@sparkelf/dsh-dataops-managed 0.3.22 → 0.3.24

package/lib/index.js

@@ -1930,40 +1930,67 @@ const CONNECTORS_PATH = "/api/dsh-skill-center/connectors";
 const DATAOPS_CONNECTOR_ID = "dataops-managed";
 /** Resolve the persisted state file without depending on a global DSH path. */
 const CONNECTOR_STATE_PATH = join(process.env.DSH_HOME?.trim() || "/workspace/.dataops/dsh", "dataops-managed", "connector-state.json");
-/** Capability definitions before permission filtering. */
+/**
+* Capability definitions before permission filtering.
+*
+* The set and its order follow `dataops/docs/dataops-connector-development-spec.md` §2.3,
+* whose credential `requiredFor` list is `approval.push`, `data.query`, and `admin.manage`.
+* Skill plaza and review queue are governed by `skill:*` permissions and stay out of the
+* connector's capability switches.
+*/
 const CAPABILITIES = [
-	{
-		id: "skill.plaza",
-		name: "技能广场",
-		description: "读取、安装和管理当前账号可见的技能",
-		allowed: (scope) => hasPermission(scope, "skill:read")
-	},
-	{
-		id: "review.queue",
-		name: "审核队列",
-		description: "查看待审技能、扫描风险并给出审核结论",
-		allowed: (scope) => canReview(scope)
-	},
 	{
 		id: "data.query",
 		name: "数据查询",
 		description: "通过 DataOps 数据查询能力回答业务问题",
+		defaultEnabled: true,
 		allowed: () => true
 	},
 	{
-		id: "api.docs",
-		name: "管理接口文档",
-		description: "仅超级管理员可查询 DataOps OpenAPI 接口文档",
-		allowed: (scope) => isSuperAdmin(scope)
+		id: "approval.push",
+		name: "审批资源",
+		description: "读取/办理万相中台的审批任务，并把状态回写",
+		defaultEnabled: true,
+		allowed: (scope) => canReview(scope)
+	},
+	{
+		id: "admin.manage",
+		name: "万相中台管理",
+		description: "登录万相中台后台执行管理动作",
+		defaultEnabled: true,
+		allowed: (scope) => isAdmin(scope)
 	}
 ];
+/** The ids the catalogue accepts; any other persisted key is a legacy value. */
+const CAPABILITY_IDS = CAPABILITIES.map((capability) => capability.id);
+/**
+* Keep only boolean values for known capability ids.
+*
+* A state file written before the catalogue changed may still hold retired ids. Those keys are
+* ignored rather than treated as a corrupt file; a missing new key takes the capability's
+* `defaultEnabled`.
+* @param value - the `capabilities` member of a parsed state file.
+* @returns the readable toggles, keyed by current capability id.
+*/
+function migrateCapabilities(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return {};
+	const stored = value;
+	const capabilities = {};
+	for (const id of CAPABILITY_IDS) if (typeof stored[id] === "boolean") capabilities[id] = stored[id];
+	return capabilities;
+}
 /** Read state; a missing or corrupt file is a safe disabled state. */
 async function readConnectorState(path = CONNECTOR_STATE_PATH) {
 	try {
 		const payload = JSON.parse(await readFile(path, "utf8"));
+		if (typeof payload !== "object" || payload === null || Array.isArray(payload)) return {
+			enabled: false,
+			capabilities: {}
+		};
+		const record = payload;
 		return {
-			enabled: payload.enabled === true,
-			capabilities: typeof payload.capabilities === "object" && payload.capabilities !== null ? { ...payload.capabilities } : {}
+			enabled: record.enabled === true,
+			capabilities: migrateCapabilities(record.capabilities)
 		};
 	} catch {
 		return {
@@ -1976,7 +2003,11 @@ async function readConnectorState(path = CONNECTOR_STATE_PATH) {
 async function writeConnectorState(state, path = CONNECTOR_STATE_PATH) {
 	await mkdir(dirname(path), { recursive: true });
 	const temporary = path + ".tmp-" + process.pid.toString();
-	await writeFile(temporary, JSON.stringify(state, null, 2), "utf8");
+	const payload = {
+		enabled: state.enabled,
+		capabilities: migrateCapabilities(state.capabilities)
+	};
+	await writeFile(temporary, JSON.stringify(payload, null, 2), "utf8");
 	await rename(temporary, path);
 }
 /** Build the connector row for one current scope. */
@@ -1985,7 +2016,7 @@ function buildConnectorView(scope, state) {
 		id: capability.id,
 		name: capability.name,
 		description: capability.description,
-		enabled: state.capabilities[capability.id] !== false,
+		enabled: state.capabilities[capability.id] ?? capability.defaultEnabled,
 		permitted: true
 	}));
 	return {

package/lib/types/client/SkillPlazaSection.d.ts

@@ -1,6 +1,7 @@
 import type { ReactNode } from 'react';
 import type { InjectFace } from '@deepseek-ai/dsh-client-ui-slots';
 import type { en } from './locales.ts';
+import { type PlazaSkill } from './skill-plaza-client.ts';
 /** Values the skill center passes to a contributed section. */
 export interface SkillPlazaSectionInjected {
     /** Translate one DataOps plaza message key. */
@@ -16,6 +17,38 @@ export interface SkillPlazaSectionInjected {
 }
 /** Props accepted by the plaza section. */
 export type SkillPlazaSectionProps = Partial<InjectFace<SkillPlazaSectionInjected>>;
+/** One department option derived from the rows the plaza can show. */
+export interface PlazaDepartmentOption {
+    /** Value the select submits: the department code when the row carries one. */
+    code: string;
+    /** Label shown in the select; never empty. */
+    name: string;
+}
+/**
+ * The department a plaza row belongs to.
+ *
+ * The backend normally sends `departmentCode`; a legacy row may carry only a name or path, so the
+ * fallbacks keep those rows selectable instead of dropping them into an empty key.
+ * @param skill - one plaza row.
+ * @returns the code, the name, or the deepest path name; empty when the row says nothing.
+ */
+export declare function departmentKeyOf(skill: PlazaSkill): string;
+/**
+ * The department choices present in the visible rows.
+ *
+ * The label falls back from the row's own name to the deepest path name and finally to the code,
+ * so a department the backend can no longer name still renders as a readable option.
+ * @param skills - every row the current query returned.
+ * @returns distinct departments, sorted by label.
+ */
+export declare function departmentOptionsOf(skills: readonly PlazaSkill[]): PlazaDepartmentOption[];
+/**
+ * The rows the department tab shows.
+ * @param skills - every row the current query returned.
+ * @param code - selected department key, or an empty string for all of them.
+ * @returns the department-shared rows, narrowed to `code` when it is set.
+ */
+export declare function filterByDepartment(skills: readonly PlazaSkill[], code: string): PlazaSkill[];
 /**
  * Browse, share, and install skills other users published.
  *

package/lib/types/client/locales.d.ts

@@ -23,7 +23,6 @@ export declare const en: {
     readonly defaultsNeverPublished: "Not published yet";
     readonly defaultsNotAdmin: "Administrators only";
     readonly plazaTitle: "Skill plaza";
-    readonly plazaAllTags: "All tags";
     readonly plazaMine: "Shared by me";
     readonly plazaShowDetail: "Details";
     readonly plazaClose: "Close";
@@ -42,6 +41,10 @@ export declare const en: {
     readonly plazaTabApproved: "Approved";
     readonly plazaTabPending: "Pending";
     readonly plazaTabAll: "All";
+    readonly plazaTabDepartment: "Department";
+    readonly plazaDepartment: "Department";
+    readonly plazaDepartmentAll: "All departments";
+    readonly plazaDepartmentEmpty: "No department-shared skills yet.";
     readonly plazaSharedTag: "Shared";
     readonly plazaReview: "Review";
     readonly plazaPendingEmpty: "No skills are waiting for review.";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sparkelf/dsh-dataops-managed",
-  "version": "0.3.22",
+  "version": "0.3.24",
   "description": "DataOps JWT intake and credential-backed MCP tools for managed DeepSeek Harness workspaces.",
   "type": "module",
   "main": "./lib/index.js",