h2ddlmZmZ dZdZdZdZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlZddlZddlZddlmZmZmZmZmZmZmZmZmZmZmZdd lm Z m!Z!m"Z"dd l#m$Z$m%Z%m&Z&dd l'm(Z(m)Z)dd l*m+Z+dd l,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z;mZ>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZImJZJereKZL e jjdreOdZPddlQZQeZRgZSejjddZVe jjddgZWeWdseWjGddejZZGddeZZ[GddejejZ^dZ_dZ`dZadZbdZcdZdd Zed!Zfd"Zgd#ZhdRd$Zid%Zjd&Zkd'Zld(Zmd)Znd*Zod+Zpd,Zqd-Zrd.Zsd/Ztd0Zud1Zvd2Zwd3Zxd4Zyd5Zzd6Z{d7Z|d8Z}d9Z~d:Zd;Zd<Zd=Zd>Zd?Zd@ZdAZdBZdCZdDZdEZdFZdGZdHZdIZdJZdKZdLZdMZdNZ dSdOZdTdPZedQk(reyy#dZPYRxYw)U)print_functionunicode_literalszed iMITz"https://github.com/9001/copyparty/N) ANYWINCORESEXEMACOSPY2PY36VT100WINDOWSE EnvParamsunicode)CODENAME S_BUILD_DT S_VERSION)expand_config_file split_cfg_lnupgrade_cfg_fmt)flagcatsonedash)SvcHub) APPLESAN_TXTBAD_BOTSDEF_EXPDEF_MTEDEF_MTH HAVE_IPV6 IMPLICATIONS JINJA_VERMIMES PARTFTPY_VERPY_DESC PYFTPD_VER RAM_AVAIL RAM_TOTALRE_ANSI SQLITE_VER UNPLICATIONSURL_BUGURL_PRJDaemon align_tabb64encdedent has_resource load_resourcemin_expybin read_utf8termsizewrap PRTY_NO_TLSTF PRTY_CONFIGc6eZdZfdZdZdZdZdZxZS) RiceFormattercXtrtd|d<tt||i|y)Nrwidth)r r7superr>__init__selfargskwargs __class__s G/jellyfin/media/venv/lib/python3.12/site-packages/copyparty/__main__.pyrBzRiceFormatter.__init__`s) &jmF7O mT+Tz+RiceFormatter._fill_text..}sJv}t+Js)join splitlines)rDtextr@r`s `rH _fill_textzRiceFormatter._fill_text{swwJ8IJJJrIc|rd|z|zS|S)N r])rDidxiWSpacerds rH__add_whitespacezRiceFormatter.__add_whitespaces),g %6$6rIc |j}tjd}t|D]\}}|j |}|j sd||<-|s0|j }tt|||dz D cgc]\} } |j| || } } } | ||<|D cgc] } | D]} |  c} } Scc} } wcc} } w)Nz\s*[0-9\-]{0,}\.?\s*rgr) rcrScompile enumeratesearchstripendr8_RiceFormatter__add_whitespace)rDrdr@textRowsptnrhr_rnlWSpaceixlinessublistitems rH _split_lineszRiceFormatter._split_liness??$jj01"8, &ICZZ%F::< #  **,!*$tUEAI*F G1))!Wa8!&  &%-AAAAA  Bs C 9C) __name__ __module__ __qualname__rBrYrerqrz __classcell__rGs@rHr>r>_s= *K7BrIr>ceZdZfdZxZS) Dodge11874c6d|d<tt| |i|yNi+#r@)rArrBrCs rHrBzDodge11874.__init__s w j$($9&9rIr{r|r}rBr~rs@rHrrs ::rIrceZdZfdZxZS)BasicDodge11874c6d|d<tt| |i|yr)rArrBrCs rHrBzBasicDodge11874.__init__s w ot-t>v>rIrrs@rHrrs ??rIrc|jdd}djd|D|z}tj|tst j d|}t|fddi|y)Nrpr\rgc32K|]}t|ywN)r)r^rvs rHrazlprint..s*1GAJ*r<)poprbprintedappendr r)rTprint)akaeoltxts rHlprintrs\ && C 88** *S 0C NN3 kk"c" #2rIc8tdj|y)Nzwarning: {} )rformat)msgs rHwarnrs 2 9 9# >?rIc|}d}tjjtjjt|_|j j dr.tjj|j |_ tjjd}|s t|jdrtjj|}tjjtjj|}tjj|d}tjj|stj|tj ||r||_nt$j&dk(rltjjdxs#tjjd xsd }tjj)|d z|_nDt$j&d k(r%tjjd |_n ||_|j"j+dd|_ tj,|j"y#d}YxYw#tjj|j"sYyxYw)Nctjjdftjjdftjjdftjjdftjjdft dfg}g}tj tjfD]}t|D]\}\}}d} ||}|r|jdr(tjj|}||tjj|d }tjj|stj||d kDrd }|j||fzn|r|jd |d |rtdj||ccS td#t$r*}|r|dkrd}|j|||fzYd}~6d}~wwxYw)NXDG_CONFIG_HOMEz ~/.configTMPDIRTEMPTMPz/tmpr<~ copypartyrzUsing [%s] for config; filekeys/dirkeys will change on every restart. Consider setting XDG_CONFIG_HOME or giving the unix-user a ~/.config/zUsing [z ] insteadz. z(Unable to store config in [%s] due to %rz)could not find a writable path for config)osenvirongetpath expanduserrlistdirmkdirrm startswithnormpathrbisdirrr Exception) pathserrschknpathpfpaptexs rH get_unixdirzinit_E..get_unixdirs ZZ^^. / WW   - ZZ^^X & ZZ^^V $ ZZ^^U # f   JJ) 1C#,U#3 1xB12A S 1 ((+AF Q 4A77==+ qyj AH- A$?@TYYt_-H/ 1 1<CDD !1UQYF ABK01sG *C G  G=G88G=rBrrrr<win32APPDATAr.z /copypartydarwinz~/Library/Preferences/copyparty\/)rrdirnamerealpath__file__modendswithrrrrrabspathrbrrrcfgsysplatformrreplacemakedirs)EErrrbdirs rHinit_Ers A(ET GGOOBGG,,X6 7AEuu~~j!&  JJNN, -+  << ""1%A GGOOBGG,,Q/ 0 GGLLK (ww}}Q HHQK 1    zz~~i(IBJJNN6,BIc   !45  !""#DE  EEMM$ $AE AEE ww}}QUU# $sDJ$J.$J+.,Kc ttjjdd}|dvr|Stj j tjd}|rtdj| td|djS#d}YrxYw#d}d}t||krt|tjt j d dd j#d j%z }t'j(d d|d|}t||krtt+|d 5}|j-|j/d dzdddn #1swYnxYw|cYSxYw)Nrrr<)r< localhostzname.txtzusing hostname from {} Tr:utf-8z [234567=]wb )rsocket gethostnamesplitrrrbrrrrr6rolenbase64 b32encodeurandomdecodelowerrSrTopenwriteencode)verboserWfpnamelenfs rH get_srvnamersNv))+,2237: ## aeeZ (B)0045 r4(..00#h 6##BJJqM22A6==gFLLN NC&&b#.x8C#h "d^ 1q GGCJJw'%/ 0 1 1 1 s6/BB&B#&BE7. E7:$E' E7'E0 , E7cttjjtj|d} t d|dj S#ttj|}t|d5}|j|dzdddn #1swYnxYw|jdcYSxYw)Nz -salt.txtTrrr) rrrbrrr6ror0rrrr)namenbytesrrWrs rHget_saltrs aeed4 5B#r4(..00#RZZ'( "d^ !q GGC%K  ! ! !zz'""s#A,B7:B B7B! B7ctrtryd}|ddfD]G} tjtj|||k7rt dj |yd}t|j |y#YkxYw)Nz en_US.UTF-8zEnglish_United States.UTF8zEnglish_United States.1252z Locale: {} z9setlocale {} failed, sorting and dates might get funky )rr locale setlocaleLC_ALLrrr)safervrs rH ensure_localer)s # D $$      V]]A .Dy~,,Q/0   FA$   s AA<<BcZttdryd}t|ttfzy)Nzweb/deps/mini-fa.woffavcould not find webdeps; if you are running the sfx, or exe, or pypi package, or docker image, then this is a bug! Please let me know so I can fix it, thanks :-) %s however, if you are a dev, or running copyparty from source, and you want full client functionality, you will need to build or obtain the webdeps: %s/blob/hovudstraum/docs/devnotes.md#building )r2rrr,r-)rs rHensure_webdepsr?s+A./ A gw   rIc"d}tjd}||jjd}tj Dcgc]}|j |s|}}d|vrY|Dcgc] }||dd}}djt|dgz}td|ztjd d |_ d |_ t|D]L} || dd} tt| } | |vr|xj| zc_ 8|xj| zc_ N|dgk(r$|j}|j|_ ||_ d D])}t||} td j|| +ycc}wcc}w) Ncx|j}dD]}|j|d}|jddS)N)_vrr<tls10tls1)rr)rcs rH terse_sslverz'configure_ssl_ver..terse_sslverPs?iik  %A++a$C %{{7F++rIz^OP_NO_(TLS|SSL)v,rKrgallz available ssl/tls versions: r) ssl_flags_en ssl_flags_dez{0}: {1:8x} ({1}))rSrlssl_verrssl__dict__matchrbsortedrrexitrrgetattrr) alrrssslverkflagsrvavail1availflagvernums rHconfigure_ssl_verr Osk, **) *C "** % + +C 0F 51 ! Q 5E 5 /45!,qu%555'122U:;  BOBOu #48$c4  &= OOs "O OOs "O #% OO// -3b!n"))!S123/ 66s F#F1F ctjtjj}|jr?|xj |j zc_|xj |jzc_|jdk(}|jr|s |j|jt|ds tdnK|jDcgc]}|d }}tdjdgt|zdgz|rtj d yy#tdYxYwcc}w) NrKz" failed to set ciphers get_ciphersz2cannot read cipher list: openssl or python too old descriptionz z enabled ciphers:r<r)rcreate_default_contextPurpose CLIENT_AUTHroptionsrrciphers set_ciphersrhasattrrrbr/rr)rctxis_helprvrs rHconfigure_ssl_ciphersrzs $ $S[[%<%< =C zz ''  r& jjF"G zz' A OOBJJ ' 3 &CD-0__->?1]#??v{{01Ig4FF"MNO   A ? @ @sD. E. D=cDg}td||dtdtjd|d}g}d}|D]}|j ddj }|j drd}|j drd}L|s"|j d dj sqt|jD]X\}}|jd }|s|tvrd nd }|dur|j||z?|j||zd z|zZ|S) Nr<F)vcTz #r[z[global]#-z--=) rrrM Namespacerrorritemslstriprr) cfg_pathrwrWskiplnsnrrprefixs rH args_from_cfgr(s  EtUHb1 D("4"4">r JE C D1 XXe_Q  % % ' == D == $D  rxx}Q'--/  $**, 1DAq ALSdFDy 6A:& 6A:+a/0 11& JrIcVdgdz}tjD]a}tj|j}|j t ||jtj|c|j dtdj|y)Nr<rr\) threadingrmr_current_framesidentrstrextend traceback format_stackrrb)sigframerthstks rH sighandlerr5s $(C!!#0!!#BHH- 3r7 9))#./0 JJt $))C.rIc ddl}ddl ddlm  fd} jt dd t r j j _| j_ | j_ | j_ j jf j_ j jf j_d fd }|dx}}d }d }||z}||z|k7r#|j|d||d||z|zt r3|dx}}|d zd k7r |j|d||d|d zyyy) Nr)wintypescR|s#j}|rj||Sr)get_last_errorWinError)okfunrEerrctypess rHecbzdisable_quickedit..ecbs+((*Cooc** rIkernel32T)use_last_errorcj|rdnd}|rj||Sj}j|j ||j S)Nii) GetStdHandleSetConsoleModeDWORDGetConsoleModebyrefvalue)outmodehcmoder>k32r7s rHrLz disable_quickedit..cmodes\   CSS 1 %%a. .  1fll512{{rIF@r:r)atexitr>r7WinDLLr-r POINTERrELPDWORDrCerrcheckrFrDHANDLEargtypesregisterr ) rPr?rLrJorig_in quickeditextendedmaskorig_outr>rMr7s @@@rHdisable_quickeditr]sC --J- =C !>>(..9 #C"%C"%C#+??H4D4D"EC#+??HNN"CC5\!D7IH x D d{hug. eTTE\H,- +%x !8q= OOE4 2 $q !  rIc .tjjdry|gtj|Dcgc]0\}}}||zD]"}tjj ||$2c}}}}z} t tj}t|D]} tj|||ftjd\cc}}}}w#t$r,}td|d||j|Yd}~ld}~wwxYw)N PRTY_NO_TPOKEz [z] i+1)rrrwalkrrbinttimelistutimerrremovesleep) topdpdddfrfilesrrrs rH sfx_tpokerls zz~~o& E.0ggcl *BBG?@ R E   e A QF#  5  Ar23 Q s5C 'C D("DDc ttd5}|j}dddrt|j ddytdy#1swY3xYw#d}Y "true": the plugin has responded to the request, and the TCP connection should be kept open > "false": the plugin has responded to the request, and the TCP connection should be terminated > "retry": the plugin has done something to resolve the 404 situation, and copyparty should reattempt reading the file. if it still fails, a regular 404 will be returned > "allow": should ignore the insufficient permissions and let the client continue anyways > "": the plugin has not handled the request; try the next plugin or return the usual 404 or 403 PS! the folder that contains the python file should ideally not contain many other python files, and especially nothing with filenames that overlap with modules used by copyparty hooksz,execute commands before/after various eventsu execute a command (a program or script) before or after various events; xbu executes CMD before a file upload starts xau executes CMD after a file upload finishes xiu executes CMD after all uploads finish and volume is idle xbc executes CMD before a file copy xac executes CMD after a file copy xbr executes CMD before a file rename/move xar executes CMD after a file rename/move xbd executes CMD before a file delete xad executes CMD after a file delete xm executes CMD on message xban executes CMD if someone gets banned  can be defined as --args or volflags; for example  --xau foo.py -v .::r:c,xau=bar.py  hooks specified as commandline --args are appended to volflags; each commandline --arg and volflag can be specified multiple times, each hook will execute in order unless one returns non-zero optionally prefix the command with comma-sep. flags similar to -mtp: f forks the process, doesn't wait for completion c checks return code, blocks the action if non-zero j provides json with info as 1st arg instead of filepath wN waits N sec after command has been started before continuing tN sets an N sec timeout before the command is abandoned iN xiu only: volume must be idle for N sec (default = 5) ar only run hook if user has read-access arw only run hook if user has read-write-access arwmd ...and so on... (doesn't work for xiu or xban) kt kills the entire process tree on timeout (default), km kills just the main process kn lets it continue running until copyparty is terminated c0 show all process output (default) c1 show only stderr c2 show only stdout c3 mute all process otput  examples: --xm some.py runs some.py msgtxt on each 📟 message; msgtxt is the message that was written into the web-ui --xm j,some.py runs some.py jsontext on each 📟 message; jsontext is the message info (ip, user, ..., msg-text) --xm aw,j,some.py requires user to have write-access --xm aw,,notify-send,hey,-- shows an OS alert on linux; the ,, stops copyparty from reading the rest as flags and the -- stops notify-send from reading the message as args and the alert will be "hey" followed by the messagetext --xau zmq:pub:tcp://*:5556 announces uploads on zeromq; --xau t3,zmq:push:tcp://*:5557 also works, and you can --xau t3,j,zmq:req:tcp://localhost:5555 too for example  each hook is executed once for each event, except for xiu which builds up a backlog of uploads, running the hook just once as soon as the volume has been idle for iN seconds (5 by default) xiu is also unique in that it will pass the metadata to the executed program on STDIN instead of as argv arguments, and it also includes the wark (file-id/hash) as a json property xban can be used to overrule / cancel a user ban event; if the program returns 0 (true/OK) then the ban will NOT happen effects can be used to redirect uploads into other locations, and to delete or index other files based on new uploads, but with certain limitations. See bin/hooks/reloc* and docs/devnotes.md#hook-effects except for xm, only one hook / one action can run at a time, so it's recommended to use the f flag unless you really need to wait for the hook to finish before continuing (without f the upload speed can easily drop to 10% for small files)urlformzhow to handle url-form POSTsa) values for --urlform: stash dumps the data to file and returns length + checksum save,get dumps to file and returns the page like a GET print  prints the data to log and returns an error print,xm  prints the data to log and returns --xm output print,get prints the data to log and returns GET note that the --xm hook will only run if --urlform is either print or print,get or the default print,xm if an --xm hook returns text, then the response code will be HTTP 202; http/get responses will be HTTP 200 if there are multiple --xm hooks defined, then the first hook that produced output is returned if there are no --xm hooks defined, then the default print,xm behaves like print,get (returning html) expztext expansiona specify --exp or the "exp" volflag to enable placeholder expansions in README.md / PREADME.md / .prologue.html / .epilogue.html --exp-md (volflag exp_md) holds the list of placeholders which can be expanded in READMEs, and --exp-lg (volflag exp_lg) likewise for logues; any placeholder not given in those lists will be ignored and shown as-is the default list will expand the following placeholders: {{self.ip}} client ip {{self.ua}} client user-agent {{self.uname}} client username {{self.host}} the "Host" header, or the server's external IP otherwise {{cfg.name}} the --name global-config {{cfg.logout}} the --logout global-config {{vf.scan}} the "scan" volflag {{vf.thsize}} thumbnail size {{srv.itime}} server time in seconds {{srv.htime}} server time as YY-mm-dd, HH:MM:SS (UTC) {{hdr.cf_ipcountry}} the "CF-IPCountry" client header (probably blank)  so the following types of placeholders can be added to the lists: * any client header can be accessed through {{hdr.*}} * any variable in httpcli.py can be accessed through {{self.*}} * any global server setting can be accessed through {{cfg.*}} * any volflag can be accessed through {{vf.*}} remove vf.scan from default list using --exp-md /vf.scan add "accept" header to def. list using --exp-md +hdr.accept for performance reasons, expansion only happens while embedding documents into directory listings, and when accessing a ?doc=... link, but never otherwise, so if you click a -txt- link you'll have to refresh the page to apply expansion lszvolume inspectiona --ls USR,VOL,FLAGS USR is a user to browse as; * is anonymous, ** is all users VOL is a single volume to scan, default is * (all vols) FLAG is flags; v in addition to realpaths, print usernames and vpaths ln only prints symlinks leaving the volume mountpoint p exits 1 if any such symlinks are found r resumes startup after the listing examples: --ls '**' # list all files which are possible to read --ls '**,*,ln' # check for dangerous symlinks --ls '**,*,ln,p,r' # check, then start normally if safe dbdzdatabase durability profilesa mainly affects uploads of many small files on slow HDDs; speeds measured uploading 520 files on a WD20SPZX (SMR 2.5" 5400rpm 4kb) acid = extremely safe but slow; the old default. Should never lose any data no matter what swal = 2.4x faster uploads yet 99.9% as safe -- theoretical chance of losing metadata for the ~200 most recently uploaded files if there's a power-loss or your OS crashes wal = another 21x faster on HDDs yet 90% as safe; same pitfall as swal except more likely yolo = another 1.5x faster, and removes the occasional sudden upload-pause while the disk syncs, but now you're at risk of losing the entire database in a powerloss / OS-crash profiles can be set globally (--dbd=yolo), or per-volume with volflags: -v ~/Music:music:r:c,dbd=acid chmodzfile/folder permissionsa) global-option --chmod-f and volflag chmod_f specifies the unix-permission to use when creating a new file similarly, --chmod-d and chmod_d sets the directory/folder perm the value is a three-digit octal number such as 755, 750, 644, etc. first digit = "User"; permission for the unix-user second digit = "Group"; permission for the unix-group third digit = "Other"; permission for all other users/groups for files: 0 = --- = no access 1 = --x = can execute the file as a program 2 = -w- = can write 3 = -wx = can write and execute 4 = r-- = can read 5 = r-x = can read and execute 6 = rw- = can read and write 7 = rwx = can read, write, execute for directories/folders: 0 = --- = no access 1 = --x = can read files in folder but not list contents 2 = -w- = n/a 3 = -wx = can create files but not list 4 = r-- = can list, but not read/write 5 = r-x = can list and read files 6 = rw- = n/a 7 = rwx = can read, write, list pwhashzpassword hashinga when --ah-alg is not the default [none], all account passwords must be hashed passwords can be hashed on the commandline with --ah-gen, but copyparty will also hash and print any passwords that are non-hashed (password which do not start with '+') and then terminate afterwards if you have enabled --usernames then the password must be provided as username:password for hashing --ah-alg specifies the hashing algorithm and a list of optional comma-separated arguments: --ah-alg argon2 # which is the same as: --ah-alg argon2,3,256,4,19 use argon2id with timecost 3, 256 MiB, 4 threads, version 19 (0x13/v1.3) --ah-alg scrypt # which is the same as: --ah-alg scrypt,13,2,8,4,32 use scrypt with cost 2**13, 2 iterations, blocksize 8, 4 threads, and allow using up to 32 MiB RAM (ram=cost*blksz roughly) --ah-alg sha2 # which is the same as: --ah-alg sha2,424242 use sha2-512 with 424242 iterations recommended: --ah-alg argon2 (takes about 0.4 sec and 256M RAM to process a new password) argon2 needs python-package argon2-cffi, scrypt needs openssl, sha2 is always available zmzmDNS debuggingaG the mDNS protocol is multicast-based, which means there are thousands of fun and interesting ways for it to break unexpectedly things to check if it does not work at all: * is there a firewall blocking port 5353 on either the server or client? (for example, clients may be able to send queries to copyparty, but the replies could get lost) * is multicast accidentally disabled on either the server or client? (look for mDNS log messages saying "new client on [...]") * the router/switch must be multicast and igmp capable things to check if it works for a while but then it doesn't: * is there a firewall blocking port 5353 on either the server or client? (copyparty may be unable to see the queries from the clients, but the clients may still be able to see the initial unsolicited announce, so it works for about 2 minutes after startup until TTL expires) * does the client have multiple IPs on its interface, and some of the IPs are in subnets which the copyparty server is not a member of? for both of the above intermittent issues, try --zm-spam 30 (not spec-compliant but nothing will mind) )r1rstripbuild_flags_descr]rIrH get_sectsr sf  ! ! % N  " ') - ^    fh  !  2 %' + Z  : RHT X t  *   8   "$ ( T     ,  *    (  %  $ L    " & P    ! C C CrIcd}tjD]L\}}|d|zz }|jD],\}}|jdd}|dj||z }.N|S)Nr<z r\z z {} {})rr!rr)rWgrprrrs rHr~r~sx Cnn&< U }s""KKM