@yep-ai/cli 1.0.2 → 1.0.3

package/README.md

@@ -5,14 +5,14 @@
 ## 安装与使用
 
 ```sh
-npx --yes @yep-ai/cli@latest --help
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep --help
 ```
 
-通过 npx 直接运行 npm 最新版，无需全局安装：
+通过 npx 直接运行本站已发布的设备节点安装包，无需全局安装：
 
 ```sh
-npx --yes @yep-ai/cli@latest --help
-npx --yes @yep-ai/cli@latest device start
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep --help
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep device start
 ```
 
 本包包含完整实现。`yep-cli` 是计划中的同版本入口包，当前尚未发布本项目版本，请使用 `@yep-ai/cli`。
@@ -26,31 +26,31 @@ npm install
 npm run yep -- --help
 npm run build:yep-node
 npm run pack:cli
-npm install --prefix ./tmp/yep-install ./dist/cli/scoped/yep-ai-cli-1.0.2.tgz ./dist/cli/unscoped/yep-cli-1.0.2.tgz
+npm install --prefix ./tmp/yep-install ./dist/cli/scoped/yep-ai-cli-1.0.3.tgz ./dist/cli/unscoped/yep-cli-1.0.3.tgz
 ./tmp/yep-install/node_modules/.bin/yep --version
 ```
 
-完整实现包为 `scoped/yep-ai-cli-1.0.2.tgz`，入口包为 `unscoped/yep-cli-1.0.2.tgz`。本地验证时可一起指定两份文件，无需从 npm 下载实现包。输出的 `manifest.json` 记录包名、版本、依赖和 SHA-256。
+完整实现包为 `scoped/yep-ai-cli-1.0.3.tgz`，入口包为 `unscoped/yep-cli-1.0.3.tgz`。本地验证时可一起指定两份文件，无需从 npm 下载实现包。输出的 `manifest.json` 记录包名、版本、依赖和 SHA-256。
 
 ## 市场与 Git 内容版本
 
 ```sh
-npx --yes @yep-ai/cli@latest login --registry https://yep.nihao.cool
-npx --yes @yep-ai/cli@latest whoami
-npx --yes @yep-ai/cli@latest search assistant
-npx --yes @yep-ai/cli@latest info @creator/demo
-npx --yes @yep-ai/cli@latest client set codex,claude
-npx --yes @yep-ai/cli@latest install @creator/demo --client codex
-npx --yes @yep-ai/cli@latest list
-npx --yes @yep-ai/cli@latest list --remote
-npx --yes @yep-ai/cli@latest list --mine
-npx --yes @yep-ai/cli@latest uninstall @creator/demo --client codex
-npx --yes @yep-ai/cli@latest publish ./my-skill
-npx --yes @yep-ai/cli@latest history @creator/demo
-npx --yes @yep-ai/cli@latest diff @creator/demo --base published
-npx --yes @yep-ai/cli@latest publish ./my-agent --kind agent
-npx --yes @yep-ai/cli@latest submit @creator/demo --kind agent
-npx --yes @yep-ai/cli@latest withdraw @creator/demo --kind agent
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep login --registry https://yep.nihao.cool
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep whoami
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep search assistant
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep info @creator/demo
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep client set codex,claude
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep install @creator/demo --client codex
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep list
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep list --remote
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep list --mine
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep uninstall @creator/demo --client codex
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep publish ./my-skill
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep history @creator/demo
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep diff @creator/demo --base published
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep publish ./my-agent --kind agent
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep submit @creator/demo --kind agent
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep withdraw @creator/demo --kind agent
 ```
 
 默认资源类型为 `skill`，也支持 `--kind agent|plugin`。Skill 私有保存后从网页申请共享审核；Agent/Plugin 的发布会提交审核。审核通过才进入公开市场。`history` 和 `diff` 访问服务端保留的真实 Git 版本。
@@ -60,20 +60,22 @@ npx --yes @yep-ai/cli@latest withdraw @creator/demo --kind agent
 ## 设备节点
 
 ```sh
-npx --yes @yep-ai/cli@latest device login
-npx --yes @yep-ai/cli@latest device start "/path/to/documents"
-npx --yes @yep-ai/cli@latest device status
-npx --yes @yep-ai/cli@latest device logout
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep device login
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep device start "/path/to/documents"
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep device status
+npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep device logout
 ```
 
 设备通过 HTTPS 配对和 WSS 出站连接；网页批准设备后，还需在某场咨询中选择目录和权限。目录不会整体上传。最多指定 5 个目录；指定目录时仅提供受限内置命令。不指定目录时，命令拥有当前系统用户的 shell 权限，可访问其他文件和网络。进程退出后节点离线，不安装后台服务。设备授权最长 24 小时，可以从网页或 CLI 撤销。
 
 节点上线后，可在「设备节点」点击「打开终端」。不指定启动目录时，npm 包内的 Go `yep-node` 为每个标签启动独立的真实 Shell：Windows 使用 ConPTY + cmd，macOS / Linux 使用 PTY + 当前用户的 Shell。输入直接进入终端，工作目录、变量和交互程序状态保留；支持 Ctrl+C、窗口尺寸变化和最多 4 个独立网页会话。AI 操作与网页终端分别执行，不共用工作目录或进程。关闭标签、撤销授权、节点退出或网络连接断开会终止对应 Shell；重连创建新会话，不重放命令。
 
+终端中的「＋」可选择文件浏览器，Windows 还可选择 CMD 或 PowerShell。标签显示实际 Shell 名称，同名时才编号；仅当前标签显示关闭按钮。文件浏览器显示设备上的完整路径，选中文件可在底部展开大小、修改时间等概要，通过自定义右键菜单下载文件或复制完整路径。受限模式只能访问已授权目录，并继续排除 CLI 私有凭据及符号链接；下载期间文件变化、设备断线或授权失效会中断下载。
+
 原生程序随 npm 包一起分发，无需用户安装 Go。当前构建目标为 Windows x64 / ARM64、macOS Intel / Apple Silicon、Linux x64 / ARM64；Windows 需要支持 ConPTY 的 Windows 10 1809 / Server 2019 或更新版本。鸿蒙 / OpenHarmony 原生 ABI 尚未适配，不能将 Linux ARM64 包视为鸿蒙包。缺少原生程序时会明确提示并提供兼容的逐条命令模式；受限目录始终使用内置命令模式，不启动系统 Shell。
 
 设备配对和网络通道使用 HTTPS / WSS；服务端保存令牌摘要，客户端每小时轮换设备令牌并保留短暂交接窗口，轮换不会延长原有 24 小时授权。客户端先持久化待交接凭据，断线后继续完成交接。TLS 在站点入口终止，集群内部连接不属于端到端加密。
-指定启动目录时仅支持 `pwd`、`ls` / `dir`、`echo`、`cat` / `type`、`head`、`tail`、`grep` / `findstr`、`wc -l` 与终端内的 `cd`，不能使用管道、重定向或外部程序。已有旧版节点若提示不支持终端，请停止旧进程，将原启动命令中的 `yep` 替换为 `npx --yes @yep-ai/cli@latest`，保留原目录参数。
+指定启动目录时仅支持 `pwd`、`ls` / `dir`、`echo`、`cat` / `type`、`head`、`tail`、`grep` / `findstr`、`wc -l` 与终端内的 `cd`，不能使用管道、重定向或外部程序。已有旧版节点若提示不支持终端，请停止旧进程，将原启动命令中的 `yep` 替换为 `npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep`，保留原目录参数。
 
 设备默认连接 `https://yep.nihao.cool`，使用本站时无需指定服务器。连接自建站点时可使用 `--server https://your-site.example`；只接受 HTTPS 源站（回环开发地址允许 HTTP），显式指定后记住该源站，令牌按源站隔离。市场登录不等于设备授权。
 
@@ -93,4 +95,4 @@ npx --yes @yep-ai/cli@latest device logout
 
 市场凭据保存为 `~/.config/yep/config.json`；设备身份和各源站的授权保存在 `~/.config/yep/devices/`。目录权限 `0700`、凭据文件 `0600`；Windows 使用当前用户专属 ACL。市场和设备令牌分别管理。域名改变后需要在新源站重新登录、配对，不会把旧源站令牌发送到新地址。
 
-执行 `npx --yes @yep-ai/cli@latest --help` 或 `npx --yes @yep-ai/cli@latest device --help` 查看全部选项。
+执行 `npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep --help` 或 `npx --yes --package=https://yep.nihao.cool/downloads/yep-cli-1.0.3.tgz yep device --help` 查看全部选项。

package/lib/device/client.js

@@ -4,7 +4,7 @@ import os from "node:os";
 import { createHash, randomUUID } from "node:crypto";
 import { spawn } from "node:child_process";
 import WebSocket from "ws";
-import { rootDescriptor, resolveSafe, list, execute, terminalDirectory } from "./tools.js";
+import { rootDescriptor, resolveSafe, list, execute, terminalDirectory, ownerFileList, ownerFileRead } from "./tools.js";
 import { findNativeBinary, NativeTerminal } from "./native-terminal.js";
 import { rotateDeviceCredential } from "./credential-rotation.js";
 const PROTOCOL = 2;
@@ -297,6 +297,29 @@ class DeviceAgent {
       throw new Error("Device authorization expired");
     }
     if (["terminal_exec", "terminal_cancel", "terminal_close"].includes(frame.type)) return this.terminalFrame(frame);
+    if (["owner_file_list", "owner_file_read"].includes(frame.type)) {
+      if (typeof frame.id !== "string" || !frame.id || this.active.has(frame.id) || this.active.size >= 8) throw new Error("Too many or duplicate local operations");
+      let root = this.roots.find(item => item.id === frame.folderId) ?? (!frame.folderId ? this.roots[0] : undefined);
+      let relative = frame.path ?? "";
+      if (frame.absolutePath) {
+        if (typeof frame.absolutePath !== "string" || frame.absolutePath.length > 4096 || !path.isAbsolute(frame.absolutePath) || /[\0\r\n]/u.test(frame.absolutePath)) throw new Error("Invalid absolute path");
+        const location = path.resolve(frame.absolutePath);
+        const matches = this.roots.filter(item => { const rel = path.relative(item.absolute, location); return rel === "" || rel !== ".." && !rel.startsWith(".." + path.sep) && !path.isAbsolute(rel); }).sort((a, b) => b.absolute.length - a.absolute.length);
+        root = matches[0];
+        if (!root) throw new Error("Path is outside authorized directories");
+        relative = path.relative(root.absolute, location).split(path.sep).join("/");
+      }
+      if (!root) throw new Error("Unknown file root");
+      const abort = new AbortController();
+      let complete;
+      const done = new Promise(resolve => { complete = resolve; });
+      this.active.set(frame.id, { abort, done });
+      try {
+        const result = frame.type === "owner_file_list" ? await ownerFileList(root, relative, frame.offset ?? 0) : await ownerFileRead(root, relative, frame.offset ?? 0, frame.version ?? "");
+        if (this.closed || abort.signal.aborted) throw new Error("Operation canceled");
+        return { type: "result", id: frame.id, ...result, ...(frame.type === "owner_file_list" ? { folders: this.roots.map(({ id, name, absolute }) => ({ id, name, absolutePath: absolute })) } : {}) };
+      } finally { this.active.delete(frame.id); complete(); }
+    }
     const base = { id: frame.id, consultationId: frame.consultationId, bindingId: frame.bindingId, roundId: frame.roundId };
     if (frame.type === "cancel") {
       await this.cancel(frame);
@@ -477,7 +500,7 @@ async function start(server, config, credential, directories, { name, noOpen, si
       signal?.addEventListener("abort", abort, { once: true });
       ws.on("open", () => {
         received();
-        ws.send(JSON.stringify({ type: "hello", protocol: PROTOCOL, consentVersion: "yep-device-v2", directoryMode: restricted ? "restricted" : "system", folders: agent.publicRoots(), commandsEnabled: true, fileSelection: true, capabilities: ["terminal", ...(native ? ["pty"] : [])] }));
+        ws.send(JSON.stringify({ type: "hello", protocol: PROTOCOL, consentVersion: "yep-device-v2", directoryMode: restricted ? "restricted" : "system", folders: agent.publicRoots(), commandsEnabled: true, fileSelection: true, capabilities: ["terminal", "files-v1", ...(native ? ["pty", "shell-selection"] : [])] }));
       });
       ws.on("ping", received);
       ws.on("pong", received);

package/lib/device/tools.js

@@ -105,6 +105,36 @@ async function list(root, relative = "", offset = 0, includeFiles = true) {
   }
   return { folderId: root.id, path: relative, parentPath: relative ? relative.split("/").slice(0, -1).join("/") : null, entries: page, offset, hasMore: offset + 200 < filtered.length };
 }
+// Owner-only browser operations. Absolute paths are returned only on this
+// protocol, never in public roots or AI bindings.
+async function ownerFileList(root, relative = "", offset = 0) {
+  const result = await list(root, relative, offset, true);
+  const entries = [];
+  for (const entry of result.entries) {
+    try {
+      const { absolute, stat } = await resolveSafe(root, entry.path);
+      entries.push({ ...entry, absolutePath: absolute, isDirectory: stat.isDirectory(), size: stat.isFile() ? stat.size : 0, modifiedAt: stat.mtime.toISOString() });
+    } catch { /* A removed or inaccessible entry does not break the directory. */ }
+  }
+  return { ...result, nextOffset: result.hasMore ? offset + 200 : null, absolutePath: (await resolveSafe(root, relative, "directory")).absolute, entries };
+}
+async function ownerFileRead(root, relative, offset = 0, version = "") {
+  if (!Number.isSafeInteger(offset) || offset < 0) throw new Error("Invalid file offset");
+  const resolved = await resolveSafe(root, relative, "file");
+  const fd = await pinnedOpen(root, relative);
+  try {
+    const before = await fd.stat();
+    const identity = `${before.dev}:${before.ino}:${before.size}:${before.mtimeMs}:${before.ctimeMs}`;
+    if (before.ino !== resolved.stat.ino || before.dev !== resolved.stat.dev || !before.isFile() || version && version !== identity) throw new Error("File changed during download; please retry");
+    if (offset > before.size) throw new Error("Invalid file offset");
+    const buffer = Buffer.alloc(Math.min(256 * 1024, before.size - offset));
+    const { bytesRead } = await fd.read(buffer, 0, buffer.length, offset);
+    const after = await fd.stat();
+    if (`${after.dev}:${after.ino}:${after.size}:${after.mtimeMs}:${after.ctimeMs}` !== identity) throw new Error("File changed during download; please retry");
+    await resolveSafe(root, relative, "file");
+    return { name: path.basename(relative), size: before.size, offset, version: identity, data: buffer.subarray(0, bytesRead).toString("base64"), eof: offset + bytesRead === before.size };
+  } finally { await fd.close(); }
+}
 function utf8(data) {
   const text = new TextDecoder("utf-8", { fatal: true }).decode(data);
   if (text.includes("\0")) throw new Error("File is not UTF-8 text");
@@ -337,6 +367,8 @@ export {
   execute,
   fileOperation,
   list,
+  ownerFileList,
+  ownerFileRead,
   resolveSafe,
   rootDescriptor,
   safeRelative,

package/native/manifest.json

@@ -1,34 +1,34 @@
 {
   "schema": 1,
-  "sourceSHA256": "800213014e6af32ed8b98749e832752b940ae638eaefa472aceb7b62e815b3e4",
+  "sourceSHA256": "de2d089833202ddf0943a16360b1d3e61229ffb4aa91c82d293d193c68152f55",
   "files": {
     "win32-x64/yep-node.exe": {
-      "sha256": "b3b4ae3515f9408e2535af8d1a926b92099892968b1493fd781092a1299afdfd",
+      "sha256": "4d02c921b40636278e1959e1080503210d5f7622a2bd712b026d1155d0195787",
       "goos": "windows",
       "goarch": "amd64"
     },
     "win32-arm64/yep-node.exe": {
-      "sha256": "73e46d8bfa35c599411c3c02adef068cd9e0e7ba317b4fa309d778381d214aac",
+      "sha256": "febcb2d56ddac514f16c6aa6d4d272c6113fbb8e82c7e09045fb36c242be9e2a",
       "goos": "windows",
       "goarch": "arm64"
     },
     "darwin-x64/yep-node": {
-      "sha256": "95bead46821a2800958d8dc865d67d9bfe83ac666b4796d046f2586b020989fc",
+      "sha256": "0ff37c8c6d45f82d1c5f112306ca5b4d2a16054c50b521536bb12c051df02e05",
       "goos": "darwin",
       "goarch": "amd64"
     },
     "darwin-arm64/yep-node": {
-      "sha256": "6368ef2786d34168d6b2051d722fca2c4eaa7d261bfef29309dd10ef558718b7",
+      "sha256": "d94adea76c11039a60098dadab8b09068df18de1c4024202e24536047a007114",
       "goos": "darwin",
       "goarch": "arm64"
     },
     "linux-x64/yep-node": {
-      "sha256": "e2d0cf28712d255b6aa7e4e010203abf6c3ea5f971b5a8db78a63ebd37314fad",
+      "sha256": "51e6a8173acacc828f4cbc774f026571fb2e7ec5cf6adf7a27581bbe12fd193b",
       "goos": "linux",
       "goarch": "amd64"
     },
     "linux-arm64/yep-node": {
-      "sha256": "c956a49fc196d2cbf5779fef63e1a1f21d86eb6cc67d4abbf583f954f3422d43",
+      "sha256": "8924a2a3c09dee1e1532c1dad64c32251bace31b6670bd049041153c1614e3c7",
       "goos": "linux",
       "goarch": "arm64"
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yep-ai/cli",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Yep Marketplace unified CLI: skills, agents, plugins and authorized device nodes.",
   "type": "module",
   "bin": {