@wanghaopeng1148/deskpet 2.0.0

package/server/http/http-server.ts

@@ -0,0 +1,725 @@
+/**
+ * 管理台 HTTP 服务 — Express :3210（方案 §5.2 HTTP API，兼容浏览器直连）
+ *
+ * 职责:
+ *  1. /api/* REST 接口（任务/服务器/统计/设置）
+ *  2. 静态托管管理台 WebUI（out/renderer/dashboard 构建产物）
+ *  3. WebSocket 实时事件（配合 WsHub）
+ *
+ * 安全: 个人本机/局域网使用，不做权限体系；默认监听 127.0.0.1
+ */
+import type { Express, Request, Response } from 'express'
+import express from 'express'
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
+import type { TaskConfig } from '../../shared/types.ts'
+import { defaultTaskConfig } from '../db/task-repository.ts'
+import type { TaskRepository } from '../db/task-repository.ts'
+import type { ActionRegistry, SchedulerNotifier } from '../plugins/registry.ts'
+import type { ConfigStore } from '../services/config-store.ts'
+import type { TaskScheduler } from '../services/task-scheduler.ts'
+import type { WechatBot } from '../services/wechat-bot.ts'
+import { ScannerReader } from '../services/scanner-reader.ts'
+import type { SnapshotService } from '../services/snapshot-service.ts'
+import type { QuickActionsStore } from '../services/quick-actions-store.ts'
+import { testJenkinsConnection, testSshConnection } from '../services/remote-connector.ts'
+import type { ClipboardWatchRegistry } from '../services/clipboard-watcher.ts'
+import { resolveAssetRequest } from '../utils/asset-url.ts'
+import { detectPythonInterpreters } from '../utils/python-interpreter.ts'
+import { moduleDir } from '../utils/paths.ts'
+import type { WsHub } from './ws-hub.ts'
+
+export interface HttpServerDeps {
+  scheduler: TaskScheduler
+  repo: TaskRepository
+  config: ConfigStore
+  notifier: SchedulerNotifier
+  registry: ActionRegistry
+  /** 实时事件广播（可选，测试时可省略） */
+  wsHub?: WsHub
+  /** 微信 Bot（可选，未接线时接口返回未接入） */
+  wechat?: WechatBot
+  /** 扫码枪（可选） */
+  scanner?: ScannerReader
+  /** 配置快照服务（可选） */
+  snapshots?: SnapshotService
+  /** 快捷指令存储（花瓣菜单，M5） */
+  quickActions?: QuickActionsStore
+  /** 剪贴板监听注册表（M5） */
+  clipboardWatch?: ClipboardWatchRegistry
+}
+
+/** 创建 Express 应用（不监听端口，便于测试） */
+export function createApp(deps: HttpServerDeps): Express {
+  const app = express()
+  app.use(express.json({ limit: '5mb' }))
+
+  // CORS — 允许局域网/开发跨域访问（个人工具，无鉴权）
+  app.use((req, res, next) => {
+    res.setHeader('Access-Control-Allow-Origin', '*')
+    res.setHeader('Access-Control-Allow-Methods', 'GET,POST,PUT,DELETE,OPTIONS')
+    res.setHeader('Access-Control-Allow-Headers', 'Content-Type')
+    if (req.method === 'OPTIONS') {
+      res.sendStatus(204)
+      return
+    }
+    next()
+  })
+
+  const wrap = (fn: (req: Request, res: Response) => unknown) =>
+    (req: Request, res: Response): void => {
+      Promise.resolve(fn(req, res)).catch((err) => {
+        console.error('[http] 接口异常:', err)
+        res.status(500).json({ error: String(err) })
+      })
+    }
+
+  /** Express5 路由参数归一化（可能为 string[]） */
+  const p = (v: string | string[] | undefined): string =>
+    Array.isArray(v) ? (v[0] ?? '') : (v ?? '')
+
+  // ── 仪表盘 ──────────────────────────────────────────────
+  app.get(
+    '/api/dashboard',
+    wrap((_req, res) => {
+      const tasks = deps.scheduler.listTasks()
+      const recent = deps.repo.getRecentExecutions(10)
+      const queueState = deps.scheduler.getQueueState()
+      res.json({
+        tasksTotal: tasks.length,
+        tasksEnabled: tasks.filter((t) => t.config.enabled).length,
+        runningTaskId: queueState.running?.id ?? null,
+        runningTaskName: queueState.running?.name ?? null,
+        queuedCount: queueState.queue.length,
+        recentExecutions: recent,
+        stats: computeStats(deps.repo)
+      })
+    })
+  )
+
+  // ── 任务 CRUD ───────────────────────────────────────────
+  app.get('/api/tasks', wrap((_req, res) => res.json(deps.scheduler.listTasks())))
+
+  app.post(
+    '/api/tasks',
+    wrap((req, res) => {
+      const body = req.body as Partial<TaskConfig>
+      const config = normalizeConfig(body)
+      const dto = deps.scheduler.createTask(config)
+      broadcastChanged(deps)
+      res.status(201).json(dto)
+    })
+  )
+
+  app.put(
+    '/api/tasks/:id',
+    wrap((req, res) => {
+      const body = req.body as Partial<TaskConfig>
+      const existing = deps.scheduler.getTask(p(req.params.id))
+      if (!existing) {
+        res.status(404).json({ error: '任务不存在' })
+        return
+      }
+      const merged = mergeConfig(existing.config, body)
+      const ok = deps.scheduler.updateTask(p(req.params.id), merged)
+      broadcastChanged(deps)
+      res.json({ ok })
+    })
+  )
+
+  app.delete(
+    '/api/tasks/:id',
+    wrap((req, res) => {
+      const ok = deps.scheduler.deleteTask(p(req.params.id))
+      broadcastChanged(deps)
+      res.json({ ok })
+    })
+  )
+
+  app.post(
+    '/api/tasks/:id/run',
+    wrap((req, res) => {
+      const id = p(req.params.id)
+      // 运行时可选传入参数（临时覆盖脚本默认参数，执行后自动恢复任务配置）
+      const raw = (req.body as { args?: unknown } | null)?.args
+      const args = Array.isArray(raw) ? raw.map(String).filter((s) => s !== '') : []
+      const ok = args.length
+        ? deps.scheduler.runTaskWithArgs(id, args)
+        : deps.scheduler.requestRun(id, 'manual')
+      res.json({ ok })
+    })
+  )
+
+  app.post(
+    '/api/tasks/:id/stop',
+    wrap((req, res) => {
+      const ok = deps.scheduler.stopTask(p(req.params.id))
+      res.json({ ok })
+    })
+  )
+
+  app.post(
+    '/api/tasks/:id/toggle',
+    wrap((req, res) => {
+      const t = deps.scheduler.getTask(p(req.params.id))
+      if (!t) {
+        res.status(404).json({ ok: false })
+        return
+      }
+      const ok = deps.scheduler.setEnabled(p(req.params.id), !t.config.enabled)
+      broadcastChanged(deps)
+      res.json({ ok, enabled: !t.config.enabled })
+    })
+  )
+
+  // ── 执行队列 ─────────────────────────────────────────────
+  /** 当前执行队列（运行中 + 排队中，按先后顺序） */
+  app.get(
+    '/api/queue',
+    wrap((_req, res) => {
+      res.json(deps.scheduler.getQueueState())
+    })
+  )
+
+  /** 清空排队中的任务（不终止正在运行的任务） */
+  app.post(
+    '/api/queue/clear',
+    wrap((_req, res) => {
+      const cleared = deps.scheduler.clearQueue()
+      broadcastChanged(deps)
+      res.json({ ok: true, cleared })
+    })
+  )
+
+  /** 全部停止：终止运行中的任务并清空队列 */
+  app.post(
+    '/api/queue/stop-all',
+    wrap((_req, res) => {
+      const r = deps.scheduler.stopAll()
+      broadcastChanged(deps)
+      res.json({ ok: true, ...r })
+    })
+  )
+
+  // ── 日志与历史 ───────────────────────────────────────────
+  app.get(
+    '/api/executions',
+    wrap((req, res) => {
+      const limit = clampInt(String(req.query.limit ?? 50), 1, 500)
+      res.json(deps.repo.getRecentExecutions(limit))
+    })
+  )
+
+  app.get(
+    '/api/tasks/:id/logs',
+    wrap((req, res) => {
+      const limit = clampInt(String(req.query.limit ?? 50), 1, 500)
+      const offset = clampInt(String(req.query.offset ?? 0), 0, 100000)
+      res.json(deps.repo.listExecutions(p(req.params.id), limit, offset))
+    })
+  )
+
+  /** 任务本次执行的实时输出（运行中也能看；配合 WS 事件 task-output 增量追加） */
+  app.get(
+    '/api/tasks/:id/output',
+    wrap((req, res) => {
+      res.json(deps.scheduler.getLiveOutput(p(req.params.id)))
+    })
+  )
+
+  app.get(
+    '/api/tasks/:id/history',
+    wrap((req, res) => {
+      res.json(deps.repo.listExecutions(p(req.params.id), 200))
+    })
+  )
+
+  // ── 统计 ────────────────────────────────────────────────
+  app.get(
+    '/api/stats',
+    wrap((_req, res) => {
+      res.json(computeStats(deps.repo))
+    })
+  )
+
+  // ── 动作清单（供任务表单选择） ───────────────────────────
+  app.get(
+    '/api/actions',
+    wrap((_req, res) => {
+      res.json(deps.registry.list())
+    })
+  )
+
+  // ── 设置 ────────────────────────────────────────────────
+  app.get(
+    '/api/settings',
+    wrap((_req, res) => {
+      res.json(deps.config.get())
+    })
+  )
+
+  app.put(
+    '/api/settings',
+    wrap((req, res) => {
+      deps.config.update(req.body as never)
+      res.json({ ok: true, settings: deps.config.get() })
+    })
+  )
+
+  // ── Linux 服务器 / Jenkins（远程执行） ───────────────────
+  /** 服务器列表（脱敏：不下发密码） */
+  app.get(
+    '/api/servers',
+    wrap((_req, res) => {
+      const servers = (deps.config.get().servers ?? []).map((s) => ({
+        id: s.id,
+        name: s.name,
+        host: s.host,
+        port: s.port,
+        username: s.username
+      }))
+      res.json({ servers })
+    })
+  )
+
+  /** 测试 SSH 连通性（不落库，直接测传入的凭据） */
+  app.post(
+    '/api/servers/test',
+    wrap(async (req, res) => {
+      const body = (req.body ?? {}) as {
+        host?: string
+        port?: number
+        username?: string
+        password?: string
+      }
+      res.json(await testSshConnection(body))
+    })
+  )
+
+  /** 测试 Jenkins 地址与账号 */
+  app.post(
+    '/api/jenkins/test',
+    wrap(async (req, res) => {
+      const body = (req.body ?? {}) as { url?: string; username?: string; password?: string }
+      res.json(await testJenkinsConnection(body))
+    })
+  )
+
+  // ── Python 解释器 ───────────────────────────────────────
+  /** 探测本机可用的 Python 解释器（任务表单「解释器」下拉用；已跳过 Store 别名存根） */
+  app.get(
+    '/api/python/interpreters',
+    wrap((_req, res) => {
+      res.json({ interpreters: detectPythonInterpreters() })
+    })
+  )
+
+  // ── 微信 Bot（M4） ──────────────────────────────────────
+  app.post(
+    '/api/wechat/login',
+    wrap((_req, res) => {
+      if (!deps.wechat) {
+        res.json({ ok: false, message: '微信模块未接入' })
+        return
+      }
+      const ok = deps.wechat.startLogin()
+      res.json({ ok, message: ok ? '已发起扫码登录' : '已有登录流程在进行中' })
+    })
+  )
+
+  app.get(
+    '/api/wechat/status',
+    wrap((_req, res) => {
+      if (!deps.wechat) {
+        res.json({
+          status: 'idle',
+          statusText: '模块未接入',
+          connected: false,
+          sessionAlive: false,
+          listening: false,
+          botId: '',
+          pushTarget: '',
+          linkedAt: '',
+          qrContent: null
+        })
+        return
+      }
+      res.json(deps.wechat.getStatus())
+    })
+  )
+
+  app.post(
+    '/api/wechat/login/cancel',
+    wrap((_req, res) => {
+      deps.wechat?.cancelLogin()
+      res.json({ ok: true })
+    })
+  )
+
+  app.post(
+    '/api/wechat/test',
+    wrap(async (_req, res) => {
+      if (!deps.wechat) {
+        res.json({ ok: false, message: '微信模块未接入' })
+        return
+      }
+      const r = await deps.wechat.sendTestMessage()
+      if (r.ok) deps.repo.insertWechatMessage('out', '[测试] 连通性测试消息')
+      res.json(r)
+    })
+  )
+
+  app.post(
+    '/api/wechat/disconnect',
+    wrap((_req, res) => {
+      if (!deps.wechat) {
+        res.json({ ok: false, message: '微信模块未接入' })
+        return
+      }
+      deps.wechat.disconnect()
+      broadcastChanged(deps)
+      res.json({ ok: true })
+    })
+  )
+
+  app.get(
+    '/api/wechat/messages',
+    wrap((req, res) => {
+      const limit = clampInt(String(req.query.limit ?? 100), 1, 500)
+      res.json(deps.repo.listWechatMessages(limit))
+    })
+  )
+
+  // ── 扫码枪（M4） ────────────────────────────────────────
+  app.get(
+    '/api/scanner/ports',
+    wrap(async (_req, res) => {
+      const ports = await ScannerReader.listPorts()
+      res.json({ ports })
+    })
+  )
+
+  app.get(
+    '/api/scanner/status',
+    wrap((_req, res) => {
+      const diag = deps.scanner?.getDiagnostics() ?? null
+      res.json({
+        available: !!deps.scanner,
+        running: deps.scanner?.isRunning ?? false,
+        connected: deps.scanner?.isConnected ?? false,
+        error: diag?.lastError ?? null,
+        lastStatus: diag?.lastStatus ?? null,
+        settings: deps.config.get().scanner
+      })
+    })
+  )
+
+  app.post(
+    '/api/scanner/start',
+    wrap(async (_req, res) => {
+      if (!deps.scanner) {
+        res.json({ ok: false, error: '扫码枪未初始化' })
+        return
+      }
+      const err = await deps.scanner.start()
+      res.json({ ok: err === null, error: err })
+    })
+  )
+
+  app.post(
+    '/api/scanner/stop',
+    wrap((_req, res) => {
+      deps.scanner?.stop()
+      res.json({ ok: true })
+    })
+  )
+
+  // ── 快捷指令（花瓣菜单，M5） ────────────────────────────
+  app.get(
+    '/api/quick-actions',
+    wrap((_req, res) => {
+      res.json(deps.quickActions ? deps.quickActions.load() : [])
+    })
+  )
+
+  app.put(
+    '/api/quick-actions',
+    wrap((req, res) => {
+      if (!deps.quickActions) {
+        res.status(404).json({ error: '快捷指令未接入' })
+        return
+      }
+      const actions = (req.body as { actions?: unknown }).actions
+      if (!Array.isArray(actions)) {
+        res.status(400).json({ error: 'body 需为 {actions: [...]}' })
+        return
+      }
+      deps.quickActions.save(actions as never[])
+      deps.wsHub?.broadcast('quick-actions-changed', {})
+      res.json({ ok: true })
+    })
+  )
+
+  // ── 备份与快照（M5） ────────────────────────────────────
+  app.get(
+    '/api/backup/snapshots',
+    wrap((_req, res) => {
+      res.json(deps.snapshots ? deps.snapshots.list() : [])
+    })
+  )
+
+  app.post(
+    '/api/backup/snapshot',
+    wrap((_req, res) => {
+      if (!deps.snapshots) {
+        res.status(404).json({ error: '快照服务未接入' })
+        return
+      }
+      const id = deps.snapshots.snapshot('manual')
+      res.json({ ok: true, id })
+    })
+  )
+
+  app.delete(
+    '/api/backup/snapshots/:id',
+    wrap((req, res) => {
+      const ok = deps.snapshots?.remove(parseInt(p(req.params.id), 10)) ?? false
+      res.json({ ok })
+    })
+  )
+
+  app.post(
+    '/api/backup/restore/:id',
+    wrap((req, res) => {
+      if (!deps.snapshots) {
+        res.status(404).json({ error: '快照服务未接入' })
+        return
+      }
+      const ok = deps.snapshots.restore(parseInt(p(req.params.id), 10))
+      if (ok) {
+        broadcastChanged(deps)
+        deps.wsHub?.broadcast('config-restored', {})
+      }
+      res.json({ ok })
+    })
+  )
+
+  app.get(
+    '/api/backup/export',
+    wrap((_req, res) => {
+      if (!deps.snapshots) {
+        res.status(404).json({ error: '备份服务未接入' })
+        return
+      }
+      const pack = deps.snapshots.exportPackData()
+      res.setHeader('Content-Type', 'application/json; charset=utf-8')
+      res.setHeader(
+        'Content-Disposition',
+        `attachment; filename="deskpet-backup-${new Date().toISOString().slice(0, 10)}.deskpet"`
+      )
+      res.send(JSON.stringify(pack, null, 2))
+    })
+  )
+
+  app.post(
+    '/api/backup/import',
+    wrap((req, res) => {
+      if (!deps.snapshots) {
+        res.status(404).json({ error: '备份服务未接入' })
+        return
+      }
+      const body = req.body as { pack?: string } | null
+      const jsonText =
+        typeof body?.pack === 'string'
+          ? body.pack
+          : typeof req.body === 'string'
+            ? String(req.body)
+            : JSON.stringify(req.body)
+      const r = deps.snapshots.importPack(jsonText)
+      if (r.ok) {
+        broadcastChanged(deps)
+        deps.wsHub?.broadcast('config-restored', {})
+      }
+      res.json(r)
+    })
+  )
+
+  // ── 剪贴板监听规则（M5） ────────────────────────────────
+  app.get(
+    '/api/clipboard-watch',
+    wrap((_req, res) => {
+      res.json(deps.clipboardWatch ? deps.clipboardWatch.list() : [])
+    })
+  )
+
+  // ── Webhook 入站触发（外部系统 → 任务） ─────────────────
+  app.post(
+    '/api/hooks/:taskId',
+    wrap((req, res) => {
+      const taskId = p(req.params.taskId)
+      const rec = deps.scheduler.getTask(taskId)
+      if (!rec) {
+        res.status(404).json({ ok: false, error: `任务不存在: ${taskId}` })
+        return
+      }
+      if (!rec.config.enabled) {
+        res.json({ ok: false, error: '任务已禁用' })
+        return
+      }
+      // body.args: string（按空白拆分）或 string[]；仅脚本任务支持参数
+      const raw = (req.body as { args?: unknown } | null)?.args
+      let args: string[] = []
+      if (typeof raw === 'string') args = raw.trim().split(/\s+/).filter(Boolean)
+      else if (Array.isArray(raw)) args = raw.map(String)
+
+      let ok: boolean
+      if (args.length && rec.config.action === 'python_script') {
+        ok = deps.scheduler.runTaskWithArgs(taskId, args)
+      } else {
+        ok = deps.scheduler.requestRun(taskId, 'trigger')
+      }
+      deps.wsHub?.broadcast('webhook-received', { taskId, taskName: rec.config.name })
+      res.json({ ok, taskId, args: args.length ? args : undefined })
+    })
+  )
+
+  // ── 本地资源分发（皮肤精灵图等，取代 deskpet:// 协议） ────
+  app.get(
+    '/api/assets',
+    wrap((req, res) => {
+      const abs = resolveAssetRequest(req.query.path)
+      if (!abs) {
+        res.status(404).json({ error: '资源不存在或无访问权限' })
+        return
+      }
+      res.sendFile(abs)
+    })
+  )
+
+  // ── 静态托管管理台 SPA ───────────────────────────────────
+  const staticRoot = resolveStaticRoot()
+  if (staticRoot && existsSync(staticRoot)) {
+    app.use(express.static(staticRoot))
+    // '/' 与 '/index.html' → dashboard
+    app.get('/', (_req, res) => {
+      res.sendFile(join(staticRoot, 'dashboard/index.html'))
+    })
+    app.get('/dashboard', (_req, res) => {
+      res.sendFile(join(staticRoot, 'dashboard/index.html'))
+    })
+  } else {
+    // 未构建前端时给出提示，避免直接 404 无从排查
+    app.get('/', (_req, res) => {
+      res
+        .status(200)
+        .type('text/plain; charset=utf-8')
+        .send('DeskPet 服务已启动，但未找到前端构建产物。请先执行 npm run build:web。')
+    })
+  }
+
+  // API 404 兜底（在静态之后）
+  app.use('/api', (_req, res) => {
+    res.status(404).json({ error: '接口不存在' })
+  })
+
+  return app
+}
+
+function broadcastChanged(deps: HttpServerDeps): void {
+  deps.wsHub?.broadcast('tasks-changed', { ts: Date.now() })
+}
+
+/** 统计聚合：今日执行、7 天成功率、平均耗时、每日趋势、失败 Top */
+function computeStats(repo: TaskRepository) {
+  const rows = repo.listExecutions(undefined, 1000)
+  const dayStart = new Date()
+  dayStart.setHours(0, 0, 0, 0)
+  const weekAgo = Date.now() - 7 * 24 * 3600 * 1000
+
+  let todayTotal = 0
+  let todaySuccess = 0
+  let weekTotal = 0
+  let weekSuccess = 0
+  let weekDuration = 0
+  const trendMap = new Map<string, { total: number; success: number }>()
+  const failMap = new Map<string, { name: string; fails: number; lastError: string }>()
+
+  for (const r of rows) {
+    const t = new Date(r.startedAt).getTime()
+    const dateKey = r.startedAt.slice(0, 10)
+    const trend = trendMap.get(dateKey) ?? { total: 0, success: 0 }
+    trend.total += 1
+    if (r.status === 'completed') trend.success += 1
+    trendMap.set(dateKey, trend)
+
+    if (r.status === 'completed') {
+      weekSuccess += 1
+    }
+    weekTotal += 1
+    weekDuration += r.durationMs ?? 0
+
+    if (t >= dayStart.getTime()) {
+      todayTotal += 1
+      if (r.status === 'completed') todaySuccess += 1
+    }
+
+    if (r.status === 'failed' || r.status === 'timeout') {
+      const f = failMap.get(r.taskId) ?? { name: r.taskName, fails: 0, lastError: '' }
+      f.fails += 1
+      f.lastError = r.error || f.lastError
+      failMap.set(r.taskId, f)
+    }
+  }
+  void weekAgo
+
+  return {
+    today: { total: todayTotal, success: todaySuccess },
+    successRate7d: weekTotal > 0 ? Math.round((weekSuccess / weekTotal) * 1000) / 10 : null,
+    avgDurationMs7d: weekTotal > 0 ? Math.round(weekDuration / weekTotal) : null,
+    dailyTrend: [...trendMap.entries()]
+      .sort(([a], [b]) => (a < b ? -1 : 1))
+      .slice(-14)
+      .map(([date, v]) => ({ date, ...v })),
+    topFailures: [...failMap.entries()]
+      .sort(([, a], [, b]) => b.fails - a.fails)
+      .slice(0, 5)
+      .map(([taskId, v]) => ({ taskId, ...v }))
+  }
+}
+
+function normalizeConfig(body: Partial<TaskConfig>): TaskConfig {
+  const base = defaultTaskConfig()
+  const merged = mergeConfig(base, body)
+  if (!merged.name) merged.name = `任务 ${new Date().toLocaleString('zh-CN')}`
+  return merged
+}
+
+function mergeConfig(base: TaskConfig, patch: Partial<TaskConfig>): TaskConfig {
+  return {
+    ...base,
+    ...patch,
+    trigger: { ...base.trigger, ...(patch.trigger ?? {}) },
+    actionParams: { ...(base.actionParams ?? {}), ...(patch.actionParams ?? {}) },
+    scriptArgs: patch.scriptArgs ?? base.scriptArgs,
+    notifyChannels: patch.notifyChannels ?? base.notifyChannels
+  }
+}
+
+function clampInt(v: unknown, min: number, max: number): number {
+  const n = typeof v === 'number' ? v : parseInt(String(v), 10)
+  if (!Number.isFinite(n)) return min
+  return Math.max(min, Math.min(max, Math.floor(n)))
+}
+
+/** 静态资源根目录：优先 vite 构建产物 dist/web，兼容旧路径 out/renderer */
+function resolveStaticRoot(): string | null {
+  const candidates = [
+    join(moduleDir(), '../../dist/web'),
+    join(moduleDir(), '../renderer'),
+    join(process.cwd(), 'dist/web')
+  ]
+  for (const root of candidates) {
+    if (existsSync(join(root, 'dashboard/index.html'))) return root
+  }
+  return null
+}