@ppdocs/mcp 3.2.21 → 3.2.23

package/dist/tools/discussion.js

@@ -1,8 +1,14 @@
 /**
- * 💬 kg_discuss (6→1)
- * 合并: list, read, create, reply, close, delete
+ * 💬 kg_discuss (8 actions)
+ * 合并: list, read, create, reply, close, delete, complete, history
  * 统一走 HTTP → Rust 后端 (单一写入者)
  * sender 格式: "projectId:user" (如 "p-ca3sgejg:张三")
+ *
+ * 权限模型:
+ *   list/history  — 任何人可列出(全局可见)
+ *   create        — 任何人可发起(指定参与项目ID)
+ *   read/reply    — 仅讨论组内成员(initiator + participants)
+ *   complete/close/delete — 仅发起人
  */
 import { z } from 'zod';
 import { getClient } from '../storage/httpClient.js';
@@ -11,6 +17,34 @@ import { wrap, safeTool } from './shared.js';
 function sender(ctx) {
     return `${ctx.projectId}:${ctx.user}`;
 }
+/** 提取 sender 中的 projectId */
+function senderProjectId(senderStr) {
+    return senderStr.split(':')[0] || senderStr;
+}
+/** 检查项目是否是讨论的成员 (发起方 或 参与方) */
+function isMember(brief, projectId) {
+    const initiatorPid = senderProjectId(brief.initiator);
+    if (initiatorPid === projectId)
+        return true;
+    return brief.participants.some(p => {
+        // participants 可能是 "projectId" 或 "projectId:user"
+        return senderProjectId(p) === projectId;
+    });
+}
+/** 检查是否是讨论的发起人 */
+function isInitiator(brief, me, projectId) {
+    return brief.initiator === me || senderProjectId(brief.initiator) === projectId;
+}
+/** 根据 ID 获取讨论摘要 (用于权限检查) */
+async function getBrief(discussionId) {
+    try {
+        const all = await getClient().discussionList();
+        return all.find(d => d.id === discussionId) || null;
+    }
+    catch {
+        return null;
+    }
+}
 function relativeTime(iso) {
     try {
         const diff = Date.now() - new Date(iso).getTime();
@@ -37,8 +71,11 @@ function formatList(items, ctx) {
     ];
     for (const d of items) {
         const others = d.participants.filter(p => p !== d.initiator).join(', ') || '—';
-        lines.push(`| ${d.id} | ${d.title} | ${d.initiator} | ${others} | ${d.summary} | ${d.status} | ${relativeTime(d.updatedAt)} |`);
+        const memberTag = isMember(d, ctx.projectId) ? '✅' : '🔒';
+        lines.push(`| ${d.id} | ${memberTag} ${d.title} | ${d.initiator} | ${others} | ${d.summary} | ${d.status} | ${relativeTime(d.updatedAt)} |`);
     }
+    lines.push('');
+    lines.push('✅ = 你是成员(可读写) | 🔒 = 非成员(仅可查看标题)');
     return lines.join('\n');
 }
 function formatDetailView(d) {
@@ -66,7 +103,7 @@ function formatDetailView(d) {
 }
 export function registerDiscussionTools(server, ctx) {
     const client = () => getClient();
-    server.tool('kg_discuss', '💬 跨项目讨论 — 发起、回复、归档协同讨论。action: list(列出活跃讨论)|read(读取详情,自动追踪已读)|create(发起)|reply(回复)|complete(标记完成)|close(结案归档)|delete(删除)|history(查看历史讨论)', {
+    server.tool('kg_discuss', '💬 跨项目讨论 — action: list|read|create|reply|complete|close|delete|history。权限: 仅成员可读写，仅发起人可删除/归档', {
         action: z.enum(['list', 'read', 'create', 'reply', 'complete', 'close', 'delete', 'history'])
             .describe('操作类型'),
         id: z.string().optional()
@@ -90,41 +127,15 @@ export function registerDiscussionTools(server, ctx) {
     }, async (args) => safeTool(async () => {
         const decoded = decodeObjectStrings(args);
         const me = sender(ctx);
+        const myPid = ctx.projectId;
         switch (decoded.action) {
+            // ============ 公开操作 ============
             case 'list': {
                 const active = await client().discussionList();
                 if (!Array.isArray(active) || active.length === 0)
                     return wrap(`当前无活跃的讨论 (本项目: ${me})`);
                 return wrap(formatList(active, ctx));
             }
-            case 'read': {
-                const readIds = decoded.ids || (decoded.id ? [decoded.id] : []);
-                if (readIds.length === 0)
-                    return wrap('❌ read 需要 id 或 ids');
-                const readMode = decoded.mode || 'auto';
-                const discussions = await client().discussionReadByIds(readIds, me, readMode);
-                if (!Array.isArray(discussions) || discussions.length === 0)
-                    return wrap('未找到对应的讨论记录');
-                return wrap(discussions.map(formatDetailView).join('\n\n━━━━━━━━━━━━━━━━━━━━\n\n'));
-            }
-            case 'create': {
-                if (!decoded.title)
-                    return wrap('❌ create 需要 title');
-                if (!decoded.participants)
-                    return wrap('❌ create 需要 participants');
-                if (!decoded.content)
-                    return wrap('❌ create 需要 content');
-                const result = await client().discussionCreate(decoded.title, me, decoded.participants, decoded.content, decoded.summary);
-                return wrap(`✅ 讨论已发起\nID: ${result.id}\n发起方: ${me}\n参与方: ${decoded.participants.join(', ')}`);
-            }
-            case 'reply': {
-                if (!decoded.id)
-                    return wrap('❌ reply 需要 id');
-                if (!decoded.content)
-                    return wrap('❌ reply 需要 content');
-                await client().discussionReply(decoded.id, me, decoded.content, decoded.summary, decoded.newSummary);
-                return wrap(`✅ 回复成功 (ID: ${decoded.id}, 身份: ${me})`);
-            }
             case 'history': {
                 const all = await client().discussionListAll(me);
                 if (!Array.isArray(all) || all.length === 0)
@@ -143,9 +154,72 @@ export function registerDiscussionTools(server, ctx) {
                 }
                 return wrap(lines.join('\n'));
             }
+            case 'create': {
+                if (!decoded.title)
+                    return wrap('❌ create 需要 title');
+                if (!decoded.participants)
+                    return wrap('❌ create 需要 participants');
+                if (!decoded.content)
+                    return wrap('❌ create 需要 content');
+                const result = await client().discussionCreate(decoded.title, me, decoded.participants, decoded.content, decoded.summary);
+                return wrap(`✅ 讨论已发起\nID: ${result.id}\n发起方: ${me}\n参与方: ${decoded.participants.join(', ')}\n\n🔒 权限: 仅以上项目可读写此讨论，仅发起方可删除/归档`);
+            }
+            // ============ 成员操作 (需验证成员身份) ============
+            case 'read': {
+                const readIds = decoded.ids || (decoded.id ? [decoded.id] : []);
+                if (readIds.length === 0)
+                    return wrap('❌ read 需要 id 或 ids');
+                // 权限检查: 逐个验证成员身份
+                const allActive = await client().discussionList();
+                const deniedIds = [];
+                const allowedIds = [];
+                for (const rid of readIds) {
+                    const brief = allActive.find(d => d.id === rid);
+                    if (!brief) {
+                        allowedIds.push(rid); // 找不到就放行(可能是历史讨论)
+                    }
+                    else if (isMember(brief, myPid)) {
+                        allowedIds.push(rid);
+                    }
+                    else {
+                        deniedIds.push(rid);
+                    }
+                }
+                if (deniedIds.length > 0 && allowedIds.length === 0) {
+                    return wrap(`🔒 无权限: 你 (${myPid}) 不是这些讨论的成员\n拒绝: ${deniedIds.join(', ')}`);
+                }
+                const readMode = decoded.mode || 'auto';
+                const discussions = await client().discussionReadByIds(allowedIds, me, readMode);
+                if (!Array.isArray(discussions) || discussions.length === 0)
+                    return wrap('未找到对应的讨论记录');
+                let result = discussions.map(formatDetailView).join('\n\n━━━━━━━━━━━━━━━━━━━━\n\n');
+                if (deniedIds.length > 0) {
+                    result += `\n\n🔒 已跳过 ${deniedIds.length} 个无权限的讨论: ${deniedIds.join(', ')}`;
+                }
+                return wrap(result);
+            }
+            case 'reply': {
+                if (!decoded.id)
+                    return wrap('❌ reply 需要 id');
+                if (!decoded.content)
+                    return wrap('❌ reply 需要 content');
+                // 权限检查: 仅成员可回复
+                const brief = await getBrief(decoded.id);
+                if (brief && !isMember(brief, myPid)) {
+                    return wrap(`🔒 无权限: 你 (${myPid}) 不是讨论 "${brief.title}" 的成员\n成员: ${brief.initiator}, ${brief.participants.join(', ')}`);
+                }
+                await client().discussionReply(decoded.id, me, decoded.content, decoded.summary, decoded.newSummary);
+                return wrap(`✅ 回复成功 (ID: ${decoded.id}, 身份: ${me})`);
+            }
+            // ============ 发起人操作 (需验证发起人身份) ============
             case 'complete': {
                 if (!decoded.id)
                     return wrap('❌ complete 需要 id');
+                // 权限检查: 仅发起人可标记完成
+                const brief = await getBrief(decoded.id);
+                if (brief && !isInitiator(brief, me, myPid)) {
+                    return wrap(`🔒 无权限: 仅发起人 (${brief.initiator}) 可标记完成\n你的身份: ${me}`);
+                }
                 await client().discussionComplete(decoded.id);
                 return wrap(`✅ 讨论已标记完成 (ID: ${decoded.id})`);
             }
@@ -154,12 +228,27 @@ export function registerDiscussionTools(server, ctx) {
                     return wrap('❌ close 需要 id');
                 if (!decoded.conclusion)
                     return wrap('❌ close 需要 conclusion');
-                const result = await client().discussionClose(decoded.id, decoded.conclusion);
-                return wrap(`✅ 讨论已结案并归档: \`${result.archived_path}\``);
+                // 权限检查: 仅发起人可归档
+                const brief = await getBrief(decoded.id);
+                if (brief && !isInitiator(brief, me, myPid)) {
+                    return wrap(`🔒 无权限: 仅发起人 (${brief.initiator}) 可归档讨论\n你的身份: ${me}`);
+                }
+                // 先追加结案总结
+                try {
+                    await client().discussionReply(decoded.id, me, `📋 结案总结:\n\n${decoded.conclusion}`, '结案总结');
+                }
+                catch { /* 忽略回复失败 */ }
+                await client().discussionComplete(decoded.id);
+                return wrap(`✅ 讨论已结案 (ID: ${decoded.id})\n📋 ${decoded.conclusion}`);
             }
             case 'delete': {
                 if (!decoded.id)
                     return wrap('❌ delete 需要 id');
+                // 权限检查: 仅发起人可删除
+                const brief = await getBrief(decoded.id);
+                if (brief && !isInitiator(brief, me, myPid)) {
+                    return wrap(`🔒 无权限: 仅发起人 (${brief.initiator}) 可删除讨论\n你的身份: ${me}`);
+                }
                 await client().discussionDelete(decoded.id);
                 return wrap(`✅ 讨论已删除 (ID: ${decoded.id})`);
             }

package/dist/tools/docs.js

@@ -10,7 +10,7 @@ import { wrap, safeTool, crossPrefix, formatDocMarkdown, formatTreeText, countTr
 export function registerDocTools(server, ctx) {
     const client = () => getClient();
     // ========== kg_doc: 文档 CRUD 统一入口 ==========
-    server.tool('kg_doc', '📄 知识文档操作 — 创建、读取、更新、删除、复制文档。action: create(创建)|read(读取)|update(更新)|delete(删除)|batch_update(批量更新)|copy(跨项目复制)', {
+    server.tool('kg_doc', '📄 参考文档 — action: create(创建,建议bindTo关联节点)|read|update|delete|batch_update|copy。⚠️ 不绑定节点的文档会成为孤岛!', {
         action: z.enum(['create', 'read', 'update', 'delete', 'batch_update', 'copy'])
             .describe('操作类型'),
         path: z.string().optional()
@@ -47,6 +47,10 @@ export function registerDocTools(server, ctx) {
             .describe('复制源路径 (copy, 单个或数组)'),
         targetPath: z.string().optional()
             .describe('复制目标路径前缀 (copy)'),
+        bindTo: z.string().optional()
+            .describe('绑定到流程图节点ID (create/update, 如"n_frontend")'),
+        bindChart: z.string().optional()
+            .describe('绑定目标流程图ID (create/update, 默认"main")'),
     }, async (args) => safeTool(async () => {
         const d = decodeObjectStrings(args);
         switch (d.action) {
@@ -63,7 +67,39 @@ export function registerDocTools(server, ctx) {
                     bugfixes: [],
                     status: d.status || '已完成'
                 });
-                return wrap(`✅ 文档已创建: ${d.path}\n\n${JSON.stringify(doc, null, 2)}`);
+                // 绑定到流程图节点
+                let bindMsg = '';
+                if (d.bindTo) {
+                    try {
+                        const chartId = d.bindChart || 'main';
+                        const chart = await client().getFlowchart(chartId);
+                        if (chart) {
+                            const node = chart.nodes?.find((n) => n.id === d.bindTo);
+                            if (node) {
+                                if (!node.boundDocs)
+                                    node.boundDocs = [];
+                                if (!node.boundDocs.includes(d.path)) {
+                                    node.boundDocs.push(d.path);
+                                }
+                                // Save back via PUT (use the existing save method)
+                                chart.id = chartId;
+                                await client().saveFlowchart(chartId, chart);
+                                bindMsg = `\n🔗 已绑定到节点: ${d.bindTo} [${chartId}]`;
+                            }
+                            else {
+                                bindMsg = `\n⚠️ 节点 "${d.bindTo}" 不存在于流程图 "${chartId}"`;
+                            }
+                        }
+                    }
+                    catch {
+                        bindMsg = `\n⚠️ 绑定失败(流程图操作异常)`;
+                    }
+                }
+                // 约束: 未绑定流程图节点 → 强制警告
+                if (!d.bindTo) {
+                    bindMsg = `\n\n⚠️ 【未关联知识锚点】文档未绑定到流程图节点!\n💡 建议: 使用 kg_flowchart(bind, nodeId, docs:["${d.path}"]) 绑定\n📌 孤立文档无法被 AI 通过节点关联发现`;
+                }
+                return wrap(`✅ 文档已创建: ${d.path}${bindMsg}`);
             }
             // ---- READ ----
             case 'read': {
@@ -109,7 +145,9 @@ export function registerDocTools(server, ctx) {
                 if (d.bugfixes !== undefined)
                     updates.bugfixes = d.bugfixes;
                 const doc = await client().updateDoc(d.path, updates);
-                return wrap(doc ? JSON.stringify(doc, null, 2) : '更新失败');
+                if (!doc)
+                    return wrap('更新失败');
+                return wrap(`✅ 文档已更新: ${d.path}\n状态: ${doc.status || '已完成'}\n摘要: ${doc.summary || ''}`);
             }
             // ---- DELETE ----
             case 'delete': {

package/dist/tools/flowchart.d.ts

@@ -0,0 +1,7 @@
+/**
+ * 🔀 kg_flowchart — 逻辑流程图批量操作
+ * AI 一次提交所有节点+边, 后端原子处理, 返回孤立检测结果
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { type McpContext } from './shared.js';
+export declare function registerFlowchartTools(server: McpServer, ctx: McpContext): void;