aws-runtime-bridge 1.9.78 → 1.9.80

package/dist/services/orphan-monitor.js

@@ -1,382 +1,2 @@
-/**
- * 孤儿进程监控服务
- *
- * 定期扫描和检测孤儿进程，支持自动清理和告警
- */
-import { createLogger } from '../utils/logger.js';
-import { loadPersistedSessions, savePersistedSessions } from './terminal-persistence.js';
-import { detectOrphanProcesses, checkAllSessionsHealth, terminateProcessTree, waitForProcessExit } from './process-detector.js';
-import { ORPHAN_SCAN_INTERVAL, ORPHAN_AUTO_CLEAN_MODE, ORPHAN_SCAN_ENABLED, schedulerBaseUrl } from '../config.js';
-import { getRuntimeAccessToken } from './runtime-binding.js';
-import { shouldAutoCleanOrphanProcesses } from './runtime-lifecycle-policy.js';
-const logger = createLogger('orphan-monitor');
-/**
- * 孤儿进程监控器
- */
-export class OrphanMonitor {
-    constructor() {
-        this.intervalId = null;
-        this.lastScanTime = null;
-        this.eventListeners = [];
-        this.stopped = false; // ★ 停止标志位，用于中断正在执行的 scan()
-    }
-    /**
-     * 启动监控器
-     */
-    async start() {
-        if (!ORPHAN_SCAN_ENABLED) {
-            logger.info('孤儿进程监控已禁用 (AWS_ORPHAN_SCAN_ENABLED=false)');
-            return;
-        }
-        this.stopped = false; // ★ 重置停止标志
-        logger.info(`启动孤儿进程监控，扫描间隔: ${ORPHAN_SCAN_INTERVAL}ms, 自动清理模式: ${ORPHAN_AUTO_CLEAN_MODE}`);
-        // 立即执行一次检测
-        await this.scan();
-        // 设置定期扫描
-        this.intervalId = setInterval(async () => {
-            await this.scan();
-        }, ORPHAN_SCAN_INTERVAL);
-        logger.info('孤儿进程监控已启动');
-    }
-    /**
-     * 停止监控器
-     */
-    stop() {
-        this.stopped = true; // ★ 设置停止标志，中断正在执行的 scan()
-        if (this.intervalId) {
-            clearInterval(this.intervalId);
-            this.intervalId = null;
-            logger.info('孤儿进程监控已停止');
-        }
-    }
-    /**
-     * 执行一次扫描
-     */
-    async scan() {
-        // ★ 如果已停止，立即退出
-        if (this.stopped) {
-            logger.debug('监控器已停止，跳过扫描');
-            return;
-        }
-        this.lastScanTime = new Date();
-        logger.debug('开始扫描孤儿进程...');
-        try {
-            // 加载持久化会话
-            const persistedSessions = await loadPersistedSessions();
-            // ★ 检查停止标志（异步操作后）
-            if (this.stopped) {
-                logger.debug('监控器已停止，中断扫描');
-                return;
-            }
-            if (persistedSessions.length === 0) {
-                logger.debug('无持久化会话，跳过扫描');
-                return;
-            }
-            // 检测孤儿进程
-            const orphans = await detectOrphanProcesses(persistedSessions.map(s => ({
-                agentId: s.agentId,
-                pid: s.pid,
-                workspacePath: s.workspacePath,
-                command: s.command,
-            })));
-            // ★ 检查停止标志（异步操作后）
-            if (this.stopped) {
-                logger.debug('监控器已停止，中断扫描');
-                return;
-            }
-            // 检测进程健康状态
-            const healthStatuses = await checkAllSessionsHealth(persistedSessions.filter(s => s.pid).map(s => ({ agentId: s.agentId, pid: s.pid })));
-            // ★ 检查停止标志（异步操作后）
-            if (this.stopped) {
-                logger.debug('监控器已停止，中断扫描');
-                return;
-            }
-            // 处理孤儿进程
-            for (const orphan of orphans) {
-                if (this.stopped)
-                    break; // ★ 循环中检查停止标志
-                await this.handleOrphanDetected(orphan.agentId, orphan.process.pid);
-            }
-            // 处理健康异常进程
-            for (const [agentId, health] of healthStatuses) {
-                if (this.stopped)
-                    break; // ★ 循环中检查停止标志
-                if (health.status !== 'healthy' && health.alive) {
-                    await this.handleHealthIssue(agentId, health);
-                }
-            }
-            // 清理不存在的会话（PID 死了但记录还在）
-            if (!this.stopped) {
-                await this.cleanupDeadSessions(persistedSessions, healthStatuses);
-            }
-        }
-        catch (error) {
-            logger.warn('扫描孤儿进程失败:', error);
-        }
-    }
-    /**
-     * 处理检测到的孤儿进程
-     */
-    async handleOrphanDetected(agentId, pid) {
-        const event = {
-            type: 'orphan_detected',
-            agentId,
-            pid,
-            message: `检测到孤儿进程: agentId=${agentId}, pid=${pid}`,
-            timestamp: new Date(),
-        };
-        this.emit(event);
-        logger.warn(`检测到孤儿进程: agentId=${agentId}, pid=${pid}`);
-        // ★ 优先向 server 确认 agent 是否已被删除。如果已删除，直接自动终止残留进程，
-        // 绕过 ORPHAN_AUTO_CLEAN_MODE 和双重开关保护——因为 agent 已明确不存在，
-        // 残留进程不可能再被恢复，继续运行只会浪费资源。
-        const agentExists = await this.checkAgentExistsOnServer(agentId);
-        if (agentExists === false) {
-            logger.info(`agent ${agentId} 已从服务端删除，自动终止残留进程 pid=${pid}`);
-            await this.autoCleanOrphan(agentId, pid);
-            return;
-        }
-        // agent 仍存在或无法确认时，按原有模式处理
-        switch (ORPHAN_AUTO_CLEAN_MODE) {
-            case 'auto':
-                if (shouldAutoCleanOrphanProcesses()) {
-                    await this.autoCleanOrphan(agentId, pid);
-                }
-                else {
-                    logger.warn('auto 模式未启用破坏性清理开关，改为告警并保留孤儿进程');
-                    await this.reportToScheduler(agentId, 'orphan_detected', { pid });
-                }
-                break;
-            case 'alert':
-                // 告警并等待处理
-                await this.reportToScheduler(agentId, 'orphan_detected', { pid });
-                break;
-            case 'manual':
-                // 仅记录日志，等待手动处理
-                logger.info('manual 模式，仅记录日志，不自动处理');
-                break;
-        }
-    }
-    /**
-     * 处理健康异常
-     */
-    async handleHealthIssue(agentId, health) {
-        const eventType = health.status === 'unresponsive' ? 'process_unresponsive'
-            : health.status === 'high_cpu' ? 'process_high_cpu'
-                : 'process_high_memory';
-        const event = {
-            type: eventType,
-            agentId,
-            pid: health.pid,
-            message: `进程健康异常: ${health.status}, CPU=${health.cpu}%, Memory=${health.memoryMB}MB`,
-            timestamp: new Date(),
-            details: {
-                cpu: health.cpu,
-                memoryMB: health.memoryMB,
-            },
-        };
-        this.emit(event);
-        // 告警到调度中心
-        await this.reportToScheduler(agentId, eventType, {
-            pid: health.pid,
-            cpu: health.cpu,
-            memoryMB: health.memoryMB,
-        });
-        // auto 模式下也只有显式启用破坏性清理开关时才终止异常进程。
-        if (ORPHAN_AUTO_CLEAN_MODE === 'auto'
-            && health.status !== 'healthy'
-            && shouldAutoCleanOrphanProcesses()) {
-            logger.warn(`auto 模式: 终止异常进程 ${health.pid} (${health.status})`);
-            await this.autoCleanOrphan(agentId, health.pid);
-        }
-        else if (ORPHAN_AUTO_CLEAN_MODE === 'auto' && health.status !== 'healthy') {
-            logger.warn(`auto 模式未启用破坏性清理开关，保留异常进程 ${health.pid} (${health.status})`);
-        }
-    }
-    /**
-     * 自动清理孤儿进程
-     */
-    async autoCleanOrphan(agentId, pid) {
-        logger.info(`自动清理孤儿进程：agentId=${agentId}, pid=${pid}`);
-        // 使用进程树终止
-        const result = await terminateProcessTree(pid);
-        // 等待进程完全终止（最多 5 秒）
-        const exited = await waitForProcessExit(pid, 5000);
-        if (result.terminated > 0 && exited) {
-            const event = {
-                type: 'orphan_cleaned',
-                agentId,
-                pid,
-                message: `自动清理成功：agentId=${agentId}, pid=${pid}, 终止了 ${result.terminated} 个进程`,
-                timestamp: new Date(),
-                details: { terminated: result.terminated, failed: result.failed },
-            };
-            this.emit(event);
-            await this.reportToScheduler(agentId, 'orphan_cleaned', { pid, terminated: result.terminated, failed: result.failed });
-        }
-        else {
-            logger.warn(`自动清理失败：agentId=${agentId}, pid=${pid}, terminated=${result.terminated}, exited=${exited}`);
-            await this.reportToScheduler(agentId, 'orphan_clean_failed', { pid, terminated: result.terminated, failed: result.failed });
-        }
-    }
-    /**
-     * 清理已死亡的会话记录
-     */
-    async cleanupDeadSessions(sessions, healthStatuses) {
-        const deadSessions = sessions.filter(s => {
-            if (!s.pid)
-                return false;
-            const health = healthStatuses.get(s.agentId);
-            return !health?.alive;
-        });
-        if (deadSessions.length > 0) {
-            logger.info(`清理 ${deadSessions.length} 个已死亡会话记录`);
-            const aliveSessions = sessions.filter(s => {
-                const health = healthStatuses.get(s.agentId);
-                return health?.alive !== false;
-            });
-            await savePersistedSessions(aliveSessions);
-        }
-    }
-    /**
-     * 向 server 查询 agent 是否仍然存在。
-     * 返回 true=存在, false=已删除, null=无法确认（网络错误/认证失败等）。
-     */
-    async checkAgentExistsOnServer(agentId) {
-        if (this.stopped) {
-            return null;
-        }
-        try {
-            const runtimeAccessToken = getRuntimeAccessToken(schedulerBaseUrl) || getRuntimeAccessToken();
-            if (!runtimeAccessToken) {
-                logger.debug('缺少 runtimeAccessToken，无法查询 agent 存在性');
-                return null;
-            }
-            const response = await fetch(`${schedulerBaseUrl}/api/runtime/callback/agent-exists`, {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'X-Runtime-Token': runtimeAccessToken,
-                },
-                body: JSON.stringify({ agentId }),
-                signal: AbortSignal.timeout(5000),
-            });
-            if (!response.ok) {
-                logger.debug(`查询 agent 存在性失败: ${response.status}`);
-                return null;
-            }
-            const data = await response.json();
-            return data.exists === true;
-        }
-        catch (error) {
-            logger.debug('查询 agent 存在性异常:', error);
-            return null;
-        }
-    }
-    /**
-     * 上报事件到调度中心
-     */
-    async reportToScheduler(agentId, eventType, details) {
-        // ★ 如果已停止，跳过上报（关闭时调度中心可能已不可达）
-        if (this.stopped) {
-            logger.debug(`监控器已停止，跳过上报: ${eventType}`);
-            return;
-        }
-        try {
-            const runtimeAccessToken = getRuntimeAccessToken(schedulerBaseUrl) || getRuntimeAccessToken();
-            if (!runtimeAccessToken) {
-                logger.debug(`缺少 runtimeAccessToken，跳过上报: ${eventType}`);
-                return;
-            }
-            const response = await fetch(`${schedulerBaseUrl}/api/runtime/callback/orphan-event`, {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'X-Runtime-Token': runtimeAccessToken,
-                },
-                body: JSON.stringify({
-                    agentId,
-                    eventType,
-                    details,
-                    timestamp: new Date().toISOString(),
-                }),
-            });
-            if (!response.ok) {
-                // ★ 404 表示调度中心不可达或已关闭，降低日志级别避免噪音
-                if (response.status === 404) {
-                    logger.debug(`上报失败: 调度中心不可达 (404)，事件: ${eventType}`);
-                }
-                else {
-                    logger.warn(`上报失败: ${response.status}`);
-                }
-            }
-        }
-        catch (error) {
-            // ★ 网络错误时降低日志级别（关闭时常见）
-            logger.debug('上报到调度中心失败:', error);
-        }
-    }
-    /**
-     * 注册事件监听器
-     */
-    onEvent(listener) {
-        this.eventListeners.push(listener);
-    }
-    /**
-     * 移除事件监听器
-     */
-    offEvent(listener) {
-        const index = this.eventListeners.indexOf(listener);
-        if (index > -1) {
-            this.eventListeners.splice(index, 1);
-        }
-    }
-    /**
-     * 触发事件
-     */
-    emit(event) {
-        for (const listener of this.eventListeners) {
-            try {
-                listener(event);
-            }
-            catch (error) {
-                logger.warn('事件监听器执行失败:', error);
-            }
-        }
-    }
-    /**
-     * 获取监控状态
-     */
-    getStatus() {
-        return {
-            running: this.intervalId !== null,
-            lastScanTime: this.lastScanTime,
-            mode: ORPHAN_AUTO_CLEAN_MODE,
-        };
-    }
-}
-// 单例实例
-let orphanMonitorInstance = null;
-/**
- * 获取孤儿进程监控器实例
- */
-export function getOrphanMonitor() {
-    if (!orphanMonitorInstance) {
-        orphanMonitorInstance = new OrphanMonitor();
-    }
-    return orphanMonitorInstance;
-}
-/**
- * 启动孤儿进程监控
- */
-export async function startOrphanMonitor() {
-    const monitor = getOrphanMonitor();
-    await monitor.start();
-}
-/**
- * 停止孤儿进程监控
- */
-export function stopOrphanMonitor() {
-    const monitor = getOrphanMonitor();
-    monitor.stop();
-}
+import{createLogger as m}from"../utils/logger.js";import{loadPersistedSessions as f,savePersistedSessions as g}from"./terminal-persistence.js";import{detectOrphanProcesses as w,checkAllSessionsHealth as S,terminateProcessTree as $,waitForProcessExit as y}from"./process-detector.js";import{ORPHAN_SCAN_INTERVAL as d,ORPHAN_AUTO_CLEAN_MODE as r,ORPHAN_SCAN_ENABLED as v,schedulerBaseUrl as o}from"../config.js";import{getRuntimeAccessToken as c}from"./runtime-binding.js";import{shouldAutoCleanOrphanProcesses as l}from"./runtime-lifecycle-policy.js";const n=m("orphan-monitor");class O{constructor(){this.intervalId=null,this.lastScanTime=null,this.eventListeners=[],this.stopped=!1}async start(){if(!v){n.info("\u5B64\u513F\u8FDB\u7A0B\u76D1\u63A7\u5DF2\u7981\u7528 (AWS_ORPHAN_SCAN_ENABLED=false)");return}this.stopped=!1,n.info(`\u542F\u52A8\u5B64\u513F\u8FDB\u7A0B\u76D1\u63A7\uFF0C\u626B\u63CF\u95F4\u9694: ${d}ms, \u81EA\u52A8\u6E05\u7406\u6A21\u5F0F: ${r}`),await this.scan(),this.intervalId=setInterval(async()=>{await this.scan()},d),n.info("\u5B64\u513F\u8FDB\u7A0B\u76D1\u63A7\u5DF2\u542F\u52A8")}stop(){this.stopped=!0,this.intervalId&&(clearInterval(this.intervalId),this.intervalId=null,n.info("\u5B64\u513F\u8FDB\u7A0B\u76D1\u63A7\u5DF2\u505C\u6B62"))}async scan(){if(this.stopped){n.debug("\u76D1\u63A7\u5668\u5DF2\u505C\u6B62\uFF0C\u8DF3\u8FC7\u626B\u63CF");return}this.lastScanTime=new Date,n.debug("\u5F00\u59CB\u626B\u63CF\u5B64\u513F\u8FDB\u7A0B...");try{const e=await f();if(this.stopped){n.debug("\u76D1\u63A7\u5668\u5DF2\u505C\u6B62\uFF0C\u4E2D\u65AD\u626B\u63CF");return}if(e.length===0){n.debug("\u65E0\u6301\u4E45\u5316\u4F1A\u8BDD\uFF0C\u8DF3\u8FC7\u626B\u63CF");return}const t=await w(e.map(s=>({agentId:s.agentId,pid:s.pid,workspacePath:s.workspacePath,command:s.command})));if(this.stopped){n.debug("\u76D1\u63A7\u5668\u5DF2\u505C\u6B62\uFF0C\u4E2D\u65AD\u626B\u63CF");return}const a=await S(e.filter(s=>s.pid).map(s=>({agentId:s.agentId,pid:s.pid})));if(this.stopped){n.debug("\u76D1\u63A7\u5668\u5DF2\u505C\u6B62\uFF0C\u4E2D\u65AD\u626B\u63CF");return}for(const s of t){if(this.stopped)break;await this.handleOrphanDetected(s.agentId,s.process.pid)}for(const[s,i]of a){if(this.stopped)break;i.status!=="healthy"&&i.alive&&await this.handleHealthIssue(s,i)}this.stopped||await this.cleanupDeadSessions(e,a)}catch(e){n.warn("\u626B\u63CF\u5B64\u513F\u8FDB\u7A0B\u5931\u8D25:",e)}}async handleOrphanDetected(e,t){const a={type:"orphan_detected",agentId:e,pid:t,message:`\u68C0\u6D4B\u5230\u5B64\u513F\u8FDB\u7A0B: agentId=${e}, pid=${t}`,timestamp:new Date};if(this.emit(a),n.warn(`\u68C0\u6D4B\u5230\u5B64\u513F\u8FDB\u7A0B: agentId=${e}, pid=${t}`),await this.checkAgentExistsOnServer(e)===!1){n.info(`agent ${e} \u5DF2\u4ECE\u670D\u52A1\u7AEF\u5220\u9664\uFF0C\u81EA\u52A8\u7EC8\u6B62\u6B8B\u7559\u8FDB\u7A0B pid=${t}`),await this.autoCleanOrphan(e,t);return}switch(r){case"auto":l()?await this.autoCleanOrphan(e,t):(n.warn("auto \u6A21\u5F0F\u672A\u542F\u7528\u7834\u574F\u6027\u6E05\u7406\u5F00\u5173\uFF0C\u6539\u4E3A\u544A\u8B66\u5E76\u4FDD\u7559\u5B64\u513F\u8FDB\u7A0B"),await this.reportToScheduler(e,"orphan_detected",{pid:t}));break;case"alert":await this.reportToScheduler(e,"orphan_detected",{pid:t});break;case"manual":n.info("manual \u6A21\u5F0F\uFF0C\u4EC5\u8BB0\u5F55\u65E5\u5FD7\uFF0C\u4E0D\u81EA\u52A8\u5904\u7406");break}}async handleHealthIssue(e,t){const a=t.status==="unresponsive"?"process_unresponsive":t.status==="high_cpu"?"process_high_cpu":"process_high_memory",s={type:a,agentId:e,pid:t.pid,message:`\u8FDB\u7A0B\u5065\u5EB7\u5F02\u5E38: ${t.status}, CPU=${t.cpu}%, Memory=${t.memoryMB}MB`,timestamp:new Date,details:{cpu:t.cpu,memoryMB:t.memoryMB}};this.emit(s),await this.reportToScheduler(e,a,{pid:t.pid,cpu:t.cpu,memoryMB:t.memoryMB}),r==="auto"&&t.status!=="healthy"&&l()?(n.warn(`auto \u6A21\u5F0F: \u7EC8\u6B62\u5F02\u5E38\u8FDB\u7A0B ${t.pid} (${t.status})`),await this.autoCleanOrphan(e,t.pid)):r==="auto"&&t.status!=="healthy"&&n.warn(`auto \u6A21\u5F0F\u672A\u542F\u7528\u7834\u574F\u6027\u6E05\u7406\u5F00\u5173\uFF0C\u4FDD\u7559\u5F02\u5E38\u8FDB\u7A0B ${t.pid} (${t.status})`)}async autoCleanOrphan(e,t){n.info(`\u81EA\u52A8\u6E05\u7406\u5B64\u513F\u8FDB\u7A0B\uFF1AagentId=${e}, pid=${t}`);const a=await $(t),s=await y(t,5e3);if(a.terminated>0&&s){const i={type:"orphan_cleaned",agentId:e,pid:t,message:`\u81EA\u52A8\u6E05\u7406\u6210\u529F\uFF1AagentId=${e}, pid=${t}, \u7EC8\u6B62\u4E86 ${a.terminated} \u4E2A\u8FDB\u7A0B`,timestamp:new Date,details:{terminated:a.terminated,failed:a.failed}};this.emit(i),await this.reportToScheduler(e,"orphan_cleaned",{pid:t,terminated:a.terminated,failed:a.failed})}else n.warn(`\u81EA\u52A8\u6E05\u7406\u5931\u8D25\uFF1AagentId=${e}, pid=${t}, terminated=${a.terminated}, exited=${s}`),await this.reportToScheduler(e,"orphan_clean_failed",{pid:t,terminated:a.terminated,failed:a.failed})}async cleanupDeadSessions(e,t){const a=e.filter(s=>s.pid?!t.get(s.agentId)?.alive:!1);if(a.length>0){n.info(`\u6E05\u7406 ${a.length} \u4E2A\u5DF2\u6B7B\u4EA1\u4F1A\u8BDD\u8BB0\u5F55`);const s=e.filter(i=>t.get(i.agentId)?.alive!==!1);await g(s)}}async checkAgentExistsOnServer(e){if(this.stopped)return null;try{const t=c(o)||c();if(!t)return n.debug("\u7F3A\u5C11 runtimeAccessToken\uFF0C\u65E0\u6CD5\u67E5\u8BE2 agent \u5B58\u5728\u6027"),null;const a=await fetch(`${o}/api/runtime/callback/agent-exists`,{method:"POST",headers:{"Content-Type":"application/json","X-Runtime-Token":t},body:JSON.stringify({agentId:e}),signal:AbortSignal.timeout(5e3)});return a.ok?(await a.json()).exists===!0:(n.debug(`\u67E5\u8BE2 agent \u5B58\u5728\u6027\u5931\u8D25: ${a.status}`),null)}catch(t){return n.debug("\u67E5\u8BE2 agent \u5B58\u5728\u6027\u5F02\u5E38:",t),null}}async reportToScheduler(e,t,a){if(this.stopped){n.debug(`\u76D1\u63A7\u5668\u5DF2\u505C\u6B62\uFF0C\u8DF3\u8FC7\u4E0A\u62A5: ${t}`);return}try{const s=c(o)||c();if(!s){n.debug(`\u7F3A\u5C11 runtimeAccessToken\uFF0C\u8DF3\u8FC7\u4E0A\u62A5: ${t}`);return}const i=await fetch(`${o}/api/runtime/callback/orphan-event`,{method:"POST",headers:{"Content-Type":"application/json","X-Runtime-Token":s},body:JSON.stringify({agentId:e,eventType:t,details:a,timestamp:new Date().toISOString()})});i.ok||(i.status===404?n.debug(`\u4E0A\u62A5\u5931\u8D25: \u8C03\u5EA6\u4E2D\u5FC3\u4E0D\u53EF\u8FBE (404)\uFF0C\u4E8B\u4EF6: ${t}`):n.warn(`\u4E0A\u62A5\u5931\u8D25: ${i.status}`))}catch(s){n.debug("\u4E0A\u62A5\u5230\u8C03\u5EA6\u4E2D\u5FC3\u5931\u8D25:",s)}}onEvent(e){this.eventListeners.push(e)}offEvent(e){const t=this.eventListeners.indexOf(e);t>-1&&this.eventListeners.splice(t,1)}emit(e){for(const t of this.eventListeners)try{t(e)}catch(a){n.warn("\u4E8B\u4EF6\u76D1\u542C\u5668\u6267\u884C\u5931\u8D25:",a)}}getStatus(){return{running:this.intervalId!==null,lastScanTime:this.lastScanTime,mode:r}}}let p=null;function h(){return p||(p=new O),p}async function E(){await h().start()}function M(){h().stop()}export{O as OrphanMonitor,h as getOrphanMonitor,E as startOrphanMonitor,M as stopOrphanMonitor};
+

package/dist/services/panel-auth.d.ts

@@ -46,4 +46,3 @@ export declare function isDefaultCredentials(): boolean;
  */
 export declare function setPanelCredentials(username: string, password: string): void;
 export {};
-//# sourceMappingURL=panel-auth.d.ts.map

package/dist/services/panel-auth.js

@@ -1,168 +1,2 @@
-/**
- * Bridge 面板登录认证服务
- *
- * 管理面板登录凭据与会话，凭据读取自 ~/.aws-bridge/config.json，
- * panelUsername/panelPassword 字段均不配置时默认 root/root。
- *
- * 会话使用服务端内存存储 + HttpOnly Cookie 实现，无需外部依赖。
- */
-import { randomUUID } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { logger } from "../utils/logger.js";
-const SESSION_TTL_MS = 24 * 60 * 60 * 1000; // 24 小时
-const SESSION_CLEANUP_INTERVAL_MS = 60 * 60 * 1000; // 每小时清理一次
-const sessions = new Map();
-let cleanupTimer = null;
-function startCleanupTimer() {
-    if (cleanupTimer)
-        return;
-    cleanupTimer = setInterval(() => {
-        const now = Date.now();
-        let expired = 0;
-        for (const [token, session] of sessions) {
-            if (now - session.lastUsedAt > SESSION_TTL_MS) {
-                sessions.delete(token);
-                expired++;
-            }
-        }
-        if (expired > 0) {
-            logger.info(`[panel-auth] 已清理 ${expired} 个过期面板会话`);
-        }
-    }, SESSION_CLEANUP_INTERVAL_MS);
-    cleanupTimer.unref();
-}
-/** 生成一个新会话并返回会话 token */
-export function createSession() {
-    startCleanupTimer();
-    const token = randomUUID();
-    const now = Date.now();
-    sessions.set(token, { token, createdAt: now, lastUsedAt: now });
-    return token;
-}
-/** 校验会话 token 是否有效；通过后更新最后使用时间 */
-export function validateSession(token) {
-    if (!token)
-        return false;
-    const session = sessions.get(token);
-    if (!session)
-        return false;
-    const now = Date.now();
-    if (now - session.lastUsedAt > SESSION_TTL_MS) {
-        sessions.delete(token);
-        return false;
-    }
-    session.lastUsedAt = now;
-    return true;
-}
-/** 销毁指定会话（登出） */
-export function destroySession(token) {
-    sessions.delete(token);
-}
-/** 列出所有活跃会话（用于管理面板） */
-export function getAllSessions() {
-    return Array.from(sessions.values());
-}
-/** 获取当前活跃会话数 */
-export function getActiveSessionCount() {
-    return sessions.size;
-}
-let cachedCredentials = null;
-function getConfigFilePath() {
-    return path.join(os.homedir(), ".aws-bridge", "config.json");
-}
-function readCredentialsFromConfig() {
-    const configPath = getConfigFilePath();
-    if (!existsSync(configPath))
-        return null;
-    try {
-        const raw = readFileSync(configPath, "utf-8");
-        const parsed = JSON.parse(raw);
-        const username = String(parsed.panelUsername || "").trim();
-        const password = String(parsed.panelPassword || "").trim();
-        if (username && password) {
-            return { username, password };
-        }
-    }
-    catch {
-        // 配置不可读时回退到默认值
-    }
-    return null;
-}
-/** 获取面板登录凭据，未配置时返回默认值 root/root */
-export function getPanelCredentials() {
-    if (cachedCredentials)
-        return cachedCredentials;
-    const fromConfig = readCredentialsFromConfig();
-    if (fromConfig) {
-        cachedCredentials = fromConfig;
-        return fromConfig;
-    }
-    cachedCredentials = { username: "root", password: "root" };
-    return cachedCredentials;
-}
-/** 校验用户名密码 */
-export function validateCredentials(username, password) {
-    const creds = getPanelCredentials();
-    return username === creds.username && password === creds.password;
-}
-/** 清除凭据缓存（配置文件变更后调用） */
-export function clearCredentialsCache() {
-    cachedCredentials = null;
-}
-/**
- * 检查 config.json 中是否已配置过面板凭据（panelUsername/panelPassword）。
- * 用于首次登录引导：如果未配置过（文件不存在或缺少字段），应引导用户设置。
- * 已配置过的场景（包括值正好为 root/root）不再重复引导。
- */
-export function hasConfiguredCredentials() {
-    const configPath = getConfigFilePath();
-    if (!existsSync(configPath))
-        return false;
-    try {
-        const raw = readFileSync(configPath, "utf-8");
-        const parsed = JSON.parse(raw);
-        return !!(parsed.panelUsername && parsed.panelPassword);
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * 判断当前凭据是否为默认值 root/root。
- */
-export function isDefaultCredentials() {
-    const creds = getPanelCredentials();
-    return creds.username === "root" && creds.password === "root";
-}
-/**
- * 写入新的面板凭据到 config.json，并更新缓存。
- * 主流程：读取现有配置 → 合并新字段 → 写回文件 → 清缓存。
- */
-export function setPanelCredentials(username, password) {
-    const configPath = getConfigFilePath();
-    const configDir = path.dirname(configPath);
-    // 读取现有配置
-    let existing = {};
-    if (existsSync(configPath)) {
-        try {
-            existing = JSON.parse(readFileSync(configPath, "utf-8"));
-        }
-        catch {
-            // 配置不可读则从头创建
-        }
-    }
-    existing.panelUsername = username;
-    existing.panelPassword = password;
-    // 确保目录存在
-    try {
-        mkdirSync(configDir, { recursive: true });
-    }
-    catch {
-        // 目录已存在
-    }
-    writeFileSync(configPath, JSON.stringify(existing, null, 2), "utf-8");
-    clearCredentialsCache();
-    logger.info("[panel-auth] 面板凭据已更新");
-}
+import{randomUUID as S}from"node:crypto";import{existsSync as a,mkdirSync as g,readFileSync as c,writeFileSync as w}from"node:fs";import C from"node:os";import f from"node:path";import{logger as d}from"../utils/logger.js";const p=24*60*60*1e3,h=60*60*1e3,r=new Map;let l=null;function x(){l||(l=setInterval(()=>{const e=Date.now();let t=0;for(const[n,s]of r)e-s.lastUsedAt>p&&(r.delete(n),t++);t>0&&d.info(`[panel-auth] \u5DF2\u6E05\u7406 ${t} \u4E2A\u8FC7\u671F\u9762\u677F\u4F1A\u8BDD`)},h),l.unref())}function O(){x();const e=S(),t=Date.now();return r.set(e,{token:e,createdAt:t,lastUsedAt:t}),e}function I(e){if(!e)return!1;const t=r.get(e);if(!t)return!1;const n=Date.now();return n-t.lastUsedAt>p?(r.delete(e),!1):(t.lastUsedAt=n,!0)}function T(e){r.delete(e)}function _(){return Array.from(r.values())}function E(){return r.size}let i=null;function u(){return f.join(C.homedir(),".aws-bridge","config.json")}function y(){const e=u();if(!a(e))return null;try{const t=c(e,"utf-8"),n=JSON.parse(t),s=String(n.panelUsername||"").trim(),o=String(n.panelPassword||"").trim();if(s&&o)return{username:s,password:o}}catch{}return null}function m(){if(i)return i;const e=y();return e?(i=e,e):(i={username:"root",password:"root"},i)}function F(e,t){const n=m();return e===n.username&&t===n.password}function A(){i=null}function J(){const e=u();if(!a(e))return!1;try{const t=c(e,"utf-8"),n=JSON.parse(t);return!!(n.panelUsername&&n.panelPassword)}catch{return!1}}function L(){const e=m();return e.username==="root"&&e.password==="root"}function M(e,t){const n=u(),s=f.dirname(n);let o={};if(a(n))try{o=JSON.parse(c(n,"utf-8"))}catch{}o.panelUsername=e,o.panelPassword=t;try{g(s,{recursive:!0})}catch{}w(n,JSON.stringify(o,null,2),"utf-8"),A(),d.info("[panel-auth] \u9762\u677F\u51ED\u636E\u5DF2\u66F4\u65B0")}export{A as clearCredentialsCache,O as createSession,T as destroySession,E as getActiveSessionCount,_ as getAllSessions,m as getPanelCredentials,J as hasConfiguredCredentials,L as isDefaultCredentials,M as setPanelCredentials,F as validateCredentials,I as validateSession};
+

package/dist/services/process-detector.d.ts

@@ -177,4 +177,3 @@ export declare function discoverAllProcessesFull(registryExport: Array<{
     agentId: string;
     pid: number;
 }>): Promise<DiscoveredProcessInfo[]>;
-//# sourceMappingURL=process-detector.d.ts.map