feat: 支持自动获取并安全保存数据库密钥

src/main/database-key-store.ts

@@ -0,0 +1,63 @@
+import { app, safeStorage } from 'electron'
+import fs from 'fs-extra'
+import path from 'path'
+
+export interface StoredKeyResult {
+  success: boolean
+  key?: string
+  error?: string
+}
+
+const normalizeDatabaseKey = (value: string): string => value.trim().replace(/^0x/i, '')
+
+export const isValidDatabaseKey = (value: string): boolean =>
+  /^[0-9a-f]{64}$/i.test(normalizeDatabaseKey(value))
+
+export class DatabaseKeyStore {
+  private get filePath(): string {
+    return path.join(app.getPath('userData'), 'wechat-db-key.bin')
+  }
+
+  async load(): Promise<StoredKeyResult> {
+    try {
+      if (!(await fs.pathExists(this.filePath))) return { success: true }
+      if (!safeStorage.isEncryptionAvailable()) {
+        return { success: false, error: '系统安全存储不可用' }
+      }
+      const encrypted = await fs.readFile(this.filePath)
+      const key = normalizeDatabaseKey(safeStorage.decryptString(encrypted))
+      if (!isValidDatabaseKey(key)) return { success: false, error: '已保存的密钥格式无效' }
+      return { success: true, key }
+    } catch (error) {
+      return { success: false, error: error instanceof Error ? error.message : String(error) }
+    }
+  }
+
+  async save(rawKey: string): Promise<StoredKeyResult> {
+    const key = normalizeDatabaseKey(rawKey)
+    if (!isValidDatabaseKey(key)) {
+      return { success: false, error: '密钥必须是 64 位十六进制字符' }
+    }
+    if (!safeStorage.isEncryptionAvailable()) {
+      return { success: false, error: '系统安全存储不可用' }
+    }
+
+    try {
+      await fs.ensureDir(path.dirname(this.filePath))
+      await fs.writeFile(this.filePath, safeStorage.encryptString(key), { mode: 0o600 })
+      await fs.chmod(this.filePath, 0o600)
+      return { success: true, key }
+    } catch (error) {
+      return { success: false, error: error instanceof Error ? error.message : String(error) }
+    }
+  }
+
+  async clear(): Promise<{ success: boolean; error?: string }> {
+    try {
+      await fs.remove(this.filePath)
+      return { success: true }
+    } catch (error) {
+      return { success: false, error: error instanceof Error ? error.message : String(error) }
+    }
+  }
+}