扫码登录成功，请返回电脑继续操作。
`); } setUserLoginCookies(res, req, result.token); return res.redirect(302, result.returnTo || '/'); } catch (err) { console.error('WeChat callback failed:', err); const message = encodeURIComponent(err instanceof Error ? err.message : '微信登录失败'); return res.redirect(302, `/?wechat_error=${message}`); } }); app.get('/auth/me', async (req, res) => { await userAuthReady; if (!userAuth) return res.status(503).json({ message: '未启用用户系统' }); const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const [paths, capabilityState, subscription, skillRuntime] = await Promise.all([ userAuth.listPathGrants(me.id), userAuth.resolveUserCapabilities(await userAuth.getUserById(me.id)), subscriptionService ? subscriptionService.getActiveSubscription(me.id) : null, resolveSkillRuntimeForClient(), ]); return res.json({ user: { ...me, subscription }, paths, capabilities: capabilityState.capabilities, grantedSkills: capabilityState.grantedSkills ?? [], unrestricted: capabilityState.unrestricted, skillRuntime, }); }); app.post('/auth/logout', async (req, res) => { await userAuthReady; if (userAuth) { await userAuth.revoke(userToken(req)); } if (legacyAuth) { legacyAuth.revoke(legacySessionToken(req)); } if (userAuth || legacyAuth) { clearUserLoginCookies(res, req); } res.status(204).end(); }); app.get('/auth/usage', async (req, res) => { await userAuthReady; if (!userAuth) return res.status(503).json({ message: '未启用用户系统' }); const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const records = await userAuth.listUsageRecords({ userId: me.id, limit: 30 }); res.json({ records }); }); app.post('/auth/feedback', jsonBody, async (req, res) => { await userAuthReady; if (!userAuth || !feedbackService) { return res.status(503).json({ message: '反馈服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); try { const result = await feedbackService.submit(me.id, { type: req.body?.type, title: req.body?.title, description: req.body?.description, contact: req.body?.contact, images: req.body?.images, context: req.body?.context, }); res.status(201).json({ feedback: result }); } catch (err) { const code = err && typeof err === 'object' && 'code' in err ? String(err.code) : ''; if (code === 'invalid_input') { return res.status(400).json({ message: err instanceof Error ? err.message : '提交内容无效' }); } console.warn('Submit feedback failed:', err instanceof Error ? err.message : err); return res.status(500).json({ message: '反馈提交失败，请稍后重试' }); } }); app.get('/auth/feedback', async (req, res) => { await userAuthReady; if (!userAuth || !feedbackService) { return res.status(503).json({ message: '反馈服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const limit = Math.min(Math.max(Number(req.query?.limit) || 20, 1), 50); const items = await feedbackService.listForUser(me.id, { limit }); res.json({ items }); }); app.get('/auth/feedback/board', async (req, res) => { await userAuthReady; if (!userAuth || !feedbackService) { return res.status(503).json({ message: '反馈服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const page = Math.max(Number(req.query?.page) || 1, 1); const limit = Math.min(Math.max(Number(req.query?.limit) || 10, 1), 10); try { const result = await feedbackService.listAll({ page, limit }); res.json(result); } catch (err) { console.warn('List feedback board failed:', err instanceof Error ? err.message : err); return res.status(500).json({ message: '反馈列表加载失败' }); } }); app.get('/auth/feedback/:feedbackId', async (req, res) => { await userAuthReady; if (!userAuth || !feedbackService) { return res.status(503).json({ message: '反馈服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); try { const item = await feedbackService.getById(req.params.feedbackId, me.id); res.json({ item, isMine: item.userId === me.id }); } catch (err) { const code = err && typeof err === 'object' && 'code' in err ? String(err.code) : ''; if (code === 'feedback_not_found') { return res.status(404).json({ message: err instanceof Error ? err.message : '反馈不存在' }); } console.warn('Get feedback detail failed:', err instanceof Error ? err.message : err); return res.status(500).json({ message: '反馈详情加载失败' }); } }); app.get('/auth/notifications', async (req, res) => { await userAuthReady; if (!userAuth || !scheduleService) { return res.status(503).json({ message: '通知服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const rawStatus = typeof req.query?.status === 'string' ? req.query.status : 'unread'; const status = ['all', 'unread', 'read'].includes(rawStatus) ? rawStatus : 'all'; const limit = Math.min(Math.max(Number(req.query?.limit) || 20, 1), 100); try { const notifications = await scheduleService.listUserNotifications({ userId: me.id, status, limit }); res.json({ notifications }); } catch (err) { console.warn('List user notifications failed:', err instanceof Error ? err.message : err); res.status(500).json({ message: '通知列表加载失败' }); } }); app.get('/auth/notifications/events', async (req, res) => { await userAuthReady; if (!userAuth || !scheduleService) { return res.status(503).json({ message: '通知服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); res.status(200); res.setHeader('Content-Type', 'text/event-stream; charset=utf-8'); res.setHeader('Cache-Control', 'no-cache, no-transform'); res.setHeader('Connection', 'keep-alive'); res.flushHeaders?.(); let closed = false; let lastNotificationId = null; const sendEvent = (event, data) => { if (closed || res.destroyed) return; res.write(`event: ${event}\n`); res.write(`data: ${JSON.stringify(data)}\n\n`); }; const checkUnread = async () => { if (closed) return; try { const notifications = await scheduleService.listUserNotifications({ userId: me.id, status: 'unread', limit: 1, }); const latest = notifications[0] ?? null; const nextId = latest?.id ?? null; if (nextId && nextId !== lastNotificationId) { lastNotificationId = nextId; sendEvent('notification', { notification: latest }); } else if (!nextId) { lastNotificationId = null; } } catch { sendEvent('sync', { reason: 'check_failed' }); } }; sendEvent('ready', { ok: true }); await checkUnread(); const checkTimer = setInterval(() => { void checkUnread(); }, 2500); const keepaliveTimer = setInterval(() => { sendEvent('ping', { at: Date.now() }); }, 25000); req.on('close', () => { closed = true; clearInterval(checkTimer); clearInterval(keepaliveTimer); }); }); app.post('/auth/notifications/:id/read', async (req, res) => { await userAuthReady; if (!userAuth || !scheduleService) { return res.status(503).json({ message: '通知服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const ok = await scheduleService.markUserNotificationRead({ userId: me.id, notificationId: req.params.id, }); if (!ok) return res.status(404).json({ message: '通知不存在或已读' }); res.json({ ok: true }); }); app.post('/auth/notifications/read-all', async (req, res) => { await userAuthReady; if (!userAuth || !scheduleService) { return res.status(503).json({ message: '通知服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const updated = await scheduleService.markAllUserNotificationsRead({ userId: me.id }); res.json({ ok: true, updated }); }); app.delete('/auth/notifications/:id', async (req, res) => { await userAuthReady; if (!userAuth || !scheduleService) { return res.status(503).json({ message: '通知服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const ok = await scheduleService.deleteUserNotification({ userId: me.id, notificationId: req.params.id, }); if (!ok) return res.status(404).json({ message: '通知不存在' }); res.status(204).end(); }); app.delete('/auth/notifications', async (req, res) => { await userAuthReady; if (!userAuth || !scheduleService) { return res.status(503).json({ message: '通知服务未启用' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const status = typeof req.query?.status === 'string' ? req.query.status : 'all'; const deleted = await scheduleService.clearUserNotifications({ userId: me.id, status }); res.json({ ok: true, deleted }); }); app.get('/auth/billing/ledger', async (req, res) => { await userAuthReady; if (!userAuth) return res.status(503).json({ message: '未启用用户系统' }); const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const limit = Math.min(Math.max(Number(req.query?.limit) || 30, 1), 100); const entries = await userAuth.listBillingLedger({ userId: me.id, limit, types: ['recharge', 'adjust', 'refund'], }); res.json({ entries }); }); app.get('/auth/billing/config', async (req, res) => { await userAuthReady; if (!userAuth || !rechargeService) { return res.status(503).json({ message: '未启用计费系统' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const [config, sub] = await Promise.all([ rechargeService.getBillingConfig(me.id), subscriptionService ? subscriptionService.getActiveSubscription(me.id) : null, ]); return res.json({ ...config, subscription: sub }); }); app.get('/auth/billing/subscription', async (req, res) => { await userAuthReady; if (!userAuth) return res.status(503).json({ message: '未启用用户系统' }); const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const sub = subscriptionService ? await subscriptionService.getActiveSubscription(me.id) : null; const planCatalog = subscriptionService?._planCatalogService; const plans = (!sub && planCatalog) ? await planCatalog.listPlans({ includeInactive: false }) : sub ? undefined : PLAN_CATALOG; return res.json({ subscription: sub, plans }); }); app.get('/auth/billing/plans', async (req, res) => { await userAuthReady; if (!userAuth) return res.status(503).json({ message: '未启用用户系统' }); const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const planCatalog = subscriptionService?._planCatalogService; const plans = planCatalog ? (await planCatalog.listPlans({ includeInactive: false })) .filter((p) => p.priceCents > 0) .map((p) => ({ key: p.planType, ...p })) : Object.entries(PLAN_CATALOG) .filter(([, plan]) => plan.priceCents > 0) .map(([key, plan]) => ({ key, ...plan })); const [sub, wallet] = await Promise.all([ subscriptionService ? subscriptionService.getActiveSubscription(me.id) : null, userAuth.getUserById(me.id), ]); return res.json({ plans, subscription: sub, balanceCents: wallet ? Number(wallet.balance_cents ?? 0) : 0, }); }); app.post('/auth/billing/subscribe', jsonBody, async (req, res) => { await userAuthReady; if (!userAuth || !subscriptionService) { return res.status(503).json({ message: '未启用订阅系统' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); if (me.status === 'disabled') return res.status(403).json({ message: '账户已禁用' }); const { planType, autoRenew = false } = req.body ?? {}; if (!planType || typeof planType !== 'string') { return res.status(400).json({ message: '请选择套餐' }); } const result = await subscriptionService.purchaseSubscription(me.id, planType, Boolean(autoRenew)); if (!result.ok) { if (result.code === 'INSUFFICIENT_BALANCE') { return res.status(402).json({ message: result.message, code: result.code, balanceCents: result.balanceCents, requiredCents: result.requiredCents, shortfallCents: result.shortfallCents, }); } if (result.code === 'DOWNGRADE_NOT_ALLOWED') { return res.status(409).json({ message: result.message, code: result.code, currentPlanType: result.currentPlanType, }); } return res.status(400).json({ message: result.message }); } return res.json({ subscription: result.subscription, balanceCents: result.balanceCents }); }); app.post('/auth/billing/space-purchase', jsonBody, async (req, res) => { await userAuthReady; if (!userAuth || !mindSpace) { return res.status(503).json({ message: '未启用空间系统' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const sizeMb = Number(req.body?.sizeMb); const result = await userAuth.purchaseSpaceQuota(me.id, sizeMb); if (!result.ok) { if (result.code === 'INSUFFICIENT_BALANCE') { return res.status(402).json({ message: result.message, code: result.code, details: { code: 'INSUFFICIENT_BALANCE', balanceCents: result.balanceCents, minRechargeCents: result.minRechargeCents, suggestedTiers: result.suggestedTiers, }, }); } return res.status(400).json({ message: result.message }); } const quota = await mindSpace.getQuota(me.id); return res.json({ quota: quota ?? result.quota, balanceCents: result.balanceCents, purchasedMb: sizeMb, costCents: sizeMb * 200, }); }); app.post('/auth/billing/auto-renew', jsonBody, async (req, res) => { await userAuthReady; if (!userAuth || !subscriptionService) { return res.status(503).json({ message: '未启用订阅系统' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const { enabled } = req.body ?? {}; if (typeof enabled !== 'boolean') { return res.status(400).json({ message: '请传入 enabled: true/false' }); } const result = await subscriptionService.setAutoRenew(me.id, enabled); return res.json(result); }); app.post('/auth/billing/recharge-orders', jsonBody, async (req, res) => { await userAuthReady; if (!userAuth || !rechargeService) { return res.status(503).json({ message: '未启用计费系统' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const amountCents = Number(req.body?.amountCents); const payScene = ['native', 'h5', 'jsapi'].includes(req.body?.payScene) ? req.body.payScene : 'native'; const result = await rechargeService.createOrder({ userId: me.id, amountCents, payScene, clientIp: req.ip, }); if (!result.ok) return res.status(400).json({ message: result.message }); return res.status(201).json({ order: result.order }); }); app.get('/auth/billing/recharge-orders/:orderId', async (req, res) => { await userAuthReady; if (!userAuth || !rechargeService) { return res.status(503).json({ message: '未启用计费系统' }); } const me = await userAuth.getMe(userToken(req)); if (!me) return res.status(401).json({ message: '未登录' }); const order = await rechargeService.getOrderForUser(me.id, req.params.orderId); if (!order) return res.status(404).json({ message: '订单不存在' }); let balanceCents = null; if (order.status === 'paid') { const user = await userAuth.getUserById(me.id); balanceCents = user ? Number(user.balance_cents ?? 0) : null; } return res.json({ order, balanceCents }); }); const wechatNotifyBody = express.raw({ type: ['application/json', 'text/xml', 'application/xml'], limit: '64kb', }); const wechatMpBody = express.text({ type: ['text/xml', 'application/xml'], limit: '128kb', }); app.post('/webhooks/wechat-pay/notify', wechatNotifyBody, async (req, res) => { await userAuthReady; const isV2 = wechatPayClient?.apiVersion === 'v2'; if (!rechargeService || !wechatPayClient?.enabled) { if (isV2) { return res .status(503) .type('text/xml') .send( '${escapePublicHtml(page.summary || '暂无摘要')}
MindSpace Public
这里展示 ${escapePublicHtml(data.owner.displayName)} 当前公开发布且在线的 MindSpace 页面。