feat: 新增视频床与文件床，视频支持 HLS 转码

文件床
- 新增 files/ 存储前缀与 media_type 索引列，图片、视频、文件三类资源独立
- 新增文件上传、列表、删除、批量删除接口，禁止 html/htm/svg
- 支持公开直链与 Token 访问两种模式，后台可切换，直链强制附件下载

视频床
- 新增 videos/ 存储前缀与视频上传接口，单文件上限 500MB
- 接入 ffmpeg 转码队列，并发数与单任务核心数可配，默认串行
- 五档转码质量：直接封装 / 速度 / 平衡 / 质量 / 压缩（压缩档可调码率比例）
- 码率控制避免转码后体积反超源文件，音频跟随源音轨不放大不压缩
- 转码进度实时上报，成功后删除源文件，失败时保留源文件与可用链接
- 上传时自动抽帧生成封面，视频与封面各有独立链接
- 删除视频时中断转码并清理切片、封面与源文件

媒体库
- 图库、视频库、文件库三套独立统计，含趋势、占用与来源分布
- 统一筛选、多选、批量删除、批量标签、网格/列表切换，显示方式按类型分别记忆
- 视频详情对齐图片详情，视频库支持在线播放（hls.js，兼容回退原文件）

修复
- 清理无主的切片、封面与开发期遗留的 ffmpeg 进程
- 源文件按设计删除后，索引不再被启动孤儿清理误删
- 视频统计口径与列表一致，转码中的视频不计入统计
- 转码失败时回收已写入的部分切片，避免残留
- 设置页停用检查更新（与上游版本号已不对应）

其他
- Docker 镜像安装 ffmpeg
- git remote 指向内网仓库

server/api/videos/transcode-settings.get.ts

@@ -0,0 +1,22 @@
+import { requireUserAuth } from '../../utils/access'
+import {
+  getTranscodeSettings,
+  MAX_TRANSCODE_CONCURRENCY,
+  MAX_TRANSCODE_THREADS,
+  MAX_TRANSCODE_BITRATE_PERCENT,
+  MIN_TRANSCODE_BITRATE_PERCENT,
+  TRANSCODE_PRESETS
+} from '../../utils/transcode'
+
+export default defineEventHandler(async (event) => {
+  await requireUserAuth(event)
+
+  return {
+    ...getTranscodeSettings(),
+    maxConcurrency: MAX_TRANSCODE_CONCURRENCY,
+    maxThreads: MAX_TRANSCODE_THREADS,
+    minBitratePercent: MIN_TRANSCODE_BITRATE_PERCENT,
+    maxBitratePercent: MAX_TRANSCODE_BITRATE_PERCENT,
+    presets: TRANSCODE_PRESETS
+  }
+})

server/api/videos/transcode-settings.patch.ts

@@ -0,0 +1,80 @@
+import { requireAdminAuth } from '../../utils/access'
+import { createApiError } from '../../utils/api-error'
+import {
+  MAX_TRANSCODE_CONCURRENCY,
+  MAX_TRANSCODE_THREADS,
+  MAX_TRANSCODE_BITRATE_PERCENT,
+  MIN_TRANSCODE_BITRATE_PERCENT,
+  parseTranscodePreset,
+  setTranscodeSettings
+} from '../../utils/transcode'
+
+interface TranscodeSettingsPatch {
+  concurrency?: unknown
+  threads?: unknown
+  preset?: unknown
+  bitratePercent?: unknown
+}
+
+export default defineEventHandler(async (event) => {
+  await requireAdminAuth(event)
+
+  const body = await readBody<TranscodeSettingsPatch>(event).catch(
+    (): TranscodeSettingsPatch => ({})
+  )
+
+  const full: Parameters<typeof setTranscodeSettings>[0] = {}
+
+  if (body.concurrency !== undefined) {
+    const value = Number(body.concurrency)
+    if (!Number.isInteger(value) || value < 1 || value > MAX_TRANSCODE_CONCURRENCY) {
+      createApiError(
+        event,
+        'INVALID_REQUEST',
+        `并发转码数量需为 1–${MAX_TRANSCODE_CONCURRENCY} 的整数`,
+        400
+      )
+    }
+    full.concurrency = value
+  }
+
+  if (body.threads !== undefined) {
+    const value = Number(body.threads)
+    if (!Number.isInteger(value) || value < 1 || value > MAX_TRANSCODE_THREADS) {
+      createApiError(
+        event,
+        'INVALID_REQUEST',
+        `限制核心数需为 1–${MAX_TRANSCODE_THREADS} 的整数`,
+        400
+      )
+    }
+    full.threads = value
+  }
+
+  if (body.preset !== undefined) {
+    const preset = parseTranscodePreset(String(body.preset))
+    if (!preset) {
+      createApiError(event, 'INVALID_REQUEST', '无效的转码质量档位', 400)
+    }
+    full.preset = preset
+  }
+
+  if (body.bitratePercent !== undefined) {
+    const value = Number(body.bitratePercent)
+    if (
+      !Number.isInteger(value)
+      || value < MIN_TRANSCODE_BITRATE_PERCENT
+      || value > MAX_TRANSCODE_BITRATE_PERCENT
+    ) {
+      createApiError(
+        event,
+        'INVALID_REQUEST',
+        `码率需为 ${MIN_TRANSCODE_BITRATE_PERCENT}–${MAX_TRANSCODE_BITRATE_PERCENT} 的整数`,
+        400
+      )
+    }
+    full.bitratePercent = value
+  }
+
+  return setTranscodeSettings(full)
+})

server/api/videos/upload.post.ts

@@ -0,0 +1,94 @@
+import { readMultipartFormData } from 'h3'
+import type { FileItem, FileUploadResponse } from '~/types/file'
+import type { UploadErrorItem } from '~/types/image'
+import {
+  getUploadUserId,
+  requireUploadAuth,
+  verifyApiUploadToken
+} from '../../utils/access'
+import { MAX_FILES_PER_UPLOAD } from '../../utils/constants'
+import { createApiError } from '../../utils/api-error'
+import { checkUploadRateLimit } from '../../utils/rate-limit'
+import { processSingleVideoUpload } from '../../utils/file-bed'
+import { enqueueTranscode } from '../../utils/transcode'
+import { getFileBedAccessMode } from '../../utils/env'
+
+export default defineEventHandler(async (event) => {
+  await requireUploadAuth(event)
+
+  const formData = await readMultipartFormData(event)
+  if (!formData?.length) {
+    createApiError(event, 'INVALID_REQUEST', '未收到上传文件', 400)
+  }
+
+  const tokenField = formData.find(part => part.name === 'token')
+  const formToken = tokenField?.data?.length
+    ? new TextDecoder().decode(tokenField.data).trim()
+    : ''
+  checkUploadRateLimit(event, formToken)
+
+  const source = verifyApiUploadToken(event) ? 'api' : 'web'
+  const uploadUserId = await getUploadUserId(event, formToken)
+
+  const transcodeField = formData.find(part => part.name === 'transcode')
+  const wantTranscode = transcodeField?.data?.length
+    ? ['1', 'true', 'yes'].includes(
+        new TextDecoder().decode(transcodeField.data).trim().toLowerCase()
+      )
+    : false
+
+  const fileParts = formData.filter(
+    part => (part.name === 'file' || part.name === 'files' || part.name === 'video')
+      && part.data?.length
+  )
+  if (!fileParts.length) {
+    createApiError(event, 'INVALID_REQUEST', '未收到上传文件', 400)
+  }
+
+  if (fileParts.length > MAX_FILES_PER_UPLOAD) {
+    createApiError(
+      event,
+      'TOO_MANY_FILES',
+      `每次最多上传 ${MAX_FILES_PER_UPLOAD} 个视频`,
+      400
+    )
+  }
+
+  const items: FileItem[] = []
+  const errors: UploadErrorItem[] = []
+
+  for (const part of fileParts) {
+    const result = await processSingleVideoUpload(event, {
+      bytes: new Uint8Array(part.data),
+      filename: part.filename,
+      contentType: part.type,
+      source,
+      userId: uploadUserId
+    })
+
+    if ('error' in result) {
+      errors.push(result.error)
+    } else {
+      items.push(result.item)
+    }
+  }
+
+  const response: FileUploadResponse = {
+    success: items.length > 0,
+    items,
+    errors,
+    accessMode: getFileBedAccessMode()
+  }
+
+  if (wantTranscode) {
+    for (const item of items) {
+      enqueueTranscode(item.key)
+    }
+  }
+
+  if (!items.length && errors.length) {
+    setResponseStatus(event, 400)
+  }
+
+  return response
+})