feat: 新增视频床与文件床，视频支持 HLS 转码

文件床 - 新增 files/ 存储前缀与 media_type 索引列，图片、视频、文件三类资源独立 - 新增文件上传、列表、删除、批量删除接口，禁止 html/htm/svg - 支持公开直链与 Token 访问两种模式，后台可切换，直链强制附件下载视频床 - 新增 videos/ 存储前缀与视频上传接口，单文件上限 500MB - 接入 ffmpeg 转码队列，并发数与单任务核心数可配，默认串行 - 五档转码质量：直接封装 / 速度 / 平衡 / 质量 / 压缩（压缩档可调码率比例） - 码率控制避免转码后体积反超源文件，音频跟随源音轨不放大不压缩 - 转码进度实时上报，成功后删除源文件，失败时保留源文件与可用链接 - 上传时自动抽帧生成封面，视频与封面各有独立链接 - 删除视频时中断转码并清理切片、封面与源文件媒体库 - 图库、视频库、文件库三套独立统计，含趋势、占用与来源分布 - 统一筛选、多选、批量删除、批量标签、网格/列表切换，显示方式按类型分别记忆 - 视频详情对齐图片详情，视频库支持在线播放（hls.js，兼容回退原文件）修复 - 清理无主的切片、封面与开发期遗留的 ffmpeg 进程 - 源文件按设计删除后，索引不再被启动孤儿清理误删 - 视频统计口径与列表一致，转码中的视频不计入统计 - 转码失败时回收已写入的部分切片，避免残留 - 设置页停用检查更新（与上游版本号已不对应）其他 - Docker 镜像安装 ffmpeg - git remote 指向内网仓库
2026-10-17 03:14:57 +08:00
1 parent 05cc3895f1
commit 89ea2fb25d
@@ -0,0 +1,81 @@
+import type { BatchDeleteResponse } from '~/types/image'
+import { assertImageOwnership, requireApiOrAdminAuth } from '../../utils/access'
+import { createApiError } from '../../utils/api-error'
+import { logActivity } from '../../utils/activity-log'
+import { deleteImageIndex, getImageIndexRow } from '../../utils/image-index'
+import { validateFileKey, validateVideoKey } from '../../utils/image-key'
+import { deleteImage, headImage } from '../../utils/storage'
+import { cancelTranscode, removeHlsArtifacts } from '../../utils/transcode'
+import { MAX_DELETE_BATCH } from '../../utils/constants'
+
+interface BatchDeleteBody {
+  keys?: unknown
+}
+
+export default defineEventHandler(async (event) => {
+  await requireApiOrAdminAuth(event)
+
+  const body = await readBody<BatchDeleteBody>(event).catch((): BatchDeleteBody => ({}))
+  const keys = Array.isArray(body.keys)
+    ? body.keys.map(key => String(key)).filter(Boolean)
+    : []
+
+  if (!keys.length) {
+    createApiError(event, 'INVALID_REQUEST', '未提供要删除的文件', 400)
+  }
+  if (keys.length > MAX_DELETE_BATCH) {
+    createApiError(event, 'INVALID_REQUEST', `每次最多删除 ${MAX_DELETE_BATCH} 个文件`, 400)
+  }
+
+  const deleted: string[] = []
+  const failed: BatchDeleteResponse['failed'] = []
+
+  for (const key of keys) {
+    if (!validateFileKey(key) && !validateVideoKey(key)) {
+      failed.push({ key, error: { code: 'INVALID_IMAGE_KEY', message: '无效的文件路径' } })
+      continue
+    }
+
+    try {
+      const existing = await headImage(key)
+      const indexed = getImageIndexRow(key)
+
+      if (!existing && !indexed) {
+        failed.push({ key, error: { code: 'IMAGE_NOT_FOUND', message: '文件不存在' } })
+        continue
+      }
+
+      const ownerId = existing?.userId ?? indexed?.user_id ?? null
+      await assertImageOwnership(event, ownerId)
+
+      if (validateVideoKey(key)) {
+        cancelTranscode(key)
+        await removeHlsArtifacts(key).catch(() => {})
+      }
+
+      if (existing) {
+        await deleteImage(key, key)
+      } else {
+        deleteImageIndex(key)
+      }
+
+      logActivity(event, {
+        action: 'delete',
+        key,
+        originalName: existing?.originalName ?? indexed?.original_name ?? key,
+        size: existing?.size ?? indexed?.size ?? 0,
+        contentType: existing?.contentType ?? indexed?.content_type ?? 'application/octet-stream',
+        userId: ownerId,
+        backendId: existing?.backendId ?? indexed?.backend_id ?? null
+      })
+
+      deleted.push(key)
+    } catch (error: unknown) {
+      const message = error instanceof Error ? error.message : '删除失败'
+      failed.push({ key, error: { code: 'DELETE_FAILED', message } })
+    }
+  }
+
+  const response: BatchDeleteResponse = { success: failed.length === 0, deleted, failed }
+  return response
+})
@@ -0,0 +1,77 @@
+import type { DeleteResponse } from '~/types/image'
+import { assertImageOwnership, requireApiOrAdminAuth } from '../../utils/access'
+import { createApiError } from '../../utils/api-error'
+import { logActivity } from '../../utils/activity-log'
+import { deleteImageIndex, getImageIndexRow } from '../../utils/image-index'
+import { validateFileKey, validateVideoKey } from '../../utils/image-key'
+import { deleteImage, headImage } from '../../utils/storage'
+import { cancelTranscode, removeHlsArtifacts } from '../../utils/transcode'
+import { logInfo } from '../../utils/logger'
+
+interface DeleteBody {
+  key?: string
+}
+
+export default defineEventHandler(async (event) => {
+  try {
+    await requireApiOrAdminAuth(event)
+
+    const query = getQuery(event)
+    const body = await readBody<DeleteBody>(event).catch(() => null)
+    const key = (typeof query.key === 'string' ? query.key : undefined) ?? body?.key
+
+    if (!key || (!validateFileKey(key) && !validateVideoKey(key))) {
+      createApiError(event, 'INVALID_IMAGE_KEY', '无效的文件路径', 400)
+    }
+
+    const existing = await headImage(key)
+    const indexed = getImageIndexRow(key)
+
+    if (!existing && !indexed) {
+      createApiError(event, 'IMAGE_NOT_FOUND', '文件不存在', 404)
+    }
+
+    const originalName = existing?.originalName ?? indexed?.original_name ?? key
+    const size = existing?.size ?? indexed?.size ?? 0
+    const contentType = existing?.contentType ?? indexed?.content_type ?? 'application/octet-stream'
+    const ownerId = existing?.userId ?? indexed?.user_id ?? null
+    const backendId = existing?.backendId ?? indexed?.backend_id ?? null
+
+    await assertImageOwnership(event, ownerId)
+
+    try {
+      if (validateVideoKey(key)) {
+        // 立即中断正在进行的转码，再清理产物与原文件
+        cancelTranscode(key)
+        await removeHlsArtifacts(key).catch(() => {})
+      }
+      if (existing) {
+        await deleteImage(key, key)
+      } else {
+        deleteImageIndex(key)
+      }
+    } catch {
+      createApiError(event, 'DELETE_FAILED', '删除失败', 500)
+    }
+
+    logActivity(event, {
+      action: 'delete',
+      key,
+      originalName,
+      size,
+      contentType,
+      userId: ownerId,
+      backendId
+    })
+
+    logInfo('file delete success', { key, size })
+
+    const response: DeleteResponse = { success: true }
+    return response
+  } catch (error: unknown) {
+    if (error && typeof error === 'object' && 'statusCode' in error) {
+      throw error
+    }
+    createApiError(event, 'DELETE_FAILED', '删除失败', 500)
+  }
+})
@@ -0,0 +1,141 @@
+import type { FileListResponse } from '~/types/file'
+import type { MediaType, TranscodeStatus } from '../../utils/storage/types'
+import { requireApiOrAdminAuth, getImageUserFilter } from '../../utils/access'
+import { getCurrentUser } from '../../utils/auth'
+import { DEFAULT_LIST_LIMIT, MAX_LIST_LIMIT } from '../../utils/constants'
+import { getUploadSourcesForKeys, listUserIdUsernameMap } from '../../utils/db'
+import { getFileBedAccessMode } from '../../utils/env'
+import { buildFileItem } from '../../utils/file-bed'
+import {
+  resolveImageOwner,
+  resolveImageStorage,
+  resolveImageUrl
+} from '../../utils/image-response'
+import { getTagsForImageKeys } from '../../utils/tags'
+import { listStorageBackendNameMap } from '../../utils/storage-backends'
+import { createApiError } from '../../utils/api-error'
+import {
+  readBackendIdQuery,
+  readTagFilterQuery,
+  readUploadSourceQuery
+} from '../../utils/image-query'
+import { listImages, searchImages } from '../../utils/storage'
+
+export default defineEventHandler(async (event) => {
+  await requireApiOrAdminAuth(event)
+
+  const query = getQuery(event)
+
+  const limitRaw = Number(query.limit ?? DEFAULT_LIST_LIMIT)
+  const limit = Number.isFinite(limitRaw)
+    ? Math.min(Math.max(1, Math.floor(limitRaw)), MAX_LIST_LIMIT)
+    : DEFAULT_LIST_LIMIT
+
+  const pageRaw = Number(query.page ?? 1)
+  const page = Number.isFinite(pageRaw) && pageRaw > 0 ? Math.floor(pageRaw) : 1
+
+  const search = typeof query.q === 'string' ? query.q.trim() : ''
+  const userFilter = await getImageUserFilter(event)
+
+  const backendId = readBackendIdQuery(query)
+  if (backendId === null) {
+    createApiError(event, 'INVALID_REQUEST', '无效的存储后端', 400)
+  }
+  const uploadSource = readUploadSourceQuery(query)
+  if (uploadSource === null) {
+    createApiError(event, 'INVALID_REQUEST', '无效的上传来源', 400)
+  }
+  const tagFilter = readTagFilterQuery(query)
+  if (tagFilter === null) {
+    createApiError(event, 'INVALID_REQUEST', '无效的标签筛选参数', 400)
+  }
+
+  // 文件床按类型分工：视频库看 media_type=video，文件库看 media_type=file
+  const kindRaw = typeof query.kind === 'string' ? query.kind.trim() : ''
+  if (kindRaw && kindRaw !== 'file' && kindRaw !== 'video') {
+    createApiError(event, 'INVALID_REQUEST', '无效的文件类型筛选', 400)
+  }
+  const mediaType: MediaType = kindRaw === 'video' ? 'video' : 'file'
+  // 视频库只收录转码已结束的条目；processing=1 用于上传页查仍在转码中的视频
+  const processingRaw = query.processing
+  const processingOnly = processingRaw === '1' || processingRaw === 'true'
+  const transcodeStatuses: TranscodeStatus[] | undefined = mediaType === 'video'
+    ? (processingOnly ? ['pending', 'running'] : ['none', 'done', 'failed'])
+    : undefined
+
+  const listing = search
+    ? await searchImages({
+        query: search,
+        limit,
+        page,
+        userFilter,
+        mediaType,
+        transcodeStatuses,
+        backendId,
+        uploadSource,
+        tagFilter
+      })
+    : await listImages({
+        limit,
+        page,
+        userFilter,
+        mediaType,
+        transcodeStatuses,
+        backendId,
+        uploadSource,
+        tagFilter
+      })
+
+  const user = await getCurrentUser(event)
+  const ownerMap = user?.role === 'admin' ? listUserIdUsernameMap() : undefined
+  const backendMap = listStorageBackendNameMap()
+  const sourceMap = getUploadSourcesForKeys(listing.items.map(item => item.key))
+
+  const mapped = listing.items.map((stored) => {
+    const owner = resolveImageOwner(stored.userId, ownerMap)
+    const storage = resolveImageStorage(stored.backendId, backendMap)
+    const uploadSource = sourceMap.get(stored.key)
+
+    return {
+      ...buildFileItem({
+        event,
+        key: stored.key,
+        backendId: stored.backendId,
+        originalName: stored.originalName,
+        contentType: stored.contentType,
+        size: stored.size,
+        uploadedAt: stored.uploadedAt
+      }),
+      ...(owner ? { owner } : {}),
+      ...(storage ? { storage } : {}),
+      ...(uploadSource === 'web' || uploadSource === 'api' ? { uploadSource } : {}),
+      transcodeStatus: stored.transcodeStatus ?? 'none',
+      transcodeProgress: stored.transcodeProgress ?? 0,
+      ...(stored.transcodePreset ? { transcodePreset: stored.transcodePreset } : {}),
+      ...(stored.sourceDeleted ? { sourceDeleted: true } : {}),
+      ...(stored.thumbKey
+        ? { thumbUrl: resolveImageUrl(event, stored.thumbKey, stored.backendId) }
+        : {}),
+      ...(stored.hlsKey
+        ? {
+            hlsUrl: resolveImageUrl(event, stored.hlsKey, stored.backendId),
+            hlsKey: stored.hlsKey
+          }
+        : {})
+    }
+  })
+
+  const tagMap = getTagsForImageKeys(mapped.map(item => item.key))
+  const items = mapped.map(item => ({ ...item, tags: tagMap.get(item.key) ?? [] }))
+
+  const response: FileListResponse = {
+    items,
+    total: listing.total,
+    page: listing.page,
+    pageSize: listing.pageSize,
+    totalPages: listing.totalPages,
+    accessMode: getFileBedAccessMode()
+  }
+
+  return response
+})
@@ -0,0 +1,79 @@
+import { readMultipartFormData } from 'h3'
+import type { FileItem, FileUploadResponse } from '~/types/file'
+import type { UploadErrorItem } from '~/types/image'
+import {
+  getUploadUserId,
+  requireUploadAuth,
+  verifyApiUploadToken
+} from '../../utils/access'
+import { MAX_FILES_PER_UPLOAD } from '../../utils/constants'
+import { createApiError } from '../../utils/api-error'
+import { checkUploadRateLimit } from '../../utils/rate-limit'
+import { processSingleFileUpload } from '../../utils/file-bed'
+import { getFileBedAccessMode } from '../../utils/env'
+
+export default defineEventHandler(async (event) => {
+  await requireUploadAuth(event)
+
+  const formData = await readMultipartFormData(event)
+  if (!formData?.length) {
+    createApiError(event, 'INVALID_REQUEST', '未收到上传文件', 400)
+  }
+
+  const tokenField = formData.find(part => part.name === 'token')
+  const formToken = tokenField?.data?.length
+    ? new TextDecoder().decode(tokenField.data).trim()
+    : ''
+  checkUploadRateLimit(event, formToken)
+
+  const source = verifyApiUploadToken(event) ? 'api' : 'web'
+  const uploadUserId = await getUploadUserId(event, formToken)
+
+  const fileParts = formData.filter(
+    part => (part.name === 'file' || part.name === 'files') && part.data?.length
+  )
+  if (!fileParts.length) {
+    createApiError(event, 'INVALID_REQUEST', '未收到上传文件', 400)
+  }
+
+  if (fileParts.length > MAX_FILES_PER_UPLOAD) {
+    createApiError(
+      event,
+      'TOO_MANY_FILES',
+      `每次最多上传 ${MAX_FILES_PER_UPLOAD} 个文件`,
+      400
+    )
+  }
+
+  const items: FileItem[] = []
+  const errors: UploadErrorItem[] = []
+
+  for (const part of fileParts) {
+    const result = await processSingleFileUpload(event, {
+      bytes: new Uint8Array(part.data),
+      filename: part.filename,
+      contentType: part.type,
+      source,
+      userId: uploadUserId
+    })
+
+    if ('error' in result) {
+      errors.push(result.error)
+    } else {
+      items.push(result.item)
+    }
+  }
+
+  const response: FileUploadResponse = {
+    success: items.length > 0,
+    items,
+    errors,
+    accessMode: getFileBedAccessMode()
+  }
+
+  if (!items.length && errors.length) {
+    setResponseStatus(event, 400)
+  }
+
+  return response
+})