chore: 初始提交 - 移除所有硬编码凭据，统一从环境变量读取

2026-06-11 17:10:58 +08:00
commit c223c79b36
1699 changed files with 313940 additions and 0 deletions
@@ -0,0 +1,297 @@
+(() => {
+  const API_BASE = '/api/language_behavior_lock'
+  const DEFAULT_USERNAME = 'admin'
+  const $ = id => document.getElementById(id)
+  const now = () => Date.now()
+  const genId = () => `${Date.now()}_${Math.random().toString(36).slice(2, 8)}`
+
+  const state = {
+    auth: { currentUser: '' },
+    db: { records: [], keywords: [] }
+  }
+
+  const defaultKeywords = () => ([
+    { id: genId(), text: '你怎么这么', type: 'speech', level: 'high', extraMinutes: 20, tip: '你触发了高风险表达，建议延长冷静期。', enabled: true, createdAt: now() },
+    { id: genId(), text: '早就说了', type: 'speech', level: 'medium', extraMinutes: 15, tip: '这类表达容易升级冲突，建议继续冷静。', enabled: true, createdAt: now() },
+    { id: genId(), text: '你一直都', type: 'speech', level: 'high', extraMinutes: 20, tip: '绝对化表达风险较高，建议先改写再决定。', enabled: true, createdAt: now() },
+    { id: genId(), text: '拿回家', type: 'behavior', level: 'high', extraMinutes: 25, tip: '涉及边界风险行为，建议延长冷静并复核后果。', enabled: true, createdAt: now() }
+  ])
+
+  const normalizeKeyword = row => {
+    const levelRaw = String(row && row.level || 'medium')
+    const level = ['low', 'medium', 'high'].includes(levelRaw) ? levelRaw : 'medium'
+    const typeRaw = String(row && row.type || 'all')
+    const type = ['all', 'speech', 'behavior', 'securities'].includes(typeRaw) ? typeRaw : 'all'
+    return {
+      id: String(row && row.id || genId()),
+      text: String(row && row.text || '').trim(),
+      type,
+      level,
+      extraMinutes: Math.max(0, Number(row && row.extraMinutes) || 0),
+      tip: String(row && row.tip || '').trim(),
+      enabled: row && row.enabled !== false,
+      createdAt: Number(row && row.createdAt) || now()
+    }
+  }
+
+  const normalizeDB = raw => {
+    const db = raw && typeof raw === 'object' ? raw : {}
+    const records = Array.isArray(db.records) ? db.records : []
+    const keywordsRaw = Array.isArray(db.keywords) ? db.keywords : []
+    const keywords = keywordsRaw.map(normalizeKeyword).filter(k => k.text)
+    return {
+      records,
+      keywords: keywords.length ? keywords : defaultKeywords()
+    }
+  }
+
+  const setAuthStatus = text => {
+    $('auth-status').textContent = text || ''
+  }
+
+  const setFormStatus = text => {
+    $('form-status').textContent = text || ''
+  }
+
+  const openModal = ({ title, message, okText = '知道了', cancelText = '', tone = 'normal' }) => {
+    return new Promise(resolve => {
+      const mask = $('app-modal')
+      const titleBox = $('modal-title')
+      const msgBox = $('modal-message')
+      const actions = $('modal-actions')
+      actions.innerHTML = ''
+      titleBox.textContent = title || ''
+      msgBox.textContent = message || ''
+      const close = val => {
+        mask.style.display = 'none'
+        resolve(val)
+      }
+      if (cancelText) {
+        const cancelBtn = document.createElement('button')
+        cancelBtn.className = 'btn'
+        cancelBtn.type = 'button'
+        cancelBtn.textContent = cancelText
+        cancelBtn.addEventListener('click', () => close(false))
+        actions.appendChild(cancelBtn)
+      }
+      const okBtn = document.createElement('button')
+      okBtn.className = tone === 'primary' ? 'btn btn-primary' : 'btn'
+      okBtn.type = 'button'
+      okBtn.textContent = okText
+      okBtn.addEventListener('click', () => close(true))
+      actions.appendChild(okBtn)
+      mask.style.display = ''
+    })
+  }
+
+  const modalAlert = (title, message) => openModal({ title, message, okText: '我知道了' })
+  const modalConfirm = (title, message, okText = '继续', cancelText = '取消') => openModal({ title, message, okText, cancelText, tone: 'primary' })
+
+  const apiRequest = async (path, options = {}) => {
+    const res = await fetch(`${API_BASE}${path}`, {
+      method: options.method || 'GET',
+      headers: {
+        'Content-Type': 'application/json',
+        ...(options.headers || {})
+      },
+      body: options.body === undefined ? undefined : JSON.stringify(options.body),
+      credentials: 'include'
+    })
+    let payload = null
+    try {
+      payload = await res.json()
+    } catch {
+      payload = null
+    }
+    if (!res.ok) {
+      const msg = payload && payload.error ? String(payload.error) : `http_${res.status}`
+      throw new Error(msg)
+    }
+    return payload || {}
+  }
+
+  const loadDB = async () => {
+    const payload = await apiRequest('/data')
+    state.db = normalizeDB(payload.db)
+  }
+
+  const saveDB = async () => {
+    await apiRequest('/data', { method: 'PUT', body: { db: state.db, draft: null } })
+  }
+
+  const levelText = level => ({ low: '低风险', medium: '中风险', high: '高风险' })[level] || '中风险'
+
+  const renderAuth = () => {
+    const user = state.auth.currentUser
+    $('auth-login-box').style.display = user ? 'none' : ''
+    $('auth-logged-box').style.display = user ? '' : 'none'
+    $('app-content').style.display = user ? '' : 'none'
+    $('auth-current-user').textContent = user ? `当前账号：${user}` : ''
+  }
+
+  const renderKeywordRules = () => {
+    const box = $('keyword-list')
+    box.innerHTML = ''
+    if (!state.db.keywords.length) {
+      box.textContent = '暂无关键词规则'
+      return
+    }
+    state.db.keywords.slice().sort((a, b) => b.createdAt - a.createdAt).forEach(rule => {
+      const row = document.createElement('div')
+      row.className = 'row'
+      const typeLabel = rule.type === 'speech' ? '发言' : rule.type === 'behavior' ? '行为' : rule.type === 'securities' ? '证券' : '全部'
+      row.innerHTML = `
+        <div><strong>${rule.text}</strong> <span class="tag ${rule.level}">${levelText(rule.level)}</span></div>
+        <div class="meta">适用：${typeLabel} ｜ 建议加时：${rule.extraMinutes} 分钟 ｜ 状态：${rule.enabled ? '启用' : '停用'}</div>
+        <div class="meta">${rule.tip || ''}</div>
+        <div class="actions">
+          <button class="btn" data-act="toggle-rule" data-id="${rule.id}" type="button">${rule.enabled ? '停用' : '启用'}</button>
+          <button class="btn" data-act="delete-rule" data-id="${rule.id}" type="button">删除</button>
+        </div>
+      `
+      box.appendChild(row)
+    })
+  }
+
+  const renderAll = () => {
+    renderAuth()
+    renderKeywordRules()
+  }
+
+  const bindKeywordAdd = () => {
+    $('btn-keyword-add').addEventListener('click', async () => {
+      if (!state.auth.currentUser) {
+        await modalAlert('请先登录', '请先输入账号和密码登录后再操作。')
+        return
+      }
+      const text = $('kw-text').value.trim()
+      if (!text) {
+        await modalAlert('无法新增', '请先输入关键词')
+        return
+      }
+      const exists = state.db.keywords.some(k => k.text.toLowerCase() === text.toLowerCase())
+      if (exists) {
+        await modalAlert('无法新增', '该关键词已存在')
+        return
+      }
+      const rule = normalizeKeyword({
+        id: genId(),
+        text,
+        type: $('kw-type').value || 'all',
+        level: $('kw-level').value || 'medium',
+        extraMinutes: Number($('kw-extra-minutes').value || 0),
+        tip: $('kw-tip').value.trim(),
+        enabled: true,
+        createdAt: now()
+      })
+      state.db.keywords.unshift(rule)
+      await saveDB()
+      $('kw-text').value = ''
+      $('kw-tip').value = ''
+      renderKeywordRules()
+      setFormStatus('关键词规则已新增')
+      await modalAlert('规则已新增', `关键词“${rule.text}”已启用，后续命中会自动提醒。`)
+    })
+  }
+
+  const bindActions = () => {
+    document.addEventListener('click', async e => {
+      const btn = e.target.closest('button[data-act]')
+      if (!btn) return
+      if (!state.auth.currentUser) {
+        await modalAlert('请先登录', '请先输入账号和密码登录后再操作。')
+        return
+      }
+      const id = btn.getAttribute('data-id')
+      const act = btn.getAttribute('data-act')
+      if (!id || !act) return
+      if (act === 'toggle-rule') {
+        const idx = state.db.keywords.findIndex(k => k.id === id)
+        if (idx < 0) return
+        state.db.keywords[idx].enabled = !state.db.keywords[idx].enabled
+        await saveDB()
+        renderKeywordRules()
+        setFormStatus(`关键词已${state.db.keywords[idx].enabled ? '启用' : '停用'}`)
+        await modalAlert('状态已更新', `关键词已${state.db.keywords[idx].enabled ? '启用' : '停用'}。`)
+        return
+      }
+      if (act === 'delete-rule') {
+        const rule = state.db.keywords.find(k => k.id === id)
+        if (!rule) return
+        const ok = await modalConfirm('确认删除', `确认删除关键词“${rule.text}”吗？`, '确认删除', '取消')
+        if (!ok) return
+        state.db.keywords = state.db.keywords.filter(k => k.id !== id)
+        await saveDB()
+        renderKeywordRules()
+        setFormStatus('关键词已删除')
+        await modalAlert('删除成功', `关键词“${rule.text}”已删除。`)
+      }
+    })
+  }
+
+  const bindAuth = () => {
+    const tryLogin = async () => {
+      const username = String($('login-username').value || '').trim()
+      const password = String($('login-password').value || '')
+      if (!username || !password) {
+        setAuthStatus('请输入账号和密码')
+        return
+      }
+      try {
+        await apiRequest('/auth/login', { method: 'POST', body: { username, password } })
+      } catch {
+        setAuthStatus('账号或密码不正确，请重试')
+        await modalAlert('登录失败', '账号或密码不正确，请重新输入。')
+        return
+      }
+      state.auth.currentUser = username
+      $('login-password').value = ''
+      await loadDB()
+      renderAll()
+      setAuthStatus(`登录成功，欢迎你：${username}`)
+      setFormStatus('可以开始维护关键词规则')
+    }
+
+    $('btn-login').addEventListener('click', tryLogin)
+    $('login-password').addEventListener('keydown', async e => {
+      if (e.key !== 'Enter') return
+      e.preventDefault()
+      await tryLogin()
+    })
+    $('btn-logout').addEventListener('click', async () => {
+      try { await apiRequest('/auth/logout', { method: 'POST' }) } catch {}
+      state.auth.currentUser = ''
+      state.db = { records: [], keywords: defaultKeywords() }
+      setFormStatus('')
+      setAuthStatus('已退出登录')
+      renderAll()
+    })
+  }
+
+  const bindNav = () => {
+    $('btn-back-main').addEventListener('click', () => {
+      window.location.href = '/tools/language_behavior_lock/index.html'
+    })
+  }
+
+  const init = async () => {
+    bindAuth()
+    bindKeywordAdd()
+    bindActions()
+    bindNav()
+    try {
+      const me = await apiRequest('/auth/me')
+      state.auth.currentUser = String(me.username || DEFAULT_USERNAME)
+      await loadDB()
+      setAuthStatus(`已登录：${state.auth.currentUser}`)
+      setFormStatus('可以开始维护关键词规则')
+    } catch {
+      state.auth.currentUser = ''
+      state.db = { records: [], keywords: defaultKeywords() }
+      setAuthStatus('请先登录')
+    }
+    renderAll()
+  }
+
+  init()
+})()