dshost-plugin 0.1.2 → 0.1.4

package/cordis.patch.yml

@@ -9,6 +9,6 @@
 # id -> dsh crashed on startup (systemd restart loop).
 #
 # The plugin is still loaded by cordis because the user profile entry references
-# it by name ('@noeljude/dsh-remote-plugin'); this file only needs to exist for
+# it by name ('dshost-plugin'); this file only needs to exist for
 # the bundle mechanism.
 []

package/lib/core.js

@@ -5,6 +5,7 @@
 import http from 'http';
 import os from 'os';
 import fs from 'fs';
+import path from 'path';
 import crypto from 'crypto';
 import { execFileSync } from 'child_process';
 import WebSocket from 'ws';
@@ -179,6 +180,8 @@ export function collectSystemInfo(defaultVersion) {
     diskFree,
     dshVersion: defaultVersion || meta.dshVersion,
     plugins: meta.plugins,
+    // 无头检测：供 relay 注入脚本决定产物点击行为(新窗口HTTP直出 vs 本地打开)
+    headless: !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY,
   };
 }
 
@@ -250,11 +253,16 @@ export function startAgent(opts) {
       if (msg.type === 'heartbeat') return;
 
       if (msg.type === 'http:request') {
+        if (serveArtifactIfRequested(ws, msg)) return;
         handleHttpRequest(ws, msg);
       } else if (msg.type === 'http:body') {
+        const ab = artifactFormBodies.get(msg.streamId);
+        if (ab) { ab.push(un64(msg.data)); return; }
         const stream = streams.get(msg.streamId);
         if (stream && stream.dshReq) stream.dshReq.write(un64(msg.data));
       } else if (msg.type === 'http:end') {
+        const ab = artifactFormBodies.get(msg.streamId);
+        if (ab) { artifactFormBodies.delete(msg.streamId); serveArtifactFromForm(ws, msg.streamId, Buffer.concat(ab)); return; }
         const stream = streams.get(msg.streamId);
         if (stream && stream.dshReq) stream.dshReq.end();
       } else if (msg.type === 'ws:open') {
@@ -325,6 +333,90 @@ export function startAgent(opts) {
     }, 15000);
   }
 
+  // [Artifact Viewer] 无头机产物 HTTP 直出：GET /api/host.artifact?path=...
+  // 由注入脚本在浏览器劫持 openPath 点击后以新窗口打开 —— 无显示环境无法
+  // "本地打开"，改为把文本/代码类产物以对应 MIME 直出给浏览器渲染。
+  const ARTIFACT_TEXT_EXT = new Set([
+    '.md', '.markdown', '.txt', '.log', '.json', '.yml', '.yaml', '.toml', '.ini',
+    '.cfg', '.conf', '.env', '.csv', '.tsv', '.js', '.mjs', '.cjs', '.ts', '.tsx',
+    '.jsx', '.py', '.rb', '.go', '.rs', '.java', '.kt', '.c', '.h', '.cpp', '.hpp',
+    '.cs', '.php', '.sh', '.bash', '.zsh', '.sql', '.html', '.htm', '.css', '.scss',
+    '.less', '.vue', '.svelte', '.swift', '.lua', '.r', '.pl', '.xml', '.svg',
+  ]);
+  const ARTIFACT_MIME = {
+    '.md': 'text/markdown; charset=utf-8', '.markdown': 'text/markdown; charset=utf-8',
+    '.html': 'text/html; charset=utf-8', '.htm': 'text/html; charset=utf-8',
+    '.css': 'text/css; charset=utf-8', '.scss': 'text/x-scss; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8', '.mjs': 'text/javascript; charset=utf-8',
+    '.cjs': 'text/javascript; charset=utf-8', '.ts': 'text/typescript; charset=utf-8',
+    '.tsx': 'text/typescript; charset=utf-8', '.jsx': 'text/typescript; charset=utf-8',
+    '.json': 'application/json; charset=utf-8', '.xml': 'application/xml; charset=utf-8',
+    '.svg': 'image/svg+xml', '.py': 'text/x-python; charset=utf-8',
+    '.sh': 'text/x-shellscript; charset=utf-8', '.bash': 'text/x-shellscript; charset=utf-8',
+    '.csv': 'text/csv; charset=utf-8', '.yml': 'text/yaml; charset=utf-8',
+    '.yaml': 'text/yaml; charset=utf-8', '.sql': 'text/x-sql; charset=utf-8',
+  };
+  const ARTIFACT_MAX_BYTES = 2 * 1024 * 1024;
+
+  function artifactRespond(ws, streamId, status, headers, body) {
+    send(ws, { type: 'http:response', streamId, status, headers });
+    if (body) send(ws, { type: 'http:data', streamId, data: b64(body) });
+    send(ws, { type: 'http:end', streamId });
+  }
+
+  const artifactFormBodies = new Map();
+
+  function serveArtifactFromForm(ws, sid, body) {
+    let pth = '';
+    const ct = 'application/x-www-form-urlencoded';
+    try { pth = new URLSearchParams(body.toString('utf8')).get('path') || ''; } catch {}
+    serveArtifactResolved(ws, sid, pth);
+  }
+
+  function serveArtifactResolved(ws, sid, rawPath) {
+    const fail = (status, text) => artifactRespond(ws, sid, status,
+      { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' },
+      Buffer.from(JSON.stringify({ ok: false, error: { code: 'artifact', message: text } })));
+    return serveArtifactFile(ws, sid, rawPath, fail);
+  }
+
+  function serveArtifactIfRequested(ws, msg) {
+    let u;
+    try { u = new URL(msg.path, 'http://local'); } catch { return false; }
+    if (u.pathname !== '/api/host.artifact') return false;
+    const sid = msg.streamId;
+    if (msg.method === 'POST') {
+      // [EO规避] 该URL的GET响应会被EdgeOne静默吞杀(三出口实测)，改走POST表单体
+      artifactFormBodies.set(sid, []);
+      return true;
+    }
+    if (msg.method === 'GET') {
+      const pth = u.searchParams.get('path') || '';
+      return serveArtifactResolved(ws, sid, pth);
+    }
+    return false;
+  }
+
+  function serveArtifactFile(ws, sid, rawPath, fail) {
+    const ext = path.extname(rawPath).toLowerCase();
+    const dotfile = /(^|\/)(\.[a-z0-9_.-]+)$/i.test(path.basename(rawPath));
+    if (!ARTIFACT_TEXT_EXT.has(ext) && !dotfile) return fail(415, `unsupported artifact type: ${ext || '(none)'}`);
+    let st;
+    try { st = fs.statSync(rawPath); } catch { return fail(404, 'file not found'); }
+    if (!st.isFile()) return fail(400, 'not a regular file');
+    if (st.size > ARTIFACT_MAX_BYTES) return fail(413, `artifact too large (${st.size} bytes > ${ARTIFACT_MAX_BYTES})`);
+    let buf;
+    try { buf = fs.readFileSync(rawPath); } catch (e) { return fail(500, 'read failed: ' + e.message); }
+    const mime = ARTIFACT_MIME[ext] || 'text/plain; charset=utf-8';
+    artifactRespond(ws, sid, 200, {
+      'content-type': mime,
+      'content-disposition': `inline; filename="${path.basename(rawPath)}"`,
+      'cache-control': 'no-store',
+    }, buf);
+    log.log?.(`[agent] artifact served: ${rawPath} (${buf.length}B)`);
+    return true;
+  }
+
   function handleHttpRequest(ws, msg) {
     const { streamId, method, path, headers } = msg;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dshost-plugin",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Official remote cloud relay plugin for DSHost (dshost.me): securely access your dsh Web UI from anywhere",
   "type": "module",
   "main": "lib/index.js",