Feat: 审计功能构建、远程命令协助、更详细的实例配置管理体系

.gitignore

@@ -411,3 +411,5 @@ thumb
 sketch
 
 ClassIsland.ManagementServer.Server/data/appsettings.json
+data/
+start-vite.bat

ClassIsland.ManagementServer.Server/Authorization/Roles.cs

@@ -12,9 +12,7 @@ public static class Roles
 
     public const string ClientsDelete = "ClientsDelete";
 
-    public const string CommandsUser = "CommandsUser";
-
     public const string UsersManager = "UsersManager";
 
-    public static readonly List<string> AllRoles = [Admin, ObjectsWrite, ObjectsDelete, ClientsWrite, ClientsDelete, CommandsUser, UsersManager];
+    public static readonly List<string> AllRoles = [Admin, ObjectsWrite, ObjectsDelete, ClientsWrite, ClientsDelete, UsersManager];
 }

ClassIsland.ManagementServer.Server/Context/ManagementServerContext.cs

@@ -48,6 +48,20 @@ public ManagementServerContext(DbContextOptions<ManagementServerContext> options
 
     public virtual DbSet<Setting> Settings { get; set; }
 
+    public virtual DbSet<AuditLog> AuditLogs { get; set; }
+
+    public virtual DbSet<ClientConfigSnapshot> ClientConfigSnapshots { get; set; }
+
+    public virtual DbSet<ComponentTemplate> ComponentTemplates { get; set; }
+
+    public virtual DbSet<ClientComponentConfig> ClientComponentConfigs { get; set; }
+
+    public virtual DbSet<ClientAutomationConfig> ClientAutomationConfigs { get; set; }
+
+    public virtual DbSet<ClientPluginInfo> ClientPluginInfos { get; set; }
+
+    public virtual DbSet<ClientPluginInstallRequest> ClientPluginInstallRequests { get; set; }
+
     protected override void OnModelCreating(ModelBuilder modelBuilder)
     {
         MapJsonConverter(modelBuilder.Entity<ProfileClassplan>().Property(e => e.AttachedObjects));

ClassIsland.ManagementServer.Server/Controllers/AuditController.cs

@@ -0,0 +1,26 @@
+using ClassIsland.ManagementServer.Server.Context;
+using ClassIsland.ManagementServer.Server.Extensions;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+
+namespace ClassIsland.ManagementServer.Server.Controllers;
+
+[ApiController]
+[Authorize]
+[Route("api/v1/audit")]
+public class AuditController(
+    ILogger<AuditController> logger,
+    ManagementServerContext dbContext) : ControllerBase
+{
+    public ILogger<AuditController> Logger { get; } = logger;
+    public ManagementServerContext DbContext { get; } = dbContext;
+
+    [HttpGet]
+    public async Task<IActionResult> ListLogs([FromQuery] int pageIndex = 1, [FromQuery] int pageSize = 20)
+    {
+        var result = await DbContext.AuditLogs
+            .ToPaginatedListAsync(pageIndex, pageSize, decreasing: true, orderByUpdatedTime: true);
+        return Ok(result);
+    }
+}

ClassIsland.ManagementServer.Server/Controllers/AutomationController.cs

@@ -0,0 +1,119 @@
+using ClassIsland.ManagementServer.Server.Authorization;
+using ClassIsland.ManagementServer.Server.Context;
+using ClassIsland.ManagementServer.Server.Entities;
+using ClassIsland.ManagementServer.Server.Enums;
+using ClassIsland.ManagementServer.Server.Models;
+using ClassIsland.ManagementServer.Server.Services;
+using ClassIsland.Shared.Protobuf.Command;
+using ClassIsland.Shared.Protobuf.Enum;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+
+namespace ClassIsland.ManagementServer.Server.Controllers;
+
+[ApiController]
+[Authorize]
+[Route("api/v1/clients/{cuid}/automation")]
+public class AutomationController(
+    ILogger<AutomationController> logger,
+    ManagementServerContext dbContext,
+    ClientCommandDeliverService commandDeliverService,
+    PendingConfigRequestService pendingConfigRequests) : ControllerBase
+{
+    public ILogger<AutomationController> Logger { get; } = logger;
+    public ManagementServerContext DbContext { get; } = dbContext;
+    public ClientCommandDeliverService CommandDeliverService { get; } = commandDeliverService;
+    public PendingConfigRequestService PendingConfigRequests { get; } = pendingConfigRequests;
+
+    /// <summary>
+    /// 获取客户端自动化配置
+    /// </summary>
+    [HttpGet]
+    public async Task<IActionResult> GetConfig(Guid cuid)
+    {
+        var config = await DbContext.Set<ClientAutomationConfig>().FindAsync(cuid);
+        if (config == null)
+            return Ok(new ClientAutomationConfig { ClientCuid = cuid, WorkflowsJson = "[]" });
+        return Ok(config);
+    }
+
+    /// <summary>
+    /// 更新客户端自动化配置并推送到客户端
+    /// </summary>
+    [HttpPut]
+    [Authorize(Roles = Roles.ObjectsWrite)]
+    public async Task<IActionResult> UpdateConfig(Guid cuid, [FromBody] UpdateAutomationRequest request)
+    {
+        var config = await DbContext.Set<ClientAutomationConfig>().FindAsync(cuid);
+        if (config == null)
+        {
+            config = new ClientAutomationConfig
+            {
+                ClientCuid = cuid,
+                WorkflowsJson = request.WorkflowsJson ?? "[]",
+                CreatedTime = DateTime.Now,
+                UpdatedTime = DateTime.Now
+            };
+            await DbContext.Set<ClientAutomationConfig>().AddAsync(config);
+        }
+        else
+        {
+            config.WorkflowsJson = request.WorkflowsJson ?? config.WorkflowsJson;
+            config.UpdatedTime = DateTime.Now;
+        }
+
+        await DbContext.SaveChangesAsync();
+
+        // 推送到客户端
+        var pushPayload = new PushConfig
+        {
+            ConfigType = 4, // CurrentAutomation
+            ConfigJson = config.WorkflowsJson
+        };
+        await CommandDeliverService.DeliverCommandAsync(
+            CommandTypes.PushConfig,
+            pushPayload,
+            new ObjectsAssignee
+            {
+                AssigneeType = AssigneeTypes.ClientUid,
+                TargetClientCuid = cuid
+            });
+
+        Logger.LogInformation("已更新客户端 {Cuid} 的自动化配置", cuid);
+        return Ok(config);
+    }
+
+    /// <summary>
+    /// 请求客户端上报当前自动化配置
+    /// </summary>
+    [HttpPost("request-upload")]
+    [Authorize(Roles = Roles.ObjectsWrite)]
+    public async Task<IActionResult> RequestUpload(Guid cuid)
+    {
+        var payload = new GetClientConfig
+        {
+            RequestGuid = Guid.NewGuid().ToString(),
+            ConfigType = ConfigTypes.CurrentAutomation
+        };
+
+        PendingConfigRequests.TrackRequest(payload.RequestGuid, ConfigTypes.CurrentAutomation, cuid);
+
+        await CommandDeliverService.DeliverCommandAsync(
+            CommandTypes.GetClientConfig,
+            payload,
+            new ObjectsAssignee
+            {
+                AssigneeType = AssigneeTypes.ClientUid,
+                TargetClientCuid = cuid
+            });
+
+        Logger.LogInformation("已请求客户端 {Cuid} 上报自动化配置", cuid);
+        return Ok(new { success = true, requestId = payload.RequestGuid });
+    }
+}
+
+public class UpdateAutomationRequest
+{
+    public string? WorkflowsJson { get; set; }
+}

ClassIsland.ManagementServer.Server/Controllers/ClientCommandDeliverController.cs

@@ -11,7 +11,7 @@
 namespace ClassIsland.ManagementServer.Server.Controllers;
 
 [ApiController]
-[Authorize(Roles = Roles.CommandsUser)]
+[Authorize(Roles = Roles.ClientsWrite)]
 [Route("api/v1/client-commands/")]
 public class ClientCommandDeliverController(ClientCommandDeliverService clientCommandDeliverService) : ControllerBase
 {

ClassIsland.ManagementServer.Server/Controllers/ClientPluginsController.cs

@@ -0,0 +1,197 @@
+using ClassIsland.ManagementServer.Server.Authorization;
+using ClassIsland.ManagementServer.Server.Context;
+using ClassIsland.ManagementServer.Server.Entities;
+using ClassIsland.ManagementServer.Server.Enums;
+using ClassIsland.ManagementServer.Server.Services;
+using ClassIsland.Shared.Protobuf;
+using ClassIsland.Shared.Protobuf.Command;
+using ClassIsland.Shared.Protobuf.Enum;
+using Google.Protobuf;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+
+namespace ClassIsland.ManagementServer.Server.Controllers;
+
+[ApiController]
+[Authorize]
+[Route("api/v1/clients/{cuid}/plugins")]
+public class ClientPluginsController(
+    ILogger<ClientPluginsController> logger,
+    ManagementServerContext dbContext,
+    ClientCommandDeliverService commandDeliverService,
+    PendingConfigRequestService pendingConfigRequests) : ControllerBase
+{
+    public ILogger<ClientPluginsController> Logger { get; } = logger;
+    public ManagementServerContext DbContext { get; } = dbContext;
+    public ClientCommandDeliverService CommandDeliverService { get; } = commandDeliverService;
+    public PendingConfigRequestService PendingConfigRequests { get; } = pendingConfigRequests;
+
+    /// <summary>
+    /// 获取客户端已安装的插件列表
+    /// </summary>
+    [HttpGet]
+    public async Task<IActionResult> GetPlugins(Guid cuid)
+    {
+        var plugins = await DbContext.ClientPluginInfos
+            .Where(p => p.ClientCuid == cuid)
+            .OrderBy(p => p.PluginName)
+            .ToListAsync();
+        return Ok(plugins);
+    }
+
+    /// <summary>
+    /// 请求客户端上报插件列表
+    /// </summary>
+    [HttpPost("request-upload")]
+    [Authorize(Roles = Roles.ObjectsWrite)]
+    public async Task<IActionResult> RequestUpload(Guid cuid)
+    {
+        var payload = new GetClientConfig
+        {
+            RequestGuid = Guid.NewGuid().ToString(),
+            ConfigType = ConfigTypes.PluginList
+        };
+
+        PendingConfigRequests.TrackRequest(payload.RequestGuid, ConfigTypes.PluginList, cuid);
+
+        await CommandDeliverService.DeliverCommandAsync(
+            CommandTypes.GetClientConfig,
+            payload,
+            new ObjectsAssignee
+            {
+                AssigneeType = AssigneeTypes.ClientUid,
+                TargetClientCuid = cuid
+            });
+
+        Logger.LogInformation("已请求客户端 {Cuid} 上报插件列表", cuid);
+        return Ok(new { success = true, requestId = payload.RequestGuid });
+    }
+
+    /// <summary>
+    /// 远程安装插件（上传 .cipx 文件）
+    /// </summary>
+    [HttpPost("install")]
+    [Authorize(Roles = Roles.ObjectsWrite)]
+    public async Task<IActionResult> InstallPlugin(Guid cuid, IFormFile file)
+    {
+        if (file == null || file.Length == 0)
+            return BadRequest(new { error = "请上传 .cipx 文件" });
+
+        if (!file.FileName.EndsWith(".cipx", StringComparison.OrdinalIgnoreCase))
+            return BadRequest(new { error = "文件必须是 .cipx 格式" });
+
+        var uploadsDir = Path.Combine("data", "plugin-uploads");
+        Directory.CreateDirectory(uploadsDir);
+        var fileName = $"{cuid}_{DateTime.Now:yyyyMMddHHmmss}_{file.FileName}";
+        var filePath = Path.Combine(uploadsDir, fileName);
+
+        await using (var stream = System.IO.File.Create(filePath))
+        {
+            await file.CopyToAsync(stream);
+        }
+
+        var installRequest = new ClientPluginInstallRequest
+        {
+            ClientCuid = cuid,
+            FileName = fileName,
+            FilePath = filePath,
+            Status = 0,
+            CreatedTime = DateTime.Now,
+            UpdatedTime = DateTime.Now
+        };
+        await DbContext.ClientPluginInstallRequests.AddAsync(installRequest);
+        await DbContext.SaveChangesAsync();
+
+        var command = new PluginCommand
+        {
+            Operation = "install",
+            PluginId = "",
+            RequestId = installRequest.Id
+        };
+        await CommandDeliverService.DeliverCommandAsync(
+            CommandTypes.ManagePlugin,
+            command,
+            new ObjectsAssignee
+            {
+                AssigneeType = AssigneeTypes.ClientUid,
+                TargetClientCuid = cuid
+            });
+
+        Logger.LogInformation("已发送插件安装命令到客户端 {Cuid}, 文件: {FileName}", cuid, fileName);
+        return Ok(new { success = true, requestId = installRequest.Id });
+    }
+
+    /// <summary>
+    /// 获取插件安装包（供客户端拉取）
+    /// </summary>
+    [HttpGet("install/{requestId}/package")]
+    [AllowAnonymous]
+    public async Task<IActionResult> GetPluginPackage(Guid cuid, long requestId)
+    {
+        var request = await DbContext.ClientPluginInstallRequests.FindAsync(requestId);
+        if (request == null || request.ClientCuid != cuid)
+            return NotFound();
+
+        if (!System.IO.File.Exists(request.FilePath))
+            return NotFound(new { error = "安装包不存在" });
+
+        var fileBytes = await System.IO.File.ReadAllBytesAsync(request.FilePath);
+        request.Status = 1;
+        request.UpdatedTime = DateTime.Now;
+        await DbContext.SaveChangesAsync();
+
+        return File(fileBytes, "application/octet-stream", "plugin.cipx");
+    }
+
+    /// <summary>
+    /// 卸载插件
+    /// </summary>
+    [HttpPost("{pluginId}/uninstall")]
+    [Authorize(Roles = Roles.ObjectsWrite)]
+    public async Task<IActionResult> UninstallPlugin(Guid cuid, string pluginId)
+    {
+        var command = new PluginCommand
+        {
+            Operation = "uninstall",
+            PluginId = pluginId
+        };
+        await CommandDeliverService.DeliverCommandAsync(
+            CommandTypes.ManagePlugin,
+            command,
+            new ObjectsAssignee
+            {
+                AssigneeType = AssigneeTypes.ClientUid,
+                TargetClientCuid = cuid
+            });
+
+        Logger.LogInformation("已发送插件卸载命令到客户端 {Cuid}, 插件: {PluginId}", cuid, pluginId);
+        return Ok(new { success = true });
+    }
+
+    /// <summary>
+    /// 启用/禁用插件
+    /// </summary>
+    [HttpPost("{pluginId}/toggle")]
+    [Authorize(Roles = Roles.ObjectsWrite)]
+    public async Task<IActionResult> TogglePlugin(Guid cuid, string pluginId, [FromQuery] bool enable)
+    {
+        var operation = enable ? "enable" : "disable";
+        var command = new PluginCommand
+        {
+            Operation = operation,
+            PluginId = pluginId
+        };
+        await CommandDeliverService.DeliverCommandAsync(
+            CommandTypes.ManagePlugin,
+            command,
+            new ObjectsAssignee
+            {
+                AssigneeType = AssigneeTypes.ClientUid,
+                TargetClientCuid = cuid
+            });
+
+        Logger.LogInformation("已发送插件{Operation}命令到客户端 {Cuid}, 插件: {PluginId}", enable ? "启用" : "禁用", cuid, pluginId);
+        return Ok(new { success = true });
+    }
+}