agent-bridge-abweb 1.0.6 → 1.0.7

package/dist/src-ts/plugins/abweb/index.js

@@ -5,7 +5,7 @@ const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const MANIFEST = {
     id: "abweb",
-    version: "1.0.6",
+    version: "1.0.7",
     displayName: "Agent Bridge Web",
     entry: "dist/index.js",
     apiVersion: "1",

package/dist/src-ts/plugins/abweb/public/app.js

@@ -16,6 +16,9 @@
     const versionsNode = node("#versions");
     const policyNode = node("#update-policy");
     const policyStatusNode = node("#update-policy-status");
+    const trustProvidersNode = node("#trust-providers");
+    const trustPluginsNode = node("#trust-plugins");
+    const trustStatusNode = node("#plugin-trust-status");
     const loginExpiry = Number(localStorage.getItem("mab-login-expires-at") ?? 0);
     if (loginExpiry <= Date.now()) {
         localStorage.removeItem("mab-login-token");
@@ -25,11 +28,32 @@
     let plugins = [];
     let selectedChannelId = "";
     let pluginVersions = {};
+    let pluginTrustConfig = { providers: {}, plugins: {} };
+    let pluginTrustDirty = false;
     let logPage = 1;
     let logHasNext = false;
     let loading = false;
     const installingPackages = new Set();
     function error(message) { errorNode.textContent = message; errorNode.hidden = !message; }
+    function showResult(title, message, failed) {
+        node("#operation-result-title").textContent = title;
+        const detail = node("#operation-result-message");
+        detail.textContent = message;
+        detail.className = failed ? "error" : "";
+        const dialog = node("#operation-result");
+        if (!dialog.open)
+            dialog.showModal();
+    }
+    node("#operation-result-close").onclick = () => node("#operation-result").close();
+    window.addEventListener("message", (event) => {
+        const frame = channelPanel.querySelector("iframe.channel-frame");
+        if (event.origin !== window.location.origin || !frame || event.source !== frame.contentWindow)
+            return;
+        const result = event.data;
+        if (!result || result.type !== "mab:operation-result" || typeof result.title !== "string" || typeof result.message !== "string" || typeof result.failed !== "boolean")
+            return;
+        showResult(result.title, result.message, result.failed);
+    });
     async function loadCatalog() {
         const result = await request(`/api/plugins/catalog?q=${encodeURIComponent(packageSearchNode.value.trim())}`);
         const items = result.plugins ?? [];
@@ -108,7 +132,7 @@
         item.type = "button";
         item.textContent = label;
         item.title = title;
-        item.onclick = () => { void run().catch((cause) => error(String(cause))); };
+        item.onclick = () => { item.disabled = true; void run().catch((cause) => { const message = cause instanceof Error ? cause.message : String(cause); error(message); showResult(`${title}失败`, message, true); }).finally(() => { item.disabled = false; void load(false); }); };
         return item;
     }
     async function load(refreshCatalog = true) {
@@ -117,8 +141,8 @@
         loading = true;
         try {
             error("");
-            const [health, plugins, messages, versions, policy, sessions] = await Promise.all([
-                request("/api/health"), request("/api/plugins"), request("/api/messages"), request("/api/versions"), request("/api/update-policy"), request("/api/sessions"),
+            const [health, plugins, messages, versions, policy, sessions, trust] = await Promise.all([
+                request("/api/health"), request("/api/plugins"), request("/api/messages"), request("/api/versions"), request("/api/update-policy"), request("/api/sessions"), request("/api/plugin-trust"),
             ]);
             policyNode.value = policy.mode;
             policyStatusNode.textContent = `当前：${policyNode.options[policyNode.selectedIndex]?.text ?? policy.mode}`;
@@ -127,6 +151,7 @@
             node("#health").textContent = `服务运行中 · ${health.plugins} 个插件`;
             node("#access-panel").hidden = true;
             const installed = plugins.plugins ?? [];
+            renderPluginTrust(trust);
             renderPlugins(installed);
             renderChannels(installed);
             renderMessages(messages.messages ?? []);
@@ -199,6 +224,71 @@
         if (!entries.length)
             versionsNode.textContent = "尚未检查版本";
     }
+    function renderPluginTrust(data) {
+        if (pluginTrustDirty)
+            return;
+        pluginTrustConfig = structuredClone(data.config ?? { providers: {}, plugins: {} });
+        trustProvidersNode.replaceChildren();
+        for (const provider of data.providers ?? []) {
+            const row = document.createElement("tr");
+            const name = document.createElement("td");
+            name.textContent = provider.name;
+            const current = document.createElement("td");
+            current.textContent = provider.trusted ? "可信" : "不可信";
+            const action = document.createElement("td");
+            const select = document.createElement("select");
+            select.setAttribute("aria-label", `${provider.name} 提供者信任策略`);
+            for (const [value, label] of [["inherit", "使用默认"], ["allow", "信任并自动升级"], ["deny", "取消信任"]]) {
+                const option = document.createElement("option");
+                option.value = value;
+                option.textContent = label;
+                select.append(option);
+            }
+            select.value = provider.decision;
+            select.onchange = () => { pluginTrustDirty = true; if (select.value === "inherit")
+                delete pluginTrustConfig.providers[provider.name];
+            else
+                pluginTrustConfig.providers[provider.name] = select.value; };
+            action.append(select);
+            row.append(name, current, action);
+            trustProvidersNode.append(row);
+        }
+        trustPluginsNode.replaceChildren();
+        for (const entry of data.entries ?? []) {
+            const row = document.createElement("tr");
+            for (const value of [entry.id, entry.packageName ?? "非 npm 插件", entry.publisher ?? "未知提供者", entry.autoUpdate ? "允许" : "禁止"]) {
+                const cell = document.createElement("td");
+                cell.textContent = value;
+                row.append(cell);
+            }
+            const action = document.createElement("td");
+            const select = document.createElement("select");
+            select.setAttribute("aria-label", `${entry.id} 插件自动升级策略`);
+            for (const [value, label] of [["inherit", "继承提供者"], ["allow", "允许自动升级"], ["deny", "禁止自动升级"]]) {
+                const option = document.createElement("option");
+                option.value = value;
+                option.textContent = label;
+                select.append(option);
+            }
+            select.value = entry.pluginOverride ?? "inherit";
+            select.onchange = () => { pluginTrustDirty = true; if (select.value === "inherit")
+                delete pluginTrustConfig.plugins[entry.id];
+            else
+                pluginTrustConfig.plugins[entry.id] = select.value; };
+            action.append(select);
+            row.append(action);
+            trustPluginsNode.append(row);
+        }
+        trustStatusNode.textContent = "";
+        if (!(data.entries ?? []).length) {
+            const row = document.createElement("tr");
+            const cell = document.createElement("td");
+            cell.colSpan = 5;
+            cell.textContent = "暂无可管理的 npm 插件";
+            row.append(cell);
+            trustPluginsNode.append(row);
+        }
+    }
     function renderPlugins(items) {
         plugins = items;
         pluginsNode.replaceChildren();
@@ -328,6 +418,7 @@
     node("#refresh").onclick = () => void load();
     node("#check-versions").onclick = () => void request("/api/versions/check", "POST", {}).then(() => load()).catch((cause) => error(String(cause)));
     node("#save-update-policy").onclick = () => void request("/api/update-policy", "PATCH", { mode: policyNode.value }).then(() => load()).catch((cause) => error(String(cause)));
+    node("#save-plugin-trust").onclick = () => { const button = node("#save-plugin-trust"); button.disabled = true; trustStatusNode.textContent = "正在保存…"; void request("/api/plugin-trust", "PATCH", pluginTrustConfig).then(() => { pluginTrustDirty = false; trustStatusNode.textContent = "信任设置已保存"; return load(false); }).catch((cause) => { trustStatusNode.textContent = String(cause); }).finally(() => { button.disabled = false; }); };
     node("#update-core").onclick = () => { if (confirm("确认升级后台并自动重启？"))
         void request("/api/update", "POST", {}).then(() => { error("后台正在升级，页面将在几秒后恢复"); }).catch((cause) => error(String(cause))); };
     node("#pair-button").onclick = () => {

package/dist/src-ts/plugins/abweb/public/app.ts

@@ -1,5 +1,5 @@
 (() => {
-  type Plugin = { id: string; displayName: string; version: string; status: string; type?: string; capabilities?: string[]; error?: string; path: string; packageName?: string; dependencyStatus?: string[]; manifest?: { dependencies?: Record<string, string>; managementPage?: string; clientDownloadUrl?: string } };
+  type Plugin = { id: string; displayName: string; version: string; status: string; type?: string; capabilities?: string[]; error?: string; path: string; packageName?: string; publisher?: string; trusted?: boolean; autoUpdate?: boolean; dependencyStatus?: string[]; manifest?: { dependencies?: Record<string, string>; managementPage?: string; clientDownloadUrl?: string } };
   const node = <T extends HTMLElement>(selector: string): T => document.querySelector<T>(selector)!;
   const pluginsNode = node<HTMLTableSectionElement>("#plugins");
   const messagesNode = node<HTMLTableSectionElement>("#messages");
@@ -17,18 +17,38 @@
   const versionsNode = node<HTMLDivElement>("#versions");
   const policyNode = node<HTMLSelectElement>("#update-policy");
   const policyStatusNode = node<HTMLSpanElement>("#update-policy-status");
+  const trustProvidersNode = node<HTMLTableSectionElement>("#trust-providers");
+  const trustPluginsNode = node<HTMLTableSectionElement>("#trust-plugins");
+  const trustStatusNode = node<HTMLSpanElement>("#plugin-trust-status");
   const loginExpiry = Number(localStorage.getItem("mab-login-expires-at") ?? 0);
   if (loginExpiry <= Date.now()) { localStorage.removeItem("mab-login-token"); localStorage.removeItem("mab-login-expires-at"); }
   let authToken = localStorage.getItem("mab-login-token") ?? "";
   let plugins: Plugin[] = [];
   let selectedChannelId = "";
   let pluginVersions: Record<string, any> = {};
+  let pluginTrustConfig: { providers: Record<string, "allow" | "deny">; plugins: Record<string, "allow" | "deny"> } = { providers: {}, plugins: {} };
+  let pluginTrustDirty = false;
   let logPage = 1;
   let logHasNext = false;
   let loading = false;
   const installingPackages = new Set<string>();
 
   function error(message: string): void { errorNode.textContent = message; errorNode.hidden = !message; }
+  function showResult(title: string, message: string, failed: boolean): void {
+    node<HTMLElement>("#operation-result-title").textContent = title;
+    const detail = node<HTMLElement>("#operation-result-message");
+    detail.textContent = message; detail.className = failed ? "error" : "";
+    const dialog = node<HTMLDialogElement>("#operation-result");
+    if (!dialog.open) dialog.showModal();
+  }
+  node<HTMLButtonElement>("#operation-result-close").onclick = () => node<HTMLDialogElement>("#operation-result").close();
+  window.addEventListener("message", (event: MessageEvent) => {
+    const frame = channelPanel.querySelector<HTMLIFrameElement>("iframe.channel-frame");
+    if (event.origin !== window.location.origin || !frame || event.source !== frame.contentWindow) return;
+    const result = event.data;
+    if (!result || result.type !== "mab:operation-result" || typeof result.title !== "string" || typeof result.message !== "string" || typeof result.failed !== "boolean") return;
+    showResult(result.title, result.message, result.failed);
+  });
   async function loadCatalog(): Promise<void> {
     const result = await request(`/api/plugins/catalog?q=${encodeURIComponent(packageSearchNode.value.trim())}`);
     const items: Array<{ name: string; version: string; description: string; type: string }> = result.plugins ?? [];
@@ -75,15 +95,15 @@
   }
   function button(label: string, title: string, run: () => Promise<void>): HTMLButtonElement {
     const item = document.createElement("button"); item.type = "button"; item.textContent = label; item.title = title;
-    item.onclick = () => { void run().catch((cause) => error(String(cause))); }; return item;
+    item.onclick = () => { item.disabled = true; void run().catch((cause) => { const message = cause instanceof Error ? cause.message : String(cause); error(message); showResult(`${title}失败`, message, true); }).finally(() => { item.disabled = false; void load(false); }); }; return item;
   }
   async function load(refreshCatalog = true): Promise<void> {
     if (loading) return;
     loading = true;
     try {
       error("");
-      const [health, plugins, messages, versions, policy, sessions] = await Promise.all([
-        request("/api/health"), request("/api/plugins"), request("/api/messages"), request("/api/versions"), request("/api/update-policy"), request("/api/sessions"),
+      const [health, plugins, messages, versions, policy, sessions, trust] = await Promise.all([
+        request("/api/health"), request("/api/plugins"), request("/api/messages"), request("/api/versions"), request("/api/update-policy"), request("/api/sessions"), request("/api/plugin-trust"),
       ]);
       policyNode.value = policy.mode; policyStatusNode.textContent = `当前：${policyNode.options[policyNode.selectedIndex]?.text ?? policy.mode}`;
       renderVersions(versions);
@@ -91,6 +111,7 @@
       node<HTMLElement>("#health").textContent = `服务运行中 · ${health.plugins} 个插件`;
       node<HTMLElement>("#access-panel").hidden = true;
       const installed: Plugin[] = plugins.plugins ?? [];
+      renderPluginTrust(trust);
       renderPlugins(installed);
       renderChannels(installed);
       renderMessages(messages.messages ?? []);
@@ -133,6 +154,35 @@
     }));
     if (!entries.length) versionsNode.textContent = "尚未检查版本";
   }
+  function renderPluginTrust(data: any): void {
+    if (pluginTrustDirty) return;
+    pluginTrustConfig = structuredClone(data.config ?? { providers: {}, plugins: {} });
+    trustProvidersNode.replaceChildren();
+    for (const provider of data.providers ?? []) {
+      const row = document.createElement("tr");
+      const name = document.createElement("td"); name.textContent = provider.name;
+      const current = document.createElement("td"); current.textContent = provider.trusted ? "可信" : "不可信";
+      const action = document.createElement("td");
+      const select = document.createElement("select"); select.setAttribute("aria-label", `${provider.name} 提供者信任策略`);
+      for (const [value, label] of [["inherit", "使用默认"], ["allow", "信任并自动升级"], ["deny", "取消信任"]]) { const option = document.createElement("option"); option.value = value; option.textContent = label; select.append(option); }
+      select.value = provider.decision;
+      select.onchange = () => { pluginTrustDirty = true; if (select.value === "inherit") delete pluginTrustConfig.providers[provider.name]; else pluginTrustConfig.providers[provider.name] = select.value as "allow" | "deny"; };
+      action.append(select); row.append(name, current, action); trustProvidersNode.append(row);
+    }
+    trustPluginsNode.replaceChildren();
+    for (const entry of data.entries ?? []) {
+      const row = document.createElement("tr");
+      for (const value of [entry.id, entry.packageName ?? "非 npm 插件", entry.publisher ?? "未知提供者", entry.autoUpdate ? "允许" : "禁止"]) { const cell = document.createElement("td"); cell.textContent = value; row.append(cell); }
+      const action = document.createElement("td");
+      const select = document.createElement("select"); select.setAttribute("aria-label", `${entry.id} 插件自动升级策略`);
+      for (const [value, label] of [["inherit", "继承提供者"], ["allow", "允许自动升级"], ["deny", "禁止自动升级"]]) { const option = document.createElement("option"); option.value = value; option.textContent = label; select.append(option); }
+      select.value = entry.pluginOverride ?? "inherit";
+      select.onchange = () => { pluginTrustDirty = true; if (select.value === "inherit") delete pluginTrustConfig.plugins[entry.id]; else pluginTrustConfig.plugins[entry.id] = select.value as "allow" | "deny"; };
+      action.append(select); row.append(action); trustPluginsNode.append(row);
+    }
+    trustStatusNode.textContent = "";
+    if (!(data.entries ?? []).length) { const row = document.createElement("tr"); const cell = document.createElement("td"); cell.colSpan = 5; cell.textContent = "暂无可管理的 npm 插件"; row.append(cell); trustPluginsNode.append(row); }
+  }
   function renderPlugins(items: Plugin[]): void {
     plugins = items;
     pluginsNode.replaceChildren();
@@ -200,6 +250,7 @@
   node<HTMLButtonElement>("#refresh").onclick = () => void load();
   node<HTMLButtonElement>("#check-versions").onclick = () => void request("/api/versions/check", "POST", {}).then(() => load()).catch((cause) => error(String(cause)));
   node<HTMLButtonElement>("#save-update-policy").onclick = () => void request("/api/update-policy", "PATCH", { mode: policyNode.value }).then(() => load()).catch((cause) => error(String(cause)));
+  node<HTMLButtonElement>("#save-plugin-trust").onclick = () => { const button = node<HTMLButtonElement>("#save-plugin-trust"); button.disabled = true; trustStatusNode.textContent = "正在保存…"; void request("/api/plugin-trust", "PATCH", pluginTrustConfig).then(() => { pluginTrustDirty = false; trustStatusNode.textContent = "信任设置已保存"; return load(false); }).catch((cause) => { trustStatusNode.textContent = String(cause); }).finally(() => { button.disabled = false; }); };
   node<HTMLButtonElement>("#update-core").onclick = () => { if (confirm("确认升级后台并自动重启？")) void request("/api/update", "POST", {}).then(() => { error("后台正在升级，页面将在几秒后恢复"); }).catch((cause) => error(String(cause))); };
   node<HTMLButtonElement>("#pair-button").onclick = () => {
     const code = pairCodeNode.value.trim();

package/dist/src-ts/plugins/abweb/public/index.html

@@ -13,6 +13,7 @@
     <nav class="tabs" role="tablist" aria-label="管理视图"><button id="settings-tab" type="button" role="tab" aria-selected="true" aria-controls="settings-panel">插件设置</button><button id="messages-tab" type="button" role="tab" aria-selected="false" aria-controls="messages-panel">通信记录</button><button id="logs-tab" type="button" role="tab" aria-selected="false" aria-controls="logs-panel">运行日志</button></nav>
     <div id="settings-panel" role="tabpanel" aria-labelledby="settings-tab">
     <section><div class="section-heading"><h2>版本管理</h2><div><button id="check-versions" type="button">检查更新</button><button id="update-core" type="button">升级后台</button></div></div><label for="update-policy">插件更新策略</label><select id="update-policy"><option value="auto-install">自动下载并安装</option><option value="download-only">自动下载，手动安装</option><option value="manual">手动下载和安装</option></select><button id="save-update-policy" type="button">保存策略</button><span id="update-policy-status" class="muted"></span><div id="versions" class="muted"></div></section>
+    <section id="plugin-trust"><div class="section-heading"><h2>自动升级信任</h2><button id="save-plugin-trust" type="button">保存信任设置</button></div><p class="muted">默认信任 m2lihui；未知提供者默认禁止自动升级。插件设置优先于提供者设置。</p><h3>提供者</h3><div class="table-scroll"><table class="trust-table"><thead><tr><th scope="col">npm 提供者</th><th scope="col">当前信任</th><th scope="col">策略</th></tr></thead><tbody id="trust-providers"></tbody></table></div><h3>插件</h3><div class="table-scroll"><table class="trust-table"><thead><tr><th scope="col">插件</th><th scope="col">npm 包</th><th scope="col">提供者</th><th scope="col">自动升级</th><th scope="col">单插件设置</th></tr></thead><tbody id="trust-plugins"></tbody></table></div><span id="plugin-trust-status" class="muted" role="status"></span></section>
     <section><details id="installed-plugins" open><summary><h2>已安装插件</h2></summary><div class="table-scroll"><table class="plugin-table"><thead><tr><th scope="col">名称</th><th scope="col">类型</th><th scope="col">版本</th><th scope="col">状态</th><th scope="col">操作</th></tr></thead><tbody id="plugins"></tbody></table></div><div class="plugin-catalog"><div class="section-heading"><h3>npm 插件目录</h3><button id="search-packages" type="button">刷新目录</button></div><input id="package-search" placeholder="搜索插件名称或功能" aria-label="搜索 npm 插件"><div id="catalog" class="catalog" aria-live="polite"></div></div><form id="install-local-form"><input id="plugin-path" required placeholder="Windows 上的插件目录路径" aria-label="本地插件目录"><button type="submit">安装本地插件</button></form></details></section>
     <section><div class="section-heading"><h2>Channel 设置</h2></div><nav id="channel-tabs" class="tabs channel-tabs" role="tablist" aria-label="Channel 设置"></nav><div id="channel-panel" role="tabpanel" aria-live="polite"></div></section>
     </div>
@@ -20,6 +21,9 @@
     <div id="logs-panel" role="tabpanel" aria-labelledby="logs-tab" hidden><section><div class="section-heading"><h2>运行日志</h2><button id="logs-refresh" type="button">刷新日志</button></div><div class="table-scroll"><table><thead><tr><th>时间</th><th>级别</th><th>来源</th><th>消息</th><th>详细字段</th></tr></thead><tbody id="logs"></tbody></table></div><p id="logs-empty" class="muted" hidden>暂无运行日志</p><div class="section-heading"><button id="logs-prev" type="button">上一页</button><span id="logs-page" class="muted">第 1 页</span><button id="logs-next" type="button">下一页</button></div></section></div>
     <p id="error" class="error" role="alert" hidden></p>
   </main>
+  <dialog id="operation-result" aria-labelledby="operation-result-title" aria-describedby="operation-result-message">
+    <h2 id="operation-result-title">操作结果</h2><p id="operation-result-message"></p><button id="operation-result-close" type="button" autofocus>确定</button>
+  </dialog>
   <script src="/abweb/app.js"></script>
 </body>
 </html>

package/dist/src-ts/plugins/abweb/public/style.css

@@ -29,6 +29,9 @@ form { margin-top: 14px; flex-wrap: wrap; }
 .plugin-table .controls { white-space: nowrap; }
 .plugin-table .controls button { margin: 0 5px 5px 0; }
 .plugin-id { display: block; margin-top: 4px; }
+.trust-table { min-width: 620px; }
+.trust-table th:nth-child(1) { width: 190px; }
+#plugin-trust h3 { font-size: 14px; margin: 16px 0 5px; }
 .plugin-catalog { border-top: 1px solid #e0e5e2; margin-top: 18px; padding-top: 14px; }
 .plugin-catalog h3 { font-size: 14px; margin: 0; }
 .plugin-catalog input { width: min(100%, 420px); margin: 10px 0; }
@@ -53,3 +56,7 @@ th { color: #566761; font-weight: 600; background: #edf1ef; }
 th:nth-child(1) { width: 145px; } th:nth-child(2) { width: 100px; } th:nth-child(3), th:nth-child(4) { width: 145px; } th:nth-child(5) { width: 62px; } th:nth-child(7) { width: 140px; }
 .message-error td:last-child { color: #a83427; }
 @media (max-width: 620px) { .shell { padding: 16px; } .section-heading { align-items: flex-start; flex-direction: column; } form, form input { width: 100%; } }
+
+#operation-result { width: min(520px, calc(100% - 32px)); border: 1px solid #bfc9c5; border-radius: 8px; padding: 24px; }
+#operation-result::backdrop { background: rgb(0 0 0 / 35%); }
+#operation-result-message { white-space: pre-wrap; overflow-wrap: anywhere; margin: 16px 0; }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-bridge-abweb",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "agent-bridge 的网页管理插件。",
   "keywords": [
     "mu-agent-bridge-plugin",

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "abweb",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "type": "management",
   "displayName": "Agent Bridge Web",
   "entry": "dist/src-ts/plugins/abweb/index.js",