miniyun 0.1.0__tar.gz

miniyun-0.1.0/PKG-INFO

@@ -0,0 +1,43 @@
+Metadata-Version: 2.4
+Name: miniyun
+Version: 0.1.0
+Summary: Deploy a private MiniYun application market on your own computer
+Author: MiniYun
+License-Expression: MIT
+Project-URL: Homepage, https://mn.pckee.com/
+Project-URL: Documentation, https://mn.pckee.com/docs/
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: System :: Installation/Setup
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: psutil>=5.9
+
+# MiniYun — 在本地建立自己的应用市场
+
+安装后运行两条命令：
+
+```console
+pip install miniyun
+miniyun up
+```
+
+打开命令输出的 `http://127.0.0.1:17880/workspace`，在页面设置你自己的管理员姓名和密码。新环境不包含线上账号、API Key 或业务数据。
+
+PyPI 安装包内附 Windows x64 与 Linux x64 的官方运行包。CLI 选择匹配版本、校验 SHA-256，再启动本机服务；不需要再从演示网站下载。`pip install` 需要联网，完成安装后可以离线初始化和启动。Python 需要 3.10 或更高版本。
+
+首版运行包支持 Windows x64 和 Linux x64，内置工单、请假、报销、组织通讯录四个可信示例。默认是仅监听本机的轻量开发部署。组织、权限、个人 API Key、自定义 H5、应用管理和平台文档都随底座提供。
+
+```console
+miniyun init --dir ./my-market
+miniyun up --dir ./my-market --port 17890
+miniyun status --dir ./my-market
+miniyun logs --dir ./my-market --lines 40
+miniyun down --dir ./my-market
+miniyun doctor
+```
+
+`down` 只停止该目录的进程，保留账号和业务数据。CLI 没有自动删除数据的命令。备份前先停止服务，再备份完整部署目录。
+
+Linux 安装并启动 Docker 后，可以用 `miniyun up --docker` 让模块进入 Docker 隔离环境；Windows 轻量版不提供 Linux Docker 模块运行时。不要在本地开发模式中执行来源不可信的应用包。面向远程团队的完整部署另按网站管理员指南配置 Docker、多语言运行时、独立 PostgreSQL、HTTPS 和邮件登录。
+
+默认部署目录是当前目录下的 `miniyun-system`。默认仅绑定 `127.0.0.1`，不会自动开放公网端口、修改防火墙、接入线上数据库或给第三方发送邮件。

miniyun-0.1.0/README.md

@@ -0,0 +1,29 @@
+# MiniYun — 在本地建立自己的应用市场
+
+安装后运行两条命令：
+
+```console
+pip install miniyun
+miniyun up
+```
+
+打开命令输出的 `http://127.0.0.1:17880/workspace`，在页面设置你自己的管理员姓名和密码。新环境不包含线上账号、API Key 或业务数据。
+
+PyPI 安装包内附 Windows x64 与 Linux x64 的官方运行包。CLI 选择匹配版本、校验 SHA-256，再启动本机服务；不需要再从演示网站下载。`pip install` 需要联网，完成安装后可以离线初始化和启动。Python 需要 3.10 或更高版本。
+
+首版运行包支持 Windows x64 和 Linux x64，内置工单、请假、报销、组织通讯录四个可信示例。默认是仅监听本机的轻量开发部署。组织、权限、个人 API Key、自定义 H5、应用管理和平台文档都随底座提供。
+
+```console
+miniyun init --dir ./my-market
+miniyun up --dir ./my-market --port 17890
+miniyun status --dir ./my-market
+miniyun logs --dir ./my-market --lines 40
+miniyun down --dir ./my-market
+miniyun doctor
+```
+
+`down` 只停止该目录的进程，保留账号和业务数据。CLI 没有自动删除数据的命令。备份前先停止服务，再备份完整部署目录。
+
+Linux 安装并启动 Docker 后，可以用 `miniyun up --docker` 让模块进入 Docker 隔离环境；Windows 轻量版不提供 Linux Docker 模块运行时。不要在本地开发模式中执行来源不可信的应用包。面向远程团队的完整部署另按网站管理员指南配置 Docker、多语言运行时、独立 PostgreSQL、HTTPS 和邮件登录。
+
+默认部署目录是当前目录下的 `miniyun-system`。默认仅绑定 `127.0.0.1`，不会自动开放公网端口、修改防火墙、接入线上数据库或给第三方发送邮件。

miniyun-0.1.0/pyproject.toml

@@ -0,0 +1,27 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "miniyun"
+version = "0.1.0"
+description = "Deploy a private MiniYun application market on your own computer"
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT"
+authors = [{name = "MiniYun"}]
+dependencies = ["psutil>=5.9"]
+classifiers = ["Programming Language :: Python :: 3", "Topic :: System :: Installation/Setup"]
+
+[project.urls]
+Homepage = "https://mn.pckee.com/"
+Documentation = "https://mn.pckee.com/docs/"
+
+[project.scripts]
+miniyun = "miniyun.cli:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools.package-data]
+miniyun = ["runtime/manifest.json", "runtime/*.zip"]

miniyun-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

miniyun-0.1.0/src/miniyun/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.0"

miniyun-0.1.0/src/miniyun/cli.py

@@ -0,0 +1,168 @@
+"""Small local deployment client. No credentials or business data are bundled."""
+import argparse, hashlib, json, os, pathlib, platform, shutil, stat, subprocess, sys, tempfile, time, urllib.parse, urllib.request, zipfile
+from . import __version__
+
+RELEASE = "0.20.23"
+BASE = "https://test.miniyun.com/releases/" + RELEASE + "/"
+
+def root_for(args):
+    return pathlib.Path(args.directory).expanduser().resolve()
+
+def read_json(path):
+    return json.loads(path.read_text(encoding="utf-8"))
+
+def save(path, value):
+    temporary=path.with_suffix(path.suffix+".new")
+    temporary.write_text(json.dumps(value,ensure_ascii=False,indent=2),encoding="utf-8")
+    temporary.chmod(0o600);temporary.replace(path)
+
+def host_key():
+    machine=platform.machine().lower();arch={"x86_64":"amd64","amd64":"amd64","aarch64":"arm64","arm64":"arm64"}.get(machine)
+    osname={"Windows":"windows","Linux":"linux","Darwin":"darwin"}.get(platform.system())
+    if not osname or not arch:raise RuntimeError("当前操作系统或 CPU 暂无运行包")
+    return osname+"-"+arch
+
+def download(url, destination, maximum):
+    with urllib.request.urlopen(url,timeout=45) as response, destination.open("wb") as out:
+        count=0
+        while True:
+            chunk=response.read(1024*1024)
+            if not chunk:break
+            count+=len(chunk)
+            if count>maximum:raise RuntimeError("下载包超过允许大小")
+            out.write(chunk)
+
+def unpack(archive, destination):
+    with zipfile.ZipFile(archive) as z:
+        if sum(x.file_size for x in z.infolist())>512*1024*1024:raise RuntimeError("运行包解压大小无效")
+        for item in z.infolist():
+            target=(destination/item.filename).resolve()
+            if not target.is_relative_to(destination.resolve()) or "\\" in item.filename or stat.S_ISLNK(item.external_attr>>16):raise RuntimeError("运行包含不安全路径")
+        z.extractall(destination)
+        for item in z.infolist():
+            p=destination/item.filename
+            if p.is_file():p.chmod(0o755 if item.external_attr>>16 & 0o111 else 0o600)
+
+def initialize(args):
+    root=root_for(args);config=root/"miniyun.json"
+    if config.exists():
+        value=read_json(config)
+        if value.get("release")!=RELEASE:raise RuntimeError("已有其他版本；请先备份，CLI 不会自动覆盖升级")
+        return root,value
+    if root.exists() and any(root.iterdir()):raise RuntimeError("目标目录非空，且不是已初始化的 MiniYun 目录")
+    root.mkdir(parents=True,exist_ok=True,mode=0o700)
+    print("正在校验并安装 MiniYun 本地运行包…",flush=True)
+    with tempfile.TemporaryDirectory(prefix=".install-",dir=root) as tmp:
+        stage=pathlib.Path(tmp);manifest_path=stage/"manifest.json"
+        bundled=pathlib.Path(__file__).parent/"runtime"
+        if (bundled/"manifest.json").is_file():shutil.copyfile(bundled/"manifest.json",manifest_path)
+        else:download(BASE+"manifest.json",manifest_path,1024*1024)
+        manifest=read_json(manifest_path)
+        if manifest.get("version")!=RELEASE:raise RuntimeError("运行包版本与 CLI 不匹配")
+        package=manifest.get("platforms",{}).get(host_key())
+        if not package:raise RuntimeError("本版运行包暂不支持 "+host_key())
+        name=package["file"]
+        if pathlib.PurePosixPath(name).name!=name or not name.endswith(".zip"):raise RuntimeError("运行包地址无效")
+        archive=stage/"runtime.zip"
+        if (bundled/name).is_file():shutil.copyfile(bundled/name,archive)
+        else:download(BASE+urllib.parse.quote(name),archive,256*1024*1024)
+        digest=hashlib.sha256()
+        with archive.open("rb") as f:
+            for chunk in iter(lambda:f.read(1024*1024),b""):digest.update(chunk)
+        if digest.hexdigest()!=package["sha256"]:raise RuntimeError("SHA-256 校验失败，未运行下载内容")
+        unpacked=stage/"unpacked";unpacked.mkdir();unpack(archive,unpacked)
+        if not (unpacked/("platform.exe" if os.name=="nt" else "platform")).is_file():raise RuntimeError("运行包缺少平台程序")
+        unpacked.rename(root/"runtime")
+    for folder in ["data","logs","ipc"]:(root/folder).mkdir(mode=0o700)
+    modules=root/"runtime/modules";registry=[]
+    if modules.exists():
+        for p in sorted(modules.glob("*/manifest.json")):
+            m=read_json(p);registry.append({"id":m["id"],"capabilities":m["capabilities"]})
+    save(root/"data/registry.json",registry)
+    value={"release":RELEASE,"platform":host_key(),"port":17880};save(config,value)
+    return root,value
+
+def process(root):
+    import psutil
+    receipt=root/"process.json"
+    if not receipt.exists():return None
+    value=read_json(receipt)
+    try:
+        p=psutil.Process(value["pid"])
+        expected=root/"runtime"/("platform.exe" if os.name=="nt" else "platform")
+        if pathlib.Path(p.exe()).resolve()!=expected.resolve() or abs(p.create_time()-value["created"])>0.1:raise RuntimeError("进程标识不匹配，拒绝操作其他程序")
+        if p.status()==psutil.STATUS_ZOMBIE:return None
+        return p
+    except psutil.NoSuchProcess:return None
+
+def request(port, path="/healthz"):
+    with urllib.request.urlopen("http://127.0.0.1:"+str(port)+path,timeout=2) as r:return json.load(r)
+
+def up(args):
+    import psutil
+    root,value=initialize(args)
+    if process(root):print("已运行： http://127.0.0.1:"+str(value['port'])+"/workspace");return
+    port=args.port or value['port']
+    if not 1024<=port<=65535:raise RuntimeError("端口必须在 1024–65535 之间")
+    import socket
+    with socket.socket() as s:
+        if os.name!="nt":s.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR,1)
+        s.bind(("127.0.0.1",port))
+    env={k:v for k,v in os.environ.items() if not k.startswith("OA_") and k not in ["RESEND_API_KEY","OA_MAIL_FROM"]}
+    env["OA_MODULE_RUNTIME"]="native"
+    if args.docker:
+        if platform.system()!="Linux":raise RuntimeError("Docker 模块运行时目前要求 Linux；Windows 可使用默认轻量版")
+        subprocess.run(["docker","info"],check=True,stdout=subprocess.DEVNULL)
+        with tempfile.TemporaryDirectory() as tmp:
+            pathlib.Path(tmp,"Dockerfile").write_text("FROM scratch\n",encoding="utf-8")
+            subprocess.run(["docker","build","-q","-t","oa-module-runtime:1",tmp],check=True)
+        env.update(OA_MODULE_RUNTIME="docker",OA_DOCKER_IPC_DIR=str(root/"ipc"))
+    binary=root/"runtime"/("platform.exe" if os.name=="nt" else "platform")
+    command=[str(binary),"-addr","127.0.0.1:"+str(port),"-data-dir",str(root/"data"),"-module-dir",str(root/"runtime/modules"),"-log-dir",str(root/"logs")]
+    with (root/"logs/launcher.log").open("ab") as log:
+        child=subprocess.Popen(command,cwd=root,env=env,stdin=subprocess.DEVNULL,stdout=log,stderr=log,start_new_session=os.name!="nt",creationflags=subprocess.CREATE_NO_WINDOW if os.name=="nt" else 0)
+    p=psutil.Process(child.pid);save(root/"process.json",{"pid":child.pid,"created":p.create_time()});value['port']=port;save(root/"miniyun.json",value)
+    for _ in range(100):
+        if child.poll() is not None:raise RuntimeError("启动失败，请运行 miniyun logs 查看原因")
+        try:
+            if request(port).get("version")==RELEASE:
+                print("MiniYun 已启动：http://127.0.0.1:"+str(port)+"/workspace\n首次进入请在页面初始化管理员。数据目录："+str(root));return
+        except (OSError,ValueError):pass
+        time.sleep(0.2)
+    raise RuntimeError("启动尚未就绪，请运行 miniyun status 和 miniyun logs 检查；未自动重复启动")
+
+def main(argv=None):
+    p=argparse.ArgumentParser(prog="miniyun",description="在本机建立自己的 MiniYun 应用市场")
+    p.add_argument("--version",action="version",version="miniyun "+__version__)
+    sub=p.add_subparsers(dest="operation",required=True)
+    for name in ["init","up","down","status","logs","doctor"]:
+        cmd=sub.add_parser(name);cmd.add_argument("--dir",dest="directory",default="./miniyun-system")
+        if name=="up":cmd.add_argument("--port",type=int);cmd.add_argument("--docker",action="store_true")
+        if name=="logs":cmd.add_argument("--lines",type=int,default=40)
+    args=p.parse_args(argv)
+    try:
+        if args.operation=="init":root,value=initialize(args);print("已初始化："+str(root)+"\n运行 miniyun up 启动。")
+        elif args.operation=="up":up(args)
+        elif args.operation=="doctor":print(json.dumps({"cli":__version__,"python":platform.python_version(),"platform":host_key(),"docker_cli":bool(shutil.which("docker")),"release":RELEASE},ensure_ascii=False,indent=2))
+        elif args.operation=="logs":
+            from collections import deque
+            root=root_for(args);path=root/"logs/platform.log"
+            if not path.exists():path=root/"logs/launcher.log"
+            if not 1<=args.lines<=1000:raise RuntimeError("日志行数必须为 1–1000")
+            with path.open(encoding="utf-8",errors="replace") as f:print(''.join(deque(f,maxlen=args.lines)),end='')
+        else:
+            root=root_for(args);value=read_json(root/"miniyun.json");proc=process(root)
+            if args.operation=="down":
+                if proc:
+                    import psutil
+                    proc.terminate()
+                    try:proc.wait(25)
+                    except psutil.TimeoutExpired:raise RuntimeError("仍在停止；未强制杀进程，请检查日志")
+                print("已停止；账号和业务数据保留。")
+            elif proc:print(json.dumps({"running":True,"url":"http://127.0.0.1:"+str(value['port'])+"/workspace","health":request(value['port']),"ready":request(value['port'],'/readyz')},ensure_ascii=False,indent=2))
+            else:print(json.dumps({"running":False,"data_preserved":True}))
+        return 0
+    except (OSError,ValueError,RuntimeError,subprocess.SubprocessError) as error:
+        print("MiniYun: "+str(error),file=sys.stderr);return 1
+
+if __name__=="__main__":sys.exit(main())

miniyun-0.1.0/src/miniyun/runtime/manifest.json

@@ -0,0 +1,27 @@
+{
+  "version": "0.20.23",
+  "platforms": {
+    "windows-amd64": {
+      "file": "miniyun-0.20.23-windows-amd64.zip",
+      "sha256": "32cf5dc42f56e1d89b30dc8d4abfd4a01c55c2dd02df2f7b58f5fe9626f7b80d",
+      "bytes": 26297898,
+      "examples": [
+        "workorder",
+        "leave",
+        "reimbursement",
+        "directory"
+      ]
+    },
+    "linux-amd64": {
+      "file": "miniyun-0.20.23-linux-amd64.zip",
+      "sha256": "4fbf2e515c0591652fb6e38669b79e3e54ff486d5fefede91c2d3b9e6aa97e9c",
+      "bytes": 25549108,
+      "examples": [
+        "workorder",
+        "leave",
+        "reimbursement",
+        "directory"
+      ]
+    }
+  }
+}

miniyun-0.1.0/src/miniyun.egg-info/PKG-INFO

@@ -0,0 +1,43 @@
+Metadata-Version: 2.4
+Name: miniyun
+Version: 0.1.0
+Summary: Deploy a private MiniYun application market on your own computer
+Author: MiniYun
+License-Expression: MIT
+Project-URL: Homepage, https://mn.pckee.com/
+Project-URL: Documentation, https://mn.pckee.com/docs/
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: System :: Installation/Setup
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: psutil>=5.9
+
+# MiniYun — 在本地建立自己的应用市场
+
+安装后运行两条命令：
+
+```console
+pip install miniyun
+miniyun up
+```
+
+打开命令输出的 `http://127.0.0.1:17880/workspace`，在页面设置你自己的管理员姓名和密码。新环境不包含线上账号、API Key 或业务数据。
+
+PyPI 安装包内附 Windows x64 与 Linux x64 的官方运行包。CLI 选择匹配版本、校验 SHA-256，再启动本机服务；不需要再从演示网站下载。`pip install` 需要联网，完成安装后可以离线初始化和启动。Python 需要 3.10 或更高版本。
+
+首版运行包支持 Windows x64 和 Linux x64，内置工单、请假、报销、组织通讯录四个可信示例。默认是仅监听本机的轻量开发部署。组织、权限、个人 API Key、自定义 H5、应用管理和平台文档都随底座提供。
+
+```console
+miniyun init --dir ./my-market
+miniyun up --dir ./my-market --port 17890
+miniyun status --dir ./my-market
+miniyun logs --dir ./my-market --lines 40
+miniyun down --dir ./my-market
+miniyun doctor
+```
+
+`down` 只停止该目录的进程，保留账号和业务数据。CLI 没有自动删除数据的命令。备份前先停止服务，再备份完整部署目录。
+
+Linux 安装并启动 Docker 后，可以用 `miniyun up --docker` 让模块进入 Docker 隔离环境；Windows 轻量版不提供 Linux Docker 模块运行时。不要在本地开发模式中执行来源不可信的应用包。面向远程团队的完整部署另按网站管理员指南配置 Docker、多语言运行时、独立 PostgreSQL、HTTPS 和邮件登录。
+
+默认部署目录是当前目录下的 `miniyun-system`。默认仅绑定 `127.0.0.1`，不会自动开放公网端口、修改防火墙、接入线上数据库或给第三方发送邮件。

miniyun-0.1.0/src/miniyun.egg-info/SOURCES.txt

@@ -0,0 +1,14 @@
+README.md
+pyproject.toml
+src/miniyun/__init__.py
+src/miniyun/cli.py
+src/miniyun.egg-info/PKG-INFO
+src/miniyun.egg-info/SOURCES.txt
+src/miniyun.egg-info/dependency_links.txt
+src/miniyun.egg-info/entry_points.txt
+src/miniyun.egg-info/requires.txt
+src/miniyun.egg-info/top_level.txt
+src/miniyun/runtime/manifest.json
+src/miniyun/runtime/miniyun-0.20.23-linux-amd64.zip
+src/miniyun/runtime/miniyun-0.20.23-windows-amd64.zip
+tests/test_cli.py

miniyun-0.1.0/src/miniyun.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

miniyun-0.1.0/src/miniyun.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+miniyun = miniyun.cli:main

miniyun-0.1.0/src/miniyun.egg-info/requires.txt

@@ -0,0 +1 @@
+psutil>=5.9

miniyun-0.1.0/src/miniyun.egg-info/top_level.txt

@@ -0,0 +1 @@
+miniyun

miniyun-0.1.0/tests/test_cli.py

@@ -0,0 +1,35 @@
+import argparse,hashlib,json,pathlib,sys,tempfile,unittest,zipfile
+from unittest import mock
+sys.path.insert(0,str(pathlib.Path(__file__).resolve().parents[1]/'src'))
+from miniyun import cli
+
+class InstallationTests(unittest.TestCase):
+ def test_zip_rejects_escape_and_symlink(self):
+  for name,mode in [('../outside',0o100644),('link',0o120777)]:
+   with tempfile.TemporaryDirectory() as tmp:
+    root=pathlib.Path(tmp);archive=root/'bad.zip'
+    with zipfile.ZipFile(archive,'w') as z:
+     info=zipfile.ZipInfo(name);info.external_attr=mode<<16;z.writestr(info,'outside')
+    with self.assertRaises(RuntimeError):cli.unpack(archive,root/'target')
+    self.assertFalse((root.parent/'outside').exists())
+ def test_checksum_failure_never_installs_or_runs(self):
+  with tempfile.TemporaryDirectory() as tmp:
+   root=pathlib.Path(tmp)/'market';args=argparse.Namespace(directory=str(root))
+   def fake(url,path,maximum):
+    if url.endswith('manifest.json'):path.write_text(json.dumps({'version':cli.RELEASE,'platforms':{cli.host_key():{'file':'runtime.zip','sha256':'0'*64}}}))
+    else:path.write_bytes(b'corrupted runtime')
+   with mock.patch.object(cli,'__file__',str(pathlib.Path(tmp)/'unbundled/cli.py')),mock.patch.object(cli,'download',side_effect=fake),mock.patch.object(cli.subprocess,'Popen') as launch:
+    with self.assertRaisesRegex(RuntimeError,'SHA-256'):cli.initialize(args)
+    launch.assert_not_called();self.assertFalse((root/'runtime').exists());self.assertFalse((root/'miniyun.json').exists())
+ def test_existing_directory_data_is_preserved(self):
+  with tempfile.TemporaryDirectory() as tmp:
+   root=pathlib.Path(tmp);(root/'business-data').write_text('preserve')
+   with self.assertRaises(RuntimeError):cli.initialize(argparse.Namespace(directory=str(root)))
+   self.assertEqual((root/'business-data').read_text(),'preserve')
+ def test_foreign_process_is_not_stopped(self):
+  with tempfile.TemporaryDirectory() as tmp:
+   import psutil,os
+   root=pathlib.Path(tmp);p=psutil.Process(os.getpid());cli.save(root/'process.json',{'pid':p.pid,'created':p.create_time()})
+   with self.assertRaisesRegex(RuntimeError,'进程标识'):cli.process(root)
+
+if __name__=='__main__':unittest.main()