ai问片增加权限开关

src/app/api/admin/ai/route.ts

@@ -57,6 +57,7 @@ export async function POST(request: NextRequest) {
       EnableHomepageEntry,
       EnableVideoCardEntry,
       EnablePlayPageEntry,
+      AllowRegularUsers,
       Temperature,
       MaxTokens,
       SystemPrompt,
@@ -89,6 +90,7 @@ export async function POST(request: NextRequest) {
       EnableHomepageEntry: boolean;
       EnableVideoCardEntry: boolean;
       EnablePlayPageEntry: boolean;
+      AllowRegularUsers: boolean;
       Temperature?: number;
       MaxTokens?: number;
       SystemPrompt?: string;
@@ -124,6 +126,7 @@ export async function POST(request: NextRequest) {
       typeof EnableHomepageEntry !== 'boolean' ||
       typeof EnableVideoCardEntry !== 'boolean' ||
       typeof EnablePlayPageEntry !== 'boolean' ||
+      typeof AllowRegularUsers !== 'boolean' ||
       (Temperature !== undefined && typeof Temperature !== 'number') ||
       (MaxTokens !== undefined && typeof MaxTokens !== 'number') ||
       (SystemPrompt !== undefined && typeof SystemPrompt !== 'string')
@@ -171,6 +174,7 @@ export async function POST(request: NextRequest) {
       EnableHomepageEntry,
       EnableVideoCardEntry,
       EnablePlayPageEntry,
+      AllowRegularUsers,
       Temperature,
       MaxTokens,
       SystemPrompt,

src/app/api/ai/chat/route.ts

@@ -8,6 +8,7 @@ import {
   VideoContext,
 } from '@/lib/ai-orchestrator';
 import { getConfig } from '@/lib/config';
+import { db } from '@/lib/db';
 
 export const runtime = 'nodejs';
 
@@ -72,9 +73,6 @@ async function streamClaudeChat(
     maxTokens: number;
   }
 ): Promise<ReadableStream> {
-  // Claude API格式: 移除system消息,单独传递
-  const userMessages = messages.filter((m) => m.role !== 'system');
-
   const response = await fetch('https://api.anthropic.com/v1/messages', {
     method: 'POST',
     headers: {
@@ -87,7 +85,7 @@ async function streamClaudeChat(
       max_tokens: config.maxTokens,
       temperature: config.temperature,
       system: systemPrompt,
-      messages: userMessages,
+      messages: messages,
       stream: true,
     }),
   });
@@ -187,7 +185,23 @@ export async function POST(request: NextRequest) {
       );
     }
 
-    // 3. 解析请求参数
+    // 3. 权限检查：如果不允许普通用户使用，检查用户角色
+    if (!aiConfig.AllowRegularUsers) {
+      const username = authInfo.username;
+      // 站长始终有权限
+      if (username !== process.env.USERNAME) {
+        // 检查是否为管理员
+        const userInfo = await db.getUserInfoV2(username);
+        if (!userInfo || (userInfo.role !== 'admin' && userInfo.role !== 'owner') || userInfo.banned) {
+          return NextResponse.json(
+            { error: '该功能仅限站长和管理员使用' },
+            { status: 403 }
+          );
+        }
+      }
+    }
+
+    // 4. 解析请求参数
     const body = (await request.json()) as ChatRequest;
     const { message, context, history = [] } = body;
 
@@ -214,11 +228,11 @@ export async function POST(request: NextRequest) {
         tavilyApiKey: aiConfig.TavilyApiKey,
         serperApiKey: aiConfig.SerperApiKey,
         serpApiKey: aiConfig.SerpApiKey,
-        // 决策模型配置（固定使用自定义provider）
+        // 决策模型配置（固定使用自定义provider，复用主模型的API配置）
         enableDecisionModel: aiConfig.EnableDecisionModel,
         decisionProvider: 'custom',
-        decisionApiKey: aiConfig.DecisionCustomApiKey,
-        decisionBaseURL: aiConfig.DecisionCustomBaseURL,
+        decisionApiKey: aiConfig.CustomApiKey,
+        decisionBaseURL: aiConfig.CustomBaseURL,
         decisionModel: aiConfig.DecisionCustomModel,
       }
     );

src/app/api/openlist/correct/route.ts

@@ -114,7 +114,6 @@ export async function POST(request: NextRequest) {
     metaInfo.folders[key] = {
       folderName: folderName,
       tmdb_id: tmdbId || null,
-      douban_id: doubanId || null,
       title: title,
       poster_path: posterPath,
       release_date: releaseDate || '',

src/app/api/openlist/list/route.ts

@@ -130,7 +130,6 @@ export async function GET(request: NextRequest) {
             id: key,
             folder: info.folderName,
             tmdbId: info.tmdb_id,
-            doubanId: info.douban_id,
             title: info.title,
             poster: getTMDBImageUrl(info.poster_path),
             releaseDate: info.release_date,