koishi-plugin-new-auth 0.1.0 → 0.3.1

package/README.md

@@ -10,7 +10,8 @@ It implements the first usable version described in `newauth.md`:
 - Koishi's legacy `authority` value is recorded as a suggestion, not used as the final grant;
 - policies are evaluated by `scope + role + command`;
 - guild owner/admin/member roles are separated from Bot administrator;
-- custom roles and role members can be managed from Koishi commands.
+- custom roles and role members can be managed from Koishi commands;
+- Koishi Console WebUI is available when `@koishijs/plugin-console` is installed.
 
 ## Configuration
 
@@ -67,3 +68,23 @@ guest
 ```
 
 Custom roles do not inherit from other roles. To give a custom role access to a command, add an explicit policy with `newauth.allow`.
+
+## WebUI
+
+Install Koishi Console and open the `⌗ 新权限` page.
+
+The page provides:
+
+- role-first command policy editing;
+- global and guild scope switching;
+- pending command review;
+- legacy `authority` suggestions;
+- AI-style automatic assignment for pending commands;
+- command status and guild override toggles;
+- custom role creation and explicit member management;
+- copying command policies from one role to another;
+- batch assigning all commands from one plugin.
+
+The automatic assignment advisor is conservative: dangerous instance-level commands are kept for `bot-admin`, group moderation commands go to `guild-admin` and `guild-owner`, normal user commands go to `guild-member` and above, and unclear commands fall back to the legacy authority suggestion.
+
+Custom roles do not inherit from built-in roles. Use the WebUI copy action, or `newauth.role.copy`, to clone the current explicit policies from another role.

package/dist/index.js

@@ -0,0 +1 @@
+import{defineComponent as ve,ref as i,computed as v,watch as H,openBlock as s,createElementBlock as u,createElementVNode as l,toDisplayString as o,withDirectives as c,Fragment as f,renderList as y,vModelSelect as _,normalizeClass as w,createCommentVNode as B,withModifiers as J,vModelText as x,vModelCheckbox as ce,createTextVNode as q}from"vue";import{store as Q,send as g}from"@koishijs/client";const pe={class:"new-auth-page"},ge={class:"topbar"},be={class:"top-actions"},me=["value"],fe=["disabled"],ye=["disabled"],ke={class:"tabs"},he={key:0,class:"error"},_e={key:1,class:"role-layout"},we={class:"role-list"},Ce=["onClick"],Ie=["disabled"],$e={key:0,class:"detail"},Ve={class:"detail-head"},Se={class:"detail-tools"},Ue=["value"],Pe=["disabled"],Re={class:"check"},xe={class:"member-panel"},Ae={class:"member-list"},Me=["disabled","onClick"],Oe=["value"],Te=["disabled"],Ge={class:"filters"},Ne={class:"command-list"},Be={class:"command-main"},De={class:"state-buttons"},Ee=["onClick"],Le=["onClick"],Fe=["onClick"],qe={key:2,class:"pending-grid"},ze={class:"row-actions"},Ke=["disabled","onClick"],je=["disabled","onClick"],He={key:0,class:"empty"},Je={key:3,class:"commands-table"},Qe={class:"filters"},We={class:"plugin-bulk"},Xe=["value"],Ye=["disabled"],Ze=["disabled"],el=["disabled"],ll=["disabled"],tl={class:"command-main"},nl={class:"command-controls"},ol={class:"check"},sl=["checked","onChange"],ul=["value","onChange"],al=ve({__name:"new-auth",setup(S){const b=i("roles"),a=i("global"),d=i(""),k=i(""),C=i("all"),D=i(false),r=i(false),A=i(""),I=i(""),U=i(""),E=i("guild"),P=i(""),M=i("global"),O=i(""),h=i(""),$=v(()=>Q.newauth||{roles:[],commands:[],policies:[],members:[],scopes:[{id:"global",name:"全局默认"}],pendingCount:0}),R=v(()=>$.value.roles),T=v(()=>$.value.commands),W=v(()=>$.value.policies),X=v(()=>$.value.members),Y=v(()=>{var n;return(n=$.value.scopes)!=null&&n.length?$.value.scopes:[{id:"global",name:"全局默认"}]}),G=v(()=>T.value.filter(n=>n.status==="pending")),V=v(()=>R.value.find(n=>n.id===d.value)),z=v(()=>X.value.filter(n=>n.roleId===d.value)),Z=v(()=>R.value.filter(n=>n.id!==d.value)),ee=v(()=>[...new Set(T.value.map(n=>n.plugin))].sort());H(R,n=>{!d.value&&n.length&&(d.value=n[0].id)},{immediate:true}),H(a,n=>{M.value=n==="global"?"global":n});const K=v(()=>{const n=k.value.toLowerCase();return T.value.filter(t=>C.value!=="all"&&t.status!==C.value?false:n?[t.id,t.name,t.commandPath,t.plugin,t.description].some(e=>e==null?void 0:e.toLowerCase().includes(n)):true)}),le=v(()=>V.value?K.value.filter(n=>{var t,e;return D.value||((t=V.value)==null?void 0:t.id)==="bot-admin"||((e=V.value)==null?void 0:e.scopeType)==="global"?true:n.allowGuildOverride}):[]);function L(n){const t=W.value.find(e=>e.scope===a.value&&e.roleId===d.value&&e.commandId===n);return(t==null?void 0:t.state)||"inherit"}async function p(n){r.value=true,A.value="";try{await n}catch(t){A.value=t instanceof Error?t.message:String(t)}finally{r.value=false}}async function te(){return p((async()=>{const n=await g("newauth/getData");Q.newauth=n})())}function F(n,t){return p(g("newauth/setPolicy",{scope:a.value,roleId:d.value,commandId:n,state:t}))}function j(n,t){return p(g("newauth/applySuggestion",{commandId:n,scope:a.value,mode:t}))}function ne(){return p(g("newauth/autoAssignPending",{scope:a.value,mode:"advisor"}))}function oe(n,t){const e=t.target;return p(g("newauth/setGuildOverride",{commandId:n.id,allowGuildOverride:e.checked}))}function se(n,t){const e=t.target;return p(g("newauth/setCommandStatus",{commandId:n.id,status:e.value}))}function ue(){return p((async()=>{await g("newauth/createRole",{id:I.value,name:U.value,scopeType:E.value}),d.value=I.value,I.value="",U.value=""})())}function ae(){return p((async()=>{await g("newauth/addMember",{roleId:d.value,uid:P.value,scope:M.value}),P.value=""})())}function ie(n){return p(g("newauth/removeMember",{roleId:n.roleId,uid:`${n.platform}:${n.userId}`,scope:n.scope}))}function de(){return p(g("newauth/copyRolePolicies",{sourceRoleId:O.value,targetRoleId:d.value,scope:a.value}))}function re(n){return`${n.roleId}:${n.platform}:${n.userId}:${n.scope}`}function N(n){return p(g("newauth/assignPluginCommands",{plugin:h.value,scope:a.value,target:n}))}return(n,t)=>(s(),u("main",pe,[l("header",ge,[l("div",null,[t[20]||(t[20]=l("h1",null,"新权限",-1)),l("p",null,o(R.value.length)+" 个角色 / "+o(T.value.length)+" 个指令 / "+o(G.value.length)+" 个待配置",1)]),l("div",be,[c(l("select",{"onUpdate:modelValue":t[0]||(t[0]=e=>a.value=e),class:"scope-select"},[(s(true),u(f,null,y(Y.value,e=>(s(),u("option",{key:e.id,value:e.id},o(e.name),9,me))),128))],512),[[_,a.value]]),l("button",{class:"primary",disabled:r.value||!G.value.length,onClick:ne}," AI 自动分配待配置 ",8,fe),l("button",{disabled:r.value,onClick:te},"刷新",8,ye)])]),l("nav",ke,[l("button",{class:w({active:b.value==="roles"}),onClick:t[1]||(t[1]=e=>b.value="roles")},"角色",2),l("button",{class:w({active:b.value==="pending"}),onClick:t[2]||(t[2]=e=>b.value="pending")},"待配置",2),l("button",{class:w({active:b.value==="commands"}),onClick:t[3]||(t[3]=e=>b.value="commands")},"指令",2)]),A.value?(s(),u("p",he,o(A.value),1)):B("v-if",true),b.value==="roles"?(s(),u("section",_e,[l("aside",we,[(s(true),u(f,null,y(R.value,e=>(s(),u("button",{key:e.id,class:w(["role-item",{active:e.id===d.value}]),onClick:m=>d.value=e.id},[l("span",null,[l("strong",null,o(e.name),1),l("small",null,o(e.builtin?"内置角色":"自定义角色")+" / "+o(e.scopeType),1)]),l("em",null,o(e.allowCount),1)],10,Ce))),128)),l("form",{class:"role-create",onSubmit:J(ue,["prevent"])},[c(l("input",{"onUpdate:modelValue":t[4]||(t[4]=e=>I.value=e),placeholder:"custom:music-admin"},null,512),[[x,I.value,void 0,{trim:true}]]),c(l("input",{"onUpdate:modelValue":t[5]||(t[5]=e=>U.value=e),placeholder:"角色名称"},null,512),[[x,U.value,void 0,{trim:true}]]),c(l("select",{"onUpdate:modelValue":t[6]||(t[6]=e=>E.value=e)},[...t[21]||(t[21]=[l("option",{value:"guild"},"群内角色",-1),l("option",{value:"global"},"全局角色",-1)])],512),[[_,E.value]]),l("button",{class:"primary",disabled:r.value||!I.value||!U.value},"创建角色",8,Ie)],32)]),V.value?(s(),u("section",$e,[l("div",Ve,[l("div",null,[l("h2",null,o(V.value.name),1),l("p",null,o(V.value.id),1)]),l("div",Se,[c(l("select",{"onUpdate:modelValue":t[7]||(t[7]=e=>O.value=e)},[t[22]||(t[22]=l("option",{disabled:"",value:""},"复制来源",-1)),(s(true),u(f,null,y(Z.value,e=>(s(),u("option",{key:e.id,value:e.id},o(e.name),9,Ue))),128))],512),[[_,O.value]]),l("button",{disabled:r.value||!O.value,onClick:de},"复制权限",8,Pe),l("label",Re,[c(l("input",{type:"checkbox","onUpdate:modelValue":t[8]||(t[8]=e=>D.value=e)},null,512),[[ce,D.value]]),t[23]||(t[23]=q(" 审计模式 ",-1))])])]),l("section",xe,[l("div",null,[t[24]||(t[24]=l("strong",null,"成员",-1)),l("small",null,o(z.value.length)+" 个显式成员",1)]),l("div",Ae,[(s(true),u(f,null,y(z.value,e=>(s(),u("span",{key:re(e),class:"member-chip"},[q(o(e.platform)+":"+o(e.userId)+" / "+o(e.scope)+" ",1),l("button",{disabled:r.value,onClick:m=>ie(e)},"移除",8,Me)]))),128))]),l("form",{class:"member-add",onSubmit:J(ae,["prevent"])},[c(l("input",{"onUpdate:modelValue":t[9]||(t[9]=e=>P.value=e),placeholder:"platform:userId"},null,512),[[x,P.value,void 0,{trim:true}]]),c(l("select",{"onUpdate:modelValue":t[10]||(t[10]=e=>M.value=e)},[t[25]||(t[25]=l("option",{value:"global"},"global",-1)),a.value!=="global"?(s(),u("option",{key:0,value:a.value},o(a.value),9,Oe)):B("v-if",true)],512),[[_,M.value]]),l("button",{class:"primary",disabled:r.value||!P.value},"添加成员",8,Te)],32)]),l("div",Ge,[c(l("input",{"onUpdate:modelValue":t[11]||(t[11]=e=>k.value=e),placeholder:"搜索指令、插件、描述"},null,512),[[x,k.value,void 0,{trim:true}]]),c(l("select",{"onUpdate:modelValue":t[12]||(t[12]=e=>C.value=e)},[...t[26]||(t[26]=[l("option",{value:"all"},"全部状态",-1),l("option",{value:"pending"},"待配置",-1),l("option",{value:"configured"},"已配置",-1),l("option",{value:"disabled"},"已禁用",-1)])],512),[[_,C.value]])]),l("div",Ne,[(s(true),u(f,null,y(le.value,e=>(s(),u("article",{key:e.id,class:"command-row"},[l("div",Be,[l("strong",null,o(e.name),1),l("span",null,o(e.commandPath),1),l("small",null,o(e.plugin)+" / legacy "+o(e.legacyAuthority)+" / "+o(e.suggestion.label),1)]),l("div",De,[l("button",{class:w({active:L(e.id)==="inherit"}),onClick:m=>F(e.id,"inherit")}," 继承 ",10,Ee),l("button",{class:w({active:L(e.id)==="allow"}),onClick:m=>F(e.id,"allow")}," 开 ",10,Le),l("button",{class:w({active:L(e.id)==="deny"}),onClick:m=>F(e.id,"deny")}," 关 ",10,Fe)])]))),128))])])):B("v-if",true)])):b.value==="pending"?(s(),u("section",qe,[(s(true),u(f,null,y(G.value,e=>(s(),u("article",{key:e.id,class:"pending-item"},[l("div",null,[l("strong",null,o(e.name),1),l("span",null,o(e.commandPath),1),l("small",null,o(e.plugin)+" / legacy "+o(e.legacyAuthority),1)]),l("dl",null,[t[27]||(t[27]=l("dt",null,"旧建议",-1)),l("dd",null,o(e.suggestion.label),1),t[28]||(t[28]=l("dt",null,"AI 建议",-1)),l("dd",null,o(e.autoAssign.label)+"："+o(e.autoAssign.reason),1)]),l("div",ze,[l("button",{disabled:r.value,onClick:m=>j(e.id,"legacy")},"采用旧建议",8,Ke),l("button",{class:"primary",disabled:r.value,onClick:m=>j(e.id,"advisor")},"采用 AI 建议",8,je)])]))),128)),G.value.length?B("v-if",true):(s(),u("p",He,"没有待配置指令。"))])):(s(),u("section",Je,[l("div",Qe,[c(l("input",{"onUpdate:modelValue":t[13]||(t[13]=e=>k.value=e),placeholder:"搜索指令、插件、描述"},null,512),[[x,k.value,void 0,{trim:true}]]),c(l("select",{"onUpdate:modelValue":t[14]||(t[14]=e=>C.value=e)},[...t[29]||(t[29]=[l("option",{value:"all"},"全部状态",-1),l("option",{value:"pending"},"待配置",-1),l("option",{value:"configured"},"已配置",-1),l("option",{value:"disabled"},"已禁用",-1)])],512),[[_,C.value]])]),l("div",We,[c(l("select",{"onUpdate:modelValue":t[15]||(t[15]=e=>h.value=e)},[t[30]||(t[30]=l("option",{disabled:"",value:""},"选择插件",-1)),(s(true),u(f,null,y(ee.value,e=>(s(),u("option",{key:e,value:e},o(e),9,Xe))),128))],512),[[_,h.value]]),l("button",{disabled:r.value||!h.value,onClick:t[16]||(t[16]=e=>N("legacy"))},"采用插件建议",8,Ye),l("button",{disabled:r.value||!h.value,onClick:t[17]||(t[17]=e=>N("guild-member"))},"给群成员",8,Ze),l("button",{disabled:r.value||!h.value,onClick:t[18]||(t[18]=e=>N("guild-admin"))},"给群管理员",8,el),l("button",{disabled:r.value||!h.value,onClick:t[19]||(t[19]=e=>N("bot-admin"))},"仅 Bot 管理员",8,ll)]),(s(true),u(f,null,y(K.value,e=>(s(),u("article",{key:e.id,class:"command-row"},[l("div",tl,[l("strong",null,o(e.name),1),l("span",null,o(e.id),1),l("small",null,o(e.plugin)+" / "+o(e.commandPath)+" / "+o(e.autoAssign.label),1)]),l("div",nl,[l("label",ol,[l("input",{type:"checkbox",checked:e.allowGuildOverride,onChange:m=>oe(e,m)},null,40,sl),t[31]||(t[31]=q(" 群内自治 ",-1))]),l("select",{value:e.status,onChange:m=>se(e,m)},[...t[32]||(t[32]=[l("option",{value:"pending"},"待配置",-1),l("option",{value:"configured"},"已配置",-1),l("option",{value:"disabled"},"已禁用",-1)])],40,ul)])]))),128))]))]))}}),il=(S,b)=>{const a=S.__vccOpts||S;for(const[d,k]of b)a[d]=k;return a},dl=il(al,[["__scopeId","data-v-755ad7c8"]]),cl=S=>{S.page({name:"新权限",path:"/new-auth",icon:"⌗",fields:["newauth"],authority:4,component:dl})};export{cl as default};

package/dist/style.css

@@ -0,0 +1 @@
+.new-auth-page[data-v-755ad7c8]{min-height:100vh;background:#f6f7f4;color:#1f2523;padding:20px}.topbar[data-v-755ad7c8],.detail-head[data-v-755ad7c8],.filters[data-v-755ad7c8],.row-actions[data-v-755ad7c8],.command-controls[data-v-755ad7c8],.top-actions[data-v-755ad7c8],.detail-tools[data-v-755ad7c8],.member-add[data-v-755ad7c8],.plugin-bulk[data-v-755ad7c8]{display:flex;align-items:center;gap:12px}.topbar[data-v-755ad7c8]{justify-content:space-between;border-bottom:1px solid #d9ded6;padding-bottom:16px}h1[data-v-755ad7c8],h2[data-v-755ad7c8],p[data-v-755ad7c8]{margin:0}h1[data-v-755ad7c8]{font-size:26px;line-height:1.2}h2[data-v-755ad7c8]{font-size:20px}p[data-v-755ad7c8],small[data-v-755ad7c8],span[data-v-755ad7c8],dd[data-v-755ad7c8],dt[data-v-755ad7c8]{color:#63706a}button[data-v-755ad7c8],select[data-v-755ad7c8],input[data-v-755ad7c8]{border:1px solid #c7cec8;border-radius:6px;background:#fff;color:#1f2523;min-height:34px;padding:0 10px;font:inherit}button[data-v-755ad7c8]{cursor:pointer}button[data-v-755ad7c8]:disabled{cursor:not-allowed;opacity:.55}.primary[data-v-755ad7c8]{background:#285e54;border-color:#285e54;color:#fff}.tabs[data-v-755ad7c8]{display:flex;gap:6px;margin:16px 0}.tabs button.active[data-v-755ad7c8],.state-buttons button.active[data-v-755ad7c8]{background:#25312d;border-color:#25312d;color:#fff}.role-layout[data-v-755ad7c8]{display:grid;grid-template-columns:minmax(220px,280px) 1fr;gap:16px}.role-list[data-v-755ad7c8]{display:grid;gap:8px;align-content:start}.role-create[data-v-755ad7c8]{display:grid;gap:8px;border:1px solid #d9ded6;border-radius:8px;background:#fff;padding:10px}.role-item[data-v-755ad7c8]{display:flex;justify-content:space-between;align-items:center;min-height:58px;text-align:left}.role-item span[data-v-755ad7c8],.command-main[data-v-755ad7c8]{display:grid;gap:3px;min-width:0}.role-item.active[data-v-755ad7c8]{border-color:#285e54;box-shadow:inset 3px 0 #285e54}.role-item em[data-v-755ad7c8]{font-style:normal;color:#8b4a2f}.detail[data-v-755ad7c8]{min-width:0}.detail-head[data-v-755ad7c8]{justify-content:space-between;margin-bottom:12px}.detail-tools[data-v-755ad7c8]{flex-wrap:wrap;justify-content:flex-end}.member-panel[data-v-755ad7c8]{display:grid;gap:10px;border:1px solid #d9ded6;border-radius:8px;background:#fff;padding:12px;margin-bottom:12px}.member-panel>div[data-v-755ad7c8]:first-child{display:flex;justify-content:space-between;gap:12px}.member-list[data-v-755ad7c8]{display:flex;flex-wrap:wrap;gap:6px;min-height:28px}.member-chip[data-v-755ad7c8]{display:inline-flex;align-items:center;gap:6px;border:1px solid #c7cec8;border-radius:999px;background:#f6f7f4;padding:3px 4px 3px 10px}.member-chip button[data-v-755ad7c8]{min-height:24px;padding:0 8px;border-radius:999px}.filters[data-v-755ad7c8]{margin-bottom:12px}.plugin-bulk[data-v-755ad7c8]{flex-wrap:wrap;border:1px solid #d9ded6;border-radius:8px;background:#fff;padding:10px;margin-bottom:12px}.filters input[data-v-755ad7c8]{flex:1;min-width:180px}.command-list[data-v-755ad7c8],.pending-grid[data-v-755ad7c8],.commands-table[data-v-755ad7c8]{display:grid;gap:8px}.command-row[data-v-755ad7c8],.pending-item[data-v-755ad7c8]{background:#fff;border:1px solid #d9ded6;border-radius:8px;padding:12px}.command-row[data-v-755ad7c8]{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:12px;align-items:center}.command-main strong[data-v-755ad7c8],.command-main span[data-v-755ad7c8],.command-main small[data-v-755ad7c8]{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.state-buttons[data-v-755ad7c8]{display:grid;grid-template-columns:repeat(3,54px);gap:6px}.pending-grid[data-v-755ad7c8]{grid-template-columns:repeat(auto-fill,minmax(300px,1fr))}.pending-item[data-v-755ad7c8]{display:grid;gap:10px}dl[data-v-755ad7c8]{display:grid;grid-template-columns:58px 1fr;gap:4px 8px;margin:0}dd[data-v-755ad7c8]{margin:0}.check[data-v-755ad7c8]{display:inline-flex;align-items:center;gap:6px;white-space:nowrap}.check input[data-v-755ad7c8]{min-height:0}.error[data-v-755ad7c8]{border:1px solid #d9a09a;background:#fff1ef;color:#8a2d22;border-radius:6px;padding:10px;margin-bottom:12px}.empty[data-v-755ad7c8]{padding:24px 0}@media (max-width: 760px){.new-auth-page[data-v-755ad7c8]{padding:12px}.topbar[data-v-755ad7c8],.detail-head[data-v-755ad7c8],.command-row[data-v-755ad7c8]{grid-template-columns:1fr;display:grid}.top-actions[data-v-755ad7c8],.filters[data-v-755ad7c8],.command-controls[data-v-755ad7c8],.detail-tools[data-v-755ad7c8],.member-add[data-v-755ad7c8],.plugin-bulk[data-v-755ad7c8]{flex-wrap:wrap}.role-layout[data-v-755ad7c8]{grid-template-columns:1fr}.state-buttons[data-v-755ad7c8]{grid-template-columns:repeat(3,minmax(0,1fr))}}

package/lib/index.d.ts

@@ -1,11 +1,16 @@
 import { Command, Context, Schema, Session } from 'koishi';
 import type { Argv } from 'koishi';
 export declare const name = "new-auth";
-export declare const inject: string[];
+export declare const inject: {
+    required: string[];
+    optional: string[];
+};
 type RoleType = 'builtin' | 'custom';
 type ScopeType = 'global' | 'guild';
 type CommandStatus = 'pending' | 'configured' | 'disabled';
 type PolicyState = 'inherit' | 'allow' | 'deny';
+type AutoAssignKind = 'public' | 'moderation' | 'owner' | 'admin' | 'legacy';
+type PluginAssignTarget = 'legacy' | 'bot-admin' | 'guild-owner' | 'guild-admin' | 'guild-member';
 export interface NewAuthCommandRecord {
     id: string;
     name: string;
@@ -53,6 +58,121 @@ declare module 'koishi' {
         newauth: NewAuthService;
     }
 }
+declare module '@koishijs/plugin-console' {
+    namespace Console {
+        interface Services {
+            newauth: NewAuthConsoleService;
+        }
+    }
+    interface Events {
+        'newauth/getData'(): Promise<NewAuthConsoleData>;
+        'newauth/setPolicy'(payload: SetPolicyPayload): Promise<{
+            success: true;
+        }>;
+        'newauth/setCommandStatus'(payload: SetCommandStatusPayload): Promise<{
+            success: true;
+        }>;
+        'newauth/setGuildOverride'(payload: SetGuildOverridePayload): Promise<{
+            success: true;
+        }>;
+        'newauth/applySuggestion'(payload: ApplySuggestionPayload): Promise<{
+            success: true;
+        }>;
+        'newauth/autoAssignPending'(payload?: AutoAssignPayload): Promise<{
+            success: true;
+            count: number;
+        }>;
+        'newauth/createRole'(payload: CreateRolePayload): Promise<{
+            success: true;
+        }>;
+        'newauth/addMember'(payload: MemberPayload): Promise<{
+            success: true;
+        }>;
+        'newauth/removeMember'(payload: MemberPayload): Promise<{
+            success: true;
+        }>;
+        'newauth/copyRolePolicies'(payload: CopyRolePoliciesPayload): Promise<{
+            success: true;
+            count: number;
+        }>;
+        'newauth/assignPluginCommands'(payload: AssignPluginCommandsPayload): Promise<{
+            success: true;
+            count: number;
+        }>;
+    }
+}
+export interface NewAuthConsoleData {
+    roles: RoleView[];
+    commands: CommandView[];
+    policies: NewAuthPolicyRecord[];
+    members: NewAuthRoleMemberRecord[];
+    scopes: ScopeView[];
+    pendingCount: number;
+    autoAssignAvailable: boolean;
+}
+export interface RoleView extends NewAuthRoleRecord {
+    allowCount: number;
+}
+export interface CommandView extends NewAuthCommandRecord {
+    suggestion: RoleSuggestion;
+    autoAssign: AutoAssignSuggestion;
+}
+export interface ScopeView {
+    id: string;
+    name: string;
+    type: ScopeType;
+}
+export interface RoleSuggestion {
+    roles: string[];
+    label: string;
+}
+export interface AutoAssignSuggestion extends RoleSuggestion {
+    kind: AutoAssignKind;
+    reason: string;
+}
+interface SetPolicyPayload {
+    scope: string;
+    roleId: string;
+    commandId: string;
+    state: PolicyState;
+}
+interface SetCommandStatusPayload {
+    commandId: string;
+    status: CommandStatus;
+}
+interface SetGuildOverridePayload {
+    commandId: string;
+    allowGuildOverride: boolean;
+}
+interface ApplySuggestionPayload {
+    commandId: string;
+    scope?: string;
+    mode?: 'legacy' | 'advisor';
+}
+interface AutoAssignPayload {
+    scope?: string;
+    mode?: 'legacy' | 'advisor';
+}
+interface CreateRolePayload {
+    id: string;
+    name: string;
+    scopeType: ScopeType;
+}
+interface MemberPayload {
+    roleId: string;
+    uid: string;
+    scope: string;
+}
+interface CopyRolePoliciesPayload {
+    sourceRoleId: string;
+    targetRoleId: string;
+    scope: string;
+}
+interface AssignPluginCommandsPayload {
+    plugin: string;
+    scope: string;
+    target: PluginAssignTarget;
+}
 export interface Config {
     botAdmins: string[];
     trustLegacyAuthorityAsAdmin: boolean;
@@ -128,24 +248,37 @@ export declare class NewAuthService {
         query?: string;
     }): Promise<NewAuthCommandRecord[]>;
     listRoles(): Promise<NewAuthRoleRecord[]>;
+    listPolicies(): Promise<NewAuthPolicyRecord[]>;
+    listMembers(): Promise<NewAuthRoleMemberRecord[]>;
+    listScopes(): Promise<ScopeView[]>;
+    getConsoleData(): Promise<NewAuthConsoleData>;
     addBotAdmin(uid: string): Promise<void>;
     removeBotAdmin(uid: string): Promise<void>;
     createCustomRole(id: string, name: string, scopeType?: ScopeType): Promise<void>;
     addRoleMember(roleId: string, uid: string, scope?: string): Promise<void>;
     removeRoleMember(roleId: string, uid: string, scope?: string): Promise<void>;
+    copyRolePolicies(sourceRoleId: string, targetRoleId: string, scope?: string): Promise<number>;
     setCommandStatus(input: string, status: CommandStatus): Promise<NewAuthCommandRecord>;
+    setCommandGuildOverride(input: string, allowGuildOverride: boolean): Promise<NewAuthCommandRecord>;
     setCommandPolicy(scope: string, roleId: string, input: string, state: PolicyState): Promise<NewAuthCommandRecord>;
+    applySuggestedPolicy(input: string, scope?: string, mode?: 'legacy' | 'advisor'): Promise<NewAuthCommandRecord>;
+    autoAssignPending(scope?: string, mode?: 'legacy' | 'advisor'): Promise<number>;
+    assignPluginCommands(plugin: string, scope?: string, target?: PluginAssignTarget): Promise<number>;
     getCommand(input: string): Promise<NewAuthCommandRecord>;
     private ensureBuiltinRoles;
+    private applyRolesToCommand;
     private createCommandRecord;
     private getDescription;
     private resolveCommandInput;
     private setPolicy;
     private getEffectivePolicy;
+    private getAutoAssignSuggestion;
     private ensureRoleMember;
+    private ensureRoleExists;
     private hasPlatformRole;
     private grantRuntimeCommandPermission;
     private getCommandList;
     private isSelfCommand;
 }
+export type NewAuthConsoleService = any;
 export {};

package/lib/index.js

@@ -3,8 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.NewAuthService = exports.Config = exports.inject = exports.name = void 0;
 exports.apply = apply;
 const koishi_1 = require("koishi");
+const path_1 = require("path");
 exports.name = 'new-auth';
-exports.inject = ['database'];
+exports.inject = { required: ['database'], optional: ['console'] };
 const BUILTIN_ROLES = [
     {
         id: 'bot-admin',
@@ -125,6 +126,9 @@ function apply(ctx, config) {
         return service.intercept(argv);
     });
     registerManagementCommands(ctx, config, service);
+    ctx.inject(['console'], (ctx) => {
+        registerConsole(ctx, service);
+    });
 }
 class NewAuthService {
     constructor(ctx, config) {
@@ -290,6 +294,62 @@ class NewAuthService {
         const records = await this.ctx.database.get('new_auth_role', {});
         return records.sort((a, b) => Number(a.builtin) - Number(b.builtin) || a.id.localeCompare(b.id));
     }
+    async listPolicies() {
+        return this.ctx.database.get('new_auth_policy', {});
+    }
+    async listMembers() {
+        return this.ctx.database.get('new_auth_role_member', {});
+    }
+    async listScopes() {
+        const scopes = [{ id: 'global', name: '全局默认', type: 'global' }];
+        const seen = new Set(['global']);
+        const channels = await this.ctx.database.get('channel', {}, ['id', 'platform', 'guildId']);
+        for (const channel of channels) {
+            const guildId = channel.guildId || channel.id;
+            if (!channel.platform || !guildId)
+                continue;
+            const id = `guild:${channel.platform}:${guildId}`;
+            if (seen.has(id))
+                continue;
+            seen.add(id);
+            scopes.push({
+                id,
+                name: `${channel.platform}:${guildId}`,
+                type: 'guild',
+            });
+        }
+        return scopes;
+    }
+    async getConsoleData() {
+        const [roles, commands, policies, members, scopes] = await Promise.all([
+            this.listRoles(),
+            this.listCommands({ all: true }),
+            this.listPolicies(),
+            this.listMembers(),
+            this.listScopes(),
+        ]);
+        const globalAllow = new Set(policies
+            .filter(policy => policy.scope === 'global' && policy.state === 'allow')
+            .map(policy => `${policy.roleId}:${policy.commandId}`));
+        return {
+            roles: roles.map(role => ({
+                ...role,
+                allowCount: role.id === 'bot-admin'
+                    ? commands.filter(command => command.status !== 'disabled').length
+                    : commands.filter(command => globalAllow.has(`${role.id}:${command.id}`)).length,
+            })),
+            commands: commands.map(command => ({
+                ...command,
+                suggestion: getLegacySuggestion(command.legacyAuthority),
+                autoAssign: this.getAutoAssignSuggestion(command),
+            })),
+            policies,
+            members,
+            scopes,
+            pendingCount: commands.filter(command => command.status === 'pending').length,
+            autoAssignAvailable: true,
+        };
+    }
     async addBotAdmin(uid) {
         const parsed = parseUid(uid);
         await this.ensureRoleMember('bot-admin', parsed.platform, parsed.userId, 'global');
@@ -319,7 +379,7 @@ class NewAuthService {
             updatedAt: now,
         };
         if (existing) {
-            await this.ctx.database.set('new_auth_role', id, record);
+            await this.ctx.database.set('new_auth_role', id, omitPrimary(record, 'id'));
         }
         else {
             await this.ctx.database.create('new_auth_role', record);
@@ -338,6 +398,18 @@ class NewAuthService {
             scope,
         });
     }
+    async copyRolePolicies(sourceRoleId, targetRoleId, scope = 'global') {
+        await this.ensureRoleExists(sourceRoleId);
+        await this.ensureRoleExists(targetRoleId);
+        const policies = await this.ctx.database.get('new_auth_policy', {
+            scope,
+            roleId: sourceRoleId,
+        });
+        for (const policy of policies) {
+            await this.setPolicy(scope, targetRoleId, policy.commandId, policy.state);
+        }
+        return policies.length;
+    }
     async setCommandStatus(input, status) {
         const command = await this.resolveCommandInput(input);
         await this.ctx.database.set('new_auth_command', command.id, {
@@ -347,6 +419,15 @@ class NewAuthService {
         this.commandCache.delete(command.id);
         return command;
     }
+    async setCommandGuildOverride(input, allowGuildOverride) {
+        const command = await this.resolveCommandInput(input);
+        await this.ctx.database.set('new_auth_command', command.id, {
+            allowGuildOverride,
+            updatedAt: new Date(),
+        });
+        this.commandCache.delete(command.id);
+        return command;
+    }
     async setCommandPolicy(scope, roleId, input, state) {
         const command = await this.resolveCommandInput(input);
         await this.setPolicy(scope, roleId, command.id, state);
@@ -355,6 +436,40 @@ class NewAuthService {
         }
         return command;
     }
+    async applySuggestedPolicy(input, scope = 'global', mode = 'legacy') {
+        const command = await this.resolveCommandInput(input);
+        const suggestion = mode === 'advisor'
+            ? this.getAutoAssignSuggestion(command)
+            : getLegacySuggestion(command.legacyAuthority);
+        await this.applyRolesToCommand(scope, command.id, suggestion.roles);
+        if (command.status === 'pending') {
+            await this.setCommandStatus(command.id, 'configured');
+        }
+        return command;
+    }
+    async autoAssignPending(scope = 'global', mode = 'advisor') {
+        const commands = await this.listCommands({ pending: true });
+        for (const command of commands) {
+            await this.applySuggestedPolicy(command.id, scope, mode);
+        }
+        return commands.length;
+    }
+    async assignPluginCommands(plugin, scope = 'global', target = 'legacy') {
+        const commands = (await this.listCommands({ all: true }))
+            .filter(command => command.plugin === plugin);
+        for (const command of commands) {
+            if (target === 'legacy') {
+                await this.applySuggestedPolicy(command.id, scope, 'legacy');
+            }
+            else {
+                await this.applyRolesToCommand(scope, command.id, getAssignTargetRoles(target));
+                if (command.status === 'pending') {
+                    await this.setCommandStatus(command.id, 'configured');
+                }
+            }
+        }
+        return commands.length;
+    }
     async getCommand(input) {
         const cached = this.commandCache.get(input);
         if (cached)
@@ -375,13 +490,22 @@ class NewAuthService {
                 updatedAt: now,
             };
             if (existing) {
-                await this.ctx.database.set('new_auth_role', role.id, record);
+                await this.ctx.database.set('new_auth_role', role.id, omitPrimary(record, 'id'));
             }
             else {
                 await this.ctx.database.create('new_auth_role', record);
             }
         }
     }
+    async applyRolesToCommand(scope, commandId, roleIds) {
+        const roles = await this.listRoles();
+        const knownRoles = new Set(roles.map(role => role.id));
+        for (const roleId of roleIds) {
+            if (!knownRoles.has(roleId))
+                continue;
+            await this.setPolicy(scope, roleId, commandId, 'allow');
+        }
+    }
     createCommandRecord(command, now) {
         const plugin = inferPlugin(command);
         const legacyAuthority = inferLegacyAuthority(command);
@@ -444,16 +568,84 @@ class NewAuthService {
         });
         return global?.state ?? 'inherit';
     }
+    getAutoAssignSuggestion(command) {
+        const text = normalizeKey([
+            command.commandPath,
+            command.name,
+            command.plugin,
+            command.description,
+            command.aliases.join(' '),
+        ].join(' '));
+        const dangerous = [
+            'plugin', 'market', 'install', 'uninstall', 'reload', 'restart',
+            'config', 'database', 'db', 'file', 'delete', 'remove', 'exec',
+            'eval', 'shell', 'token', 'env', 'broadcast',
+            '插件', '市场', '安装', '卸载', '重载', '重启', '配置', '数据库',
+            '文件', '删除', '执行', '脚本', '令牌', '环境变量', '广播',
+        ];
+        if (dangerous.some(keyword => text.includes(keyword))) {
+            return {
+                kind: 'admin',
+                roles: ['bot-admin'],
+                label: '仅 Bot 管理员',
+                reason: '命中实例级或高危操作关键词。',
+            };
+        }
+        const moderation = [
+            'ban', 'mute', 'kick', 'warn', 'recall', 'approve', 'blacklist',
+            '禁言', '踢', '封禁', '警告', '撤回', '审核', '黑名单',
+        ];
+        if (moderation.some(keyword => text.includes(keyword))) {
+            return {
+                kind: 'moderation',
+                roles: ['guild-admin', 'guild-owner'],
+                label: '群管理员和群主',
+                reason: '命中群管理操作关键词。',
+            };
+        }
+        const ownerOnly = ['welcome', 'setting', 'notice', 'announce', '欢迎', '公告', '群设置'];
+        if (ownerOnly.some(keyword => text.includes(keyword))) {
+            return {
+                kind: 'owner',
+                roles: ['guild-owner'],
+                label: '群主',
+                reason: '更适合群主进行群内自治配置。',
+            };
+        }
+        const publicUse = [
+            'help', 'sign', 'rank', 'weather', 'search', 'music', 'play', 'query',
+            '帮助', '签到', '排行', '天气', '搜索', '点歌', '播放', '查询',
+        ];
+        if (publicUse.some(keyword => text.includes(keyword))) {
+            return {
+                kind: 'public',
+                roles: ['guild-member', 'guild-admin', 'guild-owner'],
+                label: '群成员及以上',
+                reason: '命中普通用户功能关键词。',
+            };
+        }
+        const fallback = getLegacySuggestion(command.legacyAuthority);
+        return {
+            kind: 'legacy',
+            roles: fallback.roles,
+            label: fallback.label,
+            reason: '未命中明确语义，回退到旧 authority 建议。',
+        };
+    }
     async ensureRoleMember(roleId, platform, userId, scope) {
-        const [role] = await this.ctx.database.get('new_auth_role', { id: roleId });
-        if (!role)
-            throw new Error(`role not found: ${roleId}`);
+        await this.ensureRoleExists(roleId);
         const query = { roleId, platform, userId, scope };
         const [existing] = await this.ctx.database.get('new_auth_role_member', query);
         if (!existing) {
             await this.ctx.database.create('new_auth_role_member', { ...query, createdAt: new Date() });
         }
     }
+    async ensureRoleExists(roleId) {
+        const [role] = await this.ctx.database.get('new_auth_role', { id: roleId });
+        if (!role)
+            throw new Error(`role not found: ${roleId}`);
+        return role;
+    }
     hasPlatformRole(session, roleNames) {
         const values = new Set();
         const author = session.author;
@@ -486,6 +678,71 @@ class NewAuthService {
     }
 }
 exports.NewAuthService = NewAuthService;
+function createConsoleServiceClass(service) {
+    const { DataService } = require('@koishijs/plugin-console');
+    return class NewAuthConsoleDataService extends DataService {
+        constructor(ctx) {
+            super(ctx, 'newauth', {
+                immediate: true,
+                authority: 4,
+            });
+        }
+        async get(_forced, _client) {
+            return service.getConsoleData();
+        }
+    };
+}
+function registerConsole(ctx, service) {
+    ctx.console.addEntry({
+        dev: (0, path_1.resolve)(__dirname, '../client/index.ts'),
+        prod: (0, path_1.resolve)(__dirname, '../dist'),
+    });
+    ctx.plugin(createConsoleServiceClass(service));
+    const ok = async (task) => {
+        await task;
+        ctx.console.refresh('newauth');
+        return { success: true };
+    };
+    ctx.console.addListener('newauth/getData', async () => {
+        return service.getConsoleData();
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/setPolicy', async (payload) => {
+        return ok(service.setCommandPolicy(payload.scope, payload.roleId, payload.commandId, payload.state));
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/setCommandStatus', async (payload) => {
+        return ok(service.setCommandStatus(payload.commandId, payload.status));
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/setGuildOverride', async (payload) => {
+        return ok(service.setCommandGuildOverride(payload.commandId, payload.allowGuildOverride));
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/applySuggestion', async (payload) => {
+        return ok(service.applySuggestedPolicy(payload.commandId, payload.scope, payload.mode));
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/autoAssignPending', async (payload = {}) => {
+        const count = await service.autoAssignPending(payload.scope, payload.mode);
+        ctx.console.refresh('newauth');
+        return { success: true, count };
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/createRole', async (payload) => {
+        return ok(service.createCustomRole(payload.id, payload.name, payload.scopeType));
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/addMember', async (payload) => {
+        return ok(service.addRoleMember(payload.roleId, payload.uid, payload.scope));
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/removeMember', async (payload) => {
+        return ok(service.removeRoleMember(payload.roleId, payload.uid, payload.scope));
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/copyRolePolicies', async (payload) => {
+        const count = await service.copyRolePolicies(payload.sourceRoleId, payload.targetRoleId, payload.scope);
+        ctx.console.refresh('newauth');
+        return { success: true, count };
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/assignPluginCommands', async (payload) => {
+        const count = await service.assignPluginCommands(payload.plugin, payload.scope, payload.target);
+        ctx.console.refresh('newauth');
+        return { success: true, count };
+    }, { authority: 4 });
+}
 function registerManagementCommands(ctx, config, service) {
     const authority = config.legacyAdminAuthority;
     ctx.command('newauth', '管理新权限系统', { authority })
@@ -575,6 +832,19 @@ function registerManagementCommands(ctx, config, service) {
         await service.removeRoleMember(roleId, uid, scope);
         return `已移除成员：${roleId} ${uid} ${scope}`;
     });
+    ctx.command('newauth.role.copy <sourceRoleId> <targetRoleId> [scope]', '复制角色权限', { authority })
+        .action(async (_, sourceRoleId, targetRoleId, scope = 'global') => {
+        const count = await service.copyRolePolicies(sourceRoleId, targetRoleId, scope);
+        return `已复制 ${count} 条策略：${sourceRoleId} -> ${targetRoleId} (${scope})`;
+    });
+    ctx.command('newauth.plugin.assign <plugin> <target> [scope]', '批量配置插件指令', { authority })
+        .action(async (_, plugin, target, scope = 'global') => {
+        if (!['legacy', 'bot-admin', 'guild-owner', 'guild-admin', 'guild-member'].includes(target)) {
+            return 'target 只能是 legacy、bot-admin、guild-owner、guild-admin 或 guild-member。';
+        }
+        const count = await service.assignPluginCommands(plugin, scope, target);
+        return `已批量配置 ${count} 个指令：${plugin} -> ${target} (${scope})`;
+    });
 }
 function inferLegacyAuthority(command) {
     if (typeof command.config.authority === 'number')
@@ -586,6 +856,49 @@ function inferLegacyAuthority(command) {
     }
     return 1;
 }
+function getLegacySuggestion(authority) {
+    if (authority <= 0) {
+        return {
+            roles: ['guest', 'guild-member', 'guild-admin', 'guild-owner'],
+            label: '访客/群成员及以上',
+        };
+    }
+    if (authority === 1) {
+        return {
+            roles: ['guild-member', 'guild-admin', 'guild-owner'],
+            label: '群成员及以上',
+        };
+    }
+    if (authority === 2) {
+        return {
+            roles: ['guild-admin', 'guild-owner'],
+            label: '群管理员及以上',
+        };
+    }
+    if (authority === 3) {
+        return {
+            roles: ['guild-owner'],
+            label: '群主',
+        };
+    }
+    return {
+        roles: ['bot-admin'],
+        label: '仅 Bot 管理员',
+    };
+}
+function getAssignTargetRoles(target) {
+    if (target === 'guild-member')
+        return ['guild-member', 'guild-admin', 'guild-owner'];
+    if (target === 'guild-admin')
+        return ['guild-admin', 'guild-owner'];
+    if (target === 'guild-owner')
+        return ['guild-owner'];
+    return ['bot-admin'];
+}
+function omitPrimary(record, key) {
+    const { [key]: _value, ...rest } = record;
+    return rest;
+}
 function inferPlugin(command) {
     const source = command.caller?.scope || command.ctx?.scope;
     const plugin = source?.plugin?.name || source?.uid || source?.id || 'unknown';

package/package.json

@@ -1,16 +1,19 @@
 {
   "name": "koishi-plugin-new-auth",
-  "version": "0.1.0",
+  "version": "0.3.1",
   "description": "Role and scope based command permission layer for Koishi.",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "files": [
     "lib",
+    "dist",
     "README.md",
     "newauth.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "npm run build:server && npm run build:client",
+    "build:server": "tsc -p tsconfig.json",
+    "build:client": "node scripts/build-client.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "prepack": "npm run build"
   },
@@ -23,9 +26,17 @@
   ],
   "license": "MIT",
   "peerDependencies": {
+    "@koishijs/plugin-console": "^5.30.0",
     "koishi": "^4.18.0"
   },
+  "peerDependenciesMeta": {
+    "@koishijs/plugin-console": {
+      "optional": true
+    }
+  },
   "devDependencies": {
+    "@koishijs/client": "^5.30.11",
+    "@koishijs/plugin-console": "^5.30.11",
     "@types/node": "^22.0.0",
     "koishi": "4.18.11",
     "typescript": "^5.8.0"