@xcanwin/manyoyo 5.8.10 → 5.9.0

package/lib/web/frontend/markdown.css

@@ -72,5 +72,13 @@
 
 .bubble .md-content a {
     color: #8a4f17;
-    text-decoration-color: rgba(138, 79, 23, 0.45);
+    text-decoration-line: underline;
+    text-decoration-thickness: 2px;
+    text-underline-offset: 0.16em;
+    text-decoration-color: rgba(138, 79, 23, 0.8);
+}
+
+.bubble .md-content a:hover,
+.bubble .md-content a:focus-visible {
+    text-decoration-color: #8a4f17;
 }

package/lib/web/server.js

@@ -34,6 +34,7 @@ const WEB_TERMINAL_MIN_ROWS = 12;
 const WEB_AGENT_CONTEXT_MAX_MESSAGES = 24;
 const WEB_AGENT_CONTEXT_MAX_CHARS = 6000;
 const WEB_AGENT_CONTEXT_PER_MESSAGE_MAX_CHARS = 600;
+const WEB_FILE_PREVIEW_MAX_BYTES = 256 * 1024;
 const WEB_AUTH_COOKIE_NAME = 'manyoyo_web_auth';
 const WEB_AUTH_TTL_SECONDS = 12 * 60 * 60;
 const WEB_SESSION_KEY_SEPARATOR = '~';
@@ -109,6 +110,24 @@ const MIME_TYPES = {
     '.js': 'application/javascript; charset=utf-8',
     '.html': 'text/html; charset=utf-8'
 };
+const FILE_LANGUAGE_MAP = {
+    '.cjs': 'javascript',
+    '.css': 'css',
+    '.htm': 'html',
+    '.html': 'html',
+    '.java': 'javascript',
+    '.js': 'javascript',
+    '.json': 'json',
+    '.jsx': 'javascript',
+    '.md': 'markdown',
+    '.markdown': 'markdown',
+    '.mjs': 'javascript',
+    '.py': 'python',
+    '.ts': 'javascript',
+    '.tsx': 'javascript',
+    '.yaml': 'yaml',
+    '.yml': 'yaml'
+};
 
 function formatUrlHost(host) {
     if (typeof host !== 'string' || !host) return '127.0.0.1';
@@ -2537,6 +2556,156 @@ async function execCommandInWebContainer(ctx, containerName, command, options =
     });
 }
 
+function buildWebContainerNodeCommand(scriptSource) {
+    return `node <<'__MANYOYO_NODE__'
+${scriptSource}
+__MANYOYO_NODE__`;
+}
+
+function inferFileLanguage(filePath) {
+    const ext = path.extname(String(filePath || '')).toLowerCase();
+    return FILE_LANGUAGE_MAP[ext] || 'text';
+}
+
+async function execJsonCommandInWebContainer(ctx, containerName, command) {
+    const result = await execCommandInWebContainer(ctx, containerName, command);
+    if (result.exitCode !== 0) {
+        throw new Error(result.output || '容器命令执行失败');
+    }
+    try {
+        return JSON.parse(String(result.output || '{}'));
+    } catch (e) {
+        throw new Error('容器返回了无法解析的 JSON');
+    }
+}
+
+function buildContainerFileListCommand(requestedPath) {
+    return buildWebContainerNodeCommand(`
+// __MANYOYO_FS_LIST__
+const fs = require('fs');
+const path = require('path');
+
+const requestedPath = ${JSON.stringify(String(requestedPath || '/'))};
+
+try {
+    const realPath = fs.realpathSync(requestedPath);
+    const stat = fs.statSync(realPath);
+    if (!stat.isDirectory()) {
+        throw new Error('目标不是目录: ' + realPath);
+    }
+
+    const root = path.parse(realPath).root;
+    const parentPath = realPath === root ? '' : path.dirname(realPath);
+    const entries = fs.readdirSync(realPath, { withFileTypes: true })
+        .map(entry => {
+            const fullPath = path.join(realPath, entry.name);
+            let itemStat = null;
+            try {
+                itemStat = fs.lstatSync(fullPath);
+            } catch (e) {
+                itemStat = null;
+            }
+            let kind = 'other';
+            if (entry.isDirectory()) {
+                kind = 'directory';
+            } else if (entry.isFile()) {
+                kind = 'file';
+            } else if (entry.isSymbolicLink()) {
+                kind = 'symlink';
+            }
+            return {
+                name: entry.name,
+                path: fullPath,
+                kind,
+                size: itemStat && typeof itemStat.size === 'number' ? itemStat.size : 0,
+                mtimeMs: itemStat && typeof itemStat.mtimeMs === 'number' ? Math.floor(itemStat.mtimeMs) : 0
+            };
+        })
+        .sort((a, b) => {
+            if (a.kind !== b.kind) {
+                if (a.kind === 'directory') return -1;
+                if (b.kind === 'directory') return 1;
+            }
+            return a.name.localeCompare(b.name, 'zh-CN');
+        });
+
+    process.stdout.write(JSON.stringify({
+        path: realPath,
+        parentPath,
+        entries
+    }));
+} catch (e) {
+    process.stdout.write(JSON.stringify({
+        error: e && e.message ? e.message : '读取目录失败'
+    }));
+}
+`);
+}
+
+function buildContainerFileReadCommand(requestedPath) {
+    return buildWebContainerNodeCommand(`
+// __MANYOYO_FS_READ__
+const fs = require('fs');
+
+const requestedPath = ${JSON.stringify(String(requestedPath || ''))};
+const maxBytes = ${String(WEB_FILE_PREVIEW_MAX_BYTES)};
+
+function looksBinary(buffer) {
+    const length = Math.min(buffer.length, 4096);
+    let suspicious = 0;
+    for (let i = 0; i < length; i += 1) {
+        const byte = buffer[i];
+        if (byte === 0) {
+            return true;
+        }
+        if (byte < 7 || (byte > 13 && byte < 32)) {
+            suspicious += 1;
+        }
+    }
+    return length > 0 && (suspicious / length) > 0.12;
+}
+
+try {
+    const realPath = fs.realpathSync(requestedPath);
+    const stat = fs.statSync(realPath);
+    if (!stat.isFile()) {
+        throw new Error('目标不是文件: ' + realPath);
+    }
+
+    const size = stat.size;
+    const readBytes = Math.min(size, maxBytes);
+    const buffer = Buffer.alloc(readBytes);
+    const fd = fs.openSync(realPath, 'r');
+    try {
+        fs.readSync(fd, buffer, 0, readBytes, 0);
+    } finally {
+        fs.closeSync(fd);
+    }
+
+    if (looksBinary(buffer)) {
+        process.stdout.write(JSON.stringify({
+            path: realPath,
+            kind: 'binary',
+            size,
+            truncated: size > maxBytes
+        }));
+    } else {
+        process.stdout.write(JSON.stringify({
+            path: realPath,
+            kind: 'text',
+            size,
+            truncated: size > maxBytes,
+            content: buffer.toString('utf8')
+        }));
+    }
+} catch (e) {
+    process.stdout.write(JSON.stringify({
+        error: e && e.message ? e.message : '读取文件失败'
+    }));
+}
+`);
+}
+
 async function execAgentInWebContainerStream(ctx, state, sessionRefOrContainerName, command, options = {}) {
     const opts = options && typeof options === 'object' ? options : {};
     const sessionRef = typeof sessionRefOrContainerName === 'string'
@@ -3435,6 +3604,61 @@ async function handleWebApi(req, res, pathname, ctx, state) {
                 });
             }
         },
+        {
+            method: 'GET',
+            match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/fs\/list$/),
+            handler: async match => {
+                const sessionRef = getValidSessionRef(ctx, res, match[1]);
+                if (!sessionRef) {
+                    return;
+                }
+                const requestUrl = new URL(req.url || '/api/sessions/x/fs/list', 'http://localhost');
+                const targetPath = String(requestUrl.searchParams.get('path') || '/').trim() || '/';
+
+                await ensureWebContainer(ctx, state, sessionRef.containerName, sessionRef);
+                const payload = await execJsonCommandInWebContainer(
+                    ctx,
+                    sessionRef.containerName,
+                    buildContainerFileListCommand(targetPath)
+                );
+                if (payload && payload.error) {
+                    sendJson(res, 400, { error: payload.error });
+                    return;
+                }
+                sendJson(res, 200, payload);
+            }
+        },
+        {
+            method: 'GET',
+            match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/fs\/read$/),
+            handler: async match => {
+                const sessionRef = getValidSessionRef(ctx, res, match[1]);
+                if (!sessionRef) {
+                    return;
+                }
+                const requestUrl = new URL(req.url || '/api/sessions/x/fs/read', 'http://localhost');
+                const targetPath = String(requestUrl.searchParams.get('path') || '').trim();
+                if (!targetPath) {
+                    sendJson(res, 400, { error: 'path 不能为空' });
+                    return;
+                }
+
+                await ensureWebContainer(ctx, state, sessionRef.containerName, sessionRef);
+                const payload = await execJsonCommandInWebContainer(
+                    ctx,
+                    sessionRef.containerName,
+                    buildContainerFileReadCommand(targetPath)
+                );
+                if (payload && payload.error) {
+                    sendJson(res, 400, { error: payload.error });
+                    return;
+                }
+                if (payload && payload.kind === 'text') {
+                    payload.language = inferFileLanguage(payload.path);
+                }
+                sendJson(res, 200, payload);
+            }
+        },
         {
             method: 'GET',
             match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/detail$/),
@@ -3872,7 +4096,12 @@ async function startWebServer(options) {
             const appFrontendMatch = pathname.match(/^\/app\/frontend\/([A-Za-z0-9._-]+)$/);
             if (req.method === 'GET' && appFrontendMatch) {
                 const assetName = appFrontendMatch[1];
-                if (!(assetName === 'app.css' || assetName === 'app.js' || assetName === 'markdown.css' || assetName === 'markdown-renderer.js')) {
+                if (!(assetName === 'app.css'
+                    || assetName === 'app.js'
+                    || assetName === 'markdown.css'
+                    || assetName === 'markdown-renderer.js'
+                    || assetName === 'file-browser.js'
+                    || assetName === 'codemirror.bundle.js')) {
                     sendHtml(res, 404, '<h1>404 Not Found</h1>');
                     return;
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@xcanwin/manyoyo",
-    "version": "5.8.10",
+    "version": "5.9.0",
     "imageVersion": "1.9.0-common",
     "playwrightCliVersion": "0.1.1",
     "description": "AI Agent CLI Security Sandbox for Docker and Podman",
@@ -31,6 +31,7 @@
     },
     "scripts": {
         "dev:release": "node scripts/dev-release.js",
+        "build:web-editor": "node scripts/build-web-code-editor.js",
         "install-link": "npm link",
         "test": "jest --coverage",
         "test:unit": "jest test/",
@@ -66,6 +67,19 @@
         "ws": "^8.20.0"
     },
     "devDependencies": {
+        "@codemirror/commands": "^6.10.3",
+        "@codemirror/lang-css": "^6.3.1",
+        "@codemirror/lang-html": "^6.4.11",
+        "@codemirror/lang-javascript": "^6.2.5",
+        "@codemirror/lang-json": "^6.0.2",
+        "@codemirror/lang-markdown": "^6.5.0",
+        "@codemirror/lang-python": "^6.2.1",
+        "@codemirror/lang-yaml": "^6.1.3",
+        "@codemirror/language": "^6.12.3",
+        "@codemirror/search": "^6.6.0",
+        "@codemirror/state": "^6.6.0",
+        "@codemirror/view": "^6.41.0",
+        "codemirror": "^6.0.2",
         "jest": "^30.3.0",
         "vitepress": "^1.6.4"
     },