feat: Add configuration management for default user roles and permissions

app/api/config/route.ts

@@ -0,0 +1,21 @@
+import { Role, ROLES } from "@/lib/permissions"
+import { getRequestContext } from "@cloudflare/next-on-pages"
+
+export const runtime = "edge"
+
+export async function GET() {
+  const config = await getRequestContext().env.SITE_CONFIG.get("DEFAULT_ROLE")
+
+  return Response.json({ defaultRole: config || ROLES.CIVILIAN })
+}
+
+export async function POST(request: Request) {
+  const { defaultRole } = await request.json() as { defaultRole: Exclude<Role, typeof ROLES.EMPEROR> }
+  
+  if (![ROLES.KNIGHT, ROLES.CIVILIAN].includes(defaultRole)) {
+    return Response.json({ error: "无效的角色" }, { status: 400 })
+  }
+
+  await getRequestContext().env.SITE_CONFIG.put("DEFAULT_ROLE", defaultRole)
+  return Response.json({ success: true })
+} 

app/components/profile/config-panel.tsx

@@ -0,0 +1,88 @@
+"use client"
+
+import { Button } from "@/components/ui/button"
+import { Settings } from "lucide-react"
+import { useToast } from "@/components/ui/use-toast"
+import { useState, useEffect } from "react"
+import { Role, ROLES } from "@/lib/permissions"
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select"
+
+export function ConfigPanel() {
+  const [defaultRole, setDefaultRole] = useState<string>("")
+  const [loading, setLoading] = useState(false)
+  const { toast } = useToast()
+
+  useEffect(() => {
+    fetchConfig()
+  }, [])
+
+  const fetchConfig = async () => {
+    const res = await fetch("/api/config")
+    if (res.ok) {
+      const data = await res.json() as { defaultRole: Exclude<Role, typeof ROLES.EMPEROR> }
+      setDefaultRole(data.defaultRole)
+    }
+  }
+
+  const handleSave = async () => {
+    setLoading(true)
+    try {
+      const res = await fetch("/api/config", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ defaultRole }),
+      })
+
+      if (!res.ok) throw new Error("保存失败")
+
+      toast({
+        title: "保存成功",
+        description: "默认角色设置已更新",
+      })
+    } catch (error) {
+      toast({
+        title: "保存失败",
+        description: error instanceof Error ? error.message : "请稍后重试",
+        variant: "destructive",
+      })
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  return (
+    <div className="bg-background rounded-lg border-2 border-primary/20 p-6">
+      <div className="flex items-center gap-2 mb-6">
+        <Settings className="w-5 h-5 text-primary" />
+        <h2 className="text-lg font-semibold">网站设置</h2>
+      </div>
+
+      <div className="space-y-4">
+        <div className="flex items-center gap-4">
+          <span className="text-sm">新用户默认角色:</span>
+          <Select value={defaultRole} onValueChange={setDefaultRole}>
+            <SelectTrigger className="w-32">
+              <SelectValue />
+            </SelectTrigger>
+            <SelectContent>
+              <SelectItem value={ROLES.KNIGHT}>骑士</SelectItem>
+              <SelectItem value={ROLES.CIVILIAN}>平民</SelectItem>
+            </SelectContent>
+          </Select>
+          <Button 
+            onClick={handleSave}
+            disabled={loading}
+          >
+            保存
+          </Button>
+        </div>
+      </div>
+    </div>
+  )
+} 

app/components/profile/profile-card.tsx

@@ -10,6 +10,7 @@ import { WebhookConfig } from "./webhook-config"
 import { PromotePanel } from "./promote-panel"
 import { useRolePermission } from "@/hooks/use-role-permission"
 import { PERMISSIONS } from "@/lib/permissions"
+import { ConfigPanel } from "./config-panel"
 
 interface ProfileCardProps {
   user: User
@@ -26,6 +27,7 @@ export function ProfileCard({ user }: ProfileCardProps) {
   const { checkPermission } = useRolePermission()
   const canManageWebhook = checkPermission(PERMISSIONS.MANAGE_WEBHOOK)
   const canPromote = checkPermission(PERMISSIONS.PROMOTE_USER)
+  const canManageConfig = checkPermission(PERMISSIONS.MANAGE_CONFIG)
 
   return (
     <div className="max-w-2xl mx-auto space-y-6">
@@ -85,6 +87,7 @@ export function ProfileCard({ user }: ProfileCardProps) {
         </div>
       )}
 
+      {canManageConfig && <ConfigPanel />}
       {canPromote && <PromotePanel />}
 
       <div className="flex flex-col sm:flex-row gap-4 px-1">

app/lib/auth.ts

@@ -4,6 +4,7 @@ import { DrizzleAdapter } from "@auth/drizzle-adapter"
 import { createDb, Db } from "./db"
 import { accounts, sessions, users, roles, userRoles } from "./schema"
 import { eq } from "drizzle-orm"
+import { getRequestContext } from "@cloudflare/next-on-pages"
 import { Permission, hasPermission, ROLES, Role } from "./permissions"
 
 const ROLE_DESCRIPTIONS: Record<Role, string> = {
@@ -12,8 +13,10 @@ const ROLE_DESCRIPTIONS: Record<Role, string> = {
   [ROLES.CIVILIAN]: "平民（普通用户）",
 }
 
-const getDefaultRole = (): Role =>
-  process.env.OPEN_REGISTRATION === 'true' ? ROLES.KNIGHT : ROLES.CIVILIAN
+const getDefaultRole = async (): Promise<Role> => {
+  const defaultRole = await getRequestContext().env.SITE_CONFIG.get("DEFAULT_ROLE")
+  return defaultRole === ROLES.KNIGHT ? ROLES.KNIGHT : ROLES.CIVILIAN
+}
 
 async function findOrCreateRole(db: Db, roleName: Role) {
   let role = await db.query.roles.findFirst({
@@ -85,8 +88,9 @@ export const {
 
         if (existingRole) return
 
-        const defaultRole = await findOrCreateRole(db, getDefaultRole())
-        await assignRoleToUser(db, user.id, defaultRole.id)
+        const defaultRole = await getDefaultRole()
+        const role = await findOrCreateRole(db, defaultRole)
+        await assignRoleToUser(db, user.id, role.id)
       } catch (error) {
         console.error('Error assigning role:', error)
       }
@@ -107,13 +111,14 @@ export const {
       })
 
       if (!userRoleRecords.length) {
-        const defaultRole = await findOrCreateRole(db, getDefaultRole())
-        await assignRoleToUser(db, user.id, defaultRole.id)
+        const defaultRole = await getDefaultRole()
+        const role = await findOrCreateRole(db, defaultRole)
+        await assignRoleToUser(db, user.id, role.id)
         userRoleRecords = [{
           userId: user.id,
-          roleId: defaultRole.id,
+          roleId: role.id,
           createdAt: new Date(),
-          role: defaultRole
+          role: role
         }]
       }
 

app/lib/permissions.ts

@@ -10,6 +10,7 @@ export const PERMISSIONS = {
   MANAGE_EMAIL: 'manage_email',
   MANAGE_WEBHOOK: 'manage_webhook',
   PROMOTE_USER: 'promote_user',
+  MANAGE_CONFIG: 'manage_config',
 } as const;
 
 export type Permission = typeof PERMISSIONS[keyof typeof PERMISSIONS];