exflower-license-server 1.0.0 → 1.0.2

package/README.md

@@ -1,15 +1,19 @@
 # ExFlower License Server
 
-ExFlower 在线授权验证服务。管理 License Key、企业授权、实例追踪。
+ExFlower 在线授权验证服务。管理 License Key、企业授权、实例追踪、模板分发。
 
 ## 快速开始
 
-### 方式一：npm 全局安装
+### 方式一：npm 全局安装（推荐）
 
 ```bash
 # 安装
 npm install -g exflower-license-server
 
+# 查看版本
+exflower-license-server --version
+# 输出: 1.0.2
+
 # 运行
 exflower-license-server
 
@@ -38,6 +42,81 @@ npm install
 npm start
 ```
 
+## 管理员 Token 管理
+
+### 默认 Token
+
+首次启动时，默认管理员 Token 为 **`exflower-admin-2026`**。
+
+**⚠️ 生产环境必须修改默认 Token。**
+
+### 临时修改（当前会话）
+
+启动命令前设置环境变量：
+
+```bash
+# Linux / macOS
+ADMIN_TOKEN=your-secure-token exflower-license-server
+
+# Windows (PowerShell)
+$env:ADMIN_TOKEN="your-secure-token"; exflower-license-server
+```
+
+### 永久修改（推荐）
+
+创建启动脚本 `start.sh`：
+
+```bash
+#!/bin/bash
+export ADMIN_TOKEN="your-secure-token"
+export PORT=4001
+exflower-license-server
+```
+
+或使用 systemd 服务（见下方"生产部署"）。
+
+### 验证 Token 是否生效
+
+启动后查看控制台输出：
+
+```
+╔══════════════════════════════════════════════════╗
+║  ExFlower License Server                         ║
+║  Port: 4001                                       ║
+║  Admin Dashboard: http://localhost:4001/admin  ║
+║  Admin Token: your-secure-token                  ║
+╚══════════════════════════════════════════════════╝
+```
+
+Token 必须与管理后台登录时输入的一致。
+
+### 生产部署（systemd）
+
+创建 `/etc/systemd/system/exflower-license-server.service`：
+
+```ini
+[Unit]
+Description=ExFlower License Server
+After=network.target
+
+[Service]
+Type=simple
+Environment="ADMIN_TOKEN=your-secure-token"
+Environment="PORT=4001"
+ExecStart=/usr/bin/exflower-license-server
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+```
+
+启用并启动：
+
+```bash
+sudo systemctl daemon-reload
+sudo systemctl enable --now exflower-license-server
+```
+
 ## 环境变量
 
 | 变量 | 默认值 | 说明 |
@@ -51,15 +130,44 @@ npm start
 
 启动后访问 `http://localhost:4001/admin`，使用 `ADMIN_TOKEN` 登录。
 
+管理后台功能：
+- **企业管理**：创建/编辑/禁用/删除公司，设置授权配额
+- **实例管理**：查看已激活的实例列表
+- **模板管理**：上传/编辑/删除模板（agent/crew/excard/workflow），支持按公司分发，查看导入统计（次数/公司/实例）
+
 ## API 端点
 
+### 客户端接口
+
 | 端点 | 方法 | 说明 |
 |------|------|------|
 | `/health` | GET | 健康检查 |
 | `/api/license/verify` | POST | 验证 License Key |
 | `/api/license/heartbeat` | POST | 心跳上报 |
+| `/api/templates` | GET | 获取模板列表（需 `x-license-key`） |
+| `/api/templates/:id` | GET | 获取模板详情（需 `x-license-key`） |
+
+### 管理后台接口
+
+| 端点 | 方法 | 说明 |
+|------|------|------|
 | `/api/admin/companies` | GET/POST | 企业管理 |
+| `/api/admin/companies/:id` | PATCH/DELETE | 更新/删除公司 |
 | `/api/admin/instances` | GET | 实例列表 |
+| `/api/admin/instances/:id` | DELETE | 删除实例 |
+| `/api/admin/templates` | GET/POST | 模板列表/创建 |
+| `/api/admin/templates/:id` | PATCH/DELETE | 更新/删除模板 |
+| `/api/admin/imports` | GET | 导入统计（支持 `?template_id=` / `?company_id=` 过滤） |
+
+所有管理接口需在 Header 中携带 `x-admin-token`。
+
+## 模板系统
+
+模板用于向客户端分发预设配置：
+
+- **类型**：`agent` / `crew` / `excard` / `workflow`
+- **范围**：`company_id = NULL` 为全局模板（所有公司可见）；指定 `company_id` 则仅该公司可见
+- **内容**：`content_json`（结构化数据）+ `content_md`（Markdown 说明）
 
 ## 构建 Docker 镜像
 
@@ -67,6 +175,3 @@ npm start
 docker build -t exflower/license-server:latest .
 ```
 
-## License
-
-MIT

package/admin/index.html

@@ -284,6 +284,7 @@
             <th>名称</th>
             <th>公司</th>
             <th>版本</th>
+            <th>导入次数</th>
             <th>创建时间</th>
             <th>操作</th>
           </tr>
@@ -293,9 +294,30 @@
     </div>
   </div>
 
+  <div class="modal-overlay" id="import-detail-modal">
+    <div class="modal">
+      <h3 id="import-detail-title">导入记录</h3>
+      <table>
+        <thead>
+          <tr>
+            <th>公司</th>
+            <th>实例ID</th>
+            <th>模板名称</th>
+            <th>导入时间</th>
+          </tr>
+        </thead>
+        <tbody id="import-detail-body"></tbody>
+      </table>
+      <div class="modal-actions">
+        <button class="btn" onclick="document.getElementById('import-detail-modal').classList.remove('show')">关闭</button>
+      </div>
+    </div>
+  </div>
+
   <div class="modal-overlay" id="template-modal">
     <div class="modal">
       <h3 id="modal-title">上传模板</h3>
+      <input type="hidden" id="tmpl-id">
       <div class="form-group">
         <label>类型</label>
         <select id="tmpl-type">
@@ -313,6 +335,10 @@
         <label>描述</label>
         <input type="text" id="tmpl-desc" placeholder="简短描述">
       </div>
+      <div class="form-group">
+        <label>版本</label>
+        <input type="text" id="tmpl-version" placeholder="1.0">
+      </div>
       <div class="form-group">
         <label>所属公司 (留空 = 全局模板)</label>
         <select id="tmpl-company">
@@ -460,21 +486,39 @@
       loadStats();
     }
 
+    let templateImportCounts = {};
+
     async function loadTemplates() {
-      const res = await api('GET', '/api/admin/templates');
+      const [res, importsRes] = await Promise.all([
+        api('GET', '/api/admin/templates'),
+        api('GET', '/api/admin/imports')
+      ]);
       const tbody = document.getElementById('templates-body');
       tbody.innerHTML = '';
 
+      // Build import count map
+      templateImportCounts = {};
+      for (const imp of importsRes.imports || []) {
+        const tid = imp.template_id;
+        if (tid) {
+          templateImportCounts[tid] = (templateImportCounts[tid] || 0) + 1;
+        }
+      }
+
       for (const t of res.templates || []) {
         const tr = document.createElement('tr');
         const typeBadge = `badge template-type-${t.type}`;
+        const importCount = templateImportCounts[t.id] || 0;
         tr.innerHTML = `
           <td><span class="badge ${typeBadge}">${t.type}</span></td>
           <td><strong>${t.name}</strong><br><span style="color:#86868b;font-size:11px">${t.description || ''}</span></td>
           <td>${t.company_id ? t.company_id.slice(0, 8) + '...' : '全局'}</td>
           <td>${t.version || '1.0'}</td>
+          <td>${importCount > 0 ? `<strong style="color:#0071e3">${importCount}</strong>` : '0'}</td>
           <td>${t.created_at ? t.created_at.split('T')[0] : '-'}</td>
           <td>
+            <button class="btn btn-small btn-primary" onclick="editTemplate('${t.id}')">编辑</button>
+            <button class="btn btn-small" style="background:#34c759;color:#fff;" onclick="showImportDetails('${t.id}', '${t.name.replace(/'/g, "\\'")}')">查看导入</button>
             <button class="btn btn-small btn-danger" onclick="deleteTemplate('${t.id}')">删除</button>
           </td>
         `;
@@ -496,23 +540,56 @@
 
     function openTemplateModal() {
       document.getElementById('modal-title').textContent = '上传模板';
+      document.getElementById('tmpl-id').value = '';
       document.getElementById('tmpl-type').value = 'agent';
       document.getElementById('tmpl-name').value = '';
       document.getElementById('tmpl-desc').value = '';
+      document.getElementById('tmpl-version').value = '';
       document.getElementById('tmpl-json').value = '';
       document.getElementById('tmpl-md').value = '';
       populateCompanySelect();
       document.getElementById('template-modal').classList.add('show');
     }
 
+    async function editTemplate(id) {
+      const res = await api('GET', `/api/admin/templates?type=`);
+      const t = (res.templates || []).find(x => x.id === id);
+      if (!t) return toast('模板未找到');
+
+      document.getElementById('modal-title').textContent = '编辑模板';
+      document.getElementById('tmpl-id').value = t.id;
+      document.getElementById('tmpl-type').value = t.type;
+      document.getElementById('tmpl-name').value = t.name || '';
+      document.getElementById('tmpl-desc').value = t.description || '';
+      document.getElementById('tmpl-version').value = t.version || '';
+      await populateCompanySelect();
+      document.getElementById('tmpl-company').value = t.company_id || '';
+
+      let jsonStr = '';
+      if (t.content_json) {
+        try {
+          const parsed = typeof t.content_json === 'string' ? JSON.parse(t.content_json) : t.content_json;
+          jsonStr = JSON.stringify(parsed, null, 2);
+        } catch {
+          jsonStr = String(t.content_json);
+        }
+      }
+      document.getElementById('tmpl-json').value = jsonStr;
+      document.getElementById('tmpl-md').value = t.content_md || '';
+      document.getElementById('template-modal').classList.add('show');
+    }
+
     function closeTemplateModal() {
       document.getElementById('template-modal').classList.remove('show');
+      document.getElementById('tmpl-id').value = '';
     }
 
     async function saveTemplate() {
+      const id = document.getElementById('tmpl-id').value;
       const type = document.getElementById('tmpl-type').value;
       const name = document.getElementById('tmpl-name').value.trim();
       const desc = document.getElementById('tmpl-desc').value.trim();
+      const version = document.getElementById('tmpl-version').value.trim() || undefined;
       const companyId = document.getElementById('tmpl-company').value || undefined;
       const jsonRaw = document.getElementById('tmpl-json').value.trim();
       const md = document.getElementById('tmpl-md').value.trim() || undefined;
@@ -527,17 +604,31 @@
         return toast('JSON 格式错误: ' + e.message);
       }
 
-      await api('POST', '/api/admin/templates', {
-        company_id: companyId,
-        type,
-        name,
-        description: desc,
-        content_json: contentJson,
-        content_md: md,
-      });
-
-      closeTemplateModal();
-      toast('模板上传成功');
+      if (id) {
+        // Edit existing
+        const payload = {
+          type, name, description: desc, content_json: contentJson,
+        };
+        if (version) payload.version = version;
+        if (companyId !== undefined) payload.company_id = companyId;
+        if (md !== undefined) payload.content_md = md;
+        await api('PATCH', `/api/admin/templates/${id}`, payload);
+        closeTemplateModal();
+        toast('模板更新成功');
+      } else {
+        // Create new
+        await api('POST', '/api/admin/templates', {
+          company_id: companyId,
+          type,
+          name,
+          description: desc,
+          version,
+          content_json: contentJson,
+          content_md: md,
+        });
+        closeTemplateModal();
+        toast('模板上传成功');
+      }
       loadTemplates();
     }
 
@@ -548,6 +639,33 @@
       loadTemplates();
     }
 
+    async function showImportDetails(templateId, templateName) {
+      const res = await api('GET', `/api/admin/imports?template_id=${encodeURIComponent(templateId)}`);
+      const tbody = document.getElementById('import-detail-body');
+      tbody.innerHTML = '';
+
+      const imports = res.imports || [];
+      if (imports.length === 0) {
+        const tr = document.createElement('tr');
+        tr.innerHTML = `<td colspan="4" style="text-align:center;color:#86868b;padding:20px;">暂无导入记录</td>`;
+        tbody.appendChild(tr);
+      } else {
+        for (const imp of imports) {
+          const tr = document.createElement('tr');
+          tr.innerHTML = `
+            <td>${imp.company_name || '-'}</td>
+            <td><code>${imp.instance_id || '-'}</code></td>
+            <td>${imp.template_name || '-'}</td>
+            <td>${imp.imported_at ? imp.imported_at.split('T').join(' ') : '-'}</td>
+          `;
+          tbody.appendChild(tr);
+        }
+      }
+
+      document.getElementById('import-detail-title').textContent = `「${templateName}」导入记录 (${imports.length}次)`;
+      document.getElementById('import-detail-modal').classList.add('show');
+    }
+
     function showTab(name) {
       document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
       event.target.classList.add('active');

package/db.js

@@ -80,6 +80,24 @@ db.exec(`
   CREATE INDEX IF NOT EXISTS idx_templates_type ON templates(type)
 `);
 
+db.exec(`
+  CREATE TABLE IF NOT EXISTS template_imports (
+    id TEXT PRIMARY KEY,
+    template_id TEXT NOT NULL,
+    company_id TEXT NOT NULL,
+    instance_id TEXT,
+    template_name TEXT,
+    template_type TEXT,
+    imported_at DATETIME DEFAULT CURRENT_TIMESTAMP
+  )
+`);
+db.exec(`
+  CREATE INDEX IF NOT EXISTS idx_imports_template ON template_imports(template_id)
+`);
+db.exec(`
+  CREATE INDEX IF NOT EXISTS idx_imports_company ON template_imports(company_id)
+`);
+
 // Seed demo data if empty
 const count = db.prepare('SELECT COUNT(*) as c FROM companies').get().c;
 if (count === 0) {

package/index.js

@@ -14,8 +14,17 @@
 const express = require('express');
 const cors = require('cors');
 const path = require('path');
+const fs = require('fs');
 const { setupRoutes } = require('./routes');
 
+const args = process.argv.slice(2);
+if (args.includes('--version') || args.includes('-v')) {
+  const pkgPath = path.join(__dirname, 'package.json');
+  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+  console.log(pkg.version);
+  process.exit(0);
+}
+
 const app = express();
 const PORT = process.env.PORT || 4001;
 const ADMIN_TOKEN = process.env.ADMIN_TOKEN || 'exflower-admin-2026';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "exflower-license-server",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "ExFlower License Server - 在线授权验证服务",
   "main": "index.js",
   "bin": {
@@ -33,6 +33,5 @@
     "exflower",
     "authorization"
   ],
-  "author": "ExFlower",
-  "license": "MIT"
+  "author": "ExFlower"
 }

package/routes.js

@@ -254,6 +254,29 @@ function setupRoutes(app) {
     res.json({ success: true, templates });
   });
 
+  // Import summary (must come before /:id to avoid matching 'import-summary' as an id)
+  app.get('/api/templates/import-summary', (req, res) => {
+    const licenseKey = req.headers['x-license-key'];
+    if (!licenseKey) {
+      return res.status(401).json({ success: false, message: 'Missing x-license-key header' });
+    }
+    const company = queryGet('SELECT id FROM companies WHERE license_key = ?', [licenseKey]);
+    if (!company) {
+      return res.status(404).json({ success: false, message: 'Invalid license key' });
+    }
+
+    const rows = queryAll(
+      `SELECT template_id, COUNT(*) as count, MIN(imported_at) as first_import, MAX(imported_at) as last_import
+       FROM template_imports WHERE company_id = ? GROUP BY template_id`,
+      [company.id]
+    );
+    const map = {};
+    for (const r of rows) {
+      map[r.template_id] = { count: r.count, first_import: r.first_import, last_import: r.last_import };
+    }
+    res.json({ success: true, imports: map });
+  });
+
   // Get a single template (full content)
   app.get('/api/templates/:id', (req, res) => {
     const licenseKey = req.headers['x-license-key'];
@@ -363,7 +386,7 @@ function setupRoutes(app) {
       return res.status(400).json({ success: false, message: 'No fields to update' });
     }
 
-    updates.push('updated_at = datetime("now")');
+    updates.push("updated_at = datetime('now')");
     queryRun(`UPDATE templates SET ${updates.join(', ')} WHERE id = ?`, [...params, req.params.id]);
 
     res.json({ success: true });
@@ -374,6 +397,69 @@ function setupRoutes(app) {
     res.json({ success: true });
   });
 
+  // ── Template Import Log (client-facing) ──
+  app.post('/api/templates/:id/import-log', (req, res) => {
+    const licenseKey = req.headers['x-license-key'];
+    if (!licenseKey) {
+      return res.status(401).json({ success: false, message: 'Missing x-license-key header' });
+    }
+    const company = queryGet('SELECT id FROM companies WHERE license_key = ?', [licenseKey]);
+    if (!company) {
+      return res.status(404).json({ success: false, message: 'Invalid license key' });
+    }
+
+    const { instance_id, template_name, template_type } = req.body;
+    const id = generateId();
+    queryRun(
+      `INSERT INTO template_imports (id, template_id, company_id, instance_id, template_name, template_type)
+       VALUES (?, ?, ?, ?, ?, ?)`,
+      [id, req.params.id, company.id, instance_id || null, template_name || '', template_type || '']
+    );
+    res.json({ success: true });
+  });
+
+  app.get('/api/templates/:id/import-status', (req, res) => {
+    const licenseKey = req.headers['x-license-key'];
+    if (!licenseKey) {
+      return res.status(401).json({ success: false, message: 'Missing x-license-key header' });
+    }
+    const company = queryGet('SELECT id FROM companies WHERE license_key = ?', [licenseKey]);
+    if (!company) {
+      return res.status(404).json({ success: false, message: 'Invalid license key' });
+    }
+
+    const stats = queryGet(
+      `SELECT COUNT(*) as count, MIN(imported_at) as first_import, MAX(imported_at) as last_import
+       FROM template_imports WHERE template_id = ? AND company_id = ?`,
+      [req.params.id, company.id]
+    );
+    res.json({ success: true, imported: stats.count > 0, count: stats.count, first_import: stats.first_import, last_import: stats.last_import });
+  });
+
+  // ── Admin: Import Stats ──
+  app.get('/api/admin/imports', requireAdmin, (req, res) => {
+    const { template_id, company_id } = req.query;
+    let sql = `
+      SELECT i.*, c.name as company_name, t.name as template_name
+      FROM template_imports i
+      JOIN companies c ON i.company_id = c.id
+      LEFT JOIN templates t ON i.template_id = t.id
+      WHERE 1=1
+    `;
+    const params = [];
+    if (template_id) { sql += ' AND i.template_id = ?'; params.push(template_id); }
+    if (company_id) { sql += ' AND i.company_id = ?'; params.push(company_id); }
+    sql += ' ORDER BY i.imported_at DESC LIMIT 500';
+
+    const imports = queryAll(sql, params);
+    // Aggregate stats
+    const stats = queryGet(`
+      SELECT COUNT(*) as total_imports, COUNT(DISTINCT template_id) as unique_templates, COUNT(DISTINCT company_id) as unique_companies
+      FROM template_imports
+    `);
+    res.json({ success: true, imports, stats });
+  });
+
   // ── Health ──
   app.get('/health', (req, res) => {
     const stats = queryGet(`