298 lines
9.3 KiB
JavaScript
298 lines
9.3 KiB
JavaScript
import { Server } from "@modelcontextprotocol/sdk/server/index.js";
|
||
import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
|
||
import {
|
||
CallToolRequestSchema,
|
||
ListToolsRequestSchema,
|
||
} from "@modelcontextprotocol/sdk/types.js";
|
||
import { Client } from "ssh2";
|
||
|
||
// ========== SSH 配置（通过环境变量传入） ==========
|
||
const SSH_CONFIG = {
|
||
host: process.env.SSH_HOST || "",
|
||
port: parseInt(process.env.SSH_PORT || "22"),
|
||
username: process.env.SSH_USER || "root",
|
||
password: process.env.SSH_PASSWORD || "",
|
||
// 如果用密钥认证，设置 SSH_PRIVATE_KEY_PATH
|
||
privateKey: process.env.SSH_PRIVATE_KEY_PATH
|
||
? (await import("fs")).readFileSync(process.env.SSH_PRIVATE_KEY_PATH)
|
||
: undefined,
|
||
readyTimeout: 10000,
|
||
keepaliveInterval: 5000,
|
||
};
|
||
|
||
// ========== SSH 执行命令 ==========
|
||
function sshExec(command, timeout = 30000) {
|
||
return new Promise((resolve, reject) => {
|
||
const conn = new Client();
|
||
let output = "";
|
||
let errorOutput = "";
|
||
let timer = null;
|
||
|
||
conn
|
||
.on("ready", () => {
|
||
timer = setTimeout(() => {
|
||
conn.end();
|
||
resolve({
|
||
stdout: output,
|
||
stderr: errorOutput + "\n[TIMEOUT] Command timed out after " + timeout + "ms",
|
||
code: -1,
|
||
});
|
||
}, timeout);
|
||
|
||
conn.exec(command, (err, stream) => {
|
||
if (err) {
|
||
clearTimeout(timer);
|
||
conn.end();
|
||
return reject(err);
|
||
}
|
||
|
||
stream
|
||
.on("close", (code) => {
|
||
clearTimeout(timer);
|
||
conn.end();
|
||
resolve({ stdout: output, stderr: errorOutput, code });
|
||
})
|
||
.on("data", (data) => {
|
||
output += data.toString();
|
||
})
|
||
.stderr.on("data", (data) => {
|
||
errorOutput += data.toString();
|
||
});
|
||
});
|
||
})
|
||
.on("error", (err) => {
|
||
if (timer) clearTimeout(timer);
|
||
reject(new Error(`SSH connection failed: ${err.message}`));
|
||
})
|
||
.connect(SSH_CONFIG);
|
||
});
|
||
}
|
||
|
||
// ========== MCP Server ==========
|
||
const server = new Server(
|
||
{ name: "ssh-server", version: "1.0.0" },
|
||
{ capabilities: { tools: {} } }
|
||
);
|
||
|
||
// 工具列表
|
||
server.setRequestHandler(ListToolsRequestSchema, async () => ({
|
||
tools: [
|
||
{
|
||
name: "ssh_run",
|
||
description:
|
||
"在远程服务器上执行 Shell 命令。用于检查服务状态、查看日志、读取配置文件等。",
|
||
inputSchema: {
|
||
type: "object",
|
||
properties: {
|
||
command: {
|
||
type: "string",
|
||
description: "要执行的 Shell 命令",
|
||
},
|
||
timeout: {
|
||
type: "number",
|
||
description: "超时时间(毫秒)，默认 30000",
|
||
},
|
||
},
|
||
required: ["command"],
|
||
},
|
||
},
|
||
{
|
||
name: "ssh_read_file",
|
||
description: "读取远程服务器上的文件内容",
|
||
inputSchema: {
|
||
type: "object",
|
||
properties: {
|
||
path: {
|
||
type: "string",
|
||
description: "远程文件的绝对路径",
|
||
},
|
||
maxLines: {
|
||
type: "number",
|
||
description: "最大读取行数，默认 200",
|
||
},
|
||
},
|
||
required: ["path"],
|
||
},
|
||
},
|
||
{
|
||
name: "ssh_write_file",
|
||
description: "写入内容到远程服务器上的文件（覆盖写入）",
|
||
inputSchema: {
|
||
type: "object",
|
||
properties: {
|
||
path: {
|
||
type: "string",
|
||
description: "远程文件的绝对路径",
|
||
},
|
||
content: {
|
||
type: "string",
|
||
description: "要写入的文件内容",
|
||
},
|
||
},
|
||
required: ["path", "content"],
|
||
},
|
||
},
|
||
{
|
||
name: "ssh_check_bigwo",
|
||
description:
|
||
"一键检查 BigWo 项目部署状态：端口、PM2、Nginx、.env 配置、SSL、FC 回调可达性等",
|
||
inputSchema: {
|
||
type: "object",
|
||
properties: {},
|
||
},
|
||
},
|
||
],
|
||
}));
|
||
|
||
// 工具执行
|
||
server.setRequestHandler(CallToolRequestSchema, async (request) => {
|
||
const { name, arguments: args } = request.params;
|
||
|
||
try {
|
||
switch (name) {
|
||
case "ssh_run": {
|
||
const { command, timeout } = args;
|
||
const result = await sshExec(command, timeout || 30000);
|
||
const text = [
|
||
`$ ${command}`,
|
||
`Exit code: ${result.code}`,
|
||
result.stdout ? `--- stdout ---\n${result.stdout}` : "(no stdout)",
|
||
result.stderr ? `--- stderr ---\n${result.stderr}` : "",
|
||
]
|
||
.filter(Boolean)
|
||
.join("\n");
|
||
return { content: [{ type: "text", text }] };
|
||
}
|
||
|
||
case "ssh_read_file": {
|
||
const { path, maxLines } = args;
|
||
const limit = maxLines || 200;
|
||
const result = await sshExec(
|
||
`head -n ${limit} ${JSON.stringify(path)} 2>&1 && echo "---" && wc -l < ${JSON.stringify(path)} 2>/dev/null`
|
||
);
|
||
return {
|
||
content: [
|
||
{
|
||
type: "text",
|
||
text: `File: ${path}\n${result.stdout}${result.stderr ? "\n" + result.stderr : ""}`,
|
||
},
|
||
],
|
||
};
|
||
}
|
||
|
||
case "ssh_write_file": {
|
||
const { path, content } = args;
|
||
// 使用 heredoc 写入，避免转义问题
|
||
const escapedContent = content.replace(/'/g, "'\\''");
|
||
const result = await sshExec(
|
||
`cat > ${JSON.stringify(path)} << 'MCPEOF'\n${content}\nMCPEOF`
|
||
);
|
||
if (result.code === 0) {
|
||
return {
|
||
content: [{ type: "text", text: `✅ 文件已写入: ${path}` }],
|
||
};
|
||
}
|
||
return {
|
||
content: [
|
||
{
|
||
type: "text",
|
||
text: `❌ 写入失败: ${result.stderr || result.stdout}`,
|
||
},
|
||
],
|
||
};
|
||
}
|
||
|
||
case "ssh_check_bigwo": {
|
||
const checks = [];
|
||
const PROJECT = "/www/wwwroot/demo.tensorgrove.com.cn";
|
||
|
||
// 1. PM2 状态
|
||
const pm2 = await sshExec("pm2 jlist 2>/dev/null || echo 'PM2_NOT_FOUND'");
|
||
checks.push("=== 1. PM2 进程状态 ===\n" + pm2.stdout);
|
||
|
||
// 2. 后端端口监听
|
||
const ports = await sshExec("ss -tlnp | grep -E '3001|3012|80|443'");
|
||
checks.push("=== 2. 端口监听 ===\n" + ports.stdout);
|
||
|
||
// 3. .env 关键配置（脱敏）
|
||
const env = await sshExec(
|
||
`grep -E '^(PORT|FC_SERVER_URL|VOLC_ARK_KNOWLEDGE|VOLC_RTC_APP_ID|VOLC_ARK_ENDPOINT_ID|COZE_)' ${PROJECT}/server/.env 2>/dev/null | sed 's/=.\\{8\\}/=***REDACTED***/g'`
|
||
);
|
||
checks.push("=== 3. .env 关键配置 ===\n" + (env.stdout || "(文件不存在或为空)"));
|
||
|
||
// 4. .env 完整键列表
|
||
const envKeys = await sshExec(
|
||
`grep -v '^#' ${PROJECT}/server/.env 2>/dev/null | grep '=' | cut -d= -f1`
|
||
);
|
||
checks.push("=== 4. .env 所有配置键 ===\n" + (envKeys.stdout || "(无)"));
|
||
|
||
// 5. Nginx 配置
|
||
const nginx = await sshExec(
|
||
`grep -A5 'location /api' /www/server/panel/vhost/nginx/demo.tensorgrove.com.cn.conf 2>/dev/null || grep -rA5 'location /api' /www/server/panel/vhost/nginx/ 2>/dev/null | head -20`
|
||
);
|
||
checks.push("=== 5. Nginx API 代理配置 ===\n" + (nginx.stdout || "(未找到)"));
|
||
|
||
// 6. 本地测试后端 API
|
||
const health = await sshExec(
|
||
`curl -s http://127.0.0.1:3012/api/health 2>&1 || curl -s http://127.0.0.1:3001/api/health 2>&1 || echo 'BACKEND_UNREACHABLE'`
|
||
);
|
||
checks.push("=== 6. 后端 Health Check ===\n" + health.stdout);
|
||
|
||
// 7. 测试 FC 回调可达性（外部 HTTPS）
|
||
const fcTest = await sshExec(
|
||
`curl -s -o /dev/null -w '%{http_code}' -X POST https://demo.tensorgrove.com.cn/api/voice/fc_callback -H 'Content-Type: application/json' -d '{"Type":"test"}' 2>&1`
|
||
);
|
||
checks.push(
|
||
"=== 7. FC 回调外部可达性 ===\n" +
|
||
`HTTPS POST → HTTP Status: ${fcTest.stdout}`
|
||
);
|
||
|
||
// 8. SSL 证书状态
|
||
const ssl = await sshExec(
|
||
`echo | openssl s_client -connect demo.tensorgrove.com.cn:443 -servername demo.tensorgrove.com.cn 2>/dev/null | openssl x509 -noout -dates 2>/dev/null || echo 'SSL_CHECK_FAILED'`
|
||
);
|
||
checks.push("=== 8. SSL 证书 ===\n" + ssl.stdout);
|
||
|
||
// 9. PM2 最近日志
|
||
const logs = await sshExec(
|
||
"pm2 logs bigwo-server --nostream --lines 30 2>/dev/null || echo 'NO_LOGS'"
|
||
);
|
||
checks.push("=== 9. PM2 最近30行日志 ===\n" + logs.stdout + (logs.stderr || ""));
|
||
|
||
// 10. 前端 dist 是否存在
|
||
const dist = await sshExec(
|
||
`ls -la ${PROJECT}/client/dist/index.html 2>&1 && echo "DIST_OK" || echo "DIST_MISSING"`
|
||
);
|
||
checks.push("=== 10. 前端构建产物 ===\n" + dist.stdout);
|
||
|
||
return {
|
||
content: [{ type: "text", text: checks.join("\n\n") }],
|
||
};
|
||
}
|
||
|
||
default:
|
||
return {
|
||
content: [{ type: "text", text: `Unknown tool: ${name}` }],
|
||
isError: true,
|
||
};
|
||
}
|
||
} catch (error) {
|
||
return {
|
||
content: [{ type: "text", text: `Error: ${error.message}` }],
|
||
isError: true,
|
||
};
|
||
}
|
||
});
|
||
|
||
// 启动
|
||
async function main() {
|
||
const transport = new StdioServerTransport();
|
||
await server.connect(transport);
|
||
console.error("SSH MCP Server running on stdio");
|
||
}
|
||
|
||
main().catch((err) => {
|
||
console.error("Fatal:", err);
|
||
process.exit(1);
|
||
});
|