434 lines
13 KiB
TypeScript
434 lines
13 KiB
TypeScript
import express, { Express } from "express";
|
|
import { Manifest, SilverBulletHooks } from "@silverbulletmd/common/manifest";
|
|
import { EndpointHook } from "@plugos/plugos/hooks/endpoint";
|
|
import { readdir, readFile } from "fs/promises";
|
|
import { System } from "@plugos/plugos/system";
|
|
import cors from "cors";
|
|
import { DiskSpacePrimitives } from "@silverbulletmd/common/spaces/disk_space_primitives";
|
|
import path from "path";
|
|
import bodyParser from "body-parser";
|
|
import { EventHook } from "@plugos/plugos/hooks/event";
|
|
import spaceSyscalls from "./syscalls/space";
|
|
import { eventSyscalls } from "@plugos/plugos/syscalls/event";
|
|
import { ensureTable, pageIndexSyscalls } from "./syscalls";
|
|
import knex, { Knex } from "knex";
|
|
import shellSyscalls from "@plugos/plugos/syscalls/shell.node";
|
|
import { NodeCronHook } from "@plugos/plugos/hooks/node_cron";
|
|
import { markdownSyscalls } from "@silverbulletmd/common/syscalls/markdown";
|
|
import { EventedSpacePrimitives } from "@silverbulletmd/common/spaces/evented_space_primitives";
|
|
import { Space } from "@silverbulletmd/common/spaces/space";
|
|
import {
|
|
createSandbox,
|
|
nodeModulesDir,
|
|
} from "@plugos/plugos/environments/node_sandbox";
|
|
import { jwtSyscalls } from "@plugos/plugos/syscalls/jwt";
|
|
import buildMarkdown from "@silverbulletmd/common/parser";
|
|
import { loadMarkdownExtensions } from "@silverbulletmd/common/markdown_ext";
|
|
import http, { Server } from "http";
|
|
import { esbuildSyscalls } from "@plugos/plugos/syscalls/esbuild";
|
|
import { systemSyscalls } from "./syscalls/system";
|
|
import { plugPrefix } from "@silverbulletmd/common/spaces/constants";
|
|
|
|
import { Authenticator } from "./auth";
|
|
import sandboxSyscalls from "@plugos/plugos/syscalls/sandbox";
|
|
|
|
// import globalModules from "../common/dist/global.plug.json";
|
|
|
|
const globalModules: any = JSON.parse(
|
|
readFileSync(
|
|
nodeModulesDir + "/node_modules/@silverbulletmd/web/dist/global.plug.json",
|
|
"utf-8"
|
|
)
|
|
);
|
|
|
|
import { safeRun } from "./util";
|
|
import {
|
|
ensureFTSTable,
|
|
fullTextSearchSyscalls,
|
|
} from "@plugos/plugos/syscalls/fulltext.knex_sqlite";
|
|
import { PlugSpacePrimitives } from "./hooks/plug_space_primitives";
|
|
import { PageNamespaceHook } from "./hooks/page_namespace";
|
|
import { readFileSync } from "fs";
|
|
|
|
const safeFilename = /^[a-zA-Z0-9_\-\.]+$/;
|
|
|
|
export type ServerOptions = {
|
|
port: number;
|
|
pagesPath: string;
|
|
distDir: string;
|
|
builtinPlugDir: string;
|
|
token?: string;
|
|
};
|
|
export class ExpressServer {
|
|
app: Express;
|
|
system: System<SilverBulletHooks>;
|
|
private space: Space;
|
|
private distDir: string;
|
|
private eventHook: EventHook;
|
|
private db: Knex<any, unknown[]>;
|
|
private port: number;
|
|
private server?: Server;
|
|
builtinPlugDir: string;
|
|
token?: string;
|
|
|
|
constructor(options: ServerOptions) {
|
|
this.port = options.port;
|
|
this.app = express();
|
|
this.builtinPlugDir = options.builtinPlugDir;
|
|
this.distDir = options.distDir;
|
|
this.system = new System<SilverBulletHooks>("server");
|
|
this.token = options.token;
|
|
|
|
// Setup system
|
|
this.eventHook = new EventHook();
|
|
this.system.addHook(this.eventHook);
|
|
let namespaceHook = new PageNamespaceHook();
|
|
this.system.addHook(namespaceHook);
|
|
this.space = new Space(
|
|
new EventedSpacePrimitives(
|
|
new PlugSpacePrimitives(
|
|
new DiskSpacePrimitives(options.pagesPath),
|
|
namespaceHook
|
|
),
|
|
this.eventHook
|
|
),
|
|
true
|
|
);
|
|
this.db = knex({
|
|
client: "better-sqlite3",
|
|
connection: {
|
|
filename: path.join(options.pagesPath, "data.db"),
|
|
},
|
|
useNullAsDefault: true,
|
|
});
|
|
|
|
this.system.registerSyscalls(["shell"], shellSyscalls(options.pagesPath));
|
|
this.system.addHook(new NodeCronHook());
|
|
|
|
this.system.registerSyscalls(
|
|
[],
|
|
pageIndexSyscalls(this.db),
|
|
fullTextSearchSyscalls(this.db, "fts"),
|
|
spaceSyscalls(this.space),
|
|
eventSyscalls(this.eventHook),
|
|
markdownSyscalls(buildMarkdown([])),
|
|
esbuildSyscalls(),
|
|
systemSyscalls(this),
|
|
sandboxSyscalls(this.system),
|
|
jwtSyscalls()
|
|
);
|
|
this.system.addHook(new EndpointHook(this.app, "/_"));
|
|
|
|
this.system.on({
|
|
plugLoaded: (plug) => {
|
|
safeRun(async () => {
|
|
for (let [modName, code] of Object.entries(
|
|
globalModules.dependencies
|
|
)) {
|
|
await plug.sandbox.loadDependency(modName, code as string);
|
|
}
|
|
});
|
|
},
|
|
});
|
|
|
|
this.eventHook.addLocalListener(
|
|
"get-plug:builtin",
|
|
async (plugName: string): Promise<Manifest> => {
|
|
if (!safeFilename.test(plugName)) {
|
|
throw new Error(`Invalid plug name: ${plugName}`);
|
|
}
|
|
try {
|
|
let manifestJson = await readFile(
|
|
path.join(this.builtinPlugDir, `${plugName}.plug.json`),
|
|
"utf8"
|
|
);
|
|
return JSON.parse(manifestJson);
|
|
} catch (e) {
|
|
throw new Error(`No such builtin: ${plugName}`);
|
|
}
|
|
}
|
|
);
|
|
|
|
this.eventHook.addLocalListener(
|
|
"get-plug:file",
|
|
async (plugPath: string): Promise<Manifest> => {
|
|
let resolvedPath = path.resolve(plugPath);
|
|
if (!resolvedPath.startsWith(process.cwd())) {
|
|
throw new Error(
|
|
`Plugin path outside working directory, this is disallowed: ${resolvedPath}`
|
|
);
|
|
}
|
|
try {
|
|
let manifestJson = await readFile(resolvedPath, "utf8");
|
|
return JSON.parse(manifestJson);
|
|
} catch (e) {
|
|
throw new Error(
|
|
`No such file: ${resolvedPath} or could not parse as JSON`
|
|
);
|
|
}
|
|
}
|
|
);
|
|
|
|
setInterval(() => {
|
|
this.space.updatePageList().catch(console.error);
|
|
}, 5000);
|
|
this.reloadPlugs().catch(console.error);
|
|
}
|
|
|
|
rebuildMdExtensions() {
|
|
this.system.registerSyscalls(
|
|
[],
|
|
markdownSyscalls(buildMarkdown(loadMarkdownExtensions(this.system)))
|
|
);
|
|
}
|
|
|
|
private async bootstrapBuiltinPlugs() {
|
|
let allPlugFiles = await readdir(this.builtinPlugDir);
|
|
let pluginNames = [];
|
|
for (let file of allPlugFiles) {
|
|
if (file.endsWith(".plug.json")) {
|
|
let manifestJson = await readFile(
|
|
path.join(this.builtinPlugDir, file),
|
|
"utf8"
|
|
);
|
|
let manifest: Manifest = JSON.parse(manifestJson);
|
|
pluginNames.push(manifest.name);
|
|
await this.space.writePage(
|
|
`${plugPrefix}${manifest.name}`,
|
|
manifestJson
|
|
);
|
|
}
|
|
}
|
|
|
|
await this.space.writePage(
|
|
"PLUGS",
|
|
"This file lists all plugs that SilverBullet will load. Run the `Plugs: Update` command to update and reload this list of plugs.\n\n```yaml\n- " +
|
|
pluginNames.map((name) => `builtin:${name}`).join("\n- ") +
|
|
"\n```"
|
|
);
|
|
}
|
|
|
|
async reloadPlugs() {
|
|
await this.space.updatePageList();
|
|
let allPlugs = this.space.listPlugs();
|
|
if (allPlugs.size === 0) {
|
|
await this.bootstrapBuiltinPlugs();
|
|
allPlugs = this.space.listPlugs();
|
|
}
|
|
await this.system.unloadAll();
|
|
console.log("Reloading plugs");
|
|
for (let pageInfo of allPlugs) {
|
|
let { text } = await this.space.readPage(pageInfo.name);
|
|
await this.system.load(JSON.parse(text), createSandbox);
|
|
}
|
|
this.rebuildMdExtensions();
|
|
}
|
|
|
|
async start() {
|
|
const tokenMiddleware: (req: any, res: any, next: any) => void = this.token
|
|
? (req, res, next) => {
|
|
if (req.headers.authorization === `Bearer ${this.token}`) {
|
|
next();
|
|
} else {
|
|
res.status(401).send("Unauthorized");
|
|
}
|
|
}
|
|
: (req, res, next) => {
|
|
next();
|
|
};
|
|
|
|
await ensureTable(this.db);
|
|
await ensureFTSTable(this.db, "fts");
|
|
console.log("Setting up router");
|
|
|
|
let auth = new Authenticator(this.db);
|
|
|
|
// Serve static files (javascript, css, html)
|
|
this.app.use("/", express.static(this.distDir));
|
|
|
|
let fsRouter = express.Router();
|
|
|
|
// Page list
|
|
fsRouter.route("/").get(async (req, res) => {
|
|
let { nowTimestamp, pages } = await this.space.fetchPageList();
|
|
res.header("Now-Timestamp", "" + nowTimestamp);
|
|
res.json([...pages]);
|
|
});
|
|
|
|
fsRouter
|
|
.route(/\/(.+)/)
|
|
.get(async (req, res) => {
|
|
let pageName = req.params[0];
|
|
// console.log("Getting", pageName);
|
|
try {
|
|
let pageData = await this.space.readPage(pageName);
|
|
res.status(200);
|
|
res.header("Last-Modified", "" + pageData.meta.lastModified);
|
|
res.header("X-Permission", pageData.meta.perm);
|
|
res.header("Content-Type", "text/markdown");
|
|
res.send(pageData.text);
|
|
} catch (e) {
|
|
// CORS
|
|
res.status(200);
|
|
res.header("X-Status", "404");
|
|
res.send("");
|
|
}
|
|
})
|
|
.put(bodyParser.text({ type: "*/*" }), async (req, res) => {
|
|
let pageName = req.params[0];
|
|
console.log("Saving", pageName);
|
|
|
|
try {
|
|
let meta = await this.space.writePage(
|
|
pageName,
|
|
req.body,
|
|
false,
|
|
req.header("Last-Modified")
|
|
? +req.header("Last-Modified")!
|
|
: undefined
|
|
);
|
|
res.status(200);
|
|
res.header("Last-Modified", "" + meta.lastModified);
|
|
res.header("X-Permission", meta.perm);
|
|
res.send("OK");
|
|
} catch (err) {
|
|
res.status(500);
|
|
res.send("Write failed");
|
|
console.error("Pipeline failed", err);
|
|
}
|
|
})
|
|
.options(async (req, res) => {
|
|
let pageName = req.params[0];
|
|
try {
|
|
const meta = await this.space.getPageMeta(pageName);
|
|
res.status(200);
|
|
res.header("Last-Modified", "" + meta.lastModified);
|
|
res.header("X-Permission", meta.perm);
|
|
res.header("Content-Type", "text/markdown");
|
|
res.send("");
|
|
} catch (e) {
|
|
// CORS
|
|
res.status(200);
|
|
res.header("X-Status", "404");
|
|
res.send("Not found");
|
|
}
|
|
})
|
|
.delete(async (req, res) => {
|
|
let pageName = req.params[0];
|
|
try {
|
|
await this.space.deletePage(pageName);
|
|
res.status(200);
|
|
res.send("OK");
|
|
} catch (e) {
|
|
console.error("Error deleting file", e);
|
|
res.status(500);
|
|
res.send("OK");
|
|
}
|
|
});
|
|
|
|
this.app.use(
|
|
"/fs",
|
|
tokenMiddleware,
|
|
cors({
|
|
methods: "GET,HEAD,PUT,OPTIONS,POST,DELETE",
|
|
preflightContinue: true,
|
|
}),
|
|
fsRouter
|
|
);
|
|
|
|
let plugRouter = express.Router();
|
|
|
|
// TODO: This is currently only used for the indexer calls, it's potentially dangerous
|
|
// do we need a better solution?
|
|
plugRouter.post(
|
|
"/:plug/syscall/:name",
|
|
bodyParser.json(),
|
|
async (req, res) => {
|
|
const name = req.params.name;
|
|
const plugName = req.params.plug;
|
|
const args = req.body as any;
|
|
const plug = this.system.loadedPlugs.get(plugName);
|
|
if (!plug) {
|
|
res.status(404);
|
|
return res.send(`Plug ${plugName} not found`);
|
|
}
|
|
try {
|
|
const result = await this.system.syscallWithContext(
|
|
{ plug },
|
|
name,
|
|
args
|
|
);
|
|
res.status(200);
|
|
res.send(result);
|
|
} catch (e: any) {
|
|
res.status(500);
|
|
return res.send(e.message);
|
|
}
|
|
}
|
|
);
|
|
|
|
plugRouter.post(
|
|
"/:plug/function/:name",
|
|
bodyParser.json(),
|
|
async (req, res) => {
|
|
const name = req.params.name;
|
|
const plugName = req.params.plug;
|
|
const args = req.body as any[];
|
|
const plug = this.system.loadedPlugs.get(plugName);
|
|
if (!plug) {
|
|
res.status(404);
|
|
return res.send(`Plug ${plugName} not found`);
|
|
}
|
|
try {
|
|
const result = await plug.invoke(name, args);
|
|
res.status(200);
|
|
res.send(result);
|
|
} catch (e: any) {
|
|
res.status(500);
|
|
// console.log("Error invoking function", e);
|
|
return res.send(e.message);
|
|
}
|
|
}
|
|
);
|
|
|
|
this.app.use(
|
|
"/plug",
|
|
tokenMiddleware,
|
|
cors({
|
|
methods: "GET,HEAD,PUT,OPTIONS,POST,DELETE",
|
|
preflightContinue: true,
|
|
}),
|
|
plugRouter
|
|
);
|
|
|
|
// Fallback, serve index.html
|
|
this.app.get("/*", async (req, res) => {
|
|
res.sendFile(`${this.distDir}/index.html`, {});
|
|
});
|
|
|
|
this.server = http.createServer(this.app);
|
|
this.server.listen(this.port, () => {
|
|
console.log(`Server listening on port ${this.port}`);
|
|
});
|
|
}
|
|
|
|
async stop() {
|
|
if (this.server) {
|
|
console.log("Stopping");
|
|
await this.system.unloadAll();
|
|
console.log("Stopped plugs");
|
|
return new Promise<void>((resolve, reject) => {
|
|
this.server!.close((err) => {
|
|
this.server = undefined;
|
|
console.log("stopped server");
|
|
if (err) {
|
|
reject(err);
|
|
} else {
|
|
resolve();
|
|
}
|
|
});
|
|
});
|
|
}
|
|
}
|
|
}
|