chore: refresh gramsrv public release

This commit is contained in:
A 2026-06-30 14:37:43 +08:00
parent 75cebe8dbf
commit 70b6820474
1274 changed files with 378751 additions and 59919 deletions

View file

@ -0,0 +1,213 @@
package rpc
import (
"context"
"github.com/gotd/td/proto"
"github.com/gotd/td/tg"
"telesrv/internal/domain"
)
// 私聊密聊 qts 消息收发 RPC handler(P1)。服务端是盲中继:sendEncrypted* 的 bytes 是
// 客户端加密的 DecryptedMessage,服务端盲存进【接收方设备】的 qts 队列、原样转发,
// 永不解密。在线推 updateNewEncryptedMessage(设备定向,离线靠 getDifference 补回)。
// 设计见 docs/secret-chat-module.md §7/§8。
// pushEncryptedNewMessage 把 updateNewEncryptedMessage 定向投递给接收设备。
func (r *Router) pushEncryptedNewMessage(ctx context.Context, msg domain.SecretChatMessage) {
if msg.ReceiverUserID == 0 || msg.ReceiverAuthKeyID == 0 {
return
}
now := int(r.clock.Now().Unix())
upd := &tg.Updates{
Updates: []tg.UpdateClass{&tg.UpdateNewEncryptedMessage{
Message: tgEncryptedMessage(msg),
Qts: msg.Qts,
}},
Users: []tg.UserClass{},
Chats: []tg.ChatClass{},
Date: now,
Seq: 0,
}
if targeted, ok := r.deps.Sessions.(AuthKeyTargetedSessionBinder); ok {
_, _ = targeted.PushToUserAuthKey(ctx, msg.ReceiverUserID, deviceAuthKeyBytes(msg.ReceiverAuthKeyID), proto.MessageFromServer, upd)
return
}
// 回退(测试替身/未装配定向能力):账号级推送。
r.pushUserMessage(ctx, msg.ReceiverUserID, "secret chat message", upd)
}
func (r *Router) sendEncryptedCommon(ctx context.Context, peer tg.InputEncryptedChat, randomID int64, data []byte, isService bool) (tg.MessagesSentEncryptedMessageClass, error) {
if r.deps.SecretChats == nil {
return nil, notImplementedErr()
}
userID, err := r.secretChatRequireUser(ctx)
if err != nil {
return nil, err
}
_, stored, err := r.deps.SecretChats.SendEncrypted(ctx, peer.ChatID, userID, peer.AccessHash, domain.SecretMessageDelivery{
RandomID: randomID,
Bytes: data,
IsService: isService,
Date: int(r.clock.Now().Unix()),
})
if err != nil {
return nil, secretChatErr(err)
}
r.pushEncryptedNewMessage(ctx, stored)
// 无 server message id;幂等重发返回首次落库 date(store dedup 保证)。
return &tg.MessagesSentEncryptedMessage{Date: stored.Date}, nil
}
func (r *Router) onMessagesSendEncrypted(ctx context.Context, req *tg.MessagesSendEncryptedRequest) (tg.MessagesSentEncryptedMessageClass, error) {
if req == nil {
return nil, inputRequestInvalidErr()
}
return r.sendEncryptedCommon(ctx, req.Peer, req.RandomID, req.Data, false)
}
func (r *Router) onMessagesSendEncryptedService(ctx context.Context, req *tg.MessagesSendEncryptedServiceRequest) (tg.MessagesSentEncryptedMessageClass, error) {
if req == nil {
return nil, inputRequestInvalidErr()
}
return r.sendEncryptedCommon(ctx, req.Peer, req.RandomID, req.Data, true)
}
// onMessagesReceivedQueue 确认接收设备已处理到 max_qts(推进 confirmed + 标 acked 可 GC)。
// 返回空 Vector<long>:DrKLO 调用处忽略响应(sendRequest(req, null)),空集安全。
func (r *Router) onMessagesReceivedQueue(ctx context.Context, maxQts int) ([]int64, error) {
if r.deps.SecretChats == nil {
return nil, notImplementedErr()
}
if _, err := r.secretChatRequireUser(ctx); err != nil {
return nil, err
}
deviceKey, ok := businessAuthKeyIDFrom(ctx)
if !ok {
return nil, internalErr()
}
if err := r.deps.SecretChats.AckQueue(ctx, deviceKey, maxQts); err != nil {
return nil, internalErr()
}
return []int64{}, nil
}
// onMessagesReportEncryptedSpam 纯记录:服务端不自动 discard、不拉黑、不产生 update
// (discard/block 由客户端独立 RPC 完成)。P1 接受并回 true。
func (r *Router) onMessagesReportEncryptedSpam(ctx context.Context, _ tg.InputEncryptedChat) (bool, error) {
if _, err := r.secretChatRequireUser(ctx); err != nil {
return false, err
}
return true, nil
}
// deviceEncryptedQts 返回当前设备已分配的最高 qts(getState 注入用,无则 0)。
func (r *Router) deviceEncryptedQts(ctx context.Context) int {
if r.deps.SecretChats == nil {
return 0
}
deviceKey, ok := businessAuthKeyIDFrom(ctx)
if !ok {
return 0
}
qts, err := r.deps.SecretChats.DeviceReservedQts(ctx, deviceKey)
if err != nil {
return 0
}
return qts
}
// encryptedDifference 返回当前设备 qts > sinceQts 的加密消息(TL 投影)与推进后的 qts
// (getDifference 注入用)。无新消息时返回 (nil, sinceQts)。
func (r *Router) encryptedDifference(ctx context.Context, sinceQts int) ([]tg.EncryptedMessageClass, int) {
if r.deps.SecretChats == nil {
return nil, sinceQts
}
deviceKey, ok := businessAuthKeyIDFrom(ctx)
if !ok {
return nil, sinceQts
}
msgs, err := r.deps.SecretChats.ListNewMessages(ctx, deviceKey, sinceQts, 0)
if err != nil || len(msgs) == 0 {
return nil, sinceQts
}
out := make([]tg.EncryptedMessageClass, 0, len(msgs))
newQts := sinceQts
for _, m := range msgs {
out = append(out, tgEncryptedMessage(m))
newQts = m.Qts
}
return out, newQts
}
// injectEncryptedMessages 把加密消息与推进后的 qts 注入差分响应(按类型分别写 State /
// IntermediateState 的 Qts)。
func injectEncryptedMessages(diff tg.UpdatesDifferenceClass, encMsgs []tg.EncryptedMessageClass, newQts int) tg.UpdatesDifferenceClass {
switch v := diff.(type) {
case *tg.UpdatesDifference:
v.NewEncryptedMessages = append(v.NewEncryptedMessages, encMsgs...)
v.State.Qts = newQts
case *tg.UpdatesDifferenceSlice:
v.NewEncryptedMessages = append(v.NewEncryptedMessages, encMsgs...)
v.IntermediateState.Qts = newQts
}
return diff
}
// encryptedStateUpdates 返回当前设备未投递的握手/已读状态事件重建出的 update(进
// OtherUpdates)、涉及的 peer user id(补 Users)、以及要登记已投递的事件 id。
// encryption 事件按 secret_chats 权威态重建(不固化快照)。
func (r *Router) encryptedStateUpdates(ctx context.Context, userID int64) (updates []tg.UpdateClass, peerUserIDs []int64, eventIDs []int64) {
if r.deps.SecretChats == nil {
return nil, nil, nil
}
deviceKey, ok := businessAuthKeyIDFrom(ctx)
if !ok {
return nil, nil, nil
}
events, err := r.deps.SecretChats.ListStateEvents(ctx, userID, deviceKey, 0)
if err != nil || len(events) == 0 {
return nil, nil, nil
}
for _, ev := range events {
eventIDs = append(eventIDs, ev.ID)
switch ev.Type {
case domain.EncryptedStateEventEncryption:
chat, found, gerr := r.deps.SecretChats.GetSecretChat(ctx, ev.ChatID)
if gerr != nil || !found {
continue
}
updates = append(updates, &tg.UpdateEncryption{
Chat: tgEncryptedChatForViewer(chat, userID),
Date: ev.Date,
})
peerUserIDs = append(peerUserIDs, chat.AdminUserID, chat.ParticipantUserID)
case domain.EncryptedStateEventRead:
updates = append(updates, &tg.UpdateEncryptedMessagesRead{
ChatID: ev.ChatID,
MaxDate: ev.MaxDate,
Date: ev.Date,
})
}
}
return updates, peerUserIDs, eventIDs
}
// injectEncryptedOtherUpdates 把握手/已读 update 追加进差分的 OtherUpdates、把 peer
// user 对象追加进 Users。
func (r *Router) injectEncryptedOtherUpdates(ctx context.Context, viewerUserID int64, diff tg.UpdatesDifferenceClass, updates []tg.UpdateClass, peerUserIDs []int64) tg.UpdatesDifferenceClass {
if len(updates) == 0 {
return diff
}
users := r.tgUsersForIDs(ctx, viewerUserID, peerUserIDs)
switch v := diff.(type) {
case *tg.UpdatesDifference:
v.OtherUpdates = append(v.OtherUpdates, updates...)
v.Users = appendUniqueTGUsers(v.Users, users...)
case *tg.UpdatesDifferenceSlice:
v.OtherUpdates = append(v.OtherUpdates, updates...)
v.Users = appendUniqueTGUsers(v.Users, users...)
}
return diff
}