luckytri 1.0.0 → 1.0.2

package/server/plugins/schema.js

@@ -1,91 +1,91 @@
-// Tables a plugin is allowed to have a share in. The plugin never sees the
-// database; these rows are written by the host on its behalf.
-export function migratePlugins(db) {
-  db.exec(`
-    CREATE TABLE IF NOT EXISTS plugin_installs (
-      id TEXT PRIMARY KEY,
-      version TEXT NOT NULL,
-      enabled INTEGER NOT NULL DEFAULT 0,
-      state TEXT NOT NULL DEFAULT 'installed',
-      source TEXT NOT NULL DEFAULT '',
-      sha256 TEXT NOT NULL DEFAULT '',
-      api TEXT NOT NULL DEFAULT '1.0',
-      permissions TEXT NOT NULL DEFAULT '[]',
-      granted TEXT NOT NULL DEFAULT '[]',
-      manifest TEXT NOT NULL DEFAULT '{}',
-      path TEXT NOT NULL DEFAULT '',
-      error TEXT NOT NULL DEFAULT '',
-      installed INTEGER NOT NULL,
-      updated INTEGER NOT NULL
-    );
-    CREATE TABLE IF NOT EXISTS plugin_settings (
-      plugin_id TEXT NOT NULL,
-      key TEXT NOT NULL,
-      value TEXT NOT NULL,
-      secret INTEGER NOT NULL DEFAULT 0,
-      PRIMARY KEY(plugin_id, key)
-    );
-    CREATE TABLE IF NOT EXISTS plugin_kv (
-      plugin_id TEXT NOT NULL,
-      key TEXT NOT NULL,
-      value TEXT NOT NULL,
-      updated INTEGER NOT NULL,
-      PRIMARY KEY(plugin_id, key)
-    );
-    CREATE TABLE IF NOT EXISTS plugin_events (
-      id INTEGER PRIMARY KEY,
-      plugin_id TEXT NOT NULL,
-      time INTEGER NOT NULL,
-      kind TEXT NOT NULL,
-      level TEXT NOT NULL DEFAULT 'info',
-      message TEXT NOT NULL
-    );
-    CREATE INDEX IF NOT EXISTS plugin_events_plugin ON plugin_events(plugin_id, id DESC);
-    CREATE TABLE IF NOT EXISTS plugin_sources (
-      id TEXT PRIMARY KEY,
-      url TEXT NOT NULL,
-      created INTEGER NOT NULL
-    );
-    CREATE TABLE IF NOT EXISTS mind_observations (
-      id TEXT PRIMARY KEY,
-      created INTEGER NOT NULL,
-      plugin_id TEXT NOT NULL,
-      summary TEXT NOT NULL,
-      detail TEXT NOT NULL DEFAULT '',
-      discretion TEXT NOT NULL DEFAULT 'open',
-      hash TEXT NOT NULL,
-      revoked INTEGER NOT NULL DEFAULT 0
-    );
-    CREATE INDEX IF NOT EXISTS mind_observations_plugin ON mind_observations(plugin_id, created);
-    CREATE TABLE IF NOT EXISTS mind_actions (
-      id TEXT PRIMARY KEY,
-      created INTEGER NOT NULL,
-      plugin_id TEXT NOT NULL DEFAULT '',
-      action TEXT NOT NULL,
-      label TEXT NOT NULL DEFAULT '',
-      input TEXT NOT NULL DEFAULT '{}',
-      reason TEXT NOT NULL DEFAULT '',
-      risk TEXT NOT NULL DEFAULT 'low',
-      confirm TEXT NOT NULL DEFAULT 'none',
-      state TEXT NOT NULL,
-      result TEXT NOT NULL DEFAULT '',
-      session_id TEXT,
-      trace_id TEXT,
-      finished INTEGER
-    );
-    CREATE INDEX IF NOT EXISTS mind_actions_state ON mind_actions(state, created);
-    CREATE TABLE IF NOT EXISTS core_perceptions (
-      cache_key TEXT PRIMARY KEY,
-      session_id TEXT NOT NULL,
-      message_id INTEGER,
-      plugin_id TEXT NOT NULL,
-      type TEXT NOT NULL,
-      text TEXT NOT NULL,
-      created INTEGER NOT NULL
-    );
-  `);
-  // A restarted process cannot know whether a running action finished.
-  db.prepare(
-    "UPDATE mind_actions SET state='uncertain', result='实例中断，没有自动重做' WHERE state='running'",
-  ).run();
-}
+// Tables a plugin is allowed to have a share in. The plugin never sees the
+// database; these rows are written by the host on its behalf.
+export function migratePlugins(db) {
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_installs (
+      id TEXT PRIMARY KEY,
+      version TEXT NOT NULL,
+      enabled INTEGER NOT NULL DEFAULT 0,
+      state TEXT NOT NULL DEFAULT 'installed',
+      source TEXT NOT NULL DEFAULT '',
+      sha256 TEXT NOT NULL DEFAULT '',
+      api TEXT NOT NULL DEFAULT '1.0',
+      permissions TEXT NOT NULL DEFAULT '[]',
+      granted TEXT NOT NULL DEFAULT '[]',
+      manifest TEXT NOT NULL DEFAULT '{}',
+      path TEXT NOT NULL DEFAULT '',
+      error TEXT NOT NULL DEFAULT '',
+      installed INTEGER NOT NULL,
+      updated INTEGER NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS plugin_settings (
+      plugin_id TEXT NOT NULL,
+      key TEXT NOT NULL,
+      value TEXT NOT NULL,
+      secret INTEGER NOT NULL DEFAULT 0,
+      PRIMARY KEY(plugin_id, key)
+    );
+    CREATE TABLE IF NOT EXISTS plugin_kv (
+      plugin_id TEXT NOT NULL,
+      key TEXT NOT NULL,
+      value TEXT NOT NULL,
+      updated INTEGER NOT NULL,
+      PRIMARY KEY(plugin_id, key)
+    );
+    CREATE TABLE IF NOT EXISTS plugin_events (
+      id INTEGER PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      time INTEGER NOT NULL,
+      kind TEXT NOT NULL,
+      level TEXT NOT NULL DEFAULT 'info',
+      message TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS plugin_events_plugin ON plugin_events(plugin_id, id DESC);
+    CREATE TABLE IF NOT EXISTS plugin_sources (
+      id TEXT PRIMARY KEY,
+      url TEXT NOT NULL,
+      created INTEGER NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS mind_observations (
+      id TEXT PRIMARY KEY,
+      created INTEGER NOT NULL,
+      plugin_id TEXT NOT NULL,
+      summary TEXT NOT NULL,
+      detail TEXT NOT NULL DEFAULT '',
+      discretion TEXT NOT NULL DEFAULT 'open',
+      hash TEXT NOT NULL,
+      revoked INTEGER NOT NULL DEFAULT 0
+    );
+    CREATE INDEX IF NOT EXISTS mind_observations_plugin ON mind_observations(plugin_id, created);
+    CREATE TABLE IF NOT EXISTS mind_actions (
+      id TEXT PRIMARY KEY,
+      created INTEGER NOT NULL,
+      plugin_id TEXT NOT NULL DEFAULT '',
+      action TEXT NOT NULL,
+      label TEXT NOT NULL DEFAULT '',
+      input TEXT NOT NULL DEFAULT '{}',
+      reason TEXT NOT NULL DEFAULT '',
+      risk TEXT NOT NULL DEFAULT 'low',
+      confirm TEXT NOT NULL DEFAULT 'none',
+      state TEXT NOT NULL,
+      result TEXT NOT NULL DEFAULT '',
+      session_id TEXT,
+      trace_id TEXT,
+      finished INTEGER
+    );
+    CREATE INDEX IF NOT EXISTS mind_actions_state ON mind_actions(state, created);
+    CREATE TABLE IF NOT EXISTS core_perceptions (
+      cache_key TEXT PRIMARY KEY,
+      session_id TEXT NOT NULL,
+      message_id INTEGER,
+      plugin_id TEXT NOT NULL,
+      type TEXT NOT NULL,
+      text TEXT NOT NULL,
+      created INTEGER NOT NULL
+    );
+  `);
+  // A restarted process cannot know whether a running action finished.
+  db.prepare(
+    "UPDATE mind_actions SET state='uncertain', result='实例中断，没有自动重做' WHERE state='running'",
+  ).run();
+}

package/server/plugins/zip.js

@@ -1,112 +1,112 @@
-import { inflateRawSync } from "node:zlib";
-import { mkdirSync, writeFileSync } from "node:fs";
-import { dirname, join, normalize } from "node:path";
-
-const MAX_FILES = 200;
-const MAX_BYTES = 60 * 1024 * 1024;
-
-function findEocd(buffer) {
-  const start = Math.max(0, buffer.length - 22 - 65535);
-  for (let i = buffer.length - 22; i >= start; i--)
-    if (buffer.readUInt32LE(i) === 0x06054b50) return i;
-  return -1;
-}
-
-function safeName(name) {
-  const text = String(name || "").replace(/\\/g, "/");
-  if (
-    !text ||
-    text.startsWith("/") ||
-    text.includes("\0") ||
-    /^[a-z]:/i.test(text) ||
-    text.split("/").some((part) => part === ".." || part === "")
-  )
-    throw new Error("压缩包路径无效");
-  return text;
-}
-
-// Reads a zip the way a stranger's file has to be read: only stored and
-// deflate entries, no encryption, no links, no paths that leave the folder.
-export function readZip(buffer) {
-  if (!Buffer.isBuffer(buffer) || buffer.length < 22)
-    throw new Error("压缩包无法读取");
-  const eocd = findEocd(buffer);
-  if (eocd < 0) throw new Error("压缩包无法读取");
-  if (buffer.readUInt16LE(eocd + 4) !== 0)
-    throw new Error("压缩包格式不受支持");
-  const entries = buffer.readUInt16LE(eocd + 10);
-  if (!entries || entries > MAX_FILES) throw new Error("压缩包文件过多");
-  let offset = buffer.readUInt32LE(eocd + 16);
-  if (offset >= buffer.length) throw new Error("压缩包无法读取");
-  const files = [];
-  let total = 0;
-  for (let index = 0; index < entries; index++) {
-    if (buffer.readUInt32LE(offset) !== 0x02014b50)
-      throw new Error("压缩包无法读取");
-    const flags = buffer.readUInt16LE(offset + 8);
-    const method = buffer.readUInt16LE(offset + 10);
-    const compressedSize = buffer.readUInt32LE(offset + 20);
-    const size = buffer.readUInt32LE(offset + 24);
-    const nameLength = buffer.readUInt16LE(offset + 28);
-    const extraLength = buffer.readUInt16LE(offset + 30);
-    const commentLength = buffer.readUInt16LE(offset + 32);
-    const attributes = buffer.readUInt32LE(offset + 38);
-    const local = buffer.readUInt32LE(offset + 42);
-    const name = buffer
-      .subarray(offset + 46, offset + 46 + nameLength)
-      .toString("utf8");
-    offset += 46 + nameLength + extraLength + commentLength;
-    if (flags & 1) throw new Error("压缩包不能加密");
-    if (size === 0xffffffff || compressedSize === 0xffffffff)
-      throw new Error("压缩包格式不受支持");
-    if (
-      (attributes >>> 16) & 0o170000 &&
-      ((attributes >>> 16) & 0o170000) !== 0o100000 &&
-      ((attributes >>> 16) & 0o170000) !== 0o040000
-    )
-      throw new Error("压缩包不能包含链接");
-    if (method !== 0 && method !== 8) throw new Error("压缩包格式不受支持");
-    if (name.endsWith("/") || name.endsWith("\\")) continue;
-    const fileName = safeName(name);
-    if (buffer.readUInt32LE(local) !== 0x04034b50)
-      throw new Error("压缩包无法读取");
-    const dataAt =
-      local +
-      30 +
-      buffer.readUInt16LE(local + 26) +
-      buffer.readUInt16LE(local + 28);
-    const compressed = buffer.subarray(dataAt, dataAt + compressedSize);
-    const bytes =
-      method === 0 ? Buffer.from(compressed) : inflateRawSync(compressed);
-    if (size && bytes.length !== size) throw new Error("压缩包内容不完整");
-    total += bytes.length;
-    if (total > MAX_BYTES) throw new Error("压缩包解压后过大");
-    files.push({ name: fileName, bytes });
-  }
-  return files;
-}
-
-export function stripRoot(files) {
-  const roots = new Set(files.map((file) => file.name.split("/")[0]));
-  if (roots.size !== 1) return files;
-  const root = [...roots][0];
-  if (files.some((file) => file.name === root)) return files;
-  return files
-    .map((file) => ({
-      ...file,
-      name: file.name.slice(root.length + 1),
-    }))
-    .filter((file) => file.name);
-}
-
-export function writeTree(dir, files) {
-  for (const file of files) {
-    const target = join(
-      dir,
-      ...normalize(file.name).split(/[\\/]/).filter(Boolean),
-    );
-    if (!target.startsWith(dir)) throw new Error("压缩包路径无效");
-    mkdirSync(dirname(target), { recursive: true });
-    writeFileSync(target, file.bytes);
-  }
-}
+import { inflateRawSync } from "node:zlib";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname, join, normalize } from "node:path";
+
+const MAX_FILES = 200;
+const MAX_BYTES = 60 * 1024 * 1024;
+
+function findEocd(buffer) {
+  const start = Math.max(0, buffer.length - 22 - 65535);
+  for (let i = buffer.length - 22; i >= start; i--)
+    if (buffer.readUInt32LE(i) === 0x06054b50) return i;
+  return -1;
+}
+
+function safeName(name) {
+  const text = String(name || "").replace(/\\/g, "/");
+  if (
+    !text ||
+    text.startsWith("/") ||
+    text.includes("\0") ||
+    /^[a-z]:/i.test(text) ||
+    text.split("/").some((part) => part === ".." || part === "")
+  )
+    throw new Error("压缩包路径无效");
+  return text;
+}
+
+// Reads a zip the way a stranger's file has to be read: only stored and
+// deflate entries, no encryption, no links, no paths that leave the folder.
+export function readZip(buffer) {
+  if (!Buffer.isBuffer(buffer) || buffer.length < 22)
+    throw new Error("压缩包无法读取");
+  const eocd = findEocd(buffer);
+  if (eocd < 0) throw new Error("压缩包无法读取");
+  if (buffer.readUInt16LE(eocd + 4) !== 0)
+    throw new Error("压缩包格式不受支持");
+  const entries = buffer.readUInt16LE(eocd + 10);
+  if (!entries || entries > MAX_FILES) throw new Error("压缩包文件过多");
+  let offset = buffer.readUInt32LE(eocd + 16);
+  if (offset >= buffer.length) throw new Error("压缩包无法读取");
+  const files = [];
+  let total = 0;
+  for (let index = 0; index < entries; index++) {
+    if (buffer.readUInt32LE(offset) !== 0x02014b50)
+      throw new Error("压缩包无法读取");
+    const flags = buffer.readUInt16LE(offset + 8);
+    const method = buffer.readUInt16LE(offset + 10);
+    const compressedSize = buffer.readUInt32LE(offset + 20);
+    const size = buffer.readUInt32LE(offset + 24);
+    const nameLength = buffer.readUInt16LE(offset + 28);
+    const extraLength = buffer.readUInt16LE(offset + 30);
+    const commentLength = buffer.readUInt16LE(offset + 32);
+    const attributes = buffer.readUInt32LE(offset + 38);
+    const local = buffer.readUInt32LE(offset + 42);
+    const name = buffer
+      .subarray(offset + 46, offset + 46 + nameLength)
+      .toString("utf8");
+    offset += 46 + nameLength + extraLength + commentLength;
+    if (flags & 1) throw new Error("压缩包不能加密");
+    if (size === 0xffffffff || compressedSize === 0xffffffff)
+      throw new Error("压缩包格式不受支持");
+    if (
+      (attributes >>> 16) & 0o170000 &&
+      ((attributes >>> 16) & 0o170000) !== 0o100000 &&
+      ((attributes >>> 16) & 0o170000) !== 0o040000
+    )
+      throw new Error("压缩包不能包含链接");
+    if (method !== 0 && method !== 8) throw new Error("压缩包格式不受支持");
+    if (name.endsWith("/") || name.endsWith("\\")) continue;
+    const fileName = safeName(name);
+    if (buffer.readUInt32LE(local) !== 0x04034b50)
+      throw new Error("压缩包无法读取");
+    const dataAt =
+      local +
+      30 +
+      buffer.readUInt16LE(local + 26) +
+      buffer.readUInt16LE(local + 28);
+    const compressed = buffer.subarray(dataAt, dataAt + compressedSize);
+    const bytes =
+      method === 0 ? Buffer.from(compressed) : inflateRawSync(compressed);
+    if (size && bytes.length !== size) throw new Error("压缩包内容不完整");
+    total += bytes.length;
+    if (total > MAX_BYTES) throw new Error("压缩包解压后过大");
+    files.push({ name: fileName, bytes });
+  }
+  return files;
+}
+
+export function stripRoot(files) {
+  const roots = new Set(files.map((file) => file.name.split("/")[0]));
+  if (roots.size !== 1) return files;
+  const root = [...roots][0];
+  if (files.some((file) => file.name === root)) return files;
+  return files
+    .map((file) => ({
+      ...file,
+      name: file.name.slice(root.length + 1),
+    }))
+    .filter((file) => file.name);
+}
+
+export function writeTree(dir, files) {
+  for (const file of files) {
+    const target = join(
+      dir,
+      ...normalize(file.name).split(/[\\/]/).filter(Boolean),
+    );
+    if (!target.startsWith(dir)) throw new Error("压缩包路径无效");
+    mkdirSync(dirname(target), { recursive: true });
+    writeFileSync(target, file.bytes);
+  }
+}

package/server/startup-lock.js

@@ -1,118 +1,118 @@
-import {
-  mkdirSync,
-  readFileSync,
-  rmdirSync,
-  rmSync,
-  statSync,
-  writeFileSync,
-} from "node:fs";
-import { join } from "node:path";
-import { runtimePaths } from "./paths.js";
-
-const file = () => join(runtimePaths().data, "startup.json");
-const lock = () => join(runtimePaths().data, "startup.lock");
-
-function read() {
-  try {
-    const info = JSON.parse(readFileSync(file(), "utf8"));
-    if (!Number.isInteger(info.pid) || info.pid <= 0) return null;
-    return info;
-  } catch {
-    return null;
-  }
-}
-
-function alive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-function write(role) {
-  mkdirSync(runtimePaths().data, { recursive: true, mode: 0o700 });
-  writeFileSync(
-    file(),
-    JSON.stringify({ pid: process.pid, role, at: Date.now() }),
-  );
-}
-
-function busy() {
-  const info = read();
-  if (info && alive(info.pid)) return true;
-  try {
-    // Another process may have acquired the directory but not yet written its
-    // identity. Do not steal that claim during the small handover window.
-    return !info && Date.now() - statSync(lock()).mtimeMs < 30000;
-  } catch {
-    return false;
-  }
-}
-
-function claim(role) {
-  mkdirSync(runtimePaths().data, { recursive: true, mode: 0o700 });
-  if (busy()) return false;
-  try {
-    mkdirSync(lock(), { mode: 0o700 });
-  } catch (error) {
-    if (error.code !== "EEXIST") throw error;
-    if (busy()) return false;
-    // Reclaim a dead owner's claim; the normal concurrent-launch path above
-    // never removes a directory just acquired by another process.
-    rmSync(file(), { force: true });
-    try {
-      rmdirSync(lock());
-    } catch (error) {
-      if (error.code !== "ENOENT") throw error;
-    }
-    try {
-      mkdirSync(lock(), { mode: 0o700 });
-    } catch (error) {
-      if (error.code === "EEXIST") return false;
-      throw error;
-    }
-  }
-  write(role);
-  return true;
-}
-
-// The launcher holds this while the server is still loading, so a second
-// click waits instead of copying the database again.
-export function claimLaunch() {
-  return claim("launch");
-}
-
-// Called before the database is opened. A second server exits instead of
-// copying the same file.
-export function claimServer() {
-  const other = read();
-  if (
-    other?.role === "launch" &&
-    other.pid === Number(process.env.LUCKYTRI_LAUNCH_PID)
-  ) {
-    write("server");
-    return;
-  }
-  if (!claim("server")) {
-    console.error("已有一次启动在进行，这次不再重复打开数据库。");
-    process.exit(1);
-  }
-}
-
-export function starting() {
-  return busy();
-}
-
-export function clearStarting() {
-  const info = read();
-  if (info?.pid === process.pid) {
-    rmSync(file(), { force: true });
-    try {
-      rmdirSync(lock());
-    } catch (error) {
-      if (error.code !== "ENOENT") throw error;
-    }
-  }
-}
+import {
+  mkdirSync,
+  readFileSync,
+  rmdirSync,
+  rmSync,
+  statSync,
+  writeFileSync,
+} from "node:fs";
+import { join } from "node:path";
+import { runtimePaths } from "./paths.js";
+
+const file = () => join(runtimePaths().data, "startup.json");
+const lock = () => join(runtimePaths().data, "startup.lock");
+
+function read() {
+  try {
+    const info = JSON.parse(readFileSync(file(), "utf8"));
+    if (!Number.isInteger(info.pid) || info.pid <= 0) return null;
+    return info;
+  } catch {
+    return null;
+  }
+}
+
+function alive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function write(role) {
+  mkdirSync(runtimePaths().data, { recursive: true, mode: 0o700 });
+  writeFileSync(
+    file(),
+    JSON.stringify({ pid: process.pid, role, at: Date.now() }),
+  );
+}
+
+function busy() {
+  const info = read();
+  if (info && alive(info.pid)) return true;
+  try {
+    // Another process may have acquired the directory but not yet written its
+    // identity. Do not steal that claim during the small handover window.
+    return !info && Date.now() - statSync(lock()).mtimeMs < 30000;
+  } catch {
+    return false;
+  }
+}
+
+function claim(role) {
+  mkdirSync(runtimePaths().data, { recursive: true, mode: 0o700 });
+  if (busy()) return false;
+  try {
+    mkdirSync(lock(), { mode: 0o700 });
+  } catch (error) {
+    if (error.code !== "EEXIST") throw error;
+    if (busy()) return false;
+    // Reclaim a dead owner's claim; the normal concurrent-launch path above
+    // never removes a directory just acquired by another process.
+    rmSync(file(), { force: true });
+    try {
+      rmdirSync(lock());
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+    }
+    try {
+      mkdirSync(lock(), { mode: 0o700 });
+    } catch (error) {
+      if (error.code === "EEXIST") return false;
+      throw error;
+    }
+  }
+  write(role);
+  return true;
+}
+
+// The launcher holds this while the server is still loading, so a second
+// click waits instead of copying the database again.
+export function claimLaunch() {
+  return claim("launch");
+}
+
+// Called before the database is opened. A second server exits instead of
+// copying the same file.
+export function claimServer() {
+  const other = read();
+  if (
+    other?.role === "launch" &&
+    other.pid === Number(process.env.LUCKYTRI_LAUNCH_PID)
+  ) {
+    write("server");
+    return;
+  }
+  if (!claim("server")) {
+    console.error("已有一次启动在进行，这次不再重复打开数据库。");
+    process.exit(1);
+  }
+}
+
+export function starting() {
+  return busy();
+}
+
+export function clearStarting() {
+  const info = read();
+  if (info?.pid === process.pid) {
+    rmSync(file(), { force: true });
+    try {
+      rmdirSync(lock());
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+    }
+  }
+}