""" 工作手机SDK v3.0 - 设备管理服务（含设备指纹校验） """ import hashlib from typing import Optional, List, TYPE_CHECKING try: from motor.motor_asyncio import AsyncIOMotorClient except ImportError: # NAS 无 Mongo 依赖时降级 AsyncIOMotorClient = None # type: ignore[misc, assignment] import logging from datetime import datetime from config import settings logger = logging.getLogger(__name__) class DeviceManager: """设备管理器""" def __init__(self): self.client: Optional[AsyncIOMotorClient] = None self.db = None async def init(self): """初始化数据库连接（MongoDB 不可用时降级为无 DB 模式）""" if AsyncIOMotorClient is None: logger.warning("motor 未安装，MongoDB 功能降级为无 DB 模式") return try: self.client = AsyncIOMotorClient( settings.MONGO_URI, serverSelectionTimeoutMS=3000, # 3秒超时，不阻塞启动 ) await self.client.admin.command("ping") self.db = self.client[settings.MONGO_DB] # 尝试创建索引 try: await self.db.devices.create_index("device_id", unique=True) await self.db.commands.create_index("device_id") await self.db.commands.create_index("created_at") logger.info(f"MongoDB连接成功: {settings.MONGO_DB}") except Exception as e: logger.warning(f"MongoDB索引创建跳过（可能需要认证）: {e}") logger.info(f"MongoDB连接成功（无索引）: {settings.MONGO_DB}") except Exception as e: logger.warning(f"MongoDB 连接失败（降级为无DB模式，ADB 直连仍可用）: {e}") if self.client: self.client.close() self.client = None self.db = None async def close(self): """关闭连接""" if self.client: self.client.close() # ========== 设备管理 ========== async def register_device(self, device_data: dict) -> dict: """注册或更新设备（自动计算并校验指纹）""" device_id = device_data.get("device_id") fp_hash = self.compute_fingerprint(device_data) device_data["fingerprint_hash"] = fp_hash if self.db is None: return {"device_id": device_id, "updated": False, "fingerprint": fp_hash} device_data["updated_at"] = datetime.now() result = await self.db.devices.update_one( {"device_id": device_id}, { "$set": device_data, "$setOnInsert": {"created_at": datetime.now()} }, upsert=True ) collision = await self.check_fingerprint_collision(device_id, device_data) if collision["collision"]: logger.warning( f"[防封] 注册设备 {device_id} 指纹碰撞: {collision['collided_with']}" ) return { "device_id": device_id, "updated": result.modified_count > 0, "fingerprint": fp_hash, "fingerprint_collision": collision["collision"], "collided_with": collision.get("collided_with", []), } async def get_device(self, device_id: str) -> Optional[dict]: """获取设备信息""" if self.db is None: return None return await self.db.devices.find_one({"device_id": device_id}, {"_id": 0}) async def get_all_devices(self, skip: int = 0, limit: int = 100) -> List[dict]: """获取所有设备""" if self.db is None: return [] cursor = self.db.devices.find({}, {"_id": 0}).skip(skip).limit(limit) return await cursor.to_list(length=limit) async def update_device_status(self, device_id: str, status: str): """更新设备状态""" if self.db is None: return await self.db.devices.update_one( {"device_id": device_id}, {"$set": {"status": status, "updated_at": datetime.now()}} ) async def update_heartbeat(self, device_id: str): """更新设备心跳时间（设备状态实时反馈到服务器/数据库）""" if self.db is None: return now = datetime.now() await self.db.devices.update_one( {"device_id": device_id}, {"$set": {"last_heartbeat": now, "status": "online", "updated_at": now}}, upsert=True ) # ========== 设备指纹校验（防封 AF11） ========== @staticmethod def compute_fingerprint(info: dict) -> str: """从设备上报信息计算指纹哈希（MD5）。 防封要点（G2 修复 2026-05-31）：硬件字段缺失时，绝不能让所有设备 都得到空串 MD5（d41d8cd98f00b204e9800998ecf8427e）—— 那会令全部设备 互相"指纹碰撞"，使碰撞检测失效。无硬件数据时回退到 device_id 作为 稳定种子，保证一机一指纹；同时兼容嵌套 display.{width,height}。 """ keys = sorted([ "brand", "model", "manufacturer", "android_version", "sdk_version", "serial", "imei", "mac", "bluetooth_mac", "screen_width", "screen_height", "density", "cpu_abi", "fingerprint", "android_id", ]) merged = dict(info or {}) # 兼容 agent 上报的嵌套 display.{width,height} disp = merged.get("display") if isinstance(disp, dict): merged.setdefault("screen_width", disp.get("width") or disp.get("displayWidth")) merged.setdefault("screen_height", disp.get("height") or disp.get("displayHeight")) parts = [] for k in keys: v = merged.get(k, "") if v: parts.append(f"{k}={v}") if not parts: # 无任何硬件字段：用 device_id 兜底，避免全设备空哈希误撞 did = merged.get("device_id", "") if did: parts.append(f"device_id={did}") raw = "|".join(parts) return hashlib.md5(raw.encode("utf-8")).hexdigest() async def check_fingerprint_collision(self, device_id: str, info: dict) -> dict: """ 检查设备指纹是否与其他设备碰撞。 返回 {"collision": bool, "collided_with": [device_ids...]} """ fp = self.compute_fingerprint(info) if self.db is None: return {"collision": False, "collided_with": [], "fingerprint": fp} try: await self.db.devices.update_one( {"device_id": device_id}, {"$set": {"fingerprint_hash": fp, "fingerprint_info": info}}, upsert=True, ) except Exception as e: logger.warning(f"指纹写入失败: {e}") try: cursor = self.db.devices.find( {"fingerprint_hash": fp, "device_id": {"$ne": device_id}}, {"device_id": 1, "_id": 0}, ) collisions = [doc["device_id"] async for doc in cursor] except Exception as e: logger.warning(f"指纹碰撞查询失败: {e}") collisions = [] if collisions: logger.warning( f"[防封] 设备指纹碰撞! {device_id} 与 {collisions} 指纹相同 (hash={fp})" ) return { "collision": len(collisions) > 0, "collided_with": collisions, "fingerprint": fp, } # ========== 命令日志 ========== async def log_command( self, device_id: str, command_type: str, params: dict, result: dict ): """记录命令执行日志""" if self.db is None: return try: await self.db.commands.insert_one({ "device_id": device_id, "command_type": command_type, "params": params, "result": result, "created_at": datetime.now() }) except Exception as e: # Mongo 无权限/不可用时不阻断主流程 logger.warning(f"命令日志写入失败（已跳过）: {e}") async def get_command_logs( self, device_id: str, limit: int = 50 ) -> List[dict]: """获取命令日志""" if self.db is None: return [] try: cursor = self.db.commands.find( {"device_id": device_id}, {"_id": 0} ).sort("created_at", -1).limit(limit) return await cursor.to_list(length=limit) except Exception as e: logger.warning(f"命令日志查询失败（已跳过）: {e}") return [] # 全局实例 device_manager = DeviceManager()