cdrop — 跨 OS 剪贴板与文件传输服务

Commilitia Drop：自托管的跨设备剪贴板同步与点对点文件传输。

- 后端 Go（chi / SQLite WAL / SSE Hub / WebRTC signaling + 状态机 / Relay ring buffer），编译进单个 distroless 镜像（前端 go:embed）。
- 前端 React + TanStack Router + Zustand，自实现 SSE + WebRTC P2P，NAT 受阻时回退服务端中继；聚珍（Juzhen）CJK 综合排版。
- 桌面端 Wails v2（macOS / Windows），瘦客户端复用 web。
- 鉴权 OIDC PKCE（自建 Casdoor 等），refresh_token 信封加密存系统密钥库；iOS Shortcut 用 HS256 scoped token。

架构文档与变更记录见 docs 分支（PROJECT_BRIEF / FRONTEND_DESIGN / CHANGELOG）。

本次为公开发布初始提交：完整开发历史（含部署细节）留存于私有归档，公开仓库自此干净起步。

cmd/cdropd/main.go

@@ -0,0 +1,107 @@
+package main
+
+import (
+	"context"
+	"errors"
+	"log/slog"
+	"net/http"
+	"os"
+	"os/signal"
+	"syscall"
+	"time"
+
+	"commilitia.net/cdrop/internal/calls"
+	"commilitia.net/cdrop/internal/clipboard"
+	"commilitia.net/cdrop/internal/config"
+	"commilitia.net/cdrop/internal/db"
+	"commilitia.net/cdrop/internal/httpapi"
+	"commilitia.net/cdrop/internal/hub"
+	"commilitia.net/cdrop/internal/jwtauth"
+	"commilitia.net/cdrop/internal/relay"
+	"commilitia.net/cdrop/internal/transfer"
+)
+
+func main() {
+	logger := slog.New(slog.NewJSONHandler(os.Stdout, nil))
+	slog.SetDefault(logger)
+
+	cfg, err := config.Load()
+	if err != nil {
+		slog.Error("config load failed", "err", err)
+		os.Exit(1)
+	}
+	slog.Info("cdropd booting",
+		"auth_mode", cfg.AuthMode,
+		"listen", cfg.Listen,
+		"db_path", cfg.DBPath,
+	)
+
+	ctx, cancel := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
+	defer cancel()
+
+	dbConn, err := db.Open(cfg.DBPath)
+	if err != nil {
+		slog.Error("db open failed", "err", err)
+		os.Exit(1)
+	}
+	defer dbConn.Close()
+
+	if err := db.Bootstrap(ctx, dbConn); err != nil {
+		slog.Error("db bootstrap failed", "err", err)
+		os.Exit(1)
+	}
+
+	queries := db.New(dbConn)
+	auth := jwtauth.New(cfg, queries)
+	h := hub.New(queries)
+	defer h.Close()
+	relayMgr := relay.NewManager(relay.DefaultMaxSessions, relay.DefaultSessionCap)
+	transfers := transfer.NewService(queries, h, relayMgr)
+
+	var cfTurn *calls.Provider
+	if cfg.CFTurnKeyID != "" && cfg.CFTurnAPIToken != "" {
+		cfTurn = calls.NewProvider(cfg.CFTurnKeyID, cfg.CFTurnAPIToken, calls.DefaultTTL)
+		slog.Info("cloudflare realtime TURN enabled")
+	} else {
+		slog.Info("cloudflare TURN not configured; falling back to STUN-only")
+	}
+
+	clip := clipboard.New(
+		queries,
+		h,
+		cfg.ClipboardMaxBytes,
+		time.Duration(cfg.ClipboardDebounceSec)*time.Second,
+		time.Duration(cfg.ClipboardTTLSec)*time.Second,
+	)
+
+	go transfer.RunSweeper(ctx, transfers)
+	go relayMgr.RunReaper(ctx)
+	go jwtauth.RunDeviceSweeper(ctx, queries, time.Duration(cfg.DeviceTTLHours)*time.Hour)
+	if cfg.ClipboardTTLSec > 0 {
+		go clipboard.RunSweeper(ctx, clip)
+	}
+
+	srv := &http.Server{
+		Addr:              cfg.Listen,
+		Handler:           httpapi.New(cfg, dbConn, queries, auth, h, transfers, relayMgr, cfTurn, clip).Handler(),
+		ReadHeaderTimeout: 5 * time.Second,
+	}
+
+	go func() {
+		slog.Info("http server listening", "addr", cfg.Listen)
+		if err := srv.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
+			slog.Error("http server error", "err", err)
+			cancel()
+		}
+	}()
+
+	<-ctx.Done()
+	slog.Info("shutdown initiated")
+
+	shutCtx, shutCancel := context.WithTimeout(context.Background(), 5*time.Second)
+	defer shutCancel()
+	if err := srv.Shutdown(shutCtx); err != nil {
+		slog.Error("http shutdown error", "err", err)
+	}
+	slog.Info("cdropd stopped")
+}