wpops 0.1.0 → 0.2.0

package/bin/wpops.js

@@ -1,72 +1,23 @@
 #!/usr/bin/env node
-import { loadEnv, listSites } from '../lib/env.js';
-import { buildConfig, createClient, WpError } from '../lib/client.js';
+import { existsSync, readFileSync, writeFileSync, rmSync, renameSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { loadEnv, listSites, configHome } from '../lib/env.js';
+import { WpError } from '../lib/client.js';
+import { UsageError } from '../lib/errors.js';
 import { parseArgs, isMutation } from '../lib/args.js';
 import { installSkill } from '../lib/skill.js';
-import * as cmd from '../lib/commands.js';
+import { configureOutput } from '../lib/util.js';
+import { runOne } from '../lib/run.js';
+import { generalHelp, groupHelp, commandsJson, usageHint } from '../lib/help.js';
+import { completionWords, groupByName } from '../lib/spec.js';
+import { setup } from '../lib/commands.js';
 
-function printJson(value) {
-  console.log(JSON.stringify(value, null, 2));
-}
-
-function printHelp() {
-  console.log(`wpops —— WordPress REST 操作工具
-
-用法: wpops [--site 名字 | --all] <组> <动作> [参数] [--flags]
-
-  setup                           交互式配置一个站点(写入 sites/<名字>.env 并体检)
-  doctor                          连接与权限体检(先跑这个)
-  me                              当前用户与能力
-  sites                           列出已配置的站点
-  install-skill                   把内置 skill 装到 agent 发现目录
-
-  posts      list|get|create|update|delete ...
-  pages      list|get|create|update|delete ...
-  media      list|get|upload|update|delete ...
-  plugins    list|install|activate|deactivate ...
-  themes     list|activate ...
-  categories list|get|create|update|delete ...
-  tags       list|get|create|update|delete ...
-  comments   list|get|update|delete ...
-  users      list|get|create|update|delete|me ...
-  raw <METHOD> <path> [--data JSON]   任意端点兜底
-
-多站点:
-  --site <名字> / -s <名字>        对 sites/<名字>.env 执行
-  --all / -a                       对所有已配置站点批量执行(写操作需 --yes)
-
-安全:
-  --dry-run                       只预览不执行(写操作)
-  --yes / -y                      --all 写操作的确认开关
-
-常用参数:
-  --per-page N · --page N         分页(REST 上限 100)
-  --status <s>                    状态(posts/comments 等)
-  --search <s> · --orderby <f> · --order <asc|desc>
-  --categories 1,2 · --tags 3,4   分类/标签 ID(过滤或设置)
-  --author <id> · --after <日期> · --before <日期>
-  --title/--content/--from-file   标题/正文
-  --slug <s> · --excerpt <s>      别名 / 摘要
-  --featured-media <id>           特色图
-  --alt <文本> · --caption <文本> 媒体替代文本 / 说明
-  --name/--parent/--description   分类/标签字段
-  --username/--email/--role       用户字段
-  --force                         彻底删除 / 危险操作确认
-  --data <JSON>                   raw 的请求体
-  --json                          输出原始 JSON
-
-示例:
-  wpops doctor
-  wpops -s blog-a posts list --per-page 5 --orderby date --order desc
-  wpops posts list --categories 3,7
-  wpops posts update 12 --from-file ./post.md --status draft
-  wpops media update 44 --alt "配图"
-  wpops categories list
-  wpops comments list --status hold
-  wpops --all posts list
-  wpops --all plugins list
-  wpops --all posts delete 5 --dry-run
-  wpops plugins install wp-super-cache --activate`);
+function version() {
+  try {
+    return JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
+  } catch {
+    return 'unknown';
+  }
 }
 
 function printSites() {
@@ -89,217 +40,210 @@ function printSites() {
   }
 }
 
-async function runOne(site, group, action, rest, flags, showHeader) {
-  const cfg = buildConfig(loadEnv(site));
-  const client = createClient(cfg);
+// ------------------------------------------------------------------ sites 管理
 
-  if (showHeader) {
-    console.log(`\n=== ${site || '(default)'} — ${cfg.url || '(未配置 WP_URL)'} ===`);
+const SENSITIVE = /PASSWORD|SECRET|TOKEN|KEY/i;
+
+function sitesCommand(action, rest) {
+  const dir = join(configHome(), 'sites');
+  switch (action) {
+    case undefined:
+    case 'list':
+      return printSites();
+    case 'show': {
+      const name = rest[0];
+      if (!name) throw new Error('sites show 需要站点名');
+      const env = loadEnv(name);
+      console.log(`站点 ${name}:`);
+      for (const [key, value] of Object.entries(env)) {
+        console.log(`  ${key}=${SENSITIVE.test(key) ? '***' : value}`);
+      }
+      return;
+    }
+    case 'rm': {
+      const name = rest[0];
+      if (!name) throw new Error('sites rm 需要站点名');
+      const file = join(dir, `${name}.env`);
+      if (!existsSync(file)) throw new Error(`找不到站点配置 ${file}`);
+      rmSync(file);
+      console.log(`✓ 已删除站点配置 ${name}`);
+      return;
+    }
+    case 'rename': {
+      const [from, to] = rest;
+      if (!from || !to) throw new Error('sites rename 需要 <旧名> <新名>');
+      const src = join(dir, `${from}.env`);
+      const dst = join(dir, `${to}.env`);
+      if (!existsSync(src)) throw new Error(`找不到站点配置 ${src}`);
+      if (existsSync(dst)) throw new Error(`目标已存在 ${dst}`);
+      renameSync(src, dst);
+      console.log(`✓ 已重命名站点 ${from} → ${to}`);
+      return;
+    }
+    default:
+      throw new Error(`sites 未知子命令:${action}(list|show|rm|rename)`);
   }
+}
 
-  const needFirst = (what) => {
-    const value = rest[0];
-    if (!value) throw new Error(`${what} 需要一个参数`);
-    return value;
-  };
+// ------------------------------------------------------------------ 输出包装
 
-  const content = async (type) => {
-    switch (action) {
-      case undefined:
-      case 'list':
-        return cmd.listContent(client, type, flags);
-      case 'get':
-        return cmd.getContent(client, type, needFirst('get'), flags);
-      case 'create':
-      case 'new':
-        return cmd.createContent(client, type, flags);
-      case 'update':
-      case 'edit':
-        return cmd.updateContent(client, type, needFirst('update'), flags);
-      case 'delete':
-      case 'rm':
-        return cmd.deleteContent(client, type, needFirst('delete'), flags);
-      default:
-        throw new Error(`${type} 未知子命令:${action}`);
+/** 统一处理 --quiet / --output:抑制或把命令的人类可读输出写入文件。 */
+async function withOutput(flags, fn) {
+  const lines = [];
+  const originalLog = console.log;
+  if (flags.quiet) console.log = () => {};
+  else if (flags.output) console.log = (...args) => lines.push(args.join(' '));
+  try {
+    return await fn();
+  } finally {
+    console.log = originalLog;
+    if (!flags.quiet && flags.output && lines.length) {
+      const file = resolve(String(flags.output));
+      writeFileSync(file, lines.join('\n') + '\n', 'utf8');
+      originalLog(`✓ 输出已写入 ${file}`);
     }
-  };
+  }
+}
 
-  const taxonomy = async (tax) => {
-    switch (action) {
-      case undefined:
-      case 'list':
-        return cmd.listTaxonomy(client, tax, flags);
-      case 'get':
-        return cmd.getTaxonomy(client, tax, needFirst('get'));
-      case 'create':
-      case 'new':
-        return cmd.createTaxonomy(client, tax, flags);
-      case 'update':
-      case 'edit':
-        return cmd.updateTaxonomy(client, tax, needFirst('update'), flags);
-      case 'delete':
-      case 'rm':
-        return cmd.deleteTaxonomy(client, tax, needFirst('delete'), flags);
-      default:
-        throw new Error(`${tax} 未知子命令:${action}`);
-    }
-  };
+// ------------------------------------------------------------------ 用法错误
 
-  switch (group) {
-    case 'doctor':
-      return cmd.doctor(client, cfg, flags);
-    case 'me':
-      return cmd.me(client, flags);
-    case 'posts':
-    case 'post':
-      return content('posts');
-    case 'pages':
-    case 'page':
-      return content('pages');
-    case 'media':
-      switch (action) {
-        case undefined:
-        case 'list':
-          return cmd.listMedia(client, flags);
-        case 'get':
-          return cmd.getMedia(client, needFirst('get'), flags);
-        case 'upload':
-          return cmd.uploadMedia(client, needFirst('upload 需要文件路径'), flags);
-        case 'update':
-        case 'edit':
-          return cmd.updateMedia(client, needFirst('update'), flags);
-        case 'delete':
-        case 'rm':
-          return cmd.deleteMedia(client, needFirst('delete'), flags);
-        default:
-          throw new Error(`media 未知子命令:${action}`);
-      }
-    case 'plugins':
-    case 'plugin':
-      switch (action) {
-        case undefined:
-        case 'list':
-          return cmd.listPlugins(client, flags);
-        case 'install':
-          if (!rest[0]) {
-            throw new Error('plugins install 需要 wordpress.org 插件别名,例如 wpops plugins install akismet');
-          }
-          return cmd.installPlugin(client, rest[0], flags);
-        case 'activate':
-          return cmd.setPluginStatus(client, needFirst('activate'), true, flags);
-        case 'deactivate':
-          return cmd.setPluginStatus(client, needFirst('deactivate'), false, flags);
-        default:
-          throw new Error(`plugins 未知子命令:${action}`);
-      }
-    case 'themes':
-    case 'theme':
-      switch (action) {
-        case undefined:
-        case 'list':
-          return cmd.listThemes(client, flags);
-        case 'activate':
-        case 'switch':
-          return cmd.activateTheme(client, needFirst('activate'), flags);
-        default:
-          throw new Error(`themes 未知子命令:${action}`);
-      }
-    case 'categories':
-    case 'category':
-      return taxonomy('categories');
-    case 'tags':
-    case 'tag':
-      return taxonomy('tags');
-    case 'comments':
-    case 'comment':
-      switch (action) {
-        case undefined:
-        case 'list':
-          return cmd.listComments(client, flags);
-        case 'get':
-          return cmd.getComment(client, needFirst('get'));
-        case 'update':
-        case 'edit':
-          return cmd.updateComment(client, needFirst('update'), flags);
-        case 'delete':
-        case 'rm':
-          return cmd.deleteComment(client, needFirst('delete'), flags);
-        default:
-          throw new Error(`comments 未知子命令:${action}`);
-      }
-    case 'users':
-    case 'user':
-      switch (action) {
-        case undefined:
-        case 'list':
-          return cmd.listUsers(client, flags);
-        case 'me':
-          return cmd.me(client, flags);
-        case 'get':
-          return cmd.getUser(client, needFirst('get'));
-        case 'create':
-        case 'new':
-          return cmd.createUser(client, flags);
-        case 'update':
-        case 'edit':
-          return cmd.updateUser(client, needFirst('update'), flags);
-        case 'delete':
-        case 'rm':
-          return cmd.deleteUser(client, needFirst('delete'), flags);
-        default:
-          throw new Error(`users 未知子命令:${action}`);
-      }
-    case 'raw':
-      if (!action || !rest[0]) throw new Error('raw 用法:wpops raw <METHOD> <path> [--data JSON]');
-      return cmd.raw(client, action, rest[0], flags);
+/** 用法错误:stderr 打印「消息 + 精简用法 + --help 提示」,退出码 2(与运行期错误的 1 区分)。 */
+function reportUsageError(err, group, action) {
+  console.error(`✗ ${err.message}`);
+  const lines = usageHint(group, action);
+  if (lines.length) {
+    console.error('用法:');
+    for (const line of lines) console.error(`  ${line}`);
+  }
+  if (group && groupByName(group)) {
+    console.error(`提示:wpops ${group} --help 查看完整用法`);
+  } else {
+    console.error('提示:wpops help 查看全部命令');
+  }
+  process.exitCode = 2;
+}
+
+// ------------------------------------------------------------------ completion
+
+function printCompletion(shell) {
+  const words = completionWords(['help']).join(' ');
+  switch (shell || 'bash') {
+    case 'bash':
+      console.log(`# wpops bash completion(用法:eval "$(wpops completion bash)")\n_wpops() {\n  local cur="\${COMP_WORDS[COMP_CWORD]}"\n  COMPREPLY=( $(compgen -W "${words}" -- "$cur") )\n}\ncomplete -F _wpops wpops`);
+      return;
+    case 'zsh':
+      console.log(`# wpops zsh completion(用法:eval "$(wpops completion zsh)")\n_wpops() { compadd ${words} }\ncompdef _wpops wpops`);
+      return;
+    case 'fish':
+      console.log(`# wpops fish completion(用法:wpops completion fish | source)\ncomplete -c wpops -f -a "${words}"`);
+      return;
+    case 'powershell':
+      console.log(`# wpops PowerShell completion(用法:wpops completion powershell | Out-String | Invoke-Expression)\nRegister-ArgumentCompleter -Native -CommandName wpops -ScriptBlock {\n  param($wordToComplete)\n  "${words}".Split(' ') | Where-Object { $_ -like "$wordToComplete*" } | ForEach-Object { [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_) }\n}`);
+      return;
     default:
-      throw new Error(`未知命令:${group}(运行 wpops help 查看用法)`);
+      throw new Error('completion 支持:bash|zsh|fish|powershell');
   }
 }
 
+// ------------------------------------------------------------------ main
+
 async function main() {
   const { positionals, flags } = parseArgs(process.argv.slice(2));
   const [group, action, ...rest] = positionals;
 
+  configureOutput(flags);
+  if (flags.paginate) flags['all-pages'] = true;
+  if (flags.csv || flags.table || flags.fields) flags.json = true;
+
+  if (flags.version) {
+    console.log(version());
+    return;
+  }
+
+  // help:wpops / wpops help [组] [动作] / wpops <组> [动作] --help
   if (!group || group === 'help' || flags.help) {
-    printHelp();
+    const helpGroup = group === 'help' ? action : group;
+    const helpAction = group === 'help' ? rest[0] : action;
+    if (helpGroup) {
+      const text = groupHelp(helpGroup, helpAction);
+      if (!text) {
+        console.error(`未知命令组:${helpGroup}(运行 wpops help 查看全部)`);
+        process.exitCode = 1;
+        return;
+      }
+      console.log(text);
+      return;
+    }
+    console.log(generalHelp(version()));
     return;
   }
+
   if (group === 'sites') {
-    printSites();
+    await withOutput(flags, () => sitesCommand(action, rest));
     return;
   }
   if (group === 'setup') {
-    await cmd.setup(flags);
+    await setup(flags);
     return;
   }
   if (group === 'install-skill') {
-    const dirs = installSkill();
-    if (!dirs.length) {
-      console.log('未安装 skill(可能已存在同名目录被跳过,或用 WPOPS_SKIP_SKILL 禁用)。');
-    } else {
-      for (const dir of dirs) console.log(`✓ skill 已安装到 ${dir}`);
-    }
+    await withOutput(flags, () => {
+      const dirs = installSkill();
+      if (!dirs.length) {
+        console.log('未安装 skill(可能已存在同名目录被跳过,或用 WPOPS_SKIP_SKILL 禁用)。');
+      } else {
+        for (const dir of dirs) console.log(`✓ skill 已安装到 ${dir}`);
+      }
+    });
+    return;
+  }
+  if (group === 'completion') {
+    await withOutput(flags, () => printCompletion(action));
+    return;
+  }
+  if (group === 'commands') {
+    await withOutput(flags, () => console.log(commandsJson(version())));
     return;
   }
 
-  const site = flags.site || process.env.WPOPS_SITE || null;
-  const mutating = isMutation(group, action);
+  const single = flags.site || process.env.WPOPS_SITE || null;
+  const named = flags.site && String(flags.site).includes(',')
+    ? String(flags.site).split(',').map((s) => s.trim()).filter(Boolean)
+    : [];
 
-  if (flags.all) {
-    const targets = listSites();
+  let targets = null;
+  if (flags.all) targets = listSites();
+  else if (named.length) targets = named.map((name) => ({ name, label: name }));
+
+  if (targets) {
     if (!targets.length) throw new Error('还没有配置任何站点');
-    if (mutating && !flags.yes && !flags['dry-run']) {
-      throw new Error('--all 会作用于所有站点。写操作请加 --yes 确认,或先用 --dry-run 预览。');
+    if (isMutation(group, action) && !flags.yes && !flags['dry-run']) {
+      reportUsageError(
+        new UsageError('批量执行会作用于多个站点。写操作请加 --yes 确认,或先用 --dry-run 预览。', { group, action }),
+        group,
+        action,
+      );
+      return;
     }
     let failures = 0;
-    for (const target of targets) {
-      try {
-        await runOne(target.name, group, action, rest, flags, true);
-      } catch (err) {
-        failures++;
-        console.error(`✗ [${target.label}] ${err.message}`);
+    let usageError = null;
+    await withOutput(flags, async () => {
+      for (const target of targets) {
+        try {
+          await runOne(target.name, group, action, rest, flags, true);
+        } catch (err) {
+          if (err instanceof UsageError) {
+            usageError = err; // 用法与站点无关:立即中止,不逐站重复
+            return;
+          }
+          failures++;
+          console.error(`✗ [${target.label}] ${err.message}`);
+        }
       }
+    });
+    if (usageError) {
+      reportUsageError(usageError, usageError.group || group, usageError.action ?? action);
+      return;
     }
     if (failures) {
       console.error(`\n完成:${failures}/${targets.length} 个站点出错。`);
@@ -308,10 +252,23 @@ async function main() {
     return;
   }
 
-  await runOne(site, group, action, rest, flags, false);
+  try {
+    await withOutput(flags, () => runOne(single, group, action, rest, flags, false));
+  } catch (err) {
+    if (err instanceof UsageError) {
+      reportUsageError(err, err.group || group, err.action ?? action);
+      return;
+    }
+    throw err;
+  }
 }
 
 main().catch((err) => {
+  if (err instanceof UsageError) {
+    console.error(`✗ ${err.message}`);
+    console.error('提示:wpops help 查看全部命令');
+    process.exit(2);
+  }
   if (err instanceof WpError) {
     console.error(`✗ ${err.message}`);
     if (err.code) console.error(`  代码:${err.code}`);

package/lib/abilities.js

@@ -0,0 +1,51 @@
+// Abilities API 命令(/wp-json/wp-abilities/v1/abilities)。
+// 需要站点安装并启用 Abilities API 插件。
+import { printJson, dry, parseJson } from './util.js';
+
+const ABILITIES = '/wp-json/wp-abilities/v1/abilities';
+
+/** 端点可能返回数组、{ abilities: [...] } 或按名字索引的对象,统一成数组。 */
+function asList(data) {
+  if (Array.isArray(data)) return data;
+  if (Array.isArray(data?.abilities)) return data.abilities;
+  if (data && typeof data === 'object') return Object.values(data);
+  return [];
+}
+
+/** 列表:GET /abilities。字段可能缺失,逐项容错。 */
+export async function listAbilities(client, flags) {
+  const { data } = await client.request('GET', ABILITIES);
+  if (flags.json) return printJson(data);
+  const items = asList(data);
+  console.log(`Abilities ${items.length} 个:`);
+  for (const item of items) {
+    const name = item?.name ?? item?.id ?? '?';
+    const label = item?.label ?? '';
+    const description = item?.description ?? '';
+    console.log(`  ${name}  ${label}  ${description}`);
+  }
+}
+
+/** 详情:GET /abilities/{name}。 */
+export async function getAbility(client, name, flags) {
+  const { data } = await client.request('GET', `${ABILITIES}/${encodeURIComponent(name)}`);
+  if (flags.json) return printJson(data);
+  console.log(`${data?.name ?? name}  ${data?.label ?? ''}`);
+  if (data?.description) console.log(`  描述:${data.description}`);
+  if (data?.input_schema) console.log(`  输入:${JSON.stringify(data.input_schema)}`);
+  if (data?.output_schema) console.log(`  输出:${JSON.stringify(data.output_schema)}`);
+}
+
+/**
+ * 运行:POST /abilities/{name}/run。
+ * body 来自 --input 或 --data(JSON 字符串),都没有则 {}。
+ */
+export async function runAbility(client, name, flags) {
+  const raw = flags.input !== undefined ? flags.input : flags.data;
+  const body = raw !== undefined ? parseJson(raw) : {};
+  if (flags['dry-run']) return dry(`运行 Ability ${name} ${JSON.stringify(body)}`);
+  const { data } = await client.request('POST', `${ABILITIES}/${encodeURIComponent(name)}/run`, { body });
+  if (flags.json) return printJson(data);
+  console.log(`✓ 已运行 ${name}`);
+  console.log(JSON.stringify(data, null, 2));
+}

package/lib/app-passwords.js

@@ -0,0 +1,39 @@
+// 用户应用密码(/wp-json/wp/v2/users/<user|me>/application-passwords)。
+// 创建是唯一会返回明文 password 的接口,该字段只在此处打印一次。
+import { printJson, dry } from './util.js';
+import { UsageError } from './errors.js';
+
+function appPasswordsPath(user) {
+  return `/wp-json/wp/v2/users/${user || 'me'}/application-passwords`;
+}
+
+export async function listAppPasswords(client, user, flags) {
+  const base = appPasswordsPath(user);
+  const { data } = await client.request('GET', base);
+  if (flags.json) return printJson(data);
+  console.log(`应用密码 ${data.length} 个:`);
+  for (const p of data) {
+    console.log(`  ${p.uuid}  ${p.name}  ${p.last_used ?? '—'}  ${p.created ?? '—'}`);
+  }
+}
+
+export async function createAppPassword(client, user, flags) {
+  if (flags.name === undefined) throw new UsageError('创建应用密码需要 --name');
+  const body = { name: String(flags.name) };
+  if (flags['app-id'] !== undefined) body.app_id = String(flags['app-id']);
+  const base = appPasswordsPath(user);
+  if (flags['dry-run']) return dry(`创建应用密码 ${body.name}`);
+  const { data } = await client.request('POST', base, { body });
+  if (flags.json) return printJson(data);
+  console.log(`${data.uuid}  ${data.name}`);
+  console.log(`password: ${data.password}`);
+}
+
+export async function deleteAppPassword(client, user, uuid, flags) {
+  const base = appPasswordsPath(user);
+  if (flags['dry-run']) return dry(`删除应用密码 ${uuid}`);
+  if (!flags.force) throw new UsageError('删除应用密码需要 --force(不可撤销)');
+  const { data } = await client.request('DELETE', `${base}/${uuid}`);
+  if (flags.json) return printJson(data);
+  console.log(data.deleted ? `✓ 已删除应用密码 ${uuid}` : `? 应用密码 ${uuid} 未删除`);
+}

package/lib/args.js

@@ -1,5 +1,8 @@
 // 已知的布尔开关:遇到它们不吞下一个参数,避免 `--json -s a` 把 -s 当值。
-const BOOLEAN_FLAGS = new Set(['json', 'force', 'activate', 'dry-run', 'yes', 'all', 'help']);
+const BOOLEAN_FLAGS = new Set([
+  'json', 'force', 'activate', 'dry-run', 'yes', 'all', 'help', 'version',
+  'csv', 'table', 'quiet', 'verbose', 'all-pages', 'paginate', 'auto-add',
+]);
 
 /** 解析命令行。支持 --flag value、--flag=value、布尔 --flag、以及 -s/-a/-h/-y。 */
 export function parseArgs(argv) {
@@ -23,6 +26,10 @@ export function parseArgs(argv) {
       flags.yes = true;
       continue;
     }
+    if (arg === '-v' || arg === '--version') {
+      flags.version = true;
+      continue;
+    }
     if (arg.startsWith('--')) {
       const eq = arg.indexOf('=');
       if (eq !== -1) {
@@ -49,37 +56,5 @@ export function parseArgs(argv) {
   return { positionals, flags };
 }
 
-const CONTENT_MUTATIONS = new Set(['create', 'new', 'update', 'edit', 'delete', 'rm']);
-
-/** 判断命令是否会修改站点数据(用于 --all 护栏与 --dry-run 提示)。 */
-export function isMutation(group, action) {
-  const act = action || '';
-  switch (group) {
-    case 'posts':
-    case 'post':
-    case 'pages':
-    case 'page':
-    case 'categories':
-    case 'category':
-    case 'tags':
-    case 'tag':
-      return CONTENT_MUTATIONS.has(act);
-    case 'media':
-      return ['upload', 'update', 'edit', 'delete', 'rm'].includes(act);
-    case 'plugins':
-    case 'plugin':
-      return ['install', 'activate', 'deactivate'].includes(act);
-    case 'themes':
-    case 'theme':
-      return ['activate', 'switch'].includes(act);
-    case 'comments':
-    case 'comment':
-      return ['update', 'edit', 'delete', 'rm'].includes(act);
-    case 'users':
-      return ['create', 'update', 'edit', 'delete', 'rm'].includes(act);
-    case 'raw':
-      return !['GET', 'HEAD', 'OPTIONS'].includes(act.toUpperCase());
-    default:
-      return false;
-  }
-}
+// 写操作判定统一来自 lib/spec.js(单一事实来源),这里只做转发。
+export { isMutation, groupByName } from './spec.js';