新增：Markdown编辑器/数据库优化/安全修复

- Markdown 编辑器：实时预览、PDF 导出、独立查看器
- 数据库优化：动态连接池、查询缓存、Redis Pipeline
- 窗口置顶功能
- 文件系统增强：右键菜单、编辑器集成、收藏夹重构
- 安全修复：XSS 防护、路径穿越、HTML 注入
- 代码质量：正则预编译、缓存锁优化、死代码清理

internal/service/config_service.go

@@ -43,8 +43,10 @@ var defaultTabConfig = TabConfig{
 	AvailableTabs: []TabDefinition{
 		{Key: "file-system", Title: "文件管理", Enabled: true},
 		{Key: "db-cli", Title: "数据库", Enabled: true},
+		{Key: "markdown-editor", Title: "Markdown", Enabled: true},
+		{Key: "openclaw-manager", Title: "OpenClaw", Enabled: true},
 	},
-	VisibleTabs: []string{"file-system", "db-cli"},
+	VisibleTabs: []string{"file-system", "db-cli", "markdown-editor", "openclaw-manager"},
 	DefaultTab:  "file-system",
 }
 

internal/service/connection_service.go

@@ -1,12 +1,16 @@
 package service
 
 import (
+	"context"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"u-desk/internal/crypto"
 	"u-desk/internal/dbclient"
 	"u-desk/internal/storage/models"
 	"u-desk/internal/storage/repository"
+
+	"gorm.io/gorm"
 )
 
 // ConnectionService 连接管理服务
@@ -90,8 +94,20 @@ func (s *ConnectionService) GetConnection(id uint) (*models.DbConnection, error)
 	return s.repo.FindByID(id)
 }
 
-// DeleteConnection 删除连接配置
+// DeleteConnection 删除连接配置（含关联数据和连接池清理）
 func (s *ConnectionService) DeleteConnection(id uint) error {
+	conn, err := s.repo.FindByID(id)
+	if err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			return nil // 连接不存在视为成功
+		}
+		return fmt.Errorf("获取连接配置失败: %v", err)
+	}
+
+	// 关闭连接池中的连接
+	dbclient.GetPool().CloseConnection(id, conn.Type)
+
+	// 删除连接记录
 	return s.repo.Delete(id)
 }
 
@@ -185,3 +201,68 @@ func (s *ConnectionService) TestConnectionWithParams(connType, host string, port
 		return fmt.Errorf("不支持的数据库类型: %s", connType)
 	}
 }
+
+// LoadAllDatabases 加载全部数据库列表
+func (s *ConnectionService) LoadAllDatabases(dbType, host string, port int, username, password, database, options string, existingId uint) ([]string, error) {
+	// 如果是编辑模式且密码为空，尝试获取已保存的密码
+	actualPassword := password
+	if existingId > 0 && password == "" {
+		conn, err := s.repo.FindByID(existingId)
+		if err != nil {
+			return nil, fmt.Errorf("获取原连接配置失败: %v", err)
+		}
+		actualPassword, err = crypto.DecryptPassword(conn.Password)
+		if err != nil {
+			return nil, fmt.Errorf("密码解密失败: %v", err)
+		}
+	}
+
+	// 解析 MongoDB 选项
+	authSource := ""
+	authMechanism := ""
+	if options != "" {
+		var opts map[string]interface{}
+		if err := json.Unmarshal([]byte(options), &opts); err == nil {
+			authSource, _ = opts["authSource"].(string)
+			authMechanism, _ = opts["authMechanism"].(string)
+		}
+	}
+
+	switch dbType {
+	case "mysql":
+		return loadDatabasesForMySQL(host, port, username, actualPassword, database)
+	case "mongo":
+		return loadDatabasesForMongo(host, port, username, actualPassword, database, authSource, authMechanism)
+	case "redis":
+		return []string{}, nil
+	default:
+		return nil, fmt.Errorf("不支持的数据库类型: %s", dbType)
+	}
+}
+
+func loadDatabasesForMySQL(host string, port int, username, password, defaultDatabase string) ([]string, error) {
+	config := &dbclient.MySQLConfig{
+		Host: host, Port: port, Username: username,
+		Password: password, Database: defaultDatabase,
+	}
+	client, err := dbclient.NewMySQLClient(config)
+	if err != nil {
+		return nil, err
+	}
+	defer client.Close()
+	return client.ListDatabases(context.Background())
+}
+
+func loadDatabasesForMongo(host string, port int, username, password, defaultDatabase, authSource, authMechanism string) ([]string, error) {
+	config := &dbclient.MongoConfig{
+		Host: host, Port: port, Username: username,
+		Password: password, Database: defaultDatabase,
+		AuthSource: authSource, AuthMechanism: authMechanism,
+	}
+	client, err := dbclient.NewMongoClient(config)
+	if err != nil {
+		return nil, err
+	}
+	defer client.Close()
+	return client.ListDatabases(context.Background())
+}

internal/service/sql_exec_service.go

@@ -66,10 +66,11 @@ func (s *SqlExecService) ExecuteSQL(connectionID uint, sqlStr string, database s
 
 // executeMySQL 执行MySQL SQL
 func (s *SqlExecService) executeMySQL(ctx context.Context, conn *models.DbConnection, sqlStr string, database string, startTime time.Time) (*SqlResult, error) {
-	client, err := s.pool.GetMySQLClient(conn)
-	if err != nil {
-		return nil, fmt.Errorf("获取 MySQL 客户端失败: %v", err)
+	pc := s.pool.GetMySQLClient(conn)
+	if pc.Client == nil {
+		return nil, fmt.Errorf("获取 MySQL 客户端失败")
 	}
+	defer pc.Release()
 
 	sqlStr = strings.TrimSpace(sqlStr)
 	sqlUpper := strings.ToUpper(sqlStr)
@@ -89,7 +90,7 @@ func (s *SqlExecService) executeMySQL(ctx context.Context, conn *models.DbConnec
 		strings.HasPrefix(sqlUpper, "DESCRIBE") || strings.HasPrefix(sqlUpper, "DESC") ||
 		strings.HasPrefix(sqlUpper, "EXPLAIN") {
 		// 查询语句
-		queryResult, err := client.ExecuteQuery(ctx, sqlStr, dbName)
+		queryResult, err := pc.Client.ExecuteQuery(ctx, sqlStr, dbName)
 		if err != nil {
 			return nil, err
 		}
@@ -99,7 +100,7 @@ func (s *SqlExecService) executeMySQL(ctx context.Context, conn *models.DbConnec
 		result.RowsAffected = len(queryResult.Data)
 	} else {
 		// 更新语句
-		rowsAffected, err := client.ExecuteUpdate(ctx, sqlStr, dbName)
+		rowsAffected, err := pc.Client.ExecuteUpdate(ctx, sqlStr, dbName)
 		if err != nil {
 			return nil, err
 		}
@@ -220,11 +221,12 @@ func (s *SqlExecService) GetDatabases(connectionID uint) ([]string, error) {
 
 	switch conn.Type {
 	case "mysql":
-		client, err := s.pool.GetMySQLClient(conn)
-		if err != nil {
-			return nil, fmt.Errorf("获取 MySQL 客户端失败: %v", err)
+		pc := s.pool.GetMySQLClient(conn)
+		if pc.Client == nil {
+			return nil, fmt.Errorf("获取 MySQL 客户端失败")
 		}
-		return client.ListDatabases(ctx)
+		defer pc.Release()
+		return pc.Client.ListDatabases(ctx)
 	case "redis":
 		databases := make([]string, 16)
 		for i := 0; i < 16; i++ {
@@ -254,11 +256,12 @@ func (s *SqlExecService) GetTables(connectionID uint, database string) ([]string
 
 	switch conn.Type {
 	case "mysql":
-		client, err := s.pool.GetMySQLClient(conn)
-		if err != nil {
-			return nil, fmt.Errorf("获取 MySQL 客户端失败: %v", err)
+		pc := s.pool.GetMySQLClient(conn)
+		if pc.Client == nil {
+			return nil, fmt.Errorf("获取 MySQL 客户端失败")
 		}
-		return client.ListTables(ctx, database)
+		defer pc.Release()
+		return pc.Client.ListTables(ctx, database)
 	case "redis":
 		client, err := s.pool.GetRedisClient(conn)
 		if err != nil {
@@ -305,7 +308,7 @@ func parseRedisCommand(cmd string) []string {
 		} else {
 			if char == quoteChar {
 				inQuotes = false
-				quoteChar = 0
+				quoteChar = byte(0)
 			} else {
 				current.WriteByte(char)
 			}
@@ -330,11 +333,12 @@ func (s *SqlExecService) GetTableStructure(connectionID uint, database, tableNam
 
 	switch conn.Type {
 	case "mysql":
-		client, err := s.pool.GetMySQLClient(conn)
-		if err != nil {
-			return nil, fmt.Errorf("获取 MySQL 客户端失败: %v", err)
+		pc := s.pool.GetMySQLClient(conn)
+		if pc.Client == nil {
+			return nil, fmt.Errorf("获取 MySQL 客户端失败")
 		}
-		structure, err := client.GetTableStructure(ctx, database, tableName)
+		defer pc.Release()
+		structure, err := pc.Client.GetTableStructure(ctx, database, tableName)
 		if err != nil {
 			return nil, err
 		}
@@ -393,11 +397,12 @@ func (s *SqlExecService) GetIndexes(connectionID uint, database, tableName strin
 
 	switch conn.Type {
 	case "mysql":
-		client, err := s.pool.GetMySQLClient(conn)
-		if err != nil {
-			return nil, fmt.Errorf("获取 MySQL 客户端失败: %v", err)
+		pc := s.pool.GetMySQLClient(conn)
+		if pc.Client == nil {
+			return nil, fmt.Errorf("获取 MySQL 客户端失败")
 		}
-		return client.GetIndexes(ctx, database, tableName)
+		defer pc.Release()
+		return pc.Client.GetIndexes(ctx, database, tableName)
 
 	case "mongo", "redis":
 		return []map[string]interface{}{}, nil
@@ -419,11 +424,12 @@ func (s *SqlExecService) PreviewTableStructure(connectionID uint, database, tabl
 
 	switch conn.Type {
 	case "mysql":
-		client, err := s.pool.GetMySQLClient(conn)
-		if err != nil {
-			return nil, fmt.Errorf("获取 MySQL 客户端失败: %v", err)
+		pc := s.pool.GetMySQLClient(conn)
+		if pc.Client == nil {
+			return nil, fmt.Errorf("获取 MySQL 客户端失败")
 		}
-		return client.PreviewTableStructure(ctx, database, tableName, structure)
+		defer pc.Release()
+		return pc.Client.PreviewTableStructure(ctx, database, tableName, structure)
 
 	case "mongo":
 		client, err := s.pool.GetMongoClient(conn)
@@ -449,11 +455,12 @@ func (s *SqlExecService) UpdateTableStructure(connectionID uint, database, table
 
 	switch conn.Type {
 	case "mysql":
-		client, err := s.pool.GetMySQLClient(conn)
-		if err != nil {
-			return nil, fmt.Errorf("获取 MySQL 客户端失败: %v", err)
+		pc := s.pool.GetMySQLClient(conn)
+		if pc.Client == nil {
+			return nil, fmt.Errorf("获取 MySQL 客户端失败")
 		}
-		return client.UpdateTableStructure(ctx, database, tableName, structure)
+		defer pc.Release()
+		return pc.Client.UpdateTableStructure(ctx, database, tableName, structure)
 
 	case "mongo":
 		client, err := s.pool.GetMongoClient(conn)