neoctl-web 0.1.13 → 0.1.14

package/plugins/video-share/index.mjs

@@ -0,0 +1,65 @@
+import path from 'node:path';
+import os from 'node:os';
+import { VideoStore, VALID_ID } from './store.mjs';
+import { createVideoRoute, PREFIX } from './http.mjs';
+import { videoPresentation } from './presentation.mjs';
+
+const metadata = { readOnly: false, concurrent: true, visible: true, requiresApproval: false, maxResultSizeChars: 20000 };
+
+export function createPlugin(context = {}) {
+  const env = context.env || process.env;
+  const directory = env.NEO_VIDEO_SHARE_DIR || path.join(context.appDataDir || path.join(os.homedir(), '.neo-video-share'), 'video-share');
+  const store = new VideoStore(directory);
+  let origin = '';
+  if (env.NEO_VIDEO_SHARE_PUBLIC_ORIGIN) {
+    const url = new URL(env.NEO_VIDEO_SHARE_PUBLIC_ORIGIN);
+    if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.pathname !== '/' || url.search || url.hash) {
+      throw new Error('NEO_VIDEO_SHARE_PUBLIC_ORIGIN must be an HTTP(S) origin, without credentials or a path');
+    }
+    origin = url.origin;
+  }
+  const expose = {
+    name: 'expose_videos',
+    description: 'Display existing local videos inline in the conversation using embedded players. Persists only original absolute-path mappings, with no copies, directory restrictions or automatic expiration. Playback reads the original file; moving or deleting it invalidates the link. The UI embeds the player automatically. Do not include video links, URLs, Markdown links, HTML video tags or iframes in your textual reply; only acknowledge inline playback. Anyone with a link can view it. Recommend MP4 H.264/AAC or WebM; no transcoding is performed.',
+    inputSchema: { type: 'object', properties: { paths: { type: 'array', items: { type: 'string' }, minItems: 1, maxItems: 20, description: 'Absolute video paths (.mp4, .m4v, .mov, .webm, .ogv).' } }, required: ['paths'], additionalProperties: false },
+    metadata,
+    validate(input) {
+      if (!Array.isArray(input?.paths) || !input.paths.length || input.paths.length > 20 || input.paths.some((p) => typeof p !== 'string' || !path.isAbsolute(p))) throw new Error('paths must contain 1–20 absolute video paths');
+      return { paths: [...new Set(input.paths)] };
+    },
+    async execute(input) {
+      const videos = [], errors = [];
+      for (const source of expose.validate(input).paths) {
+        try {
+          const entry = await store.publish(source);
+          const url = `${origin}${PREFIX}${entry.id}`;
+          videos.push({ id: entry.id, filename: entry.filename, sizeBytes: entry.sizeBytes, contentType: entry.contentType,
+            url, mediaUrl: `${url}/media`, expiresAt: null });
+        } catch (error) { errors.push({ path: source, error: error.message }); }
+      }
+      return { ok: !errors.length, output: { usage: 'The UI automatically embeds video players in the conversation. Do not repeat video URLs or Markdown/HTML video links in the textual response. Simply acknowledge the videos are ready inline. There is no automatic expiration.', videos, errors,
+        _ui: videoPresentation({ videos, errors }) },
+        summary: `Published ${videos.length} video(s); ${errors.length} failed. No automatic expiration.` };
+    },
+  };
+  const revoke = {
+    name: 'revoke_videos', description: 'Revoke video links by removing plugin mappings only. Never delete or modify source videos. Only call when the user requests revocation.',
+    inputSchema: { type: 'object', properties: { ids: { type: 'array', items: { type: 'string' }, minItems: 1, maxItems: 20 } }, required: ['ids'], additionalProperties: false },
+    metadata: { ...metadata, requiresApproval: true },
+    validate(input) {
+      if (!Array.isArray(input?.ids) || !input.ids.length || input.ids.length > 20 || input.ids.some((id) => typeof id !== 'string' || !VALID_ID.test(id))) throw new Error('ids must contain 1–20 valid video ids');
+      return { ids: [...new Set(input.ids)] };
+    },
+    async execute(input) {
+      const results = [];
+      for (const id of revoke.validate(input).ids) results.push({ id, revoked: await store.revoke(id) });
+      return { ok: true, output: { results }, summary: 'Video links revoked; original source files untouched.' };
+    },
+  };
+  return { tools: [expose, revoke], route: createVideoRoute(store),
+    presentToolResult({ toolName, output }) {
+      return toolName === 'expose_videos' ? videoPresentation(output) : undefined;
+    },
+    promptSections: [{ name: 'Inline Video Playback', cacheStable: true, requiresTools: ['expose_videos'],
+    content: 'For local video files that the user wants to watch, use expose_videos instead of a generic download tool. The plugin automatically embeds HTML5 players inside the conversation, without opening a new page. Do not put video links, raw video URLs, Markdown video links, HTML video tags or iframe markup in your textual response. Reply only with a brief acknowledgement or relevant explanation; the player is already visible. Do not also expose the same video as a download unless the user explicitly requests a download. There is no automatic expiration. Playback depends on browser codec support; this plugin does not transcode. Publications are zero-copy original-path references with persistent mappings; anyone with a link can view them. Source movement or deletion invalidates the link; do not claim a snapshot is stored. Use revoke_videos only when requested.' }] };
+}

package/plugins/video-share/neo-plugin.json

@@ -0,0 +1,9 @@
+{
+  "protocol": "neo-plugin/v1",
+  "id": "video-share",
+  "name": "视频播放",
+  "version": "2.1.0",
+  "entry": "index.mjs",
+  "defaultEnabled": true,
+  "description": "聊天消息内嵌 HTML5 视频播放、Range 流式播放、零复制路径映射、无自动过期链接及手动撤销。"
+}

package/plugins/video-share/presentation.mjs

@@ -0,0 +1,23 @@
+import { VALID_ID } from './store.mjs';
+import { PREFIX } from './http.mjs';
+
+// Host-neutral neo-plugin/v1 presentation. Never use a model-supplied URL for an iframe.
+// Always embed on the current origin, even when direct URLs use a public origin.
+export function videoPresentation(output) {
+  const videos = Array.isArray(output?.videos)
+    ? output.videos.filter((v) => v && typeof v.id === 'string' && VALID_ID.test(v.id)) : [];
+  if (!videos.length) return undefined;
+  return {
+    title: '视频播放',
+    text: Array.isArray(output.errors) && output.errors.length
+      ? `已嵌入 ${videos.length} 个视频，另有 ${output.errors.length} 个未能加载。`
+      : `已嵌入 ${videos.length} 个视频，可直接播放。`,
+    presentationLevel: 'primary',
+    resources: videos.map((v) => ({
+      kind: 'embed',
+      url: `${PREFIX}${v.id}?embed=1`,
+      label: typeof v.filename === 'string' ? v.filename : '视频播放',
+      height: 480,
+    })),
+  };
+}

package/plugins/video-share/store.mjs

@@ -0,0 +1,76 @@
+import { workspaceFs, openWorkspaceRead, containerMode } from '../../execution-backend.mjs';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { randomBytes } from 'node:crypto';
+
+export const VALID_ID = /^[a-f0-9]{48}$/;
+export const VIDEO_TYPES = Object.freeze({
+  '.mp4': 'video/mp4', '.m4v': 'video/mp4', '.mov': 'video/quicktime',
+  '.webm': 'video/webm', '.ogv': 'video/ogg',
+});
+
+// Each publication has its own atomic directory: no shared mutable index or host imports.
+export class VideoStore {
+  constructor(directory) { this.directory = path.resolve(directory); }
+
+  async publish(source) {
+    if (typeof source !== 'string' || !path.isAbsolute(source)) throw new Error('Video path must be absolute');
+    const type = VIDEO_TYPES[path.extname(source).toLowerCase()];
+    if (!type) throw new Error('Supported video extensions: .mp4, .m4v, .mov, .webm, .ogv');
+    const sourceStat = await workspaceFs.stat(source);
+    if (!sourceStat.isFile() || sourceStat.size === 0) throw new Error('Video must be a non-empty regular file');
+    await fs.mkdir(this.directory, { recursive: true, mode: 0o700 });
+    const id = randomBytes(24).toString('hex');
+    const staging = path.join(this.directory, `.pending-${id}`);
+    await fs.mkdir(staging, { mode: 0o700 });
+    try {
+      // Validate only a small header, then persist the original path, never a copy.
+      const header = Buffer.alloc(64);
+      if (containerMode) {
+        const handle = await openWorkspaceRead(source);
+        try { let offset = 0; for await (const chunk of handle.createReadStream({ start: 0, end: 63 })) { chunk.copy(header, offset); offset += chunk.length; } } finally { await handle.close(); }
+      } else {
+        const handle = await fs.open(source, 'r');
+        try { await handle.read(header, 0, header.length, 0); } finally { await handle.close(); }
+      }
+      const extension = path.extname(source).toLowerCase();
+      const valid = extension === '.webm' ? header.subarray(0, 4).equals(Buffer.from([0x1a, 0x45, 0xdf, 0xa3]))
+        : extension === '.ogv' ? header.toString('ascii', 0, 4) === 'OggS'
+          : ['ftyp', 'moov', 'mdat', 'wide', 'free', 'skip'].includes(header.toString('ascii', 4, 8));
+      if (!valid) throw new Error('File does not have a recognized video container signature');
+      const entry = { version: 2, id, absolutePath: path.resolve(source), filename: path.basename(source), contentType: type, sizeBytes: sourceStat.size, createdAt: new Date().toISOString() };
+      await fs.writeFile(path.join(staging, 'entry.json'), JSON.stringify(entry), { mode: 0o600 });
+      await fs.rename(staging, path.join(this.directory, id));
+      return entry;
+    } catch (error) {
+      await fs.rm(staging, { recursive: true, force: true });
+      throw error;
+    }
+  }
+
+  async get(id) {
+    if (!VALID_ID.test(id)) return undefined;
+    try {
+      const entry = JSON.parse(await fs.readFile(path.join(this.directory, id, 'entry.json'), 'utf8'));
+      // Old v1 snapshots have no source path; do not silently serve a copy.
+      if (entry.version === 1) return undefined;
+      if (entry.version !== 2 || typeof entry.absolutePath !== 'string' || !path.isAbsolute(entry.absolutePath)
+        || entry.id !== id || typeof entry.filename !== 'string'
+        || !Object.values(VIDEO_TYPES).includes(entry.contentType)) throw new Error('Invalid video metadata');
+      return { ...entry, mediaPath: entry.absolutePath };
+    } catch (error) {
+      if (error.code === 'ENOENT') return undefined;
+      throw error;
+    }
+  }
+
+  async revoke(id) {
+    if (!VALID_ID.test(id)) throw new Error('Invalid video id');
+    const tombstone = path.join(this.directory, `.revoked-${id}-${randomBytes(6).toString('hex')}`);
+    try { await fs.rename(path.join(this.directory, id), tombstone); }
+    catch (error) { if (error.code === 'ENOENT') return false; throw error; }
+    // Renaming removes the public mapping first; never reuse a revoked token.
+    await fs.rm(tombstone, { recursive: true, force: true });
+    return true;
+  }
+}

package/plugins/video-share/video-share.test.mjs

@@ -0,0 +1,182 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import http from 'node:http';
+import { spawnSync } from 'node:child_process';
+import { createPlugin } from './index.mjs';
+import { VideoStore } from './store.mjs';
+import { parseRange, playerPage } from './http.mjs';
+
+async function setup(t) {
+  const root = await fs.mkdtemp(path.join(os.tmpdir(), 'video-share-test-'));
+  const source = path.join(root, '样例 video.mp4');
+  const bytes = Buffer.concat([Buffer.from([0, 0, 0, 24]), Buffer.from('ftypisom'), Buffer.alloc(1024, 7)]);
+  await fs.writeFile(source, bytes);
+  const context = { appDataDir: path.join(root, 'data'), env: {} };
+  let plugin = createPlugin(context);
+  const server = http.createServer(async (req, res) => {
+    try { if (!await plugin.route(req, res, new URL(req.url, 'http://localhost'))) { res.statusCode = 404; res.end(); } }
+    catch (error) { res.statusCode = 500; res.end(error.message); }
+  });
+  await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+  t.after(async () => { server.closeAllConnections(); await new Promise((r) => server.close(r)); await fs.rm(root, { recursive: true, force: true }); });
+  const base = `http://127.0.0.1:${server.address().port}`;
+  return { root, source, bytes, context, base, plugin, restart() { plugin = createPlugin(context); return plugin; } };
+}
+
+function expose(plugin, paths) { return plugin.tools.find((t) => t.name === 'expose_videos').execute({ paths }); }
+
+test('standalone publication, player, inline media and HEAD work without host imports', async (t) => {
+  const f = await setup(t);
+  const result = await expose(f.plugin, [f.source]);
+  assert.equal(result.ok, true);
+  const v = result.output.videos[0];
+  assert.equal(v.expiresAt, null);
+  assert.equal(result.output._ui.resources[0].kind, 'embed');
+  assert.equal(result.output._ui.presentationLevel, 'primary');
+  assert.equal(v.markdown, undefined);
+  assert.equal(v.reference, undefined);
+  assert.equal(result.output._ui.resources[0].downloadName, undefined);
+  const page = await fetch(f.base + v.url);
+  assert.equal(page.status, 200);
+  assert.match(page.headers.get('content-security-policy'), /default-src 'none'/);
+  assert.match(await page.text(), /<video controls playsinline preload="metadata"/);
+  const media = await fetch(f.base + v.mediaUrl);
+  assert.equal(media.headers.get('content-type'), 'video/mp4');
+  assert.match(media.headers.get('content-disposition'), /^inline;/);
+  assert.equal(media.headers.get('accept-ranges'), 'bytes');
+  assert.deepEqual(Buffer.from(await media.arrayBuffer()), f.bytes);
+  const head = await fetch(f.base + v.mediaUrl, { method: 'HEAD' });
+  assert.equal(head.status, 200);
+  assert.equal(Number(head.headers.get('content-length')), f.bytes.length);
+  assert.equal((await head.arrayBuffer()).byteLength, 0);
+});
+
+test('byte range seeking: bounded, open-ended, suffix, clamped, invalid, If-Range', async (t) => {
+  const f = await setup(t), v = (await expose(f.plugin, [f.source])).output.videos[0];
+  for (const [range, start, end] of [['bytes=2-9', 2, 9], ['bytes=1000-', 1000, f.bytes.length - 1], ['bytes=-9', f.bytes.length - 9, f.bytes.length - 1], ['bytes=2-999999', 2, f.bytes.length - 1]]) {
+    const r = await fetch(f.base + v.mediaUrl, { headers: { Range: range } });
+    assert.equal(r.status, 206);
+    assert.equal(r.headers.get('content-range'), `bytes ${start}-${end}/${f.bytes.length}`);
+    assert.deepEqual(Buffer.from(await r.arrayBuffer()), f.bytes.subarray(start, end + 1));
+  }
+  for (const range of ['bytes=99999-', 'bytes=4-2', 'bytes=-0', 'bytes=-', 'bytes=x-y']) {
+    const r = await fetch(f.base + v.mediaUrl, { headers: { Range: range } });
+    assert.equal(r.status, 416); assert.equal(r.headers.get('content-range'), `bytes */${f.bytes.length}`); await r.text();
+  }
+  for (const headers of [{ Range: 'bytes=0-1,4-5' }, { Range: 'bytes=0-2', 'If-Range': '"stale"' }]) {
+    const r = await fetch(f.base + v.mediaUrl, { headers }); assert.equal(r.status, 200); await r.arrayBuffer();
+  }
+  const full = await fetch(f.base + v.mediaUrl); const etag = full.headers.get('etag'); await full.arrayBuffer();
+  const r = await fetch(f.base + v.mediaUrl, { headers: { Range: 'bytes=0-1', 'If-Range': etag } });
+  assert.equal(r.status, 206); await r.arrayBuffer();
+  assert.equal(parseRange('bytes=0-0', 0), false);
+});
+
+test('zero-copy original-path mapping survives restart and a fresh Node process without TTL', async (t) => {
+  const f = await setup(t), v = (await expose(f.plugin, [f.source])).output.videos[0];
+  const recordDir = path.join(f.context.appDataDir, 'video-share', v.id);
+  assert.deepEqual(await fs.readdir(recordDir), ['entry.json']);
+  const record = JSON.parse(await fs.readFile(path.join(recordDir, 'entry.json'), 'utf8'));
+  assert.equal(record.absolutePath, f.source);
+  f.restart();
+  const r = await fetch(f.base + v.mediaUrl); assert.equal(r.status, 200); assert.deepEqual(Buffer.from(await r.arrayBuffer()), f.bytes);
+  const script = `import { VideoStore } from ${JSON.stringify(new URL('./store.mjs', import.meta.url).href)}; Date.now = () => 9999999999999; const e = await new VideoStore(${JSON.stringify(path.join(f.context.appDataDir, 'video-share'))}).get(${JSON.stringify(v.id)}); if (!e || 'expiresAt' in e) process.exit(1); console.log(e.id);`;
+  const child = spawnSync(process.execPath, ['--input-type=module', '-e', script], { encoding: 'utf8' });
+  assert.equal(child.status, 0, child.stderr); assert.match(child.stdout, new RegExp(v.id));
+});
+
+test('revoke persists across restarts; guessing, traversal, writes and missing blobs fail closed', async (t) => {
+  const f = await setup(t), v = (await expose(f.plugin, [f.source])).output.videos[0];
+  for (const suffix of ['f'.repeat(48), '%2e%2e%2fsecret', v.id + '/media/extra']) {
+    const r = await fetch(f.base + '/api/video-share/' + suffix); assert.equal(r.status, 404); await r.text();
+  }
+  const post = await fetch(f.base + v.url, { method: 'POST' }); assert.equal(post.status, 405); await post.text();
+  const revoke = f.plugin.tools.find((t) => t.name === 'revoke_videos');
+  assert.equal((await revoke.execute({ ids: [v.id] })).output.results[0].revoked, true);
+  assert.equal((await revoke.execute({ ids: [v.id] })).output.results[0].revoked, false);
+  f.restart(); const gone = await fetch(f.base + v.mediaUrl); assert.equal(gone.status, 404); await gone.text();
+  assert.equal((await fs.stat(f.source)).isFile(), true);
+  const next = (await expose(f.plugin, [f.source])).output.videos[0];
+  await fs.rm(f.source);
+  const missing = await fetch(f.base + next.mediaUrl); assert.equal(missing.status, 404); await missing.text();
+});
+
+test('validation, partial batches, signatures, escaping and public origin', async (t) => {
+  const f = await setup(t), tool = f.plugin.tools[0];
+  for (const paths of [[], ['relative.mp4'], [12], Array(21).fill(f.source)]) assert.throws(() => tool.validate({ paths }));
+  const fake = path.join(f.root, 'fake.mp4'); await fs.writeFile(fake, '<script>not video</script>');
+  const result = await expose(f.plugin, [f.source, fake, path.join(f.root, 'a.txt')]);
+  assert.equal(result.ok, false); assert.equal(result.output.videos.length, 1); assert.equal(result.output.errors.length, 2);
+  const html = playerPage({ filename: '<script>alert(1)</script>', id: 'a'.repeat(48) });
+  assert.ok(!html.includes('<script>')); assert.match(html, /&lt;script&gt;/);
+  const publicPlugin = createPlugin({ ...f.context, env: { NEO_VIDEO_SHARE_PUBLIC_ORIGIN: 'https://videos.example.com' } });
+  const v = (await expose(publicPlugin, [f.source])).output.videos[0];
+  assert.ok(v.url.startsWith('https://videos.example.com/api/video-share/')); assert.equal(v.reference, undefined);
+  assert.ok((await expose(publicPlugin, [f.source])).output._ui.resources[0].url.startsWith('/api/video-share/'));
+  assert.throws(() => createPlugin({ env: { NEO_VIDEO_SHARE_PUBLIC_ORIGIN: 'https://host/path' } }));
+});
+
+test('concurrent publishers use independent atomic records', async (t) => {
+  const f = await setup(t);
+  const store = new VideoStore(path.join(f.context.appDataDir, 'video-share'));
+  const entries = await Promise.all(Array.from({ length: 8 }, () => store.publish(f.source)));
+  assert.equal(new Set(entries.map((e) => e.id)).size, 8);
+  for (const e of entries) assert.equal((await store.get(e.id)).id, e.id);
+  assert.ok((await fs.readdir(store.directory)).every((s) => !s.startsWith('.pending')));
+});
+
+test('source move invalidates player and media after restart, no fallback copy', async (t) => {
+  const f = await setup(t), v = (await expose(f.plugin, [f.source])).output.videos[0];
+  await fs.rename(f.source, path.join(f.root, 'moved.mp4'));
+  f.restart();
+  for (const url of [v.url, v.mediaUrl]) {
+    const r = await fetch(f.base + url); assert.equal(r.status, 404); await r.text();
+  }
+  assert.deepEqual(await fs.readdir(path.join(f.context.appDataDir, 'video-share', v.id)), ['entry.json']);
+});
+
+test('same-path updates serve current bytes and invalidate old If-Range validators', async (t) => {
+  const f = await setup(t), v = (await expose(f.plugin, [f.source])).output.videos[0];
+  const before = await fetch(f.base + v.mediaUrl); const oldTag = before.headers.get('etag'); await before.arrayBuffer();
+  const updated = Buffer.from(f.bytes); updated[100] = 42;
+  await fs.writeFile(f.source, updated);
+  await fs.utimes(f.source, new Date(), new Date(Date.now() + 5000));
+  const r = await fetch(f.base + v.mediaUrl, { headers: { Range: 'bytes=0-9', 'If-Range': oldTag } });
+  assert.equal(r.status, 200); assert.notEqual(r.headers.get('etag'), oldTag);
+  assert.deepEqual(Buffer.from(await r.arrayBuffer()), updated);
+});
+
+test('v1 copied publications are not silently used as zero-copy sources', async (t) => {
+  const f = await setup(t), id = 'a'.repeat(48);
+  const dir = path.join(f.context.appDataDir, 'video-share', id);
+  await fs.mkdir(dir, { recursive: true });
+  await fs.writeFile(path.join(dir, 'entry.json'), JSON.stringify({ version: 1, id, filename: 'old.mp4', contentType: 'video/mp4' }));
+  await fs.writeFile(path.join(dir, 'media'), f.bytes);
+  const r = await fetch(f.base + '/api/video-share/' + id + '/media'); assert.equal(r.status, 404); await r.text();
+  assert.deepEqual(await fs.readFile(path.join(dir, 'media')), f.bytes); // no automatic user-data deletion
+});
+
+test('presenter embeds valid videos including partial failures and historical results, no text links', async (t) => {
+  const f = await setup(t);
+  const result = await expose(f.plugin, [f.source, path.join(f.root, 'missing.mp4')]);
+  assert.equal(result.ok, false);
+  const shown = f.plugin.presentToolResult({ toolName: 'expose_videos', output: result.output, ok: false });
+  assert.equal(shown.presentationLevel, 'primary');
+  assert.equal(shown.resources.length, 1);
+  assert.equal(shown.resources[0].kind, 'embed');
+  assert.match(shown.resources[0].url, /\?embed=1$/);
+  assert.ok(!shown.text.includes('/api/'));
+  assert.match(result.output.usage, /Do not repeat video URLs/);
+  const old = { videos: [{ ...result.output.videos[0], url: 'https://untrusted.example/', markdown: '[old](https://untrusted.example/)' }] };
+  assert.ok(f.plugin.presentToolResult({ toolName: 'expose_videos', output: old, ok: true }).resources[0].url.startsWith('/api/video-share/'));
+  assert.equal(f.plugin.presentToolResult({ toolName: 'revoke_videos', output: result.output }), undefined);
+  assert.equal(f.plugin.presentToolResult({ toolName: 'expose_videos', output: { videos: [{ id: '../escape' }] } }), undefined);
+  const page = await fetch(f.base + shown.resources[0].url + '&theme=light');
+  const html = await page.text();
+  assert.equal(page.status, 200); assert.match(html, /data-theme="light"/);
+  assert.ok(!/<a\b|target=|window\.open/.test(html));
+  assert.match(html, /<video controls playsinline/);
+});

package/plugins/xhs-artifact/editor-page.mjs

@@ -55,16 +55,16 @@ export function renderXhsEditorPage(artifact, apiUrl) {
     </section>
   </main>
   <script>
-    const initial=${serialize(artifact)};const apiUrl=${serialize(apiUrl)};let draft=clone(initial.payload||{}),active=0,saveTimer=0;const $=id=>document.getElementById(id);
+    const initial=${serialize(artifact)};const appBase=${serialize((process.env.NEO_WEB_BASE_PATH || '').replace(/\/$/, ''))};const appUrl=value=>typeof value==='string'&&value.startsWith('/api/')?appBase+value:value;const apiUrl=appUrl(${serialize(apiUrl)});let draft=clone(initial.payload||{}),active=0,saveTimer=0;const $=id=>document.getElementById(id);
     const params=new URLSearchParams(location.search);const requestedTheme=params.get('theme');document.documentElement.dataset.theme=requestedTheme==='dark'?'dark':requestedTheme==='light'?'light':matchMedia('(prefers-color-scheme: dark)').matches?'dark':'light';
     function clone(v){return JSON.parse(JSON.stringify(v))}function esc(v){return String(v??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]))}function tags(v){return [...new Set(String(v||'').split(/[\\s,，、]+/).filter(Boolean).map(x=>x.startsWith('#')?x:'#'+x))]}
     function field(id,key){$(id).value=key==='hashtags'?(draft[key]||[]).join(' '):draft[key]||'';$(id).addEventListener('input',e=>{draft[key]=key==='hashtags'?tags(e.target.value):e.target.value;renderPreview();scheduleSave()})}
     field('title','title');field('body','body');field('interactionInput','interaction');field('hashtags','hashtags');field('review','review');
-    function missingMedia(image){return '<div class="placeholder"><span class="placeholder-art">▧</span><strong>待添加配图</strong><small>'+esc(image?.caption||image?.note||'上传图片后将在这里预览')+'</small></div>'}function showMissingMedia(image){$('mediaStage').classList.add('image-missing');$('media').innerHTML=missingMedia(image);$('overlay').classList.add('hidden')}function renderPreview(){const images=draft.images||[];active=Math.max(0,Math.min(active,Math.max(0,images.length-1)));const image=images[active];$('previewTitle').textContent=draft.title||'未命名笔记';$('previewBody').textContent=draft.body||'';$('interaction').textContent=draft.interaction||'';$('tags').innerHTML=(draft.hashtags||[]).map(x=>'<span>'+esc(x)+'</span>').join('');$('mediaStage').classList.remove('image-missing');if(image?.url){$('media').innerHTML='<img src="'+esc(image.url)+'" alt="'+esc(image.caption||'配图')+'">';$('media').querySelector('img')?.addEventListener('error',()=>showMissingMedia(image),{once:true})}else{showMissingMedia(image)}$('overlay').textContent=image?.overlay||'';$('overlay').classList.toggle('hidden',!image?.overlay||$('mediaStage').classList.contains('image-missing'));$('prev').classList.toggle('hidden',images.length<2);$('next').classList.toggle('hidden',images.length<2);$('dots').textContent=images.length>1?(active+1)+' / '+images.length:''}
-    function renderImages(){const host=$('images'),images=draft.images||[];host.innerHTML=images.length?images.map((im,i)=>'<section class="image-row" data-index="'+i+'"><button class="thumb" type="button" data-pick="'+i+'">'+(im.url?'<img src="'+esc(im.url)+'" alt="">':'配图 '+(i+1))+'</button><div class="image-fields"><input data-key="url" value="'+esc(im.url)+'" placeholder="图片 URL"><input data-key="caption" value="'+esc(im.caption)+'" placeholder="图片说明"><input data-key="overlay" value="'+esc(im.overlay)+'" placeholder="画面文案"><textarea data-key="note" placeholder="备注">'+esc(im.note)+'</textarea><div class="row-actions"><button type="button" class="small" data-upload="'+i+'">上传替换</button><button type="button" class="small danger" data-remove="'+i+'">删除</button></div></div></section>').join(''):'<div class="empty">还没有配图</div>'}
+    function missingMedia(image){return '<div class="placeholder"><span class="placeholder-art">▧</span><strong>待添加配图</strong><small>'+esc(image?.caption||image?.note||'上传图片后将在这里预览')+'</small></div>'}function showMissingMedia(image){$('mediaStage').classList.add('image-missing');$('media').innerHTML=missingMedia(image);$('overlay').classList.add('hidden')}function renderPreview(){const images=draft.images||[];active=Math.max(0,Math.min(active,Math.max(0,images.length-1)));const image=images[active];$('previewTitle').textContent=draft.title||'未命名笔记';$('previewBody').textContent=draft.body||'';$('interaction').textContent=draft.interaction||'';$('tags').innerHTML=(draft.hashtags||[]).map(x=>'<span>'+esc(x)+'</span>').join('');$('mediaStage').classList.remove('image-missing');if(image?.url){$('media').innerHTML='<img src="'+esc(appUrl(image.url))+'" alt="'+esc(image.caption||'配图')+'">';$('media').querySelector('img')?.addEventListener('error',()=>showMissingMedia(image),{once:true})}else{showMissingMedia(image)}$('overlay').textContent=image?.overlay||'';$('overlay').classList.toggle('hidden',!image?.overlay||$('mediaStage').classList.contains('image-missing'));$('prev').classList.toggle('hidden',images.length<2);$('next').classList.toggle('hidden',images.length<2);$('dots').textContent=images.length>1?(active+1)+' / '+images.length:''}
+    function renderImages(){const host=$('images'),images=draft.images||[];host.innerHTML=images.length?images.map((im,i)=>'<section class="image-row" data-index="'+i+'"><button class="thumb" type="button" data-pick="'+i+'">'+(im.url?'<img src="'+esc(appUrl(im.url))+'" alt="">':'配图 '+(i+1))+'</button><div class="image-fields"><input data-key="url" value="'+esc(appUrl(im.url))+'" placeholder="图片 URL"><input data-key="caption" value="'+esc(im.caption)+'" placeholder="图片说明"><input data-key="overlay" value="'+esc(im.overlay)+'" placeholder="画面文案"><textarea data-key="note" placeholder="备注">'+esc(im.note)+'</textarea><div class="row-actions"><button type="button" class="small" data-upload="'+i+'">上传替换</button><button type="button" class="small danger" data-remove="'+i+'">删除</button></div></div></section>').join(''):'<div class="empty">还没有配图</div>'}
     $('images').addEventListener('input',e=>{const row=e.target.closest('[data-index]');if(!row||!e.target.dataset.key)return;draft.images[+row.dataset.index][e.target.dataset.key]=e.target.value;renderPreview();scheduleSave()});$('images').addEventListener('click',e=>{const pick=e.target.closest('[data-pick]');if(pick){active=+pick.dataset.pick;renderPreview()}const remove=e.target.closest('[data-remove]');if(remove){draft.images.splice(+remove.dataset.remove,1);renderImages();renderPreview();scheduleSave()}const upload=e.target.closest('[data-upload]');if(upload){$('files').dataset.target=upload.dataset.upload;$('files').click()}});
     $('prev').onclick=()=>{active=(active-1+(draft.images||[]).length)%(draft.images||[]).length;renderPreview()};$('next').onclick=()=>{active=(active+1)%(draft.images||[]).length;renderPreview()};let wheelLock=0;$('mediaStage').addEventListener('wheel',e=>{const images=draft.images||[];if(images.length<2)return;e.preventDefault();const now=Date.now();if(now<wheelLock)return;wheelLock=now+320;const delta=Math.abs(e.deltaY)>=Math.abs(e.deltaX)?e.deltaY:e.deltaX;active=(active+(delta>=0?1:-1)+images.length)%images.length;renderPreview()},{passive:false});$('add').onclick=()=>{(draft.images||(draft.images=[])).push({url:'',caption:'配图 '+((draft.images?.length||0)+1),overlay:'',note:''});renderImages();scheduleSave()};$('upload').onclick=()=>{$('files').dataset.target='';$('files').click()};
-    $('files').onchange=async e=>{const files=[...e.target.files];e.target.value='';if(!files.length)return;setStatus('上传中…');try{const uploaded=[];for(const file of files){const data=await new Promise((resolve,reject)=>{const r=new FileReader;r.onload=()=>resolve(String(r.result).replace(/^data:[^,]*,/,''));r.onerror=()=>reject(r.error);r.readAsDataURL(file)});const res=await fetch('/api/uploads',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({name:file.name,mimeType:file.type,data})});const body=await res.json();if(!res.ok||!body.file?.url)throw new Error(body.error||'上传失败');uploaded.push({url:body.file.url,caption:file.name.replace(/\\.[^.]+$/,''),overlay:'',note:file.name})}if(versioning.readonly()){setStatus('已过期，上传未应用；请加载最新版',true);return}const target=Number(e.target.dataset.target);if(e.target.dataset.target!==''&&draft.images[target]){draft.images[target]={...draft.images[target],...uploaded.shift()}}draft.images.push(...uploaded);renderImages();renderPreview();await save()}catch(err){setStatus(err.message||String(err),true)}};
+    $('files').onchange=async e=>{const files=[...e.target.files];e.target.value='';if(!files.length)return;setStatus('上传中…');try{const uploaded=[];for(const file of files){const data=await new Promise((resolve,reject)=>{const r=new FileReader;r.onload=()=>resolve(String(r.result).replace(/^data:[^,]*,/,''));r.onerror=()=>reject(r.error);r.readAsDataURL(file)});const res=await fetch(appUrl('/api/uploads')+new URL(apiUrl,location.href).search,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({name:file.name,mimeType:file.type,data})});const body=await res.json();if(!res.ok||!body.file?.url)throw new Error(body.error||'上传失败');uploaded.push({url:body.file.url,caption:file.name.replace(/\\.[^.]+$/,''),overlay:'',note:file.name})}if(versioning.readonly()){setStatus('已过期，上传未应用；请加载最新版',true);return}const target=Number(e.target.dataset.target);if(e.target.dataset.target!==''&&draft.images[target]){draft.images[target]={...draft.images[target],...uploaded.shift()}}draft.images.push(...uploaded);renderImages();renderPreview();await save()}catch(err){setStatus(err.message||String(err),true)}};
     function setMode(mode){localStorage.setItem('neoctl.plugin.xhs.mode.v2',mode);document.querySelectorAll('[data-mode]').forEach(b=>b.classList.toggle('active',b.dataset.mode===mode));$('grid').className='grid '+mode;$('preview').classList.toggle('hidden',mode==='edit');$('form').classList.toggle('hidden',mode==='preview');resize()}document.querySelectorAll('[data-mode]').forEach(b=>b.onclick=()=>setMode(b.dataset.mode));
     $('fullscreen').onclick=async()=>{if(document.fullscreenElement)await document.exitFullscreen();else await document.documentElement.requestFullscreen()};document.addEventListener('fullscreenchange',()=>{$('fullscreen').textContent=document.fullscreenElement?'退出全屏':'全屏'});
     function payload(){return{title:draft.title||'',body:draft.body||'',interaction:draft.interaction||'',hashtags:draft.hashtags||[],images:draft.images||[],review:draft.review||''}}

package/runtime-workspaces.mjs

@@ -1,5 +1,7 @@
 import path from 'node:path';
-import { mkdir, readFile, readdir, rmdir, stat, writeFile } from 'node:fs/promises';
+import { mkdir as localMkdir, readFile, writeFile } from 'node:fs/promises';
+import { workspaceFs, workspaceHome, containerMode } from './execution-backend.mjs';
+const { mkdir, readdir, rmdir, stat } = workspaceFs;
 import os from 'node:os';
 import { QueryEngine, WebRepl } from './core-runtime.mjs';
 
@@ -370,7 +372,7 @@ export class SessionWorkspaceRegistry {
         : options.cwdNoticePending === true,
     };
     this.writeQueue = this.writeQueue.then(async () => {
-      await mkdir(path.dirname(this.file), { recursive: true });
+      await localMkdir(path.dirname(this.file), { recursive: true });
       await writeFile(this.file, `${JSON.stringify(items, null, 2)}\n`, 'utf8');
     });
     await this.writeQueue;
@@ -406,7 +408,7 @@ export async function browseWorkspace(value, currentCwd) {
     requested,
     fallback: path.resolve(current) !== path.resolve(requested),
     parent: current === path.parse(current).root ? undefined : path.dirname(current),
-    home: os.homedir(),
+    home: (workspaceHome() || os.homedir()),
     locations,
     entries: entries
       .filter((entry) => entry.isDirectory())
@@ -437,8 +439,9 @@ let workspaceLocationsCache;
 let workspaceLocationsCachedAt = 0;
 
 export async function discoverWorkspaceLocations() {
+  if (containerMode) return [{ id: "workspace", label: "workspace", path: "/workspace", kind: "favorite" }, { id: "root", label: "/", path: "/", kind: "root" }, { id: "home", label: "root", path: "/root", kind: "home" }];
   if (workspaceLocationsCache && Date.now() - workspaceLocationsCachedAt < 5000) return workspaceLocationsCache;
-  const home = os.homedir();
+  const home = (workspaceHome() || os.homedir());
   const candidates = [
     { id: 'home', label: '主目录', path: home, kind: 'home' },
     ...[
@@ -486,8 +489,8 @@ export async function discoverWorkspaceLocations() {
 export function resolveWorkspaceInput(value, currentCwd) {
   let input = String(value || '').trim().replace(/^["']|["']$/g, '');
   if (!input) return path.resolve(currentCwd || process.cwd());
-  if (input === '~') input = os.homedir();
-  else if (input.startsWith('~/') || input.startsWith('~\\')) input = path.join(os.homedir(), input.slice(2));
+  if (input === '~') input = (workspaceHome() || os.homedir());
+  else if (input.startsWith('~/') || input.startsWith('~\\')) input = path.join((workspaceHome() || os.homedir()), input.slice(2));
   input = input.replace(/[\\/]+/g, path.sep);
   if (process.platform === 'win32' && /^[a-zA-Z]:$/.test(input)) input += path.sep;
   return path.resolve(currentCwd || process.cwd(), input);

package/scripts/isolation-user.mjs

@@ -0,0 +1,68 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { hashPassword, usernameKey, validUsername } from '../isolation-auth.mjs';
+
+const [filename, username, role] = process.argv.slice(2);
+if (!filename || !validUsername(username) || (role !== undefined && !['user', 'admin'].includes(role))) {
+  console.error('用法: node scripts/isolation-user.mjs <配置文件> <用户名> [user|admin]');
+  process.exit(1);
+}
+
+async function readPassword() {
+  if (!process.stdin.isTTY) {
+    let text = '';
+    for await (const chunk of process.stdin) { text += chunk; if (text.length > 4096) throw new Error('输入过长'); }
+    return text.replace(/\r?\n$/, '');
+  }
+  process.stderr.write('密码: ');
+  process.stdin.setRawMode(true);
+  process.stdin.resume();
+  process.stdin.setEncoding('utf8');
+  return new Promise((resolve, reject) => {
+    let value = '';
+    const done = () => { process.stdin.off('data', onData); process.stdin.setRawMode(false); process.stdin.pause(); process.stderr.write('\n'); };
+    function onData(chunk) {
+      for (const c of chunk) {
+        if (c === '\u0003') { done(); reject(new Error('已取消')); return; }
+        if (c === '\r' || c === '\n') { done(); resolve(value); return; }
+        if (c === '\u007f' || c === '\b') value = value.slice(0, -1);
+        else if (value.length < 1024) value += c;
+      }
+    }
+    process.stdin.on('data', onData);
+  });
+}
+
+const file = path.resolve(filename);
+let config;
+try { config = JSON.parse(await fs.readFile(file, 'utf8')); }
+catch (error) {
+  if (error.code !== 'ENOENT') throw error;
+  config = { enabled: false, secureCookie: false, cookiePath: '/', sessionHours: 12, retiredUsernames: [], users: [] };
+}
+config.users ||= [];
+config.retiredUsernames ||= [];
+const key = usernameKey(username);
+if (config.users.some(user => user.id !== undefined && user.id !== user.username)) throw new Error('旧用户 ID 与用户名不同，请先迁移');
+if (config.retiredUserIds?.length) throw new Error('请先将 retiredUserIds 迁移为 retiredUsernames');
+if (config.retiredUsernames.some(value => usernameKey(value) === key)) throw new Error('已删除的用户名不可复用');
+const existing = config.users.find(user => usernameKey(user.username) === key);
+const nextRole = role || existing?.role || 'user';
+const next = { username, role: nextRole };
+if (nextRole === 'admin') next.passwordHash = await hashPassword(await readPassword());
+else if (existing?.passwordHash) next.passwordHash = existing.passwordHash;
+const users = config.users.map(user => {
+  const { id: _oldId, ...account } = user;
+  return account;
+});
+const index = users.findIndex(user => usernameKey(user.username) === key);
+if (index >= 0) users[index] = next; else users.push(next);
+const { retiredUserIds: _oldRetiredUserIds, ...stored } = config;
+stored.users = users;
+await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+const pending = file + `.tmp-${process.pid}`;
+try {
+  await fs.writeFile(pending, JSON.stringify(stored, null, 2) + '\n', { mode: 0o600, flag: 'wx' });
+  await fs.rename(pending, file);
+} finally { await fs.rm(pending, { force: true }); }
+console.log(`用户已保存: ${username}。修改 enabled 后重启 Web 生效。`);