agentworkshop 0.7.8 → 0.7.11

package/scripts/_dbg-plugins-e2e.mjs

@@ -0,0 +1,101 @@
+// ============================================================
+// 插件页(builtin 标识 + 错误人话渲染)E2E:_dbg-plugins-e2e.mjs <baseURL>
+// 断言链:admin 登录 → /plugins 内置示例/用户级扩展徽标 → admin 切换成功并恢复 →
+// plainuser 注册登录 → 切换被拒 → toast 为人话(含"管理员权限",不含 403/[POST])。
+// 用法:node scripts/_dbg-plugins-e2e.mjs http://127.0.0.1:3021
+// ============================================================
+import puppeteer from 'puppeteer-core'
+import { mkdirSync } from 'node:fs'
+
+const BASE = process.argv[2] ?? 'http://127.0.0.1:3021'
+const ADMIN = { email: 'admin@awshop.local', password: 'Awshop2026' }
+const PLAIN = { name: `plain-${Date.now().toString(36)}`, email: `plain-${Date.now().toString(36)}@awshop.local`, password: 'Plain2026' }
+const SHOT_DIR = '.e2e-shots'
+mkdirSync(SHOT_DIR, { recursive: true })
+
+const results = []
+const check = (name, ok, detail = '') => {
+  results.push({ name, ok, detail })
+  console.log(`${ok ? '✔' : '✖'} ${name}${detail ? ` — ${detail}` : ''}`)
+}
+const api = async (path, opts = {}) => {
+  const res = await fetch(`${BASE}${path}`, { ...opts, headers: { 'content-type': 'application/json', ...opts.headers } })
+  return { status: res.status, body: await res.json().catch(() => null) }
+}
+
+// ---- 0. plainuser 注册(注册后系统已有 admin → user 角色)----
+const reg = await api('/api/users/register', { method: 'POST', body: JSON.stringify(PLAIN) })
+check('后续注册为普通 user(前置)', reg.status === 200 && reg.body?.data?.user?.role === 'user', JSON.stringify(reg.body?.data?.user))
+
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--no-proxy-server', '--window-size=1600,1000'],
+})
+try {
+  const page = await browser.newPage()
+  await page.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+
+  // ---- 1. admin 会话:内置徽标 + 切换成功 ----
+  const adminLogin = await api('/api/users/login', { method: 'POST', body: JSON.stringify(ADMIN) })
+  check('admin 登录(前置)', adminLogin.status === 200 && adminLogin.body?.data?.user?.role === 'admin')
+  await page.setCookie({ name: 'token', value: adminLogin.body.data.token, domain: new URL(BASE).hostname, path: '/' })
+  await page.goto(`${BASE}/plugins`, { waitUntil: 'networkidle2', timeout: 60000 })
+  await page.waitForFunction(() => document.body.innerText.includes('内置示例'), { timeout: 30000 })
+  const adminText = await page.evaluate(() => document.body.innerText)
+  check('内置示例徽标呈现(project 作用域)', adminText.includes('内置示例'))
+  check('用户级扩展徽标呈现(user 作用域)', adminText.includes('用户级扩展'))
+  check('旧「项目级」标签不再出现', !adminText.includes('项目级'))
+  await page.screenshot({ path: `${SHOT_DIR}/plugins-1-admin-badges.png` })
+
+  // admin 切换第一个启用的插件 → 成功 toast → 等热重载 → 切回恢复
+  const firstSwitch = await page.$('.pg-card .ant-switch')
+  if (firstSwitch) {
+    await firstSwitch.click()
+    await page.waitForFunction(() => document.body.innerText.includes('已停用') || document.body.innerText.includes('已启用'), { timeout: 20000 })
+    await new Promise(r => setTimeout(r, 1800))
+    const toastText = await page.evaluate(() => document.body.innerText)
+    const toggledOk = toastText.includes('· 已停用') || toastText.includes('· 已启用')
+    check('admin 切换插件成功', toggledOk)
+    // 恢复原状态
+    const sw2 = await page.$('.pg-card .ant-switch')
+    if (sw2) { await sw2.click(); await new Promise(r => setTimeout(r, 1800)) }
+  }
+  else {
+    check('admin 切换插件成功', false, '页面上没有插件卡片')
+  }
+  await page.evaluate(() => { document.cookie = 'token=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/' })
+
+  // ---- 2. plainuser 会话:403 → 人话提示 ----
+  const plainLogin = await api('/api/users/login', { method: 'POST', body: JSON.stringify({ email: PLAIN.email, password: PLAIN.password }) })
+  check('plainuser 登录(前置)', plainLogin.status === 200 && plainLogin.body?.data?.user?.role === 'user')
+  await page.setCookie({ name: 'token', value: plainLogin.body.data.token, domain: new URL(BASE).hostname, path: '/' })
+  const denied = []
+  page.on('response', (res) => {
+    if (res.status() >= 400) denied.push(`${res.status()} ${res.url()}`)
+  })
+  await page.goto(`${BASE}/plugins`, { waitUntil: 'networkidle2', timeout: 60000 })
+  await page.waitForFunction(() => document.body.innerText.includes('内置示例'), { timeout: 30000 })
+  const sw = await page.$('.pg-card .ant-switch')
+  if (sw) {
+    await sw.click()
+    await page.waitForFunction(() => document.querySelector('.ant-message')?.textContent?.length > 0, { timeout: 20000 })
+    const toast = await page.evaluate(() => document.querySelector('.ant-message')?.textContent ?? '')
+    const human = /权限|管理员/.test(toast)
+    const rawCode = /\b403\b|\[POST\]|ADMIN_REQUIRED|FORBIDDEN/.test(toast)
+    check('403 提示为人话(权限相关文案)', human, toast.trim())
+    check('提示不含错误码式文本', !rawCode)
+    console.log('  [denied requests]', denied.join(' | ') || '(none)')
+    await page.screenshot({ path: `${SHOT_DIR}/plugins-2-403-human.png` })
+  }
+  else {
+    check('403 提示为人话(权限不足/需管理员)', false, '页面上没有插件卡片')
+  }
+}
+finally {
+  await browser.close()
+}
+
+const failed = results.filter(r => !r.ok)
+console.log(`\n===== plugins E2E: ${results.length - failed.length}/${results.length} 通过 =====`)
+process.exit(failed.length ? 1 : 0)

package/scripts/_dbg-protocol-matrix.mjs

@@ -161,6 +161,22 @@ async function main() {
   const line = (await api('POST', '/api/workshop/dcw/lines', { body: { name: `全协议产线-${TAG}` }, token })).data?.line
   check('0.1', '建产线', Boolean(line?.id))
 
+  // ── 0.2 产线级权限(新版权限模型:普通用户默认无权,admin 逐线授 operate) ──
+  const ADMIN_PASS = process.env.AW_ADMIN_PASS ?? 'admin123'
+  const adminLogin = await api('POST', '/api/users/login', {
+    body: { email: 'admin@awshop.local', password: ADMIN_PASS },
+  }).catch(() => null)
+  const adminTok = adminLogin?.data?.token
+  if (adminTok) {
+    const granted = await api('PUT', '/api/workshop/permissions', {
+      body: { userId: reg.data?.user?.id, grants: [{ lineId: line.id, mode: 'operate' }] }, token: adminTok,
+    }).catch(() => null)
+    check('0.2', 'admin 授予测试用户产线 operate 权限', Boolean(granted?.data?.userId), granted?.message ?? '')
+  }
+  else {
+    console.log('  [skip] admin 登录失败(可设 AW_ADMIN_PASS),以普通用户无权态继续(写入段将按权限模型拒绝)')
+  }
+
   // ── 1. DAQ 五协议节点(配置连接 + 连接测试) ──
   const daqDefs = [
     { id: 'mqtt', driver: 'mqtt', templateRef: 'daq-temp-tc', name: `MQTT温度-${TAG}`, expect: [30, 75],

package/scripts/_dbg-repo-setup-verify.mjs

@@ -0,0 +1,31 @@
+// repo 实例 setup 流程 API 验证:轮询等待服务起来 → 立刻注册(抢在探针前) → 断言 admin
+const BASE = 'http://127.0.0.1:3001'
+const CREDS = { name: 'admin', email: 'admin@awshop.local', password: 'Awshop2026' }
+const api = async (path, opts = {}) => {
+  const res = await fetch(`${BASE}${path}`, { ...opts, headers: { 'content-type': 'application/json', ...opts.headers } })
+  return { status: res.status, body: await res.json().catch(() => null) }
+}
+
+let alive = false
+for (let i = 0; i < 120; i++) {
+  try { await fetch(`${BASE}/api/health`, { signal: AbortSignal.timeout(800) }); alive = true; break }
+  catch { await new Promise(r => setTimeout(r, 500)) }
+}
+if (!alive) { console.error('✖ 服务未在超时内就绪'); process.exit(1) }
+
+const s0 = await api('/api/users/setup-status')
+console.log('setup-status 初始:', JSON.stringify(s0.body?.data), s0.status === 200 && s0.body?.data?.needsSetup === true ? '✔' : '✖')
+if (s0.body?.data?.needsSetup !== true) process.exit(1)
+
+const reg = await api('/api/users/register', { method: 'POST', body: JSON.stringify(CREDS) })
+console.log('注册首个账号:', reg.body?.data?.user?.email, reg.body?.data?.user?.role, reg.body?.data?.user?.role === 'admin' ? '✔' : '✖')
+if (reg.body?.data?.user?.role !== 'admin') process.exit(1)
+
+const s1 = await api('/api/users/setup-status')
+console.log('注册后 setup-status:', JSON.stringify(s1.body?.data), s1.body?.data?.needsSetup === false ? '✔' : '✖')
+
+const login = await api('/api/users/login', { method: 'POST', body: JSON.stringify({ email: CREDS.email, password: CREDS.password }) })
+console.log('新管理员登录:', login.body?.data?.user?.role === 'admin' ? '✔' : '✖')
+const me = await api('/api/users/me', { headers: { authorization: `Bearer ${login.body?.data?.token}` } })
+console.log('/api/users/me:', me.body?.data?.role === 'admin' ? '✔' : '✖')
+console.log(me.body?.data?.role === 'admin' ? 'REPO-SETUP-OK' : 'REPO-SETUP-FAIL')

package/scripts/_dbg-setup-e2e.mjs

@@ -57,7 +57,7 @@ try {
   const pwInput = await page.$('.auth-card input[type="password"]')
   await pwInput.click({ clickCount: 3 })
   await pwInput.type(CREDS.password)
-  await pwInput.keyboard.press('Enter')
+  await page.keyboard.press('Enter')
 
   // 注册成功 → store 置登录态 → 登录门消失,workspace 出现
   await page.waitForFunction(() => document.body.innerText.includes('Workshop'), { timeout: 30000 })

package/sdk/api.mjs

@@ -1,101 +1,117 @@
-// ============================================================
-// AgentWorkShop SDK — 平台 REST 客户端
-// ------------------------------------------------------------
-// SDK 作为项目服务的 client:对平台 REST 面(/api/**)的类型化轻封装。
-// 三个使用形态:
-//   1) 插件内:   ctx.api.lines.list()          —— 宿主注入(自环 origin)
-//   2) 外部脚本: createPlatformClient({ baseUrl, token }).daq.nodes()
-//   3) 浏览器:   createPlatformClient({ baseUrl: '' })  同源相对路径
-// 资源方法返回原始 JSON body(data 字段已解包);4xx/5xx 抛错(含 status)。
-// ============================================================
-
-export function createPlatformClient({ baseUrl = '', token, logger, timeoutMs = 10000 } = {}) {
-  // baseUrl 支持函数(延迟解析):插件宿主的监听端口在 nitro listen 钩子后才确定
-  const resolveBase = () => String(typeof baseUrl === 'function' ? baseUrl() : (baseUrl ?? '')).replace(/\/+$/, '')
-  let authToken = token ?? null
-
-  async function call(method, path, body, opt = {}) {
-    const base = resolveBase()
-    const headers = { accept: 'application/json', ...(opt.headers ?? {}) }
-    if (authToken) headers.authorization = `Bearer ${authToken}`
-    if (body !== undefined) headers['content-type'] = 'application/json'
-    const res = await fetch(`${base}${path}`, {
-      method,
-      headers,
-      body: body !== undefined ? JSON.stringify(body) : undefined,
-      signal: AbortSignal.timeout(opt.timeoutMs ?? timeoutMs),
-    })
-    const json = await res.json().catch(() => null)
-    if (!res.ok) {
-      const err = new Error(json?.message ?? `HTTP ${res.status} ${path}`)
-      err.status = res.status
-      err.body = json
-      if (logger) logger.warn(`API ${method} ${path} → ${res.status}`)
-      throw err
-    }
-    // 平台统一信封 { code, message, data } → 解包 data;非信封原样返回
-    return json && typeof json === 'object' && 'data' in json ? json.data : json
-  }
-
-  const resource = root => ({
-    list: (query = {}) => call('GET', `${root}${toQuery(query)}`),
-    get: id => call('GET', `${root}/${id}`),
-    create: body => call('POST', root, body),
-    update: (id, patch) => call('PATCH', `${root}/${id}`, patch),
-    remove: id => call('DELETE', `${root}/${id}`),
-  })
-
-  const client = {
-    /** 底层调用(任意平台路径;自动带 token 与信封解包) */
-    call,
-    get: (path, query = {}) => call('GET', `${path}${toQuery(query)}`),
-    post: (path, body) => call('POST', path, body),
-    patch: (path, body) => call('PATCH', path, body),
-    delete: path => call('DELETE', path),
-    setToken: (t) => {
-      authToken = t ?? null
-      return client
-    },
-    /** 平台健康(免鉴权) */
-    ping: () => call('GET', '/api/plugins/manifest'),
-
-    // ---- 业务资源面 ----
-    users: {
-      ...resource('/api/users'),
-      login: (email, password) => call('POST', '/api/users/login', { email, password }),
-      me: () => call('GET', '/api/users/me'),
-    },
-    lines: {
-      ...resource('/api/workshop/dcw/lines'),
-      start: (id, recipeId = '') => call('POST', `/api/workshop/dcw/lines/${id}/start`, { recipeId }),
-      stop: id => call('POST', `/api/workshop/dcw/lines/${id}/stop`),
-    },
-    products: resource('/api/workshop/dcw/products'),
-    recipes: resource('/api/workshop/dcw/recipes'),
-    dcwNodes: resource('/api/workshop/dcw'),
-    daqNodes: {
-      ...resource('/api/workshop/daq'),
-      alarms: () => call('GET', '/api/workshop/daq/alarms'),
-    },
-    templates: {
-      daq: () => call('GET', '/api/workshop/daq').then(d => d?.templates ?? []),
-      dcw: () => call('GET', '/api/workshop/dcw').then(d => d?.templates ?? []),
-    },
-    twins: resource('/api/workshop/device-twins'),
-    teams: resource('/api/workshop/teams'),
-    agents: resource('/api/workshop/agents'),
-    channels: resource('/api/workshop/channels'),
-    plugins: {
-      manifest: () => call('GET', '/api/plugins/manifest'),
-    },
-  }
-  return client
-}
-
-function toQuery(query) {
-  const entries = Object.entries(query ?? {}).filter(([, v]) => v !== undefined && v !== null && v !== '')
-  if (!entries.length) return ''
-  return `?${new URLSearchParams(Object.fromEntries(entries.map(([k, v]) => [k, String(v)]))).toString()}`
-}
-
-export default createPlatformClient
+// ============================================================
+// AgentWorkShop SDK — 平台 REST 客户端
+// ------------------------------------------------------------
+// SDK 作为项目服务的 client:对平台 REST 面(/api/**)的类型化轻封装。
+// 三个使用形态:
+//   1) 插件内:   ctx.api.lines.list()          —— 宿主注入(自环 origin)
+//   2) 外部脚本: createPlatformClient({ baseUrl, token }).daq.nodes()
+//   3) 浏览器:   createPlatformClient({ baseUrl: '' })  同源相对路径
+// 资源方法返回原始 JSON body(data 字段已解包);4xx/5xx 抛错(含 status)。
+// ============================================================
+
+export function createPlatformClient({ baseUrl = '', token, logger, timeoutMs = 10000 } = {}) {
+  // baseUrl 支持函数(延迟解析):插件宿主的监听端口在 nitro listen 钩子后才确定
+  const resolveBase = () => String(typeof baseUrl === 'function' ? baseUrl() : (baseUrl ?? '')).replace(/\/+$/, '')
+  let authToken = token ?? null
+
+  async function call(method, path, body, opt = {}) {
+    const base = resolveBase()
+    const headers = { accept: 'application/json', ...(opt.headers ?? {}) }
+    if (authToken) headers.authorization = `Bearer ${authToken}`
+    if (body !== undefined) headers['content-type'] = 'application/json'
+    const res = await fetch(`${base}${path}`, {
+      method,
+      headers,
+      body: body !== undefined ? JSON.stringify(body) : undefined,
+      signal: AbortSignal.timeout(opt.timeoutMs ?? timeoutMs),
+    })
+    const json = await res.json().catch(() => null)
+    if (!res.ok) {
+      const err = new Error(json?.message ?? `HTTP ${res.status} ${path}`)
+      err.status = res.status
+      err.body = json
+      if (logger) logger.warn(`API ${method} ${path} → ${res.status}`)
+      throw err
+    }
+    // 平台统一信封 { code, message, data }:HTTP 200 但业务 code 非 0 也是错误
+    // (不做此检查插件会把 error 信封解包成 null 当成功用)
+    if (json && typeof json === 'object' && 'code' in json && json.code !== 0) {
+      const err = new Error(json.message ?? `业务错误 ${json.code} ${path}`)
+      err.status = res.status
+      err.code = json.code
+      err.body = json
+      if (logger) logger.warn(`API ${method} ${path} → code ${json.code}`)
+      throw err
+    }
+    // 非信封原样返回
+    return json && typeof json === 'object' && 'data' in json && 'code' in json ? json.data : json
+  }
+
+  const resource = root => ({
+    list: (query = {}) => call('GET', `${root}${toQuery(query)}`),
+    get: id => call('GET', `${root}/${id}`),
+    create: body => call('POST', root, body),
+    update: (id, patch) => call('PATCH', `${root}/${id}`, patch),
+    remove: id => call('DELETE', `${root}/${id}`),
+  })
+
+  const client = {
+    /** 底层调用(任意平台路径;自动带 token 与信封解包) */
+    call,
+    get: (path, query = {}) => call('GET', `${path}${toQuery(query)}`),
+    post: (path, body) => call('POST', path, body),
+    patch: (path, body) => call('PATCH', path, body),
+    delete: path => call('DELETE', path),
+    setToken: (t) => {
+      authToken = t ?? null
+      return client
+    },
+    /** 平台健康(免鉴权) */
+    ping: () => call('GET', '/api/plugins/manifest'),
+
+    // ---- 业务资源面 ----
+    users: {
+      ...resource('/api/users'),
+      login: (email, password) => call('POST', '/api/users/login', { email, password }),
+      me: () => call('GET', '/api/users/me'),
+    },
+    lines: {
+      ...resource('/api/workshop/dcw/lines'),
+      start: (id, recipeId = '') => call('POST', `/api/workshop/dcw/lines/${id}/start`, { recipeId }),
+      stop: id => call('POST', `/api/workshop/dcw/lines/${id}/stop`),
+    },
+    products: resource('/api/workshop/dcw/products'),
+    recipes: resource('/api/workshop/dcw/recipes'),
+    dcwNodes: resource('/api/workshop/dcw'),
+    daqNodes: {
+      ...resource('/api/workshop/daq'),
+      alarms: () => call('GET', '/api/workshop/daq/alarms'),
+    },
+    templates: {
+      daq: () => call('GET', '/api/workshop/daq').then(d => d?.templates ?? []),
+      dcw: () => call('GET', '/api/workshop/dcw').then(d => d?.templates ?? []),
+    },
+    twins: resource('/api/workshop/device-twins'),
+    teams: resource('/api/workshop/teams'),
+    agents: resource('/api/workshop/agents'),
+    channels: resource('/api/workshop/channels'),
+    permissions: {
+      /** admin:全量产线 + 用户(含 channels/grants)总览 */
+      overview: () => call('GET', '/api/workshop/permissions'),
+      /** admin:批量设置用户产线授权 { userId, grants: [{ lineId, mode: 'readonly'|'operate'|null }] } */
+      set: payload => call('PUT', '/api/workshop/permissions', payload),
+    },
+    plugins: {
+      manifest: () => call('GET', '/api/plugins/manifest'),
+    },
+  }
+  return client
+}
+
+function toQuery(query) {
+  const entries = Object.entries(query ?? {}).filter(([, v]) => v !== undefined && v !== null && v !== '')
+  if (!entries.length) return ''
+  return `?${new URLSearchParams(Object.fromEntries(entries.map(([k, v]) => [k, String(v)]))).toString()}`
+}
+
+export default createPlatformClient