93 lines
4.0 KiB
JavaScript
93 lines
4.0 KiB
JavaScript
|
#!/usr/bin/env node
|
|||
|
|
/**
|
|||
|
|
* ensure-workspace-picker-patch.cjs —— 把「工作区目录选择器收敛」平台段幂等写入各用户 profile patch。
|
|||
|
|
*
|
|||
|
|
* 背景（档案 18 v3，2026-09-11 实测）：
|
|||
|
|
* · 官方 dsh-web-app 的 `directory-picker` 行(@…-auto) 在启动时**连带挂载客户端对话框**
|
|||
|
|
* (@deepseek-ai/dsh-client-ui-directory-picker-browse)；把它 disabled 会让对话框消失（点不动）。
|
|||
|
|
* · 该 client 包自带 dsh.client 元数据，可**单独作为一行**插入 → 保留官方对话框 UI。
|
|||
|
|
* · host 面(seam) 改由自建 @dsh-local/workspace-scoped-picker 提供：根固定为 <userRoot>/ws，
|
|||
|
|
* 越界（/etc、..、他人目录、符号链接逃逸）一律拒绝 → 路径框里手输也出不去。
|
|||
|
|
* · 另由该插件的 client 面注入 CSS，隐藏「改路径」入口（crumbEditZone/Glyph）。
|
|||
|
|
*
|
|||
|
|
* 用法：
|
|||
|
|
* node ensure-workspace-picker-patch.cjs # 全部用户（幂等）
|
|||
|
|
* node ensure-workspace-picker-patch.cjs --dry-run # 只打印计划
|
|||
|
|
* node ensure-workspace-picker-patch.cjs --restart # 写后 kill 实例（由崩溃自愈拉起，读新 patch）
|
|||
|
|
* node ensure-workspace-picker-patch.cjs admin guest # 指定用户
|
|||
|
|
*
|
|||
|
|
* 幂等：以 BEGIN/END 标记包裹平台段；已存在即跳过（不改内容）。
|
|||
|
|
* 注意：本脚本**只追加平台段**，不触碰既有内容（角色 patch 等原样保留）。
|
|||
|
|
*/
|
|||
|
|
const { execFileSync } = require('node:child_process')
|
|||
|
|
const { existsSync, readFileSync, writeFileSync } = require('node:fs')
|
|||
|
|
const { join } = require('node:path')
|
|||
|
|
const Database = require('/opt/dshs/node_modules/better-sqlite3')
|
|||
|
|
|
|||
|
|
const DB_PATH = '/var/lib/dshs/dshs.db'
|
|||
|
|
const PROFILE = 'web'
|
|||
|
|
const BEGIN = '# >>> platform: workspace-scoped-picker (managed by ensure-workspace-picker-patch.cjs)'
|
|||
|
|
const END = '# <<< platform: workspace-scoped-picker'
|
|||
|
|
const DRY = process.argv.includes('--dry-run')
|
|||
|
|
const RESTART = process.argv.includes('--restart')
|
|||
|
|
const only = process.argv.slice(2).filter((a) => !a.startsWith('--'))
|
|||
|
|
|
|||
|
|
const BLOCK = [
|
|||
|
|
BEGIN,
|
|||
|
|
'# 目录选择器收敛：官方对话框 UI 保留（单独插入 client 面），host 面换成受限实现（根=自有 ws）',
|
|||
|
|
'- insert:',
|
|||
|
|
' - id: workspace-scoped-picker',
|
|||
|
|
' name: "@dsh-local/workspace-scoped-picker"',
|
|||
|
|
' - id: ui-directory-picker-browse',
|
|||
|
|
' name: "@deepseek-ai/dsh-client-ui-directory-picker-browse"',
|
|||
|
|
'- id: directory-picker',
|
|||
|
|
' name: "@deepseek-ai/dsh-host-directory-picker-auto"',
|
|||
|
|
' disabled: true',
|
|||
|
|
END,
|
|||
|
|
'',
|
|||
|
|
].join('\n')
|
|||
|
|
|
|||
|
|
const db = new Database(DB_PATH, { readonly: true })
|
|||
|
|
const users = db
|
|||
|
|
.prepare('SELECT username, uid, home_dir FROM users')
|
|||
|
|
.all()
|
|||
|
|
.filter((u) => only.length === 0 || only.includes(u.username))
|
|||
|
|
|
|||
|
|
for (const user of users) {
|
|||
|
|
const patchPath = join(user.home_dir, 'profiles', PROFILE, 'cordis.patch.yml')
|
|||
|
|
if (!existsSync(patchPath)) {
|
|||
|
|
console.log(` ${user.username}: NO_PROFILE（用户未首登 spawn，先登录一次）`)
|
|||
|
|
continue
|
|||
|
|
}
|
|||
|
|
const current = readFileSync(patchPath, 'utf8')
|
|||
|
|
if (current.includes(BEGIN)) {
|
|||
|
|
console.log(` ${user.username}: skip（平台段已存在）`)
|
|||
|
|
continue
|
|||
|
|
}
|
|||
|
|
const body = current.trim() === '' || current.trim() === '[]' ? '' : current.trimEnd() + '\n\n'
|
|||
|
|
const next = body + BLOCK
|
|||
|
|
if (DRY) {
|
|||
|
|
console.log(` ${user.username}: [dry-run] 将写入 ${patchPath}`)
|
|||
|
|
continue
|
|||
|
|
}
|
|||
|
|
writeFileSync(patchPath, next, 'utf8')
|
|||
|
|
try {
|
|||
|
|
execFileSync('chown', [`${user.uid}:${user.uid}`, patchPath])
|
|||
|
|
} catch {}
|
|||
|
|
console.log(` ${user.username}: wrote（已追加平台段）${RESTART ? ' + 重启实例' : ''}`)
|
|||
|
|
if (RESTART) {
|
|||
|
|
try {
|
|||
|
|
const out = execFileSync('ps', ['-eo', 'pid,user', '--no-headers'], { encoding: 'utf8' })
|
|||
|
|
for (const line of out.split('\n')) {
|
|||
|
|
const [pid, uname] = line.trim().split(/\s+/)
|
|||
|
|
if (pid && uname === `dsh-${user.uid}`) {
|
|||
|
|
try {
|
|||
|
|
process.kill(Number(pid))
|
|||
|
|
} catch {}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
} catch {}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
db.close()
|
|||
|
|
console.log('done')
|