vcorp-chrome 2.0.0 → 2.2.0

package/native-host/host.js

@@ -6,14 +6,18 @@
 //   run：把扩展审过的参数再审一遍，交给 agent-desktop，回它的信封
 // 扩展那一侧已经过了 desktop-policy.js；这里再审是因为扩展本身也可能出错，
 // 而真实输入（--headed）、截图、剪贴板读取这些不该因为一处疏漏就对云端打开。
+//
+// 完全模式（用户在本机 `vcorp-chrome desktop full on`）：run 不再查白名单，
+// 另有 shell / file 两种操作（见 full.js）；大回包分页，扩展用 page 取回。
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { runAgentDesktop, findBinary } from '../src/lib/desktop.js';
-import { machineId, desktopDeviceId } from '../src/lib/paths.js';
+import { machineId, desktopDeviceId, fullMode } from '../src/lib/paths.js';
 import {
   DESKTOP_CMDS, REF_RE, filterWindows, checkObserved, recordOf, isBrowserMainTitle,
 } from '../extension/desktop-policy.js';
 import { VERSION } from '../src/lib/version.js';
+import { runShell, fileOp, pageOut, pageRead } from './full.js';
 
 // Chrome 收宿主回包的上限是 1MB，留出 JSON 外壳的余量
 const REPLY_MAX = 1000 * 1000;
@@ -69,8 +73,17 @@ function readMessage() {
   });
 }
 
-function reply(obj) {
+// 完全模式下 argv 只查形状：是字符串数组、没有 NUL
+export function fullArgvOk(argv) {
+  return Array.isArray(argv) && argv.length > 0 && argv.length <= 200
+    && argv.every((a) => typeof a === 'string' && a.length <= 100000 && !a.includes('\0'));
+}
+
+function reply(obj, { paging = false } = {}) {
   let body = Buffer.from(JSON.stringify(obj), 'utf8');
+  if (body.length > REPLY_MAX && paging) {
+    try { body = Buffer.from(JSON.stringify(pageOut(body)), 'utf8'); } catch { /* 落不了盘就照旧报太大 */ }
+  }
   if (body.length > REPLY_MAX) {
     body = Buffer.from(JSON.stringify({
       ok: false,
@@ -89,17 +102,37 @@ function reply(obj) {
 
 async function main() {
   const msg = await readMessage();
+  const full = fullMode();
   if (msg?.op === 'hello') {
     const machine = machineId();
     const probe = await runAgentDesktop(['list-apps'], { timeoutMs: 15000 });
     return reply({
       ok: true,
-      device: { id: desktopDeviceId(machine), kind: 'desktop', machine, caps: { platform: process.platform, version: VERSION } },
+      device: { id: desktopDeviceId(machine), kind: 'desktop', machine, caps: { platform: process.platform, version: VERSION, full } },
       ready: !!probe.ok,
+      full,
       ...(probe.ok ? {} : { error: probe.error }),
       binary: findBinary(),
     });
   }
+  // 分页回包的后续段：不管完全模式，取的只是本宿主刚写下的那份
+  if (msg?.op === 'page') return reply(pageRead(msg.id, msg.offset));
+  // 扩展每条桌面命令前问一次：开关只在这台电脑上，扩展不缓存它
+  if (msg?.op === 'mode') return reply({ ok: true, full });
+  const offFull = () => reply(denied('这台电脑没有打开桌面完全模式。请用户在这台电脑的终端运行 npx vcorp-chrome desktop full on'));
+  if (msg?.op === 'shell') {
+    if (!full) return offFull();
+    return reply(await runShell(msg.params || {}), { paging: true });
+  }
+  if (msg?.op === 'file') {
+    if (!full) return offFull();
+    return reply(await fileOp(msg.params || {}), { paging: true });
+  }
+  if (msg?.op === 'run' && full) {
+    if (!fullArgvOk(msg.argv)) return reply(denied('argv 不合法'));
+    const timeoutMs = Math.min(Math.max(Number(msg.timeoutMs) || 30000, 1000), 7 * 60 * 1000);
+    return reply(await runAgentDesktop(msg.argv, { timeoutMs }), { paging: true });
+  }
   if (msg?.op === 'run') {
     const why = recheck(msg.argv);
     if (why) return reply(denied(why));

package/package.json

@@ -1,53 +1,53 @@
-{
-  "name": "vcorp-chrome",
-  "version": "2.0.0",
-  "description": "让任何 AI agent 操控你自己的 Chrome——带着全部登录态。MCP + Chrome 扩展，Claude Code / Codex / Cursor / Gemini CLI 通用。",
-  "type": "module",
-  "bin": {
-    "vcorp-chrome": "src/cli.js"
-  },
-  "files": [
-    "src",
-    "extension",
-    "native-host",
-    "docs",
-    "README.md"
-  ],
-  "engines": {
-    "node": ">=20"
-  },
-  "scripts": {
-    "mcp": "node src/cli.js mcp",
-    "bridge": "node src/cli.js bridge --foreground",
-    "doctor": "node src/cli.js doctor",
-    "build:loads": "node scripts/build-loads.mjs",
-    "test": "node --test test/protocol.test.js test/mcp.test.js test/fetch-pages.test.js test/liveness.test.js test/redact.test.js test/audit-redact.test.js test/learnings.test.js test/risk.test.js test/identity.test.js test/host.test.js test/presence.test.js test/act-script.test.js test/multi-instance.test.js test/compat.test.js test/cloud-policy.test.js test/loads.test.js test/desktop-policy.test.js",
-    "test:live": "node --test test/scenarios.test.js"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.22.0",
-    "ws": "^8.18.3"
-  },
-  "keywords": [
-    "mcp",
-    "chrome",
-    "browser-automation",
-    "claude-code",
-    "codex",
-    "cursor",
-    "ai-agent"
-  ],
-  "license": "MIT",
-  "author": "Wizard",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/wizd/huashu-chrome.git"
-  },
-  "devDependencies": {
-    "esbuild": "^0.24.2",
-    "jszip": "^3.10.1"
-  },
-  "optionalDependencies": {
-    "agent-desktop": "1.0.2"
-  }
-}
+{
+  "name": "vcorp-chrome",
+  "version": "2.2.0",
+  "description": "让任何 AI agent 操控你自己的 Chrome——带着全部登录态。MCP + Chrome 扩展，Claude Code / Codex / Cursor / Gemini CLI 通用。",
+  "type": "module",
+  "bin": {
+    "vcorp-chrome": "src/cli.js"
+  },
+  "files": [
+    "src",
+    "extension",
+    "native-host",
+    "docs",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "mcp": "node src/cli.js mcp",
+    "bridge": "node src/cli.js bridge --foreground",
+    "doctor": "node src/cli.js doctor",
+    "build:loads": "node scripts/build-loads.mjs",
+    "test": "node --test test/protocol.test.js test/mcp.test.js test/fetch-pages.test.js test/liveness.test.js test/redact.test.js test/audit-redact.test.js test/learnings.test.js test/risk.test.js test/identity.test.js test/host.test.js test/presence.test.js test/act-script.test.js test/multi-instance.test.js test/compat.test.js test/cloud-policy.test.js test/loads.test.js test/desktop-policy.test.js test/desktop-full.test.js",
+    "test:live": "node --test test/scenarios.test.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.22.0",
+    "ws": "^8.18.3"
+  },
+  "keywords": [
+    "mcp",
+    "chrome",
+    "browser-automation",
+    "claude-code",
+    "codex",
+    "cursor",
+    "ai-agent"
+  ],
+  "license": "MIT",
+  "author": "Wizard",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wizd/huashu-chrome.git"
+  },
+  "devDependencies": {
+    "esbuild": "^0.24.2",
+    "jszip": "^3.10.1"
+  },
+  "optionalDependencies": {
+    "agent-desktop": "1.0.2"
+  }
+}

package/src/cli.js

@@ -117,9 +117,23 @@ switch (cmd) {
       const r = nat.uninstall();
       console.log(r.removed.length ? `已移除：\n  ${r.removed.join('\n  ')}` : '本来就没有登记。');
     } else if (sub === 'status') {
+      const { fullMode } = await import('./lib/paths.js');
       for (const l of (await nat.status()).lines) console.log(`  ${l}`);
+      console.log(`  完全模式：${fullMode() ? '开（云端任务可以跑命令、读写文件、用全部桌面命令）' : '关'}`);
+    } else if (sub === 'full') {
+      const { setFullMode, FULL_FILE } = await import('./lib/paths.js');
+      const v = process.argv[4];
+      if (v !== 'on' && v !== 'off') {
+        console.log('用法：vcorp-chrome desktop full on | off');
+        break;
+      }
+      if (setFullMode(v === 'on')) {
+        console.log(`已打开桌面完全模式（${FULL_FILE}）。`);
+        console.log('配对服务器上的任务现在可以在这台电脑上跑任意命令、读写任意文件、操作任何应用。');
+        console.log('关掉：npx vcorp-chrome desktop full off');
+      } else console.log('已关闭桌面完全模式。');
     } else {
-      console.log('用法：vcorp-chrome desktop install | uninstall | status');
+      console.log('用法：vcorp-chrome desktop install | uninstall | status | full on|off');
     }
     break;
   }
@@ -156,6 +170,7 @@ switch (cmd) {
   vcorp-chrome bridge --foreground   前台跑桥（调试用）
   vcorp-chrome install --dry-run     只看会改哪些配置，不写
   vcorp-chrome desktop install|uninstall|status   让云端任务也能操作桌面应用（登记原生消息宿主）
+  vcorp-chrome desktop full on|off   完全模式：云端任务能跑命令、读写文件、用全部桌面命令
 
 配置目录 ${HOME}`);
 }

package/src/lib/paths.js

@@ -13,6 +13,21 @@ export const LOG_FILE = path.join(HOME, 'bridge.log');
 
 export const MACHINE_FILE = path.join(HOME, 'machine.json');
 
+// 桌面完全模式的开关。只在这台电脑上用 `vcorp-chrome desktop full on|off` 改，
+// 原生宿主每条命令现读一次——服务器、网页、扩展都写不到这个文件。
+export const FULL_FILE = path.join(HOME, 'desktop-full.json');
+
+export function fullMode() {
+  try { return JSON.parse(fs.readFileSync(FULL_FILE, 'utf8')).on === true; } catch { return false; }
+}
+
+export function setFullMode(on) {
+  ensureHome();
+  if (!on) { fs.rmSync(FULL_FILE, { force: true }); return false; }
+  fs.writeFileSync(FULL_FILE, JSON.stringify({ on: true, at: new Date().toISOString() }, null, 2), { mode: 0o600 });
+  return true;
+}
+
 export const DEFAULT_PORT = 8899;
 
 // 这台电脑（这个系统用户）的身份。本机 MCP 和原生宿主（native-host/）读同一个文件，