ai-helper-agent 1.14.2 → 1.14.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-helper-agent",
-  "version": "1.14.2",
+  "version": "1.14.3",
   "description": "AI Helper 代理服务 - 为 Chrome 扩展提供本地文件读写和系统命令执行能力",
   "type": "module",
   "main": "./src/server.js",

package/src/auth.js

@@ -1,6 +1,30 @@
 // agent/src/auth.js - 配对认证模块
 import crypto from 'crypto';
 import { loadConfig, loadPairings, savePairing } from './config.js';
+import { t as translate } from './i18n.js';
+
+// 默认使用 zh 语言（独立调用场景）；server.js 调用时会传入 req 的 lang
+let currentLang = 'zh';
+
+/**
+ * 设置 auth 模块当前使用的语言（由 server.js 在请求入口处调用）
+ * @param {string} lang - 语言代码（'zh' | 'en'）
+ */
+export function setAuthLang(lang) {
+  if (lang) currentLang = lang;
+}
+
+/**
+ * 翻译辅助：使用当前模块语言或传入的 t 函数
+ * @param {string} key - 翻译 key
+ * @param {object} [params] - 插值参数
+ * @param {Function} [tFn] - 可选的 t 函数（优先使用）
+ * @returns {string}
+ */
+function tr(key, params, tFn) {
+  if (typeof tFn === 'function') return tFn(key, params);
+  return translate(currentLang, key, params);
+}
 
 // 当前有效的配对码（定时刷新 + 一次性使用）
 let currentPairCode = null;
@@ -106,14 +130,17 @@ function verifyToken(token) {
  * 安全策略：
  *   - 失败锁定：连续失败 PAIR_FAIL_LIMIT 次后临时锁定，并立即轮换配对码使已观测码失效
  *   - 一次性使用：配对成功后立即轮换配对码，防止配对码被重复利用
+ * @param {string} code - 配对码
+ * @param {string} extensionId - 扩展 ID
+ * @param {Function} [tFn] - 可选的翻译函数（由 server.js 传入）
  */
-async function handlePairRequest(code, extensionId) {
+async function handlePairRequest(code, extensionId, tFn) {
   // 锁定期内直接拒绝（不泄露是否处于锁定状态细节）
   if (Date.now() < pairLockUntil) {
-    return { success: false, error: '配对尝试过于频繁，请稍后再试' };
+    return { success: false, error: tr('auth.tooFrequent', undefined, tFn) };
   }
   if (!code || !extensionId) {
-    return { success: false, error: '缺少配对码或扩展ID' };
+    return { success: false, error: tr('auth.missingCodeOrExtId', undefined, tFn) };
   }
   if (code.toUpperCase() !== currentPairCode) {
     pairFailCount++;
@@ -124,7 +151,7 @@ async function handlePairRequest(code, extensionId) {
       currentPairCode = generatePairCode();
       console.log('[Agent] 配对失败次数过多，已临时锁定 60s 并轮换配对码');
     }
-    return { success: false, error: '配对码无效' };
+    return { success: false, error: tr('auth.invalidCode', undefined, tFn) };
   }
   // 配对码正确：重置失败计数
   pairFailCount = 0;
@@ -135,19 +162,19 @@ async function handlePairRequest(code, extensionId) {
     // 一次性使用：成功后立即轮换配对码
     currentPairCode = generatePairCode();
     console.log('[Agent] 配对码校验通过，配对码已轮换（一次性使用）');
-    return { success: true, token: pairings[extensionId].token, message: '已配对，返回现有 token' };
+    return { success: true, token: pairings[extensionId].token, message: tr('auth.alreadyPaired', undefined, tFn) };
   }
   // 生成新 token 并保存
   const token = crypto.randomBytes(32).toString('hex');
   try {
     await savePairing(extensionId, token);
   } catch (err) {
-    return { success: false, error: `配对保存失败: ${err.message}` };
+    return { success: false, error: tr('auth.saveFailed', { message: err.message }, tFn) };
   }
   // 一次性使用：成功后立即轮换配对码
   currentPairCode = generatePairCode();
   console.log('[Agent] 配对成功，配对码已轮换（一次性使用）');
-  return { success: true, token, message: '配对成功' };
+  return { success: true, token, message: tr('auth.pairSuccess', undefined, tFn) };
 }
 
 export {

package/src/config.js

@@ -2,6 +2,7 @@
 import { homedir } from 'os';
 import { join } from 'path';
 import { readFileSync, writeFileSync, existsSync, mkdirSync, statSync } from 'fs';
+import { t as translate } from './i18n.js';
 
 const AGENT_DIR = join(homedir(), '.ai-helper-agent');
 const CONFIG_FILE = join(AGENT_DIR, 'config.json');
@@ -32,6 +33,17 @@ let pairingsCacheMtime = 0;
 // 写入互斥锁（防止并发写互相覆盖）
 let writeLock = Promise.resolve();
 
+// 当前模块使用的语言（由 server.js 在请求入口处设置）
+let currentLang = 'zh';
+
+/**
+ * 设置 config 模块当前使用的语言（由 server.js 在请求入口处调用）
+ * @param {string} lang - 语言代码（'zh' | 'en'）
+ */
+export function setConfigLang(lang) {
+  if (lang) currentLang = lang;
+}
+
 function withWriteLock(fn) {
   const prev = writeLock;
   let release;
@@ -147,7 +159,7 @@ export async function saveConfig(config) {
  */
 export async function updateConfigField(key, value) {
   if (!VALID_CONFIG_KEYS.includes(key)) {
-    throw new Error(`无效配置项: ${key}`);
+    throw new Error(translate(currentLang, 'error.invalidConfigKey', { key }));
   }
   return withWriteLock(async () => {
     const config = loadConfig();

package/src/executor.js

@@ -4,6 +4,18 @@ import { existsSync } from 'fs';
 import crypto from 'crypto';
 import os from 'os';
 import { loadConfig } from './config.js';
+import { t as translate } from './i18n.js';
+
+// 当前模块使用的语言（由 server.js 在请求入口处设置）
+let currentLang = 'zh';
+
+/**
+ * 设置 executor 模块当前使用的语言（由 server.js 在请求入口处调用）
+ * @param {string} lang - 语言代码（'zh' | 'en'）
+ */
+export function setExecutorLang(lang) {
+  if (lang) currentLang = lang;
+}
 
 function getShellForExec() {
   const platform = os.platform();
@@ -208,7 +220,7 @@ function executeCommand(command, cwd, wsClient, onComplete, collectOutput = fals
     entry.stdoutBuf = appendWithLimit(entry.stdoutBuf, str, truncState);
     entry.truncStdout = truncState.truncated;
     if (truncState.truncated) {
-      broadcast({ type: 'stdout_truncated', message: 'stdout 输出超过 5MB 上限，已截断', execId });
+      broadcast({ type: 'stdout_truncated', message: translate(currentLang, 'error.stdoutTruncated'), execId });
     }
     broadcast({ type: 'stdout', data: str, execId });
   });
@@ -221,7 +233,7 @@ function executeCommand(command, cwd, wsClient, onComplete, collectOutput = fals
     entry.stderrBuf = appendWithLimit(entry.stderrBuf, str, truncState);
     entry.truncStderr = truncState.truncated;
     if (truncState.truncated) {
-      broadcast({ type: 'stderr_truncated', message: 'stderr 输出超过 5MB 上限，已截断', execId });
+      broadcast({ type: 'stderr_truncated', message: translate(currentLang, 'error.stderrTruncated'), execId });
     }
     broadcast({ type: 'stderr', data: str, execId });
   });
@@ -313,7 +325,7 @@ function executeCommandSync(command, cwd) {
       if (!resolved) {
         resolved = true;
         killProcess(execId);
-        resolve({ execId, exitCode: -1, killed: true, stdout: '', stderr: '', error: 'Command timed out' });
+        resolve({ execId, exitCode: -1, killed: true, stdout: '', stderr: '', error: translate(currentLang, 'error.commandTimeout') });
       }
     }, timeout + 5000);
   });

package/src/i18n.js

@@ -0,0 +1,93 @@
+// agent/src/i18n.js - 代理端国际化模块
+// 解析 HTTP 请求的 Accept-Language 头，返回对应语言的文案
+// 默认中文（zh），支持英文（en）
+
+import { readFileSync } from 'fs';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+// 加载语言包
+const translations = {
+  zh: JSON.parse(readFileSync(join(__dirname, 'locales', 'zh.json'), 'utf-8')),
+  en: JSON.parse(readFileSync(join(__dirname, 'locales', 'en.json'), 'utf-8')),
+};
+
+const DEFAULT_LANG = 'zh';
+const SUPPORTED_LANGS = Object.keys(translations);
+
+/**
+ * 从 Accept-Language 头解析最佳匹配语言
+ * 支持格式：zh, zh-CN, en-US, zh;q=0.9,en;q=0.8
+ * @param {string} [acceptLanguage] - Accept-Language 头的值
+ * @returns {string} 匹配的语言代码（zh 或 en）
+ */
+export function parseAcceptLanguage(acceptLanguage) {
+  if (!acceptLanguage || typeof acceptLanguage !== 'string') return DEFAULT_LANG;
+
+  // 解析语言列表并按权重排序
+  const langs = acceptLanguage
+    .split(',')
+    .map(part => {
+      const [code, ...params] = part.trim().split(';');
+      const qParam = params.find(p => p.trim().startsWith('q='));
+      const q = qParam ? parseFloat(qParam.trim().slice(2)) : 1;
+      return { code: code.trim().toLowerCase(), q };
+    })
+    .filter(item => item.code)
+    .sort((a, b) => b.q - a.q);
+
+  for (const { code } of langs) {
+    // 精确匹配
+    if (SUPPORTED_LANGS.includes(code)) return code;
+    // 前缀匹配（如 zh-CN → zh）
+    const prefix = code.split('-')[0];
+    if (SUPPORTED_LANGS.includes(prefix)) return prefix;
+  }
+
+  return DEFAULT_LANG;
+}
+
+/**
+ * 翻译函数
+ * @param {string} lang - 语言代码
+ * @param {string} key - 翻译键（支持点号分隔，如 'error.fileNotFound'）
+ * @param {object} [params] - 插值参数（如 { path: '/foo' } 替换 {path}）
+ * @returns {string} 翻译后的文本，找不到则返回 key
+ */
+export function t(lang, key, params) {
+  const dict = translations[lang] || translations[DEFAULT_LANG];
+  let value = key
+    .split('.')
+    .reduce((obj, k) => (obj && typeof obj === 'object' ? obj[k] : undefined), dict);
+
+  // 回退到默认语言
+  if (value === undefined && lang !== DEFAULT_LANG) {
+    value = key
+      .split('.')
+      .reduce((obj, k) => (obj && typeof obj === 'object' ? obj[k] : undefined), translations[DEFAULT_LANG]);
+  }
+
+  if (value === undefined) return key;
+
+  // 参数插值
+  if (params && typeof value === 'string') {
+    return value.replace(/\{(\w+)\}/g, (_, name) => (params[name] !== undefined ? params[name] : `{${name}}`));
+  }
+
+  return value;
+}
+
+/**
+ * 从 HTTP 请求中提取语言并返回翻译函数
+ * @param {import('http').IncomingMessage} req - HTTP 请求对象
+ * @returns {{ lang: string, t: (key: string, params?: object) => string }}
+ */
+export function getRequestI18n(req) {
+  const lang = parseAcceptLanguage(req.headers['accept-language']);
+  return {
+    lang,
+    t: (key, params) => t(lang, key, params),
+  };
+}

package/src/locales/en.json

@@ -0,0 +1,214 @@
+{
+  "error": {
+    "internal": "Internal server error",
+    "invalidUrl": "Invalid request URL format",
+    "noToken": "No authentication token provided",
+    "invalidToken": "Invalid authentication token",
+    "operationInProgress": "An operation is already in progress, please try again later",
+    "missingPath": "Missing path parameter",
+    "missingWorkdir": "Missing workdir parameter",
+    "workdirNotAbsolute": "workdir must be an absolute path",
+    "workdirIsSystemDir": "Cannot set the Agent system directory as working directory",
+    "pathNotAbsolute": "path must be an absolute path",
+    "cannotRemoveWorkdir": "Cannot remove the current working directory, please switch to another directory first",
+    "pathNotInAllowedList": "This directory is not in the allowed list",
+    "fileNotFound": "File does not exist",
+    "dirNotFound": "Directory does not exist",
+    "pathIsDir": "Path is a directory",
+    "pathNotDir": "Path is not a directory",
+    "fileOrDirNotFound": "File/directory does not exist",
+    "dirExists": "Directory already exists",
+    "missingPathOrNewName": "Missing path or newName parameter",
+    "newNameHasSeparator": "New name cannot contain path separators",
+    "newNameInvalidChars": "New name contains Windows invalid characters (: * ? \" < > |)",
+    "missingPathsParam": "Missing paths parameter or empty array",
+    "missingPathOrPaths": "Missing path or paths parameter",
+    "processNotFound": "Process does not exist or has ended",
+    "npmInstallTimeout": "npm install timeout (90s)",
+    "updateFailed": "Update failed, please run manually: npm install -g ai-helper-agent@latest",
+    "bodyTooLarge": "Request body too large",
+    "invalidJson": "Request body is not valid JSON",
+    "readRequestFailed": "Failed to read request",
+    "invalidMultipart": "Not a valid multipart/form-data request",
+    "fileTooLarge": "File too large, exceeds limit",
+    "malformedMultipart": "Malformed multipart data format",
+    "malformedMultipartHeaders": "Malformed multipart headers format",
+    "noFileData": "No file data found",
+    "readFileFailed": "Failed to read file",
+    "fileSizeExceeded": "File too large (received {received} > {limit})",
+    "targetExists": "Target name already exists",
+    "missingPathOrDestDir": "Missing path or destDir parameter",
+    "sourceNotFound": "Source file/directory does not exist",
+    "targetNotDir": "Target is not a valid directory",
+    "targetNameExists": "A file/directory with the same name already exists at the target",
+    "missingCommand": "Missing command parameter (must be a string)",
+    "execDirCheckFailed": "Execution directory validation failed: {reason}",
+    "missingTrashId": "Missing trashId parameter",
+    "missingName": "Missing name parameter",
+    "missingNameAndSteps": "Missing required parameters: name, steps",
+    "missingMarkdownOrPrompt": "Missing markdown/prompt parameter",
+    "builtinSkillNotEditable": "\"{name}\" is a built-in skill and cannot be edited",
+    "missingZipData": "Missing zipData parameter (base64-encoded zip content)",
+    "missingUrl": "Missing url parameter",
+    "missingId": "Missing required parameter: id",
+    "missingIdParam": "Missing id parameter",
+    "pathNotAllowed": "Path \"{path}\" is not allowed",
+    "pathNotExist": "Path \"{path}\" does not exist",
+    "missingIdAndEnabled": "Missing parameters: id, enabled",
+    "missingServerIdAndToolName": "Missing parameters: serverId, toolName",
+    "notAgentSkill": "This Skill is not an Agent type",
+    "missingNameOrResource": "Missing name or resource parameter",
+    "resourceNotFound": "Resource \"{resource}\" does not exist",
+    "unknownApiPath": "Unknown API path",
+    "httpRequiresUrl": "HTTP transport requires a url",
+    "stdioRequiresCommand": "stdio transport requires a command",
+    "tooFrequent": "Too frequent, please try again in {wait} seconds",
+    "fileTooLargeDeclared": "File too large ({declared} > {limit})",
+    "fileTooLargeStat": "File too large ({size} > {limit})",
+    "contentTooLarge": "Content too large ({size} > {limit})",
+    "switchWorkdirFailed": "Failed to switch working directory: {message}",
+    "removeAllowedPathFailed": "Failed to remove allowed path: {message}",
+    "fileSearchFailed": "File search error: {message}",
+    "contentSearchFailed": "Content search error: {message}",
+    "downloadFailed": "Download failed: {message}",
+    "packFailed": "Pack failed: {message}",
+    "parseFailed": "Parse failed: {message}",
+    "targetPathNotAllowed": "Target path not allowed: {reason}",
+    "moveTargetNotAllowed": "Move target path not allowed: {reason}",
+    "execFailed": "Command execution error: {message}",
+    "zipImportFailed": "Zip import failed: {message}",
+    "urlImportFailed": "URL import failed: {message}",
+    "mcpCommandBlocked": "MCP command blocked: {reason}",
+    "readResourceFailed": "Failed to read resource: {message}",
+    "npmInstallExitCode": "npm install exit code: {code}",
+    "invalidConfigKey": "Invalid config key: {key}",
+    "stdoutTruncated": "stdout output exceeded 5MB limit, truncated",
+    "commandTimeout": "Command timed out",
+    "stderrTruncated": "stderr output exceeded 5MB limit, truncated"
+  },
+  "message": {
+    "shuttingDown": "Agent is shutting down...",
+    "restarting": "Agent is restarting...",
+    "updateSuccess": "Update successful, Agent is restarting...",
+    "workdirSwitched": "Working directory switched",
+    "removedFromAllowedList": "Removed from allowed list",
+    "movedToTrash": "Moved to trash (auto-cleaned after 7 days)",
+    "mcpCommandConfirm": "MCP command needs confirmation: {reason}"
+  },
+  "auth": {
+    "pairFailed": "Pairing failed",
+    "cannotConnect": "Cannot connect to Agent: {message}",
+    "agentNotPaired": "Agent not paired",
+    "agentNotConnected": "Agent service not connected, please ensure the agent service is running",
+    "unnamedAgent": "Unnamed Agent",
+    "tooFrequent": "Pairing attempts too frequent, please try again later",
+    "missingCodeOrExtId": "Missing pairing code or extension ID",
+    "invalidCode": "Invalid pairing code",
+    "alreadyPaired": "Already paired, returning existing token",
+    "saveFailed": "Pairing save failed: {message}",
+    "pairSuccess": "Pairing successful"
+  },
+  "exec": {
+    "requestTimeout": "Request timeout ({ms}ms)",
+    "requestFailed": "Agent request failed: {message}",
+    "uploadTimeout": "File upload timeout (60s)",
+    "uploadFailed": "File upload failed: {message}"
+  },
+  "security": {
+    "pathInvalid": "Invalid path",
+    "forbiddenAgentFile": "Access to agent system files is forbidden",
+    "cannotResolvePath": "Cannot resolve path: {message}",
+    "pathNotInAllowedDir": "Path is not within allowed directories",
+    "pathOutOfRange": "Path points to a location outside the allowed range",
+    "pathCheckError": "Path check error: {message}",
+    "commandInvalid": "Invalid command",
+    "commandBlocked": "High-risk command blocked: \"{command}\"",
+    "cmdSudo": "Command requires administrator privileges (sudo)",
+    "cmdNpmGlobal": "Global npm package installation",
+    "cmdPip": "pip install/uninstall package",
+    "cmdChmod777": "Recursively change permissions to 777",
+    "cmdRmrf": "Recursively force delete files/directories",
+    "cmdGitForcePush": "Git force push",
+    "cmdShutdown": "Shutdown or reboot system",
+    "cmdHosts": "Modify system hosts file",
+    "cmdEval": "Execute command via eval",
+    "cmdExecExternalScript": "Execute external script file",
+    "cmdExecScriptDirectly": "Execute script file directly",
+    "cmdChmodExec": "Modify file execution permission",
+    "cmdRmdirS": "Recursively delete directory (rd/rmdir /s)",
+    "cmdDelF": "Force delete file (del /f)",
+    "cmdIcacls": "Modify file permissions (icacls)",
+    "cmdTakeown": "Take file ownership (takeown)",
+    "cmdReg": "Modify registry (reg)",
+    "cmdNet": "User/group management (net)",
+    "cmdSc": "Service management (sc)",
+    "cmdTaskkillF": "Force kill process (taskkill /f)"
+  },
+  "trash": {
+    "moveFailed": "Move to trash failed: {message}",
+    "entryNotFound": "Trash entry does not exist or has expired",
+    "fileNotFound": "Trash file no longer exists",
+    "originalPathOccupied": "Original location already has a file: {path}",
+    "restoreFailed": "Restore failed: {message}"
+  },
+  "search": {
+    "pathNotExist": "Search path does not exist",
+    "pathNotDir": "Search path is not a directory",
+    "emptyPattern": "Search content cannot be empty"
+  },
+  "skill": {
+    "fileWritten": "File written: {path}",
+    "fileDeleted": "Deleted: {path}",
+    "unknownAction": "Unknown action: {action}",
+    "commandNeedsConfirm": "Command requires user confirmation: {reason}",
+    "unknownTool": "Unknown tool: {toolName}",
+    "missingParam": "Missing required parameter: {key}",
+    "execError": "Execution error: {message}",
+    "execIdNotFound": "Execution ID \"{execId}\" does not exist",
+    "validationFailed": "Validation failed: {errors}",
+    "saveFailed": "Save failed: {message}",
+    "deleteFailed": "Delete failed: {message}",
+    "skillNotFound": "Skill \"{name}\" does not exist",
+    "missingNameField": "Missing name field",
+    "missingPromptContent": "Missing prompt content",
+    "missingDescriptionField": "Missing description field",
+    "missingHostname": "Missing hostname",
+    "forbiddenLocalAddress": "Access to local addresses is forbidden",
+    "forbiddenPrivateAddress": "Access to private network addresses is forbidden",
+    "dnsEmptyResult": "DNS lookup returned empty: {hostname}",
+    "dnsResolvesPrivate": "Domain {hostname} resolves to private address {address}",
+    "dnsFailed": "DNS lookup failed: {hostname}",
+    "zipNoSkillMd": "SKILL.md file not found in Zip package",
+    "invalidSkillName": "Invalid Skill name: \"{name}\" (only letters, digits, underscores, and hyphens are allowed)",
+    "targetPathEscape": "Target path escapes the allowed directory, write rejected",
+    "importFailed": "Import failed: {message}",
+    "invalidUrl": "Invalid URL",
+    "urlProtocolNotSupported": "Only http/https protocol URLs are supported",
+    "downloadFailed": "Download failed: {message}",
+    "stepsMustBeArray": "steps must be a non-empty array",
+    "stepMissingId": "Step {index}: missing id",
+    "stepMissingTool": "Step {index}: missing tool",
+    "conditionNotMet": "Condition not met",
+    "executing": "Executing...",
+    "execSuccess": "Execution succeeded",
+    "execFailed": "Execution failed",
+    "skillExecTimeout": "Skill execution timed out (5 minutes)",
+    "skillExecPartial": "Skill \"{name}\" execution completed ({count} steps failed)",
+    "skillExecDone": "Skill \"{name}\" execution completed ({count} steps)",
+    "invalidRedirectUrl": "Invalid redirect URL",
+    "protocolNotSupported": "Only http/https protocols are supported",
+    "redirectBlocked": "Redirect blocked: {error}",
+    "tooManyRedirects": "Too many redirects",
+    "downloadTooLarge": "Download exceeds limit of {size} bytes",
+    "downloadTimeout": "Download timed out"
+  },
+  "mcp": {
+    "sseRequiresUrl": "SSE transport requires a url",
+    "streamableHttpRequiresUrl": "StreamableHTTP transport requires a url",
+    "websocketRequiresUrl": "WebSocket transport requires a url",
+    "stdioRequiresCommand": "stdio transport requires a command",
+    "toolCallError": "Tool call error: {message}",
+    "serverNotConnected": "MCP Server \"{name}\" not connected",
+    "toolCallFailed": "Tool call failed"
+  }
+}