Dushnilin
26431f50d3
Features: - Per-Section MAC Exclusions: nft, generator_routes, section.js, i18n - Per-Section Routed DNS: connections, generator_routes, nft, validator, types.ts, section.js, state.uc, reload.uc - Boot Latency Sweep: ui.uc latency boot sweep with fixture dispatchers - WDTT provider: full backend (common, validator, runtime), sing-box outbound, diagnostics, component install, updater, i18n, section.js UI - OlcRTC provider: full backend (common, validator, runtime), sing-box outbound, diagnostics, component install, updater, i18n, section.js UI - WireGuard-over-TURN tunnel (WDTT) and TCP-over-WebRTC tunnel (OlcRTC) as sidecar processes with local SOCKS5, routed through sing-box outbound Bug fixes: - route.uc: restrict hijack-dns to local DNS inbounds only (dns-in, source-dns-in, dns-health-*) — fixes socket collision between sing-box and dnsmasq on port 53 via SO_REUSEADDR transparent write-back sockets - runtime.uc: add Port 53 socket collision diagnostic with auto-fix (sing-box restart to clear parasitic UNCONN sockets with Recv-Q) - runtime.uc: add dnsmasq dns_redirect check with auto-fix — disables firewall4 DNAT that causes TProxy to rewrite destination to router :53 - failover.uc: add wdtt/olcrtc to failover candidate actions - telegram.uc: show WDTT/OlcRTC installed status in /info Tests: 135/155 shell + 591/591 frontend
3546 lines
155 KiB
Ucode
3546 lines
155 KiB
Ucode
#!/usr/bin/env ucode
|
||
|
||
let fs = require("fs");
|
||
let uci_core = require("core.uci");
|
||
let common = require("core.common");
|
||
let connections = require("config.connections");
|
||
let helpers = require("core.helpers");
|
||
let api = require("service.api");
|
||
let dns_presets = require("singbox.dns_presets"); // Our new API module
|
||
let i18n = require("service.i18n");
|
||
|
||
const CONFIG_NAME = getenv("TACHYON_CONFIG_NAME") || "tachyon";
|
||
const LIB_DIR = getenv("TACHYON_LIB") || "/usr/lib/tachyon";
|
||
const NFT_TABLE_NAME = getenv("NFT_TABLE_NAME") || "TachyonTable";
|
||
const PID_FILE = "/var/run/tachyon_telegram.pid";
|
||
const OFFSET_FILE = "/var/run/tachyon_telegram_offset";
|
||
|
||
let as_string = common.as_string;
|
||
let option = common.option;
|
||
let bool_option = common.bool_option;
|
||
let int_option = common.int_option;
|
||
let list_option = common.list_option;
|
||
let shell_quote = common.shell_quote;
|
||
let object_or_empty = common.object_or_empty;
|
||
let command_status = common.command_status;
|
||
let command_success_from_args = common.command_success_from_args;
|
||
let command_from_args = common.command_from_args;
|
||
let command_capture = common.command_capture;
|
||
let command_output_from_args = common.command_output_from_args;
|
||
let write_text_file = helpers.write_text_file;
|
||
|
||
let t = i18n.bind("en");
|
||
|
||
// ─── Callback Data Helpers ────────────────────────────────────────────────────
|
||
|
||
// Telegram limits callback_data to 64 *bytes*. ucode strings are byte based, so
|
||
// length() already reports bytes. Payloads longer than that used to be truncated,
|
||
// which silently broke deletion of long entries (and could split a UTF-8 sequence
|
||
// mid-character, making Telegram reject the whole keyboard). Instead we now store
|
||
// the full payload in a small on-disk map and send a short opaque token.
|
||
const CB_MAP_FILE = "/tmp/tg_cb_map.json";
|
||
const CB_MAP_MAX = 300;
|
||
let cb_map_cache = null;
|
||
|
||
function cb_map_load() {
|
||
if (cb_map_cache != null)
|
||
return cb_map_cache;
|
||
let data = fs.readfile(CB_MAP_FILE);
|
||
if (data) {
|
||
try {
|
||
let obj = json(data);
|
||
if (type(obj) == "object") {
|
||
cb_map_cache = obj;
|
||
return cb_map_cache;
|
||
}
|
||
}
|
||
catch (e) {
|
||
command_success_from_args([ "logger", "-t", "tachyon-telegram",
|
||
"[warn] callback map is unparseable, starting from empty: " + as_string(e) ]);
|
||
}
|
||
}
|
||
cb_map_cache = {};
|
||
return cb_map_cache;
|
||
}
|
||
|
||
function cb_map_store(token, value) {
|
||
let map = cb_map_load();
|
||
if (map[token] == value)
|
||
return;
|
||
let ks = keys(map);
|
||
if (length(ks) >= CB_MAP_MAX) {
|
||
let pruned = {};
|
||
for (let i = int(length(ks) / 2); i < length(ks); i++)
|
||
pruned[ks[i]] = map[ks[i]];
|
||
map = pruned;
|
||
cb_map_cache = map;
|
||
}
|
||
map[token] = value;
|
||
let stored = false;
|
||
try {
|
||
stored = fs.writefile(CB_MAP_FILE, sprintf("%J", map)) != null;
|
||
}
|
||
catch (e) {
|
||
command_success_from_args([ "logger", "-t", "tachyon-telegram",
|
||
"[err] Failed to store callback map, buttons in this keyboard will not work: " + as_string(e) ]);
|
||
return;
|
||
}
|
||
if (!stored)
|
||
command_success_from_args([ "logger", "-t", "tachyon-telegram",
|
||
"[err] Failed to store callback map, buttons in this keyboard will not work" ]);
|
||
}
|
||
|
||
function cb_map_get(token) {
|
||
let map = cb_map_load();
|
||
let val = map[as_string(token)];
|
||
return (type(val) == "string") ? val : null;
|
||
}
|
||
|
||
function cb_data(args) {
|
||
let s = join(" ", args);
|
||
if (length(s) <= 64) return s;
|
||
let h = 0;
|
||
for (let i = 0; i < length(s); i++)
|
||
h = ((h << 5) - h + ord(s, i)) | 0;
|
||
// Mix the length into the token to make accidental collisions far less likely
|
||
let token = sprintf("%08x%02x", h & 0xFFFFFFFF, length(s) & 0xFF);
|
||
cb_map_store(token, s);
|
||
return "/cb " + token;
|
||
}
|
||
|
||
// ─── Settings & Config ────────────────────────────────────────────────────────
|
||
|
||
function settings() {
|
||
return object_or_empty(uci_core.get_all(CONFIG_NAME, "telegram"));
|
||
}
|
||
|
||
function get_mixed_proxy_info() {
|
||
let settings_data = common.object_or_empty(uci_core.get_all(CONFIG_NAME, "settings"));
|
||
let config_path = trim(as_string(settings_data.config_path || "")) || "/etc/sing-box/config.json";
|
||
let data = fs.readfile(config_path);
|
||
if (data == null) return null;
|
||
let parsed;
|
||
try { parsed = json(data); } catch (e) { return null; }
|
||
if (parsed == null || parsed.inbounds == null) return null;
|
||
|
||
for (let inbound in parsed.inbounds) {
|
||
if (inbound.tag == "service-mixed-in" && inbound.listen_port != null) {
|
||
let port = int(inbound.listen_port, 10);
|
||
if (port > 0) {
|
||
let host = as_string(inbound.listen || "127.0.0.1");
|
||
if (host == "0.0.0.0" || host == "::" || host == "") host = "127.0.0.1";
|
||
return { host: host, port: port, tag: inbound.tag };
|
||
}
|
||
}
|
||
}
|
||
for (let inbound in parsed.inbounds) {
|
||
if ((inbound.type == "mixed" || inbound.type == "http") && inbound.listen_port != null) {
|
||
let listen = as_string(inbound.listen || "");
|
||
if (listen == "127.0.0.1" || listen == "0.0.0.0" || listen == "::" || listen == "") {
|
||
let port = int(inbound.listen_port, 10);
|
||
if (port > 0) return { host: "127.0.0.1", port: port, tag: inbound.tag };
|
||
}
|
||
}
|
||
}
|
||
for (let inbound in parsed.inbounds) {
|
||
if ((inbound.type == "mixed" || inbound.type == "http") && inbound.listen_port != null) {
|
||
let port = int(inbound.listen_port, 10);
|
||
if (port > 0) {
|
||
let host = as_string(inbound.listen || "127.0.0.1");
|
||
if (host == "0.0.0.0" || host == "::" || host == "") host = "127.0.0.1";
|
||
return { host: host, port: port, tag: inbound.tag };
|
||
}
|
||
}
|
||
}
|
||
return null;
|
||
}
|
||
|
||
function get_mixed_port() {
|
||
let info = get_mixed_proxy_info();
|
||
return info ? info.port : 4534;
|
||
}
|
||
|
||
function get_mixed_proxy_endpoint() {
|
||
let info = get_mixed_proxy_info();
|
||
if (!info) return null;
|
||
return info.host + ":" + info.port;
|
||
}
|
||
|
||
// Liveness cache for the mixed proxy port: probing netstat on every poll
|
||
// tick would spawn a process every few seconds for a fact that rarely
|
||
// changes. A dead port is re-probed on this TTL; a live one too.
|
||
const MIXED_PORT_PROBE_TTL = 30;
|
||
let mixed_port_alive_cached = null;
|
||
let mixed_port_checked_at = 0;
|
||
|
||
function mixed_port_alive() {
|
||
let now = time();
|
||
if (mixed_port_alive_cached != null && (now - mixed_port_checked_at) < MIXED_PORT_PROBE_TTL)
|
||
return mixed_port_alive_cached;
|
||
|
||
let alive = false;
|
||
let port = get_mixed_port();
|
||
let out = command_output_from_args([ "netstat", "-ltn" ]);
|
||
for (let line in split(out, "\n")) {
|
||
if (index(line, ":" + port + " ") >= 0) {
|
||
alive = true;
|
||
break;
|
||
}
|
||
}
|
||
|
||
mixed_port_alive_cached = alive;
|
||
mixed_port_checked_at = now;
|
||
return alive;
|
||
}
|
||
|
||
// Direct-to-Telegram fallback: when the local proxy route is broken the bot
|
||
// used to go permanently silent even though api.telegram.org was reachable
|
||
// straight from the router. Enabled by default, opt-out via UCI
|
||
// telegram.bot_direct_fallback='0'.
|
||
function direct_fallback_enabled() {
|
||
return trim(as_string(settings().bot_direct_fallback || "1")) != "0";
|
||
}
|
||
|
||
function get_proxy_args() {
|
||
let cfg = settings();
|
||
if (command_success_from_args(["pidof", "sing-box"])) {
|
||
// A running sing-box alone proves nothing: the mixed inbound may have
|
||
// failed to bind while the rest of the core came up. Only route bot
|
||
// traffic through 4534 when something actually listens there.
|
||
let ep = get_mixed_proxy_endpoint() || ("127.0.0.1:" + get_mixed_port());
|
||
if (!mixed_port_alive()) {
|
||
if (direct_fallback_enabled())
|
||
return [];
|
||
// Paranoid mode (fallback disabled): keep legacy behavior.
|
||
return [ "--proxy", "http://" + ep ];
|
||
}
|
||
// If a specific section is configured for the bot, force-select it
|
||
// through the Mihomo REST API so the mixed proxy routes bot traffic
|
||
// through the right outbound.
|
||
let bot_section = cfg.bot_proxy_section ? trim(cfg.bot_proxy_section) : "";
|
||
if (bot_section != "") {
|
||
let tag = bot_section + "-out";
|
||
command_capture(command_from_args([
|
||
"curl", "-s", "-X", "PUT",
|
||
"-H", "Content-Type: application/json",
|
||
"-d", sprintf("%J", { name: tag }),
|
||
"http://127.0.0.1:9090/proxies/GLOBAL"
|
||
]));
|
||
}
|
||
return [ "--proxy", "http://" + ep ];
|
||
}
|
||
if (cfg.fallback_socks && trim(cfg.fallback_socks) != "") {
|
||
return [ "--proxy", "socks5h://" + trim(cfg.fallback_socks) ];
|
||
}
|
||
return [];
|
||
}
|
||
|
||
// ─── Telegram API Core ───────────────────────────────────────────────────────
|
||
|
||
const HEARTBEAT_FILE = "/var/run/tachyon_telegram.heartbeat";
|
||
const LOG_FILE = "/var/log/tachyon_telegram.log";
|
||
// The worker log lives on tmpfs: without a ceiling a chatty error loop
|
||
// slowly eats router RAM. Rotate when the file exceeds this size.
|
||
const LOG_MAX_BYTES = 524288;
|
||
const LOG_KEEP_BYTES = 102400;
|
||
|
||
// Liveness stamp for the watchdog: a worker that stopped touching this file
|
||
// while still owning the pid is stuck (hung long-poll, deadlocked loop) and
|
||
// gets restarted by the watchdog's slow checks.
|
||
function write_heartbeat() {
|
||
write_text_file(HEARTBEAT_FILE, as_string(time()) + "\n");
|
||
}
|
||
|
||
function rotate_log_if_needed() {
|
||
let st = fs.stat(LOG_FILE);
|
||
if (!st || int(st.size || 0) <= LOG_MAX_BYTES)
|
||
return;
|
||
let data = fs.readfile(LOG_FILE);
|
||
if (data == null)
|
||
return;
|
||
let tail = substr(data, length(data) - LOG_KEEP_BYTES);
|
||
// Keep the most recent lines only; leading partial line is harmless.
|
||
let newline = index(tail, "\n");
|
||
if (newline >= 0)
|
||
tail = substr(tail, newline + 1);
|
||
fs.writefile(LOG_FILE, "--- log truncated (size cap) ---\n" + tail);
|
||
}
|
||
|
||
function alert_route_failure(attempt, proxy_alive) {
|
||
// One-shot per failure episode - the caller clears the flag as soon as
|
||
// polling recovers. Delivery rides on tg_request's own fallback chain:
|
||
// if the proxy route is what's broken, the message goes out directly.
|
||
let cfg = settings();
|
||
let token = trim(as_string(cfg.bot_token || ""));
|
||
if (token == "") return;
|
||
let admins = split(trim(as_string(cfg.admin_ids || "")), /,/);
|
||
let chat_id = trim(as_string(admins[0] || ""));
|
||
if (chat_id == "") return;
|
||
|
||
let hint = proxy_alive
|
||
? t("route_proxy_alive")
|
||
: t("route_proxy_down");
|
||
let text = "⚠️ <b>" + t("route_alert_title") + "</b> " + as_string(attempt) +
|
||
" " + t("route_alert_consecutive") + ".\n" +
|
||
t("route_reason") + " " + hint + ".\n" +
|
||
t("route_fallback_hint") + "\n" +
|
||
t("route_heal_hint");
|
||
send_message(token, chat_id, text, "HTML", null);
|
||
}
|
||
|
||
function tg_request_via(token, method, payload, proxy_args) {
|
||
if (!token) return null;
|
||
let url = "https://api.telegram.org/bot" + token + "/" + method;
|
||
// Pass the JSON body directly to curl's -d argument so there is no temp
|
||
// file to leak: the old /tmp/tg_payload_*.json files were left behind
|
||
// whenever the process was killed mid-request (e.g. during the 20-second
|
||
// getUpdates long-poll on reboot or watchdog restart).
|
||
let body = sprintf("%J", payload);
|
||
let is_poll = (method == "getUpdates");
|
||
let max_time = is_poll ? "35" : "12";
|
||
let conn_timeout = is_poll ? "10" : "5";
|
||
let args = [ "curl", "-s", "-m", max_time, "--connect-timeout", conn_timeout,
|
||
"-X", "POST", "-H", "Content-Type: application/json",
|
||
"-d", body ];
|
||
for (let p in proxy_args) push(args, p);
|
||
push(args, url);
|
||
let res = command_capture(command_from_args(args));
|
||
if (!res || res.status != 0 || res.output == "") return null;
|
||
try { return json(res.output); } catch (e) { return null; }
|
||
}
|
||
|
||
function tg_request(token, method, payload) {
|
||
if (!token) return null;
|
||
|
||
let proxy_args = get_proxy_args();
|
||
let res = tg_request_via(token, method, payload, proxy_args);
|
||
if (res != null)
|
||
return res;
|
||
|
||
// Proxy route produced nothing (dead mixed inbound, refused connection,
|
||
// timeout). When the direct fallback is allowed, retry without proxy
|
||
// before giving up - api.telegram.org is usually reachable straight from
|
||
// the router even while the proxy chain is being repaired.
|
||
if (direct_fallback_enabled() && length(proxy_args) > 0)
|
||
res = tg_request_via(token, method, payload, []);
|
||
|
||
return res;
|
||
}
|
||
|
||
function send_message(token, chat_id, text, parse_mode, keyboard) {
|
||
text = as_string(text);
|
||
if (length(text) > 3900) {
|
||
text = substr(text, 0, 3900) + "\n... " + t("msg_truncated");
|
||
if (parse_mode == "HTML") {
|
||
if (index(text, "<pre>") >= 0 && index(text, "</pre>") < 0) text += "</pre>";
|
||
if (index(text, "<code>") >= 0 && index(text, "</code>") < 0) text += "</code>";
|
||
if (index(text, "<b>") >= 0 && index(text, "</b>") < 0) text += "</b>";
|
||
if (index(text, "<i>") >= 0 && index(text, "</i>") < 0) text += "</i>";
|
||
}
|
||
}
|
||
let payload = { chat_id: int(chat_id), text: text };
|
||
if (parse_mode) payload.parse_mode = parse_mode;
|
||
if (keyboard) payload.reply_markup = { inline_keyboard: keyboard };
|
||
let res = tg_request(token, "sendMessage", payload);
|
||
if ((!res || !res.ok) && parse_mode) {
|
||
delete payload.parse_mode;
|
||
payload.text = replace(text, /<[^>]+>/g, "");
|
||
res = tg_request(token, "sendMessage", payload);
|
||
}
|
||
return res;
|
||
}
|
||
|
||
function edit_message(token, chat_id, message_id, text, parse_mode, keyboard) {
|
||
text = as_string(text);
|
||
if (length(text) > 3900) {
|
||
text = substr(text, 0, 3900) + "\n... " + t("msg_truncated");
|
||
if (parse_mode == "HTML") {
|
||
if (index(text, "<pre>") >= 0 && index(text, "</pre>") < 0) text += "</pre>";
|
||
if (index(text, "<code>") >= 0 && index(text, "</code>") < 0) text += "</code>";
|
||
if (index(text, "<b>") >= 0 && index(text, "</b>") < 0) text += "</b>";
|
||
if (index(text, "<i>") >= 0 && index(text, "</i>") < 0) text += "</i>";
|
||
}
|
||
}
|
||
let payload = { chat_id: int(chat_id), message_id: int(message_id), text: text };
|
||
if (parse_mode) payload.parse_mode = parse_mode;
|
||
if (keyboard) payload.reply_markup = { inline_keyboard: keyboard };
|
||
let res = tg_request(token, "editMessageText", payload);
|
||
if ((!res || !res.ok) && parse_mode) {
|
||
delete payload.parse_mode;
|
||
payload.text = replace(text, /<[^>]+>/g, "");
|
||
res = tg_request(token, "editMessageText", payload);
|
||
}
|
||
return res;
|
||
}
|
||
|
||
function send_document(token, chat_id, file_path) {
|
||
if (!token) return null;
|
||
let url = "https://api.telegram.org/bot" + token + "/sendDocument";
|
||
let args = [ "curl", "-s", "-m", "60", "--connect-timeout", "10", "-X", "POST", "-F", "chat_id=" + chat_id, "-F", "document=@" + file_path ];
|
||
let proxy = get_proxy_args();
|
||
for (let p in proxy) push(args, p);
|
||
push(args, url);
|
||
let res = command_capture(command_from_args(args));
|
||
if (!res || res.status != 0 || res.output == "") return null;
|
||
try { return json(res.output); } catch (e) { return null; }
|
||
}
|
||
|
||
function get_file_url(token, file_id) {
|
||
let res = tg_request(token, "getFile", { file_id: file_id });
|
||
if (res && res.ok && res.result && res.result.file_path) {
|
||
return "https://api.telegram.org/file/bot" + token + "/" + res.result.file_path;
|
||
}
|
||
return null;
|
||
}
|
||
|
||
// ─── State Management ────────────────────────────────────────────────────────
|
||
|
||
// chat_id arrives from untrusted Telegram payloads; keep /tmp paths traversal-safe
|
||
function tg_state_path(chat_id) {
|
||
let safe_id = as_string(chat_id);
|
||
if (!match(safe_id, /^-?[0-9]+$/))
|
||
return null;
|
||
return "/tmp/tg_state_" + safe_id + ".json";
|
||
}
|
||
|
||
function get_tg_state(chat_id) {
|
||
let f = tg_state_path(chat_id);
|
||
if (!f) return null;
|
||
let data = fs.readfile(f);
|
||
// A corrupt per-chat state file drops that conversation back to the main
|
||
// menu, which is the same thing a missing file does.
|
||
if (data) { try { return json(data); } catch(e) {} }
|
||
return null;
|
||
}
|
||
|
||
function set_tg_state(chat_id, state_obj) {
|
||
let f = tg_state_path(chat_id);
|
||
if (!f) return;
|
||
// Absent file already satisfies the caller; fs.unlink throws on ENOENT.
|
||
if (state_obj == null) { try { fs.unlink(f); } catch(e) {} }
|
||
else fs.writefile(f, sprintf("%J", state_obj));
|
||
}
|
||
|
||
function is_admin(chat_id, admin_ids_str) {
|
||
if (!admin_ids_str) return false;
|
||
let admins = split(admin_ids_str, /,/);
|
||
for (let admin in admins) {
|
||
if (trim(admin) == as_string(chat_id)) return true;
|
||
}
|
||
return false;
|
||
}
|
||
|
||
// ─── Safe command executor (whitelist-only, no shell interpretation) ─────────
|
||
|
||
let safe_exec_patterns = {
|
||
tachyon: {
|
||
bin: "/usr/bin/tachyon",
|
||
min_args: 0,
|
||
max_args: 1,
|
||
usage: "tachyon [get_status|doctor|show_sing_box_version|show_version]"
|
||
},
|
||
logread: {
|
||
bin: "/sbin/logread",
|
||
min_args: 0,
|
||
max_args: 1,
|
||
extra_pattern: /^-t$/,
|
||
usage: "logread [-t]"
|
||
},
|
||
ubus: {
|
||
bin: "/bin/ubus",
|
||
args: [ "call", "system", "board" ],
|
||
exact: true,
|
||
usage: "ubus call system board"
|
||
},
|
||
df: {
|
||
bin: "/bin/df",
|
||
args: [ "-h" ],
|
||
exact: true,
|
||
usage: "df -h"
|
||
},
|
||
free: {
|
||
bin: "/usr/bin/free",
|
||
min_args: 0,
|
||
max_args: 0,
|
||
usage: "free"
|
||
},
|
||
uptime: {
|
||
bin: "/usr/bin/uptime",
|
||
min_args: 0,
|
||
max_args: 0,
|
||
usage: "uptime"
|
||
},
|
||
nft: {
|
||
bin: "/usr/sbin/nft",
|
||
args: [ "list", "tables" ],
|
||
exact: true,
|
||
usage: "nft list tables"
|
||
}
|
||
};
|
||
|
||
function parse_command_words(text) {
|
||
// Split on whitespace while honoring single/double quotes; shell metacharacters
|
||
// stay literal because they are passed as exact argv to command_from_args().
|
||
let words = [];
|
||
let cur = "";
|
||
let quote = null;
|
||
for (let i = 0; i < length(text); i++) {
|
||
let ch = substr(text, i, 1);
|
||
if (quote) {
|
||
if (ch == quote) quote = null;
|
||
else cur += ch;
|
||
continue;
|
||
}
|
||
if (ch == "'" || ch == "\"") { quote = ch; continue; }
|
||
if (ch == " " || ch == "\t" || ch == "\n") {
|
||
if (cur != "") { push(words, cur); cur = ""; }
|
||
continue;
|
||
}
|
||
cur += ch;
|
||
}
|
||
if (cur != "") push(words, cur);
|
||
return { words: words, error: quote ? "unclosed quote" : null };
|
||
}
|
||
|
||
function safe_allowed_commands_text() {
|
||
let lines = [];
|
||
for (let k in keys(safe_exec_patterns)) {
|
||
let p = safe_exec_patterns[k];
|
||
push(lines, "<code>" + p.usage + "</code>");
|
||
}
|
||
return join("\n", lines);
|
||
}
|
||
|
||
function safe_execute(exec_text) {
|
||
let parsed = parse_command_words(exec_text);
|
||
if (parsed.error || length(parsed.words) == 0)
|
||
return { status: 1, output: t("err_invalid_format") };
|
||
|
||
let argv = parsed.words;
|
||
let command_name = argv[0];
|
||
// strip any leading path, e.g. "/sbin/logread" -> "logread"
|
||
let base_match = match(command_name, /([^\/]+)$/);
|
||
let base = base_match ? base_match[1] : command_name;
|
||
|
||
let policy = safe_exec_patterns[base];
|
||
if (!policy)
|
||
return { status: 1, output: t("err_not_allowed", base) };
|
||
|
||
let rest = slice(argv, 1);
|
||
|
||
if (policy.exact) {
|
||
if (length(rest) != length(policy.args)) return { status: 1, output: t("err_args_mismatch") };
|
||
for (let i = 0; i < length(rest); i++)
|
||
if (rest[i] != policy.args[i]) return { status: 1, output: t("err_args_mismatch") };
|
||
} else {
|
||
if (length(rest) < policy.min_args || length(rest) > policy.max_args) return { status: 1, output: t("err_wrong_arg_count") };
|
||
// Commands that accept optional flags validate each one against extra_pattern
|
||
if (policy.extra_pattern) {
|
||
for (let arg in rest)
|
||
if (!match(arg, policy.extra_pattern)) return { status: 1, output: t("err_arg_not_allowed", arg) };
|
||
}
|
||
// For tachyon: allow only read-only subcommand verbs
|
||
if (base == "tachyon" && length(rest) == 1) {
|
||
let allowed_sub = { get_status: 1, doctor: 1, show_version: 1, show_sing_box_version: 1, show_config: 1, get_system_info: 1 };
|
||
if (!allowed_sub[rest[0]]) return { status: 1, output: t("err_subcmd_not_allowed", rest[0]) };
|
||
}
|
||
}
|
||
|
||
let full_argv = [ policy.bin ];
|
||
for (let a in rest) push(full_argv, a);
|
||
return command_capture(command_from_args(full_argv));
|
||
}
|
||
|
||
function escape_html(text) {
|
||
text = replace(as_string(text), /&/g, "&");
|
||
text = replace(text, /</g, "<");
|
||
text = replace(text, />/g, ">");
|
||
text = replace(text, /"/g, """);
|
||
return text;
|
||
}
|
||
|
||
function ipv4_to_int(addr) {
|
||
let parts = split(addr, ".");
|
||
if (length(parts) != 4) return 0;
|
||
return (int(parts[0]) << 24) | (int(parts[1]) << 16) | (int(parts[2]) << 8) | int(parts[3]);
|
||
}
|
||
|
||
function cidr_match_v4(target, cidr) {
|
||
let slash = index(cidr, "/");
|
||
if (slash < 0) return target == cidr;
|
||
let cidr_ip = substr(cidr, 0, slash);
|
||
let prefix = int(substr(cidr, slash + 1));
|
||
if (prefix < 0 || prefix > 32) return false;
|
||
let target_int = ipv4_to_int(target);
|
||
let cidr_int = ipv4_to_int(cidr_ip);
|
||
if (target_int == 0 || cidr_int == 0) return false;
|
||
let mask = prefix == 0 ? 0 : (~0 << (32 - prefix));
|
||
return (target_int & mask) == (cidr_int & mask);
|
||
}
|
||
|
||
// ─── Views & Handlers ────────────────────────────────────────────────────────
|
||
|
||
function format_bytes(b) {
|
||
b = double(b || 0);
|
||
if (b > 1073741824) return sprintf("%.2f GB", b / 1073741824);
|
||
if (b > 1048576) return sprintf("%.2f MB", b / 1048576);
|
||
if (b > 1024) return sprintf("%.2f KB", b / 1024);
|
||
return sprintf("%d B", b);
|
||
}
|
||
|
||
|
||
let setting_schema = {
|
||
settings: {
|
||
dns_type: "dns_type",
|
||
dns_server: "dns_server",
|
||
bootstrap_dns_server: "bootstrap_dns_server",
|
||
dns_strategy: "dns_strategy",
|
||
dns_detour_enabled: "dns_detour_enabled",
|
||
source_network_interfaces: "source_network_interfaces",
|
||
enable_output_network_interface: "enable_output_network_interface",
|
||
enable_badwan_interface_monitoring: "enable_badwan_interface_monitoring",
|
||
enable_yacd: "enable_yacd",
|
||
disable_quic: "disable_quic",
|
||
block_doh: "block_doh",
|
||
list_update_enabled: "list_update_enabled",
|
||
component_update_check_enabled: "component_update_check_enabled",
|
||
download_lists_via_proxy: "download_lists_via_proxy",
|
||
download_components_via_proxy: "download_components_via_proxy",
|
||
dont_touch_dhcp: "dont_touch_dhcp",
|
||
isolate_p2p: "isolate_p2p",
|
||
log_level: "log_level",
|
||
exclude_ntp: "exclude_ntp",
|
||
shutdown_correctly: "shutdown_correctly",
|
||
smart_detect: "smart_detect",
|
||
smart_detect_sections: "smart_detect_sections"
|
||
},
|
||
telegram: {
|
||
enabled: "enabled",
|
||
bot_token: "bot_token",
|
||
admin_ids: "admin_ids",
|
||
poll_interval: "poll_interval",
|
||
notify_crash: "notify_crash",
|
||
notify_restart: "notify_restart",
|
||
notify_server_switch: "notify_server_switch",
|
||
notify_subscription: "notify_subscription",
|
||
notify_cert: "notify_cert",
|
||
notify_dns_leak: "notify_dns_leak",
|
||
daily_report_enabled: "daily_report_enabled",
|
||
daily_report_hour: "daily_report_hour",
|
||
quiet_hours_enabled: "quiet_hours_enabled",
|
||
quiet_hours_start: "quiet_hours_start",
|
||
quiet_hours_end: "quiet_hours_end",
|
||
fallback_socks: "fallback_socks",
|
||
language: "language"
|
||
},
|
||
subscription_url: {
|
||
section: "section",
|
||
url: "url",
|
||
auto_user_agent: "auto_user_agent",
|
||
user_agent: "user_agent",
|
||
auto_hwid: "auto_hwid",
|
||
subscription_update_enabled: "subscription_update_enabled",
|
||
subscription_update_interval: "subscription_update_interval",
|
||
download_via_proxy_enabled: "download_via_proxy_enabled",
|
||
show_dashboard_metadata: "show_dashboard_metadata",
|
||
prefix_nodes: "prefix_nodes",
|
||
node_prefix: "node_prefix",
|
||
include_urltest_groups: "include_urltest_groups",
|
||
hide_urltest_group_outbounds: "hide_urltest_group_outbounds",
|
||
hide_detour_outbounds: "hide_detour_outbounds"
|
||
},
|
||
server: {
|
||
label: "label",
|
||
enabled: "enabled",
|
||
protocol: "protocol",
|
||
routing_mode: "routing_mode"
|
||
}
|
||
};
|
||
|
||
function get_schema_label(stype, key) {
|
||
if (setting_schema[stype] && setting_schema[stype][key])
|
||
return t(setting_schema[stype][key]);
|
||
return t(key);
|
||
}
|
||
|
||
function is_boolean_key(key) {
|
||
let b = ["enabled", "auto_user_agent", "auto_hwid", "subscription_update_enabled",
|
||
"download_via_proxy_enabled", "show_dashboard_metadata", "prefix_nodes",
|
||
"include_urltest_groups", "hide_urltest_group_outbounds", "hide_detour_outbounds",
|
||
"dns_detour_enabled", "enable_output_network_interface", "enable_badwan_interface_monitoring",
|
||
"enable_yacd", "disable_quic", "block_doh", "list_update_enabled", "component_update_check_enabled",
|
||
"download_lists_via_proxy", "download_components_via_proxy", "dont_touch_dhcp",
|
||
"isolate_p2p", "exclude_ntp", "shutdown_correctly", "smart_detect",
|
||
"notify_crash", "notify_restart", "notify_server_switch", "notify_subscription", "notify_cert", "notify_dns_leak",
|
||
"daily_report_enabled", "quiet_hours_enabled"];
|
||
for (let x in b) if (x == key) return true;
|
||
return false;
|
||
}
|
||
|
||
function is_list_key(key) {
|
||
let l = ["dns_server", "bootstrap_dns_server", "source_network_interfaces",
|
||
"badwan_monitored_interfaces", "smart_detect_sections"];
|
||
for (let x in l) if (x == key) return true;
|
||
return false;
|
||
}
|
||
|
||
function view_settings_menu(token, chat_id, msg_id) {
|
||
let text = "⚙️ <b>" + t("menu_all_settings") + "</b>\n\n" + t("menu_choose_cat");
|
||
let keyboard = [
|
||
[{ text: t("menu_global"), callback_data: "/set_cat settings settings" }],
|
||
[{ text: t("menu_telegram"), callback_data: "/set_cat telegram telegram" }],
|
||
[{ text: t("menu_subscriptions"), callback_data: "/set_list subscription_url" }],
|
||
[{ text: t("menu_servers_short"), callback_data: "/set_list server" }],
|
||
[{ text: t("menu_dns_presets"), callback_data: "/dns_presets" }],
|
||
[{ text: t("menu_quiet_hours"), callback_data: "/qh" }],
|
||
[{ text: t("menu_guest"), callback_data: "/guest" }],
|
||
[{ text: t("menu_language"), callback_data: "/lang" }],
|
||
[{ text: t("menu_test_rule"), callback_data: "/test_rule" }],
|
||
[{ text: t("menu_export_config"), callback_data: "/export_config" }],
|
||
[{ text: t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_set_list(token, chat_id, msg_id, stype) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let all = c.get_all(CONFIG_NAME);
|
||
let keyboard = [];
|
||
for (let sname in all) {
|
||
let s = all[sname];
|
||
if (s[".type"] == stype) {
|
||
let label = s.label || s.url || sname;
|
||
if (length(label) > 30) label = substr(label, 0, 30) + "...";
|
||
push(keyboard, [{ text: (s.enabled == "0" ? "❌ " : "✅ ") + label, callback_data: "/set_cat " + stype + " " + sname }]);
|
||
}
|
||
}
|
||
push(keyboard, [{ text: t("menu_categories"), callback_data: "/settings" }]);
|
||
let text = "⚙️ <b>" + stype + "</b>\n" + t("choose_section");
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_set_cat(token, chat_id, msg_id, stype, sname, page) {
|
||
if (!page) page = 0;
|
||
else page = int(page);
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sname);
|
||
if (!s) return view_settings_menu(token, chat_id, msg_id);
|
||
|
||
let text = "⚙️ <b>" + t("section_edit") + ":</b> <code>" + escape_html(sname) + "</code> (" + stype + ")\n\n";
|
||
let keyboard = [];
|
||
|
||
let keys = [];
|
||
// Collect known keys first to keep them at top, then unknowns.
|
||
// Schema keys are listed even when still unset in UCI, otherwise options like
|
||
// daily_report_enabled could never be switched on from the bot.
|
||
if (setting_schema[stype]) {
|
||
for (let k in setting_schema[stype])
|
||
push(keys, k);
|
||
}
|
||
for (let k in s) {
|
||
if (match(k, /^\./)) continue; // ignore .name, .type, .anonymous
|
||
let found = false;
|
||
for (let x in keys) if (x == k) { found = true; break; }
|
||
if (!found) push(keys, k);
|
||
}
|
||
|
||
let per_page = 14;
|
||
let total = length(keys);
|
||
let start = page * per_page;
|
||
let end = start + per_page;
|
||
if (end > total) end = total;
|
||
|
||
for (let i = start; i < end; i++) {
|
||
let k = keys[i];
|
||
let label = get_schema_label(stype, k);
|
||
if (is_boolean_key(k)) {
|
||
let b = (s[k] == "1" || s[k] == "true");
|
||
push(keyboard, [{ text: (b ? "✅ " : "❌ ") + label, callback_data: "/set_tog " + stype + " " + sname + " " + k + " " + page }]);
|
||
} else if (is_list_key(k) || type(s[k]) == "array") {
|
||
let cnt = length(common.list_option(s, k));
|
||
push(keyboard, [{ text: "📝 " + label + " (" + cnt + ")", callback_data: "/set_arr " + stype + " " + sname + " " + k }]);
|
||
} else {
|
||
let val = s[k] || "";
|
||
if (length(val) > 15) val = substr(val, 0, 15) + "...";
|
||
push(keyboard, [{ text: "✏️ " + label + ": " + val, callback_data: "/set_str " + stype + " " + sname + " " + k }]);
|
||
}
|
||
}
|
||
|
||
let nav = [];
|
||
if (start > 0) push(nav, { text: t("nav_prev"), callback_data: "/set_cat " + stype + " " + sname + " " + (page - 1) });
|
||
if (end < total) push(nav, { text: t("nav_next"), callback_data: "/set_cat " + stype + " " + sname + " " + (page + 1) });
|
||
if (length(nav) > 0) push(keyboard, nav);
|
||
|
||
if (stype == "settings" || stype == "telegram") {
|
||
push(keyboard, [{ text: "🔙 " + t("nav_back"), callback_data: "/settings" }]);
|
||
} else {
|
||
push(keyboard, [{ text: "🔙 " + t("nav_back"), callback_data: "/set_list " + stype }]);
|
||
}
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_set_tog(token, chat_id, msg_id, stype, sname, key, page) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sname);
|
||
if (!s) return;
|
||
let b = (s[key] == "1" || s[key] == "true");
|
||
c.set(CONFIG_NAME, sname, key, b ? "0" : "1");
|
||
c.commit(CONFIG_NAME);
|
||
return view_set_cat(token, chat_id, msg_id, stype, sname, page);
|
||
}
|
||
|
||
function view_set_arr(token, chat_id, msg_id, stype, sname, key) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sname);
|
||
if (!s) return;
|
||
let items = common.list_option(s, key);
|
||
let label = get_schema_label(stype, key);
|
||
|
||
let text = t("list_header") + " " + escape_html(label) + "\n\n";
|
||
let keyboard = [];
|
||
|
||
if (length(items) == 0) text += "<i>Пусто</i>\n";
|
||
for (let i = 0; i < length(items); i++) {
|
||
text += "• <code>" + escape_html(items[i]) + "</code>\n";
|
||
if (i < 20) {
|
||
push(keyboard, [{ text: "❌ Удалить " + items[i], callback_data: cb_data(["/set_arr_del", stype, sname, key, items[i]]) }]);
|
||
}
|
||
}
|
||
|
||
push(keyboard, [{ text: "➕ Добавить элементы", callback_data: "/set_arr_add " + stype + " " + sname + " " + key }]);
|
||
push(keyboard, [{ text: "➖ Очистить список", callback_data: "/set_arr_clr " + stype + " " + sname + " " + key }]);
|
||
push(keyboard, [{ text: "🔙 " + t("nav_back"), callback_data: "/set_cat " + stype + " " + sname }]);
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
|
||
function view_menu(token, chat_id, msg_id) {
|
||
let sys = api.get_system_status();
|
||
let text = "🏠 <b>Tachyon Control Panel</b>\n\n" +
|
||
t("menu_version") + ": <code>" + sys.tachyon_version + "</code>\n" +
|
||
t("menu_cpu") + ": <code>" + sys.cpu + "</code>\n\n";
|
||
|
||
let keys_servers = keys(sys.active_servers || {});
|
||
if (length(keys_servers) > 0) {
|
||
text += t("status_active_servers") + "\n";
|
||
for (let i = 0; i < length(keys_servers); i++) {
|
||
let gname = keys_servers[i];
|
||
let srv = sys.active_servers[gname];
|
||
text += "└ " + escape_html(gname) + ": <code>" + escape_html(srv.server) + "</code>\n";
|
||
}
|
||
text += "\n";
|
||
} else {
|
||
text += t("status_no_server") + "\n\n";
|
||
}
|
||
|
||
text += t("choose_section");
|
||
|
||
let keyboard = [
|
||
[
|
||
{ text: t("menu_status"), callback_data: "/status" },
|
||
{ text: "🔍 Runtime", callback_data: "/runtime" }
|
||
],
|
||
[
|
||
{ text: t("menu_outbounds"), callback_data: "/outbounds" },
|
||
{ text: t("menu_sections"), callback_data: "/sections" }
|
||
],
|
||
[
|
||
{ text: t("menu_devices"), callback_data: "/devices" },
|
||
{ text: "🐕 Watchdog", callback_data: "/watchdog" }
|
||
],
|
||
[
|
||
{ text: t("menu_speed"), callback_data: "/speed" },
|
||
{ text: t("menu_ping"), callback_data: "/ping" }
|
||
],
|
||
[
|
||
{ text: t("menu_diagnostic"), callback_data: "/test" },
|
||
{ text: t("menu_connections"), callback_data: "/connections" }
|
||
],
|
||
[
|
||
{ text: t("menu_logs"), callback_data: "/logs" },
|
||
{ text: t("menu_info"), callback_data: "/info" }
|
||
],
|
||
[
|
||
{ text: t("menu_heal"), callback_data: "/heal" },
|
||
{ text: t("menu_qos"), callback_data: "/qos" }
|
||
],
|
||
[
|
||
{ text: t("menu_all_settings"), callback_data: "/settings" },
|
||
{ text: t("menu_help"), callback_data: "/help" }
|
||
]
|
||
];
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_status(token, chat_id, msg_id) {
|
||
let sys = api.get_system_status();
|
||
let conn = api.check_connection();
|
||
let text = "📊 <b>" + t("menu_status") + "</b>\n\n" +
|
||
t("status_version") + ": <code>" + (sys.tachyon_version || "?") + "</code>\n" +
|
||
t("status_uptime") + ": <code>" + sys.uptime + "</code>\n" +
|
||
t("status_cpu") + ": <code>" + sys.cpu + "</code>\n" +
|
||
"RAM: <code>" + sys.ram_avail + "MB / " + sys.ram_total + "MB</code>\n\n" +
|
||
"sing-box: <code>" + sys.singbox + (sys.singbox_variant ? " [" + sys.singbox_variant + "]" : "") + "</code>\n" +
|
||
(sys.zapret2_installed ? "zapret2: <code>" + sys.zapret2 + "</code>\n" : "") +
|
||
"Watchdog: <code>" + (sys.watchdog_running ? "🟢 running" : "🔴 stopped") + "</code>\n\n" +
|
||
"WAN: <code>" + (sys.wan_ip || "?") + "</code> " +
|
||
(conn && conn.direct ? "✅" : "❌") + "\n" +
|
||
"Proxy: " + (conn && conn.proxy ? "✅ reachable" : "❌ unreachable") + "\n" +
|
||
"LAN: <code>" + (sys.lan_ip || "?") + "</code>\n";
|
||
|
||
if (sys.pause_remaining > 0) {
|
||
text += "\n" + t("status_pause") + ": " + as_string(sys.pause_remaining) + " sec.\n";
|
||
}
|
||
|
||
let keys_servers = keys(sys.active_servers || {});
|
||
if (length(keys_servers) > 0) {
|
||
text += "\n" + t("status_active_servers") + "\n";
|
||
for (let i = 0; i < length(keys_servers); i++) {
|
||
let gname = keys_servers[i];
|
||
let srv = sys.active_servers[gname];
|
||
let lat = srv.latency != "N/A" ? " (" + srv.latency + " ms)" : "";
|
||
text += "└ " + escape_html(gname) + ": <code>" + escape_html(srv.server) + lat + "</code>\n";
|
||
}
|
||
}
|
||
|
||
let keyboard = [
|
||
[
|
||
{ text: t("menu_speed"), callback_data: "/speed" },
|
||
{ text: t("menu_ping"), callback_data: "/ping" }
|
||
],
|
||
[
|
||
{ text: t("btn_refresh"), callback_data: "/status" },
|
||
{ text: t("btn_test"), callback_data: "/test" }
|
||
],
|
||
[{ text: t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_runtime(token, chat_id, msg_id) {
|
||
let data = api.get_clash_connections();
|
||
let text = "🔍 <b>Runtime Info</b>\n\n";
|
||
if (!data || data.downloadTotal == null) {
|
||
text += t("err_conn_stats");
|
||
} else {
|
||
text += t("stat_download") + ": <code>" + format_bytes(data.downloadTotal) + "</code>\n" +
|
||
t("stat_upload") + ": <code>" + format_bytes(data.uploadTotal) + "</code>\n" +
|
||
t("stat_memory") + ": <code>" + format_bytes(data.memory) + "</code>\n" +
|
||
t("stat_connections") + ": <code>" + length(data.connections || []) + "</code>\n";
|
||
}
|
||
|
||
let keyboard = [
|
||
[{ text: t("btn_refresh"), callback_data: "/runtime" }],
|
||
[{ text: t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_outbounds(token, chat_id, msg_id, group_name) {
|
||
let data = api.get_clash_proxies_data();
|
||
if (!data || !data.proxies) {
|
||
let err = t("err_servers_list");
|
||
if (msg_id) edit_message(token, chat_id, msg_id, err, "HTML", [[{text:t("nav_back"), callback_data:"/menu"}]]);
|
||
else send_message(token, chat_id, err, "HTML", [[{text:t("nav_back"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
|
||
let groups = [];
|
||
for (let gname in keys(data.proxies)) {
|
||
let p = data.proxies[gname];
|
||
if (p.type == "Selector" || p.type == "URLTest" || p.type == "Fallback") {
|
||
push(groups, gname);
|
||
}
|
||
}
|
||
|
||
if (length(groups) == 0) {
|
||
let err = "❌ " + t("outbound_groups_not_found");
|
||
if (msg_id) edit_message(token, chat_id, msg_id, err, "HTML", [[{text:"⬅️ " + t("nav_back"), callback_data:"/menu"}]]);
|
||
else send_message(token, chat_id, err, "HTML", [[{text:"⬅️ " + t("nav_back"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
|
||
if (length(groups) == 1 && !group_name) {
|
||
group_name = groups[0];
|
||
}
|
||
|
||
let text = "🌐 <b>" + t("menu_outbounds") + "</b>\n\n";
|
||
let keyboard = [];
|
||
|
||
if (!group_name) {
|
||
text += t("section_choose_group");
|
||
for (let i = 0; i < length(groups); i++) {
|
||
let gname = groups[i];
|
||
let active = data.proxies[gname].now || "none";
|
||
text += "• <b>" + escape_html(gname) + "</b>: <code>" + escape_html(active) + "</code>\n";
|
||
push(keyboard, [{ text: "🌐 " + gname, callback_data: "/outbounds " + gname }]);
|
||
}
|
||
push(keyboard, [{ text: t("btn_refresh"), callback_data: "/outbounds" }]);
|
||
push(keyboard, [{ text: t("nav_back"), callback_data: "/menu" }]);
|
||
} else {
|
||
let group_data = data.proxies[group_name];
|
||
if (!group_data) return view_outbounds(token, chat_id, msg_id);
|
||
|
||
text += t("section_group") + ": <b>" + escape_html(group_name) + "</b>\n\n";
|
||
let active_server = group_data.now || "";
|
||
|
||
let row = [];
|
||
let count = 0;
|
||
let servers = group_data.all || [];
|
||
|
||
for (let i = 0; i < length(servers); i++) {
|
||
let name = servers[i];
|
||
let proxy = data.proxies[name];
|
||
let delay = "N/A";
|
||
if (proxy) {
|
||
if (type(proxy.history) == "array" && length(proxy.history) > 0) {
|
||
let last = proxy.history[length(proxy.history) - 1];
|
||
if (last && last.delay) delay = last.delay + " ms";
|
||
}
|
||
}
|
||
let marker = (name == active_server) ? "🔵" : "•";
|
||
text += marker + " <code>" + escape_html(name) + "</code>: <code>" + delay + "</code>\n";
|
||
|
||
if (count < 18) {
|
||
push(row, { text: (name == active_server ? "🔵 " : "") + name, callback_data: cb_data([ "/sw", group_name, name ]) });
|
||
if (length(row) == 2) {
|
||
push(keyboard, row);
|
||
row = [];
|
||
}
|
||
count++;
|
||
}
|
||
}
|
||
if (length(row) > 0) push(keyboard, row);
|
||
|
||
if (count == 0) text += "<i>" + t("servers_not_found") + "</i>\n";
|
||
else text += "\nℹ️ " + t("outbounds_hint");
|
||
|
||
push(keyboard, [{ text: t("btn_refresh"), callback_data: "/outbounds " + group_name }]);
|
||
if (length(groups) > 1) {
|
||
push(keyboard, [{ text: t("btn_back_to_groups"), callback_data: "/outbounds" }]);
|
||
} else {
|
||
push(keyboard, [{ text: t("nav_back"), callback_data: "/menu" }]);
|
||
}
|
||
}
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_switch(token, chat_id, msg_id, group_name, server_name) {
|
||
api.clash_request("PUT", "proxies/" + group_name, { name: server_name });
|
||
// A successful switch answers 204 with an empty body, which clash_request()
|
||
// cannot distinguish from a failure — so verify by reading the state back.
|
||
let data = api.get_clash_proxies_data();
|
||
let grp = (data && data.proxies) ? data.proxies[group_name] : null;
|
||
if (!grp || grp.now != server_name) {
|
||
send_message(token, chat_id,
|
||
"⚠️ <b>" + t("outbound_switch_failed") + "</b>\n" +
|
||
t("outbound_group") + ": <code>" + escape_html(group_name) + "</code>\n" +
|
||
t("outbound_server") + ": <code>" + escape_html(server_name) + "</code>\n\n" +
|
||
t("outbound_check_hint"), "HTML");
|
||
}
|
||
view_outbounds(token, chat_id, msg_id, group_name);
|
||
}
|
||
|
||
|
||
function view_sections(token, chat_id, msg_id) {
|
||
let sections = api.get_sections();
|
||
let text = "⚙️ <b>" + t("menu_sections") + "</b>\n\n";
|
||
let keyboard = [];
|
||
|
||
for (let s in sections) {
|
||
let label = s.label || s[".name"];
|
||
let status = (s.enabled == "1") ? "✅" : "❌";
|
||
push(keyboard, [{ text: status + " " + label, callback_data: "/sec_view " + s[".name"] }]);
|
||
}
|
||
|
||
push(keyboard, [{ text: t("section_create"), callback_data: "/sec_create" }]);
|
||
push(keyboard, [{ text: t("nav_back"), callback_data: "/menu" }]);
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_section_editor(token, chat_id, msg_id, sec_name) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sec_name);
|
||
if (!s) return view_sections(token, chat_id, msg_id);
|
||
|
||
let status = (s.enabled == "1") ? t("status_enabled") : t("status_disabled");
|
||
let text = "⚙️ <b>" + t("section_section") + ":</b> " + escape_html(s.label || sec_name) + "\n" +
|
||
t("section_type") + ": <code>" + escape_html(s.action || "none") + "</code>\n" +
|
||
t("section_status") + ": <b>" + status + "</b>\n\n";
|
||
|
||
if (s.action == "proxy" || s.action == "route") {
|
||
text += t("status_target") + ": <code>" + escape_html(s.target || "main-out") + "</code>\n";
|
||
}
|
||
|
||
let d_count = length(common.list_option(s, "domain")) + length(common.list_option(s, "domain_suffix")) + length(common.list_option(s, "domain_keyword")) + length(common.list_option(s, "domain_regex"));
|
||
let ip_count = length(common.list_option(s, "ip")) + length(common.list_option(s, "ip_cidr"));
|
||
let src_count = length(common.list_option(s, "src_ip")) + length(common.list_option(s, "src_mac")) + length(common.list_option(s, "src_device"));
|
||
let rs_count = length(common.list_option(s, "community_lists"));
|
||
|
||
let sub_count = 0;
|
||
let all = c.get_all(CONFIG_NAME);
|
||
for (let sname in all) {
|
||
if (all[sname][".type"] == "subscription_url" && all[sname].section == sec_name) sub_count++;
|
||
}
|
||
|
||
let keyboard = [];
|
||
push(keyboard, [
|
||
{ text: (s.enabled == "1" ? "🔴 " + t("status_disabled") : "🟢 " + t("status_enabled")), callback_data: "/sec_toggle " + sec_name },
|
||
{ text: t("btn_rename"), callback_data: "/sec_rename " + sec_name }
|
||
]);
|
||
|
||
push(keyboard, [{ text: t("section_action") + ": " + (s.action || "none"), callback_data: "/sec_action " + sec_name }]);
|
||
if (s.action == "proxy" || s.action == "route") {
|
||
push(keyboard, [{ text: t("status_target") + ": " + (s.target || "main-out"), callback_data: "/sec_target " + sec_name }]);
|
||
}
|
||
|
||
push(keyboard, [
|
||
{ text: t("section_domains") + " (" + d_count + ")", callback_data: "/sec_list " + sec_name + " domain" },
|
||
{ text: "📝 IP (" + ip_count + ")", callback_data: "/sec_list " + sec_name + " ip" }
|
||
]);
|
||
push(keyboard, [
|
||
{ text: t("section_sources") + " (" + src_count + ")", callback_data: "/sec_list " + sec_name + " src" },
|
||
{ text: "📝 Rulesets (" + rs_count + ")", callback_data: "/sec_list " + sec_name + " ruleset" }
|
||
]);
|
||
|
||
push(keyboard, [{ text: t("menu_subscriptions") + " (" + sub_count + ")", callback_data: "/sec_subs " + sec_name }]);
|
||
|
||
push(keyboard, [{ text: t("btn_delete_section"), callback_data: "/sec_delete " + sec_name }]);
|
||
push(keyboard, [{ text: t("btn_back_to_sections"), callback_data: "/sections" }]);
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_sec_toggle(token, chat_id, msg_id, sec_name) {
|
||
api.toggle_section(sec_name);
|
||
return view_section_editor(token, chat_id, msg_id, sec_name);
|
||
}
|
||
|
||
function handle_sec_action(token, chat_id, msg_id, sec_name) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sec_name);
|
||
if (!s) return;
|
||
let acts = ["proxy", "bypass", "block", "connection"];
|
||
let idx = -1;
|
||
for (let i = 0; i < length(acts); i++) { if (acts[i] == s.action) idx = i; }
|
||
if (idx == -1) push(acts, s.action);
|
||
let next_act = acts[(idx + 1) % length(acts)];
|
||
c.set(CONFIG_NAME, sec_name, "action", next_act);
|
||
c.commit(CONFIG_NAME);
|
||
return view_section_editor(token, chat_id, msg_id, sec_name);
|
||
}
|
||
|
||
function view_sec_list(token, chat_id, msg_id, sec_name, list_type) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sec_name);
|
||
if (!s) return;
|
||
|
||
let items = [];
|
||
let title = "";
|
||
if (list_type == "domain") {
|
||
title = t("section_domains");
|
||
let ds = common.list_option(s, "domain_suffix");
|
||
for (let x in ds) push(items, {type: "domain_suffix", val: x});
|
||
let d = common.list_option(s, "domain");
|
||
for (let x in d) push(items, {type: "domain", val: x});
|
||
let dk = common.list_option(s, "domain_keyword");
|
||
for (let x in dk) push(items, {type: "domain_keyword", val: x});
|
||
let dr = common.list_option(s, "domain_regex");
|
||
for (let x in dr) push(items, {type: "domain_regex", val: x});
|
||
} else if (list_type == "ip") {
|
||
title = t("section_ips");
|
||
let ipc = common.list_option(s, "ip_cidr");
|
||
for (let x in ipc) push(items, {type: "ip_cidr", val: x});
|
||
let ip = common.list_option(s, "ip");
|
||
for (let x in ip) push(items, {type: "ip", val: x});
|
||
} else if (list_type == "src") {
|
||
title = t("section_sources");
|
||
let sdev = common.list_option(s, "src_device");
|
||
for (let x in sdev) push(items, {type: "src_device", val: x});
|
||
let sip = common.list_option(s, "src_ip");
|
||
for (let x in sip) push(items, {type: "src_ip", val: x});
|
||
let smac = common.list_option(s, "src_mac");
|
||
for (let x in smac) push(items, {type: "src_mac", val: x});
|
||
} else if (list_type == "ruleset") {
|
||
title = "Rulesets";
|
||
let rs = common.list_option(s, "community_lists");
|
||
for (let x in rs) push(items, {type: "community_lists", val: x});
|
||
}
|
||
|
||
let text = t("section_list_header") + " " + escape_html(s.label || sec_name) + "\n" +
|
||
"📋 <b>" + title + "</b>:\n\n";
|
||
|
||
let keyboard = [];
|
||
if (length(items) == 0) {
|
||
text += "<i>Пусто.</i>\n";
|
||
} else {
|
||
for (let i = 0; i < length(items); i++) {
|
||
let it = items[i];
|
||
text += "• <code>" + escape_html(it.val) + "</code> (" + it.type + ")\n";
|
||
// Add individual delete buttons (up to 20 for UI limits)
|
||
if (i < 20) {
|
||
push(keyboard, [{ text: "❌ Удалить " + it.val, callback_data: cb_data(["/sec_del_it", sec_name, it.type, it.val]) }]);
|
||
}
|
||
}
|
||
if (length(items) > 20) text += "\n<i>(Показаны не все элементы для удаления)</i>\n";
|
||
}
|
||
|
||
push(keyboard, [
|
||
{ text: "➕ Добавить", callback_data: "/sec_add " + sec_name + " " + list_type },
|
||
{ text: "➖ Очистить все", callback_data: "/sec_clear " + sec_name + " " + list_type }
|
||
]);
|
||
push(keyboard, [{ text: "🔙 " + t("btn_back_to_section"), callback_data: "/sec_view " + sec_name }]);
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_sec_del_it(token, chat_id, msg_id, sec_name, type, val) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sec_name);
|
||
if (!s) return;
|
||
|
||
let current = common.list_option(s, type);
|
||
let new_list = [];
|
||
for (let x in current) if (x != val) push(new_list, x);
|
||
|
||
c.set(CONFIG_NAME, sec_name, type, new_list);
|
||
c.commit(CONFIG_NAME);
|
||
|
||
// figure out parent list_type
|
||
let list_type = "domain";
|
||
if (match(type, /^ip/)) list_type = "ip";
|
||
else if (match(type, /^src/)) list_type = "src";
|
||
else if (type == "community_lists") list_type = "ruleset";
|
||
|
||
return view_sec_list(token, chat_id, msg_id, sec_name, list_type);
|
||
}
|
||
|
||
function handle_sec_clear(token, chat_id, msg_id, sec_name, list_type) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sec_name);
|
||
if (!s) return;
|
||
|
||
let keys = [];
|
||
if (list_type == "domain") keys = ["domain", "domain_suffix", "domain_keyword", "domain_regex"];
|
||
else if (list_type == "ip") keys = ["ip", "ip_cidr"];
|
||
else if (list_type == "src") keys = ["src_ip", "src_mac", "src_device"];
|
||
else if (list_type == "ruleset") keys = ["community_lists"];
|
||
|
||
for (let k in keys) {
|
||
c.delete(CONFIG_NAME, sec_name, k);
|
||
}
|
||
c.commit(CONFIG_NAME);
|
||
return view_sec_list(token, chat_id, msg_id, sec_name, list_type);
|
||
}
|
||
|
||
function exec_doctor(token, chat_id) {
|
||
send_message(token, chat_id, "⏳ <b>" + t("diag_starting") + "</b>", "HTML");
|
||
let res = command_capture(command_from_args([ "/usr/bin/tachyon", "doctor" ]));
|
||
let report = res ? (res.output || t("diag_no_output")) : t("diag_error");
|
||
|
||
let data = null;
|
||
try { data = json(report); } catch (e) {}
|
||
if (data != null && type(data) == "object") {
|
||
let text = trim(as_string(data.report || ""));
|
||
if (text == "") {
|
||
report = t("diag_empty");
|
||
} else {
|
||
let header;
|
||
if (data.busy) {
|
||
header = t("diag_running");
|
||
} else if (int(data.issues || 0) > 0) {
|
||
header = sprintf(t("diag_issues_count"), as_string(data.issues));
|
||
if (int(data.fixed || 0) > 0)
|
||
header += sprintf(t("diag_fixed_count"), as_string(data.fixed));
|
||
let planned = length(data.planned_fixes || []);
|
||
if (planned > 0)
|
||
header += sprintf(t("diag_planned_count"), planned);
|
||
} else {
|
||
header = t("diag_clean");
|
||
}
|
||
report = "<b>" + escape_html(header) + "</b>\n\n<pre>" + escape_html(text) + "</pre>";
|
||
if (length(report) > 3900)
|
||
report = substr(report, 0, 3900) + "\n... (" + t("report_truncated") + ")";
|
||
send_message(token, chat_id, report, "HTML", [[{text:t("nav_back"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
}
|
||
|
||
if (length(report) > 3500) report = substr(report, 0, 3500) + "\n... (" + t("report_truncated") + ")";
|
||
send_message(token, chat_id, "🩺 <b>" + t("diag_results") + "</b>\n\n<pre>" + escape_html(report) + "</pre>", "HTML", [[{text:t("nav_back"), callback_data:"/menu"}]]);
|
||
}
|
||
|
||
function exec_restart(token, chat_id) {
|
||
let text = t("restart_confirm");
|
||
let keyboard = [
|
||
[{ text: t("restart_yes"), callback_data: "/confirm_restart" }],
|
||
[{ text: t("nav_cancel"), callback_data: "/menu" }]
|
||
];
|
||
send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function apply_confirmed_restart(token, chat_id, msg_id) {
|
||
edit_message(token, chat_id, msg_id, "🔄 <b>" + t("restart_in_progress") + "</b>", "HTML");
|
||
let st = command_status(command_from_args(["/usr/bin/tachyon", "restart"]));
|
||
let text = (st == 0) ? "✅ <b>" + t("restart_success") + "</b>" : "❌ <b>" + t("restart_error") + "</b>";
|
||
send_message(token, chat_id, text, "HTML", [[{text:t("nav_menu"), callback_data:"/menu"}]]);
|
||
}
|
||
|
||
// ─── Backup restore: safe extraction, UCI validation, rollback ───────────────
|
||
|
||
function backup_archive_members(dl_path) {
|
||
let out = command_output_from_args([ "tar", "-tzf", dl_path ]);
|
||
let members = [];
|
||
for (let line in split(out, "\n")) {
|
||
line = trim(line);
|
||
if (line == "") continue;
|
||
push(members, line);
|
||
}
|
||
return members;
|
||
}
|
||
|
||
function backup_archive_safe(members) {
|
||
for (let m in members) {
|
||
// Reject absolute paths, ".." traversal, and unexpected members
|
||
if (substr(m, 0, 1) == "/") return { ok: false, reason: "absolute path: " + m };
|
||
if (match(m, /\.\./)) return { ok: false, reason: "path traversal: " + m };
|
||
if (m != "config/tachyon" && !match(m, /^tachyon\//))
|
||
return { ok: false, reason: "unexpected member: " + m };
|
||
}
|
||
return { ok: true };
|
||
}
|
||
|
||
function backup_extract_dir() {
|
||
let ts = time();
|
||
// ucode has no Math global; clock()[1] (microseconds) is what the rest of the
|
||
// codebase uses to make temp paths unique.
|
||
let rand = sprintf("%04x", clock()[1] & 0xFFFF);
|
||
let dir = "/etc/.tachyon/restore_" + as_string(ts) + "_" + rand;
|
||
system("mkdir -p " + shell_quote(dir) + " 2>/dev/null");
|
||
return dir;
|
||
}
|
||
|
||
function config_sane_preview(path) {
|
||
let data = fs.readfile(path);
|
||
if (data == null) return false;
|
||
// Minimal UCI sanity: must contain at least one "config <type> '<name>'" line
|
||
return match(data, /(^|\n)[ \t]*config[ \t]+[A-Za-z0-9_-]+/) != null;
|
||
}
|
||
|
||
function restore_config_from_backup(backup_path) {
|
||
if (backup_path && fs.stat(backup_path)) {
|
||
let tmp = "/etc/config/tachyon.restore-tmp";
|
||
system(command_from_args([ "cp", "-a", backup_path, tmp ]) + " >/dev/null 2>&1");
|
||
system(command_from_args([ "mv", "-f", tmp, "/etc/config/tachyon" ]) + " >/dev/null 2>&1");
|
||
}
|
||
}
|
||
|
||
function apply_backup_restore(token, chat_id, dl_path) {
|
||
let members = backup_archive_members(dl_path);
|
||
if (length(members) == 0) {
|
||
fs.unlink(dl_path);
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_archive_empty") + "</b>", "HTML", [[{text:t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
|
||
let safety = backup_archive_safe(members);
|
||
if (!safety.ok) {
|
||
fs.unlink(dl_path);
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_archive_unsafe") + "</b> " + escape_html(safety.reason), "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
|
||
send_message(token, chat_id, "🔄 <b>" + t("backup_restoring") + "</b>", "HTML");
|
||
|
||
let stage = backup_extract_dir();
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
if (command_status(command_from_args([ "mkdir", "-p", stage ])) != 0 ||
|
||
command_status(command_from_args([ "tar", "-xzf", dl_path, "-C", stage ])) != 0) {
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
fs.unlink(dl_path);
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_extract_failed") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
fs.unlink(dl_path);
|
||
|
||
let staged_config = stage + "/config/tachyon";
|
||
let had_config = fs.stat(staged_config) != null;
|
||
if (had_config && !config_sane_preview(staged_config)) {
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_not_valid_uci") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
|
||
let staged_data = stage + "/tachyon";
|
||
let had_data = fs.stat(staged_data) != null;
|
||
if (!had_config && !had_data) {
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_no_config") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
|
||
// Snapshot live targets so a failed reload can be rolled back
|
||
let cfg_backup = "/etc/.tachyon/restore_cfg_backup." + as_string(time());
|
||
if (fs.stat("/etc/config/tachyon")) {
|
||
if (command_status(command_from_args([ "cp", "-a", "/etc/config/tachyon", cfg_backup ])) != 0) {
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_save_config_failed") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
}
|
||
let data_backup = "/etc/.tachyon/restore_data_backup." + as_string(time());
|
||
if (fs.stat("/etc/tachyon")) {
|
||
if (command_status(command_from_args([ "cp", "-a", "/etc/tachyon", data_backup ])) != 0) {
|
||
command_status(command_from_args([ "rm", "-f", cfg_backup ]));
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_save_data_failed") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
}
|
||
|
||
// Apply staged config
|
||
if (had_config) {
|
||
if (command_status(command_from_args([ "cp", "-a", staged_config, "/etc/config/tachyon.restored" ])) != 0 ||
|
||
command_status(command_from_args([ "mv", "/etc/config/tachyon.restored", "/etc/config/tachyon" ])) != 0) {
|
||
restore_config_from_backup(cfg_backup);
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_write_config_error") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
command_status(command_from_args([ "chmod", "600", "/etc/config/tachyon" ]));
|
||
// Validate through the real UCI parser
|
||
if (command_status(command_from_args([ "/sbin/uci", "show", "tachyon" ])) != 0) {
|
||
restore_config_from_backup(cfg_backup);
|
||
command_status(command_from_args([ "rm", "-rf", stage, data_backup, cfg_backup ]));
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_uci_validation_failed") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
}
|
||
|
||
// Apply staged data directory
|
||
if (had_data) {
|
||
command_status(command_from_args([ "rm", "-rf", "/etc/tachyon" ]));
|
||
if (command_status(command_from_args([ "cp", "-a", staged_data, "/etc/tachyon" ])) != 0) {
|
||
command_status(command_from_args([ "rm", "-rf", "/etc/tachyon" ]));
|
||
if (fs.stat(data_backup))
|
||
command_status(command_from_args([ "mv", data_backup, "/etc/tachyon" ]));
|
||
restore_config_from_backup(cfg_backup);
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_write_data_error") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
}
|
||
|
||
command_status(command_from_args([ "rm", "-rf", stage ]));
|
||
command_status(command_from_args([ "rm", "-f", cfg_backup ]));
|
||
command_status(command_from_args([ "rm", "-rf", data_backup ]));
|
||
|
||
send_message(token, chat_id, "✅ <b>" + t("backup_restored") + "</b>", "HTML");
|
||
command_status(command_from_args([ "/usr/bin/tachyon", "restart" ]));
|
||
send_message(token, chat_id, "✅ <b>" + t("backup_done") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
}
|
||
|
||
function exec_backup(token, chat_id) {
|
||
send_message(token, chat_id, "⏳ <b>" + t("backup_collecting") + "</b>", "HTML");
|
||
let file_path = "/etc/.tachyon/backup.tar.gz";
|
||
command_status(command_from_args([ "tar", "-czf", file_path, "-C", "/etc", "config/tachyon", "tachyon" ]) + " 2>/dev/null");
|
||
|
||
if (fs.stat(file_path)) {
|
||
send_document(token, chat_id, file_path);
|
||
fs.unlink(file_path);
|
||
} else {
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_create_error") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
}
|
||
}
|
||
|
||
function exec_support_bundle(token, chat_id) {
|
||
send_message(token, chat_id, "⏳ <b>" + t("support_bundle_collecting") + "</b>", "HTML");
|
||
system(command_from_args([ "ip", "route" ]) + " > /etc/.tachyon/ip_route.txt");
|
||
system(command_from_args([ "logread" ]) + " > /etc/.tachyon/logread.txt");
|
||
let file_path = "/etc/.tachyon/support_bundle.tar.gz";
|
||
command_status(command_from_args([ "tar", "-czf", file_path, "/etc/config/tachyon", "/var/etc/tachyon", "/etc/config/network", "/etc/config/firewall", "/tmp/dhcp.leases", "/etc/.tachyon/ip_route.txt", "/etc/.tachyon/logread.txt" ]) + " 2>/dev/null");
|
||
|
||
if (fs.stat(file_path)) {
|
||
send_document(token, chat_id, file_path);
|
||
fs.unlink(file_path);
|
||
} else {
|
||
send_message(token, chat_id, "❌ <b>" + t("support_bundle_error") + "</b>", "HTML");
|
||
}
|
||
// Absent file already satisfies the caller; fs.unlink throws on ENOENT.
|
||
try { fs.unlink("/etc/.tachyon/ip_route.txt"); fs.unlink("/etc/.tachyon/logread.txt"); } catch(e) {}
|
||
}
|
||
|
||
function exec_close_connections(token, chat_id) {
|
||
let out = command_capture(command_from_args(["curl", "-s", "-X", "DELETE", "http://127.0.0.1:9090/connections"]));
|
||
if (out && out.status == 0)
|
||
send_message(token, chat_id, "✅ <b>" + t("conn_closed_msg") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
else
|
||
send_message(token, chat_id, "❌ <b>" + t("conn_close_error") + "</b>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
}
|
||
|
||
// A rebuild published under an existing tag keeps its version, so "1.2.66 ➡️
|
||
// 1.2.66" is all the version fields can say. These helpers name the build
|
||
// instead: the commit SHA when the release carries one, else the fingerprint
|
||
// derived from publish timestamps and asset size.
|
||
function build_label(sha, fingerprint) {
|
||
sha = as_string(sha);
|
||
if (sha != "")
|
||
return length(sha) > 7 ? substr(sha, 0, 7) : sha;
|
||
fingerprint = as_string(fingerprint);
|
||
if (fingerprint == "")
|
||
return "";
|
||
let published = match(fingerprint, /pub=([0-9]{4}-[0-9]{2}-[0-9]{2})T([0-9]{2}:[0-9]{2})/);
|
||
if (published)
|
||
return as_string(published[1]) + " " + as_string(published[2]);
|
||
return length(fingerprint) > 24 ? substr(fingerprint, 0, 24) : fingerprint;
|
||
}
|
||
|
||
function build_transition(comp) {
|
||
let from = build_label(comp.current_sha, comp.current_build);
|
||
let to = build_label(comp.latest_sha, comp.latest_build);
|
||
if (from == "" || to == "" || from == to)
|
||
return to != "" ? "<code>" + escape_html(to) + "</code>" : "";
|
||
return "<code>" + escape_html(from) + "</code> ➡️ <code>" + escape_html(to) + "</code>";
|
||
}
|
||
|
||
function build_identity_key(comp) {
|
||
let sha = as_string(comp.latest_sha);
|
||
return sha != "" ? sha : as_string(comp.latest_build);
|
||
}
|
||
|
||
function exec_check_updates(token, chat_id, msg_id) {
|
||
let out = command_output_from_args(["/usr/bin/tachyon", "component_update_check_cache"]);
|
||
let text = "📦 <b>" + t("updates_title") + "</b>\n\n";
|
||
let keyboard = [];
|
||
if (out && out != "") {
|
||
try {
|
||
let data = json(out);
|
||
let results = data.results || [];
|
||
let has_updates = false;
|
||
if (!data.enabled) {
|
||
text += t("updates_disabled");
|
||
} else if (length(results) == 0) {
|
||
text += t("updates_cache_empty");
|
||
} else {
|
||
for (let comp in results) {
|
||
let name = comp.component || "";
|
||
let title = (name == "sing_box") ? "sing-box" : name;
|
||
let cur = comp.current_version || "?";
|
||
let lat = comp.latest_version || "?";
|
||
if (!comp.success) {
|
||
text += "• <b>" + title + "</b>: ❌ Ошибка проверки\n";
|
||
} else if (comp.status == "outdated_same_release") {
|
||
let transition = build_transition(comp);
|
||
text += "• <b>" + title + "</b>: <code>" + cur + "</code> — " + t("update_new_release_build") +
|
||
(transition != "" ? " " + transition : "") + " ⚠️\n";
|
||
push(keyboard, [{text: t("btn_update_component") + " " + title, callback_data: "/update_component " + name}]);
|
||
has_updates = true;
|
||
} else if (comp.status == "outdated") {
|
||
text += "• <b>" + title + "</b>: <code>" + cur + "</code> ➡️ <code>" + lat + "</code> ⚠️\n";
|
||
push(keyboard, [{text: t("btn_update_component") + " " + title, callback_data: "/update_component " + name}]);
|
||
has_updates = true;
|
||
} else if (comp.status == "dev") {
|
||
text += "• <b>" + title + "</b>: <code>" + cur + "</code> 🧪 " + t("update_dev_build") + "\n";
|
||
} else {
|
||
text += "• <b>" + title + "</b>: <code>" + cur + "</code> ✅\n";
|
||
}
|
||
}
|
||
if (!has_updates) text += "\n✅ " + t("update_all_current");
|
||
}
|
||
} catch(e) {
|
||
text += "❌ " + t("update_cache_parse_error") + " " + e;
|
||
}
|
||
} else {
|
||
text += t("update_cache_unavailable");
|
||
}
|
||
|
||
push(keyboard, [{ text: t("btn_refresh_cache"), callback_data: "/check_updates" }]);
|
||
push(keyboard, [{ text: "⬅️ " + t("nav_back"), callback_data: "/menu" }]);
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_instances(token, chat_id, msg_id) {
|
||
let res = command_capture(command_from_args(["curl", "-s", "http://127.0.0.1:9090/proxies"]));
|
||
let text = "🖧 <b>Live Server Instances</b>\n\n";
|
||
if (res && res.status == 0 && res.output) {
|
||
try {
|
||
let data = json(res.output);
|
||
let proxies = data.proxies;
|
||
let count = 0;
|
||
for (let name in proxies) {
|
||
let p = proxies[name];
|
||
if (p.type == "Selector" || p.type == "URLTest" || p.type == "Direct" || p.type == "Reject" || p.type == "Compatible") continue;
|
||
let delay = "➖";
|
||
if (p.history && length(p.history) > 0) {
|
||
let last = p.history[length(p.history) - 1];
|
||
if (last.delay > 0) delay = last.delay + " ms";
|
||
else delay = "❌ Timeout";
|
||
}
|
||
text += "• <code>" + escape_html(name) + "</code> (" + p.type + "): <b>" + delay + "</b>\n";
|
||
count++;
|
||
}
|
||
if (count == 0) text += t("servers_none");
|
||
} catch(e) {
|
||
text += t("api_parse_error") + " " + e;
|
||
}
|
||
} else {
|
||
text += "❌ " + t("api_connect_failed");
|
||
}
|
||
|
||
let kb = [[
|
||
{text: "🔄 " + t("btn_refresh"), callback_data: "/instances"},
|
||
{text: "⬅️ " + t("nav_back"), callback_data: "/status"}
|
||
]];
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", kb);
|
||
else send_message(token, chat_id, text, "HTML", kb);
|
||
}
|
||
|
||
// ─── Phase 1: Speed, Ping, Improved Status ─────────────────────────────────
|
||
|
||
function exec_speedtest(token, chat_id, msg_id) {
|
||
let wait_text = t("speed_starting");
|
||
if (msg_id) edit_message(token, chat_id, msg_id, wait_text, "HTML");
|
||
else send_message(token, chat_id, wait_text, "HTML");
|
||
|
||
let result = api.run_speedtest();
|
||
let text = "⚡ <b>" + t("speed_result") + "</b>\n\n";
|
||
if (result) {
|
||
text += t("speed_direct") + " " +
|
||
(result.direct_mbps > 0
|
||
? "<code>" + sprintf("%.1f", result.direct_mbps) + " Mbps</code>\n"
|
||
: t("speed_fail_measure") + "\n");
|
||
text += t("speed_proxy") + " " +
|
||
(result.proxy_mbps > 0
|
||
? "<code>" + sprintf("%.1f", result.proxy_mbps) + " Mbps</code>\n"
|
||
: t("speed_fail_measure") + "\n");
|
||
if (result.direct_mbps <= 0 && result.proxy_mbps <= 0)
|
||
text += "\n<i>" + t("speed_check_hint") + "</i>\n";
|
||
} else {
|
||
text += t("speed_error") + "\n";
|
||
}
|
||
|
||
let keyboard = [
|
||
[{ text: t("btn_speed_again"), callback_data: "/speed" }],
|
||
[{ text: t("nav_back"), callback_data: "/status" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_ping(token, chat_id, msg_id) {
|
||
let text = "📍 <b>" + t("menu_ping") + "</b>\n\n";
|
||
let data = api.get_clash_proxies_data();
|
||
if (!data || !data.proxies) {
|
||
text += t("ping_api_error");
|
||
let keyboard = [[{ text: t("btn_refresh"), callback_data: "/ping" }, { text: t("nav_back"), callback_data: "/status" }]];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
return;
|
||
}
|
||
|
||
let shown = 0;
|
||
for (let name in data.proxies) {
|
||
let p = data.proxies[name];
|
||
if (p.type != "Selector" && p.type != "URLTest") continue;
|
||
if (!p.history || length(p.history) == 0) continue;
|
||
let last = p.history[length(p.history) - 1];
|
||
if (!last || !last.delay) continue;
|
||
let delay = int(last.delay);
|
||
let icon = delay < 100 ? "🟢" : (delay < 300 ? "🟡" : "🔴");
|
||
text += icon + " <code>" + escape_html(name) + "</code>: <code>" + delay + " ms</code>\n";
|
||
shown++;
|
||
}
|
||
if (shown == 0) text += t("latency_no_data");
|
||
|
||
let keyboard = [
|
||
[{ text: "🔄 " + t("btn_refresh"), callback_data: "/ping" }],
|
||
[{ text: "⬅️ " + t("nav_back"), callback_data: "/status" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
// ─── Phase 2: Quick Test, Logs, System Info ────────────────────────────────
|
||
|
||
function view_quick_test(token, chat_id, msg_id) {
|
||
let text = "🩺 <b>" + t("test_title") + "</b>\n\n";
|
||
let conn = api.check_connection();
|
||
let sys = api.get_system_status();
|
||
|
||
text += (conn && conn.direct ? "✅" : "❌") + " " + t("test_direct") + "\n";
|
||
text += (conn && conn.proxy ? "✅" : "❌") + " " + t("test_proxy") + "\n";
|
||
text += (sys && sys.singbox_running ? "✅" : "❌") + " sing-box\n";
|
||
text += (sys && sys.tachyon_running ? "✅" : "❌") + " " + t("test_service") + "\n";
|
||
text += (sys && sys.watchdog_running ? "✅" : "❌") + " Watchdog\n";
|
||
|
||
let nft = command_capture(command_from_args(["/usr/sbin/nft", "list", "tables"]));
|
||
text += (nft && nft.status == 0 && match(nft.output || "", /TachyonTable/)) ? "✅" : "❌";
|
||
text += " " + t("test_nft") + "\n";
|
||
|
||
let dns_ok = false;
|
||
try {
|
||
let dns_res = command_capture(command_from_args(["nslookup", "google.com", "127.0.0.1"]));
|
||
dns_ok = dns_res && dns_res.status == 0;
|
||
}
|
||
catch (e) {
|
||
}
|
||
text += (dns_ok ? "✅" : "❌") + " DNS\n";
|
||
|
||
if (sys && sys.pause_remaining > 0) {
|
||
text += "\n⏸ " + t("test_pause") + " " + as_string(sys.pause_remaining) + " sec.";
|
||
}
|
||
|
||
let keyboard = [
|
||
[{ text: t("btn_retry"), callback_data: "/test" }],
|
||
[{ text: t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_logs(token, chat_id, msg_id, level, count) {
|
||
level = level || "all";
|
||
count = int(count || "30");
|
||
|
||
let text = "📋 <b>" + t("logs_header") + "</b> (" + t("logs_level") + ": " + level + ", " + count + ")\n\n<pre>";
|
||
|
||
let args = ["/sbin/logread"];
|
||
let res = command_capture(command_from_args(args));
|
||
if (res && res.status == 0 && res.output) {
|
||
let lines = split(res.output, "\n");
|
||
let filtered = [];
|
||
let udp_http_notice_emitted = false;
|
||
for (let line in lines) {
|
||
if (line == "") continue;
|
||
if (index(as_string(line), "UDP is not supported by outbound:") >= 0) {
|
||
if (!udp_http_notice_emitted) {
|
||
push(filtered, "UDP traffic through HTTP outbounds is not supported by sing-box; repeated UDP warnings for HTTP outbounds are hidden by Tachyon.");
|
||
udp_http_notice_emitted = true;
|
||
}
|
||
continue;
|
||
}
|
||
if (level == "error" && !match(line, /\[err\]|\[error\]/i)) continue;
|
||
if (level == "warn" && !match(line, /\[warn\]/i)) continue;
|
||
if (level == "info" && !match(line, /\[info\]/i)) continue;
|
||
if (match(line, /tachyon|sing-box|watchdog/i)) push(filtered, line);
|
||
}
|
||
let start = length(filtered) - count;
|
||
if (start < 0) start = 0;
|
||
for (let i = start; i < length(filtered); i++) {
|
||
text += escape_html(filtered[i]) + "\n";
|
||
}
|
||
if (length(filtered) == 0) text += t("logs_no_records");
|
||
} else {
|
||
text += t("logs_read_error");
|
||
}
|
||
text += "</pre>";
|
||
|
||
let keyboard = [
|
||
[
|
||
{ text: "❌ Errors", callback_data: "/logs error 30" },
|
||
{ text: "⚠️ Warns", callback_data: "/logs warn 30" }
|
||
],
|
||
[
|
||
{ text: "ℹ️ Info", callback_data: "/logs info 30" },
|
||
{ text: "📋 All", callback_data: "/logs all 30" }
|
||
],
|
||
[{ text: "🔄 " + t("btn_refresh"), callback_data: "/logs " + level + " " + as_string(count) }],
|
||
[{ text: "⬅️ " + t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_system_info(token, chat_id, msg_id) {
|
||
let text = "ℹ️ <b>" + t("info_title") + "</b>\n\n";
|
||
let res = command_capture(command_from_args(["/usr/lib/tachyon/diagnostics/runtime.uc", "get-system-info"]));
|
||
if (res && res.status == 0 && res.output) {
|
||
try {
|
||
let info = json(res.output);
|
||
text += "📱 " + t("info_device_label") + ": <code>" + as_string(info.device_model || "N/A") + "</code>\n";
|
||
text += "💻 OpenWrt: <code>" + as_string(info.openwrt_version || "N/A") + "</code>\n\n";
|
||
text += "🔧 Tachyon: <code>" + as_string(info.tachyon_version || "N/A") + "</code>\n";
|
||
text += "📱 LuCI App: <code>" + as_string(info.luci_app_version || "N/A") + "</code>\n\n";
|
||
text += "📦 sing-box: <code>" + as_string(info.sing_box_version || "N/A") + "</code>\n";
|
||
if (info.sing_box_lx == 1) text += " Fork: Leadaxe (lx) 🟢\n";
|
||
else if (info.sing_box_compressed == 1) text += " Fork: Extended (compressed) 🔵\n";
|
||
else if (info.sing_box_extended == 1) text += " Fork: Extended (shtorm-7) 🔵\n";
|
||
else if (info.sing_box_tiny == 1) text += " Variant: Tiny 🟡\n";
|
||
else text += " Variant: Official / Stock ⚪\n";
|
||
if (info.sing_box_tailscale == 1) text += " Tailscale: ✅\n";
|
||
text += "\n";
|
||
if (info.zapret_installed == "1") text += "🛡 Zapret: <code>" + as_string(info.zapret_version || "?") + "</code>\n";
|
||
if (info.zapret2_installed == "1") text += "🛡 Zapret2: <code>" + as_string(info.zapret2_version || "?") + "</code>\n";
|
||
if (info.byedpi_installed == "1") text += "🛡 ByeDPI: <code>" + as_string(info.byedpi_version || "?") + "</code>\n";
|
||
if (info.wdtt_installed == "1") text += "🛡 WDTT: <code>" + as_string(info.wdtt_version || "?") + "</code>\n";
|
||
if (info.olcrtc_installed == "1") text += "🛡 OlcRTC: <code>" + as_string(info.olcrtc_version || "?") + "</code>\n";
|
||
} catch(e) {
|
||
text += t("info_read_error") + " " + e;
|
||
}
|
||
} else {
|
||
text += "❌ " + t("info_fetch_failed");
|
||
}
|
||
|
||
let keyboard = [
|
||
[{ text: "🔄 " + t("btn_refresh"), callback_data: "/info" }],
|
||
[{ text: "⬅️ " + t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
// ─── Phase 3: Connections, Help ────────────────────────────────────────────
|
||
|
||
function view_connections(token, chat_id, msg_id, page) {
|
||
page = int(page || 0);
|
||
if (page < 0) page = 0;
|
||
let data = api.get_clash_connections();
|
||
let text = "🔗 <b>" + t("menu_connections") + "</b>\n\n";
|
||
|
||
if (!data || !data.connections || length(data.connections) == 0) {
|
||
text += t("conn_none");
|
||
let keyboard = [
|
||
[{ text: t("btn_refresh"), callback_data: "/connections" }],
|
||
[{ text: t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
return;
|
||
}
|
||
|
||
text += t("conn_total_down") + ": <code>" + format_bytes(data.downloadTotal) + "</code>\n";
|
||
text += t("conn_total_up") + ": <code>" + format_bytes(data.uploadTotal) + "</code>\n";
|
||
text += t("stat_connections") + ": <code>" + length(data.connections) + "</code>\n\n";
|
||
|
||
let per_page = 8;
|
||
let total = length(data.connections);
|
||
let start = page * per_page;
|
||
let end = start + per_page;
|
||
if (end > total) end = total;
|
||
|
||
for (let i = start; i < end; i++) {
|
||
let c = data.connections[i];
|
||
let metadata = c.metadata || {};
|
||
let proto = metadata.type || "?";
|
||
let dest = metadata.destinationIP || "?";
|
||
let local = metadata.sourceIP || "?";
|
||
let chain = "";
|
||
if (c.chain && length(c.chain) > 0) chain = c.chain[length(c.chain) - 1];
|
||
let dl = format_bytes(c.download);
|
||
let ul = format_bytes(c.upload);
|
||
text += "• <code>" + escape_html(proto) + "</code> " + escape_html(local) + " → " + escape_html(dest) + "\n";
|
||
text += " ↳ " + escape_html(chain) + " 📥" + dl + " 📤" + ul + "\n";
|
||
}
|
||
|
||
let total_pages = int((total + per_page - 1) / per_page);
|
||
let keyboard = [];
|
||
if (total_pages > 1) {
|
||
let nav = [];
|
||
if (page > 0) push(nav, { text: "◀️ Prev", callback_data: "/connections " + as_string(page - 1) });
|
||
push(nav, { text: as_string(page + 1) + "/" + as_string(int(total_pages)), callback_data: "/noop" });
|
||
if (end < total) push(nav, { text: "▶️ Next", callback_data: "/connections " + as_string(page + 1) });
|
||
push(keyboard, nav);
|
||
}
|
||
push(keyboard, [{ text: t("btn_refresh"), callback_data: "/connections" }]);
|
||
push(keyboard, [{ text: t("btn_close_all"), callback_data: "/close_connections" }]);
|
||
push(keyboard, [{ text: "⬅️ " + t("nav_back"), callback_data: "/menu" }]);
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
// ─── Section Subscription Commands ──────────────────────────────────────────
|
||
|
||
function view_sec_subs(token, chat_id, msg_id, sec_name) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let all = c.get_all(CONFIG_NAME);
|
||
let keyboard = [];
|
||
let count = 0;
|
||
let idx = 0;
|
||
for (let sname in all) {
|
||
let s = all[sname];
|
||
if (s[".type"] == "subscription_url" && s.section == sec_name) {
|
||
let url = s.url || t("sub_empty_url");
|
||
if (length(url) > 35) url = substr(url, 0, 35) + "...";
|
||
let icon = s.enabled == "0" ? "❌" : "✅";
|
||
push(keyboard, [{ text: icon + " " + url, callback_data: "/set_cat subscription_url " + sname }]);
|
||
push(keyboard, [{ text: " 🗑 Удалить", callback_data: "/sec_sub_del " + sec_name + " " + idx }]);
|
||
count++;
|
||
}
|
||
idx++;
|
||
}
|
||
push(keyboard, [{ text: "➕ Добавить подписку", callback_data: "/sec_sub_add " + sec_name }]);
|
||
push(keyboard, [{ text: "🔙 " + t("nav_back"), callback_data: "/sec_view " + sec_name }]);
|
||
let text = "🔗 <b>" + t("sub_section_subs") + " " + escape_html(sec_name) + "</b>\n\n";
|
||
if (count == 0) {
|
||
text += t("sub_none");
|
||
} else {
|
||
text += t("sub_found_count") + " " + count;
|
||
}
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_sec_sub_add(token, chat_id, msg_id, sec_name, url) {
|
||
if (!sec_name || !url) {
|
||
set_tg_state(chat_id, { action: "sec_sub_add" });
|
||
return send_message(token, chat_id, "📝 " + t("sub_enter_url"), "HTML");
|
||
}
|
||
url = trim(url);
|
||
if (url == "") {
|
||
send_message(token, chat_id, "❌ " + t("sub_url_empty"));
|
||
return;
|
||
}
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let max_idx = 0;
|
||
let all = c.get_all(CONFIG_NAME);
|
||
for (let sname in all) {
|
||
if (all[sname][".type"] == "subscription_url") {
|
||
let m = match(sname, /^sub_(\d+)$/);
|
||
if (m) {
|
||
let i = int(m[1]);
|
||
if (i > max_idx) max_idx = i;
|
||
}
|
||
}
|
||
}
|
||
let new_sec = "sub_" + (max_idx + 1);
|
||
c.set(CONFIG_NAME, new_sec, "enabled", "1");
|
||
c.set(CONFIG_NAME, new_sec, "section", sec_name);
|
||
c.set(CONFIG_NAME, new_sec, "url", url);
|
||
c.set(CONFIG_NAME, new_sec, "label", url);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ " + t("sub_added") + " <code>" + sec_name + "</code>!", "HTML");
|
||
view_sec_subs(token, chat_id, null, sec_name);
|
||
}
|
||
|
||
function handle_sec_sub_del(token, chat_id, msg_id, sec_name, idx) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let all = c.get_all(CONFIG_NAME);
|
||
let sub_names = [];
|
||
for (let sname in all) {
|
||
if (all[sname][".type"] == "subscription_url" && all[sname].section == sec_name) {
|
||
push(sub_names, sname);
|
||
}
|
||
}
|
||
if (idx < 0 || idx >= length(sub_names)) {
|
||
send_message(token, chat_id, "❌ " + t("sub_not_found"));
|
||
return view_sec_subs(token, chat_id, null, sec_name);
|
||
}
|
||
let target = sub_names[idx];
|
||
c.delete(CONFIG_NAME, target);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ " + t("sub_removed") + " <code>" + sec_name + "</code>.", "HTML");
|
||
view_sec_subs(token, chat_id, null, sec_name);
|
||
}
|
||
|
||
function view_help(token, chat_id, msg_id) {
|
||
let text = "📖 <b>" + t("help_title") + "</b>\n\n" +
|
||
"<b>" + t("help_main_section") + "</b>\n" +
|
||
"/status — Статус системы\n" +
|
||
"/runtime — Статистика трафика\n" +
|
||
"/outbounds — Прокси серверы\n" +
|
||
"/sections — Секции маршрутизации\n" +
|
||
"/devices — Устройства в сети\n" +
|
||
"/instances — Live серверы\n\n" +
|
||
"<b>" + t("help_diag_section") + "</b>\n" +
|
||
"/speed — Тест скорости\n" +
|
||
"/ping — Задержка до серверов\n" +
|
||
"/test — Быстрая диагностика\n" +
|
||
"/doctor — Полная диагностика\n" +
|
||
"/logs — Просмотр логов\n" +
|
||
"/info — Информация о системе\n" +
|
||
"/connections — Активные подключения\n\n" +
|
||
"<b>" + t("help_manage_section") + "</b>\n" +
|
||
"/restart — Перезапуск служб Tachyon\n" +
|
||
"/backup — Бэкап конфига\n" +
|
||
"/close_connections — Закрыть все соединения\n" +
|
||
"/check_updates — Проверить обновления\n\n" +
|
||
"<b>" + t("help_settings_section") + "</b>\n" +
|
||
"/settings — Все настройки\n" +
|
||
"/dns_presets — DNS пресеты\n" +
|
||
"/help — " + t("help_this");
|
||
|
||
let keyboard = [[{ text: "⬅️ " + t("nav_menu"), callback_data: "/menu" }]];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
// ─── Phase 4: Language, Quiet Hours, Rule Test, Export, Guest Mode ─────────
|
||
|
||
function register_bot_commands(token) {
|
||
if (!token) return;
|
||
let commands = [
|
||
{ command: "menu", description: t("cmd_menu") },
|
||
{ command: "status", description: t("cmd_status") },
|
||
{ command: "runtime", description: t("cmd_runtime") },
|
||
{ command: "outbounds", description: t("cmd_outbounds") },
|
||
{ command: "sections", description: t("cmd_sections") },
|
||
{ command: "instances", description: t("cmd_instances") },
|
||
{ command: "guest", description: t("cmd_guest") },
|
||
{ command: "speed", description: t("cmd_speed") },
|
||
{ command: "ping", description: t("cmd_ping") },
|
||
{ command: "test", description: t("cmd_test") },
|
||
{ command: "logs", description: t("cmd_logs") },
|
||
{ command: "info", description: t("cmd_info") },
|
||
{ command: "connections", description: t("cmd_connections") },
|
||
{ command: "test_rule", description: t("cmd_test_rule") },
|
||
{ command: "help", description: t("cmd_help") },
|
||
{ command: "check_updates", description: t("cmd_check_updates") },
|
||
{ command: "close_connections", description: t("cmd_close_connections") },
|
||
{ command: "doctor", description: t("cmd_doctor") },
|
||
{ command: "restart", description: t("cmd_restart") },
|
||
{ command: "lang", description: t("cmd_lang") }
|
||
];
|
||
tg_request(token, "setMyCommands", { commands: commands });
|
||
}
|
||
|
||
function view_language(token, chat_id, msg_id) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let current_lang = option(c.get_all(CONFIG_NAME, "telegram"), "language", "en");
|
||
let langs = i18n.available_languages(current_lang);
|
||
let lang_label = (current_lang == "ru") ? "Русский" : "English";
|
||
|
||
let text = t("choose_language") + "\n\n" + t("lang_current", lang_label);
|
||
let keyboard = [];
|
||
let row = [];
|
||
for (let i = 0; i < length(langs); i++) {
|
||
let l = langs[i];
|
||
let marker = (l.code == current_lang) ? " ✅" : "";
|
||
push(row, { text: l.label + marker, callback_data: "/lang_set " + l.code });
|
||
if (length(row) == 2) { push(keyboard, row); row = []; }
|
||
}
|
||
if (length(row) > 0) push(keyboard, row);
|
||
push(keyboard, [{ text: t("nav_back"), callback_data: "/settings" }]);
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_lang_set(token, chat_id, msg_id, lang) {
|
||
lang = i18n.resolve_lang(lang);
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
c.set(CONFIG_NAME, "telegram", "language", lang);
|
||
c.commit(CONFIG_NAME);
|
||
t = i18n.bind(lang);
|
||
register_bot_commands(token);
|
||
let lang_label = (lang == "ru") ? "Русский" : "English";
|
||
let text = "✅ <b>" + t("lang_saved") + "</b>\n\n" + t("lang_current", lang_label);
|
||
let keyboard = [[{ text: t("nav_back"), callback_data: "/settings" }]];
|
||
if (msg_id) return edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
return send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_guest_mode(token, chat_id, msg_id) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = object_or_empty(c.get_all(CONFIG_NAME, "guest_mode"));
|
||
let enabled = bool_option(s, "enabled", false);
|
||
let gmode = option(s, "mode", "selected");
|
||
let mode_label = (gmode == "inverted") ? t("guest_mode_inverted") : t("guest_mode_selected");
|
||
let guest_devs = list_option(s, "guest_devices");
|
||
let trusted_devs = list_option(s, "trusted_devices");
|
||
let time_limit = int_option(s, "daily_time_limit", 0);
|
||
let traffic_limit = int_option(s, "daily_traffic_limit", 0);
|
||
let isolate_lan = bool_option(s, "isolate_lan", true);
|
||
|
||
let text = "👥 <b>" + t("guest_title") + "</b>\n\n" +
|
||
(enabled ? t("guest_status_active") : t("guest_status_inactive")) + "\n" +
|
||
"📋 " + t("routing_mode") + ": <b>" + mode_label + "</b>\n";
|
||
|
||
if (gmode == "inverted") {
|
||
text += sprintf(t("guest_trusted_count"), length(trusted_devs)) + "\n";
|
||
} else {
|
||
text += sprintf(t("guest_devices_count"), length(guest_devs)) + "\n";
|
||
}
|
||
|
||
if (isolate_lan) {
|
||
text += "🛡 " + t("guest_lan_isolated") + "\n";
|
||
}
|
||
|
||
if (time_limit > 0) {
|
||
text += sprintf(t("guest_time_limit"), time_limit) + "\n";
|
||
}
|
||
if (traffic_limit > 0) {
|
||
text += sprintf(t("guest_traffic_limit"), as_string(traffic_limit) + " MB") + "\n";
|
||
}
|
||
|
||
let quota_state = fs.readfile("/var/run/tachyon/parental_quotas.json");
|
||
if (quota_state) {
|
||
try {
|
||
let q = json(quota_state);
|
||
let devs = object_or_empty(q.devices);
|
||
let active_guests = [];
|
||
for (let ident in keys(devs)) {
|
||
let dev_entry = devs[ident];
|
||
if (dev_entry.is_guest || dev_entry.blocked) {
|
||
let st = dev_entry.blocked ? "🚫" : "⏳";
|
||
let info = st + " <code>" + ident + "</code>: " + as_string(dev_entry.minutes || 0) + " мин";
|
||
if (dev_entry.bytes) info += " (" + format_bytes(dev_entry.bytes) + ")";
|
||
push(active_guests, info);
|
||
}
|
||
}
|
||
if (length(active_guests) > 0) {
|
||
text += "\n<b>Активность сегодня:</b>\n" + join("\n", active_guests) + "\n";
|
||
}
|
||
} catch(e) {}
|
||
}
|
||
|
||
let toggle_label = enabled ? ("🔴 " + t("btn_disable")) : ("🟢 " + t("btn_enable"));
|
||
let keyboard = [
|
||
[{ text: toggle_label, callback_data: "/guest_toggle" }],
|
||
[{ text: t("nav_back"), callback_data: "/settings" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_guest_toggle(token, chat_id, msg_id) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = object_or_empty(c.get_all(CONFIG_NAME, "guest_mode"));
|
||
let cur = bool_option(s, "enabled", false);
|
||
let nxt = cur ? "0" : "1";
|
||
c.set(CONFIG_NAME, "guest_mode", "enabled", nxt);
|
||
c.commit(CONFIG_NAME);
|
||
command_status(command_from_args(["/usr/bin/tachyon", "reload_firewall"]));
|
||
return view_guest_mode(token, chat_id, msg_id);
|
||
}
|
||
|
||
function view_quiet_hours(token, chat_id, msg_id) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, "telegram");
|
||
let enabled = option(s, "quiet_hours_enabled", "0") == "1";
|
||
let start_hr = option(s, "quiet_hours_start", "23");
|
||
let end_hr = option(s, "quiet_hours_end", "7");
|
||
|
||
let text = "🔕 <b>" + t("quiet_hours_title") + "</b>\n\n" +
|
||
t("quiet_status") + ": " + (enabled ? "🟢 " + t("quiet_enabled_label") : "❌ " + t("quiet_disabled_label")) + "\n" +
|
||
t("quiet_start_label") + " <code>" + start_hr + ":00</code>\n" +
|
||
t("quiet_end_label") + " <code>" + end_hr + ":00</code>\n\n" +
|
||
t("quiet_hint");
|
||
|
||
let keyboard = [
|
||
[{ text: (enabled ? t("btn_disable") : t("btn_enable")), callback_data: "/qh_toggle" }],
|
||
[{ text: "⏰ Начало: " + start_hr, callback_data: "/qh_start" }],
|
||
[{ text: "⏰ Конец: " + end_hr, callback_data: "/qh_end" }],
|
||
[{ text: "⬅️ " + t("nav_back"), callback_data: "/settings" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_qh_toggle(token, chat_id, msg_id) {
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, "telegram");
|
||
let current = option(s, "quiet_hours_enabled", "0");
|
||
c.set(CONFIG_NAME, "telegram", "quiet_hours_enabled", current == "1" ? "0" : "1");
|
||
c.commit(CONFIG_NAME);
|
||
return view_quiet_hours(token, chat_id, msg_id);
|
||
}
|
||
|
||
function view_test_rule(token, chat_id, msg_id, target) {
|
||
if (!target) {
|
||
set_tg_state(chat_id, { action: "test_rule" });
|
||
return send_message(token, chat_id, "🔍 Введите домен или IP для проверки:\n\n<i>Отправьте /cancel для отмены</i>", "HTML");
|
||
}
|
||
|
||
let text = "🔍 <b>" + t("test_rule_header") + "</b> <code>" + escape_html(target) + "</code>\n\n";
|
||
let sections = api.get_sections();
|
||
let matched = false;
|
||
|
||
// api.get_sections() returns an ARRAY of section objects. In ucode, iterating
|
||
// an array with for..in yields the elements themselves, not indices.
|
||
for (let sec in sections) {
|
||
if (!sec) continue;
|
||
if (sec[".type"] == "settings" || sec[".type"] == "telegram") continue;
|
||
if (sec.enabled == "0") continue;
|
||
|
||
let domain_suffix = common.list_option(sec, "domain_suffix");
|
||
let domain = common.list_option(sec, "domain");
|
||
let ip_cidr = common.list_option(sec, "ip_cidr");
|
||
|
||
for (let d in domain_suffix) {
|
||
if (target == d || (length(target) > length(d) + 1 && substr(target, length(target) - length(d) - 1) == "." + d)) {
|
||
text += "✅ " + t("test_match") + " <code>" + escape_html(sec[".name"]) + "</code> (domain_suffix)\n";
|
||
text += " " + t("test_action") + " <code>" + as_string(sec.action || "proxy") + "</code>\n\n";
|
||
matched = true;
|
||
}
|
||
}
|
||
for (let d in domain) {
|
||
if (target == d || target == "full:" + d) {
|
||
text += "✅ " + t("test_match") + " <code>" + escape_html(sec[".name"]) + "</code> (domain)\n";
|
||
text += " " + t("test_action") + " <code>" + as_string(sec.action || "proxy") + "</code>\n\n";
|
||
matched = true;
|
||
}
|
||
}
|
||
for (let ip in ip_cidr) {
|
||
if (match(target, /^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$/) && cidr_match_v4(target, ip)) {
|
||
text += "✅ " + t("test_match") + " <code>" + escape_html(sec[".name"]) + "</code> (ip_cidr)\n";
|
||
text += " " + t("test_action") + " <code>" + as_string(sec.action || "proxy") + "</code>\n\n";
|
||
matched = true;
|
||
}
|
||
}
|
||
}
|
||
|
||
if (!matched) text += "❌ " + t("test_no_match");
|
||
|
||
let keyboard = [
|
||
[{ text: "🔄 Ещё раз", callback_data: "/test_rule" }],
|
||
[{ text: "⬅️ " + t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function exec_export_config(token, chat_id, msg_id) {
|
||
let wait_text = "📤 <b>" + t("export_title") + "</b>\n";
|
||
if (msg_id) edit_message(token, chat_id, msg_id, wait_text, "HTML");
|
||
else send_message(token, chat_id, wait_text, "HTML");
|
||
|
||
let export_path = "/tmp/tachyon_export_" + time() + ".json";
|
||
let res = command_capture(command_from_args(["/usr/lib/tachyon/diagnostics/runtime.uc", "show-config"]));
|
||
if (res && res.status == 0 && res.output) {
|
||
fs.writefile(export_path, res.output);
|
||
send_document(token, chat_id, export_path);
|
||
// Absent file already satisfies the caller; fs.unlink throws on ENOENT.
|
||
try { fs.unlink(export_path); } catch(e) {}
|
||
send_message(token, chat_id, "✅ " + t("export_done"), "HTML", [[{ text: "⬅️ " + t("nav_menu"), callback_data: "/menu" }]]);
|
||
} else {
|
||
send_message(token, chat_id, "❌ " + t("export_failed"), "HTML", [[{ text: "⬅️ " + t("nav_menu"), callback_data: "/menu" }]]);
|
||
}
|
||
}
|
||
|
||
// ─── Device blocking (real firewall rules) ──────────────────────────────────
|
||
//
|
||
// view_devices() reports a device as blocked when a firewall REJECT rule carries
|
||
// its src_mac, so the toggle has to create/remove exactly such a rule. The old
|
||
// implementation wrote tachyon.settings.blocked_macs, which nothing ever read.
|
||
|
||
function normalize_mac(mac) {
|
||
mac = uc(trim(as_string(mac)));
|
||
if (!match(mac, /^[0-9A-F]{2}(:[0-9A-F]{2}){5}$/)) return null;
|
||
return mac;
|
||
}
|
||
|
||
function find_mac_block_rules(c, mac) {
|
||
let found = [];
|
||
c.foreach("firewall", "rule", function(r) {
|
||
if (r.target == "REJECT" && r.src_mac && uc(as_string(r.src_mac)) == mac)
|
||
push(found, r[".name"]);
|
||
});
|
||
return found;
|
||
}
|
||
|
||
function handle_toggle_mac(token, chat_id, mac_raw) {
|
||
let mac = normalize_mac(mac_raw);
|
||
if (!mac) {
|
||
send_message(token, chat_id, "❌ " + t("mac_invalid"), "HTML");
|
||
return view_devices(token, chat_id, null);
|
||
}
|
||
|
||
let c = uci_core.cursor();
|
||
if (!c) {
|
||
return send_message(token, chat_id, "❌ " + t("mac_firewall_open_failed"), "HTML",
|
||
[[{ text: "⬅️ " + t("nav_menu"), callback_data: "/menu" }]]);
|
||
}
|
||
c.load("firewall");
|
||
|
||
let existing = find_mac_block_rules(c, mac);
|
||
let blocked_now;
|
||
if (length(existing) > 0) {
|
||
for (let name in existing)
|
||
c.delete("firewall", name);
|
||
blocked_now = false;
|
||
} else {
|
||
let sec = c.add("firewall", "rule");
|
||
if (!sec) {
|
||
return send_message(token, chat_id, "❌ " + t("mac_block_rule_failed"), "HTML",
|
||
[[{ text: "⬅️ " + t("nav_menu"), callback_data: "/menu" }]]);
|
||
}
|
||
c.set("firewall", sec, "name", "Tachyon block " + mac);
|
||
c.set("firewall", sec, "src", "lan");
|
||
c.set("firewall", sec, "dest", "*");
|
||
c.set("firewall", sec, "proto", "all");
|
||
c.set("firewall", sec, "src_mac", mac);
|
||
c.set("firewall", sec, "target", "REJECT");
|
||
blocked_now = true;
|
||
}
|
||
c.commit("firewall");
|
||
// Reload in the background so the poll loop is not blocked by fw4
|
||
system(common.background_command("/etc/init.d/firewall reload"));
|
||
|
||
send_message(token, chat_id,
|
||
(blocked_now ? "🚫 Устройство <code>" : "🔓 Устройство <code>") + mac +
|
||
(blocked_now ? "</code> заблокировано." : "</code> разблокировано.") +
|
||
"\n\n<i>Правила firewall применяются в фоне (несколько секунд).</i>", "HTML");
|
||
return view_devices(token, chat_id, null);
|
||
}
|
||
|
||
function view_devices(token, chat_id, msg_id) {
|
||
let lease_file = "/tmp/dhcp.leases";
|
||
let data = fs.readfile(lease_file);
|
||
|
||
let firewall_c = uci_core.cursor();
|
||
if (firewall_c) firewall_c.load("firewall");
|
||
let blocked_macs = {};
|
||
if (firewall_c) {
|
||
firewall_c.foreach("firewall", "rule", function(r) {
|
||
if (r.target == "REJECT" && r.src_mac) blocked_macs[uc(as_string(r.src_mac))] = true;
|
||
});
|
||
}
|
||
|
||
let text = "💻 <b>" + t("devices_title") + "</b>\n\n";
|
||
let keyboard = [];
|
||
let count = 0;
|
||
|
||
if (data) {
|
||
for (let line in split(data, "\n")) {
|
||
line = trim(line);
|
||
if (line == "") continue;
|
||
let fields = split(line, / /);
|
||
if (length(fields) < 4) continue;
|
||
|
||
let mac = uc(as_string(fields[1]));
|
||
let ip = fields[2];
|
||
let hostname = fields[3] == "*" ? t("device_hostname_unknown") : fields[3];
|
||
|
||
let is_blocked = blocked_macs[mac];
|
||
let status_icon = is_blocked ? "🚫" : "🟢";
|
||
|
||
text += status_icon + " <b>" + escape_html(hostname) + "</b>\n";
|
||
text += "└ IP: <code>" + ip + "</code> | MAC: <code>" + mac + "</code>\n\n";
|
||
|
||
push(keyboard, [{ text: (is_blocked ? "🔓 Разблокировать " : "🚫 Заблокировать ") + hostname, callback_data: "/toggle_mac " + mac }]);
|
||
count++;
|
||
}
|
||
}
|
||
|
||
if (count == 0) text += "<i>" + t("devices_not_found") + "</i>\n";
|
||
|
||
push(keyboard, [{ text: "🔄 " + t("btn_refresh"), callback_data: "/devices" }]);
|
||
push(keyboard, [{ text: "⬅️ " + t("nav_back"), callback_data: "/menu" }]);
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_watchdog(token, chat_id, msg_id) {
|
||
let running = api.process_running_by_pidfile("/var/run/tachyon_watchdog.pid");
|
||
let text = "🐕 <b>Watchdog Tachyon</b>\n\n" +
|
||
t("status") + ": <code>" + (running ? t("status_running") : t("status_stopped")) + "</code>";
|
||
|
||
let keyboard = [];
|
||
if (running) {
|
||
push(keyboard, [{ text: "⏹️ Остановить Watchdog", callback_data: "/wd_stop" }]);
|
||
push(keyboard, [{ text: "📊 Полный статус AI", callback_data: "/ai_status_full" }]);
|
||
} else {
|
||
push(keyboard, [{ text: "▶️ Запустить Watchdog", callback_data: "/wd_start" }]);
|
||
}
|
||
push(keyboard, [{ text: "⬅️ " + t("nav_back"), callback_data: "/menu" }]);
|
||
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function exec_ai_heal(token, chat_id, msg_id) {
|
||
send_message(token, chat_id, "🤖 <b>" + t("heal_running") + "</b>", "HTML");
|
||
|
||
command_status(command_from_args(["/usr/bin/tachyon", "ai_heal"]));
|
||
|
||
let status_data = fs.readfile("/tmp/tachyon_ai_status.json");
|
||
let text = "🤖 <b>[" + t("ai_doctor_title") + "]</b>\n\n";
|
||
if (status_data) {
|
||
try {
|
||
let st = json(status_data);
|
||
if (st.last_incident) {
|
||
text += "⚠️ <b>" + t("ai_incident") + "</b> " + escape_html(st.last_incident.description || "") + "\n";
|
||
text += "🔧 <b>" + t("ai_resolution") + "</b> " + escape_html(st.last_incident.resolution || "") + "\n\n";
|
||
text += t("status_normal");
|
||
} else {
|
||
text += "🟢 " + t("ai_all_ok");
|
||
}
|
||
} catch(e) {
|
||
text += "🟢 " + t("ai_diag_ok");
|
||
}
|
||
} else {
|
||
text += "🟢 " + t("ai_diag_done");
|
||
}
|
||
|
||
let keyboard = [[{ text: "⬅️ В меню", callback_data: "/menu" }]];
|
||
send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function exec_ai_status_full(token, chat_id, msg_id) {
|
||
send_message(token, chat_id, "🔍 <b>" + t("ai_status_collecting") + "</b>", "HTML");
|
||
let res = command_capture(command_from_args([ "/usr/bin/tachyon", "ai_status_full" ]));
|
||
let data = res ? (res.output || t("err_no_data")) : t("ai_status_error");
|
||
if (length(data) > 3500) data = substr(data, 0, 3500) + "\n... (" + t("ai_data_truncated") + ")";
|
||
let text = "🤖 <b>" + t("ai_full_status_header") + "</b>\n\n<pre>" + escape_html(data) + "</pre>";
|
||
let keyboard = [[{ text: "⬅️ " + t("nav_back"), callback_data: "/watchdog" }]];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function view_qos(token, chat_id, msg_id) {
|
||
let c = uci_core.cursor(); c.load(CONFIG_NAME);
|
||
let cfg = c.get_all(CONFIG_NAME, "settings") || {};
|
||
let enabled = cfg.qos_priority_engine != "0";
|
||
|
||
let text = "🎮 <b>" + t("qos_title") + "</b>\n\n" +
|
||
t("quiet_status") + ": <code>" + (enabled ? "🟢 " + t("qos_enabled_detail") : "⚪ " + t("qos_disabled_detail")) + "</code>\n\n" +
|
||
"<b>" + t("qos_priority_rules") + "</b>\n" +
|
||
"├ 🎙️ <b>Golos/Discord/RTC:</b> UDP 5000-5020, 3478, 50000-65535 ➔ <code>DSCP EF (0x2e)</code>\n" +
|
||
"├ 🎮 <b>Games (Steam/CS/Dota/Apex/PUBG/Roblox):</b> UDP 27000-27050, 3074 ➔ <code>DSCP AF41 (0x22)</code>\n" +
|
||
"└ ⚡ <b>TCP ACK Acceleration:</b> малые ACK пакеты ➔ <code>High Priority</code>";
|
||
|
||
let keyboard = [
|
||
[{ text: (enabled ? "⏹️ Отключить QoS" : "⚡ Включить QoS"), callback_data: "/qos_toggle" }],
|
||
[{ text: "⬅️ " + t("nav_back"), callback_data: "/menu" }]
|
||
];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
}
|
||
|
||
function handle_qos_toggle(token, chat_id, msg_id) {
|
||
let c = uci_core.cursor(); c.load(CONFIG_NAME);
|
||
let cfg = c.get_all(CONFIG_NAME, "settings") || {};
|
||
let new_val = (cfg.qos_priority_engine == "0") ? "1" : "0";
|
||
c.set(CONFIG_NAME, "settings", "qos_priority_engine", new_val);
|
||
c.commit(CONFIG_NAME);
|
||
system(common.background_command("/usr/bin/tachyon reload_firewall"));
|
||
view_qos(token, chat_id, msg_id);
|
||
}
|
||
|
||
function valid_updatable_component(name) {
|
||
name = as_string(name);
|
||
let allowed = {
|
||
tachyon: 1,
|
||
sing_box: 1,
|
||
"sing-box": 1,
|
||
zapret: 1,
|
||
zapret2: 1,
|
||
byedpi: 1
|
||
};
|
||
return allowed[name];
|
||
}
|
||
|
||
// ─── Dispatcher ──────────────────────────────────────────────────────────────
|
||
|
||
function dispatch_command(token, chat_id, text, msg_id) {
|
||
let cmd = trim(as_string(text));
|
||
|
||
// Resolve tokenized callbacks produced by cb_data() for oversized payloads
|
||
if (match(cmd, /^\/cb /)) {
|
||
let cb_tok = trim(substr(cmd, 4));
|
||
let full = cb_map_get(cb_tok);
|
||
if (full == null || full == "") {
|
||
return send_message(token, chat_id,
|
||
"⚠️ " + t("cb_obsolete"), "HTML",
|
||
[[{ text: "⬅️ " + t("nav_menu"), callback_data: "/menu" }]]);
|
||
}
|
||
cmd = trim(full);
|
||
}
|
||
|
||
let state = get_tg_state(chat_id);
|
||
|
||
if (cmd == "/noop") return;
|
||
if (cmd == "/start" || cmd == "/menu") return view_menu(token, chat_id, msg_id);
|
||
if (cmd == "/status") return view_status(token, chat_id, msg_id);
|
||
if (cmd == "/runtime") return view_runtime(token, chat_id, msg_id);
|
||
if (cmd == "/heal" || cmd == "/ai_heal" || cmd == "/ai_doctor") return exec_ai_heal(token, chat_id, msg_id);
|
||
if (cmd == "/qos") return view_qos(token, chat_id, msg_id);
|
||
if (cmd == "/qos_toggle") return handle_qos_toggle(token, chat_id, msg_id);
|
||
|
||
if (cmd == "/speed") return exec_speedtest(token, chat_id, msg_id);
|
||
if (cmd == "/ping") return view_ping(token, chat_id, msg_id);
|
||
if (cmd == "/test") return view_quick_test(token, chat_id, msg_id);
|
||
if (cmd == "/info") return view_system_info(token, chat_id, msg_id);
|
||
if (cmd == "/help") return view_help(token, chat_id, msg_id);
|
||
if (cmd == "/lang" || cmd == "/language") return view_language(token, chat_id, msg_id);
|
||
let lang_match = match(cmd, /^\/(lang_set|lang|language)[ \t]+([a-zA-Z0-9_-]+)/);
|
||
if (lang_match) {
|
||
let lang = lc(trim(lang_match[2]));
|
||
return handle_lang_set(token, chat_id, msg_id, lang);
|
||
}
|
||
if (cmd == "/guest") return view_guest_mode(token, chat_id, msg_id);
|
||
if (cmd == "/guest_toggle") return handle_guest_toggle(token, chat_id, msg_id);
|
||
|
||
if (match(cmd, /^\/logs /)) {
|
||
let parts = split(trim(substr(cmd, 6)), " ");
|
||
return view_logs(token, chat_id, msg_id, parts[0] || "all", parts[1] || "30");
|
||
}
|
||
if (cmd == "/logs") return view_logs(token, chat_id, msg_id);
|
||
|
||
if (match(cmd, /^\/connections /)) {
|
||
let page = trim(substr(cmd, 13));
|
||
return view_connections(token, chat_id, msg_id, page);
|
||
}
|
||
if (cmd == "/connections") return view_connections(token, chat_id, msg_id);
|
||
|
||
if (cmd == "/test_rule") return view_test_rule(token, chat_id, msg_id);
|
||
if (cmd == "/export_config") return exec_export_config(token, chat_id, msg_id);
|
||
if (cmd == "/qh") return view_quiet_hours(token, chat_id, msg_id);
|
||
if (cmd == "/qh_toggle") return handle_qh_toggle(token, chat_id, msg_id);
|
||
if (cmd == "/qh_start" || cmd == "/qh_end") {
|
||
let which = (cmd == "/qh_start") ? "start" : "end";
|
||
set_tg_state(chat_id, { action: "qh_hour", which: which });
|
||
return send_message(token, chat_id,
|
||
"⏰ " + t("quiet_enter_hour") + " " + (which == "start" ? t("quiet_start_word") : t("quiet_end_word")) +
|
||
" тихих часов (0–23):\n\n<i>Отправьте /cancel для отмены</i>", "HTML");
|
||
}
|
||
|
||
if (cmd == "/outbounds" || cmd == "/server" || cmd == "/servers") return view_outbounds(token, chat_id, msg_id);
|
||
if (match(cmd, /^\/(outbounds|server|servers) /)) {
|
||
let parts = split(cmd, " ");
|
||
let grp = trim(join(" ", slice(parts, 1)));
|
||
return view_outbounds(token, chat_id, msg_id, grp);
|
||
}
|
||
|
||
if (cmd == "/sections" || cmd == "/rules") return view_sections(token, chat_id, msg_id);
|
||
if (cmd == "/devices") return view_devices(token, chat_id, msg_id);
|
||
if (match(cmd, /^\/toggle_mac /)) {
|
||
let mac = trim(substr(cmd, 12));
|
||
return handle_toggle_mac(token, chat_id, mac);
|
||
}
|
||
if (cmd == "/watchdog") return view_watchdog(token, chat_id, msg_id);
|
||
if (cmd == "/doctor") return exec_doctor(token, chat_id);
|
||
if (cmd == "/ai_status_full") return exec_ai_status_full(token, chat_id, msg_id);
|
||
if (cmd == "/restart") return exec_restart(token, chat_id);
|
||
if (cmd == "/confirm_restart") {
|
||
if (msg_id) return apply_confirmed_restart(token, chat_id, msg_id);
|
||
return exec_restart(token, chat_id);
|
||
}
|
||
if (cmd == "/backup") return exec_backup(token, chat_id);
|
||
if (cmd == "/support_bundle") return exec_support_bundle(token, chat_id);
|
||
if (cmd == "/close_connections") return exec_close_connections(token, chat_id);
|
||
if (cmd == "/instances") return view_instances(token, chat_id, msg_id);
|
||
if (cmd == "/check_updates") return exec_check_updates(token, chat_id, msg_id);
|
||
|
||
if (match(cmd, /^\/update_component /)) {
|
||
let comp = trim(substr(cmd, 17));
|
||
if (!valid_updatable_component(comp)) {
|
||
send_message(token, chat_id, "❌ <b>" + t("err_unknown_component") + "</b> <code>" + escape_html(comp) + "</code>", "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
return;
|
||
}
|
||
if (msg_id) edit_message(token, chat_id, msg_id, t("update_component_title") + " " + escape_html(comp) + "...</b>\n" + t("update_bg_hint"), "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
else send_message(token, chat_id, t("update_component_title") + " " + escape_html(comp) + "...</b>\n" + t("update_bg_hint"), "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
command_status(command_from_args(["/usr/bin/tachyon", "component_action_async", comp, "install"]));
|
||
return;
|
||
}
|
||
|
||
if (match(cmd, /^\/admin_add /)) {
|
||
let fwd_id = trim(substr(cmd, 11));
|
||
if (!match(fwd_id, /^-?[0-9]+$/)) {
|
||
send_message(token, chat_id, "❌ " + t("admin_invalid_chat_id"), "HTML");
|
||
return;
|
||
}
|
||
let c = uci_core.cursor(); c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, "telegram");
|
||
let current_admins = option(s, "admin_ids", "");
|
||
let admins_list = split(current_admins, /,/);
|
||
let found = false;
|
||
for (let a in admins_list) if (trim(a) == fwd_id) found = true;
|
||
|
||
if (!found) {
|
||
let new_admins = current_admins != "" ? current_admins + "," + fwd_id : fwd_id;
|
||
c.set(CONFIG_NAME, "telegram", "admin_ids", new_admins);
|
||
c.commit(CONFIG_NAME);
|
||
if (msg_id) edit_message(token, chat_id, msg_id, "✅ " + t("admin_user_added") + " `" + fwd_id + "`", "Markdown", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
else send_message(token, chat_id, "✅ " + t("admin_user_added") + " `" + fwd_id + "`", "Markdown", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
} else {
|
||
if (msg_id) edit_message(token, chat_id, msg_id, "ℹ️ " + t("admin_user_already") + " `" + fwd_id + "`", "Markdown", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
}
|
||
return;
|
||
}
|
||
|
||
if (cmd == "/wd_start") {
|
||
command_status(command_from_args(["/usr/bin/tachyon", "watchdog_start"]));
|
||
return view_watchdog(token, chat_id, msg_id);
|
||
}
|
||
if (cmd == "/wd_stop") {
|
||
command_status(command_from_args(["/usr/bin/tachyon", "watchdog_stop"]));
|
||
return view_watchdog(token, chat_id, msg_id);
|
||
}
|
||
|
||
// Commands with args
|
||
|
||
if (match(cmd, /^\/sec_create/)) {
|
||
set_tg_state(chat_id, { action: "sec_create" });
|
||
return send_message(token, chat_id, t("sec_enter_name"), "HTML");
|
||
}
|
||
if (match(cmd, /^\/sec_rename /)) {
|
||
let sec = trim(substr(cmd, 12));
|
||
set_tg_state(chat_id, { action: "sec_rename", sec: sec });
|
||
return send_message(token, chat_id, t("sec_enter_label") + " <code>" + sec + "</code>:\n\n<i>Отправьте /cancel для отмены</i>", "HTML");
|
||
}
|
||
if (match(cmd, /^\/sec_target /)) {
|
||
let sec = trim(substr(cmd, 12));
|
||
set_tg_state(chat_id, { action: "sec_target", sec: sec });
|
||
return send_message(token, chat_id, t("sec_enter_target") + " <code>" + sec + "</code> (например, <code>main-out</code> или <code>direct-out</code>):\n\n<i>Отправьте /cancel для отмены</i>", "HTML");
|
||
}
|
||
if (match(cmd, /^\/sec_action /)) {
|
||
let sec = trim(substr(cmd, 12));
|
||
return handle_sec_action(token, chat_id, msg_id, sec);
|
||
}
|
||
if (match(cmd, /^\/sec_delete /)) {
|
||
let sec = trim(substr(cmd, 12));
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sec);
|
||
if (!s) {
|
||
send_message(token, chat_id, "❌ " + t("sec_not_found") + " <code>" + sec + "</code>", "HTML");
|
||
return view_sections(token, chat_id, null);
|
||
}
|
||
connections.cascade_delete_section(c, CONFIG_NAME, sec);
|
||
c.delete(CONFIG_NAME, sec);
|
||
c.commit(CONFIG_NAME);
|
||
send_message(token, chat_id, "✅ " + t("sec_deleted") + " <code>" + sec + "</code>", "HTML");
|
||
return view_sections(token, chat_id, null);
|
||
}
|
||
if (match(cmd, /^\/sec_list /)) {
|
||
let parts = split(trim(substr(cmd, 10)), " ");
|
||
if (length(parts) == 2) return view_sec_list(token, chat_id, msg_id, parts[0], parts[1]);
|
||
}
|
||
if (match(cmd, /^\/sec_add /)) {
|
||
let parts = split(trim(substr(cmd, 9)), " ");
|
||
if (length(parts) == 2) {
|
||
set_tg_state(chat_id, { action: "sec_add", sec: parts[0], list: parts[1] });
|
||
return send_message(token, chat_id, t("sec_add_items_prompt"), "HTML");
|
||
}
|
||
}
|
||
if (match(cmd, /^\/sec_clear /)) {
|
||
let parts = split(trim(substr(cmd, 11)), " ");
|
||
if (length(parts) == 2) return handle_sec_clear(token, chat_id, msg_id, parts[0], parts[1]);
|
||
}
|
||
if (match(cmd, /^\/sec_del_it /)) {
|
||
let parts = split(trim(substr(cmd, 12)), " ");
|
||
if (length(parts) >= 3) {
|
||
let sec = parts[0];
|
||
let type = parts[1];
|
||
let val = join(" ", slice(parts, 2));
|
||
return handle_sec_del_it(token, chat_id, msg_id, sec, type, val);
|
||
}
|
||
}
|
||
if (match(cmd, /^\/sec_view /)) {
|
||
let sec = trim(substr(cmd, 10));
|
||
return view_section_editor(token, chat_id, msg_id, sec);
|
||
}
|
||
if (match(cmd, /^\/sec_toggle /)) {
|
||
let sec = trim(substr(cmd, 12));
|
||
return handle_sec_toggle(token, chat_id, msg_id, sec);
|
||
}
|
||
|
||
// Section subscription commands
|
||
if (match(cmd, /^\/sec_subs /)) {
|
||
let sec = trim(substr(cmd, 11));
|
||
return view_sec_subs(token, chat_id, msg_id, sec);
|
||
}
|
||
if (match(cmd, /^\/sec_sub_add /)) {
|
||
let parts = split(trim(substr(cmd, 13)), " ");
|
||
if (length(parts) >= 2) {
|
||
let sec = parts[0];
|
||
let url = join(" ", slice(parts, 1));
|
||
return handle_sec_sub_add(token, chat_id, msg_id, sec, url);
|
||
}
|
||
}
|
||
if (cmd == "/sec_sub_add") {
|
||
set_tg_state(chat_id, { action: "sec_sub_add" });
|
||
return send_message(token, chat_id, t("sec_sub_add_prompt"), "HTML");
|
||
}
|
||
if (match(cmd, /^\/sec_sub_del /)) {
|
||
let parts = split(trim(substr(cmd, 13)), " ");
|
||
if (length(parts) == 2) return handle_sec_sub_del(token, chat_id, msg_id, parts[0], int(parts[1]));
|
||
}
|
||
|
||
|
||
if (cmd == "/settings") return view_settings_menu(token, chat_id, msg_id);
|
||
if (match(cmd, /^\/set_list /)) {
|
||
let stype = trim(substr(cmd, 10));
|
||
return view_set_list(token, chat_id, msg_id, stype);
|
||
}
|
||
if (match(cmd, /^\/set_cat /)) {
|
||
let parts = split(trim(substr(cmd, 9)), " ");
|
||
if (length(parts) >= 2) return view_set_cat(token, chat_id, msg_id, parts[0], parts[1], parts[2]);
|
||
}
|
||
if (match(cmd, /^\/set_tog /)) {
|
||
let parts = split(trim(substr(cmd, 9)), " ");
|
||
if (length(parts) >= 4) return handle_set_tog(token, chat_id, msg_id, parts[0], parts[1], parts[2], parts[3]);
|
||
}
|
||
if (match(cmd, /^\/set_arr /)) {
|
||
let parts = split(trim(substr(cmd, 9)), " ");
|
||
if (length(parts) >= 3) return view_set_arr(token, chat_id, msg_id, parts[0], parts[1], parts[2]);
|
||
}
|
||
if (match(cmd, /^\/set_arr_del /)) {
|
||
let parts = split(trim(substr(cmd, 13)), " ");
|
||
if (length(parts) >= 4) {
|
||
let stype = parts[0]; let sname = parts[1]; let key = parts[2]; let val = join(" ", slice(parts, 3));
|
||
let c = uci_core.cursor(); c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, sname);
|
||
let current = common.list_option(s, key);
|
||
let n = [];
|
||
for (let x in current) if (x != val) push(n, x);
|
||
c.set(CONFIG_NAME, sname, key, n); c.commit(CONFIG_NAME);
|
||
return view_set_arr(token, chat_id, msg_id, stype, sname, key);
|
||
}
|
||
}
|
||
if (match(cmd, /^\/set_arr_clr /)) {
|
||
let parts = split(trim(substr(cmd, 13)), " ");
|
||
if (length(parts) >= 3) {
|
||
let c = uci_core.cursor(); c.load(CONFIG_NAME);
|
||
c.delete(CONFIG_NAME, parts[1], parts[2]); c.commit(CONFIG_NAME);
|
||
return view_set_arr(token, chat_id, msg_id, parts[0], parts[1], parts[2]);
|
||
}
|
||
}
|
||
if (match(cmd, /^\/set_str /)) {
|
||
let parts = split(trim(substr(cmd, 9)), " ");
|
||
if (length(parts) >= 3) {
|
||
set_tg_state(chat_id, { action: "set_str", stype: parts[0], sname: parts[1], key: parts[2] });
|
||
return send_message(token, chat_id, t("sec_enter_value") + " <code>" + parts[2] + "</code>:\n\n<i>Отправьте /cancel для отмены</i>", "HTML");
|
||
}
|
||
}
|
||
if (match(cmd, /^\/set_arr_add /)) {
|
||
let parts = split(trim(substr(cmd, 13)), " ");
|
||
if (length(parts) >= 3) {
|
||
set_tg_state(chat_id, { action: "set_arr_add", stype: parts[0], sname: parts[1], key: parts[2] });
|
||
return send_message(token, chat_id, t("sec_add_list_prompt"), "HTML");
|
||
}
|
||
}
|
||
|
||
if (cmd == "/dns_presets" || cmd == "/dns_servers") {
|
||
let c = uci_core.cursor(); c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, "settings");
|
||
let dns_type = option(s, "dns_type", "doh");
|
||
let text = dns_presets.format_presets_list(dns_type);
|
||
let presets = dns_presets.get_presets(dns_type);
|
||
let keyboard = [];
|
||
for (let i = 0; i < length(presets); i++) {
|
||
let p = presets[i];
|
||
push(keyboard, [{ text: p.country + " " + p.name, callback_data: "/dns_apply " + as_string(i) }]);
|
||
}
|
||
push(keyboard, [{ text: t("dns_all_protocols"), callback_data: "/dns_protocols" }]);
|
||
push(keyboard, [{ text: "⬅️ " + t("nav_back"), callback_data: "/settings" }]);
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
return;
|
||
}
|
||
if (match(cmd, /^\/dns_apply /)) {
|
||
let idx = int(trim(substr(cmd, 11)));
|
||
let c = uci_core.cursor(); c.load(CONFIG_NAME);
|
||
let s = c.get_all(CONFIG_NAME, "settings");
|
||
let dns_type = option(s, "dns_type", "doh");
|
||
let presets = dns_presets.get_presets(dns_type);
|
||
if (idx >= 0 && idx < length(presets)) {
|
||
let preset = presets[idx];
|
||
let servers = dns_presets.get_preset_servers(preset);
|
||
c.delete(CONFIG_NAME, "settings", "dns_server");
|
||
for (let srv in servers) c.add_list(CONFIG_NAME, "settings", "dns_server", srv);
|
||
c.commit(CONFIG_NAME);
|
||
send_message(token, chat_id, "✅ <b>" + t("dns_servers_applied") + "</b>\n" + dns_presets.format_preset(preset, idx) + "\n\nТип: <code>" + dns_type + "</code>\n\n⚠️ " + t("dns_restart_hint"), "HTML", [[{text: "🔄 Перезапустить", callback_data: "/confirm_restart"}, {text: "⬅️ " + t("nav_back"), callback_data: "/dns_presets"}]]);
|
||
}
|
||
return;
|
||
}
|
||
if (cmd == "/bootstrap_presets") {
|
||
let text = dns_presets.format_bootstrap_presets_list();
|
||
let presets = dns_presets.get_bootstrap_presets();
|
||
let keyboard = [];
|
||
for (let i = 0; i < length(presets); i++) {
|
||
let p = presets[i];
|
||
push(keyboard, [{ text: p.country + " " + p.name, callback_data: "/bootstrap_apply " + as_string(i) }]);
|
||
}
|
||
push(keyboard, [{ text: "⬅️ " + t("nav_back"), callback_data: "/settings" }]);
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
return;
|
||
}
|
||
if (match(cmd, /^\/bootstrap_apply /)) {
|
||
let idx = int(trim(substr(cmd, 17)));
|
||
let presets = dns_presets.get_bootstrap_presets();
|
||
if (idx >= 0 && idx < length(presets)) {
|
||
let preset = presets[idx];
|
||
let servers = dns_presets.get_preset_servers(preset);
|
||
let c = uci_core.cursor(); c.load(CONFIG_NAME);
|
||
c.delete(CONFIG_NAME, "settings", "bootstrap_dns_server");
|
||
for (let srv in servers) c.add_list(CONFIG_NAME, "settings", "bootstrap_dns_server", srv);
|
||
c.commit(CONFIG_NAME);
|
||
send_message(token, chat_id, "✅ <b>" + t("dns_bootstrap_applied") + "</b>\n" + dns_presets.format_preset(preset, idx) + "\n\n⚠️ " + t("dns_restart_hint"), "HTML", [[{text: "🔄 Перезапустить", callback_data: "/confirm_restart"}, {text: "⬅️ " + t("nav_back"), callback_data: "/bootstrap_presets"}]]);
|
||
}
|
||
return;
|
||
}
|
||
if (cmd == "/dns_protocols") {
|
||
let text = dns_presets.format_protocol_info();
|
||
let keyboard = [[{ text: "⬅️ " + t("nav_back"), callback_data: "/dns_presets" }]];
|
||
if (msg_id) edit_message(token, chat_id, msg_id, text, "HTML", keyboard);
|
||
else send_message(token, chat_id, text, "HTML", keyboard);
|
||
return;
|
||
}
|
||
|
||
if (match(cmd, /^\/sw /)) {
|
||
let rest = trim(substr(cmd, 4));
|
||
let space_idx = index(rest, " ");
|
||
if (space_idx > 0) {
|
||
let grp = substr(rest, 0, space_idx);
|
||
let srv = substr(rest, space_idx + 1);
|
||
return handle_switch(token, chat_id, msg_id, grp, srv);
|
||
}
|
||
}
|
||
|
||
// Default / Help
|
||
if (!msg_id) {
|
||
view_menu(token, chat_id, null);
|
||
}
|
||
}
|
||
|
||
function process_updates(token, admin_ids) {
|
||
let offset = int(trim(fs.readfile(OFFSET_FILE) || "0"));
|
||
let res = tg_request(token, "getUpdates", { offset: offset, timeout: 20 });
|
||
|
||
if (!res || !res.ok || !res.result) return false;
|
||
if (length(res.result) == 0) return true;
|
||
|
||
for (let upd in res.result) {
|
||
let update_id = upd.update_id;
|
||
if (update_id >= offset) {
|
||
offset = update_id + 1;
|
||
}
|
||
|
||
try {
|
||
let cb = upd.callback_query;
|
||
if (cb) {
|
||
let chat_id = cb.message ? cb.message.chat.id : (cb.from ? cb.from.id : null);
|
||
if (!chat_id) continue;
|
||
if (!is_admin(chat_id, admin_ids)) {
|
||
tg_request(token, "answerCallbackQuery", { callback_query_id: cb.id, text: "Access Denied" });
|
||
continue;
|
||
}
|
||
try {
|
||
dispatch_command(token, chat_id, cb.data, cb.message ? cb.message.message_id : null);
|
||
} catch (e) {
|
||
send_message(token, chat_id, "❌ " + t("exec_cmd_error") + " " + escape_html(as_string(e)), "HTML");
|
||
}
|
||
tg_request(token, "answerCallbackQuery", { callback_query_id: cb.id });
|
||
continue;
|
||
}
|
||
|
||
let msg = upd.message;
|
||
if (msg) {
|
||
let chat_id = msg.chat ? msg.chat.id : null;
|
||
if (!chat_id) continue;
|
||
|
||
if (!is_admin(chat_id, admin_ids)) {
|
||
if (msg.text || msg.document) {
|
||
send_message(token, chat_id, "❌ " + t("exec_access_denied") + " `" + chat_id + "`", "Markdown");
|
||
}
|
||
continue;
|
||
}
|
||
|
||
if (msg.document) {
|
||
let doc = msg.document;
|
||
if (match(doc.file_name || "", /\.tar\.gz$/)) {
|
||
send_message(token, chat_id, "⏳ <b>" + t("backup_downloading") + "</b>", "HTML");
|
||
let file_url = get_file_url(token, doc.file_id);
|
||
if (file_url) {
|
||
let dl_path = "/tmp/restore_" + doc.file_id + ".tar.gz";
|
||
let proxy = get_proxy_args();
|
||
let dl_args = [ "curl", "-s", "-o", dl_path ];
|
||
for (let p in proxy) push(dl_args, p);
|
||
push(dl_args, file_url);
|
||
command_status(command_from_args(dl_args));
|
||
if (fs.stat(dl_path)) {
|
||
apply_backup_restore(token, chat_id, dl_path);
|
||
} else {
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_download_error") + "</b>", "HTML");
|
||
}
|
||
} else {
|
||
send_message(token, chat_id, "❌ <b>" + t("backup_url_error") + "</b>", "HTML");
|
||
}
|
||
} else {
|
||
send_message(token, chat_id, "ℹ️ " + t("backup_format_hint"), "Markdown");
|
||
}
|
||
continue;
|
||
}
|
||
|
||
if (msg.forward_from) {
|
||
let fwd_id = msg.forward_from.id;
|
||
let text = "👤 " + t("admin_forward_prompt") + " `" + fwd_id + "`.\nДобавить его в список администраторов бота?";
|
||
let keyboard = [[{text: t("btn_admin_add"), callback_data: "/admin_add " + fwd_id}]];
|
||
send_message(token, chat_id, text, "Markdown", keyboard);
|
||
continue;
|
||
}
|
||
|
||
if (msg.text) {
|
||
if (match(msg.text, /^> /)) {
|
||
let exec_cmd = trim(substr(msg.text, 2));
|
||
send_message(token, chat_id, "⏳ " + t("exec_whitelist_msg") + "\n<code>" + escape_html(exec_cmd) + "</code>", "HTML");
|
||
let out = safe_execute(exec_cmd);
|
||
let result_text = "<b>Выполнено (код " + out.status + "):</b>\n<pre>" + escape_html(out.output || t("exec_no_output")) + "</pre>";
|
||
if (length(result_text) > 4000) result_text = substr(result_text, 0, 4000) + "...</pre>";
|
||
send_message(token, chat_id, result_text, "HTML");
|
||
continue;
|
||
}
|
||
|
||
if (msg.text == "/cancel") {
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "❌ " + t("action_cancelled"), "HTML", [[{text:"⬅️ " + t("nav_menu"), callback_data:"/menu"}]]);
|
||
continue;
|
||
}
|
||
}
|
||
|
||
let state = get_tg_state(chat_id);
|
||
if (state) {
|
||
if (msg.text && substr(msg.text, 0, 1) == "/") {
|
||
set_tg_state(chat_id, null);
|
||
dispatch_command(token, chat_id, msg.text, null);
|
||
continue;
|
||
}
|
||
|
||
if (!msg.text) {
|
||
send_message(token, chat_id, "⚠️ " + t("err_text_expected"), "HTML");
|
||
continue;
|
||
}
|
||
|
||
let c = uci_core.cursor();
|
||
c.load(CONFIG_NAME);
|
||
|
||
if (state.action == "set_str") {
|
||
let val = trim(msg.text);
|
||
c.set(CONFIG_NAME, state.sname, state.key, val);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ Значение <code>" + state.key + "</code> сохранено.", "HTML");
|
||
view_set_cat(token, chat_id, null, state.stype, state.sname, 0);
|
||
}
|
||
else if (state.action == "set_arr_add") {
|
||
let items = split(trim(msg.text), /[ \t\r\n,;]+/);
|
||
let valid = [];
|
||
for (let x in items) if (trim(x) != "") push(valid, trim(x));
|
||
if (length(valid) > 0) {
|
||
let cur = common.list_option(c.get_all(CONFIG_NAME, state.sname), state.key);
|
||
for (let x in valid) push(cur, x);
|
||
c.set(CONFIG_NAME, state.sname, state.key, cur);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ Добавлено элементов: " + length(valid));
|
||
} else {
|
||
set_tg_state(chat_id, null);
|
||
}
|
||
view_set_arr(token, chat_id, null, state.stype, state.sname, state.key);
|
||
}
|
||
else if (state.action == "sec_create") {
|
||
let new_sec = trim(msg.text);
|
||
if (match(new_sec, /^[a-zA-Z0-9_]+$/)) {
|
||
c.set(CONFIG_NAME, new_sec, "section");
|
||
c.set(CONFIG_NAME, new_sec, "action", "proxy");
|
||
c.set(CONFIG_NAME, new_sec, "enabled", "1");
|
||
c.set(CONFIG_NAME, new_sec, "label", new_sec);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ Секция создана!");
|
||
view_section_editor(token, chat_id, null, new_sec);
|
||
} else {
|
||
set_tg_state(chat_id, state);
|
||
send_message(token, chat_id, "❌ Неверное имя. Разрешены только буквы, цифры и подчеркивания.");
|
||
}
|
||
}
|
||
else if (state.action == "sec_rename") {
|
||
let new_label = trim(msg.text);
|
||
c.set(CONFIG_NAME, state.sec, "label", new_label);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ Имя изменено.");
|
||
view_section_editor(token, chat_id, null, state.sec);
|
||
}
|
||
else if (state.action == "sec_target") {
|
||
let new_target = trim(msg.text);
|
||
c.set(CONFIG_NAME, state.sec, "target", new_target);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ Цель изменена.");
|
||
view_section_editor(token, chat_id, null, state.sec);
|
||
}
|
||
else if (state.action == "sec_add") {
|
||
let items = split(trim(msg.text), /[ \n,;]+/);
|
||
let valid_items = [];
|
||
for (let x in items) if (trim(x) != "") push(valid_items, trim(x));
|
||
|
||
if (length(valid_items) > 0) {
|
||
let field = "domain_suffix";
|
||
if (state.list == "ip") field = "ip_cidr";
|
||
else if (state.list == "src") field = "src_ip";
|
||
else if (state.list == "ruleset") field = "community_lists";
|
||
|
||
let current = common.list_option(c.get_all(CONFIG_NAME, state.sec), field);
|
||
for (let x in valid_items) push(current, x);
|
||
c.set(CONFIG_NAME, state.sec, field, current);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ Добавлено " + length(valid_items) + " элементов.");
|
||
} else {
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "❌ " + t("exec_nothing_added"));
|
||
}
|
||
view_sec_list(token, chat_id, null, state.sec, state.list);
|
||
}
|
||
else if (state.action == "test_rule") {
|
||
view_test_rule(token, chat_id, null, trim(msg.text));
|
||
}
|
||
else if (state.action == "sub_add") {
|
||
handle_sub_add(token, chat_id, msg_id, trim(msg.text));
|
||
}
|
||
else if (state.action == "sec_sub_add") {
|
||
let parts = split(trim(msg.text), " ");
|
||
if (length(parts) >= 2) {
|
||
let sec = parts[0];
|
||
let url = join(" ", slice(parts, 1));
|
||
handle_sec_sub_add(token, chat_id, msg_id, sec, url);
|
||
} else {
|
||
set_tg_state(chat_id, state);
|
||
send_message(token, chat_id, "❌ Формат: <code>секция URL</code>\nНапример: <code>Main https://...</code>", "HTML");
|
||
}
|
||
}
|
||
else if (state.action == "qh_hour") {
|
||
let val = trim(msg.text);
|
||
if (!match(val, /^([0-9]|1[0-9]|2[0-3])$/)) {
|
||
set_tg_state(chat_id, state);
|
||
send_message(token, chat_id, "❌ Введите целое число от 0 до 23.", "HTML");
|
||
} else {
|
||
let key = (state.which == "start") ? "quiet_hours_start" : "quiet_hours_end";
|
||
c.set(CONFIG_NAME, "telegram", key, val);
|
||
c.commit(CONFIG_NAME);
|
||
set_tg_state(chat_id, null);
|
||
send_message(token, chat_id, "✅ Сохранено.", "HTML");
|
||
view_quiet_hours(token, chat_id, null);
|
||
}
|
||
}
|
||
continue;
|
||
}
|
||
|
||
dispatch_command(token, chat_id, msg.text, null);
|
||
}
|
||
} catch (e) {
|
||
command_success_from_args(["logger", "-t", "tachyon", "[err] Telegram update " + update_id + " failed: " + as_string(e)]);
|
||
}
|
||
}
|
||
fs.writefile(OFFSET_FILE, as_string(offset));
|
||
return true;
|
||
}
|
||
|
||
// ─── Entry Point ─────────────────────────────────────────────────────────────
|
||
|
||
function send_daily_digest(token, admin_ids) {
|
||
let text = "📊 <b>" + t("daily_digest_title") + "</b>\n\n";
|
||
let uptime_out = command_output_from_args(["uptime"]);
|
||
let m = match(uptime_out, /up ([^,]+)/);
|
||
let up = m ? m[1] : t("status_unknown");
|
||
text += "⏱ " + t("daily_uptime") + ": " + up + "\n";
|
||
|
||
let res = command_capture(command_from_args(["curl", "-s", "http://127.0.0.1:9090/traffic"]));
|
||
if (res && res.status == 0 && res.output) {
|
||
try {
|
||
let tr = json(res.output);
|
||
text += "🔻 " + t("daily_rx") + ": " + format_bytes(tr.down) + "/s\n";
|
||
text += "🔺 " + t("daily_tx") + ": " + format_bytes(tr.up) + "/s\n";
|
||
}
|
||
catch (e) {
|
||
// Traffic counters are decoration on a status message; a clash API
|
||
// that answers with something unparseable just omits two lines.
|
||
}
|
||
}
|
||
|
||
let admins = split(admin_ids, /,/);
|
||
for (let admin in admins) {
|
||
let chat_id = trim(admin);
|
||
if (chat_id != "") send_message(token, chat_id, text, "HTML", null);
|
||
}
|
||
}
|
||
|
||
function check_notified_updates(token, admin_ids) {
|
||
let out = command_output_from_args(["/usr/bin/tachyon", "component_update_check_cache"]);
|
||
if (!out || out == "") return;
|
||
try {
|
||
let data = json(out);
|
||
let notified_file = "/tmp/tg_notified_updates.json";
|
||
let notified = {};
|
||
let ndata = fs.readfile(notified_file);
|
||
// A corrupt notified-file re-announces updates already announced once.
|
||
if (ndata) { try { notified = json(ndata); } catch(e){} }
|
||
|
||
let changed = false;
|
||
let results = data.results || [];
|
||
for (let comp in results) {
|
||
let name = comp.component || "";
|
||
if (name == "") continue;
|
||
if (comp.success !== true) continue;
|
||
if (comp.status == "outdated" || comp.status == "outdated_same_release") {
|
||
let latest = comp.latest_version;
|
||
// Keyed by version *and* build: a rebuild under an existing tag
|
||
// leaves the version untouched, so a version-only key would
|
||
// suppress its notification forever. Entries written by older
|
||
// builds hold a bare version and simply miss once.
|
||
let identity = build_identity_key(comp);
|
||
let key = as_string(latest) + (identity != "" ? ":" + identity : "");
|
||
if (notified[name] != key) {
|
||
let title = (name == "sing_box") ? "sing-box" : name;
|
||
let cur = comp.current_version || "?";
|
||
let msg;
|
||
if (comp.status == "outdated_same_release") {
|
||
let transition = build_transition(comp);
|
||
msg = "📦 <b>" + t("update_new_release_header") + "</b>\n" + title + ": <code>" + escape_html(cur) + "</code>" +
|
||
(transition != "" ? "\n" + t("update_build_label") + ": " + transition : "");
|
||
} else {
|
||
msg = "📦 <b>" + t("update_available") + "</b>\n" + title + ": <code>" + escape_html(cur) + "</code> ➡️ <code>" + escape_html(as_string(latest)) + "</code>";
|
||
}
|
||
let kb = [[{text: t("btn_update_component") + " " + title, callback_data: "/update_component " + name}]];
|
||
|
||
let admins = split(admin_ids, /,/);
|
||
for (let admin in admins) {
|
||
let cid = trim(admin);
|
||
if (cid != "") send_message(token, cid, msg, "HTML", kb);
|
||
}
|
||
notified[name] = key;
|
||
changed = true;
|
||
}
|
||
}
|
||
}
|
||
if (changed) fs.writefile(notified_file, sprintf("%J", notified));
|
||
}
|
||
catch (e) {
|
||
// The update-check cache is written by another process and may be
|
||
// half-written when read. Skipping this round costs one notification
|
||
// cycle; the next worker pass reads it again.
|
||
}
|
||
}
|
||
|
||
// ─── Content blocking notifications ──────────────────────────────────────────
|
||
// Reads the dns_block nftables chain counters and notifies admins when a
|
||
// device tried to reach a blocked domain (parental control content rules).
|
||
// The counters are cumulative; we persist the last-seen total per rule and
|
||
// only report the delta. The per-rule label is written into nft comments
|
||
// by the apply step so the counter line can be matched back to the rule.
|
||
|
||
const BLOCKED_STATE_FILE = "/var/run/tachyon_blocked_counts.json";
|
||
const BLOCKED_POLL_INTERVAL = 60;
|
||
|
||
function block_schedules_with_notify() {
|
||
let result = [];
|
||
for (let s in uci_core.sections(CONFIG_NAME, "schedule")) {
|
||
s = object_or_empty(s);
|
||
if (option(s, "enabled", "1") != "0" &&
|
||
option(s, "notify", "0") == "1" &&
|
||
length(common.list_option(s, "blocked_domains")) > 0)
|
||
push(result, s);
|
||
}
|
||
return result;
|
||
}
|
||
|
||
function load_blocked_counts() {
|
||
try {
|
||
let raw = trim(fs.readfile(BLOCKED_STATE_FILE) || "");
|
||
if (raw == "") return {};
|
||
return json(raw);
|
||
} catch (e) {
|
||
return {};
|
||
}
|
||
}
|
||
|
||
function save_blocked_counts(counts) {
|
||
try {
|
||
fs.writefile(BLOCKED_STATE_FILE, sprintf("%J", counts));
|
||
} catch (e) {}
|
||
}
|
||
|
||
function check_blocked_activity(cfg) {
|
||
let schedules = block_schedules_with_notify();
|
||
if (length(schedules) == 0) return;
|
||
|
||
let out = command_capture(command_from_args([ "nft", "list", "chain", "inet", NFT_TABLE_NAME, "dns_block" ]));
|
||
if (!out || out.status != 0) return;
|
||
|
||
let previous = load_blocked_counts();
|
||
let current = {};
|
||
for (let schedule in schedules) {
|
||
let label = as_string(option(schedule, "label", schedule[".name"]));
|
||
let needle = "tachyon-block:" + label;
|
||
let total = 0;
|
||
let match_count = 0;
|
||
for (let line in split(out.output || "", "\n")) {
|
||
if (index(line, needle) < 0)
|
||
continue;
|
||
let m = match(line, /packets[= ]+([0-9]+)/);
|
||
if (!m || !m[1]) continue;
|
||
total += int(m[1]);
|
||
match_count++;
|
||
}
|
||
if (match_count == 0)
|
||
continue;
|
||
current[label] = total;
|
||
let prev = int(previous[label] || "0");
|
||
if (total > prev) {
|
||
let delta = total - prev;
|
||
let admins = split(cfg.admin_ids || "", /,/);
|
||
for (let admin in admins) {
|
||
let cid = trim(admin);
|
||
if (cid != "")
|
||
send_message(cfg.bot_token, cid,
|
||
"🚫 <b>" + t("blocked_activity") + "</b>\n" +
|
||
t("blocked_rule") + ": <code>" + escape_html(label) + "</code>\n" +
|
||
t("blocked_attempts") + ": <code>" + as_string(delta) + "</code>",
|
||
"HTML", null);
|
||
}
|
||
}
|
||
}
|
||
save_blocked_counts(current);
|
||
}
|
||
|
||
function worker() {
|
||
let cfg = settings();
|
||
if (cfg.enabled != "1" || !cfg.bot_token) return 0;
|
||
|
||
t = i18n.bind(cfg.language);
|
||
register_bot_commands(cfg.bot_token);
|
||
|
||
// Clean up leftover payload temp-files from previous runs that were
|
||
// interrupted (e.g. killed during a 20-second getUpdates long-poll).
|
||
let tmp = fs.opendir("/tmp");
|
||
if (tmp) {
|
||
let entry;
|
||
while ((entry = tmp.read()) != null) {
|
||
if (index(entry, "tg_payload_") == 0 && substr(entry, -5) == ".json")
|
||
try { fs.unlink("/tmp/" + entry); } catch(e) {}
|
||
}
|
||
tmp.close();
|
||
}
|
||
|
||
let poll_interval = int(cfg.poll_interval || "5");
|
||
if (poll_interval < 1) poll_interval = 1;
|
||
|
||
let last_report_day = -1;
|
||
let last_update_check = 0;
|
||
let last_blocked_check = 0;
|
||
let consecutive_failures = 0;
|
||
let route_alert_sent = false;
|
||
let last_log_check = 0;
|
||
|
||
while (true) {
|
||
try {
|
||
cfg = settings();
|
||
if (cfg.enabled != "1") break;
|
||
t = i18n.bind(cfg.language);
|
||
let res = process_updates(cfg.bot_token, cfg.admin_ids);
|
||
|
||
if (res === false) {
|
||
consecutive_failures++;
|
||
let backoff = poll_interval * (1 << min(consecutive_failures - 1, 4));
|
||
if (backoff > 300) backoff = 300;
|
||
let log_level = consecutive_failures >= 3 ? "[warn]" : "[info]";
|
||
command_success_from_args(["logger", "-t", "tachyon-telegram", log_level + " API poll retry " + as_string(consecutive_failures) + ", backing off " + as_string(backoff) + "s"]);
|
||
|
||
// Tell the admin once per failure episode that the usual
|
||
// proxy route is down and the direct fallback carries the
|
||
// bot meanwhile.
|
||
if (!route_alert_sent && consecutive_failures >= 5) {
|
||
route_alert_sent = true;
|
||
alert_route_failure(consecutive_failures, mixed_port_alive());
|
||
}
|
||
|
||
sleep(backoff * 1000);
|
||
continue;
|
||
}
|
||
consecutive_failures = 0;
|
||
route_alert_sent = false;
|
||
write_heartbeat();
|
||
|
||
let now = time();
|
||
// localtime() yields { sec, min, hour, mday, mon, year, ... }.
|
||
// clock() returns [seconds, microseconds] and has no calendar fields.
|
||
let tm = localtime(now);
|
||
let daily_hour = int(cfg.daily_report_hour || "8");
|
||
|
||
if (cfg.daily_report_enabled == "1" && tm && tm.hour == daily_hour && tm.mday != last_report_day) {
|
||
last_report_day = tm.mday;
|
||
send_daily_digest(cfg.bot_token, cfg.admin_ids);
|
||
}
|
||
|
||
if (now - last_update_check > 3600) {
|
||
check_notified_updates(cfg.bot_token, cfg.admin_ids);
|
||
last_update_check = now;
|
||
}
|
||
|
||
if (now - last_blocked_check > BLOCKED_POLL_INTERVAL) {
|
||
check_blocked_activity(cfg);
|
||
last_blocked_check = now;
|
||
}
|
||
|
||
if (now - last_log_check > 3600) {
|
||
rotate_log_if_needed();
|
||
last_log_check = now;
|
||
}
|
||
} catch (e) {
|
||
consecutive_failures++;
|
||
command_success_from_args(["logger", "-t", "tachyon-telegram", "[err] Worker loop error: " + as_string(e)]);
|
||
}
|
||
|
||
sleep(poll_interval * 1000);
|
||
}
|
||
return 0;
|
||
}
|
||
|
||
function stop_runtime() {
|
||
let pid = trim(fs.readfile(PID_FILE) || "");
|
||
if (pid != "" && match(pid, /^[0-9]+$/) != null && command_success_from_args([ "kill", "-0", pid ])) {
|
||
command_success_from_args([ "kill", pid ]);
|
||
let wait_limit = 30;
|
||
while (wait_limit > 0 && command_success_from_args([ "kill", "-0", pid ])) {
|
||
sleep(100);
|
||
wait_limit--;
|
||
}
|
||
if (command_success_from_args([ "kill", "-0", pid ])) {
|
||
command_success_from_args([ "kill", "-9", pid ]);
|
||
}
|
||
}
|
||
// Absent file already satisfies the caller; fs.unlink throws on ENOENT.
|
||
try { fs.unlink(PID_FILE); } catch(e) {}
|
||
return 0;
|
||
}
|
||
|
||
function start_runtime() {
|
||
let cfg = settings();
|
||
stop_runtime();
|
||
if (cfg.enabled != "1" || !cfg.bot_token) return 0;
|
||
|
||
let command = common.background_command_with_pid(
|
||
command_from_args([ "ucode", "-L", LIB_DIR, LIB_DIR + "/service/telegram.uc", "worker" ]),
|
||
">/var/log/tachyon_telegram.log", ">" + shell_quote(PID_FILE));
|
||
return command_status(command);
|
||
}
|
||
|
||
function get_status() {
|
||
let pid = trim(fs.readfile(PID_FILE) || "");
|
||
if (pid != "" && match(pid, /^[0-9]+$/) != null && command_success_from_args([ "kill", "-0", pid ])) {
|
||
print("running (pid " + pid + ")\n");
|
||
return 0;
|
||
}
|
||
print("stopped\n");
|
||
return 1;
|
||
}
|
||
|
||
function in_quiet_hours(cfg) {
|
||
if (cfg.quiet_hours_enabled != "1") return false;
|
||
let start = int(cfg.quiet_hours_start || "23");
|
||
let end = int(cfg.quiet_hours_end || "7");
|
||
if (start == end) return false;
|
||
let tm = localtime(time());
|
||
if (!tm) return false;
|
||
let hr = int(tm.hour);
|
||
if (start <= end) {
|
||
return hr >= start && hr < end;
|
||
} else {
|
||
return hr >= start || hr < end;
|
||
}
|
||
}
|
||
|
||
function diagnose() {
|
||
let cfg = settings();
|
||
let checks = [];
|
||
let ok = true;
|
||
|
||
// 1. bot_token
|
||
if (cfg.bot_token) {
|
||
push(checks, { name: "bot_token", ok: true, message: "bot_token is set" });
|
||
} else {
|
||
push(checks, { name: "bot_token", ok: false, message: "bot_token is empty — set token first" });
|
||
ok = false;
|
||
}
|
||
|
||
// 2. admin_ids
|
||
if (cfg.admin_ids && trim(cfg.admin_ids) !== "") {
|
||
push(checks, { name: "admin_ids", ok: true, message: "admin_ids is set: " + cfg.admin_ids });
|
||
} else {
|
||
push(checks, { name: "admin_ids", ok: false, message: "admin_ids is empty — cannot send messages" });
|
||
ok = false;
|
||
}
|
||
|
||
// 3. sing-box running
|
||
let sb_running = command_success_from_args(["pidof", "sing-box"]);
|
||
push(checks, {
|
||
name: "sing_box",
|
||
ok: sb_running,
|
||
message: sb_running ? "sing-box is running" : "sing-box is NOT running — proxy routing unavailable"
|
||
});
|
||
|
||
// 4. Mixed proxy port
|
||
let proxy_info = get_mixed_proxy_info();
|
||
let proxy_ep = proxy_info ? (proxy_info.host + ":" + proxy_info.port) : null;
|
||
let port_ok = false;
|
||
if (proxy_info) {
|
||
let port_check = command_capture("netstat -tlnp 2>/dev/null | grep ':" + proxy_info.port + " '");
|
||
port_ok = port_check && port_check.status === 0 && trim(port_check.output || "") !== "";
|
||
push(checks, {
|
||
name: "proxy_port",
|
||
ok: port_ok,
|
||
message: port_ok ? "Mixed proxy port " + proxy_info.port + " is listening (" + proxy_info.host + ")" : "Port " + proxy_info.port + " not listening — proxy may not be available"
|
||
});
|
||
} else {
|
||
push(checks, {
|
||
name: "proxy_port",
|
||
ok: true,
|
||
message: "Mixed proxy is not configured in sing-box — bot will use direct connection"
|
||
});
|
||
}
|
||
|
||
// 5. DNS resolution
|
||
let dns_check = command_capture("nslookup api.telegram.org 2>/dev/null");
|
||
let dns_out = (dns_check && dns_check.output) || "";
|
||
// Accept real IPs (149.154/91.108) or sing-box FakeIP range (198.18.x.x/198.19.x.x)
|
||
let dns_ok = dns_check && dns_check.status === 0 && index(dns_out, "Address") >= 0
|
||
&& (index(dns_out, "149.154") >= 0 || index(dns_out, "91.108") >= 0
|
||
|| index(dns_out, "198.18.") >= 0 || index(dns_out, "198.19.") >= 0);
|
||
push(checks, {
|
||
name: "dns",
|
||
ok: dns_ok,
|
||
message: dns_ok ? "DNS resolves api.telegram.org" : "DNS cannot resolve api.telegram.org — check DNS settings"
|
||
});
|
||
|
||
// 6. Direct API test (IPv4)
|
||
let d_ok = false;
|
||
if (cfg.bot_token) {
|
||
let direct = command_capture(command_from_args([
|
||
"curl", "-s", "-4", "--connect-timeout", "5", "--max-time", "8",
|
||
"https://api.telegram.org/bot" + cfg.bot_token + "/getMe"
|
||
]));
|
||
let d_out = (direct && direct.output) || "";
|
||
d_ok = direct && direct.status === 0 && index(d_out, '"ok":true') >= 0;
|
||
let d_msg = d_ok
|
||
? "Direct IPv4 to Telegram API works"
|
||
: (index(d_out, '"ok":false') >= 0
|
||
? "API returned error — token may be invalid"
|
||
: "Cannot reach Telegram API directly (IPv4 may be blocked by ISP)");
|
||
push(checks, { name: "direct_api", ok: d_ok, message: d_msg });
|
||
}
|
||
|
||
// 7. Proxy API test
|
||
let p_ok = false;
|
||
if (cfg.bot_token && sb_running && proxy_info && port_ok) {
|
||
let proxied = command_capture(command_from_args([
|
||
"curl", "-s", "-4", "--connect-timeout", "5", "--max-time", "8",
|
||
"--proxy", "http://" + proxy_ep,
|
||
"https://api.telegram.org/bot" + cfg.bot_token + "/getMe"
|
||
]));
|
||
let p_out = (proxied && proxied.output) || "";
|
||
p_ok = proxied && proxied.status === 0 && index(p_out, '"ok":true') >= 0;
|
||
push(checks, {
|
||
name: "proxy_api",
|
||
ok: p_ok,
|
||
message: p_ok ? "Proxy route (" + proxy_ep + ") to Telegram API works" : "Proxy route failed — check sing-box outbound for Telegram"
|
||
});
|
||
} else if (proxy_info && !port_ok) {
|
||
push(checks, {
|
||
name: "proxy_api",
|
||
ok: false,
|
||
message: "Proxy route skipped — mixed proxy port " + proxy_info.port + " is not listening"
|
||
});
|
||
}
|
||
|
||
// Route check: at least one connection method must work
|
||
let route_ok = d_ok || p_ok;
|
||
if (!route_ok) ok = false;
|
||
|
||
// 8. Send test message
|
||
if (cfg.bot_token && cfg.admin_ids) {
|
||
let first_admin = trim(split(cfg.admin_ids, /,/)[0] || "");
|
||
if (first_admin !== "") {
|
||
let s_ok = send_message(cfg.bot_token, first_admin, "✅ Tachyon connection test passed");
|
||
push(checks, {
|
||
name: "send_message",
|
||
ok: s_ok,
|
||
message: s_ok
|
||
? "Test message sent to chat " + first_admin
|
||
: "Failed to send test message — check admin_ids and bot permissions"
|
||
});
|
||
if (!s_ok) ok = false;
|
||
}
|
||
}
|
||
|
||
print(sprintf("%J", { ok: ok, checks: checks }));
|
||
return ok ? 0 : 1;
|
||
}
|
||
|
||
function send_api(message) {
|
||
let cfg = settings();
|
||
if (cfg.enabled != "1" || !cfg.bot_token || !cfg.admin_ids) return 1;
|
||
|
||
let is_critical = (index(message, t("critical_keyword_fallen")) >= 0 || index(message, t("critical_keyword_error")) >= 0);
|
||
if (!is_critical && in_quiet_hours(cfg)) return 0;
|
||
|
||
let admins = split(cfg.admin_ids, /,/);
|
||
for (let admin in admins) {
|
||
let chat_id = trim(admin);
|
||
if (chat_id != "") send_message(cfg.bot_token, chat_id, message, "Markdown", null);
|
||
}
|
||
return 0;
|
||
}
|
||
|
||
let mode = (ARGV[0] == "") ? ARGV[1] : ARGV[0];
|
||
if (!mode) mode = "";
|
||
|
||
if (mode == "start-runtime")
|
||
exit(start_runtime());
|
||
else if (mode == "stop-runtime")
|
||
exit(stop_runtime());
|
||
else if (mode == "worker")
|
||
exit(worker());
|
||
else if (mode == "status")
|
||
exit(get_status());
|
||
else if (mode == "diagnose")
|
||
exit(diagnose());
|
||
else if (mode == "send") {
|
||
// Collect remaining args after "send" as the message text
|
||
let msg_parts = [];
|
||
for (let i = 2; i < length(ARGV); i++)
|
||
push(msg_parts, ARGV[i]);
|
||
let message = join(" ", msg_parts);
|
||
if (message == "") { warn("No message text\n"); exit(1); }
|
||
exit(send_api(message));
|
||
}
|
||
else {
|
||
warn("Usage: service/telegram.uc <start-runtime|stop-runtime|worker|status|diagnose|send ...> ...\n");
|
||
exit(1);
|
||
}
|