release: v1.4.0 — 标签系统、操作日志扩展与文档截图更新

- 每用户标签与彩色打标，图库 OR/AND 筛选与批量打标
- 操作日志记录登录、删除、设置与标签操作
- API 标签/打标接口；README 与文档站截图同步

server/utils/activity-log.ts

@@ -0,0 +1,67 @@
+import type { H3Event } from 'h3'
+import { getHeader } from 'h3'
+import {
+  insertActivityLog,
+  type LogAction,
+  type LogSource,
+  type LogStatus
+} from './db'
+import { verifyApiUploadToken } from './access'
+import { clientIp } from './logger'
+
+export const LOG_ACTIONS: LogAction[] = [
+  'upload',
+  'delete',
+  'login',
+  'edit',
+  'settings',
+  'tags'
+]
+
+export const LOG_SOURCES: LogSource[] = ['web', 'api', 'admin']
+
+export function isLogAction(value: string): value is LogAction {
+  return LOG_ACTIONS.includes(value as LogAction)
+}
+
+export function isLogSource(value: string): value is LogSource {
+  return LOG_SOURCES.includes(value as LogSource)
+}
+
+export function resolveActivityLogSource(event: H3Event): LogSource {
+  if (verifyApiUploadToken(event)) {
+    return 'api'
+  }
+  const referer = getHeader(event, 'referer') ?? ''
+  if (/\/settings(?:[/?#]|$)|\/storage(?:[/?#]|$)/.test(referer)) {
+    return 'admin'
+  }
+  return 'web'
+}
+
+export interface ActivityLogEventInput {
+  action: LogAction
+  key: string
+  originalName: string
+  size?: number
+  contentType?: string
+  source?: LogSource
+  userId?: number | null
+  backendId?: string | null
+  status?: LogStatus
+}
+
+export function logActivity(event: H3Event, input: ActivityLogEventInput): void {
+  insertActivityLog({
+    action: input.action,
+    key: input.key,
+    originalName: input.originalName,
+    size: input.size ?? 0,
+    contentType: input.contentType ?? '',
+    source: input.source ?? resolveActivityLogSource(event),
+    userId: input.userId ?? null,
+    backendId: input.backendId ?? null,
+    ipAddress: clientIp(event),
+    status: input.status ?? 'success'
+  })
+}