pipeline-sdlc/wwwroot/api/workspace_delete.dspy

56 lines
1.9 KiB
Plaintext

# workspace_delete.dspy - 删除工作空间文件
import os
file_id = (params_kw or {}).get('id', '').strip()
uid = await get_user()
if not uid:
uid = 'user-01'
dbname = get_module_dbname('pipeline-sdlc')
async with DBPools().sqlorContext(dbname) as sor:
workspace_base = '/d/pipeline/workspaces'
try:
_wbr = await sor.sqlExe("SELECT params_value FROM params WHERE params_name='workspace_base' LIMIT 1", {})
if _wbr and getattr(_wbr[0], 'params_value', ''):
workspace_base = getattr(_wbr[0], 'params_value', '')
except Exception:
pass
recs = await sor.sqlExe(
"SELECT current_project_id FROM pipeline_agent_settings WHERE user_id=${u}$", {"u": uid})
pid = getattr(recs[0], 'current_project_id', '') if recs else ''
ws_dir = ''
if pid:
proj = await sor.sqlExe("SELECT name, org_id, workspace_dir FROM sd_projects WHERE id=${p}$", {"p": pid})
if proj:
ws = getattr(proj[0], 'workspace_dir', '') or ''
if ws.startswith('/'):
ws_dir = ws
else:
pname = getattr(proj[0], 'name', '')
org_id = getattr(proj[0], 'org_id', '0') or '0'
ws_dir = workspace_base + '/' + org_id + '/' + pname
if not file_id or file_id == '__root__':
return {"status": "error", "message": "不能删除根目录"}
full_path = ws_dir + '/' + file_id if ws_dir else file_id
# 防止路径穿越:确保最终路径在 ws_dir 内
real_ws = os.path.realpath(ws_dir)
real_full = os.path.realpath(full_path)
if not real_full.startswith(real_ws + os.sep):
return {"status": "error", "message": "非法路径"}
if not os.path.isfile(full_path):
return {"status": "error", "message": "文件不存在: " + file_id}
try:
os.remove(full_path)
except Exception as e:
return {"status": "error", "message": "删除失败: " + str(e)}
return {"status": "ok", "message": "已删除: " + os.path.basename(full_path)}