most-box 0.3.0 → 0.3.2

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "most-box",
-  "version": "0.3.0",
-  "description": "MostBox - P2P file sharing application",
+  "version": "0.3.2",
+  "description": "MostBox - chat-first P2P toolbox for files, notes, and game rooms",
   "type": "module",
   "main": "electron/main.js",
   "bin": {
@@ -18,7 +18,7 @@
   "scripts": {
     "start": "vite",
     "server": "node --watch server/index.js",
-    "dev": "vite",
+    "desktop": "npm run electron:dev",
     "build": "vite build && node scripts/prepare-start-static.mjs",
     "preview": "vite preview",
     "serve": "npm run build && node server/index.js",
@@ -27,9 +27,6 @@
     "test:desktop": "node --test electron/*.test.js",
     "test:frontend": "node --test src/tests/*.test.js",
     "test:protocol": "node --test --test-name-pattern \"extracts CID and filename|matches golden CID samples|publishes a file from Buffer|lists published files|pulls through local seed nodes\" server/tests/unit/cid.test.js server/tests/integration/cid.test.js server/tests/integration/engine.test.js",
-    "android": "npm --prefix mobile/android start",
-    "android:build": "npm --prefix mobile/android run apk",
-    "android:test": "npm --prefix mobile/android test",
     "typecheck": "tsc -p tsconfig.typecheck.json",
     "typecheck:strict-router": "tsc -p tsconfig.strict-router.json",
     "check:static-output": "node scripts/check-static-output.mjs",
@@ -47,29 +44,32 @@
   },
   "keywords": [
     "p2p",
+    "chat",
     "file-sharing",
+    "file-transfer",
     "hyperswarm",
+    "hypercore",
     "hyperdrive"
   ],
   "license": "MIT",
   "dependencies": {
-    "@dicebear/collection": "^9.4.2",
-    "@dicebear/core": "^9.4.2",
-    "@hono/node-server": "^2.0.4",
-    "@tanstack/react-router": "^1.170.15",
-    "@tanstack/react-start": "^1.168.25",
+    "@dicebear/core": "^10.3.0",
+    "@dicebear/styles": "^10.2.0",
+    "@hono/node-server": "^2.0.6",
+    "@tanstack/react-router": "^1.170.16",
+    "@tanstack/react-start": "^1.168.26",
     "b4a": "^1.8.1",
     "busboy": "^1.6.0",
-    "corestore": "^7.10.0",
+    "corestore": "^7.11.0",
     "dayjs": "^1.11.21",
-    "ethers": "^6.16.0",
+    "ethers": "^6.17.0",
     "eventemitter3": "^5.0.4",
-    "hono": "^4.12.23",
-    "hypercore": "^11.33.1",
+    "hono": "^4.12.27",
+    "hypercore": "^11.33.2",
     "hyperdrive": "^13.3.2",
     "hyperswarm": "^4.17.0",
     "ipfs-unixfs-importer": "^17.0.1",
-    "multiformats": "^14.0.0",
+    "multiformats": "^14.0.2",
     "tweetnacl": "^1.0.3",
     "ws": "^8.21.0"
   },
@@ -77,26 +77,26 @@
     "@electron/rebuild": "^4.0.4",
     "@eslint/js": "^10.0.1",
     "@iconify/react": "^6.0.2",
-    "@mantine/hooks": "^9.3.0",
+    "@mantine/hooks": "^9.4.0",
     "@milkdown/crepe": "^7.21.2",
     "@milkdown/utils": "^7.21.2",
-    "@types/react": "^19.2.16",
-    "@vitejs/plugin-react": "^6.0.2",
+    "@types/react": "^19.2.17",
+    "@vitejs/plugin-react": "^6.0.3",
     "concurrently": "^10.0.3",
-    "electron": "^42.3.3",
-    "electron-builder": "^26.8.1",
-    "esbuild": "^0.28.0",
-    "eslint": "^10.4.1",
-    "globals": "^17.6.0",
+    "electron": "^42.5.0",
+    "electron-builder": "^26.15.3",
+    "esbuild": "^0.28.1",
+    "eslint": "^10.5.0",
+    "globals": "^17.7.0",
     "ky": "^2.0.2",
-    "lucide-react": "^1.17.0",
-    "prettier": "^3.8.3",
+    "lucide-react": "^1.21.0",
+    "prettier": "^3.8.4",
     "qrcode.react": "^4.2.0",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
     "typescript": "6.0.3",
-    "typescript-eslint": "^8.60.1",
-    "vite": "^8.0.16",
+    "typescript-eslint": "^8.62.0",
+    "vite": "^8.1.0",
     "wait-on": "^9.0.10",
     "zustand": "^5.0.14"
   },

package/server/index.js

@@ -137,6 +137,9 @@ function bindEngineEvents({
   engine.on('channel:peer:offline', data =>
     wsBroadcast('channel:peer:offline', data)
   )
+  engine.on('channel:sync:available', data =>
+    wsBroadcast('channel:sync:available', data)
+  )
   engine.on('channel:presence', data =>
     wsSendToChannel(data.channelKey, 'channel:presence', data)
   )

package/server/src/config.js

@@ -17,7 +17,6 @@ export const SWARM_RANDOM_PUNCH_INTERVAL = 20000
 
 // 驱动器超时（毫秒）
 export const DRIVE_ENTRY_TIMEOUT = 10000
-export const DRIVE_SYNC_TIMEOUT = 10000
 export const STREAM_READ_TIMEOUT = 10000
 
 // 文件写入块大小（字节）

package/server/src/core/gameRoom.js

@@ -19,7 +19,9 @@ export const GAME_IDS = ['gandengyan', 'zhajinhua']
 const ROOM_CODE_ALPHABET = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789'
 
 export function normalizeGameId(input) {
-  const value = String(input || '').trim().toLowerCase()
+  const value = String(input || '')
+    .trim()
+    .toLowerCase()
   return GAME_IDS.includes(value) ? value : ''
 }
 
@@ -47,7 +49,9 @@ export function gameRoomCodeToChannelName(gameId, roomCode) {
 }
 
 export function channelNameToGameRoom(input) {
-  const value = String(input || '').trim().toLowerCase()
+  const value = String(input || '')
+    .trim()
+    .toLowerCase()
   const match = /^game\.([a-z0-9]+)\.([a-z0-9]+)$/.exec(value)
   if (!match) return null
   const gameId = normalizeGameId(match[1])
@@ -86,7 +90,8 @@ export function parseGameEvent(content, options = {}) {
     const gameId = normalizeGameId(event.gameId)
     const roomCode = normalizeGameRoomCode(event.roomCode)
     if (!gameId || !isValidGameRoomCode(roomCode)) return null
-    if (options.gameId && gameId !== normalizeGameId(options.gameId)) return null
+    if (options.gameId && gameId !== normalizeGameId(options.gameId))
+      return null
     if (
       options.roomCode &&
       roomCode !== normalizeGameRoomCode(options.roomCode)
@@ -99,9 +104,7 @@ export function parseGameEvent(content, options = {}) {
       gameId,
       roomCode,
       payload:
-        event.payload && typeof event.payload === 'object'
-          ? event.payload
-          : {},
+        event.payload && typeof event.payload === 'object' ? event.payload : {},
     }
   } catch {
     return null
@@ -132,7 +135,9 @@ export function deriveGameRoomLobby(messages = [], options = {}) {
     }
 
     if (event.event === 'player:leave') {
-      const address = normalizeAddress(event.payload?.player?.address || message.author)
+      const address = normalizeAddress(
+        event.payload?.player?.address || message.author
+      )
       if (address) {
         const index = players.findIndex(p => p.address === address)
         if (index !== -1) {
@@ -190,18 +195,6 @@ export function createPlayerFromPayload(input, messageOrAuthor) {
   return player
 }
 
-export function normalizeGamePlayer(input) {
-  if (!input || typeof input !== 'object') return null
-  const address = normalizeAddress(input.address)
-  if (!address) return null
-  return {
-    ...input,
-    address,
-    name: String(input.name || shortAddress(address)).slice(0, 50),
-    publicKey: String(input.publicKey || ''),
-  }
-}
-
 function upsertPlayer(players, playerMap, player) {
   const existing = playerMap.get(player.address)
   if (existing) {

package/server/src/http/app.js

@@ -31,6 +31,7 @@ import { registerStaticRoutes } from './staticFiles.js'
 import { registerChannelRoutes } from './routes/channelRoutes.js'
 import { registerFileRoutes } from './routes/fileRoutes.js'
 import { registerNodeRoutes } from './routes/nodeRoutes.js'
+import { registerNoteVaultRoutes } from './routes/noteVaultRoutes.js'
 import { registerSeedRoutes } from './routes/seedRoutes.js'
 
 export { UPLOAD_TMP_DIR } from './uploads.js'
@@ -302,6 +303,7 @@ export function createApp(engine, options = {}) {
   registerSeedRoutes(app, { engine, appendNodeLog, broadcastNodeStatus })
   registerFileRoutes(app, { engine, configStore, wsBroadcast })
   registerChannelRoutes(app, { engine })
+  registerNoteVaultRoutes(app, { configStore, isRemoteRequest })
 
   registerStaticRoutes(app)
 

package/server/src/http/routePolicy.js

@@ -28,6 +28,7 @@ export function requiresUserAuth(path) {
     path === '/api/trash' ||
     path === '/api/move' ||
     path === '/api/folder/rename' ||
+    path.startsWith('/api/note-vault') ||
     path.startsWith('/api/files/') ||
     path.startsWith('/api/trash/') ||
     path.startsWith('/api/channels')

package/server/src/http/routes/noteVaultRoutes.js

@@ -0,0 +1,155 @@
+import { errorJson } from '../errors.js'
+import { PermissionError } from '../../utils/errors.js'
+import {
+  configureNoteVault,
+  createMarkdownFile,
+  createNoteVaultSnapshot,
+  deleteMarkdownFile,
+  getConfiguredNoteVaultPath,
+  getNoteVaultStatus,
+  listMarkdownFiles,
+  moveMarkdownFile,
+  readMarkdownFile,
+  restoreNoteVaultSnapshot,
+  writeMarkdownFile,
+} from '../../utils/noteVault.js'
+
+function assertNoteVaultAccess(c, isRemoteRequest) {
+  if (process.env.ELECTRON_APP !== 'true') {
+    throw new PermissionError('Note vault is only available in Electron')
+  }
+  if (isRemoteRequest(c)) {
+    throw new PermissionError('Note vault is only available locally')
+  }
+}
+
+function getBodyPath(body) {
+  return String(body.path || body.vaultPath || '').trim()
+}
+
+export function registerNoteVaultRoutes(app, { configStore, isRemoteRequest }) {
+  app.get('/api/note-vault/status', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      return c.json(await getNoteVaultStatus(configStore.configDir))
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.post('/api/note-vault/config', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const body = await c.req.json()
+      const status = await configureNoteVault(
+        configStore.configDir,
+        getBodyPath(body)
+      )
+      return c.json({ success: true, ...status })
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.get('/api/note-vault/files', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const vaultPath = await getConfiguredNoteVaultPath(configStore.configDir)
+      return c.json({ files: await listMarkdownFiles(vaultPath) })
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.get('/api/note-vault/file', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const vaultPath = await getConfiguredNoteVaultPath(configStore.configDir)
+      const file = await readMarkdownFile(vaultPath, c.req.query('path'))
+      return c.json(file)
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.post('/api/note-vault/file', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const body = await c.req.json()
+      const vaultPath = await getConfiguredNoteVaultPath(configStore.configDir)
+      const file = await createMarkdownFile(
+        vaultPath,
+        String(body.path || ''),
+        String(body.content || '')
+      )
+      return c.json({ success: true, file })
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.put('/api/note-vault/file', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const body = await c.req.json()
+      const vaultPath = await getConfiguredNoteVaultPath(configStore.configDir)
+      const file = await writeMarkdownFile(
+        vaultPath,
+        String(body.path || ''),
+        String(body.content || '')
+      )
+      return c.json({ success: true, file })
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.patch('/api/note-vault/file', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const body = await c.req.json()
+      const vaultPath = await getConfiguredNoteVaultPath(configStore.configDir)
+      const file = await moveMarkdownFile(
+        vaultPath,
+        String(body.path || body.fromPath || ''),
+        String(body.newPath || body.toPath || '')
+      )
+      return c.json({ success: true, file })
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.delete('/api/note-vault/file', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const vaultPath = await getConfiguredNoteVaultPath(configStore.configDir)
+      const result = await deleteMarkdownFile(vaultPath, c.req.query('path'))
+      return c.json({ success: true, ...result })
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.get('/api/note-vault/snapshot', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const vaultPath = await getConfiguredNoteVaultPath(configStore.configDir)
+      return c.json(await createNoteVaultSnapshot(vaultPath))
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+
+  app.post('/api/note-vault/restore', async c => {
+    try {
+      assertNoteVaultAccess(c, isRemoteRequest)
+      const body = await c.req.json()
+      const vaultPath = await getConfiguredNoteVaultPath(configStore.configDir)
+      const result = await restoreNoteVaultSnapshot(vaultPath, body)
+      return c.json({ success: true, result })
+    } catch (err) {
+      return errorJson(c, err)
+    }
+  })
+}

package/server/src/index.js

@@ -4818,6 +4818,15 @@ export class MostBoxEngine extends EventEmitter {
         ])
         this.#saveChannelsMetadata()
       }
+      if (channel) {
+        this.emit('channel:sync:available', {
+          channel: channelKey,
+          channelKey,
+          channelId: channel.channelId || '',
+          writerCoreKey: normalizedCoreKey,
+          writerCoreKeys: uniqueStrings(channel.writerCoreKeys),
+        })
+      }
       console.log(
         `[MostBox] Opened remote channel core ${normalizedCoreKey.slice(0, 8)}... for ${channelKey}`
       )

package/server/src/utils/accountBackup.js

@@ -29,6 +29,14 @@ export function validateAccountBackupPayload(input) {
   if (!Array.isArray(input.notes)) {
     throw new Error('账号备份缺少 notes')
   }
+  if (
+    input.noteVault !== undefined &&
+    (!input.noteVault ||
+      typeof input.noteVault !== 'object' ||
+      !Array.isArray(input.noteVault.files))
+  ) {
+    throw new Error('账号备份 noteVault 格式无效')
+  }
   return input
 }
 

package/server/src/utils/api.js

@@ -413,10 +413,6 @@ export function getBackendUrlExport() {
   return getBackendUrl()
 }
 
-export function getConfiguredBackendUrlExport() {
-  return getConfiguredBackendUrl()
-}
-
 export function getSameOriginBackendUrlExport() {
   return getSameOriginBackendUrl()
 }
@@ -437,10 +433,6 @@ export function getNodeHistoryExport() {
   return getNodeHistory()
 }
 
-export function getBackendInviteExport() {
-  return getBackendInvite()
-}
-
 export function getApiUrl(path) {
   const url = getBackendUrl()
   return `${url}${normalizePath(path)}`
@@ -510,12 +502,6 @@ export async function getAuthenticatedWebSocketUrl(path = '/ws') {
   return url.toString()
 }
 
-export async function checkBackendConnection() {
-  const url = getBackendUrl() || getSameOriginBackendUrl()
-  const invite = shouldAttachBackendInvite(url) ? getBackendInvite() : ''
-  return checkBackendConnectionTarget({ url, invite })
-}
-
 async function probeHttp(cleanedUrl, invite, identity) {
   try {
     const headers = {}

package/server/src/utils/auth.js

@@ -51,10 +51,3 @@ export function verifyAuthHeader(header, method, path, options = {}) {
     return { ok: false, error: 'Invalid authorization signature' }
   }
 }
-
-export function parseInviteList(value = '') {
-  return String(value || '')
-    .split(',')
-    .map(item => item.trim())
-    .filter(Boolean)
-}

package/server/src/utils/avatar.js

@@ -1,5 +1,5 @@
-import { createAvatar } from '@dicebear/core'
-import { botttsNeutral } from '@dicebear/collection'
+import { Avatar, Style } from '@dicebear/core'
+import botttsNeutralDefinition from '@dicebear/styles/bottts-neutral.json' with { type: 'json' }
 
 export const defaultAvatarIds = [
   'panda',
@@ -50,11 +50,11 @@ export function normalizeDefaultAvatarValue(avatar) {
 }
 
 function createAddressAvatar(address) {
-  return createAvatar(botttsNeutral, {
+  const avatar = new Avatar(new Style(botttsNeutralDefinition), {
     seed: 'most.box@' + address,
-    flip: true,
-    backgroundType: ['gradientLinear'],
-  }).toDataUri()
+    flip: 'horizontal',
+  })
+  return avatar.toDataUri()
 }
 
 export function generateAvatar(address, avatar) {