@jonathanleelx/meddle 0.5.0-beta.23 → 0.5.0-beta.25

package/dist/server/ruleset-lock.js

@@ -0,0 +1,234 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RulesetReadonlyError = exports.UI_TOKEN_META_NAME = exports.UI_TOKEN_HEADER = exports.READONLY_SETTINGS_KEY = exports.RULESET_READONLY_STATUS = exports.RULESET_READONLY_MESSAGE = exports.RULESET_READONLY = void 0;
+exports.isRulesetReadonlyError = isRulesetReadonlyError;
+exports.rulesetReadonlyBody = rulesetReadonlyBody;
+exports.normalizeReadonlyNames = normalizeReadonlyNames;
+exports.getReadonlyRuleFileNames = getReadonlyRuleFileNames;
+exports.isRuleFileReadonly = isRuleFileReadonly;
+exports.assertRuleFilesWritable = assertRuleFilesWritable;
+exports.assertRuleFileWritable = assertRuleFileWritable;
+exports.setRuleFileReadonly = setRuleFileReadonly;
+exports.getUiToken = getUiToken;
+exports.injectUiToken = injectUiToken;
+exports.isSameOriginRequest = isSameOriginRequest;
+exports.hasValidUiToken = hasValidUiToken;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/**
+ * Issue #137: per-ruleset (rule file) read-only lock.
+ *
+ * - Stored in settings.json under `readonlyRuleFiles` (file names without
+ *   `.txt`), never inside the rule file. A missing field means every ruleset
+ *   is read-write, so old settings need no migration.
+ * - Keyed by file name. A rename done outside Meddle makes a new, read-write
+ *   ruleset; lock entries whose file no longer exists are dropped silently.
+ * - Every ruleset write goes through `assertRuleFilesWritable`, which throws
+ *   `RulesetReadonlyError` (code `RULESET_READONLY`).
+ * - Only the web UI can lock / unlock: the request must carry the token the
+ *   server put into the page (index.html meta / same-origin bootstrap) and pass
+ *   a same-origin check. This guards against accidents, not against an attacker:
+ *   anyone with a shell can GET the page, read the token, forge `Origin`, or
+ *   simply edit the files on disk.
+ */
+exports.RULESET_READONLY = 'RULESET_READONLY';
+exports.RULESET_READONLY_MESSAGE = '该规则集已设为只读，只能在 Meddle 界面中解锁';
+/** HTTP status for a write against a locked ruleset (423 Locked). */
+exports.RULESET_READONLY_STATUS = 423;
+exports.READONLY_SETTINGS_KEY = 'readonlyRuleFiles';
+exports.UI_TOKEN_HEADER = 'x-meddle-ui-token';
+exports.UI_TOKEN_META_NAME = 'meddle-ui-token';
+class RulesetReadonlyError extends Error {
+    constructor(ruleFile) {
+        super(exports.RULESET_READONLY_MESSAGE);
+        this.ruleFile = ruleFile;
+        this.code = exports.RULESET_READONLY;
+        this.status = exports.RULESET_READONLY_STATUS;
+        this.name = 'RulesetReadonlyError';
+    }
+}
+exports.RulesetReadonlyError = RulesetReadonlyError;
+function isRulesetReadonlyError(err) {
+    return err instanceof RulesetReadonlyError;
+}
+function rulesetReadonlyBody(err) {
+    return { error: err.message, code: err.code, ruleFile: err.ruleFile };
+}
+function readSettings(ctx) {
+    try {
+        if (fs.existsSync(ctx.settingsPath)) {
+            return JSON.parse(fs.readFileSync(ctx.settingsPath, 'utf8'));
+        }
+    }
+    catch { /* ignore */ }
+    return {};
+}
+function writeSettings(ctx, settings) {
+    const dir = path.dirname(ctx.settingsPath);
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(ctx.settingsPath, JSON.stringify(settings, null, 2), 'utf8');
+}
+/** Normalize the raw settings value; anything that is not a string array counts as empty. */
+function normalizeReadonlyNames(value) {
+    if (!Array.isArray(value))
+        return [];
+    const seen = new Set();
+    const names = [];
+    for (const item of value) {
+        if (typeof item !== 'string' || !item || seen.has(item))
+            continue;
+        seen.add(item);
+        names.push(item);
+    }
+    return names;
+}
+function ruleFileExists(ctx, name) {
+    return fs.existsSync(path.join(ctx.meddleDir, 'route-rules', `${name}.txt`));
+}
+/**
+ * Locked rule file names. Entries whose file is gone (deleted or renamed
+ * outside Meddle) are removed from settings.json here, silently.
+ */
+function getReadonlyRuleFileNames(ctx) {
+    const settings = readSettings(ctx);
+    if (!(exports.READONLY_SETTINGS_KEY in settings))
+        return [];
+    const stored = normalizeReadonlyNames(settings[exports.READONLY_SETTINGS_KEY]);
+    const live = stored.filter((name) => ruleFileExists(ctx, name));
+    const raw = settings[exports.READONLY_SETTINGS_KEY];
+    const changed = !Array.isArray(raw) || live.length !== raw.length;
+    if (changed) {
+        settings[exports.READONLY_SETTINGS_KEY] = live;
+        writeSettings(ctx, settings);
+    }
+    return live;
+}
+function isRuleFileReadonly(ctx, name) {
+    return getReadonlyRuleFileNames(ctx).some((item) => fold(item) === fold(name));
+}
+/**
+ * File names compare case-insensitively on macOS / Windows, where `Foo.txt`
+ * and `foo.txt` are the same file; the lock must not be dodged by changing case.
+ */
+const CASE_INSENSITIVE_FS = process.platform === 'darwin' || process.platform === 'win32';
+const fold = (name) => (CASE_INSENSITIVE_FS ? name.toLowerCase() : name);
+/** The common write gate: throws RulesetReadonlyError for the first locked name. */
+function assertRuleFilesWritable(ctx, names) {
+    const locked = getReadonlyRuleFileNames(ctx);
+    if (locked.length === 0)
+        return;
+    const byKey = new Map(locked.map((name) => [fold(name), name]));
+    for (const name of names) {
+        const hit = byKey.get(fold(name));
+        if (hit !== undefined)
+            throw new RulesetReadonlyError(hit);
+    }
+}
+function assertRuleFileWritable(ctx, name) {
+    assertRuleFilesWritable(ctx, [name]);
+}
+/** Lock / unlock. Only the token-protected UI route calls this. */
+function setRuleFileReadonly(ctx, name, readonly) {
+    if (!ruleFileExists(ctx, name)) {
+        throw new Error('规则文件不存在');
+    }
+    const current = getReadonlyRuleFileNames(ctx);
+    const next = readonly
+        ? (current.includes(name) ? current : [...current, name])
+        : current.filter((item) => item !== name);
+    const settings = readSettings(ctx);
+    settings[exports.READONLY_SETTINGS_KEY] = next;
+    writeSettings(ctx, settings);
+    return next;
+}
+// ---------- UI token + same-origin check ----------
+const uiTokens = new WeakMap();
+/** One random token per server instance; handed to the page, never to CLI/MCP. */
+function getUiToken(ctx) {
+    let token = uiTokens.get(ctx);
+    if (!token) {
+        token = crypto.randomBytes(32).toString('hex');
+        uiTokens.set(ctx, token);
+    }
+    return token;
+}
+/** Put the token into index.html as `<meta name="meddle-ui-token">`. */
+function injectUiToken(html, token) {
+    const meta = `<meta name="${exports.UI_TOKEN_META_NAME}" content="${token}">`;
+    if (html.includes('</head>'))
+        return html.replace('</head>', `${meta}</head>`);
+    return meta + html;
+}
+function headerValue(req, name) {
+    const value = req.headers[name];
+    if (Array.isArray(value))
+        return value[0] || '';
+    return typeof value === 'string' ? value : '';
+}
+/**
+ * Same-origin check. Browsers send `Sec-Fetch-Site`; when present it must be
+ * `same-origin`. When `Origin` is present its host must equal `Host`. A request
+ * with neither header (plain curl / CLI / MCP fetch) is rejected.
+ */
+function isSameOriginRequest(req) {
+    const site = headerValue(req, 'sec-fetch-site');
+    const origin = headerValue(req, 'origin');
+    if (!site && !origin)
+        return false;
+    if (site && site !== 'same-origin')
+        return false;
+    if (origin) {
+        const host = headerValue(req, 'host');
+        try {
+            if (!host || new URL(origin).host !== host)
+                return false;
+        }
+        catch {
+            return false;
+        }
+    }
+    return true;
+}
+function hasValidUiToken(req, ctx) {
+    const provided = headerValue(req, exports.UI_TOKEN_HEADER);
+    const expected = getUiToken(ctx);
+    if (!provided || provided.length !== expected.length)
+        return false;
+    return crypto.timingSafeEqual(Buffer.from(provided), Buffer.from(expected));
+}
+//# sourceMappingURL=ruleset-lock.js.map

package/dist/server/ruleset-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleset-lock.js","sourceRoot":"","sources":["../../server/ruleset-lock.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,wDAEC;AAED,kDAEC;AAkBD,wDAUC;AAUD,4DAYC;AAED,gDAEC;AAUD,0DAQC;AAED,wDAEC;AAGD,kDAYC;AAOD,gCAOC;AAGD,sCAIC;AAaD,kDAcC;AAED,0CAKC;AAjMD,+CAAgC;AAChC,uCAAwB;AACxB,2CAA4B;AAI5B;;;;;;;;;;;;;;;GAeG;AAEU,QAAA,gBAAgB,GAAG,kBAAkB,CAAA;AACrC,QAAA,wBAAwB,GAAG,4BAA4B,CAAA;AACpE,qEAAqE;AACxD,QAAA,uBAAuB,GAAG,GAAG,CAAA;AAC7B,QAAA,qBAAqB,GAAG,mBAAmB,CAAA;AAE3C,QAAA,eAAe,GAAG,mBAAmB,CAAA;AACrC,QAAA,kBAAkB,GAAG,iBAAiB,CAAA;AAEnD,MAAa,oBAAqB,SAAQ,KAAK;IAG3C,YAAqB,QAAgB;QACjC,KAAK,CAAC,gCAAwB,CAAC,CAAA;QADd,aAAQ,GAAR,QAAQ,CAAQ;QAF5B,SAAI,GAAG,wBAAgB,CAAA;QACvB,WAAM,GAAG,+BAAuB,CAAA;QAGrC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACtC,CAAC;CACJ;AAPD,oDAOC;AAED,SAAgB,sBAAsB,CAAC,GAAY;IAC/C,OAAO,GAAG,YAAY,oBAAoB,CAAA;AAC9C,CAAC;AAED,SAAgB,mBAAmB,CAAC,GAAyB;IACzD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAA;AACzE,CAAC;AAED,SAAS,YAAY,CAAC,GAAkB;IACpC,IAAI,CAAC;QACD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;QAChE,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxB,OAAO,EAAE,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,GAAkB,EAAE,QAAiC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;AACjF,CAAC;AAED,6FAA6F;AAC7F,SAAgB,sBAAsB,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QACjE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACd,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,KAAK,CAAA;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,GAAkB,EAAE,IAAY;IACpD,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAA;AAChF,CAAC;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,GAAkB;IACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,CAAC,CAAC,6BAAqB,IAAI,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAA;IACnD,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,6BAAqB,CAAC,CAAC,CAAA;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,6BAAqB,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAA;IACjE,IAAI,OAAO,EAAE,CAAC;QACV,QAAQ,CAAC,6BAAqB,CAAC,GAAG,IAAI,CAAA;QACtC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,IAAI,CAAA;AACf,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAkB,EAAE,IAAY;IAC/D,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAA;AACzF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAEhF,oFAAoF;AACpF,SAAgB,uBAAuB,CAAC,GAAkB,EAAE,KAAuB;IAC/E,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACjC,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAA;IAC9D,CAAC;AACL,CAAC;AAED,SAAgB,sBAAsB,CAAC,GAAkB,EAAE,IAAY;IACnE,uBAAuB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,mEAAmE;AACnE,SAAgB,mBAAmB,CAAC,GAAkB,EAAE,IAAY,EAAE,QAAiB;IACnF,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA;IAC9B,CAAC;IACD,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,IAAI,GAAG,QAAQ;QACjB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAClC,QAAQ,CAAC,6BAAqB,CAAC,GAAG,IAAI,CAAA;IACtC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC5B,OAAO,IAAI,CAAA;AACf,CAAC;AAED,qDAAqD;AAErD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAkB,CAAA;AAE9C,kFAAkF;AAClF,SAAgB,UAAU,CAAC,GAAkB;IACzC,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC9C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,CAAA;AAChB,CAAC;AAED,wEAAwE;AACxE,SAAgB,aAAa,CAAC,IAAY,EAAE,KAAa;IACrD,MAAM,IAAI,GAAG,eAAe,0BAAkB,cAAc,KAAK,IAAI,CAAA;IACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,SAAS,CAAC,CAAA;IAC9E,OAAO,IAAI,GAAG,IAAI,CAAA;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,IAAY;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,GAAY;IAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACzC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAClC,IAAI,IAAI,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC;YACD,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAA;QAC5D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAA;QAChB,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAA;AACf,CAAC;AAED,SAAgB,eAAe,CAAC,GAAY,EAAE,GAAkB;IAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,uBAAe,CAAC,CAAA;IAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAClE,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC/E,CAAC"}

package/mcp-server.js

@@ -18,6 +18,7 @@ const {
 } = require('./bin/lib/sessions')
 const { GLOBAL_DEFAULT_PORT } = require('./bin/lib/session-args')
 const { buildProxySpawn, getReentryArgv } = require('./bin/lib/spawn-proxy')
+const { addRouteRule, updateRouteRule, deleteRouteRule } = require('./bin/lib/rule-file-edit')
 
 const meddleDir = resolveMeddleHome()
 const mcpFile = path.join(meddleDir, 'mcp-proxy-url.json')
@@ -53,11 +54,55 @@ function proxyApiForSession(sessionId, method, pathname, body) {
     const opts = { method, headers: { 'Content-Type': 'application/json' } }
     if (body !== undefined) opts.body = typeof body === 'string' ? body : JSON.stringify(body)
     return fetch(url, opts).then((res) => {
-        if (!res.ok) return res.text().then((t) => { throw new Error(t || res.statusText) })
-        return res.headers.get('content-type')?.includes('application/json') ? res.json() : res.text()
+        if (!res.ok) return res.text().then((t) => { throw apiError(res, t) })
+        return res.headers.get('content-type')?.includes('application/json') ? res.json() : readTextKeepBom(res)
     })
 }
 
+/**
+ * Issue #145: `Response.text()` strips a leading UTF-8 BOM, so a rule file read
+ * and written back through the API would silently lose it. Decode keeping it.
+ */
+function readTextKeepBom(res) {
+    return res.arrayBuffer().then((buf) => new TextDecoder('utf-8', { ignoreBOM: true }).decode(buf))
+}
+
+// ---------- Issue #137: 只读规则集 ----------
+// 锁只存在 settings.json，只能在 Meddle Web 界面中加锁 / 解锁；MCP 没有对应工具，只读取状态并在写入被拒时如实返回。
+const RULESET_READONLY = 'RULESET_READONLY'
+const RULESET_READONLY_MESSAGE = '该规则集已设为只读，只能在 Meddle 界面中解锁'
+const READONLY_NOTE = '只读规则集会被拒绝（错误码 RULESET_READONLY，只能在 Meddle 界面中解锁）。'
+
+/** 把代理 API 的错误响应转成 Error，保留结构化的 code / ruleFile。 */
+function apiError(res, text) {
+    const err = new Error(text || res.statusText)
+    err.status = res.status
+    try {
+        const data = JSON.parse(text)
+        if (data && typeof data === 'object') {
+            if (typeof data.code === 'string') err.code = data.code
+            if (typeof data.ruleFile === 'string') err.ruleFile = data.ruleFile
+        }
+    } catch (_) {}
+    return err
+}
+
+function rulesetReadonlyResult(ruleFile) {
+    return {
+        content: [{
+            type: 'text',
+            text: JSON.stringify({ error: { code: RULESET_READONLY, message: RULESET_READONLY_MESSAGE, ruleFile: ruleFile || null } }, null, 2)
+        }],
+        isError: true
+    }
+}
+
+/** 统一的错误返回：只读拒绝给出结构化结果，其它错误保持原样。 */
+function toolError(e, ruleFile) {
+    if (e && e.code === RULESET_READONLY) return rulesetReadonlyResult(e.ruleFile || ruleFile)
+    return { content: [{ type: 'text', text: e.message }], isError: true }
+}
+
 const FILE_PATTERN = /^file:\/\//
 const LOCAL_FILE_PATTERN = /^[A-Za-z]:\\|^\/|^\\/
 
@@ -109,37 +154,6 @@ function parseEprc(content) {
     return parseEprcWithExclusions(content).ruleMap
 }
 
-/** 将 pattern -> target 对象转回规则文件文本（与 helpers.ruleMapToEprcText 一致，保留 exclusions） */
-function ruleMapToEprcText(ruleMap, excludeMap) {
-    const entries = Object.entries(ruleMap)
-    if (entries.length === 0) return ''
-    const byTargetAndExclusions = {}
-    entries.forEach(([rule, target]) => {
-        const bm = target.match(/\[([^\]]+)\]/)
-        const groupKey = bm ? target.replace(bm[0], '') : target
-        const displayRule = bm ? rule.replace(bm[1], bm[0]) : rule
-        const exclusions = excludeMap?.[rule] || []
-        const exclusionsKey = exclusions.join(',')
-        // Create a compound key that includes both target and exclusions
-        const compoundKey = `${groupKey}|||${exclusionsKey}`
-        if (!byTargetAndExclusions[compoundKey]) {
-            byTargetAndExclusions[compoundKey] = { target: groupKey, rules: [], exclusions }
-        }
-        byTargetAndExclusions[compoundKey].rules.push(displayRule)
-    })
-    return Object.entries(byTargetAndExclusions)
-        .map(([, { target, rules, exclusions }]) => {
-            let displayTarget = target
-            if (FILE_PATTERN.test(target)) {
-                displayTarget = target.replace(/^file:\/\//, '').replace(/\//g, path.sep)
-            }
-            const exclusionStr = exclusions.map(e => `!${e}`).join(' ')
-            const rulesStr = rules.join(' ')
-            return exclusionStr ? `${rulesStr} ${exclusionStr} ${displayTarget}` : `${rulesStr} ${displayTarget}`
-        })
-        .join('\n')
-}
-
 /** 请求代理 API */
 function proxyApi(method, pathname, body) {
     const base = getProxyBaseUrl()
@@ -147,9 +161,8 @@ function proxyApi(method, pathname, body) {
     const opts = { method, headers: { 'Content-Type': 'application/json' } }
     if (body !== undefined) opts.body = typeof body === 'string' ? body : JSON.stringify(body)
     return fetch(url, opts).then((res) => {
-        const text = () => res.text()
-        if (!res.ok) return text().then((t) => { throw new Error(t || res.statusText) })
-        return res.headers.get('content-type')?.includes('application/json') ? res.json() : text()
+        if (!res.ok) return res.text().then((t) => { throw new Error(t || res.statusText) })
+        return res.headers.get('content-type')?.includes('application/json') ? res.json() : readTextKeepBom(res)
     })
 }
 
@@ -395,7 +408,7 @@ mcpServer.registerTool('mock_rule_list', {
         const rules = await proxyApiForSession(session, 'GET', '/api/mocks')
         return { content: [{ type: 'text', text: JSON.stringify(rules, null, 2) }] }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
@@ -435,7 +448,7 @@ mcpServer.registerTool('mock_rule_add', {
             content: [{ type: 'text', text: `已添加 Mock 规则 id=${rule.id}: ${rule.name} (${rule.urlPattern})` }]
         }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
@@ -470,7 +483,7 @@ mcpServer.registerTool('mock_rule_update', {
             content: [{ type: 'text', text: `已更新 Mock 规则 id=${id}: ${rule.name ?? '(未改)'}` }]
         }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
@@ -485,14 +498,14 @@ mcpServer.registerTool('mock_rule_delete', {
         await proxyApiForSession(session, 'DELETE', `/api/mocks/${id}`)
         return { content: [{ type: 'text', text: `已删除 Mock 规则 id=${id}` }] }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
 // ---------- 路由规则（可选 session 参数） ----------
 
 mcpServer.registerTool('route_rule_list', {
-    description: '列出所有路由规则文件；可选指定 ruleFile 获取该文件下的规则列表（pattern -> target 及 exclusions）。可选 session 参数指定操作的 session（不传则操作默认 session）。',
+    description: '列出所有路由规则文件（每项含 readonly: true|false）；可选指定 ruleFile 获取该文件下的规则列表（pattern -> target 及 exclusions，含 readonly）。readonly 只能在 Meddle 界面中修改，MCP 没有加锁/解锁工具。可选 session 参数指定操作的 session（不传则操作默认 session）。',
     inputSchema: {
         session: z.string().optional().describe('目标 session id，不传则操作默认 session'),
         ruleFile: z.string().optional().describe('规则文件名（不含 .txt），不传则只返回文件列表')
@@ -520,11 +533,13 @@ mcpServer.registerTool('route_rule_list', {
         for (const exclusions of Object.values(excludeMap)) {
             totalExclusions += exclusions.length
         }
+        const info = Array.isArray(files) ? files.find((item) => item && item.name === ruleFile.trim()) : null
+        const readonly = Boolean(info && info.readonly)
         return {
-            content: [{ type: 'text', text: JSON.stringify({ ruleFile, rules: displayRules, ruleCount: Object.keys(displayRules).length, exclusionCount: totalExclusions }, null, 2) }]
+            content: [{ type: 'text', text: JSON.stringify({ ruleFile, readonly, rules: displayRules, ruleCount: Object.keys(displayRules).length, exclusionCount: totalExclusions }, null, 2) }]
         }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
@@ -549,12 +564,12 @@ mcpServer.registerTool('route_rule_active_get', {
             }]
         }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
 mcpServer.registerTool('route_rule_active_set', {
-    description: '设置当前激活的路由规则文件。可选 session 参数指定操作的 session（不传则操作默认 session）。',
+    description: '设置当前激活的路由规则文件。会改变启用状态的规则集中若有只读规则集则整体拒绝、不做任何修改：' + READONLY_NOTE + '可选 session 参数指定操作的 session（不传则操作默认 session）。',
     inputSchema: {
         session: z.string().optional().describe('目标 session id，不传则操作默认 session'),
         ruleFile: z.string().describe('要设为当前激活的规则文件名（不含 .txt）')
@@ -571,6 +586,10 @@ mcpServer.registerTool('route_rule_active_set', {
             return { content: [{ type: 'text', text: `未找到规则文件: ${targetName}` }], isError: true }
         }
 
+        // 先整体检查，避免锁住的规则集让切换只做了一半
+        const blocked = files.find((item) => item && item.readonly && !!item.enabled !== (item.name === targetName))
+        if (blocked) return rulesetReadonlyResult(blocked.name)
+
         for (const item of files) {
             const nextEnabled = item.name === targetName
             if (!!item.enabled === nextEnabled) continue
@@ -585,12 +604,12 @@ mcpServer.registerTool('route_rule_active_set', {
             }]
         }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
 mcpServer.registerTool('route_rule_create_file', {
-    description: '创建新的路由规则文件。可选 session 参数指定操作的 session（不传则操作默认 session）。',
+    description: '创建新的路由规则文件（新文件默认可读写）。同名规则文件已存在时失败，不会覆盖已有规则集，因此只读规则集会被拒绝。可选 session 参数指定操作的 session（不传则操作默认 session）。',
     inputSchema: {
         session: z.string().optional().describe('目标 session id，不传则操作默认 session'),
         name: z.string().describe('规则文件名称（不含 .txt），如 dev、staging；非法字符会被替换为下划线'),
@@ -609,18 +628,18 @@ mcpServer.registerTool('route_rule_create_file', {
             }]
         }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
 mcpServer.registerTool('route_rule_add', {
-    description: '在指定规则文件中添加一条路由规则（pattern -> target）。若 pattern 已存在则覆盖。可选 session 参数指定操作的 session（不传则操作默认 session）。',
+    description: '在指定规则文件中添加一条路由规则（pattern -> target）。若 pattern 已存在则覆盖其 target。exclusions 不传时保留该规则原有的排除规则（新规则无排除规则），传 [] 清空。只改这一行，文件中的注释、空行和其他规则保持原样。' + READONLY_NOTE + '可选 session 参数指定操作的 session（不传则操作默认 session）。',
     inputSchema: {
         session: z.string().optional().describe('目标 session id，不传则操作默认 session'),
         ruleFile: z.string().describe('规则文件名（不含 .txt）'),
         pattern: z.string().describe('匹配完整请求 URL。支持：(1) 正则表达式，如 ^https://a\\.com/api； (2) 通配符，如 *.wps.cn 匹配 wps.cn、plus.wps.cn、deep.plus.wps.cn；(3) [marker] 路径重写，如 ^https://cdn.com/[assets] 将 assets 后的路径拼接到 target'),
         target: z.string().describe('转发目标。若仅 host:port 则继承原请求的协议、pathname、query；若完整 URL 则直接使用；若原请求是 websocket 而 target 是 http(s)，自动转为 ws(s)'),
-        exclusions: z.array(z.string()).optional().describe('排除规则列表，匹配完整 URL。若任一 exclusion 命中则跳过此规则继续匹配下一条。如 ["api/health", "^https://a\\.com/internal"]')
+        exclusions: z.array(z.string()).optional().describe('排除规则列表，匹配完整 URL。若任一 exclusion 命中则跳过此规则继续匹配下一条。如 ["api/health", "^https://a\\.com/internal"]。不传时保留该规则原有的排除规则（新规则无排除规则）；传 [] 清空')
     }
 }, async ({ session, ruleFile, pattern, target, exclusions }) => {
     try {
@@ -632,34 +651,25 @@ mcpServer.registerTool('route_rule_add', {
             return { content: [{ type: 'text', text: `规则文件不存在或代理未启动: ${err.message}` }], isError: true }
         }
         const text = typeof content === 'string' ? content : String(content)
-        const { ruleMap, excludeMap } = parseEprcWithExclusions(text)
-        const pat = pattern.trim()
-        const tgt = target.trim()
-        const bm = pat.match(/\[([^\]]+)\]/)
-        if (bm) {
-            ruleMap[pat.replace(bm[0], bm[1])] = tgt + bm[0]
-            excludeMap[pat.replace(bm[0], bm[1])] = exclusions || []
-        } else {
-            ruleMap[pat] = tgt
-            excludeMap[pat] = exclusions || []
-        }
-        const newContent = ruleMapToEprcText(ruleMap, excludeMap)
+        // Issue #145: edit only this rule's line(s); other lines keep their exact bytes.
+        // Without `exclusions` an existing rule keeps its own exclusions.
+        const { content: newContent } = addRouteRule(text, { pattern: pattern.trim(), target: target.trim(), exclusions })
         await proxyApiForSession(session, 'PUT', `/api/rule-files/${name}/content`, { content: newContent })
         const exclusionInfo = exclusions && exclusions.length > 0 ? `，排除规则: ${exclusions.join(', ')}` : ''
         return { content: [{ type: 'text', text: `已添加规则: ${pattern} -> ${target}${exclusionInfo}` }] }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
 mcpServer.registerTool('route_rule_update', {
-    description: '修改指定规则文件中某条规则的 target 和 exclusions（按 pattern 查找）。可选 session 参数指定操作的 session（不传则操作默认 session）。',
+    description: '修改指定规则文件中某条规则的 target 和 exclusions（按 pattern 查找）。exclusions 不传时保留该规则原有的排除规则，传 [] 清空。只改这一行，文件中的注释、空行和其他规则保持原样。' + READONLY_NOTE + '可选 session 参数指定操作的 session（不传则操作默认 session）。',
     inputSchema: {
         session: z.string().optional().describe('目标 session id，不传则操作默认 session'),
         ruleFile: z.string().describe('规则文件名（不含 .txt）'),
         pattern: z.string().describe('要修改的 pattern（需与现有规则一致，支持带 [marker] 的写法）'),
         newTarget: z.string().optional().describe('新的转发目标。若仅 host:port 则继承原请求的协议、pathname、query；若完整 URL 则直接使用'),
-        exclusions: z.array(z.string()).optional().describe('新的排除规则列表，匹配完整 URL。设为空数组 [] 可清除所有排除规则')
+        exclusions: z.array(z.string()).optional().describe('新的排除规则列表，匹配完整 URL。不传时保留该规则原有的排除规则；传 [] 清空')
     }
 }, async ({ session, ruleFile, pattern, newTarget, exclusions }) => {
     try {
@@ -672,32 +682,24 @@ mcpServer.registerTool('route_rule_update', {
             return { content: [{ type: 'text', text: `规则文件不存在或代理未启动: ${err.message}` }], isError: true }
         }
         const text = typeof content === 'string' ? content : String(content)
-        const { ruleMap, excludeMap } = parseEprcWithExclusions(text)
-        const bm = pat.match(/\[([^\]]+)\]/)
-        const internalKey = bm ? pat.replace(bm[0], bm[1]) : pat
-        if (!Object.prototype.hasOwnProperty.call(ruleMap, internalKey)) {
+        // Issue #145: edit only this rule's line(s); other lines keep their exact bytes.
+        const result = updateRouteRule(text, { pattern: pat, target: newTarget ? newTarget.trim() : undefined, exclusions })
+        if (!result.found) {
             return { content: [{ type: 'text', text: `未找到 pattern: ${pat}` }], isError: true }
         }
-        if (newTarget) {
-            const tgt = newTarget.trim()
-            ruleMap[internalKey] = bm ? tgt + bm[0] : tgt
-        }
-        if (exclusions !== undefined) {
-            excludeMap[internalKey] = exclusions
-        }
-        const newContent = ruleMapToEprcText(ruleMap, excludeMap)
+        const newContent = result.content
         await proxyApiForSession(session, 'PUT', `/api/rule-files/${name}/content`, { content: newContent })
         const targetInfo = newTarget ? `目标: ${newTarget}` : ''
         const exclusionInfo = exclusions !== undefined ? (exclusions.length > 0 ? `排除规则: ${exclusions.join(', ')}` : '已清除排除规则') : ''
         const parts = [targetInfo, exclusionInfo].filter(Boolean).join(', ')
         return { content: [{ type: 'text', text: `已更新规则: ${pat}${parts ? ` (${parts})` : ''}` }] }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
 mcpServer.registerTool('route_rule_delete', {
-    description: '从指定规则文件中删除一条路由规则（按 pattern）。可选 session 参数指定操作的 session（不传则操作默认 session）。',
+    description: '从指定规则文件中删除一条路由规则（按 pattern）。' + READONLY_NOTE + '可选 session 参数指定操作的 session（不传则操作默认 session）。',
     inputSchema: {
         session: z.string().optional().describe('目标 session id，不传则操作默认 session'),
         ruleFile: z.string().describe('规则文件名（不含 .txt）'),
@@ -714,19 +716,16 @@ mcpServer.registerTool('route_rule_delete', {
             return { content: [{ type: 'text', text: `规则文件不存在或代理未启动: ${err.message}` }], isError: true }
         }
         const text = typeof content === 'string' ? content : String(content)
-        const { ruleMap, excludeMap } = parseEprcWithExclusions(text)
-        const bm = pat.match(/\[([^\]]+)\]/)
-        const internalKey = bm ? pat.replace(bm[0], bm[1]) : pat
-        if (!Object.prototype.hasOwnProperty.call(ruleMap, internalKey)) {
+        // Issue #145: remove only this rule; other lines keep their exact bytes.
+        const result = deleteRouteRule(text, { pattern: pat })
+        if (!result.found) {
             return { content: [{ type: 'text', text: `未找到 pattern: ${pat}` }], isError: true }
         }
-        delete ruleMap[internalKey]
-        delete excludeMap[internalKey]
-        const newContent = ruleMapToEprcText(ruleMap, excludeMap)
+        const newContent = result.content
         await proxyApiForSession(session, 'PUT', `/api/rule-files/${name}/content`, { content: newContent })
         return { content: [{ type: 'text', text: `已删除规则: ${pat}` }] }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 
@@ -789,7 +788,7 @@ mcpServer.registerTool('route_preview', {
             content: [{ type: 'text', text: JSON.stringify(output, null, 2) }]
         }
     } catch (e) {
-        return { content: [{ type: 'text', text: e.message }], isError: true }
+        return toolError(e)
     }
 })
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jonathanleelx/meddle",
-  "version": "0.5.0-beta.23",
+  "version": "0.5.0-beta.25",
   "description": "A simple development proxy server with custom routing rules, mock responses, HTTPS interception, and a plugin system",
   "type": "commonjs",
   "main": "index.js",