terminal-bridge-setup 2.0.0

package/README.md

@@ -0,0 +1,65 @@
+# terminal-bridge-setup
+
+> 一次性安装器：让 Agent 能通过浏览器 xterm 终端（JumpServer Web 终端 / Arthas Console）执行命令并拿回输出。
+
+## 一键安装
+
+需要 Node.js 18+ 和 Chrome 浏览器：
+
+```bash
+npx terminal-bridge-setup
+```
+
+安装器自动完成：
+
+1. 释放文件到 `~/.terminal-bridge/`
+2. 安装代理依赖
+3. 注册 Native Messaging Host 到 Chrome
+4. 打开 `chrome://extensions` 引导加载插件
+
+## 加载 Chrome 插件（手动，一次性）
+
+`npx` 会自动打开 `chrome://extensions`，按提示操作：
+
+1. 右上角打开「开发者模式」
+2. 点「加载已解压的扩展程序」
+3. 选择目录：`~/.terminal-bridge/extension`
+4. 确认插件 ID 是 `jkbnakjnbahigfefgiipfngheiafoein`
+
+## 使用
+
+1. 打开终端页面（JumpServer Web 终端 / Arthas Console），完成连接
+2. 点插件图标 →「🔍 捕捉终端」→「🚀 启动代理」
+3. 两个绿灯亮，Agent 即可通过桥接发命令
+
+## 架构
+
+```
+Agent (命令)
+  ↓ ws → 本地代理 (127.0.0.1:8787)
+本地代理 (prompt 锚点配对 + Arthas 安全基线)
+  ↓ ws → Chrome 插件 background
+插件 (CDP 抓 WS 帧 + 注入 xterm)
+  ↓ → 终端页面 xterm → 远端 SSH / JVM
+```
+
+## 特性
+
+- **双终端支持**：JumpServer 堡垒机 Web 终端 + Arthas Web Console
+- **结构化输出**：ANSI 已清理，命令回显已去除，返回纯净文本
+- **sudo 自动重试**：检测 sudo 别名劫持，询问用户后切 root 重试
+- **Arthas 安全基线**：中风险命令（trace/watch）自动补 `-n`，高风险命令（retransform/profiler/stop）无条件禁用
+- **多终端切换**：popup 内 tab 选择器，带 host 标签区分
+
+## 卸载
+
+```bash
+rm -rf ~/.terminal-bridge
+rm "$HOME/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.wssniffer.host.json"
+```
+
+然后在 `chrome://extensions` 移除插件。
+
+## License
+
+MIT

package/bin/setup.mjs

@@ -0,0 +1,205 @@
+#!/usr/bin/env node
+// terminal-bridge-setup —— 终端桥接一次性安装器
+//
+// 做 4 件事：
+//   1. 把插件源码 + 代理 + native host 释放到 ~/.terminal-bridge/
+//   2. 在代理目录跑 npm install（装 ws）
+//   3. 注册 native messaging host 到 Chrome（复用 native/install.sh）
+//   4. 打开 chrome://extensions，引导用户"加载已解压扩展"
+//
+// 用法（发布后）：
+//   npx terminal-bridge-setup
+// 本地测试：
+//   node setup-pkg/bin/setup.mjs
+
+import { existsSync, mkdirSync, cpSync, rmSync, readFileSync, writeFileSync } from "node:fs";
+import { join, dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { homedir, platform } from "node:os";
+import { spawnSync } from "node:child_process";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const FILES_DIR = join(__dirname, "..", "files");
+const INSTALL_DIR = join(homedir(), ".terminal-bridge");
+
+// 插件 ID（由 manifest.json 的 key 字段决定，固定不变）
+const EXTENSION_ID = "jkbnakjnbahigfefgiipfngheiafoein";
+
+// 颜色输出（简单的 ANSI，不用 chalk 避免依赖）
+const c = {
+  green: (s) => `\x1b[32m${s}\x1b[0m`,
+  yellow: (s) => `\x1b[33m${s}\x1b[0m`,
+  red: (s) => `\x1b[31m${s}\x1b[0m`,
+  cyan: (s) => `\x1b[36m${s}\x1b[0m`,
+  dim: (s) => `\x1b[2m${s}\x1b[0m`,
+  bold: (s) => `\x1b[1m${s}\x1b[0m`,
+};
+const log = (msg) => console.log(msg);
+const ok = (msg) => console.log(c.green("✓ ") + msg);
+const fail = (msg) => { console.error(c.red("✗ ") + msg); process.exit(1); };
+const step = (n, msg) => console.log(`\n${c.bold(c.cyan(`[${n}/4]`))} ${msg}`);
+
+// ===================== 步骤 1：释放文件 =====================
+function releaseFiles() {
+  step(1, `释放文件到 ${c.dim(INSTALL_DIR)}`);
+
+  if (!existsSync(FILES_DIR)) {
+    fail(`安装包不完整：未找到 ${FILES_DIR}`);
+  }
+
+  // 已存在：提示用户。除非带 --force，否则保留用户的 extension 配置覆盖。
+  const isForce = process.argv.includes("--force");
+  if (existsSync(INSTALL_DIR)) {
+    if (isForce) {
+      console.log(c.yellow("  已存在 ~/.terminal-bridge/，--force 模式：覆盖"));
+      rmSync(INSTALL_DIR, { recursive: true, force: true });
+    } else {
+      // 不强制覆盖时，仍然更新文件（保留 .proxy.pid/.proxy.log 等运行时产物）
+      console.log(c.yellow("  ~/.terminal-bridge/ 已存在，将更新文件（运行时产物保留）"));
+    }
+  }
+
+  mkdirSync(INSTALL_DIR, { recursive: true });
+
+  // 复制三个子目录
+  for (const sub of ["proxy", "native", "extension"]) {
+    const src = join(FILES_DIR, sub);
+    const dst = join(INSTALL_DIR, sub);
+    if (!existsSync(src)) {
+      fail(`安装包缺少 files/${sub}/`);
+    }
+    cpSync(src, dst, { recursive: true, force: true });
+    ok(`释放 ${sub}/`);
+  }
+}
+
+// ===================== 步骤 2：装代理依赖 =====================
+function installProxyDeps() {
+  step(2, "安装代理依赖 (ws)");
+
+  // 如果 node_modules/ws 已存在（从包里带出来的），跳过
+  const wsPath = join(INSTALL_DIR, "proxy", "node_modules", "ws");
+  if (existsSync(wsPath)) {
+    ok("依赖已存在，跳过");
+    return;
+  }
+
+  const proxyDir = join(INSTALL_DIR, "proxy");
+  console.log(c.dim("  运行 npm install ..."));
+  const result = spawnSync("npm", ["install", "--silent", "--no-audit", "--no-fund"], {
+    cwd: proxyDir,
+    stdio: "inherit",
+  });
+
+  if (result.status !== 0) {
+    fail("npm install 失败，请检查网络后重试");
+  }
+  ok("依赖安装完成");
+}
+
+// ===================== 步骤 3：注册 native host =====================
+function registerNativeHost() {
+  step(3, "注册 Native Messaging Host");
+
+  // macOS / Linux 路径不同
+  const plat = platform();
+  let destDir;
+  if (plat === "darwin") {
+    destDir = join(homedir(), "Library", "Application Support", "Google", "Chrome", "NativeMessagingHosts");
+  } else if (plat === "linux") {
+    destDir = join(homedir(), ".config", "google-chrome", "NativeMessagingHosts");
+  } else {
+    console.log(c.yellow("  ⚠ Windows 平台需要手动配置 native host，跳过自动注册"));
+    console.log(c.dim("  参考：https://developer.chrome.com/docs/extensions/develop/concepts/native-messaging"));
+    return false;
+  }
+
+  const installSh = join(INSTALL_DIR, "native", "install.sh");
+  if (!existsSync(installSh)) {
+    fail(`未找到 ${installSh}`);
+  }
+
+  // 调用通用 install.sh，传入 INSTALL_DIR 作为项目根
+  // install.sh 会：检测 node → 生成 host.sh → 生成 manifest → 复制到 destDir
+  const result = spawnSync("bash", [installSh, INSTALL_DIR], { stdio: "inherit" });
+  if (result.status !== 0) {
+    fail("install.sh 执行失败");
+  }
+
+  // 校验：manifest 确实到了目标目录
+  const destManifest = join(destDir, "com.wssniffer.host.json");
+  if (!existsSync(destManifest)) {
+    fail(`注册校验失败：${destManifest} 不存在`);
+  }
+  ok(`已注册到 ${destDir}`);
+  return true;
+}
+
+// ===================== 步骤 4：引导加载插件 =====================
+function guideLoadExtension() {
+  step(4, "加载 Chrome 插件");
+
+  const extDir = join(INSTALL_DIR, "extension");
+  console.log("");
+  console.log(c.bold("请在 Chrome 中操作："));
+  console.log("");
+  console.log(`  ${c.cyan("1.")} 打开 ${c.bold("chrome://extensions")}`);
+  console.log(`     ${c.dim("(我会尝试帮你打开)")}`);
+  console.log("");
+  console.log(`  ${c.cyan("2.")} 右上角打开「${c.bold("开发者模式")}」`);
+  console.log("");
+  console.log(`  ${c.cyan("3.")} 点「${c.bold("加载已解压的扩展程序")}」`);
+  console.log(`     选择目录：`);
+  console.log(`     ${c.green(extDir)}`);
+  console.log("");
+  console.log(`  ${c.cyan("4.")} 加载后确认插件 ID 是：`);
+  console.log(`     ${c.bold(EXTENSION_ID)}`);
+  console.log(`     ${c.dim("(ID 由 manifest key 固定，native host 已按此 ID 注册)")}`);
+  console.log("");
+
+  // 尝试用系统默认方式打开 chrome://extensions
+  const plat = platform();
+  let opened = false;
+  try {
+    if (plat === "darwin") {
+      spawnSync("open", ["chrome://extensions"], { stdio: "ignore" });
+      opened = true;
+    } else if (plat === "linux") {
+      spawnSync("xdg-open", ["chrome://extensions"], { stdio: "ignore" });
+      opened = true;
+    }
+  } catch {}
+  if (opened) ok("已尝试打开 chrome://extensions");
+}
+
+// ===================== 主流程 =====================
+function main() {
+  console.log(c.bold(c.cyan("\n🔌 终端桥接安装器")));
+  console.log(c.dim("  JumpServer Web 终端 · Arthas Console\n"));
+
+  // 前置检查：node 版本
+  const nodeVer = process.versions.node.split(".")[0];
+  if (Number(nodeVer) < 18) {
+    fail(`需要 Node.js >= 18，当前是 ${process.versions.node}`);
+  }
+  ok(`Node.js ${process.versions.node}`);
+
+  releaseFiles();
+  installProxyDeps();
+  registerNativeHost();
+  guideLoadExtension();
+
+  console.log("");
+  console.log(c.green(c.bold("✓ 安装完成！")));
+  console.log("");
+  console.log(c.bold("下一步："));
+  console.log(`  ${c.cyan("•")} 打开 JumpServer 终端 或 Arthas Console 页面`);
+  console.log(`  ${c.cyan("•")} 点插件图标 →「🔍 捕捉终端」→「🚀 启动代理」`);
+  console.log(`  ${c.cyan("•")} 两个绿灯亮，即可通过 Agent 发命令`);
+  console.log("");
+  console.log(c.dim(`文件位置：${INSTALL_DIR}`));
+  console.log(c.dim(`卸载：rm -rf ${INSTALL_DIR} && rm ~/Library/Application\\ Support/Google/Chrome/NativeMessagingHosts/com.wssniffer.host.json`));
+  console.log("");
+}
+
+main();