ysagc-agent 0.2.0 → 0.4.0

package/src/config.js

@@ -1,94 +0,0 @@
-/**
- * ysagc-agent 配置加载（agent.json）
- * 位置：~/.ysagc-agent/agent.json
- * 非法 JSON 自动备份恢复（agent.json.bak-<时间戳>）
- */
-'use strict';
-
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-
-const CONFIG_DIR = process.env.YSAGC_AGENT_HOME || path.join(os.homedir(), '.ysagc-agent');
-const CONFIG_PATH = path.join(CONFIG_DIR, 'agent.json');
-
-const DEFAULTS = {
-  port: 37890,
-  allowedRoots: [],
-  deviceTokenWhitelist: [],
-  trashEnabled: true,
-  trashRetentionDays: 7,
-  autoApprovePaths: true,
-  enableTerminal: true,
-  terminalMaxSessions: 3,
-  terminalIdleTimeoutMin: 30,
-  backendUrl: 'https://chat.ysagc.top',
-  logLevel: 'info',
-  // 终端权限：ask（每次询问）/ allow（始终允许）/ deny（拒绝）
-  terminalPermission: 'ask',
-  // 协议版本（与后端握手比对）
-  protocolVersion: 2,
-  agentVersion: null,
-  // ---- 免配对码直连（v0.2.0 起）----
-  // 允许的浏览器 Origin 列表（精确匹配 origin，如 https://chat.ysagc.top）。
-  // 为空时自动信任：backendUrl 对应的 origin + http://localhost / http://127.0.0.1 及其任意端口。
-  // 该列表之外的 Origin 发起的 WebSocket / 本地 HTTP 请求将被拒绝（防恶意网页操控本机代理）。
-  originWhitelist: [],
-};
-
-function ensureDir() {
-  fs.mkdirSync(CONFIG_DIR, { recursive: true });
-}
-
-function backupCorruptConfig() {
-  if (!fs.existsSync(CONFIG_PATH)) return;
-  const bak = path.join(CONFIG_DIR, `agent.json.bak-${Date.now()}`);
-  try {
-    fs.copyFileSync(CONFIG_PATH, bak);
-    console.error(`[config] agent.json 解析失败，已备份到 ${bak}，恢复默认配置`);
-  } catch {
-    /* 备份失败不阻塞 */
-  }
-}
-
-function loadConfig() {
-  ensureDir();
-  let config = {};
-  if (fs.existsSync(CONFIG_PATH)) {
-    try {
-      const raw = fs.readFileSync(CONFIG_PATH, 'utf8');
-      const parsed = JSON.parse(raw);
-      if (parsed && typeof parsed === 'object') config = parsed;
-      else backupCorruptConfig();
-    } catch {
-      backupCorruptConfig();
-    }
-  }
-  const merged = { ...DEFAULTS, ...config };
-  // 写入规范化后的配置（含缺失字段默认值），后续更新配置也走 saveConfig
-  saveConfig(merged, { silent: true });
-  return merged;
-}
-
-function saveConfig(patch, opts = {}) {
-  ensureDir();
-  const current = loadConfigRaw();
-  const next = { ...DEFAULTS, ...current, ...patch };
-  const tmp = CONFIG_PATH + '.tmp';
-  fs.writeFileSync(tmp, JSON.stringify(next, null, 2));
-  fs.renameSync(tmp, CONFIG_PATH); // 原子替换，防损坏
-  if (!opts.silent) console.log(`[config] 配置已保存: ${CONFIG_PATH}`);
-  return next;
-}
-
-function loadConfigRaw() {
-  try {
-    if (!fs.existsSync(CONFIG_PATH)) return {};
-    const parsed = JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf8'));
-    return parsed && typeof parsed === 'object' ? parsed : {};
-  } catch {
-    return {};
-  }
-}
-
-module.exports = { CONFIG_DIR, CONFIG_PATH, DEFAULTS, loadConfig, saveConfig };

package/src/http-fs.js

@@ -1,178 +0,0 @@
-/**
- * Agent 本地 HTTP：上传/下载（T-M1-05）
- * - POST /api/fs/upload?token=&path=&overwrite=1   分片上传（X-Offset / X-Total 头）
- * - GET  /api/fs/download?token=&path=            单文件下载（流式）
- * - GET  /api/fs/zip?token=&paths=a,b,c           zip 打包下载（yazl 流式）
- * - 鉴权：deviceToken sha256 与白名单比对；路径经沙箱校验（allowlist）
- * - 分片：临时文件 append，达到 X-Total 后原子 rename；覆盖需 overwrite=1（前端先 409 确认）
- */
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-const crypto = require('crypto');
-const url = require('url');
-
-const { isOriginTrusted } = require('./origin');
-
-const MAX_UPLOAD_SIZE = 512 * 1024 * 1024; // 512MB
-const MAX_ZIP_FILES = 2000;
-
-function sha256(s) {
-  return crypto.createHash('sha256').update(String(s)).digest('hex');
-}
-
-function createHttpFsHandlers(ctxRef) {
-  const sandbox = () => ctxRef().sandbox;
-  const cfg = () => ctxRef().config;
-
-  function checkToken(token, req) {
-    // 免配对码直连（v0.2.0）：Origin 受信任的浏览器请求直接放行
-    if (req) {
-      const origin = req.headers && req.headers.origin;
-      if (origin && isOriginTrusted(origin, cfg())) return true;
-    }
-    if (!token) return false;
-    return (cfg().deviceTokenWhitelist || []).includes(sha256(token));
-  }
-
-  function sendJson(res, status, obj) {
-    res.writeHead(status, { 'Content-Type': 'application/json' });
-    res.end(JSON.stringify(obj));
-  }
-
-  /** 上传：分片追加到临时文件，最后一片 rename 落盘 */
-  function handleUpload(req, res, query) {
-    const token = query.token;
-    if (!checkToken(token, req)) return sendJson(res, 401, { code: 'E_AUTH_FAILED', msg: '未授权' });
-    const relPath = String(query.path || '');
-    if (!relPath) return sendJson(res, 400, { code: 'E_VALIDATION', msg: '缺少 path' });
-    let r;
-    try {
-      r = sandbox().resolve(relPath, '');
-    } catch (e) {
-      return sendJson(res, 403, { code: 'E_PATH_ESCAPE', msg: e.message || '路径越界' });
-    }
-    if (r.rel === '' || r.rel === '.') return sendJson(res, 400, { code: 'E_VALIDATION', msg: '不能上传到项目根' });
-
-    const offset = Math.max(0, Number(req.headers['x-offset']) || 0);
-    const total = Math.max(0, Number(req.headers['x-total']) || 0);
-    if (total > MAX_UPLOAD_SIZE) return sendJson(res, 413, { code: 'E_FILE_TOO_LARGE', msg: '文件超过 512MB 限制' });
-    const overwrite = String(query.overwrite || '') === '1';
-
-    // 目标已存在 → 409 需确认
-    if (offset === 0 && !overwrite && fs.existsSync(r.abs)) {
-      return sendJson(res, 409, { code: 'E_PATH_EXISTS', msg: '目标文件已存在，请确认覆盖', needConfirm: true });
-    }
-
-    const tmpPath = path.join(r.root, `.upload-tmp-${sha256(relPath).slice(0, 16)}`);
-    try {
-      // 首片：若需覆盖且临时文件残留则清理
-      if (offset === 0 && fs.existsSync(tmpPath)) fs.rmSync(tmpPath);
-      const fd = fs.openSync(tmpPath, offset === 0 ? 'w' : 'a');
-      const chunks = [];
-      req.on('data', (c) => chunks.push(c));
-      req.on('end', () => {
-        const buf = Buffer.concat(chunks);
-        fs.writeSync(fd, buf, 0, buf.length, offset);
-        fs.closeSync(fd);
-        const curSize = offset + buf.length;
-        if (total > 0 && curSize >= total) {
-          // 完成：原子 rename
-          fs.renameSync(tmpPath, r.abs);
-          return sendJson(res, 200, { code: 0, data: { ok: true, size: curSize, relPath: r.rel }, msg: 'success' });
-        }
-        return sendJson(res, 200, { code: 0, data: { ok: true, received: curSize, total }, msg: 'chunk' });
-      });
-      req.on('error', () => {
-        try { fs.closeSync(fd); } catch { /* ignore */ }
-        sendJson(res, 500, { code: 'E_INTERNAL', msg: '上传中断' });
-      });
-    } catch (e) {
-      return sendJson(res, 500, { code: 'E_INTERNAL', msg: e.message });
-    }
-  }
-
-  /** 单文件下载（流式） */
-  function handleDownload(req, res, query) {
-    const token = query.token;
-    if (!checkToken(token, req)) return sendJson(res, 401, { code: 'E_AUTH_FAILED', msg: '未授权' });
-    const relPath = String(query.path || '');
-    let r;
-    try {
-      r = sandbox().resolve(relPath, '');
-    } catch (e) {
-      return sendJson(res, 403, { code: 'E_PATH_ESCAPE', msg: e.message || '路径越界' });
-    }
-    if (!fs.existsSync(r.abs) || !fs.statSync(r.abs).isFile()) {
-      return sendJson(res, 404, { code: 'E_PATH_NOT_FOUND', msg: '文件不存在' });
-    }
-    res.writeHead(200, {
-      'Content-Type': 'application/octet-stream',
-      'Content-Disposition': `attachment; filename="${encodeURIComponent(path.basename(r.abs))}"`,
-      'Content-Length': fs.statSync(r.abs).size,
-    });
-    fs.createReadStream(r.abs).pipe(res);
-  }
-
-  /** zip 打包下载（yazl 流式） */
-  function handleZip(req, res, query) {
-    const token = query.token;
-    if (!checkToken(token, req)) return sendJson(res, 401, { code: 'E_AUTH_FAILED', msg: '未授权' });
-    const paths = String(query.paths || '')
-      .split(',')
-      .map((p) => p.trim())
-      .filter(Boolean);
-    if (paths.length === 0 || paths.length > MAX_ZIP_FILES) {
-      return sendJson(res, 400, { code: 'E_VALIDATION', msg: 'paths 数量需在 1-2000 之间' });
-    }
-    const yazl = require('yazl');
-    const zipfile = new yazl.ZipFile();
-    let added = 0;
-    for (const rel of paths) {
-      let r;
-      try {
-        r = sandbox().resolve(rel, '');
-      } catch {
-        return sendJson(res, 403, { code: 'E_PATH_ESCAPE', msg: '路径越界: ' + rel });
-      }
-      if (!fs.existsSync(r.abs)) continue;
-      const st = fs.statSync(r.abs);
-      if (st.isDirectory()) {
-        // 递归目录
-        const walk = (dir, relBase) => {
-          let entries;
-          try {
-            entries = fs.readdirSync(dir, { withFileTypes: true });
-          } catch {
-            return;
-          }
-          for (const e of entries) {
-            const abs = path.join(dir, e.name);
-            const relP = relBase ? `${relBase}/${e.name}` : e.name;
-            if (e.isDirectory()) walk(abs, relP);
-            else if (e.isFile()) {
-              zipfile.addFile(abs, relP);
-              added++;
-            }
-          }
-        };
-        walk(r.abs, path.basename(r.abs));
-      } else if (st.isFile()) {
-        zipfile.addFile(r.abs, path.basename(r.abs));
-        added++;
-      }
-    }
-    if (added === 0) return sendJson(res, 404, { code: 'E_PATH_NOT_FOUND', msg: '没有可打包的文件' });
-    res.writeHead(200, {
-      'Content-Type': 'application/zip',
-      'Content-Disposition': `attachment; filename="workspace-${Date.now()}.zip"`,
-    });
-    zipfile.outputStream.pipe(res);
-    zipfile.end();
-  }
-
-  return { handleUpload, handleDownload, handleZip };
-}
-
-module.exports = { createHttpFsHandlers };