ChatComment 0.1.0__tar.gz

chatcomment-0.1.0/AGENTS.md

@@ -0,0 +1,7 @@
+# Agent Notes
+
+- Preserve unrelated changes. Keep Python capabilities importable and CLI thin.
+- Use ChatStyle 0.2 / ChatEnv 0.2 as the CLI baseline; expose version and both tree options.
+- Keep README, CHANGELOG, docs and tests consistent with shipped behavior.
+- Release by PR, successful checks on the exact commit, merge, tag the merged main commit, then Trusted Publisher/OIDC. Never use long-lived PyPI tokens or publish a placeholder.
+- Never commit credentials, sessions, SQLite data or machine-specific private configuration.

chatcomment-0.1.0/CHANGELOG.md

@@ -0,0 +1,8 @@
+# Changelog
+
+## 0.1.0
+
+- Python/SQLite 留言服务、无依赖 JS 组件及同源管理界面。
+- 站点来源和页面白名单，匿名与字段设置，服务器端校验、审核、软删除、JSON 导出与 SQLite 在线备份。
+- 私有站点可信网关模式；管理 token 留在服务器。
+- 独立留言板与嵌入组件共用数据；服务端 owner / reader 权限与设置入口显示。

chatcomment-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ChatArch
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

chatcomment-0.1.0/MANIFEST.in

@@ -0,0 +1,4 @@
+include CHANGELOG.md AGENTS.md
+recursive-include docs *.md
+recursive-include tests *.py
+recursive-include src/chatcomment/static *

chatcomment-0.1.0/PKG-INFO

@@ -0,0 +1,46 @@
+Metadata-Version: 2.4
+Name: ChatComment
+Version: 0.1.0
+Summary: Embeddable comments with a Python server, SQLite storage and a small JavaScript widget.
+Author: ChatArch
+License-Expression: MIT
+Project-URL: Repository, https://github.com/ChatArch/ChatComment
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click<9,>=8
+Requires-Dist: chatstyle<0.3.0,>=0.2.0
+Requires-Dist: chatenv<0.3.0,>=0.2.11
+Provides-Extra: dev
+Requires-Dist: build; extra == "dev"
+Requires-Dist: pytest>=8; extra == "dev"
+Requires-Dist: twine; extra == "dev"
+Dynamic: license-file
+
+# ChatComment
+
+Python 服务、SQLite 数据和一个无依赖的 JavaScript 留言组件。支持多站点、逐页隔离、匿名开关、昵称/邮箱/网址必填设置、审核与软删除。邮箱只在管理界面出现。默认私有站点由可信网关保护；可显式注册公开站点。
+
+```sh
+python -m pip install .
+chatcomment --version
+chatcomment --tree
+chatcomment site register personal-blog --origin https://blog.example.com --page /post/one --public
+chatcomment serve --token-file ~/.chatarch/chatcomment/admin-token
+```
+
+`--token-file` 必须指向仅部署者可读的现有文件（建议随机 32 字节以上）；命令不生成或打印密钥。默认数据库 `~/.chatarch/chatcomment/comments.sqlite3`，监听 `127.0.0.1:10196`。公网接入必须使用 HTTPS 反向代理；私有站点的 API 要由网关验证登录后附加 Bearer token，不能把该 token 交给浏览器。管理入口也必须经这种登录网关，或使用支持 Bearer token 的管理客户端。
+
+```html
+<div id="comments"></div>
+<script src="https://comments.example.com/widget.js" defer
+  data-chatcomment data-target="#comments"
+  data-api="https://comments.example.com" data-site="personal-blog"
+  data-page="/post/one"></script>
+```
+
+组件自动读取设置并只显示允许的字段；必填校验由服务器执行。默认不记住访客信息、不加载第三方头像、不渲染留言 HTML。公开模式的匿名留言不代表拥有可信实名；关闭匿名时要求可信网关提供已验证的作者身份。
+
+API、网关接入、备份与恢复见 [docs/api.md](docs/api.md)、[docs/deployment.md](docs/deployment.md)。本包不自动开放防火墙或注册 DNS，也不包含云服务凭据。
+
+独立留言板为 `/board?site=personal-blog&page=%2Fpost%2Fone`，与嵌入表单读写同一留言流。设置按钮只在服务器返回 `can_manage=true` 时显示。网关为普通成员设置 `X-ChatComment-Role: reader`，仅经服务端验证的 owner 使用 `admin`；管理接口另行验证权限。公开浏览器不能靠昵称或伪造角色 header 获得权限，因为缺少服务器 Bearer token。

chatcomment-0.1.0/README.md

@@ -0,0 +1,27 @@
+# ChatComment
+
+Python 服务、SQLite 数据和一个无依赖的 JavaScript 留言组件。支持多站点、逐页隔离、匿名开关、昵称/邮箱/网址必填设置、审核与软删除。邮箱只在管理界面出现。默认私有站点由可信网关保护；可显式注册公开站点。
+
+```sh
+python -m pip install .
+chatcomment --version
+chatcomment --tree
+chatcomment site register personal-blog --origin https://blog.example.com --page /post/one --public
+chatcomment serve --token-file ~/.chatarch/chatcomment/admin-token
+```
+
+`--token-file` 必须指向仅部署者可读的现有文件（建议随机 32 字节以上）；命令不生成或打印密钥。默认数据库 `~/.chatarch/chatcomment/comments.sqlite3`，监听 `127.0.0.1:10196`。公网接入必须使用 HTTPS 反向代理；私有站点的 API 要由网关验证登录后附加 Bearer token，不能把该 token 交给浏览器。管理入口也必须经这种登录网关，或使用支持 Bearer token 的管理客户端。
+
+```html
+<div id="comments"></div>
+<script src="https://comments.example.com/widget.js" defer
+  data-chatcomment data-target="#comments"
+  data-api="https://comments.example.com" data-site="personal-blog"
+  data-page="/post/one"></script>
+```
+
+组件自动读取设置并只显示允许的字段；必填校验由服务器执行。默认不记住访客信息、不加载第三方头像、不渲染留言 HTML。公开模式的匿名留言不代表拥有可信实名；关闭匿名时要求可信网关提供已验证的作者身份。
+
+API、网关接入、备份与恢复见 [docs/api.md](docs/api.md)、[docs/deployment.md](docs/deployment.md)。本包不自动开放防火墙或注册 DNS，也不包含云服务凭据。
+
+独立留言板为 `/board?site=personal-blog&page=%2Fpost%2Fone`，与嵌入表单读写同一留言流。设置按钮只在服务器返回 `can_manage=true` 时显示。网关为普通成员设置 `X-ChatComment-Role: reader`，仅经服务端验证的 owner 使用 `admin`；管理接口另行验证权限。公开浏览器不能靠昵称或伪造角色 header 获得权限，因为缺少服务器 Bearer token。

chatcomment-0.1.0/docs/api.md

@@ -0,0 +1,34 @@
+# Commands and APIs
+
+`chatcomment --help`, `--version`, `--tree`, `--tree-brief` describe the installed CLI. Commands: `serve`, `site register`, `site list`, `backup`. Python API: `Store.register`, `site`, `sites`, `configure`, `create`, `comments`, `moderate`, `backup`; `server.make_handler` and `server.serve` expose the same HTTP service.
+
+All request bodies are JSON (maximum 32 KiB). Site IDs are explicit, origins are exact and page paths must be pre-registered; query strings and hashes do not create new comment streams.
+
+| Method | Path | Behavior |
+| --- | --- | --- |
+| GET | `/health` | Version and service name |
+| GET | `/widget.js`, `/widget.css` | Bundle-local widget assets |
+| GET | `/api/sites/{id}/config` | Public field settings |
+| GET | `/api/sites/{id}/comments?page=/path/` | Approved comments, never emails |
+| POST | `/api/sites/{id}/comments` | `{page,content,nickname?,email?,website?}` |
+| GET | `/admin` | Gateway-protected management UI |
+| GET | `/board?site={id}&page=/path/` | Standalone widget host; apply the private-site gateway to this HTML too |
+| GET/POST | `/api/admin/sites` | List/register sites |
+| POST | `/api/sites/{id}/settings` | Complete settings object |
+| GET | `/api/sites/{id}/admin?page=/path/` | All states with private fields |
+| POST | `/api/sites/{id}/moderate` | `{id,status:approved|pending|deleted}` |
+| GET | `/api/sites/{id}/export?page=/path/` | Admin data, paginated |
+
+List responses contain `comments` and `next_cursor`. Pass `before=next_cursor` to continue; limit defaults to 50 and is capped at 100. Export UI retrieves every page. Deletion is a reversible state change. Anonymous identity is unverified; no IP addresses, cookies or user-agent fingerprints are stored in the database.
+
+Private sites and all admin calls require `Authorization: Bearer <server token>`. A trusted gateway must remove untrusted copies of that header and `X-ChatComment-Identity`, check its own session and write CSRF, and inject them server-side. `X-ChatComment-Identity` only enables authenticated submission when the Bearer token is valid. It is never included in public records. Public submissions require an allowed `Origin` plus `X-ChatComment-Request: 1`; ten requests/minute/client address per process. CORS reflects only registered origins and does not allow browser credentials. A proxy should additionally apply a deployment-appropriate limit and pass the real client safely if public sites need independent limits.
+
+Gateway members use `X-ChatComment-Role: reader`; they can read a private site and submit with a verified identity but cannot administer. Only owner requests receive `admin`. A direct bearer API client defaults to admin for compatibility. `/config` returns `can_manage` from this trusted role, and the widget shows the settings link accordingly. Private HTML, site read permissions and site-specific authorization remain the gateway's responsibility.
+
+Settings example:
+
+```json
+{"allow_anonymous":true,"moderation":false,"fields":{"nickname":"optional","email":"optional","website":"hidden"}}
+```
+
+Hidden fields are discarded. Email/URL formats, required fields and 1–5000 character plain text content are checked server-side. Browser output uses `textContent`; no comment HTML or third-party avatars are executed.

chatcomment-0.1.0/docs/deployment.md

@@ -0,0 +1,15 @@
+# Deployment, backup and rollback
+
+Install the built wheel into a versioned virtual environment. Run the service as an unprivileged systemd user with `UMask=0077`, automatic restart, a dedicated persistent database directory, and a token file outside source control. Bind to loopback and expose it through an HTTPS gateway. Never put the token in the widget, a URL, static HTML or browser storage.
+
+For a private site, apply the existing site login to **every** API and asset request under the integration prefix. For writes, validate the existing session's CSRF token before proxying. The widget supports `data-csrf-endpoint="/api/session"`, which fetches a native `csrf_token` just before a write; it does not store credentials. The management UI also uses this native endpoint. Other session systems can provide this minimal same-origin contract or host a custom admin client.
+
+The gateway maps its prefix to backend `/`, injects the Bearer token and a verified identity marker, and relays only required response headers. Block unexpected methods and cap body size. A separate public site may explicitly use `site register --public`, but the private site setting must remain private. Site IDs are not secrets and never replace access control.
+
+Consistent live backup:
+
+```sh
+chatcomment --db ~/.chatarch/chatcomment/comments.sqlite3 backup ~/backups/chatcomment-2026-10-20.sqlite3
+```
+
+Do not copy just the main SQLite file while WAL writes are active. Store backups with mode 0600 and copy them to an approved protected backup location. Restore: stop the service, retain the old database and its WAL/SHM files together, put the verified backup at the configured path, then restart and read a known comment. A software rollback points the unit at the previous virtual environment and retains the database; 0.1.0 performs only additive schema creation. Do not restore an old database merely to roll back code.

chatcomment-0.1.0/pyproject.toml

@@ -0,0 +1,31 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "ChatComment"
+version = "0.1.0"
+description = "Embeddable comments with a Python server, SQLite storage and a small JavaScript widget."
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT"
+authors = [{name = "ChatArch"}]
+dependencies = ["click>=8,<9", "chatstyle>=0.2.0,<0.3.0", "chatenv>=0.2.11,<0.3.0"]
+
+[project.urls]
+Repository = "https://github.com/ChatArch/ChatComment"
+
+[project.scripts]
+chatcomment = "chatcomment.cli:main"
+
+[project.optional-dependencies]
+dev = ["build", "pytest>=8", "twine"]
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools.package-data]
+chatcomment = ["static/*"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

chatcomment-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

chatcomment-0.1.0/src/ChatComment.egg-info/PKG-INFO

@@ -0,0 +1,46 @@
+Metadata-Version: 2.4
+Name: ChatComment
+Version: 0.1.0
+Summary: Embeddable comments with a Python server, SQLite storage and a small JavaScript widget.
+Author: ChatArch
+License-Expression: MIT
+Project-URL: Repository, https://github.com/ChatArch/ChatComment
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click<9,>=8
+Requires-Dist: chatstyle<0.3.0,>=0.2.0
+Requires-Dist: chatenv<0.3.0,>=0.2.11
+Provides-Extra: dev
+Requires-Dist: build; extra == "dev"
+Requires-Dist: pytest>=8; extra == "dev"
+Requires-Dist: twine; extra == "dev"
+Dynamic: license-file
+
+# ChatComment
+
+Python 服务、SQLite 数据和一个无依赖的 JavaScript 留言组件。支持多站点、逐页隔离、匿名开关、昵称/邮箱/网址必填设置、审核与软删除。邮箱只在管理界面出现。默认私有站点由可信网关保护；可显式注册公开站点。
+
+```sh
+python -m pip install .
+chatcomment --version
+chatcomment --tree
+chatcomment site register personal-blog --origin https://blog.example.com --page /post/one --public
+chatcomment serve --token-file ~/.chatarch/chatcomment/admin-token
+```
+
+`--token-file` 必须指向仅部署者可读的现有文件（建议随机 32 字节以上）；命令不生成或打印密钥。默认数据库 `~/.chatarch/chatcomment/comments.sqlite3`，监听 `127.0.0.1:10196`。公网接入必须使用 HTTPS 反向代理；私有站点的 API 要由网关验证登录后附加 Bearer token，不能把该 token 交给浏览器。管理入口也必须经这种登录网关，或使用支持 Bearer token 的管理客户端。
+
+```html
+<div id="comments"></div>
+<script src="https://comments.example.com/widget.js" defer
+  data-chatcomment data-target="#comments"
+  data-api="https://comments.example.com" data-site="personal-blog"
+  data-page="/post/one"></script>
+```
+
+组件自动读取设置并只显示允许的字段；必填校验由服务器执行。默认不记住访客信息、不加载第三方头像、不渲染留言 HTML。公开模式的匿名留言不代表拥有可信实名；关闭匿名时要求可信网关提供已验证的作者身份。
+
+API、网关接入、备份与恢复见 [docs/api.md](docs/api.md)、[docs/deployment.md](docs/deployment.md)。本包不自动开放防火墙或注册 DNS，也不包含云服务凭据。
+
+独立留言板为 `/board?site=personal-blog&page=%2Fpost%2Fone`，与嵌入表单读写同一留言流。设置按钮只在服务器返回 `can_manage=true` 时显示。网关为普通成员设置 `X-ChatComment-Role: reader`，仅经服务端验证的 owner 使用 `admin`；管理接口另行验证权限。公开浏览器不能靠昵称或伪造角色 header 获得权限，因为缺少服务器 Bearer token。

chatcomment-0.1.0/src/ChatComment.egg-info/SOURCES.txt

@@ -0,0 +1,24 @@
+AGENTS.md
+CHANGELOG.md
+LICENSE
+MANIFEST.in
+README.md
+pyproject.toml
+docs/api.md
+docs/deployment.md
+src/ChatComment.egg-info/PKG-INFO
+src/ChatComment.egg-info/SOURCES.txt
+src/ChatComment.egg-info/dependency_links.txt
+src/ChatComment.egg-info/entry_points.txt
+src/ChatComment.egg-info/requires.txt
+src/ChatComment.egg-info/top_level.txt
+src/chatcomment/__init__.py
+src/chatcomment/cli.py
+src/chatcomment/server.py
+src/chatcomment/store.py
+src/chatcomment/static/admin.html
+src/chatcomment/static/board.html
+src/chatcomment/static/widget.css
+src/chatcomment/static/widget.js
+tests/cli-tests/test_cli.py
+tests/code-tests/test_comments.py

chatcomment-0.1.0/src/ChatComment.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

chatcomment-0.1.0/src/ChatComment.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+chatcomment = chatcomment.cli:main

chatcomment-0.1.0/src/ChatComment.egg-info/requires.txt

@@ -0,0 +1,8 @@
+click<9,>=8
+chatstyle<0.3.0,>=0.2.0
+chatenv<0.3.0,>=0.2.11
+
+[dev]
+build
+pytest>=8
+twine

chatcomment-0.1.0/src/ChatComment.egg-info/top_level.txt

@@ -0,0 +1 @@
+chatcomment

chatcomment-0.1.0/src/chatcomment/__init__.py

@@ -0,0 +1,6 @@
+"""Reusable comments storage and HTTP service."""
+__version__ = "0.1.0"
+
+from .store import Store
+
+__all__ = ["Store", "__version__"]

chatcomment-0.1.0/src/chatcomment/cli.py

@@ -0,0 +1,76 @@
+"""Thin CLI around the Python API."""
+from pathlib import Path
+import json
+
+import click
+from chatstyle import add_tree_option
+
+from . import Store, __version__
+
+
+@click.group(name='chatcomment')
+@click.version_option(__version__, prog_name='chatcomment')
+@add_tree_option()
+@click.option('--db', type=click.Path(path_type=Path), default=Path('~/.chatarch/chatcomment/comments.sqlite3'), show_default=True)
+@click.pass_context
+def main(ctx, db):
+    """Embeddable comments, site settings and persistent storage."""
+    ctx.ensure_object(dict)
+    ctx.obj['db'] = db
+
+
+@main.command()
+@click.option('--host', default='127.0.0.1', show_default=True)
+@click.option('--port', default=10196, type=click.IntRange(1,65535), show_default=True)
+@click.option('--token-file', required=True, type=click.Path(exists=True, dir_okay=False, path_type=Path))
+@click.pass_context
+def serve(ctx, host, port, token_file):
+    """Serve API, widget assets and the gateway-protected admin page."""
+    from .server import serve as run
+    token = token_file.read_text().strip()
+    if len(token) < 32:
+        raise click.ClickException('Token file must contain at least 32 characters.')
+    run(Store(ctx.obj['db']), token=token, host=host, port=port)
+
+
+@main.group()
+def site():
+    """Register sites and inspect settings."""
+
+
+@site.command(name='register')
+@click.argument('site_id')
+@click.option('--title', default='留言')
+@click.option('--origin', 'origins', required=True, multiple=True)
+@click.option('--page', 'pages', required=True, multiple=True)
+@click.option('--public', is_flag=True, help='Explicitly allow public comment reads and anonymous writes.')
+@click.pass_context
+def register(ctx, site_id, title, origins, pages, public):
+    """Register an exact site ID, origin allowlist and allowed page paths."""
+    try:
+        result = Store(ctx.obj['db']).register(site_id,title=title,origins=list(origins),pages=list(pages),private=not public)
+    except ValueError as exc:
+        raise click.ClickException(str(exc)) from exc
+    click.echo(json.dumps(result,ensure_ascii=False,indent=2))
+
+
+@site.command(name='list')
+@click.pass_context
+def list_sites(ctx):
+    """List registered sites and their effective settings."""
+    click.echo(json.dumps(Store(ctx.obj['db']).sites(),ensure_ascii=False,indent=2))
+
+
+@main.command()
+@click.argument('destination', type=click.Path(path_type=Path))
+@click.pass_context
+def backup(ctx, destination):
+    """Create a consistent SQLite online backup without overwriting a file."""
+    try:
+        click.echo(Store(ctx.obj['db']).backup(destination))
+    except ValueError as exc:
+        raise click.ClickException(str(exc)) from exc
+
+
+if __name__ == '__main__':
+    main()

chatcomment-0.1.0/src/chatcomment/server.py

@@ -0,0 +1,163 @@
+"""Small JSON HTTP server. Put authenticated private traffic behind a gateway."""
+from __future__ import annotations
+
+from collections import defaultdict, deque
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from importlib.resources import files
+import json
+import secrets
+import threading
+import time
+from urllib.parse import parse_qs, urlsplit
+
+from . import __version__
+from .store import Invalid, Store, origin
+
+
+def make_handler(store: Store, admin_token: str):
+    if len(admin_token) < 32:
+        raise ValueError('管理 token 至少需要 32 个字符')
+    attempts = defaultdict(deque)
+    lock = threading.Lock()
+
+    class Handler(BaseHTTPRequestHandler):
+        server_version = 'ChatComment/' + __version__
+
+        def log_message(self, fmt, *args):
+            pass  # Do not log private comment paths, identities or query values.
+
+        def send(self, code, data, content_type='application/json; charset=utf-8'):
+            if isinstance(data, (dict, list)):
+                data = json.dumps(data, ensure_ascii=False).encode()
+            if isinstance(data, str):
+                data = data.encode()
+            self.send_response(code)
+            self.send_header('Content-Type', content_type)
+            self.send_header('Content-Length', str(len(data)))
+            self.send_header('Cache-Control', 'private, no-store')
+            self.send_header('X-Content-Type-Options', 'nosniff')
+            self.send_header('Referrer-Policy', 'same-origin')
+            if getattr(self, 'cors', None):
+                self.send_header('Access-Control-Allow-Origin', self.cors)
+                self.send_header('Vary', 'Origin')
+                self.send_header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS')
+                self.send_header('Access-Control-Allow-Headers', 'Content-Type, X-ChatComment-Request')
+            self.end_headers()
+            if self.command != 'HEAD':
+                self.wfile.write(data)
+
+        def payload(self):
+            if self.headers.get('Transfer-Encoding') or self.headers.get_content_type() != 'application/json':
+                raise Invalid('仅接受 JSON 请求')
+            try:
+                size = int(self.headers.get('Content-Length', 0))
+            except ValueError as exc:
+                raise Invalid('无效的请求长度') from exc
+            if not 0 < size <= 32768:
+                raise Invalid('请求内容需为 1–32768 字节')
+            try:
+                result = json.loads(self.rfile.read(size))
+            except (ValueError, UnicodeDecodeError) as exc:
+                raise Invalid('JSON 格式不正确') from exc
+            if not isinstance(result, dict):
+                raise Invalid('JSON 必须是对象')
+            return result
+
+        def dispatch(self):
+            self.cors = None
+            p = urlsplit(self.path)
+            q = parse_qs(p.query)
+            token = self.headers.get('Authorization', '').removeprefix('Bearer ')
+            trusted = secrets.compare_digest(token, admin_token)
+            manager = trusted and self.headers.get('X-ChatComment-Role', 'admin') == 'admin'
+            parts = p.path.strip('/').split('/')
+            if p.path == '/health' and self.command in {'GET','HEAD'}:
+                return self.send(200, {'service':'chatcomment','version':__version__})
+            assets = {'/widget.js':('widget.js','application/javascript; charset=utf-8'), '/widget.css':('widget.css','text/css; charset=utf-8')}
+            if p.path in assets and self.command in {'GET','HEAD'}:
+                name, mime = assets[p.path]
+                return self.send(200, files('chatcomment').joinpath('static', name).read_bytes(), mime)
+            if p.path == '/board' and self.command in {'GET','HEAD'}:
+                return self.send(200, files('chatcomment').joinpath('static/board.html').read_bytes(), 'text/html; charset=utf-8')
+            if p.path == '/admin' and self.command in {'GET','HEAD'}:
+                if not manager:
+                    raise PermissionError('请通过已登录管理网关访问')
+                return self.send(200, files('chatcomment').joinpath('static/admin.html').read_bytes(), 'text/html; charset=utf-8')
+            if p.path == '/api/admin/sites':
+                if not manager:
+                    raise PermissionError('需要管理权限')
+                if self.command == 'GET':
+                    return self.send(200, {'sites':store.sites()})
+                if self.command == 'POST':
+                    v = self.payload()
+                    return self.send(201, store.register(v.get('id'),title=v.get('title'),origins=v.get('origins'),pages=v.get('pages'),private=v.get('private',True)))
+            if len(parts) >= 4 and parts[:2] == ['api','sites']:
+                site_id, action = parts[2:4]
+                site = store.site(site_id)
+                request_origin = self.headers.get('Origin')
+                if request_origin:
+                    request_origin = origin(request_origin)
+                    if request_origin not in site['origins']:
+                        raise PermissionError('来源未获此站点允许')
+                    self.cors = request_origin
+                if site['private'] and not trusted:
+                    raise PermissionError('此站点需要登录网关')
+                if self.command == 'OPTIONS':
+                    if not self.cors:
+                        raise PermissionError('缺少来源')
+                    return self.send(204, b'')
+                if action in {'settings','admin','export','moderate'} and not manager:
+                    raise PermissionError('需要管理权限')
+                if action == 'config' and self.command == 'GET':
+                    return self.send(200, {'id':site_id,'title':site['title'],'settings':site['settings'],'can_manage':manager})
+                if action == 'settings' and self.command == 'POST':
+                    return self.send(200, store.configure(site_id, self.payload()))
+                if action == 'moderate' and self.command == 'POST':
+                    v = self.payload()
+                    return self.send(200, store.moderate(site_id, v.get('id'), v.get('status')))
+                if action in {'comments','admin','export'} and self.command == 'GET':
+                    return self.send(200, store.comments(site_id,q.get('page',[''])[0],admin=action!='comments',before=q.get('before',[None])[0],limit=q.get('limit',[50])[0]))
+                if action == 'comments' and self.command == 'POST':
+                    if not trusted and (not request_origin or self.headers.get('X-ChatComment-Request') != '1'):
+                        raise PermissionError('留言需通过允许来源的组件提交')
+                    # A process-local bound keeps public submissions within 10/minute/IP.
+                    if not trusted:
+                        now = time.monotonic()
+                        with lock:
+                            if len(attempts) > 10000:
+                                for k in list(attempts):
+                                    if not attempts[k] or now - attempts[k][-1] > 60:
+                                        del attempts[k]
+                            key = (self.client_address[0],site_id)
+                            bucket = attempts[key]
+                            while bucket and now - bucket[0] > 60:
+                                bucket.popleft()
+                            if len(bucket) >= 10:
+                                return self.send(429, {'error':'留言太频繁，请稍后再试'})
+                            bucket.append(now)
+                    authenticated = trusted and bool(self.headers.get('X-ChatComment-Identity'))
+                    return self.send(201, store.create(site_id,self.payload(),authenticated=authenticated))
+            return self.send(404, {'error':'接口不存在'})
+
+        def handle_request(self):
+            try:
+                return self.dispatch()
+            except KeyError:
+                return self.send(404, {'error':'站点、页面或留言不存在'})
+            except PermissionError as exc:
+                return self.send(403, {'error':str(exc)})
+            except (Invalid, ValueError, TypeError) as exc:
+                return self.send(400, {'error':str(exc)})
+
+        do_GET = do_POST = do_HEAD = do_OPTIONS = handle_request
+
+    return Handler
+
+
+def serve(store, *, token, host='127.0.0.1', port=10196):
+    server = ThreadingHTTPServer((host, port), make_handler(store, token))
+    server.daemon_threads = True
+    try:
+        server.serve_forever()
+    finally:
+        server.server_close()

chatcomment-0.1.0/src/chatcomment/static/admin.html

@@ -0,0 +1,27 @@
+<!doctype html><html lang="zh-CN"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>ChatComment · 管理</title>
+<style>body{margin:0;background:#f3f6f3;color:#243c31;font:15px/1.65 system-ui,sans-serif}main{max-width:1000px;margin:auto;padding:36px 20px}h1{margin:0;font-size:30px}a{color:#2a6b54}section{background:white;border:1px solid #d7e0d9;border-radius:14px;padding:24px;margin:24px 0}label{display:block;margin:12px 0}select,input,textarea,button{font:inherit;border:1px solid #c6d4ca;border-radius:7px;padding:8px 12px;max-width:100%}input[type=text],textarea{width:100%;box-sizing:border-box}button{background:#2d6550;color:white;cursor:pointer}button.secondary{background:#e6ede7;color:#315c42}article{border-top:1px solid #dce4dd;padding:18px 0}article p{white-space:pre-wrap;overflow-wrap:anywhere}.muted{font-size:13px;color:#617366}.grid{display:flex;gap:20px;flex-wrap:wrap}.notice{white-space:pre-wrap}button{margin-right:8px;margin-top:6px}[hidden]{display:none!important}</style>
+<main><p class="muted">ChatComment / 服务器管理</p><h1>留言与站点设置</h1><a id="back">返回页面</a><p role="status" id="notice" class="notice"></p>
+<section><label>站点 <select id="site"></select></label><p id="site-info" class="muted"></p><form id="settings"><div class="grid"><label><input name="anonymous" type="checkbox"> 允许匿名留言</label><label><input name="moderation" type="checkbox"> 新留言先审核</label></div><div class="grid" id="fields"></div><button>保存站点设置</button></form><p class="muted">页面访问范围由登录网关控制；允许匿名仅决定留言者是否需要已验证身份。邮箱只对管理员显示。</p></section>
+<section><div class="grid"><label>页面 <select id="page"></select></label><label>显示 <select id="filter"><option value="all">全部状态</option><option value="pending">待审核</option><option value="approved">已显示</option><option value="deleted">已删除</option></select></label></div><button id="refresh">刷新</button><button id="export" class="secondary">导出此页全部留言 JSON</button><div id="comments"></div><button id="more" hidden>加载更早留言</button></section>
+<section><details><summary>注册另一个站点</summary><form id="register"><label>站点 ID<input name="id" type="text" required pattern="[a-z0-9][a-z0-9_-]{0,63}"></label><label>站点名称<input name="title" type="text" required maxlength="120"></label><label>允许来源（每行一个完整 origin）<textarea name="origins" required placeholder="https://blog.example.com"></textarea></label><label>允许页面路径（每行一个）<textarea name="pages" required placeholder="/article/one/"></textarea></label><label><input type="checkbox" name="public"> 此站点允许公开读取与匿名提交（默认私有）</label><button>注册站点</button></form></details></section></main>
+<script>
+(() => {'use strict';
+const base=location.pathname.replace(/\/admin\/?$/,'');
+const $=s=>document.querySelector(s), notice=$('#notice');
+const labels={nickname:'昵称',email:'邮箱',website:'网址'};let sites=[],cursor=null;
+$('#back').href=base.replace(/\/comments$/,'/') || '/';
+for(const [name,label] of Object.entries(labels)){const el=document.createElement('label');el.textContent=label+' ';const select=document.createElement('select');select.name=name;for(const [v,t] of [['optional','可选'],['required','必填'],['hidden','隐藏']]){const o=document.createElement('option');o.value=v;o.textContent=t;select.append(o);}el.append(select);$('#fields').append(el);}
+async function api(path,payload){const headers={};if(payload){headers['Content-Type']='application/json';const session=await fetch('/api/session',{credentials:'same-origin'});if(session.ok)headers['X-CSRF-Token']=(await session.json()).csrf_token;}const r=await fetch(base+path,{method:payload?'POST':'GET',credentials:'same-origin',headers,body:payload?JSON.stringify(payload):undefined});const v=await r.json().catch(()=>({}));if(!r.ok)throw new Error(v.error||'操作失败，请确认登录状态');return v;}
+function site(){return sites.find(s=>s.id===$('#site').value);}
+function sitePath(action){return '/api/sites/'+encodeURIComponent(site().id)+'/'+action;}
+async function loadSites(selected){sites=(await api('/api/admin/sites')).sites;$('#site').replaceChildren();for(const s of sites){const o=document.createElement('option');o.value=s.id;o.textContent=s.title+' · '+s.id;$('#site').append(o);}if(selected)$('#site').value=selected;if(sites.length)await selectSite();}
+async function selectSite(){const s=site();$('#site-info').textContent=(s.private?'私有站点 · ':'公开站点 · ')+s.origins.join(', ');$('#settings').elements.anonymous.checked=s.settings.allow_anonymous;$('#settings').elements.moderation.checked=s.settings.moderation;for(const [n,m] of Object.entries(s.settings.fields))$('#settings').elements[n].value=m;$('#page').replaceChildren();for(const p of s.pages){const o=document.createElement('option');o.value=p;o.textContent=p;$('#page').append(o);}await load();}
+async function load(more=false){const data=await api(sitePath('admin')+'?page='+encodeURIComponent($('#page').value)+(more&&cursor?'&before='+encodeURIComponent(cursor):''));if(!more)$('#comments').replaceChildren();for(const c of data.comments){if($('#filter').value!=='all'&&c.status!==$('#filter').value)continue;const a=document.createElement('article'),meta=document.createElement('div'),p=document.createElement('p');meta.textContent=(c.nickname||'匿名')+' · '+new Date(c.created_at).toLocaleString()+' · '+({approved:'已显示',pending:'待审核',deleted:'已删除'}[c.status]);a.append(meta);if(c.email){const email=document.createElement('div');email.className='muted';email.textContent=c.email+'（仅管理可见）';a.append(email);}p.textContent=c.content;a.append(p);for(const [status,label] of [['approved','显示'],['pending','待审核'],['deleted','删除']]){const b=document.createElement('button');b.className='secondary';b.textContent=label;b.disabled=c.status===status;b.onclick=()=>run(async()=>{await api(sitePath('moderate'),{id:c.id,status});await load();notice.textContent='状态已保存。';});a.append(b);}$('#comments').append(a);}cursor=data.next_cursor;$('#more').hidden=!cursor;if(!$('#comments').children.length)$('#comments').textContent='此页暂无符合条件的留言。';}
+async function run(fn){try{await fn();}catch(e){notice.textContent=e.message;}}
+$('#site').onchange=()=>run(selectSite);$('#page').onchange=$('#filter').onchange=$('#refresh').onclick=()=>run(()=>load());$('#more').onclick=()=>run(()=>load(true));
+$('#settings').onsubmit=e=>{e.preventDefault();run(async()=>{const f=e.target.elements;const fields=Object.fromEntries(Object.keys(labels).map(n=>[n,f[n].value]));const result=await api(sitePath('settings'),{allow_anonymous:f.anonymous.checked,moderation:f.moderation.checked,fields});sites[sites.findIndex(s=>s.id===result.id)]=result;notice.textContent='设置已保存，留言组件刷新后使用新设置。';});};
+$('#register').onsubmit=e=>{e.preventDefault();run(async()=>{const f=e.target.elements;const result=await api('/api/admin/sites',{id:f.id.value,title:f.title.value,origins:f.origins.value.split('\n').map(v=>v.trim()).filter(Boolean),pages:f.pages.value.split('\n').map(v=>v.trim()).filter(Boolean),private:!f.public.checked});await loadSites(result.id);e.target.reset();notice.textContent='站点已注册。';});};
+$('#export').onclick=()=>run(async()=>{let all=[],before=null;do{const d=await api(sitePath('export')+'?limit=100&page='+encodeURIComponent($('#page').value)+(before?'&before='+encodeURIComponent(before):''));all.push(...d.comments);before=d.next_cursor;}while(before);const blob=new Blob([JSON.stringify({site:site().id,page:$('#page').value,comments:all},null,2)],{type:'application/json'}),url=URL.createObjectURL(blob),a=document.createElement('a');a.href=url;a.download='chatcomment-'+site().id+'.json';a.click();URL.revokeObjectURL(url);});
+run(()=>loadSites());
+})();
+</script></html>

chatcomment-0.1.0/src/chatcomment/static/board.html

@@ -0,0 +1,19 @@
+<!doctype html><html lang="zh-CN"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>ChatComment · 留言板</title>
+<style>body{margin:0;background:#edf2ee;color:#243c32;font:16px/1.7 system-ui,sans-serif}main{max-width:900px;padding:36px 20px;margin:auto}a{color:#2d6953}.intro{font-size:14px;color:#607367}h1{font-size:32px;margin:12px 0 6px}.brand{font-size:12px;letter-spacing:.1em}</style>
+<main><a id="back">← 返回页面</a><p class="brand">ChatComment</p><h1>想法，留在这里。</h1><p class="intro">这里与页面底部共用同一个留言流。页面访问权限由网站管理，匿名只是留言的署名方式。</p><div id="comments"></div></main>
+<script>
+(async () => {
+  const base=location.pathname.replace(/\/board\/?$/,'');
+  const query=new URLSearchParams(location.search);
+  const script=document.createElement('script');
+  script.src=base+'/widget.js';script.defer=true;script.dataset.chatcomment='';
+  script.dataset.target='#comments';script.dataset.api=base;
+  script.dataset.site=query.get('site')||'personal-ai';script.dataset.page=query.get('page')||'/personal-ai/';
+  try {
+    const session=await fetch('/api/session',{credentials:'same-origin'});
+    if(session.ok && (await session.json()).csrf_token)script.dataset.csrfEndpoint='/api/session';
+  } catch (_) { /* Public standalone servers have no native login contract. */ }
+  document.getElementById('back').href=base.replace(/\/comments$/,'/')||'/';
+  document.body.append(script);
+})();
+</script></html>

chatcomment-0.1.0/src/chatcomment/static/widget.css

@@ -0,0 +1 @@
+.chatcomment{font:16px/1.65 system-ui,-apple-system,sans-serif;color:#243436;background:#f6f8f6;border:1px solid #d7e0dc;border-radius:18px;padding:clamp(20px,4vw,36px);margin:40px auto 0;max-width:100%;text-align:left;box-sizing:border-box}.chatcomment *{box-sizing:border-box}.chatcomment header{display:flex;align-items:center;justify-content:space-between;gap:16px}.chatcomment h2{font-size:25px;margin:0;color:inherit}.chatcomment .cc-eyebrow{font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:#55716a;margin:0 0 4px}.chatcomment a{color:#326d5e}.chatcomment .cc-admin{font-size:13px}.chatcomment .cc-note,.chatcomment .cc-empty{color:#617570;font-size:13px}.chatcomment label{display:block;font-size:13px;color:#4b615b}.chatcomment label span{font-size:11px;color:#71817c}.chatcomment input,.chatcomment textarea{display:block;width:100%;background:white;color:#253b33;border:1px solid #c6d4cd;border-radius:8px;padding:10px 12px;font:inherit;margin-top:6px;min-width:0}.chatcomment textarea{resize:vertical;min-height:110px;font-size:15px}.chatcomment input:focus,.chatcomment textarea:focus{outline:2px solid #54917d;outline-offset:2px}.chatcomment .cc-fields{display:grid;grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:14px;margin:20px 0 14px}.chatcomment .cc-actions{display:flex;gap:12px;align-items:center;flex-wrap:wrap;margin:16px 0}.chatcomment button{border:0;background:#275e4f;color:white;padding:10px 18px;border-radius:8px;font:inherit;font-size:14px;cursor:pointer}.chatcomment button:disabled{opacity:.55;cursor:wait}.chatcomment button.cc-refresh,.chatcomment button.cc-more{background:#e0e9e3;color:#345f50}.chatcomment .cc-status{font-size:13px;color:#526d62;overflow-wrap:anywhere}.chatcomment article{border-top:1px solid #d5dfd9;padding:18px 0}.chatcomment article p{white-space:pre-wrap;overflow-wrap:anywhere;margin:10px 0 0}.chatcomment .cc-meta{display:flex;justify-content:space-between;gap:16px;align-items:baseline;font-size:14px}.chatcomment time{font-size:12px;color:#71807a}.chatcomment [hidden]{display:none!important}@media(max-width:480px){.chatcomment .cc-fields{grid-template-columns:1fr}.chatcomment .cc-meta{display:block}.chatcomment time{display:block}.chatcomment header{align-items:flex-start}}

chatcomment-0.1.0/src/chatcomment/static/widget.js

@@ -0,0 +1,96 @@
+/* ChatComment: plain text, no third-party scripts or local storage. */
+(() => {
+  'use strict';
+  const source = document.currentScript;
+  const current = source ? {...source.dataset} : {};
+  async function mount(options) {
+    const root = typeof options.target === 'string' ? document.querySelector(options.target) : options.target;
+    if (!root) throw new Error('ChatComment container not found');
+    const api = options.api.replace(/\/$/, '');
+    const site = encodeURIComponent(options.site);
+    const page = options.page || location.pathname;
+    const link = document.createElement('link');
+    link.rel = 'stylesheet'; link.href = `${api}/widget.css`; root.append(link);
+    const box = document.createElement('section'); box.className = 'chatcomment'; root.append(box);
+    box.innerHTML = `<header><div><p class="cc-eyebrow">ChatComment</p><h2>留下想法</h2></div><a class="cc-admin" hidden>设置与管理</a></header>
+      <p class="cc-note">留言保存在服务器，刷新后仍可查看。邮箱仅管理员可见。</p>
+      <form><div class="cc-fields"></div><label>留言 <span>必填</span><textarea name="content" required maxlength="5000" rows="4" placeholder="有什么想法，或者值得接着做的事？"></textarea></label>
+      <div class="cc-actions"><button type="submit">提交留言</button><button type="button" class="cc-refresh">刷新留言</button><span class="cc-status" role="status" aria-live="polite"></span></div></form>
+      <div class="cc-list" aria-live="polite"></div><button type="button" class="cc-more" hidden>更早的留言</button>`;
+    // The API base comes from the deployer's script attribute; never from comments.
+    box.querySelector('.cc-admin').href = `${api}/admin`;
+    const status = box.querySelector('.cc-status');
+    const list = box.querySelector('.cc-list');
+    const form = box.querySelector('form');
+    const submit = form.querySelector('[type=submit]');
+    let cursor = null;
+    async function request(path, payload) {
+      const headers = {'X-ChatComment-Request':'1'};
+      if (payload) {
+        headers['Content-Type'] = 'application/json';
+        if (options.csrfEndpoint) {
+          const session = await fetch(options.csrfEndpoint, {credentials:'same-origin'});
+          if (!session.ok) throw new Error('请先登录后再留言');
+          headers['X-CSRF-Token'] = (await session.json()).csrf_token;
+        }
+      }
+      const response = await fetch(api + path, {method:payload?'POST':'GET',headers,credentials:'same-origin',body:payload?JSON.stringify(payload):undefined});
+      if (!response.ok) {
+        const error = await response.json().catch(() => ({}));
+        throw new Error(error.error || `读取失败（${response.status}），请确认登录状态`);
+      }
+      return response.json();
+    }
+    async function config() {
+      const data = await request(`/api/sites/${site}/config`);
+      box.querySelector('.cc-admin').hidden = data.can_manage !== true;
+      const fields = box.querySelector('.cc-fields'); fields.replaceChildren();
+      const labels = {nickname:'昵称',email:'邮箱',website:'网址'};
+      for (const [name, mode] of Object.entries(data.settings.fields)) {
+        if (mode === 'hidden') continue;
+        const label = document.createElement('label');
+        label.textContent = `${labels[name]}（${mode === 'required' ? '必填' : '可选'}）`;
+        const input = document.createElement('input');
+        input.name = name; input.required = mode === 'required';
+        input.type = name === 'email' ? 'email' : name === 'website' ? 'url' : 'text';
+        input.maxLength = name === 'nickname' ? 120 : 500;
+        label.append(input); fields.append(label);
+      }
+      box.querySelector('.cc-note').textContent = `${data.settings.allow_anonymous?'无需留言账号，可匿名提交。':'需要已验证的站点身份。'}${data.settings.moderation?'留言经审核后显示。':''}邮箱仅管理员可见。`;
+    }
+    async function load(more=false) {
+      const data = await request(`/api/sites/${site}/comments?page=${encodeURIComponent(page)}${more&&cursor?'&before='+encodeURIComponent(cursor):''}`);
+      if (!more) list.replaceChildren();
+      for (const item of data.comments) {
+        const article = document.createElement('article');
+        const heading = document.createElement('div'); heading.className = 'cc-meta';
+        const author = document.createElement('strong'); author.textContent = item.nickname || '匿名';
+        const time = document.createElement('time'); time.dateTime = item.created_at; time.textContent = new Date(item.created_at).toLocaleString();
+        heading.append(author,time);
+        const content = document.createElement('p'); content.textContent = item.content;
+        article.append(heading,content); list.append(article);
+      }
+      if (!list.children.length) {const empty=document.createElement('p');empty.className='cc-empty';empty.textContent='还没有留言，欢迎留下第一条。';list.append(empty);}
+      cursor = data.next_cursor; box.querySelector('.cc-more').hidden = !cursor;
+    }
+    form.addEventListener('submit', async event => {
+      event.preventDefault(); submit.disabled=true; status.textContent='正在提交…';
+      try {
+        const result = await request(`/api/sites/${site}/comments`, {page,...Object.fromEntries(new FormData(form))});
+        form.elements.content.value='';
+        status.textContent=result.status==='pending'?'已提交，等待审核。':'已保存到服务器。';
+        await load();
+      } catch (error) {status.textContent=error.message;}
+      finally {submit.disabled=false;}
+    });
+    box.querySelector('.cc-refresh').onclick=async()=>{try{await config();await load();status.textContent='已从服务器刷新。';}catch(e){status.textContent=e.message;}};
+    box.querySelector('.cc-more').onclick=()=>load(true).catch(e=>{status.textContent=e.message;});
+    try {await config();await load();} catch(error){status.textContent=error.message;submit.disabled=true;}
+    return {refresh:load};
+  }
+  window.ChatComment = {mount};
+  if (source?.hasAttribute('data-chatcomment')) {
+    const start=()=>mount({target:current.target,api:current.api,site:current.site,page:current.page,csrfEndpoint:current.csrfEndpoint});
+    if (document.readyState==='loading') document.addEventListener('DOMContentLoaded',start,{once:true}); else start();
+  }
+})();

chatcomment-0.1.0/src/chatcomment/store.py

@@ -0,0 +1,226 @@
+"""SQLite persistence and validation, independent of the web transport."""
+from __future__ import annotations
+
+from contextlib import contextmanager
+from datetime import datetime, timezone
+import json
+import os
+from pathlib import Path
+import re
+import sqlite3
+from urllib.parse import urlsplit
+import uuid
+
+DEFAULT_SETTINGS = {
+    "allow_anonymous": True, "moderation": False,
+    "fields": {"nickname": "optional", "email": "optional", "website": "hidden"},
+}
+
+
+class Invalid(ValueError):
+    pass
+
+
+def text(value, name, limit, *, required=False):
+    if not isinstance(value, str):
+        raise Invalid(f"{name} 必须是文字")
+    value = value.strip()
+    if len(value) > limit or (required and not value):
+        raise Invalid(f"{name} {'不能为空，且' if required else ''}最多 {limit} 字")
+    if any(ord(c) < 32 and c not in '\n\r\t' for c in value):
+        raise Invalid(f"{name} 含无效字符")
+    return value
+
+
+def origin(value):
+    value = text(value, "来源", 500, required=True)
+    p = urlsplit(value)
+    try:
+        port = p.port
+    except ValueError as exc:
+        raise Invalid("来源端口无效") from exc
+    if p.scheme not in {"http", "https"} or not p.hostname or p.username or p.password or p.query or p.fragment or p.path not in {"", "/"}:
+        raise Invalid("来源需为完整 HTTP(S) origin，不含路径")
+    host = p.hostname.lower()
+    if ':' in host:
+        host = '[' + host + ']'
+    return f"{p.scheme.lower()}://{host}" + (f":{port}" if port and port != {"http":80,"https":443}[p.scheme] else "")
+
+
+def page(value):
+    value = text(value, "页面路径", 500, required=True)
+    p = urlsplit(value)
+    if not value.startswith('/') or value.startswith('//') or p.query or p.fragment or '\\' in value or '%' in value or any(s in {'.', '..'} for s in value.split('/')):
+        raise Invalid("页面必须是规范的绝对路径，不含查询、锚点或转义")
+    return value
+
+
+def settings(value):
+    if not isinstance(value, dict) or set(value) != {"allow_anonymous", "moderation", "fields"}:
+        raise Invalid("设置必须包含匿名、审核和字段配置")
+    if type(value["allow_anonymous"]) is not bool or type(value["moderation"]) is not bool:
+        raise Invalid("匿名和审核设置必须是布尔值")
+    fields = value['fields']
+    if not isinstance(fields, dict) or set(fields) != {"nickname", "email", "website"} or any(v not in {"required", "optional", "hidden"} for v in fields.values()):
+        raise Invalid("字段状态必须为 required / optional / hidden")
+    return value
+
+
+class Store:
+    def __init__(self, path):
+        self.path = Path(path).expanduser()
+        self.path.parent.mkdir(parents=True, exist_ok=True, mode=0o700)
+        try:
+            fd = os.open(self.path, os.O_CREAT | os.O_EXCL | os.O_WRONLY, 0o600)
+        except FileExistsError:
+            pass
+        else:
+            os.close(fd)
+        self.path.chmod(0o600)
+        with self.connect() as db:
+            db.executescript('''
+              PRAGMA journal_mode=WAL;
+              CREATE TABLE IF NOT EXISTS sites (
+                id TEXT PRIMARY KEY, title TEXT NOT NULL, origins TEXT NOT NULL,
+                pages TEXT NOT NULL, private INTEGER NOT NULL, settings TEXT NOT NULL);
+              CREATE TABLE IF NOT EXISTS comments (
+                id TEXT PRIMARY KEY, site_id TEXT NOT NULL REFERENCES sites(id),
+                page_key TEXT NOT NULL, nickname TEXT NOT NULL, email TEXT NOT NULL,
+                website TEXT NOT NULL, content TEXT NOT NULL, status TEXT NOT NULL,
+                created_at TEXT NOT NULL, authenticated INTEGER NOT NULL);
+              CREATE INDEX IF NOT EXISTS comments_page ON comments(site_id,page_key,created_at);
+            ''')
+
+    @contextmanager
+    def connect(self):
+        db = sqlite3.connect(self.path, timeout=15)
+        db.row_factory = sqlite3.Row
+        db.execute('PRAGMA foreign_keys=ON')
+        try:
+            with db:
+                yield db
+        finally:
+            db.close()
+
+    def register(self, site_id, *, title, origins, pages, private=True, config=None):
+        if not isinstance(site_id, str) or not re.fullmatch(r'[a-z0-9][a-z0-9_-]{0,63}', site_id):
+            raise Invalid("站点 ID 需为 1–64 位小写字母、数字、下划线或连字符")
+        title = text(title, "站点名称", 120, required=True)
+        if type(private) is not bool:
+            raise Invalid("private 必须是布尔值")
+        if not isinstance(origins, list) or not 1 <= len(origins) <= 30 or not isinstance(pages, list) or not 1 <= len(pages) <= 500:
+            raise Invalid("需提供 1–30 个来源和 1–500 个允许页面")
+        origins, pages = sorted(set(map(origin, origins))), sorted(set(map(page, pages)))
+        config = settings(config if config is not None else json.loads(json.dumps(DEFAULT_SETTINGS)))
+        try:
+            with self.connect() as db:
+                db.execute('INSERT INTO sites VALUES (?,?,?,?,?,?)', (site_id, title, json.dumps(origins), json.dumps(pages), int(private), json.dumps(config)))
+        except sqlite3.IntegrityError as exc:
+            raise Invalid("站点 ID 已存在，请修改设置而非重复注册") from exc
+        return self.site(site_id)
+
+    def site(self, site_id):
+        with self.connect() as db:
+            row = db.execute('SELECT * FROM sites WHERE id=?', (site_id,)).fetchone()
+        if not row:
+            raise KeyError("站点不存在")
+        result = dict(row)
+        for k in ['origins', 'pages', 'settings']:
+            result[k] = json.loads(result[k])
+        result['private'] = bool(result['private'])
+        return result
+
+    def sites(self):
+        with self.connect() as db:
+            ids = [r[0] for r in db.execute('SELECT id FROM sites ORDER BY id')]
+        return [self.site(i) for i in ids]
+
+    def configure(self, site_id, config):
+        self.site(site_id)
+        config = settings(config)
+        with self.connect() as db:
+            db.execute('UPDATE sites SET settings=? WHERE id=?', (json.dumps(config), site_id))
+        return self.site(site_id)
+
+    def check_page(self, site_id, page_key):
+        site = self.site(site_id)
+        page_key = page(page_key)
+        if page_key not in site['pages']:
+            raise KeyError("页面未注册")
+        return site, page_key
+
+    def create(self, site_id, payload, *, authenticated=False):
+        if not isinstance(payload, dict):
+            raise Invalid("留言需为 JSON 对象")
+        site, page_key = self.check_page(site_id, payload.get('page', ''))
+        config = site['settings']
+        if not config['allow_anonymous'] and not authenticated:
+            raise PermissionError("此站点需要已验证身份才能留言")
+        values = {}
+        labels = {'nickname':'昵称', 'email':'邮箱', 'website':'网址'}
+        for field, mode in config['fields'].items():
+            value = text(payload.get(field, ''), labels[field], 120 if field == 'nickname' else 500)
+            if mode == 'hidden':
+                value = ''
+            if mode == 'required' and not value:
+                raise Invalid(f"{labels[field]}为必填项")
+            values[field] = value
+        if values['email'] and not re.fullmatch(r'[^\s@]+@[^\s@]+\.[^\s@]+', values['email']):
+            raise Invalid("邮箱格式不正确")
+        if values['website']:
+            p = urlsplit(values['website'])
+            if p.scheme not in {'http','https'} or not p.hostname or p.username or p.password:
+                raise Invalid("网址必须是 HTTP(S) 链接")
+        comment = dict(id=uuid.uuid4().hex, site_id=site_id, page_key=page_key,
+                       **values, content=text(payload.get('content',''), '留言', 5000, required=True),
+                       status='pending' if config['moderation'] else 'approved',
+                       created_at=datetime.now(timezone.utc).isoformat(), authenticated=int(authenticated))
+        with self.connect() as db:
+            db.execute('INSERT INTO comments VALUES (:id,:site_id,:page_key,:nickname,:email,:website,:content,:status,:created_at,:authenticated)', comment)
+        return self.public(comment)
+
+    @staticmethod
+    def public(row):
+        return {k: row[k] for k in ['id','site_id','page_key','nickname','website','content','status','created_at']}
+
+    def comments(self, site_id, page_key, *, admin=False, before=None, limit=50):
+        self.check_page(site_id, page_key)
+        limit = max(1, min(int(limit), 100))
+        sql = 'SELECT * FROM comments WHERE site_id=? AND page_key=?'
+        args = [site_id, page_key]
+        if not admin:
+            sql += " AND status='approved'"
+        if before:
+            sql += ' AND (created_at || id) < ?'
+            args.append(before)
+        sql += ' ORDER BY created_at DESC, id DESC LIMIT ?'
+        args.append(limit + 1)
+        with self.connect() as db:
+            rows = [dict(r) for r in db.execute(sql, args)]
+        has_more = len(rows) > limit
+        rows = rows[:limit]
+        cursor = rows[-1]['created_at'] + rows[-1]['id'] if has_more else None
+        return {'comments': rows if admin else [self.public(r) for r in rows], 'next_cursor': cursor}
+
+    def moderate(self, site_id, comment_id, status):
+        if status not in {'approved','pending','deleted'}:
+            raise Invalid("状态需为 approved / pending / deleted")
+        with self.connect() as db:
+            result = db.execute('UPDATE comments SET status=? WHERE id=? AND site_id=?', (status, comment_id, site_id))
+            if result.rowcount != 1:
+                raise KeyError("留言不存在")
+        return {'id':comment_id, 'status':status}
+
+    def backup(self, destination):
+        destination = Path(destination).expanduser()
+        if destination.exists():
+            raise Invalid("备份目标已存在")
+        destination.parent.mkdir(parents=True, exist_ok=True)
+        try:
+            fd = os.open(destination, os.O_CREAT | os.O_EXCL | os.O_WRONLY, 0o600)
+        except FileExistsError as exc:
+            raise Invalid("备份目标已存在") from exc
+        os.close(fd)
+        with self.connect() as source, sqlite3.connect(destination) as target:
+            source.backup(target)
+        return destination

chatcomment-0.1.0/tests/cli-tests/test_cli.py

@@ -0,0 +1,16 @@
+from click.testing import CliRunner
+from chatcomment.cli import main
+
+
+def test_installed_surface_and_registration(tmp_path):
+    r=CliRunner()
+    for option in ['--version','--tree','--tree-brief']:
+        result=r.invoke(main,[option]);assert result.exit_code==0,result.output
+        assert 'chatcomment' in result.output.lower()
+    args=['--db',str(tmp_path/'db.sqlite3')]
+    result=r.invoke(main,args+['site','register','demo','--origin','https://example.com','--page','/post/'])
+    assert result.exit_code==0,result.output
+    assert '"private": true' in result.output
+    assert r.invoke(main,args+['site','list']).exit_code==0
+    result=r.invoke(main,args+['backup',str(tmp_path/'backup.sqlite3')])
+    assert result.exit_code==0,result.output

chatcomment-0.1.0/tests/code-tests/test_comments.py

@@ -0,0 +1,125 @@
+import json
+import threading
+import urllib.error
+import urllib.request
+from http.server import ThreadingHTTPServer
+
+import pytest
+
+from chatcomment import Store
+from chatcomment.server import make_handler
+from chatcomment.store import Invalid
+
+
+@pytest.fixture
+def store(tmp_path):
+    s = Store(tmp_path / 'comments.sqlite3')
+    s.register('first',title='First',origins=['https://first.example'],pages=['/one/','/two/'],private=False)
+    s.register('second',title='Second',origins=['https://second.example'],pages=['/one/'],private=True)
+    return s
+
+
+def test_isolation_privacy_persistence_backup(store,tmp_path):
+    item = store.create('first',{'page':'/one/','content':'plain <script>alert(1)</script>','email':'private@example.com'})
+    assert 'email' not in item
+    assert store.comments('first','/two/')['comments'] == []
+    assert store.comments('second','/one/')['comments'] == []
+    reloaded = Store(store.path)
+    assert reloaded.comments('first','/one/')['comments'][0]['id'] == item['id']
+    assert reloaded.comments('first','/one/',admin=True)['comments'][0]['email']=='private@example.com'
+    backup = store.backup(tmp_path/'backup.sqlite3')
+    assert Store(backup).comments('first','/one/')['comments'][0]['id']==item['id']
+    with pytest.raises(Invalid): store.backup(backup)
+
+
+def test_fields_and_anonymous_enforced(store):
+    config=store.site('first')['settings']
+    config['fields']['email']='required'
+    store.configure('first',config)
+    with pytest.raises(Invalid,match='邮箱为必填'):store.create('first',{'page':'/one/','content':'hello'})
+    config['allow_anonymous']=False
+    store.configure('first',config)
+    with pytest.raises(PermissionError):store.create('first',{'page':'/one/','content':'hello','email':'a@b.cn'})
+    item=store.create('first',{'page':'/one/','content':'hello','email':'a@b.cn','website':'https://discard.example'},authenticated=True)
+    assert item['website']==''
+
+
+def test_moderation_and_pagination(store):
+    config=store.site('first')['settings'];config['moderation']=True;store.configure('first',config)
+    ids=[store.create('first',{'page':'/one/','content':str(i)})['id'] for i in range(4)]
+    assert store.comments('first','/one/')['comments']==[]
+    for i in ids:store.moderate('first',i,'approved')
+    page1=store.comments('first','/one/',limit=2)
+    page2=store.comments('first','/one/',limit=2,before=page1['next_cursor'])
+    assert len({x['id'] for x in page1['comments']+page2['comments']})==4
+    assert page2['next_cursor'] is None
+    with pytest.raises(KeyError):store.moderate('second',ids[0],'deleted')
+    store.moderate('first',ids[0],'deleted')
+    assert len(store.comments('first','/one/')['comments'])==3
+    store.moderate('first',ids[0],'approved')
+    assert len(store.comments('first','/one/')['comments'])==4
+
+
+@pytest.mark.parametrize('payload',[{}, {'page':'/missing/','content':'x'}, {'page':'/one/?x=1','content':'x'}, {'page':'/one/','content':''}, {'page':'/one/','content':'x'*5001}, {'page':'/one/','content':'x','email':'bad'}, {'page':'/one/','content':None}])
+def test_invalid_comments(store,payload):
+    with pytest.raises((ValueError,KeyError)):store.create('first',payload)
+
+
+@pytest.fixture
+def http(store):
+    token='t'*48
+    server=ThreadingHTTPServer(('127.0.0.1',0),make_handler(store,token))
+    worker=threading.Thread(target=server.serve_forever,daemon=True);worker.start()
+    def request(path,body=None,*,trusted=False,identity=False,origin=None,extra=None):
+        headers=extra or {}
+        if trusted:headers['Authorization']='Bearer '+token
+        if identity:headers['X-ChatComment-Identity']='verified'
+        if origin:headers['Origin']=origin
+        if body is not None:headers['Content-Type']='application/json'
+        req=urllib.request.Request(f'http://127.0.0.1:{server.server_port}'+path,data=json.dumps(body).encode() if body is not None else None,headers=headers)
+        try:r=urllib.request.urlopen(req,timeout=5)
+        except urllib.error.HTTPError as e:r=e
+        with r:
+            data=r.read()
+            return r.status,r.headers,json.loads(data) if r.headers.get_content_type()=='application/json' else data
+    yield request
+    server.shutdown();server.server_close();worker.join()
+
+
+def test_http_private_admin_origins_and_no_header_spoof(http):
+    assert http('/health')[0]==200
+    assert http('/widget.js')[0]==200
+    assert http('/admin')[0]==403
+    assert http('/admin',trusted=True)[0]==200
+    assert http('/board')[0]==200
+    assert http('/admin',trusted=True,extra={'X-ChatComment-Role':'reader'})[0]==403
+    assert http('/api/admin/sites',trusted=True,extra={'X-ChatComment-Role':'reader'})[0]==403
+    assert http('/api/sites/second/config',trusted=True,extra={'X-ChatComment-Role':'reader'})[2]['can_manage'] is False
+    assert http('/api/sites/first/config')[2]['can_manage'] is False
+    assert http('/api/sites/first/config',trusted=True)[2]['can_manage'] is True
+    assert http('/api/sites/second/settings',{},trusted=True,extra={'X-ChatComment-Role':'reader'})[0]==403
+    assert http('/api/admin/sites')[0]==403
+    assert http('/api/sites/second/config',identity=True)[0]==403
+    assert http('/api/sites/second/config',trusted=True)[0]==200
+    assert http('/api/sites/first/config',origin='https://evil.example')[0]==403
+    code,headers,_=http('/api/sites/first/config',origin='https://first.example')
+    assert code==200 and headers['Access-Control-Allow-Origin']=='https://first.example'
+    body={'page':'/one/','content':'real http','email':'secret@example.com'}
+    assert http('/api/sites/first/comments',body,origin='https://first.example')[0]==403
+    assert http('/api/sites/first/comments',body,origin='https://evil.example',extra={'X-ChatComment-Request':'1'})[0]==403
+    assert http('/api/sites/first/comments',body,origin='https://first.example',extra={'X-ChatComment-Request':'1'})[0]==201
+    assert 'email' not in http('/api/sites/first/comments?page=/one/')[2]['comments'][0]
+    assert http('/api/sites/first/comments?page=/two/')[2]['comments']==[]
+    assert http('/api/sites/first/settings',{},origin='https://first.example')[0]==403
+
+
+def test_http_required_fields_auth_and_rate_limit(store,http):
+    config=store.site('first')['settings'];config['allow_anonymous']=False;store.configure('first',config)
+    body={'page':'/one/','content':'test'}
+    assert http('/api/sites/first/comments',body,trusted=True)[0]==403
+    assert http('/api/sites/first/comments',body,trusted=True,identity=True)[0]==201
+    config['allow_anonymous']=True;config['fields']['nickname']='required';store.configure('first',config)
+    assert http('/api/sites/first/comments',body,trusted=True)[0]==400
+    for _ in range(10):
+        http('/api/sites/first/comments',{**body,'nickname':'tester'},origin='https://first.example',extra={'X-ChatComment-Request':'1'})
+    assert http('/api/sites/first/comments',body,origin='https://first.example',extra={'X-ChatComment-Request':'1'})[0]==429