@yufengtadian/freedom-cli 1.13.1 → 1.13.3

package/lib/dev.js

@@ -0,0 +1,149 @@
+'use strict';
+
+// freedom dev —— 热更新开发流（对标 tauri dev / wails dev）：
+//   1) 拉起项目 dev server（默认 `npm run dev`，可用配置 dev.command 或 --command 覆盖）；
+//   2) 从其输出解析 http://localhost:<port> 地址（或直接 --port/--url 指定）；
+//   3) 把随包预编译壳复制进 .freedom/dev/，写 URL 模式 config.json（debug 开、不加密），
+//      拉起壳窗口——页面热更新走 vite HMR（WebView 内建 WebSocket 支持），改码免重打包。
+// 产物边界：.freedom/dev/ 是开发用临时目录，与正式 dist/ 互不影响；backend/ 会镜像复制，
+// 让带任意语言后端的项目也能在 dev 流里联调。
+
+const fs = require('fs');
+const fsp = fs.promises;
+const path = require('path');
+const { spawn } = require('child_process');
+
+const {
+  loadConfig, nativePlatform, localShellPath, platformExeName, isWinPlat, copyDir,
+} = require('./utils');
+
+// vite/webpack 都会打 "Local: http://localhost:5173/"；ANSI 色码先剥掉再匹配。
+const ANSI_RE = /\x1b\[[0-9;]*m/g;
+const URL_RE = /https?:\/\/(localhost|127\.0\.0\.1):\d+/;
+
+function pickUrl(text) {
+  const m = text.replace(ANSI_RE, '').match(URL_RE);
+  return m ? m[0] : null;
+}
+
+function killTree(child) {
+  if (!child || child.killed) return;
+  try {
+    if (process.platform === 'win32' && child.pid) {
+      // npm 是树根壳进程，普通 kill 只杀 cmd 包装层，子进程全部留下——必须树杀。
+      spawn('taskkill', ['/pid', String(child.pid), '/T', '/F'], { stdio: 'ignore' });
+    } else {
+      child.kill('SIGTERM');
+    }
+  } catch { /* 已退出 */ }
+}
+
+function spawnCommand(command, cwd) {
+  return spawn(command, { cwd, shell: true, env: { ...process.env, NO_COLOR: '1', BROWSER: 'none' } });
+}
+
+function waitForUrl(server, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    let buf = '';
+    const onData = (chunk) => {
+      buf += String(chunk);
+      const url = pickUrl(buf);
+      if (url) {
+        clearTimeout(timer);
+        resolve(url);
+      }
+      if (buf.length > 64 * 1024) buf = buf.slice(-8 * 1024); // 只留尾部，防长输出撑爆
+    };
+    server.stdout.on('data', onData);
+    server.stderr.on('data', onData);
+    const timer = setTimeout(
+      () => reject(new Error(`dev server 在 ${timeoutMs / 1000}s 内未报告本地 URL，请检查 dev 脚本或用 --port/--url 指定`)),
+      timeoutMs,
+    );
+    server.on('exit', (code) => {
+      clearTimeout(timer);
+      reject(new Error(`dev server 提前退出（code=${code}），见上方其输出`));
+    });
+  });
+}
+
+async function renderDevConfigJSON(dir, cfg, url, name) {
+  const obj = {
+    name,
+    title: cfg.title || cfg.name || name,
+    titlebar: cfg.titlebar || 'frameless',
+    width: Number(cfg.width) || 1024,
+    height: Number(cfg.height) || 720,
+    minWidth: Number(cfg.minWidth) || 400,
+    minHeight: Number(cfg.minHeight) || 300,
+    center: typeof cfg.center === 'boolean' ? cfg.center : true,
+    debug: true, // dev 流默认开开发者工具
+    url,
+    singleInstance: false, // 开发期允许反复起窗
+  };
+  if (cfg.backend && cfg.backend.command) {
+    obj.backend = Array.isArray(cfg.backend.command)
+      ? { command: cfg.backend.command[0], args: cfg.backend.command.slice(1) }
+      : { command: cfg.backend.command, args: Array.isArray(cfg.backend.args) ? cfg.backend.args : [] };
+  }
+  await fsp.writeFile(path.join(dir, 'resources', 'config.json'), JSON.stringify(obj, null, 2), 'utf8');
+}
+
+async function dev(opts = {}) {
+  const dir = path.resolve(opts.dir || '.');
+  const cfg = await loadConfig(dir);
+  const name = cfg.name || path.basename(dir);
+  const plat = nativePlatform();
+  const shellSrc = localShellPath(plat);
+  if (!fs.existsSync(shellSrc)) {
+    throw new Error(`缺少 ${plat} 壳二进制（${shellSrc}），先执行 freedom shell download ${plat}`);
+  }
+
+  const devDir = path.join(dir, '.freedom', 'dev');
+  await fsp.rm(devDir, { recursive: true, force: true });
+  await fsp.mkdir(path.join(devDir, 'resources'), { recursive: true });
+  const exe = platformExeName(plat, name);
+  const exePath = path.join(devDir, exe);
+  await fsp.copyFile(shellSrc, exePath);
+  if (!isWinPlat(plat)) await fsp.chmod(exePath, 0o755);
+  const backendSrc = path.join(dir, 'backend');
+  if (fs.existsSync(backendSrc)) {
+    await copyDir(backendSrc, path.join(devDir, 'resources', 'backend'));
+  }
+
+  const url = opts.url || (opts.port ? `http://localhost:${Number(opts.port)}` : null);
+  const command = opts.command || (cfg.dev && cfg.dev.command) || 'npm run dev';
+  const server = spawnCommand(command, dir);
+  const children = [server];
+  let shuttingDown = false;
+  const stopAll = () => {
+    if (shuttingDown) return;
+    shuttingDown = true;
+    for (const c of children) killTree(c);
+  };
+  process.once('SIGINT', () => { stopAll(); process.exitCode = 0; });
+
+  let resolvedUrl = url;
+  try {
+    if (!resolvedUrl) resolvedUrl = await waitForUrl(server, opts.timeoutMs || 60000);
+  } catch (e) {
+    stopAll();
+    throw e;
+  }
+
+  await renderDevConfigJSON(devDir, cfg, resolvedUrl, name);
+  process.stdout.write(`[freedom] dev server: ${resolvedUrl}（HMR 热更已接壳窗口）\n`);
+
+  const app = spawn(exePath, [], { cwd: devDir, detached: false, stdio: 'ignore' });
+  children.push(app);
+  const appExit = new Promise((resolve) => app.on('exit', (code) => resolve(code)));
+  const serverExit = new Promise((resolve) => server.on('exit', (code) => resolve({ serverDied: code })));
+  const outcome = await Promise.race([appExit.then((code) => ({ appExit: code })), serverExit]);
+  stopAll();
+  if (outcome.appExit !== undefined) {
+    return `DEVDONE shell-exit=${outcome.appExit}`;
+  }
+  return `DEVDONE dev-server-exited-code=${outcome.serverDied}`;
+}
+
+module.exports = { dev, pickUrl };

package/lib/mcp.js

@@ -0,0 +1,217 @@
+'use strict';
+
+// freedom mcp serve —— 零依赖 stdio MCP 服务：把 freedom CLI 能力暴露为 MCP 工具
+//
+// 协议：newline-delimited JSON-RPC 2.0（initialize / tools/list / tools/call / ping）。
+// 实现纪律：本进程的 stdout 只允许写协议帧，因此所有能力都经"子进程调用 CLI"并捕获其
+// 输出实现（绝不在本进程内 require CLI 模块直接执行——那会把彩色日志打进协议通道）。
+
+const fs = require('fs');
+const path = require('path');
+const readline = require('readline');
+const { spawn } = require('child_process');
+const { packageRoot } = require('./utils');
+
+const PROTOCOL_VERSION = '2024-11-05';
+const ENTRY = path.join(packageRoot(), 'bin', 'freedom.js');
+const VERSION = (() => {
+  try { return require(path.join(packageRoot(), 'package.json')).version; } catch (e) { return '0.0.0'; }
+})();
+
+const DIR = { type: 'string', description: 'freedom 项目目录（缺省为服务进程当前目录）' };
+const PLATFORM = { type: 'string', enum: ['win', 'mac', 'linux', 'all', 'win-x64', 'darwin-arm64', 'linux-x64', 'linux-arm64'] };
+
+const TOOLS = [
+  {
+    name: 'freedom_build',
+    description: '把前端项目打包为跨平台桌面应用（预编译通用壳 + resources/ 外部资源层）。返回产物路径与自检结论。',
+    inputSchema: {
+      type: 'object',
+      properties: { dir: DIR, platform: PLATFORM, security: { type: 'string', enum: ['none', 'basic', 'high'] }, installer: { type: 'boolean', description: '附带安装包产物（便携 zip / Windows NSIS）' } },
+      additionalProperties: false,
+    },
+    args: (a) => ['build', ...flags(a, { platform: '--platform', security: '--security' }, { installer: '--installer' })],
+    cwd: (a) => a.dir,
+  },
+  {
+    name: 'freedom_init',
+    description: '新建 freedom 项目骨架（含 freedom.config.js 与前端最小工程）。dir 为目标目录。',
+    inputSchema: {
+      type: 'object',
+      properties: { dir: { type: 'string', description: '新项目目录（必填）' }, template: { type: 'string', enum: ['full', 'minimal'] }, force: { type: 'boolean' } },
+      required: ['dir'],
+      additionalProperties: false,
+    },
+    args: (a) => ['init', String(a.dir), ...flags(a, { template: '--template' }, { force: '--force' })],
+  },
+  {
+    name: 'freedom_verify',
+    description: '校验已构建产物的完整性与结构（退出码非零即失败），用于发布前把关。',
+    inputSchema: { type: 'object', properties: { dir: DIR, platform: PLATFORM }, additionalProperties: false },
+    args: (a) => ['verify', ...flags(a, { platform: '--platform' })],
+    cwd: (a) => a.dir,
+  },
+  {
+    name: 'freedom_config',
+    description: '读取（无 key）或修改（key + value）freedom.config.js 配置项。常用 key：titlebar、width、height、url、singleInstance、security、backendDir、staticHtml。',
+    inputSchema: { type: 'object', properties: { dir: DIR, key: { type: 'string' }, value: { type: 'string' } }, additionalProperties: false },
+    args: (a) => (a.key ? ['config', 'set', String(a.key), String(a.value === undefined ? '' : a.value)] : ['config']),
+    cwd: (a) => a.dir,
+  },
+  {
+    name: 'freedom_shell',
+    description: '通用壳管理：list 列出本地已就绪壳；download 下载指定平台壳。',
+    inputSchema: { type: 'object', properties: { action: { type: 'string', enum: ['list', 'download'] }, platform: PLATFORM }, required: ['action'], additionalProperties: false },
+    args: (a) => ['shell', String(a.action || 'list'), ...(a.platform ? [String(a.platform)] : [])],
+  },
+  {
+    name: 'freedom_release',
+    description: '应用自更新发布环：keygen 生成 ed25519 密钥对；manifest 产出签名更新清单 latest.json。',
+    inputSchema: {
+      type: 'object',
+      properties: { action: { type: 'string', enum: ['keygen', 'manifest'] }, dir: DIR, artifact: { type: 'string' }, url: { type: 'string' }, version: { type: 'string' }, notes: { type: 'string' } },
+      required: ['action'],
+      additionalProperties: false,
+    },
+    args: (a) => (a.action === 'manifest'
+      ? ['manifest', ...flags(a, { artifact: '--artifact', url: '--url', version: '--version', notes: '--notes' })]
+      : ['keygen']),
+    cwd: (a) => a.dir,
+  },
+  {
+    name: 'freedom_agents',
+    description: 'Agent 集成：list 打印支持矩阵；install_skill / install_mcp 把本技能与 MCP 服务装入指定 agent（agent 可为 all）。',
+    inputSchema: {
+      type: 'object',
+      properties: { action: { type: 'string', enum: ['list', 'install_skill', 'install_mcp'] }, agent: { type: 'string', description: 'agent key 或 all（逗号分隔支持多个）' }, dryRun: { type: 'boolean' } },
+      required: ['action'],
+      additionalProperties: false,
+    },
+    args: (a) => {
+      if (a.action === 'install_skill') return ['skill', 'install', ...flags(a, { agent: '--agent' }), ...(a.dryRun ? ['--dry-run'] : [])];
+      if (a.action === 'install_mcp') return ['mcp', 'install', ...flags(a, { agent: '--agent' }), ...(a.dryRun ? ['--dry-run'] : [])];
+      return ['agents'];
+    },
+  },
+  {
+    name: 'freedom_guide',
+    description: '返回 Freedom 使用指南全文（框架架构、CLI 命令、前端 SDK、后端 NDJSON 协议、打包与发布），供编码前查阅。',
+    inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+    guide: true,
+  },
+];
+
+function flags(a, map, bools) {
+  const out = [];
+  for (const [k, flag] of Object.entries(map || {})) {
+    if (a[k] !== undefined && a[k] !== '') out.push(flag, String(a[k]));
+  }
+  for (const [k, flag] of Object.entries(bools || {})) {
+    if (a[k] === true) out.push(flag);
+  }
+  return out;
+}
+
+function runCli(args, cwd) {
+  return new Promise((resolve) => {
+    const child = spawn(process.execPath, [ENTRY, ...args], {
+      cwd: cwd && fs.existsSync(cwd) ? cwd : process.cwd(),
+      env: { ...process.env, FREEDOM_AUTO_UPDATE: '0', NO_COLOR: '1', FORCE_COLOR: '0' },
+      shell: false,
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    let out = '';
+    child.stdout.on('data', (c) => { out += String(c); });
+    child.stderr.on('data', (c) => { out += String(c); });
+    child.on('error', (e) => resolve({ code: -1, text: `启动 CLI 失败：${e.message}` }));
+    child.on('close', (code) => resolve({ code: code === null ? -1 : code, text: out.trim() }));
+  });
+}
+
+function guideText() {
+  const f = path.join(packageRoot(), 'skill', 'freedom', 'SKILL.md');
+  try {
+    return { code: 0, text: fs.readFileSync(f, 'utf8') };
+  } catch (e) {
+    return { code: 1, text: `指南文件不可读：${f}（${e.message}）` };
+  }
+}
+
+async function callTool(name, args) {
+  const tool = TOOLS.find((t) => t.name === name);
+  if (!tool) throw new Error(`unknown tool ${name}`);
+  const a = args || {};
+  const r = tool.guide ? guideText() : await runCli(tool.args(a), tool.cwd ? tool.cwd(a) : undefined);
+  const head = tool.guide ? '' : `$ freedom ${tool.args(a).join(' ')}\n`;
+  return {
+    content: [{ type: 'text', text: `${head}${r.text || '(无输出)'}\n[exit ${r.code}]` }],
+    isError: r.code !== 0,
+  };
+}
+
+function send(msg) {
+  process.stdout.write(JSON.stringify(msg) + '\n');
+}
+
+async function handle(req) {
+  const isRequest = req.id !== undefined && req.id !== null;
+  const reply = (result) => isRequest && send({ jsonrpc: '2.0', id: req.id, result });
+  const fail = (message) => isRequest && send({ jsonrpc: '2.0', id: req.id, error: { code: -32602, message } });
+
+  switch (req.method) {
+    case 'initialize':
+      return reply({
+        protocolVersion: PROTOCOL_VERSION,
+        capabilities: { tools: { listChanged: false } },
+        serverInfo: { name: 'freedom', version: VERSION },
+      });
+    case 'ping':
+      return reply({});
+    case 'tools/list':
+      return reply({ tools: TOOLS.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema })) });
+    case 'tools/call': {
+      try {
+        return reply(await callTool(String(req.params && req.params.name), req.params && req.params.arguments));
+      } catch (e) {
+        return reply({ content: [{ type: 'text', text: String((e && e.message) || e) }], isError: true });
+      }
+    }
+    case 'notifications/initialized':
+    case 'notifications/cancelled':
+      return undefined;
+    default:
+      if (isRequest) send({ jsonrpc: '2.0', id: req.id, error: { code: -32601, message: `method not found: ${req.method}` } });
+      return undefined;
+  }
+}
+
+async function serve() {
+  const rl = readline.createInterface({ input: process.stdin, terminal: false });
+  // stdin 关闭（客户端断开）时不能立刻退出：在途 tools/call 的子进程还没回帧，
+  // 直接 exit 会让客户端收不到最后一个响应。等在途清零后再走。
+  let inflight = 0;
+  let ended = false;
+  const maybeExit = () => { if (ended && inflight === 0) process.exit(0); };
+  rl.on('line', (line) => {
+    const t = line.trim();
+    if (!t) return;
+    let req;
+    try {
+      req = JSON.parse(t);
+    } catch (e) {
+      send({ jsonrpc: '2.0', id: null, error: { code: -32700, message: 'parse error' } });
+      return;
+    }
+    inflight++;
+    Promise.resolve(handle(req))
+      .catch((e) => {
+        send({ jsonrpc: '2.0', id: req.id === undefined ? null : req.id, error: { code: -32603, message: String((e && e.message) || e) } });
+      })
+      .then(() => { inflight--; maybeExit(); });
+  });
+  rl.on('close', () => { ended = true; maybeExit(); });
+  await new Promise(() => { /* 常驻直到 stdin 关闭且在途请求回帧完毕 */ });
+  return 0;
+}
+
+module.exports = { serve, TOOLS, callTool };

package/lib/release.js

@@ -0,0 +1,90 @@
+'use strict';
+
+// 应用自更新发布链（对标 tauri signer + updater manifest）：
+//   freedom keygen    —— 生成 ed25519 密钥对；公钥写进 freedom.config.js 的 updater.publicKey，
+//                        私钥是发布方资产，绝不入库。
+//   freedom manifest  —— 对 dist 产物算 sha256，按壳 updater.go 的规范串签名，
+//                        产出 latest.json（version/url/sha256/notes/signature）。
+// 签名载荷格式与 Go 侧 manifestPayload 固定一致（改任一字节两侧同炸，见
+// updater_jsinterop_test.go 的跨语言回归）：
+//   "freedom-update-v1\n{version}\n{url}\n{sha256小写}"
+
+const crypto = require('crypto');
+const fs = require('fs');
+const fsp = fs.promises;
+const path = require('path');
+
+const { loadConfig } = require('./utils');
+
+function manifestPayload(version, url, sha256hex) {
+  return Buffer.from(`freedom-update-v1\n${version}\n${url}\n${String(sha256hex).toLowerCase()}`, 'utf8');
+}
+
+function keysPath(dir) {
+  return path.join(dir, '.freedom', 'keys', 'update_ed25519');
+}
+
+async function keygen(opts = {}) {
+  const dir = path.resolve(opts.dir || '.');
+  const privPath = opts.out ? path.resolve(opts.out) : keysPath(dir);
+  if (fs.existsSync(privPath) && !opts.force) {
+    throw new Error(`私钥已存在：${privPath}（重新生成请 --force，注意旧公钥签发的客户端将收不到新签名）`);
+  }
+  const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
+  await fsp.mkdir(path.dirname(privPath), { recursive: true });
+  await fsp.writeFile(privPath, privateKey.export({ type: 'pkcs8', format: 'pem' }), { mode: 0o600 });
+  const rawPub = publicKey.export({ type: 'spki', format: 'der' }).subarray(-32); // SPKI 尾部 32 字节即原始公钥
+  const pubB64 = rawPub.toString('base64');
+  const lines = [
+    `私钥已生成：${privPath}（发布方资产，勿入库/勿分发）`,
+    `公钥（base64）：${pubB64}`,
+    '用法：freedom.config.js 中设置',
+    `  updater: { manifestURL: 'https://your.host/latest.json', publicKey: '${pubB64}' }`,
+    '发版时：freedom manifest 生成签名 latest.json。',
+  ];
+  return lines.join('\n');
+}
+
+async function sha256File(p) {
+  const h = crypto.createHash('sha256');
+  await new Promise((resolve, reject) => {
+    const s = fs.createReadStream(p);
+    s.on('data', (d) => h.update(d));
+    s.on('error', reject);
+    s.on('end', resolve);
+  });
+  return h.digest('hex');
+}
+
+async function manifest(opts = {}) {
+  const dir = path.resolve(opts.dir || '.');
+  const cfg = await loadConfig(dir);
+  const name = cfg.name || path.basename(dir);
+  const artifact = opts.artifact ? path.resolve(opts.artifact) : null;
+  if (!artifact || !fs.existsSync(artifact)) {
+    throw new Error(`产物不存在：${artifact || '(未指定 --artifact，如 dist/myapp.exe)'}`);
+  }
+  if (!opts.url || !/^https?:\/\//.test(opts.url)) {
+    throw new Error('必须提供 --url（该产物的最终下载 https 地址，签名直接覆盖它）');
+  }
+  const version = opts.version || cfg.version
+    || (() => { try { return require(path.join(dir, 'package.json')).version; } catch { return null; } })();
+  if (!version) throw new Error('版本未定：--version / freedom.config.js 的 version / 项目 package.json 的 version 均缺失');
+
+  const keyPath = opts.key ? path.resolve(opts.key) : keysPath(dir);
+  if (!fs.existsSync(keyPath)) {
+    throw new Error(`私钥不存在：${keyPath}，先运行 freedom keygen`);
+  }
+  const privateKey = crypto.createPrivateKey(await fsp.readFile(keyPath));
+  const sha256 = await sha256File(artifact);
+  const signature = crypto.sign(null, manifestPayload(version, opts.url, sha256), privateKey).toString('base64');
+  const out = { version, url: opts.url, sha256 };
+  if (opts.notes) out.notes = opts.notes;
+  out.signature = signature;
+  const outPath = opts.out ? path.resolve(opts.out) : path.join(dir, 'dist', 'latest.json');
+  await fsp.mkdir(path.dirname(outPath), { recursive: true });
+  await fsp.writeFile(outPath, JSON.stringify(out, null, 2) + '\n', 'utf8');
+  return `manifest 已签名：${outPath}\n  app=${name} version=${version}\n  sha256=${sha256}\n  url=${opts.url}`;
+}
+
+module.exports = { keygen, manifest, manifestPayload };