feat(galgame): view resource edit history

Author: KUN1007

apps/api/internal/app/router.go

@@ -110,6 +110,15 @@ func (a *App) RegisterRoutes() {
 		a.PatchHandler.IncrementResourceDownload,
 	)
 	patchRoutes.Put("/resource/:resourceId/like", auth, a.PatchHandler.ToggleResourceLike)
+	// Public per-field edit history (diff) for one resource (anyone, incl.
+	// anonymous). Rate-limited like the other id-keyed resource reads. Changes
+	// are secret-free (service strips download links / codes) — distinct from
+	// the admin-only /admin/resource/:id/history file-replacement audit.
+	patchRoutes.Get(
+		"/resource/:resourceId/revisions",
+		middleware.RateLimit(a.RDB, "resource-revisions", 60, time.Minute),
+		a.PatchHandler.GetResourceRevisions,
+	)
 	patchRoutes.Put("/:id/favorite", auth, a.PatchHandler.ToggleFavorite)
 
 	// Galgame metadata edit (proxy to Galgame Wiki PUT /galgame/:gid).

apps/api/internal/patch/dto/dto.go

@@ -1,5 +1,7 @@
 package dto
 
+import "time"
+
 // PatchCreateRequest is the create-patch request body (D12, 2026-04-21).
 //
 // All game metadata (name / introduction / banner / released / content_limit / alias)
@@ -85,3 +87,23 @@ type PatchResourceUpdateRequest struct {
 type DuplicateCheckRequest struct {
 	VndbID string `query:"vndb_id" validate:"required,max=20"`
 }
+
+// ResourceFileHistoryRequest paginates the public resource file-history.
+type ResourceFileHistoryRequest struct {
+	Page  int `query:"page" validate:"required,min=1"`
+	Limit int `query:"limit" validate:"required,min=1,max=30"`
+}
+
+// PublicResourceFileHistoryItem is the privacy-safe view of one
+// patch_resource_file_history row for the PUBLIC history endpoint. It omits
+// old_s3_key (internal storage key) and old_content (the old download links) —
+// the public audit only needs when / who-role / why / old size + hash.
+type PublicResourceFileHistoryItem struct {
+	ID         int64     `json:"id"`
+	OldStorage string    `json:"old_storage"`
+	OldBlake3  string    `json:"old_blake3"`
+	OldSize    string    `json:"old_size"`
+	Reason     string    `json:"reason"`
+	ActorRole  int       `json:"actor_role"`
+	CreatedAt  time.Time `json:"created_at"`
+}

apps/api/internal/patch/handler/handler.go

@@ -1133,3 +1133,46 @@ func parseGalgameMultipart(c *fiber.Ctx) (galgameClient.SubmitGalgameRequest, st
 	}
 	return req, fh.Filename, raw, mime, nil
 }
+
+// GetResourceFileHistory GET /api/patch/resource/:resourceId/history
+//
+// Public, privacy-safe view of one resource's file-replacement audit
+// (when / who-role / why / old size + hash). Deliberately omits the old
+// download links + s3 key — those stay behind the rate-limited /link endpoint.
+// Lets any visitor (incl. anonymous) see a resource's change history.
+func (h *PatchHandler) GetResourceFileHistory(c *fiber.Ctx) error {
+	resourceID, err := getIDParam(c, "resourceId")
+	if err != nil {
+		return response.Error(c, err.(*errors.AppError))
+	}
+	var req dto.ResourceFileHistoryRequest
+	if err := utils.ParseQueryAndValidate(c, &req); err != nil {
+		return response.Error(c, errors.ErrBadRequest(err.Error()))
+	}
+	items, total, gErr := h.service.GetResourceFileHistory(resourceID, req.Page, req.Limit)
+	if gErr != nil {
+		return response.Error(c, errors.ErrInternal(""))
+	}
+	return response.Paginated(c, items, total)
+}
+
+// GetResourceRevisions GET /api/patch/resource/:resourceId/revisions
+//
+// Public per-field edit history (diff) for one resource: each row is one edit
+// with a list of {field, before, after}. Secret-free (see service). Lets any
+// visitor see "language changed from X to Y", etc.
+func (h *PatchHandler) GetResourceRevisions(c *fiber.Ctx) error {
+	resourceID, err := getIDParam(c, "resourceId")
+	if err != nil {
+		return response.Error(c, err.(*errors.AppError))
+	}
+	var req dto.ResourceFileHistoryRequest
+	if err := utils.ParseQueryAndValidate(c, &req); err != nil {
+		return response.Error(c, errors.ErrBadRequest(err.Error()))
+	}
+	items, total, gErr := h.service.GetResourceRevisions(resourceID, req.Page, req.Limit)
+	if gErr != nil {
+		return response.Error(c, errors.ErrInternal(""))
+	}
+	return response.Paginated(c, items, total)
+}

apps/api/internal/patch/model/model.go

@@ -342,3 +342,53 @@ func (PatchResourceFileHistory) TableName() string { return "patch_resource_file
 
 // NOTE: PatchTag / PatchTagRel are deprecated per D11 (2026-04-21).
 // Tag metadata is owned by the Galgame Wiki; fetch it via patch.vndb_id -> Wiki /galgame/batch.
+
+// ─── Resource edit revision (per-field diff history, migration 013) ──────────
+
+// ResourceFieldChange is one field's before/after in a resource edit. Public-
+// safe: secrets (download link / s3 key / extract code / unzip password) are
+// never stored as raw values — only marked "已更新" via a synthetic entry.
+type ResourceFieldChange struct {
+	Field  string `json:"field"`
+	Label  string `json:"label"`
+	Before string `json:"before"`
+	After  string `json:"after"`
+}
+
+// ResourceChangeList is the jsonb column type for PatchResourceRevision.Changes.
+type ResourceChangeList []ResourceFieldChange
+
+func (c *ResourceChangeList) Scan(value any) error {
+	if value == nil {
+		*c = ResourceChangeList{}
+		return nil
+	}
+	bytes, ok := value.([]byte)
+	if !ok {
+		return fmt.Errorf("failed to unmarshal ResourceChangeList: %v", value)
+	}
+	return json.Unmarshal(bytes, c)
+}
+
+func (c ResourceChangeList) Value() (driver.Value, error) {
+	if c == nil {
+		return "[]", nil
+	}
+	return json.Marshal(c)
+}
+
+// PatchResourceRevision is one edit of a patch_resource, stored as a computed
+// field diff. Written by UpdateResource on every metadata/file change. Changes
+// carries no secret values (see service.diffResourceFields).
+type PatchResourceRevision struct {
+	ID         int64              `gorm:"primaryKey;autoIncrement" json:"id"`
+	ResourceID int                `gorm:"not null;index:idx_prr_resource,priority:1" json:"resource_id"`
+	Action     string             `gorm:"type:varchar(16);not null;default:'updated'" json:"action"`
+	Changes    ResourceChangeList `gorm:"type:jsonb;default:'[]'" json:"changes"`
+	Reason     string             `gorm:"type:varchar(500);not null;default:''" json:"reason"`
+	ActorID    int                `gorm:"not null;default:0" json:"actor_id"`
+	ActorRole  int                `gorm:"not null;default:0" json:"actor_role"`
+	CreatedAt  time.Time          `gorm:"autoCreateTime;index:idx_prr_resource,priority:2,sort:desc" json:"created_at"`
+}
+
+func (PatchResourceRevision) TableName() string { return "patch_resource_revision" }

apps/api/internal/patch/repository/repository.go

@@ -421,3 +421,38 @@ func setToSlice(s map[string]bool) []string {
 	}
 	return result
 }
+
+// GetResourceFileHistory returns the file-replacement audit rows for one
+// resource, newest first. Public surface (the privacy-safe projection that
+// drops old_s3_key / old_content happens in the service). Mirrors
+// AdminRepository.GetResourceFileHistory so the public history endpoint does
+// not reach across modules into the admin repo.
+func (r *PatchRepository) GetResourceFileHistory(resourceID, offset, limit int) ([]model.PatchResourceFileHistory, int64, error) {
+	var rows []model.PatchResourceFileHistory
+	var total int64
+	base := r.db.Model(&model.PatchResourceFileHistory{}).Where("resource_id = ?", resourceID)
+	if err := base.Session(&gorm.Session{}).Count(&total).Error; err != nil {
+		return nil, 0, err
+	}
+	err := base.Session(&gorm.Session{}).
+		Order("created_at DESC, id DESC").
+		Offset(offset).Limit(limit).
+		Find(&rows).Error
+	return rows, total, err
+}
+
+// GetResourceRevisions returns the per-field edit-diff history for one resource,
+// newest first. Public (stored Changes are secret-free). Paginated.
+func (r *PatchRepository) GetResourceRevisions(resourceID, offset, limit int) ([]model.PatchResourceRevision, int64, error) {
+	var rows []model.PatchResourceRevision
+	var total int64
+	base := r.db.Model(&model.PatchResourceRevision{}).Where("resource_id = ?", resourceID)
+	if err := base.Session(&gorm.Session{}).Count(&total).Error; err != nil {
+		return nil, 0, err
+	}
+	err := base.Session(&gorm.Session{}).
+		Order("created_at DESC, id DESC").
+		Offset(offset).Limit(limit).
+		Find(&rows).Error
+	return rows, total, err
+}

apps/api/internal/patch/service/service.go

@@ -12,6 +12,7 @@ import (
 	galgameClient "kun-galgame-patch-api/internal/galgame/client"
 	"kun-galgame-patch-api/internal/infrastructure/markdown"
 	"kun-galgame-patch-api/internal/infrastructure/storage"
+	"kun-galgame-patch-api/internal/patch/dto"
 	"kun-galgame-patch-api/internal/patch/model"
 	"kun-galgame-patch-api/internal/patch/repository"
 	settingService "kun-galgame-patch-api/internal/setting/service"
@@ -860,6 +861,11 @@ func (s *PatchService) UpdateResource(ctx context.Context, resourceID, userID in
 	}
 
 	galgameID := existing.GalgameID
+	// Per-field edit diff (public-safe) — computed from existing(before) vs
+	// update(after) BEFORE the txn overwrites `existing` below. Stored as a
+	// PatchResourceRevision so the resource page can show 改动前 → 改动后 for
+	// language / platform / type / note / name / size / file. Empty = no-op save.
+	changes := diffResourceFields(existing, update)
 	if err := s.db.Transaction(func(tx *gorm.DB) error {
 		if fileChanged {
 			hist := &model.PatchResourceFileHistory{
@@ -878,6 +884,20 @@ func (s *PatchService) UpdateResource(ctx context.Context, resourceID, userID in
 			}
 		}
 
+		if len(changes) > 0 {
+			rev := &model.PatchResourceRevision{
+				ResourceID: existing.ID,
+				Action:     "updated",
+				Changes:    changes,
+				Reason:     reason,
+				ActorID:    userID,
+				ActorRole:  actorRole,
+			}
+			if err := tx.Create(rev).Error; err != nil {
+				return fmt.Errorf("write resource revision: %w", err)
+			}
+		}
+
 		existing.Storage = update.Storage
 		existing.Name = update.Name
 		existing.ModelName = update.ModelName
@@ -1203,3 +1223,76 @@ func (s *PatchService) IsCommentVerifyEnabled() bool {
 func (s *PatchService) IsCreatorOnlyEnabled() bool {
 	return s.setting.GetBool(settingService.KeyCreatorOnly)
 }
+
+// GetResourceFileHistory returns the privacy-safe, paginated file-replacement
+// audit for one resource. Public (any visitor, incl. anonymous): deliberately
+// omits old_s3_key (internal storage key) and old_content (the old download
+// links) — those stay behind the rate-limited /link endpoint. Callers see only
+// when / who-role / why / old size + hash.
+func (s *PatchService) GetResourceFileHistory(resourceID, page, limit int) ([]dto.PublicResourceFileHistoryItem, int64, error) {
+	rows, total, err := s.repo.GetResourceFileHistory(resourceID, (page-1)*limit, limit)
+	if err != nil {
+		return nil, 0, err
+	}
+	items := make([]dto.PublicResourceFileHistoryItem, 0, len(rows))
+	for _, h := range rows {
+		items = append(items, dto.PublicResourceFileHistoryItem{
+			ID:         h.ID,
+			OldStorage: h.OldStorage,
+			OldBlake3:  h.OldBlake3,
+			OldSize:    h.OldSize,
+			Reason:     h.Reason,
+			ActorRole:  h.ActorRole,
+			CreatedAt:  h.CreatedAt,
+		})
+	}
+	return items, total, nil
+}
+
+// diffResourceFields computes the public-safe per-field diff between the
+// pre-edit (before) and post-edit (after) resource. Secrets (download link /
+// s3 key / extract code / unzip password) are never emitted as raw values —
+// only a single "已更新" marker. Used by UpdateResource to record a revision.
+func diffResourceFields(before, after *model.PatchResource) model.ResourceChangeList {
+	var ch model.ResourceChangeList
+	addStr := func(field, label, b, a string) {
+		if b != a {
+			ch = append(ch, model.ResourceFieldChange{Field: field, Label: label, Before: b, After: a})
+		}
+	}
+	addArr := func(field, label string, b, a model.JSONArray) {
+		bs, as := strings.Join(b, "、"), strings.Join(a, "、")
+		if bs != as {
+			ch = append(ch, model.ResourceFieldChange{Field: field, Label: label, Before: bs, After: as})
+		}
+	}
+	addStr("name", "资源名称", before.Name, after.Name)
+	addStr("size", "文件大小", before.Size, after.Size)
+	addStr("model_name", "AI 模型", before.ModelName, after.ModelName)
+	addStr("storage", "存储方式", before.Storage, after.Storage)
+	// blake3 故意不在此 diff:它由文件自动计算、UpdateResource 不写入它(编辑表单
+	// 也不回传),直接比较会让每次元数据编辑都误报 "hash → (空)"。文件替换通过
+	// size/storage 变化 + 下面的「已更新」标记体现,blake3 本身不参与字段 diff。
+	addStr("note", "备注", before.Note, after.Note)
+	addArr("language", "语言", before.Language, after.Language)
+	addArr("platform", "平台", before.Platform, after.Platform)
+	addArr("type", "类型", before.Type, after.Type)
+	if before.Code != after.Code ||
+		before.Password != after.Password ||
+		before.Content != after.Content ||
+		before.S3Key != after.S3Key {
+		ch = append(ch, model.ResourceFieldChange{
+			Field:  "download",
+			Label:  "下载文件 / 链接 / 提取码 / 密码",
+			Before: "",
+			After:  "已更新",
+		})
+	}
+	return ch
+}
+
+// GetResourceRevisions returns the paginated per-field edit history for one
+// resource (public; Changes are secret-free).
+func (s *PatchService) GetResourceRevisions(resourceID, page, limit int) ([]model.PatchResourceRevision, int64, error) {
+	return s.repo.GetResourceRevisions(resourceID, (page-1)*limit, limit)
+}

apps/api/migrations/013_patch_resource_revision.down.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS patch_resource_revision;

apps/api/migrations/013_patch_resource_revision.up.sql

@@ -0,0 +1,20 @@
+-- 013_patch_resource_revision: 资源「按字段」编辑历史(diff)。
+--
+-- patch_resource 原地修改时,patch_resource_file_history 只记录「文件替换」,
+-- 不记录 语言/平台/类型/备注/名称/大小 等元数据改动。本表为每次 UpdateResource
+-- 存一条「改动 diff」——公开安全:只存字段标签 + 改动前/后的值;敏感的下载链接 /
+-- 提取码 / 解压密码只以「已更新」标记,绝不存原文。供前端展示「改动前 → 改动后」。
+--
+-- CASCADE on delete: 资源删除即连带删除其修订(与 patch_resource_file_history 一致)。
+CREATE TABLE IF NOT EXISTS patch_resource_revision (
+    id           BIGSERIAL PRIMARY KEY,
+    resource_id  INT NOT NULL REFERENCES patch_resource(id) ON DELETE CASCADE,
+    action       VARCHAR(16) NOT NULL DEFAULT 'updated',   -- 'created' / 'updated'
+    changes      JSONB NOT NULL DEFAULT '[]',              -- [{field,label,before,after}]
+    reason       VARCHAR(500) NOT NULL DEFAULT '',
+    actor_id     INT NOT NULL DEFAULT 0,
+    actor_role   INT NOT NULL DEFAULT 0,                   -- 3=admin / 2=mod / 1=user / 0=unknown
+    created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_prr_resource ON patch_resource_revision(resource_id, created_at DESC);

apps/web/app/pages/patch/[id].vue

@@ -217,12 +217,15 @@ const tabs = computed(() => [
     </div>
 
     <!-- ── Tabs ───────────────────────────────────────── -->
+    <!-- scrollable: 5 个 Tab 在手机端会超出视口宽度;KunTab 的 scrollable
+         让 tablist 横向滚动(overflow-x-auto scrollbar-hide)而非撑破布局。 -->
     <KunTab
       v-model="currentTab"
       :items="tabs.map((t) => ({ value: t.key, textValue: t.title, href: t.href }))"
       variant="light"
       color="primary"
       size="md"
+      scrollable
     />
 
     <div>