const API = require("../../lib/API") const db = require("../../plugin/DataBase/db") const AccessControl = require("../../lib/AccessControl") const { BaseStdResponse } = require("../../BaseStdResponse") const EmailTemplate = require("../../plugin/Email/emailTemplate") const { insertLedgerRecord } = require("../../lib/Lepao/CountLedger") class SendCount extends API { constructor() { super() this.setPath("/Goods/SendCount") this.setMethod("POST") } async onRequest(req, res) { let { uuid, session, username, count } = req.body username = typeof username === "string" ? username.trim() : username count = Number(count) if ([uuid, session, username, count].some(v => v == null || v === "" || Number.isNaN(count))) return res.json({ ...BaseStdResponse.MISSING_PARAMETER }) if (!Number.isInteger(count) || count < 1 || count > 9999) return res.json({ ...BaseStdResponse.ERR, msg: "超出赠送的次数范围,请重新选择赠送次数" }) if (!(await AccessControl.checkSession(uuid, session))) return res.status(401).json({ ...BaseStdResponse.ACCESS_DENIED }) const conn = await db.connect() // 这里直接拿 connection try { await conn.beginTransaction() const [senderRows] = await conn.execute( "SELECT id, username, lepao_count FROM users WHERE uuid = ?", [uuid] ) if (!senderRows || senderRows.length !== 1) { await conn.rollback() return res.json({ ...BaseStdResponse.MISSING_FILE, msg: "获取用户信息失败!" }) } const [targetRows] = await conn.execute( "SELECT id, uuid FROM users WHERE username = ?", [username] ) if (!targetRows || targetRows.length !== 1) { await conn.rollback() return res.json({ ...BaseStdResponse.ERR, msg: "未找到接收用户,请检查用户名是否正确!" }) } if (targetRows[0].uuid === uuid) { await conn.rollback() return res.json({ ...BaseStdResponse.ERR, msg: "不能给自己赠送次数!" }) } const [decResult] = await conn.execute( "UPDATE users SET lepao_count = lepao_count - ? WHERE uuid = ? AND lepao_count >= ?", [count, uuid, count] ) if (decResult.affectedRows !== 1) { await conn.rollback() return res.json({ ...BaseStdResponse.ERR, msg: "剩余乐跑次数不足,请购买后再赠送!" }) } const [insertResult] = await conn.execute( `INSERT INTO lepao_send_count_request (sender_uuid, receiver_user_id, count, status, created_at) VALUES (?, ?, ?, 'pending', NOW())`, [uuid, targetRows[0].id, count] ) if (!insertResult || insertResult.affectedRows !== 1) { await conn.rollback() return res.json({ ...BaseStdResponse.ERR, msg: "提交赠送审核失败,请稍后再试!" }) } const requestId = insertResult.insertId await insertLedgerRecord({ executor: conn, userUuid: uuid, delta: -count, balanceBefore: Number(senderRows[0].lepao_count || 0), balanceAfter: Number(senderRows[0].lepao_count || 0) - count, bizType: 'gift_send_lock', bizId: `send_request:${requestId}`, remark: `向${username}赠送${count}次` }) await conn.commit() const createTime = new Date().getTime() // 非阻塞通知管理员,不影响主业务流程 Promise.resolve().then(async () => { try { const adminSql = ` SELECT email FROM users WHERE email IS NOT NULL AND email <> '' AND (JSON_CONTAINS(permission, '"admin"') OR JSON_CONTAINS(permission, '"service"')) ` const adminRows = await db.query(adminSql) if (!adminRows || adminRows.length === 0) { this.logger.warn(`[SendCountNotify][submit][requestId=${requestId}] 未找到可通知的管理员邮箱`) return } const emails = [...new Set(adminRows.map(row => row.email).filter(Boolean))] for (const email of emails) { await EmailTemplate.sendCountRequestNotifyAdmins(email, { requestId, senderUsername: senderRows[0].username, receiverUsername: username, count, createTime }) } } catch (mailErr) { this.logger.error(`[SendCountNotify][submit][requestId=${requestId}] 管理员通知发送失败:${mailErr.message || "未知错误"}`) } }) return res.json({ ...BaseStdResponse.OK, msg: "已提交审核,审核通过后接收方将到账" }) } catch (err) { try { await conn.rollback() } catch (_) { } this.logger.error(`赠送乐跑次数失败!${err.message || "未知错误"}`) return res.json({ ...BaseStdResponse.ERR, msg: `赠送次数失败,请稍后再试!` }) } finally { if (conn?.connection && typeof conn.connection.release === 'function' && typeof conn?.release === 'function') { conn.release() } } } } module.exports.SendCount = SendCount