22

app/api/v1/nodejs_scripts.py

@@ -0,0 +1,47 @@
+"""Node.js 流水线脚本：按文件名下发源码，供桌面端拉取后在 Node 子进程中执行。"""
+
+import re
+from pathlib import Path
+
+from fastapi import APIRouter
+
+from app.schemas.common import ApiResponse
+
+router = APIRouter(prefix="/nodejs-scripts", tags=["nodejs"])
+
+# pythonbackend/scripts/nodejs/*.js
+_SCRIPTS_DIR = Path(__file__).resolve().parents[3] / "scripts" / "nodejs"
+
+_SAFE_NAME = re.compile(r"^[a-zA-Z0-9][a-zA-Z0-9._-]*\.js$")
+
+
+def _validate_name(name: str) -> str | None:
+    if not name or not _SAFE_NAME.fullmatch(name.strip()):
+        return None
+    return name.strip()
+
+
+@router.get("", response_model=ApiResponse[dict])
+async def get_nodejs_script(name: str) -> ApiResponse[dict]:
+    safe = _validate_name(name)
+    if not safe:
+        return ApiResponse(ok=False, message="无效的脚本名称", data=None)
+    path = _SCRIPTS_DIR / safe
+    try:
+        base_resolved = _SCRIPTS_DIR.resolve()
+        resolved = path.resolve()
+        resolved.relative_to(base_resolved)
+    except (OSError, ValueError):
+        return ApiResponse(ok=False, message="无效的脚本路径", data=None)
+    if not path.is_file():
+        return ApiResponse(ok=False, message=f"脚本不存在: {safe}", data=None)
+    source = path.read_text(encoding="utf-8")
+    return ApiResponse(ok=True, message="", data={"source": source})
+
+
+@router.get("/list", response_model=ApiResponse[dict])
+async def list_nodejs_scripts() -> ApiResponse[dict]:
+    if not _SCRIPTS_DIR.is_dir():
+        return ApiResponse(ok=True, message="", data={"names": []})
+    names = sorted(p.name for p in _SCRIPTS_DIR.glob("*.js") if p.is_file())
+    return ApiResponse(ok=True, message="", data={"names": names})