opclawtm 1.4.0

package/dist/core/services/config-tracker.service.js

@@ -0,0 +1,1093 @@
+"use strict";
+/**
+ * Config Tracker Service
+ *
+ * Responsible for recording and reverting configuration changes
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setCurrentSession = setCurrentSession;
+exports.getCurrentSession = getCurrentSession;
+exports.recordAgentCreate = recordAgentCreate;
+exports.recordAgentDelete = recordAgentDelete;
+exports.recordAgentAllowListChange = recordAgentAllowListChange;
+exports.recordAgentToAgentChange = recordAgentToAgentChange;
+exports.recordBindingCreate = recordBindingCreate;
+exports.recordBindingDelete = recordBindingDelete;
+exports.recordConfigChange = recordConfigChange;
+exports.recordGatewayConfigChange = recordGatewayConfigChange;
+exports.recordFeishuConfig = recordFeishuConfig;
+exports.recordSkillPackCreate = recordSkillPackCreate;
+exports.recordSkillPackDelete = recordSkillPackDelete;
+exports.recordJobCreate = recordJobCreate;
+exports.recordJobDelete = recordJobDelete;
+exports.recordDirectoryCreate = recordDirectoryCreate;
+exports.recordFeishuGroupBind = recordFeishuGroupBind;
+exports.recordFeishuGroupUnbind = recordFeishuGroupUnbind;
+exports.revertSessionConfigChanges = revertSessionConfigChanges;
+exports.revertAllConfigChanges = revertAllConfigChanges;
+exports.getChangesSummary = getChangesSummary;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const utils_1 = require("../../core/utils");
+const configChangeRepo = __importStar(require("../../db/repositories/config-change.repo"));
+// Current session ID (stored in memory)
+let currentSessionId = null;
+/**
+ * Set current session ID
+ */
+function setCurrentSession(sessionId) {
+    currentSessionId = sessionId;
+}
+/**
+ * Get current session ID
+ */
+function getCurrentSession() {
+    return currentSessionId;
+}
+/**
+ * Record agent creation
+ */
+function recordAgentCreate(agentId, agentConfig) {
+    if (!currentSessionId) {
+        console.warn('警告：未设置会话ID，无法记录变更');
+        return;
+    }
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'agent_create',
+        target_type: 'agents.list',
+        target_path: `agents.list[?(@.id==='${agentId}')]`,
+        action: 'add',
+        new_value: JSON.stringify(agentConfig),
+        related_id: agentId,
+        description: `创建 Agent: ${agentConfig.name || agentId}`
+    });
+}
+/**
+ * Record agent deletion
+ */
+function recordAgentDelete(agentId, oldConfig) {
+    if (!currentSessionId) {
+        console.warn('警告：未设置会话ID，无法记录变更');
+        return;
+    }
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'agent_delete',
+        target_type: 'agents.list',
+        target_path: `agents.list[?(@.id==='${agentId}')]`,
+        action: 'remove',
+        old_value: JSON.stringify(oldConfig),
+        related_id: agentId,
+        description: `删除 Agent: ${oldConfig.name || agentId}`
+    });
+}
+/**
+ * Record agent allow list change (legacy, for backward compatibility)
+ *
+ * Records changes to agents.list[].subagents.allowAgents
+ * @deprecated Use recordAgentToAgentChange instead
+ */
+function recordAgentAllowListChange(agentId, oldAllowList, newAllowList, reason) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'agent_allow_list_update',
+        target_type: 'agents.list.allow_agents',
+        target_path: `agents.list[${agentId}].subagents.allowAgents`,
+        action: 'update',
+        old_value: JSON.stringify(oldAllowList),
+        new_value: JSON.stringify(newAllowList),
+        related_id: agentId,
+        description: reason
+    });
+}
+/**
+ * Record agent-to-agent communication allow list change
+ *
+ * Records changes to tools.agentToAgent.allow
+ * This is the official OpenClaw configuration for agent-to-agent communication control.
+ */
+function recordAgentToAgentChange(oldAllowList, newAllowList, reason) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'agent_to_agent_update',
+        target_type: 'tools.agentToAgent',
+        target_path: 'tools.agentToAgent.allow',
+        action: 'update',
+        old_value: JSON.stringify(oldAllowList),
+        new_value: JSON.stringify(newAllowList),
+        related_id: 'agentToAgent',
+        description: reason
+    });
+}
+/**
+ * Record binding creation
+ */
+function recordBindingCreate(binding, relatedId) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'binding_create',
+        target_type: 'bindings',
+        target_path: `bindings[${Date.now()}]`,
+        action: 'add',
+        new_value: JSON.stringify(binding),
+        related_id: relatedId,
+        description: `创建绑定: ${binding.agentId || 'unknown'}`
+    });
+}
+/**
+ * Record binding deletion
+ */
+function recordBindingDelete(binding, relatedId) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'binding_delete',
+        target_type: 'bindings',
+        target_path: `bindings[?]`,
+        action: 'remove',
+        old_value: JSON.stringify(binding),
+        related_id: relatedId,
+        description: `删除绑定: ${binding.agentId || 'unknown'}`
+    });
+}
+/**
+ * Record config change (generic)
+ */
+function recordConfigChange(change) {
+    if (!currentSessionId) {
+        console.warn('警告：未设置会话ID，无法记录变更');
+        return;
+    }
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: change.change_type,
+        target_type: change.target_type || 'other',
+        target_path: change.target_path,
+        action: change.action,
+        old_value: change.old_value,
+        new_value: change.new_value,
+        related_id: change.related_id,
+        description: change.description
+    });
+}
+/**
+ * Record gateway config change
+ */
+function recordGatewayConfigChange(configPath, oldValue, newValue, description) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'config_update',
+        target_type: 'gateway',
+        target_path: configPath,
+        action: 'update',
+        old_value: oldValue !== undefined ? JSON.stringify(oldValue) : undefined,
+        new_value: JSON.stringify(newValue),
+        description: description
+    });
+}
+/**
+ * Record feishu channel config
+ */
+function recordFeishuConfig(config, oldConfig) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'channel_config',
+        target_type: 'channels.feishu',
+        target_path: 'channels.feishu',
+        action: oldConfig ? 'update' : 'add',
+        old_value: oldConfig ? JSON.stringify(oldConfig) : undefined,
+        new_value: JSON.stringify(config),
+        description: '配置飞书渠道'
+    });
+}
+/**
+ * Record skill pack creation
+ */
+function recordSkillPackCreate(skillPackId, skillPackConfig) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'skill_pack_create',
+        target_type: 'skill_packs',
+        target_path: `skill_packs[${skillPackId}]`,
+        action: 'add',
+        new_value: JSON.stringify(skillPackConfig),
+        related_id: skillPackId,
+        description: `创建技能包: ${skillPackConfig.name || skillPackId}`
+    });
+}
+/**
+ * Record skill pack deletion
+ */
+function recordSkillPackDelete(skillPackId, oldConfig) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'skill_pack_delete',
+        target_type: 'skill_packs',
+        target_path: `skill_packs[${skillPackId}]`,
+        action: 'remove',
+        old_value: JSON.stringify(oldConfig),
+        related_id: skillPackId,
+        description: `删除技能包: ${oldConfig.name || skillPackId}`
+    });
+}
+/**
+ * Record job creation
+ */
+function recordJobCreate(jobId, jobConfig) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'job_create',
+        target_type: 'jobs',
+        target_path: `jobs[${jobId}]`,
+        action: 'add',
+        new_value: JSON.stringify(jobConfig),
+        related_id: jobId,
+        description: `创建职业: ${jobConfig.name || jobId}`
+    });
+}
+/**
+ * Record job deletion
+ */
+function recordJobDelete(jobId, oldConfig) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'job_delete',
+        target_type: 'jobs',
+        target_path: `jobs[${jobId}]`,
+        action: 'remove',
+        old_value: JSON.stringify(oldConfig),
+        related_id: jobId,
+        description: `删除职业: ${oldConfig.name || jobId}`
+    });
+}
+/**
+ * Record directory creation
+ */
+function recordDirectoryCreate(dirPath, description) {
+    if (!currentSessionId)
+        return;
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'directory_create',
+        target_type: 'directories',
+        target_path: dirPath,
+        action: 'add',
+        new_value: JSON.stringify({ path: dirPath }),
+        related_id: dirPath.replace(/[^a-zA-Z0-9_-]/g, '_'),
+        description: description || `创建目录: ${dirPath}`
+    });
+}
+/**
+ * Record feishu group binding
+ */
+function recordFeishuGroupBind(deptId, deptName, groupId, oldGroupId) {
+    if (!currentSessionId)
+        return;
+    // Get current group config from openclaw.json for potential restoration
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    let groupConfig;
+    try {
+        if (fs.existsSync(configPath)) {
+            const content = fs.readFileSync(configPath, 'utf-8');
+            const config = JSON.parse(content);
+            const channels = config.channels;
+            const feishuConfig = channels?.feishu;
+            const groups = feishuConfig?.groups;
+            if (groups?.[groupId]) {
+                groupConfig = groups[groupId];
+            }
+        }
+    }
+    catch {
+        // Ignore errors
+    }
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'feishu_group_bind',
+        target_type: 'channels.feishu.groups',
+        target_path: `channels.feishu.groups[${groupId}]`,
+        action: oldGroupId ? 'update' : 'add',
+        old_value: oldGroupId || undefined,
+        new_value: JSON.stringify({
+            groupId,
+            groupConfig,
+            deptId,
+            deptName
+        }),
+        related_id: deptId,
+        description: `绑定飞书群: ${deptName} → ${groupId}`
+    });
+}
+/**
+ * Record feishu group unbinding
+ */
+function recordFeishuGroupUnbind(deptId, deptName, oldGroupId) {
+    if (!currentSessionId)
+        return;
+    // Get current group config from openclaw.json for potential restoration
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    let oldGroupConfig;
+    let oldGroupAllowFrom;
+    try {
+        if (fs.existsSync(configPath)) {
+            const content = fs.readFileSync(configPath, 'utf-8');
+            const config = JSON.parse(content);
+            const channels = config.channels;
+            const feishuConfig = channels?.feishu;
+            const groups = feishuConfig?.groups;
+            if (groups?.[oldGroupId]) {
+                oldGroupConfig = groups[oldGroupId];
+            }
+            // Also save the groupAllowFrom for restoration
+            if (feishuConfig?.groupAllowFrom && Array.isArray(feishuConfig.groupAllowFrom)) {
+                oldGroupAllowFrom = [...feishuConfig.groupAllowFrom];
+            }
+        }
+    }
+    catch {
+        // Ignore errors
+    }
+    configChangeRepo.recordChange(currentSessionId, {
+        change_type: 'feishu_group_unbind',
+        target_type: 'channels.feishu.groups',
+        target_path: `channels.feishu.groups[${oldGroupId}]`,
+        action: 'remove',
+        old_value: JSON.stringify({
+            groupId: oldGroupId,
+            groupConfig: oldGroupConfig,
+            groupAllowFrom: oldGroupAllowFrom,
+            deptId,
+            deptName
+        }),
+        related_id: deptId,
+        description: `解绑飞书群: ${deptName} (${oldGroupId})`
+    });
+}
+/**
+ * Revert all config changes for a session
+ */
+function revertSessionConfigChanges(sessionId) {
+    try {
+        const configPath = (0, utils_1.getOpenClawJsonPath)();
+        if (!fs.existsSync(configPath)) {
+            return { success: true, message: '配置文件不存在', revertedCount: 0 };
+        }
+        // Read config
+        let content = fs.readFileSync(configPath, 'utf-8');
+        // Remove BOM if present
+        if (content.charCodeAt(0) === 0xFEFF) {
+            content = content.slice(1);
+        }
+        // Parse JSON directly (standard JSON doesn't support comments)
+        const config = JSON.parse(content);
+        // Get uncleaned changes for this session (in reverse order)
+        const changes = configChangeRepo.getUncleanedBySession(sessionId).reverse();
+        let revertedCount = 0;
+        for (const change of changes) {
+            try {
+                revertChange(config, change);
+                revertedCount++;
+            }
+            catch (e) {
+                console.warn(`撤销变更失败: ${change.id}`, e);
+            }
+        }
+        // Write back config
+        // 在写入前清理所有 null 值和空对象，避免配置无效
+        cleanupConfigNulls(config);
+        fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+        // Mark as cleaned
+        configChangeRepo.markAllCleanedBySession(sessionId);
+        return { success: true, message: '配置已撤销', revertedCount };
+    }
+    catch (error) {
+        return {
+            success: false,
+            message: error instanceof Error ? error.message : String(error),
+            revertedCount: 0
+        };
+    }
+}
+/**
+ * Revert all config changes (legacy compatibility)
+ */
+function revertAllConfigChanges() {
+    if (!currentSessionId) {
+        return { success: false, message: '未设置会话ID', revertedCount: 0 };
+    }
+    return revertSessionConfigChanges(currentSessionId);
+}
+/**
+ * Revert single change
+ */
+function revertChange(config, change) {
+    switch (change.target_type) {
+        case 'agents.list':
+            revertAgentChange(config, change);
+            break;
+        case 'agents.list.allow_agents':
+            revertAgentAllowListChange(config, change);
+            break;
+        case 'tools.agentToAgent':
+            revertAgentToAgentChange(config, change);
+            break;
+        case 'bindings':
+            revertBindingChange(config, change);
+            break;
+        case 'channels.feishu':
+            revertFeishuChange(config, change);
+            break;
+        case 'gateway':
+            // 跳过 gateway 配置的撤销
+            // gateway.controlUi.allowInsecureAuth 是工具运行需要的基础配置
+            // 重置时应该保留，不应该撤销
+            console.log(`[重置] 跳过 gateway 配置撤销: ${change.target_path}`);
+            break;
+        case 'directories':
+            // Directory deletion handled separately during reset
+            break;
+        case 'skill_packs':
+        case 'jobs':
+            // Skill packs and jobs are in database tables, cleared during reset
+            break;
+        case 'departments':
+            // Department group binding is in database, needs separate handling
+            revertDepartmentChange(change);
+            break;
+        case 'credentials':
+            // Credentials changes (feishu pairing etc.)
+            revertCredentialsChange(change);
+            break;
+        default:
+            console.warn(`未知的变更类型: ${change.target_type}`);
+    }
+}
+/**
+ * Revert agent related changes
+ *
+ * Note: Only 'main' (OpenClaw native default agent) is protected.
+ * 'assistant_main' is created by team-manager and should be cleaned during reset.
+ */
+function revertAgentChange(config, change) {
+    if (!config.agents)
+        config.agents = { list: [] };
+    const agents = config.agents;
+    if (!agents.list)
+        agents.list = [];
+    const agentsList = agents.list;
+    // Protected agent IDs - only 'main' (OpenClaw native, created before team-manager init)
+    // 'assistant_main' is created by team-manager and should be cleaned during reset
+    const PROTECTED_AGENT_IDS = ['main'];
+    if (change.action === 'add') {
+        // Revert add: remove the agent
+        // But skip protected agents (OpenClaw native, not created by team-manager)
+        if (PROTECTED_AGENT_IDS.includes(change.related_id || '')) {
+            console.log(`[重置] 跳过移除受保护的 agent: ${change.related_id}`);
+            return;
+        }
+        const index = agentsList.findIndex(a => a.id === change.related_id);
+        if (index >= 0) {
+            agentsList.splice(index, 1);
+        }
+    }
+    else if (change.action === 'remove') {
+        // Revert remove: restore the agent
+        if (change.old_value) {
+            const agentConfig = JSON.parse(change.old_value);
+            agentsList.push(agentConfig);
+        }
+    }
+    else if (change.action === 'update' && change.old_value) {
+        // Revert update: restore old config
+        const index = agentsList.findIndex(a => a.id === change.related_id);
+        if (index >= 0) {
+            const oldAgentConfig = JSON.parse(change.old_value);
+            agentsList[index] = oldAgentConfig;
+        }
+    }
+}
+/**
+ * Revert agent allow list changes (legacy)
+ */
+function revertAgentAllowListChange(config, change) {
+    if (!config.agents)
+        config.agents = { list: [] };
+    const agents = config.agents;
+    if (!agents.list)
+        agents.list = [];
+    const agentsList = agents.list;
+    // Find the agent by related_id
+    const agentId = change.related_id;
+    const agentConfig = agentsList.find((a) => a.id === agentId);
+    if (!agentConfig) {
+        console.log(`[重置] 未找到 agent ${agentId}，跳过 allowAgents 恢复`);
+        return;
+    }
+    // Restore old allowAgents list
+    if (change.old_value) {
+        try {
+            const oldAllowList = JSON.parse(change.old_value);
+            const subagents = agentConfig.subagents;
+            if (!subagents) {
+                agentConfig.subagents = { allowAgents: oldAllowList };
+            }
+            else {
+                subagents.allowAgents = oldAllowList;
+            }
+            console.log(`[重置] 已恢复 ${agentId} 的通信权限: [${oldAllowList.join(', ')}]`);
+        }
+        catch (e) {
+            console.warn(`恢复 agent allow list 失败:`, e);
+        }
+    }
+}
+/**
+ * Revert agent-to-agent communication allow list changes
+ */
+function revertAgentToAgentChange(config, change) {
+    // Restore old allow list
+    if (change.old_value) {
+        try {
+            const oldAllowList = JSON.parse(change.old_value);
+            // Ensure tools.agentToAgent structure exists
+            if (!config['tools']) {
+                config['tools'] = {};
+            }
+            const tools = config['tools'];
+            if (!tools['agentToAgent']) {
+                tools['agentToAgent'] = { enabled: true, allow: [] };
+            }
+            const agentToAgent = tools['agentToAgent'];
+            agentToAgent['enabled'] = true;
+            agentToAgent['allow'] = oldAllowList;
+            console.log(`[重置] 已恢复 agentToAgent.allow: [${oldAllowList.slice(0, 5).join(', ')}${oldAllowList.length > 5 ? '...' : ''}]`);
+        }
+        catch (e) {
+            console.warn(`恢复 agentToAgent 配置失败:`, e);
+        }
+    }
+}
+/**
+ * Revert binding related changes
+ */
+function revertBindingChange(config, change) {
+    if (!config.bindings)
+        config.bindings = [];
+    const bindings = config.bindings;
+    if (change.action === 'add') {
+        // Revert add: remove the binding
+        if (change.new_value) {
+            const binding = JSON.parse(change.new_value);
+            const index = bindings.findIndex(b => b.agentId === binding.agentId &&
+                JSON.stringify(b.match) === JSON.stringify(binding.match));
+            if (index >= 0) {
+                bindings.splice(index, 1);
+            }
+        }
+    }
+    else if (change.action === 'remove') {
+        // Revert remove: restore the binding
+        if (change.old_value) {
+            const binding = JSON.parse(change.old_value);
+            bindings.push(binding);
+        }
+    }
+    else if (change.action === 'update' && change.old_value) {
+        // Revert update: restore old config
+        const oldBinding = JSON.parse(change.old_value);
+        const index = bindings.findIndex(b => b.agentId === oldBinding.agentId);
+        if (index >= 0) {
+            bindings[index] = oldBinding;
+        }
+    }
+}
+/**
+ * Revert feishu config changes
+ *
+ * 支持两种粒度的变更：
+ * 1. 整体配置变更 (target_path: 'channels.feishu')
+ * 2. 单个账号变更 (target_path: 'channels.feishu.accounts.{agentId}')
+ */
+function revertFeishuChange(config, change) {
+    if (!config.channels)
+        config.channels = {};
+    const channels = config.channels;
+    // 确保飞书配置存在
+    if (!channels.feishu) {
+        return;
+    }
+    const feishuConfig = channels.feishu;
+    // 根据 target_path 判断变更粒度
+    if (change.target_path.startsWith('channels.feishu.accounts.')) {
+        // 单个账号变更：只删除/恢复该账号
+        const agentId = change.target_path.replace('channels.feishu.accounts.', '');
+        if (!feishuConfig.accounts) {
+            return;
+        }
+        const feishuAccounts = feishuConfig.accounts;
+        if (change.action === 'add') {
+            // 新增账号：删除该账号
+            if (feishuAccounts[agentId]) {
+                delete feishuAccounts[agentId];
+                console.log(`[重置] 已删除飞书账号配置: ${agentId}`);
+            }
+        }
+        else if (change.action === 'update' && change.old_value) {
+            // 更新账号：恢复旧配置
+            try {
+                const oldConfig = JSON.parse(change.old_value);
+                if (oldConfig[agentId]) {
+                    feishuAccounts[agentId] = oldConfig[agentId];
+                    console.log(`[重置] 已恢复飞书账号配置: ${agentId}`);
+                }
+            }
+            catch (e) {
+                console.warn('恢复飞书账号配置失败:', e);
+            }
+        }
+        else if (change.action === 'remove' && change.old_value) {
+            // 删除账号：恢复该账号
+            try {
+                const oldConfig = JSON.parse(change.old_value);
+                if (oldConfig[agentId]) {
+                    feishuAccounts[agentId] = oldConfig[agentId];
+                    console.log(`[重置] 已恢复飞书账号配置: ${agentId}`);
+                }
+            }
+            catch (e) {
+                console.warn('恢复飞书账号配置失败:', e);
+            }
+        }
+        // 如果没有账号了，删除 accounts 字段
+        if (Object.keys(feishuAccounts).length === 0) {
+            delete feishuConfig.accounts;
+        }
+    }
+    else if (change.target_path === 'channels.feishu') {
+        // 整体配置变更
+        if (change.action === 'add') {
+            // 新增整体配置：只删除该会话添加的账号，保留基础配置
+            if (change.new_value) {
+                try {
+                    const newConfig = JSON.parse(change.new_value);
+                    if (newConfig.accounts && feishuConfig.accounts) {
+                        const feishuAccounts = feishuConfig.accounts;
+                        const newAccounts = newConfig.accounts;
+                        for (const accountId of Object.keys(newAccounts)) {
+                            if (feishuAccounts[accountId]) {
+                                delete feishuAccounts[accountId];
+                                console.log(`[重置] 已删除飞书账号配置: ${accountId}`);
+                            }
+                        }
+                        if (Object.keys(feishuAccounts).length === 0) {
+                            delete feishuConfig.accounts;
+                        }
+                    }
+                }
+                catch (e) {
+                    console.warn('解析飞书配置变更失败:', e);
+                }
+            }
+        }
+        else if (change.action === 'update' && change.old_value) {
+            // 更新整体配置：合并旧配置
+            try {
+                const oldConfig = JSON.parse(change.old_value);
+                if (oldConfig.accounts) {
+                    if (!feishuConfig.accounts) {
+                        feishuConfig.accounts = {};
+                    }
+                    const feishuAccounts = feishuConfig.accounts;
+                    const oldAccounts = oldConfig.accounts;
+                    for (const [accountId, accountConfig] of Object.entries(oldAccounts)) {
+                        feishuAccounts[accountId] = accountConfig;
+                    }
+                }
+            }
+            catch (e) {
+                console.warn('恢复飞书配置失败:', e);
+            }
+        }
+    }
+}
+/**
+ * Revert gateway config changes
+ */
+function revertGatewayChange(config, change) {
+    if (!config.gateway)
+        config.gateway = {};
+    const gateway = config.gateway;
+    // Parse target_path, e.g. "gateway.controlUi.allowInsecureAuth"
+    const pathParts = change.target_path.split('.');
+    if (pathParts.length >= 2) {
+        // Skip the first "gateway" part
+        const configPath = pathParts.slice(1);
+        // Navigate to target location
+        let target = gateway;
+        for (let i = 0; i < configPath.length - 1; i++) {
+            const key = configPath[i];
+            if (!target[key]) {
+                target[key] = {};
+            }
+            target = target[key];
+        }
+        const lastKey = configPath[configPath.length - 1];
+        if (change.action === 'add' || change.action === 'update') {
+            // Revert add/update: restore old value or delete
+            if (change.old_value !== undefined && change.old_value !== 'undefined' && change.old_value !== null && change.old_value !== 'null') {
+                try {
+                    const parsed = JSON.parse(change.old_value);
+                    // 确保不是 null
+                    if (parsed !== null) {
+                        target[lastKey] = parsed;
+                    }
+                    else {
+                        delete target[lastKey];
+                    }
+                }
+                catch {
+                    // 尝试直接转换
+                    if (change.old_value === 'true') {
+                        target[lastKey] = true;
+                    }
+                    else if (change.old_value === 'false') {
+                        target[lastKey] = false;
+                    }
+                    else if (change.old_value !== 'null') {
+                        target[lastKey] = change.old_value;
+                    }
+                    else {
+                        delete target[lastKey];
+                    }
+                }
+            }
+            else {
+                // No old value or old value is null, delete the config
+                delete target[lastKey];
+            }
+        }
+    }
+    // 清理空对象
+    cleanupEmptyObjects(gateway);
+}
+/**
+ * 递归清理空对象
+ */
+function cleanupEmptyObjects(obj) {
+    for (const key of Object.keys(obj)) {
+        const value = obj[key];
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            const nested = value;
+            cleanupEmptyObjects(nested);
+            if (Object.keys(nested).length === 0) {
+                delete obj[key];
+            }
+        }
+        // 删除 null 值
+        if (value === null) {
+            delete obj[key];
+        }
+    }
+}
+/**
+ * 清理配置中的 null 值和空对象
+ */
+function cleanupConfigNulls(config) {
+    cleanupEmptyObjects(config);
+    // 特殊处理 gateway.controlUi
+    const gateway = config.gateway;
+    if (gateway?.controlUi) {
+        const controlUi = gateway.controlUi;
+        // 删除 null 值
+        for (const key of Object.keys(controlUi)) {
+            if (controlUi[key] === null) {
+                delete controlUi[key];
+            }
+        }
+        // 如果 controlUi 为空，删除整个对象
+        if (Object.keys(controlUi).length === 0) {
+            delete gateway.controlUi;
+        }
+    }
+}
+/**
+ * Get change summary (for display)
+ */
+function getChangesSummary() {
+    const stats = configChangeRepo.getChangeStats();
+    const changes = configChangeRepo.getAllChanges();
+    if (changes.length === 0) {
+        return '无配置变更记录';
+    }
+    const lines = ['配置变更记录：'];
+    for (const [type, count] of Object.entries(stats)) {
+        lines.push(`  ${type}: ${count} 条`);
+    }
+    lines.push(`  总计: ${changes.length} 条`);
+    return lines.join('\n');
+}
+/**
+ * Revert department related changes (feishu group binding etc.)
+ */
+function revertDepartmentChange(change) {
+    // Need to operate through database
+    // Use dynamic import to avoid circular dependency
+    try {
+        const { departmentRepository } = require('../../db/repositories/dept.repo');
+        if (!change.related_id)
+            return;
+        const deptId = change.related_id;
+        if (change.change_type === 'feishu_group_bind') {
+            // Revert binding: clear group ID from database and clean up openclaw.json
+            if (change.action === 'add') {
+                // Binding was added, need to remove it
+                departmentRepository.update(deptId, { feishu_group_id: null });
+                // Clean up openclaw.json group config
+                if (change.new_value) {
+                    try {
+                        const data = JSON.parse(change.new_value);
+                        if (data.groupId) {
+                            removeFeishuGroupConfig(data.groupId);
+                        }
+                    }
+                    catch {
+                        // Ignore parse errors
+                    }
+                }
+            }
+            else if (change.action === 'update' && change.old_value) {
+                // Binding was updated, restore old group ID
+                departmentRepository.update(deptId, { feishu_group_id: change.old_value });
+            }
+        }
+        else if (change.change_type === 'feishu_group_unbind') {
+            // Revert unbinding: restore group ID to database and restore openclaw.json config
+            if (change.action === 'remove' && change.old_value) {
+                try {
+                    const data = JSON.parse(change.old_value);
+                    // Restore group ID to database
+                    departmentRepository.update(deptId, { feishu_group_id: data.groupId });
+                    // Restore openclaw.json group config
+                    restoreFeishuGroupConfig(data);
+                }
+                catch {
+                    // Ignore parse errors
+                }
+            }
+        }
+    }
+    catch (e) {
+        console.warn('撤销事业部变更失败:', e);
+    }
+}
+/**
+ * Remove feishu group config from openclaw.json
+ */
+function removeFeishuGroupConfig(groupId) {
+    try {
+        const configPath = (0, utils_1.getOpenClawJsonPath)();
+        if (!fs.existsSync(configPath))
+            return;
+        const content = fs.readFileSync(configPath, 'utf-8');
+        const config = JSON.parse(content);
+        let configChanged = false;
+        const channels = config.channels;
+        const feishuConfig = channels?.feishu;
+        // Remove from groupAllowFrom
+        if (feishuConfig?.groupAllowFrom && Array.isArray(feishuConfig.groupAllowFrom)) {
+            const groupAllowFrom = feishuConfig.groupAllowFrom;
+            const index = groupAllowFrom.indexOf(groupId);
+            if (index >= 0) {
+                groupAllowFrom.splice(index, 1);
+                configChanged = true;
+                console.log(`[重置] 已从群组白名单移除: ${groupId}`);
+            }
+        }
+        // Remove group config
+        if (feishuConfig?.groups && typeof feishuConfig.groups === 'object') {
+            const groups = feishuConfig.groups;
+            if (groups[groupId]) {
+                delete groups[groupId];
+                configChanged = true;
+                console.log(`[重置] 已移除群组配置: ${groupId}`);
+            }
+        }
+        // Remove bindings for this group
+        if (config.bindings && Array.isArray(config.bindings)) {
+            const originalLength = config.bindings.length;
+            config.bindings = config.bindings.filter((b) => {
+                const match = b.match;
+                return !(match?.channel === 'feishu' &&
+                    match?.peer?.kind === 'group' &&
+                    match?.peer?.id === groupId);
+            });
+            if (config.bindings.length < originalLength) {
+                configChanged = true;
+                console.log(`[重置] 已移除 ${originalLength - config.bindings.length} 个群组绑定`);
+            }
+        }
+        if (configChanged) {
+            fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+        }
+    }
+    catch (e) {
+        console.warn('移除飞书群组配置失败:', e);
+    }
+}
+/**
+ * Restore feishu group config to openclaw.json
+ */
+function restoreFeishuGroupConfig(data) {
+    try {
+        const configPath = (0, utils_1.getOpenClawJsonPath)();
+        if (!fs.existsSync(configPath))
+            return;
+        const content = fs.readFileSync(configPath, 'utf-8');
+        const config = JSON.parse(content);
+        let configChanged = false;
+        // Ensure channels.feishu structure exists
+        if (!config.channels)
+            config.channels = {};
+        const channels = config.channels;
+        if (!channels.feishu) {
+            channels.feishu = {
+                enabled: true,
+                groupPolicy: 'allowlist'
+            };
+        }
+        const feishuConfig = channels.feishu;
+        // Restore groupAllowFrom
+        if (data.groupAllowFrom) {
+            if (!feishuConfig.groupAllowFrom) {
+                feishuConfig.groupAllowFrom = [];
+            }
+            const groupAllowFrom = feishuConfig.groupAllowFrom;
+            for (const id of data.groupAllowFrom) {
+                if (!groupAllowFrom.includes(id)) {
+                    groupAllowFrom.push(id);
+                    configChanged = true;
+                }
+            }
+            if (configChanged) {
+                console.log(`[重置] 已恢复群组白名单: ${data.groupId}`);
+            }
+        }
+        // Restore group config (requireMention etc.)
+        if (data.groupConfig) {
+            if (!feishuConfig.groups) {
+                feishuConfig.groups = {};
+            }
+            const groups = feishuConfig.groups;
+            groups[data.groupId] = data.groupConfig;
+            configChanged = true;
+            console.log(`[重置] 已恢复群组配置: ${data.groupId}`);
+        }
+        if (configChanged) {
+            fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+        }
+    }
+    catch (e) {
+        console.warn('恢复飞书群组配置失败:', e);
+    }
+}
+/**
+ * Revert credentials related changes (feishu pairing etc.)
+ *
+ * 清除飞书配对授权信息：
+ * - 从 feishu-{accountId}-allowFrom.json 中移除用户
+ * - 从 feishu-allowFrom.json 中移除用户
+ */
+function revertCredentialsChange(change) {
+    if (change.change_type === 'feishu_pairing_approve' && change.action === 'add') {
+        // 解析变更内容
+        if (!change.new_value)
+            return;
+        try {
+            const data = JSON.parse(change.new_value);
+            const accountId = data.accountId;
+            const userId = data.userId;
+            if (!accountId || !userId)
+                return;
+            // 获取凭证目录
+            const openclawRoot = (0, utils_1.getOpenClawRoot)();
+            const credentialsDir = openclawRoot
+                ? path.join(openclawRoot, 'credentials')
+                : path.join(os.homedir(), '.openclaw', 'credentials');
+            // 要清理的文件列表
+            const fileNames = [
+                'feishu-allowFrom.json',
+                `feishu-${accountId}-allowFrom.json`,
+                'feishu-default-allowFrom.json'
+            ];
+            for (const fileName of fileNames) {
+                const filePath = path.join(credentialsDir, fileName);
+                if (!fs.existsSync(filePath))
+                    continue;
+                try {
+                    const content = fs.readFileSync(filePath, 'utf-8');
+                    let allowFrom = JSON.parse(content) || [];
+                    // 移除该用户
+                    const index = allowFrom.indexOf(userId);
+                    if (index >= 0) {
+                        allowFrom.splice(index, 1);
+                        console.log(`[重置] 已从 ${fileName} 移除用户: ${userId}`);
+                        if (allowFrom.length > 0) {
+                            fs.writeFileSync(filePath, JSON.stringify(allowFrom, null, 2), 'utf-8');
+                        }
+                        else {
+                            // 如果没有用户了，删除文件
+                            fs.unlinkSync(filePath);
+                            console.log(`[重置] 已删除空文件: ${fileName}`);
+                        }
+                    }
+                }
+                catch (e) {
+                    console.warn(`处理 ${fileName} 失败:`, e);
+                }
+            }
+        }
+        catch (e) {
+            console.warn('撤销飞书配对授权失败:', e);
+        }
+    }
+}
+//# sourceMappingURL=config-tracker.service.js.map