xinyu-pro 0.21.4 → 0.22.1

package/.env.example

@@ -13,9 +13,5 @@ GITHUB_TOKEN=ghp_your-token-here
 # GitHub 用户名
 GITHUB_USERNAME=your-username
 
-# 数据库配置
-DB_HOST=localhost
-DB_PORT=3306
-DB_USER=root
-DB_PASSWORD=你的密码
-DB_NAME=xinyu
+# 数据库文件路径（可选，默认 data/xinyu.db）
+DB_PATH=data/xinyu.db

package/app/api/plugins/bindings/route.ts

@@ -1,173 +1,169 @@
-// app/api/plugins/bindings/route.ts - 插件绑定 API
-
-import { NextRequest, NextResponse } from 'next/server';
-import { getDbPool } from '@/lib/db';
-import { ensureDb } from '@/lib/db-init';
-
-/** 解析 JSON 字段 */
-function parseJsonField<T>(value: unknown): T {
-  if (typeof value === 'string') {
-    try { return JSON.parse(value) as T; } catch { return value as unknown as T; }
-  }
-  return value as T;
-}
-
-/** 行数据转换为绑定对象 */
-function rowToBinding(row: Record<string, unknown>) {
-  return {
-    id: row.id,
-    extensionId: row.extension_id,
-    scope: row.scope,
-    worldId: row.world_id,
-    enabled: Boolean(row.enabled),
-    config: parseJsonField<Record<string, unknown>>(row.config),
-    sortOrder: row.sort_order,
-    createdAt: row.created_at,
-    updatedAt: row.updated_at,
-  };
-}
-
-// GET: 获取绑定列表
-export async function GET(request: NextRequest) {
-  try {
-    await ensureDb();
-    const db = getDbPool();
-    const { searchParams } = new URL(request.url);
-    const id = searchParams.get('id');
-    const scope = searchParams.get('scope');
-    const worldId = searchParams.get('worldId');
-
-    if (id) {
-      const [rows] = await db.execute(
-        'SELECT * FROM extension_bindings WHERE id = ?',
-        [id]
-      ) as [Record<string, unknown>[], unknown];
-      if (rows.length === 0) {
-        return NextResponse.json({ error: '绑定不存在' }, { status: 404 });
-      }
-      return NextResponse.json(rowToBinding(rows[0]));
-    }
-
-    let query = 'SELECT * FROM extension_bindings WHERE 1=1';
-    const params: (string | null)[] = [];
-
-    if (scope) {
-      query += ' AND scope = ?';
-      params.push(scope);
-    }
-    if (worldId) {
-      query += ' AND world_id = ?';
-      params.push(worldId);
-    }
-
-    query += ' ORDER BY sort_order ASC, id ASC';
-    const [rows] = await db.execute(query, params) as [Record<string, unknown>[], unknown];
-    return NextResponse.json(rows.map(rowToBinding));
-  } catch (e) {
-    console.error('获取插件绑定失败:', e);
-    return NextResponse.json({ error: '获取插件绑定失败' }, { status: 500 });
-  }
-}
-
-// POST: 创建或更新绑定（upsert）
-export async function POST(request: NextRequest) {
-  try {
-    await ensureDb();
-    const db = getDbPool();
-    const body = await request.json();
-    const { extensionId, scope, worldId, enabled, config, sortOrder } = body;
-
-    if (!extensionId) {
-      return NextResponse.json({ error: '缺少插件 ID' }, { status: 400 });
-    }
-
-    const bindingScope = scope ?? 'global';
-    const bindingWorldId = worldId ?? '';
-    const bindingEnabled = enabled !== undefined ? enabled : true;
-    const bindingConfig = config ?? {};
-    const bindingSortOrder = sortOrder ?? 0;
-
-    await db.execute(
-      `INSERT INTO extension_bindings (extension_id, scope, world_id, enabled, config, sort_order)
-       VALUES (?, ?, ?, ?, ?, ?)
-       ON DUPLICATE KEY UPDATE
-       enabled = VALUES(enabled), config = VALUES(config), sort_order = VALUES(sort_order)`,
-      [extensionId, bindingScope, bindingWorldId, bindingEnabled, JSON.stringify(bindingConfig), bindingSortOrder]
-    );
-
-    return NextResponse.json({ success: true, extensionId });
-  } catch (e) {
-    console.error('创建插件绑定失败:', e);
-    return NextResponse.json({ error: '创建插件绑定失败' }, { status: 500 });
-  }
-}
-
-// PUT: 更新绑定
-export async function PUT(request: NextRequest) {
-  try {
-    await ensureDb();
-    const db = getDbPool();
-    const body = await request.json();
-    const { id, ...fields } = body;
-
-    if (!id) {
-      return NextResponse.json({ error: '缺少绑定 ID' }, { status: 400 });
-    }
-
-    const updates: string[] = [];
-    const params: (string | number | boolean | null)[] = [];
-
-    const allowedFields = ['enabled', 'config', 'sortOrder', 'scope', 'worldId'];
-    const columnMap: Record<string, string> = {
-      sortOrder: 'sort_order',
-      worldId: 'world_id',
-    };
-
-    for (const field of allowedFields) {
-      if (fields[field] !== undefined) {
-        const col = columnMap[field] || field;
-        updates.push(`${col} = ?`);
-        if (field === 'config') {
-          params.push(JSON.stringify(fields[field]));
-        } else {
-          params.push(fields[field]);
-        }
-      }
-    }
-
-    if (updates.length === 0) {
-      return NextResponse.json({ error: '没有需要更新的字段' }, { status: 400 });
-    }
-
-    params.push(id);
-    await db.execute(
-      `UPDATE extension_bindings SET ${updates.join(', ')} WHERE id = ?`,
-      params
-    );
-
-    return NextResponse.json({ success: true, id });
-  } catch (e) {
-    console.error('更新插件绑定失败:', e);
-    return NextResponse.json({ error: '更新插件绑定失败' }, { status: 500 });
-  }
-}
-
-// DELETE: 删除绑定
-export async function DELETE(request: NextRequest) {
-  try {
-    await ensureDb();
-    const db = getDbPool();
-    const { searchParams } = new URL(request.url);
-    const id = searchParams.get('id');
-
-    if (!id) {
-      return NextResponse.json({ error: '缺少绑定 ID' }, { status: 400 });
-    }
-
-    await db.execute('DELETE FROM extension_bindings WHERE id = ?', [id]);
-    return NextResponse.json({ success: true, id });
-  } catch (e) {
-    console.error('删除插件绑定失败:', e);
-    return NextResponse.json({ error: '删除插件绑定失败' }, { status: 500 });
-  }
-}
+// app/api/plugins/bindings/route.ts - 插件绑定 API
+
+import { NextRequest, NextResponse } from 'next/server';
+import { execute } from '@/lib/db';
+import { ensureDb } from '@/lib/db-init';
+
+/** 解析 JSON 字段 */
+function parseJsonField<T>(value: unknown): T {
+  if (typeof value === 'string') {
+    try { return JSON.parse(value) as T; } catch { return value as unknown as T; }
+  }
+  return value as T;
+}
+
+/** 行数据转换为绑定对象 */
+function rowToBinding(row: Record<string, unknown>) {
+  return {
+    id: row.id,
+    extensionId: row.extension_id,
+    scope: row.scope,
+    worldId: row.world_id,
+    enabled: Boolean(row.enabled),
+    config: parseJsonField<Record<string, unknown>>(row.config),
+    sortOrder: row.sort_order,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at,
+  };
+}
+
+// GET: 获取绑定列表
+export async function GET(request: NextRequest) {
+  try {
+    await ensureDb();
+    const { searchParams } = new URL(request.url);
+    const id = searchParams.get('id');
+    const scope = searchParams.get('scope');
+    const worldId = searchParams.get('worldId');
+
+    if (id) {
+      const [rows] = await execute(
+        'SELECT * FROM extension_bindings WHERE id = ?',
+        [id]
+      );
+      if ((rows as Record<string, unknown>[]).length === 0) {
+        return NextResponse.json({ error: '绑定不存在' }, { status: 404 });
+      }
+      return NextResponse.json(rowToBinding((rows as Record<string, unknown>[])[0]));
+    }
+
+    let query = 'SELECT * FROM extension_bindings WHERE 1=1';
+    const params: (string | null)[] = [];
+
+    if (scope) {
+      query += ' AND scope = ?';
+      params.push(scope);
+    }
+    if (worldId) {
+      query += ' AND world_id = ?';
+      params.push(worldId);
+    }
+
+    query += ' ORDER BY sort_order ASC, id ASC';
+    const [rows] = await execute(query, params);
+    return NextResponse.json((rows as Record<string, unknown>[]).map(rowToBinding));
+  } catch (e) {
+    console.error('获取插件绑定失败:', e);
+    return NextResponse.json({ error: '获取插件绑定失败' }, { status: 500 });
+  }
+}
+
+// POST: 创建或更新绑定（upsert）
+export async function POST(request: NextRequest) {
+  try {
+    await ensureDb();
+    const body = await request.json();
+    const { extensionId, scope, worldId, enabled, config, sortOrder } = body;
+
+    if (!extensionId) {
+      return NextResponse.json({ error: '缺少插件 ID' }, { status: 400 });
+    }
+
+    const bindingScope = scope ?? 'global';
+    const bindingWorldId = worldId ?? '';
+    const bindingEnabled = enabled !== undefined ? enabled : true;
+    const bindingConfig = config ?? {};
+    const bindingSortOrder = sortOrder ?? 0;
+
+    await execute(
+      `INSERT INTO extension_bindings (extension_id, scope, world_id, enabled, config, sort_order)
+       VALUES (?, ?, ?, ?, ?, ?)
+       ON CONFLICT(extension_id, scope, world_id) DO UPDATE SET
+       enabled = excluded.enabled, config = excluded.config, sort_order = excluded.sort_order`,
+      [extensionId, bindingScope, bindingWorldId, bindingEnabled, JSON.stringify(bindingConfig), bindingSortOrder]
+    );
+
+    return NextResponse.json({ success: true, extensionId });
+  } catch (e) {
+    console.error('创建插件绑定失败:', e);
+    return NextResponse.json({ error: '创建插件绑定失败' }, { status: 500 });
+  }
+}
+
+// PUT: 更新绑定
+export async function PUT(request: NextRequest) {
+  try {
+    await ensureDb();
+    const body = await request.json();
+    const { id, ...fields } = body;
+
+    if (!id) {
+      return NextResponse.json({ error: '缺少绑定 ID' }, { status: 400 });
+    }
+
+    const updates: string[] = [];
+    const params: (string | number | boolean | null)[] = [];
+
+    const allowedFields = ['enabled', 'config', 'sortOrder', 'scope', 'worldId'];
+    const columnMap: Record<string, string> = {
+      sortOrder: 'sort_order',
+      worldId: 'world_id',
+    };
+
+    for (const field of allowedFields) {
+      if (fields[field] !== undefined) {
+        const col = columnMap[field] || field;
+        updates.push(`${col} = ?`);
+        if (field === 'config') {
+          params.push(JSON.stringify(fields[field]));
+        } else {
+          params.push(fields[field]);
+        }
+      }
+    }
+
+    if (updates.length === 0) {
+      return NextResponse.json({ error: '没有需要更新的字段' }, { status: 400 });
+    }
+
+    params.push(id);
+    await execute(
+      `UPDATE extension_bindings SET ${updates.join(', ')} WHERE id = ?`,
+      params
+    );
+
+    return NextResponse.json({ success: true, id });
+  } catch (e) {
+    console.error('更新插件绑定失败:', e);
+    return NextResponse.json({ error: '更新插件绑定失败' }, { status: 500 });
+  }
+}
+
+// DELETE: 删除绑定
+export async function DELETE(request: NextRequest) {
+  try {
+    await ensureDb();
+    const { searchParams } = new URL(request.url);
+    const id = searchParams.get('id');
+
+    if (!id) {
+      return NextResponse.json({ error: '缺少绑定 ID' }, { status: 400 });
+    }
+
+    await execute('DELETE FROM extension_bindings WHERE id = ?', [id]);
+    return NextResponse.json({ success: true, id });
+  } catch (e) {
+    console.error('删除插件绑定失败:', e);
+    return NextResponse.json({ error: '删除插件绑定失败' }, { status: 500 });
+  }
+}

package/app/api/plugins/export/route.ts

@@ -1,7 +1,7 @@
 // app/api/plugins/export/route.ts - 插件导出 API
 
 import { NextRequest, NextResponse } from 'next/server';
-import { getDbPool } from '@/lib/db';
+import { execute } from '@/lib/db';
 import { ensureDb } from '@/lib/db-init';
 import { readPluginCode } from '@/lib/plugin-files';
 
@@ -70,17 +70,16 @@ async function fillPluginCode(plugin: ReturnType<typeof rowToPlugin>): Promise<t
 export async function GET(request: NextRequest) {
   try {
     await ensureDb();
-    const db = getDbPool();
 
     const { searchParams } = new URL(request.url);
     const pluginId = searchParams.get('id');
 
     if (pluginId) {
       // 导出单个插件（直接返回插件对象，不带 format 包裹）
-      const [rows] = await db.execute(
+      const [rows] = await execute(
         'SELECT * FROM extensions WHERE id = ?',
         [pluginId]
-      ) as [Record<string, unknown>[], unknown];
+      );
 
       if (rows.length === 0) {
         return NextResponse.json({ error: '插件不存在' }, { status: 404 });
@@ -97,9 +96,9 @@ export async function GET(request: NextRequest) {
     }
 
     // 导出全部插件（多插件包格式）
-    const [rows] = await db.execute(
+    const [rows] = await execute(
       'SELECT * FROM extensions ORDER BY updated_at DESC'
-    ) as [Record<string, unknown>[], unknown];
+    );
 
     const plugins = await Promise.all(rows.map(r => fillPluginCode(rowToPlugin(r))));
 

package/app/api/plugins/export-xye/route.ts

@@ -1,7 +1,7 @@
 // app/api/plugins/export-xye/route.ts - 导出插件为 .xye 包（ZIP 格式）
 
 import { NextRequest, NextResponse } from 'next/server';
-import { getDbPool } from '@/lib/db';
+import { execute } from '@/lib/db';
 import { ensureDb } from '@/lib/db-init';
 import { getPluginDir, readPluginCode } from '@/lib/plugin-files';
 import { listPluginFiles } from '@/lib/plugin-files';
@@ -41,7 +41,6 @@ function parsePermissions(value: unknown): {
 export async function GET(request: NextRequest) {
   try {
     await ensureDb();
-    const db = getDbPool();
 
     const { searchParams } = new URL(request.url);
     const pluginId = searchParams.get('id');
@@ -50,10 +49,10 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: '缺少 id 参数' }, { status: 400 });
     }
 
-    const [rows] = await db.execute(
+    const [rows] = await execute(
       'SELECT * FROM extensions WHERE id = ?',
       [pluginId]
-    ) as [Record<string, unknown>[], unknown];
+    );
 
     if (rows.length === 0) {
       return NextResponse.json({ error: '插件不存在' }, { status: 404 });

package/app/api/plugins/files-list/route.ts

@@ -2,7 +2,7 @@
 
 import { NextRequest, NextResponse } from 'next/server';
 import { ensureDb } from '@/lib/db-init';
-import { getDbPool } from '@/lib/db';
+import { execute } from '@/lib/db';
 import { listPluginFiles, readPluginResourceText } from '@/lib/plugin-files';
 import path from 'path';
 
@@ -56,11 +56,10 @@ export async function GET(request: NextRequest) {
 
     // 验证插件存在
     await ensureDb();
-    const db = getDbPool();
-    const [rows] = await db.execute(
+    const [rows] = await execute(
       'SELECT id FROM extensions WHERE id = ?',
       [pluginId]
-    ) as [Array<{ id: string }>, unknown];
+    );
 
     if (rows.length === 0) {
       return NextResponse.json({ error: '插件不存在' }, { status: 404 });

package/app/api/plugins/files-upload/route.ts

@@ -2,7 +2,7 @@
 
 import { NextRequest, NextResponse } from 'next/server';
 import { ensureDb } from '@/lib/db-init';
-import { getDbPool } from '@/lib/db';
+import { execute } from '@/lib/db';
 import { getPluginDir } from '@/lib/plugin-files';
 import path from 'path';
 import { promises as fs } from 'fs';
@@ -19,15 +19,11 @@ function isSafePath(filePath: string): boolean {
 /** 验证插件存在 */
 async function verifyPlugin(pluginId: string) {
   await ensureDb();
-  const db = getDbPool();
-  const [rows] = await db.execute(
+  const [rows] = await execute(
     'SELECT id FROM extensions WHERE id = ?',
     [pluginId]
-  ) as [Array<{ id: string }>, unknown];
-  if (rows.length === 0) {
-    return null;
-  }
-  return db;
+  );
+  return (rows as Record<string, unknown>[]).length > 0;
 }
 
 // ==================== POST: 上传资源文件 ====================
@@ -48,8 +44,8 @@ export async function POST(request: NextRequest) {
       return NextResponse.json({ error: '非法目标目录' }, { status: 400 });
     }
 
-    const db = await verifyPlugin(pluginId);
-    if (!db) {
+    const exists = await verifyPlugin(pluginId);
+    if (!exists) {
       return NextResponse.json({ error: '插件不存在' }, { status: 404 });
     }
 

package/app/api/plugins/files-write/route.ts

@@ -2,7 +2,7 @@
 
 import { NextRequest, NextResponse } from 'next/server';
 import { ensureDb } from '@/lib/db-init';
-import { getDbPool } from '@/lib/db';
+import { execute } from '@/lib/db';
 import { writePluginResource, getPluginDir } from '@/lib/plugin-files';
 import path from 'path';
 import { promises as fs } from 'fs';
@@ -19,19 +19,15 @@ function isSafePath(filePath: string): boolean {
 /** 验证插件存在 */
 async function verifyPlugin(pluginId: string) {
   await ensureDb();
-  const db = getDbPool();
-  const [rows] = await db.execute(
+  const [rows] = await execute(
     'SELECT id FROM extensions WHERE id = ?',
     [pluginId]
-  ) as [Array<{ id: string }>, unknown];
-  if (rows.length === 0) {
-    return null;
-  }
-  return db;
+  );
+  return (rows as Record<string, unknown>[]).length > 0;
 }
 
 /** 同步 manifest.json 到数据库 */
-async function syncManifestToDb(db: ReturnType<typeof getDbPool>, pluginId: string, content: string) {
+async function syncManifestToDb(pluginId: string, content: string) {
   try {
     const manifest = JSON.parse(content);
     const updates: string[] = [];
@@ -58,7 +54,7 @@ async function syncManifestToDb(db: ReturnType<typeof getDbPool>, pluginId: stri
 
     if (updates.length > 0) {
       params.push(pluginId);
-      await db.execute(`UPDATE extensions SET ${updates.join(', ')} WHERE id = ?`, params);
+      await execute(`UPDATE extensions SET ${updates.join(', ')} WHERE id = ?`, params);
     }
   } catch (e) {
     console.error('同步 manifest 到数据库失败:', e);
@@ -83,8 +79,8 @@ export async function PUT(request: NextRequest) {
       return NextResponse.json({ error: '非法文件路径' }, { status: 400 });
     }
 
-    const db = await verifyPlugin(pluginId);
-    if (!db) {
+    const exists = await verifyPlugin(pluginId);
+    if (!exists) {
       return NextResponse.json({ error: '插件不存在' }, { status: 404 });
     }
 
@@ -98,7 +94,7 @@ export async function PUT(request: NextRequest) {
     await writePluginResource(pluginId, filePath, content);
 
     if (filePath === 'manifest.json') {
-      await syncManifestToDb(db, pluginId, content);
+      await syncManifestToDb(pluginId, content);
     }
 
     return NextResponse.json({ success: true, path: filePath });
@@ -122,8 +118,8 @@ export async function POST(request: NextRequest) {
       return NextResponse.json({ error: '非法插件 ID' }, { status: 400 });
     }
 
-    const db = await verifyPlugin(pluginId);
-    if (!db) {
+    const exists = await verifyPlugin(pluginId);
+    if (!exists) {
       return NextResponse.json({ error: '插件不存在' }, { status: 404 });
     }
 
@@ -180,18 +176,19 @@ export async function DELETE(request: NextRequest) {
       return NextResponse.json({ error: '不能删除 resources 目录（资源文件目录，仅支持删除其中的文件）' }, { status: 400 });
     }
 
-    const db = await verifyPlugin(pluginId);
-    if (!db) {
+    const exists = await verifyPlugin(pluginId);
+    if (!exists) {
       return NextResponse.json({ error: '插件不存在' }, { status: 404 });
     }
 
     // 从数据库读取 code_path，提取入口文件名，禁止删除入口文件
-    const [rows] = await db.execute(
+    const [codeRows] = await execute(
       'SELECT code_path FROM extensions WHERE id = ?',
       [pluginId]
-    ) as [Array<{ code_path: string }>, unknown];
-    if (rows.length > 0 && rows[0].code_path) {
-      const entryFile = rows[0].code_path.split('/').pop();
+    );
+    const codeRowList = codeRows as Record<string, unknown>[];
+    if (codeRowList.length > 0 && codeRowList[0].code_path) {
+      const entryFile = (codeRowList[0].code_path as string).split('/').pop();
       if (entryFile && filePath === entryFile) {
         return NextResponse.json({ error: `不能删除入口文件 ${entryFile}` }, { status: 400 });
       }
@@ -236,8 +233,8 @@ export async function PATCH(request: NextRequest) {
       return NextResponse.json({ error: '非法文件路径' }, { status: 400 });
     }
 
-    const db = await verifyPlugin(pluginId);
-    if (!db) {
+    const exists = await verifyPlugin(pluginId);
+    if (!exists) {
       return NextResponse.json({ error: '插件不存在' }, { status: 404 });
     }