koishi-plugin-new-auth 0.3.1 → 0.4.4

package/README.md

@@ -1,19 +1,19 @@
 # koishi-plugin-new-auth
 
-`koishi-plugin-new-auth` is a conservative role and scope based command permission layer for Koishi.
+`koishi-plugin-new-auth` 是一个保守的 Koishi 指令权限层，按 `newauth.md` 中的设计实现“角色 + 作用域 + 指令策略”。
 
-It implements the first usable version described in `newauth.md`:
+当前版本已经覆盖：
 
-- commands are registered into a permission table;
-- newly discovered commands are `pending` by default;
-- pending commands are executable only by Bot administrators;
-- Koishi's legacy `authority` value is recorded as a suggestion, not used as the final grant;
-- policies are evaluated by `scope + role + command`;
-- guild owner/admin/member roles are separated from Bot administrator;
-- custom roles and role members can be managed from Koishi commands;
-- Koishi Console WebUI is available when `@koishijs/plugin-console` is installed.
+- 指令注册后进入权限表；
+- 新发现的指令默认是 `pending`；
+- 待配置指令默认只有 Bot 管理员可执行；
+- 旧 `authority` 只记录为建议，不直接放权；
+- 策略按 `scope + role + command` 判断；
+- 群主、群管理员、群成员与 Bot 管理员分离；
+- 自定义角色、显式成员、角色权限复制；
+- Koishi Console 中的 `⌗ 新权限` WebUI。
 
-## Configuration
+## 配置
 
 ```ts
 export default {
@@ -25,13 +25,13 @@ export default {
 }
 ```
 
-`botAdmins` are explicit Koishi instance administrators. Platform guild owners are not treated as Bot administrators.
+`botAdmins` 是显式 Bot 实例管理员，平台群主不会自动成为 Bot 管理员。
 
-The plugin also has a compatibility fallback for existing Koishi installations: users with `authority >= legacyAdminAuthority` are treated as Bot administrators when `trustLegacyAuthorityAsAdmin` is enabled.
+为了兼容旧实例，`trustLegacyAuthorityAsAdmin` 打开时，`authority >= legacyAdminAuthority` 的 Koishi 用户会被视为 Bot 管理员。这个兼容只来自 Koishi 用户权限，不来自平台群主身份。
 
-## Commands
+## 管理指令
 
-All management commands are under `newauth`.
+所有管理指令都在 `newauth` 下。
 
 ```txt
 newauth.commands --pending
@@ -39,6 +39,7 @@ newauth.roles
 newauth.allow <roleId> <command> [scope]
 newauth.deny <roleId> <command> [scope]
 newauth.inherit <roleId> <command> [scope]
+newauth.assign <command> <roleIds> [scope]
 newauth.disable <command>
 newauth.enable <command>
 newauth.admin.add <uid>
@@ -46,18 +47,28 @@ newauth.admin.remove <uid>
 newauth.role.create <id> <name> [scopeType]
 newauth.member.add <roleId> <uid> [scope]
 newauth.member.remove <roleId> <uid> [scope]
+newauth.role.copy <sourceRoleId> <targetRoleId> [scope]
+newauth.guild.commands [query]
+newauth.guild.allow <roleId> <command>
+newauth.guild.deny <roleId> <command>
+newauth.guild.inherit <roleId> <command>
+newauth.plugin.assign <plugin> <target> [scope]
 ```
 
-`uid` uses `platform:userId`, for example `onebot:10000`.
+`uid` 使用 `platform:userId`，例如 `onebot:10000`。
 
-`scope` can be:
+`scope` 可以是：
 
 - `global`
 - `guild:<platform>:<guildId>`
 
-When `scope` is omitted, policy commands use `global`.
+省略 `scope` 时，策略指令默认写入 `global`。
 
-## Built-In Roles
+`newauth.assign` 与待配置 WebUI 的角色勾选行为一致：列出的角色写为允许，其他角色在该作用域下写为关闭，并把待配置指令变为已配置。
+
+`newauth.guild.*` 是当前群的自治入口，只能由 Bot 管理员或当前群群主使用，只能修改当前群、已配置且允许群内自治的指令，不能修改全局权限或 Bot 管理员角色。
+
+## 内置角色
 
 ```txt
 bot-admin
@@ -67,24 +78,23 @@ guild-member
 guest
 ```
 
-Custom roles do not inherit from other roles. To give a custom role access to a command, add an explicit policy with `newauth.allow`.
+自定义角色不继承其他角色。要让自定义角色拥有某些指令，需要显式写策略，或在 WebUI / `newauth.role.copy` 中复制另一个角色当前的显式策略。
 
 ## WebUI
 
-Install Koishi Console and open the `⌗ 新权限` page.
+安装 Koishi Console 后打开 `⌗ 新权限` 页面。
 
-The page provides:
+页面提供：
 
-- role-first command policy editing;
-- global and guild scope switching;
-- pending command review;
-- legacy `authority` suggestions;
-- AI-style automatic assignment for pending commands;
-- command status and guild override toggles;
-- custom role creation and explicit member management;
-- copying command policies from one role to another;
-- batch assigning all commands from one plugin.
+- 以角色为入口的指令权限编辑；
+- 全局默认和单群作用域切换；
+- 待配置指令审查和角色勾选分配；
+- 旧 `authority` 建议与基于 ChatLuna 默认模型的 AI 分配审查表；
+- 指令状态和群内自治开关；
+- 自定义角色创建、显式成员管理；
+- 从其他角色复制权限；
+- 按插件批量采用建议、给群成员、给群管理员或仅给 Bot 管理员。
 
-The automatic assignment advisor is conservative: dangerous instance-level commands are kept for `bot-admin`, group moderation commands go to `guild-admin` and `guild-owner`, normal user commands go to `guild-member` and above, and unclear commands fall back to the legacy authority suggestion.
+WebUI 是 Koishi 实例管理员界面，Console 入口和所有事件都要求 `authority: 4`。群主自治只应影响允许自治的单群指令，不等于进入实例管理面板。
 
-Custom roles do not inherit from built-in roles. Use the WebUI copy action, or `newauth.role.copy`, to clone the current explicit policies from another role.
+AI 自动分配不会按关键词硬编码推断。安装并启用 ChatLuna 且设置默认模型后，newauth 会把指令元数据和角色列表交给 ChatLuna 默认模型，让模型返回允许的角色；WebUI 会先显示审查表并填入勾选项，只有管理员点击保存后才写入策略。模型不可用或返回无效时回退到旧 `authority` 建议。

package/dist/index.js

@@ -1 +1 @@
-import{defineComponent as ve,ref as i,computed as v,watch as H,openBlock as s,createElementBlock as u,createElementVNode as l,toDisplayString as o,withDirectives as c,Fragment as f,renderList as y,vModelSelect as _,normalizeClass as w,createCommentVNode as B,withModifiers as J,vModelText as x,vModelCheckbox as ce,createTextVNode as q}from"vue";import{store as Q,send as g}from"@koishijs/client";const pe={class:"new-auth-page"},ge={class:"topbar"},be={class:"top-actions"},me=["value"],fe=["disabled"],ye=["disabled"],ke={class:"tabs"},he={key:0,class:"error"},_e={key:1,class:"role-layout"},we={class:"role-list"},Ce=["onClick"],Ie=["disabled"],$e={key:0,class:"detail"},Ve={class:"detail-head"},Se={class:"detail-tools"},Ue=["value"],Pe=["disabled"],Re={class:"check"},xe={class:"member-panel"},Ae={class:"member-list"},Me=["disabled","onClick"],Oe=["value"],Te=["disabled"],Ge={class:"filters"},Ne={class:"command-list"},Be={class:"command-main"},De={class:"state-buttons"},Ee=["onClick"],Le=["onClick"],Fe=["onClick"],qe={key:2,class:"pending-grid"},ze={class:"row-actions"},Ke=["disabled","onClick"],je=["disabled","onClick"],He={key:0,class:"empty"},Je={key:3,class:"commands-table"},Qe={class:"filters"},We={class:"plugin-bulk"},Xe=["value"],Ye=["disabled"],Ze=["disabled"],el=["disabled"],ll=["disabled"],tl={class:"command-main"},nl={class:"command-controls"},ol={class:"check"},sl=["checked","onChange"],ul=["value","onChange"],al=ve({__name:"new-auth",setup(S){const b=i("roles"),a=i("global"),d=i(""),k=i(""),C=i("all"),D=i(false),r=i(false),A=i(""),I=i(""),U=i(""),E=i("guild"),P=i(""),M=i("global"),O=i(""),h=i(""),$=v(()=>Q.newauth||{roles:[],commands:[],policies:[],members:[],scopes:[{id:"global",name:"全局默认"}],pendingCount:0}),R=v(()=>$.value.roles),T=v(()=>$.value.commands),W=v(()=>$.value.policies),X=v(()=>$.value.members),Y=v(()=>{var n;return(n=$.value.scopes)!=null&&n.length?$.value.scopes:[{id:"global",name:"全局默认"}]}),G=v(()=>T.value.filter(n=>n.status==="pending")),V=v(()=>R.value.find(n=>n.id===d.value)),z=v(()=>X.value.filter(n=>n.roleId===d.value)),Z=v(()=>R.value.filter(n=>n.id!==d.value)),ee=v(()=>[...new Set(T.value.map(n=>n.plugin))].sort());H(R,n=>{!d.value&&n.length&&(d.value=n[0].id)},{immediate:true}),H(a,n=>{M.value=n==="global"?"global":n});const K=v(()=>{const n=k.value.toLowerCase();return T.value.filter(t=>C.value!=="all"&&t.status!==C.value?false:n?[t.id,t.name,t.commandPath,t.plugin,t.description].some(e=>e==null?void 0:e.toLowerCase().includes(n)):true)}),le=v(()=>V.value?K.value.filter(n=>{var t,e;return D.value||((t=V.value)==null?void 0:t.id)==="bot-admin"||((e=V.value)==null?void 0:e.scopeType)==="global"?true:n.allowGuildOverride}):[]);function L(n){const t=W.value.find(e=>e.scope===a.value&&e.roleId===d.value&&e.commandId===n);return(t==null?void 0:t.state)||"inherit"}async function p(n){r.value=true,A.value="";try{await n}catch(t){A.value=t instanceof Error?t.message:String(t)}finally{r.value=false}}async function te(){return p((async()=>{const n=await g("newauth/getData");Q.newauth=n})())}function F(n,t){return p(g("newauth/setPolicy",{scope:a.value,roleId:d.value,commandId:n,state:t}))}function j(n,t){return p(g("newauth/applySuggestion",{commandId:n,scope:a.value,mode:t}))}function ne(){return p(g("newauth/autoAssignPending",{scope:a.value,mode:"advisor"}))}function oe(n,t){const e=t.target;return p(g("newauth/setGuildOverride",{commandId:n.id,allowGuildOverride:e.checked}))}function se(n,t){const e=t.target;return p(g("newauth/setCommandStatus",{commandId:n.id,status:e.value}))}function ue(){return p((async()=>{await g("newauth/createRole",{id:I.value,name:U.value,scopeType:E.value}),d.value=I.value,I.value="",U.value=""})())}function ae(){return p((async()=>{await g("newauth/addMember",{roleId:d.value,uid:P.value,scope:M.value}),P.value=""})())}function ie(n){return p(g("newauth/removeMember",{roleId:n.roleId,uid:`${n.platform}:${n.userId}`,scope:n.scope}))}function de(){return p(g("newauth/copyRolePolicies",{sourceRoleId:O.value,targetRoleId:d.value,scope:a.value}))}function re(n){return`${n.roleId}:${n.platform}:${n.userId}:${n.scope}`}function N(n){return p(g("newauth/assignPluginCommands",{plugin:h.value,scope:a.value,target:n}))}return(n,t)=>(s(),u("main",pe,[l("header",ge,[l("div",null,[t[20]||(t[20]=l("h1",null,"新权限",-1)),l("p",null,o(R.value.length)+" 个角色 / "+o(T.value.length)+" 个指令 / "+o(G.value.length)+" 个待配置",1)]),l("div",be,[c(l("select",{"onUpdate:modelValue":t[0]||(t[0]=e=>a.value=e),class:"scope-select"},[(s(true),u(f,null,y(Y.value,e=>(s(),u("option",{key:e.id,value:e.id},o(e.name),9,me))),128))],512),[[_,a.value]]),l("button",{class:"primary",disabled:r.value||!G.value.length,onClick:ne}," AI 自动分配待配置 ",8,fe),l("button",{disabled:r.value,onClick:te},"刷新",8,ye)])]),l("nav",ke,[l("button",{class:w({active:b.value==="roles"}),onClick:t[1]||(t[1]=e=>b.value="roles")},"角色",2),l("button",{class:w({active:b.value==="pending"}),onClick:t[2]||(t[2]=e=>b.value="pending")},"待配置",2),l("button",{class:w({active:b.value==="commands"}),onClick:t[3]||(t[3]=e=>b.value="commands")},"指令",2)]),A.value?(s(),u("p",he,o(A.value),1)):B("v-if",true),b.value==="roles"?(s(),u("section",_e,[l("aside",we,[(s(true),u(f,null,y(R.value,e=>(s(),u("button",{key:e.id,class:w(["role-item",{active:e.id===d.value}]),onClick:m=>d.value=e.id},[l("span",null,[l("strong",null,o(e.name),1),l("small",null,o(e.builtin?"内置角色":"自定义角色")+" / "+o(e.scopeType),1)]),l("em",null,o(e.allowCount),1)],10,Ce))),128)),l("form",{class:"role-create",onSubmit:J(ue,["prevent"])},[c(l("input",{"onUpdate:modelValue":t[4]||(t[4]=e=>I.value=e),placeholder:"custom:music-admin"},null,512),[[x,I.value,void 0,{trim:true}]]),c(l("input",{"onUpdate:modelValue":t[5]||(t[5]=e=>U.value=e),placeholder:"角色名称"},null,512),[[x,U.value,void 0,{trim:true}]]),c(l("select",{"onUpdate:modelValue":t[6]||(t[6]=e=>E.value=e)},[...t[21]||(t[21]=[l("option",{value:"guild"},"群内角色",-1),l("option",{value:"global"},"全局角色",-1)])],512),[[_,E.value]]),l("button",{class:"primary",disabled:r.value||!I.value||!U.value},"创建角色",8,Ie)],32)]),V.value?(s(),u("section",$e,[l("div",Ve,[l("div",null,[l("h2",null,o(V.value.name),1),l("p",null,o(V.value.id),1)]),l("div",Se,[c(l("select",{"onUpdate:modelValue":t[7]||(t[7]=e=>O.value=e)},[t[22]||(t[22]=l("option",{disabled:"",value:""},"复制来源",-1)),(s(true),u(f,null,y(Z.value,e=>(s(),u("option",{key:e.id,value:e.id},o(e.name),9,Ue))),128))],512),[[_,O.value]]),l("button",{disabled:r.value||!O.value,onClick:de},"复制权限",8,Pe),l("label",Re,[c(l("input",{type:"checkbox","onUpdate:modelValue":t[8]||(t[8]=e=>D.value=e)},null,512),[[ce,D.value]]),t[23]||(t[23]=q(" 审计模式 ",-1))])])]),l("section",xe,[l("div",null,[t[24]||(t[24]=l("strong",null,"成员",-1)),l("small",null,o(z.value.length)+" 个显式成员",1)]),l("div",Ae,[(s(true),u(f,null,y(z.value,e=>(s(),u("span",{key:re(e),class:"member-chip"},[q(o(e.platform)+":"+o(e.userId)+" / "+o(e.scope)+" ",1),l("button",{disabled:r.value,onClick:m=>ie(e)},"移除",8,Me)]))),128))]),l("form",{class:"member-add",onSubmit:J(ae,["prevent"])},[c(l("input",{"onUpdate:modelValue":t[9]||(t[9]=e=>P.value=e),placeholder:"platform:userId"},null,512),[[x,P.value,void 0,{trim:true}]]),c(l("select",{"onUpdate:modelValue":t[10]||(t[10]=e=>M.value=e)},[t[25]||(t[25]=l("option",{value:"global"},"global",-1)),a.value!=="global"?(s(),u("option",{key:0,value:a.value},o(a.value),9,Oe)):B("v-if",true)],512),[[_,M.value]]),l("button",{class:"primary",disabled:r.value||!P.value},"添加成员",8,Te)],32)]),l("div",Ge,[c(l("input",{"onUpdate:modelValue":t[11]||(t[11]=e=>k.value=e),placeholder:"搜索指令、插件、描述"},null,512),[[x,k.value,void 0,{trim:true}]]),c(l("select",{"onUpdate:modelValue":t[12]||(t[12]=e=>C.value=e)},[...t[26]||(t[26]=[l("option",{value:"all"},"全部状态",-1),l("option",{value:"pending"},"待配置",-1),l("option",{value:"configured"},"已配置",-1),l("option",{value:"disabled"},"已禁用",-1)])],512),[[_,C.value]])]),l("div",Ne,[(s(true),u(f,null,y(le.value,e=>(s(),u("article",{key:e.id,class:"command-row"},[l("div",Be,[l("strong",null,o(e.name),1),l("span",null,o(e.commandPath),1),l("small",null,o(e.plugin)+" / legacy "+o(e.legacyAuthority)+" / "+o(e.suggestion.label),1)]),l("div",De,[l("button",{class:w({active:L(e.id)==="inherit"}),onClick:m=>F(e.id,"inherit")}," 继承 ",10,Ee),l("button",{class:w({active:L(e.id)==="allow"}),onClick:m=>F(e.id,"allow")}," 开 ",10,Le),l("button",{class:w({active:L(e.id)==="deny"}),onClick:m=>F(e.id,"deny")}," 关 ",10,Fe)])]))),128))])])):B("v-if",true)])):b.value==="pending"?(s(),u("section",qe,[(s(true),u(f,null,y(G.value,e=>(s(),u("article",{key:e.id,class:"pending-item"},[l("div",null,[l("strong",null,o(e.name),1),l("span",null,o(e.commandPath),1),l("small",null,o(e.plugin)+" / legacy "+o(e.legacyAuthority),1)]),l("dl",null,[t[27]||(t[27]=l("dt",null,"旧建议",-1)),l("dd",null,o(e.suggestion.label),1),t[28]||(t[28]=l("dt",null,"AI 建议",-1)),l("dd",null,o(e.autoAssign.label)+"："+o(e.autoAssign.reason),1)]),l("div",ze,[l("button",{disabled:r.value,onClick:m=>j(e.id,"legacy")},"采用旧建议",8,Ke),l("button",{class:"primary",disabled:r.value,onClick:m=>j(e.id,"advisor")},"采用 AI 建议",8,je)])]))),128)),G.value.length?B("v-if",true):(s(),u("p",He,"没有待配置指令。"))])):(s(),u("section",Je,[l("div",Qe,[c(l("input",{"onUpdate:modelValue":t[13]||(t[13]=e=>k.value=e),placeholder:"搜索指令、插件、描述"},null,512),[[x,k.value,void 0,{trim:true}]]),c(l("select",{"onUpdate:modelValue":t[14]||(t[14]=e=>C.value=e)},[...t[29]||(t[29]=[l("option",{value:"all"},"全部状态",-1),l("option",{value:"pending"},"待配置",-1),l("option",{value:"configured"},"已配置",-1),l("option",{value:"disabled"},"已禁用",-1)])],512),[[_,C.value]])]),l("div",We,[c(l("select",{"onUpdate:modelValue":t[15]||(t[15]=e=>h.value=e)},[t[30]||(t[30]=l("option",{disabled:"",value:""},"选择插件",-1)),(s(true),u(f,null,y(ee.value,e=>(s(),u("option",{key:e,value:e},o(e),9,Xe))),128))],512),[[_,h.value]]),l("button",{disabled:r.value||!h.value,onClick:t[16]||(t[16]=e=>N("legacy"))},"采用插件建议",8,Ye),l("button",{disabled:r.value||!h.value,onClick:t[17]||(t[17]=e=>N("guild-member"))},"给群成员",8,Ze),l("button",{disabled:r.value||!h.value,onClick:t[18]||(t[18]=e=>N("guild-admin"))},"给群管理员",8,el),l("button",{disabled:r.value||!h.value,onClick:t[19]||(t[19]=e=>N("bot-admin"))},"仅 Bot 管理员",8,ll)]),(s(true),u(f,null,y(K.value,e=>(s(),u("article",{key:e.id,class:"command-row"},[l("div",tl,[l("strong",null,o(e.name),1),l("span",null,o(e.id),1),l("small",null,o(e.plugin)+" / "+o(e.commandPath)+" / "+o(e.autoAssign.label),1)]),l("div",nl,[l("label",ol,[l("input",{type:"checkbox",checked:e.allowGuildOverride,onChange:m=>oe(e,m)},null,40,sl),t[31]||(t[31]=q(" 群内自治 ",-1))]),l("select",{value:e.status,onChange:m=>se(e,m)},[...t[32]||(t[32]=[l("option",{value:"pending"},"待配置",-1),l("option",{value:"configured"},"已配置",-1),l("option",{value:"disabled"},"已禁用",-1)])],40,ul)])]))),128))]))]))}}),il=(S,b)=>{const a=S.__vccOpts||S;for(const[d,k]of b)a[d]=k;return a},dl=il(al,[["__scopeId","data-v-755ad7c8"]]),cl=S=>{S.page({name:"新权限",path:"/new-auth",icon:"⌗",fields:["newauth"],authority:4,component:dl})};export{cl as default};
+import{defineComponent as Ae,ref as d,computed as c,watch as Y,openBlock as s,createElementBlock as u,createElementVNode as t,toDisplayString as o,withDirectives as p,Fragment as h,renderList as k,vModelSelect as I,normalizeClass as $,createCommentVNode as T,withModifiers as ne,vModelText as N,vModelCheckbox as Re,createTextVNode as K}from"vue";import{store as oe,send as b}from"@koishijs/client";const Pe={class:"new-auth-page"},Ve={class:"topbar"},Ue={class:"top-actions"},xe=["value"],Me=["disabled"],Te=["disabled"],Ne={class:"tabs"},Oe={key:0,class:"error"},Ge={key:1,class:"role-layout"},Be={class:"role-list"},De=["onClick"],Ee=["disabled"],Le={key:0,class:"detail"},Fe={class:"detail-head"},Ke={class:"detail-tools"},je=["value"],qe=["disabled"],ze={class:"check"},He={class:"member-panel"},Je={class:"member-list"},Qe=["disabled","onClick"],We=["value"],Xe=["disabled"],Ye={class:"filters"},Ze={class:"command-list"},el={class:"command-main"},ll={class:"state-buttons"},tl=["onClick"],nl=["onClick"],ol=["onClick"],sl={key:2,class:"pending-panel"},ul={key:0,class:"review-table"},il={class:"role-picker"},al=["checked","onChange"],dl={class:"row-actions"},rl=["disabled","onClick"],vl=["disabled","onClick"],cl=["disabled","onClick"],pl={key:1,class:"empty"},gl={key:3,class:"commands-table"},bl={class:"filters"},fl={class:"plugin-bulk"},hl=["value"],kl=["disabled"],yl=["disabled"],ml=["disabled"],wl=["disabled"],_l={class:"command-main"},Cl={class:"command-controls"},Sl={class:"check"},Il=["checked","onChange"],$l=["value","onChange"],Al=Ae({__name:"new-auth",setup(U){const f=d("roles"),a=d("global"),v=d(""),_=d(""),A=d("all"),j=d(false),r=d(false),O=d(""),R=d(""),x=d(""),q=d("guild"),M=d(""),G=d("global"),B=d(""),C=d(""),y=d({}),z=d({}),m=c(()=>oe.newauth||{roles:[],commands:[],policies:[],members:[],scopes:[{id:"global",name:"全局默认"}],pendingCount:0,autoAssignAvailable:false}),S=c(()=>m.value.roles),D=c(()=>m.value.commands),H=c(()=>m.value.policies),se=c(()=>m.value.members),ue=c(()=>{var n;return(n=m.value.scopes)!=null&&n.length?m.value.scopes:[{id:"global",name:"全局默认"}]}),w=c(()=>D.value.filter(n=>n.status==="pending")),Z=c(()=>w.value.filter(n=>z.value[n.id])),P=c(()=>S.value.find(n=>n.id===v.value)),ee=c(()=>se.value.filter(n=>n.roleId===v.value)),ie=c(()=>S.value.filter(n=>n.id!==v.value)),ae=c(()=>[...new Set(D.value.map(n=>n.plugin))].sort());Y(S,n=>{!v.value&&n.length&&(v.value=n[0].id)},{immediate:true}),Y(a,n=>{G.value=n==="global"?"global":n}),Y([w,H,a],()=>{for(const n of w.value)E(n)},{immediate:true});const le=c(()=>{const n=_.value.toLowerCase();return D.value.filter(l=>A.value!=="all"&&l.status!==A.value?false:n?[l.id,l.name,l.commandPath,l.plugin,l.description].some(e=>e==null?void 0:e.toLowerCase().includes(n)):true)}),de=c(()=>P.value?le.value.filter(n=>{var l,e;return j.value||((l=P.value)==null?void 0:l.id)==="bot-admin"||((e=P.value)==null?void 0:e.scopeType)==="global"?true:n.allowGuildOverride}):[]);function J(n){const l=H.value.find(e=>e.scope===a.value&&e.roleId===v.value&&e.commandId===n);return(l==null?void 0:l.state)||"inherit"}async function g(n){r.value=true,O.value="";try{await n}catch(l){O.value=l instanceof Error?l.message:String(l)}finally{r.value=false}}async function re(){return g((async()=>{const n=await b("newauth/getData");oe.newauth=n})())}function Q(n,l){return g(b("newauth/setPolicy",{scope:a.value,roleId:v.value,commandId:n,state:l}))}function V(n){return`${a.value}:${n}`}function ve(n){const l=H.value.filter(e=>e.scope===a.value&&e.commandId===n.id&&e.state==="allow").map(e=>e.roleId);return l.length?l:[...n.suggestion.roles]}function E(n){const l=V(n.id);y.value[l]||(y.value[l]=ve(n))}function ce(n,l){return E(n),y.value[V(n.id)].includes(l)}function pe(n,l,e){E(n);const i=V(n.id),W=e.target.checked,X=new Set(y.value[i]);W?X.add(l):X.delete(l),y.value[i]=[...X]}function ge(n,l){y.value[V(n.id)]=[...n.suggestion.roles]}function L(n){return z.value[n.id]||n.autoAssign}function be(n){return L(n).roles.map(l=>{var e;return((e=S.value.find(i=>i.id===l))==null?void 0:e.name)||l}).join("、")||"无"}function te(n,l){z.value[n.id]=l,y.value[V(n.id)]=[...l.roles]}function fe(n){return g((async()=>{const l=await b("newauth/generateAiSuggestion",{commandId:n.id});te(n,l)})())}function he(){return g((async()=>{const n=await b("newauth/generateAiSuggestions");for(const l of w.value){const e=n.suggestions[l.id];e&&te(l,e)}})())}function ke(n){return E(n),g(b("newauth/configureCommandRoles",{commandId:n.id,scope:a.value,roleIds:y.value[V(n.id)]}))}function ye(n,l){const e=l.target;return g(b("newauth/setGuildOverride",{commandId:n.id,allowGuildOverride:e.checked}))}function me(n,l){const e=l.target;return g(b("newauth/setCommandStatus",{commandId:n.id,status:e.value}))}function we(){return g((async()=>{await b("newauth/createRole",{id:R.value,name:x.value,scopeType:q.value}),v.value=R.value,R.value="",x.value=""})())}function _e(){return g((async()=>{await b("newauth/addMember",{roleId:v.value,uid:M.value,scope:G.value}),M.value=""})())}function Ce(n){return g(b("newauth/removeMember",{roleId:n.roleId,uid:`${n.platform}:${n.userId}`,scope:n.scope}))}function Se(){return g(b("newauth/copyRolePolicies",{sourceRoleId:B.value,targetRoleId:v.value,scope:a.value}))}function Ie(n){return`${n.roleId}:${n.platform}:${n.userId}:${n.scope}`}function F(n){return g(b("newauth/assignPluginCommands",{plugin:C.value,scope:a.value,target:n}))}function $e(n){return n==="global"?"全局":"群内"}return(n,l)=>(s(),u("main",Pe,[t("header",Ve,[t("div",null,[l[20]||(l[20]=t("h1",null,"新权限",-1)),t("p",null,o(S.value.length)+" 个角色 / "+o(D.value.length)+" 个指令 / "+o(w.value.length)+" 个待配置",1)]),t("div",Ue,[p(t("select",{"onUpdate:modelValue":l[0]||(l[0]=e=>a.value=e),class:"scope-select"},[(s(true),u(h,null,k(ue.value,e=>(s(),u("option",{key:e.id,value:e.id},o(e.name),9,xe))),128))],512),[[I,a.value]]),t("button",{class:"primary",disabled:r.value||!w.value.length||!m.value.autoAssignAvailable,onClick:he}," AI 生成审查表 ",8,Me),t("button",{disabled:r.value,onClick:re},"刷新",8,Te)])]),t("nav",Ne,[t("button",{class:$({active:f.value==="roles"}),onClick:l[1]||(l[1]=e=>f.value="roles")},"角色",2),t("button",{class:$({active:f.value==="pending"}),onClick:l[2]||(l[2]=e=>f.value="pending")},"待配置",2),t("button",{class:$({active:f.value==="commands"}),onClick:l[3]||(l[3]=e=>f.value="commands")},"指令",2)]),O.value?(s(),u("p",Oe,o(O.value),1)):T("v-if",true),f.value==="roles"?(s(),u("section",Ge,[t("aside",Be,[(s(true),u(h,null,k(S.value,e=>(s(),u("button",{key:e.id,class:$(["role-item",{active:e.id===v.value}]),onClick:i=>v.value=e.id},[t("span",null,[t("strong",null,o(e.name),1),t("small",null,o(e.builtin?"内置角色":"自定义角色")+" / "+o($e(e.scopeType)),1)]),t("em",null,o(e.allowCount),1)],10,De))),128)),t("form",{class:"role-create",onSubmit:ne(we,["prevent"])},[p(t("input",{"onUpdate:modelValue":l[4]||(l[4]=e=>R.value=e),placeholder:"custom:music-admin"},null,512),[[N,R.value,void 0,{trim:true}]]),p(t("input",{"onUpdate:modelValue":l[5]||(l[5]=e=>x.value=e),placeholder:"角色名称"},null,512),[[N,x.value,void 0,{trim:true}]]),p(t("select",{"onUpdate:modelValue":l[6]||(l[6]=e=>q.value=e)},[...l[21]||(l[21]=[t("option",{value:"guild"},"群内角色",-1),t("option",{value:"global"},"全局角色",-1)])],512),[[I,q.value]]),t("button",{class:"primary",disabled:r.value||!R.value||!x.value},"创建角色",8,Ee)],32)]),P.value?(s(),u("section",Le,[t("div",Fe,[t("div",null,[t("h2",null,o(P.value.name),1),t("p",null,o(P.value.id),1)]),t("div",Ke,[p(t("select",{"onUpdate:modelValue":l[7]||(l[7]=e=>B.value=e)},[l[22]||(l[22]=t("option",{disabled:"",value:""},"复制来源",-1)),(s(true),u(h,null,k(ie.value,e=>(s(),u("option",{key:e.id,value:e.id},o(e.name),9,je))),128))],512),[[I,B.value]]),t("button",{disabled:r.value||!B.value,onClick:Se},"复制权限",8,qe),t("label",ze,[p(t("input",{type:"checkbox","onUpdate:modelValue":l[8]||(l[8]=e=>j.value=e)},null,512),[[Re,j.value]]),l[23]||(l[23]=K(" 审计模式 ",-1))])])]),t("section",He,[t("div",null,[l[24]||(l[24]=t("strong",null,"成员",-1)),t("small",null,o(ee.value.length)+" 个显式成员",1)]),t("div",Je,[(s(true),u(h,null,k(ee.value,e=>(s(),u("span",{key:Ie(e),class:"member-chip"},[K(o(e.platform)+":"+o(e.userId)+" / "+o(e.scope)+" ",1),t("button",{disabled:r.value,onClick:i=>Ce(e)},"移除",8,Qe)]))),128))]),t("form",{class:"member-add",onSubmit:ne(_e,["prevent"])},[p(t("input",{"onUpdate:modelValue":l[9]||(l[9]=e=>M.value=e),placeholder:"platform:userId"},null,512),[[N,M.value,void 0,{trim:true}]]),p(t("select",{"onUpdate:modelValue":l[10]||(l[10]=e=>G.value=e)},[l[25]||(l[25]=t("option",{value:"global"},"global",-1)),a.value!=="global"?(s(),u("option",{key:0,value:a.value},o(a.value),9,We)):T("v-if",true)],512),[[I,G.value]]),t("button",{class:"primary",disabled:r.value||!M.value},"添加成员",8,Xe)],32)]),t("div",Ye,[p(t("input",{"onUpdate:modelValue":l[11]||(l[11]=e=>_.value=e),placeholder:"搜索指令、插件、描述"},null,512),[[N,_.value,void 0,{trim:true}]]),p(t("select",{"onUpdate:modelValue":l[12]||(l[12]=e=>A.value=e)},[...l[26]||(l[26]=[t("option",{value:"all"},"全部状态",-1),t("option",{value:"pending"},"待配置",-1),t("option",{value:"configured"},"已配置",-1),t("option",{value:"disabled"},"已禁用",-1)])],512),[[I,A.value]])]),t("div",Ze,[(s(true),u(h,null,k(de.value,e=>(s(),u("article",{key:e.id,class:"command-row"},[t("div",el,[t("strong",null,o(e.name),1),t("span",null,o(e.commandPath),1),t("small",null,o(e.plugin)+" / legacy "+o(e.legacyAuthority)+" / "+o(e.suggestion.label),1)]),t("div",ll,[t("button",{class:$({active:J(e.id)==="inherit"}),onClick:i=>Q(e.id,"inherit")}," 继承 ",10,tl),t("button",{class:$({active:J(e.id)==="allow"}),onClick:i=>Q(e.id,"allow")}," 开 ",10,nl),t("button",{class:$({active:J(e.id)==="deny"}),onClick:i=>Q(e.id,"deny")}," 关 ",10,ol)])]))),128))])])):T("v-if",true)])):f.value==="pending"?(s(),u("section",sl,[Z.value.length?(s(),u("table",ul,[l[27]||(l[27]=t("thead",null,[t("tr",null,[t("th",null,"指令"),t("th",null,"建议角色"),t("th",null,"理由")])],-1)),t("tbody",null,[(s(true),u(h,null,k(Z.value,e=>(s(),u("tr",{key:`review:${e.id}`},[t("td",null,o(e.commandPath),1),t("td",null,o(be(e)),1),t("td",null,o(L(e).reason),1)]))),128))])])):T("v-if",true),(s(true),u(h,null,k(w.value,e=>(s(),u("article",{key:e.id,class:"pending-item"},[t("div",null,[t("strong",null,o(e.name),1),t("span",null,o(e.commandPath),1),t("small",null,o(e.plugin)+" / legacy "+o(e.legacyAuthority),1)]),t("dl",null,[l[28]||(l[28]=t("dt",null,"旧建议",-1)),t("dd",null,o(e.suggestion.label),1),l[29]||(l[29]=t("dt",null,"AI 状态",-1)),t("dd",null,o(L(e).label)+"："+o(L(e).reason),1)]),t("div",il,[(s(true),u(h,null,k(S.value,i=>(s(),u("label",{key:`${e.id}:${i.id}`,class:"check"},[t("input",{type:"checkbox",checked:ce(e,i.id),onChange:W=>pe(e,i.id,W)},null,40,al),K(" "+o(i.name),1)]))),128))]),t("div",dl,[t("button",{disabled:r.value,onClick:i=>ge(e)},"填入旧建议",8,rl),t("button",{disabled:r.value||!m.value.autoAssignAvailable,onClick:i=>fe(e)},"AI 生成建议",8,vl),t("button",{class:"primary",disabled:r.value,onClick:i=>ke(e)},"保存分配",8,cl)])]))),128)),w.value.length?T("v-if",true):(s(),u("p",pl,"没有待配置指令。"))])):(s(),u("section",gl,[t("div",bl,[p(t("input",{"onUpdate:modelValue":l[13]||(l[13]=e=>_.value=e),placeholder:"搜索指令、插件、描述"},null,512),[[N,_.value,void 0,{trim:true}]]),p(t("select",{"onUpdate:modelValue":l[14]||(l[14]=e=>A.value=e)},[...l[30]||(l[30]=[t("option",{value:"all"},"全部状态",-1),t("option",{value:"pending"},"待配置",-1),t("option",{value:"configured"},"已配置",-1),t("option",{value:"disabled"},"已禁用",-1)])],512),[[I,A.value]])]),t("div",fl,[p(t("select",{"onUpdate:modelValue":l[15]||(l[15]=e=>C.value=e)},[l[31]||(l[31]=t("option",{disabled:"",value:""},"选择插件",-1)),(s(true),u(h,null,k(ae.value,e=>(s(),u("option",{key:e,value:e},o(e),9,hl))),128))],512),[[I,C.value]]),t("button",{disabled:r.value||!C.value,onClick:l[16]||(l[16]=e=>F("legacy"))},"采用插件建议",8,kl),t("button",{disabled:r.value||!C.value,onClick:l[17]||(l[17]=e=>F("guild-member"))},"给群成员",8,yl),t("button",{disabled:r.value||!C.value,onClick:l[18]||(l[18]=e=>F("guild-admin"))},"给群管理员",8,ml),t("button",{disabled:r.value||!C.value,onClick:l[19]||(l[19]=e=>F("bot-admin"))},"仅 Bot 管理员",8,wl)]),(s(true),u(h,null,k(le.value,e=>(s(),u("article",{key:e.id,class:"command-row"},[t("div",_l,[t("strong",null,o(e.name),1),t("span",null,o(e.id),1),t("small",null,o(e.plugin)+" / "+o(e.commandPath)+" / "+o(e.autoAssign.label),1)]),t("div",Cl,[t("label",Sl,[t("input",{type:"checkbox",checked:e.allowGuildOverride,onChange:i=>ye(e,i)},null,40,Il),l[32]||(l[32]=K(" 群内自治 ",-1))]),t("select",{value:e.status,onChange:i=>me(e,i)},[...l[33]||(l[33]=[t("option",{value:"pending"},"待配置",-1),t("option",{value:"configured"},"已配置",-1),t("option",{value:"disabled"},"已禁用",-1)])],40,$l)])]))),128))]))]))}}),Rl=(U,f)=>{const a=U.__vccOpts||U;for(const[v,_]of f)a[v]=_;return a},Pl=Rl(Al,[["__scopeId","data-v-b9691780"]]),xl=U=>{U.page({name:"新权限",path:"/new-auth",icon:"⌗",fields:["newauth"],authority:4,component:Pl})};export{xl as default};

package/dist/style.css

@@ -1 +1 @@
-.new-auth-page[data-v-755ad7c8]{min-height:100vh;background:#f6f7f4;color:#1f2523;padding:20px}.topbar[data-v-755ad7c8],.detail-head[data-v-755ad7c8],.filters[data-v-755ad7c8],.row-actions[data-v-755ad7c8],.command-controls[data-v-755ad7c8],.top-actions[data-v-755ad7c8],.detail-tools[data-v-755ad7c8],.member-add[data-v-755ad7c8],.plugin-bulk[data-v-755ad7c8]{display:flex;align-items:center;gap:12px}.topbar[data-v-755ad7c8]{justify-content:space-between;border-bottom:1px solid #d9ded6;padding-bottom:16px}h1[data-v-755ad7c8],h2[data-v-755ad7c8],p[data-v-755ad7c8]{margin:0}h1[data-v-755ad7c8]{font-size:26px;line-height:1.2}h2[data-v-755ad7c8]{font-size:20px}p[data-v-755ad7c8],small[data-v-755ad7c8],span[data-v-755ad7c8],dd[data-v-755ad7c8],dt[data-v-755ad7c8]{color:#63706a}button[data-v-755ad7c8],select[data-v-755ad7c8],input[data-v-755ad7c8]{border:1px solid #c7cec8;border-radius:6px;background:#fff;color:#1f2523;min-height:34px;padding:0 10px;font:inherit}button[data-v-755ad7c8]{cursor:pointer}button[data-v-755ad7c8]:disabled{cursor:not-allowed;opacity:.55}.primary[data-v-755ad7c8]{background:#285e54;border-color:#285e54;color:#fff}.tabs[data-v-755ad7c8]{display:flex;gap:6px;margin:16px 0}.tabs button.active[data-v-755ad7c8],.state-buttons button.active[data-v-755ad7c8]{background:#25312d;border-color:#25312d;color:#fff}.role-layout[data-v-755ad7c8]{display:grid;grid-template-columns:minmax(220px,280px) 1fr;gap:16px}.role-list[data-v-755ad7c8]{display:grid;gap:8px;align-content:start}.role-create[data-v-755ad7c8]{display:grid;gap:8px;border:1px solid #d9ded6;border-radius:8px;background:#fff;padding:10px}.role-item[data-v-755ad7c8]{display:flex;justify-content:space-between;align-items:center;min-height:58px;text-align:left}.role-item span[data-v-755ad7c8],.command-main[data-v-755ad7c8]{display:grid;gap:3px;min-width:0}.role-item.active[data-v-755ad7c8]{border-color:#285e54;box-shadow:inset 3px 0 #285e54}.role-item em[data-v-755ad7c8]{font-style:normal;color:#8b4a2f}.detail[data-v-755ad7c8]{min-width:0}.detail-head[data-v-755ad7c8]{justify-content:space-between;margin-bottom:12px}.detail-tools[data-v-755ad7c8]{flex-wrap:wrap;justify-content:flex-end}.member-panel[data-v-755ad7c8]{display:grid;gap:10px;border:1px solid #d9ded6;border-radius:8px;background:#fff;padding:12px;margin-bottom:12px}.member-panel>div[data-v-755ad7c8]:first-child{display:flex;justify-content:space-between;gap:12px}.member-list[data-v-755ad7c8]{display:flex;flex-wrap:wrap;gap:6px;min-height:28px}.member-chip[data-v-755ad7c8]{display:inline-flex;align-items:center;gap:6px;border:1px solid #c7cec8;border-radius:999px;background:#f6f7f4;padding:3px 4px 3px 10px}.member-chip button[data-v-755ad7c8]{min-height:24px;padding:0 8px;border-radius:999px}.filters[data-v-755ad7c8]{margin-bottom:12px}.plugin-bulk[data-v-755ad7c8]{flex-wrap:wrap;border:1px solid #d9ded6;border-radius:8px;background:#fff;padding:10px;margin-bottom:12px}.filters input[data-v-755ad7c8]{flex:1;min-width:180px}.command-list[data-v-755ad7c8],.pending-grid[data-v-755ad7c8],.commands-table[data-v-755ad7c8]{display:grid;gap:8px}.command-row[data-v-755ad7c8],.pending-item[data-v-755ad7c8]{background:#fff;border:1px solid #d9ded6;border-radius:8px;padding:12px}.command-row[data-v-755ad7c8]{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:12px;align-items:center}.command-main strong[data-v-755ad7c8],.command-main span[data-v-755ad7c8],.command-main small[data-v-755ad7c8]{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.state-buttons[data-v-755ad7c8]{display:grid;grid-template-columns:repeat(3,54px);gap:6px}.pending-grid[data-v-755ad7c8]{grid-template-columns:repeat(auto-fill,minmax(300px,1fr))}.pending-item[data-v-755ad7c8]{display:grid;gap:10px}dl[data-v-755ad7c8]{display:grid;grid-template-columns:58px 1fr;gap:4px 8px;margin:0}dd[data-v-755ad7c8]{margin:0}.check[data-v-755ad7c8]{display:inline-flex;align-items:center;gap:6px;white-space:nowrap}.check input[data-v-755ad7c8]{min-height:0}.error[data-v-755ad7c8]{border:1px solid #d9a09a;background:#fff1ef;color:#8a2d22;border-radius:6px;padding:10px;margin-bottom:12px}.empty[data-v-755ad7c8]{padding:24px 0}@media (max-width: 760px){.new-auth-page[data-v-755ad7c8]{padding:12px}.topbar[data-v-755ad7c8],.detail-head[data-v-755ad7c8],.command-row[data-v-755ad7c8]{grid-template-columns:1fr;display:grid}.top-actions[data-v-755ad7c8],.filters[data-v-755ad7c8],.command-controls[data-v-755ad7c8],.detail-tools[data-v-755ad7c8],.member-add[data-v-755ad7c8],.plugin-bulk[data-v-755ad7c8]{flex-wrap:wrap}.role-layout[data-v-755ad7c8]{grid-template-columns:1fr}.state-buttons[data-v-755ad7c8]{grid-template-columns:repeat(3,minmax(0,1fr))}}
+.new-auth-page[data-v-b9691780]{min-height:100vh;background:#eef2f6;color:#18222d;padding:20px}.topbar[data-v-b9691780],.detail-head[data-v-b9691780],.filters[data-v-b9691780],.row-actions[data-v-b9691780],.command-controls[data-v-b9691780],.top-actions[data-v-b9691780],.detail-tools[data-v-b9691780],.member-add[data-v-b9691780],.plugin-bulk[data-v-b9691780]{display:flex;align-items:center;gap:12px}.topbar[data-v-b9691780]{justify-content:space-between;border:1px solid #d7dee8;border-radius:8px;background:#fff;box-shadow:0 8px 24px #20304814;padding:16px}h1[data-v-b9691780],h2[data-v-b9691780],p[data-v-b9691780]{margin:0}h1[data-v-b9691780]{font-size:26px;line-height:1.2}h2[data-v-b9691780]{font-size:20px}p[data-v-b9691780],small[data-v-b9691780],span[data-v-b9691780],dd[data-v-b9691780],dt[data-v-b9691780]{color:#607083}button[data-v-b9691780],select[data-v-b9691780],input[data-v-b9691780]{border:1px solid #c9d3df;border-radius:6px;background:#fff;color:#18222d;min-height:34px;padding:0 10px;font:inherit}button[data-v-b9691780]{cursor:pointer;transition:border-color .16s ease,box-shadow .16s ease,background .16s ease}button[data-v-b9691780]:not(:disabled):hover,select[data-v-b9691780]:focus,input[data-v-b9691780]:focus{border-color:#2d6cdf;box-shadow:0 0 0 3px #2d6cdf1f;outline:none}button[data-v-b9691780]:disabled{cursor:not-allowed;opacity:.55}.primary[data-v-b9691780]{background:#1d6f68;border-color:#1d6f68;color:#fff}.tabs[data-v-b9691780]{display:flex;gap:6px;margin:16px 0}.tabs button[data-v-b9691780]{background:#f8fafc}.tabs button.active[data-v-b9691780],.state-buttons button.active[data-v-b9691780]{background:#17202b;border-color:#17202b;color:#fff}.role-layout[data-v-b9691780]{display:grid;grid-template-columns:minmax(220px,280px) 1fr;gap:16px}.role-list[data-v-b9691780]{display:grid;gap:8px;align-content:start}.role-create[data-v-b9691780]{display:grid;gap:8px;border:1px solid #d7dee8;border-radius:8px;background:#fff;padding:10px;box-shadow:0 4px 14px #2030480d}.role-item[data-v-b9691780]{display:flex;justify-content:space-between;align-items:center;min-height:58px;text-align:left}.role-item span[data-v-b9691780],.command-main[data-v-b9691780]{display:grid;gap:3px;min-width:0}.role-item.active[data-v-b9691780]{border-color:#2d6cdf;box-shadow:inset 3px 0 #2d6cdf,0 4px 14px #2d6cdf1f}.role-item em[data-v-b9691780]{font-style:normal;color:#9a5a00}.detail[data-v-b9691780]{min-width:0}.detail-head[data-v-b9691780]{justify-content:space-between;margin-bottom:12px}.detail-tools[data-v-b9691780]{flex-wrap:wrap;justify-content:flex-end}.member-panel[data-v-b9691780]{display:grid;gap:10px;border:1px solid #d7dee8;border-radius:8px;background:#fff;padding:12px;margin-bottom:12px;box-shadow:0 4px 14px #2030480d}.member-panel>div[data-v-b9691780]:first-child{display:flex;justify-content:space-between;gap:12px}.member-list[data-v-b9691780]{display:flex;flex-wrap:wrap;gap:6px;min-height:28px}.member-chip[data-v-b9691780]{display:inline-flex;align-items:center;gap:6px;border:1px solid #c9d3df;border-radius:999px;background:#f8fafc;padding:3px 4px 3px 10px}.member-chip button[data-v-b9691780]{min-height:24px;padding:0 8px;border-radius:999px}.filters[data-v-b9691780]{margin-bottom:12px}.plugin-bulk[data-v-b9691780]{flex-wrap:wrap;border:1px solid #d7dee8;border-radius:8px;background:#fff;padding:10px;margin-bottom:12px;box-shadow:0 4px 14px #2030480d}.filters input[data-v-b9691780]{flex:1;min-width:180px}.command-list[data-v-b9691780],.pending-panel[data-v-b9691780],.commands-table[data-v-b9691780]{display:grid;gap:8px}.command-row[data-v-b9691780],.pending-item[data-v-b9691780]{background:#fff;border:1px solid #d7dee8;border-radius:8px;padding:12px;box-shadow:0 4px 14px #2030480d}.command-row[data-v-b9691780]{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:12px;align-items:center}.command-main strong[data-v-b9691780],.command-main span[data-v-b9691780],.command-main small[data-v-b9691780]{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.state-buttons[data-v-b9691780]{display:grid;grid-template-columns:repeat(3,54px);gap:6px}.pending-panel[data-v-b9691780]{grid-template-columns:repeat(auto-fill,minmax(300px,1fr))}.review-table[data-v-b9691780]{grid-column:1 / -1;width:100%;border-collapse:collapse;overflow:hidden;border:1px solid #d7dee8;border-radius:8px;background:#fff;box-shadow:0 4px 14px #2030480d}.review-table th[data-v-b9691780],.review-table td[data-v-b9691780]{border-bottom:1px solid #e5ebf1;padding:10px;text-align:left;vertical-align:top}.review-table th[data-v-b9691780]{background:#f8fafc;color:#314155;font-weight:600}.review-table tr:last-child td[data-v-b9691780]{border-bottom:0}.pending-item[data-v-b9691780]{display:grid;gap:10px}.role-picker[data-v-b9691780]{display:grid;grid-template-columns:repeat(auto-fill,minmax(128px,1fr));gap:8px}.role-picker .check[data-v-b9691780]{border:1px solid #d7dee8;border-radius:6px;background:#f8fafc;min-height:32px;padding:0 8px}dl[data-v-b9691780]{display:grid;grid-template-columns:58px 1fr;gap:4px 8px;margin:0}dd[data-v-b9691780]{margin:0}.check[data-v-b9691780]{display:inline-flex;align-items:center;gap:6px;white-space:nowrap}.check input[data-v-b9691780]{min-height:0}.error[data-v-b9691780]{border:1px solid #e2a15d;background:#fff6e9;color:#85510d;border-radius:6px;padding:10px;margin-bottom:12px}.empty[data-v-b9691780]{padding:24px 0}@media (max-width: 760px){.new-auth-page[data-v-b9691780]{padding:12px}.topbar[data-v-b9691780],.detail-head[data-v-b9691780],.command-row[data-v-b9691780]{grid-template-columns:1fr;display:grid}.top-actions[data-v-b9691780],.filters[data-v-b9691780],.command-controls[data-v-b9691780],.detail-tools[data-v-b9691780],.member-add[data-v-b9691780],.plugin-bulk[data-v-b9691780]{flex-wrap:wrap}.role-layout[data-v-b9691780]{grid-template-columns:1fr}.state-buttons[data-v-b9691780]{grid-template-columns:repeat(3,minmax(0,1fr))}}

package/lib/index.d.ts

@@ -1,4 +1,4 @@
-import { Command, Context, Schema, Session } from 'koishi';
+import { Command, Context, Schema, Service, Session } from 'koishi';
 import type { Argv } from 'koishi';
 export declare const name = "new-auth";
 export declare const inject: {
@@ -9,7 +9,7 @@ type RoleType = 'builtin' | 'custom';
 type ScopeType = 'global' | 'guild';
 type CommandStatus = 'pending' | 'configured' | 'disabled';
 type PolicyState = 'inherit' | 'allow' | 'deny';
-type AutoAssignKind = 'public' | 'moderation' | 'owner' | 'admin' | 'legacy';
+type AutoAssignKind = 'ai' | 'legacy';
 type PluginAssignTarget = 'legacy' | 'bot-admin' | 'guild-owner' | 'guild-admin' | 'guild-member';
 export interface NewAuthCommandRecord {
     id: string;
@@ -82,6 +82,13 @@ declare module '@koishijs/plugin-console' {
             success: true;
             count: number;
         }>;
+        'newauth/generateAiSuggestion'(payload: AiSuggestionPayload): Promise<AutoAssignSuggestion>;
+        'newauth/generateAiSuggestions'(payload?: AutoAssignPayload): Promise<{
+            suggestions: Record<string, AutoAssignSuggestion>;
+        }>;
+        'newauth/configureCommandRoles'(payload: ConfigureCommandRolesPayload): Promise<{
+            success: true;
+        }>;
         'newauth/createRole'(payload: CreateRolePayload): Promise<{
             success: true;
         }>;
@@ -153,6 +160,14 @@ interface AutoAssignPayload {
     scope?: string;
     mode?: 'legacy' | 'advisor';
 }
+interface AiSuggestionPayload {
+    commandId: string;
+}
+interface ConfigureCommandRolesPayload {
+    commandId: string;
+    scope: string;
+    roleIds: string[];
+}
 interface CreateRolePayload {
     id: string;
     name: string;
@@ -177,25 +192,23 @@ export interface Config {
     botAdmins: string[];
     trustLegacyAuthorityAsAdmin: boolean;
     legacyAdminAuthority: number;
-    ownerRoleNames: string[];
-    adminRoleNames: string[];
-    allowGuildOverrideAuthorityMax: number;
     deniedMessage: string;
-    grantRuntimeCommandPermission: boolean;
-    raiseLegacyAuthority: boolean;
 }
 export declare const Config: Schema<Config>;
 export declare function apply(ctx: Context, config: Config): void;
-export declare class NewAuthService {
-    private ctx;
-    private config;
+export declare class NewAuthService extends Service {
+    config: Config;
     private commandCache;
+    private commandLocks;
     private adminSet;
     private ownerRoleNames;
     private adminRoleNames;
     constructor(ctx: Context, config: Config);
     start(): Promise<void>;
     registerCommand(command: Command): Promise<string | undefined>;
+    private writeCommandRecord;
+    private ensureSelfCommandPolicies;
+    private cleanupSelfCommandDuplicates;
     intercept(argv: Argv): Promise<string | undefined>;
     canExecute(session: Session, commandId: string): Promise<{
         allowed: boolean;
@@ -262,6 +275,17 @@ export declare class NewAuthService {
     setCommandGuildOverride(input: string, allowGuildOverride: boolean): Promise<NewAuthCommandRecord>;
     setCommandPolicy(scope: string, roleId: string, input: string, state: PolicyState): Promise<NewAuthCommandRecord>;
     applySuggestedPolicy(input: string, scope?: string, mode?: 'legacy' | 'advisor'): Promise<NewAuthCommandRecord>;
+    configureCommandRoles(input: string, scope?: string, roleIds?: string[]): Promise<NewAuthCommandRecord>;
+    generateAiSuggestion(input: string): Promise<AutoAssignSuggestion>;
+    generateAiSuggestionsForPending(): Promise<Record<string, AutoAssignSuggestion>>;
+    listGuildManageableCommands(session: Session, query?: string): Promise<{
+        command: NewAuthCommandRecord;
+        states: string[];
+    }[]>;
+    setGuildManagedPolicy(session: Session, roleId: string, input: string, state: PolicyState): Promise<{
+        command: NewAuthCommandRecord;
+        scope: string;
+    }>;
     autoAssignPending(scope?: string, mode?: 'legacy' | 'advisor'): Promise<number>;
     assignPluginCommands(plugin: string, scope?: string, target?: PluginAssignTarget): Promise<number>;
     getCommand(input: string): Promise<NewAuthCommandRecord>;
@@ -272,7 +296,10 @@ export declare class NewAuthService {
     private resolveCommandInput;
     private setPolicy;
     private getEffectivePolicy;
+    private ensureGuildManager;
     private getAutoAssignSuggestion;
+    private hasAiAdvisor;
+    private getAiAssignSuggestion;
     private ensureRoleMember;
     private ensureRoleExists;
     private hasPlatformRole;

package/lib/index.js

@@ -5,7 +5,7 @@ exports.apply = apply;
 const koishi_1 = require("koishi");
 const path_1 = require("path");
 exports.name = 'new-auth';
-exports.inject = { required: ['database'], optional: ['console'] };
+exports.inject = { required: ['database'], optional: ['console', 'chatluna'] };
 const BUILTIN_ROLES = [
     {
         id: 'bot-admin',
@@ -38,6 +38,11 @@ const BUILTIN_ROLES = [
         scopeType: 'global',
     },
 ];
+const OWNER_ROLE_NAMES = ['owner', 'guild-owner'];
+const ADMIN_ROLE_NAMES = ['admin', 'administrator', 'guild-admin', 'moderator'];
+const DEFAULT_ALLOW_GUILD_OVERRIDE_AUTHORITY_MAX = 2;
+const GRANT_RUNTIME_COMMAND_PERMISSION = true;
+const RAISE_LEGACY_AUTHORITY = false;
 exports.Config = koishi_1.Schema.object({
     botAdmins: koishi_1.Schema.array(String)
         .role('table')
@@ -51,26 +56,9 @@ exports.Config = koishi_1.Schema.object({
         .max(10)
         .description('旧 authority 管理员阈值。')
         .default(4),
-    ownerRoleNames: koishi_1.Schema.array(String)
-        .description('平台角色名/ID 命中这些值时识别为群主。')
-        .default(['owner', 'guild-owner', 'administrator']),
-    adminRoleNames: koishi_1.Schema.array(String)
-        .description('平台角色名/ID 命中这些值时识别为群管理员。')
-        .default(['admin', 'administrator', 'guild-admin', 'moderator']),
-    allowGuildOverrideAuthorityMax: koishi_1.Schema.number()
-        .min(0)
-        .max(10)
-        .description('旧 authority 建议值不高于该值时，默认认为允许群内自治。')
-        .default(3),
     deniedMessage: koishi_1.Schema.string()
         .description('权限不足时返回的提示。')
         .default('你没有权限使用该指令。'),
-    grantRuntimeCommandPermission: koishi_1.Schema.boolean()
-        .description('新权限系统放行后，临时授予本次 Koishi command 权限，绕过旧 command authority 校验。')
-        .default(true),
-    raiseLegacyAuthority: koishi_1.Schema.boolean()
-        .description('新权限系统放行后，临时提升 session.user.authority 以兼容插件内部硬编码判断。可能影响依赖旧 authority 的插件行为。')
-        .default(false),
 });
 function apply(ctx, config) {
     ctx.model.extend('new_auth_command', {
@@ -118,8 +106,6 @@ function apply(ctx, config) {
         primary: ['scope', 'roleId', 'commandId'],
     });
     const service = new NewAuthService(ctx, config);
-    ctx.provide('newauth', service);
-    ctx.on('ready', () => service.start());
     ctx.on('command-added', command => service.registerCommand(command));
     ctx.on('command-updated', command => service.registerCommand(command));
     ctx.before('command/execute', async (argv) => {
@@ -130,14 +116,15 @@ function apply(ctx, config) {
         registerConsole(ctx, service);
     });
 }
-class NewAuthService {
+class NewAuthService extends koishi_1.Service {
     constructor(ctx, config) {
-        this.ctx = ctx;
-        this.config = config;
+        super(ctx, 'newauth', true);
         this.commandCache = new Map();
+        this.commandLocks = new Map();
+        this.config = config;
         this.adminSet = new Set(config.botAdmins.map(normalizeKey));
-        this.ownerRoleNames = new Set(config.ownerRoleNames.map(normalizeKey));
-        this.adminRoleNames = new Set(config.adminRoleNames.map(normalizeKey));
+        this.ownerRoleNames = new Set(OWNER_ROLE_NAMES.map(normalizeKey));
+        this.adminRoleNames = new Set(ADMIN_ROLE_NAMES.map(normalizeKey));
     }
     async start() {
         await this.ensureBuiltinRoles();
@@ -150,6 +137,17 @@ class NewAuthService {
             return;
         const now = new Date();
         const record = this.createCommandRecord(command, now);
+        const previous = this.commandLocks.get(record.id) || Promise.resolve(undefined);
+        const next = previous.then(() => this.writeCommandRecord(command, record, now));
+        this.commandLocks.set(record.id, next);
+        next.finally(() => {
+            if (this.commandLocks.get(record.id) === next)
+                this.commandLocks.delete(record.id);
+        });
+        return next;
+    }
+    async writeCommandRecord(command, record, now) {
+        await this.cleanupSelfCommandDuplicates(record);
         const [existing] = await this.ctx.database.get('new_auth_command', { id: record.id });
         if (existing) {
             const next = {
@@ -161,17 +159,41 @@ class NewAuthService {
                 legacyAuthority: record.legacyAuthority,
                 updatedAt: now,
             };
+            if (this.isSelfCommand(command)) {
+                next.status = 'configured';
+            }
             await this.ctx.database.set('new_auth_command', record.id, next);
             this.commandCache.set(record.id, { ...existing, ...next });
+            await this.ensureSelfCommandPolicies(record);
             return record.id;
         }
         await this.ctx.database.create('new_auth_command', record);
         this.commandCache.set(record.id, record);
-        if (this.isSelfCommand(command)) {
-            await this.setPolicy('global', 'bot-admin', record.id, 'allow');
-        }
+        await this.ensureSelfCommandPolicies(record);
         return record.id;
     }
+    async ensureSelfCommandPolicies(record) {
+        if (!isSelfCommandPath(record.commandPath))
+            return;
+        await this.setPolicy('global', 'bot-admin', record.id, 'allow');
+        if (isGuildAutonomyCommandPath(record.commandPath)) {
+            await this.setPolicy('global', 'guild-owner', record.id, 'allow');
+        }
+    }
+    async cleanupSelfCommandDuplicates(record) {
+        if (!isSelfCommandPath(record.commandPath))
+            return;
+        const staleRecords = await this.ctx.database.get('new_auth_command', {
+            commandPath: record.commandPath,
+        });
+        for (const stale of staleRecords) {
+            if (stale.id === record.id)
+                continue;
+            await this.ctx.database.remove('new_auth_policy', { commandId: stale.id });
+            await this.ctx.database.remove('new_auth_command', { id: stale.id });
+            this.commandCache.delete(stale.id);
+        }
+    }
     async intercept(argv) {
         const { command, session, options } = argv;
         if (!command || !session)
@@ -183,10 +205,10 @@ class NewAuthService {
         if (!result.allowed) {
             return command.config.showWarning ? this.config.deniedMessage : '';
         }
-        if (this.config.grantRuntimeCommandPermission) {
+        if (GRANT_RUNTIME_COMMAND_PERMISSION) {
             this.grantRuntimeCommandPermission(session, command, options || {});
         }
-        if (this.config.raiseLegacyAuthority && session.user) {
+        if (RAISE_LEGACY_AUTHORITY && session.user) {
             const user = session.user;
             const legacyAuthority = result.command?.legacyAuthority ?? command.config.authority ?? 0;
             if ((user.authority ?? 0) < legacyAuthority) {
@@ -292,7 +314,7 @@ class NewAuthService {
     }
     async listRoles() {
         const records = await this.ctx.database.get('new_auth_role', {});
-        return records.sort((a, b) => Number(a.builtin) - Number(b.builtin) || a.id.localeCompare(b.id));
+        return records.sort((a, b) => Number(b.builtin) - Number(a.builtin) || a.id.localeCompare(b.id));
     }
     async listPolicies() {
         return this.ctx.database.get('new_auth_policy', {});
@@ -347,7 +369,7 @@ class NewAuthService {
             members,
             scopes,
             pendingCount: commands.filter(command => command.status === 'pending').length,
-            autoAssignAvailable: true,
+            autoAssignAvailable: this.hasAiAdvisor(),
         };
     }
     async addBotAdmin(uid) {
@@ -365,7 +387,7 @@ class NewAuthService {
     }
     async createCustomRole(id, name, scopeType = 'guild') {
         if (BUILTIN_ROLES.some(role => role.id === id)) {
-            throw new Error(`cannot overwrite builtin role: ${id}`);
+            throw new Error(`不能覆盖内置角色：${id}`);
         }
         const now = new Date();
         const [existing] = await this.ctx.database.get('new_auth_role', { id });
@@ -412,6 +434,9 @@ class NewAuthService {
     }
     async setCommandStatus(input, status) {
         const command = await this.resolveCommandInput(input);
+        if (status === 'disabled' && isSelfCommandPath(command.commandPath)) {
+            throw new Error('不能禁用 new-auth 管理指令');
+        }
         await this.ctx.database.set('new_auth_command', command.id, {
             status,
             updatedAt: new Date(),
@@ -429,6 +454,7 @@ class NewAuthService {
         return command;
     }
     async setCommandPolicy(scope, roleId, input, state) {
+        await this.ensureRoleExists(roleId);
         const command = await this.resolveCommandInput(input);
         await this.setPolicy(scope, roleId, command.id, state);
         if (state !== 'inherit' && command.status === 'pending') {
@@ -439,7 +465,7 @@ class NewAuthService {
     async applySuggestedPolicy(input, scope = 'global', mode = 'legacy') {
         const command = await this.resolveCommandInput(input);
         const suggestion = mode === 'advisor'
-            ? this.getAutoAssignSuggestion(command)
+            ? await this.getAiAssignSuggestion(command)
             : getLegacySuggestion(command.legacyAuthority);
         await this.applyRolesToCommand(scope, command.id, suggestion.roles);
         if (command.status === 'pending') {
@@ -447,6 +473,60 @@ class NewAuthService {
         }
         return command;
     }
+    async configureCommandRoles(input, scope = 'global', roleIds = []) {
+        const command = await this.resolveCommandInput(input);
+        await this.applyRolesToCommand(scope, command.id, roleIds);
+        if (command.status === 'pending') {
+            await this.setCommandStatus(command.id, 'configured');
+        }
+        return command;
+    }
+    async generateAiSuggestion(input) {
+        const command = await this.resolveCommandInput(input);
+        return this.getAiAssignSuggestion(command);
+    }
+    async generateAiSuggestionsForPending() {
+        const commands = await this.listCommands({ pending: true });
+        const suggestions = {};
+        for (const command of commands) {
+            suggestions[command.id] = await this.getAiAssignSuggestion(command);
+        }
+        return suggestions;
+    }
+    async listGuildManageableCommands(session, query) {
+        const scope = await this.ensureGuildManager(session);
+        const commands = (await this.listCommands({ all: true, query }))
+            .filter(command => command.status === 'configured' && command.allowGuildOverride);
+        const roles = ['guild-member', 'guild-admin', 'guild-owner'];
+        const rows = [];
+        for (const command of commands) {
+            const states = [];
+            for (const roleId of roles) {
+                states.push(`${roleId}:${await this.getEffectivePolicy(scope, roleId, command.id)}`);
+            }
+            rows.push({ command, states });
+        }
+        return rows;
+    }
+    async setGuildManagedPolicy(session, roleId, input, state) {
+        const scope = await this.ensureGuildManager(session);
+        const role = await this.ensureRoleExists(roleId);
+        if (role.scopeType !== 'guild') {
+            throw new Error('群内自治只能配置群内角色');
+        }
+        if (role.id === 'bot-admin') {
+            throw new Error('群内自治不能配置 Bot 管理员');
+        }
+        const command = await this.resolveCommandInput(input);
+        if (command.status !== 'configured') {
+            throw new Error('该指令尚未由 Koishi 管理员配置');
+        }
+        if (!command.allowGuildOverride) {
+            throw new Error('该指令不允许群内自治');
+        }
+        await this.setPolicy(scope, role.id, command.id, state);
+        return { command, scope };
+    }
     async autoAssignPending(scope = 'global', mode = 'advisor') {
         const commands = await this.listCommands({ pending: true });
         for (const command of commands) {
@@ -500,10 +580,13 @@ class NewAuthService {
     async applyRolesToCommand(scope, commandId, roleIds) {
         const roles = await this.listRoles();
         const knownRoles = new Set(roles.map(role => role.id));
-        for (const roleId of roleIds) {
+        const selectedRoles = new Set(roleIds);
+        for (const roleId of selectedRoles) {
             if (!knownRoles.has(roleId))
-                continue;
-            await this.setPolicy(scope, roleId, commandId, 'allow');
+                throw new Error(`未找到角色：${roleId}`);
+        }
+        for (const role of roles) {
+            await this.setPolicy(scope, role.id, commandId, selectedRoles.has(role.id) ? 'allow' : 'deny');
         }
     }
     createCommandRecord(command, now) {
@@ -512,7 +595,7 @@ class NewAuthService {
         const commandPath = command.name;
         const aliases = Object.keys(command._aliases || {});
         const id = makeCommandId(plugin, commandPath);
-        return {
+        const record = {
             id,
             name: command.displayName || commandPath,
             commandPath,
@@ -521,15 +604,20 @@ class NewAuthService {
             description: this.getDescription(command),
             legacyAuthority,
             status: this.isSelfCommand(command) ? 'configured' : 'pending',
-            allowGuildOverride: legacyAuthority <= this.config.allowGuildOverrideAuthorityMax,
+            allowGuildOverride: legacyAuthority <= DEFAULT_ALLOW_GUILD_OVERRIDE_AUTHORITY_MAX,
             createdAt: now,
             updatedAt: now,
         };
+        return record;
     }
     getDescription(command) {
         const key = `commands.${command.name}.description`;
         const value = this.ctx.i18n.get(key);
-        return Array.isArray(value) ? value[0] ?? '' : value ?? '';
+        if (typeof value === 'string')
+            return value;
+        if (Array.isArray(value))
+            return stringifyI18nValue(value[0]);
+        return stringifyI18nValue(value);
     }
     async resolveCommandInput(input) {
         const normalized = input.trim();
@@ -541,7 +629,7 @@ class NewAuthService {
             || record.name === normalized
             || record.aliases.includes(normalized));
         if (!match)
-            throw new Error(`command not found: ${input}`);
+            throw new Error(`未找到指令：${input}`);
         return match;
     }
     async setPolicy(scope, roleId, commandId, state) {
@@ -568,69 +656,79 @@ class NewAuthService {
         });
         return global?.state ?? 'inherit';
     }
-    getAutoAssignSuggestion(command) {
-        const text = normalizeKey([
-            command.commandPath,
-            command.name,
-            command.plugin,
-            command.description,
-            command.aliases.join(' '),
-        ].join(' '));
-        const dangerous = [
-            'plugin', 'market', 'install', 'uninstall', 'reload', 'restart',
-            'config', 'database', 'db', 'file', 'delete', 'remove', 'exec',
-            'eval', 'shell', 'token', 'env', 'broadcast',
-            '插件', '市场', '安装', '卸载', '重载', '重启', '配置', '数据库',
-            '文件', '删除', '执行', '脚本', '令牌', '环境变量', '广播',
-        ];
-        if (dangerous.some(keyword => text.includes(keyword))) {
-            return {
-                kind: 'admin',
-                roles: ['bot-admin'],
-                label: '仅 Bot 管理员',
-                reason: '命中实例级或高危操作关键词。',
-            };
+    async ensureGuildManager(session) {
+        if (!session?.platform || !session.guildId || session.isDirect) {
+            throw new Error('只能在群聊中管理群内自治');
+        }
+        const roles = await this.resolveRoles(session);
+        if (!roles.includes('bot-admin') && !roles.includes('guild-owner')) {
+            throw new Error('只有 Bot 管理员或当前群群主可以管理群内自治');
         }
-        const moderation = [
-            'ban', 'mute', 'kick', 'warn', 'recall', 'approve', 'blacklist',
-            '禁言', '踢', '封禁', '警告', '撤回', '审核', '黑名单',
-        ];
-        if (moderation.some(keyword => text.includes(keyword))) {
+        return getScope(session);
+    }
+    getAutoAssignSuggestion(command) {
+        const fallback = getLegacySuggestion(command.legacyAuthority);
+        return {
+            kind: 'legacy',
+            roles: fallback.roles,
+            label: '等待 AI 分配',
+            reason: '未调用 AI 时只显示旧 authority 建议，不做关键词推断。',
+        };
+    }
+    hasAiAdvisor() {
+        const chatluna = this.ctx.chatluna;
+        const defaultModel = chatluna?.currentConfig?.defaultModel ?? chatluna?.config?.defaultModel;
+        return typeof chatluna?.createChatModel === 'function'
+            && typeof defaultModel === 'string'
+            && !!defaultModel
+            && defaultModel !== '无';
+    }
+    async getAiAssignSuggestion(command) {
+        const fallback = getLegacySuggestion(command.legacyAuthority);
+        if (!this.hasAiAdvisor()) {
             return {
-                kind: 'moderation',
-                roles: ['guild-admin', 'guild-owner'],
-                label: '群管理员和群主',
-                reason: '命中群管理操作关键词。',
+                kind: 'legacy',
+                roles: fallback.roles,
+                label: fallback.label,
+                reason: 'ChatLuna 默认模型不可用，已回退到旧 authority 建议。',
             };
         }
-        const ownerOnly = ['welcome', 'setting', 'notice', 'announce', '欢迎', '公告', '群设置'];
-        if (ownerOnly.some(keyword => text.includes(keyword))) {
+        try {
+            const roles = await this.listRoles();
+            const chatluna = this.ctx.chatluna;
+            const defaultModel = chatluna.currentConfig?.defaultModel ?? chatluna.config?.defaultModel;
+            const modelRef = await chatluna.createChatModel(defaultModel);
+            const model = modelRef?.value;
+            if (typeof model?.invoke !== 'function')
+                throw new Error('ChatLuna 模型未就绪');
+            const output = await model.invoke(buildAiAdvisorPrompt(command, roles), {
+                maxTokens: 512,
+                signal: AbortSignal.timeout(60000),
+                configurable: {
+                    conversationId: 'newauth-permission-advisor',
+                    userId: 'newauth',
+                },
+            });
+            const parsed = parseAiAdvisorOutput(output);
+            const knownRoles = new Set(roles.map(role => role.id));
+            const selected = [...new Set(parsed.roles)].filter(roleId => knownRoles.has(roleId));
+            if (!selected.length)
+                throw new Error('AI 没有返回有效角色');
             return {
-                kind: 'owner',
-                roles: ['guild-owner'],
-                label: '群主',
-                reason: '更适合群主进行群内自治配置。',
+                kind: 'ai',
+                roles: selected,
+                label: selected.map(roleId => roles.find(role => role.id === roleId)?.name ?? roleId).join('、'),
+                reason: parsed.reason || '由 ChatLuna 默认模型生成。',
             };
         }
-        const publicUse = [
-            'help', 'sign', 'rank', 'weather', 'search', 'music', 'play', 'query',
-            '帮助', '签到', '排行', '天气', '搜索', '点歌', '播放', '查询',
-        ];
-        if (publicUse.some(keyword => text.includes(keyword))) {
+        catch (error) {
             return {
-                kind: 'public',
-                roles: ['guild-member', 'guild-admin', 'guild-owner'],
-                label: '群成员及以上',
-                reason: '命中普通用户功能关键词。',
+                kind: 'legacy',
+                roles: fallback.roles,
+                label: fallback.label,
+                reason: `AI 分配失败，已回退到旧 authority 建议：${error instanceof Error ? error.message : String(error)}`,
             };
         }
-        const fallback = getLegacySuggestion(command.legacyAuthority);
-        return {
-            kind: 'legacy',
-            roles: fallback.roles,
-            label: fallback.label,
-            reason: '未命中明确语义，回退到旧 authority 建议。',
-        };
     }
     async ensureRoleMember(roleId, platform, userId, scope) {
         await this.ensureRoleExists(roleId);
@@ -643,7 +741,7 @@ class NewAuthService {
     async ensureRoleExists(roleId) {
         const [role] = await this.ctx.database.get('new_auth_role', { id: roleId });
         if (!role)
-            throw new Error(`role not found: ${roleId}`);
+            throw new Error(`未找到角色：${roleId}`);
         return role;
     }
     hasPlatformRole(session, roleNames) {
@@ -674,7 +772,7 @@ class NewAuthService {
         return [...(this.ctx.$commander?._commandList || [])];
     }
     isSelfCommand(command) {
-        return command.name === 'newauth' || command.name.startsWith('newauth/');
+        return isSelfCommandPath(command.name);
     }
 }
 exports.NewAuthService = NewAuthService;
@@ -723,6 +821,16 @@ function registerConsole(ctx, service) {
         ctx.console.refresh('newauth');
         return { success: true, count };
     }, { authority: 4 });
+    ctx.console.addListener('newauth/generateAiSuggestion', async (payload) => {
+        return service.generateAiSuggestion(payload.commandId);
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/generateAiSuggestions', async () => {
+        const suggestions = await service.generateAiSuggestionsForPending();
+        return { suggestions };
+    }, { authority: 4 });
+    ctx.console.addListener('newauth/configureCommandRoles', async (payload) => {
+        return ok(service.configureCommandRoles(payload.commandId, payload.scope, payload.roleIds));
+    }, { authority: 4 });
     ctx.console.addListener('newauth/createRole', async (payload) => {
         return ok(service.createCustomRole(payload.id, payload.name, payload.scopeType));
     }, { authority: 4 });
@@ -794,6 +902,15 @@ function registerManagementCommands(ctx, config, service) {
         const record = await service.setCommandPolicy(scope, roleId, command, 'inherit');
         return `已恢复继承：${scope} ${roleId} -> ${record.commandPath}`;
     });
+    ctx.command('newauth.assign <command> <roleIds> [scope]', '按角色配置单个指令，roleIds 用逗号分隔', { authority })
+        .action(async (_, command, roleIds, scope = 'global') => {
+        const roles = String(roleIds || '')
+            .split(',')
+            .map(role => role.trim())
+            .filter(Boolean);
+        const record = await service.configureCommandRoles(command, scope, roles);
+        return `已配置：${record.commandPath} -> ${roles.join(', ') || '无角色'} (${scope})`;
+    });
     ctx.command('newauth.disable <command>', '禁用指令', { authority })
         .action(async (_, command) => {
         const record = await service.setCommandStatus(command, 'disabled');
@@ -837,6 +954,38 @@ function registerManagementCommands(ctx, config, service) {
         const count = await service.copyRolePolicies(sourceRoleId, targetRoleId, scope);
         return `已复制 ${count} 条策略：${sourceRoleId} -> ${targetRoleId} (${scope})`;
     });
+    ctx.command('newauth.guild', '管理当前群的新权限自治', { authority: 0 })
+        .action(async ({ session }) => {
+        const rows = await service.listGuildManageableCommands(session);
+        return [
+            `当前群可自治指令：${rows.length}`,
+            '使用 newauth.guild.commands 查看列表。',
+        ].join('\n');
+    });
+    ctx.command('newauth.guild.commands [query:text]', '列出当前群可自治指令', { authority: 0 })
+        .action(async ({ session }, query) => {
+        const rows = await service.listGuildManageableCommands(session, query);
+        if (!rows.length)
+            return '当前群没有可自治指令。';
+        return rows.map(({ command, states }) => {
+            return `${command.commandPath} (${command.id}) ${states.join(' ')}`;
+        }).join('\n');
+    });
+    ctx.command('newauth.guild.allow <roleId> <command>', '允许当前群角色使用可自治指令', { authority: 0 })
+        .action(async ({ session }, roleId, command) => {
+        const result = await service.setGuildManagedPolicy(session, roleId, command, 'allow');
+        return `已允许：${result.scope} ${roleId} -> ${result.command.commandPath}`;
+    });
+    ctx.command('newauth.guild.deny <roleId> <command>', '关闭当前群角色使用可自治指令', { authority: 0 })
+        .action(async ({ session }, roleId, command) => {
+        const result = await service.setGuildManagedPolicy(session, roleId, command, 'deny');
+        return `已关闭：${result.scope} ${roleId} -> ${result.command.commandPath}`;
+    });
+    ctx.command('newauth.guild.inherit <roleId> <command>', '恢复当前群角色的继承策略', { authority: 0 })
+        .action(async ({ session }, roleId, command) => {
+        const result = await service.setGuildManagedPolicy(session, roleId, command, 'inherit');
+        return `已恢复继承：${result.scope} ${roleId} -> ${result.command.commandPath}`;
+    });
     ctx.command('newauth.plugin.assign <plugin> <target> [scope]', '批量配置插件指令', { authority })
         .action(async (_, plugin, target, scope = 'global') => {
         if (!['legacy', 'bot-admin', 'guild-owner', 'guild-admin', 'guild-member'].includes(target)) {
@@ -895,15 +1044,96 @@ function getAssignTargetRoles(target) {
         return ['guild-owner'];
     return ['bot-admin'];
 }
+function buildAiAdvisorPrompt(command, roles) {
+    const roleLines = roles.map(role => {
+        return `- ${role.id}: ${role.name}，${role.scopeType === 'global' ? '全局' : '群内'}，${role.builtin ? '内置' : '自定义'}`;
+    }).join('\n');
+    return [
+        '你是 Koishi Bot 的指令权限分配助手。请根据指令元数据判断此指令应该分配给哪些角色。',
+        '必须遵守：群主不是 Bot 管理员；实例级、配置级、文件/数据库/插件/执行类能力应保守；不确定时选择 bot-admin。',
+        '只允许返回 JSON，不要 Markdown，不要解释 JSON 之外的内容。',
+        'JSON 格式：{"roles":["role-id"],"reason":"一句中文理由"}',
+        '',
+        '可选角色：',
+        roleLines,
+        '',
+        '指令：',
+        JSON.stringify({
+            id: command.id,
+            name: command.name,
+            commandPath: command.commandPath,
+            aliases: command.aliases,
+            plugin: command.plugin,
+            description: command.description,
+            legacyAuthority: command.legacyAuthority,
+        }, null, 2),
+    ].join('\n');
+}
+function parseAiAdvisorOutput(output) {
+    const text = extractMessageText(output);
+    const fenced = /```(?:json)?\s*([\s\S]*?)```/.exec(text);
+    const raw = fenced?.[1] ?? /\{[\s\S]*\}/.exec(text)?.[0] ?? text;
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed.roles))
+        throw new Error('AI 返回格式缺少 roles 数组');
+    return {
+        roles: parsed.roles.filter(role => typeof role === 'string'),
+        reason: typeof parsed.reason === 'string' ? parsed.reason : '',
+    };
+}
+function extractMessageText(value) {
+    if (value == null)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return String(value);
+    if (Array.isArray(value))
+        return value.map(extractMessageText).join('');
+    if (typeof value === 'object') {
+        const record = value;
+        if ('content' in record)
+            return extractMessageText(record.content);
+        if ('text' in record)
+            return extractMessageText(record.text);
+    }
+    return String(value);
+}
 function omitPrimary(record, key) {
     const { [key]: _value, ...rest } = record;
     return rest;
 }
+function isSelfCommandPath(commandPath) {
+    return commandPath === 'newauth'
+        || commandPath.startsWith('newauth/')
+        || commandPath.startsWith('newauth.');
+}
+function isGuildAutonomyCommandPath(commandPath) {
+    return commandPath === 'newauth.guild'
+        || commandPath.startsWith('newauth.guild.');
+}
 function inferPlugin(command) {
+    if (isSelfCommandPath(command.name))
+        return 'new-auth';
     const source = command.caller?.scope || command.ctx?.scope;
     const plugin = source?.plugin?.name || source?.uid || source?.id || 'unknown';
     return String(plugin).replace(/^koishi-plugin-/, '') || 'unknown';
 }
+function stringifyI18nValue(value) {
+    if (value == null)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return String(value);
+    if (Array.isArray(value))
+        return value.map(stringifyI18nValue).filter(Boolean).join('\n');
+    if (typeof value === 'object') {
+        const record = value;
+        return stringifyI18nValue(record['zh-CN'] ?? record.zh ?? record[''] ?? Object.values(record)[0]);
+    }
+    return '';
+}
 function makeCommandId(plugin, commandPath) {
     return `command:${normalizeSegment(plugin)}:${normalizeSegment(commandPath)}`;
 }
@@ -919,7 +1149,7 @@ function getScope(session) {
 function parseUid(uid) {
     const index = uid.indexOf(':');
     if (index <= 0 || index === uid.length - 1) {
-        throw new Error('uid must be platform:userId');
+        throw new Error('UID 必须为 platform:userId 格式');
     }
     return {
         platform: uid.slice(0, index),

package/newauth.md

@@ -488,7 +488,7 @@ Bot 管理
 
 ## 9.3 当前范围切换
 
-页面顶部有范围选择：
+页面内有范围选择：
 
 ```txt
 配置范围：
@@ -586,7 +586,7 @@ Bot 管理
 数据库管理：不允许群内自治
 ```
 
-群主打开自己群的配置页时，只能看到：
+群主打开自己群的配置页时（通过指令列出 而没有webui），只能看到：
 
 ```txt
 允许群内自治的指令
@@ -1214,7 +1214,7 @@ deny:
 
 ## 20.5 Platform Role Provider
 
-负责把平台身份转为角色。
+负责把平台身份转为角色。（Onebot平台会自动按QQ号来解析用户平台名称）
 
 例如：
 
@@ -1454,5 +1454,5 @@ authority 只做建议，不直接授权；
 
 ---
 
-KOISHI侧边栏的图标不使用默认的 使用⌗
-同时根据F:\chatluna-1.4.0-alpha.17 为指令权限限制制作一个AI自动分配 
+KOISHI侧边栏的图标不使用默认的 使用“⌗”
+同时根据F:\chatluna-1.4.0-alpha.17 为指令权限限制制作一个AI自动分配（即：让AI来配置节点应该给哪个组）

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "koishi-plugin-new-auth",
-  "version": "0.3.1",
-  "description": "Role and scope based command permission layer for Koishi.",
+  "version": "0.4.4",
+  "description": "Koishi 的角色与作用域指令权限系统。",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "files": [
@@ -49,6 +49,10 @@
     "service": {
       "required": [
         "database"
+      ],
+      "optional": [
+        "console",
+        "chatluna"
       ]
     }
   }