@dyyz1993/create-agent 2.0.0 → 2.1.0

package/templates/chat/src/__tests__/server-config-security.test.ts

@@ -0,0 +1,55 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+
+describe("Server Config 安全策略", () => {
+	const originalEnv = process.env;
+
+	beforeEach(() => {
+		vi.resetModules();
+		process.env = { ...originalEnv };
+	});
+
+	afterEach(() => {
+		process.env = originalEnv;
+	});
+
+	it("生产环境未设 AUTH_TOKEN 应抛出致命错误", async () => {
+		process.env.NODE_ENV = "production";
+		delete process.env.AUTH_TOKEN;
+		await expect(import("../server-config")).rejects.toThrow(/AUTH_TOKEN/);
+	});
+
+	it("开发环境未设 AUTH_TOKEN 应自动生成随机 token", async () => {
+		process.env.NODE_ENV = "development";
+		delete process.env.AUTH_TOKEN;
+		const mod = await import("../server-config");
+		expect(mod.config.authToken).toBeTruthy();
+		expect(mod.config.authToken).not.toBe("pi-agent-template-token");
+		expect(mod.config.authToken.length).toBeGreaterThan(20);
+	});
+
+	it("显式设置 AUTH_TOKEN 应使用用户提供的值", async () => {
+		delete process.env.NODE_ENV;
+		process.env.AUTH_TOKEN = "my-custom-token-12345";
+		const mod = await import("../server-config");
+		expect(mod.config.authToken).toBe("my-custom-token-12345");
+	});
+
+	it("自动生成的 token 每次不同", async () => {
+		process.env.NODE_ENV = "development";
+		delete process.env.AUTH_TOKEN;
+		vi.resetModules();
+		const mod1 = await import("../server-config");
+		const token1 = mod1.config.authToken;
+		vi.resetModules();
+		const mod2 = await import("../server-config");
+		const token2 = mod2.config.authToken;
+		expect(token1).not.toBe(token2);
+	});
+
+	it("生产环境设了 AUTH_TOKEN 不应抛错", async () => {
+		process.env.NODE_ENV = "production";
+		process.env.AUTH_TOKEN = "production-secure-token";
+		const mod = await import("../server-config");
+		expect(mod.config.authToken).toBe("production-secure-token");
+	});
+});

package/templates/chat/src/__tests__/server-config.test.ts

@@ -2,58 +2,60 @@ import { describe, it, expect } from "vitest";
 import { parseEnvInt } from "../server-config";
 
 describe("parseEnvInt", () => {
-  it("should return default when value is undefined", () => {
-    expect(parseEnvInt("TEST_KEY", undefined, 3100, 1024, 65535)).toBe(3100);
-  });
+	it("should return default when value is undefined", () => {
+		expect(parseEnvInt("TEST_KEY", undefined, 3100, 1024, 65535)).toBe(3100);
+	});
 
-  it("should return default when value is empty string", () => {
-    expect(parseEnvInt("TEST_KEY", "", 3100, 1024, 65535)).toBe(3100);
-  });
+	it("should return default when value is empty string", () => {
+		expect(parseEnvInt("TEST_KEY", "", 3100, 1024, 65535)).toBe(3100);
+	});
 
-  it("should parse valid number", () => {
-    expect(parseEnvInt("TEST_KEY", "8080", 3100, 1024, 65535)).toBe(8080);
-  });
+	it("should parse valid number", () => {
+		expect(parseEnvInt("TEST_KEY", "8080", 3100, 1024, 65535)).toBe(8080);
+	});
 
-  it("should return default for NaN input", () => {
-    expect(parseEnvInt("TEST_KEY", "abc", 3100, 1024, 65535)).toBe(3100);
-  });
+	it("should return default for NaN input", () => {
+		expect(parseEnvInt("TEST_KEY", "abc", 3100, 1024, 65535)).toBe(3100);
+	});
 
-  it("should return default for out-of-range value (too low)", () => {
-    expect(parseEnvInt("TEST_KEY", "80", 3100, 1024, 65535)).toBe(3100);
-  });
+	it("should return default for out-of-range value (too low)", () => {
+		expect(parseEnvInt("TEST_KEY", "80", 3100, 1024, 65535)).toBe(3100);
+	});
 
-  it("should return default for out-of-range value (too high)", () => {
-    expect(parseEnvInt("TEST_KEY", "99999", 3100, 1024, 65535)).toBe(3100);
-  });
+	it("should return default for out-of-range value (too high)", () => {
+		expect(parseEnvInt("TEST_KEY", "99999", 3100, 1024, 65535)).toBe(3100);
+	});
 
-  it("should accept boundary min value", () => {
-    expect(parseEnvInt("TEST_KEY", "1024", 3100, 1024, 65535)).toBe(1024);
-  });
+	it("should accept boundary min value", () => {
+		expect(parseEnvInt("TEST_KEY", "1024", 3100, 1024, 65535)).toBe(1024);
+	});
 
-  it("should accept boundary max value", () => {
-    expect(parseEnvInt("TEST_KEY", "65535", 3100, 1024, 65535)).toBe(65535);
-  });
+	it("should accept boundary max value", () => {
+		expect(parseEnvInt("TEST_KEY", "65535", 3100, 1024, 65535)).toBe(65535);
+	});
 });
 
 describe("server-config exports", () => {
-  it("should export config with all required fields", async () => {
-    const { config } = await import("../server-config");
-    expect(config).toHaveProperty("port");
-    expect(config).toHaveProperty("authToken");
-    expect(config).toHaveProperty("maxUploadSize");
-    expect(config).toHaveProperty("logDir");
-    expect(config).toHaveProperty("corsOrigin");
-    expect(typeof config.port).toBe("number");
-    expect(typeof config.authToken).toBe("string");
-    expect(typeof config.maxUploadSize).toBe("number");
-    expect(typeof config.corsOrigin).toBe("string");
-  });
-
-  it("should have sensible defaults", async () => {
-    const { config } = await import("../server-config");
-    expect(config.port).toBeGreaterThanOrEqual(1024);
-    expect(config.port).toBeLessThanOrEqual(65535);
-    expect(config.maxUploadSize).toBeGreaterThan(0);
-    expect(config.corsOrigin).toBeTruthy();
-  });
+	it("should export config with all required fields", async () => {
+		const { config } = await import("../server-config");
+		expect(config).toHaveProperty("port");
+		expect(config).toHaveProperty("authToken");
+		expect(config).toHaveProperty("maxUploadSize");
+		expect(config).toHaveProperty("logDir");
+		expect(config).toHaveProperty("enableWebService");
+		expect(config).toHaveProperty("corsOrigin");
+		expect(typeof config.port).toBe("number");
+		expect(typeof config.authToken).toBe("string");
+		expect(typeof config.maxUploadSize).toBe("number");
+		expect(typeof config.enableWebService).toBe("boolean");
+		expect(typeof config.corsOrigin).toBe("string");
+	});
+
+	it("should have sensible defaults", async () => {
+		const { config } = await import("../server-config");
+		expect(config.port).toBeGreaterThanOrEqual(1024);
+		expect(config.port).toBeLessThanOrEqual(65535);
+		expect(config.maxUploadSize).toBeGreaterThan(0);
+		expect(config.corsOrigin).toBeTruthy();
+	});
 });

package/templates/chat/src/bun/index.ts

@@ -3,23 +3,24 @@ import { RPCServer } from "@dyyz1993/rpc-core";
 import { ElectrobunTransport } from "../gateway/ipc-transport";
 import { registerAllHandlers } from "../shared/register-all-handlers";
 import { createLogger, configureLogDir } from "../shared/lib/logger";
+import { config } from "../server-config";
 
 configureLogDir("logs");
 const log = createLogger("server");
 
 async function getMainViewUrl(): Promise<string> {
-  const channel = await Updater.localInfo.channel();
-  const DEV_SERVER_URL = "http://localhost:5173";
-  if (channel === "dev") {
-    try {
-      await fetch(DEV_SERVER_URL, { method: "HEAD" });
-      log.info(`HMR enabled: Using Vite dev server at ${DEV_SERVER_URL}`);
-      return DEV_SERVER_URL;
-    } catch {
-      log.info("Vite dev server not running.");
-    }
-  }
-  return "views://mainview/index.html";
+	const channel = await Updater.localInfo.channel();
+	const DEV_SERVER_URL = "http://localhost:5173";
+	if (channel === "dev") {
+		try {
+			await fetch(DEV_SERVER_URL, { method: "HEAD" });
+			log.info(`HMR enabled: Using Vite dev server at ${DEV_SERVER_URL}`);
+			return DEV_SERVER_URL;
+		} catch {
+			log.info("Vite dev server not running.");
+		}
+	}
+	return "views://mainview/index.html";
 }
 
 const url = await getMainViewUrl();
@@ -27,46 +28,95 @@ const url = await getMainViewUrl();
 const transport = new ElectrobunTransport();
 const server = new RPCServer(transport);
 
-// --- 注册 RPC handlers（自动导入 handlers barrel） ---
 registerAllHandlers(server, { platform: "desktop" });
 
-// --- 创建窗口 ---
-
 const mainWindow = new BrowserWindow({
-  title: "Pi Agent",
-  url,
-  frame: {
-    width: 1200,
-    height: 800,
-    x: 200,
-    y: 200,
-  },
-  rpc: BrowserView.defineRPC({
-    maxRequestTime: 60000,
-    handlers: {
-      requests: {},
-      messages: {
-        // @ts-expect-error Electrobun's messages schema doesn't support custom keys at compile time
-        "rpc-message": (data: unknown) => {
-          try {
-            const message = typeof data === "string" ? JSON.parse(data) : data;
-            transport.handleMessage(message);
-          } catch (error) {
-            log.error("Failed to parse RPC message", { error });
-          }
-        },
-      },
-    },
-  }),
+	title: "Pi Agent",
+	url,
+	frame: {
+		width: 1200,
+		height: 800,
+		x: 200,
+		y: 200,
+	},
+	rpc: BrowserView.defineRPC({
+		maxRequestTime: 60000,
+		handlers: {
+			requests: {},
+			messages: {
+				// @ts-expect-error Electrobun's messages schema doesn't support custom keys at compile time
+				"rpc-message": (data: unknown) => {
+					try {
+						const message = typeof data === "string" ? JSON.parse(data) : data;
+						transport.handleMessage(message);
+					} catch (error) {
+						log.error("Failed to parse RPC message", { error });
+					}
+				},
+			},
+		},
+	}),
 });
 
 transport.setBrowserView(mainWindow.webview);
 
 log.info("Pi Agent desktop app started!");
 
+if (config.enableWebService) {
+	try {
+		const { createWebServer, getLocalIP } = await import("../shared/lib/web-server");
+
+		const webServer = await createWebServer({
+			port: config.port,
+			authToken: config.authToken,
+			maxUploadSize: config.maxUploadSize,
+			corsOrigin: "*",
+		});
+
+		const localIp = getLocalIP();
+		log.info(`[Hybrid] Web service started: http://${localIp}:${webServer.port}`);
+		log.info(`[Hybrid] WebSocket endpoint: ws://${localIp}:${webServer.port}/ws`);
+		log.info(
+			`[Hybrid] Share URL: http://${localIp}:${webServer.port}?token=${webServer.authToken}`
+		);
+
+		server.emitEvent("hybrid.ready", {
+			url: `http://${localIp}:${webServer.port}`,
+			wsUrl: `ws://${localIp}:${webServer.port}/ws`,
+			token: webServer.authToken,
+		});
+	} catch (err) {
+		log.error("[Hybrid] Failed to start web service", {
+			error: err instanceof Error ? err.message : String(err),
+		});
+	}
+}
+
 ApplicationMenu.setApplicationMenu([
-  { label: "Pi Agent", submenu: [{ role: "about" }, { type: "separator" }, { role: "hide" }, { role: "hideOthers" }, { role: "showAll" }, { type: "separator" }, { role: "quit" }] },
-  { label: "Edit", submenu: [{ role: "undo" }, { role: "redo" }, { type: "separator" }, { role: "cut" }, { role: "copy" }, { role: "paste" }, { role: "selectAll" }] },
-  { label: "View", submenu: [{ role: "toggleFullScreen" }] },
-  { label: "Window", submenu: [{ role: "minimize" }, { role: "zoom" }] },
+	{
+		label: "Pi Agent",
+		submenu: [
+			{ role: "about" },
+			{ type: "separator" },
+			{ role: "hide" },
+			{ role: "hideOthers" },
+			{ role: "showAll" },
+			{ type: "separator" },
+			{ role: "quit" },
+		],
+	},
+	{
+		label: "Edit",
+		submenu: [
+			{ role: "undo" },
+			{ role: "redo" },
+			{ type: "separator" },
+			{ role: "cut" },
+			{ role: "copy" },
+			{ role: "paste" },
+			{ role: "selectAll" },
+		],
+	},
+	{ label: "View", submenu: [{ role: "toggleFullScreen" }] },
+	{ label: "Window", submenu: [{ role: "minimize" }, { role: "zoom" }] },
 ]);

package/templates/chat/src/bun/three.d.ts

@@ -0,0 +1 @@
+declare module "three";

package/templates/chat/src/gateway/http-routes.ts

@@ -1 +1 @@
-export { createHttpHandler, type HttpRouteDeps } from "@shared/http-routes";
+export { createHttpHandler, type HttpRouteDeps } from "../shared/http-routes";

package/templates/chat/src/gateway/ws-handler.ts

@@ -13,74 +13,102 @@ import { createLogger } from "../shared/lib/logger";
 const log = createLogger("gateway");
 
 function safeEqual(a: string, b: string): boolean {
-  const bufA = Buffer.from(a);
-  const bufB = Buffer.from(b);
-  if (bufA.length !== bufB.length) return false;
-  return timingSafeEqual(bufA, bufB);
+	const bufA = Buffer.from(a);
+	const bufB = Buffer.from(b);
+	if (bufA.length !== bufB.length) return false;
+	return timingSafeEqual(bufA, bufB);
 }
 
 export interface WsHandlerDeps {
-  config: { readonly port: number; readonly authToken: string; readonly maxUploadSize: number };
+	config: { readonly port: number; readonly authToken: string; readonly maxUploadSize: number };
 }
 
 export function createWsHandler(httpServer: Server, deps: WsHandlerDeps): WebSocketServer {
-  const { config: cfg } = deps;
-  const wss = new WebSocketServer({ server: httpServer, path: "/ws" });
+	const { config: cfg } = deps;
+	const wss = new WebSocketServer({ server: httpServer, path: "/ws" });
 
-  wss.on("connection", (ws: WebSocket, req) => {
-    // Token 验证
-    const url = req.url ? new URL(req.url, "http://localhost") : null;
-    const token = url?.searchParams.get("token");
-    if (!safeEqual(token || "", cfg.authToken)) {
-      log.warn("Connection rejected: invalid token");
-      ws.close(4001, "Unauthorized");
-      return;
-    }
+	wss.on("connection", (ws: WebSocket, req) => {
+		// Token 验证（header 优先，query fallback）
+		const url = req.url ? new URL(req.url, "http://localhost") : null;
+		const headerToken = (req.headers["sec-websocket-protocol"] as string) || undefined;
+		const queryToken = url?.searchParams.get("token");
+		const token = headerToken || queryToken;
+		if (!safeEqual(token || "", cfg.authToken)) {
+			log.warn("Connection rejected: invalid token", {
+				providedPrefix: token ? `${token.substring(0, 4)}***` : "(none)",
+			});
+			ws.close(4001, "Unauthorized");
+			return;
+		}
 
-    log.info("Client connected", { total: wss.clients.size });
+		log.info("Client connected", { total: wss.clients.size });
 
-    const wsTransport = {
-      send: async (message: unknown): Promise<void> => {
-        if (ws.readyState === WebSocket.OPEN) {
-          ws.send(JSON.stringify(message));
-        }
-      },
-      onMessage: (handler: (message: unknown) => void): (() => void) => {
-        const listener = (data: Buffer) => {
-          try {
-            const msg = JSON.parse(data.toString());
-            handler(msg);
-          } catch (err) {
-            log.error("Failed to parse message", { error: err instanceof Error ? err.message : String(err) });
-          }
-        };
-        ws.on("message", listener);
-        return () => ws.off("message", listener);
-      },
-      onError: (): (() => void) => {
-        return () => {};
-      },
-      onDisconnect: (): (() => void) => {
-        return () => {};
-      },
-      isConnected: (): boolean => ws.readyState === WebSocket.OPEN,
-      close: (): void => {},
-    };
+		const PING_INTERVAL = 30000;
+		let pongReceived = true;
+		const pingTimer = setInterval(() => {
+			if (ws.readyState !== WebSocket.OPEN) {
+				clearInterval(pingTimer);
+				return;
+			}
+			if (!pongReceived) {
+				log.warn("Client heartbeat timeout, closing connection");
+				clearInterval(pingTimer);
+				ws.terminate();
+				return;
+			}
+			pongReceived = false;
+			ws.ping();
+		}, PING_INTERVAL);
 
-    const rpcServer = new RPCServer(wsTransport as Transport);
+		ws.on("pong", () => {
+			pongReceived = true;
+		});
 
-    // 自动导入并注册所有 handlers
-    registerAllHandlers(rpcServer, { platform: "web" });
+		const wsTransport = {
+			send: async (message: unknown): Promise<void> => {
+				if (ws.readyState === WebSocket.OPEN) {
+					ws.send(JSON.stringify(message));
+				}
+			},
+			onMessage: (handler: (message: unknown) => void): (() => void) => {
+				const listener = (data: Buffer) => {
+					try {
+						const msg = JSON.parse(data.toString());
+						handler(msg);
+					} catch (err) {
+						log.error("Failed to parse message", {
+							error: err instanceof Error ? err.message : String(err),
+						});
+					}
+				};
+				ws.on("message", listener);
+				return () => ws.off("message", listener);
+			},
+			onError: (): (() => void) => {
+				return () => {};
+			},
+			onDisconnect: (): (() => void) => {
+				return () => {};
+			},
+			isConnected: (): boolean => ws.readyState === WebSocket.OPEN,
+			close: (): void => {},
+		};
 
-    ws.on("close", () => {
-      log.info("Client disconnected", { total: wss.clients.size });
-      rpcServer.close();
-    });
+		const rpcServer = new RPCServer(wsTransport as Transport);
 
-    ws.on("error", (err: Error) => {
-      log.error("Client error", { error: err.message });
-    });
-  });
+		// 自动导入并注册所有 handlers
+		registerAllHandlers(rpcServer, { platform: "web" });
 
-  return wss;
+		ws.on("close", () => {
+			if (pingTimer) clearInterval(pingTimer);
+			log.info("Client disconnected", { total: wss.clients.size });
+			rpcServer.close();
+		});
+
+		ws.on("error", (err: Error) => {
+			log.error("Client error", { error: err.message });
+		});
+	});
+
+	return wss;
 }

package/templates/chat/src/mainview/App.tsx

@@ -10,6 +10,8 @@ import { useBreakpointSync } from "./hooks/use-breakpoint";
 import { ActivityBar } from "./components/activity-bar/ActivityBar";
 import { MobileTabBar } from "./components/activity-bar/MobileTabBar";
 import { ChatPanel } from "./components/chat/ChatPanel";
+import { ThemeToggle } from "./components/common/ThemeToggle";
+import { LanguageSwitcher } from "./components/common/LanguageSwitcher";
 
 function App() {
   const { t } = useTranslation();
@@ -90,6 +92,10 @@ function App() {
             {mode === "desktop" ? t("app.mode.desktop") : t("app.mode.web")}
           </span>
           <span className="ml-3 text-[var(--color-text-tertiary)]">{t("app.title")}</span>
+          <div className="ml-auto flex items-center gap-1">
+            <LanguageSwitcher />
+            <ThemeToggle />
+          </div>
         </div>
       )}
 

package/templates/chat/src/mainview/__tests__/i18n/i18n.test.ts

@@ -44,5 +44,6 @@ describe("i18n configuration", () => {
     const i18n = await import("../../lib/i18n");
     await i18n.default.changeLanguage("zh");
     expect(i18n.default.t("app.title")).toBe("Pi Chat");
+    expect(i18n.default.t("sidebar.explorer")).toBe("资源管理器");
   });
 });

package/templates/chat/src/mainview/__tests__/theme-variables.test.ts

@@ -0,0 +1,36 @@
+import { describe, it, expect } from "vitest";
+import { readFileSync } from "fs";
+import { resolve, dirname } from "path";
+
+function extractVarNames(css: string, selector: string): string[] {
+  const regex = new RegExp(`${selector.replace(".", "\\.")}\\s*\\{([^}]+)\\}`, "s");
+  const match = css.match(regex);
+  if (!match) return [];
+  const vars = match[1].match(/--[\w-]+/g);
+  return vars ? [...new Set(vars)].sort() : [];
+}
+
+describe("CSS Variables", () => {
+  const cssPath = resolve(dirname(import.meta.url.replace("file://", "")), "../index.css");
+  const css = readFileSync(cssPath, "utf-8");
+
+  it("should have matching variables in :root and .dark", () => {
+    const rootVars = extractVarNames(css, ":root");
+    const darkVars = extractVarNames(css, ".dark");
+
+    expect(rootVars.length).toBeGreaterThan(0);
+    expect(darkVars.length).toBeGreaterThan(0);
+    expect(rootVars).toEqual(darkVars);
+  });
+
+  it("should have all required variable categories", () => {
+    const allVars = css.match(/--[\w-]+/g) || [];
+    const uniqueVars = [...new Set(allVars)];
+
+    const requiredPrefixes = ["bg-", "text-", "border-", "accent-"];
+    for (const prefix of requiredPrefixes) {
+      const hasPrefix = uniqueVars.some((v) => v.includes(prefix));
+      expect(hasPrefix, `Missing CSS variables with prefix: ${prefix}`).toBe(true);
+    }
+  });
+});

package/templates/chat/src/mainview/components/common/LanguageSwitcher.tsx

@@ -5,6 +5,7 @@ export function LanguageSwitcher() {
 
   return (
     <button
+      data-testid="language-switcher"
       onClick={() => setLocale(locale === "en" ? "zh" : "en")}
       className="px-1.5 py-0.5 rounded text-xs hover:bg-[var(--color-bg-hover)] transition-colors text-[var(--color-text-secondary)]"
       title={locale === "en" ? "切换到中文" : "Switch to English"}

package/templates/chat/src/mainview/components/common/ThemeToggle.tsx

@@ -6,6 +6,7 @@ export function ThemeToggle() {
 
   return (
     <button
+      data-testid="theme-toggle"
       onClick={toggleTheme}
       className="p-1.5 rounded-md hover:bg-[var(--color-bg-hover)] transition-colors"
       title={theme === "dark" ? "Switch to light mode" : "Switch to dark mode"}