feat: 重构CNB管理模块，添加清理记录功能，更新中间件为统一认证方式，优化工作空间相关路由

agent/routes/workspace/index.ts

@@ -1,5 +1,5 @@
 import { createSkill, tool } from '@kevisual/router';
-import { app, cnb } from '../../app.ts';
+import { app, cnbManager, notCNBCheck } from '../../app.ts';
 import z from 'zod';
 import './skills.ts';
 import './keep.ts';
@@ -9,7 +9,7 @@ app.route({
   path: 'cnb',
   key: 'start-workspace',
   description: '启动开发工作空间, 参数 repo',
-  middleware: ['auth-admin'],
+  middleware: ['auth'],
   metadata: {
     tags: ['opencode'],
     ...createSkill({
@@ -24,6 +24,7 @@ app.route({
     })
   }
 }).define(async (ctx) => {
+  const cnb = await cnbManager.getContext(ctx);
   const repo = ctx.query?.repo;
   const branch = ctx.query?.branch;
   const ref = ctx.query?.ref;
@@ -42,7 +43,7 @@ app.route({
   path: 'cnb',
   key: 'list-workspace',
   description: '获取cnb开发工作空间列表，可选参数 status=running 获取运行中的环境',
-  middleware: ['auth-admin'],
+  middleware: ['auth'],
   metadata: {
     tags: ['opencode'],
     ...createSkill({
@@ -59,6 +60,7 @@ app.route({
     })
   }
 }).define(async (ctx) => {
+  const cnb = await cnbManager.getContext(ctx);
   const { status = 'running', page, pageSize, slug, branch } = ctx.query || {};
   const res = await cnb.workspace.list({
     status: status as 'running' | 'closed' | undefined,
@@ -73,7 +75,7 @@ app.route({
   path: 'cnb',
   key: 'get-workspace',
   description: '获取工作空间详情，通过 repo 和 sn 获取',
-  middleware: ['auth-admin'],
+  middleware: ['auth'],
   metadata: {
     tags: ['opencode'],
     ...createSkill({
@@ -87,6 +89,7 @@ app.route({
     })
   }
 }).define(async (ctx) => {
+  const cnb = await cnbManager.getContext(ctx);
   const repo = ctx.query?.repo;
   const sn = ctx.query?.sn;
   if (!repo) {
@@ -104,7 +107,7 @@ app.route({
   path: 'cnb',
   key: 'delete-workspace',
   description: '删除工作空间，通过 pipelineId 或 sn',
-  middleware: ['auth-admin'],
+  middleware: ['auth'],
   metadata: {
     tags: ['opencode'],
     ...createSkill({
@@ -119,6 +122,7 @@ app.route({
     })
   }
 }).define(async (ctx) => {
+  const cnb = await cnbManager.getContext(ctx);
   const pipelineId = ctx.query?.pipelineId;
   const sn = ctx.query?.sn;
   const sns = ctx.query?.sns;
@@ -143,7 +147,7 @@ app.route({
   path: 'cnb',
   key: 'stop-workspace',
   description: '停止工作空间，通过 pipelineId 或 sn',
-  middleware: ['auth-admin'],
+  middleware: ['auth'],
   metadata: {
     tags: ['opencode'],
     ...createSkill({
@@ -157,6 +161,8 @@ app.route({
     })
   }
 }).define(async (ctx) => {
+  if (notCNBCheck(ctx)) { return; }
+  const cnb = await cnbManager.getContext(ctx);
   const pipelineId = ctx.query?.pipelineId;
   const sn = ctx.query?.sn;
   if (!pipelineId && !sn) {