import { installUnreadBadge } from './unread-badge.mjs' import { app, BrowserWindow, ipcMain, Menu, Tray, nativeImage, shell, utilityProcess, powerMonitor, systemPreferences, dialog, safeStorage, net, session as electronSession } from 'electron' import { appendFileSync, mkdirSync, readFileSync, realpathSync } from 'node:fs' import { join, dirname } from 'node:path' import { homedir, hostname } from 'node:os' import { fileURLToPath, pathToFileURL } from 'node:url' import { DesktopServiceManager } from './service-manager.mjs' import { DesktopRunnerManager } from './runner-manager.mjs' import { DesktopPreferences } from './preferences.mjs' import { DesktopCredentials } from './credentials.mjs' import { synchronizeLocalService, stopLocalService, migrateLocalData } from './service-sync.mjs' import { resolveDataHome } from './data-home.mjs' import { DesktopEnvironmentHost, DesktopHostCore } from './environment-host.mjs' import { DesktopHostManager } from './host-manager.mjs' import { remoteRegistration, remoteSession, enrollDesktopHost, inspectServer, persistRemoteSession, sessionCookieDetails } from './remote-login.mjs' import { DesktopLoginSessions } from './login-sessions.mjs' import { DesktopOnboarding } from './onboarding.mjs' import { DesktopUpdateManager } from './update-manager.mjs' import { DesktopAutoUpdateManager } from './auto-update-manager.mjs' import { createRequire } from 'node:module' import { installComputerViewer } from './computer-viewer.mjs' import { desktopPlatform, desktopMenu, loginItemOptions, clientOnlyRuntime } from './platform.mjs' const desktopRoot = dirname(fileURLToPath(import.meta.url)) const fixtureHome = process.env.HERMES_YAOYAO_DESKTOP_TEST_HOME // Packaged: the runtime sits in Resources/runtime; dev: staged build roots. const clientOnly = app.isPackaged ? clientOnlyRuntime(join(process.resourcesPath, 'runtime')) : process.env.HERMES_YAOYAO_DESKTOP_CLIENT_ONLY === '0' ? false : clientOnlyRuntime(join(app.getAppPath(), '.desktop-build-client')) const platform = desktopPlatform(process.platform, { clientOnly }) const loginOptions = loginItemOptions() // Fixture identity also isolates Chromium cookies, window state and the app lock. // The shell package name distinguishes the variants: the client keeps the // historical 夭夭 identity (userData, logs, single-instance lock) so upgrades // stay in place, while the full dual-mode build uses its own 夭夭完整版 home. const shellManifest = app.isPackaged ? join(desktopRoot, 'package.json') : join(app.getAppPath(), clientOnly ? '.desktop-build-client' : '.desktop-build', 'shell', 'package.json') const productName = JSON.parse(readFileSync(shellManifest, 'utf8')).productName || '夭夭' if (fixtureHome) app.setPath('userData', join(fixtureHome, 'desktop')) app.setName(productName) if (platform.windows) app.setAppUserModelId('cn.samien.yaoyao.desktop') if (!app.requestSingleInstanceLock()) { app.quit() } else { let window, tray, manager, runnerManager, quitting = false, closing = false, timer let updateWindow, updater, environmentHost, hostManager, onboarding let remoteMode = false, remoteURL = '', serverModeActive = false, switchingMode = false let recoveringService = false let resumeLocalAfterUpdate = false let checkRemoteAuthorization = async () => {} const serviceURL = () => remoteMode ? remoteURL : manager?.state.url // Use the same Chromium networking as server detection/navigation. Auth owns // its cookie jar: do not send or overwrite another account's browser cookies. const authFetch = (url, options) => net.fetch(url, { ...options, credentials: 'omit' }) const serviceOrigins = () => { try { return remoteMode && remoteURL ? [new URL(remoteURL).origin] : manager?.state.url ? [new URL(manager.state.url).origin] : [] } catch { return [] } } const unreadBadge=installUnreadBadge({ipcMain,app,owner:()=>window,origins:serviceOrigins,url:serviceURL,quitting:()=>closing||quitting,fetch:(url,options)=>electronSession.defaultSession.fetch(url,options)}) app.on('will-quit',()=>unreadBadge.stop()) const closeComputerViewer = installComputerViewer({ owner: () => window, origin: () => serviceURL(), preload: join(desktopRoot, 'preload.cjs'), quitting: () => quitting }) app.on('will-quit', closeComputerViewer) const updateURL = pathToFileURL(join(desktopRoot, 'update.html')).href const bootURL = pathToFileURL(join(desktopRoot, 'boot.html')).href const root = app.isPackaged ? join(process.resourcesPath, 'runtime') : join(app.getAppPath(), clientOnly ? '.desktop-build-client' : '.desktop-build') const logRoot = join(app.getPath('logs'), fixtureHome ? 'verification' : 'service') mkdirSync(logRoot, { recursive: true }) const logFile = join(logRoot, 'server.log') const log = text => appendFileSync(logFile, `${new Date().toISOString()} ${text.trim()}\n`, { mode: 0o600 }) const home = fixtureHome || resolveDataHome(process.env.YAOYAO_HOME || process.env.HERMES_YAOYAO_HOME) const preferences = new DesktopPreferences(home) let startHidden = false const port = Number(process.env.HERMES_YAOYAO_DESKTOP_PORT || 15300) if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error('桌面服务端口无效') const trustedBoot = event => !closing && !quitting && event.sender === window?.webContents && event.senderFrame === window.webContents.mainFrame && event.senderFrame.url === bootURL ipcMain.handle('desktop:status', event => { if (!trustedBoot(event)) throw new Error('不允许此页面访问桌面服务') return onboarding.snapshot() }) ipcMain.handle('desktop:retry', async event => { if (!trustedBoot(event)) throw new Error('不允许此页面启动桌面服务') if (!platform.server) throw new Error('此客户端不支持在本机运行服务器') manager.restarts = [] return onboarding.prepare() }) ipcMain.handle('desktop:logs', event => { if (!trustedBoot(event)) throw new Error('不允许此页面读取日志') shell.showItemInFolder(logFile) }) ipcMain.handle('desktop:force-sync', async event => { if (!trustedBoot(event) || event.senderFrame !== window.webContents.mainFrame || closing || quitting || !manager?.canForceSynchronization) throw new Error('不允许此页面覆盖本机 Web') return onboarding.prepare({ force: true }) }) for (const action of ['select', 'prepare', 'submit']) { ipcMain.handle(`desktop:onboarding-${action}`, (event, input) => { if (!trustedBoot(event)) throw new Error('不允许此页面操作安装与登录') return onboarding[action](input) }) } const trustedUpdate = event => event.sender === updateWindow?.webContents && event.senderFrame === updateWindow.webContents.mainFrame && event.senderFrame.url === updateURL ipcMain.handle('desktop:updates', async event => { let trusted = false try { trusted = event.sender === window?.webContents && event.senderFrame === window.webContents.mainFrame && serviceOrigins().includes(new URL(event.senderFrame.url).origin) } catch { /* Only the active server's main page may open the local updater. */ } if (!trusted || closing || quitting || !updater) throw new Error('不允许此页面打开 App 更新') await showUpdates() }) for (const action of ['state', 'check', 'download', 'cancel', 'install', 'open', 'folder', 'release']) { ipcMain.handle(`desktop-update:${action}`, async event => { if (!trustedUpdate(event)) throw new Error('不允许此页面操作 App 更新') if (action === 'state') return updater.snapshot() if (closing || quitting) throw new Error('App 正在重启或退出') if (action === 'check') return updater.check() if (action === 'download') return updater.download() if (action === 'install') return updater.install() if (action === 'cancel') { updater.cancel(); return updater.snapshot() } if (action === 'release') { safeExternal(updater.snapshot().releasePageUrl || 'https://github.com/Lsamien/yaoyao/releases'); return } const path = await updater.verifiedFile() if (closing || quitting || !trustedUpdate(event)) return if (action === 'folder') shell.showItemInFolder(path) else { const error = await shell.openPath(path); if (error) throw new Error(error) } }) } async function showUpdates() { if (closing || quitting) return if (updateWindow && !updateWindow.isDestroyed()) { updateWindow.show(); updateWindow.focus(); return } updateWindow = new BrowserWindow({ title: 'App 更新 · 夭夭', width: 640, height: 620, minWidth: 360, minHeight: 440, show: false, webPreferences: { contextIsolation: true, nodeIntegration: false, sandbox: true, webSecurity: true, preload: join(desktopRoot, 'update-preload.cjs') } }) updateWindow.webContents.setWindowOpenHandler(() => ({ action: 'deny' })) updateWindow.webContents.on('will-navigate', event => event.preventDefault()) updateWindow.webContents.on('will-redirect', event => event.preventDefault()) updateWindow.webContents.on('will-attach-webview', event => event.preventDefault()) updateWindow.on('closed', () => { updateWindow = undefined }) updateWindow.once('ready-to-show', () => updateWindow?.show()) await updateWindow.loadURL(updateURL) } function show() { if (closing || quitting) return if (!window || window.isDestroyed()) createWindow() window.show(); window.focus() if (serverModeActive && manager) void manager.reconnect().then(() => stateChanged(manager.state)).catch(error => log(error.message)) } function safeExternal(url) { try { const parsed = new URL(url); if (['https:', 'http:', 'mailto:'].includes(parsed.protocol)) void shell.openExternal(url) } catch { /* No arbitrary file, shell or custom URL dispatch. */ } } function createWindow() { window = new BrowserWindow({ width: 1280, height: 860, minWidth: 720, minHeight: 560, show: false, title: '夭夭', backgroundColor: '#f7f7f7', webPreferences: { contextIsolation: true, nodeIntegration: false, sandbox: true, webSecurity: true, preload: join(desktopRoot, 'preload.cjs') } }) window.webContents.setWindowOpenHandler(({ url }) => { try { if (serviceOrigins().includes(new URL(url).origin)) void window.loadURL(url) else safeExternal(url) } catch { /* Invalid navigation is denied. */ } return { action: 'deny' } }) const guardNavigation = (event, url) => { try { if (url === bootURL || serviceOrigins().includes(new URL(url).origin)) return } catch { /* Invalid navigation is denied. */ } event.preventDefault(); safeExternal(url) } window.webContents.on('did-start-navigation',(_event,_url,_inPlace,isMainFrame)=>{if(isMainFrame)unreadBadge.clear()}) window.webContents.on('will-navigate', guardNavigation) window.webContents.on('will-redirect', guardNavigation) window.webContents.on('will-attach-webview', event => event.preventDefault()) const trustedService = (contents, url) => { try { return contents === window?.webContents && serviceOrigins().includes(new URL(url).origin) } catch { return false } } window.webContents.session.setPermissionCheckHandler((contents, permission, origin) => closeComputerViewer.owns(contents) ? ['fullscreen', 'clipboard-sanitized-write'].includes(permission) : trustedService(contents, origin) && ['media', 'notifications', 'clipboard-sanitized-write'].includes(permission)) window.webContents.session.setPermissionRequestHandler((contents, permission, callback, details) => { if (closeComputerViewer.owns(contents)) { callback(['fullscreen', 'clipboard-sanitized-write'].includes(permission)); return } if (!trustedService(contents, details.requestingUrl)) { callback(false); return } if (permission === 'media' && details.mediaTypes?.length && details.mediaTypes.every(type => type === 'audio')) { if (platform.windows) callback(systemPreferences.getMediaAccessStatus('microphone') !== 'denied') else void systemPreferences.askForMediaAccess('microphone').then(callback, () => callback(false)) } else callback(['notifications', 'clipboard-sanitized-write', 'fullscreen'].includes(permission)) }) window.on('close', event => { if (!quitting) { event.preventDefault(); window.hide() } }) window.once('ready-to-show', () => { if (!startHidden) window.show() }) if (onboarding?.state.active) return window.loadURL(bootURL) if (remoteMode && remoteURL) return window.loadURL(remoteURL) if (manager?.state.phase === 'ready') return window.loadURL(manager.state.url) return window.loadFile(join(desktopRoot, 'boot.html')) } function stateChanged(state) { log(`${state.phase}: ${state.message}`) onboarding?.serviceChanged(state) // Quit owns the window from this point on. A detached connection is not a // stopped server and must never navigate the closing window to boot.html. if (closing || quitting || remoteMode) return const serviceStatus=Menu.getApplicationMenu()?.getMenuItemById('desktop-service-status') if(serviceStatus)serviceStatus.label=state.phase==='ready'?'后台服务运行中':state.message const localVmMenu=Menu.getApplicationMenu()?.getMenuItemById('desktop-local-vm') if(localVmMenu)localVmMenu.enabled=state.phase==='ready' const notice = Menu.getApplicationMenu()?.getMenuItemById('desktop-sync-notice') if (notice) notice.visible = Boolean(state.updateNotice) const retrySync = Menu.getApplicationMenu()?.getMenuItemById('desktop-sync-retry') if (retrySync) retrySync.enabled = state.phase === 'ready' && Boolean(manager?.options.synchronize) const forceSync = Menu.getApplicationMenu()?.getMenuItemById('desktop-sync-force') if (forceSync) forceSync.enabled = !closing && !quitting && manager?.canForceSynchronization === true tray?.setToolTip(`夭夭 · ${state.message}`) if (!window || window.isDestroyed()) return if (onboarding?.state.active) { if (recoveringService && state.phase === 'ready') { recoveringService = false if (!onboarding.busy) void onboarding.prepare({ autoEnter: true }).catch(error => log(error.message)) } return } if (state.phase === 'ready') { const current = window.webContents.getURL() if (!current.startsWith(`${state.url}/`) && current !== state.url) void window.loadURL(state.url) } else if (window.webContents.getURL() !== bootURL) { recoveringService = true onboarding.open({ mode: 'local', remember: preferences.value.startupChoice === 'local', restoring: true }) onboarding.serviceChanged(state) void window.loadURL(bootURL) } } app.on('second-instance', show) app.on('activate', show) app.on('window-all-closed', () => {}) function requestQuit(stopBackground = false) { if (closing || quitting) return const resumeLocal = serverModeActive && manager?.activationRequested === true closing = true; unreadBadge.clear(); clearInterval(timer) updater?.stopChecking?.(); updater?.cancel(); updateWindow?.close() window?.hide() // Native Cmd+Q can enter before-quit from Cocoa's termination callback. // Both cleanup and the final quit must run after that callback unwinds. setImmediate(() => { void (async()=>{ try { await environmentHost?.close() await hostManager?.stop() await runnerManager?.stop() if (stopBackground) await manager?.stopBackground() else await manager?.stop() quitting = true setImmediate(() => app.quit()) } catch(error) { log(error.message) window?.show() const choice=await dialog.showMessageBox(window,{type:'warning',message:stopBackground?'后台服务停止未完成':'App 退出清理未完成',detail:error.message,buttons:['返回应用','仅退出 App'],defaultId:0,cancelId:0}) if(choice.response===1){quitting=true;setImmediate(()=>app.quit())} else { closing=false if(remoteMode)await hostManager?.start().catch(error=>log(error.message)) else if(serverModeActive){ await manager?.reconnect().catch(error=>log(error.message)) if(resumeLocal){ await manager?.activate().catch(error=>log(error.message)) environmentHost?.start() await runnerManager?.start().catch(error=>log(error.message)) } } if (manager) stateChanged(manager.state) timer=setInterval(()=>{if(serverModeActive)void manager.check();else void checkRemoteAuthorization()},10000);timer.unref() updater?.startChecking?.() show() } } })() }) } async function prepareUpdateRestart() { if (closing || quitting) throw new Error('App 正在退出，请稍后重试') resumeLocalAfterUpdate = serverModeActive && manager?.activationRequested === true closing = true; unreadBadge.clear(); clearInterval(timer) await environmentHost?.close() await hostManager?.stop() await runnerManager?.stop() await manager?.stop() // Cleanup has completed before Squirrel begins quitting. Releasing the // single-instance lock lets the newly installed app start immediately. quitting = true app.releaseSingleInstanceLock() } async function recoverUpdateRestart() { quitting = false; closing = false if (!app.requestSingleInstanceLock()) { quitting = true; app.quit(); return } if (remoteMode) await hostManager?.start().catch(error => log(error.message)) else if (serverModeActive) { await manager?.reconnect().catch(error => log(error.message)) if (resumeLocalAfterUpdate) { await manager?.activate().catch(error => log(error.message)) environmentHost?.start() await runnerManager?.start().catch(error => log(error.message)) } } clearInterval(timer) timer = setInterval(() => { if (serverModeActive) void manager?.check(); else void checkRemoteAuthorization() }, 10000); timer.unref() window?.show(); updateWindow?.show() } app.on('before-quit', event => { if (quitting) return event.preventDefault() requestQuit() }) app.whenReady().then(async () => { await preferences.load() startHidden = preferences.value.backgroundAtLogin && (platform.windows ? process.argv.includes('--yaoyao-login') : app.getLoginItemSettings().wasOpenedAtLogin) const packageVersion = JSON.parse(readFileSync(join(root, 'release.json'), 'utf8')).webVersion const buildInfo=JSON.parse(readFileSync(join(root,'build-info.json'),'utf8')) const releases = await import(pathToFileURL(join(root, 'github-release.mjs')).href) if ((app.isPackaged && !fixtureHome) || (fixtureHome && process.env.HERMES_YAOYAO_DESKTOP_TEST_AUTO_UPDATE === '1')) { const updateModule = createRequire(import.meta.url)(join(root, 'electron-updater.cjs')) const autoUpdater = platform.windows ? new updateModule.NsisUpdater() : updateModule.autoUpdater autoUpdater.logger = Object.fromEntries(['info', 'warn', 'error', 'debug'].map(level => [level, (...values) => log(`[更新:${level}] ${values.join(' ')}`)])) updater = new DesktopAutoUpdateManager({ driver: autoUpdater, version: packageVersion, platform: platform.platform, prepareInstall: prepareUpdateRestart, recoverInstall: recoverUpdateRestart }) updater.startChecking() } else { updater = new DesktopUpdateManager({ version: packageVersion, cacheRoot: join(home, 'updates', 'desktop-downloads'), source: releases.DEFAULT_RELEASE_SOURCE, inspect: releases.inspectGitHubRelease, compare: releases.compareReleaseVersions, fetchImpl: (...args) => net.fetch(...args) }) } app.setAboutPanelOptions({applicationName:'夭夭',applicationVersion:packageVersion,version:`${String(buildInfo.commit).slice(0,12)}${buildInfo.dirty?' · 工作区快照':''}`}) const credentials=new DesktopCredentials({home,platform:platform.platform,safeStorage,helper:join(root,app.isPackaged?'keychain-helper':'keychain-helper-dev'),legacyDecrypt:async bytes=>(await safeStorage.decryptStringAsync(bytes)).result}) const loginSessions = new DesktopLoginSessions({ home, encrypt: value => credentials.encrypt(value), decrypt: value => credentials.decrypt(value) }) async function installSessionCookies(server, cookies) { for (const cookie of cookies) await electronSession.defaultSession.cookies.set({ url: server, ...cookie, httpOnly: true, secure: cookie.secure || server.startsWith('https://') }) await electronSession.defaultSession.cookies.flushStore() } // Serialize vault + Chromium changes so an in-flight restore cannot undo logout. let loginOperation = Promise.resolve() function synchronizeLogin(run) { const next = loginOperation.then(run) loginOperation = next.catch(() => {}) return next } async function clearLogin(server) { await loginSessions.forget(server) await electronSession.defaultSession.cookies.remove(server, 'hermes_yaoyao_session') await electronSession.defaultSession.cookies.flushStore() } function forgetLogin(server) { return synchronizeLogin(() => clearLogin(server)) } async function inspectRemote(server) { return synchronizeLogin(async () => { const saved = await loginSessions.read(server) const info = await inspectServer(server, saved ? (url, options) => authFetch(url, { ...options, headers: { ...options.headers, cookie: `${saved.cookie.name}=${saved.cookie.value}` } }) : (...args) => net.fetch(...args)) if (!info.authenticated) { if (saved) await clearLogin(server) return info } if (saved) { await installSessionCookies(server, [{ ...saved.cookie, expirationDate: Date.now() / 1000 + 400 * 86400 }]) } else { const cookies = await electronSession.defaultSession.cookies.get({ url: server }) const persistent = await persistRemoteSession(server, info, cookies, authFetch) await loginSessions.save(server, persistent) await installSessionCookies(server, persistent) } return info }) } if (platform.server) { manager = new DesktopServiceManager({ home, port, version: packageVersion, log, onState: stateChanged, prepareHome: !fixtureHome ? onProgress => migrateLocalData({ home, port, root, onProgress }) : undefined, stopBackground: (app.isPackaged && !fixtureHome) || (fixtureHome && process.env.HERMES_YAOYAO_DESKTOP_TEST_SYNC === '1') ? onProgress => stopLocalService({home,port,root,fixture:Boolean(fixtureHome),onProgress}) : undefined, synchronize: (app.isPackaged && !fixtureHome) || (fixtureHome && process.env.HERMES_YAOYAO_DESKTOP_TEST_SYNC === '1') ? (onProgress, { force = false } = {}) => synchronizeLocalService({ home, port, root, fixture: Boolean(fixtureHome), onProgress, force, environment: { HERMES_YAOYAO_UPSTREAM: process.env.HERMES_YAOYAO_UPSTREAM || 'http://127.0.0.1:9119', HERMES_YAOYAO_SUPERVISE_DASHBOARD: fixtureHome ? '0' : '1', HERMES_YAOYAO_DEFER_HERMES: '1' } }) : undefined, fork: ({ home, port }) => { const env = { ...process.env, NODE_ENV: 'production', NODE_USE_ENV_PROXY: '0', PATH: [join(homedir(), '.local/bin'), '/opt/homebrew/bin', '/usr/local/bin', process.env.PATH || '/usr/bin:/bin'].join(':'), HERMES_YAOYAO_DESKTOP: '1', HERMES_YAOYAO_HOME: home, HERMES_YAOYAO_HOST: '127.0.0.1', HERMES_YAOYAO_PORT: String(port), HERMES_YAOYAO_STATIC_DIR: join(root, 'ui'), HERMES_YAOYAO_SUPERVISE_DASHBOARD: fixtureHome ? '0' : '1', HERMES_YAOYAO_DEFER_HERMES: '1', HERMES_YAOYAO_UPSTREAM: process.env.HERMES_YAOYAO_UPSTREAM || 'http://127.0.0.1:9119' } delete env.ELECTRON_RUN_AS_NODE delete env.HERMES_YAOYAO_TLS_CERT; delete env.HERMES_YAOYAO_TLS_KEY return utilityProcess.fork(join(root, 'server.mjs'), [], { cwd: root, env, stdio: 'pipe' }) }, }) environmentHost=new DesktopEnvironmentHost({manager,root,dataRoot:app.getPath('userData')}) const { parseRunnerConfiguration } = await import(pathToFileURL(join(root,'runner-config.mjs')).href) runnerManager = new DesktopRunnerManager({home,validate:parseRunnerConfiguration, encrypt:value=>credentials.encrypt(value), decrypt:bytes=>credentials.decrypt(bytes), onState:message=>{log(`Runner: ${message}`);const item=Menu.getApplicationMenu()?.getMenuItemById('runner-status');if(item)item.label=message}, fork:()=>utilityProcess.fork(join(root,'runner.mjs'),['--desktop-ipc'],{cwd:root,stdio:'pipe',env:{HOME:homedir(),PATH:[join(homedir(),'.local/bin'),join(homedir(),'.orbstack/bin'),'/opt/homebrew/bin','/usr/local/bin',process.env.PATH||'/usr/bin:/bin'].join(':'),NODE_ENV:'production',NODE_USE_ENV_PROXY:'0'}}), }) } async function runnerAction(action){try{await action()}catch(error){await dialog.showMessageBox(window,{type:'error',message:'执行节点操作未完成',detail:error.message})}} hostManager=new DesktopHostManager({home,root,dataRoot:app.getPath('userData'), // Device polling must share the Chromium transport used to log in to LAN servers. fetchImpl:authFetch, createCore:({root,dataRoot})=>new DesktopHostCore({root,dataRoot}), encrypt:value=>credentials.encrypt(value), decrypt:bytes=>credentials.decrypt(bytes), onState:message=>{log(`电脑: ${message}`);const item=Menu.getApplicationMenu()?.getMenuItemById('desktop-host-status');if(item)item.label=message}}) ipcMain.handle('desktop:device-host', async event => { try { const trusted = event.sender === window?.webContents && event.senderFrame === event.sender.mainFrame && serviceOrigins().includes(new URL(event.senderFrame.url).origin) if (!trusted || closing || quitting) throw new Error('不允许此页面读取设备身份') } catch (error) { if (error.message === '不允许此页面读取设备身份') throw error throw new Error('不允许此页面读取设备身份') } if (remoteMode) { const enrolled = await hostManager.read().catch(() => undefined) return { deviceHost: enrolled && new URL(enrolled.serverURL).origin === new URL(remoteURL).origin ? enrolled.hostId : null } } return { deviceHost: 'local' } }) async function hostAction(action){try{await action()}catch(error){await dialog.showMessageBox(window,{type:'error',message:'电脑操作未完成',detail:error.message})}} const appDialog = options => window && !window.isDestroyed() ? dialog.showMessageBox(window, options) : dialog.showMessageBox(options) let authorizedOnboardingServer = '' async function authorizeComputer(server,session){ const previous=await hostManager.read().catch(()=>undefined) const previousHostId=previous&&new URL(previous.serverURL).origin===new URL(server).origin?previous.hostId:undefined const registration=await enrollDesktopHost(session,{name:hostname(),installId:await hostManager.installIdentity(),previousHostId},authFetch) await hostManager.adopt({protocol:1,serverURL:server,hostId:registration.host.id,token:registration.token,...(server.startsWith('http://')?{allowInsecureLan:true}:{})}) return registration } function requireModePage(event){ let trusted=false try{trusted=event.sender===window?.webContents&&event.senderFrame===window.webContents.mainFrame &&serviceOrigins().includes(new URL(event.senderFrame.url).origin)}catch{} if(!trusted||closing||quitting)throw new Error('不允许此页面切换桌面运行模式') } ipcMain.handle('desktop:mode-state',event=>{ requireModePage(event) return {mode:remoteMode||!platform.server?'client':'server',serverURL:serviceURL()||'',switching:switchingMode, platform:platform.platform,supportedModes:platform.supportedModes} }) ipcMain.handle('desktop:mode-switch',async(event,mode)=>{ requireModePage(event) if(mode!=='client'&&mode!=='server')throw new Error('运行模式无效') return switchMode(mode==='client'?'remote':'local') }) ipcMain.handle('desktop:remote-login',event=>{ requireModePage(event) if(switchingMode)throw new Error('正在切换运行模式，请稍候') return openRemoteLogin() }) ipcMain.handle('desktop:computer-authorize',async(event,csrfToken)=>{ requireModePage(event) if(!remoteMode||!remoteURL)return {registered:false} try{ const token=String(csrfToken??'').trim() if(!token)throw new Error('登录状态缺少安全令牌，请重新登录') const cookies=await electronSession.defaultSession.cookies.get({url:remoteURL}) const registration=await authorizeComputer(remoteURL,{origin:remoteURL,csrfToken:token,cookies:cookies.map(cookie=>[cookie.name,cookie.value])}) return {registered:true,hostId:registration.host.id} }catch(error){ const message=error instanceof Error?error.message:'电脑授权恢复失败' hostManager.publish(`电脑授权未恢复：${message}`) return {registered:false} } }) async function importDesktopHost(){ const selection=window&&!window.isDestroyed() ?await dialog.showOpenDialog(window,{title:'导入电脑配置',properties:['openFile'],filters:[{name:'电脑配置',extensions:['json']}]}) :await dialog.showOpenDialog({title:'导入电脑配置',properties:['openFile'],filters:[{name:'电脑配置',extensions:['json']}]}) if(!selection.canceled&&selection.filePaths[0]&&!closing)await hostAction(()=>hostManager.importFile(selection.filePaths[0])) } if (!preferences.value.remoteServer) { const enrolled = await hostManager.read().catch(() => undefined) if (enrolled?.serverURL) await preferences.setRemoteServer(enrolled.serverURL) } onboarding = new DesktopOnboarding({ platform: platform.platform, supportedModes: platform.supportedModes, remoteServer: () => preferences.value.remoteServer, inspect: inspectRemote, localSession: async server => { const session = await manager.adminSession() await installSessionCookies(server, sessionCookieDetails(session.setCookies)) return { authenticated: true, user: session.user } }, prepareLocal: async ({ force }) => { if (!platform.server) throw new Error('此客户端不支持在本机运行服务器') serverModeActive = true; remoteMode = false; remoteURL = '' await hostManager.stop() manager.restarts = [] if (force) await manager.retrySynchronization({ force: true }) else await manager.start() if (manager.state.phase !== 'ready') throw new Error(manager.state.message) return manager.state.url }, register: ({ serverURL, username, password }) => remoteRegistration(serverURL, { username, password }, authFetch), authenticate: async ({ mode, serverURL, setup, username, password }) => { authorizedOnboardingServer = '' const auth = await remoteSession(serverURL, { setup, username, password }, authFetch) if (mode === 'remote') await loginSessions.save(serverURL, auth.cookieDetails) await installSessionCookies(serverURL, auth.cookieDetails) let warning if (mode === 'remote' && auth.user.role === 'admin') { try { await authorizeComputer(serverURL, auth); authorizedOnboardingServer = serverURL } catch (error) { warning = `账号已登录，但电脑授权未恢复：${error.message}。可先进入夭夭，稍后在“电脑”菜单重新授权。` } } return { username: auth.user.username, warning } }, activate: async ({ mode, serverURL, remember }) => { if (closing || quitting) throw new Error('App 正在退出') const alreadyAuthorized = authorizedOnboardingServer === serverURL authorizedOnboardingServer = '' if (mode === 'remote') { // Detach only; an independently installed local service keeps running. serverModeActive = false await environmentHost?.close() await runnerManager?.stop() await manager?.stop() remoteMode = true; remoteURL = serverURL await preferences.setRemoteServer(serverURL) if (!alreadyAuthorized) { // A remembered browser session skips password authentication. Restore // its device authorization only on entry, never during detection. try { const current = await inspectServer(serverURL, (...args) => net.fetch(...args)) if (current.authenticated && current.user?.role === 'admin') { const cookies = await electronSession.defaultSession.cookies.get({ url: serverURL }) await authorizeComputer(serverURL, { origin: serverURL, csrfToken: current.csrfToken, cookies: cookies.map(cookie => [cookie.name, cookie.value]) }) } } catch (error) { hostManager.publish(`电脑授权未恢复：${error.message}`) } } const enrolled = await hostManager.read().catch(error => { log(error.message); return undefined }) if (enrolled && new URL(enrolled.serverURL).origin === new URL(serverURL).origin) await hostManager.start().catch(error => hostManager.publish(error.message)) } else { await manager.activate() if (closing || quitting) throw new Error('App 正在退出') environmentHost.start() await runnerManager.start().catch(error => runnerManager.publish(error.message)) } await preferences.setStartupChoice(remember ? mode : 'ask') syncModeMenu() const status = Menu.getApplicationMenu()?.getMenuItemById('desktop-service-status') if (status) status.label = mode === 'remote' ? `已登录远程 · ${new URL(serverURL).host}` : '后台服务运行中' tray?.setToolTip(mode === 'remote' ? `夭夭 · 远程 ${new URL(serverURL).host}` : '夭夭 · 本机运行') }, navigate: url => { if (closing || quitting) throw new Error('App 正在退出') return window.loadURL(url) }, }) async function openOnboarding(mode, { autoPrepare = false, remember = preferences.value.startupChoice !== 'ask', forceLogin = false } = {}) { if (closing || quitting) throw new Error('App 正在退出') const prepare = autoPrepare && (mode === 'local' || Boolean(preferences.value.remoteServer)) onboarding.open({ mode, serverURL: preferences.value.remoteServer, remember, forceLogin, restoring: prepare && !forceLogin }) if (!window || window.isDestroyed()) await createWindow() else if (window.webContents.getURL() !== bootURL) await window.loadURL(bootURL) window.show(); window.focus() if (prepare) await onboarding.prepare({ autoEnter: true }) return onboarding.snapshot() } function openRemoteLogin() { return openOnboarding('remote', { forceLogin: true }) } ipcMain.handle('desktop:open-login', event => { requireModePage(event) // A session expiry returns to the same main-page flow for the active server. return openOnboarding(remoteMode ? 'remote' : 'local', { autoPrepare: true }) }) ipcMain.handle('desktop:forget-login', async event => { requireModePage(event) if (remoteMode && remoteURL) { await forgetLogin(remoteURL) await hostManager.stop() } }) let checkingAuthorization = false checkRemoteAuthorization = async () => { if (checkingAuthorization || closing || quitting || !remoteMode || onboarding.state.active) return checkingAuthorization = true const server = remoteURL try { const info = await inspectServer(server, (...args) => net.fetch(...args)) if (!info.authenticated && remoteURL === server && !onboarding.state.active && !closing && !quitting) { // Chromium may expire its copy; the native authorization remains authoritative. if ((await inspectRemote(server)).authenticated) return await forgetLogin(server) await hostManager.stop() await openOnboarding('remote', { autoPrepare: true }) } } catch { /* Network loss does not revoke a saved login. */ } finally { checkingAuthorization = false } } function syncModeMenu(){ const menu=Menu.getApplicationMenu() const useRemote=menu?.getMenuItemById('desktop-host-use-remote'),useLocal=menu?.getMenuItemById('desktop-host-use-local'),ask=menu?.getMenuItemById('desktop-host-ask') if(useRemote)useRemote.enabled=!switchingMode&&!remoteMode if(useLocal)useLocal.enabled=!switchingMode&&!serverModeActive const status=menu?.getMenuItemById('desktop-mode-status') if(status)status.label=switchingMode?'正在切换运行模式…':remoteMode?'当前：客户端模式':serverModeActive?'当前：服务器模式':'请选择运行模式' if(ask)ask.checked=preferences.value.startupChoice==='ask' } async function switchMode(mode) { if (mode === 'local' && !platform.server) return { ok: false, error: '此客户端不支持在本机运行服务器' } if (closing || quitting) return { ok: false, error: 'App 正在退出' } if (switchingMode || onboarding.busy) return { ok: false, error: '当前步骤尚未完成，请稍候' } switchingMode = true; syncModeMenu() try { const state = await openOnboarding(mode, { autoPrepare: true, remember: true }) return { ok: true, pendingLogin: state.active } } catch (error) { return { ok: false, error: error.message } } finally { switchingMode = false; syncModeMenu() } } async function importRunner(){ const selection=await dialog.showOpenDialog(window,{title:'导入执行节点配置',properties:['openFile'],filters:[{name:'Runner 配置',extensions:['json']}]}) if(!selection.canceled&&selection.filePaths[0]&&!closing)await runnerAction(()=>runnerManager.importFile(selection.filePaths[0])) } Menu.setApplicationMenu(Menu.buildFromTemplate(desktopMenu([ { label: '夭夭', submenu: [{ role: 'about', label: '关于夭夭' }, { type: 'separator' }, { id:'desktop-service-status',label:'正在连接后台服务…',enabled:false }, { label: '显示窗口', click: show }, { label: '在浏览器中打开', click: () => { const url = serviceURL(); if (url) safeExternal(url) } }, { id:'desktop-local-vm',label:'本地虚拟机设置…',enabled:false,click:()=>{if(manager.state.phase==='ready'){show();void window.webContents.executeJavaScript("window.dispatchEvent(new CustomEvent('yaoyao:local-vm-settings'))")}} }, { label: '查看服务日志', click: () => shell.showItemInFolder(logFile) }, { id:'desktop-sync-notice', label:'Web 同步待完成：服务忙碌', enabled:false, visible:false }, { id:'desktop-sync-retry', label:'重试同步本机 Web…', enabled:false, click:async()=>{try{await manager.retrySynchronization()}catch(error){log(error.message)}} }, { id:'desktop-sync-force', label:'使用当前 App 覆盖同版本 Web', enabled:false, click:async()=>{if(closing||quitting||!manager.canForceSynchronization)return;try{await manager.retrySynchronization({force:true})}catch(error){log(error.message)}} }, { id:'desktop-login', label:'登录 macOS 时启动', type:'checkbox', enabled:app.isPackaged, checked:app.getLoginItemSettings(loginOptions).openAtLogin, click:async item=>{try{app.setLoginItemSettings({...loginOptions,openAtLogin:item.checked});item.checked=app.getLoginItemSettings(loginOptions).openAtLogin}catch(error){item.checked=app.getLoginItemSettings(loginOptions).openAtLogin;await dialog.showMessageBox(window,{type:'error',message:'无法修改登录启动设置',detail:error.message})}} }, { id:'desktop-background', label:'登录启动时仅驻留菜单栏', type:'checkbox', checked:preferences.value.backgroundAtLogin, click:async item=>{try{await preferences.setBackgroundAtLogin(item.checked)}catch(error){item.checked=preferences.value.backgroundAtLogin;await dialog.showMessageBox(window,{type:'error',message:error.message})}} }, { id:'desktop-update-check', label:'检查 App 更新…', click:showUpdates }, { id:'desktop-update-help', label:'App 更新与回退…', click:()=>dialog.showMessageBox(window,{type:'info',message:`夭夭 App ${packageVersion}`,detail:`App 构建：${String(buildInfo.commit).slice(0,12)}\n\n通过“检查 App 更新”下载新版，准备完成后点击“重启更新”。此操作只更新当前电脑的 App，不升级远程服务器。开发运行时提供手动安装包下载。${platform.server ? "\n\n独立后台服务继续运行。服务器模式下，首次启动同步较旧的本机 Web，已有较新的 Web 保留。Web 降级通过服务器的回滚入口处理；数据库结构不兼容时不能直接降级。" : ""}\n\n数据目录：${home}`,buttons:['知道了','打开数据目录']}).then(result=>{if(result.response===1)shell.showItemInFolder(home)}) }, { type: 'separator' }, { role: 'hide', label: '隐藏夭夭' }, { role: 'hideOthers', label: '隐藏其他' }, { role: 'unhide', label: '显示全部' }, { type: 'separator' }, {label:'撤销本机控制授权',click:()=>{void environmentHost?.revoke();void hostManager?.revoke()}}, { id:'desktop-quit',label:'退出夭夭（后台继续运行）',accelerator:'CommandOrControl+Q',click:()=>requestQuit() }, { id:'desktop-stop-and-quit',label:'停止后台服务并退出',click:()=>requestQuit(true) }] }, {label:'执行节点',submenu:[{id:'runner-status',label:'未配置执行节点',enabled:false},{type:'separator'}, {id:'runner-import',label:'导入节点配置…',click:importRunner}, {id:'runner-reconnect',label:'重新连接',click:()=>runnerAction(()=>runnerManager.start())}, {id:'runner-forget',label:'断开并忘记配置',click:()=>runnerAction(()=>runnerManager.forget())}]}, {label:'运行模式',submenu:[{id:'desktop-mode-status',label:'请选择运行模式',enabled:false},{type:'separator'}, {id:'desktop-host-use-remote',label:'客户端模式（连接服务器）',enabled:!remoteMode,click:()=>void switchMode('remote')}, {id:'desktop-host-use-local',label:'服务器模式（本机运行）',enabled:!serverModeActive,click:()=>void switchMode('local')}, {label:'更换服务器…',click:()=>{void openRemoteLogin().catch(error=>log(error.message))}},{type:'separator'}, {id:'desktop-host-ask',label:'启动时询问运行模式',type:'checkbox',checked:preferences.value.startupChoice==='ask', click:item=>{void preferences.setStartupChoice(item.checked?'ask':remoteMode?'remote':'local').catch(async error=>{item.checked=preferences.value.startupChoice==='ask';await appDialog({type:'error',message:'无法保存启动偏好',detail:error.message})})}}]}, {label:'电脑',submenu:[{id:'desktop-host-status',label:'未配置电脑',enabled:false},{type:'separator'}, {id:'desktop-host-authorize',label:'重新授权…',click:()=>{void openRemoteLogin().catch(error=>log(error.message))}}, {id:'desktop-host-import',label:'导入电脑配置…',click:importDesktopHost}, {id:'desktop-host-reconnect',label:'重新连接',click:()=>hostAction(()=>hostManager.start())}, {id:'desktop-host-forget',label:'断开并忘记配置',click:()=>hostAction(()=>hostManager.forget())}]}, { role: 'editMenu', label: '编辑' }, { role: 'viewMenu', label: '显示' }, { role: 'windowMenu', label: '窗口' }, ], platform.platform, { clientOnly: !platform.server }))) const icon = nativeImage.createFromPath(join(desktopRoot, 'icon.png')).resize({ width: 20, height: 20 }) if (!platform.windows) icon.setTemplateImage(true) tray = new Tray(icon) tray.setToolTip('夭夭') tray.setContextMenu(Menu.buildFromTemplate(desktopMenu([{ label: '打开夭夭', click: show }, { label: '查看日志', click: () => shell.showItemInFolder(logFile) }, { type: 'separator' }, { label: '退出夭夭（后台继续运行）', click: () => requestQuit() }, { label: '停止后台服务并退出', click: () => requestQuit(true) }], platform.platform, { clientOnly: !platform.server }))) tray.on('click', show) // Restore a saved session behind neutral loading feedback. The guide only // becomes visible if a connection or account actually needs attention. const startupMode = !platform.server ? 'remote' : preferences.value.startupChoice === 'ask' ? (fixtureHome && process.env.HERMES_YAOYAO_DESKTOP_TEST_MODE !== 'ask' ? 'local' : null) : preferences.value.startupChoice const restoreSession = Boolean(startupMode && (startupMode === 'local' || preferences.value.remoteServer)) && (platform.server || preferences.value.startupChoice !== 'ask') onboarding.open({ mode: startupMode, serverURL: preferences.value.remoteServer, remember: preferences.value.startupChoice !== 'ask', restoring: restoreSession }) // Finish the initial navigation before a remembered session enters its server. await createWindow() powerMonitor.on('resume', () => { if (!closing && !quitting) { if (serverModeActive) void manager.check(); else void checkRemoteAuthorization() } }) timer = setInterval(() => { if (serverModeActive) void manager.check(); else void checkRemoteAuthorization() }, 10_000); timer.unref() syncModeMenu() if (restoreSession) await onboarding.prepare({ autoEnter: true }) }).catch(error => { log(error.stack || error.message); quitting = true; app.quit() }) }