claude-opencode-viewer 2.6.6 → 2.6.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-opencode-viewer",
-  "version": "2.6.6",
+  "version": "2.6.7",
   "description": "A unified terminal viewer for Claude Code and OpenCode with seamless switching",
   "type": "module",
   "main": "server.js",

package/server.js

@@ -8,6 +8,7 @@ import { networkInterfaces, platform, arch, homedir } from 'node:os';
 import { chmodSync, statSync } from 'node:fs';
 import { execSync, execFile } from 'child_process';
 import { promisify } from 'node:util';
+import { generateKeyPairSync, createSign, randomBytes } from 'node:crypto';
 import { WebSocketServer } from 'ws';
 import Database from 'better-sqlite3';
 
@@ -19,7 +20,7 @@ const PORT = parseInt(process.argv[2]) || 7008;
 const IS_PC = process.argv.includes('--pc');
 const USE_HTTPS = process.argv.includes('--https');
 
-// 自签名证书生成
+// 自签名证书生成（纯 Node.js，不依赖 openssl）
 function getOrCreateCert() {
   const certDir = join(homedir(), '.cov-certs');
   const keyPath = join(certDir, 'key.pem');
@@ -31,12 +32,108 @@ function getOrCreateCert() {
 
   console.log('🔐 首次使用 HTTPS，生成自签名证书...');
   mkdirSync(certDir, { recursive: true });
-  execSync(
-    `openssl req -x509 -newkey rsa:2048 -keyout "${keyPath}" -out "${certPath}" -days 365 -nodes -subj "/CN=cov-self-signed"`,
-    { stdio: 'pipe' }
-  );
+
+  const { publicKey, privateKey } = generateKeyPairSync('rsa', {
+    modulusLength: 2048,
+    publicKeyEncoding: { type: 'spki', format: 'der' },
+    privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
+  });
+
+  // 构建自签名 X.509 v3 证书（DER 编码）
+  const serial = randomBytes(8);
+  const now = new Date();
+  const expire = new Date(now.getTime() + 365 * 24 * 3600 * 1000);
+
+  function encodeLength(len) {
+    if (len < 128) return Buffer.from([len]);
+    if (len < 256) return Buffer.from([0x81, len]);
+    return Buffer.from([0x82, (len >> 8) & 0xff, len & 0xff]);
+  }
+
+  function derSequence(buffers) {
+    const body = Buffer.concat(buffers);
+    return Buffer.concat([Buffer.from([0x30]), encodeLength(body.length), body]);
+  }
+
+  function derSet(buffers) {
+    const body = Buffer.concat(buffers);
+    return Buffer.concat([Buffer.from([0x31]), encodeLength(body.length), body]);
+  }
+
+  function derOid(oid) {
+    const parts = oid.split('.').map(Number);
+    const bytes = [40 * parts[0] + parts[1]];
+    for (let i = 2; i < parts.length; i++) {
+      let v = parts[i];
+      if (v < 128) { bytes.push(v); }
+      else {
+        const enc = [];
+        enc.push(v & 0x7f); v >>= 7;
+        while (v > 0) { enc.push(0x80 | (v & 0x7f)); v >>= 7; }
+        bytes.push(...enc.reverse());
+      }
+    }
+    const buf = Buffer.from(bytes);
+    return Buffer.concat([Buffer.from([0x06]), encodeLength(buf.length), buf]);
+  }
+
+  function derUtf8(str) {
+    const buf = Buffer.from(str, 'utf8');
+    return Buffer.concat([Buffer.from([0x0c]), encodeLength(buf.length), buf]);
+  }
+
+  function derInt(buf) {
+    if (buf[0] & 0x80) buf = Buffer.concat([Buffer.from([0x00]), buf]);
+    return Buffer.concat([Buffer.from([0x02]), encodeLength(buf.length), buf]);
+  }
+
+  function derBitString(buf) {
+    const body = Buffer.concat([Buffer.from([0x00]), buf]);
+    return Buffer.concat([Buffer.from([0x03]), encodeLength(body.length), body]);
+  }
+
+  function derTime(date) {
+    const s = date.toISOString().replace(/[-:T]/g, '').slice(0, 14) + 'Z';
+    const buf = Buffer.from(s, 'ascii');
+    return Buffer.concat([Buffer.from([0x17]), encodeLength(buf.length), buf]);
+  }
+
+  function derExplicit(tag, content) {
+    return Buffer.concat([Buffer.from([0xa0 | tag]), encodeLength(content.length), content]);
+  }
+
+  const issuer = derSequence([derSet([derSequence([derOid('2.5.4.3'), derUtf8('cov-self-signed')])])]);
+  const validity = derSequence([derTime(now), derTime(expire)]);
+  const spki = Buffer.from(publicKey);
+
+  const tbs = derSequence([
+    derExplicit(0, derInt(Buffer.from([0x02]))),  // version v3
+    derInt(serial),
+    derSequence([derOid('1.2.840.113549.1.1.11'), Buffer.from([0x05, 0x00])]),  // sha256WithRSA
+    issuer,
+    validity,
+    issuer,  // subject = issuer (self-signed)
+    spki,
+  ]);
+
+  const sign = createSign('SHA256');
+  sign.update(tbs);
+  const signature = sign.sign(privateKey);
+
+  const cert = derSequence([
+    tbs,
+    derSequence([derOid('1.2.840.113549.1.1.11'), Buffer.from([0x05, 0x00])]),
+    derBitString(signature),
+  ]);
+
+  const certPem = '-----BEGIN CERTIFICATE-----\n' +
+    cert.toString('base64').match(/.{1,64}/g).join('\n') +
+    '\n-----END CERTIFICATE-----\n';
+
+  writeFileSync(keyPath, privateKey);
+  writeFileSync(certPath, certPem);
   console.log(`📁 证书已保存到 ${certDir}`);
-  return { key: readFileSync(keyPath), cert: readFileSync(certPath) };
+  return { key: privateKey, cert: certPem };
 }
 
 // OpenCode 数据库路径（支持环境变量覆盖，自动检测 /halo 环境）