clawdbot / moltbot-relay-php · Commits

Commit 47820191eaa5b2806d86055eb0111b6b26425d20

Authored by 谭苏航
1 parent 2154352e
build: skipped

refactor: use phpdotenv for wechat config

Inline Side-by-side
Showing 3 changed files with 602 additions and 592 deletions
... ... @@ -28,3 +28,7 @@ REDIS_PREFIX=ai_
28 28 # 心跳配置
29 29 # HEARTBEAT_INTERVAL=30
30 30 # HEARTBEAT_CHECK_INTERVAL=10
  31 +
  32 +# 微信小程序配置
  33 +WECHAT_APP_ID=wx6daaa8a7e2889a50
  34 +WECHAT_APP_SECRET=d394d5f0f82b328a2754d53027370282
... ...
... ... @@ -7,8 +7,8 @@
7 7 return [
8 8 // 微信小程序配置
9 9 'wechat' => [
10   - 'app_id' => getenv('WECHAT_APP_ID') ?: 'wx6daaa8a7e2889a50',
11   - 'app_secret' => getenv('WECHAT_APP_SECRET') ?: 'd394d5f0f82b328a2754d53027370282',
  10 + 'app_id' => getenv('WECHAT_APP_ID') ?: '',
  11 + 'app_secret' => getenv('WECHAT_APP_SECRET') ?: '',
12 12 ],
13 13
14 14 // Session 配置
... ...
1   -<?php
2   -use Workerman\Worker;
3   -use Workerman\Timer;
4   -use Tos\TosClient;
5   -use Tos\Exception\TosClientException;
6   -use Tos\Exception\TosServerException;
7   -use Tos\Model\PutObjectInput;
8   -
9   -require_once __DIR__ . '/vendor/autoload.php';
10   -require_once __DIR__ . '/auth.php';
11   -require_once __DIR__ . '/device.php';
12   -
13   -// 加载配置文件
14   -$config = require __DIR__ . '/config.php';
15   -
16   -// Define Heartbeat Interval
17   -define('HEARTBEAT_TIME', $config['heartbeat']['interval']);
18   -
19   -// Database Connection
20   -$pdo = null;
21   -try {
22   - $db_config = $config['database'];
23   - $dsn = "mysql:host={$db_config['host']};port={$db_config['port']};dbname={$db_config['database']};charset=utf8mb4";
24   - $pdo = new PDO($dsn, $db_config['username'], $db_config['password'], [
25   - PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
26   - PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC
27   - ]);
28   - echo "✅ Connected to MySQL at {$db_config['host']}:{$db_config['port']}\n";
29   -} catch (Exception $e) {
30   - echo "⚠️ MySQL Connection Failed: " . $e->getMessage() . "\n";
31   -}
32   -
33   -// Redis Connection
34   -$redis = null;
35   -try {
36   - $redis_config = $config['redis'];
37   -
38   - $params = [
39   - 'scheme' => 'tcp',
40   - 'host' => $redis_config['host'],
41   - 'port' => $redis_config['port'],
42   - ];
43   -
44   - if (!empty($redis_config['password'])) {
45   - $params['password'] = $redis_config['password'];
46   - }
47   -
48   - // Predis Client
49   - $redis = new Predis\Client($params, ['prefix' => $redis_config['prefix']]);
50   - $redis->connect();
51   - echo "✅ Connected to Redis at {$redis_config['host']}:{$redis_config['port']} ({$redis_config['prefix']})\n";
52   -} catch (Exception $e) {
53   - echo "⚠️ Redis Connection Failed: " . $e->getMessage() . "\n";
54   -}
55   -
56   -// Initialize Services
57   -$authService = $pdo ? new AuthService($pdo, $config, $redis) : null;
58   -$deviceService = $pdo ? new DeviceService($pdo, $config) : null;
59   -
60   -// Create a WebSocket worker
61   -$ws_host = $config['server']['websocket_host'];
62   -$ws_port = $config['server']['websocket_port'];
63   -$ws_worker = new Worker("websocket://{$ws_host}:{$ws_port}");
64   -
65   -// Store connections (Memory for now, can move to Redis later)
66   -$clients = []; // ClientID -> Connection
67   -$devices = []; // DeviceID -> Connection
68   -
69   -$ws_worker->onWorkerStart = function ($worker) use ($config) {
70   - $ws_host = $config['server']['websocket_host'];
71   - $ws_port = $config['server']['websocket_port'];
72   - echo "Relay Server Started on {$ws_host}:{$ws_port}\n";
73   -
74   - // Heartbeat check
75   - $check_interval = $config['heartbeat']['check_interval'];
76   - Timer::add($check_interval, function () use ($worker) {
77   - $time_now = time();
78   - foreach ($worker->connections as $connection) {
79   - // Check if connection is alive possibly?
80   - // Workerman handles basic disconnects, but we can enforce ping logic here if needed
81   - }
82   - });
83   -};
84   -
85   -$ws_worker->onConnect = function ($connection) {
86   - echo "New connection: " . $connection->id . "\n";
87   - $connection->authVerified = false;
88   -};
89   -
90   -$ws_worker->onMessage = function ($connection, $data) use (&$clients, &$devices, $authService, $deviceService) {
91   - $msg = json_decode($data, true);
92   - if (!$msg || !isset($msg['type'])) {
93   - return;
94   - }
95   -
96   - // 1. Authenticate / Register
97   - if ($msg['type'] === 'register') {
98   - if ($msg['role'] === 'device') {
99   - // Device 注册 - 验证密钥
100   - $deviceId = $msg['id'] ?? null;
101   - $secret = $msg['secret'] ?? null;
102   -
103   - if (!$deviceId) {
104   - $connection->send(json_encode(['type' => 'error', 'msg' => 'Device ID required']));
105   - return;
106   - }
107   -
108   - // 验证设备（如果有 deviceService）
109   - if ($deviceService && $secret) {
110   - if (!$deviceService->verifyDevice($deviceId, $secret)) {
111   - $connection->send(json_encode(['type' => 'error', 'msg' => 'Invalid device credentials']));
112   - $connection->close();
113   - return;
114   - }
115   - // 更新设备状态为在线
116   - $deviceService->updateDeviceStatus($deviceId, 'online');
117   - }
118   -
119   - $devices[$deviceId] = $connection;
120   - $connection->deviceId = $deviceId;
121   - $connection->role = 'device';
122   - $connection->authVerified = true;
123   - $connection->send(json_encode(['type' => 'ack', 'status' => 'registered']));
124   - echo "Device Registered: $deviceId\n";
125   -
126   - } elseif ($msg['role'] === 'client') {
127   - // Mini Program 注册 - 验证 Token
128   - $clientId = $msg['id'] ?? null;
129   - $token = $msg['token'] ?? null;
130   -
131   - if (!$clientId) {
132   - $connection->send(json_encode(['type' => 'error', 'msg' => 'Client ID required']));
133   - return;
134   - }
135   -
136   - // 验证 Token（如果有 authService 和 token）
137   - $user = null;
138   - if ($authService && $token) {
139   - $user = $authService->verifyToken($token);
140   - if (!$user) {
141   - $connection->send(json_encode(['type' => 'error', 'msg' => 'Invalid or expired token']));
142   - $connection->close();
143   - return;
144   - }
145   - $connection->userId = $user['id'];
146   - $connection->userPhone = $user['phone'];
147   - }
148   -
149   - $clients[$clientId] = $connection;
150   - $connection->clientId = $clientId;
151   - $connection->role = 'client';
152   - $connection->authVerified = true;
153   - $connection->send(json_encode([
154   - 'type' => 'ack',
155   - 'status' => 'connected',
156   - 'user' => $user
157   - ]));
158   - echo "Client Connected: $clientId" . ($user ? " (User: {$user['phone']})" : "") . "\n";
159   - }
160   - return;
161   - }
162   -
163   - if (!$connection->authVerified) {
164   - $connection->close();
165   - return;
166   - }
167   -
168   - // 2. Proxy Logic
169   -
170   - // Client -> Device
171   - if ($msg['type'] === 'proxy' && $connection->role === 'client') {
172   - $targetDeviceId = $msg['targetDeviceId'] ?? null;
173   -
174   - // 验证用户是否有权限访问该设备
175   - if ($deviceService && isset($connection->userId)) {
176   - if (!$deviceService->canAccessDevice($connection->userId, $targetDeviceId)) {
177   - $connection->send(json_encode(['type' => 'error', 'msg' => 'No permission to access this device']));
178   - return;
179   - }
180   - }
181   -
182   - if ($targetDeviceId && isset($devices[$targetDeviceId])) {
183   - $payload = $msg['payload'];
184   - // Wrap it so device knows who sent it
185   - $forwardMsg = [
186   - 'type' => 'cmd:execute',
187   - 'fromClientId' => $connection->clientId,
188   - 'fromUserId' => $connection->userId ?? null,
189   - 'payload' => $payload
190   - ];
191   - $devices[$targetDeviceId]->send(json_encode($forwardMsg));
192   - echo "Forwarded msg from Client {$connection->clientId} to Device {$targetDeviceId}\n";
193   - } else {
194   - $connection->send(json_encode(['type' => 'error', 'msg' => 'Device offline or not found']));
195   - }
196   - }
197   -
198   - // Device -> Client
199   - if ($msg['type'] === 'proxy_response' && $connection->role === 'device') {
200   - $targetClientId = $msg['targetClientId'] ?? null;
201   - if ($targetClientId && isset($clients[$targetClientId])) {
202   - $payload = $msg['payload'];
203   - $forwardMsg = [
204   - 'type' => 'response',
205   - 'fromDeviceId' => $connection->deviceId,
206   - 'payload' => $payload
207   - ];
208   - $clients[$targetClientId]->send(json_encode($forwardMsg));
209   - echo "Forwarded response from Device {$connection->deviceId} to Client {$targetClientId}\n";
210   - }
211   - }
212   -};
213   -
214   -$ws_worker->onClose = function ($connection) use (&$clients, &$devices, $deviceService) {
215   - if (isset($connection->role)) {
216   - if ($connection->role === 'device' && isset($connection->deviceId)) {
217   - unset($devices[$connection->deviceId]);
218   - // 更新设备状态为离线
219   - if ($deviceService) {
220   - $deviceService->updateDeviceStatus($connection->deviceId, 'offline');
221   - }
222   - echo "Device disconnected: {$connection->deviceId}\n";
223   - } elseif ($connection->role === 'client' && isset($connection->clientId)) {
224   - unset($clients[$connection->clientId]);
225   - echo "Client disconnected: {$connection->clientId}\n";
226   - }
227   - }
228   -};
229   -
230   -// ---------------------------------------------------------
231   -// [New] HTTP Server for file uploads and static serving
232   -// ---------------------------------------------------------
233   -$http_host = $config['server']['http_host'];
234   -$http_port = $config['server']['http_port'];
235   -$http_worker = new Worker("http://{$http_host}:{$http_port}");
236   -$http_worker->count = $config['server']['worker_count'];
237   -$http_worker->onMessage = function ($connection, $request) use ($config, $authService, $deviceService) {
238   - $path = $request->path();
239   - $method = $request->method();
240   -
241   - // Helper: JSON Response
242   - $jsonResponse = function ($data, $status = 200) use ($connection) {
243   - $connection->send(new \Workerman\Protocols\Http\Response(
244   - $status,
245   - ['Content-Type' => 'application/json', 'Access-Control-Allow-Origin' => '*'],
246   - json_encode($data)
247   - ));
248   - };
249   -
250   - // CORS Preflight
251   - if ($method === 'OPTIONS') {
252   - $connection->send(new \Workerman\Protocols\Http\Response(200, [
253   - 'Access-Control-Allow-Origin' => '*',
254   - 'Access-Control-Allow-Methods' => 'GET, POST, PUT, DELETE, OPTIONS',
255   - 'Access-Control-Allow-Headers' => 'Content-Type, Authorization',
256   - ], ''));
257   - return;
258   - }
259   -
260   - // ==================== Auth API ====================
261   -
262   - // POST /api/auth/login - 微信登录
263   - if ($path === '/api/auth/login' && $method === 'POST') {
264   - if (!$authService) {
265   - $jsonResponse(['ok' => false, 'error' => 'Auth service unavailable'], 500);
266   - return;
267   - }
268   -
269   - $body = json_decode($request->rawBody(), true) ?: [];
270   - $code = $body['code'] ?? null;
271   - $phone = $body['phone'] ?? null;
272   - $phoneCode = $body['phoneCode'] ?? null;
273   -
274   - if (!$code) {
275   - $jsonResponse(['ok' => false, 'error' => 'code is required'], 400);
276   - return;
277   - }
278   -
279   - $result = $authService->wechatLogin($code, $phone, $phoneCode);
280   - $jsonResponse($result, $result['ok'] ? 200 : 400);
281   - return;
282   - }
283   -
284   - // POST /api/auth/verify - 验证 Token
285   - if ($path === '/api/auth/verify' && $method === 'POST') {
286   - if (!$authService) {
287   - $jsonResponse(['ok' => false, 'error' => 'Auth service unavailable'], 500);
288   - return;
289   - }
290   -
291   - $body = json_decode($request->rawBody(), true) ?: [];
292   - $token = $body['token'] ?? null;
293   -
294   - if (!$token) {
295   - $jsonResponse(['ok' => false, 'error' => 'token is required'], 400);
296   - return;
297   - }
298   -
299   - $user = $authService->verifyToken($token);
300   - if ($user) {
301   - $jsonResponse(['ok' => true, 'user' => $user]);
302   - } else {
303   - $jsonResponse(['ok' => false, 'error' => 'Invalid or expired token'], 401);
304   - }
305   - return;
306   - }
307   -
308   - // POST /api/auth/logout - 注销
309   - if ($path === '/api/auth/logout' && $method === 'POST') {
310   - if (!$authService) {
311   - $jsonResponse(['ok' => false, 'error' => 'Auth service unavailable'], 500);
312   - return;
313   - }
314   -
315   - $body = json_decode($request->rawBody(), true) ?: [];
316   - $token = $body['token'] ?? null;
317   -
318   - if ($token) {
319   - $authService->logout($token);
320   - }
321   - $jsonResponse(['ok' => true]);
322   - return;
323   - }
324   -
325   - // ==================== Device API ====================
326   -
327   - // Helper: Get user from token
328   - $getUser = function () use ($request, $authService) {
329   - $authHeader = $request->header('Authorization');
330   - if (!$authHeader || !str_starts_with($authHeader, 'Bearer ')) {
331   - return null;
332   - }
333   - $token = substr($authHeader, 7);
334   - return $authService ? $authService->verifyToken($token) : null;
335   - };
336   -
337   - // POST /api/device/bind - 绑定设备
338   - if ($path === '/api/device/bind' && $method === 'POST') {
339   - if (!$deviceService) {
340   - $jsonResponse(['ok' => false, 'error' => 'Device service unavailable'], 500);
341   - return;
342   - }
343   -
344   - $user = $getUser();
345   - if (!$user) {
346   - $jsonResponse(['ok' => false, 'error' => 'Unauthorized'], 401);
347   - return;
348   - }
349   -
350   - $body = json_decode($request->rawBody(), true) ?: [];
351   - $deviceId = $body['deviceId'] ?? null;
352   - $deviceSecret = $body['deviceSecret'] ?? null;
353   -
354   - if (!$deviceId) {
355   - $jsonResponse(['ok' => false, 'error' => 'deviceId is required'], 400);
356   - return;
357   - }
358   -
359   - $result = $deviceService->bindDevice($user['id'], $deviceId, $deviceSecret);
360   - $jsonResponse($result, $result['ok'] ? 200 : 400);
361   - return;
362   - }
363   -
364   - // POST /api/device/unbind - 解绑设备
365   - if ($path === '/api/device/unbind' && $method === 'POST') {
366   - if (!$deviceService) {
367   - $jsonResponse(['ok' => false, 'error' => 'Device service unavailable'], 500);
368   - return;
369   - }
370   -
371   - $user = $getUser();
372   - if (!$user) {
373   - $jsonResponse(['ok' => false, 'error' => 'Unauthorized'], 401);
374   - return;
375   - }
376   -
377   - $body = json_decode($request->rawBody(), true) ?: [];
378   - $deviceId = $body['deviceId'] ?? null;
379   -
380   - if (!$deviceId) {
381   - $jsonResponse(['ok' => false, 'error' => 'deviceId is required'], 400);
382   - return;
383   - }
384   -
385   - $result = $deviceService->unbindDevice($user['id'], $deviceId);
386   - $jsonResponse($result, $result['ok'] ? 200 : 400);
387   - return;
388   - }
389   -
390   - // GET /api/device/list - 获取绑定的设备列表
391   - if ($path === '/api/device/list' && $method === 'GET') {
392   - if (!$deviceService) {
393   - $jsonResponse(['ok' => false, 'error' => 'Device service unavailable'], 500);
394   - return;
395   - }
396   -
397   - $user = $getUser();
398   - if (!$user) {
399   - $jsonResponse(['ok' => false, 'error' => 'Unauthorized'], 401);
400   - return;
401   - }
402   -
403   - $devices = $deviceService->getUserDevices($user['id']);
404   - $jsonResponse(['ok' => true, 'devices' => $devices]);
405   - return;
406   - }
407   -
408   - // POST /api/device/primary - 设置主设备
409   - if ($path === '/api/device/primary' && $method === 'POST') {
410   - if (!$deviceService) {
411   - $jsonResponse(['ok' => false, 'error' => 'Device service unavailable'], 500);
412   - return;
413   - }
414   -
415   - $user = $getUser();
416   - if (!$user) {
417   - $jsonResponse(['ok' => false, 'error' => 'Unauthorized'], 401);
418   - return;
419   - }
420   -
421   - $body = json_decode($request->rawBody(), true) ?: [];
422   - $deviceId = $body['deviceId'] ?? null;
423   -
424   - if (!$deviceId) {
425   - $jsonResponse(['ok' => false, 'error' => 'deviceId is required'], 400);
426   - return;
427   - }
428   -
429   - $result = $deviceService->setPrimaryDevice($user['id'], $deviceId);
430   - $jsonResponse($result, $result['ok'] ? 200 : 400);
431   - return;
432   - }
433   -
434   - // ==================== File API ====================
435   -
436   - // 1. Static File Serving (Simple implementation)
437   - if (strpos($path, '/uploads/') === 0) {
438   - $file = __DIR__ . $path;
439   - if (is_file($file)) {
440   - $connection->send(new \Workerman\Protocols\Http\Response(
441   - 200,
442   - ['Content-Type' => mime_content_type($file)],
443   - file_get_contents($file)
444   - ));
445   - return;
446   - }
447   - }
448   -
449   - // 2. Upload Handler
450   - if ($path === '/upload') {
451   - $files = $request->file();
452   -
453   - if (empty($files['file'])) {
454   - $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => 'No file'])));
455   - return;
456   - }
457   -
458   - $file = $files['file'];
459   -
460   - // Validate Size
461   - $max_size = $config['upload']['max_size'];
462   - if ($file['size'] > $max_size) {
463   - $max_mb = round($max_size / 1024 / 1024);
464   - $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => "File too large (Max {$max_mb}MB)"])));
465   - return;
466   - }
467   -
468   - // Validate Extension
469   - $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
470   - $allowed = $config['upload']['allowed_extensions'];
471   - if (!in_array($ext, $allowed)) {
472   - $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => 'File type not allowed'])));
473   - return;
474   - }
475   -
476   - // TOS Configuration
477   - $tos_config = $config['tos'];
478   -
479   - try {
480   - $client = new TosClient([
481   - 'region' => $tos_config['region'],
482   - 'endpoint' => $tos_config['endpoint'],
483   - 'ak' => $tos_config['ak'],
484   - 'sk' => $tos_config['sk'],
485   - ]);
486   -
487   - // Generate Key
488   - $uuid = bin2hex(random_bytes(8));
489   - $userPhone = $config['upload']['default_user'];
490   - $objectKey = "clawdbot/{$userPhone}/{$uuid}.{$ext}";
491   - $bucket = $tos_config['bucket'];
492   -
493   - // Read file content
494   - $contentFn = fopen($file['tmp_name'], 'r');
495   -
496   - // Upload using Object Input
497   - $input = new PutObjectInput($bucket, $objectKey, $contentFn);
498   - $input->setACL('public-read');
499   -
500   - $client->putObject($input);
501   -
502   - if (is_resource($contentFn)) {
503   - fclose($contentFn);
504   - }
505   -
506   - // Generate URL
507   - $url = "https://{$bucket}.{$tos_config['endpoint']}/{$objectKey}";
508   -
509   - $connection->send(json_encode([
510   - 'ok' => true,
511   - 'url' => $url
512   - ]));
513   -
514   - } catch (Exception $e) {
515   - $connection->send(new \Workerman\Protocols\Http\Response(500, [], json_encode(['ok' => false, 'error' => 'Upload failed: ' . $e->getMessage()])));
516   - }
517   - return;
518   - }
519   -
520   - // 3. Generate Pre-Signed URL for Direct Upload
521   - if (strpos($path, '/tos/sign') === 0) {
522   - $query = $request->get();
523   - $filename = $query['filename'] ?? 'file_' . time();
524   - $ext = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
525   -
526   - // Validation
527   - $allowed = $config['upload']['allowed_extensions'];
528   - if (!in_array($ext, $allowed) && $ext !== '') {
529   - // If no extension providing, we might just allow it or fail.
530   - // Ideally client should provide full filename with extension.
531   - }
532   -
533   - // TOS Configuration
534   - $tos_config = $config['tos'];
535   -
536   - try {
537   - $client = new TosClient([
538   - 'region' => $tos_config['region'],
539   - 'endpoint' => $tos_config['endpoint'],
540   - 'ak' => $tos_config['ak'],
541   - 'sk' => $tos_config['sk'],
542   - ]);
543   -
544   - $uuid = bin2hex(random_bytes(8));
545   - $userPhone = $config['upload']['default_user'];
546   - // Ensure filename is safe
547   - $safeName = preg_replace('/[^a-zA-Z0-9._-]/', '', $filename);
548   - if (!$safeName)
549   - $safeName = 'unnamed';
550   -
551   - $objectKey = "clawdbot/{$userPhone}/direct_{$uuid}_{$safeName}";
552   - $bucket = $tos_config['bucket'];
553   -
554   - // Generate Pre-Signed PUT URL (Valid for 15 mins)
555   - // Note: The SDK method name might vary slightly based on version,
556   - // but `preSignedURL` is standard for TOS PHP SDK v2.
557   - $input = new \Tos\Model\PreSignedURLInput(
558   - 'PUT',
559   - $tos_config['bucket'],
560   - $objectKey,
561   - 300 // 5 minutes validity
562   - );
563   -
564   - // Add content-type if known? client will send it.
565   - // For simple PUT, we just sign the method and resource.
566   -
567   - $output = $client->preSignedURL($input);
568   - $signedUrl = $output->getSignedUrl();
569   -
570   - // Public Access URL (Assuming bucket is public-read or we use signed Get URL)
571   - // For this project, we used public-read ACL in previous code, so we assume public access.
572   - $publicUrl = "https://{$tos_config['bucket']}.{$tos_config['endpoint']}/{$objectKey}";
573   -
574   - $connection->send(json_encode([
575   - 'ok' => true,
576   - 'uploadUrl' => $signedUrl,
577   - 'publicUrl' => $publicUrl,
578   - 'key' => $objectKey
579   - ]));
580   -
581   - } catch (Exception $e) {
582   - $connection->send(new \Workerman\Protocols\Http\Response(500, [], json_encode(['ok' => false, 'error' => $e->getMessage()])));
583   - }
584   - return;
585   - }
586   -
587   - $connection->send("Moltbot Relay HTTP Server");
588   -};
589   -
590   -Worker::runAll();
  1 +<?php
  2 +use Workerman\Worker;
  3 +use Workerman\Timer;
  4 +use Tos\TosClient;
  5 +use Tos\Exception\TosClientException;
  6 +use Tos\Exception\TosServerException;
  7 +use Tos\Model\PutObjectInput;
  8 +
  9 +require_once __DIR__ . '/vendor/autoload.php';
  10 +require_once __DIR__ . '/auth.php';
  11 +require_once __DIR__ . '/device.php';
  12 +
  13 +// Load .env
  14 +if (class_exists('Dotenv\Dotenv') && file_exists(__DIR__ . '/.env')) {
  15 + $dotenv = Dotenv\Dotenv::createImmutable(__DIR__);
  16 + $dotenv->load();
  17 +}
  18 +
  19 +// 加载配置文件
  20 +$config = require __DIR__ . '/config.php';
  21 +
  22 +// Define Heartbeat Interval
  23 +define('HEARTBEAT_TIME', $config['heartbeat']['interval']);
  24 +
  25 +// Database Connection
  26 +$pdo = null;
  27 +try {
  28 + $db_config = $config['database'];
  29 + $dsn = "mysql:host={$db_config['host']};port={$db_config['port']};dbname={$db_config['database']};charset=utf8mb4";
  30 + $pdo = new PDO($dsn, $db_config['username'], $db_config['password'], [
  31 + PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
  32 + PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC
  33 + ]);
  34 + echo "✅ Connected to MySQL at {$db_config['host']}:{$db_config['port']}\n";
  35 +} catch (Exception $e) {
  36 + echo "⚠️ MySQL Connection Failed: " . $e->getMessage() . "\n";
  37 +}
  38 +
  39 +// Redis Connection
  40 +$redis = null;
  41 +try {
  42 + $redis_config = $config['redis'];
  43 +
  44 + $params = [
  45 + 'scheme' => 'tcp',
  46 + 'host' => $redis_config['host'],
  47 + 'port' => $redis_config['port'],
  48 + ];
  49 +
  50 + if (!empty($redis_config['password'])) {
  51 + $params['password'] = $redis_config['password'];
  52 + }
  53 +
  54 + // Predis Client
  55 + $redis = new Predis\Client($params, ['prefix' => $redis_config['prefix']]);
  56 + $redis->connect();
  57 + echo "✅ Connected to Redis at {$redis_config['host']}:{$redis_config['port']} ({$redis_config['prefix']})\n";
  58 +} catch (Exception $e) {
  59 + echo "⚠️ Redis Connection Failed: " . $e->getMessage() . "\n";
  60 +}
  61 +
  62 +// Initialize Services
  63 +$authService = $pdo ? new AuthService($pdo, $config, $redis) : null;
  64 +$deviceService = $pdo ? new DeviceService($pdo, $config) : null;
  65 +
  66 +// Create a WebSocket worker
  67 +$ws_host = $config['server']['websocket_host'];
  68 +$ws_port = $config['server']['websocket_port'];
  69 +$ws_worker = new Worker("websocket://{$ws_host}:{$ws_port}");
  70 +
  71 +// Store connections (Memory for now, can move to Redis later)
  72 +$clients = []; // ClientID -> Connection
  73 +$devices = []; // DeviceID -> Connection
  74 +
  75 +$ws_worker->onWorkerStart = function ($worker) use ($config) {
  76 + $ws_host = $config['server']['websocket_host'];
  77 + $ws_port = $config['server']['websocket_port'];
  78 + echo "Relay Server Started on {$ws_host}:{$ws_port}\n";
  79 +
  80 + // Heartbeat check
  81 + $check_interval = $config['heartbeat']['check_interval'];
  82 + Timer::add($check_interval, function () use ($worker) {
  83 + $time_now = time();
  84 + foreach ($worker->connections as $connection) {
  85 + // Check if connection is alive possibly?
  86 + // Workerman handles basic disconnects, but we can enforce ping logic here if needed
  87 + }
  88 + });
  89 +};
  90 +
  91 +$ws_worker->onConnect = function ($connection) {
  92 + echo "New connection: " . $connection->id . "\n";
  93 + $connection->authVerified = false;
  94 +};
  95 +
  96 +$ws_worker->onMessage = function ($connection, $data) use (&$clients, &$devices, $authService, $deviceService) {
  97 + $msg = json_decode($data, true);
  98 + if (!$msg || !isset($msg['type'])) {
  99 + return;
  100 + }
  101 +
  102 + // 1. Authenticate / Register
  103 + if ($msg['type'] === 'register') {
  104 + if ($msg['role'] === 'device') {
  105 + // Device 注册 - 验证密钥
  106 + $deviceId = $msg['id'] ?? null;
  107 + $secret = $msg['secret'] ?? null;
  108 +
  109 + if (!$deviceId) {
  110 + $connection->send(json_encode(['type' => 'error', 'msg' => 'Device ID required']));
  111 + return;
  112 + }
  113 +
  114 + // 验证设备（如果有 deviceService）
  115 + if ($deviceService && $secret) {
  116 + if (!$deviceService->verifyDevice($deviceId, $secret)) {
  117 + $connection->send(json_encode(['type' => 'error', 'msg' => 'Invalid device credentials']));
  118 + $connection->close();
  119 + return;
  120 + }
  121 + // 更新设备状态为在线
  122 + $deviceService->updateDeviceStatus($deviceId, 'online');
  123 + }
  124 +
  125 + $devices[$deviceId] = $connection;
  126 + $connection->deviceId = $deviceId;
  127 + $connection->role = 'device';
  128 + $connection->authVerified = true;
  129 + $connection->send(json_encode(['type' => 'ack', 'status' => 'registered']));
  130 + echo "Device Registered: $deviceId\n";
  131 +
  132 + } elseif ($msg['role'] === 'client') {
  133 + // Mini Program 注册 - 验证 Token
  134 + $clientId = $msg['id'] ?? null;
  135 + $token = $msg['token'] ?? null;
  136 +
  137 + if (!$clientId) {
  138 + $connection->send(json_encode(['type' => 'error', 'msg' => 'Client ID required']));
  139 + return;
  140 + }
  141 +
  142 + // 验证 Token（如果有 authService 和 token）
  143 + $user = null;
  144 + if ($authService && $token) {
  145 + $user = $authService->verifyToken($token);
  146 + if (!$user) {
  147 + $connection->send(json_encode(['type' => 'error', 'msg' => 'Invalid or expired token']));
  148 + $connection->close();
  149 + return;
  150 + }
  151 + $connection->userId = $user['id'];
  152 + $connection->userPhone = $user['phone'];
  153 + }
  154 +
  155 + $clients[$clientId] = $connection;
  156 + $connection->clientId = $clientId;
  157 + $connection->role = 'client';
  158 + $connection->authVerified = true;
  159 + $connection->send(json_encode([
  160 + 'type' => 'ack',
  161 + 'status' => 'connected',
  162 + 'user' => $user
  163 + ]));
  164 + echo "Client Connected: $clientId" . ($user ? " (User: {$user['phone']})" : "") . "\n";
  165 + }
  166 + return;
  167 + }
  168 +
  169 + if (!$connection->authVerified) {
  170 + $connection->close();
  171 + return;
  172 + }
  173 +
  174 + // 2. Proxy Logic
  175 +
  176 + // Client -> Device
  177 + if ($msg['type'] === 'proxy' && $connection->role === 'client') {
  178 + $targetDeviceId = $msg['targetDeviceId'] ?? null;
  179 +
  180 + // 验证用户是否有权限访问该设备
  181 + if ($deviceService && isset($connection->userId)) {
  182 + if (!$deviceService->canAccessDevice($connection->userId, $targetDeviceId)) {
  183 + $connection->send(json_encode(['type' => 'error', 'msg' => 'No permission to access this device']));
  184 + return;
  185 + }
  186 + }
  187 +
  188 + if ($targetDeviceId && isset($devices[$targetDeviceId])) {
  189 + $payload = $msg['payload'];
  190 + // Wrap it so device knows who sent it
  191 + $forwardMsg = [
  192 + 'type' => 'cmd:execute',
  193 + 'fromClientId' => $connection->clientId,
  194 + 'fromUserId' => $connection->userId ?? null,
  195 + 'payload' => $payload
  196 + ];
  197 + $devices[$targetDeviceId]->send(json_encode($forwardMsg));
  198 + echo "Forwarded msg from Client {$connection->clientId} to Device {$targetDeviceId}\n";
  199 + } else {
  200 + $connection->send(json_encode(['type' => 'error', 'msg' => 'Device offline or not found']));
  201 + }
  202 + }
  203 +
  204 + // Device -> Client
  205 + if ($msg['type'] === 'proxy_response' && $connection->role === 'device') {
  206 + $targetClientId = $msg['targetClientId'] ?? null;
  207 + if ($targetClientId && isset($clients[$targetClientId])) {
  208 + $payload = $msg['payload'];
  209 + $forwardMsg = [
  210 + 'type' => 'response',
  211 + 'fromDeviceId' => $connection->deviceId,
  212 + 'payload' => $payload
  213 + ];
  214 + $clients[$targetClientId]->send(json_encode($forwardMsg));
  215 + echo "Forwarded response from Device {$connection->deviceId} to Client {$targetClientId}\n";
  216 + }
  217 + }
  218 +};
  219 +
  220 +$ws_worker->onClose = function ($connection) use (&$clients, &$devices, $deviceService) {
  221 + if (isset($connection->role)) {
  222 + if ($connection->role === 'device' && isset($connection->deviceId)) {
  223 + unset($devices[$connection->deviceId]);
  224 + // 更新设备状态为离线
  225 + if ($deviceService) {
  226 + $deviceService->updateDeviceStatus($connection->deviceId, 'offline');
  227 + }
  228 + echo "Device disconnected: {$connection->deviceId}\n";
  229 + } elseif ($connection->role === 'client' && isset($connection->clientId)) {
  230 + unset($clients[$connection->clientId]);
  231 + echo "Client disconnected: {$connection->clientId}\n";
  232 + }
  233 + }
  234 +};
  235 +
  236 +// ---------------------------------------------------------
  237 +// [New] HTTP Server for file uploads and static serving
  238 +// ---------------------------------------------------------
  239 +$http_host = $config['server']['http_host'];
  240 +$http_port = $config['server']['http_port'];
  241 +$http_worker = new Worker("http://{$http_host}:{$http_port}");
  242 +$http_worker->count = $config['server']['worker_count'];
  243 +$http_worker->onMessage = function ($connection, $request) use ($config, $authService, $deviceService) {
  244 + $path = $request->path();
  245 + $method = $request->method();
  246 +
  247 + // Helper: JSON Response
  248 + $jsonResponse = function ($data, $status = 200) use ($connection) {
  249 + $connection->send(new \Workerman\Protocols\Http\Response(
  250 + $status,
  251 + ['Content-Type' => 'application/json', 'Access-Control-Allow-Origin' => '*'],
  252 + json_encode($data)
  253 + ));
  254 + };
  255 +
  256 + // CORS Preflight
  257 + if ($method === 'OPTIONS') {
  258 + $connection->send(new \Workerman\Protocols\Http\Response(200, [
  259 + 'Access-Control-Allow-Origin' => '*',
  260 + 'Access-Control-Allow-Methods' => 'GET, POST, PUT, DELETE, OPTIONS',
  261 + 'Access-Control-Allow-Headers' => 'Content-Type, Authorization',
  262 + ], ''));
  263 + return;
  264 + }
  265 +
  266 + // ==================== Auth API ====================
  267 +
  268 + // POST /api/auth/login - 微信登录
  269 + if ($path === '/api/auth/login' && $method === 'POST') {
  270 + if (!$authService) {
  271 + $jsonResponse(['ok' => false, 'error' => 'Auth service unavailable'], 500);
  272 + return;
  273 + }
  274 +
  275 + $body = json_decode($request->rawBody(), true) ?: [];
  276 + $code = $body['code'] ?? null;
  277 + $phone = $body['phone'] ?? null;
  278 + $phoneCode = $body['phoneCode'] ?? null;
  279 +
  280 + if (!$code) {
  281 + $jsonResponse(['ok' => false, 'error' => 'code is required'], 400);
  282 + return;
  283 + }
  284 +
  285 + $result = $authService->wechatLogin($code, $phone, $phoneCode);
  286 + $jsonResponse($result, $result['ok'] ? 200 : 400);
  287 + return;
  288 + }
  289 +
  290 + // POST /api/auth/verify - 验证 Token
  291 + if ($path === '/api/auth/verify' && $method === 'POST') {
  292 + if (!$authService) {
  293 + $jsonResponse(['ok' => false, 'error' => 'Auth service unavailable'], 500);
  294 + return;
  295 + }
  296 +
  297 + $body = json_decode($request->rawBody(), true) ?: [];
  298 + $token = $body['token'] ?? null;
  299 +
  300 + if (!$token) {
  301 + $jsonResponse(['ok' => false, 'error' => 'token is required'], 400);
  302 + return;
  303 + }
  304 +
  305 + $user = $authService->verifyToken($token);
  306 + if ($user) {
  307 + $jsonResponse(['ok' => true, 'user' => $user]);
  308 + } else {
  309 + $jsonResponse(['ok' => false, 'error' => 'Invalid or expired token'], 401);
  310 + }
  311 + return;
  312 + }
  313 +
  314 + // POST /api/auth/logout - 注销
  315 + if ($path === '/api/auth/logout' && $method === 'POST') {
  316 + if (!$authService) {
  317 + $jsonResponse(['ok' => false, 'error' => 'Auth service unavailable'], 500);
  318 + return;
  319 + }
  320 +
  321 + $body = json_decode($request->rawBody(), true) ?: [];
  322 + $token = $body['token'] ?? null;
  323 +
  324 + if ($token) {
  325 + $authService->logout($token);
  326 + }
  327 + $jsonResponse(['ok' => true]);
  328 + return;
  329 + }
  330 +
  331 + // ==================== Device API ====================
  332 +
  333 + // Helper: Get user from token
  334 + $getUser = function () use ($request, $authService) {
  335 + $authHeader = $request->header('Authorization');
  336 + if (!$authHeader || !str_starts_with($authHeader, 'Bearer ')) {
  337 + return null;
  338 + }
  339 + $token = substr($authHeader, 7);
  340 + return $authService ? $authService->verifyToken($token) : null;
  341 + };
  342 +
  343 + // POST /api/device/bind - 绑定设备
  344 + if ($path === '/api/device/bind' && $method === 'POST') {
  345 + if (!$deviceService) {
  346 + $jsonResponse(['ok' => false, 'error' => 'Device service unavailable'], 500);
  347 + return;
  348 + }
  349 +
  350 + $user = $getUser();
  351 + if (!$user) {
  352 + $jsonResponse(['ok' => false, 'error' => 'Unauthorized'], 401);
  353 + return;
  354 + }
  355 +
  356 + $body = json_decode($request->rawBody(), true) ?: [];
  357 + $deviceId = $body['deviceId'] ?? null;
  358 + $deviceSecret = $body['deviceSecret'] ?? null;
  359 +
  360 + if (!$deviceId) {
  361 + $jsonResponse(['ok' => false, 'error' => 'deviceId is required'], 400);
  362 + return;
  363 + }
  364 +
  365 + $result = $deviceService->bindDevice($user['id'], $deviceId, $deviceSecret);
  366 + $jsonResponse($result, $result['ok'] ? 200 : 400);
  367 + return;
  368 + }
  369 +
  370 + // POST /api/device/unbind - 解绑设备
  371 + if ($path === '/api/device/unbind' && $method === 'POST') {
  372 + if (!$deviceService) {
  373 + $jsonResponse(['ok' => false, 'error' => 'Device service unavailable'], 500);
  374 + return;
  375 + }
  376 +
  377 + $user = $getUser();
  378 + if (!$user) {
  379 + $jsonResponse(['ok' => false, 'error' => 'Unauthorized'], 401);
  380 + return;
  381 + }
  382 +
  383 + $body = json_decode($request->rawBody(), true) ?: [];
  384 + $deviceId = $body['deviceId'] ?? null;
  385 +
  386 + if (!$deviceId) {
  387 + $jsonResponse(['ok' => false, 'error' => 'deviceId is required'], 400);
  388 + return;
  389 + }
  390 +
  391 + $result = $deviceService->unbindDevice($user['id'], $deviceId);
  392 + $jsonResponse($result, $result['ok'] ? 200 : 400);
  393 + return;
  394 + }
  395 +
  396 + // GET /api/device/list - 获取绑定的设备列表
  397 + if ($path === '/api/device/list' && $method === 'GET') {
  398 + if (!$deviceService) {
  399 + $jsonResponse(['ok' => false, 'error' => 'Device service unavailable'], 500);
  400 + return;
  401 + }
  402 +
  403 + $user = $getUser();
  404 + if (!$user) {
  405 + $jsonResponse(['ok' => false, 'error' => 'Unauthorized'], 401);
  406 + return;
  407 + }
  408 +
  409 + $devices = $deviceService->getUserDevices($user['id']);
  410 + $jsonResponse(['ok' => true, 'devices' => $devices]);
  411 + return;
  412 + }
  413 +
  414 + // POST /api/device/primary - 设置主设备
  415 + if ($path === '/api/device/primary' && $method === 'POST') {
  416 + if (!$deviceService) {
  417 + $jsonResponse(['ok' => false, 'error' => 'Device service unavailable'], 500);
  418 + return;
  419 + }
  420 +
  421 + $user = $getUser();
  422 + if (!$user) {
  423 + $jsonResponse(['ok' => false, 'error' => 'Unauthorized'], 401);
  424 + return;
  425 + }
  426 +
  427 + $body = json_decode($request->rawBody(), true) ?: [];
  428 + $deviceId = $body['deviceId'] ?? null;
  429 +
  430 + if (!$deviceId) {
  431 + $jsonResponse(['ok' => false, 'error' => 'deviceId is required'], 400);
  432 + return;
  433 + }
  434 +
  435 + $result = $deviceService->setPrimaryDevice($user['id'], $deviceId);
  436 + $jsonResponse($result, $result['ok'] ? 200 : 400);
  437 + return;
  438 + }
  439 +
  440 + // ==================== File API ====================
  441 +
  442 + // 1. Static File Serving (Simple implementation)
  443 + if (strpos($path, '/uploads/') === 0) {
  444 + $file = __DIR__ . $path;
  445 + if (is_file($file)) {
  446 + $connection->send(new \Workerman\Protocols\Http\Response(
  447 + 200,
  448 + ['Content-Type' => mime_content_type($file)],
  449 + file_get_contents($file)
  450 + ));
  451 + return;
  452 + }
  453 + }
  454 +
  455 + // 2. Upload Handler
  456 + if ($path === '/upload') {
  457 + $files = $request->file();
  458 +
  459 + if (empty($files['file'])) {
  460 + $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => 'No file'])));
  461 + return;
  462 + }
  463 +
  464 + $file = $files['file'];
  465 +
  466 + // Validate Size
  467 + $max_size = $config['upload']['max_size'];
  468 + if ($file['size'] > $max_size) {
  469 + $max_mb = round($max_size / 1024 / 1024);
  470 + $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => "File too large (Max {$max_mb}MB)"])));
  471 + return;
  472 + }
  473 +
  474 + // Validate Extension
  475 + $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
  476 + $allowed = $config['upload']['allowed_extensions'];
  477 + if (!in_array($ext, $allowed)) {
  478 + $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => 'File type not allowed'])));
  479 + return;
  480 + }
  481 +
  482 + // TOS Configuration
  483 + $tos_config = $config['tos'];
  484 +
  485 + try {
  486 + $client = new TosClient([
  487 + 'region' => $tos_config['region'],
  488 + 'endpoint' => $tos_config['endpoint'],
  489 + 'ak' => $tos_config['ak'],
  490 + 'sk' => $tos_config['sk'],
  491 + ]);
  492 +
  493 + // Generate Key
  494 + $uuid = bin2hex(random_bytes(8));
  495 + $userPhone = $config['upload']['default_user'];
  496 + $objectKey = "clawdbot/{$userPhone}/{$uuid}.{$ext}";
  497 + $bucket = $tos_config['bucket'];
  498 +
  499 + // Read file content
  500 + $contentFn = fopen($file['tmp_name'], 'r');
  501 +
  502 + // Upload using Object Input
  503 + $input = new PutObjectInput($bucket, $objectKey, $contentFn);
  504 + $input->setACL('public-read');
  505 +
  506 + $client->putObject($input);
  507 +
  508 + if (is_resource($contentFn)) {
  509 + fclose($contentFn);
  510 + }
  511 +
  512 + // Generate URL
  513 + $url = "https://{$bucket}.{$tos_config['endpoint']}/{$objectKey}";
  514 +
  515 + $connection->send(json_encode([
  516 + 'ok' => true,
  517 + 'url' => $url
  518 + ]));
  519 +
  520 + } catch (Exception $e) {
  521 + $connection->send(new \Workerman\Protocols\Http\Response(500, [], json_encode(['ok' => false, 'error' => 'Upload failed: ' . $e->getMessage()])));
  522 + }
  523 + return;
  524 + }
  525 +
  526 + // 3. Generate Pre-Signed URL for Direct Upload
  527 + if (strpos($path, '/tos/sign') === 0) {
  528 + $query = $request->get();
  529 + $filename = $query['filename'] ?? 'file_' . time();
  530 + $ext = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
  531 +
  532 + // Validation
  533 + $allowed = $config['upload']['allowed_extensions'];
  534 + if (!in_array($ext, $allowed) && $ext !== '') {
  535 + // If no extension providing, we might just allow it or fail.
  536 + // Ideally client should provide full filename with extension.
  537 + }
  538 +
  539 + // TOS Configuration
  540 + $tos_config = $config['tos'];
  541 +
  542 + try {
  543 + $client = new TosClient([
  544 + 'region' => $tos_config['region'],
  545 + 'endpoint' => $tos_config['endpoint'],
  546 + 'ak' => $tos_config['ak'],
  547 + 'sk' => $tos_config['sk'],
  548 + ]);
  549 +
  550 + $uuid = bin2hex(random_bytes(8));
  551 + $userPhone = $config['upload']['default_user'];
  552 + // Ensure filename is safe
  553 + $safeName = preg_replace('/[^a-zA-Z0-9._-]/', '', $filename);
  554 + if (!$safeName)
  555 + $safeName = 'unnamed';
  556 +
  557 + $objectKey = "clawdbot/{$userPhone}/direct_{$uuid}_{$safeName}";
  558 + $bucket = $tos_config['bucket'];
  559 +
  560 + // Generate Pre-Signed PUT URL (Valid for 15 mins)
  561 + // Note: The SDK method name might vary slightly based on version,
  562 + // but `preSignedURL` is standard for TOS PHP SDK v2.
  563 + $input = new \Tos\Model\PreSignedURLInput(
  564 + 'PUT',
  565 + $tos_config['bucket'],
  566 + $objectKey,
  567 + 300 // 5 minutes validity
  568 + );
  569 +
  570 + // Add content-type if known? client will send it.
  571 + // For simple PUT, we just sign the method and resource.
  572 +
  573 + $output = $client->preSignedURL($input);
  574 + $signedUrl = $output->getSignedUrl();
  575 +
  576 + // Public Access URL (Assuming bucket is public-read or we use signed Get URL)
  577 + // For this project, we used public-read ACL in previous code, so we assume public access.
  578 + $publicUrl = "https://{$tos_config['bucket']}.{$tos_config['endpoint']}/{$objectKey}";
  579 +
  580 + $connection->send(json_encode([
  581 + 'ok' => true,
  582 + 'uploadUrl' => $signedUrl,
  583 + 'publicUrl' => $publicUrl,
  584 + 'key' => $objectKey
  585 + ]));
  586 +
  587 + } catch (Exception $e) {
  588 + $connection->send(new \Workerman\Protocols\Http\Response(500, [], json_encode(['ok' => false, 'error' => $e->getMessage()])));
  589 + }
  590 + return;
  591 + }
  592 +
  593 + $connection->send("Moltbot Relay HTTP Server");
  594 +};
  595 +
  596 +Worker::runAll();
... ...
Please register or login to post a comment