agentworkshop 0.2.1

package/app/stores/workshop/user.ts

@@ -0,0 +1,176 @@
+/**
+ * 用户身份（全局用户系统集成）：register/login/logout/多 token CRUD；
+ * token 写入 cookie 'token' 供 $http 拦截器全局注入(Authorization: Bearer)。
+ * WS sub / 手写 fetch 场景直接读 store.token。
+ * 身份源：/api/users/*（data/users.sqlite 全局用户系统，非 workshop 本地用户）。
+ */
+import { defineStore } from 'pinia'
+
+export interface CurrentUser {
+  id: string
+  name: string
+  email: string
+  role: string
+  createdAt: string
+  token: string
+  /** 当前会话 token 的 id（吊销会话时比对用） */
+  tokenId: string
+}
+
+export interface TokenMeta {
+  id: string
+  label: string
+  createdAt: string
+  lastUsedAt: string | null
+  /** 服务端掩码预览（前 6 后 4）；旧 token 未存档明文时为 null */
+  preview: string | null
+  /** 是否可随时查看明文（旧数据仅存哈希 → false） */
+  hasPlain: boolean
+}
+
+export interface AuthPayload {
+  user: Omit<CurrentUser, 'token' | 'tokenId'>
+  token: string
+}
+
+interface ApiEnvelope<T = unknown> {
+  code: number | string
+  message: string
+  data: T | null
+}
+
+export const useUserStore = defineStore('workshop.user', {
+  state: () => ({
+    user: null as CurrentUser | null,
+  }),
+  getters: {
+    isLoggedIn: state => state.user !== null,
+    token: state => state.user?.token ?? '',
+    /** admin 角色(最高管理权限:全量监控/任意模板/用户管理) */
+    isAdmin: state => state.user?.role === 'admin',
+  },
+  actions: {
+    applyCookie(): void {
+      // SSR 阶段直接跳过:登录/登出只发生在客户端,且 refresh() 等异步链在 await 后
+      // 请求上下文已丢失,useCookie 会抛 NUXT_E1001(useNuxtApp outside context);
+      // 请求期写 Set-Cookie 在响应完成后也无实效。客户端 useCookie 不依赖请求上下文。
+      if (import.meta.server) return
+      const cookie = useCookie<string | null>('token', { maxAge: 60 * 60 * 24 * 365 })
+      cookie.value = this.user?.token ?? null
+    },
+    /** 以 me 响应补全 tokenId（注册/登录签发的新 token 尚未绑定 id） */
+    async _attachTokenId(token: string): Promise<void> {
+      const res = await $fetch<ApiEnvelope<Omit<CurrentUser, 'token'> & { tokenId: string }>>('/api/users/me', {
+        headers: { authorization: `Bearer ${token}` },
+      })
+      if (res.code === 0 && res.data && this.user) {
+        this.user.tokenId = res.data.tokenId
+      }
+    },
+    async register(name: string, email: string, password: string): Promise<CurrentUser> {
+      const res = await $fetch<ApiEnvelope<AuthPayload>>('/api/users/register', {
+        method: 'POST',
+        body: { name: name.trim(), email: email.trim(), password },
+      })
+      if (res.code !== 0 || !res.data) throw new Error(res.message ?? '注册失败')
+      this.user = { ...res.data.user, token: res.data.token, tokenId: '' }
+      this.applyCookie()
+      await this._attachTokenId(res.data.token)
+      return this.user
+    },
+    async login(email: string, password: string): Promise<CurrentUser> {
+      const res = await $fetch<ApiEnvelope<AuthPayload>>('/api/users/login', {
+        method: 'POST',
+        body: { email: email.trim(), password },
+      })
+      if (res.code !== 0 || !res.data) throw new Error(res.message ?? '登录失败')
+      this.user = { ...res.data.user, token: res.data.token, tokenId: '' }
+      this.applyCookie()
+      await this._attachTokenId(res.data.token)
+      return this.user
+    },
+    async loginWithToken(token: string): Promise<CurrentUser> {
+      const trimmed = token.trim()
+      if (!trimmed) throw new Error('token 不能为空')
+      const res = await $fetch<ApiEnvelope<Omit<CurrentUser, 'token'> & { tokenId: string }>>('/api/users/me', {
+        headers: { authorization: `Bearer ${trimmed}` },
+      })
+      if (res.code !== 0 || !res.data) throw new Error(res.message ?? 'token 无效')
+      this.user = { ...res.data, token: trimmed }
+      this.applyCookie()
+      return this.user
+    },
+    async refresh(): Promise<void> {
+      if (!this.user) return
+      try {
+        await this.loginWithToken(this.user.token)
+      }
+      catch {
+        this.logout()
+      }
+    },
+    async logout(): Promise<void> {
+      const t = this.user?.token
+      this.user = null
+      this.applyCookie()
+      if (t) {
+        try {
+          await $fetch('/api/users/logout', { method: 'POST', headers: { authorization: `Bearer ${t}` } })
+        }
+        catch {
+          // 吊销失败不阻塞本地登出
+        }
+      }
+    },
+    // ===== API Token CRUD（仅本人；$fetch 不走 axios 拦截器，需显式携带当前会话 Bearer）=====
+    authHeaders(): Record<string, string> {
+      const t = this.user?.token
+      return t ? { authorization: `Bearer ${t}` } : {}
+    },
+    async listTokens(): Promise<TokenMeta[]> {
+      const res = await $fetch<ApiEnvelope<TokenMeta[]>>('/api/users/tokens', { headers: this.authHeaders() })
+      if (res.code !== 0 || !res.data) throw new Error(res.message ?? '获取 token 列表失败')
+      return res.data
+    },
+    async createToken(label: string): Promise<{ id: string, label: string, token: string }> {
+      const res = await $fetch<ApiEnvelope<{ id: string, label: string, token: string }>>('/api/users/tokens', {
+        method: 'POST',
+        body: { label: label.trim() },
+        headers: this.authHeaders(),
+      })
+      if (res.code !== 0 || !res.data) throw new Error(res.message ?? '创建 token 失败')
+      return res.data
+    },
+    async renameToken(id: string, label: string): Promise<TokenMeta> {
+      const res = await $fetch<ApiEnvelope<TokenMeta>>(`/api/users/tokens/${id}`, {
+        method: 'PATCH',
+        body: { label: label.trim() },
+        headers: this.authHeaders(),
+      })
+      if (res.code !== 0 || !res.data) throw new Error(res.message ?? '更新 token 失败')
+      return res.data
+    },
+    /** 查看存档明文（随时可查；404=非本人/不存在, 410=旧数据仅存哈希） */
+    async revealToken(id: string): Promise<string | null> {
+      const res = await $fetch<ApiEnvelope<{ token: string | null }>>(`/api/users/tokens/${id}/token`, {
+        headers: this.authHeaders(),
+      })
+      if (res.code !== 0 || !res.data) throw new Error(res.message ?? '查看 token 失败')
+      return res.data.token
+    },
+    async revokeToken(id: string): Promise<void> {
+      const res = await $fetch<ApiEnvelope<{ id: string }>>(`/api/users/tokens/${id}`, {
+        method: 'DELETE',
+        headers: this.authHeaders(),
+      })
+      if (res.code !== 0) throw new Error(res.message ?? '删除 token 失败')
+      // 吊销的是当前会话 token → 本地登出
+      if (this.user && id === this.user.tokenId) {
+        this.logout()
+      }
+    },
+  },
+  persist: {
+    pick: ['user'],
+  },
+})

package/app/stores/workshop/workspaces.ts

@@ -0,0 +1,133 @@
+/**
+ * Workspace 会话隔离层(P2 起服务端持久化;按用户隔离)。
+ * 数据源:GET/POST/DELETE /api/workshop/workspaces;挂载关系服务端存储。
+ * activeChannelId 为纯前端态(localStorage 映射,不入库)。
+ */
+import { defineStore } from 'pinia'
+import { useUserStore } from './user'
+
+/** 用户态 $fetch:管理面 API 统一携带用户 token(envelope 解包为 unknown,调用侧窄化) */
+async function authFetch<T = unknown>(url: string, init: Record<string, unknown> = {}): Promise<{ code: number | string, message?: string, data?: T }> {
+  const token = useUserStore().token
+  const res = await $fetch<unknown>(url, {
+    ...init,
+    headers: { authorization: `Bearer ${token}`, ...(init.headers as Record<string, string> | undefined) },
+  })
+  return res as { code: number | string, message?: string, data?: T }
+}
+
+export interface WorkspaceMeta {
+  id: string
+  name: string
+  channelIds: string[]
+  activeChannelId?: string
+}
+
+interface ServerWorkspace {
+  id: string
+  name: string
+  channelIds?: string[]
+}
+
+const ACTIVE_KEY = 'workshop.activeChannel'
+
+function loadActiveMap(): Record<string, string> {
+  try {
+    return JSON.parse(localStorage.getItem(ACTIVE_KEY) ?? '{}') as Record<string, string>
+  }
+  catch {
+    return {}
+  }
+}
+
+function saveActiveMap(map: Record<string, string>): void {
+  localStorage.setItem(ACTIVE_KEY, JSON.stringify(map))
+}
+
+export const useWorkspacesStore = defineStore('workshop.workspaces', {
+  state: () => ({
+    workspaces: [] as WorkspaceMeta[],
+    loaded: false,
+  }),
+  getters: {
+    activeWorkspaceId(state): string | null {
+      return localStorage.getItem('workshop.activeWorkspace') ?? state.workspaces[0]?.id ?? null
+    },
+  },
+  actions: {
+    setActiveWorkspaceId(id: string | null): void {
+      localStorage.setItem('workshop.activeWorkspace', id ?? '')
+    },
+    /** 拉取服务端 workspace 列表(合并本地 activeChannelId) */
+    async load(): Promise<void> {
+      const res = await authFetch<ServerWorkspace[]>('/api/workshop/workspaces')
+      if (res.code !== 0) throw new Error(res.message ?? '加载失败')
+      const active = loadActiveMap()
+      this.workspaces = (res.data ?? []).map((w) => {
+        const ids = w.channelIds ?? []
+        // 本地持久化的 activeChannelId 可能已过期(channel 被卸载/删除/换设备变更):
+        // 不在服务端挂载清单内的一律丢弃,回退首频道——否则前端会订阅死频道,
+        // 快照永不到达,右栏/列表长时间呈现"空数据"假象
+        const stored = active[w.id]
+        const activeChannelId = stored && ids.includes(stored) ? stored : undefined
+        if (stored !== activeChannelId) {
+          if (activeChannelId) active[w.id] = activeChannelId
+          else Reflect.deleteProperty(active, w.id)
+        }
+        return { id: w.id, name: w.name, channelIds: ids, activeChannelId }
+      })
+      saveActiveMap(active)
+      this.loaded = true
+    },
+    async create(name: string): Promise<WorkspaceMeta> {
+      const res = await authFetch<ServerWorkspace>('/api/workshop/workspaces', {
+        method: 'POST',
+        body: { name },
+      })
+      if (res.code !== 0 || !res.data) throw new Error(res.message ?? '创建失败')
+      const ws: WorkspaceMeta = { id: res.data.id, name: res.data.name, channelIds: [] }
+      this.workspaces.push(ws)
+      return ws
+    },
+    async remove(id: string): Promise<void> {
+      await authFetch(`/api/workshop/workspaces/${id}`, { method: 'DELETE' })
+      this.workspaces = this.workspaces.filter(w => w.id !== id)
+    },
+    async rename(id: string, name: string): Promise<void> {
+      // 服务端暂无 PATCH;本地展示名(重进后以服务端为准)
+      const ws = this.workspaces.find(w => w.id === id)
+      if (ws) ws.name = name
+    },
+    async mountChannel(id: string, channelId: string): Promise<void> {
+      const ws = this.workspaces.find(w => w.id === id)
+      if (!ws || ws.channelIds.includes(channelId)) return
+      await authFetch(`/api/workshop/workspaces/${id}/channels/${channelId}`, { method: 'POST' })
+      ws.channelIds.push(channelId)
+      if (!ws.activeChannelId) {
+        ws.activeChannelId = channelId
+        this.persistActive(ws)
+      }
+    },
+    async unmountChannel(id: string, channelId: string): Promise<void> {
+      const ws = this.workspaces.find(w => w.id === id)
+      if (!ws) return
+      await authFetch(`/api/workshop/workspaces/${id}/channels/${channelId}`, { method: 'DELETE' })
+      ws.channelIds = ws.channelIds.filter(c => c !== channelId)
+      if (ws.activeChannelId === channelId) ws.activeChannelId = ws.channelIds[0]
+      this.persistActive(ws)
+    },
+    setActiveChannel(id: string, channelId: string): void {
+      const ws = this.workspaces.find(w => w.id === id)
+      if (ws && ws.channelIds.includes(channelId)) {
+        ws.activeChannelId = channelId
+        this.persistActive(ws)
+      }
+    },
+    persistActive(ws: WorkspaceMeta): void {
+      const map = loadActiveMap()
+      if (ws.activeChannelId) map[ws.id] = ws.activeChannelId
+      else Reflect.deleteProperty(map, ws.id)
+      saveActiveMap(map)
+    },
+  },
+})

package/bin/aw.mjs

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+// ============================================================
+// AgentWorkShop CLI — npm bin 入口
+// `npm i -g agentworkshop` 后，终端里 `aw` / `agentworkshop` 即指向本文件。
+// ============================================================
+try {
+  const { main } = await import('../cli/aw.mjs')
+  process.exitCode = await main()
+}
+catch (err) {
+  console.error('[aw] 启动失败:', err)
+  process.exitCode = 1
+}

package/cli/aw.mjs

@@ -0,0 +1,184 @@
+// ============================================================
+// AgentWorkShop CLI — 入口（bin/aw.mjs 直接导入本文件）
+// ------------------------------------------------------------
+// 启动流程：
+//   1. 解析全局参数（--help/--version/--json/--root/--debug）
+//   2. 探测项目根（--root 显式 > cwd 向上找 config.yml）
+//   3. 建指令注册表：扫描 内建 → 用户级 → 项目级 三个目录（同名单后者覆盖，
+//      即 项目级 > 用户级 > 内建,自定义指令可安全覆盖内建行为）
+//   4. 组装运行上下文 ctx（含有效配置 API）并执行指令
+//   5. 统一错误处理与退出码（0 成功 / 1 错误 / 2 用法错误）
+// ============================================================
+import { existsSync, readFileSync } from 'node:fs'
+import { join, resolve, dirname } from 'node:path'
+import { homedir } from 'node:os'
+import { fileURLToPath } from 'node:url'
+import { CommandRegistry, commandDirs } from './core/registry.mjs'
+import { createContext, EXIT } from './core/context.mjs'
+import { parseArgs } from './core/args.mjs'
+import { renderHelp, renderCommandHelp } from './core/help.mjs'
+import { logger, color } from './core/logger.mjs'
+import { CliError, isUsageError } from './core/errors.mjs'
+
+export { CliError }
+
+/** 本包版本（cli/aw.mjs → ../package.json） */
+export function packageVersion() {
+  try {
+    return JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version ?? '0.0.0'
+  }
+  catch {
+    return '0.0.0'
+  }
+}
+
+/** 本包根目录（全局安装副本同样成立;必须走 fileURLToPath,Windows 下
+ *  URL pathname 是 '/D:/...' 形态,直接 path.resolve 会得到 'D:\D:\...' 垃圾路径,
+ *  导致内建指令目录扫描全部静默失败 —— 指令注册失效的根因） */
+export function packageRoot() {
+  return resolve(dirname(fileURLToPath(import.meta.url)), '..')
+}
+
+/** 向上查找文件（与 shared/config/engine.mjs 的 findUp 等价,避免顶层依赖引擎） */
+function findUp(startDir, filename) {
+  let dir = resolve(startDir)
+  for (;;) {
+    const candidate = join(dir, filename)
+    if (existsSync(candidate)) return candidate
+    const parent = dirname(dir)
+    if (parent === dir) return null
+    dir = parent
+  }
+}
+
+/** 从命令行提取指令名（首个非选项 token） */
+function extractCommand(argv) {
+  let afterDash = false
+  for (const tok of argv) {
+    if (afterDash) return tok
+    if (tok === '--') {
+      afterDash = true
+      continue
+    }
+    if (tok.startsWith('-')) continue
+    return tok
+  }
+  return null
+}
+
+function toBool(v, fallback = false) {
+  if (v === undefined) return fallback
+  if (typeof v === 'boolean') return v
+  return !/^(false|0|no|off)$/i.test(String(v))
+}
+
+export async function main(argv = process.argv.slice(2), { cwd = process.cwd() } = {}) {
+  const globals = parseArgs(argv, { shortMap: { h: 'help', v: 'version' } })
+  const json = toBool(globals.flags.json)
+  const debug = toBool(globals.flags.debug)
+  const explicitRoot = globals.flags.root ? String(globals.flags.root) : undefined
+  const commandName = extractCommand(argv)
+
+  // --version
+  if (globals.flags.version) {
+    logger.info(`${color.bold('agentworkshop')} ${packageVersion()}`)
+    return EXIT.OK
+  }
+
+  // 项目根探测
+  const root = explicitRoot
+    ? (existsSync(join(resolve(cwd, explicitRoot), 'config.yml')) ? resolve(cwd, explicitRoot) : null)
+    : (() => {
+        const p = findUp(cwd, 'config.yml')
+        return p ? dirname(p) : null
+      })()
+
+  const homeDir = homedir()
+  const pkgRoot = packageRoot()
+
+  // 指令注册：内建(本包 cli/commands) → 用户级 → 项目级(同名单后者覆盖)
+  const registry = new CommandRegistry()
+  await registry.scanDirs(commandDirs({ packageRoot: pkgRoot, projectRoot: root, homeDir }))
+
+  // aw help / aw <cmd> --help（先于"无指令"分支,保证 --help 退出码为 0）
+  if (globals.flags.help || commandName === 'help') {
+    const sub = commandName === 'help'
+      ? argv[argv.indexOf('help') + 1]
+      : commandName
+    const target = sub && registry.find(sub) ? sub : undefined
+    if (sub && !target) {
+      logger.warn(`未知指令: ${sub}`)
+      if (json) logger.info(JSON.stringify({ ok: false, error: 'unknown-command', name: sub }))
+      logger.info(renderHelp({ registry, root, version: packageVersion() }))
+      return EXIT.USAGE
+    }
+    logger.info(target ? renderCommandHelp(registry, target) : renderHelp({ registry, root, version: packageVersion() }))
+    return EXIT.OK
+  }
+
+  const ctx = await createContext({ cwd, explicitRoot: root ?? undefined, json, debug, registry })
+
+  // 无指令 → 帮助（用法错误码）
+  if (!commandName) {
+    logger.info(renderHelp({ registry, root, version: packageVersion() }))
+    if (json) logger.info(JSON.stringify({ ok: false, error: 'usage', hint: 'no command' }))
+    return EXIT.USAGE
+  }
+
+  const cmd = registry.find(commandName)
+  if (!cmd) {
+    if (!json) {
+      logger.error(`未知指令: ${color.bold(commandName)}（aw help 查看全部指令）`)
+    }
+    else {
+      logger.info(JSON.stringify({ ok: false, error: 'unknown-command', name: commandName }))
+    }
+    return EXIT.USAGE
+  }
+
+  // 项目上下文校验
+  if (cmd.meta.needsProject && !root) {
+    const msg = `指令 ${color.bold(commandName)} 需要项目上下文（未找到 config.yml）。请 cd 到项目目录，或 aw init 新建项目。`
+    if (!json) logger.error(msg)
+    else logger.info(JSON.stringify({ ok: false, error: 'no-project' }))
+    return EXIT.ERROR
+  }
+
+  // 指令参数（剥离指令名与全局项）
+  const idx = argv.indexOf(commandName)
+  const cmdArgv = argv.slice(idx >= 0 ? idx + 1 : 0).filter(a => a !== '--json' && a !== '--debug')
+  const local = parseArgs(cmdArgv, { shortMap: { h: 'help', ...(cmd.meta.short ?? {}) } })
+
+  if (local.flags.help) {
+    logger.info(renderCommandHelp(registry, commandName))
+    return EXIT.OK
+  }
+
+  try {
+    const code = await cmd.run(local, ctx)
+    return code ?? EXIT.OK
+  }
+  catch (err) {
+    if (err instanceof CliError) {
+      if (!json) logger.error(err.message)
+      else logger.info(JSON.stringify({ ok: false, error: err.code ?? 'cli-error', message: err.message }))
+      return isUsageError(err) ? EXIT.USAGE : EXIT.ERROR
+    }
+    if (!json) {
+      logger.error(`${color.bold(commandName)} 执行失败: ${err?.message ?? err}`)
+      if (debug) console.error(err)
+    }
+    else {
+      logger.info(JSON.stringify({ ok: false, error: 'internal', message: String(err?.message ?? err) }))
+    }
+    return EXIT.ERROR
+  }
+}
+
+// 仅当直接以 cli/aw.mjs 作为入口时自动运行（bin/aw.mjs 会显式调用 main）
+const thisEntry = process.argv[1] && resolve(process.argv[1]) === resolve(fileURLToPath(import.meta.url))
+if (thisEntry) {
+  process.exitCode = await main()
+}
+
+export default main

package/cli/commands/build.mjs

@@ -0,0 +1,33 @@
+// ============================================================
+// 指令:build — 生产构建（nuxt build → .output/）
+// ============================================================
+import { spawn } from 'node:child_process'
+import { color } from '../core/logger.mjs'
+import { localBypassEnv } from '../core/context.mjs'
+
+export const meta = {
+  name: 'build',
+  aliases: ['b', 'compile'],
+  group: '运行',
+  summary: '生产构建（nuxt build → .output/）',
+  usage: 'aw build',
+  needsProject: true,
+}
+
+export async function run(argv, ctx) {
+  const { root } = ctx
+  const nuxtBin = ctx.resolveNuxtBin()
+  if (!nuxtBin) {
+    console.log(`${color.red('✖')} 未找到 nuxt CLI（项目 node_modules 缺失?）`)
+    return 1
+  }
+  console.log(`${color.cyan('›')} 构建生产产物 .output/ ...`)
+  const child = spawn(process.execPath, [nuxtBin, 'build'], { cwd: root, stdio: 'inherit', env: localBypassEnv() })
+  return await new Promise((resolve2) => {
+    child.on('close', code => resolve2(code ?? 0))
+    child.on('error', (err) => {
+      console.log(`${color.red('✖')} 构建失败: ${err.message}`)
+      resolve2(1)
+    })
+  })
+}