cdrop — 跨 OS 剪贴板与文件传输服务

Commilitia Drop：自托管的跨设备剪贴板同步与点对点文件传输。

- 后端 Go（chi / SQLite WAL / SSE Hub / WebRTC signaling + 状态机 / Relay ring buffer），编译进单个 distroless 镜像（前端 go:embed）。
- 前端 React + TanStack Router + Zustand，自实现 SSE + WebRTC P2P，NAT 受阻时回退服务端中继；聚珍（Juzhen）CJK 综合排版。
- 桌面端 Wails v2（macOS / Windows），瘦客户端复用 web。
- 鉴权 OIDC PKCE（自建 Casdoor 等），refresh_token 信封加密存系统密钥库；iOS Shortcut 用 HS256 scoped token。

架构文档与变更记录见 docs 分支（PROJECT_BRIEF / FRONTEND_DESIGN / CHANGELOG）。

本次为公开发布初始提交：完整开发历史（含部署细节）留存于私有归档，公开仓库自此干净起步。

internal/db/queries/clipboard.sql

@@ -0,0 +1,28 @@
+-- name: UpsertClipboard :one
+-- New rows start version 1; conflicts bump version by 1 (per-user monotonic).
+-- LWW: the DO UPDATE only runs when the new origin_ts is strictly greater than
+-- the stored one, so a delayed / out-of-order older copy changes nothing and
+-- RETURNING yields no row (the service reads sql.ErrNoRows as "stale, rejected").
+INSERT INTO clipboard_state (user_id, content_type, content, source_device, updated_at, version, origin_ts)
+VALUES (?, ?, ?, ?, ?, 1, ?)
+ON CONFLICT (user_id) DO UPDATE SET
+    content_type  = excluded.content_type,
+    content       = excluded.content,
+    source_device = excluded.source_device,
+    updated_at    = excluded.updated_at,
+    version       = clipboard_state.version + 1,
+    origin_ts     = excluded.origin_ts
+WHERE excluded.origin_ts > clipboard_state.origin_ts
+RETURNING version;
+
+-- name: GetClipboard :one
+SELECT user_id, content_type, content, source_device, updated_at, version, origin_ts
+FROM clipboard_state
+WHERE user_id = ?;
+
+-- name: ClearExpiredClipboards :execrows
+-- 清除 updated_at 早于 cutoff 的剪贴板内容（content / source_device 置空），
+-- 由 sweeper 周期调用实现短 TTL；保留行本身、仅抹掉内容。
+UPDATE clipboard_state
+SET content = NULL, source_device = NULL
+WHERE content IS NOT NULL AND updated_at < ?;

internal/db/queries/devices.sql

@@ -0,0 +1,20 @@
+-- name: UpsertDevice :exec
+INSERT INTO devices (user_id, name, type, last_seen)
+VALUES (?, ?, ?, ?)
+ON CONFLICT (user_id, name) DO UPDATE SET
+    type = excluded.type,
+    last_seen = excluded.last_seen;
+
+-- name: ListDevicesByUser :many
+SELECT user_id, name, type, last_seen
+FROM devices
+WHERE user_id = ?
+ORDER BY name;
+
+-- name: DeleteStaleDevices :exec
+DELETE FROM devices
+WHERE last_seen < ?;
+
+-- name: DeleteDevice :execrows
+DELETE FROM devices
+WHERE user_id = ? AND name = ?;

internal/db/queries/shortcut_tokens.sql

@@ -0,0 +1,32 @@
+-- shortcut_tokens: long-lived, scope-limited, revocable HS256 tokens for the
+-- iOS Shortcut clipboard sync. Count backs the per-user cap; Revoke is scoped by
+-- user_id to block cross-user revocation; Touch records last use asynchronously.
+
+-- name: InsertShortcutToken :exec
+INSERT INTO shortcut_tokens (jti, user_id, label, scopes, created_at, expires_at)
+VALUES (?, ?, ?, ?, ?, ?);
+
+-- name: GetShortcutToken :one
+SELECT jti, user_id, label, scopes, created_at, expires_at, last_used_at, revoked
+FROM shortcut_tokens
+WHERE jti = ?;
+
+-- name: ListShortcutTokensByUser :many
+SELECT jti, user_id, label, scopes, created_at, expires_at, last_used_at, revoked
+FROM shortcut_tokens
+WHERE user_id = ?
+ORDER BY created_at DESC;
+
+-- name: CountActiveShortcutTokensByUser :one
+SELECT COUNT(*) FROM shortcut_tokens
+WHERE user_id = ? AND revoked = 0 AND expires_at > ?;
+
+-- name: RevokeShortcutToken :execrows
+UPDATE shortcut_tokens
+SET revoked = 1
+WHERE jti = ? AND user_id = ?;
+
+-- name: TouchShortcutTokenUsed :exec
+UPDATE shortcut_tokens
+SET last_used_at = ?
+WHERE jti = ?;

internal/db/queries/transfers.sql

@@ -0,0 +1,30 @@
+-- name: CreateTransferSession :exec
+INSERT INTO transfer_sessions (
+    id, user_id, sender_name, receiver_name, state,
+    file_name, file_size, file_sha256, created_at
+)
+VALUES (?, ?, ?, ?, 'PENDING', ?, ?, ?, ?);
+
+-- name: GetTransferSession :one
+SELECT id, user_id, sender_name, receiver_name, state, mode,
+       file_name, file_size, file_sha256, bytes_transferred,
+       created_at, finished_at, fail_reason
+FROM transfer_sessions
+WHERE id = ?;
+
+-- name: UpdateTransferState :execrows
+UPDATE transfer_sessions
+SET state             = sqlc.arg('state'),
+    mode              = COALESCE(sqlc.narg('mode'),              mode),
+    fail_reason       = COALESCE(sqlc.narg('fail_reason'),       fail_reason),
+    finished_at       = COALESCE(sqlc.narg('finished_at'),       finished_at),
+    bytes_transferred = COALESCE(sqlc.narg('bytes_transferred'), bytes_transferred)
+WHERE id = sqlc.arg('id');
+
+-- name: ExpirePendingSessions :many
+UPDATE transfer_sessions
+SET state       = 'CANCELLED',
+    fail_reason = 'pending_timeout',
+    finished_at = sqlc.arg('finished_at')
+WHERE state = 'PENDING' AND created_at < sqlc.arg('cutoff')
+RETURNING id, user_id, sender_name, receiver_name;