mn-ws 0.1.0 → 0.2.0

package/dist/runtime/registry.d.ts

@@ -0,0 +1,318 @@
+export declare const MODULES: readonly [{
+    readonly id: "home";
+    readonly title: "首页";
+    readonly order: 1;
+    readonly actions: readonly [import("./types/action.js").TypedAction<{
+        readonly id: "home.bootstrap";
+        readonly cli: readonly ["bootstrap", "show"];
+        readonly http: readonly ["GET", "/api/bootstrap"];
+        readonly summary: "一次取齐面板启动所需的全部上下文";
+    }, {
+        app: {
+            name: string;
+            title: string;
+            description: string;
+            version: string;
+        };
+        storePath: string;
+        storeEnv: string;
+        commands: import("./help.js").CommandEntry[];
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "home.routes";
+        readonly cli: readonly ["routes"];
+        readonly http: readonly ["GET", "/api/routes"];
+        readonly summary: "列出 CLI 命令与 HTTP 路由的对照表";
+    }, {
+        status: "ok";
+        count: number;
+        routes: {
+            id: string;
+            module: string;
+            cli: string;
+            http: string | null;
+            summary: string | undefined;
+        }[];
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "home.health";
+        readonly cli: readonly ["health"];
+        readonly http: readonly ["GET", "/api/health"];
+        readonly summary: "自检：存储目录是否可写";
+    }, {
+        status: "ok" | "blocked";
+        storePath: string;
+        reason: string;
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "home.greet";
+        readonly cli: readonly ["greet"];
+        readonly http: readonly ["POST", "/api/greet"];
+        readonly summary: "打个招呼（演示动作：问候次数累计进本机存储）";
+        readonly args: readonly [{
+            readonly name: "name";
+            readonly required: true;
+        }];
+        readonly flags: {
+            readonly loud: {
+                readonly type: "boolean";
+            };
+        };
+    }, import("../modules/home/service.js").GreetingResult>, import("./types/action.js").TypedAction<{
+        readonly id: "setting.get";
+        readonly cli: readonly ["setting", "get"];
+        readonly http: readonly ["GET", "/api/settings"];
+        readonly summary: "读取全部设置（含头部导航分组 / 隐藏 / 平铺顺序）";
+    }, import("../modules/home/service.js").SettingsView>, import("./types/action.js").TypedAction<{
+        readonly id: "setting.set";
+        readonly cli: readonly ["setting", "set"];
+        readonly http: readonly ["PATCH", "/api/settings"];
+        readonly summary: "修改设置（PATCH 语义：只改传入的项）";
+        readonly flags: {
+            readonly key: {
+                readonly type: "string";
+                readonly hint: "设置项名";
+            };
+            readonly value: {
+                readonly type: "string";
+                readonly hint: "取值";
+            };
+            readonly set: {
+                readonly type: "kv";
+                readonly hint: "k=v，可重复（值可以是 JSON 数组，如 navGroups=[{...}]）";
+            };
+            readonly 'dry-run': {
+                readonly type: "boolean";
+            };
+        };
+    }, {
+        status: "skipped";
+        dryRun: true;
+        wouldSet: Record<string, unknown>;
+    } | {
+        status: "ok";
+        settings: import("../core/store.js").Settings;
+    }>];
+}, {
+    readonly id: "bridge";
+    readonly title: "桥接";
+    readonly order: 2;
+    readonly actions: readonly [import("./types/action.js").TypedAction<{
+        readonly id: "bridge.status";
+        readonly cli: readonly ["status"];
+        readonly http: readonly ["GET", "/api/bridge/status"];
+        readonly summary: "桥接状态：连没连、注册了哪些 app、当前凭据是谁";
+    }, import("../modules/bridge/service.js").BridgeStatusView>, import("./types/action.js").TypedAction<{
+        readonly id: "bridge.apps";
+        readonly cli: readonly ["apps"];
+        readonly http: readonly ["GET", "/api/bridge/apps"];
+        readonly summary: "列出可桥接的应用：白名单 + 本地端口存活探测";
+    }, import("../modules/bridge/service.js").BridgeAppsView>, import("./types/action.js").TypedAction<{
+        readonly id: "bridge.whitelist.set";
+        readonly cli: readonly ["apps", "set"];
+        readonly http: readonly ["POST", "/api/bridge/whitelist"];
+        readonly summary: "设置白名单（只有列出的应用会被桥；不给就一个都不桥）";
+        readonly flags: {
+            readonly apps: {
+                readonly type: "string";
+                readonly hint: "逗号分隔的应用名，如 nx-kv,nx-rh";
+            };
+            readonly ports: {
+                readonly type: "string";
+                readonly hint: "逗号分隔的本地端口（从已知表反查应用名）";
+            };
+            readonly 'app-map': {
+                readonly type: "string";
+                readonly hint: "显式基址，如 nx-kv=http://127.0.0.1:7999";
+            };
+        };
+    }, {
+        ok: boolean;
+        apps: string[];
+        applied: boolean;
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "bridge.catalog";
+        readonly cli: readonly ["catalog"];
+        readonly http: readonly ["GET", "/api/bridge/catalog"];
+        readonly summary: "拉远端 server 半的元信息目录（哪些能路由）";
+    }, import("../modules/bridge/service.js").CatalogView>, import("./types/action.js").TypedAction<{
+        readonly id: "bridge.start";
+        readonly cli: readonly ["bridge", "start"];
+        readonly http: readonly ["POST", "/api/bridge/start"];
+        readonly summary: "起桥（连 server 半并注册白名单里的应用）";
+    }, {
+        started: boolean;
+        apps: string[];
+        reason?: string;
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "bridge.stop";
+        readonly cli: readonly ["bridge", "stop"];
+        readonly http: readonly ["POST", "/api/bridge/stop"];
+        readonly summary: "停桥（断开 server 半，本机 nx 服务不受影响）";
+    }, {
+        stopped: boolean;
+        reason?: string;
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "bridge.known";
+        readonly cli: readonly ["apps", "known"];
+        readonly http: readonly ["GET", "/api/bridge/known"];
+        readonly summary: "列出已知的 nx 服务与它们的默认端口";
+    }, {
+        app: string;
+        port: number;
+        title: string;
+    }[]>];
+}, {
+    readonly id: "auth";
+    readonly title: "登录";
+    readonly order: 3;
+    readonly actions: readonly [import("./types/action.js").TypedAction<{
+        readonly id: "auth.login";
+        readonly cli: readonly ["auth", "login"];
+        readonly http: readonly ["POST", "/api/auth/login/start"];
+        readonly summary: "统一登录（弹浏览器）：换回设备令牌，之后免手填";
+        readonly flags: {
+            readonly 'new-account': {
+                readonly type: "boolean";
+                readonly hint: "强制认证中心重新登录（换人用）";
+            };
+            readonly 'no-open': {
+                readonly type: "boolean";
+                readonly hint: "只打印授权地址、不弹浏览器";
+            };
+        };
+    }, import("../modules/auth/service.js").LoginView>, import("./types/action.js").TypedAction<{
+        readonly id: "auth.list";
+        readonly cli: readonly ["auth", "list"];
+        readonly http: readonly ["GET", "/api/auth/accounts"];
+        readonly summary: "列出本机已存账号";
+    }, import("../modules/auth/service.js").AccountsView>, import("./types/action.js").TypedAction<{
+        readonly id: "auth.switch";
+        readonly cli: readonly ["auth", "switch"];
+        readonly http: readonly ["POST", "/api/auth/switch"];
+        readonly summary: "切换当前生效账号（序号/邮箱/用户名/昵称）";
+        readonly args: readonly [{
+            readonly name: "account";
+            readonly required: false;
+        }];
+    }, {
+        ok: boolean;
+        changed: boolean;
+        key?: string;
+        label?: string;
+        error?: string;
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "auth.status";
+        readonly cli: readonly ["auth", "status"];
+        readonly http: readonly ["GET", "/api/auth/status"];
+        readonly summary: "查看当前身份、令牌剩余有效期";
+    }, {
+        loggedIn: boolean;
+        userId?: string;
+        email?: string;
+        nickname?: string;
+        clientId: string;
+        serverHttp: string;
+        expiresAt?: number;
+        expired: boolean;
+        via: string;
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "auth.logout";
+        readonly cli: readonly ["auth", "logout"];
+        readonly http: readonly ["POST", "/api/auth/logout"];
+        readonly summary: "清除登录凭据（--all 清空全部账号）";
+        readonly flags: {
+            readonly all: {
+                readonly type: "boolean";
+                readonly hint: "清空全部账号";
+            };
+        };
+    }, {
+        ok: boolean;
+        remaining: number;
+        error?: string;
+    }>];
+}, {
+    readonly id: "skill";
+    readonly title: "Skill";
+    readonly order: 20;
+    readonly actions: readonly [import("./types/action.js").TypedAction<{
+        readonly id: "skill.list";
+        readonly cli: readonly ["skill", "list"];
+        readonly http: readonly ["GET", "/api/skills"];
+        readonly summary: "列出可装的 skill 与 group";
+    }, {
+        skills: string[];
+        groups: string[];
+        defaultGroup: string | null;
+        source: "manifest" | "assets-dirs";
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "skill.groups";
+        readonly cli: readonly ["skill", "groups"];
+        readonly http: readonly ["GET", "/api/skill-groups"];
+        readonly summary: "列出每个 group 含哪些 skill";
+    }, {
+        source: "manifest" | "assets-dirs";
+        groups: Record<string, import("../core/skills/index.js").GroupSpec>;
+        warning: string | undefined;
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "skill.get";
+        readonly cli: readonly ["skill", "get"];
+        readonly http: readonly ["GET", "/api/skill-content"];
+        readonly summary: "导出 skill 文档（并幂等安装）";
+        readonly args: readonly [{
+            readonly name: "name";
+            readonly required: false;
+        }, {
+            readonly name: "ref";
+            readonly required: false;
+        }];
+        readonly flags: {
+            readonly to: {
+                readonly type: "string";
+            };
+            readonly force: {
+                readonly type: "boolean";
+            };
+        };
+    }, {
+        skillName: string;
+        ref: string;
+        contentBytes: number;
+        prefix: string;
+        content: string;
+        installStatus: string;
+    }>, import("./types/action.js").TypedAction<{
+        readonly id: "skill.install";
+        readonly cli: readonly ["skill", "install"];
+        readonly http: readonly ["POST", "/api/skill-install"];
+        readonly summary: "安装 skill、整组 skill 或全部 skill";
+        readonly args: readonly [{
+            readonly name: "name";
+            readonly required: false;
+        }];
+        readonly flags: {
+            readonly all: {
+                readonly type: "boolean";
+            };
+            readonly group: {
+                readonly type: "string";
+            };
+            readonly to: {
+                readonly type: "string";
+            };
+            readonly force: {
+                readonly type: "boolean";
+            };
+        };
+    }, import("../core/skills/index.js").InstallResult | import("../core/skills/index.js").GroupInstallResult>];
+}];
+export interface BoundAction {
+    id: string;
+    module: string;
+    cli: unknown;
+    http?: unknown;
+    web?: boolean;
+    run: (...a: unknown[]) => unknown;
+    [k: string]: unknown;
+}
+export declare const ACTIONS: BoundAction[];
+export declare const CLI_ONLY_PREFIXES: string[];
+//# sourceMappingURL=registry.d.ts.map

package/dist/runtime/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/runtime/registry.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA6C,CAAC;AAElE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IAClC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,eAAO,MAAM,OAAO,EAAE,WAAW,EAEhC,CAAC;AAgBF,eAAO,MAAM,iBAAiB,UAA+B,CAAC"}

package/dist/runtime/registry.js

@@ -0,0 +1,75 @@
+// 模块注册表：所有功能域的 action 在此汇合。
+//
+// CLI 命令表、HTTP 路由表、help 文本三者全部由此派生 —— 这是
+// 「Web 上每个操作都有等价 CLI 命令」得以成为**结构性保证**而非口头约定的原因：
+// 一条 action 同时声明 cli 与 http，二者写在同一处，不可能分叉。
+//
+// 新增功能域只需两步：
+//   1. 写 src/modules/<name>/（index.ts 声明 actions，service.ts 写业务，view.tsx 写面板）
+//   2. 在下面 import 并加进 defineModules；再到 web/frontend/registry.ts 登记视图
+// 编译期类型检查 + tests/unit 一致性断言，漏登记直接失败。
+import { defineModules } from './types/module.js';
+import { cliPathsOf } from './spec.js';
+import home from '../modules/home/index.js';
+import bridge from '../modules/bridge/index.js';
+import auth from '../modules/auth/index.js';
+import skill from '../modules/skill/index.js';
+// 编译期：defineModules 对模块/action id、CLI/HTTP 键查重 + 路由歧义检测；
+// 运行时：按 order 排序。
+export const MODULES = defineModules([home, bridge, auth, skill]);
+export const ACTIONS = MODULES.flatMap((m) => (m.actions || []).map((a) => ({ ...a, module: m.id })));
+// 装载期自检（运行时防线，与编译期检查互为备份）：
+// 把「两个模块声明了同名命令」这类问题暴露在启动瞬间，
+// 而不是等某个用户敲到那条命令时才发现。
+//
+// 方向性约定（刻意的不对称）：
+//   - 每条 action 都必须有 cli —— 保证「Web 上能做的，CLI 都能做」
+//   - 有 http 才谈得上 Web 入口；http: null 只留给两类：
+//       a) 豁免前缀（serve / server / skill —— 天然是 CLI 侧能力）
+//       b) 显式 web: false（这个操作就是不给面板入口）
+//     其余 http: null 一律视为漏声明，启动即失败（与 eslint 的 local/action-parity 同规）
+//   - 不允许声明 http 却没有 cli，也不允许 http 与 web: false 同时出现
+//
+// 豁免前缀必须与 eslint.config.js 里 local/action-parity 的 cliOnlyPrefixes 一致，
+// tests/unit/registry.test.mjs 会对账。
+export const CLI_ONLY_PREFIXES = ['serve', 'server', 'skill'];
+const seenIds = new Set();
+const seenCli = new Set();
+const seenHttp = new Set();
+for (const a of ACTIONS) {
+    if (seenIds.has(a.id))
+        throw new Error('action id 重复: ' + a.id);
+    seenIds.add(a.id);
+    const paths = cliPathsOf(a);
+    if (!paths.length)
+        throw new Error(`action 没有声明 CLI 命令（Web 操作必须有 CLI 等价）: ${a.id}`);
+    for (const path of paths) {
+        const key = path.join(' ');
+        if (seenCli.has(key))
+            throw new Error(`CLI 命令重复: ${key}（action ${a.id}）`);
+        seenCli.add(key);
+    }
+    const http = a.http;
+    if (http) {
+        const [method, pattern] = http;
+        const httpKey = method + ' ' + pattern;
+        if (seenHttp.has(httpKey))
+            throw new Error(`HTTP 路由重复: ${httpKey}（action ${a.id}）`);
+        seenHttp.add(httpKey);
+        if (a.web === false) {
+            throw new Error(`action 同时声明了 http 与 web: false，语义冲突: ${a.id}`);
+        }
+    }
+    else if (http === null) {
+        const segment = paths[0]?.[0];
+        if (a.web !== false && !(segment && CLI_ONLY_PREFIXES.includes(segment))) {
+            throw new Error(`action 没有声明 HTTP 路由（CLI 与 Web 必须成对；纯 CLI 请显式 web: false 或使用豁免前缀）: ${a.id}`);
+        }
+    }
+    else {
+        throw new Error(`action 的 http 必须是路由数组或显式 null: ${a.id}`);
+    }
+    if (!a.run)
+        throw new Error(`action 缺少 run: ${a.id}`);
+}
+//# sourceMappingURL=registry.js.map

package/dist/runtime/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/runtime/registry.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,EAAE;AACF,yCAAyC;AACzC,gDAAgD;AAChD,2CAA2C;AAC3C,EAAE;AACF,aAAa;AACb,8EAA8E;AAC9E,qEAAqE;AACrE,sCAAsC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,IAAI,MAAM,0BAA0B,CAAC;AAC5C,OAAO,MAAM,MAAM,4BAA4B,CAAC;AAChD,OAAO,IAAI,MAAM,0BAA0B,CAAC;AAC5C,OAAO,KAAK,MAAM,2BAA2B,CAAC;AAE9C,yDAAyD;AACzD,kBAAkB;AAClB,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAYlE,MAAM,CAAC,MAAM,OAAO,GAAkB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1D,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAI,CAAY,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAgB,CAAC,CAClF,CAAC;AAEF,2BAA2B;AAC3B,6BAA6B;AAC7B,sBAAsB;AACtB,EAAE;AACF,iBAAiB;AACjB,iDAAiD;AACjD,2CAA2C;AAC3C,uDAAuD;AACvD,uCAAuC;AACvC,qEAAqE;AACrE,qDAAqD;AACrD,EAAE;AACF,uEAAuE;AACvE,oCAAoC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE9D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;AAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;AACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,KAAK,GAAG,UAAU,CAAC,CAA2C,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAwB,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC;QACvC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,qEAAqE,CAAC,CAAC,EAAE,EAAE,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/runtime/server.d.ts

@@ -0,0 +1,10 @@
+import type { IncomingMessage, ServerResponse, Server as HttpServer } from 'node:http';
+import type { MnWsController } from '../core/controller.js';
+export interface StartServerOptions {
+    port?: number;
+    host?: string;
+    /** 运行时控制器（登录态 + 桥）。传了就启用登录门禁与 /callback 路由。 */
+    controller?: MnWsController | null;
+}
+export declare function startServer({ port, host, controller }?: StartServerOptions): Promise<HttpServer<typeof IncomingMessage, typeof ServerResponse>>;
+//# sourceMappingURL=server.d.ts.map

package/dist/runtime/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/runtime/server.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAC;AAOvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAiD5D,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,UAAU,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CACpC;AAED,wBAAgB,WAAW,CAAC,EAAE,IAAmB,EAAE,IAAkB,EAAE,UAAiB,EAAE,GAAE,kBAAuB,GAAG,OAAO,CAC3H,UAAU,CAAC,OAAO,eAAe,EAAE,OAAO,cAAc,CAAC,CAC1D,CAkCA"}

package/dist/runtime/server.js

@@ -0,0 +1,127 @@
+// Web 服务器：node:http 零依赖。
+//
+// 职责三件：
+//   1. 发静态面板文件
+//   2. 把 /api/* 交给路由层（见 api.ts）
+//   3. **登录门禁**：未登录时业务 API 一律 401；以及 OIDC 回调路由 /callback
+//
+// 为什么门禁在服务端而不是前端：面板握着桥的凭据（能连 server、能改白名单），
+// 「打开就能用」等于「任何能访问这个端口的东西都能用」。
+// 门禁一旦只做在前端（藏个按钮），任何本机进程照样能直接调 API。
+import http from 'node:http';
+import { extname, resolve, sep } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import fsp from 'node:fs/promises';
+import { handleApi, sendJson, setApiGate, defaultApiGate } from './api.js';
+import { DEFAULT_PORT } from '../core/paths.js';
+import { asAbsolutePath } from '../core/brand.js';
+// vite 的 outDir：
+//   构建后 dist/runtime/server.js → dist/web/public
+//   源码态 src/runtime/server.ts → src/web/public（dev 下由 vite 直接服务，仅兜底）
+const PUBLIC_DIR = asAbsolutePath(resolve(fileURLToPath(new URL('../web/public/', import.meta.url))));
+const MIME = {
+    '.html': 'text/html; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8',
+    '.mjs': 'text/javascript; charset=utf-8',
+    '.css': 'text/css; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.svg': 'image/svg+xml',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.webp': 'image/webp',
+    '.ico': 'image/x-icon',
+    '.woff2': 'font/woff2',
+    '.map': 'application/json; charset=utf-8',
+};
+async function serveStatic(pathname, res) {
+    const rel = pathname === '/' ? 'index.html' : decodeURIComponent(pathname).replace(/^\/+/, '');
+    const file = resolve(PUBLIC_DIR, rel);
+    // 越界校验：解析成绝对路径后必须仍落在 PUBLIC_DIR 内。
+    // 比对解析结果，而不是剥离 '..' 字面量——后者挡不住编码变形。
+    if (file !== PUBLIC_DIR && !file.startsWith(PUBLIC_DIR + sep)) {
+        res.writeHead(403, { 'content-type': 'text/plain; charset=utf-8' });
+        res.end('Forbidden');
+        return;
+    }
+    try {
+        const buf = await fsp.readFile(file);
+        res.writeHead(200, {
+            'content-type': MIME[extname(file).toLowerCase()] || 'application/octet-stream',
+            'cache-control': 'no-store',
+        });
+        res.end(buf);
+    }
+    catch {
+        res.writeHead(404, { 'content-type': 'text/plain; charset=utf-8' });
+        res.end('Not Found');
+    }
+}
+export function startServer({ port = DEFAULT_PORT, host = '127.0.0.1', controller = null } = {}) {
+    // 装登录门禁（没有 controller 就不设 —— 开发态可能只想看静态页）
+    setApiGate(controller ? defaultApiGate(() => controller.session.snapshot().loggedIn) : null);
+    const server = http.createServer(async (req, res) => {
+        try {
+            const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost'}`);
+            // ── OIDC 回调：浏览器把授权码送回面板的 /callback ──
+            //
+            // 放在 /api 之前：它不是 API，是认证中心指定的固定回调地址。
+            // 路径固定 /callback、端口通配 —— 与 go-ah 里 mn-ws-client 的白名单一致。
+            if (url.pathname === '/callback' && controller) {
+                await handleCallback(url, res, controller);
+                return;
+            }
+            if (url.pathname.startsWith('/api/')) {
+                await handleApi(req, res, url);
+                return;
+            }
+            await serveStatic(url.pathname, res);
+        }
+        catch (err) {
+            sendJson(res, 500, {
+                ok: false,
+                error: String(err?.message || err),
+                code: 'INTERNAL',
+            });
+        }
+    });
+    return new Promise((resolve_, reject) => {
+        server.once('error', reject);
+        server.listen(port, host, () => resolve_(server));
+    });
+}
+/**
+ * 处理 OIDC 回调：收回调 → 换 access_token → 换设备令牌 → 存账号簿。
+ *
+ * 失败时**如实说失败**：页面显示错误 + 原因，而不是一个「登录成功」的假象。
+ */
+async function handleCallback(url, res, controller) {
+    const code = url.searchParams.get('code') || '';
+    const state = url.searchParams.get('state') || '';
+    const err = url.searchParams.get('error');
+    if (err) {
+        res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+        res.end(`<h3>授权未通过</h3><p>${escapeHtml(err)}</p><p>可以关闭这个页面了。</p>`);
+        return;
+    }
+    try {
+        const session = await controller.session.completeLogin(code, state);
+        res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+        res.end(`<h3>✅ 已登录</h3><p>${escapeHtml(session.nickname || session.email || session.userId || '已登录')}</p>`
+            + '<p>可以关闭这个页面，回到面板了。</p>');
+    }
+    catch (e) {
+        res.writeHead(400, { 'content-type': 'text/html; charset=utf-8' });
+        res.end(`<h3>登录失败</h3><p>${escapeHtml(e.message)}</p>`
+            + '<p>可以关闭这个页面，回到面板重试。</p>');
+    }
+}
+/** 最小 HTML 转义：回调页会回显错误文本，不能让它变成可执行脚本。 */
+function escapeHtml(s) {
+    return String(s)
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+//# sourceMappingURL=server.js.map

package/dist/runtime/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/runtime/server.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,EAAE;AACF,QAAQ;AACR,eAAe;AACf,gCAAgC;AAChC,yDAAyD;AACzD,EAAE;AACF,4CAA4C;AAC5C,8BAA8B;AAC9B,oCAAoC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAqB,MAAM,kBAAkB,CAAC;AAGrE,iBAAiB;AACjB,iDAAiD;AACjD,qEAAqE;AACrE,MAAM,UAAU,GAAiB,cAAc,CAC7C,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CACnE,CAAC;AAEF,MAAM,IAAI,GAA2B;IACnC,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,iCAAiC;CAC1C,CAAC;AAEF,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,GAAmB;IAC9D,MAAM,GAAG,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAEtC,mCAAmC;IACnC,oCAAoC;IACpC,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B;YAC/E,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AASD,MAAM,UAAU,WAAW,CAAC,EAAE,IAAI,GAAG,YAAY,EAAE,IAAI,GAAG,WAAW,EAAE,UAAU,GAAG,IAAI,KAAyB,EAAE;IAGjH,0CAA0C;IAC1C,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7F,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YAEjF,uCAAuC;YACvC,EAAE;YACF,qCAAqC;YACrC,wDAAwD;YACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,UAAU,EAAE,CAAC;gBAC/C,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,MAAM,CAAE,GAA4B,EAAE,OAAO,IAAI,GAAG,CAAC;gBAC5D,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,GAAQ,EAAE,GAAmB,EAAE,UAA0B;IACrF,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAE1C,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,oBAAoB,UAAU,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CACL,oBAAoB,UAAU,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;cAChG,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CACL,mBAAmB,UAAU,CAAE,CAAW,CAAC,OAAO,CAAC,MAAM;cACvD,yBAAyB,CAC5B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,yCAAyC;AACzC,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,MAAM,CAAC,CAAC,CAAC;SACb,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC"}

package/dist/runtime/spec.d.ts

@@ -0,0 +1,32 @@
+import type { ActionShape, ArgEntry, FlagSpec, CtxOf } from './types/action.js';
+export declare function cliPathsOf(action: {
+    cli: ActionShape['cli'];
+}): string[][];
+export interface ResolvedArg {
+    name: string;
+    required: boolean;
+    rest?: boolean;
+}
+export declare function argSpecsOf(action: {
+    args?: readonly ArgEntry[];
+}): ResolvedArg[];
+export interface ResolvedFlag extends FlagSpec {
+    name: string;
+}
+export declare function flagSpecsOf(action: {
+    flags?: Record<string, FlagSpec>;
+}): ResolvedFlag[];
+export declare function booleanFlagNames(action: {
+    flags?: Record<string, FlagSpec>;
+}): Set<string>;
+export declare function applySpec<const A extends ActionShape>(action: A, raw: Record<string, unknown>): CtxOf<A>;
+export interface CompiledRoute {
+    method: string;
+    keys: string[];
+    regex: RegExp;
+}
+export declare function compileRoute(action: ActionShape & {
+    http: readonly [string, string];
+}): CompiledRoute;
+export declare function usageOf(action: ActionShape): string;
+//# sourceMappingURL=spec.d.ts.map

package/dist/runtime/spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.d.ts","sourceRoot":"","sources":["../../src/runtime/spec.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAOhF,wBAAgB,UAAU,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;CAAE,GAAG,MAAM,EAAE,EAAE,CAK1E;AAGD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAA;CAAE,GAAG,WAAW,EAAE,CAMhF;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ;IAC5C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;CAAE,GAAG,YAAY,EAAE,CAExF;AAID,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;CAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAM1F;AAgED,wBAAgB,SAAS,CAAC,KAAK,CAAC,CAAC,SAAS,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAsBxG;AAID,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAID,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,aAAa,CAgBrG;AAID,wBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CA2BnD"}