agent-Specialization/modules/i18n_messages/server_core_leftovers.py
JOJO 1a4e5baa23 fix(security): Docker 多用户模式全面安全加固(安全审计修复)
威胁模型:拥有普通账号的已登录用户攻击服务器。完整审计报告见
_experiments/security_audit_2026-09-02/(不入库),含实测复现记录。

严重/高危修复:
- 彻底移除文件夹打包下载(/api/download/folder 端点删除,gui/api_v1
  目录下载分支改 410):文件型符号链接会被宿主进程解析,实测可读宿主
  任意文件(含 settings.json 全部 LLM 密钥),删除比补校验更彻底
- XFF 伪造防护:get_client_ip 仅信任 ASTRION_TRUSTED_PROXIES
  (默认空=不信 XFF);登录新增账号维度锁定(5 次失败锁 300s);
  注册邀请码加爆破锁定;限流桶/失败表加 2 万键上限+GC 回收
- auth_debug.log 接入大小轮转;/api/client_debug_log 加限流+长度截断
- /host-login 增加 LINUX_SAFETY 检查且仅回环地址可用

容器加固:
- 默认 cpus=1 / memory=1g,新增 pids-limit=512、memory-swap、
  no-new-privileges
- 新增每用户容器配额 MAX_ACTIVE_CONTAINERS_PER_USER(默认 3),
  防止单用户占满全局容器池

api_v1:
- prompts/personalizations 的 name 加白名单校验(^[A-Za-z0-9_-]{1,64}$),
  修复路径穿越写入;对话元数据中的引用名同步加白名单
- workspaces/conversations/messages/upload 四端点加用户维度限流
- 消息体加 MAX_MESSAGE_CHARS 上限(默认 200000,/api/tasks 同步)
- _path_within 加分隔符边界(修复 startswith 前缀碰撞)

其他:
- SVG 预览强制 application/octet-stream(修存储型 XSS 漏网)
- monitor_snapshot 缓存键加 username 维度(修跨用户快照读取)
- ensure/delete_workspace 加 workspace_id 白名单+父目录二次核验
- delete_folder 拒绝删除工作区根(crud_mixin 与容器代理同步修)
- GuiFileManager 死代码加名称校验防复活
- admin_dashboard 静态壳非 admin 访问一律 404
- /api/app/apk/latest 加登录校验+限流(原未认证可拉 133MB)

有意未修(见报告 7.3 遗留清单):容器 egress 过滤(部署层)、
--cap-drop ALL(怕破坏容器内工作流,已先上 no-new-privileges)、
API 用户/子智能体 LLM 按 token 计费(待产品决策)、str(exc) 收口、
WebSocket 限流、network_permission=restricted 容器语义。

验证:全部文件 py_compile 通过;冒烟测试 6/6 通过;关键新逻辑
(名称校验/路径边界/容器代理删除防护/限流回收)已单测级验证;
端点级行为待服务重启后实测复核(清单见报告 7.5)。

Co-authored-by: Astrion powered by Kimi-K3 <astrion-agent@users.noreply.github.com>
2026-09-02 18:31:00 +08:00

178 lines
8.1 KiB
Python
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

"""Message pack: server_core_leftovers (agent_32 迁移的 server/core 遗留中文)。
覆盖域:
- files. server/files.py 的 jsonify error文件浏览/管理、path、项目路径
- chat_flow. server/chat_flow.py 主任务门闸拒绝消息
- stream_loop. server/chat_flow_stream_loop.py 工具准备中消息
- web_terminal. core/web_terminal.py 工具执行状态广播sender message
与 modules/i18n_messages/web_terminal.py 的 key 不重叠)
- main_terminal. core/main_terminal.py 的 raise ValueError
- tools_policy. core/main_terminal_parts/tools_policy.py 的 raise ValueError
- commands_raise. core/main_terminal_parts/commands.py 斜杠命令报错 raise
(与 commands.py 既有结果文本 key 前缀 commands. 区分)
- api_v1_raise. server/api_v1.py 路由层 raise被 except 包成 API 错误返回;
与 api_v1.py 既有业务错误 key 前缀 api_v1. 区分)
说明:
- 复用既有 keytool_loop.cancelled_by_user / tool_loop.deep_compression_failed
(位于 modules/i18n_messages/chat_flow.py本文件不重复定义
- 纯数据模块:禁止 import modules.i18n由 modules/i18n.py import 时自动聚合。
- 插值用 str.format 命名参数tr("<prefix>.<key>", name=value)。
"""
MESSAGES = {
# ── server/files.py ──
"files.browse_disabled_admin": {
"zh-CN": "文件浏览已被管理员禁用",
"en-US": "File browsing is disabled by the administrator",
},
"files.manage_disabled_admin": {
"zh-CN": "文件管理已被管理员禁用",
"en-US": "File management is disabled by the administrator",
},
"files.missing_path": {
"zh-CN": "缺少 path",
"en-US": "Missing path",
},
"files.folder_download_removed": {
"zh-CN": "文件夹打包下载功能已下线",
"en-US": "Folder archive download has been removed",
},
"files.missing_path_or_content": {
"zh-CN": "缺少 path 或 content",
"en-US": "Missing path or content",
},
"files.project_path_not_found": {
"zh-CN": "项目路径不存在",
"en-US": "Project path does not exist",
},
"files.invalid_project_path": {
"zh-CN": "项目路径无效: {error}",
"en-US": "Invalid project path: {error}",
},
"files.scan_project_failed": {
"zh-CN": "扫描项目失败: {error}",
"en-US": "Failed to scan the project: {error}",
},
# ── server/chat_flow.py ──
"chat_flow.task_already_running": {
"zh-CN": "当前对话已有任务在运行,请稍后再试。",
"en-US": "A task is already running in this conversation. Please try again later.",
},
# ── server/chat_flow_stream_loop.py ──
"stream_loop.preparing_tool": {
"zh-CN": "准备调用 {tool}...",
"en-US": "Preparing to call {tool}...",
},
# ── core/web_terminal.py工具执行状态广播 message ──
# 注意:本组 key 与 modules/i18n_messages/web_terminal.py 的 key 不重叠。
"web_terminal.tool_executing": {
"zh-CN": "正在执行 {tool_name}...",
"en-US": "Executing {tool_name}...",
},
"web_terminal.tool_failed_param_too_long": {
"zh-CN": "{tool_name} 执行失败: 参数过长",
"en-US": "{tool_name} failed: parameters are too long",
},
"web_terminal.tool_failed_param_format": {
"zh-CN": "{tool_name} 执行失败: 参数格式错误",
"en-US": "{tool_name} failed: parameter format error",
},
"web_terminal.tool_failed_general": {
"zh-CN": "{tool_name} 执行失败: {error_msg}",
"en-US": "{tool_name} failed: {error_msg}",
},
"web_terminal.tool_succeeded": {
"zh-CN": "{tool_name} 执行成功",
"en-US": "{tool_name} executed successfully",
},
"web_terminal.tool_result_not_json": {
"zh-CN": "{tool_name} 返回了非JSON格式结果",
"en-US": "{tool_name} returned a non-JSON result",
},
# ── core/main_terminal.py ──
"main_terminal.invalid_network_permission": {
"zh-CN": "无效网络权限,仅支持 restricted / full / none",
"en-US": "Invalid network permission; only restricted / full / none are supported",
},
"main_terminal.invalid_permission_mode": {
"zh-CN": "无效权限模式,仅支持 readonly / approval / auto_approval / unrestricted",
"en-US": "Invalid permission mode; only readonly / approval / auto_approval / unrestricted are supported",
},
"main_terminal.invalid_execution_environment": {
"zh-CN": "无效执行环境,仅支持 sandbox / direct",
"en-US": "Invalid execution environment; only sandbox / direct are supported",
},
"main_terminal.plan_mode_locks_sandbox": {
"zh-CN": "计划模式下执行环境锁定为沙箱,请先切换运行模式",
"en-US": "Execution environment is locked to sandbox in plan mode; switch work mode first",
},
"main_terminal.restricted_mode_locks_sandbox": {
"zh-CN": "只读/批准/自动审核模式下执行环境锁定为沙箱,切换到无限制模式后可选完全访问",
"en-US": "Execution environment is locked to sandbox in readonly/approval/auto-approval mode; switch to unrestricted for direct access",
},
# ── core/main_terminal_parts/tools_policy.py ──
"tools_policy.invalid_work_mode": {
"zh-CN": "无效运行模式,仅支持 plan / ask / execute",
"en-US": "Invalid work mode; only plan / ask / execute are supported",
},
"tools_policy.invalid_permission_mode": {
"zh-CN": "无效权限模式,仅支持 readonly / approval / auto_approval / unrestricted",
"en-US": "Invalid permission mode; only readonly / approval / auto_approval / unrestricted are supported",
},
"tools_policy.plan_mode_locks_readonly": {
"zh-CN": "计划模式下权限模式锁定为只读,请先切换运行模式",
"en-US": "Permission mode is locked to readonly in plan mode; switch work mode first",
},
"tools_policy.unknown_tool_category": {
"zh-CN": "未知的工具类别: {category}",
"en-US": "Unknown tool category: {category}",
},
"tools_policy.category_admin_locked": {
"zh-CN": "该类别被管理员强制为启用/禁用,无法修改",
"en-US": "This category is forced enabled/disabled by the administrator and cannot be modified",
},
# ── core/main_terminal_parts/commands.py斜杠命令报错展示给用户
# 前缀 commands_raise. 与既有结果文本 commands. 区分) ──
"commands_raise.unsupported_mode": {
"zh-CN": "不支持的模式: {mode}",
"en-US": "Unsupported mode: {mode}",
},
"commands_raise.thinking_only_model": {
"zh-CN": "当前模型仅支持思考模式",
"en-US": "This model only supports thinking mode",
},
"commands_raise.fast_only_model": {
"zh-CN": "当前模型仅支持快速模式",
"en-US": "This model only supports fast mode",
},
"commands_raise.unsupported_reasoning_effort": {
"zh-CN": "不支持的推理强度: {effort}",
"en-US": "Unsupported reasoning effort: {effort}",
},
"commands_raise.model_no_image": {
"zh-CN": "当前对话包含图片,目标模型不支持图片输入",
"en-US": "The conversation contains images, but the target model does not support image input",
},
"commands_raise.model_no_video": {
"zh-CN": "当前对话包含视频,目标模型不支持视频输入",
"en-US": "The conversation contains videos, but the target model does not support video input",
},
# ── server/api_v1.py路由层 raise被 except 包成 API 错误返回;
# 前缀 api_v1_raise. 与既有业务错误 api_v1. 区分) ──
"api_v1_raise.invalid_path": {
"zh-CN": "非法路径",
"en-US": "Invalid path",
},
"api_v1_raise.workspace_id_empty": {
"zh-CN": "workspace_id 不能为空",
"en-US": "workspace_id must not be empty",
},
}