@surenkid/acli-hub 1.0.6 → 1.0.8

package/server/routes/auth.js

@@ -1,13 +1,20 @@
 const express = require('express');
+const os = require('os');
 const { sessionCookie, clearCookie, sessionTokenFromRequest } = require('../services/auth');
 
-module.exports = function (auth) {
+module.exports = function (auth, { name = process.env.ACLI_HUB_NAME, hostname = os.hostname() } = {}) {
   const router = express.Router();
+  const normalizeName = value => (typeof value === 'string' ? value : '')
+    .replace(/[\s\u0000-\u001f\u007f]+/g, ' ').trim().slice(0, 100);
+  const instanceName = normalizeName(name) || normalizeName(hostname) || 'localhost';
 
   router.get('/status', (req, res) => {
     const authRequired = auth.isEnabled();
     const authenticated = !authRequired || auth.validateSession(sessionTokenFromRequest(req));
-    res.json({ authRequired, authenticated });
+    // The login page needs the same tab identity as an authenticated page.
+    // Return only the chosen display name, not the hostname behind an alias.
+    res.set('Cache-Control', 'no-store');
+    res.json({ authRequired, authenticated, instance: { name: instanceName } });
   });
 
   router.post('/login', (req, res) => {

package/server/routes/auth.test.js

@@ -0,0 +1,71 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const http = require('node:http');
+const express = require('express');
+const { AuthService } = require('../services/auth');
+const authRoute = require('./auth');
+
+async function serve(t, auth, identity) {
+  const app = express();
+  app.use(express.json());
+  app.use('/api/auth', authRoute(auth, identity));
+  const server = http.createServer(app);
+  await new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', resolve);
+  });
+  t.after(async () => {
+    server.closeAllConnections();
+    await new Promise(resolve => server.close(resolve));
+  });
+  const base = `http://127.0.0.1:${server.address().port}/api/auth`;
+  return (path, options) => fetch(`${base}${path}`, options);
+}
+
+test('hostname identity is available without authentication and status is never cached', async t => {
+  const request = await serve(t, new AuthService(), { name: '', hostname: 'dev-server' });
+  const response = await request('/status');
+  assert.equal(response.status, 200);
+  assert.equal(response.headers.get('cache-control'), 'no-store');
+  assert.deepEqual(await response.json(), {
+    authRequired: false, authenticated: true, instance: { name: 'dev-server' },
+  });
+});
+
+test('custom names are public before login, hide the hostname and survive login/logout unchanged', async t => {
+  const identity = { name: '  东京\t开发机\n🚀  ', hostname: 'private.internal.example' };
+  const request = await serve(t, new AuthService('fixture-password'), identity);
+  identity.name = 'Not the startup name';
+  let response = await request('/status');
+  let data = await response.json();
+  assert.deepEqual(data, {
+    authRequired: true, authenticated: false, instance: { name: '东京 开发机 🚀' },
+  });
+  assert.ok(!JSON.stringify(data).includes(identity.hostname));
+
+  response = await request('/login', {
+    method: 'POST', headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ password: 'fixture-password' }),
+  });
+  assert.equal(response.status, 200);
+  const cookie = response.headers.get('set-cookie').split(';')[0];
+  data = await (await request('/status', { headers: { Cookie: cookie } })).json();
+  assert.equal(data.authenticated, true);
+  assert.deepEqual(data.instance, { name: '东京 开发机 🚀' });
+
+  await request('/logout', { method: 'POST', headers: { Cookie: cookie } });
+  data = await (await request('/status', { headers: { Cookie: cookie } })).json();
+  assert.equal(data.authenticated, false);
+  assert.deepEqual(data.instance, { name: '东京 开发机 🚀' });
+});
+
+test('empty/invalid names fall back safely, control characters are removed and names are bounded', async t => {
+  for (const name of ['', ' \t\n\0 ', null, 123]) {
+    const request = await serve(t, new AuthService(), { name, hostname: 'host-fallback' });
+    assert.deepEqual((await (await request('/status')).json()).instance, { name: 'host-fallback' });
+  }
+  const long = await serve(t, new AuthService(), { name: 'a'.repeat(200), hostname: 'host' });
+  assert.equal((await (await long('/status')).json()).instance.name, 'a'.repeat(100));
+  const empty = await serve(t, new AuthService(), { name: '', hostname: '' });
+  assert.equal((await (await empty('/status')).json()).instance.name, 'localhost');
+});

package/server/routes/files.js

@@ -10,6 +10,7 @@ const archiver = require('archiver');
 const { execFile } = require('child_process');
 const { promisify } = require('util');
 const moveFile = promisify(execFile);
+const { scopedPath, entryMetadata } = require('../services/file-paths');
 
 const TEXT_LIMIT = 2 * 1024 * 1024;
 const DOCX_LIMIT = 10 * 1024 * 1024;
@@ -111,8 +112,17 @@ module.exports = function filesRoute({ platform = process.platform, home = os.ho
     res.json({ path: directory, entries, trash });
   }));
 
+  router.get('/stat', route(async (req, res) => {
+    const target = await scopedPath(req.query.root, req.query.path);
+    const stat = await fsp.lstat(target);
+    if (!stat.isFile()) throw httpError(400, '链接目标不是可预览的普通文件');
+    res.set('Cache-Control', 'no-store');
+    res.json(entryMetadata(target, stat));
+  }));
+
   router.get('/content', route(async (req, res) => {
     const target = filePath(req.query.path);
+    if (req.query.root !== undefined) await scopedPath(req.query.root, target);
     const stat = await fsp.lstat(target);
     if (!stat.isFile()) throw httpError(400, 'Only regular files can be previewed or downloaded');
     const ext = path.extname(target).slice(1).toLowerCase();

package/server/routes/files.test.js

@@ -126,6 +126,34 @@ test('listing includes dotfiles and symlinks without following links; content su
   assert.equal(response.status, 400);
 });
 
+test('document metadata and scoped content reject traversal and symlinks in any component', async t => {
+  const { directory, request } = await serve(t);
+  const root = path.join(directory, 'project');
+  await fs.mkdir(path.join(root, 'docs'), { recursive: true });
+  const target = path.join(root, 'docs/中文 #?.md');
+  await fs.writeFile(target, '# hello');
+  await fs.writeFile(path.join(directory, 'outside.md'), 'outside');
+  let response = await request(`/stat${query({ root, path: target })}`);
+  assert.equal(response.status, 200);
+  assert.equal((await response.json()).name, '中文 #?.md');
+  response = await request(`/content${query({ root, path: target })}`);
+  assert.equal(await response.text(), '# hello');
+  for (const endpoint of ['stat', 'content']) {
+    response = await request(`/${endpoint}${query({ root, path: path.join(directory, 'outside.md') })}`);
+    assert.equal(response.status, 403);
+  }
+  await fs.symlink(directory, path.join(root, 'linked'));
+  response = await request(`/stat${query({ root, path: path.join(root, 'linked/outside.md') })}`);
+  assert.equal(response.status, 403);
+  await fs.symlink(target, path.join(root, 'link.md'));
+  response = await request(`/content${query({ root, path: path.join(root, 'link.md') })}`);
+  assert.equal(response.status, 403);
+  response = await request(`/stat${query({ root, path: path.join(root, 'missing.md') })}`);
+  assert.equal(response.status, 404);
+  response = await request(`/stat${query({ root, path: path.join(root, 'docs') })}`);
+  assert.equal(response.status, 400);
+});
+
 test('active content is isolated on direct navigation; large text/DOCX require download', async t => {
   const { directory, request } = await serve(t);
   for (const filename of ['page.html', 'image.svg']) {

package/server/routes/git.js

@@ -0,0 +1,19 @@
+const express = require('express');
+const { createGitService } = require('../services/git');
+
+module.exports = function gitRoute(service = createGitService()) {
+  const router = express.Router();
+  function route(work) {
+    return async (req, res) => {
+      res.set('Cache-Control', 'no-store');
+      try { res.json(await work(req)); }
+      catch (err) {
+        const status = err.status || ({ ENOENT: 404, EACCES: 403, EPERM: 403, ENOTDIR: 400 })[err.code] || 500;
+        res.status(status).json({ error: err.message });
+      }
+    };
+  }
+  router.get('/status', route(req => service.status(req.query.root)));
+  router.get('/diff', route(req => service.diff(req.query.root, req.query.path)));
+  return router;
+};

package/server/routes/git.test.js

@@ -0,0 +1,33 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const http = require('node:http');
+const express = require('express');
+const gitRoute = require('./git');
+
+test('Git routes use no-store, preserve unavailable/failed states and validate missing arguments', async t => {
+  const app = express();
+  app.use('/api/git', gitRoute({
+    status(root) {
+      if (!root) throw Object.assign(new Error('root required'), { status: 400 });
+      if (root === '/failure') throw Object.assign(new Error('Git timeout'), { status: 504 });
+      return { available: false, reason: 'not-repository', changes: [] };
+    },
+    diff(root, path) { return { change: { path, status: 'M' }, patch: '+text', notice: '', root }; },
+  }));
+  const server = http.createServer(app);
+  await new Promise((resolve, reject) => { server.once('error', reject); server.listen(0, '127.0.0.1', resolve); });
+  t.after(async () => { server.closeAllConnections(); await new Promise(resolve => server.close(resolve)); });
+  const base = `http://127.0.0.1:${server.address().port}/api/git`;
+  let response = await fetch(`${base}/status?root=/plain`);
+  assert.equal(response.headers.get('cache-control'), 'no-store');
+  assert.equal((await response.json()).reason, 'not-repository');
+  response = await fetch(`${base}/status`);
+  assert.equal(response.status, 400);
+  response = await fetch(`${base}/status?root=/failure`);
+  assert.equal(response.status, 504);
+  assert.equal((await response.json()).error, 'Git timeout');
+  response = await fetch(`${base}/diff?${new URLSearchParams({ root: '/项目', path: '/项目/a #?.md' })}`);
+  const diff = await response.json();
+  assert.equal(diff.change.path, '/项目/a #?.md');
+  assert.equal(diff.root, '/项目');
+});

package/server/services/file-paths.js

@@ -0,0 +1,48 @@
+const fs = require('node:fs/promises');
+const path = require('node:path');
+
+function httpError(status, message) {
+  return Object.assign(new Error(message), { status });
+}
+
+function absolutePath(value) {
+  if (typeof value !== 'string' || !value || value.includes('\0') || !path.isAbsolute(value)) {
+    throw httpError(400, 'An absolute path without null bytes is required');
+  }
+  return path.resolve(value);
+}
+
+function isWithin(root, target) {
+  const relative = path.relative(root, target);
+  return relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
+}
+
+// Document navigation is narrower than the general authenticated file APIs:
+// never escape the pin, or follow a link anywhere beneath it. System aliases
+// above the pin (e.g. /var -> /private/var on macOS) are still valid roots.
+async function scopedPath(rootValue, targetValue, { allowMissing = false } = {}) {
+  const root = absolutePath(rootValue);
+  const target = absolutePath(targetValue);
+  if (!isWithin(root, target)) throw httpError(403, '链接超出了当前项目目录');
+  const rootStat = await fs.lstat(root);
+  if (!rootStat.isDirectory()) throw httpError(400, '项目根目录必须是普通目录，不能是符号链接');
+  let current = root;
+  for (const part of path.relative(root, target).split(path.sep).filter(Boolean)) {
+    current = path.join(current, part);
+    try {
+      const stat = await fs.lstat(current);
+      if (stat.isSymbolicLink()) throw httpError(403, '不支持通过符号链接打开文件');
+    } catch (err) {
+      if (allowMissing && err.code === 'ENOENT') return target;
+      throw err;
+    }
+  }
+  return target;
+}
+
+function entryMetadata(target, stat) {
+  return { name: path.basename(target), path: target, size: stat.size, mtime: stat.mtime.toISOString(),
+    type: stat.isSymbolicLink() ? 'symlink' : stat.isDirectory() ? 'directory' : stat.isFile() ? 'file' : 'other' };
+}
+
+module.exports = { absolutePath, entryMetadata, httpError, isWithin, scopedPath };

package/server/services/git.js

@@ -0,0 +1,169 @@
+const fs = require('node:fs/promises');
+const os = require('node:os');
+const path = require('node:path');
+const { execFile } = require('node:child_process');
+const { absolutePath, httpError, isWithin, scopedPath } = require('./file-paths');
+
+const DIFF_LIMIT = 2 * 1024 * 1024;
+const COMMAND_TIMEOUT = 5000;
+const CONFLICTS = new Set(['DD', 'AU', 'UD', 'UA', 'DU', 'AA', 'UU']);
+
+function parseStatus(output, repository, root) {
+  const records = output.split('\0');
+  const changes = new Map();
+  for (let i = 0; i < records.length; i++) {
+    const record = records[i];
+    if (!record) continue;
+    const xy = record.slice(0, 2);
+    const target = path.resolve(repository, record.slice(3));
+    const originalPath = /[RC]/.test(xy) ? path.resolve(repository, records[++i]) : undefined;
+    if (!isWithin(root, target)) continue;
+    const status = CONFLICTS.has(xy) ? 'C' : xy === '??' ? 'U' : xy.includes('R') ? 'R' :
+      xy.includes('D') ? 'D' : xy.includes('A') ? 'A' : 'M';
+    const previous = changes.get(target);
+    // An index deletion followed by an untracked replacement has two records
+    // for one path. Keep both facts; HEAD -> disk may actually be unchanged.
+    changes.set(target, { path: target, status: previous ? 'M' : status,
+      index: previous && previous.index !== '?' ? previous.index : xy[0],
+      worktree: previous?.worktree === '?' ? '?' : xy[1],
+      deleted: !previous && (xy[1] === 'D' || (xy[0] === 'D' && xy[1] === ' ')),
+      ...(originalPath ? { originalPath } : {}), ...(previous ? { replacement: true } : {}) });
+  }
+  return [...changes.values()];
+}
+
+function gitError(error) {
+  if (error.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER') return httpError(413, 'Git 输出超过大小限制，请在终端查看');
+  if (error.killed || error.code === 'ETIMEDOUT') return httpError(504, 'Git 查询超过 5 秒，请在终端查看或稍后重试');
+  return httpError(503, 'Git 查询失败，请检查仓库状态后刷新');
+}
+
+function createGitService({ executable = 'git' } = {}) {
+  const inFlight = new Map();
+  // Do not inherit a CLI's alternate repository/index/pathspec environment.
+  const env = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith('GIT_')));
+  env.PATH = `${env.PATH || ''}:/opt/homebrew/bin:/usr/local/bin`;
+  env.GIT_TERMINAL_PROMPT = '0';
+  env.LC_ALL = 'C';
+
+  async function run(cwd, args, { accepted = [0], limit = DIFF_LIMIT, encoding = 'utf8' } = {}) {
+    return new Promise((resolve, reject) => {
+      execFile(executable, ['--no-pager', '--no-optional-locks', '--literal-pathspecs', '-c', 'core.fsmonitor=false',
+        '-c', 'core.untrackedCache=false', '-C', cwd, ...args],
+      { env, encoding, timeout: COMMAND_TIMEOUT, maxBuffer: limit }, (error, stdout, stderr) => {
+        if (!error || accepted.includes(error.code)) resolve({ stdout, stderr, code: error?.code || 0 });
+        else reject(Object.assign(error, { stderr }));
+      });
+    });
+  }
+
+  async function queryStatus(root) {
+    await scopedPath(root, root);
+    let repository;
+    try {
+      repository = (await run(root, ['rev-parse', '--show-toplevel'])).stdout.replace(/\r?\n$/, '');
+    } catch (err) {
+      if (err.code === 'ENOENT') return { available: false, reason: 'git-unavailable', changes: [] };
+      if (err.code === 128 && /not a git repository/.test(err.stderr)) return { available: false, reason: 'not-repository', changes: [] };
+      throw gitError(err);
+    }
+    try {
+      const result = await run(root, ['status', '--porcelain=v1', '-z', '--untracked-files=all', '--ignore-submodules=all', '--renames', '--', '.'], { limit: 4 * DIFF_LIMIT });
+      // Git reports canonical paths; keep the caller's pin spelling in the UI.
+      const canonicalRoot = await fs.realpath(root);
+      const changes = parseStatus(result.stdout, repository, canonicalRoot).map(change => ({ ...change,
+        path: path.join(root, path.relative(canonicalRoot, change.path)),
+        ...(change.originalPath ? { originalPath: path.join(root, path.relative(canonicalRoot, change.originalPath)) } : {}) }));
+      return { available: true, repository, changes };
+    } catch (err) { throw err.status ? err : gitError(err); }
+  }
+
+  function status(rootValue) {
+    const root = absolutePath(rootValue);
+    if (!inFlight.has(root)) {
+      const pending = queryStatus(root).finally(() => inFlight.delete(root));
+      inFlight.set(root, pending);
+    }
+    return inFlight.get(root);
+  }
+
+  async function diff(rootValue, targetValue) {
+    const root = absolutePath(rootValue);
+    const target = absolutePath(targetValue);
+    await scopedPath(root, target, { allowMissing: true });
+    const state = await status(root);
+    if (!state.available) return { change: null, patch: '', notice: state.reason === 'not-repository' ? '当前目录不在 Git 仓库中' : '未安装 Git，无法查看差异' };
+    const change = state.changes.find(item => item.path === target);
+    if (!change) return { change: null, patch: '', notice: '当前文件没有未提交改动' };
+    let stat;
+    try { stat = await fs.lstat(target); } catch (err) { if (err.code !== 'ENOENT') throw err; }
+    if (stat && !stat.isFile()) return { change, patch: '', notice: '此类型不支持文本差异；不会读取符号链接的目标' };
+    if (stat?.size > DIFF_LIMIT) return { change, patch: '', notice: '文件超过 2 MiB，请在终端查看差异' };
+    let temporary;
+    try {
+      const head = await run(root, ['rev-parse', '--verify', '--quiet', 'HEAD'], { accepted: [0, 1] });
+      const canonicalRoot = await fs.realpath(root);
+      const canonicalTarget = path.join(canonicalRoot, path.relative(root, target));
+      const original = change.originalPath && isWithin(root, change.originalPath) ? change.originalPath : target;
+      const canonicalOriginal = path.join(canonicalRoot, path.relative(root, original));
+      const relativeOriginal = path.relative(state.repository, canonicalOriginal);
+      let originalMode;
+      if (head.code === 0) {
+        const tree = await run(state.repository, ['ls-tree', '-l', '-z', 'HEAD', '--', relativeOriginal]);
+        originalMode = tree.stdout.slice(0, 6);
+        const size = /^\d+ blob \w+\s+(\d+)\t/.exec(tree.stdout)?.[1];
+        if (Number(size) > DIFF_LIMIT) return { change, patch: '', notice: '上次提交的文件超过 2 MiB，请在终端查看差异' };
+        if (originalMode === '160000') return { change, patch: '', notice: '子模块不支持文件文本差异' };
+      }
+      const common = ['--no-ext-diff', '--no-textconv', '--no-color', '--unified=3'];
+      let result;
+      let synthetic = false;
+      if (change.replacement && head.code === 0 && stat) {
+        // Git normally treats this path as deleted because it is absent from
+        // the index. Compare the actual HEAD bytes with the replacement.
+        temporary = await fs.mkdtemp(path.join(os.tmpdir(), 'hub-git-diff-'));
+        const before = path.join(temporary, 'before');
+        const originalContent = await run(root, ['show', `HEAD:${relativeOriginal}`], { encoding: 'buffer' });
+        await fs.writeFile(before, originalContent.stdout);
+        await fs.chmod(before, originalMode === '100755' ? 0o755 : 0o644);
+        result = await run(root, ['diff', '--no-index', ...common, '--', before, target], { accepted: [0, 1] });
+        synthetic = true;
+      } else if (head.code !== 0 || change.status === 'U') {
+        if (!stat) return { change, patch: '', notice: '文件已经不存在，请刷新目录' };
+        result = await run(root, ['diff', '--no-index', ...common, '--', os.devNull, target], { accepted: [0, 1] });
+        synthetic = true;
+      } else {
+        const paths = [path.relative(canonicalRoot, canonicalTarget)];
+        if (original !== target) paths.push(path.relative(root, original));
+        result = await run(root, ['diff', ...common, '--find-renames', 'HEAD', '--', ...paths]);
+      }
+      const binary = /^(?:Binary files .* differ|GIT binary patch)$/m.test(result.stdout);
+      let lines = 0;
+      for (const character of result.stdout) {
+        if (character === '\n' && ++lines > 20000) return { change, patch: '', notice: '差异超过 20,000 行，请在终端查看，避免浏览器卡顿' };
+      }
+      let patch = result.stdout;
+      if (synthetic && patch && !binary) {
+        // Hide temporary/absolute paths in no-index headers. Keep logical Git
+        // paths, escaping special filenames without touching hunk contents.
+        const relative = path.relative(state.repository, canonicalTarget);
+        let inHunk = false;
+        patch = patch.split('\n').map(line => {
+          if (line.startsWith('@@ ')) inHunk = true;
+          if (inHunk) return line;
+          if (line.startsWith('diff --git ')) return `diff --git ${JSON.stringify(`a/${relative}`)} ${JSON.stringify(`b/${relative}`)}`;
+          if (line.startsWith('--- ')) return `--- ${change.replacement ? JSON.stringify(`a/${relative}`) : '/dev/null'}`;
+          if (line.startsWith('+++ ')) return `+++ ${JSON.stringify(`b/${relative}`)}`;
+          return line;
+        }).join('\n');
+      }
+      return { change, patch: binary ? '' : patch,
+        notice: binary ? '二进制文件不支持文本差异' : !result.stdout ? '相对上次提交没有净差异（暂存区与工作区的改动可能相互抵消）' : '' };
+    } catch (err) { throw err.status ? err : gitError(err); }
+    finally { if (temporary) await fs.rm(temporary, { recursive: true, force: true }); }
+  }
+
+  return { status, diff };
+}
+
+module.exports = { createGitService, parseStatus, DIFF_LIMIT };

package/server/services/git.test.js

@@ -0,0 +1,146 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs/promises');
+const os = require('node:os');
+const path = require('node:path');
+const { execFile } = require('node:child_process');
+const { promisify } = require('node:util');
+const { createGitService, parseStatus, DIFF_LIMIT } = require('./git');
+const execute = promisify(execFile);
+
+async function repository(t) {
+  const root = await fs.mkdtemp(path.join(os.tmpdir(), 'hub-git-中文-'));
+  t.after(() => fs.rm(root, { recursive: true, force: true }));
+  const env = { ...process.env, GIT_CONFIG_GLOBAL: os.devNull, GIT_CONFIG_NOSYSTEM: '1' };
+  const git = (...args) => execute('git', ['-C', root, '-c', 'user.name=Hub Test', '-c', 'user.email=test@example.invalid',
+    '-c', 'commit.gpgsign=false', '-c', 'core.hooksPath=/dev/null', ...args], { env });
+  await git('init', '-q');
+  const write = (name, content) => fs.writeFile(path.join(root, name), content);
+  const commit = async () => { await git('add', '--all'); await git('commit', '-qm', 'fixture'); };
+  return { root, git, write, commit, service: createGitService() };
+}
+
+test('porcelain -z parsing preserves special names, rename origins and conflict codes', () => {
+  const root = '/project';
+  const changes = parseStatus(' M 中文 \t\n?#.txt\0R  new name\0old name\0UU conflict\0 D folder/deleted\0?? fresh\0 M ../outside\0', root, root);
+  assert.equal(changes.length, 5);
+  assert.equal(changes[0].path, '/project/中文 \t\n?#.txt');
+  assert.equal(changes[1].originalPath, '/project/old name');
+  assert.equal(changes[1].status, 'R');
+  assert.equal(changes[2].status, 'C');
+  assert.equal(changes[3].deleted, true);
+  assert.equal(changes[4].status, 'U');
+});
+
+test('status and HEAD diff include staged AND unstaged edits without changing the index', async t => {
+  const { root, git, write, commit, service } = await repository(t);
+  await write('file.txt', 'base\n'); await commit();
+  await write('file.txt', 'staged\n'); await git('add', 'file.txt');
+  await write('file.txt', 'current\n');
+  const index = await fs.readFile(path.join(root, '.git/index'));
+  const state = await service.status(root);
+  assert.equal(state.available, true);
+  assert.equal(state.changes[0].index, 'M');
+  assert.equal(state.changes[0].worktree, 'M');
+  const result = await service.diff(root, path.join(root, 'file.txt'));
+  assert.match(result.patch, /-base\n\+current/);
+  assert.ok(!result.patch.includes('+staged'));
+  assert.deepEqual(await fs.readFile(path.join(root, '.git/index')), index);
+  await git('add', 'file.txt');
+  assert.match((await service.diff(root, path.join(root, 'file.txt'))).patch, /\+current/);
+  await git('commit', '-qm', 'done');
+  assert.deepEqual((await service.status(root)).changes, []);
+});
+
+test('unborn repositories and untracked files produce full additions, including literal Git pathspec names', async t => {
+  const { root, write, commit, service } = await repository(t);
+  await write(':(glob)* 中文.txt', 'first\nsecond\n');
+  let result = await service.diff(root, path.join(root, ':(glob)* 中文.txt'));
+  assert.match(result.patch, /\+first\n\+second/);
+  await commit();
+  await write('new.txt', 'new\n');
+  result = await service.diff(root, path.join(root, 'new.txt'));
+  assert.equal(result.change.status, 'U');
+  assert.match(result.patch, /\+new/);
+});
+
+test('deleted files, deleted directories, staged renames and pinned subdirectories are scoped correctly', async t => {
+  const { root, git, write, commit, service } = await repository(t);
+  await fs.mkdir(path.join(root, 'docs/nested'), { recursive: true });
+  await write('docs/nested/gone.txt', 'deleted content\n');
+  await write('docs/old.txt', 'rename content\n');
+  await write('outside.txt', 'outside\n'); await commit();
+  await fs.rm(path.join(root, 'docs/nested'), { recursive: true });
+  await git('mv', 'docs/old.txt', 'docs/new.txt');
+  await write('outside.txt', 'changed\n');
+  const pin = path.join(root, 'docs');
+  const state = await service.status(pin);
+  assert.equal(state.changes.length, 2);
+  assert.equal(state.changes.find(item => item.status === 'R').originalPath, path.join(pin, 'old.txt'));
+  const deletion = await service.diff(pin, path.join(pin, 'nested/gone.txt'));
+  assert.match(deletion.patch, /-deleted content/);
+  const rename = await service.diff(pin, path.join(pin, 'new.txt'));
+  assert.match(rename.patch, /rename from docs\/old.txt/);
+  await assert.rejects(service.diff(pin, path.join(root, 'outside.txt')), { status: 403 });
+});
+
+test('index deletion plus untracked replacement compares actual HEAD and disk, including cancellation', async t => {
+  const { root, git, write, commit, service } = await repository(t);
+  await write('file.txt', 'base\n'); await commit();
+  await git('rm', '--cached', 'file.txt');
+  let result = await service.diff(root, path.join(root, 'file.txt'));
+  assert.equal(result.change.replacement, true);
+  assert.equal(result.patch, '');
+  assert.match(result.notice, /没有净差异/);
+  await write('file.txt', 'replacement\n');
+  result = await service.diff(root, path.join(root, 'file.txt'));
+  assert.match(result.patch, /-base\n\+replacement/);
+});
+
+test('binary, large current files and large committed blobs have bounded diff handling', async t => {
+  const { root, write, commit, service } = await repository(t);
+  await write('binary.bin', Buffer.from([0, 1, 2]));
+  await write('old-large.txt', Buffer.alloc(DIFF_LIMIT + 1, 'a')); await commit();
+  await write('binary.bin', Buffer.from([0, 4, 5]));
+  await write('new-large.txt', Buffer.alloc(DIFF_LIMIT + 1, 'b'));
+  await write('old-large.txt', 'small\n');
+  assert.match((await service.diff(root, path.join(root, 'binary.bin'))).notice, /二进制/);
+  assert.match((await service.diff(root, path.join(root, 'new-large.txt'))).notice, /超过 2 MiB/);
+  assert.match((await service.diff(root, path.join(root, 'old-large.txt'))).notice, /上次提交/);
+});
+
+test('plain folders, missing git, invalid paths and symlink traversal fail distinctly', async t => {
+  const { root, service } = await repository(t);
+  const plain = await fs.mkdtemp(path.join(os.tmpdir(), 'hub-no-git-'));
+  t.after(() => fs.rm(plain, { recursive: true, force: true }));
+  assert.equal((await service.status(plain)).reason, 'not-repository');
+  assert.equal((await createGitService({ executable: path.join(plain, 'missing-git') }).status(root)).reason, 'git-unavailable');
+  assert.throws(() => service.status('relative'), { status: 400 });
+  await fs.symlink(plain, path.join(root, 'linked'));
+  await assert.rejects(service.diff(root, path.join(root, 'linked/file.txt')), { status: 403 });
+});
+
+test('unresolved merge conflicts have a conflict marker and remain readable as a diff', async t => {
+  const { root, git, write, commit, service } = await repository(t);
+  await write('file.txt', 'base\n'); await commit();
+  const branch = (await git('branch', '--show-current')).stdout.trim();
+  await git('checkout', '-qb', 'other'); await write('file.txt', 'other\n'); await commit();
+  await git('checkout', '-q', branch); await write('file.txt', 'main\n'); await commit();
+  await assert.rejects(git('merge', '--no-edit', 'other'));
+  const result = await service.diff(root, path.join(root, 'file.txt'));
+  assert.equal(result.change.status, 'C');
+  assert.match(result.patch, /<<<<<<< HEAD/);
+});
+
+test('Git failures are not clean states, concurrent requests are deduplicated and long patches are bounded', async t => {
+  const { root, write, service } = await repository(t);
+  const first = service.status(root);
+  const second = service.status(root);
+  assert.equal(first, second);
+  await first;
+  await assert.rejects(createGitService({ executable: process.execPath }).status(root), { status: 503 });
+  await write('many-lines.txt', 'line\n'.repeat(20001));
+  const result = await service.diff(root, path.join(root, 'many-lines.txt'));
+  assert.equal(result.patch, '');
+  assert.match(result.notice, /20,000 行/);
+});

package/server/public/assets/PreviewDialog-83b2IRO1.js

@@ -1,2 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/core-DchA7RCO.js","assets/_commonjsHelpers-Cpj98o6Y.js","assets/mammoth.browser-C_M0wsD2.js"])))=>i.map(i=>d[i]);
-import{e as H,_ as e,a as S,u as U,r as u,p as N,o as K,b as G,c as t,d as J,f as i,t as c,g as $,h as I,i as z,n as Q,j as s,k as V,F as D,l as B,w as W,T as X,s as q,m as Y,q as Z,v as ee}from"./index-DhBFQikm.js";const te={javascript:()=>e(()=>import("./javascript-DUNaicwC.js"),[]),typescript:()=>e(()=>import("./typescript-5pldp2kO.js"),[]),xml:()=>e(()=>import("./xml-FcirFJJ2.js"),[]),css:()=>e(()=>import("./css-AVCICof-.js"),[]),scss:()=>e(()=>import("./scss-UZl0Ag-9.js"),[]),json:()=>e(()=>import("./json-DdsocbVI.js"),[]),python:()=>e(()=>import("./python-CXf-_D6G.js"),[]),bash:()=>e(()=>import("./bash-I8pq0VWm.js"),[]),yaml:()=>e(()=>import("./yaml-drsDnIKT.js"),[]),ini:()=>e(()=>import("./ini-B3BVgEsG.js"),[]),markdown:()=>e(()=>import("./markdown-fzgiUVUV.js"),[]),go:()=>e(()=>import("./go-4VmnRw3R.js"),[]),rust:()=>e(()=>import("./rust-DsMvwcVK.js"),[]),java:()=>e(()=>import("./java-DUnkFH8J.js"),[]),c:()=>e(()=>import("./c-D87IyN5J.js"),[]),cpp:()=>e(()=>import("./cpp-BFCWVspj.js"),[]),csharp:()=>e(()=>import("./csharp-D-6syieo.js"),[]),ruby:()=>e(()=>import("./ruby-CcVTKuP4.js"),[]),php:()=>e(()=>import("./php-kjAv1gW4.js"),[]),sql:()=>e(()=>import("./sql-BC88IN-V.js"),[]),swift:()=>e(()=>import("./swift-jkyvy0ac.js"),[]),kotlin:()=>e(()=>import("./kotlin-Za0-TyUR.js"),[]),lua:()=>e(()=>import("./lua-CD7o2Ci6.js"),[]),perl:()=>e(()=>import("./perl-BWtAWCfC.js"),[]),r:()=>e(()=>import("./r-DWz4c2Y4.js"),[]),dart:()=>e(()=>import("./dart-DbQNmsdu.js"),[]),dockerfile:()=>e(()=>import("./dockerfile-Co-AyC30.js"),[]),makefile:()=>e(()=>import("./makefile-BoJC05FH.js"),[]),diff:()=>e(()=>import("./diff-BLTryEFx.js"),[]),plaintext:()=>e(()=>import("./plaintext-CPM70vnn.js"),[])},se={js:"javascript",mjs:"javascript",cjs:"javascript",jsx:"javascript",ts:"typescript",tsx:"typescript",vue:"xml",svelte:"xml",html:"xml",htm:"xml",xml:"xml",svg:"xml",css:"css",scss:"scss",sass:"scss",less:"css",json:"json",jsonc:"json",py:"python",sh:"bash",zsh:"bash",bash:"bash",fish:"bash",yml:"yaml",yaml:"yaml",toml:"ini",ini:"ini",cfg:"ini",conf:"ini",md:"markdown",markdown:"markdown",go:"go",rs:"rust",java:"java",c:"c",h:"c",cpp:"cpp",cc:"cpp",hpp:"cpp",cs:"csharp",rb:"ruby",php:"php",sql:"sql",swift:"swift",kt:"kotlin",kts:"kotlin",lua:"lua",pl:"perl",r:"r",dart:"dart",diff:"diff",patch:"diff"};async function ae(r,k){if(new TextEncoder().encode(r).length>200*1024)return null;const d=k.toLowerCase(),_=d==="dockerfile"?"dockerfile":d==="makefile"?"makefile":se[H(k)];if(!_)return null;const[{default:h},{default:y}]=await Promise.all([e(()=>import("./core-DchA7RCO.js"),__vite__mapDeps([0,1])),te[_]()]);return h.getLanguage(_)||h.registerLanguage(_,y),h.highlight(r,{language:_,ignoreIllegals:!0}).value}const oe={class:"preview-layout"},re={class:"preview-header"},le={class:"preview-heading"},ie={id:"preview-title"},ne=["title"],ue=["href","download"],_e={key:0,class:"preview-message",role:"status"},ce={key:1,class:"preview-message error",role:"alert"},de={key:0,class:"preview-note"},ve={key:0,class:"preview-note"},me={class:"source"},pe=["innerHTML"],fe={key:1},he=["innerHTML"],ye=["srcdoc","title"],Ee=["src","alt"],we=["src"],ge=["src"],ke=["src","title"],be={key:8,class:"table-preview"},Te={class:"preview-note"},Le={class:"row-number"},De={key:9,class:"preview-message"},Pe={__name:"PreviewDialog",props:{entry:{type:Object,required:!0}},emits:["close"],setup(r,{emit:k}){const d=r,_=k,h=U(),y=u(null),a=u(N(d.entry.name)),P=u(!1),f=u(""),v=u(""),A=u(null),E=u(""),w=u([]),b=u(1e3),O=u(!1),g=ee(()=>z(d.entry.path)),R=new AbortController;let x;async function j(n){if(d.entry.size>n)throw new Error(`预览上限为 ${I(n)}，请下载文件查看。`);const l=(await h.apiRequest(g.value,{signal:R.signal})).body.getReader(),m=[];let p=0;try{for(;;){const{done:L,value:M}=await l.read();if(L)break;if(p+=M.length,p>n)throw new Error(`预览上限为 ${I(n)}，请下载文件查看。`);m.push(M)}}finally{await l.cancel().catch(()=>{})}const T=new Uint8Array(p);let C=0;for(const L of m)T.set(L,C),C+=L.length;return T}async function F(){if(["text","markdown","html","docx","table"].includes(a.value)){P.value=!0;try{if(a.value==="docx"){const n=await j(10485760),{default:o}=await e(async()=>{const{default:m}=await import("./mammoth.browser-C_M0wsD2.js").then(p=>p.m);return{default:m}},__vite__mapDeps([2,1])),l=await o.convertToHtml({arrayBuffer:n.buffer},{externalFileAccess:!1});E.value=q(l.value)}else{if(v.value=new TextDecoder().decode(await j(2*1024*1024)),v.value.includes("\0")){a.value="unsupported";return}if(a.value==="html")E.value=q(v.value);else if(a.value==="markdown")E.value=await Y(v.value);else if(a.value==="table"){const n=await Z(v.value,d.entry.name);n?w.value=n:(O.value=!0,a.value="text")}a.value==="text"&&(A.value=await ae(v.value,d.entry.name).catch(()=>null))}}catch(n){R.signal.aborted||(f.value=n.message)}finally{P.value=!1}}}return K(()=>{x=document.activeElement,y.value.showModal(),F()}),G(()=>{R.abort(),x?.focus()}),(n,o)=>(t(),J(X,{to:"body"},[i("dialog",{ref_key:"dialog",ref:y,class:"preview-dialog","aria-labelledby":"preview-title",onCancel:o[5]||(o[5]=W(l=>_("close"),["prevent"])),onClick:o[6]||(o[6]=l=>{l.target===y.value&&_("close")})},[i("div",oe,[i("header",re,[i("div",le,[i("h3",ie,c(r.entry.name),1),i("p",{title:r.entry.path},c(r.entry.path)+" · "+c($(I)(r.entry.size)),9,ne)]),i("a",{class:"btn",href:$(z)(r.entry.path,!0),download:r.entry.name},"下载",8,ue),i("button",{class:"close","aria-label":"关闭预览",autofocus:"",onClick:o[0]||(o[0]=l=>_("close"))},"×")]),i("main",{class:Q(["preview-body",{"frame-body":["html","docx","pdf"].includes(a.value)}])},[P.value?(t(),s("p",_e,"加载预览…")):f.value?(t(),s("p",ce,c(f.value),1)):(t(),s(D,{key:2},[O.value?(t(),s("p",de,"表格解析失败，已显示原始文本。")):V("",!0),a.value==="text"?(t(),s(D,{key:1},[r.entry.size>200*1024?(t(),s("p",ve,"文件超过 200 KiB，已使用纯文本预览。")):V("",!0),i("pre",me,[A.value!==null?(t(),s("code",{key:0,class:"hljs",innerHTML:A.value},null,8,pe)):(t(),s("code",fe,c(v.value),1))])],64)):a.value==="markdown"?(t(),s("article",{key:2,class:"markdown-body",innerHTML:E.value},null,8,he)):a.value==="html"||a.value==="docx"?(t(),s("iframe",{key:3,srcdoc:E.value,sandbox:"allow-scripts",referrerpolicy:"no-referrer",title:r.entry.name,class:"document-frame"},null,8,ye)):a.value==="image"?(t(),s("img",{key:4,src:g.value,alt:r.entry.name,class:"image-preview",onError:o[1]||(o[1]=l=>f.value="浏览器无法显示这张图片，请下载查看。")},null,40,Ee)):a.value==="audio"?(t(),s("audio",{key:5,src:g.value,controls:"",class:"media-preview",onError:o[2]||(o[2]=l=>f.value="浏览器不支持此音频格式，请下载查看。")},null,40,we)):a.value==="video"?(t(),s("video",{key:6,src:g.value,controls:"",playsinline:"",class:"media-preview",onError:o[3]||(o[3]=l=>f.value="浏览器不支持此视频格式，请下载查看。")},null,40,ge)):a.value==="pdf"?(t(),s("iframe",{key:7,src:g.value,title:r.entry.name,class:"document-frame"},null,8,ke)):a.value==="table"?(t(),s("div",be,[i("p",Te,"已显示 "+c(Math.min(b.value,w.value.length))+" / "+c(w.value.length)+" 行",1),i("table",null,[i("tbody",null,[(t(!0),s(D,null,B(w.value.slice(0,b.value),(l,m)=>(t(),s("tr",{key:m},[i("td",Le,c(m+1),1),(t(!0),s(D,null,B(l,(p,T)=>(t(),s("td",{key:T},c(p),1))),128))]))),128))])]),b.value<w.value.length?(t(),s("button",{key:0,class:"btn btn-primary show-more",onClick:o[4]||(o[4]=l=>b.value+=1e3)},"显示更多（1000 行）")):V("",!0)])):(t(),s("p",De,"此文件类型暂不支持预览，请下载查看。"))],64))],2)])],544)]))}},Re=S(Pe,[["__scopeId","data-v-c613172c"]]);export{Re as default};

package/server/public/assets/PreviewDialog-mYkQ2B4R.css

@@ -1 +0,0 @@
-pre code.hljs{display:block;overflow-x:auto;padding:1em}code.hljs{padding:3px 5px}.hljs{color:#c9d1d9;background:#0d1117}.hljs-doctag,.hljs-keyword,.hljs-meta .hljs-keyword,.hljs-template-tag,.hljs-template-variable,.hljs-type,.hljs-variable.language_{color:#ff7b72}.hljs-title,.hljs-title.class_,.hljs-title.class_.inherited__,.hljs-title.function_{color:#d2a8ff}.hljs-attr,.hljs-attribute,.hljs-literal,.hljs-meta,.hljs-number,.hljs-operator,.hljs-variable,.hljs-selector-attr,.hljs-selector-class,.hljs-selector-id{color:#79c0ff}.hljs-regexp,.hljs-string,.hljs-meta .hljs-string{color:#a5d6ff}.hljs-built_in,.hljs-symbol{color:#ffa657}.hljs-comment,.hljs-code,.hljs-formula{color:#8b949e}.hljs-name,.hljs-quote,.hljs-selector-tag,.hljs-selector-pseudo{color:#7ee787}.hljs-subst{color:#c9d1d9}.hljs-section{color:#1f6feb;font-weight:700}.hljs-bullet{color:#f2cc60}.hljs-emphasis{color:#c9d1d9;font-style:italic}.hljs-strong{color:#c9d1d9;font-weight:700}.hljs-addition{color:#aff5b4;background-color:#033a16}.hljs-deletion{color:#ffdcd7;background-color:#67060c}.preview-dialog[data-v-c613172c]{margin:auto;width:min(1100px,calc(100vw - 32px));height:min(850px,calc(100dvh - 48px));max-width:none;max-height:none;padding:0;border:1px solid var(--border-color);border-radius:var(--radius-lg);background:var(--bg-primary);color:var(--text-primary)}.preview-dialog[data-v-c613172c]::backdrop{background:#000a;-webkit-backdrop-filter:blur(4px);backdrop-filter:blur(4px)}.preview-layout[data-v-c613172c]{height:100%;display:flex;flex-direction:column}.preview-header[data-v-c613172c]{display:flex;align-items:center;padding:12px 16px;gap:12px;border-bottom:1px solid var(--border-color);background:var(--bg-secondary)}.preview-heading[data-v-c613172c]{flex:1;min-width:0}.preview-heading h3[data-v-c613172c],.preview-heading p[data-v-c613172c]{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.preview-heading h3[data-v-c613172c]{font-size:15px}.preview-heading p[data-v-c613172c]{color:var(--text-secondary);font-size:11px}.preview-header a[data-v-c613172c]{color:var(--text-primary);text-decoration:none;padding:4px 8px;border:1px solid var(--border-color)}.close[data-v-c613172c]{border:none;color:var(--text-secondary);background:none;font-size:26px;cursor:pointer;padding:0 4px}.preview-body[data-v-c613172c]{flex:1;min-height:0;overflow:auto;padding:20px}.frame-body[data-v-c613172c]{padding:0;display:flex}.preview-message[data-v-c613172c]{padding:24px;color:var(--text-secondary)}.error[data-v-c613172c]{color:var(--danger)}.preview-note[data-v-c613172c]{color:var(--text-secondary);font-size:12px;margin-bottom:12px}.source[data-v-c613172c]{font:13px/1.65 ui-monospace,SFMono-Regular,Consolas,monospace;tab-size:4}.source code[data-v-c613172c]{padding:0;background:transparent}.document-frame[data-v-c613172c]{border:none;background:#fff;width:100%;height:100%;min-height:0}.image-preview[data-v-c613172c]{display:block;max-width:100%;max-height:100%;object-fit:contain;margin:auto}.media-preview[data-v-c613172c]{display:block;width:100%;max-height:100%;margin:auto}table[data-v-c613172c]{border-collapse:collapse;font-size:12px}td[data-v-c613172c]{padding:5px 10px;border:1px solid var(--border-color);white-space:pre-wrap;min-width:60px;max-width:500px;overflow-wrap:anywhere}.row-number[data-v-c613172c]{color:var(--text-tertiary);text-align:right;min-width:35px;background:var(--bg-secondary)}.show-more[data-v-c613172c]{margin-top:16px}.markdown-body[data-v-c613172c]{line-height:1.7;overflow-wrap:anywhere}.markdown-body[data-v-c613172c] h1,.markdown-body[data-v-c613172c] h2,.markdown-body[data-v-c613172c] h3{margin:20px 0 12px}.markdown-body[data-v-c613172c] p,.markdown-body[data-v-c613172c] ul,.markdown-body[data-v-c613172c] ol,.markdown-body[data-v-c613172c] pre,.markdown-body[data-v-c613172c] table{margin-bottom:16px}.markdown-body[data-v-c613172c] ul,.markdown-body[data-v-c613172c] ol{padding-left:24px}.markdown-body[data-v-c613172c] a{color:#60a5fa}.markdown-body[data-v-c613172c] img{max-width:100%}.markdown-body[data-v-c613172c] pre,.markdown-body[data-v-c613172c] code{background:var(--bg-secondary);padding:2px 5px;border-radius:4px}.markdown-body[data-v-c613172c] pre{padding:12px;overflow:auto}.markdown-body[data-v-c613172c] blockquote{border-left:3px solid var(--border-color);color:var(--text-secondary);padding-left:14px}.markdown-body[data-v-c613172c] td,.markdown-body[data-v-c613172c] th{border:1px solid var(--border-color);padding:5px 10px}@media(max-width:600px){.preview-dialog[data-v-c613172c]{width:calc(100vw - 12px);height:calc(100dvh - 16px)}.preview-header[data-v-c613172c]{padding:10px}.preview-body[data-v-c613172c]:not(.frame-body){padding:12px}}