claude-opencode-viewer 2.6.7 → 2.6.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-opencode-viewer",
-  "version": "2.6.7",
+  "version": "2.6.8",
   "description": "A unified terminal viewer for Claude Code and OpenCode with seamless switching",
   "type": "module",
   "main": "server.js",
@@ -35,6 +35,7 @@
   "dependencies": {
     "better-sqlite3": "^11.8.1",
     "node-pty": "^1.1.0",
+    "selfsigned": "^5.5.0",
     "ws": "^8.19.0"
   },
   "engines": {

package/server.js

@@ -8,7 +8,6 @@ import { networkInterfaces, platform, arch, homedir } from 'node:os';
 import { chmodSync, statSync } from 'node:fs';
 import { execSync, execFile } from 'child_process';
 import { promisify } from 'node:util';
-import { generateKeyPairSync, createSign, randomBytes } from 'node:crypto';
 import { WebSocketServer } from 'ws';
 import Database from 'better-sqlite3';
 
@@ -20,8 +19,8 @@ const PORT = parseInt(process.argv[2]) || 7008;
 const IS_PC = process.argv.includes('--pc');
 const USE_HTTPS = process.argv.includes('--https');
 
-// 自签名证书生成（纯 Node.js，不依赖 openssl）
-function getOrCreateCert() {
+// 自签名证书生成（使用 selfsigned 库，不依赖 openssl）
+async function getOrCreateCert() {
   const certDir = join(homedir(), '.cov-certs');
   const keyPath = join(certDir, 'key.pem');
   const certPath = join(certDir, 'cert.pem');
@@ -33,107 +32,23 @@ function getOrCreateCert() {
   console.log('🔐 首次使用 HTTPS，生成自签名证书...');
   mkdirSync(certDir, { recursive: true });
 
-  const { publicKey, privateKey } = generateKeyPairSync('rsa', {
-    modulusLength: 2048,
-    publicKeyEncoding: { type: 'spki', format: 'der' },
-    privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
+  const { default: selfsigned } = await import('selfsigned');
+  const attrs = [{ name: 'commonName', value: 'cov-self-signed' }];
+  const pems = await selfsigned.generate(attrs, {
+    days: 365,
+    keySize: 2048,
+    extensions: [
+      { name: 'subjectAltName', altNames: [
+        { type: 7, ip: '127.0.0.1' },
+        { type: 2, value: 'localhost' },
+      ]}
+    ],
   });
 
-  // 构建自签名 X.509 v3 证书（DER 编码）
-  const serial = randomBytes(8);
-  const now = new Date();
-  const expire = new Date(now.getTime() + 365 * 24 * 3600 * 1000);
-
-  function encodeLength(len) {
-    if (len < 128) return Buffer.from([len]);
-    if (len < 256) return Buffer.from([0x81, len]);
-    return Buffer.from([0x82, (len >> 8) & 0xff, len & 0xff]);
-  }
-
-  function derSequence(buffers) {
-    const body = Buffer.concat(buffers);
-    return Buffer.concat([Buffer.from([0x30]), encodeLength(body.length), body]);
-  }
-
-  function derSet(buffers) {
-    const body = Buffer.concat(buffers);
-    return Buffer.concat([Buffer.from([0x31]), encodeLength(body.length), body]);
-  }
-
-  function derOid(oid) {
-    const parts = oid.split('.').map(Number);
-    const bytes = [40 * parts[0] + parts[1]];
-    for (let i = 2; i < parts.length; i++) {
-      let v = parts[i];
-      if (v < 128) { bytes.push(v); }
-      else {
-        const enc = [];
-        enc.push(v & 0x7f); v >>= 7;
-        while (v > 0) { enc.push(0x80 | (v & 0x7f)); v >>= 7; }
-        bytes.push(...enc.reverse());
-      }
-    }
-    const buf = Buffer.from(bytes);
-    return Buffer.concat([Buffer.from([0x06]), encodeLength(buf.length), buf]);
-  }
-
-  function derUtf8(str) {
-    const buf = Buffer.from(str, 'utf8');
-    return Buffer.concat([Buffer.from([0x0c]), encodeLength(buf.length), buf]);
-  }
-
-  function derInt(buf) {
-    if (buf[0] & 0x80) buf = Buffer.concat([Buffer.from([0x00]), buf]);
-    return Buffer.concat([Buffer.from([0x02]), encodeLength(buf.length), buf]);
-  }
-
-  function derBitString(buf) {
-    const body = Buffer.concat([Buffer.from([0x00]), buf]);
-    return Buffer.concat([Buffer.from([0x03]), encodeLength(body.length), body]);
-  }
-
-  function derTime(date) {
-    const s = date.toISOString().replace(/[-:T]/g, '').slice(0, 14) + 'Z';
-    const buf = Buffer.from(s, 'ascii');
-    return Buffer.concat([Buffer.from([0x17]), encodeLength(buf.length), buf]);
-  }
-
-  function derExplicit(tag, content) {
-    return Buffer.concat([Buffer.from([0xa0 | tag]), encodeLength(content.length), content]);
-  }
-
-  const issuer = derSequence([derSet([derSequence([derOid('2.5.4.3'), derUtf8('cov-self-signed')])])]);
-  const validity = derSequence([derTime(now), derTime(expire)]);
-  const spki = Buffer.from(publicKey);
-
-  const tbs = derSequence([
-    derExplicit(0, derInt(Buffer.from([0x02]))),  // version v3
-    derInt(serial),
-    derSequence([derOid('1.2.840.113549.1.1.11'), Buffer.from([0x05, 0x00])]),  // sha256WithRSA
-    issuer,
-    validity,
-    issuer,  // subject = issuer (self-signed)
-    spki,
-  ]);
-
-  const sign = createSign('SHA256');
-  sign.update(tbs);
-  const signature = sign.sign(privateKey);
-
-  const cert = derSequence([
-    tbs,
-    derSequence([derOid('1.2.840.113549.1.1.11'), Buffer.from([0x05, 0x00])]),
-    derBitString(signature),
-  ]);
-
-  const certPem = '-----BEGIN CERTIFICATE-----\n' +
-    cert.toString('base64').match(/.{1,64}/g).join('\n') +
-    '\n-----END CERTIFICATE-----\n';
-
-  writeFileSync(keyPath, privateKey);
-  writeFileSync(certPath, certPem);
+  writeFileSync(keyPath, pems.private);
+  writeFileSync(certPath, pems.cert);
   console.log(`📁 证书已保存到 ${certDir}`);
-  return { key: privateKey, cert: certPem };
+  return { key: pems.private, cert: pems.cert };
 }
 
 // OpenCode 数据库路径（支持环境变量覆盖，自动检测 /halo 环境）
@@ -679,7 +594,7 @@ const requestHandler = async (req, res) => {
 };
 
 const server = USE_HTTPS
-  ? createHttpsServer(getOrCreateCert(), requestHandler)
+  ? createHttpsServer(await getOrCreateCert(), requestHandler)
   : createServer(requestHandler);
 
 const wss = new WebSocketServer({ server, path: '/ws' });