mirror of
https://github.com/hotyue/IP-Sentinel.git
synced 2026-06-13 21:29:38 +08:00
813 lines
52 KiB
Bash
Executable File
813 lines
52 KiB
Bash
Executable File
#!/bin/bash
|
||
|
||
# ==========================================================
|
||
# 脚本名称: tg_master.sh
|
||
# 核心功能: 监听并处理全局指令回调，安全下发 OTA、Webhook、节点改名及僵尸节点清洗
|
||
# ==========================================================
|
||
|
||
CONF="/opt/ip_sentinel_master/master.conf"
|
||
[ ! -f "$CONF" ] && exit 1
|
||
source "$CONF"
|
||
|
||
REPO_RAW_URL="https://raw.githubusercontent.com/hotyue/IP-Sentinel/feature/v4.2.0-dual-stack"
|
||
MASTER_VERSION=${MASTER_VERSION:-"3.5.0"}
|
||
|
||
OFFSET_FILE="${MASTER_DIR}/.tg_offset"
|
||
[[ -f $OFFSET_FILE ]] || echo "0" > $OFFSET_FILE
|
||
|
||
# ==========================================================
|
||
# 1. 核心工具组件
|
||
# ==========================================================
|
||
|
||
# [全局旗帜渲染引擎] 基于 ISO 代码动态匹配地区国旗
|
||
get_flag() {
|
||
local region=$(echo "$1" | tr 'a-z' 'A-Z')
|
||
local base_cc="${region%%-*}"
|
||
local flag="🌐"
|
||
case "$base_cc" in
|
||
US) flag="🇺🇸" ;; JP) flag="🇯🇵" ;; HK) flag="🇭🇰" ;; TW) flag="🇹🇼" ;; SG) flag="🇸🇬" ;;
|
||
UK|GB) flag="🇬🇧" ;; DE) flag="🇩🇪" ;; FR) flag="🇫🇷" ;; NL) flag="🇳🇱" ;; CA) flag="🇨🇦" ;;
|
||
AU) flag="🇦🇺" ;; KR) flag="🇰🇷" ;; IN) flag="🇮🇳" ;; BR) flag="🇧🇷" ;; RU) flag="🇷🇺" ;;
|
||
CH) flag="🇨🇭" ;; SE) flag="🇸🇪" ;; NO) flag="🇳🇴" ;; DK) flag="🇩🇰" ;; FI) flag="🇫🇮" ;;
|
||
IT) flag="🇮🇹" ;; ES) flag="🇪🇸" ;; PT) flag="🇵🇹" ;; IE) flag="🇮🇪" ;; PL) flag="🇵🇱" ;;
|
||
AT) flag="🇦🇹" ;; BE) flag="🇧🇪" ;; TR) flag="🇹🇷" ;; ZA) flag="🇿🇦" ;; AE) flag="🇦🇪" ;;
|
||
MY) flag="🇲🇾" ;; ID) flag="🇮🇩" ;; VN) flag="🇻🇳" ;; TH) flag="🇹🇭" ;; PH) flag="🇵🇭" ;;
|
||
NZ) flag="🇳🇿" ;; AR) flag="🇦🇷" ;; CL) flag="🇨🇱" ;; MX) flag="🇲🇽" ;; IL) flag="🇮🇱" ;;
|
||
SA) flag="🇸🇦" ;; EG) flag="🇪🇬" ;; NG) flag="🇳🇬" ;; KE) flag="🇰🇪" ;; RO) flag="🇷🇴" ;;
|
||
BG) flag="🇧🇬" ;; CZ) flag="🇨🇿" ;; HU) flag="🇭🇺" ;; GR) flag="🇬🇷" ;; UA) flag="🇺🇦" ;;
|
||
MO) flag="🇲🇴" ;; KH) flag="🇰🇭" ;; MM) flag="🇲🇲" ;; LA) flag="🇱🇦" ;;
|
||
MN) flag="🇲🇳" ;; NP) flag="🇳🇵" ;; BD) flag="🇧🇩" ;;
|
||
esac
|
||
echo "$flag"
|
||
}
|
||
|
||
send_ui() {
|
||
curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/sendMessage" \
|
||
-H "Content-Type: application/json" \
|
||
-d "{\"chat_id\":\"$1\",\"text\":\"$2\",\"parse_mode\":\"Markdown\",\"reply_markup\":{\"inline_keyboard\":$3}}" > /dev/null
|
||
}
|
||
|
||
send_msg() {
|
||
curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/sendMessage" \
|
||
-d "chat_id=$1" -d "text=$2" -d "parse_mode=Markdown" > /dev/null
|
||
}
|
||
|
||
edit_msg() {
|
||
curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/editMessageText" \
|
||
-d "chat_id=$1" -d "message_id=$2" -d "text=$3" -d "parse_mode=Markdown" > /dev/null
|
||
}
|
||
|
||
edit_ui() {
|
||
curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/editMessageText" \
|
||
-H "Content-Type: application/json" \
|
||
-d "{\"chat_id\":\"$1\",\"message_id\":\"$2\",\"text\":\"$3\",\"parse_mode\":\"Markdown\",\"reply_markup\":{\"inline_keyboard\":$4}}" > /dev/null
|
||
}
|
||
|
||
# [SQLite 终极并发架构] 激活高并发 WAL 引擎防锁库，并设置安全锁时延
|
||
db_exec() {
|
||
printf ".timeout 5000\n%s\n" "$1" | sqlite3 "$DB_FILE"
|
||
}
|
||
|
||
# [HMAC 动态签名引擎] 下发指令挂载带有时效性的哈希签名，防止重放与中间人篡改
|
||
generate_signed_url() {
|
||
local target_ip=$1
|
||
local target_port=$2
|
||
local action_path=$3
|
||
local current_t=$(date +%s)
|
||
|
||
local payload="${action_path}:${current_t}"
|
||
# [v4.1.7 致命修复] 弃用 -hmac，改用 -macopt 标准语法，彻底杜绝 TG 群组负数 ID 导致的 OpenSSL 参数注入崩溃
|
||
local signature=$(echo -n "$payload" | openssl dgst -sha256 -mac HMAC -macopt key:"$CHAT_ID" | awk '{print $NF}')
|
||
|
||
echo "https://${target_ip}:${target_port}${action_path}?t=${current_t}&sign=${signature}"
|
||
}
|
||
|
||
# ==========================================================
|
||
# [新增插入] v4.2.2 终极容灾火力网：自动解析多宿主 IP 并执行无缝降级重试
|
||
# ==========================================================
|
||
call_agent() {
|
||
local ips="$1"
|
||
local port="$2"
|
||
local path="$3"
|
||
local suffix="$4"
|
||
local res="FAILED"
|
||
|
||
# 拆解逗号分隔的 IP 列阵 (例如: [2a0b:...],66.181.x.x)
|
||
IFS=',' read -r -a ip_array <<< "$ips"
|
||
for ip in "${ip_array[@]}"; do
|
||
if [ -n "$ip" ]; then
|
||
local url=$(generate_signed_url "$ip" "$port" "$path")
|
||
[ -n "$suffix" ] && url="${url}${suffix}"
|
||
|
||
# 缩短单次重试时间，实现用户无感知的秒级降级切换
|
||
res=$(curl -k -s --connect-timeout 4 -m 12 "$url" || echo "FAILED")
|
||
if [ "$res" != "FAILED" ] && [ -n "$res" ]; then
|
||
echo "$res"
|
||
return
|
||
fi
|
||
fi
|
||
done
|
||
echo "FAILED"
|
||
}
|
||
|
||
# ==========================================================
|
||
# 2. 数据库热升级自愈系统
|
||
# ==========================================================
|
||
db_exec "PRAGMA journal_mode=WAL;" > /dev/null 2>&1
|
||
db_exec "PRAGMA synchronous=NORMAL;" > /dev/null 2>&1
|
||
|
||
# 自动探测并动态扩展节点基础表结构，屏蔽已存在的报错
|
||
db_exec "ALTER TABLE nodes ADD COLUMN region TEXT DEFAULT 'UNKNOWN';" 2>/dev/null
|
||
db_exec "ALTER TABLE nodes ADD COLUMN node_alias TEXT;" 2>/dev/null
|
||
db_exec "ALTER TABLE nodes ADD COLUMN enable_google TEXT DEFAULT 'true';" 2>/dev/null
|
||
db_exec "ALTER TABLE nodes ADD COLUMN enable_trust TEXT DEFAULT 'true';" 2>/dev/null
|
||
db_exec "ALTER TABLE nodes ADD COLUMN enable_ota TEXT DEFAULT 'false';" 2>/dev/null
|
||
|
||
# 构建与动态扩展 IP 质量历史趋势库
|
||
db_exec "CREATE TABLE IF NOT EXISTS ip_trend_log (
|
||
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||
node_name TEXT,
|
||
check_time DATETIME DEFAULT CURRENT_TIMESTAMP,
|
||
scam_score INTEGER,
|
||
nf_status TEXT
|
||
);" 2>/dev/null
|
||
db_exec "ALTER TABLE ip_trend_log ADD COLUMN goog_status TEXT DEFAULT 'Unknown';" 2>/dev/null
|
||
db_exec "ALTER TABLE ip_trend_log ADD COLUMN gpt_status TEXT DEFAULT 'Unknown';" 2>/dev/null
|
||
|
||
# ==========================================================
|
||
# 3. 核心长轮询调度器
|
||
# ==========================================================
|
||
while true; do
|
||
OFFSET=$(cat $OFFSET_FILE)
|
||
UPDATES=$(curl -s --connect-timeout 5 -m 35 "https://api.telegram.org/bot${TG_TOKEN}/getUpdates?offset=${OFFSET}&timeout=30")
|
||
|
||
COUNT=$(echo "$UPDATES" | jq -r '.result | length' 2>/dev/null)
|
||
|
||
if [[ "$COUNT" =~ ^[0-9]+$ ]] && [ "$COUNT" -gt 0 ]; then
|
||
echo "$UPDATES" | jq -c '.result[]' | while read -r UPDATE; do
|
||
UPDATE_ID=$(echo "$UPDATE" | jq -r '.update_id')
|
||
echo $((UPDATE_ID + 1)) > $OFFSET_FILE
|
||
|
||
CHAT_ID=$(echo "$UPDATE" | jq -r '.message.chat.id // .callback_query.message.chat.id')
|
||
TEXT=$(echo "$UPDATE" | jq -r '.message.text // .callback_query.data')
|
||
|
||
# [UI 状态机] 提前提取交互回调 ID，确保后续 UI 重绘正常流转
|
||
CB_ID=$(echo "$UPDATE" | jq -r '.callback_query.id // empty')
|
||
MSG_ID=$(echo "$UPDATE" | jq -r '.callback_query.message.message_id // empty')
|
||
|
||
# ----------------------------------------------------------
|
||
# [业务流 A] 深海声呐态势感知一键入库模块
|
||
# ----------------------------------------------------------
|
||
if [[ "$TEXT" == "svq|"* ]]; then
|
||
IFS='|' read -r MAGIC RAW_NODE_ID RAW_SCORE RAW_GOOG_ST RAW_NF_ST RAW_GPT_ST <<< "$TEXT"
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
# [安全防御] 严格正则清洗，封死所有 SQL 注入通道
|
||
NODE_ID=$(echo "$RAW_NODE_ID" | tr -cd 'a-zA-Z0-9_.-')
|
||
SCORE=$(echo "$RAW_SCORE" | tr -cd '0-9')
|
||
GOOG_ST=$(echo "$RAW_GOOG_ST" | tr -d '"'\''\`\$\|&;<>\n\r')
|
||
NF_ST=$(echo "$RAW_NF_ST" | tr -d '"'\''\`\$\|&;<>\n\r')
|
||
GPT_ST=$(echo "$RAW_GPT_ST" | tr -d '"'\''\`\$\|&;<>\n\r')
|
||
|
||
if [ -n "$NODE_ID" ] && [ -n "$SCORE" ]; then
|
||
db_exec "INSERT INTO ip_trend_log (node_name, scam_score, goog_status, nf_status, gpt_status) VALUES ('$NODE_ID', '$SCORE', '$GOOG_ST', '$NF_ST', '$GPT_ST');"
|
||
|
||
if [ -n "$CB_ID" ]; then
|
||
curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/answerCallbackQuery" \
|
||
-d "callback_query_id=${CB_ID}" \
|
||
-d "text=✅ 报告已成功录入趋势库！" \
|
||
-d "show_alert=false" > /dev/null
|
||
fi
|
||
|
||
# 无损修改原消息，擦除入库按钮保留逃生舱
|
||
if [ -n "$MSG_ID" ]; then
|
||
curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/editMessageReplyMarkup" \
|
||
-H "Content-Type: application/json" \
|
||
-d "{\"chat_id\":\"${CHAT_ID}\",\"message_id\":\"${MSG_ID}\",\"reply_markup\":{\"inline_keyboard\":[[{\"text\":\"✅ 此报告已存档\",\"callback_data\":\"ignore\"}],[{\"text\":\"⚙️ 调出该节点控制台\",\"callback_data\":\"manage:${NODE_ID}\"}]]}}" > /dev/null
|
||
fi
|
||
else
|
||
if [ -n "$CB_ID" ]; then
|
||
curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/answerCallbackQuery" \
|
||
-d "callback_query_id=${CB_ID}" \
|
||
-d "text=❌ 数据解析失败，入库中止。" \
|
||
-d "show_alert=true" > /dev/null
|
||
fi
|
||
fi
|
||
continue
|
||
fi
|
||
|
||
REPLY_TO_TEXT=$(echo "$UPDATE" | jq -r '.message.reply_to_message.text // empty')
|
||
|
||
# ----------------------------------------------------------
|
||
# [业务流 B] 拦截并解析别名重命名回执
|
||
# ----------------------------------------------------------
|
||
if [[ "$REPLY_TO_TEXT" == *"✏️ 请回复本消息以重命名节点:"* ]]; then
|
||
TARGET_NODE=$(echo "$REPLY_TO_TEXT" | grep -v "✏️" | grep -v "仅限" | tr -d '\` ' | tr -cd 'a-zA-Z0-9_.-' | head -n 1)
|
||
|
||
# 黑名单清洗策略，保护内部路由特征并容纳 Unicode
|
||
NEW_ALIAS=$(echo "$TEXT" | sed 's/_/-/g' | tr -d '"'\''\`\$\|&;<>\n\r:' | cut -c 1-30)
|
||
|
||
if [ -n "$TARGET_NODE" ] && [ -n "$NEW_ALIAS" ]; then
|
||
TEXT="do_rename:${TARGET_NODE}:${NEW_ALIAS}"
|
||
fi
|
||
fi
|
||
|
||
# 消除终端 UI 加载状态圈
|
||
if [ -n "$CB_ID" ]; then
|
||
curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/answerCallbackQuery" -d "callback_query_id=${CB_ID}" > /dev/null
|
||
fi
|
||
|
||
# ----------------------------------------------------------
|
||
# [业务流 C] 节点注册与通讯架构解包通道
|
||
# ----------------------------------------------------------
|
||
if [[ "$TEXT" == *"#REGISTER#"* ]]; then
|
||
REG_LINE=$(echo "$TEXT" | grep "#REGISTER#" | head -n 1 | tr -d '\` ')
|
||
|
||
# 兼容性拆包: 自动判定不同世代版本的挂载载荷
|
||
FIELD_COUNT=$(echo "$REG_LINE" | awk -F'|' '{print NF}')
|
||
if [ "$FIELD_COUNT" -ge 7 ]; then
|
||
IFS='|' read -r MAGIC RAW_REGION RAW_NODE RAW_IP RAW_PORT RAW_ALIAS RAW_OTA <<< "$REG_LINE"
|
||
elif [ "$FIELD_COUNT" -eq 6 ]; then
|
||
IFS='|' read -r MAGIC RAW_REGION RAW_NODE RAW_IP RAW_PORT RAW_ALIAS <<< "$REG_LINE"
|
||
RAW_OTA="false"
|
||
elif [ "$FIELD_COUNT" -eq 5 ]; then
|
||
IFS='|' read -r MAGIC RAW_REGION RAW_NODE RAW_IP RAW_PORT <<< "$REG_LINE"
|
||
RAW_ALIAS="$RAW_NODE"
|
||
RAW_OTA="false"
|
||
else
|
||
IFS='|' read -r MAGIC RAW_NODE RAW_IP RAW_PORT <<< "$REG_LINE"
|
||
RAW_REGION="UNKNOWN"
|
||
RAW_ALIAS="$RAW_NODE"
|
||
RAW_OTA="false"
|
||
fi
|
||
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
AGENT_REGION=$(echo "$RAW_REGION" | tr -cd 'a-zA-Z0-9' | cut -c 1-10)
|
||
NODE_NAME=$(echo "$RAW_NODE" | tr -cd 'a-zA-Z0-9_.-' | cut -c 1-30)
|
||
AGENT_IP=$(echo "$RAW_IP" | tr -cd 'a-zA-Z0-9.:\[\]-' | cut -c 1-50)
|
||
AGENT_PORT=$(echo "$RAW_PORT" | tr -cd '0-9' | cut -c 1-5)
|
||
NODE_ALIAS=$(echo "$RAW_ALIAS" | tr -d '"'\''\`\$\|&;<>\n\r' | cut -c 1-30)
|
||
[ -z "$NODE_ALIAS" ] && NODE_ALIAS="$NODE_NAME"
|
||
AGENT_OTA=$(echo "$RAW_OTA" | tr -cd 'a-z')
|
||
[ -z "$AGENT_OTA" ] && AGENT_OTA="false"
|
||
|
||
# SSRF 拦截墙
|
||
if [[ "$AGENT_IP" =~ ^127\.|^10\.|^192\.168\.|^172\.(1[6-9]|2[0-9]|3[0-1])\.|^::1$|^localhost$ ]]; then
|
||
send_msg "$CHAT_ID" "⛔ **安全拦截**：禁止注册内网或回环 IP，防止 SSRF 攻击渗透。"
|
||
continue
|
||
fi
|
||
|
||
if [ -z "$NODE_NAME" ] || [ -z "$AGENT_IP" ] || [ -z "$AGENT_PORT" ] || [ -z "$CHAT_ID" ]; then
|
||
send_msg "$CHAT_ID" "⛔ **安全拦截**：检测到非法注册载荷，请求已拒绝。"
|
||
continue
|
||
fi
|
||
|
||
db_exec "INSERT INTO nodes (chat_id, node_name, agent_ip, agent_port, last_seen, region, node_alias, enable_ota) VALUES ('$CHAT_ID', '$NODE_NAME', '$AGENT_IP', '$AGENT_PORT', CURRENT_TIMESTAMP, '$AGENT_REGION', '$NODE_ALIAS', '$AGENT_OTA') ON CONFLICT(chat_id, node_name) DO UPDATE SET agent_ip='$AGENT_IP', agent_port='$AGENT_PORT', last_seen=CURRENT_TIMESTAMP, region='$AGENT_REGION', node_alias='$NODE_ALIAS', enable_ota='$AGENT_OTA';"
|
||
send_msg "$CHAT_ID" "✅ **司令部确认 (v${MASTER_VERSION})**%0A节点 \`${NODE_ALIAS}\` 档案已录入！"
|
||
|
||
REGION_DATA=$(db_exec "SELECT region, COUNT(*) FROM nodes WHERE chat_id='$CHAT_ID' GROUP BY region;")
|
||
if [ -n "$REGION_DATA" ]; then
|
||
BTNS="["
|
||
while IFS='|' read -r REGION_NAME NODE_COUNT; do
|
||
[ -z "$REGION_NAME" ] && REGION_NAME="UNKNOWN"
|
||
FLAG=$(get_flag "$REGION_NAME")
|
||
BTNS="$BTNS[{\"text\":\"$FLAG $REGION_NAME ($NODE_COUNT 台)\",\"callback_data\":\"region:$REGION_NAME\"}],"
|
||
done <<< "$REGION_DATA"
|
||
BTNS="${BTNS%,}]"
|
||
send_ui "$CHAT_ID" "🌍 **全视界战略雷达**\n请选择要检阅的战区：" "$BTNS"
|
||
fi
|
||
continue
|
||
fi
|
||
|
||
# ----------------------------------------------------------
|
||
# [业务流 D] 控制中枢指令集与面板呈现引擎
|
||
# ----------------------------------------------------------
|
||
case "$TEXT" in
|
||
"/start"|"/menu")
|
||
REMOTE_VER=$(curl -s -m 2 "${REPO_RAW_URL}/version.txt" | grep "^MASTER_VERSION=" | cut -d'=' -f2 | tr -d '[:space:]')
|
||
VER_INFO="当前版本: \`v${MASTER_VERSION}\`"
|
||
|
||
BTN_MASTER_OTA=""
|
||
if [ -n "$REMOTE_VER" ]; then
|
||
if [ "$REMOTE_VER" != "$MASTER_VERSION" ]; then
|
||
VER_INFO="${VER_INFO}\n✨ **发现新版本**: \`v${REMOTE_VER}\` (可执行中枢热重载)"
|
||
if [ "$IS_OFFICIAL_GATEWAY" != "true" ] && [ "${ENABLE_MASTER_OTA:-false}" == "true" ]; then
|
||
BTN_MASTER_OTA="[{\"text\":\"🆙 升级控制中枢至 v${REMOTE_VER}\",\"callback_data\":\"master_ota_confirm\"}],"
|
||
fi
|
||
else
|
||
VER_INFO="当前版本: \`v${MASTER_VERSION}\` (✅已是最新)"
|
||
fi
|
||
fi
|
||
|
||
NODE_COUNT=$(db_exec "SELECT COUNT(*) FROM nodes WHERE chat_id='$CHAT_ID';")
|
||
|
||
if [ "$IS_OFFICIAL_GATEWAY" != "true" ]; then
|
||
BTNS="[${BTN_MASTER_OTA}[{\"text\":\"🌍 进入全球雷达 (管理节点)\",\"callback_data\":\"list_nodes\"}], [{\"text\":\"🚀 唤醒全局巡逻\",\"callback_data\":\"all_run\"}, {\"text\":\"📊 获取全局简报\",\"callback_data\":\"all_reports\"}], [{\"text\":\"🔄 全网节点 OTA 热重载\",\"callback_data\":\"all_ota_confirm\"}], [{\"text\":\"🌟 前往 GitHub 点亮星标\",\"url\":\"https://github.com/hotyue/IP-Sentinel\"}]]"
|
||
else
|
||
BTNS="[[{\"text\":\"🌍 进入全球雷达 (管理节点)\",\"callback_data\":\"list_nodes\"}], [{\"text\":\"🚀 唤醒全局巡逻\",\"callback_data\":\"all_run\"}, {\"text\":\"📊 获取全局简报\",\"callback_data\":\"all_reports\"}], [{\"text\":\"🌟 前往 GitHub 点亮星标\",\"url\":\"https://github.com/hotyue/IP-Sentinel\"}]]"
|
||
fi
|
||
DISP_MASTER="${MASTER_NODE_NAME:-未命名中枢}"
|
||
# [UI 微调] 移除 📍 棒棒糖图标，保持与 "当前版本: " 的 4 个汉字对齐
|
||
TEXT_MSG="🛡️ **IP-Sentinel 控制中枢**\n${VER_INFO}\n中枢节点: \`${DISP_MASTER}\`\n\n📊 节点状态: 共有 \`${NODE_COUNT}\` 台节点在线\n欢迎回来，管理者。请下达系统指令："
|
||
send_ui "$CHAT_ID" "$TEXT_MSG" "$BTNS"
|
||
;;
|
||
|
||
"all_ota_confirm")
|
||
CONFIRM_BTNS="[[{\"text\":\"🚨 我已了解风险，下发核按钮指令！\",\"callback_data\":\"all_ota_execute\"}], [{\"text\":\"取消操作\",\"callback_data\":\"/start\"}]]"
|
||
WARNING_MSG="☢️ **【最高指令：全舰队 OTA 升级】**\n\n此操作将向您名下**所有开启 OTA 权限的节点**下发重组指令，强制从云端拉取最新代码并进行热重载。\n\n⚠️ **核按钮风险提示**：\n1. 升级过程中守护进程会短暂重启，节点可能出现临时离线。\n2. 若遇 GitHub 源屏蔽或网络极度恶劣，少数节点可能需要手动干预。\n\n**是否确定挂载并执行 OTA 指令？**"
|
||
send_ui "$CHAT_ID" "$WARNING_MSG" "$CONFIRM_BTNS"
|
||
;;
|
||
|
||
"all_ota_execute")
|
||
NODE_DATA=$(db_exec "SELECT node_name, agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID' AND enable_ota='true';")
|
||
if [ -z "$NODE_DATA" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 您名下暂无开启 OTA 权限的在线节点。"
|
||
else
|
||
send_msg "$CHAT_ID" "📢 **司令部指令下达：正在唤醒全舰队执行 OTA 升级...**%0A*(节点升级成功后会主动发回新的入库确认，请注意查收)*"
|
||
echo "$NODE_DATA" | while IFS='|' read -r NNAME AIP APORT; do
|
||
call_agent "$AIP" "$APORT" "/trigger_ota" > /dev/null &
|
||
sleep 0.3
|
||
done
|
||
fi
|
||
;;
|
||
|
||
"master_ota_confirm")
|
||
CONFIRM_BTNS="[[{\"text\":\"🚨 确认重构司令部\",\"callback_data\":\"master_ota_execute\"}], [{\"text\":\"取消操作\",\"callback_data\":\"/start\"}]]"
|
||
WARNING_MSG="☢️ **【最高指令：中枢金蝉脱壳】**\n\n此操作将拉取最新源码并强行覆盖司令部核心进程。\n\n⚠️ **风险提示**：\n升级期间司令部将短暂失联（约3-5秒）。完成后会自动发送捷报。\n\n**是否确定执行司令部自我升级？**"
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_ui "$CHAT_ID" "$MSG_ID" "$WARNING_MSG" "$CONFIRM_BTNS"
|
||
else
|
||
send_ui "$CHAT_ID" "$WARNING_MSG" "$CONFIRM_BTNS"
|
||
fi
|
||
;;
|
||
|
||
"master_ota_execute")
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_msg "$CHAT_ID" "$MSG_ID" "⏳ 正在下载重构图纸，司令部即将进入静默重启..."
|
||
else
|
||
send_msg "$CHAT_ID" "⏳ 正在下载重构图纸，司令部即将进入静默重启..."
|
||
fi
|
||
|
||
curl -fsSL "${REPO_RAW_URL}/master/install_master.sh" -o "/tmp/install_master.sh"
|
||
|
||
# [OTA 防砖机制] 严格校验脚本语法完整性，防止传输中断导致司令部失联
|
||
if ! bash -n "/tmp/install_master.sh" >/dev/null 2>&1; then
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_msg "$CHAT_ID" "$MSG_ID" "❌ OTA 传输受损：脚本下载不完整，已触发防砖熔断，升级取消！"
|
||
else
|
||
send_msg "$CHAT_ID" "❌ OTA 传输受损：脚本下载不完整，已触发防砖熔断，升级取消！"
|
||
fi
|
||
continue
|
||
fi
|
||
|
||
chmod +x "/tmp/install_master.sh"
|
||
|
||
if command -v systemd-run >/dev/null 2>&1; then
|
||
systemd-run --quiet --no-block /bin/bash -c "export SILENT_MASTER_OTA='true'; export OTA_CHAT_ID='$CHAT_ID'; bash /tmp/install_master.sh"
|
||
else
|
||
export SILENT_MASTER_OTA="true"
|
||
export OTA_CHAT_ID="$CHAT_ID"
|
||
nohup bash /tmp/install_master.sh >/dev/null 2>&1 & disown
|
||
fi
|
||
sleep 10
|
||
;;
|
||
|
||
"all_reports")
|
||
NODE_DATA=$(db_exec "SELECT node_name, agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID';")
|
||
if [ -z "$NODE_DATA" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 您名下暂无在线节点。"
|
||
else
|
||
send_msg "$CHAT_ID" "📢 **司令部指令下达：正在召唤所有哨兵回传简报...**%0A*(为防止触发 TG 官方限流，简报将排队依次送达，请耐心等待)*"
|
||
echo "$NODE_DATA" | while IFS='|' read -r NNAME AIP APORT; do
|
||
call_agent "$AIP" "$APORT" "/trigger_report" > /dev/null &
|
||
sleep 2
|
||
done
|
||
fi
|
||
;;
|
||
|
||
"all_run")
|
||
NODE_DATA=$(db_exec "SELECT node_name, agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID';")
|
||
if [ -z "$NODE_DATA" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 您名下暂无在线节点。"
|
||
else
|
||
send_msg "$CHAT_ID" "📢 **司令部指令下达：正在唤醒所有哨兵执行系统维护...**"
|
||
echo "$NODE_DATA" | while IFS='|' read -r NNAME AIP APORT; do
|
||
call_agent "$AIP" "$APORT" "/trigger_run" > /dev/null &
|
||
sleep 0.2
|
||
done
|
||
fi
|
||
;;
|
||
|
||
"/quality"|"/quality@"*)
|
||
TARGET_NODE=$(echo "$TEXT" | awk '{print $2}')
|
||
if [ -z "$TARGET_NODE" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 请指定目标节点。例如: \`/quality HK-1\`%0A或通过雷达面板进行选择操作。"
|
||
else
|
||
TARGET_NODE=$(echo "$TARGET_NODE" | tr -cd 'a-zA-Z0-9_.-')
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
AGENT_INFO=$(db_exec "SELECT agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
AGENT_IP=$(echo "$AGENT_INFO" | cut -d'|' -f1)
|
||
AGENT_PORT=$(echo "$AGENT_INFO" | cut -d'|' -f2)
|
||
|
||
if [ -n "$AGENT_IP" ] && [ -n "$AGENT_PORT" ]; then
|
||
send_msg "$CHAT_ID" "⏳ 正在向 \`$TARGET_NODE\` ($AGENT_IP) 下发 [quality] 指令，请稍候..."
|
||
|
||
RESPONSE=$(call_agent "$AGENT_IP" "$AGENT_PORT" "/trigger_quality")
|
||
|
||
if [ "$RESPONSE" == "FAILED" ]; then
|
||
send_msg "$CHAT_ID" "❌ 指令下发超时或失败！请检查节点公网 IP 或防火墙端口 ($AGENT_PORT) 是否放行。"
|
||
elif [[ "$RESPONSE" == *"403"* ]]; then
|
||
send_msg "$CHAT_ID" "⚠️ **拒绝执行**：该节点未在本地开启此模块，请检查安装时的配置！"
|
||
else
|
||
send_msg "$CHAT_ID" "✅ 节点 \`$TARGET_NODE\` 回应: 🔍 深海声呐已投放！请等待异步战报回传。"
|
||
fi
|
||
else
|
||
send_msg "$CHAT_ID" "❌ 数据库中未找到该节点的通讯地址。"
|
||
fi
|
||
fi
|
||
;;
|
||
|
||
"/trend"|"/trend@"*)
|
||
TARGET_NODE=$(echo "$TEXT" | awk '{print $2}')
|
||
if [ -z "$TARGET_NODE" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 请指定目标节点。例如: \`/trend HK-1\`%0A或通过雷达面板进行选择操作。"
|
||
else
|
||
TARGET_NODE=$(echo "$TARGET_NODE" | tr -cd 'a-zA-Z0-9_.-')
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
TREND_DATA=$(db_exec "SELECT datetime(check_time, 'localtime'), scam_score, goog_status, nf_status, gpt_status FROM ip_trend_log WHERE node_name='$TARGET_NODE' ORDER BY check_time DESC LIMIT 15;")
|
||
|
||
if [ -z "$TREND_DATA" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 节点 \`$TARGET_NODE\` 暂无历史体检档案。请先执行 /quality 投放声呐进行探测。"
|
||
else
|
||
TARGET_ALIAS=$(db_exec "SELECT IFNULL(node_alias, node_name) FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
[ -z "$TARGET_ALIAS" ] && TARGET_ALIAS="$TARGET_NODE"
|
||
|
||
TEXT_RES="📈 *[${TARGET_ALIAS}] 历史态势感知 (近15次)*\n\n"
|
||
TEXT_RES+="时间(本地) | 风险 | 谷歌 | NF | GPT\n"
|
||
TEXT_RES+="-----------------------------------------\n"
|
||
|
||
while IFS='|' read -r c_time score goog nf gpt; do
|
||
[ -z "$score" ] && score="0"
|
||
[ -z "$goog" ] && goog="未知"
|
||
[ -z "$nf" ] && nf="未知"
|
||
[ -z "$gpt" ] && gpt="未知"
|
||
|
||
short_time=$(echo "$c_time" | cut -c 6-16)
|
||
|
||
if [ "$score" -le 20 ]; then SCORE_EMJ="🟢"
|
||
elif [ "$score" -le 60 ]; then SCORE_EMJ="🟡"
|
||
else SCORE_EMJ="🔴"
|
||
fi
|
||
|
||
TEXT_RES+="\`${short_time}\` | ${SCORE_EMJ}\`${score}\` | \`${goog}\` | \`${nf}\` | \`${gpt}\`\n"
|
||
done <<< "$TREND_DATA"
|
||
TEXT_RES+="\n_💡 提示：🔴风险分 >60 极易触发网页验证码拦截；谷歌显示 CN 即为高危送中。_"
|
||
|
||
BTNS="[[{\"text\":\"⚙️ 调出该节点控制台\",\"callback_data\":\"manage:$TARGET_NODE\"}]]"
|
||
send_ui "$CHAT_ID" "$TEXT_RES" "$BTNS"
|
||
fi
|
||
fi
|
||
;;
|
||
|
||
"list_nodes")
|
||
REGION_DATA=$(db_exec "SELECT region, COUNT(*) FROM nodes WHERE chat_id='$CHAT_ID' GROUP BY region;")
|
||
if [ -z "$REGION_DATA" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 您名下暂无在线节点，请先在边缘机执行部署。"
|
||
else
|
||
BTNS="["
|
||
while IFS='|' read -r REGION_NAME NODE_COUNT; do
|
||
[ -z "$REGION_NAME" ] && REGION_NAME="UNKNOWN"
|
||
FLAG=$(get_flag "$REGION_NAME")
|
||
BTNS="$BTNS[{\"text\":\"$FLAG $REGION_NAME ($NODE_COUNT 台)\",\"callback_data\":\"region:$REGION_NAME\"}],"
|
||
done <<< "$REGION_DATA"
|
||
BTNS="$BTNS[{\"text\":\"🏠 回到司令部\",\"callback_data\":\"/start\"}]]"
|
||
send_ui "$CHAT_ID" "🌍 **全视界战略雷达**\n已为您聚合当前舰队的部署大区，请选择要检阅的战区：" "$BTNS"
|
||
fi
|
||
;;
|
||
|
||
region:*)
|
||
TARGET_REGION=$(echo "${TEXT#*:}" | tr -cd 'a-zA-Z0-9')
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
NODE_LIST=$(db_exec "SELECT node_name, IFNULL(node_alias, node_name) FROM nodes WHERE chat_id='$CHAT_ID' AND region='$TARGET_REGION';")
|
||
if [ -z "$NODE_LIST" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 该战区下暂无可用节点。"
|
||
else
|
||
BTNS="["
|
||
COL=0
|
||
ROW_STR="["
|
||
while IFS='|' read -r N_NAME N_ALIAS; do
|
||
[ -z "$N_NAME" ] && continue
|
||
ROW_STR="$ROW_STR{\"text\":\"🖥️ $N_ALIAS\",\"callback_data\":\"manage:$N_NAME\"},"
|
||
COL=$((COL+1))
|
||
if [ $COL -eq 2 ]; then
|
||
ROW_STR="${ROW_STR%,}]"
|
||
BTNS="$BTNS$ROW_STR,"
|
||
COL=0
|
||
ROW_STR="["
|
||
fi
|
||
done <<< "$NODE_LIST"
|
||
if [ $COL -eq 1 ]; then
|
||
ROW_STR="${ROW_STR%,}]"
|
||
BTNS="$BTNS$ROW_STR,"
|
||
fi
|
||
BTNS="$BTNS[{\"text\":\"⬅️ 返回战区地图\",\"callback_data\":\"list_nodes\"}, {\"text\":\"🏠 回到司令部\",\"callback_data\":\"/start\"}]]"
|
||
send_ui "$CHAT_ID" "📍 **[$TARGET_REGION] 战区哨兵矩阵**\n请锁定要执行战术动作的具体目标：" "$BTNS"
|
||
fi
|
||
;;
|
||
|
||
manage:*)
|
||
TARGET_NODE=$(echo "${TEXT#*:}" | tr -cd 'a-zA-Z0-9_.-')
|
||
TARGET_ALIAS=$(db_exec "SELECT IFNULL(node_alias, node_name) FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
[ -z "$TARGET_ALIAS" ] && TARGET_ALIAS="$TARGET_NODE"
|
||
|
||
TOGGLE_INFO=$(db_exec "SELECT enable_google, enable_trust, enable_ota, agent_ip, IFNULL(last_seen, '未知') FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
ST_GOOGLE=$(echo "$TOGGLE_INFO" | cut -d'|' -f1)
|
||
ST_TRUST=$(echo "$TOGGLE_INFO" | cut -d'|' -f2)
|
||
ST_OTA=$(echo "$TOGGLE_INFO" | cut -d'|' -f3)
|
||
A_IP=$(echo "$TOGGLE_INFO" | cut -d'|' -f4)
|
||
LAST_SEEN=$(echo "$TOGGLE_INFO" | cut -d'|' -f5)
|
||
|
||
[ "$ST_GOOGLE" == "true" ] && BTN_G="🟢 Google巡逻: 已开" && ACT_G="false" || { BTN_G="🔴 Google巡逻: 已停"; ACT_G="true"; }
|
||
[ "$ST_TRUST" == "true" ] && BTN_T="🟢 信用净化: 已开" && ACT_T="false" || { BTN_T="🔴 信用净化: 已停"; ACT_T="true"; }
|
||
|
||
BTN_ACTION="[{\"text\":\"📍 触发 Google 纠偏\",\"callback_data\":\"google:$TARGET_NODE\"}, {\"text\":\"🛡️ 触发信用净化\",\"callback_data\":\"trust:$TARGET_NODE\"}], [{\"text\":\"🔍 投放深海声呐 (查IP质量)\",\"callback_data\":\"quality:$TARGET_NODE\"}, {\"text\":\"📈 查看 IP 污染趋势图\",\"callback_data\":\"trend:$TARGET_NODE\"}], [{\"text\":\"📜 提取终端实时日志\",\"callback_data\":\"log:$TARGET_NODE\"}, {\"text\":\"📊 生成单机战报\",\"callback_data\":\"report:$TARGET_NODE\"}]"
|
||
BTN_TOGGLE="[{\"text\":\"$BTN_G\",\"callback_data\":\"toggle:google:$TARGET_NODE:$ACT_G\"}, {\"text\":\"$BTN_T\",\"callback_data\":\"toggle:trust:$TARGET_NODE:$ACT_T\"}]"
|
||
|
||
if [ "$IS_OFFICIAL_GATEWAY" != "true" ] && [ "$ST_OTA" == "true" ]; then
|
||
BTN_CONFIG="[{\"text\":\"✏️ 更改终端展示代号\",\"callback_data\":\"rename:$TARGET_NODE\"}, {\"text\":\"🆙 OTA 静默升级\",\"callback_data\":\"ota_confirm:$TARGET_NODE\"}]"
|
||
else
|
||
BTN_CONFIG="[{\"text\":\"✏️ 更改终端展示代号\",\"callback_data\":\"rename:$TARGET_NODE\"}]"
|
||
fi
|
||
|
||
BTN_DANGER="[{\"text\":\"🗑️ 从中枢销毁该档案\",\"callback_data\":\"del:$TARGET_NODE\"}, {\"text\":\"⬅️ 返回战区列表\",\"callback_data\":\"list_nodes\"}]"
|
||
|
||
BTNS="[$BTN_ACTION, $BTN_TOGGLE, $BTN_CONFIG, $BTN_DANGER]"
|
||
TEXT_MSG="⚙️ **目标锁定**: \`$TARGET_ALIAS\`\n(底层标识: \`$TARGET_NODE\`)\n🌐 IP 坐标: \`$A_IP\`\n🕒 最后通讯: \`$LAST_SEEN\`\n\n请下达精确控制指令："
|
||
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_ui "$CHAT_ID" "$MSG_ID" "$TEXT_MSG" "$BTNS"
|
||
else
|
||
send_ui "$CHAT_ID" "$TEXT_MSG" "$BTNS"
|
||
fi
|
||
;;
|
||
|
||
toggle:*)
|
||
IFS=':' read -r CMD MOD_NAME TARGET_NODE TARGET_STATE <<< "$TEXT"
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
AGENT_INFO=$(db_exec "SELECT agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
AGENT_IP=$(echo "$AGENT_INFO" | cut -d'|' -f1)
|
||
AGENT_PORT=$(echo "$AGENT_INFO" | cut -d'|' -f2)
|
||
|
||
if [ -n "$AGENT_IP" ] && [ -n "$AGENT_PORT" ]; then
|
||
RESPONSE=$(call_agent "$AGENT_IP" "$AGENT_PORT" "/trigger_toggle" "&mod=${MOD_NAME}&state=${TARGET_STATE}")
|
||
|
||
if [[ "$RESPONSE" == *"Action Accepted"* ]]; then
|
||
db_exec "UPDATE nodes SET enable_${MOD_NAME}='$TARGET_STATE' WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE';"
|
||
|
||
TOGGLE_INFO=$(db_exec "SELECT enable_google, enable_trust FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
ST_GOOGLE=$(echo "$TOGGLE_INFO" | cut -d'|' -f1)
|
||
ST_TRUST=$(echo "$TOGGLE_INFO" | cut -d'|' -f2)
|
||
[ "$ST_GOOGLE" == "true" ] && BTN_G="🔴 停用 Google 纠偏" && ACT_G="false" || { BTN_G="🟢 启用 Google 纠偏"; ACT_G="true"; }
|
||
[ "$ST_TRUST" == "true" ] && BTN_T="🔴 停用信用净化" && ACT_T="false" || { BTN_T="🟢 启用信用净化"; ACT_T="true"; }
|
||
|
||
TOGGLE_INFO=$(db_exec "SELECT enable_google, enable_trust, enable_ota, agent_ip, IFNULL(last_seen, '未知') FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
ST_GOOGLE=$(echo "$TOGGLE_INFO" | cut -d'|' -f1)
|
||
ST_TRUST=$(echo "$TOGGLE_INFO" | cut -d'|' -f2)
|
||
ST_OTA=$(echo "$TOGGLE_INFO" | cut -d'|' -f3)
|
||
A_IP=$(echo "$TOGGLE_INFO" | cut -d'|' -f4)
|
||
LAST_SEEN=$(echo "$TOGGLE_INFO" | cut -d'|' -f5)
|
||
|
||
[ "$ST_GOOGLE" == "true" ] && BTN_G="🟢 Google巡逻: 已开" && ACT_G="false" || { BTN_G="🔴 Google巡逻: 已停"; ACT_G="true"; }
|
||
[ "$ST_TRUST" == "true" ] && BTN_T="🟢 信用净化: 已开" && ACT_T="false" || { BTN_T="🔴 信用净化: 已停"; ACT_T="true"; }
|
||
|
||
BTN_ACTION="[{\"text\":\"📍 触发 Google 纠偏\",\"callback_data\":\"google:$TARGET_NODE\"}, {\"text\":\"🛡️ 触发信用净化\",\"callback_data\":\"trust:$TARGET_NODE\"}], [{\"text\":\"🔍 投放深海声呐 (查IP质量)\",\"callback_data\":\"quality:$TARGET_NODE\"}, {\"text\":\"📈 查看 IP 污染趋势图\",\"callback_data\":\"trend:$TARGET_NODE\"}], [{\"text\":\"📜 提取终端实时日志\",\"callback_data\":\"log:$TARGET_NODE\"}, {\"text\":\"📊 生成单机战报\",\"callback_data\":\"report:$TARGET_NODE\"}]"
|
||
BTN_TOGGLE="[{\"text\":\"$BTN_G\",\"callback_data\":\"toggle:google:$TARGET_NODE:$ACT_G\"}, {\"text\":\"$BTN_T\",\"callback_data\":\"toggle:trust:$TARGET_NODE:$ACT_T\"}]"
|
||
|
||
if [ "$IS_OFFICIAL_GATEWAY" != "true" ] && [ "$ST_OTA" == "true" ]; then
|
||
BTN_CONFIG="[{\"text\":\"✏️ 更改终端展示代号\",\"callback_data\":\"rename:$TARGET_NODE\"}, {\"text\":\"🆙 OTA 静默升级\",\"callback_data\":\"ota_confirm:$TARGET_NODE\"}]"
|
||
else
|
||
BTN_CONFIG="[{\"text\":\"✏️ 更改终端展示代号\",\"callback_data\":\"rename:$TARGET_NODE\"}]"
|
||
fi
|
||
BTN_DANGER="[{\"text\":\"🗑️ 从中枢销毁该档案\",\"callback_data\":\"del:$TARGET_NODE\"}, {\"text\":\"⬅️ 返回战区列表\",\"callback_data\":\"list_nodes\"}]"
|
||
|
||
BTNS="[$BTN_ACTION, $BTN_TOGGLE, $BTN_CONFIG, $BTN_DANGER]"
|
||
TARGET_ALIAS=$(db_exec "SELECT IFNULL(node_alias, node_name) FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
|
||
TEXT_MSG="⚙️ **目标锁定**: \`$TARGET_ALIAS\`\n(底层标识: \`$TARGET_NODE\`)\n🌐 IP 坐标: \`$A_IP\`\n🕒 最后通讯: \`$LAST_SEEN\`\n\n✅ **执行成功**: 模块 [$MOD_NAME] 状态已切换为 $TARGET_STATE！"
|
||
edit_ui "$CHAT_ID" "$MSG_ID" "$TEXT_MSG" "$BTNS"
|
||
else
|
||
send_msg "$CHAT_ID" "❌ 指令下发失败，安全策略禁止降级重试。"
|
||
fi
|
||
fi
|
||
;;
|
||
|
||
del:*)
|
||
TARGET_NODE=$(echo "${TEXT#*:}" | tr -cd 'a-zA-Z0-9_.-')
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
# [验权防御] 防止通过伪造回调接口越权摧毁他人节点档案
|
||
VALID_OWNER=$(db_exec "SELECT 1 FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
|
||
if [ "$VALID_OWNER" == "1" ]; then
|
||
db_exec "DELETE FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE';"
|
||
db_exec "DELETE FROM ip_trend_log WHERE node_name='$TARGET_NODE';"
|
||
send_msg "$CHAT_ID" "🗑️ 节点 \`$TARGET_NODE\` 的档案及历史污染趋势已从司令部彻底销毁！"
|
||
else
|
||
send_msg "$CHAT_ID" "⛔ **安全拦截**：销毁失败。目标节点不存在或您无权越权操作！"
|
||
continue
|
||
fi
|
||
|
||
REGION_DATA=$(db_exec "SELECT region, COUNT(*) FROM nodes WHERE chat_id='$CHAT_ID' GROUP BY region;")
|
||
if [ -z "$REGION_DATA" ]; then
|
||
send_msg "$CHAT_ID" "⚠️ 当前司令部已无任何节点挂载。"
|
||
else
|
||
BTNS="["
|
||
while IFS='|' read -r REGION_NAME NODE_COUNT; do
|
||
[ -z "$REGION_NAME" ] && REGION_NAME="UNKNOWN"
|
||
FLAG=$(get_flag "$REGION_NAME")
|
||
BTNS="$BTNS[{\"text\":\"$FLAG $REGION_NAME ($NODE_COUNT 台)\",\"callback_data\":\"region:$REGION_NAME\"}],"
|
||
done <<< "$REGION_DATA"
|
||
BTNS="${BTNS%,}]"
|
||
send_ui "$CHAT_ID" "🌍 刷新后的全视界雷达：" "$BTNS"
|
||
fi
|
||
;;
|
||
|
||
rename:*)
|
||
TARGET_NODE=$(echo "${TEXT#*:}" | tr -cd 'a-zA-Z0-9_.-')
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
curl -s -X POST "https://api.telegram.org/bot${TG_TOKEN}/sendMessage" \
|
||
-H "Content-Type: application/json" \
|
||
-d "{\"chat_id\":\"$CHAT_ID\",\"text\":\"✏️ 请回复本消息以重命名节点:\n\`$TARGET_NODE\`\n(仅限中英文、数字，最长20字符)\",\"parse_mode\":\"Markdown\",\"reply_markup\":{\"force_reply\":true}}" > /dev/null
|
||
;;
|
||
|
||
do_rename:*)
|
||
IFS=':' read -r CMD TARGET_NODE NEW_ALIAS <<< "$TEXT"
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
AGENT_INFO=$(db_exec "SELECT agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
AGENT_IP=$(echo "$AGENT_INFO" | cut -d'|' -f1)
|
||
AGENT_PORT=$(echo "$AGENT_INFO" | cut -d'|' -f2)
|
||
|
||
if [ -n "$AGENT_IP" ] && [ -n "$AGENT_PORT" ]; then
|
||
send_msg "$CHAT_ID" "⏳ 正在向 \`$TARGET_NODE\` 下发重命名指令，正在建立加密隧道..."
|
||
|
||
# [防线穿越] 借由 Base64 编码对下发特征进行混淆与防篡改护甲加持
|
||
ALIAS_B64=$(echo -n "$NEW_ALIAS" | base64 | tr -d '\n' | tr '+/' '-_')
|
||
RESPONSE=$(call_agent "$AGENT_IP" "$AGENT_PORT" "/trigger_rename" "&b64=${ALIAS_B64}")
|
||
|
||
if [ "$RESPONSE" == "FAILED" ]; then
|
||
send_msg "$CHAT_ID" "❌ 指令下发超时！为防范劫持风险，已终止请求。"
|
||
elif [[ "$RESPONSE" == *"Action Accepted"* ]]; then
|
||
db_exec "UPDATE nodes SET node_alias='$NEW_ALIAS' WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE';"
|
||
send_msg "$CHAT_ID" "✅ 通讯成功！节点别名已下发: \`$NEW_ALIAS\`%0A*(司令部档案已自动刷新，雷达面板已同步)*"
|
||
else
|
||
send_msg "$CHAT_ID" "⚠️ 节点拒绝了请求，请确保 Agent 已更新至 v3.5.2%0A(回传信息: \`${RESPONSE}\`)"
|
||
fi
|
||
else
|
||
send_msg "$CHAT_ID" "❌ 数据库中未找到该节点的通讯地址。"
|
||
fi
|
||
;;
|
||
|
||
ota_confirm:*)
|
||
TARGET_NODE=$(echo "${TEXT#*:}" | tr -cd 'a-zA-Z0-9_.-')
|
||
CONFIRM_BTNS="[[{\"text\":\"🚨 确认执行远程升级\",\"callback_data\":\"ota_execute:$TARGET_NODE\"}], [{\"text\":\"取消\",\"callback_data\":\"manage:$TARGET_NODE\"}]]"
|
||
send_ui "$CHAT_ID" "☢️ **操作确认**：即将向 \`$TARGET_NODE\` 下发 OTA 热更新指令。\n节点更新完成后会自动发送包含新版本号的注册回执，确定执行？" "$CONFIRM_BTNS"
|
||
;;
|
||
|
||
ota_execute:*)
|
||
TARGET_NODE=$(echo "${TEXT#*:}" | tr -cd 'a-zA-Z0-9_.-')
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
AGENT_INFO=$(db_exec "SELECT agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
AGENT_IP=$(echo "$AGENT_INFO" | cut -d'|' -f1)
|
||
AGENT_PORT=$(echo "$AGENT_INFO" | cut -d'|' -f2)
|
||
|
||
# [修正点] 必须保留这层外壳判断
|
||
if [ -n "$AGENT_IP" ] && [ -n "$AGENT_PORT" ]; then
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_msg "$CHAT_ID" "$MSG_ID" "⏳ 正在向 \`$TARGET_NODE\` 发送 OTA 触发报文..."
|
||
else
|
||
send_msg "$CHAT_ID" "⏳ 正在向 \`$TARGET_NODE\` 发送 OTA 触发报文..."
|
||
fi
|
||
|
||
RESPONSE=$(call_agent "$AGENT_IP" "$AGENT_PORT" "/trigger_ota")
|
||
|
||
if [ "$RESPONSE" == "FAILED" ]; then
|
||
TEXT_RES="❌ OTA 指令下发彻底失败！链路异常或严禁使用 HTTP 降级通讯。"
|
||
elif [[ "$RESPONSE" == *"403"* ]]; then
|
||
TEXT_RES="⚠️ **节点拒绝执行**：该节点本地未开启 OTA 权限或运行在官方网关下！"
|
||
else
|
||
TEXT_RES="✅ OTA (TLS加密) 触发成功！节点正在后台执行拉取重构..."
|
||
fi
|
||
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_msg "$CHAT_ID" "$MSG_ID" "$TEXT_RES"
|
||
else
|
||
send_msg "$CHAT_ID" "$TEXT_RES"
|
||
fi
|
||
else
|
||
send_msg "$CHAT_ID" "❌ 数据库中未找到该节点的通讯地址。"
|
||
fi
|
||
;;
|
||
|
||
google:*|trust:*|run:*|report:*|log:*|quality:*)
|
||
ACTION_TYPE=$(echo "$TEXT" | cut -d':' -f1)
|
||
TARGET_NODE=$(echo "$TEXT" | cut -d':' -f2 | tr -cd 'a-zA-Z0-9_.-')
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
AGENT_INFO=$(db_exec "SELECT agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
AGENT_IP=$(echo "$AGENT_INFO" | cut -d'|' -f1)
|
||
AGENT_PORT=$(echo "$AGENT_INFO" | cut -d'|' -f2)
|
||
|
||
# [修正点] 必须保留这层外壳判断
|
||
if [ -n "$AGENT_IP" ] && [ -n "$AGENT_PORT" ]; then
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_msg "$CHAT_ID" "$MSG_ID" "⏳ 正在向 \`$TARGET_NODE\` ($AGENT_IP) 下发 [$ACTION_TYPE] 指令，请稍候..."
|
||
else
|
||
send_msg "$CHAT_ID" "⏳ 正在向 \`$TARGET_NODE\` ($AGENT_IP) 下发 [$ACTION_TYPE] 指令，请稍候..."
|
||
fi
|
||
|
||
RESPONSE=$(call_agent "$AGENT_IP" "$AGENT_PORT" "/trigger_${ACTION_TYPE}")
|
||
|
||
if [ "$RESPONSE" == "FAILED" ]; then
|
||
TEXT_RES="❌ 指令下发超时或失败！为保护链路安全，已终止通信 (严禁降级为 HTTP)。"
|
||
elif [[ "$RESPONSE" == *"403"* ]]; then
|
||
TEXT_RES="⚠️ **拒绝执行**：该节点未在本地开启此模块，请检查安装时的配置！"
|
||
else
|
||
if [ "$ACTION_TYPE" == "google" ] || [ "$ACTION_TYPE" == "run" ]; then
|
||
TEXT_RES="✅ 节点 \`$TARGET_NODE\` 回应: 📍 Google 纠偏程序启动。"
|
||
elif [ "$ACTION_TYPE" == "trust" ]; then
|
||
TEXT_RES="✅ 节点 \`$TARGET_NODE\` 回应: 🛡️ IP 信用净化程序启动。"
|
||
elif [ "$ACTION_TYPE" == "quality" ]; then
|
||
TEXT_RES="✅ 节点 \`$TARGET_NODE\` 回应: 🔍 深海声呐已投放！请等待异步战报回传。"
|
||
elif [ "$ACTION_TYPE" == "log" ]; then
|
||
TEXT_RES="✅ 节点 \`$TARGET_NODE\` 正在抓取日志..."
|
||
else
|
||
TEXT_RES="✅ 节点 \`$TARGET_NODE\` 接收指令: $ACTION_TYPE"
|
||
fi
|
||
fi
|
||
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_msg "$CHAT_ID" "$MSG_ID" "$TEXT_RES"
|
||
else
|
||
send_msg "$CHAT_ID" "$TEXT_RES"
|
||
fi
|
||
else
|
||
send_msg "$CHAT_ID" "❌ 数据库中未找到该节点的通讯地址。"
|
||
fi
|
||
;;
|
||
|
||
|
||
trend:*)
|
||
# [态势感知面板] 提取近 15 次的历史追踪记录
|
||
TARGET_NODE=$(echo "${TEXT#*:}" | tr -cd 'a-zA-Z0-9_.-')
|
||
CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
|
||
|
||
TREND_DATA=$(db_exec "SELECT datetime(check_time, 'localtime'), scam_score, goog_status, nf_status, gpt_status FROM ip_trend_log WHERE node_name='$TARGET_NODE' ORDER BY check_time DESC LIMIT 15;")
|
||
|
||
if [ -z "$TREND_DATA" ]; then
|
||
TEXT_RES="⚠️ 节点 \`$TARGET_NODE\` 暂无历史体检档案。请先执行 [🔍 投放深海声呐] 进行探测。"
|
||
else
|
||
TARGET_ALIAS=$(db_exec "SELECT IFNULL(node_alias, node_name) FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
|
||
[ -z "$TARGET_ALIAS" ] && TARGET_ALIAS="$TARGET_NODE"
|
||
|
||
TEXT_RES="📈 *[${TARGET_ALIAS}] 历史态势感知 (近15次)*\n\n"
|
||
TEXT_RES+="时间(本地) | 风险 | 谷歌 | NF | GPT\n"
|
||
TEXT_RES+="-----------------------------------------\n"
|
||
|
||
while IFS='|' read -r c_time score goog nf gpt; do
|
||
[ -z "$score" ] && score="0"
|
||
[ -z "$goog" ] && goog="未知"
|
||
[ -z "$nf" ] && nf="未知"
|
||
[ -z "$gpt" ] && gpt="未知"
|
||
|
||
short_time=$(echo "$c_time" | cut -c 6-16)
|
||
|
||
if [ "$score" -le 20 ]; then SCORE_EMJ="🟢"
|
||
elif [ "$score" -le 60 ]; then SCORE_EMJ="🟡"
|
||
else SCORE_EMJ="🔴"
|
||
fi
|
||
|
||
TEXT_RES+="\`${short_time}\` | ${SCORE_EMJ}\`${score}\` | \`${goog}\` | \`${nf}\` | \`${gpt}\`\n"
|
||
done <<< "$TREND_DATA"
|
||
TEXT_RES+="\n_💡 提示：🔴风险分 >60 极易触发网页验证码拦截；谷歌显示 CN 即为高危送中。_"
|
||
fi
|
||
|
||
BTNS="[[{\"text\":\"⚙️ 调出该节点控制台\",\"callback_data\":\"manage:$TARGET_NODE\"}]]"
|
||
|
||
if [ -n "$MSG_ID" ]; then
|
||
edit_ui "$CHAT_ID" "$MSG_ID" "$TEXT_RES" "$BTNS"
|
||
else
|
||
send_ui "$CHAT_ID" "$TEXT_RES" "$BTNS"
|
||
fi
|
||
;;
|
||
|
||
esac
|
||
done
|
||
fi
|
||
sleep 1
|
||
done |