encrypt.js

#!/usr/bin/env node
'use strict';
const fs = require('fs');
const path = require('path');
const { spawnSync } = require('child_process');
const crypto = require('./src/crypto-core');
const { buildEncryptedHtml } = require('./src/template');
const { extractLogo, extractTitle, fileToDataUri } = require('./src/favicon');
const { parseArgs, formatHelp } = require('./src/cli-args');
const { bundleHtml } = require('./src/bundle');
const { generatePassword } = require('./src/password');
const { batchEncryptDir } = require('./src/batch');

function promptPassword() {
  const stdin = process.stdin;
  const interactive = stdin.isTTY && typeof stdin.setRawMode === 'function';
  process.stderr.write('请输入加密密码: ');
  return new Promise((resolve) => {
    if (!interactive) {
      let buf = '';
      stdin.resume(); stdin.setEncoding('utf8');
      const onData = (d) => { const i = d.indexOf('\n'); if (i >= 0) { buf += d.slice(0, i).replace(/\r$/, ''); cleanup(); process.stderr.write('\n'); resolve(buf); } else buf += d; };
      const onEnd = () => { cleanup(); process.stderr.write('\n'); resolve(buf); };
      const cleanup = () => { stdin.removeListener('data', onData); stdin.removeListener('end', onEnd); stdin.destroy(); };
      stdin.on('data', onData); stdin.on('end', onEnd);
      return;
    }
    const bytes = [];
    stdin.setRawMode(true); stdin.resume();
    const finish = () => { stdin.setRawMode(false); stdin.pause(); stdin.removeListener('data', onData); process.stderr.write('\n'); resolve(Buffer.from(bytes).toString('utf8')); };
    const onData = (chunk) => {
      for (let k = 0; k < chunk.length; k++) {
        const b = chunk[k];
        if (b === 0x0d || b === 0x0a) return finish();
        if (b === 0x03) { process.stderr.write('\n'); process.exit(0); }
        if (b === 0x08 || b === 0x7f) {
          if (bytes.length) { let cb = 1; while (bytes.length - cb > 0 && (bytes[bytes.length - 1 - cb] & 0xC0) === 0x80) cb++; for (let j = 0; j < cb; j++) { bytes.pop(); process.stderr.write('\b \b'); } }
        } else if (b >= 0x20 && b !== 0x7f) { bytes.push(b); process.stderr.write('*'); }
      }
    };
    stdin.on('data', onData);
  });
}

function openUrl(url) {
  if (process.platform === 'win32') spawnSync('cmd', ['/c', 'start', '', url], { stdio: 'ignore' });
  else if (process.platform === 'darwin') spawnSync('open', [url], { stdio: 'ignore' });
  else spawnSync('xdg-open', [url], { stdio: 'ignore' });
}

async function startGui() {
  const guiPath = path.join(__dirname, 'gui', 'index.html');
  if (!fs.existsSync(guiPath)) { console.error('未找到 Web GUI（gui/index.html）。请先运行：node src/build-gui.js'); process.exit(1); }
  const { startServer } = require('./src/server');
  let info;
  try { info = await startServer({ guiPath }); } catch (e) { console.error('启动本地服务失败：' + e.message); process.exit(1); }
  const url = 'http://' + info.host + ':' + info.port + '/';
  console.log('StaticShield GUI 已启动：' + url);
  console.log('（多个客户端可同时访问该地址进行并行加密；按 Ctrl+C 停止服务）');
  openUrl(url);
}

async function processFile(file, password, args) {
  if (!fs.existsSync(file)) throw new Error('文件不存在: ' + file);
  const baseDir = path.dirname(path.resolve(file));
  let html = fs.readFileSync(file, 'utf8');
  const stats = {};
  if (args.bundle) {
    html = bundleHtml(html, baseDir, stats);
    const total = stats.css + stats.js + stats.img + stats.icon + stats.import;
    console.log('  打包：内联 ' + total + ' 个资源（css ' + stats.css + ' / js ' + stats.js + ' / 图片 ' + stats.img + ' / favicon ' + stats.icon + ' / @import ' + stats.import + '）');
  }
  const title = extractTitle(html);
  let logo = '';
  if (args.logo) { if (!fs.existsSync(args.logo)) throw new Error('Logo 文件不存在: ' + args.logo); logo = fileToDataUri(args.logo); }
  else logo = await extractLogo(html, baseDir);
  const meta = await crypto.encryptHtml(html, password, { useSha512: args.sha512 });
  meta.hint = args.hint || ''; meta.title = title || ''; meta.logo = logo || '';
  if (args.remember !== null && args.remember !== undefined) meta.rememberDays = args.remember;
  return meta;
}

async function main() {
  let args;
  try { args = parseArgs(process.argv.slice(2)); } catch (e) { console.error('错误：' + e.message); console.error('使用 --help 查看用法。'); process.exit(1); }
  if (args.help) { console.log(formatHelp()); return; }
  if (args.gui) { await startGui(); return; }
  if (args.genPwd && args.files.length === 0) { console.log(generatePassword(args.genPwd)); return; }
  if (args.files.length === 0) { console.error('错误：请指定要加密的 HTML 文件。使用 --help 查看用法。'); process.exit(1); }
  let password = args.password;
  if (args.genPwd) { password = generatePassword(args.genPwd); console.log('已生成随机密码（' + args.genPwd + ' 位）：' + password); console.log('⚠ 请妥善保存此密码，丢失后无法恢复内容。'); }
  if (!password) password = await promptPassword();
  if (!password) { console.error('错误：密码不能为空。'); process.exit(1); }

  if (args.bundle && args.files.length === 1) {
    let srcStat; try { srcStat = fs.statSync(args.files[0]); } catch (e) { srcStat = null; }
    if (srcStat && srcStat.isDirectory()) {
      const srcDir = path.resolve(args.files[0]);
      const opts = { useSha512: args.sha512, hint: args.hint, rememberDays: args.remember };
      if (args.logo) { if (!fs.existsSync(args.logo)) { console.error('错误：Logo 文件不存在: ' + args.logo); process.exit(1); } opts.logo = fileToDataUri(args.logo); }
      const { pages, assets } = await batchEncryptDir(srcDir, password, opts);
      let outRoot = args.directory;
      if (path.resolve(outRoot) === srcDir) { outRoot = srcDir + '-encrypted'; console.warn('⚠ 输出目录与源目录相同，已改为：' + outRoot + ' 以避免覆盖源文件'); }
      fs.mkdirSync(outRoot, { recursive: true });
      const { zipFiles } = require('./src/zip');
      const zipEntries = [], agg = { css: 0, js: 0, img: 0, icon: 0, import: 0 };
      for (const r of pages) {
        const outPath = path.join(outRoot, r.path);
        fs.mkdirSync(path.dirname(outPath), { recursive: true });
        fs.writeFileSync(outPath, r.product);
        zipEntries.push({ path: r.path, data: r.product });
        agg.css += r.stats.css || 0; agg.js += r.stats.js || 0; agg.img += r.stats.img || 0; agg.icon += r.stats.icon || 0; agg.import += r.stats.import || 0;
        console.log('  · ' + r.path);
      }
      for (const a of assets) {
        const outPath = path.join(outRoot, a.path);
        fs.mkdirSync(path.dirname(outPath), { recursive: true });
        fs.writeFileSync(outPath, a.data);
        zipEntries.push({ path: a.path, data: a.data });
      }
      const zipPath = path.join(outRoot, path.basename(srcDir) + '-encrypted.zip');
      fs.writeFileSync(zipPath, zipFiles(zipEntries));
      console.log('✓ 批量加密完成：' + pages.length + ' 页' + (assets.length ? ' + ' + assets.length + ' 个保留文件' : '') + ' → ' + outRoot);
      console.log('  内联资源：css ' + agg.css + ' / js ' + agg.js + ' / 图片 ' + agg.img + ' / favicon ' + agg.icon + ' / @import ' + agg.import);
      console.log('  ZIP：' + zipPath);
      if (args.share) console.log('  提示：批量模式分享链接需逐页拼接（每页一个 #pwd= 链接，密码相同）。');
      return;
    }
  }

  if (args.directory && args.directory !== '.' && !fs.existsSync(args.directory)) fs.mkdirSync(args.directory, { recursive: true });
  let failed = 0;
  for (const file of args.files) {
    try {
      const meta = await processFile(file, password, args);
      const outHtml = buildEncryptedHtml(meta);
      let outPath = path.join(args.directory, path.basename(file));
      if (path.resolve(outPath) === path.resolve(file)) {
        const base = path.basename(file);
        let newName = base.replace(/(\.html?)$/i, '.encrypted$1');
        if (newName === base) newName = base + '.encrypted.html';
        outPath = path.join(args.directory, newName);
        console.warn('⚠ 检测到输出路径与源文件相同，已重命名为 ' + newName + ' 以避免覆盖原始文件');
      }
      fs.writeFileSync(outPath, outHtml);
      console.log('✓ 已加密：' + file + ' → ' + outPath);
      if (args.share) {
        const link = 'https://<托管地址>/' + encodeURIComponent(path.basename(file)) + '#pwd=' + encodeURIComponent(password);
        console.log('  分享链接（密码置于 URL hash，不会随请求发送到服务器）：');
        console.log('    ' + link);
        console.log('  注意：链接本身即包含密码，请仅在可信范围按需分享。');
      }
    } catch (e) { console.error('✗ 加密失败：' + file + ' — ' + e.message); failed++; }
  }
  process.exitCode = failed ? 1 : 0;
}

main().catch((e) => { console.error('错误：' + (e && e.message ? e.message : e)); process.exit(1); });