@wonseok-han/confluence-sync 1.7.0 → 2.0.0

package/dist/web/server.js

@@ -1,30 +1,43 @@
 import { createServer } from 'node:http';
 import { randomBytes } from 'node:crypto';
-import { readdir, realpath, stat, readFile, mkdtemp, rm } from 'node:fs/promises';
-import { resolve, dirname, basename, join, relative, extname } from 'node:path';
-import { homedir, tmpdir } from 'node:os';
+import { realpath, stat, readFile } from 'node:fs/promises';
+import { resolve, extname } from 'node:path';
+import { homedir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 import { execFile, spawn } from 'node:child_process';
 import { promisify } from 'node:util';
-import { collectMarkdown } from '../documents/catalog.js';
 import { webPage } from './views/workspace.js';
-import { createWebSync } from './sync.js';
+import { createWorkspaceApi } from './workspace-api.js';
 import { chooseFolder } from './folder-dialog.js';
-import { within, canonical, publishOutput, OverwriteRequired } from './output.js';
+import { readPkgVersion } from '../shared/version.js';
 const execute = promisify(execFile);
 const message = (error) => error instanceof Error ? error.message : String(error);
+export function deployedUi(value) {
+    const url = new URL(value);
+    if (url.username || url.password || url.pathname !== '/' || url.search || url.hash || (url.protocol !== 'https:' && !(url.protocol === 'http:' && ['127.0.0.1', 'localhost', '[::1]'].includes(url.hostname))))
+        throw new Error('--ui에는 경로·쿼리 없는 HTTPS 웹 주소를 지정하세요. 로컬 개발 주소는 HTTP도 가능합니다.');
+    return url;
+}
 export async function startWeb(options = {}) {
+    const ui = options.ui ? deployedUi(options.ui) : undefined;
+    const remoteToken = ui ? randomBytes(32).toString('hex') : undefined;
     const start = await realpath(resolve(options.start ?? homedir()));
     if (!(await stat(start)).isDirectory())
         throw new Error('시작 경로가 폴더가 아닙니다.');
     const token = randomBytes(32).toString('hex');
+    const previewNonce = randomBytes(24).toString('hex');
     let origin = '';
     const allowedHosts = new Set();
-    let busy = false;
-    let picking = false;
     const assetsRoot = fileURLToPath(new URL('../../dist/web/assets/', import.meta.url));
-    const results = new Set();
-    const sync = createWebSync(options.syncRunner);
+    const api = createWorkspaceApi({ start, previewNonce, syncRunner: options.syncRunner,
+        pickFolder: options.pickFolder ?? chooseFolder,
+        open: async (path) => { const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'explorer.exe' : 'xdg-open'; await execute(command, [path], { timeout: 10_000 }); },
+        convert: async (args) => {
+            const source = import.meta.url.endsWith('.ts');
+            const worker = fileURLToPath(new URL(source ? '../conversion/worker.ts' : '../conversion/worker.js', import.meta.url));
+            return execute(process.execPath, [...(source ? process.execArgv : []), worker, ...args], { env: { ...process.env, NO_COLOR: '1' }, timeout: 120_000, maxBuffer: 2 * 1024 * 1024 });
+        },
+    });
     const server = createServer(async (req, res) => {
         const json = (status, value) => {
             res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8' });
@@ -32,12 +45,39 @@ export async function startWeb(options = {}) {
         };
         res.setHeader('Cache-Control', 'no-store');
         res.setHeader('X-Content-Type-Options', 'nosniff');
-        res.setHeader('Content-Security-Policy', "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; worker-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'");
+        res.setHeader('Content-Security-Policy', `default-src 'self'; script-src 'self' 'nonce-${previewNonce}'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-src 'self'; font-src 'self'; worker-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'`);
+        const remote = !!req.headers.origin && req.headers.origin === ui?.origin;
         if (!req.headers.host || !allowedHosts.has(req.headers.host)
-            || (req.headers.origin && req.headers.origin !== `http://${req.headers.host}`)) {
+            || (req.headers.origin && !remote && req.headers.origin !== `http://${req.headers.host}`)) {
             json(403, { error: '이 웹 화면에서만 요청할 수 있습니다.' });
             return;
         }
+        if (remote) {
+            res.setHeader('Access-Control-Allow-Origin', ui.origin);
+            res.setHeader('Vary', 'Origin');
+            if (!req.url?.startsWith('/api/')) {
+                json(403, { error: '로컬 API만 연결할 수 있습니다.' });
+                return;
+            }
+            if (req.method === 'OPTIONS') {
+                const headers = String(req.headers['access-control-request-headers'] ?? '').toLowerCase().split(',').map(s => s.trim()).filter(Boolean);
+                if (!['GET', 'POST'].includes(String(req.headers['access-control-request-method'])) || headers.some(h => !['x-csync-token', 'content-type'].includes(h))) {
+                    json(403, { error: '허용되지 않은 연결 요청입니다.' });
+                    return;
+                }
+                res.setHeader('Access-Control-Allow-Methods', 'GET, POST');
+                res.setHeader('Access-Control-Allow-Headers', 'X-Csync-Token, Content-Type');
+                if (req.headers['access-control-request-private-network'] === 'true')
+                    res.setHeader('Access-Control-Allow-Private-Network', 'true');
+                res.writeHead(204);
+                res.end();
+                return;
+            }
+            if (req.headers['x-csync-token'] !== remoteToken) {
+                json(403, { error: '로컬 실행기 연결이 만료되었습니다. 실행기의 연결 링크로 다시 연결하세요.' });
+                return;
+            }
+        }
         try {
             const url = new URL(req.url ?? '/', origin);
             if (req.method === 'GET' && url.pathname === '/') {
@@ -47,11 +87,11 @@ export async function startWeb(options = {}) {
             }
             if (req.method === 'GET' && url.pathname.startsWith('/assets/')) {
                 const path = resolve(assetsRoot, decodeURIComponent(url.pathname.slice('/assets/'.length)));
-                if (!within(assetsRoot, path)) {
+                if (!path.startsWith(assetsRoot)) {
                     json(403, { error: '잘못된 파일 경로입니다.' });
                     return;
                 }
-                const types = { '.js': 'text/javascript', '.css': 'text/css', '.ttf': 'font/ttf' };
+                const types = { '.js': 'text/javascript', '.css': 'text/css', '.ttf': 'font/ttf', '.png': 'image/png', '.svg': 'image/svg+xml', '.txt': 'text/plain; charset=utf-8' };
                 if (!types[extname(path)]) {
                     json(404, { error: '없는 파일입니다.' });
                     return;
@@ -60,238 +100,32 @@ export async function startWeb(options = {}) {
                 res.end(await readFile(path));
                 return;
             }
-            if (req.headers['x-csync-token'] !== token) {
+            if (!remote && req.headers['x-csync-token'] !== token) {
                 json(403, { error: '페이지를 새로고침해 주세요.' });
                 return;
             }
-            if (req.method === 'GET' && url.pathname === '/api/sync/job') {
-                json(200, { job: sync.current() });
-                return;
-            }
-            if (req.method === 'GET' && url.pathname === '/api/browse') {
-                const path = await realpath(url.searchParams.get('path') || start);
-                const entries = (await readdir(path, { withFileTypes: true }))
-                    .filter(e => !e.name.startsWith('.') && e.name !== 'node_modules' && (e.isDirectory() || (e.isFile() && /\.md$/i.test(e.name))))
-                    .map(e => ({ name: e.name, path: join(path, e.name), directory: e.isDirectory() }))
-                    .sort((a, b) => Number(b.directory) - Number(a.directory) || a.name.localeCompare(b.name, 'ko'));
-                json(200, { path, parent: dirname(path), home: homedir(), entries });
-                return;
-            }
-            if (req.method === 'GET' && url.pathname === '/api/search') {
-                const root = await realpath(url.searchParams.get('path') || start);
-                const query = (url.searchParams.get('q') || '').trim().normalize('NFC').toLocaleLowerCase();
-                if (!(await stat(root)).isDirectory())
-                    throw new Error('검색 기준 폴더를 확인해 주세요.');
-                const entries = [];
-                let skipped = 0;
-                const pending = query ? [root] : [];
-                while (pending.length) {
-                    if (res.destroyed)
-                        return;
-                    const dir = pending.pop();
-                    let children;
-                    try {
-                        children = await readdir(dir, { withFileTypes: true });
-                    }
-                    catch (error) {
-                        if (dir === root)
-                            throw error;
-                        skipped++;
-                        continue;
-                    }
-                    for (const entry of children) {
-                        if (entry.name.startsWith('.') || entry.name === 'node_modules')
-                            continue;
-                        const path = join(dir, entry.name);
-                        // Do not follow symlinks: avoid cycles and paths outside the selected tree.
-                        if (entry.isDirectory())
-                            pending.push(path);
-                        else if (entry.isFile() && /\.md$/i.test(entry.name)
-                            && entry.name.normalize('NFC').toLocaleLowerCase().includes(query)) {
-                            entries.push({ name: entry.name, path, relativePath: relative(root, path), directory: false });
-                        }
-                    }
-                }
-                entries.sort((a, b) => a.relativePath.localeCompare(b.relativePath, 'ko'));
-                json(200, { root, entries, skipped });
-                return;
-            }
-            if (req.method !== 'POST' || !['/api/convert', '/api/open', '/api/pick-folder', '/api/sync/config', '/api/sync/preview', '/api/sync/push'].includes(url.pathname)) {
-                json(404, { error: '없는 요청입니다.' });
-                return;
-            }
-            if (!req.headers['content-type']?.startsWith('application/json')) {
-                json(415, { error: 'JSON 요청이 필요합니다.' });
-                return;
-            }
-            let raw = '';
-            for await (const chunk of req) {
-                raw += chunk;
-                if (Buffer.byteLength(raw) > 16_384) {
-                    json(413, { error: '요청이 너무 큽니다.' });
-                    return;
-                }
-            }
-            const body = JSON.parse(raw);
-            if (!body || typeof body !== 'object' || Array.isArray(body))
-                throw new Error('요청 내용을 확인해 주세요.');
-            if (url.pathname === '/api/sync/config') {
-                if (typeof body.base !== 'string' || typeof body.envFile !== 'string')
-                    throw new Error('설정 경로를 확인해 주세요.');
-                json(200, await sync.config(body.base, body.envFile));
+            if (req.method === 'GET' && url.pathname === '/api/connection') {
+                json(200, { version: readPkgVersion(), mode: remote ? 'connector' : 'local' });
                 return;
             }
-            if (url.pathname === '/api/sync/preview' || url.pathname === '/api/sync/push') {
-                if (busy || sync.running()) {
-                    json(409, { error: '다른 작업이 진행 중입니다. 완료 후 다시 시도해 주세요.' });
+            let body;
+            if (req.method === 'POST') {
+                if (!req.headers['content-type']?.startsWith('application/json')) {
+                    json(415, { error: 'JSON 요청이 필요합니다.' });
                     return;
                 }
-                const job = url.pathname.endsWith('/preview') ? await sync.preview(body) : await sync.push(body.planId);
-                json(202, { job });
-                return;
-            }
-            if (url.pathname === '/api/pick-folder') {
-                if (picking) {
-                    json(409, { error: '이미 열린 폴더 다이얼로그를 먼저 닫아 주세요.' });
-                    return;
-                }
-                if (body.kind !== 'base' && body.kind !== 'out' && body.kind !== 'reference')
-                    throw new Error('폴더 선택 용도를 확인해 주세요.');
-                let initial = start;
-                if (typeof body.start === 'string' && body.start) {
-                    try {
-                        const path = await realpath(body.start);
-                        if ((await stat(path)).isDirectory())
-                            initial = path;
+                let raw = '';
+                for await (const chunk of req) {
+                    raw += chunk;
+                    if (Buffer.byteLength(raw) > 16_384) {
+                        json(413, { error: '요청이 너무 큽니다.' });
+                        return;
                     }
-                    catch { /* Use initial folder for new paths. */ }
-                }
-                if (picking) {
-                    json(409, { error: '이미 열린 폴더 다이얼로그를 먼저 닫아 주세요.' });
-                    return;
-                }
-                picking = true;
-                try {
-                    const selected = await (options.pickFolder ?? chooseFolder)(initial, body.kind === 'reference' ? '참조 문서의 동기화 폴더 선택' : body.kind === 'base' ? '문서의 기준 폴더 선택' : '변환 결과를 저장할 출력 폴더 선택');
-                    const path = selected ? await realpath(selected) : null;
-                    if (path && !(await stat(path)).isDirectory())
-                        throw new Error('폴더를 선택해 주세요.');
-                    json(200, { path });
-                }
-                finally {
-                    picking = false;
-                }
-                return;
-            }
-            if (url.pathname === '/api/open') {
-                if (typeof body.path !== 'string' || !results.has(body.path))
-                    throw new Error('이번 실행에서 저장한 결과만 열 수 있습니다.');
-                const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'explorer.exe' : 'xdg-open';
-                await execute(command, [body.path], { timeout: 10_000 });
-                json(200, { ok: true });
-                return;
-            }
-            if (busy || sync.running()) {
-                json(409, { error: '다른 작업이 진행 중입니다. 완료 후 다시 시도해 주세요.' });
-                return;
-            }
-            if (typeof body.base !== 'string' || typeof body.file !== 'string'
-                || !['markdown', 'obsidian', 'repair'].includes(body.to)
-                || typeof body.fix !== 'boolean' || typeof body.preview !== 'boolean')
-                throw new Error('변환 옵션을 확인해 주세요.');
-            const browseBase = await realpath(body.base);
-            const file = await realpath(body.file);
-            const scope = body.scope ?? 'legacy';
-            if (!['file', 'folder', 'legacy'].includes(scope))
-                throw new Error('파일 또는 폴더를 선택해 주세요.');
-            const info = await stat(file);
-            if (!(await stat(browseBase)).isDirectory() || !within(browseBase, file)
-                || (scope === 'folder' ? !info.isDirectory() : !info.isFile() || !/\.md$/i.test(file))) {
-                throw new Error('탐색 폴더 안의 Markdown 파일 또는 폴더를 선택해 주세요.');
-            }
-            const components = relative(browseBase, file).split(/[\\/]/);
-            if ((scope === 'folder' ? components : components.slice(0, -1)).some(p => p.startsWith('.') || p === 'node_modules')) {
-                throw new Error('숨김 폴더와 node_modules 안의 문서는 변환 대상이 아닙니다.');
-            }
-            const base = scope === 'legacy' ? browseBase : scope === 'folder' ? file : dirname(file);
-            if (dirname(base) === base)
-                throw new Error('문서가 있는 하위 폴더를 선택해 주세요.');
-            const documents = scope === 'folder' ? collectMarkdown(file) : [file];
-            if (!documents.length)
-                throw new Error('선택한 폴더에 변환할 Markdown 문서가 없습니다.');
-            if (body.out !== undefined && typeof body.out !== 'string')
-                throw new Error('출력 경로를 확인해 주세요.');
-            const approved = body.approvedOverwrites ?? {};
-            if (!approved || typeof approved !== 'object' || Array.isArray(approved)
-                || Object.values(approved).some(value => typeof value !== 'string' || !/^[a-f0-9]{64}$/.test(value)))
-                throw new Error('덮어쓰기 확인 정보를 확인해 주세요.');
-            const requestedOut = body.out?.trim() ? await canonical(resolve(body.out.trim())) : null;
-            if (requestedOut && (within(base, requestedOut) || within(requestedOut, base))) {
-                throw new Error('출력 폴더는 기준 폴더와 겹치지 않는 별도 경로로 지정해 주세요.');
-            }
-            // Validation above awaits filesystem reads; another request may have acquired the slot.
-            if (busy || sync.running()) {
-                json(409, { error: '다른 작업이 진행 중입니다. 완료 후 다시 시도해 주세요.' });
-                return;
-            }
-            busy = true;
-            let out;
-            let destination = null;
-            let generatedDestination = false;
-            let response;
-            let responseStatus = 200;
-            let saved;
-            try {
-                out = await mkdtemp(join(tmpdir(), 'csync-preview-'));
-                const args = ['--base', base, file, '--out', out];
-                if (body.to !== 'repair')
-                    args.push('--to', body.to);
-                if (body.fix || body.to === 'repair')
-                    args.push('--fix');
-                const fromSource = import.meta.url.endsWith('.ts');
-                const worker = fileURLToPath(new URL(fromSource ? '../conversion/worker.ts' : '../conversion/worker.js', import.meta.url));
-                const { stdout } = await execute(process.execPath, [...(fromSource ? process.execArgv : []), worker, ...args], {
-                    env: { ...process.env, NO_COLOR: '1' }, timeout: 120_000, maxBuffer: 2 * 1024 * 1024,
-                });
-                const readPreview = async (path) => {
-                    if ((await stat(path)).size > 200_000)
-                        return '문서가 200KB를 넘어 본문 미리보기를 생략합니다.';
-                    return readFile(path, 'utf8');
-                };
-                const previews = await Promise.all(documents.slice(0, 20).map(async (path) => ({
-                    path: relative(base, path), before: await readPreview(path), after: await readPreview(join(out, relative(base, path))),
-                })));
-                const { before, after } = previews[0];
-                if (!body.preview) {
-                    destination = requestedOut ?? await mkdtemp(join(dirname(base), `${basename(base)}-converted-`));
-                    generatedDestination = !requestedOut;
-                    saved = await publishOutput(out, destination, approved);
-                    results.add(destination);
                 }
-                response = { before, after, previews, saved, documentCount: documents.length, log: stdout.split(out).join(destination ?? '(미리보기)'), output: destination };
+                body = JSON.parse(raw);
             }
-            catch (error) {
-                if (destination && generatedDestination)
-                    await rm(destination, { recursive: true, force: true });
-                if (error instanceof OverwriteRequired) {
-                    responseStatus = 409;
-                    response = { error: error.message, code: 'OVERWRITE_REQUIRED', conflicts: error.conflicts };
-                }
-                else {
-                    const failure = error;
-                    throw new Error(failure.killed ? '변환 시간이 2분을 초과했습니다.' : failure.stderr?.trim() || message(error));
-                }
-            }
-            finally {
-                try {
-                    if (out)
-                        await rm(out, { recursive: true, force: true });
-                }
-                finally {
-                    busy = false;
-                }
-            }
-            json(responseStatus, response);
+            const response = await api.request(req.method ?? 'GET', url, body);
+            json(response.status, response.body);
         }
         catch (error) {
             if (!res.writableEnded)
@@ -327,19 +161,30 @@ export async function startWeb(options = {}) {
             throw error;
         }
     }
-    return { server, url: origin };
+    if (ui)
+        ui.hash = new URLSearchParams({ csyncEndpoint: origin, csyncToken: remoteToken }).toString();
+    return { server, url: origin, token, isRunning: api.isRunning, connectUrl: ui?.href };
 }
 export async function runWeb(argv) {
+    if (argv.includes('--hosted')) {
+        const { runHostedWeb } = await import('./hosted.js');
+        return runHostedWeb(argv);
+    }
     const value = (name) => { const i = argv.indexOf(name); return i < 0 ? undefined : argv[i + 1]; };
     const port = Number(value('--port') ?? 4318);
     if (!Number.isInteger(port) || port < 1 || port > 65535)
         throw new Error('--port는 1~65535 사이의 숫자여야 합니다.');
-    const { url, server } = await startWeb({ start: value('--base'), port });
+    const ui = value('--ui');
+    if (argv.includes('--ui') && !ui)
+        throw new Error('--ui 뒤에 배포 웹 주소를 지정하세요.');
+    const { url, server, connectUrl } = await startWeb({ start: value('--base'), port, ui });
     console.log(`문서 웹: ${url}\n로컬 주소: ${url.replace('127.0.0.1', 'localhost')}\n종료: Ctrl+C`);
+    if (connectUrl)
+        console.log(`배포 웹 연결: ${connectUrl}\n이 웹에 로컬 파일 작업 권한을 부여합니다. 연결 링크는 공유하지 마세요. csync 종료 시 연결 권한도 만료됩니다.`);
     if (!argv.includes('--no-open')) {
         const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'explorer.exe' : 'xdg-open';
-        const child = spawn(command, [url], { stdio: 'ignore' });
-        child.on('error', () => console.log(`브라우저에서 ${url} 을 열어 주세요.`));
+        const child = spawn(command, [connectUrl ?? url], { stdio: 'ignore' });
+        child.on('error', () => console.log('브라우저 자동 열기에 실패했습니다. 위 주소로 접속해 주세요.'));
         child.unref();
     }
     await new Promise(done => server.once('close', done));