授权信息
@@ -757,6 +871,30 @@ function runCommand(command, args, timeoutMs = 2500) {
});
}
+export function resolveBossAgentPermissionSettingsUrl(target = "all") {
+ return MACOS_PERMISSION_SETTINGS[target] ?? MACOS_PERMISSION_SETTINGS.all;
+}
+
+export async function openBossAgentPermissionSettings(target = "all", platform = process.platform) {
+ const settingsUrl = resolveBossAgentPermissionSettingsUrl(target);
+ if (platform !== "darwin") {
+ return {
+ ok: false,
+ target,
+ settingsUrl,
+ message: "当前平台暂不支持自动打开系统隐私设置，请在系统设置中手动完成授权。",
+ };
+ }
+
+ const result = await runCommand("open", [settingsUrl], 2500);
+ return {
+ ok: result.ok,
+ target,
+ settingsUrl,
+ message: result.ok ? "已打开系统权限设置。" : result.stderr || result.stdout || "打开系统权限设置失败。",
+ };
+}
+
export async function detectLocalComputerPermissions(platform = process.platform) {
if (platform !== "darwin") {
return {
diff --git a/local-agent/server.mjs b/local-agent/server.mjs
index a372d62..3a715de 100755
--- a/local-agent/server.mjs
+++ b/local-agent/server.mjs
@@ -41,6 +41,7 @@ import {
import {
buildBossAgentStatus,
detectLocalComputerPermissions,
+ openBossAgentPermissionSettings,
renderBossAgentHtmlWithQr,
} from "./boss-agent-status.mjs";
import {
@@ -1029,6 +1030,20 @@ const server = createServer(async (request, response) => {
return;
}
+ if (requestUrl.pathname === "/api/v1/boss-agent/permissions/open") {
+ const target = requestUrl.searchParams.get("target") || "all";
+ const result = await openBossAgentPermissionSettings(target);
+ const wantsJson = String(request.headers.accept || "").includes("application/json");
+ if (wantsJson) {
+ response.writeHead(result.ok ? 200 : 500, { "Content-Type": "application/json" });
+ response.end(JSON.stringify(result));
+ return;
+ }
+ response.writeHead(302, { Location: "/boss-agent" });
+ response.end();
+ return;
+ }
+
if (requestUrl.pathname === "/health") {
response.writeHead(200, { "Content-Type": "application/json" });
response.end(
diff --git a/tests/boss-agent-status.test.mjs b/tests/boss-agent-status.test.mjs
index a4b055b..e7af92f 100644
--- a/tests/boss-agent-status.test.mjs
+++ b/tests/boss-agent-status.test.mjs
@@ -54,6 +54,13 @@ test("boss-agent status exposes unbound QR binding and local permission states",
assert.equal(status.permissionReadiness.coreReady, false);
assert.equal(status.permissionReadiness.fullControlReady, false);
assert.match(status.permissionReadiness.summary, /完整接管/);
+ assert.equal(status.permissionSetup.mode, "one_time_setup");
+ assert.equal(status.permissionSetup.silentUseReady, false);
+ assert.equal(status.permissionSetup.actions.some((action) => action.key === "fullDiskAccess"), true);
+ assert.equal(
+ status.permissionSetup.actions.every((action) => action.settingsUrl.startsWith("x-apple.systempreferences:")),
+ true,
+ );
assert.deepEqual(
status.permissions.items.map((item) => [item.key, item.status]),
[
@@ -113,6 +120,10 @@ test("boss-agent status treats token-backed devices as bound and renders enterpr
assert.match(html, /企业电脑接入端/);
assert.match(html, /本机权限获取/);
assert.match(html, /完整接管待补齐/);
+ assert.match(html, /一次完整授权/);
+ assert.match(html, /后续静默使用/);
+ assert.match(html, /api\/v1\/boss-agent\/permissions\/open\?target=all/);
+ assert.match(html, /api\/v1\/boss-agent\/permissions\/open\?target=fullDiskAccess/);
assert.match(html, /Skill/);
assert.match(html, /bb-browser/);
assert.match(html, /DeepSeek V4/);