xinyu-pro 0.22.4 → 0.22.6

package/lib/db.ts

@@ -6,9 +6,7 @@ let SQL: SqlJsStatic | null = null;
 let db: SqlJsDatabase | null = null;
 let initPromise: Promise<void> | null = null;
 
-function getDbPath(): string {
-  return process.env.DB_PATH || join(process.cwd(), 'data', 'xinyu.db');
-}
+const DB_PATH = join(process.cwd(), 'data', 'xinyu.db');
 
 async function ensureDb(): Promise<SqlJsDatabase> {
   if (db) return db;
@@ -17,12 +15,11 @@ async function ensureDb(): Promise<SqlJsDatabase> {
       if (!SQL) SQL = await initSqlJs({
         locateFile: (file: string) => join(process.cwd(), 'public', file),
       });
-      const dbPath = getDbPath();
-      if (existsSync(dbPath)) {
-        const buffer = readFileSync(dbPath);
+      if (existsSync(DB_PATH)) {
+        const buffer = readFileSync(DB_PATH);
         db = new SQL.Database(buffer);
       } else {
-        const dir = join(dbPath, '..');
+        const dir = join(DB_PATH, '..');
         if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
         db = new SQL.Database();
       }
@@ -36,7 +33,7 @@ async function ensureDb(): Promise<SqlJsDatabase> {
 function persist(): void {
   if (db) {
     const data = db.export();
-    writeFileSync(getDbPath(), Buffer.from(data));
+    writeFileSync(DB_PATH, Buffer.from(data));
   }
 }
 
@@ -44,7 +41,7 @@ export function getRawDb(): SqlJsDatabase | null {
   return db;
 }
 
-export async function execute(sql: string, params?: unknown[]): Promise<[unknown, unknown]> {
+export async function execute(sql: string, params?: any[]): Promise<[unknown, unknown]> {
   const database = await ensureDb();
   const trimmed = sql.trim().toUpperCase();
 

package/lib/get-ai-config.ts

@@ -0,0 +1,33 @@
+import { execute } from '@/lib/db';
+import { ensureDb } from '@/lib/db-init';
+
+export interface AiConfig {
+  apiKey: string;
+  apiBase: string;
+  model: string;
+}
+
+export async function getAiConfig(): Promise<AiConfig> {
+  const defaults = {
+    apiKey: '',
+    apiBase: 'https://api.openai.com/v1',
+    model: 'gpt-4o',
+  };
+  try {
+    await ensureDb();
+    const [rows] = await execute('SELECT value FROM app_settings WHERE key = ?', ['app_settings']);
+    if (Array.isArray(rows) && rows.length > 0) {
+      const row = rows[0] as Record<string, unknown>;
+      const raw = row.value;
+      const settings = typeof raw === 'string' ? JSON.parse(raw) : raw;
+      return {
+        apiKey: settings.aiApiKey || defaults.apiKey,
+        apiBase: settings.aiApiBase || defaults.apiBase,
+        model: settings.aiModel || defaults.model,
+      };
+    }
+  } catch (e) {
+    console.error('Failed to read AI config from database, using defaults:', e);
+  }
+  return defaults;
+}

package/lib/plugin-files.ts

@@ -1,186 +1,186 @@
-// lib/plugin-files.ts - 插件文件读写工具（代码 + 资源）
-
-import { promises as fs } from 'fs';
-import path from 'path';
-
-/** 插件文件根目录 */
-const PLUGIN_ROOT = path.join(process.cwd(), 'data', 'plugins');
-
-/** 校验插件 ID 合法性（防止路径遍历攻击） */
-function isValidPluginId(id: string): boolean {
-  return /^[a-zA-Z0-9._-]+$/.test(id) && id.length <= 200 && !id.includes('..');
-}
-
-/** 校验文件路径安全性 */
-function isSafePath(filePath: string): boolean {
-  const normalized = path.normalize(filePath);
-  return !normalized.includes('..') && !path.isAbsolute(normalized) && normalized !== '';
-}
-
-/**
- * 获取插件目录的绝对路径
- */
-export function getPluginDir(pluginId: string): string {
-  if (!isValidPluginId(pluginId)) {
-    throw new Error(`非法插件 ID: ${pluginId}`);
-  }
-  return path.join(PLUGIN_ROOT, pluginId);
-}
-
-/**
- * 获取插件代码文件的绝对路径
- * @param pluginId 插件 ID
- * @param entryFile 入口文件名（如 index.js），默认 plugin.js
- */
-export function getPluginCodePath(pluginId: string, entryFile?: string): string {
-  return path.join(getPluginDir(pluginId), entryFile || 'plugin.js');
-}
-
-/**
- * 获取插件代码的相对路径（存入数据库）
- * @param pluginId 插件 ID
- * @param entryFile 入口文件名（如 index.js），默认 plugin.js
- */
-export function getPluginCodeRelativePath(pluginId: string, entryFile?: string): string {
-  return `data/plugins/${pluginId}/${entryFile || 'plugin.js'}`;
-}
-
-/**
- * 读取插件代码
- * @param pluginId 插件 ID
- * @param entryFile 入口文件名（如 index.js），默认 plugin.js
- */
-export async function readPluginCode(pluginId: string, entryFile?: string): Promise<string> {
-  const filePath = getPluginCodePath(pluginId, entryFile);
-  try {
-    return await fs.readFile(filePath, 'utf-8');
-  } catch {
-    throw new Error(`插件代码文件不存在: ${pluginId}/${entryFile || 'plugin.js'}`);
-  }
-}
-
-/**
- * 写入插件代码
- * @param pluginId 插件 ID
- * @param code 代码内容
- * @param entryFile 入口文件名（如 index.js），默认 plugin.js
- */
-export async function writePluginCode(pluginId: string, code: string, entryFile?: string): Promise<string> {
-  const pluginDir = getPluginDir(pluginId);
-  await fs.mkdir(pluginDir, { recursive: true });
-  const fileName = entryFile || 'plugin.js';
-  const filePath = path.join(pluginDir, fileName);
-  await fs.writeFile(filePath, code, 'utf-8');
-  return getPluginCodeRelativePath(pluginId, fileName);
-}
-
-/**
- * 删除插件整个目录（代码 + 资源）
- */
-export async function deletePluginCode(pluginId: string): Promise<void> {
-  const pluginDir = getPluginDir(pluginId);
-  try {
-    await fs.rm(pluginDir, { recursive: true, force: true });
-  } catch {
-    // 目录不存在时忽略
-  }
-}
-
-/**
- * 读取插件资源文件（返回 Buffer）
- */
-export async function readPluginResource(pluginId: string, resourcePath: string): Promise<Buffer> {
-  if (!isValidPluginId(pluginId)) {
-    throw new Error(`非法插件 ID: ${pluginId}`);
-  }
-  if (!isSafePath(resourcePath)) {
-    throw new Error(`非法资源路径: ${resourcePath}`);
-  }
-
-  const absolutePath = path.join(PLUGIN_ROOT, pluginId, resourcePath);
-
-  // 安全检查：确保路径在插件目录内
-  const pluginDir = path.resolve(getPluginDir(pluginId));
-  const resolvedPath = path.resolve(absolutePath);
-  if (!resolvedPath.startsWith(pluginDir + path.sep)) {
-    throw new Error(`资源路径越界: ${resourcePath}`);
-  }
-
-  return await fs.readFile(absolutePath);
-}
-
-/**
- * 读取插件资源文件（返回文本）
- */
-export async function readPluginResourceText(pluginId: string, resourcePath: string): Promise<string> {
-  const buffer = await readPluginResource(pluginId, resourcePath);
-  return buffer.toString('utf-8');
-}
-
-/**
- * 写入插件资源文件
- */
-export async function writePluginResource(pluginId: string, resourcePath: string, data: Buffer | string): Promise<void> {
-  if (!isValidPluginId(pluginId)) {
-    throw new Error(`非法插件 ID: ${pluginId}`);
-  }
-  if (!isSafePath(resourcePath)) {
-    throw new Error(`非法资源路径: ${resourcePath}`);
-  }
-
-  const absolutePath = path.join(PLUGIN_ROOT, pluginId, resourcePath);
-  await fs.mkdir(path.dirname(absolutePath), { recursive: true });
-  await fs.writeFile(absolutePath, data);
-}
-
-/**
- * 删除插件资源文件
- */
-export async function deletePluginResource(pluginId: string, resourcePath: string): Promise<void> {
-  if (!isValidPluginId(pluginId)) {
-    throw new Error(`非法插件 ID: ${pluginId}`);
-  }
-  if (!isSafePath(resourcePath)) {
-    throw new Error(`非法资源路径: ${resourcePath}`);
-  }
-
-  const absolutePath = path.join(PLUGIN_ROOT, pluginId, resourcePath);
-  try {
-    await fs.unlink(absolutePath);
-  } catch {
-    // 文件不存在时忽略
-  }
-}
-
-/**
- * 列出插件目录下的所有文件
- */
-export async function listPluginFiles(pluginId: string): Promise<string[]> {
-  const pluginDir = getPluginDir(pluginId);
-  const files: string[] = [];
-  try {
-    await collectFiles(pluginDir, pluginDir, files);
-  } catch {
-    // 目录不存在时返回空数组
-  }
-  return files;
-}
-
-/** 递归收集文件和目录 */
-async function collectFiles(baseDir: string, currentDir: string, result: string[]): Promise<void> {
-  const entries = await fs.readdir(currentDir, { withFileTypes: true });
-  let hasChild = false;
-  for (const entry of entries) {
-    hasChild = true;
-    const fullPath = path.join(currentDir, entry.name);
-    if (entry.isDirectory()) {
-      await collectFiles(baseDir, fullPath, result);
-    } else {
-      result.push(path.relative(baseDir, fullPath));
-    }
-  }
-  // 空目录也收集（以 / 结尾标识）
-  if (!hasChild && currentDir !== baseDir) {
-    result.push(path.relative(baseDir, currentDir) + '/');
-  }
-}
+// lib/plugin-files.ts - 插件文件读写工具（代码 + 资源）
+
+import { promises as fs } from 'fs';
+import path from 'path';
+
+/** 插件文件根目录 */
+const PLUGIN_ROOT = path.join(process.cwd(), 'data', 'plugins');
+
+/** 校验插件 ID 合法性（防止路径遍历攻击） */
+function isValidPluginId(id: string): boolean {
+  return /^[a-zA-Z0-9._-]+$/.test(id) && id.length <= 200 && !id.includes('..');
+}
+
+/** 校验文件路径安全性 */
+function isSafePath(filePath: string): boolean {
+  const normalized = path.normalize(filePath);
+  return !normalized.includes('..') && !path.isAbsolute(normalized) && normalized !== '';
+}
+
+/**
+ * 获取插件目录的绝对路径
+ */
+export function getPluginDir(pluginId: string): string {
+  if (!isValidPluginId(pluginId)) {
+    throw new Error(`非法插件 ID: ${pluginId}`);
+  }
+  return path.join(PLUGIN_ROOT, pluginId);
+}
+
+/**
+ * 获取插件代码文件的绝对路径
+ * @param pluginId 插件 ID
+ * @param entryFile 入口文件名（如 index.js），默认 plugin.js
+ */
+export function getPluginCodePath(pluginId: string, entryFile?: string): string {
+  return path.join(getPluginDir(pluginId), entryFile || 'plugin.js');
+}
+
+/**
+ * 获取插件代码的相对路径（存入数据库）
+ * @param pluginId 插件 ID
+ * @param entryFile 入口文件名（如 index.js），默认 plugin.js
+ */
+export function getPluginCodeRelativePath(pluginId: string, entryFile?: string): string {
+  return `data/plugins/${pluginId}/${entryFile || 'plugin.js'}`;
+}
+
+/**
+ * 读取插件代码
+ * @param pluginId 插件 ID
+ * @param entryFile 入口文件名（如 index.js），默认 plugin.js
+ */
+export async function readPluginCode(pluginId: string, entryFile?: string): Promise<string> {
+  const filePath = getPluginCodePath(pluginId, entryFile);
+  try {
+    return await fs.readFile(filePath, 'utf-8');
+  } catch {
+    throw new Error(`插件代码文件不存在: ${pluginId}/${entryFile || 'plugin.js'}`);
+  }
+}
+
+/**
+ * 写入插件代码
+ * @param pluginId 插件 ID
+ * @param code 代码内容
+ * @param entryFile 入口文件名（如 index.js），默认 plugin.js
+ */
+export async function writePluginCode(pluginId: string, code: string, entryFile?: string): Promise<string> {
+  const pluginDir = getPluginDir(pluginId);
+  await fs.mkdir(pluginDir, { recursive: true });
+  const fileName = entryFile || 'plugin.js';
+  const filePath = path.join(pluginDir, fileName);
+  await fs.writeFile(filePath, code, 'utf-8');
+  return getPluginCodeRelativePath(pluginId, fileName);
+}
+
+/**
+ * 删除插件整个目录（代码 + 资源）
+ */
+export async function deletePluginCode(pluginId: string): Promise<void> {
+  const pluginDir = getPluginDir(pluginId);
+  try {
+    await fs.rm(pluginDir, { recursive: true, force: true });
+  } catch {
+    // 目录不存在时忽略
+  }
+}
+
+/**
+ * 读取插件资源文件（返回 Buffer）
+ */
+export async function readPluginResource(pluginId: string, resourcePath: string): Promise<Buffer> {
+  if (!isValidPluginId(pluginId)) {
+    throw new Error(`非法插件 ID: ${pluginId}`);
+  }
+  if (!isSafePath(resourcePath)) {
+    throw new Error(`非法资源路径: ${resourcePath}`);
+  }
+
+  const absolutePath = path.join(PLUGIN_ROOT, pluginId, resourcePath);
+
+  // 安全检查：确保路径在插件目录内
+  const pluginDir = path.resolve(getPluginDir(pluginId));
+  const resolvedPath = path.resolve(absolutePath);
+  if (!resolvedPath.startsWith(pluginDir + path.sep)) {
+    throw new Error(`资源路径越界: ${resourcePath}`);
+  }
+
+  return await fs.readFile(absolutePath);
+}
+
+/**
+ * 读取插件资源文件（返回文本）
+ */
+export async function readPluginResourceText(pluginId: string, resourcePath: string): Promise<string> {
+  const buffer = await readPluginResource(pluginId, resourcePath);
+  return buffer.toString('utf-8');
+}
+
+/**
+ * 写入插件资源文件
+ */
+export async function writePluginResource(pluginId: string, resourcePath: string, data: Buffer | string): Promise<void> {
+  if (!isValidPluginId(pluginId)) {
+    throw new Error(`非法插件 ID: ${pluginId}`);
+  }
+  if (!isSafePath(resourcePath)) {
+    throw new Error(`非法资源路径: ${resourcePath}`);
+  }
+
+  const absolutePath = path.join(PLUGIN_ROOT, pluginId, resourcePath);
+  await fs.mkdir(path.dirname(absolutePath), { recursive: true });
+  await fs.writeFile(absolutePath, data);
+}
+
+/**
+ * 删除插件资源文件
+ */
+export async function deletePluginResource(pluginId: string, resourcePath: string): Promise<void> {
+  if (!isValidPluginId(pluginId)) {
+    throw new Error(`非法插件 ID: ${pluginId}`);
+  }
+  if (!isSafePath(resourcePath)) {
+    throw new Error(`非法资源路径: ${resourcePath}`);
+  }
+
+  const absolutePath = path.join(PLUGIN_ROOT, pluginId, resourcePath);
+  try {
+    await fs.unlink(absolutePath);
+  } catch {
+    // 文件不存在时忽略
+  }
+}
+
+/**
+ * 列出插件目录下的所有文件
+ */
+export async function listPluginFiles(pluginId: string): Promise<string[]> {
+  const pluginDir = getPluginDir(pluginId);
+  const files: string[] = [];
+  try {
+    await collectFiles(pluginDir, pluginDir, files);
+  } catch {
+    // 目录不存在时返回空数组
+  }
+  return files;
+}
+
+/** 递归收集文件和目录 */
+async function collectFiles(baseDir: string, currentDir: string, result: string[]): Promise<void> {
+  const entries = await fs.readdir(currentDir, { withFileTypes: true });
+  let hasChild = false;
+  for (const entry of entries) {
+    hasChild = true;
+    const fullPath = path.join(currentDir, entry.name);
+    if (entry.isDirectory()) {
+      await collectFiles(baseDir, fullPath, result);
+    } else {
+      result.push(path.relative(baseDir, fullPath));
+    }
+  }
+  // 空目录也收集（以 / 结尾标识）
+  if (!hasChild && currentDir !== baseDir) {
+    result.push(path.relative(baseDir, currentDir) + '/');
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xinyu-pro",
-  "version": "0.22.4",
+  "version": "0.22.6",
   "private": false,
   "description": "星语 Pro - AI 驱动的互动叙事平台",
   "author": "RestRegular",
@@ -13,14 +13,12 @@
     "app/",
     "components/",
     "lib/",
-    "plugins/",
     "public/",
     "styles/",
     "next.config.mjs",
     "tailwind.config.ts",
     "tsconfig.json",
     "postcss.config.mjs",
-    ".env.example",
     "version.json"
   ],
   "engines": {
@@ -50,6 +48,7 @@
   },
   "devDependencies": {
     "@types/adm-zip": "^0.5.8",
+    "@types/sql.js": "^1.4.11",
     "eslint": "^8",
     "eslint-config-next": "14.2.35"
   }

package/version.json

@@ -1,6 +1,7 @@
-{
-  "version": "0.22.4",
-  "name": "xinyu-pro",
-  "displayName": "星语 Pro",
-  "description": "AI 驱动的互动叙事平台"
-}
+{
+  "version": "0.22.6",
+  "name": "xinyu-pro",
+  "displayName": "星语 Pro",
+  "description": "AI 驱动的互动叙事平台",
+  "updatedAt": "2026-05-31T13:38:02.566Z"
+}

package/.env.example

@@ -1,17 +0,0 @@
-# AI 大模型 API 密钥
-AI_API_KEY=sk-your-api-key-here
-
-# AI 模型名称（可选，默认 gpt-4o）
-AI_MODEL=gpt-4o
-
-# AI API 地址（可选，默认 OpenAI，可替换为兼容接口）
-AI_API_BASE=https://api.openai.com/v1
-
-# GitHub Personal Access Token（需具备 repo 权限）
-GITHUB_TOKEN=ghp_your-token-here
-
-# GitHub 用户名
-GITHUB_USERNAME=your-username
-
-# 数据库文件路径（可选，默认 data/xinyu.db）
-DB_PATH=data/xinyu.db