mysshx 0.0.0-stage → 1.0.0

package/client/dist/index.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>mysshx - SSH 管理器</title>
+    <script type="module" crossorigin src="/assets/index-bA2L5FBW.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-DYP7pi_n.css">
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>

package/package.json

@@ -1,6 +1,39 @@
 {
   "name": "mysshx",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "SSH/SFTP 管理器：Node.js 后端 + MUI 前端 + SQLite 存储，可通过 npx 运行",
+  "type": "module",
+  "engines": {
+    "node": ">=22.5.0"
+  },
+  "bin": {
+    "mysshx": "bin/mysshx.js"
+  },
+  "files": [
+    "bin",
+    "server",
+    "!server/data",
+    "client/dist"
+  ],
+  "workspaces": [
+    "server",
+    "client"
+  ],
+  "scripts": {
+    "dev": "concurrently -n server,client -c blue,green \"npm:dev:server\" \"npm:dev:client\"",
+    "dev:server": "npm run dev --workspace=server",
+    "dev:client": "npm run dev --workspace=client",
+    "build": "npm run build --workspace=client",
+    "prepack": "npm run build",
+    "start": "node bin/mysshx.js"
+  },
+  "dependencies": {
+    "cors": "^2.8.5",
+    "express": "^4.21.2",
+    "ssh2": "^1.16.0",
+    "ws": "^8.18.0"
+  },
+  "devDependencies": {
+    "concurrently": "^9.1.2"
+  }
+}

package/server/crypto.js

@@ -0,0 +1,42 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { dataDir } from './db.js';
+
+const keyPath = path.join(dataDir, 'secret.key');
+const PREFIX = 'v1';
+
+function getKey() {
+  if (!fs.existsSync(dataDir)) {
+    fs.mkdirSync(dataDir, { recursive: true });
+  }
+  if (!fs.existsSync(keyPath)) {
+    fs.writeFileSync(keyPath, crypto.randomBytes(32), { mode: 0o600 });
+  }
+  return fs.readFileSync(keyPath);
+}
+
+export function encrypt(plain) {
+  if (plain === undefined || plain === null || plain === '') return null;
+  const iv = crypto.randomBytes(12);
+  const cipher = crypto.createCipheriv('aes-256-gcm', getKey(), iv);
+  const enc = Buffer.concat([cipher.update(String(plain), 'utf8'), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return [PREFIX, iv.toString('base64'), tag.toString('base64'), enc.toString('base64')].join(':');
+}
+
+export function decrypt(payload) {
+  if (!payload) return null;
+  const parts = String(payload).split(':');
+  if (parts.length !== 4 || parts[0] !== PREFIX) return null;
+  try {
+    const iv = Buffer.from(parts[1], 'base64');
+    const tag = Buffer.from(parts[2], 'base64');
+    const data = Buffer.from(parts[3], 'base64');
+    const decipher = crypto.createDecipheriv('aes-256-gcm', getKey(), iv);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(data), decipher.final()]).toString('utf8');
+  } catch {
+    return null;
+  }
+}

package/server/db.js

@@ -0,0 +1,33 @@
+import { DatabaseSync } from 'node:sqlite';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+export const dataDir = process.env.MYSSHX_DATA_DIR
+  ? path.resolve(process.env.MYSSHX_DATA_DIR)
+  : process.env.MYSSH_DATA_DIR
+  ? path.resolve(process.env.MYSSH_DATA_DIR)
+  : path.join(os.homedir(), '.mysshx');
+
+if (!fs.existsSync(dataDir)) {
+  fs.mkdirSync(dataDir, { recursive: true });
+}
+
+const db = new DatabaseSync(path.join(dataDir, 'myssh.db'));
+
+db.exec(`
+  CREATE TABLE IF NOT EXISTS machines (
+    id            TEXT PRIMARY KEY,
+    name          TEXT NOT NULL,
+    host          TEXT NOT NULL,
+    port          INTEGER NOT NULL DEFAULT 22,
+    username      TEXT NOT NULL,
+    password      TEXT,
+    private_key   TEXT,
+    passphrase    TEXT,
+    created_at    TEXT NOT NULL,
+    updated_at    TEXT NOT NULL
+  );
+`);
+
+export default db;

package/server/index.js

@@ -0,0 +1,61 @@
+import http from 'node:http';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import express from 'express';
+import cors from 'cors';
+import machinesRouter from './machines.js';
+import { attachTerminal } from './terminalSession.js';
+import { attachSftp } from './sftpSession.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const clientDist = path.join(__dirname, '..', 'client', 'dist');
+
+export function createApp() {
+  const app = express();
+  app.use(cors());
+  app.use(express.json({ limit: '4mb' }));
+
+  app.get('/api/health', (req, res) => res.json({ ok: true }));
+  app.use('/api/machines', machinesRouter);
+  app.use('/api', (req, res) => res.status(404).json({ error: '接口不存在' }));
+
+  if (fs.existsSync(clientDist)) {
+    app.use(express.static(clientDist));
+    app.get('*', (req, res) => res.sendFile(path.join(clientDist, 'index.html')));
+  } else {
+    app.get('/', (req, res) =>
+      res
+        .status(503)
+        .send('前端尚未构建，请先运行: npm run build（或 npx 安装时携带构建产物）')
+    );
+  }
+
+  return app;
+}
+
+export function startServer({ port = Number(process.env.PORT) || 3011, host = process.env.HOST || '0.0.0.0' } = {}) {
+  const app = createApp();
+  const server = http.createServer(app);
+  attachTerminal(server);
+  attachSftp(server);
+
+  return new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(port, host, () => {
+      const actualPort = server.address().port;
+      console.log(`mysshx 服务已启动: http://localhost:${actualPort}`);
+      resolve({ server, port: actualPort, app });
+    });
+  });
+}
+
+const isMain =
+  process.argv[1] && import.meta.url === pathToFileURL(path.resolve(process.argv[1])).href;
+
+if (isMain) {
+  startServer().catch((err) => {
+    console.error('启动失败:', err.message);
+    process.exit(1);
+  });
+}

package/server/machines.js

@@ -0,0 +1,127 @@
+import express from 'express';
+import crypto from 'node:crypto';
+import db from './db.js';
+import { encrypt } from './crypto.js';
+import { getMachine, testConnection } from './sshManager.js';
+
+const router = express.Router();
+
+function toPublic(row) {
+  if (!row) return null;
+  const { password, private_key, passphrase, ...rest } = row;
+  return {
+    ...rest,
+    hasPassword: Boolean(password),
+    hasPrivateKey: Boolean(private_key),
+  };
+}
+
+function normalize(body) {
+  const name = (body.name || '').trim();
+  const host = (body.host || '').trim();
+  const username = (body.username || '').trim();
+  const port = Number.parseInt(body.port, 10) || 22;
+  if (!name) throw new HttpError(400, '名称不能为空');
+  if (!host) throw new HttpError(400, '主机地址不能为空');
+  if (!username) throw new HttpError(400, '用户名不能为空');
+  if (port < 1 || port > 65535) throw new HttpError(400, '端口无效');
+  return { name, host, username, port };
+}
+
+class HttpError extends Error {
+  constructor(status, message) {
+    super(message);
+    this.status = status;
+  }
+}
+
+router.get('/', (req, res) => {
+  const rows = db
+    .prepare('SELECT * FROM machines ORDER BY name COLLATE NOCASE ASC')
+    .all();
+  res.json(rows.map(toPublic));
+});
+
+router.get('/:id', (req, res) => {
+  const row = getMachine(req.params.id);
+  if (!row) return res.status(404).json({ error: '机器不存在' });
+  res.json(toPublic(row));
+});
+
+router.post('/', (req, res) => {
+  try {
+    const { name, host, username, port } = normalize(req.body);
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    db.prepare(
+      `INSERT INTO machines
+        (id, name, host, port, username, password, private_key, passphrase, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+    ).run(
+      id,
+      name,
+      host,
+      port,
+      username,
+      encrypt(req.body.password),
+      encrypt(req.body.privateKey),
+      encrypt(req.body.passphrase),
+      now,
+      now
+    );
+    res.status(201).json(toPublic(getMachine(id)));
+  } catch (err) {
+    res.status(err.status || 500).json({ error: err.message });
+  }
+});
+
+router.put('/:id', (req, res) => {
+  try {
+    const existing = getMachine(req.params.id);
+    if (!existing) return res.status(404).json({ error: '机器不存在' });
+    const { name, host, username, port } = normalize(req.body);
+
+    const password = req.body.password ? encrypt(req.body.password) : existing.password;
+    const privateKey = req.body.privateKey ? encrypt(req.body.privateKey) : existing.private_key;
+    const passphrase = req.body.passphrase ? encrypt(req.body.passphrase) : existing.passphrase;
+
+    db.prepare(
+      `UPDATE machines
+         SET name = ?, host = ?, port = ?, username = ?, password = ?,
+             private_key = ?, passphrase = ?, updated_at = ?
+       WHERE id = ?`
+    ).run(
+      name,
+      host,
+      port,
+      username,
+      password,
+      privateKey,
+      passphrase,
+      new Date().toISOString(),
+      req.params.id
+    );
+    res.json(toPublic(getMachine(req.params.id)));
+  } catch (err) {
+    res.status(err.status || 500).json({ error: err.message });
+  }
+});
+
+router.delete('/:id', (req, res) => {
+  const result = db.prepare('DELETE FROM machines WHERE id = ?').run(req.params.id);
+  if (result.changes === 0) return res.status(404).json({ error: '机器不存在' });
+  res.json({ ok: true });
+});
+
+router.post('/:id/test', async (req, res) => {
+  const row = getMachine(req.params.id);
+  if (!row) return res.status(404).json({ error: '机器不存在' });
+  try {
+    await testConnection(row);
+    res.json({ ok: true });
+  } catch (err) {
+    res.status(400).json({ error: err.message });
+  }
+});
+
+export default router;

package/server/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "myssh-server",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "main": "index.js",
+  "scripts": {
+    "start": "node --no-warnings index.js",
+    "dev": "node --no-warnings --watch index.js"
+  }
+}