opclawtm 1.4.0

package/dist/core/auth/middleware.js

@@ -0,0 +1,456 @@
+"use strict";
+/**
+ * License Verification Middleware (v1.3.0)
+ *
+ * 安全特性：
+ * 1. 加密存储 session_key
+ * 2. checksum 校验防篡改
+ * 3. machine_id 设备绑定
+ * 4. 时间戳防重放
+ * 5. 定期心跳验证
+ * 6. 密钥同步（v1.3.0 新增）
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyLicenseOnline = verifyLicenseOnline;
+exports.validateSessionOnline = validateSessionOnline;
+exports.checkLicense = checkLicense;
+exports.bindLicense = bindLicense;
+exports.unbindLicense = unbindLicense;
+exports.getLicenseStatus = getLicenseStatus;
+exports.showLicenseError = showLicenseError;
+exports.getMachineId = getMachineId;
+const storage_1 = require("./storage");
+const config_1 = require("../../config");
+const crypto_service_1 = require("../services/crypto.service");
+// ============================================
+// Configuration
+// ============================================
+const LICENSE_SERVER = process.env.LICENSE_SERVER || 'https://opclawtm.com';
+const LICENSE_SERVER_LOCAL = 'http://localhost:3000';
+const USE_LOCAL = process.env.LICENSE_LOCAL === 'true';
+// 后台刷新控制
+let refreshInProgress = false;
+let lastRefreshAttempt = 0;
+const REFRESH_COOLDOWN_MS = 60 * 1000;
+// 心跳间隔（5 分钟）
+const HEARTBEAT_INTERVAL_MS = 5 * 60 * 1000;
+let lastHeartbeat = 0;
+// ============================================
+// HTTP Client
+// ============================================
+function httpRequest(url, options) {
+    return new Promise((resolve, reject) => {
+        const http = require('http');
+        const https = require('https');
+        const parsedUrl = new URL(url);
+        const isHttps = parsedUrl.protocol === 'https:';
+        const reqOptions = {
+            hostname: parsedUrl.hostname,
+            port: parsedUrl.port || (isHttps ? 443 : 80),
+            path: parsedUrl.pathname + parsedUrl.search,
+            method: options.method || 'GET',
+            headers: {
+                'Content-Type': 'application/json',
+                ...options.headers,
+            },
+        };
+        const client = isHttps ? https : http;
+        const req = client.request(reqOptions, (res) => {
+            let data = '';
+            res.on('data', (chunk) => {
+                data += chunk;
+            });
+            res.on('end', () => {
+                try {
+                    const json = JSON.parse(data);
+                    resolve(json);
+                }
+                catch (e) {
+                    reject(new Error(`解析响应失败: ${data}`));
+                }
+            });
+        });
+        req.on('error', (e) => {
+            reject(e);
+        });
+        req.setTimeout(options.timeout || 10000, () => {
+            req.destroy();
+            reject(new Error('请求超时'));
+        });
+        if (options.body) {
+            req.write(JSON.stringify(options.body));
+        }
+        req.end();
+    });
+}
+// ============================================
+// License Verification
+// ============================================
+/**
+ * 在线验证授权（绑定新设备）
+ *
+ * 支持两种 Key：
+ * 1. 正式授权 Key（TM-XXXX-XXXX-XXXX-XXXX）
+ * 2. 临时 Key（TM-TEMP-XXXX-XXXX）
+ */
+async function verifyLicenseOnline(licenseKey) {
+    const server = USE_LOCAL ? LICENSE_SERVER_LOCAL : LICENSE_SERVER;
+    const machineId = (0, storage_1.getLocalMachineId)();
+    try {
+        // 首先检查是否为临时 Key
+        if (licenseKey.startsWith('TM-TEMP-')) {
+            // 使用临时 Key 接口
+            const response = await httpRequest(`${server}/api/license/use-temp-key`, {
+                method: 'POST',
+                body: {
+                    temp_key: licenseKey,
+                    machine_id: machineId,
+                    cli_version: config_1.CLI_VERSION, // 新增：上报版本号
+                },
+                timeout: 15000,
+            });
+            if (response.success && response.data) {
+                // 同步加密密钥
+                if (response.data.encryption_key) {
+                    (0, crypto_service_1.syncEncryptionKeyFromServer)(response.data.encryption_key);
+                }
+                // 保存会话（使用返回的正式 license_key）
+                (0, storage_1.saveSession)({
+                    license_key: response.data.license_key,
+                    machine_id: machineId,
+                    session_key: response.data.session_key,
+                    session_expires_at: response.data.session_expires_at,
+                    last_verify_at: new Date().toISOString(),
+                });
+                const savedSession = (0, storage_1.readSession)();
+                return {
+                    success: true,
+                    session: savedSession || undefined,
+                };
+            }
+            return {
+                success: false,
+                error: response.error || {
+                    code: 'TEMP_KEY_INVALID',
+                    message: '临时 Key 无效或已过期',
+                },
+            };
+        }
+        // 正式授权 Key 验证
+        const response = await httpRequest(`${server}/api/license/verify`, {
+            method: 'POST',
+            body: {
+                license_key: licenseKey,
+                machine_id: machineId,
+                cli_version: config_1.CLI_VERSION, // 新增：上报版本号
+            },
+            timeout: 15000,
+        });
+        if (response.success && response.data) {
+            // 同步加密密钥
+            if (response.data.encryption_key) {
+                (0, crypto_service_1.syncEncryptionKeyFromServer)(response.data.encryption_key);
+            }
+            // 保存会话（自动加密）
+            (0, storage_1.saveSession)({
+                license_key: licenseKey,
+                machine_id: machineId,
+                session_key: response.data.session_key,
+                session_expires_at: response.data.session_expires_at,
+                last_verify_at: new Date().toISOString(),
+            });
+            const savedSession = (0, storage_1.readSession)();
+            return {
+                success: true,
+                session: savedSession || undefined,
+            };
+        }
+        // 特殊错误处理
+        if (response.error?.code === 'DEVICE_NOT_FOUND' ||
+            response.error?.code === 'DEVICE_LIMIT' ||
+            response.error?.code === 'SESSION_INVALID') {
+            (0, storage_1.clearSession)();
+        }
+        return {
+            success: false,
+            error: response.error || {
+                code: 'VERIFY_FAILED',
+                message: '授权验证失败',
+            },
+        };
+    }
+    catch (e) {
+        return {
+            success: false,
+            error: {
+                code: 'NETWORK_ERROR',
+                message: `网络错误: ${e.message}`,
+            },
+        };
+    }
+}
+/**
+ * 在线验证 Session（心跳检测）
+ */
+async function validateSessionOnline(session) {
+    const server = USE_LOCAL ? LICENSE_SERVER_LOCAL : LICENSE_SERVER;
+    const machineId = (0, storage_1.getLocalMachineId)();
+    // 解密 session_key
+    const decryptedSessionKey = (0, storage_1.getDecryptedSessionKey)(session);
+    if (!decryptedSessionKey) {
+        (0, storage_1.clearSession)();
+        return {
+            success: false,
+            error: {
+                code: 'DECRYPT_FAILED',
+                message: 'Session 解密失败，可能是设备不匹配',
+            },
+        };
+    }
+    try {
+        const response = await httpRequest(`${server}/api/license/validate-session`, {
+            method: 'POST',
+            body: {
+                license_key: session.license_key,
+                machine_id: machineId,
+                session_key: decryptedSessionKey,
+            },
+            timeout: 5000,
+        });
+        if (response.success && response.data?.session_valid) {
+            // 更新会话
+            (0, storage_1.saveSession)({
+                license_key: session.license_key,
+                machine_id: machineId,
+                session_key: decryptedSessionKey,
+                session_expires_at: response.data.session_expires_at || session.session_expires_at,
+                last_verify_at: new Date().toISOString(),
+            });
+            const savedSession = (0, storage_1.readSession)();
+            return {
+                success: true,
+                session: savedSession || undefined,
+            };
+        }
+        // Session 无效
+        if (response.error?.code === 'SESSION_INVALID' ||
+            response.error?.code === 'DEVICE_UNBOUND' ||
+            response.error?.code === 'KEY_UPDATED') {
+            (0, storage_1.clearSession)();
+        }
+        return {
+            success: false,
+            error: response.error || {
+                code: 'SESSION_INVALID',
+                message: 'Session 已失效',
+            },
+        };
+    }
+    catch (e) {
+        // 网络错误时降级
+        if ((0, storage_1.isSessionValid)(session)) {
+            return {
+                success: true,
+                session,
+            };
+        }
+        return {
+            success: false,
+            error: {
+                code: 'NETWORK_ERROR',
+                message: `网络错误: ${e.message}`,
+            },
+        };
+    }
+}
+/**
+ * 后台心跳检测
+ */
+async function heartbeat(session) {
+    if (refreshInProgress)
+        return;
+    const now = Date.now();
+    if (now - lastRefreshAttempt < REFRESH_COOLDOWN_MS)
+        return;
+    if (now - lastHeartbeat < HEARTBEAT_INTERVAL_MS)
+        return;
+    refreshInProgress = true;
+    lastRefreshAttempt = now;
+    lastHeartbeat = now;
+    try {
+        const result = await validateSessionOnline(session);
+        if (!result.success) {
+            console.warn('[授权] 心跳检测失败:', result.error?.message);
+        }
+    }
+    catch (e) {
+        // 忽略心跳错误
+    }
+    finally {
+        refreshInProgress = false;
+    }
+}
+/**
+ * 检查授权状态
+ *
+ * 检查顺序：
+ * 1. 本地 session 是否存在
+ * 2. checksum 是否正确（防止篡改）
+ * 3. machine_id 是否匹配（防止复制）
+ * 4. 是否过期
+ * 5. 心跳检测
+ */
+async function checkLicense() {
+    const session = (0, storage_1.readSession)();
+    if (!session) {
+        return {
+            success: false,
+            error: {
+                code: 'NO_LICENSE',
+                message: '未绑定授权，请先使用 bind-license 命令绑定授权Key',
+            },
+        };
+    }
+    // 检查 machine_id
+    const currentMachineId = (0, storage_1.getLocalMachineId)();
+    if (session.machine_id !== currentMachineId) {
+        console.error('[授权] 检测到 license.json 与当前设备不匹配');
+        (0, storage_1.clearSession)();
+        return {
+            success: false,
+            error: {
+                code: 'DEVICE_MISMATCH',
+                message: '授权文件与当前设备不匹配',
+            },
+        };
+    }
+    // 检查过期
+    if (!(0, storage_1.isSessionValid)(session)) {
+        console.log('[授权] 会话已过期，正在重新验证...');
+        const result = await validateSessionOnline(session);
+        if (!result.success) {
+            console.log('[授权] 尝试重新绑定设备...');
+            return verifyLicenseOnline(session.license_key);
+        }
+        return result;
+    }
+    // 触发心跳检测
+    if ((0, storage_1.needsRefresh)(session)) {
+        heartbeat(session);
+    }
+    return {
+        success: true,
+        session,
+    };
+}
+/**
+ * 绑定授权
+ */
+async function bindLicense(licenseKey) {
+    console.log(`正在验证授权Key: ${licenseKey}`);
+    const result = await verifyLicenseOnline(licenseKey);
+    if (result.success) {
+        console.log('✓ 授权绑定成功！');
+        if (result.session) {
+            const remaining = (0, storage_1.getSessionRemainingSeconds)(result.session);
+            console.log(`  会话有效期: ${(0, storage_1.formatRemainingTime)(remaining)}`);
+        }
+    }
+    else {
+        console.error('✗ 授权绑定失败:', result.error?.message);
+    }
+    return result;
+}
+/**
+ * 解除授权绑定
+ */
+function unbindLicense() {
+    const session = (0, storage_1.readSession)();
+    if (!session) {
+        console.log('⚠️  当前没有绑定授权');
+        return;
+    }
+    // 尝试通知服务器解绑设备
+    const decryptedSessionKey = (0, storage_1.getDecryptedSessionKey)(session);
+    if (decryptedSessionKey) {
+        unbindDeviceOnline(session.license_key, session.machine_id, decryptedSessionKey).catch(() => {
+            // 忽略错误，继续清除本地文件
+        });
+    }
+    // 清除本地文件
+    (0, storage_1.clearSession)();
+    console.log('✓ 已解除授权绑定');
+}
+/**
+ * 在线解绑设备
+ */
+async function unbindDeviceOnline(licenseKey, machineId, sessionKey) {
+    const server = USE_LOCAL ? LICENSE_SERVER_LOCAL : LICENSE_SERVER;
+    try {
+        await httpRequest(`${server}/api/license/unbind-device`, {
+            method: 'POST',
+            body: {
+                license_key: licenseKey,
+                machine_id: machineId,
+                session_key: sessionKey,
+            },
+            timeout: 5000,
+        });
+    }
+    catch (e) {
+        // 忽略错误
+    }
+}
+/**
+ * 获取授权状态
+ */
+async function getLicenseStatus() {
+    const session = (0, storage_1.readSession)();
+    if (!session) {
+        return {
+            valid: false,
+            error: '未绑定授权',
+        };
+    }
+    const currentMachineId = (0, storage_1.getLocalMachineId)();
+    if (session.machine_id !== currentMachineId) {
+        return {
+            valid: false,
+            error: '授权文件与当前设备不匹配',
+        };
+    }
+    const valid = (0, storage_1.isSessionValid)(session);
+    const remaining = (0, storage_1.getSessionRemainingSeconds)(session);
+    return {
+        valid,
+        license_key: session.license_key,
+        remaining_time: (0, storage_1.formatRemainingTime)(remaining),
+    };
+}
+/**
+ * 显示授权错误提示
+ */
+function showLicenseError(error) {
+    console.error('');
+    console.error('❌ 授权验证失败');
+    console.error('');
+    console.error(`错误: ${error.message}`);
+    console.error('');
+    // 根据错误码提供不同的解决方案
+    if (error.code === 'DEVICE_LIMIT') {
+        console.error('设备数量已达上限，请执行以下操作之一:');
+        console.error('  1. 访问 https://opclawtm.com/licenses 解绑其他设备');
+        console.error('  2. 联系客服处理');
+    }
+    else {
+        console.error('请执行以下操作之一:');
+        console.error('  1. 运行 opclawtm bind-license --key YOUR_KEY 绑定新授权');
+        console.error('  2. 访问 https://opclawtm.com/licenses 查看授权状态');
+    }
+    console.error('');
+}
+// 导出
+function getMachineId() {
+    return (0, storage_1.getLocalMachineId)();
+}
+//# sourceMappingURL=middleware.js.map

package/dist/core/auth/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/core/auth/middleware.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAqIH,kDAmIC;AAKD,sDAoFC;AAsCD,oCAmDC;AAKD,kCAiBC;AAKD,sCAuBC;AA8BD,4CA0BC;AAKD,4CAmBC;AAGD,oCAEC;AA9jBD,uCAWmB;AACnB,yCAA2C;AAC3C,+DAAyE;AAyBzE,+CAA+C;AAC/C,gBAAgB;AAChB,+CAA+C;AAE/C,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,sBAAsB,CAAC;AAC5E,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AACrD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,CAAC;AAEvD,SAAS;AACT,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,IAAI,kBAAkB,GAAG,CAAC,CAAC;AAC3B,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,aAAa;AACb,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,IAAI,aAAa,GAAG,CAAC,CAAC;AAEtB,+CAA+C;AAC/C,cAAc;AACd,+CAA+C;AAE/C,SAAS,WAAW,CAAI,GAAW,EAAE,OAKpC;IACC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAEhD,MAAM,UAAU,GAAG;YACjB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM;YAC3C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,OAAO,CAAC,OAAO;aACnB;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,GAAQ,EAAE,EAAE;YAClD,IAAI,IAAI,GAAG,EAAE,CAAC;YAEd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE;YAC3B,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,GAAG,EAAE;YAC5C,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+CAA+C;AAC/C,uBAAuB;AACvB,+CAA+C;AAE/C;;;;;;GAMG;AACI,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAC;IACjE,MAAM,SAAS,GAAG,IAAA,2BAAiB,GAAE,CAAC;IAEtC,IAAI,CAAC;QACH,gBAAgB;QAChB,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,cAAc;YACd,MAAM,QAAQ,GAAG,MAAM,WAAW,CAY/B,GAAG,MAAM,2BAA2B,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE;oBACJ,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,SAAS;oBACrB,WAAW,EAAE,oBAAW,EAAG,WAAW;iBACvC;gBACD,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtC,SAAS;gBACT,IAAI,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;oBACjC,IAAA,4CAA2B,EAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC5D,CAAC;gBAED,4BAA4B;gBAC5B,IAAA,qBAAW,EAAC;oBACV,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW;oBACtC,UAAU,EAAE,SAAS;oBACrB,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW;oBACtC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB;oBACpD,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACzC,CAAC,CAAC;gBAEH,MAAM,YAAY,GAAG,IAAA,qBAAW,GAAE,CAAC;gBAEnC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,YAAY,IAAI,SAAS;iBACnC,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI;oBACvB,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,eAAe;iBACzB;aACF,CAAC;QACJ,CAAC;QAED,cAAc;QACd,MAAM,QAAQ,GAAG,MAAM,WAAW,CAY/B,GAAG,MAAM,qBAAqB,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,oBAAW,EAAG,WAAW;aACvC;YACD,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtC,SAAS;YACT,IAAI,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACjC,IAAA,4CAA2B,EAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,CAAC;YAED,aAAa;YACb,IAAA,qBAAW,EAAC;gBACV,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW;gBACtC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB;gBACpD,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACzC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,IAAA,qBAAW,GAAE,CAAC;YAEnC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,YAAY,IAAI,SAAS;aACnC,CAAC;QACJ,CAAC;QAED,SAAS;QACT,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,kBAAkB;YAC3C,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,cAAc;YACvC,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/C,IAAA,sBAAY,GAAE,CAAC;QACjB,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI;gBACvB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,QAAQ;aAClB;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE;aAC9B;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,qBAAqB,CAAC,OAAuB;IACjE,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAC;IACjE,MAAM,SAAS,GAAG,IAAA,2BAAiB,GAAE,CAAC;IAEtC,iBAAiB;IACjB,MAAM,mBAAmB,GAAG,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,IAAA,sBAAY,GAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,uBAAuB;aACjC;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAO/B,GAAG,MAAM,+BAA+B,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,mBAAmB;aACjC;YACD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACrD,OAAO;YACP,IAAA,qBAAW,EAAC;gBACV,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,mBAAmB;gBAChC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,CAAC,kBAAkB;gBAClF,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACzC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,IAAA,qBAAW,GAAE,CAAC;YAEnC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,YAAY,IAAI,SAAS;aACnC,CAAC;QACJ,CAAC;QAED,aAAa;QACb,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,iBAAiB;YAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,gBAAgB;YACzC,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3C,IAAA,sBAAY,GAAE,CAAC;QACjB,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI;gBACvB,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,aAAa;aACvB;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,UAAU;QACV,IAAI,IAAA,wBAAc,EAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO;aACR,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE;aAC9B;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,OAAuB;IAC9C,IAAI,iBAAiB;QAAE,OAAO;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,kBAAkB,GAAG,mBAAmB;QAAE,OAAO;IAC3D,IAAI,GAAG,GAAG,aAAa,GAAG,qBAAqB;QAAE,OAAO;IAExD,iBAAiB,GAAG,IAAI,CAAC;IACzB,kBAAkB,GAAG,GAAG,CAAC;IACzB,aAAa,GAAG,GAAG,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS;IACX,CAAC;YAAS,CAAC;QACT,iBAAiB,GAAG,KAAK,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,YAAY;IAChC,MAAM,OAAO,GAAG,IAAA,qBAAW,GAAE,CAAC;IAE9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,mCAAmC;aAC7C;SACF,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,MAAM,gBAAgB,GAAG,IAAA,2BAAiB,GAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChD,IAAA,sBAAY,GAAE,CAAC;QAEf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,cAAc;aACxB;SACF,CAAC;IACJ,CAAC;IAED,OAAO;IACP,IAAI,CAAC,IAAA,wBAAc,EAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAEpC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAChC,OAAO,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS;IACT,IAAI,IAAA,sBAAY,EAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,WAAW,CAAC,UAAkB;IAClD,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAErD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEzB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,IAAA,oCAA0B,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,YAAY,IAAA,6BAAmB,EAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAA,qBAAW,GAAE,CAAC;IAE9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,cAAc;IACd,MAAM,mBAAmB,GAAG,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,mBAAmB,EAAE,CAAC;QACxB,kBAAkB,CAChB,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,UAAU,EAClB,mBAAmB,CACpB,CAAC,KAAK,CAAC,GAAG,EAAE;YACX,gBAAgB;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS;IACT,IAAA,sBAAY,GAAE,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,SAAiB,EACjB,UAAkB;IAElB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAC;IAEjE,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,GAAG,MAAM,4BAA4B,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,UAAU;aACxB;YACD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;IACT,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,gBAAgB;IACpC,MAAM,OAAO,GAAG,IAAA,qBAAW,GAAE,CAAC;IAE9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,OAAO;SACf,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAA,2BAAiB,GAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,cAAc;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAA,oCAA0B,EAAC,OAAO,CAAC,CAAC;IAEtD,OAAO;QACL,KAAK;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,IAAA,6BAAmB,EAAC,SAAS,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,KAAwC;IACvE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,iBAAiB;IACjB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,KAAK;AACL,SAAgB,YAAY;IAC1B,OAAO,IAAA,2BAAiB,GAAE,CAAC;AAC7B,CAAC"}

package/dist/core/auth/storage.d.ts

@@ -0,0 +1,38 @@
+/**
+ * License Storage Module (v1.2.5)
+ *
+ * 安全特性：
+ * 1. 加密存储敏感信息
+ * 2. 校验和防止篡改
+ * 3. machine_id 绑定设备
+ */
+export interface LicenseSession {
+    license_key: string;
+    machine_id: string;
+    session_key: string;
+    session_expires_at: string;
+    last_verify_at: string;
+    checksum: string;
+    encrypted_at: number;
+    version: number;
+    _decryptedSessionKey?: string;
+}
+export declare function getLocalMachineId(): string;
+export declare function getAuthDir(): string;
+export declare function getSessionFilePath(): string;
+export declare function ensureAuthDir(): void;
+export declare function readSession(): LicenseSession | null;
+export declare function saveSession(data: {
+    license_key: string;
+    machine_id: string;
+    session_key: string;
+    session_expires_at: string;
+    last_verify_at: string;
+}): void;
+export declare function getDecryptedSessionKey(session: LicenseSession): string | null;
+export declare function clearSession(): void;
+export declare function isSessionValid(session: LicenseSession): boolean;
+export declare function needsRefresh(session: LicenseSession): boolean;
+export declare function getSessionRemainingSeconds(session: LicenseSession): number;
+export declare function formatRemainingTime(seconds: number): string;
+//# sourceMappingURL=storage.d.ts.map

package/dist/core/auth/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/core/auth/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAEhB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAsCD,wBAAgB,iBAAiB,IAAI,MAAM,CAc1C;AA0DD,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,aAAa,IAAI,IAAI,CAKpC;AAED,wBAAgB,WAAW,IAAI,cAAc,GAAG,IAAI,CAoDnD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,IAAI,CA+BP;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAS7E;AAED,wBAAgB,YAAY,IAAI,IAAI,CAKnC;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAiB/D;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAU7D;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAU1E;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAmB3D"}