@barryfan2045/dsh-matrix 0.1.0

package/dist/cli/device-prune.js

@@ -0,0 +1,163 @@
+/**
+ * T14 后续:清理账号上的**孤儿设备**。
+ *
+ * 背景(见 docs/tickets/14-e2ee-bridge-regression.md):桥以前每次密码登录都**不带
+ * `device_id`**,Synapse 于是每次新建一个设备;累积起来不只是难看 ——
+ * 发送方每次加密都要对这一大堆设备做 keys/query、keys/claim 并逐个建 olm 会话,
+ * 实测把首次 sendMessage 拖到 6 分 13 秒。T14 已让桥不再造新设备,但**历史遗留**
+ * 的那些孤儿设备还在,本模块就是清理它们的显式入口。
+ *
+ * 设计原则(与 T13 §4 同一条):**显式、可见、不擅自**。
+ *   - 默认只是**列出**(演练),必须 `--yes`(或交互确认)才真删;
+ *   - 当前桥设备**永远保留**;
+ *   - `--keep-days <n>` 可把"最近 n 天活动过"的设备一并保留(安全网,缺省 0 = 只留桥设备);
+ *   - 删设备是**不可逆**的(私钥没了就是没了),所以这里绝不静默动手。
+ */
+const DAY_MS = 24 * 60 * 60 * 1000;
+/**
+ * 纯函数:算出"该删谁、留谁"。
+ *
+ * 判定顺序:当前桥设备 → 最近 keepDays 天活动过 → 其余都删。
+ * 没有 `last_seen_ts`(从未登录过)的设备一律算孤儿 —— 它们正是复位/改名留下的残骸。
+ */
+export function planDevicePrune(input) {
+    const keepDays = input.keepDays ?? 0;
+    const keepMs = Math.max(0, keepDays) * DAY_MS;
+    const remove = [];
+    const retained = [];
+    let keepFound = false;
+    for (const device of input.devices) {
+        if (device.device_id === input.keep) {
+            keepFound = true;
+            retained.push({ device, why: '当前桥设备(永远保留)' });
+            continue;
+        }
+        const seen = typeof device.last_seen_ts === 'number' ? device.last_seen_ts : undefined;
+        if (seen !== undefined && keepMs > 0 && input.now - seen <= keepMs) {
+            retained.push({ device, why: `最近 ${keepDays} 天内活动过` });
+            continue;
+        }
+        remove.push(device);
+    }
+    return { keep: input.keep, keepFound, remove, retained };
+}
+/** 把 HTTP 响应解析成 JSON,失败时给一个可读的错。 */
+async function readJson(res) {
+    const text = await res.text();
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new Error(`服务端返回的不是 JSON(HTTP ${res.status}): ${text.slice(0, 200)}`);
+    }
+}
+function matrixError(status, body) {
+    return new Error(body.errcode ? `${status} ${body.errcode}: ${body.error ?? ''}` : `HTTP ${status}`);
+}
+export function createMatrixAdminOps(opts) {
+    const base = opts.homeserver.replace(/\/$/, '');
+    const doFetch = opts.fetchImpl ?? fetch;
+    const authHeaders = { authorization: `Bearer ${opts.accessToken}`, 'content-type': 'application/json' };
+    return {
+        async whoAmI() {
+            const res = await doFetch(`${base}/_matrix/client/v3/account/whoami`, { headers: authHeaders });
+            const body = await readJson(res);
+            if (!res.ok)
+                throw matrixError(res.status, body);
+            return body;
+        },
+        async listDevices() {
+            const res = await doFetch(`${base}/_matrix/client/v3/devices`, { headers: authHeaders });
+            const body = await readJson(res);
+            if (!res.ok)
+                throw matrixError(res.status, body);
+            const devices = body.devices;
+            return Array.isArray(devices) ? devices : [];
+        },
+        async deleteDevice(deviceId) {
+            const url = `${base}/_matrix/client/v3/devices/${encodeURIComponent(deviceId)}`;
+            const first = await doFetch(url, { method: 'DELETE', headers: authHeaders, body: '{}' });
+            if (first.ok)
+                return;
+            const body = (await readJson(first));
+            if (first.status !== 401)
+                throw matrixError(first.status, body);
+            // 401 = 要 UI auth(密码重认证),拿 session 走第二步。
+            if (!opts.password) {
+                throw new Error('删除设备需要重新输入密码,但配置里只有 accessToken —— 请用账密配置,或在 Element 里手动登出设备');
+            }
+            const session = typeof body.session === 'string' ? body.session : undefined;
+            const retry = await doFetch(url, {
+                method: 'DELETE',
+                headers: authHeaders,
+                body: JSON.stringify({
+                    auth: {
+                        type: 'm.login.password',
+                        identifier: { type: 'm.id.user', user: opts.userId.replace(/^@/, '').replace(/:.*$/, '') },
+                        password: opts.password,
+                        ...(session ? { session } : {}),
+                    },
+                }),
+            });
+            if (!retry.ok)
+                throw matrixError(retry.status, (await readJson(retry)));
+        },
+    };
+}
+/** 密码登录换一个 token;带 deviceId 时复用该设备(不新建)。 */
+export async function loginForToken(opts) {
+    const base = opts.homeserver.replace(/\/$/, '');
+    const doFetch = opts.fetchImpl ?? fetch;
+    const res = await doFetch(`${base}/_matrix/client/v3/login`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({
+            type: 'm.login.password',
+            identifier: { type: 'm.id.user', user: opts.username },
+            password: opts.password,
+            ...(opts.deviceId ? { device_id: opts.deviceId } : {}),
+        }),
+    });
+    const body = (await readJson(res));
+    if (!res.ok || !body.access_token)
+        throw matrixError(res.status, body);
+    return {
+        accessToken: body.access_token,
+        userId: body.user_id ?? '',
+        ...(body.device_id ? { deviceId: body.device_id } : {}),
+    };
+}
+/** 给人看的"最后活动"列。 */
+export function formatLastSeen(ts, now) {
+    if (typeof ts !== 'number')
+        return '从未登录';
+    const days = Math.floor((now - ts) / DAY_MS);
+    const stamp = new Date(ts).toISOString().slice(0, 16).replace('T', ' ');
+    return days <= 0 ? `${stamp}(今天)` : `${stamp}(${days} 天前)`;
+}
+/**
+ * 选登录身份。
+ *
+ * **硬不变量:本命令绝不新建设备。** —— 一个"清理孤儿设备"的工具自己再造一个设备,
+ * 就正好是它要治的那毛病(实测踩到过:对着没有本地 crypto 存储的账号跑演练,直接多出
+ * 一个设备)。所以拿不到**既有**身份时明确拒绝,并告诉用户两条出路,而不是默默登录
+ * (密码登录不带 device_id 必然新建)。
+ */
+export function chooseLoginIdentity(input) {
+    if (input.accessToken)
+        return { mode: 'token' };
+    if (!input.username || !input.password) {
+        return { mode: 'unavailable', message: '配置里既没有 accessToken,也没有 username/password。先跑 dsh-matrix setup' };
+    }
+    if (!input.storedDeviceId) {
+        return {
+            mode: 'unavailable',
+            message: `没找到桥的设备身份(${input.cryptoDir}/bot-sdk.json 里没有 deviceId)。\n` +
+                '   本命令不会新建设备,因此就此中止、不删任何东西。两条出路:\n' +
+                '     1) 用桥实际所在的 DSH_HOME(或 --data-dir)指到那份 crypto 存储 —— 桥跑过一次就会有;\n' +
+                '     2) 在该 DSH_HOME 的 dsh-matrix.json 里加 accessToken(清理账号级设备不需要本地存储)。',
+        };
+    }
+    return { mode: 'password', deviceId: input.storedDeviceId };
+}
+//# sourceMappingURL=device-prune.js.map

package/dist/cli/device-prune.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-prune.js","sourceRoot":"","sources":["../../src/cli/device-prune.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAElC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAM/B;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAA;IAC7C,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAA0C,EAAE,CAAA;IAC1D,IAAI,SAAS,GAAG,KAAK,CAAA;IAErB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACpC,SAAS,GAAG,IAAI,CAAA;YAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAA;YAC7C,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAA;QACtF,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,QAAQ,QAAQ,EAAE,CAAC,CAAA;YACtD,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC1D,CAAC;AAoBD,oCAAoC;AACpC,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,IAAqB;IACxD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAA;AACtG,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAOpC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACvC,MAAM,WAAW,GAAG,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAA;IAEvG,OAAO;QACL,KAAK,CAAC,MAAM;YACV,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,mCAAmC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;YAC/F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAuB,CAAC,CAAA;YACnE,OAAO,IAA0D,CAAA;QACnE,CAAC;QAED,KAAK,CAAC,WAAW;YACf,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,4BAA4B,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;YACxF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAuB,CAAC,CAAA;YACnE,MAAM,OAAO,GAAI,IAA8B,CAAC,OAAO,CAAA;YACvD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAwB,CAAC,CAAC,CAAC,EAAE,CAAA;QAChE,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,QAAgB;YACjC,MAAM,GAAG,GAAG,GAAG,IAAI,8BAA8B,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAA;YAC/E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACxF,IAAI,KAAK,CAAC,EAAE;gBAAE,OAAM;YACpB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAoB,CAAA;YACvD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC/D,yCAAyC;YACzC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;YACjF,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;YAC3E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBAC/B,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE;wBACJ,IAAI,EAAE,kBAAkB;wBACxB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;wBAC1F,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChC;iBACF,CAAC;aACH,CAAC,CAAA;YACF,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAoB,CAAC,CAAA;QAC5F,CAAC;KACF,CAAA;AACH,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAMnC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACvC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,0BAA0B,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC;KACH,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAsG,CAAA;IACvI,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;QAAE,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAuB,CAAC,CAAA;IACzF,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC1B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAA;AACH,CAAC;AAED,mBAAmB;AACnB,MAAM,UAAU,cAAc,CAAC,EAA6B,EAAE,GAAW;IACvE,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACvE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,MAAM,CAAA;AAC5D,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAQnC;IACC,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAAA;IACzG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,OAAO,EACL,aAAa,KAAK,CAAC,SAAS,gCAAgC;gBAC5D,oCAAoC;gBACpC,qEAAqE;gBACrE,uEAAuE;SAC1E,CAAA;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,CAAA;AAC7D,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+/** 找 dsh 启动器绝对路径:先同目录 bin(node <path> 可直接执行),再 PATH。 */
+export declare function resolveDshBin(execPath?: string): string | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAsDA,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,QAAQ,GAAE,MAAyB,GAAG,MAAM,GAAG,IAAI,CAahF"}