linux-practice/server.py

#!/usr/bin/env python3
"""
Linux 命令沙盒练习平台 Server（增强版）
- 集成 sandbox.py 沙盒引擎
- 提供课程、命令执行、任务判定、学习建议等 API
"""

from __future__ import annotations

import hashlib
import http.server
import json
import os
import urllib.parse
from typing import Any

from sandbox import LinuxSandbox

USERS = {
    "admin": hashlib.sha256(b"safe_linux_2026").hexdigest(),
}

TOKEN_TTL = 86400
TASKS_FILE = os.path.join(os.path.dirname(__file__), "COURSE_TASKS.json")
HTML_FILE = os.path.join(os.path.dirname(__file__), "index.html")

SANDBOX = LinuxSandbox()


def load_tasks() -> dict[str, Any]:
    try:
        with open(TASKS_FILE, "r", encoding="utf-8") as f:
            return json.load(f)
    except Exception as e:
        print(f"Error loading tasks: {e}")
        return {"meta": {}, "levels": []}


TASKS = load_tasks()


def find_task(task_id: str) -> dict[str, Any] | None:
    for level in TASKS.get("levels", []):
        for task in level.get("challenges", []):
            if task.get("id") == task_id:
                task["level_title"] = level.get("title", "")
                task["level_id"] = level.get("id", "")
                return task
    return None


class LinuxSandboxHandler(http.server.BaseHTTPRequestHandler):
    def log_message(self, format, *args):
        pass

    def send_json(self, data: dict[str, Any], status=200):
        raw = json.dumps(data, ensure_ascii=False).encode("utf-8")
        self.send_response(status)
        self.send_header("Content-Type", "application/json; charset=utf-8")
        self.send_header("Content-Length", str(len(raw)))
        self.end_headers()
        self.wfile.write(raw)

    def _send_file(self, path: str, content_type: str):
        with open(path, "rb") as f:
            content = f.read()
        self.send_response(200)
        self.send_header("Content-Type", content_type)
        self.send_header("Content-Length", str(len(content)))
        self.end_headers()
        self.wfile.write(content)

    def check_auth(self, auth_header: str, token: str) -> bool:
        if self.client_address[0] == "127.0.0.1":
            return True
        if token == "safe_linux_2026":
            return True
        if auth_header.startswith("Bearer ") and auth_header[7:] == "safe_linux_2026":
            return True
        return False

    def do_GET(self):
        parsed = urllib.parse.urlparse(self.path)
        path = parsed.path

        if path not in ["/", "/login.html", "/api/login", "/api/logout", "/api/tasks", "/api/health"]:
            auth_header = self.headers.get("Authorization", "")
            token = self.headers.get("X-Token", "")
            if not self.check_auth(auth_header, token) and "xiaoxiaoluohao.indevs.in" in self.headers.get("Host", ""):
                self.send_json({"error": "Authentication required"}, 401)
                return

        if path == "/":
            self._send_file(HTML_FILE, "text/html; charset=utf-8")
            return

        if path == "/api/health":
            self.send_json({"ok": True, "cwd": SANDBOX.cwd, "user": SANDBOX.user})
            return

        if path == "/api/run":
            query = urllib.parse.parse_qs(parsed.query)
            cmd = query.get("cmd", [""])[0]
            if not cmd:
                self.send_json({"error": "No command provided"}, 400)
                return
            result = SANDBOX.execute(cmd)
            self.send_json(result)
            return

        if path == "/api/check":
            query = urllib.parse.parse_qs(parsed.query)
            task_id = query.get("task_id", [""])[0]
            cmd = query.get("last_cmd", [""])[0]
            output = query.get("output", [""])[0]
            sandbox_state = {
                "cwd": SANDBOX.cwd,
                "exists": SANDBOX.exists,
                "is_executable": SANDBOX.is_executable,
                "cmd": cmd,
                "output": output,
            }
            if not task_id:
                self.send_json({"error": "task_id required"}, 400)
                return
            task = find_task(task_id)
            if not task:
                self.send_json({"error": "Task not found"}, 404)
                return
            success, reason = self.evaluate_task(task, sandbox_state)
            self.send_json({
                "task_id": task_id,
                "success": success,
                "message": task.get("success_msg", "✅ 回答正确！") if success else reason or task.get("fail_message", "❌ 未通过测试"),
                "hint": task.get("hint", "继续尝试，或者看看相关命令示例"),
                "title": task.get("title", "未知任务"),
                "next_suggestion": self.build_next_suggestion(task_id),
            })
            return

        if path == "/api/tasks":
            self.send_json(TASKS)
            return

        self.send_response(404)
        self.end_headers()
        self.wfile.write(b"Not Found")

    def do_POST(self):
        parsed = urllib.parse.urlparse(self.path)
        path = parsed.path
        content_length = int(self.headers.get("Content-Length", 0))
        raw = self.rfile.read(content_length).decode() if content_length else "{}"

        if path == "/api/login":
            try:
                data = json.loads(raw)
            except Exception:
                self.send_json({"success": False, "error": "Invalid JSON"}, 400)
                return
            username = data.get("username", "")
            password = data.get("password", "")
            if username in USERS and hashlib.sha256(password.encode()).hexdigest() == USERS[username]:
                self.send_json({"success": True, "token": "safe_linux_2026", "message": "✅ 登录成功！"})
                return
            self.send_json({"success": False, "error": "❌ 用户名或密码错误"}, 401)
            return

        if path == "/api/logout":
            self.send_json({"success": True, "message": "👋 已退出登录"})
            return

        if path == "/api/reset":
            SANDBOX.reset()
            self.send_json({"success": True, "message": "♻️ 沙盒环境已重置"})
            return

        self.send_response(404)
        self.end_headers()
        self.wfile.write(b"Not Found")

    def evaluate_task(self, task: dict[str, Any], state: dict[str, Any]) -> tuple[bool, str]:
        cmd = state["cmd"]
        output = state["output"]
        success_test = task.get("success_test")
        if task.get("solution"):
            for sol in task["solution"]:
                if cmd.strip() == sol.strip():
                    return True, ""
        if not success_test:
            return False, "❌ 还没达到任务要求"
        try:
            ok = bool(eval(success_test, {"__builtins__": {}}, state))
            return ok, "❌ 命令执行了，但结果还没达到题目要求"
        except Exception:
            return False, "❌ 当前判题规则未命中，换个更准确的命令试试"

    def build_next_suggestion(self, current_task_id: str) -> str | None:
        all_tasks = []
        for level in TASKS.get("levels", []):
            all_tasks.extend(level.get("challenges", []))
        for idx, task in enumerate(all_tasks):
            if task.get("id") == current_task_id and idx + 1 < len(all_tasks):
                nxt = all_tasks[idx + 1]
                return f"下一题：{nxt.get('title', '继续挑战')}"
        return None


if __name__ == "__main__":
    PORT = 8084
    print(f"🌱 Linux Sandbox Practice Server 启动中... http://127.0.0.1:{PORT}")
    print("📚 地址: https://linux.xiaoxiaoluohao.indevs.in")
    print("🔑 Account: admin / safe_linux_2026")
    http.server.ThreadingHTTPServer(("127.0.0.1", PORT), LinuxSandboxHandler).serve_forever()