feat: /api/internal/users endpoint for OA user sync

src/app/api/internal/users/route.ts

@@ -0,0 +1,22 @@
+// GET /api/internal/users — 供 OA 查询 monitor 用户列表
+import { NextResponse } from 'next/server'
+import { execFileSync } from 'child_process'
+
+const INTERNAL_KEY = process.env.INTERNAL_API_KEY || 'oa-internal-key-tlyq-2026'
+const DB_PATH = process.env.DATABASE_PATH || '/app/data/monitor.db'
+
+export async function GET(request: Request) {
+  const key = request.headers.get('x-internal-key')
+  if (key !== INTERNAL_KEY) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+
+  try {
+    const out = execFileSync('sqlite3', [DB_PATH, 'SELECT username, display_name, role FROM users WHERE is_active = 1 ORDER BY username'], { timeout: 3000, encoding: 'utf8' }).trim()
+    const users = out.split('\n').filter(Boolean).map(line => {
+      const [username, display_name, role] = line.split('|')
+      return { username, display_name: display_name || username, role }
+    })
+    return NextResponse.json({ users })
+  } catch {
+    return NextResponse.json({ users: [] })
+  }
+}