luckytri 1.0.0 → 1.0.2

package/scripts/plugin.js

@@ -1,150 +1,150 @@
-import { createHash } from "node:crypto";
-import {
-  mkdirSync,
-  readdirSync,
-  readFileSync,
-  statSync,
-  writeFileSync,
-} from "node:fs";
-import { join, relative } from "node:path";
-import { validateManifest } from "../server/plugins/manifest.js";
-
-const command = process.argv[2];
-const arg = process.argv[3];
-
-function walk(dir, out = []) {
-  for (const name of readdirSync(dir)) {
-    if (name === "node_modules") continue;
-    const path = join(dir, name);
-    if (statSync(path).isDirectory()) walk(path, out);
-    else out.push(path);
-  }
-  return out;
-}
-
-function crc32(buffer) {
-  let crc = ~0;
-  for (const byte of buffer) {
-    crc ^= byte;
-    for (let bit = 0; bit < 8; bit++)
-      crc = crc & 1 ? (crc >>> 1) ^ 0xedb88320 : crc >>> 1;
-  }
-  return ~crc >>> 0;
-}
-
-function pack(dir) {
-  const files = walk(dir).map((path) => ({
-    name: relative(dir, path).replace(/\\/g, "/"),
-    bytes: readFileSync(path),
-  }));
-  const locals = [];
-  const central = [];
-  let offset = 0;
-  for (const file of files) {
-    const name = Buffer.from(file.name);
-    const crc = crc32(file.bytes);
-    const local = Buffer.alloc(30 + name.length);
-    local.writeUInt32LE(0x04034b50, 0);
-    local.writeUInt16LE(20, 4);
-    local.writeUInt32LE(crc, 14);
-    local.writeUInt32LE(file.bytes.length, 18);
-    local.writeUInt32LE(file.bytes.length, 22);
-    local.writeUInt16LE(name.length, 26);
-    name.copy(local, 30);
-    const centralHeader = Buffer.alloc(46 + name.length);
-    centralHeader.writeUInt32LE(0x02014b50, 0);
-    centralHeader.writeUInt16LE(20, 4);
-    centralHeader.writeUInt16LE(20, 6);
-    centralHeader.writeUInt32LE(crc, 16);
-    centralHeader.writeUInt32LE(file.bytes.length, 20);
-    centralHeader.writeUInt32LE(file.bytes.length, 24);
-    centralHeader.writeUInt16LE(name.length, 28);
-    centralHeader.writeUInt32LE(offset, 42);
-    name.copy(centralHeader, 46);
-    locals.push(local, file.bytes);
-    central.push(centralHeader);
-    offset += local.length + file.bytes.length;
-  }
-  const directory = Buffer.concat(central);
-  const end = Buffer.alloc(22);
-  end.writeUInt32LE(0x06054b50, 0);
-  end.writeUInt16LE(files.length, 8);
-  end.writeUInt16LE(files.length, 10);
-  end.writeUInt32LE(directory.length, 12);
-  end.writeUInt32LE(offset, 16);
-  return Buffer.concat([...locals, directory, end]);
-}
-
-if (command === "new") {
-  const id = arg || "example";
-  const dir = join("plugins", id);
-  mkdirSync(dir, { recursive: true });
-  writeFileSync(
-    join(dir, "luckytri-plugin.json"),
-    JSON.stringify(
-      {
-        id,
-        name: id,
-        version: "0.1.0",
-        pluginApi: "1.0",
-        luckytri: ">=1.0.0 <2.0.0",
-        description: "",
-        entry: "index.js",
-        permissions: [],
-        contributes: {},
-      },
-      null,
-      2,
-    ),
-  );
-  writeFileSync(
-    join(dir, "index.js"),
-    "export default { activate(ctx) { ctx.status.set({ text: '已接上', tone: 'ok' }); } };\n",
-  );
-  console.log(dir);
-} else if (command === "pack") {
-  const dir = arg;
-  const manifest = JSON.parse(
-    readFileSync(join(dir, "luckytri-plugin.json"), "utf8"),
-  );
-  const bytes = pack(dir);
-  const file = `${manifest.id}-${manifest.version}.zip`;
-  writeFileSync(file, bytes);
-  const sha256 = createHash("sha256").update(bytes).digest("hex");
-  console.log(
-    JSON.stringify(
-      {
-        id: manifest.id,
-        version: manifest.version,
-        pluginApi: manifest.pluginApi,
-        luckytri: manifest.luckytri,
-        sha256,
-        permissions: manifest.permissions,
-        network: manifest.network || [],
-        file,
-      },
-      null,
-      2,
-    ),
-  );
-} else if (command === "registry-check") {
-  const index = JSON.parse(readFileSync(arg || "index.json", "utf8"));
-  if (index.format !== 1 || !Array.isArray(index.plugins))
-    throw new Error("插件索引无效");
-  for (const plugin of index.plugins)
-    for (const version of plugin.versions || [])
-      if (!version.sha256 || !version.url) throw new Error("插件索引无效");
-  console.log(`ok ${index.plugins.length}`);
-} else if (command === "check") {
-  const dir = resolveDir(arg);
-  const manifest = validateManifest(
-    JSON.parse(readFileSync(join(dir, "luckytri-plugin.json"), "utf8")),
-  );
-  console.log(`${manifest.id} ${manifest.version} 清单通过`);
-} else {
-  console.log("用法: npm run plugin -- new|check|pack|registry-check");
-}
-
-function resolveDir(value) {
-  return value || ".";
-}
+import { createHash } from "node:crypto";
+import {
+  mkdirSync,
+  readdirSync,
+  readFileSync,
+  statSync,
+  writeFileSync,
+} from "node:fs";
+import { join, relative } from "node:path";
+import { validateManifest } from "../server/plugins/manifest.js";
+
+const command = process.argv[2];
+const arg = process.argv[3];
+
+function walk(dir, out = []) {
+  for (const name of readdirSync(dir)) {
+    if (name === "node_modules") continue;
+    const path = join(dir, name);
+    if (statSync(path).isDirectory()) walk(path, out);
+    else out.push(path);
+  }
+  return out;
+}
+
+function crc32(buffer) {
+  let crc = ~0;
+  for (const byte of buffer) {
+    crc ^= byte;
+    for (let bit = 0; bit < 8; bit++)
+      crc = crc & 1 ? (crc >>> 1) ^ 0xedb88320 : crc >>> 1;
+  }
+  return ~crc >>> 0;
+}
+
+function pack(dir) {
+  const files = walk(dir).map((path) => ({
+    name: relative(dir, path).replace(/\\/g, "/"),
+    bytes: readFileSync(path),
+  }));
+  const locals = [];
+  const central = [];
+  let offset = 0;
+  for (const file of files) {
+    const name = Buffer.from(file.name);
+    const crc = crc32(file.bytes);
+    const local = Buffer.alloc(30 + name.length);
+    local.writeUInt32LE(0x04034b50, 0);
+    local.writeUInt16LE(20, 4);
+    local.writeUInt32LE(crc, 14);
+    local.writeUInt32LE(file.bytes.length, 18);
+    local.writeUInt32LE(file.bytes.length, 22);
+    local.writeUInt16LE(name.length, 26);
+    name.copy(local, 30);
+    const centralHeader = Buffer.alloc(46 + name.length);
+    centralHeader.writeUInt32LE(0x02014b50, 0);
+    centralHeader.writeUInt16LE(20, 4);
+    centralHeader.writeUInt16LE(20, 6);
+    centralHeader.writeUInt32LE(crc, 16);
+    centralHeader.writeUInt32LE(file.bytes.length, 20);
+    centralHeader.writeUInt32LE(file.bytes.length, 24);
+    centralHeader.writeUInt16LE(name.length, 28);
+    centralHeader.writeUInt32LE(offset, 42);
+    name.copy(centralHeader, 46);
+    locals.push(local, file.bytes);
+    central.push(centralHeader);
+    offset += local.length + file.bytes.length;
+  }
+  const directory = Buffer.concat(central);
+  const end = Buffer.alloc(22);
+  end.writeUInt32LE(0x06054b50, 0);
+  end.writeUInt16LE(files.length, 8);
+  end.writeUInt16LE(files.length, 10);
+  end.writeUInt32LE(directory.length, 12);
+  end.writeUInt32LE(offset, 16);
+  return Buffer.concat([...locals, directory, end]);
+}
+
+if (command === "new") {
+  const id = arg || "example";
+  const dir = join("plugins", id);
+  mkdirSync(dir, { recursive: true });
+  writeFileSync(
+    join(dir, "luckytri-plugin.json"),
+    JSON.stringify(
+      {
+        id,
+        name: id,
+        version: "0.1.0",
+        pluginApi: "1.0",
+        luckytri: ">=1.0.0 <2.0.0",
+        description: "",
+        entry: "index.js",
+        permissions: [],
+        contributes: {},
+      },
+      null,
+      2,
+    ),
+  );
+  writeFileSync(
+    join(dir, "index.js"),
+    "export default { activate(ctx) { ctx.status.set({ text: '已接上', tone: 'ok' }); } };\n",
+  );
+  console.log(dir);
+} else if (command === "pack") {
+  const dir = arg;
+  const manifest = JSON.parse(
+    readFileSync(join(dir, "luckytri-plugin.json"), "utf8"),
+  );
+  const bytes = pack(dir);
+  const file = `${manifest.id}-${manifest.version}.zip`;
+  writeFileSync(file, bytes);
+  const sha256 = createHash("sha256").update(bytes).digest("hex");
+  console.log(
+    JSON.stringify(
+      {
+        id: manifest.id,
+        version: manifest.version,
+        pluginApi: manifest.pluginApi,
+        luckytri: manifest.luckytri,
+        sha256,
+        permissions: manifest.permissions,
+        network: manifest.network || [],
+        file,
+      },
+      null,
+      2,
+    ),
+  );
+} else if (command === "registry-check") {
+  const index = JSON.parse(readFileSync(arg || "index.json", "utf8"));
+  if (index.format !== 1 || !Array.isArray(index.plugins))
+    throw new Error("插件索引无效");
+  for (const plugin of index.plugins)
+    for (const version of plugin.versions || [])
+      if (!version.sha256 || !version.url) throw new Error("插件索引无效");
+  console.log(`ok ${index.plugins.length}`);
+} else if (command === "check") {
+  const dir = resolveDir(arg);
+  const manifest = validateManifest(
+    JSON.parse(readFileSync(join(dir, "luckytri-plugin.json"), "utf8")),
+  );
+  console.log(`${manifest.id} ${manifest.version} 清单通过`);
+} else {
+  console.log("用法: npm run plugin -- new|check|pack|registry-check");
+}
+
+function resolveDir(value) {
+  return value || ".";
+}

package/scripts/reset-password.js

@@ -0,0 +1,22 @@
+import { prepareRuntime } from "./runtime.js";
+import { running, serviceHeaders, serviceUrl } from "./service.js";
+try {
+  prepareRuntime({ initialize: false });
+  const base = serviceUrl();
+  if (!(await running({ base })))
+    throw Error("请先运行 luckytri，再重置管理密码。");
+  const response = await fetch(base + "/api/auth/reset", {
+    method: "POST",
+    headers: serviceHeaders(),
+    body: "{}",
+    signal: AbortSignal.timeout(5000),
+  });
+  if (!response.ok)
+    throw Error("无法重置密码，请确认正在运行 LuckyTri 1.0.1 或更新版本。");
+  console.log(
+    "管理密码已重置，刷新管理台后重新设置。数据库、记忆和配置均保留。",
+  );
+} catch (error) {
+  console.error(error.message);
+  process.exitCode = 1;
+}

package/scripts/runtime.js

@@ -1,25 +1,25 @@
-import { mkdirSync } from "node:fs";
-import { runtimePaths } from "../server/paths.js";
-import { initializeEnvironment } from "./setup.js";
-
-export function prepareRuntime({ initialize = true } = {}) {
-  let paths = runtimePaths();
-  process.env.LUCKYTRI_HOME = paths.home;
-  if (initialize) {
-    mkdirSync(paths.home, { recursive: true, mode: 0o700 });
-    if (initializeEnvironment(paths.home))
-      console.log(
-        `已创建本机配置 / Created local configuration: ${paths.config}\n首次访问请在本机编辑器查看 ADMIN_TOKEN；不要分享配置文件。`,
-      );
-  }
-  try {
-    process.loadEnvFile(paths.config);
-  } catch (error) {
-    if (error.code !== "ENOENT") throw error;
-  }
-  paths = runtimePaths();
-  // Child processes and backup workers inherit the same absolute paths.
-  process.env.DB_PATH = paths.database;
-  process.env.BACKUP_DIR = paths.backups;
-  return paths;
-}
+import { mkdirSync } from "node:fs";
+import { runtimePaths } from "../server/paths.js";
+import { initializeEnvironment } from "./setup.js";
+
+export function prepareRuntime({ initialize = true } = {}) {
+  let paths = runtimePaths();
+  process.env.LUCKYTRI_HOME = paths.home;
+  if (initialize) {
+    mkdirSync(paths.home, { recursive: true, mode: 0o700 });
+    if (initializeEnvironment(paths.home))
+      console.log(
+        `已创建本机配置 / Created local configuration: ${paths.config}\n首次打开管理台时设置一个密码即可。`,
+      );
+  }
+  try {
+    process.loadEnvFile(paths.config);
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+  }
+  paths = runtimePaths();
+  // Child processes and backup workers inherit the same absolute paths.
+  process.env.DB_PATH = paths.database;
+  process.env.BACKUP_DIR = paths.backups;
+  return paths;
+}

package/scripts/service.js

@@ -1,47 +1,56 @@
-import { runtimePaths } from "../server/paths.js";
-
-export function serviceUrl(env = process.env) {
-  const port = Number(env.PORT || 3210);
-  if (!Number.isInteger(port) || port < 1 || port > 65535)
-    throw Error("PORT 必须是 1–65535 / PORT must be between 1 and 65535");
-  const raw = env.HOST || "127.0.0.1";
-  const host = raw === "0.0.0.0" ? "127.0.0.1" : raw === "::" ? "::1" : raw;
-  return new URL(`http://${host.includes(":") ? `[${host}]` : host}:${port}`)
-    .origin;
-}
-
-export const serviceHeaders = () => ({
-  "Content-Type": "application/json",
-  Authorization: `Bearer ${process.env.ADMIN_TOKEN || ""}`,
-});
-
-export async function running({ base = serviceUrl(), lenient = false } = {}) {
-  let response;
-  try {
-    response = await fetch(base + "/api/service/status", {
-      headers: serviceHeaders(),
-      signal: AbortSignal.timeout(1500),
-    });
-  } catch (error) {
-    if (lenient || error.cause?.code === "ECONNREFUSED") return false;
-    throw Error("无法确认端口状态，请检查服务或网络；未重复启动。");
-  }
-  if (!response.ok)
-    throw Error("端口已被占用或管理令牌不匹配，请检查本机配置。");
-  let info;
-  try {
-    info = await response.json();
-  } catch {
-    throw Error("此端口运行的不是 LuckyTri。");
-  }
-  const paths = runtimePaths();
-  const normalize = (value) =>
-    process.platform === "win32" ? value.toLowerCase() : value;
-  if (
-    !["luckytri", "luckybot", "lucky", "xiaoman"].includes(info.app) ||
-    typeof (info.home ?? info.workspace) !== "string" ||
-    normalize(info.home ?? info.workspace) !== normalize(paths.home)
-  )
-    throw Error("此端口已被其他实例占用，未操作任何进程。");
-  return true;
-}
+import { runtimePaths } from "../server/paths.js";
+import { localServiceKey } from "../server/local-access.js";
+let legacy = false;
+
+export function serviceUrl(env = process.env) {
+  const port = Number(env.PORT || 3210);
+  if (!Number.isInteger(port) || port < 1 || port > 65535)
+    throw Error("PORT 必须是 1–65535 / PORT must be between 1 and 65535");
+  const raw = env.HOST || "127.0.0.1";
+  const host = raw === "0.0.0.0" ? "127.0.0.1" : raw === "::" ? "::1" : raw;
+  return new URL(`http://${host.includes(":") ? `[${host}]` : host}:${port}`)
+    .origin;
+}
+
+export const serviceHeaders = () => ({
+  "Content-Type": "application/json",
+  Authorization: `Bearer ${legacy ? process.env.ADMIN_TOKEN : localServiceKey()}`,
+});
+
+export async function running({ base = serviceUrl(), lenient = false } = {}) {
+  let response;
+  try {
+    response = await fetch(base + "/api/service/status", {
+      headers: serviceHeaders(),
+      signal: AbortSignal.timeout(1500),
+    });
+  } catch (error) {
+    if (lenient || error.cause?.code === "ECONNREFUSED") {
+      legacy = false;
+      return false;
+    }
+    throw Error("无法确认端口状态，请检查服务或网络；未重复启动。");
+  }
+  if (response.status === 401 && !legacy && process.env.ADMIN_TOKEN) {
+    // Allow the new CLI to gracefully stop a still-running 1.0.0 instance.
+    legacy = true;
+    return running({ base, lenient });
+  }
+  if (!response.ok) throw Error("端口已被占用或不是当前实例，请检查本机配置。");
+  let info;
+  try {
+    info = await response.json();
+  } catch {
+    throw Error("此端口运行的不是 LuckyTri。");
+  }
+  const paths = runtimePaths();
+  const normalize = (value) =>
+    process.platform === "win32" ? value.toLowerCase() : value;
+  if (
+    !["luckytri", "luckybot", "lucky", "xiaoman"].includes(info.app) ||
+    typeof (info.home ?? info.workspace) !== "string" ||
+    normalize(info.home ?? info.workspace) !== normalize(paths.home)
+  )
+    throw Error("此端口已被其他实例占用，未操作任何进程。");
+  return info;
+}

package/scripts/setup.js

@@ -1,50 +1,50 @@
-import { randomBytes } from "node:crypto";
-import { mkdirSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-import { pathToFileURL } from "node:url";
-import { runtimePaths } from "../server/paths.js";
-
-export function initializeEnvironment(directory = runtimePaths().home) {
-  mkdirSync(directory, { recursive: true, mode: 0o700 });
-  const file = resolve(directory, ".env");
-  const token = () => randomBytes(32).toString("hex");
-  const content = [
-    "# LuckyTri 本机配置。修改后重启服务，不要公开此文件。",
-    "# LuckyTri local configuration. Restart after editing and never share this file.",
-    "HOST=127.0.0.1",
-    "PORT=3210",
-    `ADMIN_TOKEN=${token()}`,
-    "",
-    "# 连接 QQ 的方式二选一，也可以在管理界面「连接 QQ」里选择。",
-    "# Pick one way to connect QQ; it can also be chosen in the studio under Connect QQ.",
-    "# LUCKYTRI_CHANNEL=onebot   # onebot | qqbot；设置后界面里不能再改 / locks the choice when set",
-    "",
-    "# OneBot 11",
-    `ONEBOT_TOKEN=${token()}`,
-    "",
-    "# QQ 官方机器人 / QQ official bot",
-    "# QQBOT_APP_ID=",
-    "# QQBOT_APP_SECRET=",
-    "",
-    "LLM_API_KEY=",
-    "",
-  ].join("\n");
-  try {
-    writeFileSync(file, content, { flag: "wx", mode: 0o600 });
-    return true;
-  } catch (error) {
-    if (error.code === "EEXIST") return false;
-    throw error;
-  }
-}
-if (
-  process.argv[1] &&
-  import.meta.url === pathToFileURL(resolve(process.argv[1])).href
-) {
-  const created = initializeEnvironment();
-  console.log(
-    created
-      ? "已生成 .env 与两枚不同的随机令牌。请在本机编辑器中查看，修改后重启服务。\nCreated .env with two different random tokens. Open it in a local editor and restart after changes."
-      : "已有 .env，已保留原文件，不覆盖任何配置。\nA .env already exists and was left untouched.",
-  );
-}
+import { mkdirSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { runtimePaths } from "../server/paths.js";
+
+export function initializeEnvironment(directory = runtimePaths().home) {
+  mkdirSync(directory, { recursive: true, mode: 0o700 });
+  const file = resolve(directory, ".env");
+  const content = [
+    "# LuckyTri 本机配置。修改后重启服务，不要公开此文件。",
+    "# LuckyTri local configuration. Restart after editing and never share this file.",
+    "HOST=127.0.0.1",
+    "PORT=3210",
+    "# 首次打开管理台时设置一个管理密码。",
+    "# Set your management password on the first visit to the studio.",
+    "",
+    "# 连接 QQ 的方式二选一，也可以在管理界面「连接 QQ」里选择。",
+    "# Pick one way to connect QQ; it can also be chosen in the studio under Connect QQ.",
+    "# LUCKYTRI_CHANNEL=onebot   # onebot | qqbot；设置后界面里不能再改 / locks the choice when set",
+    "",
+    "# OneBot 11",
+    "# 本机 OneBot 接入无需单独令牌；远程接入可使用管理密码。",
+    "# Local OneBot clients need no separate token; remote clients can use the management password.",
+    "",
+    "# QQ 官方机器人 / QQ official bot",
+    "# QQBOT_APP_ID=",
+    "# QQBOT_APP_SECRET=",
+    "",
+    "LLM_API_KEY=",
+    "",
+  ].join("\n");
+  try {
+    writeFileSync(file, content, { flag: "wx", mode: 0o600 });
+    return true;
+  } catch (error) {
+    if (error.code === "EEXIST") return false;
+    throw error;
+  }
+}
+if (
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(resolve(process.argv[1])).href
+) {
+  const created = initializeEnvironment();
+  console.log(
+    created
+      ? "已生成本机配置，首次打开管理台时设置密码。\nCreated local configuration. Set a password on the first visit to the studio."
+      : "已有 .env，已保留原文件，不覆盖任何配置。\nA .env already exists and was left untouched.",
+  );
+}