762 lines
34 KiB
JavaScript
762 lines
34 KiB
JavaScript
// common/js/media-upload.js
|
|
// ai-chat / ai-agent 媒体上传: 图片 (PHP 中转 + STS 直传) / 音视频 / 其他文件
|
|
//
|
|
// PR-FRONTEND-MEDIA-UPLOAD (2026-09-16): 之前 ai-chat-tools-panel.vue 引用了
|
|
// uploadImage / uploadMedia, 但本文件从未落库, 选图 / 选文件立即抛
|
|
// "Cannot find module '@/common/js/media-upload.js'". 此次按
|
|
// docs/ai-agent-integration.md §3.4 Step 1 落地, 顺手补 store import (设计稿漏).
|
|
//
|
|
// 调用方:
|
|
// ai-chat-tools-panel.vue → selectImage() / _uploadOneFile()
|
|
// ai-chat-message.vue → 直接用 aiService.sendMessage 传 attachments (本模块不出场)
|
|
//
|
|
// 上传策略:
|
|
// 图片: 优先 PHP 中转 (≤2MB 走 backend), 超过或商家选了 oss_sts/auto → STS 直传
|
|
// 音视频/文件: 一律 STS 直传 (体积大概率 >2MB)
|
|
//
|
|
// 端点:
|
|
// PHP 中转: POST /<addon>/api/upload/<image|file> multipart/form-data
|
|
// STS 凭证: POST /<addon>/api/upload/ossSts application/json
|
|
// STS 直传: PUT <provider>/<key> 云存储协议 (4-field STS 或 single-URL)
|
|
|
|
import aiService from './ai-service.js'
|
|
import Config from './config.js'
|
|
import store from '@/store/index.js'
|
|
|
|
const SIZE_LIMIT_PHP_PASSTHROUGH = 2 * 1024 * 1024 // 2MB
|
|
const SIZE_LIMIT_H5_COMPRESS = 3 * 1024 * 1024 // 3MB (从 10MB 下调,移动端 H5 体验更流畅)
|
|
// PR-FRONTEND-MEDIA-INLINE-BASE64 (2026-09-16): WB Agent J7 inline base64 上限 5MB
|
|
// 与 backend WbAgentOsClient::INLINE_MEDIA_LIMIT = 5242880 对齐
|
|
// 超过这个 size 后 buildMediaBlocks 会改走 URL fetch 路径, 上限失效
|
|
const SIZE_LIMIT_INLINE_BASE64 = 5 * 1024 * 1024 // 5MB (与后端 INLINE_MEDIA_LIMIT 对齐)
|
|
|
|
// PR-FRONTEND-MEDIA-UPLOAD-FIX (2026-09-16): 现代格式 mime 同步后端 guessMimeFromPath
|
|
// STS 直传绕过后端 mime 推断, 前端必须自带, 否则附件 mime 降级 application/octet-stream
|
|
const EXT_MIME_MAP = {
|
|
jpg: 'image/jpeg', jpeg: 'image/jpeg', png: 'image/png', gif: 'image/gif', webp: 'image/webp',
|
|
heic: 'image/heic', heif: 'image/heif', avif: 'image/avif',
|
|
bmp: 'image/bmp', tif: 'image/tiff', tiff: 'image/tiff',
|
|
mp3: 'audio/mpeg', wav: 'audio/wav', aac: 'audio/aac',
|
|
m4a: 'audio/mp4', flac: 'audio/flac', ogg: 'audio/ogg',
|
|
oga: 'audio/ogg', opus: 'audio/opus', amr: 'audio/amr', wma: 'audio/x-ms-wma',
|
|
aiff: 'audio/aiff', aif: 'audio/aiff', ape: 'audio/x-ape', mid: 'audio/midi',
|
|
mp4: 'video/mp4', mov: 'video/quicktime', avi: 'video/x-msvideo',
|
|
mkv: 'video/x-matroska', webm: 'video/webm', flv: 'video/x-flv',
|
|
m4v: 'video/x-m4v', wmv: 'video/x-ms-wmv', '3gp': 'video/3gpp',
|
|
mpeg: 'video/mpeg', mpg: 'video/mpeg', ts: 'video/mp2t',
|
|
doc: 'application/msword',
|
|
docx: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
|
|
ppt: 'application/vnd.ms-powerpoint',
|
|
pptx: 'application/vnd.openxmlformats-officedocument.presentationml.presentation',
|
|
zip: 'application/zip', rar: 'application/x-rar-compressed',
|
|
'7z': 'application/x-7z-compressed',
|
|
json: 'application/json', xml: 'application/xml', md: 'text/markdown',
|
|
pdf: 'application/pdf', txt: 'text/plain',
|
|
xls: 'application/vnd.ms-excel',
|
|
xlsx: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
|
|
}
|
|
|
|
/**
|
|
* 上传图片 (type=image)
|
|
* @param {string} filePath - uni.chooseImage 返回的 tempFilePaths[0]
|
|
* @returns {Promise<{url, mime, size, name, kind, used_strategy}>}
|
|
*/
|
|
export async function uploadImage(filePath, opts = {}) {
|
|
const addon = aiService.getAddonName() // 'aikefu' | 'aiagent'
|
|
const config = await aiService.getServiceConfig()
|
|
const strategy = config?.upload_strategy || 'backend'
|
|
|
|
// 压缩: H5/MP-WEIXIN 双端都做, iPhone HEIC 大图走不通 PHP 中转也走不通 STS, 必须本地压
|
|
let compressedPath = filePath
|
|
let detectedSize = 0
|
|
try {
|
|
detectedSize = await getFileSize(filePath)
|
|
} catch (e) {
|
|
// PR-FRONTEND-MEDIA-UPLOAD-FIX (2026-09-16): 探测失败不静默降级到 0 (会让 auto 模式永远走 PHP 中转)
|
|
// 改为抛错, 上层选择兜底走 STS (size=0 → 大于任何阈值 → 走 STS)
|
|
console.warn('[media-upload] getFileSize failed:', e)
|
|
}
|
|
// H5 + MP-WEIXIN 都压缩 (微信 chooseImage 默认 sizeType:['compressed'] 但 HEIC 不在压缩白名单)
|
|
// #ifdef H5 || MP-WEIXIN
|
|
if (detectedSize > SIZE_LIMIT_H5_COMPRESS || opts.forceCompress) {
|
|
try {
|
|
const compressed = await uni.compressImage({
|
|
src: filePath,
|
|
quality: 80,
|
|
compressedWidth: 2048,
|
|
compressedHeight: 2048,
|
|
})
|
|
compressedPath = compressed.tempFilePath || filePath
|
|
console.log('[media-upload] compressImage OK', detectedSize, '→', compressedPath)
|
|
} catch (e) {
|
|
console.warn('[media-upload] compressImage failed, use original:', e)
|
|
}
|
|
}
|
|
// #endif
|
|
|
|
// 检查是否需要走 STS (>2MB 或商家选 oss_sts)
|
|
// 决策: STS 触发条件 = oss_sts(总是) || auto + 大于 2MB
|
|
// fileSizeFinal = 探测失败的兜底:
|
|
// - 第一次探测失败(原始大小未知) → 保守走 STS
|
|
// - 第一次成功, 第二次探测压缩后失败 → 用原始 detectedSize
|
|
let fileSizeFinal = detectedSize
|
|
if (compressedPath !== filePath) {
|
|
try { fileSizeFinal = await getFileSize(compressedPath) } catch (e) {
|
|
// 压缩后探测失败, 退回到原始大小 (可能没压成功)
|
|
fileSizeFinal = detectedSize
|
|
}
|
|
}
|
|
const useSts = strategy === 'oss_sts'
|
|
|| (strategy === 'auto' && fileSizeFinal > SIZE_LIMIT_PHP_PASSTHROUGH)
|
|
// ★ PR-FRONTEND-MEDIA-UPLOAD-FIX (2026-09-16): 探测完全失败(原始+压缩后都 0) → 保守走 STS
|
|
// 原代码 fileSizeFinal === 0 会让"auto 模式永远走 PHP 中转", 大文件 OOM
|
|
// 但 fileSizeFinal = detectedSize (有值) 时按值判断; 只有两边都失败才兜底 STS
|
|
const totallyUnknown = detectedSize === 0 && fileSizeFinal === 0
|
|
const finalUseSts = useSts || (strategy === 'auto' && totallyUnknown)
|
|
|
|
if (finalUseSts) {
|
|
return await uploadViaSts(compressedPath, 'image', addon, aiService.getAgentId(), config, detectedSize)
|
|
}
|
|
try {
|
|
return await uploadViaPhp(compressedPath, 'image', addon, aiService.getAgentId(), detectedSize)
|
|
} catch (e) {
|
|
// PR-UPLOAD-ADAPTIVE-FALLBACK (2026-09-24): 后端已切 oss_sts 而 /info 缓存里的 strategy 过期
|
|
// → PHP 中转被拒 (OSS_STS_REQUIRED), 自动切 STS 直传重试 (自愈, 无需用户重试)
|
|
if (e && e.code === 'OSS_STS_REQUIRED') {
|
|
console.warn('[media-upload] PHP 中转被拒 (后端策略已是 oss_sts), 自动切换 STS 直传')
|
|
return await uploadViaSts(compressedPath, 'image', addon, aiService.getAgentId(), config, detectedSize)
|
|
}
|
|
throw e
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 上传 audio / video / file
|
|
* 策略: 商家配了云存储 (oss_sts/auto) → STS 直传, 失败回退 PHP 中转;
|
|
* 未配云存储 (backend) → 直接 PHP 中转
|
|
* @param {string} filePath
|
|
* @param {'audio'|'video'|'file'} kind
|
|
* @param {{name?:string, mime?:string, size?:number}} [opts]
|
|
* PR-FRONTEND-MEDIA-ACCEPT (2026-09-17): H5 传进来的是 blob URL (无扩展名),
|
|
* 必须由调用方把原始 File 的 name/mime/size 带进来, 否则 STS key 会以 .bin 结尾,
|
|
* Content-Type 退化成 application/octet-stream, 音频/视频播放器取不到正确类型。
|
|
*/
|
|
export async function uploadMedia(filePath, kind, opts = {}) {
|
|
if (!['audio', 'video', 'file'].includes(kind)) {
|
|
throw new Error(`invalid kind: ${kind}`)
|
|
}
|
|
const addon = aiService.getAddonName()
|
|
const config = await aiService.getServiceConfig()
|
|
const agentId = aiService.getAgentId()
|
|
const hints = { name: opts.name || '', mime: opts.mime || '' }
|
|
const size = opts.size || 0
|
|
const strategy = (config && config.upload_strategy) || 'backend'
|
|
|
|
// PHP 中转 (kind 以调用方传入的音视频分类为准, 后端只区分 image|file)
|
|
const doPhpUpload = async (fallbackErr) => {
|
|
let phpRes = null
|
|
try {
|
|
phpRes = await uploadViaPhp(filePath, kind, addon, agentId, size)
|
|
} catch (err) {
|
|
throw new Error((err && err.message) || (fallbackErr && fallbackErr.message) || '上传失败')
|
|
}
|
|
if (!phpRes || !phpRes.url) {
|
|
throw new Error((fallbackErr && fallbackErr.message) || '上传失败: 当前平台不支持该上传方式')
|
|
}
|
|
return Object.assign({}, phpRes, { kind })
|
|
}
|
|
|
|
// 商家未开启云存储 (strategy=backend): 与图片保持一致走 PHP 中转,
|
|
// 避免没配 STS 时"视频/音频"按钮一选就报 "STS 凭据获取失败" 完全不可用
|
|
// PR-UPLOAD-ADAPTIVE-FALLBACK (2026-09-24): 若后端已切 oss_sts 而本地 strategy 过期,
|
|
// PHP 中转被拒 (OSS_STS_REQUIRED) → 自动切 STS 直传重试
|
|
if (strategy === 'backend') {
|
|
try {
|
|
return await doPhpUpload()
|
|
} catch (e) {
|
|
if (e && e.code === 'OSS_STS_REQUIRED') {
|
|
console.warn('[media-upload] PHP 中转被拒 (后端策略已是 oss_sts), 自动切换 STS 直传')
|
|
return await uploadViaSts(filePath, kind, addon, agentId, config, size, hints)
|
|
}
|
|
throw e
|
|
}
|
|
}
|
|
|
|
try {
|
|
return await uploadViaSts(filePath, kind, addon, agentId, config, size, hints)
|
|
} catch (e) {
|
|
// PR-FRONTEND-MEDIA-ACCEPT (2026-09-17): STS 不可用 (未配置云存储 / 凭证接口失败)
|
|
// 时回退 PHP 中转, 保证音频/视频文件仍能上传
|
|
// PR-UPLOAD-ADAPTIVE-FALLBACK (2026-09-24): 回退的 PHP 中转若也被 oss_sts 策略拒收,
|
|
// 保留原始 STS 错误抛出 (回退注定失败, 报真实根因比报 "操作失败" 有用)
|
|
console.warn('[media-upload] STS 上传失败, 回退 PHP 中转:', e && e.message)
|
|
try {
|
|
return await doPhpUpload(e)
|
|
} catch (e2) {
|
|
if (e2 && e2.code === 'OSS_STS_REQUIRED') throw e
|
|
throw e2
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* PHP 中转 (multipart/form-data)
|
|
* 端点必须用 addon 模式 URL: /<addon>/api/upload/<image|file>
|
|
* 注释: InitRoute 注册 aikefu/api/upload 时挂在 addon namespace 下,
|
|
* /api/aikefu/upload/* 才是命中路径; /api/kefu/upload/* 不命中
|
|
* (那是普通接口命名空间, 上传走的是 addon 专属路由)
|
|
*/
|
|
async function uploadViaPhp(filePath, kind, addon, agentId, knownSize = 0) {
|
|
const url = (addon === 'aikefu' ? '/aikefu/api/upload/' : '/aiagent/api/upload/')
|
|
+ (kind === 'image' ? 'image' : 'file')
|
|
|
|
// #ifdef MP-WEIXIN
|
|
return new Promise((resolve, reject) => {
|
|
uni.uploadFile({
|
|
url: Config.baseUrl + url,
|
|
filePath,
|
|
name: 'file',
|
|
formData: {
|
|
kind,
|
|
// aikefu 后端必填 config_uuid; 同时兼容 config_uid 命名并附 agent_id 兜底
|
|
agent_id: agentId || undefined,
|
|
config_uuid: addon === 'aikefu' ? (aiService.getCurrentConfigUuid?.() || '') : undefined,
|
|
config_uid: addon === 'aikefu' ? (aiService.getCurrentConfigUuid?.() || '') : undefined,
|
|
uniacid: aiService.getUniacid(),
|
|
user_id: aiService.getUserId?.() || '',
|
|
},
|
|
success: (res) => {
|
|
try {
|
|
const data = typeof res.data === 'string' ? JSON.parse(res.data) : res.data
|
|
if (data.code === 0 || data.success) {
|
|
resolve({
|
|
url: data.data.url,
|
|
mime: data.data.mime,
|
|
size: data.data.size || knownSize || 0,
|
|
name: data.data.name,
|
|
kind: data.data.kind || kind,
|
|
used_strategy: data.data.used_strategy || 'backend',
|
|
oss_sts_required: data.data.oss_sts_required || false,
|
|
})
|
|
} else {
|
|
// PR-UPLOAD-ADAPTIVE-FALLBACK (2026-09-24): 后端策略已切 oss_sts 时拒收 PHP 中转,
|
|
// 顶层 oss_sts_required=true → 标记错误码, 调用方捕获后自动切 STS 直传 (自愈)
|
|
const err = new Error(data.data || data.msg || data.message || '上传失败')
|
|
if (data.oss_sts_required === true) err.code = 'OSS_STS_REQUIRED'
|
|
reject(err)
|
|
}
|
|
} catch (e) {
|
|
reject(new Error('解析响应失败: ' + e.message))
|
|
}
|
|
},
|
|
fail: (err) => reject(new Error('网络错误: ' + (err.errMsg || err.message))),
|
|
})
|
|
})
|
|
// #endif
|
|
|
|
// #ifdef H5
|
|
const form = new FormData()
|
|
const file = await pathToFile(filePath, kind)
|
|
form.append('file', file)
|
|
form.append('kind', kind)
|
|
if (addon === 'aiagent') form.append('agent_id', agentId)
|
|
else {
|
|
// aikefu 后端必填 config_uuid; 同时兼容 config_uid 命名并附 agent_id 兜底
|
|
const uuid = aiService.getCurrentConfigUuid?.() || ''
|
|
form.append('config_uuid', uuid)
|
|
form.append('config_uid', uuid)
|
|
form.append('agent_id', agentId)
|
|
}
|
|
form.append('uniacid', aiService.getUniacid())
|
|
form.append('user_id', aiService.getUserId?.() || '')
|
|
const res = await fetch(Config.baseUrl + url, {
|
|
method: 'POST',
|
|
headers: { 'token': store.state.token || '' },
|
|
body: form,
|
|
})
|
|
const data = await res.json()
|
|
if (data.code === 0 || data.success) {
|
|
return {
|
|
url: data.data.url,
|
|
mime: data.data.mime,
|
|
size: data.data.size || knownSize || 0,
|
|
name: data.data.name,
|
|
kind: data.data.kind || kind,
|
|
used_strategy: data.data.used_strategy || 'backend',
|
|
oss_sts_required: data.data.oss_sts_required || false,
|
|
}
|
|
}
|
|
// PR-UPLOAD-ADAPTIVE-FALLBACK (2026-09-24): 后端拒收且标记 oss_sts_required → 自动切 STS 直传
|
|
if (data.oss_sts_required === true) {
|
|
const err = new Error(data.data || data.msg || data.message || '上传失败')
|
|
err.code = 'OSS_STS_REQUIRED'
|
|
throw err
|
|
}
|
|
throw new Error(data.msg || data.message || '上传失败')
|
|
// #endif
|
|
}
|
|
|
|
/**
|
|
* STS 直传 (拿临时凭证 → 直传云存储)
|
|
*
|
|
* PR-OSS-REGISTRY (2026-09-15) 后端支持 12 个 provider, 协议层分两类:
|
|
* A) 4-field STS (8 个: alioss/qiniu/txcos/baidubos/qingstor/jdoss/ucloud/wyoss)
|
|
* → 前端拼 PUT URL, Authorization header = STS <ak>:<sk>
|
|
* B) single-URL (4 个: huaweiobs/volcengine/awsoss/minio)
|
|
* → sts.accessKeyId 已是完整预签 PUT URL, sts.securityToken='<PROVIDER>-SIGNED'
|
|
* 标记, 不带 Authorization
|
|
*
|
|
* 后端 stsResp.data.data 可能字段:
|
|
* { provider, bucket, region, accessKeyId, accessKeySecret, securityToken,
|
|
* key_prefix_tpl, site_id, host? (single-URL 模式), endpoint? (qiniu 7 参兼容) }
|
|
*/
|
|
/**
|
|
* PR-FRONTEND-MEDIA-UPLOAD-FIX (2026-09-16): 三段兜底扩展名提取
|
|
* 1) filePath 最后一段正则匹配 .xxx
|
|
* 2) filePath.name 兜底 (H5 File 对象 / APP tempFile.name)
|
|
* 3) mimeHint 反查 EXT_MIME_MAP (H5 blob URL 没扩展名但 blob.type 通常是 image/png)
|
|
* 4) 最终 'bin' (防 URL 片段被误当扩展名)
|
|
*
|
|
* PR-FRONTEND-MEDIA-UPLOAD-FIX-HOTFIX (2026-09-16): 提到模块顶层,
|
|
* 之前只在 uploadViaSts 里, pathToFile 引用不到 → "extractExt is not defined"
|
|
*/
|
|
function extractExt(filePath, mimeHint = '', nameHint = '') {
|
|
let ext = 'bin'
|
|
if (typeof filePath === 'string') {
|
|
const lastSeg = filePath.split('?')[0].split('/').pop() || ''
|
|
const m = lastSeg.match(/\.([a-z0-9]+)$/i)
|
|
if (m) ext = m[1].toLowerCase()
|
|
}
|
|
if (ext === 'bin' && filePath && filePath.name) {
|
|
const m2 = String(filePath.name).match(/\.([a-z0-9]+)$/i)
|
|
if (m2) ext = m2[1].toLowerCase()
|
|
}
|
|
// PR-FRONTEND-MEDIA-ACCEPT (2026-09-17): H5 blob URL + 调用方带下来的原始文件名
|
|
if (ext === 'bin' && nameHint) {
|
|
const m3 = String(nameHint).match(/\.([a-z0-9]+)$/i)
|
|
if (m3) ext = m3[1].toLowerCase()
|
|
}
|
|
// 3) mime→ext 反查 (PR-FRONTEND-MEDIA-UPLOAD-FIX-HOTFIX): blob URL 无扩展名但
|
|
// blob.type 是 image/png 这种, 反查 EXT_MIME_MAP → png
|
|
if (ext === 'bin' && mimeHint) {
|
|
for (const [e, m] of Object.entries(EXT_MIME_MAP)) {
|
|
if (m === mimeHint) { ext = e; break }
|
|
}
|
|
}
|
|
if (!/^[a-z0-9]{2,5}$/.test(ext)) ext = 'bin'
|
|
return ext
|
|
}
|
|
|
|
/**
|
|
* PR-H5-PRESIGN-DIRECT (2026-09-24): alioss 直传改走服务端预签名 URL (ossPresign)
|
|
*
|
|
* 背景: 旧 uploadViaSts 对 alioss 走 4 字段 STS 凭证 + 前端裸 PUT
|
|
* (Authorization: STS ak:sk + x-oss-security-token)。该 Authorization 头
|
|
* 不是合法 OSS V1 签名 (合法格式为 `OSS AccessKeyId:HMAC-SHA1(StringToSign)`,
|
|
* 签名必须由持有 secret 的一方计算) → OSS 恒 403 AccessDenied。
|
|
* 后端「对话测试」已切 ossPresign (服务端签 PUT URL) 实测可用 (tests/repro_h5_sts_put.js:
|
|
* 裸 PUT 403 / presign PUT 200), 前端同款切换。
|
|
* 额外收益: object key 由服务端 KeyPrefixBuilder 统一拼, 消除前端模板替换的
|
|
* 双重前缀/占位符错配; content_type 由服务端签名后回传, PUT 带同值即可。
|
|
*
|
|
* 端点: POST /<addon>/api/upload/ossPresign
|
|
* 入参: filename / content_type / uniacid + (aikefu: config_uuid | aiagent: agent_id)
|
|
* 出参: {upload_url, content_type, public_url, object_key, provider, ...}
|
|
* PUT 时不带任何 Authorization 头 (签名在 query 里), Content-Type 必须与签名一致。
|
|
*/
|
|
/**
|
|
* PR-UNI-REQUEST-CB (2026-09-24): uni.request 的 Promise 兼容封装
|
|
* 实测 (tests/probe_uni_request.js): 本 uni-app H5 版本 `await uni.request(opts)`
|
|
* resolve 的是 **undefined** (不带 success 回调时 Promise 返回值不可用),
|
|
* 导致 stsResp.statusCode/preResp.data 全部 TypeError。
|
|
* 回调式调用是唯一跨端可靠用法, 统一从这里走。
|
|
*/
|
|
function uniRequest(opts) {
|
|
return new Promise((resolve, reject) => {
|
|
uni.request(Object.assign({}, opts, {
|
|
success: resolve,
|
|
fail: (err) => reject(new Error((err && err.errMsg) || 'request failed')),
|
|
}))
|
|
})
|
|
}
|
|
|
|
async function uploadViaPresign(filePath, kind, addon, agentId, knownSize = 0, hints = {}) {
|
|
// PR-H5-PRESIGN-EXT (2026-09-24): H5 图片是 blob URL (无扩展名), extractExt 会得 'bin'
|
|
// → 先经 pathToFile 还原 File, 用 file.type / file.name 反推扩展名与 Content-Type
|
|
let mimeHint = hints.mime || ''
|
|
let nameHint = hints.name || ''
|
|
let probeFile = null
|
|
// #ifdef H5
|
|
try {
|
|
probeFile = await pathToFile(filePath, kind)
|
|
if (!mimeHint && probeFile && probeFile.type) mimeHint = probeFile.type
|
|
if (!nameHint && probeFile && probeFile.name) nameHint = probeFile.name
|
|
} catch (e) {
|
|
// blob URL 还原失败不致命: ext 兜底 jpg, PUT 时再走 pathToFile
|
|
console.warn('[media-upload] presign probe failed:', e && e.message)
|
|
}
|
|
// #endif
|
|
const ext = extractExt(filePath, mimeHint, nameHint)
|
|
// 兜底: 彻底拿不到类型时, 图片按 jpg 传 (后端后缀白名单拒收 .bin; jpg 嗅探渲染无碍)
|
|
const finalExt = (ext === 'bin' && kind === 'image') ? 'jpg' : ext
|
|
const contentType = mimeHint || guessMime(finalExt)
|
|
const filename = (nameHint && /^[^\/\\]+\.[a-zA-Z0-9]{2,5}$/.test(nameHint))
|
|
? nameHint
|
|
: `media_${Date.now()}_${Math.random().toString(36).slice(2, 8)}.${finalExt}`
|
|
|
|
const preUrl = (addon === 'aikefu' ? '/aikefu/api/upload/' : '/aiagent/api/upload/') + 'ossPresign'
|
|
const preResp = await uniRequest({
|
|
url: Config.baseUrl + preUrl,
|
|
method: 'POST',
|
|
header: {
|
|
'Content-Type': 'application/json',
|
|
'token': store.state.token || ''
|
|
},
|
|
data: {
|
|
filename,
|
|
content_type: contentType,
|
|
uniacid: aiService.getUniacid(),
|
|
agent_id: addon === 'aiagent' ? (agentId || undefined) : undefined,
|
|
config_uuid: addon === 'aikefu' ? (aiService.getCurrentConfigUuid?.() || '') : undefined,
|
|
},
|
|
})
|
|
if (preResp.statusCode === 404) {
|
|
const err = new Error('后端无 ossPresign 端点 (版本过旧)')
|
|
err.code = 'PRESIGN_UNSUPPORTED'
|
|
throw err
|
|
}
|
|
if (preResp.statusCode !== 200 || (preResp.data.code !== 0 && !preResp.data.success)) {
|
|
throw new Error(preResp.data?.msg || preResp.data?.message || '预签名获取失败')
|
|
}
|
|
const pre = preResp.data.data
|
|
const uploadUrl = pre.upload_url
|
|
const finalContentType = pre.content_type || contentType
|
|
|
|
let uploadedSize = knownSize || 0
|
|
// #ifdef H5
|
|
if (probeFile && probeFile.size) uploadedSize = probeFile.size
|
|
// #endif
|
|
|
|
// 直传: PUT 已签名 URL, 无 Authorization 头 (签名在 query 里)
|
|
// #ifdef H5
|
|
const file = probeFile || await pathToFile(filePath, kind)
|
|
const ossRes = await fetch(uploadUrl, {
|
|
method: 'PUT',
|
|
headers: { 'Content-Type': finalContentType },
|
|
body: file,
|
|
})
|
|
console.log('[media-upload] presign PUT', ossRes.status, (pre.public_url || '').slice(0, 90))
|
|
if (!ossRes.ok) throw new Error(`${pre.provider || 'alioss'} PUT ${ossRes.status}`)
|
|
// #endif
|
|
// #ifdef MP-WEIXIN
|
|
// uni.uploadFile 只会发 multipart POST, 不能 PUT → 读成 ArrayBuffer 用 uni.request 发原始 PUT
|
|
await new Promise((resolve, reject) => {
|
|
uni.getFileSystemManager().readFile({
|
|
filePath,
|
|
success: (res) => {
|
|
uni.request({
|
|
url: uploadUrl,
|
|
method: 'PUT',
|
|
header: { 'Content-Type': finalContentType },
|
|
data: res.data,
|
|
success: (r) => (r.statusCode >= 200 && r.statusCode < 300)
|
|
? resolve()
|
|
: reject(new Error(`${pre.provider || 'alioss'} PUT ${r.statusCode}`)),
|
|
fail: reject,
|
|
})
|
|
},
|
|
fail: (e) => reject(new Error('readFile failed: ' + (e.errMsg || ''))),
|
|
})
|
|
})
|
|
// #endif
|
|
|
|
return {
|
|
url: (pre.public_url || uploadUrl.split('?')[0]),
|
|
mime: finalContentType,
|
|
size: uploadedSize,
|
|
name: (pre.object_key || filename).split('/').pop(),
|
|
kind,
|
|
used_strategy: 'oss_sts',
|
|
provider: pre.provider || 'alioss',
|
|
}
|
|
}
|
|
|
|
async function uploadViaSts(filePath, kind, addon, agentId, config, knownSize = 0, hints = {}) {
|
|
// PR-H5-PRESIGN-DIRECT (2026-09-24): alioss (及 provider 未知时) 先走服务端预签名;
|
|
// 旧 4 字段裸 PUT 的 Authorization 头不是合法 OSS 签名, 恒 403 (tests/repro_h5_sts_put.js 实测)
|
|
// 仅当后端明确配置了非 alioss provider, 或后端过旧无 presign 端点时才落回旧流程
|
|
const providerHint = (config && config.oss_provider) || ''
|
|
if (!providerHint || providerHint === 'alioss') {
|
|
try {
|
|
return await uploadViaPresign(filePath, kind, addon, agentId, knownSize, hints)
|
|
} catch (e) {
|
|
if (!(e && e.code === 'PRESIGN_UNSUPPORTED')) throw e
|
|
console.warn('[media-upload] ossPresign 不可用, 回退旧 STS 流程:', e.message)
|
|
}
|
|
}
|
|
// PR-FRONTEND-MEDIA-UPLOAD-FIX (2026-09-16): 用更稳的扩展名提取
|
|
// H5 blob URL (blob:https://xxx/uuid) 无扩展名 → split('.').pop() 会拿整条 URL
|
|
// 优先 file.name (H5 file / APP tempFile.name), 都没有就 blob URL → 'bin'
|
|
// PR-FRONTEND-MEDIA-ACCEPT (2026-09-17): H5 走 blob URL 时 file.name 拿不到,
|
|
// 由 uploadMedia 的 opts.name/mime 兜底 (音频 .mp3 / 视频 .mp4 才不会被写成 .bin)
|
|
const ext = extractExt(filePath, hints.mime || '', hints.name || '')
|
|
|
|
// 1. 拿 STS 凭证 (addon 模式 URL)
|
|
const stsUrl = (addon === 'aikefu' ? '/aikefu/api/upload/' : '/aiagent/api/upload/') + 'ossSts'
|
|
const stsResp = await uniRequest({
|
|
url: Config.baseUrl + stsUrl,
|
|
method: 'POST',
|
|
header: {
|
|
'Content-Type': 'application/json',
|
|
'token': store.state.token || ''
|
|
},
|
|
data: {
|
|
agent_id: agentId || undefined,
|
|
config_uuid: addon === 'aikefu' ? (aiService.getCurrentConfigUuid?.() || '') : undefined,
|
|
config_uid: addon === 'aikefu' ? (aiService.getCurrentConfigUuid?.() || '') : undefined,
|
|
uniacid: aiService.getUniacid(),
|
|
user_id: aiService.getUserId?.() || '',
|
|
},
|
|
})
|
|
if (stsResp.statusCode !== 200 || (stsResp.data.code !== 0 && !stsResp.data.success)) {
|
|
throw new Error(stsResp.data?.msg || stsResp.data?.message || 'STS 凭证获取失败')
|
|
}
|
|
const sts = stsResp.data.data
|
|
const provider = sts.provider || 'alioss' // 老后端默认 alioss
|
|
|
|
// 2. 拼 PUT URL (用后端返回的 key_prefix_tpl 替换占位符)
|
|
const uuid = 'xxxxxxxxxxxx4xxxyxxxxxxxxxxxxxxx'.replace(/[xy]/g, c => {
|
|
const r = Math.random() * 16 | 0
|
|
return (c === 'x' ? r : (r & 0x3 | 0x8)).toString(16)
|
|
})
|
|
const now = new Date()
|
|
const key = (sts.key_prefix_tpl || 'site/{site_id}/{yyyy}/{mm}/{dd}/{rand}')
|
|
.replace('{site_id}', sts.site_id || '0')
|
|
.replace('{agent_id}', agentId || '0')
|
|
.replace('{yyyy}', now.getFullYear().toString())
|
|
.replace('{mm}', String(now.getMonth() + 1).padStart(2, '0'))
|
|
.replace('{dd}', String(now.getDate()).padStart(2, '0'))
|
|
.replace('{rand}', uuid)
|
|
+ '.' + ext
|
|
|
|
// ★ PR-OSS-REGISTRY (2026-09-15): provider 分流
|
|
// single-URL 模式: securityToken 末尾是 -SIGNED (OBS-SIGNED / TOS-SIGNED / AWS-SIGNED / MINIO-SIGNED)
|
|
const isSingleUrlMode = typeof sts.securityToken === 'string'
|
|
&& /-(SIGNED)$/.test(sts.securityToken)
|
|
|
|
let ossUrl, headers
|
|
if (isSingleUrlMode) {
|
|
// B) single-URL: sts.accessKeyId 是完整预签 PUT URL, 不需要 Authorization header
|
|
ossUrl = sts.accessKeyId
|
|
headers = { 'Content-Type': guessMime(ext) }
|
|
} else if (provider === 'qiniu') {
|
|
// A) qiniu 兼容模式: sts.accessKeyId = uptoken, endpoint 来自 sts.endpoint 或 sts.host
|
|
ossUrl = (sts.endpoint || sts.host || `https://upload-${sts.region}.qiniup.com`) + '/' + key
|
|
headers = {
|
|
'Authorization': 'UpToken ' + sts.accessKeyId,
|
|
'Content-Type': guessMime(ext),
|
|
}
|
|
} else {
|
|
// A) 4-field STS 默认 (alioss/txcos/baidubos/qingstor/jdoss/ucloud/wyoss)
|
|
// endpoint 模板按 provider 区分, 后端未返 endpoint 时按 OSS 模板拼
|
|
// ★ FIX-ALIOSS-ENDPOINT-OSS-PREFIX (2026-09-23): alioss 区域名缺前缀 bug
|
|
// sts.region 是用户输入的简写形式 (cn-hangzhou), 但真实 OSS endpoint 必须用完整形式 (oss-cn-hangzhou)
|
|
// 之前 `https://${bucket}.${region}.aliyuncs.com` 拼成 `suzhou-oss-data-xyz.cn-hangzhou.aliyuncs.com` (DNS 不存在)
|
|
// 正确: `https://${bucket}.oss-${region}.aliyuncs.com` → `suzhou-oss-data-xyz.oss-cn-hangzhou.aliyuncs.com`
|
|
// 后端 sts.oss_url 已拼好正确 URL (用 OssProviderRegistry::buildDirectEndpoint), 优先用它
|
|
const aliossTpl = sts.oss_url
|
|
? sts.oss_url.replace(/\/[^\/?#]+$/, '') // 去尾 key, 留 base endpoint
|
|
: `https://${sts.bucket}.oss-${sts.region}.aliyuncs.com`
|
|
const tpl = (provider === 'alioss') ? aliossTpl
|
|
: (provider === 'txcos') ? `https://${sts.bucket}-${sts.region}.cos.${sts.region}.myqcloud.com`
|
|
: (provider === 'baidubos') ? `https://${sts.bucket}.${sts.region}.bcebos.com`
|
|
: (provider === 'jdoss') ? `https://${sts.bucket}.${sts.region}.jdcloud-oss.com`
|
|
: (provider === 'wyoss') ? `https://${sts.bucket}.${sts.host || sts.region}`
|
|
: (sts.endpoint ? sts.endpoint.replace('{bucket}', sts.bucket) : `https://${sts.bucket}.${sts.region}`)
|
|
ossUrl = `${tpl}/${key}`
|
|
headers = {
|
|
'Authorization': `STS ${sts.accessKeyId}:${sts.accessKeySecret}`,
|
|
'x-oss-security-token': sts.securityToken,
|
|
'Content-Type': guessMime(ext),
|
|
}
|
|
}
|
|
|
|
// PR-FRONTEND-MEDIA-UPLOAD-FIX (2026-09-16): MP-WEIXIN uni.uploadFile 拿不到 file.size
|
|
// H5 pathToFile 拿到的 file 有 size, MP-WEIXIN 没有; STS 完成后用已知 size 或后端返回
|
|
let uploadedSize = knownSize || 0
|
|
// #ifdef H5
|
|
try {
|
|
const probe = await pathToFile(filePath, kind)
|
|
if (probe && probe.size) uploadedSize = probe.size
|
|
} catch (e) {}
|
|
// #endif
|
|
|
|
// 3. 直传云存储
|
|
// #ifdef MP-WEIXIN
|
|
await new Promise((resolve, reject) => {
|
|
uni.uploadFile({
|
|
url: ossUrl,
|
|
filePath,
|
|
name: 'file',
|
|
formData: {},
|
|
header: headers,
|
|
success: (res) => {
|
|
if (res.statusCode >= 200 && res.statusCode < 300) resolve()
|
|
else reject(new Error(`${provider} PUT ${res.statusCode}`))
|
|
},
|
|
fail: reject,
|
|
})
|
|
})
|
|
// #endif
|
|
// #ifdef H5
|
|
const file = await pathToFile(filePath, kind)
|
|
const ossRes = await fetch(ossUrl, {
|
|
method: 'PUT',
|
|
headers,
|
|
body: file,
|
|
})
|
|
if (!ossRes.ok) throw new Error(`${provider} PUT ${ossRes.status}`)
|
|
// #endif
|
|
|
|
// 4. 返回公网 URL
|
|
return {
|
|
url: ossUrl.split('?')[0], // single-URL 模式 URL 带 ?<签名参数>, 拼 chat attachment 用 base URL
|
|
mime: guessMime(ext),
|
|
size: uploadedSize,
|
|
name: key.split('/').pop(),
|
|
kind,
|
|
used_strategy: 'oss_sts',
|
|
provider,
|
|
}
|
|
}
|
|
|
|
async function getFileSize(filePath) {
|
|
// PR-FRONTEND-MEDIA-UPLOAD-FIX (2026-09-16): 失败抛错而不是 resolve(0)
|
|
// 0 会让 auto 模式永远走 PHP 中转 (0 > 2MB = false), 失去 STS 直传能力
|
|
// 上层 uploadImage 用 try/catch 兜底, 探测失败视为 "大小未知, 默认走 STS"
|
|
// #ifdef MP-WEIXIN
|
|
return new Promise((resolve, reject) => {
|
|
uni.getFileInfo({
|
|
filePath,
|
|
success: (res) => resolve(res.size || 0),
|
|
fail: (err) => reject(new Error('getFileInfo failed: ' + (err.errMsg || ''))),
|
|
})
|
|
})
|
|
// #endif
|
|
// #ifdef H5
|
|
try {
|
|
const res = await fetch(filePath)
|
|
const blob = await res.blob()
|
|
return blob.size
|
|
} catch (e) {
|
|
throw new Error('getFileSize fetch failed: ' + e.message)
|
|
}
|
|
// #endif
|
|
}
|
|
|
|
async function pathToFile(filePath, kind) {
|
|
// #ifdef H5
|
|
const res = await fetch(filePath)
|
|
const blob = await res.blob()
|
|
// PR-FRONTEND-MEDIA-UPLOAD-FIX-HOTFIX (2026-09-16): H5 blob URL 路径修复扩展名
|
|
// 原代码 `filePath.split('/').pop()` 对 blob:http://xxx/uuid 取出 'uuid' (无扩展名)
|
|
// → 后端 multipart filename 缺失扩展名 → ext_rule 拒绝 "上传文件后缀不允许"
|
|
// extractExt 三段兜底: 1) lastSegment 正则 2) file.name 3) 'bin' 最终兜底
|
|
// 若 ext='bin', 走 guessMime(EXT_MIME_MAP) 看能不能从 mime 反推 jpg/png (mime→ext)
|
|
const rawName = filePath.split('/').pop() || `${kind}.bin`
|
|
const ext = extractExt(filePath, blob.type)
|
|
const finalName = ext !== 'bin' ? `${rawName}.${ext}` : rawName
|
|
// blob.type 通常是 image/png 或空; 空时用 guessMime 兜底
|
|
const mime = blob.type || guessMime(ext)
|
|
return new File([blob], finalName, { type: mime })
|
|
// #endif
|
|
}
|
|
|
|
/**
|
|
* PR-FRONTEND-MEDIA-INLINE-BASE64 (2026-09-16): 把附件原文件读成 base64,
|
|
* 用于 ai-chat-message.vue sendMessage 给 attachment 加 `data` 字段,
|
|
* 让 backend 走 WbAgentOsClient::buildMediaBlocks 路径 ① (inline base64)
|
|
* 而不是路径 ②/③ (URL fetch / resource_link).
|
|
*
|
|
* 为什么必要: 之前 PR-FRONTEND-MEDIA-UPLOAD-FIX 已让上传链路 (uni.compressImage
|
|
* → backend Upload.php) 返回了公网 URL, 但此 URL 是 backend Upload.php::buildPublicUrl
|
|
* 用 request()->domain() 拼出来的 (例如 http://192.168.x.x:8050/upload/...).
|
|
* 买家端 AI chat 把这个 URL 透给 backend, backend MediaGuard::urlAllowed
|
|
* 把 192.168.x.x 当内网 IP (FILTER_FLAG_NO_PRIV_RANGE) 拒绝, 附件被静默丢弃.
|
|
*
|
|
* 修复: 同步给 attachment 加 data: <bare-base64> 字段.
|
|
* - backend MessageMedia::normalizeInput 直接透传 data (line 207-208)
|
|
* - backend MediaGuard::check 看到 data 非空就无条件放行, 不参与 URL 校验 (line 137-140)
|
|
* - backend WbAgentOsClient::buildMediaBlocks 路径 ① 优先 data + image/audio → 直接 base64 内联
|
|
* 全链路 bypass URL 公网可达性 (无论 LAN 还是公网, 都不依赖 WB Cloud 拉 URL).
|
|
*
|
|
* 返回: { data: '<bare-base64>', size, mime } | null
|
|
* - null 时表示文件 > maxBytes (默认 5MB, J7 上限) 或读取失败 → 调用方跳过 data 字段, 走 URL 路径
|
|
* - bare-base64 (不带 data:image/png;base64, 前缀) — 后端 buildMediaBlocks 需要纯 base64
|
|
* - mime 从 blob.type (H5) / 调用方传 mimeHint (uni-app 平台不知道 blob.type)
|
|
*
|
|
* @param {string} filePath 选图/选文件时的原始路径 (blob: URL 或 _doc/tmp_xxx 路径)
|
|
* @param {object} [opts]
|
|
* @param {number} [opts.maxBytes=5MB] 超限返回 null (frontend 主动限流, 减轻带宽/内存)
|
|
* @param {string} [opts.mimeHint] 非 H5 平台拿不到 blob.type, 用 pending.uploaded.mime 兜底
|
|
*/
|
|
export async function fileToBase64(filePath, opts = {}) {
|
|
const maxBytes = opts.maxBytes || SIZE_LIMIT_INLINE_BASE64
|
|
if (!filePath) return null
|
|
|
|
// #ifdef H5
|
|
try {
|
|
const res = await fetch(filePath)
|
|
if (!res.ok) throw new Error('fetch failed: ' + res.status)
|
|
const blob = await res.blob()
|
|
if (blob.size > maxBytes) {
|
|
console.log('[media-upload] fileToBase64: size', blob.size, '> maxBytes', maxBytes, '→ 跳过内联')
|
|
return null
|
|
}
|
|
const dataUri = await new Promise((resolve, reject) => {
|
|
const reader = new FileReader()
|
|
reader.onload = () => resolve(reader.result)
|
|
reader.onerror = () => reject(new Error('FileReader failed'))
|
|
reader.readAsDataURL(blob)
|
|
})
|
|
const m = /^data:([^;,]+);base64,(.*)$/.exec(dataUri)
|
|
if (!m) throw new Error('unexpected data URI shape: ' + String(dataUri).slice(0, 40))
|
|
return { data: m[2], size: blob.size, mime: m[1] }
|
|
} catch (e) {
|
|
console.warn('[media-upload] fileToBase64 H5 失败:', e)
|
|
return null
|
|
}
|
|
// #endif
|
|
|
|
// #ifdef MP-WEIXIN || APP-PLUS
|
|
try {
|
|
const fsm = uni.getFileSystemManager()
|
|
// 1. 探测大小, 超限直接返回 null
|
|
let size = 0
|
|
try {
|
|
const stat = fsm.statSync(filePath)
|
|
// statSync 在部分平台返回 {size}, 部分返回 {fileSize}, 部分直接是数字
|
|
size = (stat && (stat.size || stat.fileSize)) || 0
|
|
} catch (e) {
|
|
// statSync 失败 (权限/路径) → 直接尝试 readFile, 后端会再校验 size
|
|
console.warn('[media-upload] fileToBase64 statSync failed, fallback to readFile:', e)
|
|
}
|
|
if (size > maxBytes) {
|
|
console.log('[media-upload] fileToBase64: size', size, '> maxBytes', maxBytes, '→ 跳过内联')
|
|
return null
|
|
}
|
|
// 2. readFile 拿 base64 — 同步 API 简单可靠, base64 在 5MB 文件 ≈ 6.7MB 字符串, 内存可控
|
|
const data = fsm.readFileSync(filePath, 'base64')
|
|
return { data, size: size || 0, mime: opts.mimeHint || '' }
|
|
} catch (e) {
|
|
console.warn('[media-upload] fileToBase64 uni-app 失败:', e)
|
|
return null
|
|
}
|
|
// #endif
|
|
}
|
|
|
|
function guessMime(ext) {
|
|
return EXT_MIME_MAP[ext] || 'application/octet-stream'
|
|
}
|
|
|
|
export default { uploadImage, uploadMedia } |