myagent-ai 1.23.19 → 1.23.21

package/web/ui/admin/admin-org.js

@@ -0,0 +1,283 @@
+// ========== Organization + Departments ==========
+(function(){
+try {
+// ========== Organization ==========
+async function renderOrganization(){
+  const [org,info]=await Promise.all([api('/api/organization'),api('/api/organization/info')]);
+  if(org.error){$('content').innerHTML='<div class="empty" style="color:var(--danger)">加载失败: '+escHtml(org.error)+'</div>';return}
+  const cfg=org.organization||org;
+  const inf=info.info||info||{};
+  let html=`<div class="card"><h3>组织配置</h3>
+    <div class="form-row">
+      <div class="form-group"><label>启用组织管理</label><label class="toggle"><input type="checkbox" id="orgEnabled" ${cfg.enabled?'checked':''}><span class="slider"></span></label></div>
+      <div class="form-group"><label>知识库管理员</label><input id="orgAdmin" value="${escHtml(cfg.knowledge_admin||'')}" placeholder="管理员用户名"></div>
+    </div>
+    <div class="flex gap-8 mt-16"><button class="btn btn-primary" onclick="saveOrgConfig()">保存配置</button></div></div>`;
+  html+=`<div class="card"><h3>组织信息</h3>
+    <div class="form-row">
+      <div class="form-group"><label>组织名称</label><input id="orgName" value="${escHtml(inf.name||'')}" placeholder="我的组织"></div>
+      <div class="form-group"><label>组织描述</label><input id="orgDesc" value="${escHtml(inf.description||'')}" placeholder="组织简介"></div>
+      <div class="form-group"><label>联系方式</label><input id="orgContact" value="${escHtml(inf.contact||'')}" placeholder="联系邮箱或电话"></div>
+      <div class="form-group"><label>网站</label><input id="orgWebsite" value="${escHtml(inf.website||'')}" placeholder="https://..."></div>
+    </div>
+    <div class="flex gap-8 mt-16"><button class="btn btn-primary" onclick="saveOrgInfo()">保存信息</button></div></div>`;
+  // 知识库 — 未启用组织时隐藏
+  const orgEnabled=cfg.enabled;
+  html+=`<div class="card" id="orgKBCard"><div class="flex justify-between items-center mb-16">
+    <h3 style="margin:0">组织知识库</h3>
+    <div id="orgKBActions">${orgEnabled?'<button class="btn btn-sm btn-primary" onclick="uploadOrgKnowledge(false)">上传文件</button> <button class="btn btn-sm btn-secondary" onclick="uploadOrgKnowledge(true)">📁 上传文件夹</button>':''}</div></div>
+    <div id="orgKBList"><div class="empty">${orgEnabled?'加载中...':'组织管理未启用，请先启用后再使用知识库'}</div></div></div>`;
+  $('content').innerHTML=html;
+  if(orgEnabled)loadOrgKnowledge();
+}
+async function saveOrgConfig(){
+  const r=await api('/api/organization',{method:'PUT',body:JSON.stringify({enabled:$('orgEnabled').checked,knowledge_admin:$('orgAdmin').value})});
+  if(r.error){showToast(r.error,'danger');return}showToast('已保存','success');renderOrganization();
+}
+async function saveOrgInfo(){
+  const r=await api('/api/organization/info',{method:'PUT',body:JSON.stringify({name:$('orgName').value,description:$('orgDesc').value,contact:$('orgContact').value,website:$('orgWebsite').value})});
+  if(r.error){showToast(r.error,'danger');return}showToast('已保存','success');
+}
+async function loadOrgKnowledge(){
+  const files=await api('/api/organization/knowledge');
+  const el=document.getElementById('orgKBList');if(!el)return;
+  if(!files||!files.length){el.innerHTML='<div class="empty">暂无知识库文件</div>';return}
+  let html='<div class="table-wrap"><table><tr><th>文件名</th><th>大小</th><th>操作</th></tr>';
+  for(const f of files){
+    html+=`<tr><td>${escHtml(f.name||f.path)}</td><td>${f.size?f.size>1024?(f.size/1024).toFixed(1)+' KB':f.size+' B':'-'}</td>
+      <td><button class="btn btn-sm btn-ghost" onclick="viewOrgKBFile('${escHtml(f.path||f.name)}')">查看</button>
+      <button class="btn btn-sm btn-ghost" onclick="downloadOrgKBFile('${escHtml(f.path||f.name)}')">下载</button>
+      <button class="btn btn-sm btn-danger" onclick="deleteOrgKBFile('${escHtml(f.path||f.name)}')">删除</button></td></tr>`;
+  }
+  html+='</table></div>';el.innerHTML=html;
+}
+function uploadOrgKnowledge(folderMode){
+  const input=document.createElement('input');input.type='file';input.multiple=true;
+  if(folderMode){input.webkitdirectory=true;}
+  input.onchange=async()=>{
+    const fd=new FormData();
+    for(const f of input.files){
+      // 文件夹上传时保留相对路径
+      if(f.webkitRelativePath){fd.append('files',f,{headers:{'X-File-Path':f.webkitRelativePath}});}
+      else{fd.append('files',f);}
+    }
+    showToast('正在上传...','info');
+    const r=await fetch(API+'/api/organization/knowledge/upload',{method:'POST',body:fd});
+    const data=await r.json();
+    if(data.error){showToast(data.error,'danger');return}
+    const total=data.results?data.results.length:0;
+    const okCount=data.results?data.results.filter(x=>x.ok).length:0;
+    showToast(`上传完成: ${okCount}/${total} 文件成功`,okCount===total?'success':'warning');
+    loadOrgKnowledge();
+  };input.click();
+}
+async function viewOrgKBFile(path){
+  const r=await fetch(API+'/api/organization/knowledge/file?path='+encodeURIComponent(path));
+  const data=await r.json();
+  if(data.error){showToast(data.error,'danger');return}
+  const content=typeof data==='string'?data:(data.content||JSON.stringify(data,null,2));
+  $('modalContainer').innerHTML=`<div class="modal-overlay" onclick="closeModal()"><div class="modal" onclick="event.stopPropagation()" style="max-width:800px">
+    <h3>${escHtml(path)}</h3>
+    <div class="log-viewer" style="max-height:60vh;white-space:pre-wrap">${escHtml(content.slice(0,5000))}${content.length>5000?'\\n...(已截断)':''}</div>
+    <div class="flex gap-8 mt-16"><button class="btn btn-ghost" onclick="closeModal()">关闭</button></div>
+  </div></div>`;
+}
+async function downloadOrgKBFile(path){
+  const a=document.createElement('a');
+  a.href=API+'/api/organization/knowledge/file?path='+encodeURIComponent(path)+'&download=1';
+  a.download=path.split('/').pop();
+  a.click();
+}
+async function deleteOrgKBFile(path){
+  showConfirm('删除文件','确认删除 "'+escHtml(path)+'" 吗？',async()=>{
+    const r=await api('/api/organization/knowledge?path='+encodeURIComponent(path),{method:'DELETE'});
+    if(r.error){showToast(r.error,'danger');closeModal();return}closeModal();showToast('已删除','success');loadOrgKnowledge();
+  });
+}
+
+// ========== Departments ==========
+async function renderDepartments(){
+  const [tree,agents]=await Promise.all([api('/api/departments'),api('/api/agents')]);
+  if(tree.error){$('content').innerHTML='<div class="empty" style="color:var(--danger)">加载失败: '+escHtml(tree.error)+'</div>';return}
+  allAgentsCache=Array.isArray(agents)?agents:allAgentsCache;
+  const depts=Array.isArray(tree)?tree:(tree.children||[]);
+  let html=`<div class="flex justify-between items-center mb-16">
+    <div style="color:var(--text2);font-size:13px">共 ${countDepts(depts)} 个部门</div>
+    <button class="btn btn-primary" onclick="showCreateDeptModal()">+ 创建部门</button></div>`;
+  if(!depts.length){html+='<div class="empty">暂无部门，点击上方按钮创建</div>';$('content').innerHTML=html;return}
+  html+='<div id="deptTree">';
+  html+=renderDeptTree(depts,0);
+  html+='</div>';
+  $('content').innerHTML=html;
+}
+function countDepts(list){let c=0;for(const d of list||[]){c++;c+=countDepts(d.children||[])}return c}
+function renderDeptTree(list,depth){
+  let html='';
+  for(const d of list||[]){
+    const hasChildren=(d.children||[]).length>0;
+    const indent=depth*24;
+    html+=`<div style="margin-left:${indent}px;border:1px solid var(--border);border-radius:var(--radius);margin-bottom:8px;background:var(--surface);padding:12px 16px">
+      <div class="flex justify-between items-center">
+        <div class="flex items-center gap-8">
+          <span style="font-size:20px">${escHtml(d.emoji||'📁')}</span>
+          <div><div style="font-weight:600">${escHtml(d.name)} <span class="tag">${d.agent_count||0} 成员</span></div>
+          <div style="font-size:12px;color:var(--text2)">${escHtml(d.description||'无描述')} ${hasChildren?'· '+d.children.length+' 个子部门':''}</div></div>
+        </div>
+        <div class="flex gap-8">
+          <button class="btn btn-sm btn-ghost" onclick="showDeptDetail('${escHtml(d.path||d.name)}')">详情/管理成员</button>
+          <button class="btn btn-sm btn-primary" onclick="showCreateDeptModal('${escHtml(d.path||d.name)}')">子部门</button>
+          <button class="btn btn-sm btn-danger" onclick="deleteDept('${escHtml(d.path||d.name)}','${escHtml(d.name)}')">删除</button>
+        </div>
+      </div>
+      ${hasChildren?renderDeptTree(d.children,depth+1):''}
+    </div>`;
+  }
+  return html;
+}
+function showCreateDeptModal(parent){
+  $('modalContainer').innerHTML=`<div class="modal-overlay" onclick="closeModal()"><div class="modal" onclick="event.stopPropagation()">
+    <h3>${parent?'创建子部门':'创建部门'}</h3>
+    ${parent?'<div class="form-group"><label>父部门</label><input value="'+escHtml(parent)+'" disabled></div>':''}
+    <div class="form-row">
+      <div class="form-group"><label>部门名称 *</label><input id="deptName" placeholder="部门名称"></div>
+      <div class="form-group"><label>Emoji</label><input id="deptEmoji" placeholder="📁" maxlength="4"></div>
+    </div>
+    <div class="form-group"><label>描述</label><textarea id="deptDesc" rows="3" placeholder="部门描述..."></textarea></div>
+    <div class="flex gap-8 mt-16"><button class="btn btn-primary" onclick="doCreateDept('${escHtml(parent||'')}')">创建</button><button class="btn btn-ghost" onclick="closeModal()">取消</button></div>
+  </div></div>`;
+}
+async function doCreateDept(parent){
+  const r=await api('/api/departments',{method:'POST',body:JSON.stringify({name:$('deptName').value,emoji:$('deptEmoji').value,description:$('deptDesc').value,parent})});
+  if(r.error){showToast(r.error,'danger');return}closeModal();showToast('已创建','success');renderDepartments();
+}
+async function deleteDept(path,name){
+  showConfirm('删除部门','确认删除部门 "'+escHtml(name)+'" 及其所有子部门吗？',async()=>{
+    const r=await api(`/api/departments/${encodeURIComponent(path)}`,{method:'DELETE'});
+    if(r.error){showToast(r.error,'danger');closeModal();return}closeModal();showToast('已删除','success');renderDepartments();
+  });
+}
+async function showDeptDetail(path){
+  try {
+  const [dept,info,agents]=await Promise.all([api(`/api/departments/${encodeURIComponent(path)}`),api(`/api/departments/${encodeURIComponent(path)}/info`),api('/api/agents')]);
+  if(dept.error){showToast(dept.error,'danger');return}
+  // 刷新 allAgentsCache 确保最新
+  allAgentsCache=Array.isArray(agents)?agents:allAgentsCache;
+  // 描述和负责人从 dept 元数据读取（非 info API 的 dept.md 内容）
+  const deptDesc=dept.description||'';
+  const deptHead=dept.head||'';
+  // 获取所有 agent 用于添加
+  const allAgents=Array.isArray(allAgentsCache)?allAgentsCache:[];
+  const currentAgents=Array.isArray(dept.agents)?dept.agents:[];
+  // 构建可选 agent 列表（排除已添加的）
+  const availAgents=allAgents.filter(a=>!currentAgents.includes(a.path||a.name));
+  const agentOptions=availAgents.map(a=>`<option value="${escHtml(a.path||a.name)}">${escHtml((a.avatar_emoji||'🤖')+' '+(a.name||a.path))}</option>`).join('');
+  // 已有 agent 列表 — 改为行列表形式，每行带删除按钮
+  const agentListHtml=currentAgents.length?`<div style="display:flex;flex-direction:column;gap:6px">${currentAgents.map(aName=>{
+    const aInfo=allAgents.find(a=>(a.path||a.name)===aName);
+    const label=aInfo?((aInfo.avatar_emoji||'🤖')+' '+(aInfo.name||aName)):aName;
+    const isHead=aName===deptHead;
+    return `<div style="display:flex;align-items:center;justify-content:space-between;padding:8px 12px;background:var(--surface2);border-radius:8px;border:1px solid var(--border)">
+      <div style="display:flex;align-items:center;gap:8px">
+        <span>${isHead?'👑':'🤖'}</span>
+        <span style="font-weight:500">${escHtml(label)}</span>
+        ${isHead?'<span class="tag" style="font-size:11px">部长</span>':''}
+      </div>
+      <button class="btn btn-sm btn-danger" onclick="removeDeptAgent('${escHtml(path)}','${escHtml(aName)}')" style="padding:2px 10px;font-size:12px">删除</button>
+    </div>`;
+  }).join('')}</div>`:'<div style="padding:16px;text-align:center;color:var(--text3);font-size:13px;background:var(--surface2);border-radius:8px;border:1px dashed var(--border)">暂无成员</div>';
+
+  $('modalContainer').innerHTML=`<div class="modal-overlay" onclick="closeModal()"><div class="modal modal-wide" onclick="event.stopPropagation()">
+    <h3>${escHtml(dept.emoji||'📁')} ${escHtml(dept.name)}</h3>
+    <div class="form-row">
+      <div class="form-group"><label>部门名称</label><input id="ddName" value="${escHtml(dept.name||'')}"></div>
+      <div class="form-group"><label>Emoji</label><input id="ddEmoji" value="${escHtml(dept.emoji||'')}" maxlength="4"></div>
+    </div>
+    <div class="form-group"><label>描述</label><textarea id="ddDesc" rows="3">${escHtml(deptDesc)}</textarea></div>
+    <div class="form-group"><label>负责人</label><select id="ddHead"><option value="">请选择...</option>${currentAgents.map(aName=>{const aInfo=allAgents.find(a=>(a.path||a.name)===aName);const label=aInfo?((aInfo.avatar_emoji||'🤖')+' '+(aInfo.name||aName)):aName;return '<option value="'+escHtml(aName)+'"'+(aName===deptHead?' selected':'')+'>'+escHtml(label)+'</option>'}).join('')}${availAgents.map(a=>'<option value="'+escHtml(a.path||a.name)+'"'+((a.path||a.name)===deptHead?' selected':'')+'>'+escHtml((a.avatar_emoji||'🤖')+' '+(a.name||a.path))+'</option>').join('')}</select></div>
+    <hr style="border:none;border-top:1px solid var(--border);margin:20px 0">
+    <h4>🤖 部门成员 <span class="badge badge-blue">${currentAgents.length}</span></h4>
+    <div id="deptAgentList" style="margin:8px 0">${agentListHtml}</div>
+    ${agentOptions?`<div class="flex gap-8 mt-8"><select id="ddAddAgent" style="flex:1"><option value="">选择 Agent 添加...</option>${agentOptions}</select><button class="btn btn-sm btn-primary" onclick="addDeptAgent('${escHtml(path)}')">添加</button></div>`:'<div style="font-size:12px;color:var(--text3);margin-top:4px">所有 Agent 都已添加</div>'}
+    <hr style="border:none;border-top:1px solid var(--border);margin:20px 0">
+    <div class="flex gap-8">
+      <button class="btn btn-ghost" onclick="loadDeptKB('${escHtml(path)}')">查看知识库</button>
+    </div>
+    <div id="deptKBArea" style="margin-top:16px"></div>
+    <hr style="border:none;border-top:1px solid var(--border);margin:20px 0">
+    <div class="flex gap-8" style="justify-content:flex-end">
+      <button class="btn btn-primary" onclick="saveDeptInfo('${escHtml(path)}')">保存</button>
+      <button class="btn btn-ghost" onclick="closeModal()">关闭</button>
+    </div>
+  </div></div>`;
+  } catch(e) {
+    console.error('showDeptDetail error:', e);
+    showToast('加载部门详情失败: '+e.message, 'danger');
+  }
+}
+async function addDeptAgent(path){
+  const sel=document.getElementById('ddAddAgent');
+  const btn=sel?sel.nextElementSibling:null;
+  if(!sel||!sel.value){showToast('请选择要添加的 Agent','danger');return}
+  if(sel.disabled||btn?.disabled)return;
+  if(sel)sel.disabled=true;if(btn)btn.disabled=true;
+  try{
+  const r=await api(`/api/departments/${encodeURIComponent(path)}/agents`,{method:'PUT',body:JSON.stringify({agents:[sel.value],action:'add'})});
+  if(r.error||r.ok===false){showToast(r.error||r.message||'添加失败','danger');return}
+  showToast('已添加','success');_deptTreeNeedsRefresh=true;showDeptDetail(path);
+  }finally{if(sel)sel.disabled=false;if(btn)btn.disabled=false}
+}
+async function removeDeptAgent(path,agentName){
+  const r=await api(`/api/departments/${encodeURIComponent(path)}/agents`,{method:'PUT',body:JSON.stringify({agents:[agentName],action:'remove'})});
+  if(r.error||r.ok===false){showToast(r.error||r.message||'移除失败','danger');return}
+  showToast('已移除','success');_deptTreeNeedsRefresh=true;showDeptDetail(path);
+}
+async function saveDeptInfo(path){
+  // 同时保存名称、emoji 和元数据（描述、负责人）
+  const [metaRes,deptRes]=await Promise.all([
+    api(`/api/departments/${encodeURIComponent(path)}/info`,{method:'PUT',body:JSON.stringify({description:$('ddDesc').value,head_name:$('ddHead').value})}),
+    api(`/api/departments/${encodeURIComponent(path)}`,{method:'PUT',body:JSON.stringify({name:$('ddName').value,emoji:$('ddEmoji').value})})
+  ]);
+  if(metaRes.error){showToast(metaRes.error,'danger');return}
+  if(deptRes.error){showToast(deptRes.error,'danger');return}
+  showToast('已保存','success');
+  renderDepartments();
+}
+async function loadDeptKB(path){
+  const files=await api(`/api/departments/${encodeURIComponent(path)}/knowledge`);
+  const el=document.getElementById('deptKBArea');if(!el)return;
+  let html='<h4 style="margin-bottom:8px">部门知识库</h4>';
+  html+='<div style="margin-bottom:8px"><button class="btn btn-sm btn-primary" onclick="uploadDeptKB(\''+escHtml(path)+'\',false)">上传文件</button> <button class="btn btn-sm btn-secondary" onclick="uploadDeptKB(\''+escHtml(path)+'\',true)">📁 上传文件夹</button></div>';
+  if(!files||!files.length){html+='<div class="empty" style="margin-top:12px">暂无知识库文件</div>';el.innerHTML=html;return}
+  html+='<div class="table-wrap"><table><tr><th>文件</th><th>操作</th></tr>';
+  for(const f of files){
+    html+=`<tr><td>${escHtml(f.name||f.path)}</td>
+      <td><button class="btn btn-sm btn-ghost" onclick="viewDeptKBFile('${escHtml(path)}','${escHtml(f.path||f.name)}')">查看</button>
+      <button class="btn btn-sm btn-danger" onclick="deleteDeptKBFile('${escHtml(path)}','${escHtml(f.path||f.name)}')">删除</button></td></tr>`;
+  }
+  html+='</table></div>';el.innerHTML=html;
+}
+async function uploadDeptKB(path,folderMode){
+  const input=document.createElement('input');input.type='file';input.multiple=true;
+  if(folderMode){input.webkitdirectory=true;}
+  input.onchange=async()=>{
+    const fd=new FormData();
+    for(const f of input.files){
+      if(f.webkitRelativePath){fd.append('files',f,{headers:{'X-File-Path':f.webkitRelativePath}});}
+      else{fd.append('files',f);}
+    }
+    showToast('正在上传...','info');
+    const r=await fetch(API+`/api/departments/${encodeURIComponent(path)}/knowledge/upload`,{method:'POST',body:fd});
+    const data=await r.json();
+    if(data.error){showToast(data.error,'danger');return}
+    const total=data.results?data.results.length:0;
+    const okCount=data.results?data.results.filter(x=>x.ok).length:0;
+    showToast(`上传完成: ${okCount}/${total} 文件成功`,okCount===total?'success':'warning');
+    loadDeptKB(path);
+  };input.click();
+}
+
+if (typeof window._adminRenderers === 'undefined') window._adminRenderers = {};
+window._adminRenderers['organization'] = renderOrganization;
+window._adminRenderers['departments'] = renderDepartments;
+} catch(e) { console.error('[admin-org] load error:', e); }
+})();

package/web/ui/admin/admin-permissions.js

@@ -0,0 +1,147 @@
+// ========== Permissions ==========
+(function(){
+try {
+// ========== 权限管理 ==========
+let _permsCache=null;
+async function renderPermissions(){
+  const r=await api('/api/permissions');
+  if(r.error){$('content').innerHTML='<div class="empty" style="color:var(--danger)">加载失败: '+escHtml(r.error)+'</div>';return}
+  _permsCache=r;
+  const labels=r.labels||{};
+  const perms=r.all_permissions||[];
+  const defaults=r.defaults||{};
+  const agents=r.agents||{};
+
+  // 全局默认权限
+  let html='<div class="card"><h3>全局默认权限</h3><p style="color:var(--text2);font-size:13px;margin-bottom:12px">新 Agent 将继承这些默认权限设置</p>';
+  html+='<div class="grid grid-3" style="gap:12px">';
+  for(const p of perms){
+    const label=labels[p]||p;
+    const val=defaults[p]!==false?'checked':'';
+    html+=`<div class="form-group" style="display:flex;align-items:center;gap:10px"><label style="flex:1;font-weight:500">${label} <span style="color:var(--text3);font-size:11px">(${p})</span></label><input type="checkbox" id="perm_def_${p}" ${val} style="width:18px;height:18px;cursor:pointer"></div>`;
+  }
+  html+='</div><div class="flex gap-8 mt-16"><button class="btn btn-primary" onclick="saveDefaultPerms()">保存默认权限</button></div></div>';
+
+  // Agent 权限覆盖
+  const agentKeys=Object.keys(agents);
+  if(agentKeys.length>0){
+    html+='<div class="card"><h3>Agent 权限覆盖</h3><p style="color:var(--text2);font-size:13px;margin-bottom:12px">以下 Agent 使用自定义权限（覆盖默认值）</p><div class="table-wrap"><table><tr><th>Agent</th>';
+    for(const p of perms){html+=`<th>${labels[p]||p}</th>`;}
+    html+='<th>操作</th></tr>';
+    for(const name of agentKeys){
+      const ap=agents[name]||{};
+      html+=`<tr><td>${escHtml(name)}</td>`;
+      for(const p of perms){
+        const v=ap[p]!==false;
+        html+=`<td style="text-align:center">${v?'<span style="color:var(--success)">✓</span>':'<span style="color:var(--danger)">✗</span>'}</td>`;
+      }
+      html+=`<td><button class="btn btn-sm btn-ghost" onclick="editAgentPerms('${escHtml(name)}')">编辑</button> <button class="btn btn-sm btn-danger" onclick="resetAgentPerms('${escHtml(name)}')">重置</button></td></tr>`;
+    }
+    html+='</table></div></div>';
+  }
+
+  $('content').innerHTML=html;
+}
+
+async function saveDefaultPerms(){
+  if(!_permsCache)return;
+  const perms=_permsCache.all_permissions||[];
+  const data={};
+  for(const p of perms){
+    const el=document.getElementById('perm_def_'+p);
+    if(el)data[p]=el.checked;
+  }
+  const r=await api('/api/permissions/defaults',{method:'PUT',body:JSON.stringify(data)});
+  if(r.error){showToast(r.error,'danger');return}
+  showToast('默认权限已保存','success');
+}
+
+async function editAgentPerms(name){
+  if(!_permsCache)return;
+  const labels=_permsCache.labels||{};
+  const perms=_permsCache.all_permissions||[];
+  const defaults=_permsCache.defaults||{};
+  // 获取当前 agent 权限和 agent 信息（含执行模式）
+  let agentPerms={};
+  let agentExecMode='sandbox';
+  try{
+    const [r,ai]=await Promise.all([
+      api('/api/permissions/'+encodeURIComponent(name)),
+      api('/api/agents/'+encodeURIComponent(name))
+    ]);
+    agentPerms=r.permissions||{};
+    agentExecMode=ai.execution_mode||'sandbox';
+  }catch(e){agentPerms={...defaults}}
+
+  let html='<h3>编辑 Agent 权限: '+escHtml(name)+'</h3>';
+
+  // 执行模式选择
+  html+='<div style="margin-bottom:16px"><div style="font-size:13px;color:var(--text2);margin-bottom:8px;font-weight:600">⚡ 执行环境</div>';
+  html+='<div style="display:flex;gap:12px">';
+  html+=`<label id="modalExecSandboxLabel" style="flex:1;display:flex;align-items:center;gap:10px;padding:12px 14px;border-radius:var(--radius);border:2px solid ${agentExecMode==='sandbox'?'var(--primary)':'var(--border)'};cursor:pointer;background:${agentExecMode==='sandbox'?'var(--accent-light)':'transparent'};transition:all .15s" onclick="document.getElementById('modalExecSandbox').checked=true;updateModalExecUI()">`;
+  html+=`<input type="radio" name="modalExecMode" id="modalExecSandbox" value="sandbox" ${agentExecMode==='sandbox'?'checked':''} style="display:none">`;
+  html+=`<span style="font-size:24px">🐳</span><div><div style="font-weight:600;font-size:13px">沙盒模式</div><div style="font-size:11px;color:var(--text2)">Docker 容器隔离</div></div></label>`;
+  html+=`<label id="modalExecLocalLabel" style="flex:1;display:flex;align-items:center;gap:10px;padding:12px 14px;border-radius:var(--radius);border:2px solid ${agentExecMode==='local'?'var(--primary)':'var(--border)'};cursor:pointer;background:${agentExecMode==='local'?'var(--accent-light)':'transparent'};transition:all .15s" onclick="document.getElementById('modalExecLocal').checked=true;updateModalExecUI()">`;
+  html+=`<input type="radio" name="modalExecMode" id="modalExecLocal" value="local" ${agentExecMode==='local'?'checked':''} style="display:none">`;
+  html+=`<span style="font-size:24px">💻</span><div><div style="font-weight:600;font-size:13px">本机模式</div><div style="font-size:11px;color:var(--text2)">完整本地权限</div></div></label>`;
+  html+='</div></div>';
+
+  // 功能权限
+  html+='<div style="font-size:13px;color:var(--text2);margin-bottom:8px;font-weight:600">🔑 功能权限</div>';
+  html+='<div class="grid grid-3" style="gap:12px">';
+  for(const p of perms){
+    const label=labels[p]||p;
+    const defVal=defaults[p]!==false;
+    const curVal=agentPerms[p]!==undefined?agentPerms[p]:defVal;
+    const checked=curVal?'checked':'';
+    html+=`<div class="form-group" style="display:flex;align-items:center;gap:10px"><label style="flex:1;font-weight:500">${label}</label><input type="checkbox" id="perm_agent_${p}" ${checked} style="width:18px;height:18px;cursor:pointer"></div>`;
+  }
+  html+='</div><div class="flex gap-8 mt-16"><button class="btn btn-primary" onclick="saveAgentPerms(\''+escHtml(name)+'\')">💾 保存</button><button class="btn btn-ghost" onclick="renderPermissions()">取消</button></div>';
+  $('modalContainer').innerHTML='<div class="modal-overlay" onclick="closeModal()"><div class="modal" onclick="event.stopPropagation()">'+html+'</div></div>';
+}
+
+function updateModalExecUI(){
+  const sandbox=document.getElementById('modalExecSandbox');
+  const local=document.getElementById('modalExecLocal');
+  if(!sandbox||!local)return;
+  [sandbox.parentElement,local.parentElement].forEach(el=>{
+    const radio=el.querySelector('input[type=radio]');
+    if(radio.checked){el.style.borderColor='var(--primary)';el.style.background='var(--accent-light)'}
+    else{el.style.borderColor='var(--border)';el.style.background='transparent'}
+  });
+}
+
+async function saveAgentPerms(name){
+  if(!_permsCache)return;
+  // 1. 保存执行模式
+  const modalSandbox=document.getElementById('modalExecSandbox');
+  const modalLocal=document.getElementById('modalExecLocal');
+  if(modalSandbox||modalLocal){
+    const newMode=(modalSandbox&&modalSandbox.checked)?'sandbox':((modalLocal&&modalLocal.checked)?'local':null);
+    if(newMode){
+      await api('/api/agents/'+encodeURIComponent(name),{method:'PUT',body:JSON.stringify({execution_mode:newMode})});
+    }
+  }
+  // 2. 保存功能权限
+  const perms=_permsCache.all_permissions||[];
+  const data={};
+  for(const p of perms){
+    const el=document.getElementById('perm_agent_'+p);
+    if(el)data[p]=el.checked;
+  }
+  const r=await api('/api/permissions/'+encodeURIComponent(name),{method:'PUT',body:JSON.stringify(data)});
+  if(r.error){showToast(r.error,'danger');return}
+  closeModal();showToast('Agent 权限已更新','success');renderPermissions();
+}
+
+async function resetAgentPerms(name){
+  if(!confirm('确认重置 "'+name+'" 的权限为默认值？'))return;
+  const r=await api('/api/permissions/'+encodeURIComponent(name),{method:'DELETE'});
+  if(r.error){showToast(r.error,'danger');return}
+  showToast('已重置为默认权限','success');renderPermissions();
+}
+
+if (typeof window._adminRenderers === 'undefined') window._adminRenderers = {};
+window._adminRenderers['permissions'] = renderPermissions;
+} catch(e) { console.error('[admin-permissions] load error:', e); }
+})();