new file: ali_oss.py

new file:   app.py
	new file:   app/ali_oss.py
	new file:   app/app.py
	new file:   app/app_common.py
	new file:   app/config.py
	new file:   app/coze.py
	new file:   app/generate_api.py
	new file:   app/html_crypto.py
	new file:   app/main.py
	new file:   app/web_source/admin.html
	new file:   app/web_source/brand.html
	new file:   app/web_source/home.html
	new file:   app/web_source/index.html
	new file:   app/web_source/login.html
	new file:   app_common.py
	new file:   blueprints/__init__.py
	new file:   blueprints/__pycache__/__init__.cpython-311.pyc
	new file:   blueprints/__pycache__/__init__.cpython-39.pyc
	new file:   blueprints/__pycache__/admin.cpython-311.pyc
	new file:   blueprints/__pycache__/admin.cpython-39.pyc
	new file:   blueprints/__pycache__/auth.cpython-311.pyc
	new file:   blueprints/__pycache__/auth.cpython-39.pyc
	new file:   blueprints/__pycache__/brand.cpython-311.pyc
	new file:   blueprints/__pycache__/brand.cpython-39.pyc
	new file:   blueprints/__pycache__/image.cpython-311.pyc
	new file:   blueprints/__pycache__/image.cpython-39.pyc
	new file:   blueprints/__pycache__/main.cpython-311.pyc
	new file:   blueprints/__pycache__/main.cpython-39.pyc
	new file:   blueprints/admin.py
	new file:   blueprints/auth.py
	new file:   blueprints/brand.py
	new file:   blueprints/image.py
	new file:   blueprints/main.py
	new file:   brand_spider/__pycache__/main.cpython-39.pyc
	new file:   brand_spider/__pycache__/web_dec.cpython-39.pyc
	new file:   brand_spider/main.py
	new file:   brand_spider/web_dec.py
	new file:   config.py
	new file:   coze.py
	new file:   generate_api.py
	new file:   html_crypto.py
	new file:   main.py
	new file:   static/bg.jpg
	new file:   "static/\345\223\201\347\211\214\346\226\207\346\241\243\346\240\274\345\274\217_\346\250\241\346\235\277.xlsx"
	new file:   "static/\346\250\241\346\235\2772-\344\273\245\346\226\207\344\273\266\345\244\271\346\226\271\345\274\217\344\270\212\344\274\240.zip"
	new file:   tool/.device_id
	new file:   tool/__pycache__/devices.cpython-311.pyc
	new file:   tool/__pycache__/devices.cpython-39.pyc
	new file:   tool/devices.py

html_crypto.py

@@ -0,0 +1,68 @@
+"""
+HTML 模板加密/解密模块
+使用 AES (Fernet) 对 HTML 资源进行加密存储，运行时解密后渲染
+"""
+
+import base64
+import os
+
+from cryptography.fernet import Fernet
+from cryptography.hazmat.primitives import hashes
+from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
+
+
+def _get_fernet_key() -> bytes:
+    """从环境变量 HTML_ENCRYPT_KEY 派生 Fernet 密钥，若未设置则使用默认开发密钥"""
+    raw = os.environ.get(
+        "HTML_ENCRYPT_KEY",
+        "maixiang_html_encrypt_default_key_change_in_production",
+    )
+    # 使用 PBKDF2 派生 32 字节密钥，再转为 Fernet 所需的 base64url
+    kdf = PBKDF2HMAC(
+        algorithm=hashes.SHA256(),
+        length=32,
+        salt=b"maixiang_html_salt",
+        iterations=100000,
+    )
+    key_bytes = kdf.derive(raw.encode("utf-8"))
+    return base64.urlsafe_b64encode(key_bytes)
+
+
+def encrypt(plain_data: bytes) -> bytes:
+    """加密原始数据，返回密文（bytes）"""
+    key = _get_fernet_key()
+    f = Fernet(key)
+    return f.encrypt(plain_data)
+
+
+def decrypt(encrypted_data: bytes) -> bytes:
+    """解密数据，返回明文（bytes）"""
+    key = _get_fernet_key()
+    f = Fernet(key)
+    return f.decrypt(encrypted_data)
+
+
+def encrypt_file(path: str) -> None:
+    """就地加密文件：读取 UTF-8 内容，加密后写回同一路径"""
+    with open(path, "rb") as f:
+        plain = f.read()
+    encrypted = encrypt(plain)
+    with open(path, "wb") as f:
+        f.write(encrypted)
+
+
+def decrypt_file(path: str) -> None:
+    """就地解密文件：读取密文，解密后以 UTF-8 写回同一路径"""
+    with open(path, "rb") as f:
+        encrypted = f.read()
+    plain = decrypt(encrypted)
+    with open(path, "wb") as f:
+        f.write(plain)
+
+
+def is_encrypted(data: bytes) -> bool:
+    """简单启发式：Fernet 密文以 b'gAAAAA' 开头（base64 编码后）"""
+    try:
+        return data[:7] == b"gAAAAAB"
+    except Exception:
+        return False