YwxAppThink/app/appmall/controller/api/Framework.php

<?php
// +----------------------------------------------------------------------
// | YwxApp [ WE CAN DO IT JUST THINK ]
// +----------------------------------------------------------------------
// | Copyright (c) 2026-2036 http://ywxapp.cn All rights reserved.
// +----------------------------------------------------------------------
// | Author: ywxapp<admin@ywxapp.cn>
// +----------------------------------------------------------------------

declare(strict_types=1);

namespace app\appmall\controller\api;

use think\facade\Config;
use think\facade\Db;
use think\facade\Request;

/**
 * 主框架升级服务 API
 *
 * 契约对齐客户端 ywxapp\service\FrameworkService：
 *  - GET /api/framework/version   返回最新版本 + 历史版本（客户端检测更新）
 *  - GET /api/framework/download  下载核心包 zip（可选签名校验）
 * 原 upgrade 插件功能，已合并进 appmall（应用服务中心）。
 */
class Framework
{
    /**
     * 版本列表 / 最新版本
     */
    public function version()
    {
        $this->ensureColumns();
        try {
            $rows = Db::name('appmall_framework_list')
                ->where('status', 1)
                ->order('id', 'desc')
                ->limit(20)
                ->field('id,version,title,changelog,type,from_version,patch_from,file_path,patch_path,install_path,create_at')
                ->select()
                ->toArray();
        } catch (\Exception $e) {
            return json(['code' => 0, 'msg' => '读取版本列表失败：' . $e->getMessage()]);
        }

        $latest = $rows[0] ?? null;
        $hasFull  = !empty($latest['file_path']);
        $hasPatch = !empty($latest['patch_path']);
        $hasInstall = !empty($latest['install_path'] ?? '');
        $patchFrom = $latest['patch_from'] ?? '';
        if ($patchFrom === '' && $hasPatch) {
            $patchFrom = $latest['from_version'] ?? '';
        }

        // 不向客户端泄露物理路径
        foreach ($rows as &$r) {
            $r['has_full']    = !empty($r['file_path']);
            $r['has_patch']   = !empty($r['patch_path']);
            $r['has_install'] = !empty($r['install_path']);
            unset($r['file_path'], $r['patch_path'], $r['install_path']);
        }
        unset($r);

        return json([
            'code' => 1,
            'msg'  => 'success',
            'data' => [
                'version'     => $latest['version'] ?? '',
                'title'       => $latest['title'] ?? '',
                'changelog'   => $latest['changelog'] ?? '',
                // 兼容旧客户端：type 只表达「整包缺失时才是纯补丁」
                'type'        => $hasFull ? 0 : ($hasPatch ? 1 : (int) ($latest['type'] ?? 0)),
                'from_version'=> $patchFrom,
                // 新协议：整包与补丁可同版本共存，客户端按自身版本择优
                'has_full'    => $hasFull,
                'has_patch'   => $hasPatch,
                'has_install' => $hasInstall,
                'patch_from'  => $patchFrom,
                'release_at'  => $latest['create_at'] ?? 0,
                'history'     => $rows,
            ],
        ]);
    }

    /**
     * 兼容已安装库：补齐 type / from_version / patch_* 列，并迁移旧「补丁行」数据
     */
    private function ensureColumns(): void
    {
        $table = \ywxapp\model\BaseModel::currentPrefix() . 'appmall_framework_list';
        try {
            // 列兜底由 FrameworkList 模型负责（事实源 app/appmall/install.sql），此处只保留历史数据迁移
            \app\appmall\model\FrameworkList::ensureSchema();
            Db::execute(
                "UPDATE `{$table}` SET patch_path = file_path, patch_hash = file_hash, patch_from = from_version,"
                . " file_path = '', file_hash = ''"
                . " WHERE type = 1 AND (patch_path = '' OR patch_path IS NULL) AND file_path <> ''"
            );
        } catch (\Exception $e) {
            // ignore
        }
    }

    /**
     * 下载核心包 zip
     * 客户端 FrameworkService::download() GET ?version= ：
     *   - 直接返回 zip 二进制（首字节非 '{'）。
     * 可选签名校验：config('appmall.addon_download_sign') = true 时，
     * 请求需带 sign=md5('framework'.version.ts.secret) & ts（5 分钟有效期）。
     */
    public function download()
    {
        $version = Request::param('version', '');
        // 选包：type=install/2 下安装包；type=patch/1 下补丁；type=full/0 下整包；缺省整包（缺失时回退补丁/安装包）
        $typeRaw = (string) Request::param('type', '');
        $wantPatch   = in_array($typeRaw, ['patch', '1'], true);
        $wantInstall = in_array($typeRaw, ['install', '2'], true);

        if (Config::get('ywxapp.addon_download_sign', false)) {
            $sign = Request::param('sign', '');
            $ts   = (int) Request::param('ts', 0);
            if (!$this->verifySign($version, $ts, $sign)) {
                return json(['code' => 0, 'message' => '签名校验失败']);
            }
        }

        // 运行时自愈：已部署的中心站若早于本版本安装，可能缺下载日志表
        $this->ensureTables();

        $query = Db::name('appmall_framework_list')->where('status', 1);
        if ($version !== '') {
            $query->where('version', $version);
        }
        $row = $query->order('id', 'desc')->find();
        if (empty($row)) {
            return json(['code' => 0, 'message' => '版本包不存在']);
        }

        if ($wantInstall) {
            $path = $row['install_path'] ?? '';
        } elseif ($wantPatch) {
            $path = $row['patch_path'] ?? '';
        } else {
            $path = $row['file_path'] ?? '';
            // 兼容「仅补丁/仅安装包」版本行：未显式指定时整包缺失则回退
            if (($path === '' || !is_file($path)) && !empty($row['patch_path'])) {
                $path      = $row['patch_path'];
                $wantPatch = true;
            }
            if (($path === '' || !is_file($path)) && !empty($row['install_path'])) {
                $path        = $row['install_path'];
                $wantInstall = true;
            }
        }
        if (empty($path) || !is_file($path)) {
            $msg = $wantInstall ? '该版本无完整安装包或文件缺失'
                : ($wantPatch ? '该版本无增量补丁或文件缺失' : '版本包不存在或文件缺失');
            return json(['code' => 0, 'message' => $msg]);
        }

        // 记录下载次数与日志（列/表缺失时忽略，不影响下载）
        try {
            Db::name('appmall_framework_list')->where('id', $row['id'])->inc('download_count')->update();
            Db::name('appmall_framework_download_log')->insert([
                'version'   => $row['version'],
                'uid'       => (int) Request::param('uid', 0),
                'ip'        => Request::ip(),
                'create_at' => time(),
            ]);
        } catch (\Exception $e) {
            // ignore
        }

        $downloadName = 'ywxapp-' . $row['version']
            . ($wantInstall ? '-install' : ($wantPatch ? '-patch' : '')) . '.zip';

        // 流式下载响应（复用公共类）：避免 ThinkPHP download() 内部 file_get_contents 将整文件读入内存，
        // 改用分块 fread 输出并支持 Range 续传；类内部已 set_time_limit(0)。
        return new \ywxapp\library\StreamZipResponse($path, $downloadName);
    }

    /**
     * 运行时自愈建表：框架版本表 / 下载日志（幂等，进程内只探测一次）。
     * 唯一事实源是 app/appmall/install.sql，由 AppmallSchema 解析执行，本类不再内联 DDL。
     */
    private function ensureTables(): void
    {
        \app\appmall\library\AppmallSchema::ensure();
    }

    /**
     * 下载签名校验
     */
    private function verifySign(string $version, int $ts, string $sign): bool
    {
        if ($sign === '' || abs(time() - $ts) > 300) {
            return false;
        }
        $secret = Config::get('ywxapp.addon_secret', 'ywxapp-addon-secret-change-me');
        $expect = md5('framework' . $version . $ts . $secret);
        return hash_equals($expect, $sign);
    }
}