@enderrealmmc/cf-static-guard 0.1.0

package/dist/lib/kv.js

@@ -0,0 +1,125 @@
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { runWrangler } from './wrangler.js';
+const AUTH_KEY = 'auth:config';
+const UI_KEY = 'ui:config';
+function requireKv(profile) {
+    if (!profile.kvNamespaceId) {
+        throw new Error('KV namespace not set on profile. Run `csg init` or `csg kv create` first.');
+    }
+    return profile.kvNamespaceId;
+}
+export async function kvPut(profile, key, value) {
+    const id = requireKv(profile);
+    const dir = mkdtempSync(join(tmpdir(), 'csg-kv-'));
+    const file = join(dir, 'value.json');
+    writeFileSync(file, value, 'utf8');
+    try {
+        const res = await runWrangler([
+            'kv',
+            'key',
+            'put',
+            key,
+            '--namespace-id',
+            id,
+            '--path',
+            file,
+        ]);
+        if (res.exitCode !== 0) {
+            throw new Error(res.stderr || res.stdout || 'kv put failed');
+        }
+    }
+    finally {
+        try {
+            rmSync(dir, { recursive: true, force: true });
+        }
+        catch {
+            // ignore
+        }
+    }
+}
+export async function kvGet(profile, key) {
+    const id = requireKv(profile);
+    const res = await runWrangler([
+        'kv',
+        'key',
+        'get',
+        key,
+        '--namespace-id',
+        id,
+    ]);
+    if (res.exitCode !== 0)
+        return null;
+    const out = res.stdout.trim();
+    return out || null;
+}
+export function profileToAuthConfig(profile) {
+    return {
+        mode: profile.mode,
+        providers: {
+            github: {
+                enabled: profile.providers.github?.enabled !== false,
+                mode: profile.providers.github?.mode,
+                rules: profile.providers.github?.rules || {},
+            },
+        },
+    };
+}
+export function profileToUiConfig(profile) {
+    return {
+        siteTitle: profile.ui?.siteTitle ?? '受保护站点',
+        siteSubtitle: profile.ui?.siteSubtitle ?? '登录后继续访问',
+        loginHeading: profile.ui?.loginHeading ?? '访问受保护站点',
+        loginSubtitle: profile.ui?.loginSubtitle ?? '使用已授权账号登录后继续浏览',
+        providerButtonPrefix: profile.ui?.providerButtonPrefix ?? '使用',
+        footerBrand: profile.ui?.footerBrand ?? 'cf-static-guard',
+        copyright: profile.ui?.copyright ?? '',
+        icp: profile.ui?.icp ?? '',
+        icpLink: profile.ui?.icpLink ?? 'https://beian.miit.gov.cn/',
+        showModeBadge: profile.ui?.showModeBadge !== false,
+        showFooterBrand: profile.ui?.showFooterBrand !== false,
+        showGithubIcon: profile.ui?.showGithubIcon !== false,
+    };
+}
+export async function pushAuthConfig(profile) {
+    await kvPut(profile, AUTH_KEY, JSON.stringify(profileToAuthConfig(profile), null, 2));
+}
+export async function pushUiConfig(profile) {
+    await kvPut(profile, UI_KEY, JSON.stringify(profileToUiConfig(profile), null, 2));
+}
+export async function pullAuthConfig(profile) {
+    const raw = await kvGet(profile, AUTH_KEY);
+    if (!raw)
+        return null;
+    return JSON.parse(raw);
+}
+export async function pullUiConfig(profile) {
+    const raw = await kvGet(profile, UI_KEY);
+    if (!raw)
+        return null;
+    return JSON.parse(raw);
+}
+/** Merge pulled auth config into a local profile (for csg config pull --apply). */
+export function applyAuthToProfile(profile, auth) {
+    const gh = auth.providers?.github;
+    return {
+        ...profile,
+        mode: auth.mode || profile.mode,
+        providers: {
+            github: {
+                enabled: gh?.enabled !== false,
+                mode: gh?.mode,
+                rules: gh?.rules || {},
+            },
+        },
+        updatedAt: new Date().toISOString(),
+    };
+}
+export function applyUiToProfile(profile, ui) {
+    return {
+        ...profile,
+        ui: { ...profile.ui, ...ui },
+        updatedAt: new Date().toISOString(),
+    };
+}

package/dist/lib/log.js

@@ -0,0 +1,22 @@
+import pc from 'picocolors';
+export function info(msg) {
+    console.log(pc.cyan('i'), msg);
+}
+export function success(msg) {
+    console.log(pc.green('✓'), msg);
+}
+export function warn(msg) {
+    console.log(pc.yellow('!'), msg);
+}
+export function error(msg) {
+    console.error(pc.red('✗'), msg);
+}
+export function step(msg) {
+    console.log(pc.dim('→'), msg);
+}
+export function box(lines) {
+    console.log('');
+    for (const line of lines)
+        console.log('  ' + line);
+    console.log('');
+}

package/dist/lib/paths.js

@@ -0,0 +1,29 @@
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { existsSync, readFileSync } from 'node:fs';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+export function packageRoot() {
+    // dist/lib -> dist -> package root
+    return join(__dirname, '..', '..');
+}
+export function workerBundleDir() {
+    return join(packageRoot(), 'dist-worker');
+}
+export function workerBundlePath() {
+    return join(workerBundleDir(), 'worker.js');
+}
+export function hasWorkerBundle() {
+    return existsSync(workerBundlePath());
+}
+export function readWorkerBundle() {
+    return readFileSync(workerBundlePath(), 'utf8');
+}
+export function cliVersion() {
+    try {
+        const pkg = JSON.parse(readFileSync(join(packageRoot(), 'package.json'), 'utf8'));
+        return pkg.version || '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}

package/dist/lib/store.js

@@ -0,0 +1,76 @@
+import { mkdirSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export function configDir() {
+    if (process.platform === 'win32') {
+        const base = process.env.APPDATA || join(homedir(), 'AppData', 'Roaming');
+        return join(base, 'csg');
+    }
+    const base = process.env.XDG_CONFIG_HOME || join(homedir(), '.config');
+    return join(base, 'csg');
+}
+export function configPath() {
+    return join(configDir(), 'config.json');
+}
+export function emptyStore() {
+    return { defaultProfile: 'default', profiles: {} };
+}
+export function loadStore() {
+    const p = configPath();
+    if (!existsSync(p))
+        return emptyStore();
+    try {
+        const raw = JSON.parse(readFileSync(p, 'utf8'));
+        if (!raw || typeof raw !== 'object' || !raw.profiles)
+            return emptyStore();
+        return {
+            defaultProfile: raw.defaultProfile || 'default',
+            profiles: raw.profiles,
+        };
+    }
+    catch {
+        return emptyStore();
+    }
+}
+export function saveStore(store) {
+    const dir = configDir();
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(configPath(), JSON.stringify(store, null, 2) + '\n', 'utf8');
+}
+export function getProfile(name) {
+    const store = loadStore();
+    const key = name || store.defaultProfile;
+    return store.profiles[key] || null;
+}
+export function upsertProfile(profile, asDefault = true) {
+    const store = loadStore();
+    store.profiles[profile.name] = profile;
+    if (asDefault)
+        store.defaultProfile = profile.name;
+    saveStore(store);
+}
+export function listProfileNames() {
+    return Object.keys(loadStore().profiles);
+}
+export function setDefaultProfile(name) {
+    const store = loadStore();
+    if (!store.profiles[name])
+        return false;
+    store.defaultProfile = name;
+    saveStore(store);
+    return true;
+}
+export function defaultProfile(name, mode = 'normal') {
+    return {
+        name,
+        mode,
+        spaFallback: false,
+        publicPaths: ['/health'],
+        sessionTtlSeconds: 604800,
+        providers: {
+            github: { enabled: true, mode: undefined, rules: {} },
+        },
+        ui: {},
+        updatedAt: new Date().toISOString(),
+    };
+}

package/dist/lib/wrangler.js

@@ -0,0 +1,48 @@
+import { execa } from 'execa';
+import { dirname } from 'node:path';
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
+export function wranglerBin() {
+    try {
+        // resolve wrangler's bin from this package's dependency
+        const pkgPath = require.resolve('wrangler/package.json');
+        const root = dirname(pkgPath);
+        const bin = process.platform === 'win32'
+            ? `${root}\\bin\\wrangler.js`
+            : `${root}/bin/wrangler.js`;
+        return bin;
+    }
+    catch {
+        return 'wrangler';
+    }
+}
+export async function runWrangler(args, opts = {}) {
+    const bin = wranglerBin();
+    const isJs = bin.endsWith('.js');
+    const cmd = isJs ? process.execPath : bin;
+    const cmdArgs = isJs ? [bin, ...args] : args;
+    try {
+        const result = await execa(cmd, cmdArgs, {
+            reject: false,
+            stdio: ['inherit', 'pipe', 'pipe'],
+            ...opts,
+        });
+        return {
+            stdout: String(result.stdout ?? ''),
+            stderr: String(result.stderr ?? ''),
+            exitCode: result.exitCode ?? 1,
+        };
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        return { stdout: '', stderr: msg, exitCode: 1 };
+    }
+}
+export async function runWranglerInherit(args, opts = {}) {
+    const bin = wranglerBin();
+    const isJs = bin.endsWith('.js');
+    const cmd = isJs ? process.execPath : bin;
+    const cmdArgs = isJs ? [bin, ...args] : args;
+    const result = await execa(cmd, cmdArgs, { reject: false, stdio: 'inherit', ...opts });
+    return result.exitCode ?? 1;
+}