mirror of
https://github.com/qingchencloud/clawpanel.git
synced 2026-05-30 04:40:18 +08:00
129d8c0ac1
校对：Hermes 没有 file HTTP API，必须自建。
## Rust 后端：3 个安全 fs 命令（~180 行）
### 安全策略
- 所有路径必须在 hermes_home() 子树内（防 path traversal）
- canonicalize 后用 starts_with 验证
- 拒绝绝对路径跳出 + .. 跳出
- 5 MB 文件大小上限
- 单次列目录最多 2000 条
### 命令
- hermes_fs_list(path) → { path, entries: [{name, kind, size, modified}] }
· 隐藏文件默认不显示（.env 除外）
· 排序：目录在前，文件在后，按名字
- hermes_fs_read(path) → { path, size, text?, binary_b64? }
· UTF-8 文本 → text
· 二进制 → 内置 base64 编码（不引新依赖）
- hermes_fs_write(path, content) → { path, size }
· 父目录必须存在
· 5 MB 上限
## 前端 /h/files 页面（~270 行）
### UI 布局
- 左侧：面包屑 + 目录树（点目录进入 / 点文件选中）
- 右侧：编辑器（文本）/ 预览（图片）/ 元信息（其他二进制）
### 文件树
- 文件图标按扩展名（📁/🔗/🖼️/📝/⚙️/📄）
- 文件大小显示（B/KB/MB）
- ".." 返回上级
- 选中态高亮
### 编辑器
- textarea 编辑，monospace 字体
- "保存 *" 状态标记 dirty
- 切目录/文件前 showConfirm 「丢弃未保存修改？」
- 保存成功 toast
### 二进制预览
- 图片 (png/jpg/gif/webp/svg) → 用 data: URL 显示
- 其他 → 「二进制文件（不可编辑）」+ 文件大小
## sidebar
- 「管理」section 加文件管理器入口（folder icon）
- /h/files 路由注册（含意外的 routes 顺序修复）
### dev-api.js
- Web 模式走 Node fs.readdirSync/readFileSync/writeFileSync
- 同样的安全策略：根目录 hermes_home() = process.env.HERMES_HOME 或 ~/.hermes
- realpath 验证 + 5 MB 限制
### CSS（~165 行）
- .hm-files-layout: grid 双栏（响应式 → 单栏）
- .hm-files-tree: 左侧树，breadcrumb + entry 列表
- .hm-files-pane: 右侧编辑器/预览
- .hm-files-editor: 全宽 textarea，monospace
- 响应式：768px 以下单栏
### i18n
- 12 个新键 × 3 语言（hermesFiles*）
## 修复
- src/engines/hermes/index.js 末尾多余 `}` 删除（之前 edit 留下）
## 累计
- Rust ~180 行 + 前端 ~270 行 + CSS ~165 行 + dev-api ~55 行
- 12 个 i18n × 3 语言
- cargo check ✓ + npm build ✓
349 lines
14 KiB
Rust
349 lines
14 KiB
Rust
mod commands;
|
||
mod models;
|
||
mod tray;
|
||
mod utils;
|
||
|
||
use commands::{
|
||
agent, assistant, cli_conflict, config, device, diagnose, extensions, hermes, hermes_providers,
|
||
logs, memory, messaging, pairing, service, skills, update,
|
||
};
|
||
|
||
pub fn run() {
|
||
let hot_update_dir = commands::openclaw_dir()
|
||
.join("clawpanel")
|
||
.join("web-update");
|
||
|
||
// issue #261: 装新版 app 时，如果旧的热更新目录里装的是更旧版本的前端
|
||
// （或根本没 .version 标记），protocol handler 会优先读它，导致
|
||
// 用户装了 v0.14.0 看到的还是 v0.9.8 的界面。
|
||
// 启动时先比对版本，落后于当前 app 就直接清掉，让 protocol handler 回退到内嵌 bundle。
|
||
cleanup_stale_hot_update(&hot_update_dir);
|
||
|
||
tauri::Builder::default()
|
||
.plugin(tauri_plugin_shell::init())
|
||
.plugin(tauri_plugin_autostart::init(
|
||
tauri_plugin_autostart::MacosLauncher::LaunchAgent,
|
||
None,
|
||
))
|
||
.register_uri_scheme_protocol("tauri", move |ctx, request| {
|
||
let uri_path = request.uri().path();
|
||
let path = if uri_path == "/" || uri_path.is_empty() {
|
||
"index.html"
|
||
} else {
|
||
uri_path.strip_prefix('/').unwrap_or(uri_path)
|
||
};
|
||
|
||
// 1. 优先检查热更新目录
|
||
let update_file = hot_update_dir.join(path);
|
||
if update_file.is_file() {
|
||
if let Ok(data) = std::fs::read(&update_file) {
|
||
return tauri::http::Response::builder()
|
||
.header(
|
||
tauri::http::header::CONTENT_TYPE,
|
||
update::mime_from_path(path),
|
||
)
|
||
.body(data)
|
||
.unwrap();
|
||
}
|
||
}
|
||
|
||
// 2. 回退到内嵌资源
|
||
if let Some(asset) = ctx.app_handle().asset_resolver().get(path.to_string()) {
|
||
let builder = tauri::http::Response::builder()
|
||
.header(tauri::http::header::CONTENT_TYPE, &asset.mime_type);
|
||
// Tauri 内嵌资源可能带 CSP header
|
||
let builder = if let Some(csp) = asset.csp_header {
|
||
builder.header("Content-Security-Policy", csp)
|
||
} else {
|
||
builder
|
||
};
|
||
builder.body(asset.bytes).unwrap()
|
||
} else {
|
||
tauri::http::Response::builder()
|
||
.status(tauri::http::StatusCode::NOT_FOUND)
|
||
.body(b"Not Found".to_vec())
|
||
.unwrap()
|
||
}
|
||
})
|
||
.setup(|app| {
|
||
service::start_backend_guardian(app.handle().clone());
|
||
tray::setup_tray(app.handle())?;
|
||
Ok(())
|
||
})
|
||
.invoke_handler(tauri::generate_handler![
|
||
// 配置
|
||
config::read_openclaw_config,
|
||
config::write_openclaw_config,
|
||
config::validate_openclaw_config,
|
||
config::read_mcp_config,
|
||
config::write_mcp_config,
|
||
config::get_version_info,
|
||
config::check_installation,
|
||
config::init_openclaw_config,
|
||
config::calibrate_openclaw_config,
|
||
config::check_node,
|
||
config::check_node_at_path,
|
||
config::check_openclaw_at_path,
|
||
config::scan_node_paths,
|
||
config::scan_openclaw_paths,
|
||
config::save_custom_node_path,
|
||
config::write_env_file,
|
||
config::list_backups,
|
||
config::create_backup,
|
||
config::restore_backup,
|
||
config::delete_backup,
|
||
config::reload_gateway,
|
||
config::restart_gateway,
|
||
config::test_model,
|
||
config::test_model_verbose,
|
||
config::list_remote_models,
|
||
config::list_openclaw_versions,
|
||
config::upgrade_openclaw,
|
||
config::uninstall_openclaw,
|
||
config::install_gateway,
|
||
config::uninstall_gateway,
|
||
config::patch_model_vision,
|
||
config::check_panel_update,
|
||
config::get_openclaw_dir,
|
||
config::read_panel_config,
|
||
config::write_panel_config,
|
||
config::test_proxy,
|
||
config::get_npm_registry,
|
||
config::set_npm_registry,
|
||
config::check_git,
|
||
config::scan_git_paths,
|
||
config::auto_install_git,
|
||
config::configure_git_https,
|
||
config::invalidate_path_cache,
|
||
config::get_status_summary,
|
||
config::doctor_fix,
|
||
config::doctor_check,
|
||
config::relaunch_app,
|
||
// 设备密钥 + Gateway 握手
|
||
device::create_connect_frame,
|
||
// 设备配对
|
||
pairing::auto_pair_device,
|
||
pairing::check_pairing_status,
|
||
pairing::pairing_list_channel,
|
||
pairing::pairing_approve_channel,
|
||
// 服务
|
||
service::get_services_status,
|
||
service::start_service,
|
||
service::stop_service,
|
||
service::restart_service,
|
||
service::claim_gateway,
|
||
service::probe_gateway_port,
|
||
service::guardian_status,
|
||
// 诊断
|
||
diagnose::diagnose_gateway_connection,
|
||
diagnose::check_ciao_windowshide_bug,
|
||
// CLI 冲突检测与隔离（PATH 中残留的非 standalone openclaw）
|
||
cli_conflict::scan_openclaw_path_conflicts,
|
||
cli_conflict::quarantine_openclaw_path,
|
||
cli_conflict::quarantine_openclaw_paths_bulk,
|
||
cli_conflict::list_quarantined_openclaw,
|
||
cli_conflict::restore_quarantined_openclaw,
|
||
// 日志
|
||
logs::read_log_tail,
|
||
logs::search_log,
|
||
// 记忆文件
|
||
memory::list_memory_files,
|
||
memory::read_memory_file,
|
||
memory::write_memory_file,
|
||
memory::delete_memory_file,
|
||
memory::export_memory_zip,
|
||
// 扩展工具
|
||
extensions::get_cftunnel_status,
|
||
extensions::cftunnel_action,
|
||
extensions::get_cftunnel_logs,
|
||
extensions::get_clawapp_status,
|
||
extensions::install_cftunnel,
|
||
extensions::install_clawapp,
|
||
// Agent 管理
|
||
agent::list_agents,
|
||
agent::get_agent_detail,
|
||
agent::list_agent_files,
|
||
agent::read_agent_file,
|
||
agent::write_agent_file,
|
||
agent::get_agent_workspace_info,
|
||
agent::list_agent_workspace_entries,
|
||
agent::read_agent_workspace_file,
|
||
agent::write_agent_workspace_file,
|
||
agent::add_agent,
|
||
agent::delete_agent,
|
||
agent::update_agent_config,
|
||
agent::update_agent_identity,
|
||
agent::update_agent_model,
|
||
agent::backup_agent,
|
||
// AI 助手工具
|
||
assistant::assistant_exec,
|
||
assistant::assistant_read_file,
|
||
assistant::assistant_write_file,
|
||
assistant::assistant_list_dir,
|
||
assistant::assistant_system_info,
|
||
assistant::assistant_list_processes,
|
||
assistant::assistant_check_port,
|
||
assistant::assistant_web_search,
|
||
assistant::assistant_fetch_url,
|
||
// 数据目录 & 图片存储
|
||
assistant::assistant_ensure_data_dir,
|
||
assistant::assistant_save_image,
|
||
assistant::assistant_load_image,
|
||
assistant::assistant_delete_image,
|
||
// 消息渠道管理
|
||
messaging::read_platform_config,
|
||
messaging::save_messaging_platform,
|
||
messaging::remove_messaging_platform,
|
||
messaging::toggle_messaging_platform,
|
||
messaging::verify_bot_token,
|
||
messaging::diagnose_channel,
|
||
messaging::repair_qqbot_channel_setup,
|
||
messaging::list_configured_platforms,
|
||
messaging::get_channel_plugin_status,
|
||
messaging::list_all_plugins,
|
||
messaging::toggle_plugin,
|
||
messaging::install_plugin,
|
||
messaging::install_channel_plugin,
|
||
messaging::install_qqbot_plugin,
|
||
messaging::run_channel_action,
|
||
messaging::check_weixin_plugin_status,
|
||
// Agent 渠道绑定管理
|
||
messaging::get_agent_bindings,
|
||
messaging::list_all_bindings,
|
||
messaging::save_agent_binding,
|
||
messaging::delete_agent_binding,
|
||
messaging::delete_agent_all_bindings,
|
||
// Skills 管理
|
||
skills::skills_list,
|
||
skills::skills_info,
|
||
skills::skills_check,
|
||
skills::skills_install_dep,
|
||
skills::skills_uninstall,
|
||
skills::skills_validate,
|
||
// SkillHub SDK（内置 HTTP，不依赖 CLI）
|
||
skills::skillhub_search,
|
||
skills::skillhub_index,
|
||
skills::skillhub_install,
|
||
// 前端热更新
|
||
update::check_frontend_update,
|
||
update::download_frontend_update,
|
||
update::rollback_frontend_update,
|
||
update::get_update_status,
|
||
// Hermes Agent 管理
|
||
hermes::check_python,
|
||
hermes::check_hermes,
|
||
hermes::install_hermes,
|
||
hermes::configure_hermes,
|
||
hermes::hermes_gateway_action,
|
||
hermes::hermes_health_check,
|
||
hermes::hermes_capabilities,
|
||
hermes::hermes_api_proxy,
|
||
hermes::hermes_agent_run,
|
||
hermes::hermes_run_stop,
|
||
hermes::hermes_run_approval,
|
||
hermes::hermes_run_status,
|
||
hermes::hermes_session_export,
|
||
hermes::hermes_dashboard_api_proxy,
|
||
hermes::hermes_multi_gateway_list,
|
||
hermes::hermes_multi_gateway_add,
|
||
hermes::hermes_multi_gateway_remove,
|
||
hermes::hermes_multi_gateway_start,
|
||
hermes::hermes_multi_gateway_stop,
|
||
hermes::hermes_fs_list,
|
||
hermes::hermes_fs_read,
|
||
hermes::hermes_fs_write,
|
||
hermes::hermes_read_config,
|
||
hermes::hermes_read_config_full,
|
||
hermes::hermes_lazy_deps_features,
|
||
hermes::hermes_lazy_deps_status,
|
||
hermes::hermes_lazy_deps_ensure,
|
||
hermes::hermes_fetch_models,
|
||
hermes::hermes_update_model,
|
||
hermes::hermes_detect_environments,
|
||
hermes_providers::hermes_list_providers,
|
||
hermes::hermes_env_read_unmanaged,
|
||
hermes::hermes_env_set,
|
||
hermes::hermes_env_delete,
|
||
hermes::hermes_env_reveal,
|
||
hermes::hermes_config_raw_read,
|
||
hermes::hermes_config_raw_write,
|
||
hermes::hermes_set_gateway_url,
|
||
hermes::update_hermes,
|
||
hermes::uninstall_hermes,
|
||
hermes::hermes_sessions_list,
|
||
hermes::hermes_sessions_summary_list,
|
||
hermes::hermes_usage_analytics,
|
||
hermes::hermes_session_detail,
|
||
hermes::hermes_session_delete,
|
||
hermes::hermes_session_rename,
|
||
hermes::hermes_profiles_list,
|
||
hermes::hermes_profile_use,
|
||
hermes::hermes_logs_list,
|
||
hermes::hermes_logs_read,
|
||
hermes::hermes_skills_list,
|
||
hermes::hermes_skill_detail,
|
||
hermes::hermes_skill_toggle,
|
||
hermes::hermes_skill_files,
|
||
hermes::hermes_skill_write,
|
||
hermes::hermes_memory_read,
|
||
hermes::hermes_memory_write,
|
||
hermes::hermes_memory_read_all,
|
||
hermes::hermes_logs_download,
|
||
hermes::hermes_dashboard_themes,
|
||
hermes::hermes_dashboard_theme_set,
|
||
hermes::hermes_dashboard_plugins,
|
||
hermes::hermes_dashboard_plugins_rescan,
|
||
hermes::hermes_dashboard_probe,
|
||
hermes::hermes_dashboard_start,
|
||
hermes::hermes_dashboard_stop,
|
||
hermes::hermes_toolsets_list,
|
||
hermes::hermes_cron_jobs_list,
|
||
])
|
||
.on_window_event(|window, event| {
|
||
// 关闭窗口时最小化到托盘，不退出应用
|
||
if let tauri::WindowEvent::CloseRequested { api, .. } = event {
|
||
api.prevent_close();
|
||
let _ = window.hide();
|
||
}
|
||
})
|
||
.build(tauri::generate_context!())
|
||
.expect("启动 ClawPanel 失败")
|
||
.run(|_app, _event| {});
|
||
}
|
||
|
||
/// 启动时清理落后版本的热更新目录（issue #261）。
|
||
///
|
||
/// 规则：
|
||
/// - 目录不存在：noop
|
||
/// - 目录存在，`.version` 文件不存在：视为"版本未知"，保守清理
|
||
/// （老版 ClawPanel 没写 .version，不清理就会永远卡在旧前端）
|
||
/// - 目录存在，`.version >= app 版本`：保留（正常热更新场景）
|
||
/// - 目录存在，`.version < app 版本`：清理（用户装了新 app，旧热更新残留）
|
||
fn cleanup_stale_hot_update(dir: &std::path::Path) {
|
||
if !dir.exists() {
|
||
return;
|
||
}
|
||
let app_version = env!("CARGO_PKG_VERSION");
|
||
let web_version = std::fs::read_to_string(dir.join(".version"))
|
||
.ok()
|
||
.map(|s| s.trim().to_string())
|
||
.unwrap_or_default();
|
||
|
||
// 有标记且 >= app 版本：保留
|
||
if !web_version.is_empty() && update::version_ge(&web_version, app_version) {
|
||
return;
|
||
}
|
||
|
||
// 落后或无标记：清理，让 protocol handler 回退到 asset_resolver
|
||
eprintln!(
|
||
"[clawpanel] clearing stale web-update dir (app={}, web={})",
|
||
app_version,
|
||
if web_version.is_empty() {
|
||
"<missing>"
|
||
} else {
|
||
web_version.as_str()
|
||
}
|
||
);
|
||
let _ = std::fs::remove_dir_all(dir);
|
||
}
|