feat: add web admin panel for node management

Add Flask panel with login, add/delete nodes, and share link copy.
Generate sing-box config from SQLite; add uninstall script and clean install flow.
Panel served at https://DOMAIN:8444 via nginx.

Co-authored-by: Cursor <cursoragent@cursor.com>

panel/db.py

@@ -0,0 +1,124 @@
+"""SQLite 数据库：管理员账号与节点。"""
+from __future__ import annotations
+
+import os
+import secrets
+import sqlite3
+import subprocess
+from pathlib import Path
+
+from werkzeug.security import check_password_hash, generate_password_hash
+
+ROOT = Path(os.environ.get("JIEDIAN_ROOT", Path(__file__).resolve().parents[1]))
+DB_FILE = ROOT / "data" / "nodes.db"
+
+
+def connect() -> sqlite3.Connection:
+    DB_FILE.parent.mkdir(parents=True, exist_ok=True)
+    conn = sqlite3.connect(DB_FILE)
+    conn.row_factory = sqlite3.Row
+    conn.execute("PRAGMA foreign_keys = ON")
+    return conn
+
+
+def init_db(env: dict[str, str]) -> None:
+    conn = connect()
+    conn.executescript(
+        """
+        CREATE TABLE IF NOT EXISTS admin (
+            id INTEGER PRIMARY KEY,
+            username TEXT UNIQUE NOT NULL,
+            password_hash TEXT NOT NULL
+        );
+        CREATE TABLE IF NOT EXISTS nodes (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            name TEXT NOT NULL,
+            uuid TEXT NOT NULL UNIQUE,
+            hy2_password TEXT NOT NULL,
+            enabled INTEGER NOT NULL DEFAULT 1,
+            created_at TEXT NOT NULL DEFAULT (datetime('now'))
+        );
+        """
+    )
+
+    username = env.get("PANEL_USERNAME", "admin")
+    password = env.get("PANEL_PASSWORD")
+    if not password:
+        raise SystemExit("请在 .env 中设置 PANEL_PASSWORD（运行 generate-keys.sh 可自动生成）")
+
+    row = conn.execute("SELECT id FROM admin WHERE username = ?", (username,)).fetchone()
+    if row is None:
+        conn.execute(
+            "INSERT INTO admin (username, password_hash) VALUES (?, ?)",
+            (username, generate_password_hash(password)),
+        )
+
+    count = conn.execute("SELECT COUNT(*) AS c FROM nodes").fetchone()["c"]
+    if count == 0:
+        uuid, hy2 = _generate_credentials()
+        conn.execute(
+            "INSERT INTO nodes (name, uuid, hy2_password) VALUES (?, ?, ?)",
+            ("默认节点", uuid, hy2),
+        )
+
+    conn.commit()
+    conn.close()
+
+
+def verify_admin(username: str, password: str) -> bool:
+    conn = connect()
+    row = conn.execute(
+        "SELECT password_hash FROM admin WHERE username = ?", (username,)
+    ).fetchone()
+    conn.close()
+    if row is None:
+        return False
+    return check_password_hash(row["password_hash"], password)
+
+
+def list_nodes() -> list[dict]:
+    conn = connect()
+    rows = conn.execute(
+        "SELECT id, name, uuid, hy2_password, enabled, created_at "
+        "FROM nodes ORDER BY id DESC"
+    ).fetchall()
+    conn.close()
+    return [dict(row) for row in rows]
+
+
+def add_node(name: str) -> dict:
+    name = name.strip() or "未命名节点"
+    uuid, hy2 = _generate_credentials()
+    conn = connect()
+    cur = conn.execute(
+        "INSERT INTO nodes (name, uuid, hy2_password) VALUES (?, ?, ?)",
+        (name, uuid, hy2),
+    )
+    node_id = cur.lastrowid
+    row = conn.execute("SELECT * FROM nodes WHERE id = ?", (node_id,)).fetchone()
+    conn.commit()
+    conn.close()
+    return dict(row)
+
+
+def delete_node(node_id: int) -> bool:
+    conn = connect()
+    cur = conn.execute("DELETE FROM nodes WHERE id = ?", (node_id,))
+    conn.commit()
+    deleted = cur.rowcount > 0
+    conn.close()
+    return deleted
+
+
+def node_count() -> int:
+    conn = connect()
+    count = conn.execute("SELECT COUNT(*) AS c FROM nodes").fetchone()["c"]
+    conn.close()
+    return count
+
+
+def _generate_credentials() -> tuple[str, str]:
+    sb = "sing-box"
+    uuid = subprocess.check_output([sb, "generate", "uuid"], text=True).strip()
+    hy2 = secrets.token_urlsafe(18)[:24]
+    return uuid, hy2