aios-management-web 0.1.0

package/server/src/services/agent-status-sync-service.js

@@ -0,0 +1,132 @@
+import { withSerializedTransaction } from "../db/index.js";
+import { normalizeAgentStatus } from "./agent-quota.js";
+
+const STATUS_SYNC_TIMEOUT_MS = 15000;
+
+function firstText(...values) {
+  for (const value of values) {
+    if (typeof value === "string" && value.trim()) {
+      return value.trim();
+    }
+  }
+
+  return "";
+}
+
+export class AgentStatusSyncService {
+  constructor({ db, rpcClient, auditLogService = null }) {
+    this.db = db;
+    this.rpcClient = rpcClient;
+    this.auditLogService = auditLogService;
+    this.pendingRefresh = null;
+  }
+
+  async refreshStatuses({ trigger = "scheduled" } = {}) {
+    if (this.pendingRefresh) {
+      return await this.pendingRefresh;
+    }
+
+    this.pendingRefresh = this.runRefresh(trigger).finally(() => {
+      this.pendingRefresh = null;
+    });
+    return await this.pendingRefresh;
+  }
+
+  async runRefresh(trigger) {
+    if (!this.rpcClient.isConfigured()) {
+      return {
+        status: "skipped",
+        trigger,
+        checked_agents: 0,
+        updated_agents: 0
+      };
+    }
+
+    const localRows = this.db.prepare(`
+      SELECT *
+      FROM agents
+      ORDER BY slug
+    `).all();
+    const remote = await this.rpcClient.call("agent.list", {}, STATUS_SYNC_TIMEOUT_MS);
+    const remoteItems = Array.isArray(remote?.items) ? remote.items : [];
+    const remoteMap = new Map(
+      remoteItems
+        .map((item) => [String(item?.agentId || "").trim(), item])
+        .filter(([slug]) => slug)
+    );
+    const now = new Date().toISOString();
+    const insert = this.db.prepare(`
+      INSERT INTO agents (
+        slug, agent_name, description, docs_content, template_name, status, tags_json,
+        daily_limit, usage_snapshot_json, remote_state_json, created_at, updated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+    const update = this.db.prepare(`
+      UPDATE agents
+      SET agent_name = ?, status = ?, remote_state_json = ?, updated_at = ?
+      WHERE id = ?
+    `);
+
+    let updatedAgents = 0;
+
+    await withSerializedTransaction(this.db, () => {
+      for (const row of localRows) {
+        const remoteItem = remoteMap.get(row.slug);
+        if (!remoteItem) {
+          continue;
+        }
+
+        const nextAgentName = firstText(remoteItem.name, row.slug);
+        const nextStatus = row.status === "disabled"
+          ? "disabled"
+          : (row.status === "overlimit" ? "overlimit" : normalizeAgentStatus(remoteItem?.status));
+        const nextRemoteStateJson = JSON.stringify(remoteItem ?? {});
+        const changed =
+          nextAgentName !== row.agent_name
+          || nextStatus !== row.status
+          || nextRemoteStateJson !== row.remote_state_json;
+
+        if (changed) {
+          update.run(nextAgentName, nextStatus, nextRemoteStateJson, now, row.id);
+          updatedAgents += 1;
+        }
+
+        remoteMap.delete(row.slug);
+      }
+
+      for (const [slug, remoteItem] of remoteMap.entries()) {
+        insert.run(
+          slug,
+          firstText(remoteItem?.name, slug),
+          "",
+          "",
+          firstText(remoteItem?.templateName, remoteItem?.template, "default"),
+          normalizeAgentStatus(remoteItem?.status),
+          "[]",
+          -1,
+          "{}",
+          JSON.stringify(remoteItem ?? {}),
+          now,
+          now
+        );
+        updatedAgents += 1;
+      }
+    });
+
+    if (updatedAgents > 0) {
+      this.auditLogService?.write({
+        userId: null,
+        username: "system",
+        action: "刷新数字员工状态",
+        detail: `触发方式：${trigger}，更新 ${updatedAgents} 个数字员工状态`
+      });
+    }
+
+    return {
+      status: "success",
+      trigger,
+      checked_agents: localRows.length,
+      updated_agents: updatedAgents
+    };
+  }
+}

package/server/src/services/audit-log-service.js

@@ -0,0 +1,39 @@
+export class AuditLogService {
+  constructor({ db }) {
+    this.db = db;
+  }
+
+  write({ userId, username, action, detail }) {
+    this.db.prepare(`
+      INSERT INTO audit_logs (
+        user_id, username, action, detail, created_at
+      ) VALUES (?, ?, ?, ?, ?)
+    `).run(
+      userId || null,
+      username || "",
+      action,
+      detail || "",
+      new Date().toISOString()
+    );
+  }
+
+  list({ page = 1, pageSize = 50 } = {}) {
+    const safePage = Math.max(1, Number(page) || 1);
+    const safePageSize = Math.max(1, Math.min(200, Number(pageSize) || 50));
+    const offset = (safePage - 1) * safePageSize;
+    const total = this.db.prepare("SELECT COUNT(*) AS count FROM audit_logs").get().count;
+    const items = this.db.prepare(`
+      SELECT *
+      FROM audit_logs
+      ORDER BY created_at DESC, id DESC
+      LIMIT ? OFFSET ?
+    `).all(safePageSize, offset);
+
+    return {
+      items,
+      total,
+      page: safePage,
+      pageSize: safePageSize
+    };
+  }
+}

package/server/src/services/auth-service.js

@@ -0,0 +1,153 @@
+import { jsonParse } from "../db/index.js";
+import { badRequest, conflict, forbidden, notFound, unauthorized } from "../utils/errors.js";
+import { hashPassword, newToken, verifyPassword } from "../utils/security.js";
+
+const ADMIN_ROLE = "aios-admin";
+
+export class AuthService {
+  constructor({ db, env }) {
+    this.db = db;
+    this.env = env;
+  }
+
+  mapUser(row) {
+    if (!row) {
+      return null;
+    }
+
+    return {
+      id: row.id,
+      role: row.role,
+      username: row.username,
+      display_name: row.display_name,
+      status: row.status,
+      is_builtin: Boolean(row.is_builtin),
+      must_change_password: Boolean(row.must_change_password),
+      tags: jsonParse(row.tags_json)
+    };
+  }
+
+  getLocalApiUser() {
+    const row = this.db.prepare(`
+      SELECT *
+      FROM users
+      WHERE username = 'aios'
+      ORDER BY id
+      LIMIT 1
+    `).get();
+
+    if (row) {
+      return this.mapUser(row);
+    }
+
+    const fallback = this.db.prepare(`
+      SELECT *
+      FROM users
+      WHERE role = ? AND status = 'active'
+      ORDER BY is_builtin DESC, id ASC
+      LIMIT 1
+    `).get(ADMIN_ROLE);
+
+    return this.mapUser(fallback);
+  }
+
+  createSession(userId) {
+    const now = new Date();
+    const expiresAt = new Date(now.getTime() + this.env.sessionTtlHours * 60 * 60 * 1000);
+    const token = newToken();
+    this.db.prepare(`
+      INSERT INTO sessions (token, user_id, expires_at, created_at)
+      VALUES (?, ?, ?, ?)
+    `).run(token, userId, expiresAt.toISOString(), now.toISOString());
+    return token;
+  }
+
+  cleanupExpiredSessions() {
+    this.db.prepare("DELETE FROM sessions WHERE expires_at < ?").run(new Date().toISOString());
+  }
+
+  login({ username, password }) {
+    if (!username || !password) {
+      throw badRequest("请输入用户名和密码");
+    }
+
+    this.cleanupExpiredSessions();
+    const row = this.db.prepare("SELECT * FROM users WHERE username = ?").get(username);
+    if (!row || row.role !== ADMIN_ROLE || row.status !== "active" || !verifyPassword(password, row.password_hash)) {
+      throw unauthorized("用户名或密码错误");
+    }
+
+    const token = this.createSession(row.id);
+    return {
+      token,
+      user: this.mapUser(row)
+    };
+  }
+
+  getSessionUser(token) {
+    this.cleanupExpiredSessions();
+    const row = this.db.prepare(`
+      SELECT u.*, s.token
+      FROM sessions s
+      JOIN users u ON u.id = s.user_id
+      WHERE s.token = ? AND s.expires_at >= ?
+    `).get(token, new Date().toISOString());
+
+    if (!row) {
+      throw unauthorized();
+    }
+
+    return this.mapUser(row);
+  }
+
+  logout(token) {
+    this.db.prepare("DELETE FROM sessions WHERE token = ?").run(token);
+  }
+
+  assertAdmin(user) {
+    if (!user || user.role !== ADMIN_ROLE) {
+      throw forbidden();
+    }
+  }
+
+  changePassword(userId, { currentPassword, nextPassword }) {
+    const row = this.db.prepare("SELECT * FROM users WHERE id = ?").get(userId);
+    if (!row) {
+      throw notFound("用户不存在");
+    }
+
+    if (row.role !== ADMIN_ROLE) {
+      throw forbidden("仅AIOS管理员可以修改门户密码");
+    }
+
+    if (!verifyPassword(currentPassword, row.password_hash)) {
+      throw badRequest("当前密码不正确");
+    }
+
+    this.db.prepare(`
+      UPDATE users
+      SET password_hash = ?, must_change_password = 0, updated_at = ?
+      WHERE id = ?
+    `).run(hashPassword(nextPassword), new Date().toISOString(), userId);
+
+    return { ok: true };
+  }
+
+  resetPassword(targetUserId, nextPassword) {
+    const row = this.db.prepare("SELECT * FROM users WHERE id = ?").get(targetUserId);
+    if (!row) {
+      throw notFound("用户不存在");
+    }
+    if (row.is_builtin || row.username === "aios") {
+      throw conflict("默认AIOS管理员不支持重置密码");
+    }
+
+    this.db.prepare(`
+      UPDATE users
+      SET password_hash = ?, must_change_password = 1, updated_at = ?
+      WHERE id = ?
+    `).run(hashPassword(nextPassword), new Date().toISOString(), targetUserId);
+
+    return { ok: true };
+  }
+}