brother7
e97a7ce9df
需求：在 AI 编程会话中让用户与 Agent 共享同一浏览器页面，并查看控制台与网络信息。 实现：新增沙箱浏览器内核、Host API/渲染器面板、OpenCode 工具接入及安全边界测试。
86 lines
3.0 KiB
TypeScript
86 lines
3.0 KiB
TypeScript
import { ipcMain } from 'electron';
|
|
import { getPort } from '../../utils/config';
|
|
import { getHostApiToken } from '../../api/server';
|
|
import {
|
|
getRendererCapability,
|
|
RENDERER_CAPABILITY_HEADER,
|
|
} from '../../api/renderer-capability';
|
|
|
|
type HostApiFetchRequest = {
|
|
path: string;
|
|
method?: string;
|
|
headers?: Record<string, string>;
|
|
body?: unknown;
|
|
};
|
|
|
|
export function registerHostApiProxyHandlers(): void {
|
|
const hostApiPort = getPort('NIANCODE_HOST_API');
|
|
|
|
// Expose the per-session auth token to the renderer so the browser-fallback
|
|
// path in host-api.ts can authenticate against the Host API server.
|
|
ipcMain.handle('hostapi:token', () => getHostApiToken());
|
|
ipcMain.handle('hostapi:base-url', () => `http://127.0.0.1:${hostApiPort}`);
|
|
|
|
ipcMain.handle('hostapi:fetch', async (_, request: HostApiFetchRequest) => {
|
|
try {
|
|
const path = typeof request?.path === 'string' ? request.path : '';
|
|
if (!path || !path.startsWith('/')) {
|
|
throw new Error(`Invalid host API path: ${String(request?.path)}`);
|
|
}
|
|
|
|
const method = (request.method || 'GET').toUpperCase();
|
|
const headers: Record<string, string> = { ...(request.headers || {}) };
|
|
// Inject the per-session auth token so the Host API server accepts this request.
|
|
headers['Authorization'] = `Bearer ${getHostApiToken()}`;
|
|
headers[RENDERER_CAPABILITY_HEADER] = getRendererCapability();
|
|
let body: string | undefined;
|
|
|
|
if (request.body !== undefined && request.body !== null) {
|
|
if (typeof request.body === 'string') {
|
|
body = request.body;
|
|
} else {
|
|
body = JSON.stringify(request.body);
|
|
}
|
|
// Ensure Content-Type is set for requests with a body so the
|
|
// server's anti-CSRF Content-Type gate does not reject them.
|
|
if (!headers['Content-Type'] && !headers['content-type']) {
|
|
headers['Content-Type'] = 'application/json';
|
|
}
|
|
}
|
|
|
|
// The Host API is an in-process loopback server. Using Electron's
|
|
// proxy-aware network stack here can incorrectly send 127.0.0.1 through
|
|
// a configured system proxy and surface a generic `fetch failed` before
|
|
// the request ever reaches the local route.
|
|
const response = await fetch(`http://127.0.0.1:${hostApiPort}${path}`, {
|
|
method,
|
|
headers,
|
|
body,
|
|
});
|
|
|
|
const data: { status: number; ok: boolean; json?: unknown; text?: string } = {
|
|
status: response.status,
|
|
ok: response.ok,
|
|
};
|
|
|
|
if (response.status !== 204) {
|
|
const contentType = response.headers.get('content-type') || '';
|
|
if (contentType.includes('application/json')) {
|
|
data.json = await response.json().catch(() => undefined);
|
|
} else {
|
|
data.text = await response.text().catch(() => '');
|
|
}
|
|
}
|
|
|
|
return { ok: true, data };
|
|
} catch (error) {
|
|
return {
|
|
ok: false,
|
|
error: {
|
|
message: error instanceof Error ? error.message : String(error),
|
|
},
|
|
};
|
|
}
|
|
});
|
|
}
|