@team-work/sandbox-client 0.1.1-beta.0

package/dist/instance/store.js

@@ -0,0 +1,155 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tokenHash = tokenHash;
+exports.loadInstance = loadInstance;
+exports.saveInstance = saveInstance;
+exports.removeInstance = removeInstance;
+exports.listInstances = listInstances;
+exports.updateInstance = updateInstance;
+exports.setStatus = setStatus;
+exports.isPidAlive = isPidAlive;
+exports.purgeDeadInstances = purgeDeadInstances;
+exports.findRunningBySandboxId = findRunningBySandboxId;
+exports.killInstance = killInstance;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const paths_js_1 = require("../config/paths.js");
+/**
+ * 实例状态文件 CRUD：~/.tw/instances/<id>.json（权限 0600）。
+ */
+function ensureDir() {
+    if (!(0, node_fs_1.existsSync)(paths_js_1.INSTANCES_DIR)) {
+        (0, node_fs_1.mkdirSync)(paths_js_1.INSTANCES_DIR, { recursive: true });
+    }
+}
+function tokenHash(privateKey) {
+    return 'sha256:' + (0, node_crypto_1.createHash)('sha256').update(privateKey).digest('hex');
+}
+function loadInstance(id) {
+    const file = (0, paths_js_1.instanceStateFile)(id);
+    if (!(0, node_fs_1.existsSync)(file))
+        return null;
+    try {
+        return JSON.parse((0, node_fs_1.readFileSync)(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function saveInstance(rec) {
+    ensureDir();
+    const file = (0, paths_js_1.instanceStateFile)(rec.id);
+    (0, node_fs_1.writeFileSync)(file, JSON.stringify(rec, null, 2), { mode: 0o600 });
+    (0, node_fs_1.chmodSync)(file, 0o600);
+}
+function removeInstance(id) {
+    const file = (0, paths_js_1.instanceStateFile)(id);
+    if ((0, node_fs_1.existsSync)(file))
+        (0, node_fs_1.unlinkSync)(file);
+}
+/** 列出所有实例状态记录 */
+function listInstances() {
+    ensureDir();
+    const files = (0, node_fs_1.readdirSync)(paths_js_1.INSTANCES_DIR).filter((f) => f.endsWith('.json'));
+    const records = [];
+    for (const f of files) {
+        try {
+            records.push(JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(paths_js_1.INSTANCES_DIR, f), 'utf8')));
+        }
+        catch {
+            // 跳过损坏文件
+        }
+    }
+    return records;
+}
+/** 更新实例部分字段 */
+function updateInstance(id, patch) {
+    const cur = loadInstance(id);
+    if (!cur)
+        return null;
+    const next = { ...cur, ...patch };
+    saveInstance(next);
+    return next;
+}
+function setStatus(id, status, wsState) {
+    const patch = { status, lastSeenAt: new Date().toISOString() };
+    if (wsState)
+        patch.wsState = wsState;
+    updateInstance(id, patch);
+}
+/** 进程是否存活（kill 0 探测，不发信号） */
+function isPidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * 清理 PID 已死的残留记录——daemon 正常退出已自删，但崩溃（SIGKILL/段错误）
+ * 来不及自删时会留下 stale "running" 记录。此函数自愈：遍历全部记录，PID 死则删文件。
+ * 返回清理条数。
+ */
+function purgeDeadInstances() {
+    let n = 0;
+    for (const r of listInstances()) {
+        if (!isPidAlive(r.pid)) {
+            removeInstance(r.id);
+            n++;
+        }
+    }
+    return n;
+}
+/** 按 sandboxId 找到仍在运行的实例（PID 存活、status=running） */
+function findRunningBySandboxId(sandboxId) {
+    for (const r of listInstances()) {
+        if (r.sandboxId === sandboxId && isPidAlive(r.pid) && r.status === 'running') {
+            return r;
+        }
+    }
+    return null;
+}
+/**
+ * 终止某实例进程并清理其记录。同步等待 SIGTERM，超时 SIGKILL（最多约 5s）。
+ * 用于「同 sandboxId 只允许一个进程」时，start 前杀掉旧实例。
+ */
+async function killInstance(id) {
+    const rec = loadInstance(id);
+    if (!rec) {
+        return { rec: null, ok: true, note: `实例不存在: ${id}` };
+    }
+    if (!isPidAlive(rec.pid)) {
+        removeInstance(id);
+        return { rec, ok: true, note: `实例 ${id} (pid ${rec.pid}) 已不在运行，清理记录` };
+    }
+    try {
+        process.kill(rec.pid, 'SIGTERM');
+    }
+    catch {
+        removeInstance(id);
+        return { rec, ok: false, note: `发送 SIGTERM 到 ${id} (pid ${rec.pid}) 失败` };
+    }
+    // 等 5s，仍存活则 SIGKILL
+    const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+    for (let i = 0; i < 50; i++) {
+        await sleep(100);
+        if (!isPidAlive(rec.pid))
+            break;
+    }
+    if (isPidAlive(rec.pid)) {
+        try {
+            process.kill(rec.pid, 'SIGKILL');
+        }
+        catch {
+            // ignore
+        }
+        await sleep(200);
+    }
+    const ok = !isPidAlive(rec.pid);
+    removeInstance(id);
+    return { rec, ok, note: ok ? `已终止 ${id} (pid ${rec.pid})` : `无法终止 ${id} (pid ${rec.pid})` };
+}
+//# sourceMappingURL=store.js.map

package/dist/instance/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/instance/store.ts"],"names":[],"mappings":";;AAyBA,8BAEC;AAED,oCAQC;AAED,oCAKC;AAED,wCAGC;AAGD,sCAYC;AAGD,wCAMC;AAED,8BAIC;AAGD,gCAOC;AAOD,gDASC;AAYD,wDAOC;AAMD,oCAgCC;AAlKD,6CAAyC;AACzC,qCAQiB;AACjB,yCAAiC;AAEjC,iDAAsE;AAGtE;;GAEG;AAEH,SAAS,SAAS;IAChB,IAAI,CAAC,IAAA,oBAAU,EAAC,wBAAa,CAAC,EAAE,CAAC;QAC/B,IAAA,mBAAS,EAAC,wBAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAgB,SAAS,CAAC,UAAkB;IAC1C,OAAO,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,SAAgB,YAAY,CAAC,EAAU;IACrC,MAAM,IAAI,GAAG,IAAA,4BAAiB,EAAC,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,GAAmB;IAC9C,SAAS,EAAE,CAAC;IACZ,MAAM,IAAI,GAAG,IAAA,4BAAiB,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvC,IAAA,uBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,cAAc,CAAC,EAAU;IACvC,MAAM,IAAI,GAAG,IAAA,4BAAiB,EAAC,EAAE,CAAC,CAAC;IACnC,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,iBAAiB;AACjB,SAAgB,aAAa;IAC3B,SAAS,EAAE,CAAC;IACZ,MAAM,KAAK,GAAG,IAAA,qBAAW,EAAC,wBAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,wBAAa,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAmB,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,eAAe;AACf,SAAgB,cAAc,CAAC,EAAU,EAAE,KAA8B;IACvE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAClC,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,SAAS,CAAC,EAAU,EAAE,MAAsB,EAAE,OAAiB;IAC7E,MAAM,KAAK,GAA4B,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACxF,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACrC,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,6BAA6B;AAC7B,SAAgB,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB;IAChC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAWD,mDAAmD;AACnD,SAAgB,sBAAsB,CAAC,SAAiB;IACtD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7E,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,YAAY,CAAC,EAAU;IAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,cAAc,CAAC,EAAE,CAAC,CAAC;QACnB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,GAAG,cAAc,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,CAAC,EAAE,CAAC,CAAC;QACnB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC;IAC5E,CAAC;IACD,oBAAoB;IACpB,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM;IAClC,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,cAAc,CAAC,EAAE,CAAC,CAAC;IACnB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;AAC9F,CAAC"}

package/dist/instance/types.d.ts

@@ -0,0 +1,28 @@
+/**
+ * 实例状态记录。持久化到 ~/.tw/instances/<id>.json（权限 0600）。
+ * token/privateKey 仅存 sha256 摘要，绝不存明文。
+ */
+export type InstanceStatus = 'running' | 'exited' | 'unknown';
+export type WsState = 'connecting' | 'authing' | 'connected' | 'reconnecting' | 'exiting' | 'exited';
+export interface InstanceRecord {
+    /** 实例 id，如 inst-20260805-1a2b3c */
+    id: string;
+    /** 守护进程 pid */
+    pid: number;
+    /** sandboxId（握手用） */
+    sandboxId: string;
+    /** privateKey 的 sha256 摘要，仅用于识别，不可逆推原 key */
+    tokenHash: string;
+    /** sandbox ws 地址 */
+    serverUrl: string;
+    /** 启动时间 ISO */
+    startedAt: string;
+    /** 实例状态 */
+    status: InstanceStatus;
+    /** ws 连接状态 */
+    wsState: WsState;
+    /** 最近一次心跳/活动时间 ISO */
+    lastSeenAt: string;
+    /** 日志文件路径 */
+    logFile: string;
+}

package/dist/instance/types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * 实例状态记录。持久化到 ~/.tw/instances/<id>.json（权限 0600）。
+ * token/privateKey 仅存 sha256 摘要，绝不存明文。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/instance/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/instance/types.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist/logging/logger.d.ts

@@ -0,0 +1,11 @@
+import { Logger } from 'pino';
+export type { Logger };
+/**
+ * 初始化 pino 日志，按 logDir + instanceId 落盘。
+ * 结构化字段：time/level/reqId/sessionId/msg。前台调试走 stderr，后台走文件。
+ *
+ * 文件 destination 用 sync:true 同步写——daemon 在 auth-fail 时毫秒级退出，
+ * 异步缓冲会被 process.exit 丢弃导致日志文件为空；同步写保证每条日志即时落盘。
+ */
+export declare function initLogger(logDir: string, instanceId: string, foreground?: boolean): Logger;
+export declare function getLogger(): Logger;

package/dist/logging/logger.js

@@ -0,0 +1,42 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initLogger = initLogger;
+exports.getLogger = getLogger;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const pino_1 = __importDefault(require("pino"));
+const paths_js_1 = require("../config/paths.js");
+let logger = null;
+/**
+ * 初始化 pino 日志，按 logDir + instanceId 落盘。
+ * 结构化字段：time/level/reqId/sessionId/msg。前台调试走 stderr，后台走文件。
+ *
+ * 文件 destination 用 sync:true 同步写——daemon 在 auth-fail 时毫秒级退出，
+ * 异步缓冲会被 process.exit 丢弃导致日志文件为空；同步写保证每条日志即时落盘。
+ */
+function initLogger(logDir, instanceId, foreground = false) {
+    const dir = logDir || paths_js_1.DEFAULT_LOG_DIR;
+    if (!(0, node_fs_1.existsSync)(dir))
+        (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    const file = (0, node_path_1.join)(dir, `${instanceId}.log`);
+    const dest = foreground
+        ? process.stderr
+        : pino_1.default.destination({ dest: file, sync: true });
+    logger = (0, pino_1.default)({
+        level: process.env.TW_LOG_LEVEL || 'info',
+        base: { instanceId },
+        timestamp: pino_1.default.stdTimeFunctions.isoTime,
+    }, dest);
+    return logger;
+}
+function getLogger() {
+    if (!logger) {
+        // 兜底：命令行场景（非 daemon）用控制台 logger
+        logger = (0, pino_1.default)({ level: process.env.TW_LOG_LEVEL || 'info' }, process.stderr);
+    }
+    return logger;
+}
+//# sourceMappingURL=logger.js.map

package/dist/logging/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/logging/logger.ts"],"names":[],"mappings":";;;;;AAkBA,gCAkBC;AAED,8BAMC;AA5CD,qCAAgD;AAChD,yCAAiC;AAEjC,gDAAoC;AAEpC,iDAAqD;AAIrD,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC;;;;;;GAMG;AACH,SAAgB,UAAU,CAAC,MAAc,EAAE,UAAkB,EAAE,UAAU,GAAG,KAAK;IAC/E,MAAM,GAAG,GAAG,MAAM,IAAI,0BAAe,CAAC;IACtC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;QAAE,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;IAE5C,MAAM,IAAI,GAA2B,UAAU;QAC7C,CAAC,CAAC,OAAO,CAAC,MAAM;QAChB,CAAC,CAAC,cAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjD,MAAM,GAAG,IAAA,cAAI,EACX;QACE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM;QACzC,IAAI,EAAE,EAAE,UAAU,EAAE;QACpB,SAAS,EAAE,cAAI,CAAC,gBAAgB,CAAC,OAAO;KACzC,EACD,IAAI,CACL,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,SAAS;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,gCAAgC;QAChC,MAAM,GAAG,IAAA,cAAI,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/system/report.d.ts

@@ -0,0 +1,2 @@
+import { SandboxConfig } from '../client/frames.js';
+export declare function collectConfig(): SandboxConfig;

package/dist/system/report.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectConfig = collectConfig;
+const node_os_1 = require("node:os");
+const node_fs_1 = require("node:fs");
+const info_js_1 = require("../utils/info.js");
+/** 取本机主要 IPv4（非内网回环） */
+function getIp() {
+    const ifaces = (0, node_os_1.networkInterfaces)();
+    for (const list of Object.values(ifaces)) {
+        if (!list)
+            continue;
+        for (const ni of list) {
+            if (ni.family === 'IPv4' && !ni.internal)
+                return ni.address;
+        }
+    }
+    return '127.0.0.1';
+}
+/** os 描述，如 'darwin 25.4.0 arm64' */
+function getOs() {
+    return `${(0, node_os_1.platform)()} ${(0, node_os_1.type)()} ${process.arch}`;
+}
+/** cpu 摘要 */
+function getCpu() {
+    const c = (0, node_os_1.cpus)();
+    if (!c.length)
+        return 'unknown';
+    const m = c[0].model;
+    return `${m} x${c.length}`;
+}
+/** 字节 → GB 整数（二进制 GiB：/ 1024³），与 sandbox mock-cli 约定一致 */
+function bytesToGb(bytes) {
+    return Math.round(bytes / 1024 / 1024 / 1024);
+}
+/** 内存 GB：os.totalmem() 返回字节，转 GB */
+function getMemoryGb() {
+    return bytesToGb((0, node_os_1.totalmem)());
+}
+/** 硬盘 GB：取根分区总容量。Node 18.15+ 提供 fs.statfsSync，取不到回 0 */
+function getStorageGb() {
+    try {
+        const target = process.platform === 'win32' ? (process.env.SystemDrive || 'C:\\') : '/';
+        const stats = (0, node_fs_1.statfsSync)(target);
+        return bytesToGb(stats.bsize * stats.blocks);
+    }
+    catch {
+        return 0;
+    }
+}
+function collectConfig() {
+    return {
+        ip: getIp(),
+        os: getOs(),
+        cpu: getCpu(),
+        memory: getMemoryGb(),
+        storage: getStorageGb(),
+        cliVersion: (0, info_js_1.getPkgInfo)().version,
+    };
+}
+//# sourceMappingURL=report.js.map

package/dist/system/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/system/report.ts"],"names":[],"mappings":";;AAoDA,sCASC;AA7DD,qCAA4E;AAC5E,qCAAqC;AAErC,8CAA8C;AAG9C,wBAAwB;AACxB,SAAS,KAAK;IACZ,MAAM,MAAM,GAAG,IAAA,2BAAiB,GAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ;gBAAE,OAAO,EAAE,CAAC,OAAO,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,oCAAoC;AACpC,SAAS,KAAK;IACZ,OAAO,GAAG,IAAA,kBAAQ,GAAE,IAAI,IAAA,cAAI,GAAE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,aAAa;AACb,SAAS,MAAM;IACb,MAAM,CAAC,GAAG,IAAA,cAAI,GAAE,CAAC;IACjB,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,oCAAoC;AACpC,SAAS,WAAW;IAClB,OAAO,SAAS,CAAC,IAAA,kBAAQ,GAAE,CAAC,CAAC;AAC/B,CAAC;AAED,wDAAwD;AACxD,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACxF,MAAM,KAAK,GAAG,IAAA,oBAAU,EAAC,MAAM,CAAC,CAAC;QACjC,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO;QACL,EAAE,EAAE,KAAK,EAAE;QACX,EAAE,EAAE,KAAK,EAAE;QACX,GAAG,EAAE,MAAM,EAAE;QACb,MAAM,EAAE,WAAW,EAAE;QACrB,OAAO,EAAE,YAAY,EAAE;QACvB,UAAU,EAAE,IAAA,oBAAU,GAAE,CAAC,OAAO;KACjC,CAAC;AACJ,CAAC"}

package/dist/update/self-update.d.ts

@@ -0,0 +1,8 @@
+/**
+ * 自更新：读当前包 name/version，npm view 取最新，npm i -g <name>@latest。
+ * 返回结果描述字符串供命令层打印。
+ */
+export declare function selfUpdate(): {
+    changed: boolean;
+    message: string;
+};

package/dist/update/self-update.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.selfUpdate = selfUpdate;
+const node_child_process_1 = require("node:child_process");
+const info_js_1 = require("../utils/info.js");
+/**
+ * 自更新：读当前包 name/version，npm view 取最新，npm i -g <name>@latest。
+ * 返回结果描述字符串供命令层打印。
+ */
+function selfUpdate() {
+    const { name } = (0, info_js_1.getPkgInfo)();
+    const current = (0, info_js_1.getPkgInfo)().version;
+    // npm view <name> version（取最新发布版本）
+    const view = (0, node_child_process_1.spawnSync)('npm', ['view', name, 'version'], { encoding: 'utf8' });
+    if (view.status !== 0) {
+        return {
+            changed: false,
+            message: `查询最新版本失败：${(view.stderr || view.stdout || '').trim() || 'npm view 失败'}`,
+        };
+    }
+    const latest = view.stdout.trim();
+    if (!latest) {
+        return { changed: false, message: '无法解析最新版本号' };
+    }
+    if (latest === current) {
+        return { changed: false, message: `已是最新版本 ${current}` };
+    }
+    // npm i -g <name>@latest
+    const install = (0, node_child_process_1.spawnSync)('npm', ['i', '-g', `${name}@latest`], {
+        encoding: 'utf8',
+        stdio: 'inherit',
+    });
+    if (install.status !== 0) {
+        return { changed: false, message: `更新失败（npm 退出码 ${install.status}）` };
+    }
+    return {
+        changed: true,
+        message: `已更新 ${current} → ${latest}；请重启正在运行的 tw 实例以生效。`,
+    };
+}
+//# sourceMappingURL=self-update.js.map

package/dist/update/self-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-update.js","sourceRoot":"","sources":["../../src/update/self-update.ts"],"names":[],"mappings":";;AAQA,gCAiCC;AAzCD,2DAA+C;AAE/C,8CAA8C;AAE9C;;;GAGG;AACH,SAAgB,UAAU;IACxB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,oBAAU,GAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAA,oBAAU,GAAE,CAAC,OAAO,CAAC;IAErC,mCAAmC;IACnC,MAAM,IAAI,GAAG,IAAA,8BAAS,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,aAAa,EAAE;SAClF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,yBAAyB;IACzB,MAAM,OAAO,GAAG,IAAA,8BAAS,EAAC,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,SAAS,CAAC,EAAE;QAC9D,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC;IACxE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,OAAO,OAAO,MAAM,MAAM,qBAAqB;KACzD,CAAC;AACJ,CAAC"}

package/dist/utils/info.d.ts

@@ -0,0 +1,11 @@
+interface PkgInfo {
+    name: string;
+    version: string;
+}
+/**
+ * 读取 package.json 的 name / version。
+ * dist 输出为 CJS，无法用 import attribute 加载 .json，改走 fs。
+ * dist/<dir>/file.js → 根 package.json = __dirname/../..
+ */
+export declare function getPkgInfo(): PkgInfo;
+export {};

package/dist/utils/info.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPkgInfo = getPkgInfo;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+let cached = null;
+/**
+ * 读取 package.json 的 name / version。
+ * dist 输出为 CJS，无法用 import attribute 加载 .json，改走 fs。
+ * dist/<dir>/file.js → 根 package.json = __dirname/../..
+ */
+function getPkgInfo() {
+    if (cached)
+        return cached;
+    const file = (0, node_path_1.resolve)(__dirname, '..', '..', 'package.json');
+    const raw = (0, node_fs_1.readFileSync)(file, 'utf8');
+    const parsed = JSON.parse(raw);
+    cached = { name: parsed.name, version: parsed.version };
+    return cached;
+}
+//# sourceMappingURL=info.js.map

package/dist/utils/info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.js","sourceRoot":"","sources":["../../src/utils/info.ts"],"names":[],"mappings":";;AAeA,gCAOC;AAtBD,qCAAuC;AACvC,yCAAoC;AAOpC,IAAI,MAAM,GAAmB,IAAI,CAAC;AAElC;;;;GAIG;AACH,SAAgB,UAAU;IACxB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/pem.d.ts

@@ -0,0 +1,15 @@
+/**
+ * 私钥归一化：复现 Node `generateKeyPairSync('rsa', { privateKeyEncoding: { type: 'pkcs8', format: 'pem' } })`
+ * 的输出格式，以字节匹配 sandbox DB 中 `oauth_sandbox.private_key`。
+ *
+ * 背景：oauth `SandboxesService.list()` 对外脱敏时去掉了 PEM 首尾与所有空白，
+ * 用户从 UI 复制到的是纯 base64 body；而 sandbox `findByPrivateKeyMatch` 用
+ * `safeEqual(row.privateKey, privateKey)` 精确比对 DB 原值（完整 PEM）。两者不一致
+ * → 鉴权失败 4001。本函数把用户输入还原成 DB 侧的完整 PEM。
+ *
+ * 支持三种输入：
+ *  - 纯 base64 body（UI 复制）：重排 64 字符/行 + 加 BEGIN/END PRIVATE KEY 首尾 + 尾换行
+ *  - 带字面 \n 的 PEM（mock-cli 风格）：\n 转真换行
+ *  - 已带 PEM 首尾的真换行串：原样返回（补尾换行）
+ */
+export declare function normalizePrivateKey(key: string): string;

package/dist/utils/pem.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizePrivateKey = normalizePrivateKey;
+/**
+ * 私钥归一化：复现 Node `generateKeyPairSync('rsa', { privateKeyEncoding: { type: 'pkcs8', format: 'pem' } })`
+ * 的输出格式，以字节匹配 sandbox DB 中 `oauth_sandbox.private_key`。
+ *
+ * 背景：oauth `SandboxesService.list()` 对外脱敏时去掉了 PEM 首尾与所有空白，
+ * 用户从 UI 复制到的是纯 base64 body；而 sandbox `findByPrivateKeyMatch` 用
+ * `safeEqual(row.privateKey, privateKey)` 精确比对 DB 原值（完整 PEM）。两者不一致
+ * → 鉴权失败 4001。本函数把用户输入还原成 DB 侧的完整 PEM。
+ *
+ * 支持三种输入：
+ *  - 纯 base64 body（UI 复制）：重排 64 字符/行 + 加 BEGIN/END PRIVATE KEY 首尾 + 尾换行
+ *  - 带字面 \n 的 PEM（mock-cli 风格）：\n 转真换行
+ *  - 已带 PEM 首尾的真换行串：原样返回（补尾换行）
+ */
+function normalizePrivateKey(key) {
+    let k = (key ?? '').replace(/\\n/g, '\n').trim();
+    if (k.includes('-----BEGIN')) {
+        if (!k.endsWith('\n'))
+            k += '\n';
+        return k;
+    }
+    const body = k.replace(/\s/g, '');
+    if (!body)
+        return k;
+    const lines = body.match(/.{1,64}/g) ?? [body];
+    return `-----BEGIN PRIVATE KEY-----\n${lines.join('\n')}\n-----END PRIVATE KEY-----\n`;
+}
+//# sourceMappingURL=pem.js.map

package/dist/utils/pem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pem.js","sourceRoot":"","sources":["../../src/utils/pem.ts"],"names":[],"mappings":";;AAcA,kDAUC;AAxBD;;;;;;;;;;;;;GAaG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,CAAC,IAAI,IAAI,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,gCAAgC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC;AACzF,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@team-work/sandbox-client",
+  "version": "0.1.1-beta.0",
+  "description": "team-work sandbox CLI client — connect to sandbox WS server and accept remote shell / pty / file operations",
+  "bin": {
+    "tw": "dist/cli/index.js"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch --sourceMap",
+    "start": "node dist/cli/index.js",
+    "postinstall": "node scripts/fix-pty-perms.js",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "dist",
+    "scripts",
+    "README.md"
+  ],
+  "keywords": [
+    "team-work",
+    "sandbox",
+    "cli",
+    "websocket",
+    "pty"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "commander": "^12.1.0",
+    "node-pty": "^1.0.0",
+    "pino": "^9.5.0",
+    "ws": "^8.18.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "@types/ws": "^8.5.12",
+    "typescript": "^5.5.4"
+  }
+}

package/scripts/fix-pty-perms.js

@@ -0,0 +1,30 @@
+// node-pty 预编译二进制（prebuilds/<arch>/spawn-helper）经 npm 解包后常丢失可执行位，
+// 导致 pty.spawn 同步抛 `posix_spawnp failed.`(EACCES)，CLI 守护进程一开终端就崩。
+// postinstall 时补回 +x，保证各平台 prebuild 都可执行。
+const { chmodSync, existsSync, readdirSync, statSync } = require('node:fs');
+const { join } = require('node:path');
+
+const prebuildDir = join(__dirname, '..', 'node_modules', 'node-pty', 'prebuilds');
+if (!existsSync(prebuildDir)) {
+  // 无预编译包（从源码编译的场景）——跳过
+  process.exit(0);
+}
+
+let touched = 0;
+for (const arch of readdirSync(prebuildDir)) {
+  const dir = join(prebuildDir, arch);
+  if (!statSync(dir).isDirectory()) continue;
+  for (const bin of readdirSync(dir)) {
+    // spawn-helper 是 posix_spawn 拉起的可执行；pty.node 是 .node 动态库（也顺带补位，无害）
+    if (bin === 'spawn-helper' || bin.endsWith('.node')) {
+      const p = join(dir, bin);
+      try {
+        chmodSync(p, 0o755);
+        touched++;
+      } catch (err) {
+        console.warn(`[fix-pty-perms] chmod failed: ${p} (${err.message})`);
+      }
+    }
+  }
+}
+console.log(`[fix-pty-perms] ensured executable bit on ${touched} file(s) under node-pty/prebuilds`);