Spaces:

CORVO-AI
/

linux-computer

Paused

App Files Files Community

CORVO-AI commited on Jul 14

Commit

7289b1b

verified ·

1 Parent(s): b55ae70

Update file-manager/app.py

Browse files

Files changed (1) hide show

file-manager/app.py +151 -63

file-manager/app.py CHANGED Viewed

@@ -1,5 +1,5 @@
-import os, shutil, html, urllib.parse, subprocess
-from flask import Flask, request, redirect, send_file, Response
 from werkzeug.middleware.dispatcher import DispatcherMiddleware
 from werkzeug.serving import run_simple
@@ -9,8 +9,7 @@ app.config["APPLICATION_ROOT"] = "/fm"
 SECRET_HINTS = ("TOKEN", "KEY", "SECRET", "PASSWORD", "AUTH", "COOKIE")
 def is_sensitive(name):
-    up = name.upper()
-    return any(h in up for h in SECRET_HINTS)
 def mask_secrets(text):
     out = []
@@ -21,6 +20,52 @@ def mask_secrets(text):
             out.append(line)
     return "\n".join(out)
 PAGE = """<!doctype html><html><head><title>Box</title>
 <style>
 body{{font-family:monospace;margin:20px;background:#0b0b0b;color:#eee}}
@@ -29,66 +74,112 @@ table{{border-collapse:collapse;width:100%}} td,th{{padding:4px 8px;border-botto
 .bar{{background:#1a1a1a;padding:10px;margin-bottom:10px;border-radius:6px}}
 .tabs a{{margin-right:14px;font-weight:bold}}
 textarea{{width:100%;background:#000;color:#47E6C1;border:1px solid #333;padding:8px}}
-pre{{background:#000;color:#78D64B;padding:12px;border-radius:6px;overflow:auto;max-height:60vh}}
-input[type=text],select{{background:#000;color:#eee;border:1px solid #333;padding:6px}}
-button,input[type=submit]{{background:#F46821;color:#fff;border:0;padding:6px 14px;border-radius:4px;cursor:pointer}}
 </style></head><body>
-<div class="tabs bar"><a href="/fm/">📁 Files</a><a href="/fm/term">🖥️ Terminal</a>
-<a href="/reload">♻️ Reload</a><a href="/gpuinfo">🎮 GPU</a>
-<span style="color:#777">test mode · storage is ephemeral</span></div>
 {body}</body></html>"""
-# ---------------- TERMINAL ----------------
-@app.route("/term", methods=["GET", "POST"])
-def term():
-    cmd = ""
-    cwd = request.form.get("cwd", "/") if request.method == "POST" else "/"
-    output = ""
-    if request.method == "POST":
-        cmd = request.form.get("cmd", "")
-        if cmd.strip().startswith("cd "):
-            target = cmd.strip()[3:].strip()
-            new = target if target.startswith("/") else os.path.abspath(os.path.join(cwd, target))
-            if os.path.isdir(new):
-                cwd, output = new, f"(cwd -> {new})"
-            else:
-                output = f"cd: no such directory: {new}"
-        elif cmd.strip():
-            try:
-                r = subprocess.run(cmd, shell=True, cwd=cwd, capture_output=True,
-                                   text=True, timeout=120)
-                output = (r.stdout or "") + (r.stderr or "")
-                if r.returncode != 0 and not output:
-                    output = f"[exit code {r.returncode}]"
-            except subprocess.TimeoutExpired:
-                output = "[timed out after 120s]"
-            except Exception as e:
-                output = f"[error: {e}]"
-            output = mask_secrets(output)
-    body = f"""
-    <div class="bar"><b>cwd:</b> {html.escape(cwd)}</div>
-    <form method="post">
-      <input type="hidden" name="cwd" value="{html.escape(cwd)}">
-      <input type="text" name="cmd" placeholder="ls -la, df -h, free -h, nproc, pip install ..."
-             style="width:80%" autofocus value="{html.escape(cmd)}">
-      <input type="submit" value="Run">
-    </form>
-    <div class="bar" style="margin-top:10px">Quick:
-      <a href="#" onclick="q('ls -la')">ls -la</a> ·
-      <a href="#" onclick="q('df -h')">df -h</a> ·
-      <a href="#" onclick="q('free -h')">free -h</a> ·
-      <a href="#" onclick="q('nproc')">nproc</a> ·
-      <a href="#" onclick="q('cat /etc/os-release')">os-release</a>
-    </div>
-    <pre>{html.escape(output)}</pre>
     <script>
-      function q(c){{document.querySelector('[name=cmd]').value=c;
-                     document.querySelector('form').submit();}}
     </script>"""
     return Response(PAGE.format(body=body))
-# ---------------- FILE MANAGER ----------------
 @app.route("/")
 def browse():
     path = os.path.abspath(request.args.get("path", "/"))
@@ -96,14 +187,12 @@ def browse():
         return Response(PAGE.format(body=f"<p>Not found: {html.escape(path)}</p>"), status=404)
     if os.path.isfile(path):
         return redirect(f"/fm/view?path={urllib.parse.quote(path)}")
     parent = os.path.dirname(path.rstrip("/")) or "/"
     rows = f'<tr><td><a href="/fm/?path={urllib.parse.quote(parent)}">.. (up)</a></td><td></td><td></td></tr>'
     try:
         entries = sorted(os.listdir(path))
     except PermissionError:
         return Response(PAGE.format(body=f"<p>Permission denied: {html.escape(path)}</p>"), status=403)
     for name in entries:
         full = os.path.join(path, name); q = urllib.parse.quote(full)
         try:
@@ -119,17 +208,16 @@ def browse():
                        f'<a href="/fm/edit?path={q}">edit</a> | '
                        f'<a href="/fm/delete?path={q}">delete</a>')
         rows += f"<tr><td>{link}</td><td>{size}</td><td>{actions}</td></tr>"
     body = f"""
     <div class="bar"><b>Path:</b> {html.escape(path)}</div>
     <div class="bar">
       <form action="/fm/mkdir" method="post" style="display:inline">
         <input type="hidden" name="path" value="{html.escape(path)}">
-        <input name="name" placeholder="new folder"><input type="submit" value="Create folder">
       </form>
       <form action="/fm/upload" method="post" enctype="multipart/form-data" style="display:inline">
         <input type="hidden" name="path" value="{html.escape(path)}">
-        <input type="file" name="file"><input type="submit" value="Upload">
       </form>
     </div>
     <table><tr><th>Name</th><th>Size</th><th>Actions</th></tr>{rows}</table>"""
@@ -169,7 +257,7 @@ def edit():
     <form action="/fm/save" method="post">
       <input type="hidden" name="path" value="{html.escape(path)}">
       <textarea name="content" style="height:60vh">{html.escape(content)}</textarea>
-      <br><input type="submit" value="Save (live)">
       <a href="/fm/?path={urllib.parse.quote(os.path.dirname(path))}">cancel</a>
     </form>"""
     return Response(PAGE.format(body=body))
@@ -214,4 +302,4 @@ def delete():
 if __name__ == "__main__":
     wrapped = DispatcherMiddleware(Flask("empty"), {"/fm": app})
-    run_simple("0.0.0.0", 9001, wrapped)

+import os, shutil, html, urllib.parse, subprocess, threading, queue, sys, time, json
+from flask import Flask, request, redirect, send_file, Response, stream_with_context
 from werkzeug.middleware.dispatcher import DispatcherMiddleware
 from werkzeug.serving import run_simple
 SECRET_HINTS = ("TOKEN", "KEY", "SECRET", "PASSWORD", "AUTH", "COOKIE")
 def is_sensitive(name):
+    return any(h in name.upper() for h in SECRET_HINTS)
 def mask_secrets(text):
     out = []
             out.append(line)
     return "\n".join(out)
+# =================================================================
+# PERSISTENT INTERACTIVE PYTHON REPL (supports input + streaming)
+# =================================================================
+class Repl:
+    def __init__(self):
+        self.p = subprocess.Popen(
+            [sys.executable, "-i", "-u"],   # -i interactive, -u unbuffered
+            stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.STDOUT,
+            text=True, bufsize=1,
+        )
+        self.q = queue.Queue()
+        threading.Thread(target=self._reader, daemon=True).start()
+    def _reader(self):
+        for line in self.p.stdout:
+            self.q.put(line)
+    def send(self, text):
+        if self.p.poll() is None:
+            self.p.stdin.write(text + "\n")
+            self.p.stdin.flush()
+    def drain(self, wait=0.3):
+        # collect whatever the REPL has produced so far
+        time.sleep(wait)
+        chunks = []
+        while not self.q.empty():
+            chunks.append(self.q.get())
+        return mask_secrets("".join(chunks))
+    def alive(self):
+        return self.p.poll() is None
+    def kill(self):
+        try:
+            self.p.kill()
+        except Exception:
+            pass
+_repl = {"r": None}
+def get_repl():
+    if _repl["r"] is None or not _repl["r"].alive():
+        _repl["r"] = Repl()
+        _repl["r"].drain(0.5)  # swallow the startup banner
+    return _repl["r"]
 PAGE = """<!doctype html><html><head><title>Box</title>
 <style>
 body{{font-family:monospace;margin:20px;background:#0b0b0b;color:#eee}}
 .bar{{background:#1a1a1a;padding:10px;margin-bottom:10px;border-radius:6px}}
 .tabs a{{margin-right:14px;font-weight:bold}}
 textarea{{width:100%;background:#000;color:#47E6C1;border:1px solid #333;padding:8px}}
+pre{{background:#000;color:#78D64B;padding:12px;border-radius:6px;overflow:auto;height:55vh;white-space:pre-wrap}}
+input[type=text]{{background:#000;color:#eee;border:1px solid #333;padding:8px}}
+button{{background:#F46821;color:#fff;border:0;padding:8px 14px;border-radius:4px;cursor:pointer}}
 </style></head><body>
+<div class="tabs bar"><a href="/fm/">📁 Files</a><a href="/fm/term">🖥️ Shell (stream)</a>
+<a href="/fm/py">🐍 Python REPL</a><a href="/reload">♻️ Reload</a><a href="/gpuinfo">🎮 GPU</a>
+<span style="color:#777">test mode · ephemeral</span></div>
 {body}</body></html>"""
+# ---------------- INTERACTIVE PYTHON REPL PAGE ----------------
+@app.route("/py")
+def py_page():
+    body = """
+    <div class="bar"><b>Interactive Python</b> — persistent session. Try: <code>2+2</code>,
+      then <code>name = input("your name? ")</code> and answer in the same box.</div>
+    <pre id="out">Python REPL ready. Type code below and press Run (or Enter).\n</pre>
+    <input type="text" id="line" style="width:80%" autofocus
+           placeholder="python code or input to a running prompt">
+    <button onclick="send()">Run</button>
+    <button onclick="reset()">Restart REPL</button>
+    <script>
+      const out = document.getElementById('out');
+      const line = document.getElementById('line');
+      function append(t){ out.textContent += t; out.scrollTop = out.scrollHeight; }
+      async function send(){
+        const code = line.value;
+        append('>>> ' + code + '\\n');
+        line.value = '';
+        const r = await fetch('/fm/py_send', {
+          method:'POST', headers:{'Content-Type':'application/json'},
+          body: JSON.stringify({code})
+        });
+        const data = await r.json();
+        if (data.output) append(data.output);
+      }
+      async function reset(){
+        await fetch('/fm/py_reset', {method:'POST'});
+        out.textContent = 'REPL restarted.\\n';
+      }
+      line.addEventListener('keydown', e => { if(e.key==='Enter'){ e.preventDefault(); send(); }});
+    </script>"""
+    return Response(PAGE.format(body=body))
+@app.route("/py_send", methods=["POST"])
+def py_send():
+    data = request.get_json(force=True)
+    repl = get_repl()
+    repl.send(data.get("code", ""))
+    return Response(json.dumps({"output": repl.drain(0.4)}), mimetype="application/json")
+@app.route("/py_reset", methods=["POST"])
+def py_reset():
+    if _repl["r"]:
+        _repl["r"].kill()
+    _repl["r"] = None
+    get_repl()
+    return Response(json.dumps({"ok": True}), mimetype="application/json")
+# ---------------- STREAMING ONE-SHOT SHELL ----------------
+@app.route("/term")
+def term_page():
+    body = """
+    <div class="bar"><b>Streaming shell</b> — output appears live, line by line.</div>
+    <input type="text" id="cmd" style="width:80%" autofocus
+           placeholder="e.g. python -c 'print(2+2)' , pip install rich , ls -la">
+    <button onclick="run()">Run</button>
+    <pre id="out"></pre>
     <script>
+      const out = document.getElementById('out');
+      async function run(){
+        const cmd = document.getElementById('cmd').value;
+        out.textContent = '$ ' + cmd + '\\n';
+        const resp = await fetch('/fm/term_stream?cmd=' + encodeURIComponent(cmd));
+        const reader = resp.body.getReader();
+        const dec = new TextDecoder();
+        while(true){
+          const {value, done} = await reader.read();
+          if(done) break;
+          out.textContent += dec.decode(value);
+          out.scrollTop = out.scrollHeight;
+        }
+      }
+      document.getElementById('cmd').addEventListener('keydown',
+        e => { if(e.key==='Enter'){ e.preventDefault(); run(); }});
     </script>"""
     return Response(PAGE.format(body=body))
+@app.route("/term_stream")
+def term_stream():
+    cmd = request.args.get("cmd", "")
+    @stream_with_context
+    def gen():
+        if not cmd.strip():
+            yield "[empty command]\n"; return
+        p = subprocess.Popen(cmd, shell=True, stdout=subprocess.PIPE,
+                             stderr=subprocess.STDOUT, text=True, bufsize=1)
+        try:
+            for line in p.stdout:
+                yield mask_secrets(line)
+            p.wait(timeout=300)
+            yield f"\n[exit code {p.returncode}]\n"
+        except Exception as e:
+            yield f"\n[error: {e}]\n"
+    return Response(gen(), mimetype="text/plain")
+# ---------------- FILE MANAGER (unchanged core) ----------------
 @app.route("/")
 def browse():
     path = os.path.abspath(request.args.get("path", "/"))
         return Response(PAGE.format(body=f"<p>Not found: {html.escape(path)}</p>"), status=404)
     if os.path.isfile(path):
         return redirect(f"/fm/view?path={urllib.parse.quote(path)}")
     parent = os.path.dirname(path.rstrip("/")) or "/"
     rows = f'<tr><td><a href="/fm/?path={urllib.parse.quote(parent)}">.. (up)</a></td><td></td><td></td></tr>'
     try:
         entries = sorted(os.listdir(path))
     except PermissionError:
         return Response(PAGE.format(body=f"<p>Permission denied: {html.escape(path)}</p>"), status=403)
     for name in entries:
         full = os.path.join(path, name); q = urllib.parse.quote(full)
         try:
                        f'<a href="/fm/edit?path={q}">edit</a> | '
                        f'<a href="/fm/delete?path={q}">delete</a>')
         rows += f"<tr><td>{link}</td><td>{size}</td><td>{actions}</td></tr>"
     body = f"""
     <div class="bar"><b>Path:</b> {html.escape(path)}</div>
     <div class="bar">
       <form action="/fm/mkdir" method="post" style="display:inline">
         <input type="hidden" name="path" value="{html.escape(path)}">
+        <input name="name" placeholder="new folder"><button type="submit">Create folder</button>
       </form>
       <form action="/fm/upload" method="post" enctype="multipart/form-data" style="display:inline">
         <input type="hidden" name="path" value="{html.escape(path)}">
+        <input type="file" name="file"><button type="submit">Upload</button>
       </form>
     </div>
     <table><tr><th>Name</th><th>Size</th><th>Actions</th></tr>{rows}</table>"""
     <form action="/fm/save" method="post">
       <input type="hidden" name="path" value="{html.escape(path)}">
       <textarea name="content" style="height:60vh">{html.escape(content)}</textarea>
+      <br><button type="submit">Save (live)</button>
       <a href="/fm/?path={urllib.parse.quote(os.path.dirname(path))}">cancel</a>
     </form>"""
     return Response(PAGE.format(body=body))
 if __name__ == "__main__":
     wrapped = DispatcherMiddleware(Flask("empty"), {"/fm": app})
+    run_simple("0.0.0.0", 9001, wrapped, threaded=True)   # threaded=True for streaming