Merge branch 'feature/image-upload' into release

 FROM php:8.2-cli
 
+# -----------------------------------------------------------------------------
+# 1. 替换 Debian 软件源为阿里云镜像 (加速 apt-get)
+# 注意：PHP 8.2 官方镜像基于 Debian Bookworm，源文件通常在 /etc/apt/sources.list.d/debian.sources
+# -----------------------------------------------------------------------------
+RUN sed -i 's/deb.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list.d/debian.sources 2>/dev/null || \
+    sed -i 's/deb.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list
+
 # Install dependencies and extensions
-RUN apt-get update && apt-get install -y \
+# 增加 --no-install-recommends 减小体积，增加 rm -rf 清理缓存
+RUN apt-get update && apt-get install -y --no-install-recommends \
     git \
     unzip \
     libzip-dev \
-    && docker-php-ext-install pcntl posix sockets zip pdo_mysql
+    && docker-php-ext-install pcntl posix sockets zip pdo_mysql \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
 
 # Install Composer
 COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
@@ -13,10 +23,16 @@ COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
 # Set working directory
 WORKDIR /app
 
+# -----------------------------------------------------------------------------
+# 2. 替换 Composer 镜像源为阿里云镜像 (加速 composer install)
+# -----------------------------------------------------------------------------
+RUN composer config -g repo.packagist composer https://mirrors.aliyun.com/composer/
+
 # Copy dependency definition first
 COPY composer.json ./
+# (Optional) COPY composer.lock ./
 
-# Install dependencies (if composer.lock exists it would be better, but we start fresh)
+# Install dependencies
 RUN composer install --no-scripts --no-autoloader
 
 # Copy application source
@@ -30,3 +46,4 @@ EXPOSE 8888
 
 # Command to run the Workerman server
 CMD ["php", "start.php", "start"]
+

@@ -7,7 +7,8 @@
         "php": ">=8.0",
         "workerman/workerman": "^4.1",
         "firebase/php-jwt": "^6.10",
-        "predis/predis": "^2.3"
+        "predis/predis": "^2.3",
+        "volcengine/ve-tos-php-sdk": "^2.0"
     },
     "autoload": {
         "psr-4": {

@@ -9,6 +9,8 @@ services:
     environment:
       - REDIS_HOST=redis
       - REDIS_PORT=6379
+    volumes:
+      - ./:/app
 
   redis:
     image: redis:alpine

 <?php
 use Workerman\Worker;
 use Workerman\Timer;
+use Tos\TosClient;
+use Tos\Exception\TosClientException;
+use Tos\Exception\TosServerException;
+use Tos\Model\PutObjectInput;
 
 require_once __DIR__ . '/vendor/autoload.php';
 
@@ -146,4 +150,101 @@ $ws_worker->onClose = function ($connection) use (&$clients, &$devices) {
     }
 };
 
+// ---------------------------------------------------------
+// [New] HTTP Server for file uploads and static serving
+// ---------------------------------------------------------
+$http_worker = new Worker("http://0.0.0.0:8889");
+$http_worker->count = 1; // Single process for uploads
+$http_worker->onMessage = function ($connection, $request) {
+    // 1. Static File Serving (Simple implementation)
+    $path = $request->path();
+    if (strpos($path, '/uploads/') === 0) {
+        $file = __DIR__ . $path;
+        if (is_file($file)) {
+            $connection->send(new \Workerman\Protocols\Http\Response(
+                200,
+                ['Content-Type' => mime_content_type($file)],
+                file_get_contents($file)
+            ));
+            return;
+        }
+    }
+
+    // 2. Upload Handler
+    if ($path === '/upload') {
+        $files = $request->file();
+
+        if (empty($files['file'])) {
+            $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => 'No file'])));
+            return;
+        }
+
+        $file = $files['file'];
+
+        // Validate Size (50MB)
+        if ($file['size'] > 50 * 1024 * 1024) {
+            $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => 'File too large (Max 50MB)'])));
+            return;
+        }
+
+        // Validate Extension
+        $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
+        // Supported: PDF, Excel, Image, Video
+        $allowed = ['jpg', 'jpeg', 'png', 'gif', 'webp', 'mp4', 'pdf', 'xls', 'xlsx'];
+        if (!in_array($ext, $allowed)) {
+            $connection->send(new \Workerman\Protocols\Http\Response(400, [], json_encode(['ok' => false, 'error' => 'File type not allowed'])));
+            return;
+        }
+
+        // TOS Configuration (Keys from hsobs.php)
+        $ak = 'AKLTZjkyMzliYjQ5N2IyNDFjNDliMTBiY2E2ZmU5ODhjNTM';
+        $sk = 'WldKbE5XUmpPRGxqWmpZM05EUTBObUpqTTJSa01qVTNNMkprWmpsbU9Uaw==';
+        $endpoint = 'tos-cn-shanghai.volces.com';
+        $region = 'cn-shanghai';
+        $bucket = 'ocxun';
+
+        try {
+            $client = new TosClient([
+                'region' => $region,
+                'endpoint' => $endpoint,
+                'ak' => $ak,
+                'sk' => $sk,
+            ]);
+
+            // Generate Key
+            $uuid = bin2hex(random_bytes(8));
+            // TODO: 暂时使用 'guest'，等待后续对接用户手机号功能
+            $userPhone = 'guest';
+            $objectKey = "clawdbot/{$userPhone}/{$uuid}.{$ext}";
+
+            // Read file content
+            $contentFn = fopen($file['tmp_name'], 'r');
+
+            // Upload using Object Input
+            $input = new PutObjectInput($bucket, $objectKey, $contentFn);
+            $input->setACL('public-read');
+
+            $client->putObject($input);
+
+            if (is_resource($contentFn)) {
+                fclose($contentFn);
+            }
+
+            // Generate URL
+            $url = "https://{$bucket}.{$endpoint}/{$objectKey}";
+
+            $connection->send(json_encode([
+                'ok' => true,
+                'url' => $url
+            ]));
+
+        } catch (Exception $e) {
+            $connection->send(new \Workerman\Protocols\Http\Response(500, [], json_encode(['ok' => false, 'error' => 'Upload failed: ' . $e->getMessage()])));
+        }
+        return;
+    }
+
+    $connection->send("Moltbot Relay HTTP Server");
+};
+
 Worker::runAll();