aws-runtime-bridge 1.9.9 → 1.9.10

package/dist/index.js

@@ -269,10 +269,10 @@ app.use(cors({
             return;
         }
         // 允许 bridge 自身端口的来源（dashboard/登录页面同源请求）
+        // 无论主机名是 localhost、127.0.0.1 还是外部 IP，只要端口匹配就放行
         try {
             const url = new URL(origin);
-            if ((url.hostname === "localhost" || url.hostname === "127.0.0.1") &&
-                url.port === String(port)) {
+            if (url.port === String(port)) {
                 callback(null, true);
                 return;
             }

package/dist/routes/dashboard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/routes/dashboard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+EH,eAAO,MAAM,eAAe,4CAAW,CAAC"}
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/routes/dashboard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkFH,eAAO,MAAM,eAAe,4CAAW,CAAC"}

package/dist/routes/dashboard.js

@@ -14,7 +14,7 @@ import { loadPersistedSessions } from "../services/terminal-persistence.js";
 import { createLogger } from "../utils/logger.js";
 import { getBridgeVersion } from "../config.js";
 import { sdkSessions } from "./terminal.js";
-import { createSession, validateSession, destroySession, validateCredentials, } from "../services/panel-auth.js";
+import { createSession, validateSession, destroySession, validateCredentials, hasConfiguredCredentials, isDefaultCredentials, setPanelCredentials, } from "../services/panel-auth.js";
 const log = createLogger("dashboard");
 // ── 内存缓存（两级） ─────────────────────────────────────
 // 一级：完整响应缓存，匹配前端轮询间隔（10s），避免大部分请求走 I/O
@@ -119,9 +119,10 @@ dashboardRouter.post("/runtime/login", (req, res) => {
         return;
     }
     const token = createSession();
+    const needSetup = !hasConfiguredCredentials();
     // 设置 HttpOnly cookie，24 小时过期
     res.setHeader("Set-Cookie", `${COOKIE_NAME}=${token}; HttpOnly; SameSite=Lax; Path=/; Max-Age=86400`);
-    res.json({ ok: true });
+    res.json({ ok: true, needSetup });
 });
 /** POST /runtime/logout 登出 */
 dashboardRouter.post("/runtime/logout", (req, res) => {
@@ -132,6 +133,40 @@ dashboardRouter.post("/runtime/logout", (req, res) => {
     res.setHeader("Set-Cookie", `${COOKIE_NAME}=; HttpOnly; SameSite=Lax; Path=/; Max-Age=0`);
     res.json({ ok: true });
 });
+/**
+ * GET /runtime/credentials-status
+ * 返回当前凭据是否仍是默认值 root/root。
+ * 需要面板登录会话。
+ */
+dashboardRouter.get("/runtime/credentials-status", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    res.json({ ok: true, isDefault: isDefaultCredentials(), configured: hasConfiguredCredentials() });
+});
+/**
+ * POST /runtime/change-credentials
+ * 修改面板登录凭据，写入 ~/.aws-bridge/config.json。
+ * 需要面板登录会话。密码需两次一致且非空。
+ */
+dashboardRouter.post("/runtime/change-credentials", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    const { username, password, passwordConfirm } = req.body || {};
+    if (!username || !String(username).trim()) {
+        res.status(400).json({ ok: false, error: "username required" });
+        return;
+    }
+    if (!password || !String(password).trim()) {
+        res.status(400).json({ ok: false, error: "password required" });
+        return;
+    }
+    if (String(password) !== String(passwordConfirm)) {
+        res.status(400).json({ ok: false, error: "passwords do not match" });
+        return;
+    }
+    setPanelCredentials(String(username).trim(), String(password));
+    res.json({ ok: true });
+});
 /**
  * GET /runtime/dashboard
  * 聚合 bridge 所有状态数据。使用 2 秒缓存避免频繁 I/O，需要面板登录会话。
@@ -254,6 +289,7 @@ dashboardRouter.get("/login", (_req, res) => {
 /**
  * GET / 仪表盘主页
  * 需要面板登录会话，未登录时跳转到 /login。
+ * 当凭据仍是默认值 root/root 时跳转到 /setup 引导首次设置。
  * 支持 ?lang=en 切换英文，默认中文
  */
 dashboardRouter.get("/", (req, res) => {
@@ -262,10 +298,28 @@ dashboardRouter.get("/", (req, res) => {
         res.redirect("/login");
         return;
     }
+    // 如果 config.json 尚未配置过凭据，引导首次设置
+    if (!hasConfiguredCredentials()) {
+        res.redirect("/setup");
+        return;
+    }
     const lang = req.query.lang === "en" ? "en" : "zh";
     res.type("text/html; charset=utf-8");
     res.send(DASHBOARD_HTML.replace("{{LANG}}", lang));
 });
+/**
+ * GET /setup 首次登录设置页面
+ * 需要面板登录会话。提供用户名/密码修改表单，也支持跳过（保持 root/root）。
+ */
+dashboardRouter.get("/setup", (req, res) => {
+    const token = getSessionToken(req);
+    if (!token || !validateSession(token)) {
+        res.redirect("/login");
+        return;
+    }
+    res.type("text/html; charset=utf-8");
+    res.send(SETUP_HTML);
+});
 // ======================================================================
 // DASHBOARD HTML — 单页自包含，支持中文/英文界面，默认中文
 // ======================================================================
@@ -1322,7 +1376,12 @@ async function doLogin(e) {
     });
 
     if (resp.ok) {
-      window.location.href = "/";
+      const data = await resp.json();
+      if (data.needSetup) {
+        window.location.href = "/setup";
+      } else {
+        window.location.href = "/";
+      }
       return;
     }
 
@@ -1345,3 +1404,294 @@ document.getElementById("loginForm").addEventListener("keydown", function(e) {
 </script>
 </body>
 </html>`;
+// ======================================================================
+// SETUP HTML — 首次登录设置页面
+// ======================================================================
+const SETUP_HTML = `<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Bridge Dashboard - Setup</title>
+<style>
+  :root {
+    --bg: #0f1117;
+    --surface: #1a1d2e;
+    --surface2: #232738;
+    --border: #2d3248;
+    --text: #e1e4f0;
+    --text2: #8b90a8;
+    --accent: #5b8def;
+    --accent-hover: #4a7de0;
+    --green: #43c6a8;
+    --red: #f05454;
+    --radius: 10px;
+  }
+  * { margin:0; padding:0; box-sizing:border-box; }
+  body {
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans SC", sans-serif;
+    background: var(--bg);
+    color: var(--text);
+    min-height: 100vh;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 20px;
+  }
+  .setup-card {
+    background: var(--surface);
+    border: 1px solid var(--border);
+    border-radius: var(--radius);
+    padding: 40px 36px;
+    width: 400px;
+    max-width: 100%;
+  }
+  .setup-card h1 {
+    font-size: 20px;
+    font-weight: 600;
+    margin-bottom: 4px;
+    text-align: center;
+  }
+  .setup-card p.subtitle {
+    font-size: 13px;
+    color: var(--text2);
+    text-align: center;
+    margin-bottom: 24px;
+  }
+  .badge {
+    display: inline-block;
+    background: rgba(240,160,48,0.12);
+    color: #f0a030;
+    font-size: 12px;
+    padding: 2px 10px;
+    border-radius: 4px;
+    margin-bottom: 20px;
+    text-align: center;
+    width: 100%;
+  }
+  .form-group {
+    margin-bottom: 18px;
+  }
+  .form-group label {
+    display: block;
+    font-size: 13px;
+    font-weight: 500;
+    margin-bottom: 6px;
+    color: var(--text2);
+  }
+  .form-group input {
+    width: 100%;
+    padding: 10px 12px;
+    background: var(--surface2);
+    border: 1px solid var(--border);
+    border-radius: 6px;
+    color: var(--text);
+    font-size: 14px;
+    outline: none;
+    transition: border-color .15s;
+  }
+  .form-group input:focus {
+    border-color: var(--accent);
+  }
+  .form-group input::placeholder {
+    color: var(--text2);
+    opacity: 0.6;
+  }
+  .btn-row {
+    display: flex;
+    gap: 12px;
+    margin-top: 24px;
+  }
+  .btn-row button {
+    flex: 1;
+    padding: 10px;
+    border-radius: 6px;
+    font-size: 14px;
+    font-weight: 600;
+    cursor: pointer;
+    transition: all .15s;
+    border: none;
+  }
+  .btn-primary {
+    background: var(--accent);
+    color: #fff;
+  }
+  .btn-primary:hover { background: var(--accent-hover); }
+  .btn-primary:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+  }
+  .btn-skip {
+    background: var(--surface2);
+    color: var(--text);
+    border: 1px solid var(--border) !important;
+  }
+  .btn-skip:hover { background: var(--border); }
+  .error-msg {
+    background: rgba(240,84,84,0.12);
+    color: var(--red);
+    padding: 8px 12px;
+    border-radius: 6px;
+    font-size: 13px;
+    margin-bottom: 16px;
+    display: none;
+  }
+  .error-msg.visible { display: block; }
+  .success-msg {
+    background: rgba(67,198,168,0.12);
+    color: var(--green);
+    padding: 8px 12px;
+    border-radius: 6px;
+    font-size: 13px;
+    margin-bottom: 16px;
+    display: none;
+    text-align: center;
+  }
+  .success-msg.visible { display: block; }
+  .hint {
+    font-size: 12px;
+    color: var(--text2);
+    margin-top: 16px;
+    text-align: center;
+    line-height: 1.6;
+  }
+  .spinner {
+    display: inline-block;
+    width: 14px;
+    height: 14px;
+    border: 2px solid var(--text2);
+    border-top-color: var(--accent);
+    border-radius: 50%;
+    animation: spin .6s linear infinite;
+    vertical-align: middle;
+    margin-right: 6px;
+  }
+  @keyframes spin { to { transform: rotate(360deg); } }
+</style>
+</head>
+<body>
+<div class="setup-card" id="setupCard">
+  <h1>Bridge Dashboard</h1>
+  <p class="subtitle">First-time setup — 首次登录设置</p>
+  <div class="badge">Default credentials detected. Please set a new username and password.<br>检测到默认凭据，请设置新的用户名和密码</div>
+  <div class="error-msg" id="errorMsg"></div>
+  <div class="success-msg" id="successMsg">Credentials saved! Redirecting... / 凭据已保存，正在跳转...</div>
+  <form id="setupForm">
+    <div class="form-group">
+      <label for="username">Username / 用户名</label>
+      <input type="text" id="username" name="username" value="root" autocomplete="username" autofocus>
+    </div>
+    <div class="form-group">
+      <label for="password">New Password / 新密码</label>
+      <input type="password" id="password" name="password" placeholder="Enter new password" autocomplete="new-password">
+    </div>
+    <div class="form-group">
+      <label for="passwordConfirm">Confirm Password / 确认密码</label>
+      <input type="password" id="passwordConfirm" name="passwordConfirm" placeholder="Enter password again" autocomplete="new-password">
+    </div>
+    <div class="btn-row">
+      <button type="button" class="btn-skip" id="skipBtn" onclick="doSkip()">Skip / 跳过</button>
+      <button type="submit" class="btn-primary" id="saveBtn">Save / 保存</button>
+    </div>
+  </form>
+  <div class="hint">Skip to keep default credentials <b>root/root</b>. You can change them later via <code>~/.aws-bridge/config.json</code>.<br>跳过以保留默认凭据 <b>root/root</b>。</div>
+</div>
+<script>
+async function doSave(e) {
+  e.preventDefault();
+  const errorEl = document.getElementById("errorMsg");
+  const saveBtn = document.getElementById("saveBtn");
+  errorEl.classList.remove("visible");
+
+  const username = document.getElementById("username").value.trim();
+  const password = document.getElementById("password").value;
+  const passwordConfirm = document.getElementById("passwordConfirm").value;
+
+  if (!username) {
+    errorEl.textContent = "Username is required / 用户名不能为空";
+    errorEl.classList.add("visible");
+    return;
+  }
+  if (!password) {
+    errorEl.textContent = "Password is required / 密码不能为空";
+    errorEl.classList.add("visible");
+    return;
+  }
+  if (password !== passwordConfirm) {
+    errorEl.textContent = "Passwords do not match / 两次输入的密码不一致";
+    errorEl.classList.add("visible");
+    return;
+  }
+  if (password.length < 4) {
+    errorEl.textContent = "Password must be at least 4 characters / 密码至少4位";
+    errorEl.classList.add("visible");
+    return;
+  }
+
+  saveBtn.disabled = true;
+  saveBtn.innerHTML = '<span class="spinner"></span>Saving...';
+
+  try {
+    const resp = await fetch("/runtime/change-credentials", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ username, password, passwordConfirm }),
+    });
+    const data = await resp.json();
+    if (data.ok) {
+      document.getElementById("successMsg").classList.add("visible");
+      document.getElementById("setupForm").style.display = "none";
+      document.querySelector(".hint").style.display = "none";
+      document.querySelector(".badge").style.display = "none";
+      setTimeout(() => { window.location.href = "/"; }, 1500);
+    } else {
+      errorEl.textContent = data.error || "Save failed";
+      errorEl.classList.add("visible");
+      saveBtn.disabled = false;
+      saveBtn.textContent = "Save / 保存";
+    }
+  } catch (err) {
+    errorEl.textContent = "Network error, please try again / 网络错误，请重试";
+    errorEl.classList.add("visible");
+    saveBtn.disabled = false;
+    saveBtn.textContent = "Save / 保存";
+  }
+}
+
+async function doSkip() {
+  const skipBtn = document.getElementById("skipBtn");
+  const errorEl = document.getElementById("errorMsg");
+  skipBtn.disabled = true;
+  skipBtn.textContent = "Skipping... / 跳过中...";
+
+  try {
+    const resp = await fetch("/runtime/change-credentials", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ username: "root", password: "root", passwordConfirm: "root" }),
+    });
+    const data = await resp.json();
+    if (data.ok) {
+      document.getElementById("successMsg").classList.add("visible");
+      document.getElementById("setupForm").style.display = "none";
+      document.querySelector(".hint").style.display = "none";
+      document.querySelector(".badge").style.display = "none";
+      setTimeout(() => { window.location.href = "/"; }, 1500);
+    } else {
+      errorEl.textContent = data.error || "Skip failed";
+      errorEl.classList.add("visible");
+      skipBtn.disabled = false;
+      skipBtn.textContent = "Skip / 跳过";
+    }
+  } catch (err) {
+    errorEl.textContent = "Network error, please try again / 网络错误，请重试";
+    errorEl.classList.add("visible");
+    skipBtn.disabled = false;
+    skipBtn.textContent = "Skip / 跳过";
+  }
+}
+
+document.getElementById("setupForm").addEventListener("submit", doSave);
+</script>
+</body>
+</html>`;

package/dist/services/panel-auth.d.ts

@@ -22,5 +22,20 @@ export declare function getPanelCredentials(): PanelCredentials;
 export declare function validateCredentials(username: string, password: string): boolean;
 /** 清除凭据缓存（配置文件变更后调用） */
 export declare function clearCredentialsCache(): void;
+/**
+ * 检查 config.json 中是否已配置过面板凭据（panelUsername/panelPassword）。
+ * 用于首次登录引导：如果未配置过（文件不存在或缺少字段），应引导用户设置。
+ * 已配置过的场景（包括值正好为 root/root）不再重复引导。
+ */
+export declare function hasConfiguredCredentials(): boolean;
+/**
+ * 判断当前凭据是否为默认值 root/root。
+ */
+export declare function isDefaultCredentials(): boolean;
+/**
+ * 写入新的面板凭据到 config.json，并更新缓存。
+ * 主流程：读取现有配置 → 合并新字段 → 写回文件 → 清缓存。
+ */
+export declare function setPanelCredentials(username: string, password: string): void;
 export {};
 //# sourceMappingURL=panel-auth.d.ts.map

package/dist/services/panel-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"panel-auth.d.ts","sourceRoot":"","sources":["../../src/services/panel-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwCH,yBAAyB;AACzB,wBAAgB,aAAa,IAAI,MAAM,CAMtC;AAED,kCAAkC;AAClC,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAWzE;AAED,iBAAiB;AACjB,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAElD;AAID,UAAU,gBAAgB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AA0BD,mCAAmC;AACnC,wBAAgB,mBAAmB,IAAI,gBAAgB,CAWtD;AAED,cAAc;AACd,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAGT;AAED,wBAAwB;AACxB,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}
+{"version":3,"file":"panel-auth.d.ts","sourceRoot":"","sources":["../../src/services/panel-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwCH,yBAAyB;AACzB,wBAAgB,aAAa,IAAI,MAAM,CAMtC;AAED,kCAAkC;AAClC,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAWzE;AAED,iBAAiB;AACjB,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAElD;AAID,UAAU,gBAAgB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AA0BD,mCAAmC;AACnC,wBAAgB,mBAAmB,IAAI,gBAAgB,CAWtD;AAED,cAAc;AACd,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAGT;AAED,wBAAwB;AACxB,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAWlD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAG9C;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,IAAI,CA8BN"}

package/dist/services/panel-auth.js

@@ -7,7 +7,7 @@
  * 会话使用服务端内存存储 + HttpOnly Cookie 实现，无需外部依赖。
  */
 import { randomUUID } from "node:crypto";
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { logger } from "../utils/logger.js";
@@ -103,3 +103,58 @@ export function validateCredentials(username, password) {
 export function clearCredentialsCache() {
     cachedCredentials = null;
 }
+/**
+ * 检查 config.json 中是否已配置过面板凭据（panelUsername/panelPassword）。
+ * 用于首次登录引导：如果未配置过（文件不存在或缺少字段），应引导用户设置。
+ * 已配置过的场景（包括值正好为 root/root）不再重复引导。
+ */
+export function hasConfiguredCredentials() {
+    const configPath = getConfigFilePath();
+    if (!existsSync(configPath))
+        return false;
+    try {
+        const raw = readFileSync(configPath, "utf-8");
+        const parsed = JSON.parse(raw);
+        return !!(parsed.panelUsername && parsed.panelPassword);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * 判断当前凭据是否为默认值 root/root。
+ */
+export function isDefaultCredentials() {
+    const creds = getPanelCredentials();
+    return creds.username === "root" && creds.password === "root";
+}
+/**
+ * 写入新的面板凭据到 config.json，并更新缓存。
+ * 主流程：读取现有配置 → 合并新字段 → 写回文件 → 清缓存。
+ */
+export function setPanelCredentials(username, password) {
+    const configPath = getConfigFilePath();
+    const configDir = path.dirname(configPath);
+    // 读取现有配置
+    let existing = {};
+    if (existsSync(configPath)) {
+        try {
+            existing = JSON.parse(readFileSync(configPath, "utf-8"));
+        }
+        catch {
+            // 配置不可读则从头创建
+        }
+    }
+    existing.panelUsername = username;
+    existing.panelPassword = password;
+    // 确保目录存在
+    try {
+        mkdirSync(configDir, { recursive: true });
+    }
+    catch {
+        // 目录已存在
+    }
+    writeFileSync(configPath, JSON.stringify(existing, null, 2), "utf-8");
+    clearCredentialsCache();
+    logger.info("[panel-auth] 面板凭据已更新");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-runtime-bridge",
-  "version": "1.9.9",
+  "version": "1.9.10",
   "description": "AgentsWorkStudio runtime bridge service for machine-level agent runtime integration",
   "type": "module",
   "main": "dist/index.js",