@becrafter/prompt-manager 0.0.19 → 0.1.2

package/packages/server/README.md

@@ -0,0 +1,142 @@
+# @becrafter/prompt-manager-core
+
+Core library for managing prompts with MCP (Model Context Protocol) support.
+
+## Installation
+
+```bash
+npm install @becrafter/prompt-manager-core
+```
+
+## Usage
+
+### Basic Usage
+
+```javascript
+import { startServer, stopServer, config } from '@becrafter/prompt-manager-core';
+
+// Start the server with default configuration
+const server = await startServer();
+
+console.log('Server is running!');
+```
+
+### Advanced Usage with Configuration
+
+```javascript
+import { startServer, stopServer, config } from '@becrafter/prompt-manager-core';
+
+// Start the server with custom configuration
+const server = await startServer({
+  configOverrides: {
+    promptsDir: './my-prompts',
+    port: 3000,
+    adminEnable: true,
+    adminRequireAuth: false
+  }
+});
+
+// Stop the server when needed
+// await stopServer();
+```
+
+### Using the Express App Instance
+
+```javascript
+import { app, config } from '@becrafter/prompt-manager-core';
+
+// You can use the app instance to add custom routes
+app.get('/custom-endpoint', (req, res) => {
+  res.json({ message: 'Hello from custom endpoint!' });
+});
+
+// Then start the server
+import { startServer } from '@becrafter/prompt-manager-core';
+await startServer();
+```
+
+### Accessing Prompt Manager
+
+```javascript
+import { promptManager, util } from '@becrafter/prompt-manager-core';
+
+// Load prompts
+await promptManager.loadPrompts();
+
+// Get all prompts
+const prompts = promptManager.getPrompts();
+console.log('Loaded prompts:', prompts);
+
+// Get a specific prompt by ID
+const prompt = promptManager.getPrompt('prompt-id');
+console.log('Prompt:', prompt);
+
+// Search prompts
+const searchTerm = 'search term';
+const searchResults = prompts.filter(prompt => 
+  prompt.name.includes(searchTerm) || 
+  (prompt.description && prompt.description.includes(searchTerm))
+);
+```
+
+## API Reference
+
+### Functions
+
+- `startServer(options = {})` - Starts the prompt manager server
+- `stopServer()` - Stops the prompt manager server
+- `getServerState()` - Gets the current server state
+- `getServerAddress()` - Gets the server address
+- `isServerRunning()` - Checks if the server is running
+
+### Objects
+
+- `app` - Express application instance
+- `config` - Configuration object
+- `logger` - Logger instance
+- `util` - Utility functions
+- `promptManager` - Prompt manager instance
+
+### MCP Related
+
+- `getMcpServer()` - Gets the MCP server instance
+- `handleGetPrompt`, `handleSearchPrompts`, `handleReloadPrompts` - MCP handlers
+
+### Routes
+
+- `adminRouter` - Admin API routes
+- `openRouter` - Open API routes
+
+### Middleware
+
+- `adminAuthMiddleware` - Admin authentication middleware
+
+## Configuration Options
+
+You can override default configuration using the `configOverrides` option:
+
+```javascript
+{
+  promptsDir: './prompts',        // Directory for prompt files
+  port: 5621,                     // Server port
+  serverName: 'prompt-manager',   // Server name
+  serverVersion: '0.0.19',        // Server version
+  logLevel: 'info',               // Log level
+  maxPrompts: 1000,               // Max prompt count
+  recursiveScan: true,            // Recursive scan for prompts
+  adminEnable: true,              // Enable admin functionality
+  adminPath: '/admin',            // Admin path
+  adminRequireAuth: true,         // Require admin authentication
+  admins: [                       // Admin accounts
+    {
+      username: 'admin',
+      password: 'admin',
+      token: '...'
+    }
+  ]
+}
+```
+
+## License
+
+MIT

package/packages/server/api/admin.routes.js

@@ -17,6 +17,20 @@ const router = express.Router();
 
 // 获取prompts目录路径（在启动时可能被覆盖）
 let promptsDir = config.getPromptsDir();
+const PROMPT_NAME_REGEX = /^(?![.]{1,2}$)[^\\/:*?"<>|\r\n]{1,64}$/;
+
+// 获取服务器配置端点
+router.get('/config', (req, res) => {
+    // 检查是否启用了管理员功能
+    if (!config.adminEnable) {
+        return res.status(404).json({ error: 'Admin功能未启用' });
+    }
+
+    res.json({
+        requireAuth: config.adminRequireAuth,
+        adminEnable: config.adminEnable
+    });
+});
 
 // 登录端点
 router.post('/login', (req, res) => {
@@ -25,6 +39,11 @@ router.post('/login', (req, res) => {
         return res.status(404).json({ error: 'Admin功能未启用' });
     }
 
+    // 如果不需要认证，返回默认token
+    if (!config.adminRequireAuth) {
+        return res.json({ token: config.admins[0].token });
+    }
+
     const { username, password } = req.body;
 
     if (!username || !password) {
@@ -129,14 +148,15 @@ router.get('/prompts/:name', adminAuthMiddleware, (req, res) => {
 router.post('/prompts', adminAuthMiddleware, (req, res) => {
     try {
         const { name, group, yaml: yamlContent, relativePath: originalRelativePath } = req.body;
+        const trimmedName = (name || '').trim();
 
-        if (!name || !yamlContent) {
+        if (!trimmedName || !yamlContent) {
             return res.status(400).json({ error: '名称和YAML内容是必需的' });
         }
 
         // 验证名称格式
-        if (!/^[a-zA-Z0-9-_]{1,64}$/.test(name)) {
-            return res.status(400).json({ error: '名称格式无效' });
+        if (!PROMPT_NAME_REGEX.test(trimmedName)) {
+            return res.status(400).json({ error: '名称格式无效，不能包含 / \\ : * ? \" < > | 或换行，长度需在1-64字符' });
         }
 
         // 计算目标路径
@@ -148,7 +168,7 @@ router.post('/prompts', adminAuthMiddleware, (req, res) => {
             targetSegments.push(groupName);
         }
 
-        const finalFileName = `${name}.yaml`;
+        const finalFileName = `${trimmedName}.yaml`;
         targetSegments.push(finalFileName);
 
         const targetRelativePath = path.posix.join(...targetSegments);
@@ -160,7 +180,7 @@ router.post('/prompts', adminAuthMiddleware, (req, res) => {
         // 检查是否重名（同目录下）
         const prompts = util.getPromptsFromFiles();
         const existingPrompt = prompts.find(p => {
-            if (p.name !== name) return false;
+            if (p.name !== trimmedName) return false;
             const isOriginalFile = normalizedOriginalPath && p.relativePath === normalizedOriginalPath;
             if (isOriginalFile) return false;
             const sameRelativePath = p.relativePath === targetRelativePath;
@@ -193,7 +213,7 @@ router.post('/prompts', adminAuthMiddleware, (req, res) => {
 // 创建新分组目录
 router.post('/groups', adminAuthMiddleware, (req, res) => {
     try {
-        const { name } = req.body;
+        const { name, parent } = req.body;
 
         if (!name) {
             return res.status(400).json({ error: '分组名称是必需的' });
@@ -201,18 +221,29 @@ router.post('/groups', adminAuthMiddleware, (req, res) => {
 
         // 验证名称格式
         if (!util.isValidGroupName(name)) {
-            return res.status(400).json({ error: '名称格式无效，只能包含字母、数字、中划线、下划线和中文' });
+            return res.status(400).json({ error: '名称格式无效，不能包含 / \\ : * ? \" < > | 或换行，长度需在1-64字符' });
         }
 
-        const groupDir = path.join(promptsDir, name);
+        // 构建目标目录路径
+        let targetPath;
+        if (parent) {
+            // 验证父级目录路径
+            const resolvedParent = util.resolveGroupDir(parent);
+            if (!resolvedParent) {
+                return res.status(400).json({ error: '无效的父级目录路径' });
+            }
+            targetPath = path.join(resolvedParent.dir, name);
+        } else {
+            targetPath = path.join(promptsDir, name);
+        }
 
         // 检查目录是否已存在
-        if (fs.existsSync(groupDir)) {
+        if (fs.existsSync(targetPath)) {
             return res.status(400).json({ error: '分组已存在' });
         }
 
         // 创建目录
-        fs.mkdirSync(groupDir, { recursive: true });
+        fs.mkdirSync(targetPath, { recursive: true });
 
         res.json({ message: '分组创建成功' });
     } catch (error) {
@@ -228,7 +259,7 @@ router.patch('/groups/rename', adminAuthMiddleware, (req, res) => {
             return res.status(400).json({ error: '分组路径和新名称是必需的' });
         }
         if (!util.isValidGroupName(newName)) {
-            return res.status(400).json({ error: '名称格式无效，只能包含字母、数字、中划线、下划线和中文' });
+            return res.status(400).json({ error: '名称格式无效，不能包含 / \\ : * ? \" < > | 或换行，长度需在1-64字符' });
         }
         if (groupPath === 'default') {
             return res.status(400).json({ error: '默认分组不允许重命名' });

package/packages/server/api/surge.routes.js

@@ -0,0 +1,43 @@
+/**
+ * Surge 静态资源代理接口
+ * 代理所有 /surge/* 请求到指定的 Surge 静态资源地址
+ */
+
+import express from 'express';
+import { createProxyMiddleware } from 'http-proxy-middleware';
+import { config } from '../utils/config.js';
+
+const router = express.Router();
+
+// 从配置中获取 Surge 目标地址，默认为 https://becrafter.surge.sh
+const surgeTarget = config.surgeTarget || 'https://becrafter.surge.sh';
+
+// 创建代理中间件
+const surgeProxy = createProxyMiddleware({
+  target: surgeTarget,
+  changeOrigin: true,
+  // 当路由已经去除了 /surge 前缀后，路径变为 /test_prompts.json
+  // 我们需要将其重写为 /assets/test_prompts.json
+  pathRewrite: {
+    '^/': '/assets/',  // 将 / 开头的路径重写为 /assets/ 开头
+  },
+  // 设置代理请求头
+  onProxyReq: (proxyReq, req, res) => {
+    // 可以在这里添加自定义逻辑，如设置请求头等
+    console.log(`代理请求: ${req.method} ${req.url} -> ${surgeTarget}${req.url.replace(/^\/(.*)/, '/assets/$1')}`);
+  },
+  onProxyRes: (proxyRes, req, res) => {
+    // 可以在这里添加自定义逻辑，如修改响应头等
+    proxyRes.headers['surge-proxy'] = 'enabled';
+  },
+  onError: (err, req, res) => {
+    console.error('Surge 代理错误:', err);
+    res.status(500).send('代理错误');
+  }
+});
+
+// 使用代理中间件处理所有请求
+// 由于在 app.js 中已经使用了 /surge 路径前缀，这里直接处理所有请求
+router.use(surgeProxy);
+
+export const surgeRouter = router;

package/packages/server/app.js

@@ -1,12 +1,14 @@
 import express from 'express';
 import cors from 'cors';
 import path from 'path';
+import fs from 'fs';
 import { randomUUID } from 'node:crypto';
 import { util } from './utils/util.js';
 import { config } from './utils/config.js';
 import { logger } from './utils/logger.js';
 import { adminRouter } from './api/admin.routes.js';
 import { openRouter } from './api/open.routes.js';
+import { surgeRouter } from './api/surge.routes.js';
 import { getMcpServer } from './mcp/mcp.server.js';
 import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
@@ -14,7 +16,60 @@ import { InMemoryEventStore } from '@modelcontextprotocol/sdk/examples/shared/in
 
 
 const app = express();
-const adminUiRoot = util.getAdminUiRoot();
+const adminUiRoot = util.getWebUiRoot();
+
+// 自定义中间件，用于处理 ASAR 包中的静态文件
+function serveAsarStatic(root) {
+  return async (req, res, next) => {
+    // 检查 root 是否是 ASAR 包中的路径
+    if (root.includes('.asar')) {
+      try {
+        // 动态导入 asar 模块（在 ES 模块环境中）
+        const { default: asar } = await import('@electron/asar');
+        
+        // 从 root 中提取 asar 文件路径和相对路径
+        const asarPathMatch = root.match(/^(.*?\.asar)(\/.*)?$/);
+        const asarFilePath = asarPathMatch ? asarPathMatch[1] : root.replace(/\/.*$/, '.asar');
+        const relativePathInAsar = asarPathMatch && asarPathMatch[2] ? asarPathMatch[2].substring(1) : 'web';
+        
+        const filePath = path.posix.join(relativePathInAsar, req.path).replace(/^\//, '');
+        const stat = asar.statFile(asarFilePath, filePath);
+        
+        if (stat) {
+          const fileContent = asar.extractFile(asarFilePath, filePath);
+          
+          // 设置适当的 Content-Type
+          const ext = path.extname(filePath).toLowerCase();
+          const mimeTypes = {
+            '.html': 'text/html',
+            '.js': 'application/javascript',
+            '.css': 'text/css',
+            '.json': 'application/json',
+            '.png': 'image/png',
+            '.jpg': 'image/jpeg',
+            '.gif': 'image/gif',
+            '.svg': 'image/svg+xml',
+            '.ico': 'image/x-icon'
+          };
+          
+          if (mimeTypes[ext]) {
+            res.setHeader('Content-Type', mimeTypes[ext]);
+          }
+          
+          res.send(fileContent);
+        } else {
+          next();
+        }
+      } catch (error) {
+        // 文件不存在或 asar 模块无法导入，继续到下一个中间件
+        next();
+      }
+    } else {
+      // 不是 ASAR 包中的路径，使用默认的静态文件服务
+      express.static(root)(req, res, next);
+    }
+  };
+}
 
 // 全局中间件
 app.use(cors());
@@ -23,17 +78,50 @@ app.use(express.urlencoded({ extended: true }));
 
 
 // 为管理员界面提供静态文件服务 - 根路径
-app.use(config.adminPath, express.static(adminUiRoot));
+// 检查是否需要使用 ASAR 处理（需要验证 .asar 文件实际上存在）
+const isAsarPath = adminUiRoot.includes('.asar') && fs.existsSync(adminUiRoot.replace(/\/.*$/, '.asar'));
+if (isAsarPath) {
+  app.use(config.adminPath, serveAsarStatic(adminUiRoot));
+} else {
+  app.use(config.adminPath, express.static(adminUiRoot));
+}
 
-// 为管理员界面提供根路径访问（当用户访问 /admin 时显示 admin.html）
-app.get(config.adminPath, (req, res) => {
-  res.sendFile(path.join(adminUiRoot, 'admin.html'));
-});
+// 统一处理 index.html 请求的辅助函数
+async function sendIndexHtml(req, res) {
+  if (isAsarPath) {
+    try {
+      // 动态导入 asar 模块（在 ES 模块环境中）
+      const { default: asar } = await import('@electron/asar');
+      
+      // 从 adminUiRoot 中提取 asar 文件路径和相对路径
+      const asarPathMatch = adminUiRoot.match(/^(.*?\.asar)(\/.*)?$/);
+      const asarFilePath = asarPathMatch ? asarPathMatch[1] : adminUiRoot.replace(/\/.*$/, '.asar');
+      const relativePathInAsar = asarPathMatch && asarPathMatch[2] ? asarPathMatch[2].substring(1) : 'web';
+      const indexPath = path.posix.join(relativePathInAsar, 'index.html');
+      
+      // 检查文件是否存在
+      const stat = asar.statFile(asarFilePath, indexPath);
+      if (stat) {
+        // 读取 index.html 文件内容
+        const fileContent = asar.extractFile(asarFilePath, indexPath);
+        res.setHeader('Content-Type', 'text/html');
+        res.send(fileContent);
+      } else {
+        res.status(500).send('Internal Server Error');
+      }
+    } catch (error) {
+      res.status(500).send('Internal Server Error');
+    }
+  } else {
+    res.sendFile(path.join(adminUiRoot, 'index.html'));
+  }
+}
 
-// 为管理员界面提供根路径访问（当用户访问 /admin/ 时显示 admin.html）
-app.get(config.adminPath + '/', (req, res) => {
-  res.sendFile(path.join(adminUiRoot, 'admin.html'));
-});
+// 为管理员界面提供根路径访问（当用户访问 /admin 时显示 index.html）
+app.get(config.adminPath, sendIndexHtml);
+
+// 为管理员界面提供根路径访问（当用户访问 /admin/ 时显示 index.html）
+app.get(config.adminPath + '/', sendIndexHtml);
 
 
 // 注册后台API
@@ -42,6 +130,9 @@ app.use('/adminapi', adminRouter);
 // 注册开放API
 app.use('/openapi', openRouter);
 
+// 注册 Surge 静态资源代理 API
+app.use('/surge', surgeRouter);
+
 
 const transports = {};
 const mcpServers = {}; // 存储每个会话的MCP服务器实例
@@ -72,17 +163,31 @@ app.all('/mcp', (req, res) => {
       }
     } else if (!sessionId && req.method === 'POST' && isInitializeRequest(req.body)) {
       const eventStore = new InMemoryEventStore();
+      
+      // 预先创建 MCP 服务器实例，避免异步时序问题
+      let mcpServerPromise = null;
+      let serverReady = false;
+      
       transport = new StreamableHTTPServerTransport({
           sessionIdGenerator: () => randomUUID(),
           eventStore, // Enable resumability
-          onsessioninitialized: sessionId => {
+          onsessioninitialized: async sessionId => {
               // Store the transport by session ID when session is initialized
               console.log(`StreamableHTTP session initialized with ID: ${sessionId}`);
               transports[sessionId] = transport;
               
-              // 为新会话创建MCP服务器实例
-              mcpServers[sessionId] = getMcpServer();
-              mcpServers[sessionId].connect(transport);
+              try {
+                  // 为新会话创建MCP服务器实例（同步等待完成）
+                  const server = await getMcpServer();
+                  mcpServers[sessionId] = server;
+                  server.connect(transport);
+                  serverReady = true;
+                  console.log(`MCP server connected for session ${sessionId}`);
+              } catch (error) {
+                  console.error('创建MCP服务器失败:', error);
+                  // 即使失败也标记为ready，避免阻塞
+                  serverReady = true;
+              }
           }
       });
 

package/packages/server/index.js

@@ -0,0 +1,39 @@
+/**
+ * Prompt Manager Core Library
+ * 
+ * This is the main entry point for the Prompt Manager core library.
+ * It exports the main server functionality and utility functions.
+ */
+
+// Export the main server functionality
+export { startServer, stopServer, getServerState, getServerAddress, isServerRunning } from './server.js';
+
+// Export the application instance
+export { default as app } from './app.js';
+
+// Export utility functions
+export { config } from './utils/config.js';
+export { logger } from './utils/logger.js';
+export { util } from './utils/util.js';
+
+// Export services
+export { promptManager } from './services/manager.js';
+
+// Export MCP functionality
+export { getMcpServer } from './mcp/mcp.server.js';
+export { 
+  handleGetPrompt, 
+  handleSearchPrompts, 
+  handleReloadPrompts 
+} from './mcp/prompt.handler.js';
+export { handleSequentialThinking } from './mcp/sequential-thinking.handler.js';
+export { handleThinkPlan } from './mcp/think-plan.handler.js';
+export { handleToolM } from './toolm/index.js';
+
+// Export API routes
+export { adminRouter } from './api/admin.routes.js';
+export { openRouter } from './api/open.routes.js';
+export { surgeRouter } from './api/surge.routes.js';
+
+// Export middlewares
+export { adminAuthMiddleware } from './middlewares/auth.middleware.js';