koishi-plugin-kkk 1.0.0

package/lib/karin/module/server/middlewares/auth.js

@@ -0,0 +1,133 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signatureVerificationMiddleware = void 0;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const node_karin_1 = require("../../../../compat/node-karin.js");
+/**
+ * Base64解码
+ * @param str Base64编码的字符串
+ * @returns 解码后的字符串
+ */
+const base64Decode = (str) => {
+    return Buffer.from(str, 'base64').toString('utf8');
+};
+/**
+ * URL解码
+ * @param str URL编码的字符串
+ * @returns 解码后的字符串
+ */
+const urlDecode = (str) => {
+    return decodeURIComponent(str);
+};
+/**
+ * 十六进制解码
+ * @param str 十六进制编码的字符串
+ * @returns 解码后的字符串
+ */
+const hexDecode = (str) => {
+    return Buffer.from(str, 'hex').toString('utf8');
+};
+/**
+ * 反转字符串
+ * @param str 待反转字符串
+ * @returns 反转后的字符串
+ */
+const reverseString = (str) => {
+    return str.split('').reverse().join('');
+};
+/**
+ * 字符偏移解码
+ * @param str 编码的字符串
+ * @param offset 偏移量
+ * @returns 解码后的字符串
+ */
+const charOffsetDecode = (str, offset = 5) => {
+    return str
+        .split('')
+        .map((char) => {
+        const code = char.charCodeAt(0);
+        return String.fromCharCode(code - offset);
+    })
+        .join('');
+};
+/**
+ * 多层解码解密
+ * @param str 多层编码的字符串
+ * @returns 解码后的原始字符串
+ */
+const multiLayerDecode = (str) => {
+    try {
+        // 第6层：Base64解码
+        let decoded = base64Decode(str);
+        // 第5层：URL解码
+        decoded = urlDecode(decoded);
+        // 第4层：Base64解码
+        decoded = base64Decode(decoded);
+        // 第3层：反转字符串
+        decoded = reverseString(decoded);
+        // 第2层：十六进制解码
+        decoded = hexDecode(decoded);
+        // 第1层：字符偏移解码
+        decoded = charOffsetDecode(decoded, 5);
+        return decoded;
+    }
+    catch (error) {
+        throw new Error('多层解码失败：' + error);
+    }
+};
+/**
+ * HMAC-SHA256签名验证中间件
+ * @param req 请求对象
+ * @param res 响应对象
+ * @param next 下一个中间件函数
+ */
+const signatureVerificationMiddleware = (req, res, next) => {
+    try {
+        // 获取请求头中的签名信息
+        const encodedSignature = req.headers['x-signature'];
+        const timestamp = req.headers['x-timestamp'];
+        const nonce = req.headers['x-nonce'];
+        const token = req.headers['authorization']?.replace('Bearer ', '') || '';
+        if (!encodedSignature || !timestamp || !nonce) {
+            return (0, node_karin_1.createBadRequestResponse)(res, '缺少必要的签名参数');
+        }
+        // 检查时间戳是否在有效范围内（5分钟内）
+        const currentTime = Date.now();
+        const requestTime = parseInt(timestamp);
+        const timeDiff = Math.abs(currentTime - requestTime);
+        if (timeDiff > 5 * 60 * 1000) {
+            // 5分钟
+            return (0, node_karin_1.createBadRequestResponse)(res, '请求时间戳已过期');
+        }
+        // 解码签名
+        let decodedSignature;
+        try {
+            decodedSignature = multiLayerDecode(encodedSignature);
+        }
+        catch (error) {
+            return (0, node_karin_1.createBadRequestResponse)(res, '签名格式错误：' + error);
+        }
+        // 构建签名字符串，使用|分割
+        const method = req.method.toUpperCase();
+        const url = req.headers['x-original-url'] || req.originalUrl;
+        const body = req.method === 'GET' ? '' : JSON.stringify(req.body || {});
+        // 签名字符串格式：METHOD|URL|BODY|TIMESTAMP|NONCE
+        const signatureString = `${method}|${url}|${body}|${timestamp}|${nonce}`;
+        // 使用token作为密钥生成HMAC-SHA256签名
+        const expectedSignature = node_crypto_1.default.createHmac('sha256', token).update(signatureString).digest('hex');
+        // 验证签名
+        if (decodedSignature !== expectedSignature) {
+            node_karin_1.logger.warn(`签名验证失败: 期望=${expectedSignature}, 解码后实际=${decodedSignature}, 签名字符串=${signatureString}`);
+            return (0, node_karin_1.createBadRequestResponse)(res, '签名验证失败');
+        }
+        next();
+    }
+    catch (error) {
+        node_karin_1.logger.error('签名验证中间件错误:', error);
+        return (0, node_karin_1.createServerErrorResponse)(res, '签名验证失败');
+    }
+};
+exports.signatureVerificationMiddleware = signatureVerificationMiddleware;

package/lib/karin/module/server/routes/amagi.js

@@ -0,0 +1,57 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createReloadableAmagiRouter = void 0;
+const amagi_1 = require("@ikenxuan/amagi");
+const node_karin_1 = require("../../../../compat/node-karin.js");
+const express_1 = __importDefault(require("../../../../compat/express.js"));
+const amagiClient_1 = require("../../../module/utils/amagiClient");
+const Config_1 = require("../../../module/utils/Config");
+/**
+ * 平台 Router 的请求配置。
+ *
+ * `createXxxRoutes(cookie, requestConfig?)` 的第二参与 client 的
+ * `ClientOptions.request` 是同一个东西 —— 原先只传了 cookie，于是 HTTP API
+ * 这一路绕开了插件配置里的代理、超时与 UA，行为与 SDK 那一路不一致。
+ * @returns 与 `AmagiBase.createAmagiClient` 同源的请求配置
+ */
+const requestConfigOf = () => {
+    const amagi = Config_1.Config.amagi;
+    return {
+        timeout: amagi.timeout,
+        headers: { 'User-Agent': amagi['User-Agent'] },
+        proxy: amagi.proxy?.switch ? amagi.proxy : false
+    };
+};
+/** 创建使用当前配置的 Amagi 平台 Router。 */
+const createPlatformRouters = () => {
+    const requestConfig = requestConfigOf();
+    return {
+        bilibili: (0, amagi_1.createBilibiliRoutes)(Config_1.Config.amagi.cookies.bilibili, requestConfig),
+        douyin: (0, amagi_1.createDouyinRoutes)(Config_1.Config.amagi.cookies.douyin, requestConfig),
+        kuaishou: (0, amagi_1.createKuaishouRoutes)(Config_1.Config.amagi.cookies.kuaishou, requestConfig),
+        xiaohongshu: (0, amagi_1.createXiaohongshuRoutes)(Config_1.Config.amagi.cookies.xiaohongshu, requestConfig)
+    };
+};
+/**
+ * 创建一个挂载地址保持不变、内部平台 Router 可热切换的 Amagi Router。
+ *
+ * Express 挂载后无法直接替换中间件栈，因此外层 Router 始终保持稳定，
+ * 每次请求再转发给当前的平台 Router；配置重载时只需原子替换内部引用。
+ */
+const createReloadableAmagiRouter = () => {
+    const router = express_1.default.Router();
+    let platformRouters = createPlatformRouters();
+    router.use('/bilibili', (req, res, next) => platformRouters.bilibili(req, res, next));
+    router.use('/douyin', (req, res, next) => platformRouters.douyin(req, res, next));
+    router.use('/kuaishou', (req, res, next) => platformRouters.kuaishou(req, res, next));
+    router.use('/xiaohongshu', (req, res, next) => platformRouters.xiaohongshu(req, res, next));
+    (0, amagiClient_1.registerAmagiReloadListener)(() => {
+        platformRouters = createPlatformRouters();
+        node_karin_1.logger.debug('[AmagiRouter] 平台 Router 已使用最新配置重建');
+    });
+    return router;
+};
+exports.createReloadableAmagiRouter = createReloadableAmagiRouter;

package/lib/karin/module/server/routes/api.js

@@ -0,0 +1,40 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiRouter = void 0;
+/**
+ * API 路由注册
+ */
+const node_karin_1 = require("../../../../compat/node-karin.js");
+const express_1 = __importDefault(require("../../../../compat/express.js"));
+const routes_1 = require("../constants/routes");
+const bots_1 = require("../controllers/bots");
+const config_1 = require("../controllers/config");
+const video_1 = require("../controllers/video");
+const apiRouter = express_1.default.Router();
+exports.apiRouter = apiRouter;
+/**
+ * 认证中间件。
+ *
+ * Koishi 移植：上游这里是 `[authMiddleware, signatureVerificationMiddleware]` ——
+ * 前者校验 Karin 控制台会话，后者校验 Karin APP 客户端的 HMAC 签名（密钥取自会话 token）。
+ * 这两个客户端在 Koishi 侧都不存在，而控制台页面是零构建的静态页，做 HMAC 只会平添复杂度。
+ * 因此只保留 `authMiddleware`（我们实现为 apiToken / 本机放行）。
+ * 需要签名校验的场景可以自行把 `signatureVerificationMiddleware` 加回来（文件仍在 middlewares/auth.ts）。
+ */
+const authMiddlewares = [node_karin_1.authMiddleware];
+// Bot 管理
+apiRouter.get(routes_1.ROUTES.BOTS, ...authMiddlewares, bots_1.getBots);
+apiRouter.get(routes_1.ROUTES.BOT_INFO, ...authMiddlewares, bots_1.getBotInfo);
+apiRouter.get(routes_1.ROUTES.BOT_GROUPS, ...authMiddlewares, bots_1.getBotGroups);
+apiRouter.get(routes_1.ROUTES.BOT_GROUP_INFO, ...authMiddlewares, bots_1.getBotGroupInfo);
+// 群组管理
+apiRouter.post(routes_1.ROUTES.GROUPS_BATCH, ...authMiddlewares, bots_1.getGroupsBatch);
+// 配置管理
+apiRouter.get(routes_1.ROUTES.CONFIG, ...authMiddlewares, config_1.getAllConfig);
+apiRouter.post(routes_1.ROUTES.CONFIG, ...authMiddlewares, config_1.updateAllConfig);
+// 视频流
+apiRouter.get(routes_1.ROUTES.VIDEO_STREAM, video_1.getVideoStream);
+apiRouter.get(routes_1.ROUTES.VIDEO_EVENTS, video_1.getVideoEvents);

package/lib/karin/module/server/routes/index.js

@@ -0,0 +1,97 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * 主路由注册
+ */
+const cors = __importStar(require("cors"));
+const httpProxy = __importStar(require("http-proxy-middleware"));
+const node_karin_1 = require("../../../../compat/node-karin.js");
+const express_1 = __importDefault(require("../../../../compat/express.js"));
+const Config_1 = require("../../../module/utils/Config");
+const routes_1 = require("../constants/routes");
+const amagi_1 = require("./amagi");
+const api_1 = require("./api");
+const ssr_1 = require("./ssr");
+const static_1 = require("./static");
+const server = (0, express_1.default)();
+const proxyOptions = {
+    target: 'https://developer.huawei.com',
+    changeOrigin: true
+};
+server.use(cors.default());
+server.use('/', httpProxy.createProxyMiddleware(proxyOptions));
+if (process.env.NODE_ENV !== 'test') {
+    (0, node_karin_1.checkPort)(3780).then((isOpen) => {
+        if (isOpen) {
+            const s = server.listen(3780);
+            s.on('error', (err) => {
+                node_karin_1.logger.error(`[koishi-plugin-kkk] 字体代理服务器启动失败: ${err.message}`);
+            });
+            return s;
+        }
+        return node_karin_1.logger.error('端口 3780 被占用，字体代理服务器将不会启动。');
+    });
+}
+const app = express_1.default.Router();
+app.use(express_1.default.json());
+app.use(express_1.default.urlencoded({ extended: true }));
+// Amagi API Server
+if (Config_1.Config.amagi.APIServer && Config_1.Config.amagi.APIServerMount) {
+    app.use('/amagi/api', (0, amagi_1.createReloadableAmagiRouter)());
+}
+else if (Config_1.Config.amagi.APIServer) {
+    const amagiServer = (0, express_1.default)();
+    amagiServer.use(express_1.default.json());
+    amagiServer.use(express_1.default.urlencoded({ extended: true }));
+    amagiServer.get('/', (_req, res) => res.redirect(301, 'https://amagi.apifox.cn'));
+    amagiServer.get('/docs', (_req, res) => res.redirect(301, 'https://amagi.apifox.cn'));
+    amagiServer.use('/api', (0, amagi_1.createReloadableAmagiRouter)());
+    const listener = amagiServer.listen(Config_1.Config.amagi.APIServerPort, '::', () => {
+        node_karin_1.logger.mark(`[koishi-plugin-kkk] Amagi server listening on http://localhost:${Config_1.Config.amagi.APIServerPort}`);
+    });
+    listener.on('error', (error) => {
+        node_karin_1.logger.error(`[koishi-plugin-kkk] Amagi API Server 启动失败: ${error.message}`);
+    });
+}
+// 挂载子路由
+app.use(routes_1.API_V1_PREFIX, api_1.apiRouter); // /kkk/v1/*
+app.use(routes_1.SSR_PREFIX, ssr_1.ssrRouter); // /kkk/ssr/*
+app.use(routes_1.ASSETS_PREFIX, static_1.staticRouter); // /kkk/assets/*
+// 挂载到 Karin 主路由
+node_karin_1.app.use(routes_1.KKK_PREFIX, app);

package/lib/karin/module/server/routes/ssr.js

@@ -0,0 +1,16 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ssrRouter = void 0;
+/**
+ * SSR 路由注册
+ */
+const express_1 = __importDefault(require("../../../../compat/express.js"));
+const routes_1 = require("../constants/routes");
+const video_1 = require("../controllers/video");
+const ssrRouter = express_1.default.Router();
+exports.ssrRouter = ssrRouter;
+// 视频播放页面
+ssrRouter.get(routes_1.ROUTES.VIDEO_PAGE, video_1.getVideoPage);

package/lib/karin/module/server/routes/static.js

@@ -0,0 +1,43 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.staticRouter = void 0;
+/**
+ * 静态文件路由注册
+ */
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_karin_1 = require("../../../../compat/node-karin.js");
+const express_1 = __importDefault(require("../../../../compat/express.js"));
+const root_1 = require("../../../root");
+const webDistPath = node_path_1.default.join(root_1.Root.pluginPath, 'lib', 'web');
+const webIndexPath = node_path_1.default.join(webDistPath, 'index.html');
+const sendWebIndex = (res) => {
+    try {
+        const html = node_fs_1.default.readFileSync(webIndexPath, 'utf-8');
+        res.setHeader('Cache-Control', 'no-cache');
+        res.type('html').send(html);
+    }
+    catch (error) {
+        node_karin_1.logger.error('[koishi-plugin-kkk] 读取 Web UI 入口文件失败:', error);
+        (0, node_karin_1.createServerErrorResponse)(res, '加载 Web UI 失败');
+    }
+};
+const staticRouter = express_1.default.Router();
+exports.staticRouter = staticRouter;
+const webStatic = express_1.default.static(webDistPath, {
+    redirect: false,
+    setHeaders: (res, filePath) => {
+        if (filePath.endsWith('.html')) {
+            res.setHeader('Cache-Control', 'no-cache');
+            return;
+        }
+        res.setHeader('Cache-Control', 'public, max-age=31536000, immutable');
+    }
+});
+staticRouter.use(webStatic);
+staticRouter.use((_req, res) => {
+    sendWebIndex(res);
+});