@znmin/claude-remote-cli 0.4.0 → 0.5.0

package/src/remote-clipboard.js

@@ -0,0 +1,97 @@
+import { quote } from './system.js';
+
+// Claude Code on Linux reads a pasted image by running
+//   xclip -selection clipboard -t TARGETS -o      (is there an image?)
+//   xclip -selection clipboard -t image/png -o    (write it to a file)
+// This stand-in is put first on the remote Claude's PATH and answers those two
+// reads with the image on the LOCAL clipboard, fetched through the SSH reverse
+// tunnel. Every other call is passed on to the real xclip, if any.
+// The token stays in a 0600 file read with `curl -H @file`, so it never
+// appears in a process list on the server.
+export const XCLIP_SHIM = `#!/bin/sh
+# claude-remote: serve clipboard image reads from the LOCAL computer.
+dir=$(cd -- "$(dirname -- "$0")" && pwd -P)
+selection=primary target= output= previous=
+for argument in "$@"; do
+  case $previous in
+    -selection|-sel) selection=$argument ;;
+    -t|-target) target=$argument ;;
+  esac
+  case $argument in -o|-out) output=1 ;; esac
+  previous=$argument
+done
+
+real() {
+  PATH=$(printf '%s' "$PATH" | tr ':' '\\n' | grep -vxF -- "$dir" | paste -s -d: -)
+  export PATH
+  command -v xclip >/dev/null 2>&1 || exit 1
+  exec xclip "$@"
+}
+
+# Download the LOCAL clipboard image to $1; fails when there is none (HTTP 204).
+fetch() {
+  part=$1.part
+  rm -f -- "$part"
+  if command -v curl >/dev/null 2>&1; then
+    curl -sf --max-time 20 -H @"$dir/header" -o "$part" "$(cat -- "$dir/url")" 2>/dev/null
+  elif command -v python3 >/dev/null 2>&1; then
+    python3 - "$dir" "$part" <<'PYTHON' 2>/dev/null
+import sys, urllib.request
+directory, target = sys.argv[1], sys.argv[2]
+name, value = open(directory + '/header').read().strip().split(': ', 1)
+request = urllib.request.Request(open(directory + '/url').read().strip(), headers={name: value})
+with urllib.request.urlopen(request, timeout=20) as response, open(target, 'wb') as output:
+    output.write(response.read())
+PYTHON
+  else
+    return 1
+  fi
+  if [ -s "$part" ]; then mv -f -- "$part" "$1"; else rm -f -- "$part"; return 1; fi
+}
+
+if [ "$output" = 1 ] && [ "$selection" = clipboard ]; then
+  cache=$dir/clipboard.png
+  case $target in
+    TARGETS)
+      fetch "$cache" || exit 1
+      printf 'TARGETS\\nimage/png\\n'
+      exit 0 ;;
+    image/png)
+      # Reuse the image fetched by the TARGETS check a moment ago.
+      modified=$(stat -c %Y -- "$cache" 2>/dev/null || stat -f %m -- "$cache" 2>/dev/null || echo 0)
+      age=$(( $(date +%s) - modified ))
+      if [ ! -s "$cache" ] || [ "$age" -gt 30 ]; then fetch "$cache" || exit 1; fi
+      cat -- "$cache"
+      rm -f -- "$cache"
+      exit 0 ;;
+  esac
+fi
+real "$@"
+`;
+
+// Claude Code on Linux pastes images with Ctrl+V only, but Windows terminals
+// keep Ctrl+V for their own paste, so Windows users press Alt+V as they would
+// locally. This binding is honoured even with --restricted.
+export const ALT_V_BINDING = { context: 'Chat', bindings: { 'alt+v': 'chat:imagePaste' } };
+export const KEYBINDING_MISSING = 'CLAUDE_REMOTE_ALT_V_MISSING';
+
+// Creates ~/.claude/keybindings.json with the Alt+V binding when it does not
+// exist. An existing file is never edited; KEYBINDING_MISSING is printed
+// instead when it has no Alt+V entry, so the user can add it.
+export function ensureAltVBinding() {
+  const file = '"$HOME/.claude/keybindings.json"';
+  // Failing to write is not fatal: Ctrl+V still works where the terminal allows it.
+  return 'if [ ! -e ' + file + ' ]; then { mkdir -p -- "$HOME/.claude" && printf \'%s\\n\' ' +
+    quote(JSON.stringify({ bindings: [ALT_V_BINDING] }, null, 2)) + ' > ' + file + '; } 2>/dev/null || true\n' +
+    'elif ! grep -qi \'"alt+v"\' ' + file + ' 2>/dev/null; then echo ' + KEYBINDING_MISSING + '\nfi\n';
+}
+
+// Shell lines that install the stand-in into `directory` (an already quoted
+// remote path). The Authorization header is read from the next stdin line.
+export function installClipboardShim(directory, url) {
+  return 'mkdir -m 700 -- ' + directory + '\n' +
+    'IFS= read -r line; printf \'%s\\n\' "$line" > ' + directory + '/header\n' +
+    'printf \'%s\\n\' ' + url + ' > ' + directory + '/url\n' +
+    'cat > ' + directory + "/xclip <<'CLAUDE_REMOTE_XCLIP'\n" + XCLIP_SHIM + 'CLAUDE_REMOTE_XCLIP\n' +
+    'chmod 700 -- ' + directory + '/xclip\n';
+}

package/src/ssh-auth.js

@@ -89,7 +89,7 @@ export async function ensureSSH(client, config, { enablePubkey = false } = {}) {
       if (!await probe(['-i', key, '-o', 'IdentitiesOnly=yes', '-o', 'IdentityAgent=none']))
         throw new Error('公钥已添加，但独立密钥登录验证失败。请检查服务器的公钥登录策略和 authorized_keys 设置；未修改本机 SSH 配置。');
 
-      // SSH's ordinary config also makes the key available to Mutagen and scp.
+      // SSH's ordinary config also makes the key available to plain ssh and scp.
       // IdentityFile is additive; do not replace existing host/user/proxy rules.
       const configFile = path.join(client.home, '.ssh', 'config');
       const host = config.host.split('@').at(-1);

package/src/installer.js

@@ -1,96 +0,0 @@
-import * as fs from 'node:fs/promises';
-import { createWriteStream, createReadStream } from 'node:fs';
-import { createHash } from 'node:crypto';
-import { Readable, Transform } from 'node:stream';
-import { pipeline } from 'node:stream/promises';
-import os from 'node:os';
-import path from 'node:path';
-import { execute, exists, rename, which, withLock } from './system.js';
-
-export const VERSION = '0.18.1';
-// SHA256SUMS from the official v0.18.1 release, pinned in this package.
-export const RELEASES = {
-  'darwin-x64': ['darwin_amd64', '7d06f7d8fcfe90bc7e55cc834a2f2f20c2e0af9ea9bc35911fc4341ad56a9bbf'],
-  'darwin-arm64': ['darwin_arm64', '6f810416d9e5fc4fd5e18431146f8b3c5a2056ba5a24f76c1e66da86eb3257e2'],
-  'linux-x64': ['linux_amd64', '7735286c778cc438418209f24d03a64f3a0151c8065ef0fe079cfaf093af6f8f'],
-  'linux-arm64': ['linux_arm64', 'bcba735aebf8cbc11da9b3742118a665599ac697fa06bc5751cac8dcd540db8a'],
-  'win32-x64': ['windows_amd64', '3e237e77f69959ed520a0f877330a431507bb0a85d9da7919764ba0c87b702c7'],
-  'win32-arm64': ['windows_arm64', '9ac53447e46f019be9d37f49c00eeed8635966b885ed29ef06b3ff19afdee532']
-};
-
-const executableName = (platform = process.platform) => platform === 'win32' ? 'mutagen.exe' : 'mutagen';
-
-// Windows ships bsdtar in System32, which reads these archives. A GNU tar
-// earlier in PATH (e.g. from Git) would treat "C:" in a path as a remote host.
-export async function findTar(env = process.env, platform = process.platform) {
-  if (platform === 'win32') {
-    const system = path.win32.join(env.SystemRoot || env.SYSTEMROOT || 'C:\\Windows', 'System32', 'tar.exe');
-    if (await exists(system)) return system;
-  }
-  return which('tar', env.PATH, { platform });
-}
-
-export function cachedBinary(env = process.env) {
-  return path.join(env.CLAUDE_REMOTE_CACHE_DIR || path.join(os.homedir(), '.cache', 'claude-remote'),
-    `mutagen-${VERSION}-${process.platform}-${process.arch}`, executableName());
-}
-
-export async function verifyChecksum(file, expected) {
-  const hash = createHash('sha256');
-  for await (const chunk of createReadStream(file)) hash.update(chunk);
-  if (hash.digest('hex') !== expected) throw new Error('同步工具 SHA-256 校验失败，已拒绝安装。');
-}
-
-async function download(url, file) {
-  const response = await fetch(url, { signal: AbortSignal.timeout(180000) });
-  if (!response.ok || !response.body) throw new Error(`下载同步工具失败：HTTP ${response.status}`);
-  let bytes = 0;
-  const limit = new Transform({ transform(chunk, encoding, done) {
-    bytes += chunk.length;
-    done(bytes > 200 * 1024 * 1024 ? new Error('同步工具下载大小异常。') : null, chunk);
-  } });
-  await pipeline(Readable.fromWeb(response.body), limit, createWriteStream(file, { flags: 'wx', mode: 0o600 }));
-}
-
-export async function ensureMutagen({ env = process.env, forceDownload = false } = {}) {
-  if (!RELEASES[`${process.platform}-${process.arch}`]) throw new Error('同步工具支持 macOS、Linux 和 Windows 的 x64、arm64。');
-  if (env.CLAUDE_REMOTE_MUTAGEN) {
-    const binary = path.resolve(env.CLAUDE_REMOTE_MUTAGEN);
-    await execute(binary, ['version'], { capture: true, timeout: 10000, env });
-    return binary;
-  }
-  const binary = cachedBinary(env);
-  if (await exists(binary) && await exists(path.join(path.dirname(binary), 'mutagen-agents.tar.gz'))) return binary;
-  if (!forceDownload) {
-    const system = await which('mutagen', env.PATH);
-    if (system) {
-      const result = await execute(system, ['version'], { capture: true, timeout: 10000, env, check: false });
-      if (result.code === 0 && result.stdout.trim() === VERSION) return system;
-    }
-  }
-  const destination = path.dirname(binary);
-  return withLock(destination + '.lock', async () => {
-    if (await exists(binary) && await exists(path.join(destination, 'mutagen-agents.tar.gz'))) return binary;
-    const tar = await findTar(env);
-    if (!tar) throw new Error('找不到系统 tar，无法解压同步工具。请安装 tar 后重试（Windows 10 1803 及以上自带）。');
-    const [platform, checksum] = RELEASES[`${process.platform}-${process.arch}`];
-    const archiveName = `mutagen_${platform}_v${VERSION}.tar.gz`;
-    const temporary = await fs.mkdtemp(path.join(path.dirname(destination), '.mutagen-install-'));
-    try {
-      const archive = path.join(temporary, 'download.tar.gz');
-      console.error('正在下载同步工具…');
-      await download(`https://github.com/mutagen-io/mutagen/releases/download/v${VERSION}/${archiveName}`, archive);
-      await verifyChecksum(archive, checksum);
-      // Extract only the two required files from the authenticated archive.
-      const unpacked = path.join(temporary, 'unpacked');
-      await fs.mkdir(unpacked);
-      const name = executableName();
-      await execute(tar, ['-xzf', archive, '-C', unpacked, name, 'mutagen-agents.tar.gz'], { timeout: 60000, env });
-      await fs.chmod(path.join(unpacked, name), 0o755);
-      await execute(path.join(unpacked, name), ['version'], { capture: true, timeout: 10000, env });
-      if (await exists(destination)) await rename(destination, path.join(temporary, 'old-cache'));
-      await rename(unpacked, destination);
-      return binary;
-    } finally { await fs.rm(temporary, { recursive: true, force: true }); }
-  });
-}