@jingyi0605/codingns 0.9.7 → 0.9.9

package/dist/server/modules/peer-host/host-ws-proxy-service.js

@@ -0,0 +1,256 @@
+import WebSocket, { WebSocketServer } from "ws";
+import { AppError } from "../../shared/errors/app-error.js";
+const PROXY_WS_PATH_PATTERN = /^\/api\/host-proxy\/hosts\/([^/]+)\/ws$/;
+const ALLOWED_CLIENT_MESSAGE_TYPES = new Set([
+    "workbench.subscribe",
+    "workbench.refresh",
+    "fileTree.subscribe",
+    "fileTree.refresh",
+    "git.subscribe",
+    "git.refresh",
+    "workspaceManagement.subscribe",
+    "workspaceManagement.refresh",
+    "terminalManager.subscribe",
+    "terminalManager.refresh",
+    "terminal.subscribe",
+    "terminal.input",
+    "terminal.resize",
+    "session.subscribe",
+    "session.load_older",
+]);
+const ALLOWED_REMOTE_MESSAGE_TYPES = new Set([
+    "system.connected",
+    "workbench.snapshot",
+    "workbench.delta",
+    "fileTree.snapshot",
+    "git.snapshot",
+    "workspaceManagement.snapshot",
+    "terminalManager.snapshot",
+    "terminal.subscribed",
+    "terminal.backfill",
+    "terminal.output",
+    "terminal.status",
+    "terminal.exit",
+    "terminal.error",
+    "terminal.input.accepted",
+    "terminal.resize.accepted",
+    "session.subscribed",
+    "session.backfill",
+    "session.delta",
+    "session.history_older",
+    "session.runtime_message",
+    "session.runtime_status",
+    "session.activity",
+    "session.runtime_error",
+    "session.interrupted",
+    "session.permission_request",
+    "session.permission_request_resolved",
+    "session.error",
+]);
+export class HostWsProxyService {
+    wsAuthGuard;
+    peerHostService;
+    clientWss = new WebSocketServer({ noServer: true });
+    constructor(wsAuthGuard, peerHostService) {
+        this.wsAuthGuard = wsAuthGuard;
+        this.peerHostService = peerHostService;
+    }
+    canHandleUpgrade(request) {
+        return Boolean(parseProxyWsRequest(request));
+    }
+    handleUpgrade(request, socket, head) {
+        const parsed = parseProxyWsRequest(request);
+        if (!parsed) {
+            return false;
+        }
+        void this.openProxy(request, socket, head, parsed.peerHostId);
+        return true;
+    }
+    async openProxy(request, socket, head, peerHostId) {
+        let authContext;
+        let remoteSocket = null;
+        try {
+            authContext = this.wsAuthGuard.authenticate(request);
+            const peerHost = this.peerHostService.ensureProxyReady(authContext.user.userId, peerHostId);
+            const accessToken = await this.peerHostService.getAccessTokenForProxy(authContext.user.userId, peerHost);
+            remoteSocket = await connectRemoteWorkbenchSocket(peerHost.baseUrl, accessToken);
+        }
+        catch (error) {
+            writeUpgradeError(socket, error);
+            return;
+        }
+        this.clientWss.handleUpgrade(request, socket, head, (client) => {
+            this.bindSockets(client, remoteSocket, peerHostId, authContext);
+            this.clientWss.emit("connection", client, request);
+        });
+    }
+    bindSockets(client, remoteSocket, peerHostId, authContext) {
+        let closed = false;
+        const closeBoth = (code, reason) => {
+            if (closed) {
+                return;
+            }
+            closed = true;
+            if (remoteSocket.readyState === WebSocket.OPEN || remoteSocket.readyState === WebSocket.CONNECTING) {
+                remoteSocket.close(code, reason);
+            }
+            if (client.readyState === WebSocket.OPEN || client.readyState === WebSocket.CONNECTING) {
+                client.close(code, reason);
+            }
+        };
+        client.on("message", (data, isBinary) => {
+            if (isBinary) {
+                sendWsError(client, "HOST_PROXY_WS_BINARY_NOT_ALLOWED", "Peer HOST 代理不支持二进制 WebSocket 消息");
+                return;
+            }
+            const raw = data.toString("utf8");
+            const messageType = readMessageType(raw);
+            if (!messageType || !ALLOWED_CLIENT_MESSAGE_TYPES.has(messageType)) {
+                sendWsError(client, "HOST_PROXY_WS_MESSAGE_NOT_ALLOWED", "这个 WebSocket 消息没有加入 Peer HOST 代理白名单");
+                return;
+            }
+            if (remoteSocket.readyState !== WebSocket.OPEN) {
+                sendWsError(client, "HOST_PROXY_WS_UPSTREAM_CLOSED", "目标 HOST 实时连接已经断开");
+                return;
+            }
+            remoteSocket.send(raw);
+        });
+        remoteSocket.on("message", (data, isBinary) => {
+            if (isBinary) {
+                return;
+            }
+            const raw = data.toString("utf8");
+            const messageType = readMessageType(raw);
+            if (!messageType || !ALLOWED_REMOTE_MESSAGE_TYPES.has(messageType)) {
+                return;
+            }
+            if (client.readyState === WebSocket.OPEN) {
+                client.send(raw);
+            }
+        });
+        remoteSocket.on("close", (code, reason) => {
+            if (code === 1008 || code === 4001 || code === 4401) {
+                this.peerHostService.clearSession(authContext.user.userId, peerHostId);
+            }
+            closeBoth(code, reason.length > 0 ? reason.toString("utf8") : undefined);
+        });
+        remoteSocket.on("error", () => {
+            sendWsError(client, "HOST_PROXY_WS_UPSTREAM_FAILED", "目标 HOST 实时连接失败");
+            closeBoth(1011, "upstream failed");
+        });
+        client.on("close", () => closeBoth());
+        client.on("error", () => closeBoth(1011, "client failed"));
+    }
+}
+function parseProxyWsRequest(request) {
+    const pathname = new URL(request.url ?? "/", "http://127.0.0.1").pathname;
+    const match = PROXY_WS_PATH_PATTERN.exec(pathname);
+    if (!match?.[1]) {
+        return null;
+    }
+    return { peerHostId: decodeURIComponent(match[1]) };
+}
+function buildRemoteWsUrl(baseUrl, accessToken) {
+    const url = new URL("/ws", baseUrl);
+    url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+    url.searchParams.set("access_token", accessToken);
+    return url.toString();
+}
+function connectRemoteWorkbenchSocket(baseUrl, accessToken) {
+    const remoteSocket = new WebSocket(buildRemoteWsUrl(baseUrl, accessToken));
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            cleanup();
+            remoteSocket.terminate();
+            reject(new AppError({
+                statusCode: 504,
+                errorCode: "HOST_PROXY_WS_CONNECT_TIMEOUT",
+                detail: "连接目标 HOST 实时通道超时",
+            }));
+        }, 5_000);
+        const cleanup = () => {
+            clearTimeout(timer);
+            remoteSocket.off("open", handleOpen);
+            remoteSocket.off("error", handleError);
+            remoteSocket.off("close", handleClose);
+        };
+        const handleOpen = () => {
+            cleanup();
+            resolve(remoteSocket);
+        };
+        const handleError = (error) => {
+            cleanup();
+            reject(new AppError({
+                statusCode: 502,
+                errorCode: "HOST_PROXY_WS_UPSTREAM_FAILED",
+                detail: error.message || "目标 HOST 实时通道连接失败",
+            }));
+        };
+        const handleClose = () => {
+            cleanup();
+            reject(new AppError({
+                statusCode: 502,
+                errorCode: "HOST_PROXY_WS_UPSTREAM_CLOSED",
+                detail: "目标 HOST 实时通道已关闭",
+            }));
+        };
+        remoteSocket.once("open", handleOpen);
+        remoteSocket.once("error", handleError);
+        remoteSocket.once("close", handleClose);
+    });
+}
+function readMessageType(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed.type === "string" ? parsed.type : null;
+    }
+    catch {
+        return null;
+    }
+}
+function sendWsError(client, errorCode, detail) {
+    if (client.readyState !== WebSocket.OPEN) {
+        return;
+    }
+    client.send(JSON.stringify({
+        type: "session.error",
+        sessionId: null,
+        error_code: errorCode,
+        detail,
+        timestamp: new Date().toISOString(),
+    }));
+}
+function writeUpgradeError(socket, error) {
+    const appError = error instanceof AppError
+        ? error
+        : new AppError({
+            statusCode: 500,
+            errorCode: "HOST_PROXY_WS_FAILED",
+            detail: error instanceof Error ? error.message : "Peer HOST 实时代理失败",
+        });
+    const statusCode = appError.statusCode === 401
+        ? 401
+        : appError.statusCode === 403
+            ? 403
+            : appError.statusCode === 409
+                ? 409
+                : 502;
+    socket.write(`HTTP/1.1 ${statusCode} ${statusText(statusCode)}\r\nConnection: close\r\nContent-Type: application/json\r\n\r\n${JSON.stringify({
+        detail: appError.message,
+        error_code: appError.errorCode,
+    })}`);
+    socket.destroy();
+}
+function statusText(statusCode) {
+    switch (statusCode) {
+        case 401:
+            return "Unauthorized";
+        case 403:
+            return "Forbidden";
+        case 409:
+            return "Conflict";
+        default:
+            return "Bad Gateway";
+    }
+}
+//# sourceMappingURL=host-ws-proxy-service.js.map

package/dist/server/modules/peer-host/host-ws-proxy-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-ws-proxy-service.js","sourceRoot":"","sources":["../../../../src/modules/peer-host/host-ws-proxy-service.ts"],"names":[],"mappings":"AAGA,OAAO,SAAS,EAAE,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAK5D,MAAM,qBAAqB,GAAG,yCAAyC,CAAC;AAExE,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,qBAAqB;IACrB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,+BAA+B;IAC/B,6BAA6B;IAC7B,2BAA2B;IAC3B,yBAAyB;IACzB,oBAAoB;IACpB,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,mBAAmB;IACnB,cAAc;IACd,8BAA8B;IAC9B,0BAA0B;IAC1B,qBAAqB;IACrB,mBAAmB;IACnB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,yBAAyB;IACzB,0BAA0B;IAC1B,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,uBAAuB;IACvB,yBAAyB;IACzB,wBAAwB;IACxB,kBAAkB;IAClB,uBAAuB;IACvB,qBAAqB;IACrB,4BAA4B;IAC5B,qCAAqC;IACrC,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,OAAO,kBAAkB;IAIV;IACA;IAJF,SAAS,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,YACmB,WAAwB,EACxB,eAAgC;QADhC,gBAAW,GAAX,WAAW,CAAa;QACxB,oBAAe,GAAf,eAAe,CAAiB;IAChD,CAAC;IAEJ,gBAAgB,CAAC,OAAwB;QACvC,OAAO,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,aAAa,CACX,OAAwB,EACxB,MAAc,EACd,IAAY;QAEZ,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,OAAwB,EACxB,MAAc,EACd,IAAY,EACZ,UAAkB;QAElB,IAAI,WAAwB,CAAC;QAC7B,IAAI,YAAY,GAAqB,IAAI,CAAC;QAE1C,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,gBAAgB,CACpD,WAAW,CAAC,IAAI,CAAC,MAAM,EACvB,UAAU,CACX,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,sBAAsB,CACnE,WAAW,CAAC,IAAI,CAAC,MAAM,EACvB,QAAQ,CACT,CAAC;YACF,YAAY,GAAG,MAAM,4BAA4B,CAC/C,QAAQ,CAAC,OAAO,EAChB,WAAW,CACZ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7D,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YAChE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CACjB,MAAiB,EACjB,YAAuB,EACvB,UAAkB,EAClB,WAAwB;QAExB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,SAAS,GAAG,CAAC,IAAa,EAAE,MAAe,EAAE,EAAE;YACnD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YAED,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;gBACnG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;gBACvF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;YACtC,IAAI,QAAQ,EAAE,CAAC;gBACb,WAAW,CAAC,MAAM,EAAE,kCAAkC,EAAE,iCAAiC,CAAC,CAAC;gBAC3F,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YAEzC,IAAI,CAAC,WAAW,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnE,WAAW,CAAC,MAAM,EAAE,mCAAmC,EAAE,qCAAqC,CAAC,CAAC;gBAChG,OAAO;YACT,CAAC;YAED,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC/C,WAAW,CAAC,MAAM,EAAE,+BAA+B,EAAE,kBAAkB,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YAED,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YAEzC,IAAI,CAAC,WAAW,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACxC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACpD,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACzE,CAAC;YAED,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC5B,WAAW,CAAC,MAAM,EAAE,+BAA+B,EAAE,gBAAgB,CAAC,CAAC;YACvE,SAAS,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,SAAS,mBAAmB,CAAC,OAAwB;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;IAC1E,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEnD,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,WAAmB;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAe,EACf,WAAmB;IAEnB,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAE3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,YAAY,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,CACJ,IAAI,QAAQ,CAAC;gBACX,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,+BAA+B;gBAC1C,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CACH,CAAC;QACJ,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACrC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACvC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,MAAM,UAAU,GAAG,GAAG,EAAE;YACtB,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,YAAY,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE;YACnC,OAAO,EAAE,CAAC;YACV,MAAM,CACJ,IAAI,QAAQ,CAAC;gBACX,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,+BAA+B;gBAC1C,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,kBAAkB;aAC5C,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,OAAO,EAAE,CAAC;YACV,MAAM,CACJ,IAAI,QAAQ,CAAC;gBACX,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,+BAA+B;gBAC1C,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QAEF,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACtC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACrD,OAAO,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAiB,EAAE,SAAiB,EAAE,MAAc;IACvE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO;IACT,CAAC;IAED,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,SAAS;QACrB,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,KAAc;IACvD,MAAM,QAAQ,GACZ,KAAK,YAAY,QAAQ;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,QAAQ,CAAC;YACX,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,sBAAsB;YACjC,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;SACpE,CAAC,CAAC;IACT,MAAM,UAAU,GACd,QAAQ,CAAC,UAAU,KAAK,GAAG;QACzB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,GAAG;YAC3B,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,GAAG;gBAC3B,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,GAAG,CAAC;IAEd,MAAM,CAAC,KAAK,CACV,YAAY,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,kEAAkE,IAAI,CAAC,SAAS,CAAC;QAC/H,MAAM,EAAE,QAAQ,CAAC,OAAO;QACxB,UAAU,EAAE,QAAQ,CAAC,SAAS;KAC/B,CAAC,EAAE,CACL,CAAC;IACF,MAAM,CAAC,OAAO,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB;IACpC,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,GAAG;YACN,OAAO,cAAc,CAAC;QACxB,KAAK,GAAG;YACN,OAAO,WAAW,CAAC;QACrB,KAAK,GAAG;YACN,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,aAAa,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/server/modules/peer-host/peer-host-controller.d.ts

@@ -0,0 +1,55 @@
+import type { FastifyReply, FastifyRequest } from "fastify";
+import type { PeerHostCreateInput, PeerHostLoginInput, PeerHostService, PeerHostUpdateInput, PeerHostWorkspaceBindingUpdateInput } from "./peer-host-service.js";
+import type { HostApiProxyService } from "./host-api-proxy-service.js";
+export declare class PeerHostController {
+    private readonly peerHostService;
+    constructor(peerHostService: PeerHostService);
+    readonly list: (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+    readonly create: (request: FastifyRequest<{
+        Body: PeerHostCreateInput;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly listWorkspaceBindings: (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+    readonly saveWorkspaceBinding: (request: FastifyRequest<{
+        Params: {
+            workspaceKey: string;
+        };
+        Body: PeerHostWorkspaceBindingUpdateInput;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly get: (request: FastifyRequest<{
+        Params: {
+            peerHostId: string;
+        };
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly update: (request: FastifyRequest<{
+        Params: {
+            peerHostId: string;
+        };
+        Body: PeerHostUpdateInput;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly delete: (request: FastifyRequest<{
+        Params: {
+            peerHostId: string;
+        };
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly check: (request: FastifyRequest<{
+        Params: {
+            peerHostId: string;
+        };
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly login: (request: FastifyRequest<{
+        Params: {
+            peerHostId: string;
+        };
+        Body: PeerHostLoginInput;
+    }>, reply: FastifyReply) => Promise<void>;
+    readonly deleteSession: (request: FastifyRequest<{
+        Params: {
+            peerHostId: string;
+        };
+    }>, reply: FastifyReply) => Promise<void>;
+}
+export declare class HostApiProxyController {
+    private readonly hostApiProxyService;
+    constructor(hostApiProxyService: HostApiProxyService);
+    readonly proxy: (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+}

package/dist/server/modules/peer-host/peer-host-controller.js

@@ -0,0 +1,62 @@
+import { AppError } from "../../shared/errors/app-error.js";
+export class PeerHostController {
+    peerHostService;
+    constructor(peerHostService) {
+        this.peerHostService = peerHostService;
+    }
+    list = async (request, reply) => {
+        reply.send({ items: this.peerHostService.list(requireUserId(request)) });
+    };
+    create = async (request, reply) => {
+        reply
+            .status(201)
+            .send(this.peerHostService.create(requireUserId(request), request.body ?? {}));
+    };
+    listWorkspaceBindings = async (request, reply) => {
+        reply.send({
+            items: this.peerHostService.listWorkspaceBindings(requireUserId(request)),
+        });
+    };
+    saveWorkspaceBinding = async (request, reply) => {
+        reply.send(this.peerHostService.saveWorkspaceBinding(requireUserId(request), request.params.workspaceKey, request.body ?? {}));
+    };
+    get = async (request, reply) => {
+        reply.send(this.peerHostService.get(requireUserId(request), request.params.peerHostId));
+    };
+    update = async (request, reply) => {
+        reply.send(this.peerHostService.update(requireUserId(request), request.params.peerHostId, request.body ?? {}));
+    };
+    delete = async (request, reply) => {
+        reply.send(this.peerHostService.delete(requireUserId(request), request.params.peerHostId));
+    };
+    check = async (request, reply) => {
+        reply.send(await this.peerHostService.check(requireUserId(request), request.params.peerHostId));
+    };
+    login = async (request, reply) => {
+        reply.send(await this.peerHostService.login(requireUserId(request), request.params.peerHostId, request.body ?? {}));
+    };
+    deleteSession = async (request, reply) => {
+        reply.send(this.peerHostService.deleteSession(requireUserId(request), request.params.peerHostId));
+    };
+}
+export class HostApiProxyController {
+    hostApiProxyService;
+    constructor(hostApiProxyService) {
+        this.hostApiProxyService = hostApiProxyService;
+    }
+    proxy = async (request, reply) => {
+        await this.hostApiProxyService.proxy(request, reply);
+    };
+}
+function requireUserId(request) {
+    const userId = request.auth?.user.userId;
+    if (userId) {
+        return userId;
+    }
+    throw new AppError({
+        statusCode: 401,
+        errorCode: "UNAUTHORIZED",
+        detail: "当前请求缺少有效登录态",
+    });
+}
+//# sourceMappingURL=peer-host-controller.js.map

package/dist/server/modules/peer-host/peer-host-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-host-controller.js","sourceRoot":"","sources":["../../../../src/modules/peer-host/peer-host-controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAU5D,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,eAAgC;QAAhC,oBAAe,GAAf,eAAe,CAAiB;IAAG,CAAC;IAExD,IAAI,GAAG,KAAK,EACnB,OAAuB,EACvB,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC;IAEO,MAAM,GAAG,KAAK,EACrB,OAAsD,EACtD,KAAmB,EACJ,EAAE;QACjB,KAAK;aACF,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CACH,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CACxE,CAAC;IACN,CAAC,CAAC;IAEO,qBAAqB,GAAG,KAAK,EACpC,OAAuB,EACvB,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;SAC1E,CAAC,CAAC;IACL,CAAC,CAAC;IAEO,oBAAoB,GAAG,KAAK,EACnC,OAGE,EACF,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,eAAe,CAAC,oBAAoB,CACvC,aAAa,CAAC,OAAO,CAAC,EACtB,OAAO,CAAC,MAAM,CAAC,YAAY,EAC3B,OAAO,CAAC,IAAI,IAAI,EAAE,CACnB,CACF,CAAC;IACJ,CAAC,CAAC;IAEO,GAAG,GAAG,KAAK,EAClB,OAA2D,EAC3D,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,eAAe,CAAC,GAAG,CACtB,aAAa,CAAC,OAAO,CAAC,EACtB,OAAO,CAAC,MAAM,CAAC,UAAU,CAC1B,CACF,CAAC;IACJ,CAAC,CAAC;IAEO,MAAM,GAAG,KAAK,EACrB,OAGE,EACF,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,eAAe,CAAC,MAAM,CACzB,aAAa,CAAC,OAAO,CAAC,EACtB,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB,OAAO,CAAC,IAAI,IAAI,EAAE,CACnB,CACF,CAAC;IACJ,CAAC,CAAC;IAEO,MAAM,GAAG,KAAK,EACrB,OAA2D,EAC3D,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,eAAe,CAAC,MAAM,CACzB,aAAa,CAAC,OAAO,CAAC,EACtB,OAAO,CAAC,MAAM,CAAC,UAAU,CAC1B,CACF,CAAC;IACJ,CAAC,CAAC;IAEO,KAAK,GAAG,KAAK,EACpB,OAA2D,EAC3D,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CACR,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAC9B,aAAa,CAAC,OAAO,CAAC,EACtB,OAAO,CAAC,MAAM,CAAC,UAAU,CAC1B,CACF,CAAC;IACJ,CAAC,CAAC;IAEO,KAAK,GAAG,KAAK,EACpB,OAGE,EACF,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CACR,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAC9B,aAAa,CAAC,OAAO,CAAC,EACtB,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB,OAAO,CAAC,IAAI,IAAI,EAAE,CACnB,CACF,CAAC;IACJ,CAAC,CAAC;IAEO,aAAa,GAAG,KAAK,EAC5B,OAA2D,EAC3D,KAAmB,EACJ,EAAE;QACjB,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,eAAe,CAAC,aAAa,CAChC,aAAa,CAAC,OAAO,CAAC,EACtB,OAAO,CAAC,MAAM,CAAC,UAAU,CAC1B,CACF,CAAC;IACJ,CAAC,CAAC;CACH;AAED,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,mBAAwC;QAAxC,wBAAmB,GAAnB,mBAAmB,CAAqB;IAAG,CAAC;IAEhE,KAAK,GAAG,KAAK,EACpB,OAAuB,EACvB,KAAmB,EACJ,EAAE;QACjB,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC;CACH;AAED,SAAS,aAAa,CAAC,OAAuB;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;IAEzC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,QAAQ,CAAC;QACjB,UAAU,EAAE,GAAG;QACf,SAAS,EAAE,cAAc;QACzB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/server/modules/peer-host/peer-host-service.d.ts

@@ -0,0 +1,77 @@
+import type { PeerHostRecord } from "../../types/domain.js";
+import type { PeerHostRepository, PeerHostSessionRepository, PeerHostWorkspaceBindingRepository } from "../../storage/repositories/peer-host-repository.js";
+export interface PeerHostCreateInput {
+    name?: string;
+    alias?: string;
+    baseUrl?: string;
+}
+export interface PeerHostUpdateInput {
+    name?: string;
+    alias?: string | null;
+    baseUrl?: string;
+}
+export interface PeerHostWorkspaceBindingUpdateInput {
+    activeHostId?: string;
+    selectedHostId?: string;
+    remoteWorkspaceId?: string | null;
+    remoteWorkspacePath?: string | null;
+    remoteWorkspaceName?: string | null;
+}
+export interface PeerHostWorkspaceBindingView {
+    activeHostId: string;
+    workspaceKey: string;
+    selectedHostId: string;
+    remoteWorkspaceId: string | null;
+    remoteWorkspacePath: string | null;
+    remoteWorkspaceName: string | null;
+    updatedAt: string;
+}
+export interface PeerHostLoginInput {
+    username?: string;
+    password?: string;
+}
+export interface PeerHostSessionView {
+    exists: true;
+    username: string;
+    remoteUserId: string;
+    remoteUsername: string;
+    expiresAt: string | null;
+    savedAt: string;
+    updatedAt: string;
+}
+export declare class PeerHostService {
+    private readonly peerHostRepository;
+    private readonly peerHostSessionRepository;
+    private readonly peerHostWorkspaceBindingRepository;
+    private readonly credentialSecret;
+    private readonly fetchImpl;
+    constructor(peerHostRepository: PeerHostRepository, peerHostSessionRepository: PeerHostSessionRepository, peerHostWorkspaceBindingRepositoryOrCredentialSecret: PeerHostWorkspaceBindingRepository | string, credentialSecretOrFetch?: string | typeof fetch, fetchImpl?: typeof fetch);
+    list(ownerUserId: string): PeerHostRecord[];
+    create(ownerUserId: string, input: PeerHostCreateInput): PeerHostRecord;
+    get(ownerUserId: string, peerHostId: string): PeerHostRecord;
+    update(ownerUserId: string, peerHostId: string, input: PeerHostUpdateInput): PeerHostRecord;
+    listWorkspaceBindings(ownerUserId: string): PeerHostWorkspaceBindingView[];
+    saveWorkspaceBinding(ownerUserId: string, workspaceKeyInput: unknown, input: PeerHostWorkspaceBindingUpdateInput): PeerHostWorkspaceBindingView;
+    delete(ownerUserId: string, peerHostId: string): {
+        success: true;
+        peerHostId: string;
+    };
+    check(ownerUserId: string, peerHostId: string): Promise<PeerHostRecord>;
+    login(ownerUserId: string, peerHostId: string, input: PeerHostLoginInput): Promise<PeerHostSessionView>;
+    deleteSession(ownerUserId: string, peerHostId: string): {
+        success: true;
+        peerHostId: string;
+    };
+    ensureProxyReady(ownerUserId: string, peerHostId: string): PeerHostRecord;
+    getAccessTokenForProxy(ownerUserId: string, peerHost: PeerHostRecord): Promise<string>;
+    clearSession(ownerUserId: string, peerHostId: string): void;
+    private fetchHandshake;
+    private resolveCheckStatus;
+    private persistCheckResult;
+    private fetchJson;
+    private refreshPeerHostSession;
+    private requirePeerHost;
+    private ensureBaseUrlUnused;
+    private requireWorkspaceBindingRepository;
+}
+export declare function normalizeBaseUrl(value: unknown): string;