toc-ocra 0.2.0

package/package.json

@@ -0,0 +1,90 @@
+{
+  "name": "toc-ocra",
+  "version": "0.2.0",
+  "description": "Echo device agent: local CLI execution service plus its desktop plugin (heartbeat + long-poll, headless CLIs)",
+  "type": "module",
+  "bin": {
+    "toc-ocra": "./dist/src/index.js"
+  },
+  "files": [
+    "dist/src/",
+    "dist/plugin/",
+    "assets/",
+    "locales/",
+    "scripts/service.mjs",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json && npm run build:plugin",
+    "dev": "tsx src/index.ts run",
+    "start": "node dist/src/index.js run",
+    "doctor": "tsx src/index.ts doctor",
+    "service:install": "node scripts/service.mjs install",
+    "service:uninstall": "node scripts/service.mjs uninstall",
+    "publish:latest": "bash ./publish-latest.sh",
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.plugin.json",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "build:plugin": "toc-plugin build --entry plugin/index.tsx",
+    "dev:plugin": "toc-plugin build --entry plugin/index.tsx --no-minify --watch",
+    "validate:plugin": "toc-plugin validate"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "zod": "^4.1.12"
+  },
+  "devDependencies": {
+    "@toc-starter/plugin-sdk": "file:../echo_web/packages/plugin-sdk",
+    "@types/node": "^22.15.0",
+    "@types/react": "18.3.12",
+    "tsx": "^4.20.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.2.0"
+  },
+  "license": "MIT",
+  "tocPlugin": {
+    "id": "echo.device-agent",
+    "displayName": "设备代理",
+    "description": "让这台电脑接收任务链派发的任务：连接本机 toc-ocra 服务，一键绑定到当前服务器，查看在线状态和本机 CLI。",
+    "publisher": "Echo",
+    "apiVersion": "1.x",
+    "platforms": [
+      "desktop"
+    ],
+    "icon": "./assets/icon.svg",
+    "entries": {
+      "renderer": "./dist/plugin/renderer.js",
+      "style": "./dist/plugin/renderer.css"
+    },
+    "locales": {
+      "en": "./locales/en.json",
+      "zh-CN": "./locales/zh-CN.json"
+    },
+    "permissions": [
+      "storage:plugin",
+      "secureStorage:plugin",
+      "notifications:publish",
+      "api:user"
+    ],
+    "contributes": {
+      "navigation": [
+        {
+          "id": "agent.nav",
+          "title": "设备代理",
+          "titleKey": "nav.title",
+          "path": "/plugins/device-agent",
+          "order": 30
+        }
+      ],
+      "routes": [
+        {
+          "id": "agent.home",
+          "path": "/plugins/device-agent"
+        }
+      ]
+    }
+  }
+}

package/scripts/service.mjs

@@ -0,0 +1,174 @@
+#!/usr/bin/env node
+import { existsSync } from 'node:fs'
+import { chmod, mkdir, unlink, writeFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { spawnSync } from 'node:child_process'
+
+const SERVICE_NAME = 'toc-ocra'
+const LAUNCHD_LABEL = 'top.stormapex.toc-ocra'
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const agentEntry = join(root, 'dist', 'src', 'index.js')
+const action = process.argv[2]
+const configPath = resolve(readOption('--config') ?? defaultConfigPath())
+
+if (action !== 'install' && action !== 'uninstall') usage()
+if (action === 'install' && !existsSync(agentEntry)) fail('Build output is missing. Run npm run build first.')
+// The service may start unenrolled: it then waits to be paired from the plugin.
+
+if (process.platform === 'darwin') await manageLaunchd(action)
+else if (process.platform === 'linux') await manageSystemd(action)
+else if (process.platform === 'win32') await manageWindowsTask(action)
+else fail(`Unsupported platform: ${process.platform}`)
+
+function readOption(name) {
+  const index = process.argv.indexOf(name)
+  return index >= 0 ? process.argv[index + 1] : undefined
+}
+
+function defaultDataDir() {
+  if (process.platform === 'darwin') return join(homedir(), 'Library', 'Application Support', SERVICE_NAME)
+  if (process.platform === 'win32') return join(process.env.APPDATA ?? homedir(), SERVICE_NAME)
+  return join(process.env.XDG_STATE_HOME ?? join(homedir(), '.local', 'state'), SERVICE_NAME)
+}
+
+function defaultConfigPath() {
+  return join(defaultDataDir(), 'config.json')
+}
+
+async function manageLaunchd(mode) {
+  const target = join(homedir(), 'Library', 'LaunchAgents', `${LAUNCHD_LABEL}.plist`)
+  const domain = `gui/${process.getuid()}`
+  if (mode === 'uninstall') {
+    command('launchctl', ['bootout', domain, target], true)
+    await unlink(target).catch(ignoreMissing)
+    process.stdout.write(`Removed ${target}\n`)
+    return
+  }
+
+  const logDir = join(defaultDataDir(), 'logs')
+  const path = servicePath()
+  await mkdir(dirname(target), { recursive: true })
+  await mkdir(logDir, { recursive: true, mode: 0o700 })
+  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>Label</key><string>${LAUNCHD_LABEL}</string>
+  <key>ProgramArguments</key><array>
+    <string>${xml(process.execPath)}</string><string>${xml(agentEntry)}</string><string>run</string>
+  </array>
+  <key>EnvironmentVariables</key><dict>
+    <key>TOC_OCRA_CONFIG</key><string>${xml(configPath)}</string>
+    <key>HOME</key><string>${xml(homedir())}</string>
+    <key>SHELL</key><string>${xml(process.env.SHELL ?? '/bin/zsh')}</string>
+    <key>PATH</key><string>${xml(path)}</string>
+  </dict>
+  <key>RunAtLoad</key><true/><key>KeepAlive</key><true/>
+  <key>StandardOutPath</key><string>${xml(join(logDir, 'service.stdout.log'))}</string>
+  <key>StandardErrorPath</key><string>${xml(join(logDir, 'service.stderr.log'))}</string>
+</dict></plist>
+`
+  await writeFile(target, plist, { mode: 0o600 })
+  command('launchctl', ['bootout', domain, target], true)
+  command('launchctl', ['bootstrap', domain, target])
+  command('launchctl', ['enable', `${domain}/${LAUNCHD_LABEL}`])
+  command('launchctl', ['kickstart', '-k', `${domain}/${LAUNCHD_LABEL}`])
+  process.stdout.write(`Installed ${target}\n`)
+}
+
+async function manageSystemd(mode) {
+  const target = join(homedir(), '.config', 'systemd', 'user', `${SERVICE_NAME}.service`)
+  if (mode === 'uninstall') {
+    command('systemctl', ['--user', 'disable', '--now', SERVICE_NAME], true)
+    await unlink(target).catch(ignoreMissing)
+    command('systemctl', ['--user', 'daemon-reload'])
+    process.stdout.write(`Removed ${target}\n`)
+    return
+  }
+
+  await mkdir(dirname(target), { recursive: true })
+  const unit = `[Unit]
+Description=echo_cli_agent TaskMCP device agent
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+Environment=TOC_OCRA_CONFIG=${systemdQuote(configPath)}
+Environment=PATH=${systemdQuote(servicePath())}
+ExecStart=${systemdQuote(process.execPath)} ${systemdQuote(agentEntry)} run
+Restart=always
+RestartSec=3
+NoNewPrivileges=true
+
+[Install]
+WantedBy=default.target
+`
+  await writeFile(target, unit, { mode: 0o600 })
+  command('systemctl', ['--user', 'daemon-reload'])
+  command('systemctl', ['--user', 'enable', '--now', SERVICE_NAME])
+  process.stdout.write(`Installed ${target}\n`)
+}
+
+async function manageWindowsTask(mode) {
+  const launcher = join(defaultDataDir(), 'run-agent.cmd')
+  if (mode === 'uninstall') {
+    command('schtasks.exe', ['/Delete', '/F', '/TN', SERVICE_NAME], true)
+    await unlink(launcher).catch(ignoreMissing)
+    process.stdout.write(`Removed scheduled task ${SERVICE_NAME}\n`)
+    return
+  }
+
+  rejectCmdMetacharacters(configPath)
+  rejectCmdMetacharacters(process.execPath)
+  rejectCmdMetacharacters(agentEntry)
+  await mkdir(dirname(launcher), { recursive: true })
+  await writeFile(launcher, `@echo off\r\nset "TOC_OCRA_CONFIG=${configPath}"\r\n"${process.execPath}" "${agentEntry}" run\r\n`, { mode: 0o600 })
+  await chmod(launcher, 0o700).catch(() => undefined)
+  command('schtasks.exe', ['/Create', '/F', '/TN', SERVICE_NAME, '/SC', 'ONLOGON', '/RL', 'LIMITED', '/TR', `"${launcher}"`])
+  command('schtasks.exe', ['/Run', '/TN', SERVICE_NAME])
+  process.stdout.write(`Installed scheduled task ${SERVICE_NAME}\n`)
+}
+
+function command(executable, args, allowFailure = false) {
+  const result = spawnSync(executable, args, { stdio: 'inherit', shell: false })
+  if (!allowFailure && result.status !== 0) fail(`${executable} failed with exit code ${result.status ?? 'unknown'}`)
+}
+
+function xml(value) {
+  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('"', '&quot;')
+}
+
+function servicePath() {
+  const entries = [
+    dirname(process.execPath),
+    join(homedir(), '.local', 'bin'),
+    '/opt/homebrew/bin',
+    '/usr/local/bin',
+    process.env.PATH ?? ''
+  ]
+  return [...new Set(entries.flatMap((entry) => entry.split(':')).filter(Boolean))].join(':')
+}
+
+function systemdQuote(value) {
+  return `"${value.replaceAll('\\', '\\\\').replaceAll('"', '\\"').replaceAll('%', '%%')}"`
+}
+
+function rejectCmdMetacharacters(value) {
+  if (/[\r\n&|<>^]/.test(value)) fail('Windows service paths contain unsupported command characters')
+}
+
+function ignoreMissing(error) {
+  if (error?.code !== 'ENOENT') throw error
+}
+
+function usage() {
+  process.stderr.write('Usage: node scripts/service.mjs <install|uninstall> [--config /path/config.json]\n')
+  process.exit(2)
+}
+
+function fail(message) {
+  process.stderr.write(`${message}\n`)
+  process.exit(1)
+}