#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""
Pak Otto Upload Server — biar Bos bisa upload (copy-paste) file dari lokal ke folder
pak_otto_image & pak_otto_video di server OpenClaw lewat browser.
- Port: 8124 (bind 0.0.0.0) → akses dari Mac Bos via Tailscale: http://100.79.230.61:8124
- Halaman: pilih folder (Image / Video), pilih file (multipart), upload
- Simpan: /home/mantapman/.hermes/profiles/atun/workspace/pak_otto_{image,video}/
- Proteksi: token sederhana (query ?t=... atau header) — ganti TOKEN sesuai keinginan
"""
import os, re, sys, html, uuid
from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
from urllib.parse import urlparse, parse_qs
ROOT = "/home/mantapman/.hermes/profiles/atun/workspace"
DIRS = {
"image": os.path.join(ROOT, "pak_otto_image"),
"video": os.path.join(ROOT, "pak_otto_video"),
}
TOKEN = "otto2026" # ganti kalau mau
PAGE = """
Pak Otto Upload
📁 Upload Aset Pak Otto
Pilih folder, pilih file, klik Upload. File langsung masuk server OpenClaw.
{MSG}
Setelah upload, file langsung bisa dipakai (URL server otomatis).
"""
class Handler(BaseHTTPRequestHandler):
def log_message(self, *a):
pass
def _check_token(self):
q = parse_qs(urlparse(self.path).query)
t = q.get("t", [""])[0]
if t == TOKEN:
return True
# header fallback
if self.headers.get("X-Token") == TOKEN:
return True
return False
def _send(self, code, body, ctype="text/html; charset=utf-8"):
self.send_response(code)
self.send_header("Content-Type", ctype)
self.send_header("Content-Length", str(len(body)))
self.end_headers()
self.wfile.write(body)
def do_GET(self):
if not self._check_token():
self._send(401, "401 — butuh token. Akses: http://IP:8124/?t=otto2026
".encode())
return
msg = ""
if os.environ.get("UPLOAD_MSG"):
msg = os.environ.pop("UPLOAD_MSG")
self._send(200, PAGE.replace("{MSG}", msg).encode())
def do_POST(self):
if not self._check_token():
self._send(401, "401 — token salah
".encode())
return
ctype = self.headers.get("Content-Type", "")
if "multipart/form-data" not in ctype:
self._send(400, "400 — butuh multipart/form-data
".encode())
return
try:
length = int(self.headers.get("Content-Length", 0))
except ValueError:
length = 0
body = self.rfile.read(length)
boundary = ctype.split("boundary=")[1].strip().strip('"').encode()
parts = body.split(b"--" + boundary)
folder = "image"
saved = []
errors = []
for part in parts:
if not part or part in (b"\r\n", b"--\r\n", b"--"):
continue
head, _, data = part.partition(b"\r\n\r\n")
data = data.rstrip(b"\r\n")
head_txt = head.decode("utf-8", "ignore")
m = re.search(r'name="([^"]+)"', head_txt)
if not m:
continue
name = m.group(1)
if name == "folder":
folder = data.decode().strip()
if folder not in DIRS:
folder = "image"
continue
if name == "file":
fm = re.search(r'filename="([^"]*)"', head_txt)
fname = fm.group(1) if fm else ""
fname = os.path.basename(fname.replace("\\", "/"))
if not fname or not data:
continue
safe = re.sub(r"[^A-Za-z0-9._-]", "_", fname)
dest = os.path.join(DIRS[folder], safe)
with open(dest, "wb") as f:
f.write(data)
saved.append(safe)
if saved:
msg = f'✅ {len(saved)} file terupload ke pak_otto_{folder}/:
' + "
".join(html.escape(s) for s in saved) + "
"
else:
msg = '⚠️ Tidak ada file tersimpan. Coba lagi.
'
os.environ["UPLOAD_MSG"] = msg
self.send_response(303)
self.send_header("Location", "/?t=" + TOKEN)
self.end_headers()
if __name__ == "__main__":
port = int(sys.argv[1]) if len(sys.argv) > 1 else 8124
for d in DIRS.values():
os.makedirs(d, exist_ok=True)
srv = ThreadingHTTPServer(("0.0.0.0", port), Handler)
print(f"Pak Otto Upload Server jalan di port {port}")
print(f"Folder: {DIRS['image']} & {DIRS['video']}")
print(f"Akses: http://100.79.230.61:{port}/?t={TOKEN}")
srv.serve_forever()