@wwkit/sshproxy 1.0.1

package/src/contains.json5

@@ -0,0 +1,33 @@
+{
+  paths: {
+    stateDir: '~/.local/share/sshproxy',
+    pidFile: 'proxy.pid',
+    chromePidFile: 'proxy-chrome.pid',
+    webPidFile: 'proxy-web.pid',
+    sshDir: '~/.ssh',
+    sshConfigFile: 'config',
+  },
+  ssh: {
+    keyCandidates: ['id_ed25519', 'id_rsa', 'id_ecdsa'],
+    defaultKeyName: 'id_ed25519',
+    defaultPort: 22,
+    keygenComment: 'sshproxy',
+    keepAliveInterval: 30,
+    keepAliveCountMax: 3,
+    aliasPrefix: 'client-proxy',
+  },
+  tunnel: {
+    autosshArgs: ['-M', '0', '-N', '-f'],
+  },
+  os: {
+    macNetworkServices: ['Wi-Fi', 'Ethernet'],
+    macNetworkDefault: 'Wi-Fi',
+  },
+  debug: {
+    curlUrl: 'https://www.google.com',
+    curlTimeoutMs: 15000,
+  },
+  web: {
+    pollIntervalMs: 3000,
+  },
+}

package/src/index.js

@@ -0,0 +1,4 @@
+export { ProxyManager } from './ProxyManager.js'
+export { SshClient } from './SshClient.js'
+export { loadConfig, defaultConfig, getConfigPath, getConfigDir, getProxyConfig, clientAddr, sshAlias } from './config.js'
+export { initClient } from './init.js'

package/src/init.js

@@ -0,0 +1,141 @@
+import fs from 'node:fs'
+import path from 'node:path'
+import { spawnSync } from 'node:child_process'
+
+import { clientAddr, getResolvedStaticConfig, loadConfig, sshAlias } from './config.js'
+import { getOsType, which } from './OSystem.js'
+import { SshClient } from './SshClient.js'
+
+function ensureLocalKey() {
+  const s = getResolvedStaticConfig()
+  const sshDir = s.paths.sshDir
+  for (const name of s.ssh.keyCandidates) {
+    const pubPath = path.join(sshDir, `${name}.pub`)
+    if (fs.existsSync(pubPath)) {
+      return fs.readFileSync(pubPath, 'utf-8').trim()
+    }
+  }
+  const keyPath = path.join(sshDir, s.ssh.defaultKeyName)
+  fs.mkdirSync(sshDir, { recursive: true })
+  const result = spawnSync('ssh-keygen', ['-t', 'ed25519', '-C', s.ssh.keygenComment, '-N', '', '-f', keyPath], { encoding: 'utf-8' })
+  if (result.status !== 0) return null
+  const pubPath = `${keyPath}.pub`
+  if (fs.existsSync(pubPath)) {
+    return fs.readFileSync(pubPath, 'utf-8').trim()
+  }
+  return null
+}
+
+function writeSshConfig(host, user, port, alias, localPort) {
+  const s = getResolvedStaticConfig()
+  const configPath = s.paths.sshConfigFile
+  const portLine = port && Number(port) !== 22 ? `\n    Port ${port}` : ''
+  const entry = `
+Host ${alias}
+    HostName ${host}
+    User ${user}${portLine}
+    DynamicForward ${localPort}
+    ServerAliveInterval ${s.ssh.keepAliveInterval}
+    ServerAliveCountMax ${s.ssh.keepAliveCountMax}
+`
+  let content = ''
+  if (fs.existsSync(configPath)) {
+    content = fs.readFileSync(configPath, 'utf-8')
+  }
+  if (content.includes(`Host ${alias}`)) {
+    return true
+  }
+  fs.appendFileSync(configPath, entry, 'utf-8')
+  return true
+}
+
+function checkAutossh() {
+  return which('autossh') !== null
+}
+
+function installAutossh() {
+  const osType = getOsType()
+  let installCmd = null
+  if (osType === 'mac') {
+    installCmd = ['brew', 'install', 'autossh']
+  } else if (osType === 'linux') {
+    if (which('apt-get') !== null) {
+      installCmd = ['apt-get', 'install', '-y', 'autossh']
+    } else if (which('dnf') !== null) {
+      installCmd = ['dnf', 'install', '-y', 'autossh']
+    }
+  }
+  if (!installCmd) return '当前系统不支持自动安装 autossh，请手动安装'
+  const result = spawnSync(installCmd[0], installCmd.slice(1), { encoding: 'utf-8' })
+  if (result.status !== 0) {
+    return `安装失败: ${(result.stderr ?? '').trim()}，请手动执行: ${installCmd.join(' ')}`
+  }
+  return 'autossh 已安装'
+}
+
+export async function initClient() {
+  const lines = []
+  const [localHost, localPort] = clientAddr()
+  const alias = sshAlias(localPort)
+  const sshCfg = loadConfig()
+
+  lines.push('[1/5] 检查 SSH 密钥...')
+  const pubKey = ensureLocalKey()
+  if (!pubKey) {
+    lines.push('  ✗ 无法生成密钥，请手动执行: ssh-keygen -t ed25519')
+    return lines
+  }
+  lines.push('  ✓ 密钥就绪')
+
+  lines.push('[2/5] 检查 SSH 连接配置...')
+  const host = (sshCfg.host ?? '').trim()
+  const user = (sshCfg.user ?? '').trim()
+  const password = sshCfg.password ?? ''
+  const port = sshCfg.port
+  const missing = []
+  if (!host) missing.push('host')
+  if (!user) missing.push('user')
+  if (!password) missing.push('password')
+  if (port === undefined || port === null || port === '' || Number.isNaN(Number(port))) missing.push('port')
+  if (missing.length > 0) {
+    lines.push(`  ✗ 配置缺失: ${missing.join(', ')}`)
+    lines.push('  请先在 ~/.config/sshproxy/config.json5 补全连接信息')
+    return lines
+  }
+  const client = new SshClient()
+  if (!(await client.checkConnection())) {
+    lines.push('  ✗ SSH 连接失败，请检查网络或服务器状态')
+    return lines
+  }
+  lines.push(`  ✓ SSH 连接正常 (${host})`)
+
+  lines.push('[3/5] 安装公钥到远程服务器...')
+  const command = (
+    `mkdir -p ~/.ssh && chmod 700 ~/.ssh && `
+    + `grep -qF '${pubKey}' ~/.ssh/authorized_keys 2>/dev/null || `
+    + `echo '${pubKey}' >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys`
+  )
+  const [code, , err] = await client.execute(command)
+  if (code !== 0) {
+    lines.push(`  ✗ 安装公钥失败: ${(err ?? '').trim()}`)
+    return lines
+  }
+  lines.push('  ✓ 公钥已安装')
+
+  lines.push('[4/5] 配置 ~/.ssh/config...')
+  writeSshConfig(host, user, port, alias, localPort)
+  lines.push(`  ✓ ${alias} 配置已写入`)
+
+  lines.push('[5/5] 检查 autossh...')
+  if (checkAutossh()) {
+    lines.push('  ✓ autossh 就绪')
+  } else {
+    lines.push('  autossh 未安装，正在安装...')
+    const msg = installAutossh()
+    lines.push(`  ${msg.startsWith('✓') || msg === 'autossh 已安装' ? '✓' : '✗'} ${msg}`)
+  }
+
+  lines.push('')
+  lines.push(`初始化完成！执行 sshproxy tunnel on 启动隧道 (SOCKS5 ${localHost}:${localPort})`)
+  return lines
+}

package/src/web/public/index.html

@@ -0,0 +1,302 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>sshproxy 管理页</title>
+  <style>
+    :root {
+      --bg: #f5f7fa;
+      --surface: #ffffff;
+      --border: #e4e7ed;
+      --text: #303133;
+      --text-secondary: #909399;
+      --primary: #409eff;
+      --success: #67c23a;
+      --danger: #f56c6c;
+      --info: #909399;
+      --warning: #e6a23c;
+      --radius: 8px;
+    }
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", "PingFang SC", "Microsoft YaHei", sans-serif;
+      background: var(--bg);
+      color: var(--text);
+      font-size: 14px;
+      line-height: 1.6;
+    }
+    .page { max-width: 1280px; margin: 0 auto; padding: 24px 16px 48px; }
+    header { margin-bottom: 20px; }
+    header h1 { font-size: 22px; font-weight: 600; }
+    header p { color: var(--text-secondary); font-size: 13px; margin-top: 4px; }
+    .card {
+      background: var(--surface);
+      border: 1px solid var(--border);
+      border-radius: var(--radius);
+      padding: 20px 24px;
+      margin-bottom: 16px;
+    }
+    .row { display: flex; align-items: center; gap: 12px; padding: 6px 0; }
+    .label { flex-shrink: 0; width: 110px; color: var(--text-secondary); font-size: 13px; }
+    .value { font-size: 14px; word-break: break-all; }
+    .mono { font-family: "SF Mono", "Menlo", "Consolas", monospace; }
+    .tag {
+      display: inline-block; padding: 1px 8px; border-radius: 4px; font-size: 12px; line-height: 20px;
+      color: #fff; border: none;
+    }
+    .tag.primary { background: var(--primary); }
+    .tag.success { background: var(--success); }
+    .tag.info { background: var(--info); }
+    .tag.warning { background: var(--warning); }
+    .actions { display: flex; gap: 16px; flex-wrap: wrap; }
+    .action-group { flex: 1; min-width: 150px; }
+    .action-group h3 { font-size: 13px; font-weight: 600; margin-bottom: 10px; }
+    .btn {
+      display: inline-flex; align-items: center; gap: 6px;
+      padding: 8px 16px; border-radius: 4px; border: 1px solid transparent;
+      font-size: 14px; cursor: pointer; color: #fff; margin-right: 8px;
+      white-space: nowrap;
+      transition: opacity .2s;
+    }
+    .btn:hover { opacity: .85; }
+    .btn:disabled { opacity: .5; cursor: not-allowed; }
+    .btn.primary { background: var(--primary); }
+    .btn.danger { background: var(--danger); }
+    .btn.ghost { background: var(--surface); color: var(--primary); border-color: var(--primary); }
+    .btn.loading { opacity: .6; pointer-events: none; }
+    .toolbar { display: flex; justify-content: space-between; align-items: center; margin-bottom: 12px; }
+    .debug-toolbar { display: flex; justify-content: space-between; align-items: center; margin-bottom: 12px; }
+    .debug-toolbar h3 { margin: 0; }
+    .debug-row { display: flex; align-items: center; gap: 10px; padding: 6px 10px; background: var(--bg); border-radius: 4px; margin-bottom: 6px; }
+    .debug-mark { flex-shrink: 0; width: 18px; font-weight: 700; text-align: center; font-family: "SF Mono", Menlo, monospace; }
+    .debug-mark.ok { color: var(--success); }
+    .debug-mark.fail { color: var(--danger); }
+    .debug-mark.skipped { color: var(--info); }
+    .debug-name { flex-shrink: 0; font-size: 13px; }
+    .debug-detail { flex: 1; font-size: 12px; color: var(--text-secondary); word-break: break-all; }
+    .note { margin-top: 12px; font-size: 12px; color: var(--text-secondary); font-style: italic; }
+    #msg { margin-top: 12px; font-size: 13px; }
+    #msg.ok { color: var(--success); }
+    #msg.err { color: var(--danger); }
+    .refresh-hint { font-size: 12px; color: var(--text-secondary); }
+  </style>
+</head>
+<body>
+  <div class="page">
+    <header>
+      <h1>sshproxy 管理页</h1>
+      <p>SOCKS5 代理管理（本地 SSH 隧道）</p>
+    </header>
+
+    <div class="card">
+      <div class="toolbar">
+        <button class="btn ghost" id="refreshBtn">刷新</button>
+        <span class="refresh-hint" id="refreshHint"></span>
+      </div>
+      <div id="statusGrid"></div>
+    </div>
+
+    <div class="card">
+      <h3 style="margin-bottom:12px;">操作</h3>
+      <div class="actions">
+        <div class="action-group">
+          <h3>隧道</h3>
+          <button class="btn primary" id="tunnelOnBtn" disabled>开启隧道</button>
+          <button class="btn danger" id="tunnelOffBtn" disabled>关闭隧道</button>
+        </div>
+        <div class="action-group">
+          <h3>系统代理</h3>
+          <button class="btn primary" id="proxyOnBtn" disabled>开启代理</button>
+          <button class="btn danger" id="proxyOffBtn" disabled>关闭代理</button>
+        </div>
+        <div class="action-group">
+          <h3>代理 Chrome</h3>
+          <button class="btn primary" id="chromeOnBtn" disabled>启动 Chrome</button>
+          <button class="btn danger" id="chromeOffBtn" disabled>关闭 Chrome</button>
+        </div>
+        <div class="action-group">
+          <h3>一键</h3>
+          <button class="btn primary" id="startBtn" disabled>全部开启</button>
+          <button class="btn danger" id="stopBtn" disabled>全部关闭</button>
+        </div>
+      </div>
+      <div id="msg"></div>
+    </div>
+
+    <div class="card">
+      <div class="debug-toolbar">
+        <h3>debug 检查</h3>
+        <button class="btn ghost" id="debugBtn">全链路检查</button>
+      </div>
+      <div id="debugList"><p style="color:var(--text-secondary);font-size:13px;">点击"全链路检查"开始验证</p></div>
+    </div>
+  </div>
+
+  <script type="module">
+    const $ = (id) => document.getElementById(id)
+    let status = null
+    let acting = null
+    let pollIntervalMs = 3000
+
+    const esc = (s) => String(s ?? '').replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]))
+
+    async function api(method, path, body) {
+      const resp = await fetch(path, {
+        method,
+        headers: { 'Content-Type': 'application/json' },
+        body: body ? JSON.stringify(body) : undefined,
+      })
+      return resp.json()
+    }
+
+    async function refreshStatus() {
+      try {
+        const resp = await api('GET', '/api/status')
+        if (resp.code !== 200) throw new Error(resp.message)
+        status = resp.data
+        renderStatus()
+        renderButtons()
+      } catch (err) {
+        setMsg(err.message || String(err), true)
+      }
+    }
+
+    function renderStatus() {
+      const s = status
+      if (!s) return
+      const rows = []
+      rows.push(['地址', `<span class="value mono">${esc(s.host)}:${s.port}</span>`])
+      rows.push(['代理隧道', s.tunnel && s.tunnel.running
+        ? `<span class="tag success">运行中${s.tunnel.pid ? ` (PID=${s.tunnel.pid})` : ''}</span>`
+        : '<span class="tag info">未运行</span>'])
+      rows.push(['系统代理', s.system_proxy && s.system_proxy.enabled
+        ? '<span class="tag success">已开启</span>'
+        : '<span class="tag info">已关闭</span>'])
+      rows.push(['代理 Chrome', s.chrome && s.chrome.running
+        ? `<span class="tag success">运行中${s.chrome.pid ? ` (PID=${s.chrome.pid})` : ''}</span>`
+        : '<span class="tag info">未运行</span>'])
+      $('statusGrid').innerHTML = rows.map(([label, html]) =>
+        `<div class="row"><span class="label">${esc(label)}</span>${html}</div>`).join('')
+    }
+
+    function renderButtons() {
+      if (!status) return
+      const tunnelRunning = status.tunnel && status.tunnel.running
+      const proxyRunning = status.system_proxy && status.system_proxy.enabled
+      const chromeRunning = status.chrome && status.chrome.running
+      $('tunnelOnBtn').disabled = tunnelRunning
+      $('tunnelOffBtn').disabled = !tunnelRunning
+      $('proxyOnBtn').disabled = proxyRunning
+      $('proxyOffBtn').disabled = !proxyRunning
+      $('chromeOnBtn').disabled = chromeRunning
+      $('chromeOffBtn').disabled = !chromeRunning
+      $('startBtn').disabled = proxyRunning
+      $('stopBtn').disabled = !(proxyRunning || tunnelRunning || chromeRunning)
+    }
+
+    function setMsg(text, isErr) {
+      const el = $('msg')
+      el.textContent = text
+      el.className = isErr ? 'err' : 'ok'
+      if (text) setTimeout(() => { el.textContent = '' }, 4000)
+    }
+
+    async function doAction(action, btnId) {
+      if (acting) return
+      acting = action
+      const btn = $(btnId)
+      btn.classList.add('loading')
+      btn.disabled = true
+      try {
+        let resp
+        if (action === 'start') resp = await api('POST', '/api/start')
+        else if (action === 'stop') resp = await api('POST', '/api/stop')
+        else if (action === 'tunnelOn') resp = await api('POST', '/api/tunnel', { action: 'on' })
+        else if (action === 'tunnelOff') resp = await api('POST', '/api/tunnel', { action: 'off' })
+        else if (action === 'proxyOn') resp = await api('POST', '/api/proxy', { action: 'on' })
+        else if (action === 'proxyOff') resp = await api('POST', '/api/proxy', { action: 'off' })
+        else if (action === 'chromeOn') resp = await api('POST', '/api/chrome', { action: 'on' })
+        else if (action === 'chromeOff') resp = await api('POST', '/api/chrome', { action: 'off' })
+        if (resp.code === 200) setMsg(resp.message, false)
+        else setMsg(resp.message, true)
+      } catch (err) {
+        setMsg(err.message || String(err), true)
+      } finally {
+        acting = null
+        btn.classList.remove('loading')
+        await refreshStatus()
+      }
+    }
+
+    async function onDebug() {
+      $('debugBtn').classList.add('loading')
+      $('debugBtn').disabled = true
+      try {
+        const resp = await api('POST', '/api/debug')
+        const checks = resp.data ?? []
+        $('debugList').innerHTML = checks.map((c) => {
+          const mark = c.ok === null ? '—' : (c.ok ? '✓' : '✗')
+          const cls = c.ok === null ? 'skipped' : (c.ok ? 'ok' : 'fail')
+          return `<div class="debug-row"><span class="debug-mark ${cls}">${mark}</span>` +
+                 `<span class="debug-name">${esc(c.name)}</span>` +
+                 (c.detail ? `<span class="debug-detail">${esc(c.detail)}</span>` : '') + `</div>`
+        }).join('')
+        await refreshStatus()
+      } catch (err) {
+        setMsg(err.message || String(err), true)
+      } finally {
+        $('debugBtn').classList.remove('loading')
+        $('debugBtn').disabled = false
+      }
+    }
+
+    async function loadConfig() {
+      try {
+        const resp = await api('GET', '/api/config')
+        if (resp.code === 200 && resp.data && resp.data.web) {
+          pollIntervalMs = resp.data.web.pollIntervalMs ?? 3000
+        }
+      } catch (err) {
+        setMsg(err.message || String(err), true)
+      }
+    }
+
+    let autoTimer = null
+    function startAutoRefresh() {
+      stopAutoRefresh()
+      autoTimer = setInterval(() => {
+        api('GET', '/api/status').then((resp) => {
+          if (resp.code === 200) {
+            status = resp.data
+            renderStatus()
+            renderButtons()
+          }
+        }).catch(() => {})
+      }, pollIntervalMs)
+    }
+    function stopAutoRefresh() {
+      if (autoTimer) { clearInterval(autoTimer); autoTimer = null }
+    }
+    document.addEventListener('visibilitychange', () => {
+      if (document.hidden) stopAutoRefresh()
+      else startAutoRefresh()
+    })
+
+    $('refreshBtn').addEventListener('click', refreshStatus)
+    $('tunnelOnBtn').addEventListener('click', () => doAction('tunnelOn', 'tunnelOnBtn'))
+    $('tunnelOffBtn').addEventListener('click', () => doAction('tunnelOff', 'tunnelOffBtn'))
+    $('proxyOnBtn').addEventListener('click', () => doAction('proxyOn', 'proxyOnBtn'))
+    $('proxyOffBtn').addEventListener('click', () => doAction('proxyOff', 'proxyOffBtn'))
+    $('chromeOnBtn').addEventListener('click', () => doAction('chromeOn', 'chromeOnBtn'))
+    $('chromeOffBtn').addEventListener('click', () => doAction('chromeOff', 'chromeOffBtn'))
+    $('startBtn').addEventListener('click', () => doAction('start', 'startBtn'))
+    $('stopBtn').addEventListener('click', () => doAction('stop', 'stopBtn'))
+    $('debugBtn').addEventListener('click', onDebug)
+
+    refreshStatus()
+    loadConfig()
+    startAutoRefresh()
+  </script>
+</body>
+</html>

package/src/web/server.js

@@ -0,0 +1,126 @@
+import fs from 'node:fs'
+import http from 'node:http'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { ProxyManager } from '../ProxyManager.js'
+import { getResolvedStaticConfig, loadConfig } from '../config.js'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const PUBLIC_DIR = path.join(__dirname, 'public')
+const MIME = {
+  '.html': 'text/html; charset=utf-8',
+  '.js': 'text/javascript; charset=utf-8',
+  '.css': 'text/css; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.svg': 'image/svg+xml',
+  '.png': 'image/png',
+  '.ico': 'image/x-icon',
+}
+
+function json(res, statusCode, data) {
+  const body = JSON.stringify(data)
+  res.writeHead(statusCode, { 'Content-Type': 'application/json; charset=utf-8' })
+  res.end(body)
+}
+
+function sendFile(res, filePath) {
+  const ext = path.extname(filePath).toLowerCase()
+  res.writeHead(200, { 'Content-Type': MIME[ext] ?? 'application/octet-stream' })
+  fs.createReadStream(filePath).pipe(res)
+}
+
+function readBody(req) {
+  return new Promise((resolve) => {
+    let data = ''
+    req.on('data', (chunk) => { data += chunk })
+    req.on('end', () => {
+      if (!data) return resolve({})
+      try {
+        resolve(JSON.parse(data))
+      } catch {
+        resolve({})
+      }
+    })
+  })
+}
+
+export async function startServer({ host, port } = {}) {
+  const cfg = loadConfig().web ?? {}
+  const listenHost = host ?? cfg.host ?? '127.0.0.1'
+  const listenPort = port ?? cfg.port ?? 1081
+  const manager = new ProxyManager()
+
+  const server = http.createServer(async (req, res) => {
+    const url = new URL(req.url, `http://${req.headers.host}`)
+    const pathname = url.pathname
+
+    try {
+      if (req.method === 'GET' && pathname === '/api/status') {
+        return json(res, 200, { code: 200, data: manager.getStatus() })
+      }
+      if (req.method === 'GET' && pathname === '/api/config') {
+        return json(res, 200, { code: 200, data: getResolvedStaticConfig() })
+      }
+      if (req.method === 'POST' && pathname === '/api/tunnel') {
+        const body = await readBody(req)
+        const result = body.action === 'off' ? await manager.tunnelStop() : await manager.tunnelStart()
+        return json(res, 200, { code: result.ok ? 200 : 500, message: result.message })
+      }
+      if (req.method === 'POST' && pathname === '/api/proxy') {
+        const body = await readBody(req)
+        const result = body.action === 'off' ? await manager.proxyOff() : await manager.proxyOn()
+        return json(res, 200, { code: result.ok ? 200 : 500, message: result.message })
+      }
+      if (req.method === 'POST' && pathname === '/api/chrome') {
+        const body = await readBody(req)
+        const result = body.action === 'off' ? await manager.chromeStop() : await manager.chromeStart()
+        return json(res, 200, { code: result.ok ? 200 : 500, message: result.message, pid: result.pid })
+      }
+      if (req.method === 'POST' && pathname === '/api/start') {
+        const result = await manager.start()
+        if (!result.ok) return json(res, 200, { code: 500, message: result.message })
+        return json(res, 200, { code: 200, message: result.message })
+      }
+      if (req.method === 'POST' && pathname === '/api/stop') {
+        const result = await manager.stop()
+        return json(res, 200, { code: 200, message: result.message })
+      }
+      if (req.method === 'POST' && pathname === '/api/debug') {
+        const data = await manager.debug()
+        return json(res, 200, { code: 200, data })
+      }
+
+      if (req.method === 'GET' && (pathname === '/' || pathname === '/index.html')) {
+        return sendFile(res, path.join(PUBLIC_DIR, 'index.html'))
+      }
+      if (req.method === 'GET' && pathname.startsWith('/assets/')) {
+        const safe = path.normalize(pathname.replace(/^\/+/, ''))
+        const filePath = path.join(PUBLIC_DIR, safe)
+        if (fs.existsSync(filePath) && filePath.startsWith(PUBLIC_DIR)) {
+          return sendFile(res, filePath)
+        }
+      }
+
+      json(res, 404, { code: 404, message: 'Not Found' })
+    } catch (err) {
+      json(res, 500, { code: 500, message: String(err?.message ?? err) })
+    }
+  })
+
+  await new Promise((resolve, reject) => {
+    server.once('error', reject)
+    server.listen(listenPort, listenHost, () => resolve())
+  })
+
+  console.log(`sshproxy web 管理页: http://${listenHost}:${listenPort}`)
+  return server
+}
+
+const isMain = process.argv[1] && process.argv[1].endsWith('server.js')
+if (isMain) {
+  startServer().catch((err) => {
+    console.error(err?.message ?? err)
+    process.exit(1)
+  })
+}