.pages.filter((p) => p.lazy).map((p) => [p.id, loadPageDsl(p.id)]),
+);
+
+/* ---------------- 会话裁剪 ---------------- */
+
+type Visibility = { public?: boolean; permission?: PermissionConfig };
+
+/** PermissionConfig 归一化为权限码数组（string / string[] / { code } 三种形态） */
+function permissionCodes(permission: PermissionConfig): string[] {
+  const code =
+    typeof permission === "object" && !Array.isArray(permission)
+      ? permission.code
+      : permission;
+  return Array.isArray(code) ? code : [code];
+}
+
+/** 可见性：public 匿名可见；permission 命中任一权限码；无标记需登录 */
+function canSee(entry: Visibility, user: DemoUser | null): boolean {
+  if (entry.public) return true;
+  if (!user) return false;
+  if (entry.permission) {
+    return permissionCodes(entry.permission).some((c) =>
+      user.permissions.includes(c),
+    );
+  }
+  return true;
+}
+
+/** 菜单按会话过滤；group 无可见子项时整组隐藏 */
+function filterMenus(
+  menus: SitemapResource["menus"],
+  user: DemoUser | null,
+): SitemapResource["menus"] {
+  const out: SitemapResource["menus"] = [];
+  for (const item of menus) {
+    if (!canSee(item, user)) continue;
+    if (item.type === "group") {
+      const children = filterMenus(item.children ?? [], user);
+      if (children.length === 0) continue;
+      out.push({ ...item, children });
+    } else {
+      out.push(item);
+    }
+  }
+  return out;
+}
+
+/**
+ * 按会话构建 sitemap：同一 URL，不同用户拿到不同内容。
+ * 匿名 → 仅 public 页；guest → + 首页；admin → + 用户列表 / 报表组。
+ */
+export function buildSitemap(user: DemoUser | null): SitemapResource {
+  const pages: SitemapResource["pages"] = site.pages
+    .filter((p) => canSee(p, user))
+    .map((p) => ({
+      id: p.id,
+      path: p.path,
+      title: p.title,
+      version: p.version,
+      // 懒加载页不下发 pageDsl，仅 id / path / version，经 /api/public/pages/{id} 按需获取
+      ...(p.lazy ? {} : { pageDsl: pageDsls.get(p.id) }),
+    }));
+
+  // sitemap.yaml 原样透传，仅覆盖会话相关部分：pages / menus 按可见性过滤，
+  // updatedAt / user / permissions 按会话注入
+  return {
+    ...site,
+    updatedAt: new Date().toISOString(),
+    ...(user ? { user: { ...user }, permissions: user.permissions } : {}),
+    pages,
+    menus: filterMenus(site.menus, user),
+  };
+}
+
+/** 懒加载页：校验会话与可见性（前端权限只控制 UI，接口必须鉴权） */
+export function getLazyPage(
+  pageId: string,
+  user: DemoUser | null,
+): { version: number; pageDsl: PageDsl } | null {
+  const entry = site.pages.find((p) => p.id === pageId);
+  const pageDsl = lazyPageDsls.get(pageId);
+  if (!entry?.lazy || !pageDsl || !canSee(entry, user)) {
+    return null;
+  }
+  return { version: entry.version, pageDsl };
+}