fix: install Hermes from Git

app.py

@@ -1,59 +1,61 @@
 import os
 import hashlib
+import base64
 from fastapi import FastAPI, Request
 from fastapi.responses import PlainTextResponse
+from Crypto.Cipher import AES
 import gradio as gr
 
-# ================== 持久化目录（保留！）==================
-os.makedirs("/data/workspace", exist_ok=True)
-os.makedirs("/data/memory", exist_ok=True)
+app = FastAPI(title="企业微信官方回调")
 
-# ================== 企业微信配置 ==================
+# ========== 从 HF Secrets 读取（必须和企业微信后台一致）==========
 WECOM_TOKEN = os.getenv("WECOM_TOKEN", "")
+WECOM_AES_KEY = os.getenv("WECOM_AES_KEY", "")
+CORPID = os.getenv("CORPID", "")  # 企业微信企业ID
 
-# ================== FastAPI ==================
-app = FastAPI(title="Hermes Agent + WeCom + 持久化")
-
-# ================== 企业微信回调验证（100% 必过版）==================
+# ========== 企业微信 URL 校验（官方文档标准实现）==========
 @app.get("/gateway/wecom")
-async def wecom_verify(request: Request):
+async def verify_url(request: Request):
     try:
+        # 1. 获取参数
         msg_signature = request.query_params.get("msg_signature", "")
         timestamp = request.query_params.get("timestamp", "")
         nonce = request.query_params.get("nonce", "")
-        echostr = request.query_params.get("echostr", "")
+        echostr_enc = request.query_params.get("echostr", "")
 
+        # 2. 签名校验
         arr = sorted([WECOM_TOKEN, timestamp, nonce])
         check_str = ''.join(arr)
         digest = hashlib.sha1(check_str.encode()).hexdigest()
-
-        if digest == msg_signature:
-            return PlainTextResponse(echostr)
-    except:
-        pass
-    return PlainTextResponse("ok")
-
+        if digest != msg_signature:
+            return PlainTextResponse("sign error")
+
+        # 3. AES 解密 echostr（官方必须步骤！）
+        aes_key = base64.b64decode(WECOM_AES_KEY + "=")
+        cipher = AES.new(aes_key, AES.MODE_CBC, iv=aes_key[:16])
+        decrypted = cipher.decrypt(base64.b64decode(echostr_enc))
+        pad = ord(decrypted[-1:])
+        decrypted = decrypted[:-pad]
+        msg = decrypted[16:].decode()
+
+        # 4. 原样返回明文（官方要求）
+        return PlainTextResponse(msg)
+    
+    except Exception as e:
+        return PlainTextResponse(str(e))
+
+# 消息接收
 @app.post("/gateway/wecom")
-async def wecom_post():
+async def receive_msg():
     return PlainTextResponse("success")
 
-# ================== Gradio 界面 ==================
-def chat(message, history):
-    return "", history + [[message, "✅ 系统运行中 \n持久化已启用 \n企业微信已连接"]]
-
-with gr.Blocks(title="Hermes Agent") as demo:
-    gr.Markdown("# 🤖 Hermes Agent")
-    gr.Markdown("✅ 持久化已启用 | ✅ 企业微信已配置 | ✅ NVIDIA模型就绪")
-    chatbot = gr.Chatbot(height=500)
-    msg = gr.Textbox()
-    clear = gr.Button("清空")
-    msg.submit(chat, [msg, chatbot], [msg, chatbot])
-    clear.click(lambda: None, None, chatbot)
+# ========== Gradio 界面 ==========
+with gr.Blocks() as demo:
+    gr.Markdown("# ✅ 企业微信机器人已就绪")
+    gr.Markdown(f"回调地址：https://franksoo-agent.hf.space/gateway/wecom")
 
-# 挂载 Gradio
 gr.mount_gradio_app(app, demo, path="/")
 
-# ================== 启动 ==================
 if __name__ == "__main__":
     import uvicorn
     uvicorn.run(app, host="0.0.0.0", port=7860)