dscs-server 0.1.3 → 0.1.5

package/dist/index.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
-import { chmodSync, mkdirSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { chmodSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { ONBOARDING_CODE_FILE, ONBOARDING_TTL_MS, createDevice, createHttpServer, listDevices, mintOnboardingCode, revokeDevice, DEFAULT_MAX_BYTES } from './http.js';
-import { clearAdminPassword, ensureSetupToken, isAdminInitialized, openDatabase, readMaxBytes } from './db.js';
+import { generateAdminPassword, resetAdminPassword } from './admin-password.js';
+import { ensureSetupToken, isAdminInitialized, openDatabase, readMaxBytes } from './db.js';
 function writeOnboardingCode(dataDir, code) {
     mkdirSync(dataDir, {
         recursive: true
@@ -34,13 +35,15 @@ function usage() {
   token list                 列出存活设备
   token revoke <deviceId>    吊销某个设备 token
   admin status               查看初始化状态与配额
-  admin reset                忘记管理密码时重置（重启 serve 后重新初始化）
+  admin reset-password       忘记管理密码时重置为新密码
+                             （默认生成随机密码；--stdin 从标准输入读取自定义密码）
 
 选项：
   --data-dir <目录>           数据目录（默认 .tmp/dev-data）
   --host <地址>               绑定地址（默认 127.0.0.1）
   --port <端口>               监听端口（默认 8787）
   --max-bytes <n>             存储上限（默认 10 GiB）
+  --stdin                     admin reset-password 从标准输入读取新密码
 `);
     process.exit(2);
 }
@@ -50,6 +53,10 @@ function parse(argv) {
     for(let index = 0; index < argv.length; index += 1){
         const argument = argv[index];
         if (argument.startsWith('--')) {
+            if (argument === '--stdin') {
+                flags.set('stdin', '');
+                continue;
+            }
             const value = argv[index + 1];
             if (value === undefined || value.startsWith('--')) usage();
             flags.set(argument.slice(2), value);
@@ -99,10 +106,19 @@ async function main(parsed) {
                 }, null, 2));
                 return;
             }
-            if (action === 'reset') {
-                clearAdminPassword(db);
-                clearOnboardingCode(dataDir);
-                console.log('已清除管理密码。重启 server 后会在控制台打印新的初始化密钥。');
+            if (action === 'reset-password') {
+                const fromStdin = parsed.flags.has('stdin');
+                const password = fromStdin ? readFileSync(0, 'utf8').replace(/\r?\n$/u, '') : generateAdminPassword();
+                resetAdminPassword(db, password);
+                if (fromStdin) {
+                    console.log('已重置管理密码。旧管理会话需要重启 server 后失效。');
+                } else {
+                    console.log('已重置管理密码（只显示一次）：');
+                    console.log('');
+                    console.log(password);
+                    console.log('');
+                    console.log('请登录管理台后立即修改；旧管理会话需要重启 server 后失效。');
+                }
                 return;
             }
             usage();

package/dist/session-admin.js

@@ -0,0 +1,214 @@
+import { rmSync } from 'node:fs';
+import { blobPath } from './blobs.js';
+import { bumpRevision, DEFAULT_DATASET, withTransaction } from './db.js';
+import { SyncError } from './shared/wire.js';
+import { recordSessionEvent } from './session-history.js';
+export const SESSION_RESET_TTL_MS = 24 * 60 * 60 * 1000;
+function targetRow(db, sessionId, createdAt) {
+    return db.handle.prepare('SELECT session_id, created_at, deleted_at, purged_at, stored_bytes, last_seq, manifest_json FROM sessions WHERE dataset = ? AND session_id = ?').get(DEFAULT_DATASET, sessionId);
+}
+function requireTarget(db, sessionId, createdAt) {
+    const row = targetRow(db, sessionId, createdAt);
+    if (row === undefined) throw new SyncError('not-found', `没有会话 ${sessionId}`);
+    if (row.created_at !== createdAt) throw new SyncError('conflict', 'createdAt 与当前生命周期不符');
+    return row;
+}
+function manifestBlobRefs(manifest) {
+    const frames = Array.isArray(manifest.frames) ? manifest.frames : [];
+    const hashes = [];
+    for (const frame of frames){
+        if (frame === null || typeof frame !== 'object') continue;
+        const record = frame;
+        if (typeof record.blobSha256 === 'string' && record.blobSha256 !== '') hashes.push(record.blobSha256);
+        if (typeof record.attachmentIndexSha256 === 'string' && record.attachmentIndexSha256 !== '') {
+            hashes.push(record.attachmentIndexSha256);
+        }
+        if (Array.isArray(record.attachmentBlobs)) {
+            for (const sha of record.attachmentBlobs){
+                if (typeof sha === 'string' && sha !== '') hashes.push(sha);
+            }
+        }
+    }
+    return hashes;
+}
+function purgeSessionBlobs(db, dataDir, sessionId, manifestJson) {
+    let hashes;
+    try {
+        hashes = manifestBlobRefs(JSON.parse(manifestJson));
+    } catch  {
+        throw new SyncError('conflict', '会话 manifest 损坏，拒绝清理');
+    }
+    const unique = [
+        ...new Set(hashes)
+    ];
+    if (unique.length === 0) return {
+        bytes: 0,
+        files: []
+    };
+    const otherHashes = new Set();
+    const otherRows = db.handle.prepare('SELECT manifest_json FROM sessions WHERE dataset = ? AND session_id <> ?').all(DEFAULT_DATASET, sessionId);
+    for (const row of otherRows){
+        try {
+            for (const hash of manifestBlobRefs(JSON.parse(row.manifest_json)))otherHashes.add(hash);
+        } catch  {
+            for (const hash of unique)otherHashes.add(hash);
+        }
+    }
+    const vaultCheck = db.handle.prepare('SELECT 1 FROM vault_records WHERE blob_sha256 = ? LIMIT 1');
+    const deleteBlob = db.handle.prepare('DELETE FROM blobs WHERE sha256 = ?');
+    const blobInfo = db.handle.prepare('SELECT bytes FROM blobs WHERE sha256 = ?');
+    let bytes = 0;
+    const files = [];
+    for (const hash of unique){
+        if (otherHashes.has(hash) || vaultCheck.get(hash) !== undefined) continue;
+        const record = blobInfo.get(hash);
+        if (record === undefined) continue;
+        deleteBlob.run(hash);
+        bytes += Number(record.bytes ?? 0);
+        files.push(blobPath(dataDir, hash));
+    }
+    return {
+        bytes,
+        files
+    };
+}
+function removeFiles(files) {
+    for (const file of files){
+        try {
+            rmSync(file, {
+                force: true
+            });
+        } catch  {}
+    }
+}
+export function archiveSession(db, sessionId, createdAt, now = Date.now()) {
+    withTransaction(db, ()=>{
+        const row = requireTarget(db, sessionId, createdAt);
+        if (row.deleted_at !== null) throw new SyncError('conflict', '会话已经删除/存档');
+        const revision = bumpRevision(db);
+        db.handle.prepare('UPDATE sessions SET deleted_at = ?, revision = ?, updated_at = ? WHERE dataset = ? AND session_id = ?').run(now, revision, now, DEFAULT_DATASET, sessionId);
+        db.handle.prepare(`INSERT OR REPLACE INTO tombstones (dataset, session_id, created_at, deleted_at, deleted_by)
+                       VALUES (?, ?, ?, ?, ?)`).run(DEFAULT_DATASET, sessionId, createdAt, now, 'admin:archive');
+        db.handle.prepare('DELETE FROM append_requests WHERE dataset = ? AND session_id = ?').run(DEFAULT_DATASET, sessionId);
+        recordSessionEvent(db, {
+            sessionId,
+            at: now,
+            kind: 'archive',
+            actorKind: 'admin',
+            actorId: 'admin',
+            lastSeq: row.last_seq ?? null,
+            storedBytes: row.stored_bytes ?? null,
+            detail: {
+                createdAt
+            }
+        });
+    });
+}
+export function removeSession(db, dataDir, sessionId, createdAt, now = Date.now()) {
+    let purged;
+    withTransaction(db, ()=>{
+        const row = requireTarget(db, sessionId, createdAt);
+        if (row.purged_at !== null) throw new SyncError('conflict', '会话已经移除并释放过空间');
+        purged = purgeSessionBlobs(db, dataDir, sessionId, row.manifest_json);
+        const revision = bumpRevision(db);
+        let manifest = {};
+        try {
+            manifest = JSON.parse(row.manifest_json);
+        } catch  {
+            manifest = {};
+        }
+        manifest.frames = [];
+        db.handle.prepare(`UPDATE sessions
+                       SET deleted_at = COALESCE(deleted_at, ?), purged_at = ?, revision = ?, updated_at = ?,
+                           stored_bytes = 0, manifest_json = ?
+                       WHERE dataset = ? AND session_id = ?`).run(now, now, revision, now, JSON.stringify(manifest), DEFAULT_DATASET, sessionId);
+        db.handle.prepare(`INSERT OR REPLACE INTO tombstones (dataset, session_id, created_at, deleted_at, deleted_by)
+                       VALUES (?, ?, ?, ?, ?)`).run(DEFAULT_DATASET, sessionId, createdAt, now, 'admin:remove');
+        db.handle.prepare('DELETE FROM append_requests WHERE dataset = ? AND session_id = ?').run(DEFAULT_DATASET, sessionId);
+        recordSessionEvent(db, {
+            sessionId,
+            at: now,
+            kind: 'remove',
+            actorKind: 'admin',
+            actorId: 'admin',
+            bytes: purged?.bytes ?? 0,
+            lastSeq: null,
+            storedBytes: 0,
+            detail: {
+                createdAt,
+                purgedBytes: purged?.bytes ?? 0
+            }
+        });
+    });
+    const result = purged ?? {
+        bytes: 0,
+        files: []
+    };
+    removeFiles(result.files);
+    return result.bytes;
+}
+export function resetSession(db, dataDir, sessionId, createdAt, deviceId, now = Date.now()) {
+    let purged;
+    withTransaction(db, ()=>{
+        const row = requireTarget(db, sessionId, createdAt);
+        purged = purgeSessionBlobs(db, dataDir, sessionId, row.manifest_json);
+        db.handle.prepare('DELETE FROM append_requests WHERE dataset = ? AND session_id = ?').run(DEFAULT_DATASET, sessionId);
+        db.handle.prepare('DELETE FROM tombstones WHERE dataset = ? AND session_id = ?').run(DEFAULT_DATASET, sessionId);
+        db.handle.prepare('DELETE FROM sessions WHERE dataset = ? AND session_id = ?').run(DEFAULT_DATASET, sessionId);
+        db.handle.prepare('DELETE FROM leases WHERE dataset = ? AND resource = ?').run(DEFAULT_DATASET, 'sync');
+        let workspaceKey = null;
+        try {
+            const manifest = JSON.parse(row.manifest_json);
+            if (typeof manifest.workspaceKey === 'string' && manifest.workspaceKey !== '') workspaceKey = manifest.workspaceKey;
+        } catch  {
+            workspaceKey = null;
+        }
+        db.handle.prepare(`INSERT OR REPLACE INTO session_resets
+                       (dataset, session_id, created_at, reset_at, expires_at, device_id, workspace_key)
+                       VALUES (?, ?, ?, ?, ?, ?, ?)`).run(DEFAULT_DATASET, sessionId, createdAt, now, now + SESSION_RESET_TTL_MS, deviceId, workspaceKey);
+        recordSessionEvent(db, {
+            sessionId,
+            at: now,
+            kind: 'reset',
+            actorKind: 'admin',
+            actorId: 'admin',
+            bytes: purged?.bytes ?? 0,
+            detail: {
+                createdAt,
+                deviceId,
+                purgedBytes: purged?.bytes ?? 0
+            }
+        });
+    });
+    const result = purged ?? {
+        bytes: 0,
+        files: []
+    };
+    removeFiles(result.files);
+    return result.bytes;
+}
+export function restoreSession(db, sessionId, createdAt, now = Date.now()) {
+    withTransaction(db, ()=>{
+        const row = requireTarget(db, sessionId, createdAt);
+        if (row.deleted_at === null) throw new SyncError('conflict', '会话没有存档');
+        if (row.purged_at !== null) throw new SyncError('conflict', '会话已经释放空间，不能恢复');
+        const revision = bumpRevision(db);
+        db.handle.prepare('UPDATE sessions SET deleted_at = NULL, revision = ?, updated_at = ? WHERE dataset = ? AND session_id = ?').run(revision, now, DEFAULT_DATASET, sessionId);
+        db.handle.prepare('DELETE FROM tombstones WHERE dataset = ? AND session_id = ? AND created_at = ?').run(DEFAULT_DATASET, sessionId, createdAt);
+        recordSessionEvent(db, {
+            sessionId,
+            at: now,
+            kind: 'restore',
+            actorKind: 'admin',
+            actorId: 'admin',
+            lastSeq: null,
+            storedBytes: row.stored_bytes ?? null,
+            detail: {
+                createdAt
+            }
+        });
+    });
+}
+
+
+//# sourceURL=session-admin.ts

package/dist/session-history.js

@@ -0,0 +1,134 @@
+import { DEFAULT_DATASET } from './db.js';
+export function recordSessionEvent(db, input) {
+    db.handle.prepare(`INSERT INTO session_events
+      (dataset, session_id, at, kind, device_id, actor_kind, actor_id, events, bytes, seq_from, seq_to,
+       batch_count, last_seq, stored_bytes, detail)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(DEFAULT_DATASET, input.sessionId, input.at, input.kind, input.deviceId ?? null, input.actorKind, input.actorId, Math.max(0, Math.trunc(input.events ?? 0)), Math.max(0, Math.trunc(input.bytes ?? 0)), input.seqFrom ?? null, input.seqTo ?? null, Math.max(0, Math.trunc(input.batchCount ?? 0)), input.lastSeq ?? null, input.storedBytes ?? null, input.detail === undefined ? null : JSON.stringify(input.detail));
+}
+export function listSessionHistory(db, sessionId, options = {}) {
+    const limit = Math.min(200, Math.max(1, Math.trunc(options.limit ?? 100)));
+    const before = options.before !== undefined && Number.isSafeInteger(options.before) ? options.before : undefined;
+    const rows = db.handle.prepare(`SELECT e.id, e.session_id, e.at, e.kind, e.device_id, e.actor_kind, e.actor_id,
+                     e.events, e.bytes, e.seq_from, e.seq_to, e.batch_count, e.last_seq, e.stored_bytes, e.detail,
+                     d.label AS device_label, d.color AS device_color
+              FROM session_events e
+              LEFT JOIN devices d ON d.dataset = e.dataset AND d.device_id = e.device_id
+              WHERE e.dataset = ? AND e.session_id = ? ${before === undefined ? '' : 'AND e.id < ?'}
+              ORDER BY e.id DESC LIMIT ?`).all(...[
+        DEFAULT_DATASET,
+        sessionId,
+        ...before === undefined ? [] : [
+            before
+        ],
+        limit
+    ]);
+    const events = rows.map((row)=>({
+            id: row.id,
+            sessionId: row.session_id,
+            at: row.at,
+            kind: row.kind,
+            deviceId: row.device_id,
+            deviceLabel: row.device_label,
+            deviceColor: row.device_color,
+            actorKind: row.actor_kind,
+            actorId: row.actor_id,
+            actorLabel: row.actor_kind === 'admin' ? '管理台' : row.actor_kind === 'system' ? '系统' : row.device_label ?? row.actor_id,
+            events: Number(row.events ?? 0),
+            bytes: Number(row.bytes ?? 0),
+            seqFrom: row.seq_from,
+            seqTo: row.seq_to,
+            batchCount: Number(row.batch_count ?? 0),
+            lastSeq: row.last_seq,
+            storedBytes: row.stored_bytes,
+            detail: row.detail === null ? null : parseDetail(row.detail)
+        }));
+    const summaryRow = db.handle.prepare(`SELECT COALESCE(SUM(events), 0) AS events, COALESCE(SUM(bytes), 0) AS bytes,
+                     COALESCE(SUM(batch_count), 0) AS batches,
+                     COALESCE(SUM(CASE WHEN kind IN ('create', 'append') THEN 1 ELSE 0 END), 0) AS appends,
+                     COUNT(DISTINCT device_id) AS devices,
+                     MIN(at) AS first_at, MAX(at) AS last_at,
+                     COALESCE(MAX(events), 0) AS max_batch_events
+              FROM session_events WHERE dataset = ? AND session_id = ?`).get(DEFAULT_DATASET, sessionId);
+    return {
+        events,
+        summary: {
+            events: Number(summaryRow?.events ?? 0),
+            bytes: Number(summaryRow?.bytes ?? 0),
+            batches: Number(summaryRow?.batches ?? 0),
+            appends: Number(summaryRow?.appends ?? 0),
+            devices: Number(summaryRow?.devices ?? 0),
+            firstAt: summaryRow?.first_at ?? null,
+            lastAt: summaryRow?.last_at ?? null,
+            maxBatchEvents: Number(summaryRow?.max_batch_events ?? 0)
+        },
+        nextBefore: rows.length === limit ? rows[rows.length - 1].id : null
+    };
+}
+export function listActivity(db, query) {
+    const offsetMs = Math.max(-14 * 60, Math.min(14 * 60, Math.trunc(query.tzOffset ?? 0))) * 60_000;
+    const where = [
+        'e.dataset = ?',
+        "e.kind IN ('create', 'append')",
+        'e.at >= ?',
+        'e.at < ?'
+    ];
+    const params = [
+        DEFAULT_DATASET,
+        Math.trunc(query.from),
+        Math.trunc(query.to)
+    ];
+    if (query.deviceId !== undefined && query.deviceId !== '') {
+        where.push('e.device_id = ?');
+        params.push(query.deviceId);
+    }
+    if (query.sessionId !== undefined && query.sessionId !== '') {
+        where.push('e.session_id = ?');
+        params.push(query.sessionId);
+    }
+    const rows = db.handle.prepare(`SELECT date((e.at + ?) / 1000, 'unixepoch') AS day,
+                     COALESCE(SUM(e.events), 0) AS events,
+                     COALESCE(SUM(e.bytes), 0) AS bytes,
+                     COUNT(*) AS appends,
+                     COUNT(DISTINCT e.session_id) AS sessions,
+                     COUNT(DISTINCT e.device_id) AS devices
+              FROM session_events e
+              WHERE ${where.join(' AND ')}
+              GROUP BY day ORDER BY day ASC`).all(offsetMs, ...params);
+    return {
+        days: rows.map((row)=>({
+                day: row.day,
+                events: Number(row.events ?? 0),
+                bytes: Number(row.bytes ?? 0),
+                appends: Number(row.appends ?? 0),
+                sessions: Number(row.sessions ?? 0),
+                devices: Number(row.devices ?? 0)
+            }))
+    };
+}
+export function listActivitySessions(db, query) {
+    const offsetMs = Math.max(-14 * 60, Math.min(14 * 60, Math.trunc(query.tzOffset ?? 0))) * 60_000;
+    const rows = db.handle.prepare(`SELECT e.session_id, COALESCE(SUM(e.events), 0) AS events,
+                     COALESCE(SUM(e.bytes), 0) AS bytes, COUNT(*) AS appends
+              FROM session_events e
+              WHERE e.dataset = ? AND e.kind IN ('create', 'append')
+                AND date((e.at + ?) / 1000, 'unixepoch') = ?
+              GROUP BY e.session_id ORDER BY events DESC`).all(DEFAULT_DATASET, offsetMs, query.day);
+    return {
+        sessions: rows.map((row)=>({
+                sessionId: row.session_id,
+                events: Number(row.events ?? 0),
+                bytes: Number(row.bytes ?? 0),
+                appends: Number(row.appends ?? 0)
+            }))
+    };
+}
+function parseDetail(raw) {
+    try {
+        return JSON.parse(raw);
+    } catch  {
+        return raw;
+    }
+}
+
+
+//# sourceURL=session-history.ts