From 889f4f15d58d097a3f607798c66a59b4994c8347 Mon Sep 17 00:00:00 2001
From: huangzhenpc <nosqli@163.com>
Date: Fri, 6 Mar 2026 00:57:35 +0800
Subject: [PATCH] Optimize database and deployment: fix SQL injection, async
 auth, persist data

- Move SQLite DB to data/ directory and track in git for portability
- Fix SQL injection in cleanup_old_emails (use parameterized query)
- Replace sync requests with async httpx in auth.py
- Enable WAL mode and foreign keys for SQLite
- Add UNIQUE constraint and foreign key to account_tags table
- Remove redundant indexes on primary key columns
- Mount data/ volume in docker-compose for persistence
- Remove unused requests dependency

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .gitignore              |   8 +++++---
 auth.py                 |  33 ++++++++++++++++-----------------
 data/outlook_manager.db | Bin 0 -> 73728 bytes
 database.py             |  23 ++++++++++++++---------
 docker-compose.yml      |   2 ++
 requirements.txt        |   1 -
 6 files changed, 37 insertions(+), 30 deletions(-)
 create mode 100644 data/outlook_manager.db

diff --git a/.gitignore b/.gitignore
index 4bf1290..0854a6a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,8 @@
 config.txt
-outlook_manager.db
 .codebuddy
-_pychache_
+__pycache__
 *.pyc
-config.txt
\ No newline at end of file
+.env
+# WAL临时文件不需要跟踪
+data/*.db-wal
+data/*.db-shm
\ No newline at end of file
diff --git a/auth.py b/auth.py
index 57bd084..7f1dad8 100644
--- a/auth.py
+++ b/auth.py
@@ -4,7 +4,7 @@ OAuth2认证模块
 处理Microsoft OAuth2令牌获取和刷新
 """
 
-import requests
+import httpx
 import logging
 from typing import Optional
 from fastapi import HTTPException
@@ -34,43 +34,42 @@ async def get_access_token(refresh_token: str, check_only: bool = False, client_
         'refresh_token': refresh_token,
         'scope': 'https://outlook.office.com/IMAP.AccessAsUser.All offline_access'
     }
-    
+
     try:
-        # 使用requests而不是httpx，因为exp.py验证有效
-        response = requests.post(TOKEN_URL, data=data)
-        response.raise_for_status()
-        
+        async with httpx.AsyncClient(timeout=30.0) as client:
+            response = await client.post(TOKEN_URL, data=data)
+            response.raise_for_status()
+
         token_data = response.json()
         access_token = token_data.get('access_token')
-        
+
         if not access_token:
             error_msg = f"获取 access_token 失败: {token_data.get('error_description', '响应中未找到 access_token')}"
             logger.error(error_msg)
             if check_only:
                 return None
             raise HTTPException(status_code=401, detail=error_msg)
-        
+
         new_refresh_token = token_data.get('refresh_token')
         if new_refresh_token and new_refresh_token != refresh_token:
             logger.debug("提示: refresh_token 已被服务器更新")
-        
+
         return access_token
-    
-    except requests.exceptions.HTTPError as http_err:
+
+    except httpx.HTTPStatusError as http_err:
         logger.error(f"请求 access_token 时发生HTTP错误: {http_err}")
-        if http_err.response is not None:
-            logger.error(f"服务器响应: {http_err.response.status_code} - {http_err.response.text}")
-        
+        logger.error(f"服务器响应: {http_err.response.status_code} - {http_err.response.text}")
+
         if check_only:
             return None
         raise HTTPException(status_code=401, detail="Refresh token已过期或无效，需要重新获取授权")
-    
-    except requests.exceptions.RequestException as e:
+
+    except httpx.RequestError as e:
         logger.error(f"请求 access_token 时发生网络错误: {e}")
         if check_only:
             return None
         raise HTTPException(status_code=500, detail="Token acquisition failed")
-    
+
     except Exception as e:
         logger.error(f"解析 access_token 响应时出错: {e}")
         if check_only:
diff --git a/data/outlook_manager.db b/data/outlook_manager.db
new file mode 100644
index 0000000000000000000000000000000000000000..15e2957979eec46b0f0c7e1cdd1b4e1bcfdf4399
GIT binary patch
literal 73728
zcmeIbNvtGEnwXcbvMVcV$(P+jNd<A(?DSryx`LfGzAstR?Dp^_Hg}KkEh0PyJxSl)
z!}m499U!0{6{i6b&|EYS1rWp>1dxP8h|ocE;6MU+kf4jMf*=vPsE3dUXgO#kNEdl#
zR#iu?^`rr$nQnLFdl_zS@tfIazx`(aZx-=XSqN+QftQtuSwBE-ef`$e)vX^tcyR01
zt$#H9{MzvI#r2Kh#n-;L8UDYzc>TJU|LE2y?ccd~|Nppk{q}F&x;F0r=O6qJAN)J-
ztv~o1@8a+MD|i3fyT#r2-}!^Lf9sv)>jaGHBY}~?NZ`*SfzRH*_s)j|arHB-Hm%sT
zW3zGG$GO=hZdyOCYO`*tS0-LF3P)?)1C5>v+=EwUdGP)B9=ve5i5bQZG;Xgw*eDB;
zR*VNL&iKJg`JNU0EF;VDv@U25K5Eh^%}(h@FK7RvzIB+mPv7)%meTc_)Oq}d9CqN^
zk?TAj=8z{9e6CJEcu+M}?xxQ0{1+k~ltX*U=!I&2^n(YsSvrr?Cb8V|<%fBhox9g0
zKX%V~Sh|lLv#XxZf`C7G@bsOJtH3OuwerE2Xxy_MH&xiWL*dVI<xOb^X7xnWFgHFW
z{$=hVQytdvOUWNEuJ3&K6XNPtI5hNJ74a~wJ~o>=dwT!)m7V+;dS&wc`h#~qq`!0Z
z({DU|Z|IyKKkfU+wmEQqoVZnG`tIY<xk$bDxk@c0mfJsg{aYTar3V*p`~EM4eeAq{
z=R@K<SAX-Bg+6`H#T!3(V|h<AzF5@L#E--G-uaOF-qla9zAVPH?W`FFOl|trvxZ)#
zy#G=`mrtMNe^SzA>i3@&wSV`{htM~#iWf_IzLe^{*Ol;jz6<Hq=aPT=+wZ*d;YS}`
z{ciJg<X2r)yUAlaOTEy4?&j|2vY(Cg=N`Rcgh%e@y8XuS-I{Upx%x?K?SZ5V!plRp
z$)D)%vjMpfIaQ;@&6g_A=!(Kg+GFjDC(n)7kEy$NJ`_KCohComh{w=#x9@&-{q{Q_
ze&;(^KeL~Lxlovkmv^3na`E65NJ8hqLejVyr(7Dn2ehuO7t$a{9NO`6>z~SeHgI2$
z=ohO0RXMB1I=c2V)An*<)f3b9%vQbpuyk#AFfGn6Ov%f6tjy^i=cU_*?&)b&UXx|e
zuX>nS-jt>8@)s>r?Vjsbn0>o+{~svG%Qe!ag{*VW#={RD{DS4j&+8I)=gx<V@4QZz
zF8cm4baC^}=4*F8{A+*h%6K-so*C21EgCnq-Op|77q@Rer%f+B{C;XC?hl5nAOCK0
z`<)NJ_r0sX_06X;FU`f}>#sd0?efY0x61j%7`~vE4<0;x_+Y87r9b(@KmPe2|NhVa
z@!$RV@BYI-`NN<6i+}u|{K+5ulYj9~KYNb+lf}cIwU7TSM&x&+t9L&9<~OhY*2kB;
ztIvs6Z@r3h^$NxpL-~zXF*mE~l$FjiXcyD<%T(g<$@*-tEHBRNFJ&DTKBZd)kLxUQ
z(-*qqrOf|-(*Di2?tI96^L4}Q3+RubFJ9dq*3);Ntf}7~e%`wOr%zt~+Wr6Q{-3`6
zw{L&v)<1i4`xoW<?04R|%Y9S-*-sFJb*<7A!+KaH#c{Bd(;sI|9cNkeNgjA7Cq{7!
zqFl_QP|JSkk|z2PbqVC5MOyAd96@l@hAD@@5b+ZR1F^@d1bqU2qJQ#`Nqb5JNo^k(
z(iDNWEwO`v7M}@AIzkFbk+aT?VvOB5dL`3yI;g#UANNG#!a33Ki$#DbbtACO@!ZYr
z#&k*%Em?Ho$8)w@1oNq|;`EiiM+HqN&nQgWio$mp)SR@Vy*{ju>bBlD;ttQI8Jv~%
zUTiXG>zC_7#Gw_j;*+{Vgi@QxJ_EIO5TDoLVxg}&bm}07vxGN<U#x2-I#0xtIByIN
zNzcRvTj`|7278CxE)r$Bh%CTZ^fNJKHasKbWM761%`htk;uZWfjdI`UAnItjKy)wy
zVpeHFOEaK3^Mr#;&G{OYD4CgN3l)%RA}$IE!Yd=;&t6C#qL$Pb#p!4tD`z${3~j5g
zK#o}<HY;KQ;q*Q;%SE|u2zOJ2?q2H_YSB+v!tJ)O$#0lijwcnmP0(K0B_SK&vW*!_
z7B;Q0uyAahXos`L?;@Iyv=&*`K+K8=;wOl3jMB(8P&r{%Eu-aL#Gjfzvi0x6AdEi*
zk%u7m07M@l#3P7!Mbc-^ox6+gJykHSOx>!Um7(W_DM?}k(_g5V8&<V_LUE9wz?-TW
zggu@L@aJmg&(&Q7>h7d651X9C)J{9Kh!;%vBnF~F<tqXOWnwFy9mzXoOE}4cL(5m>
z(4+%O&!<q;C#fsRiHFWgy{?o75EPVGPWEI$xDnE~>5hO~kwk5%pG{V=7%nnD&}BrP
z$^sOo-D+5DAq+Z8hcR*>u>&GtC%-%~KsME5cFSAhT1=9P@3^?2w?`wE*Wj|1cfKPx
z5Z#tXSa(!f@<k1%WoqVPx_p>Q5m#?l#FRn<f+B-Zjb~d1ZYI_Wnt53c&*^w`TBIv_
zP#{7A(0LkheNlIM?j9s%3P|0ILunDf+;D-|a4|@U6UmsdnkOa7T;LDezGsES>@ery
z8sou&<T?c{HXgvWe90cX{Q;TO3w*OkDkho0&~{cFEp-8$CaX=+))SvIl_^uM#Drod
z?1@s!>3mtjlL~W1)<rkXMm(>MjfU)fH;6s06&JkWq6q4)c|>!Ms%0M{9x9Jv!o^sz
zUd){Czz2dusW(=$58uAK`=0)L7=kcCIjB;W2X4ujNp20+jDTUNaOE$x&8_0Jb&Jfw
zVTd3c%O+hAF&|nWXg@@8%Xw(JIQG!ONyH@xkgzTAiBW^e3!`={_}sGnh}@J$cao0g
zrV1vTiM1`FISuawWnGmsYQ921<A?&gneDIkhY3U>I;+dFaVUcWafU@7noKb>P2y<B
z%XYbudAdBbLbt#OPmNLm+Q6Zvh7paMrhfF$HqJbglyzU6^Tx#Y;VrM5_-4nP=|khM
zy@bO<bF(V9$5c%YxW~^YoqBGlLHF6UMjU&&&i7r-#xywH)Uaz7RSG6Jzt`~HGIl4s
zv$UNV9JF(Vvj9zi5GM$YY5jJ`sjOEY56rro$4k+3XS4I<T=Vhdm}0#SG^obpq0a)b
z8&5OV-tl=e4Kl(z!<m~F3&#{hy+S6k4r(Er3s#(Mm2j`xQ5R2vqghCu+sqmK7@kU|
zX!1(4#05YcMd%n$o4nis0gRfH)07K%VvSAx?>=XMkVhc#2*fW9(C0~?-T&HM=HsWD
zu?_7yD>vC`PzfA`(F=X3&Df5PjY)wd4pKMO2n@ckKgaD_Lr$EbWIfmxksDW@1x#>g
zQe&#vV>rm`bvtvUaCbCt2+-V}Ag^rPERES*OMRl@a8b20X0suKRVx8WA#PDIO_ycX
zv$Ml$d!#wbU?s+l&H0Xt=P8F6ovrx^7wlI+&j%+X=nEp*&W;j*x0AV$&dc>MBn`uL
z=lxQE&JizC=GIT$Y`2IBoyo~eUILn3hJFhOvZGXXs_m15n<G|X2K0K+hG_r^XAoC0
z*i!_(jE*4z*sTXKNu*X84CRUL&<EY<ngf2Wj}Q*lk%>9-G_$1b(m|+p>hAdIWa8O|
zo0a)a+t&okts*U&A*^ProphW#CZD*1kRm<Mc_&vn51MpLSpk;|YfaP;0|W}0;4aJ<
z{sLl;TplwdnPlj(+|bP_rcvbP8u3?e-~IF>{r847&oXmDr3rh40^tj7NW9W1EDxhd
z62We&49`tQK}4VAx!kNVDDNr`4T&oDXfcHSDWOiJh6PEHS!<lR?Nu2GR)=|(K#J-H
zFs2&B&c!N24pA*mH|;7ARMscsK3dcDj4)_0l`J~<w;_IFDlc4tTCkMn5~K^usjI^n
zn5SB3H34Y@9V{uXDs>26hpXCZCj4?H3zRn9aedtK$mTfRCDwunHC}M-erxqu3p(eW
zuc$MBPk9T12V*hm_WoX-W7)><W|gyvoPAT!;Fd`%Pz7TC<QE;baC{n}m4IcJl?%d<
zOEiqp0$b1IS_~;zCtufo*VHJZ2SpfbqJCB+naxn=Ohg`wu}3`S4(_7ib<Qpuo~{{i
z%`HuK2UZ+S6Ba1pK2D?lb^=T3L|?KjgDY#%PJ&cSA|E2#JuwYLajiiWxLk;3m`t_@
zcY4fqn39~lhRB<mjIY0SmwRS1R%RW<uAA<%%&AD21TVBCuIkup&lm+E_^|Z7=`2EA
z%pwKt<WsK7XIw-8iqNYtDO-9MF64Pjmw|`q>nz_BItFw~#gMG1un{%acrfLHyh8~Y
zFfhPpP=Dk0v8iThwo-Sr0b~oen)TGM#EIfQs}8FJzuuPz3ifGsm1fQ?p0Utrz3$bG
zY)A}ASn;kpA_r-aZL==fo%e2F^9x<kJc4FxVuER9P{TRDz_4VgqExveS0$IN_cTjt
z9J-#V<kao$`LN91Eg@oO7V?1##bMz=fK_uslm*#EhmA&T9C0;mTQHip3);|jYPg-P
z=ZEPbUG`}x)~lVfs70EY@6WV@&EmxbKAb@^rFHP!7jU66`(=;XHaMUA8Rn3TRcu=W
zOh{|n?dDn7E?L`4XZv9p%phu$GyADMOlDMSHDt6hQ;0c4b<Wiy)E?9DbmLj%FJ0YT
zJyQwM^#e0i%~R)=C<bA|Mr1CuBJZ2d%^eGaQTXO-3lP50icCGT3wf)qH1LF>UUG_T
zU;+eHxmpWdb+TY^DrKf2GH0yvLy6c<5*<$c;+!Q(<ek|)HeqRau`iF}e7#}pY7wX+
zyYGQDzAE<AZ0`dIlP!4}Kd#X8+T+eH50*L8;fcXvZi4kDnYck~uca>L9XL$Vm6Ko{
zVs4COG10jencH!l2IoWs8f2H|;8fF8X|_jfOVkpqLZRLi5HQ+fe!M;4c0iR!!O;M3
zB~kN)wwb&c*2U~@jg=4~?R}QC8L6-(dnZB_IXP`%;ArfT8fXN@0|}<nOsQ<6xv{QX
zL>MM%gtc^Sb>7m(q0c6uk|M6Z0C_u|ksQ2=$T~S1yB$j^NzGclB(HXTgzBzkDJdud
zdg@J9wJC#L)PtFy#PnSCgUO7_ja{(UzG5aBeEV<Q8-9KLo%e>{_pfi?x(=@Y<@N3R
z+xx$E{cqk!?*HNS>i!?!|L52L{`G%x{r&s@#*k^eMgk*&k-$h`Brp;f35*0r0waNu
zz)0XPI)U%r7O$S|ID}@p9L`Hr6bKO;*!VIekO%j_eS2}G)^6*jOjFij1(V3es+x-|
z*MH^q53iP4knV!v=-Uv+{zY&)5AOZt+td}E`a|H?Xdvnrk;**y;G^5>6&HuSX}NVE
znuGMz?GXsXvc9^I|Nb{`|L96_Q`hCotg2VOQ(QcK54b(MQnKODU_C8|9p4H=V0d0$
z<aqZtZp%YE%`$c?@yWS6KZwH=#voc$F0$QyaGSe&(?;?;Pf)yhBk<10w|Ac-{fbST
zx4(6pxq3rT|7*W~`_lpHD?_}upVahC(Y?36eS7upSHybmUH|^A`|p4M*8M-czqtP2
zum9ls<9q+jz2Cq0!w>$K5B|Xi+6UL~|7Y)?hsWbJ5*P`L1V#cQfsw#SU?eaS_?03c
z-M@27{KgkYvtI8g{q|2T4)8$OBZzzilCMY-uJ7Dh4D#OWQ@tdOc!a$u?MV`U@6N3s
z4$@xde!W5t`m!99WIwobiyGv-+EaT;3jPSiUTE8sB>DY2x70z(4V=1{L}HJy7eziv
zn!R`D){h2}ul4_4A?PLU*w7WLckkSqJrVRKSMeob$Rh}Tp`lNbHh1sbk_Ta5?Nz=c
z5q|!x=@U(PlC*s1&Mj_`_$CMRC0WoT`10K96IoA^ggehv?9IOFE2Ke}htQr$gK+2V
zJGXYo7X#oc+}hv%_Rs(5Kl+n@`#=2e|LNalo_;Fw+n2)vL<W_81cEOR1s}oG^}oDz
zhe5Qj-MPhlgdlHljGvb9^MCTwpa1?Jy(D`W5y(rjL1M61AACBr;E6lExqau>r$Y&^
zajoAh9eIH^NIgOj{jH(r28nNS$lomX#ZDZ=!qD$r-MO_ID*Y91{8s}X4mZCr;s^N<
z^5hi2)&2kJ*6?q<Mgk*&k-$h`Brp;f35*0r0waNuz(`;uFcSEsAn^68+uytT{5t@i
ze&5dhC;tENrGMi!5*P`L1V#cQfsw#SU?eaS7zvC7Mgk*&k-#r8fhV8;AN~Jd;tn30
zHWC;Kj08pkBY}~?NMIx|5*P`L1V#cQfq}rd|39k1NMIx|5*P`L1V#cQfsw#SU?eaS
z7zvC7e)$QE`~ScEeLS{sBrp;f35*0r0waNuz(`;uFcKIEj08pk<KO=qbzmeg5*P`L
z1V#cQfsw#SU?eaS7zzB!5E%dd->>lB{~P`PUzu?}HgqH~5*P`L1V#cQfsw#SU?eaS
z7zvF2|F5|JKYst;Xaq(ABY}~?NMIx|5*P`L1V#cQfsw#SU?lL%O<?@||1Wp{j;$LB
zj08pkBY}~?NMIx|5*P`L1V#cQfsw!y0{1@nuW#Ld_n+Om_ow&559AO2`Tgnj|9t)T
z-~T_~|A+4%-hb=8KYH)@-iO2E@frz?1V#cQfsw#SU?eaS_;W)*rLV<bzjX__b?@H2
zZ+z?CJtio_st(O`X(nz(fe^8QjUQ)C9cNkeNggz5lxC+C24Vamh&%+b2QcyoA|HVy
z0=j2AZmO_#<sV-!E`_SK+qx;!lyz9aB(kxp<|{=KkFZOTs~=te@KWS53({Q>*6vUf
z^ajGvOJR$@eob8pqf_6FO{0M*_$x)>k5KHQsoNi3tCym<IP6W!tpm{<TAR8(0)bf8
zS6?X?dxTxe6@KgbN0)LHH+5aU%&L0jJH-v8J=Y<dPp@asNy{v^tf%GBrxk|4@Vxv=
zi9;{L7wy&`UCWmenZPV#w-W8xZ2TY&Qy7D2@$zW&t2GCH1Q8cvfBH6d{pq)m;rd)3
zmzfhPP1qw8_=~=AtE#DTH+5X+OGQK<K-41`dxU^rCSeZ-#l!~P#4eHsbp@$M2y&4G
zA&-zD<0by<!>zCV^j-X#xva}JwCk+gWG6R{ar8p%UR@s;d{PodT$V&ULcvGSW#LbT
z&yexCTtgLKsLxN|L$A5Zx~$APh+Q|`WtmfvFbRIyfv>I%G?YB>L7%S-G9=*_NzdTG
z&_&V!=SgKQhmVC^ul`l!7dAt5{lH9B^VGQ|ib0sL5t)nX<YxF>HxW++LYFmpRxE^E
zD8gVM*>4SH{8{v1O<i-BI?B3MX^LTO2SW!2OF8|rlCQIC(17QnQZo6xUE|8st?F4B
zdR~~4Bt|g(4MakhB7gcRalLyA^BWKU<~ROz;2X~jaFz#d$(TuQ4OJyz7%B#%`h^vC
ztLKmoY7Rfb&_@V$(QVJv3Z|kOC2^d>KoFt`YUoA0%Ism#Kl;tzEKhw^mA&blA7y!$
zgw60%=Si5kKZZc`6BrqOFz^$2P#qG4hrwSBWBg*oVNw0;^Z!>@_q*%=^7`ujA6)-$
z*WUeq?fy@$7x(|W`_%Qnb^RY)|Hl3Q^v}&?H&$dMFcKIEj08pkBY}~?NMIx|5*P`L
z1peO=xXGvg>2Kd&T)jC2_~XBF`-fMr3+esnquc7$4dQA){O0W+UA;C=_FKU1*_HC9
zxYwt@aa+Fn>NwV;2e-MaH-!?YC+&T6Xn_3A?bX#+giVlNzy0aJ<dxws>@VM@u3jCr
z{OiTXw|7G`o`i9~B8otK>o#-shM*Syq@`~PG@<tfy?N)>u>b!*zW-mn`yapa@4fxE
zZ+~aF{R?z`_B-#~<-V!^>?a8FratvfPK@FdM7fwpp_cv7B~A1p>JrF9i?rN_ID+7)
z4O0$*A>t<t24as@3Hk*5ME~R=llGJdlG;8nq$vV#TVe+TEj|;Lbc7U=B4?c&#TdJB
z^h&1ZbWnTyKJJOeg>$0e7mEN>>PBFl<GGvLjp>vkTC(WEkLPT+2<B5^#px@3j|!Sl
zo>7>#6@~9Is5xmzdwp0R)os0R#2ubZGdL^jz1U>X)-TtEh(jx4#V2)#2&FcWeFkdn
zAU?0f#X?_m=+r?DX9;fzzgX8wbe@POao!jllAehTw$e$D4fYPXT_nnM5m|t-=x1We
zY<Nb<$-WF3nqgK7#4Gq|8s)yxLDbQ5f#_fa#H`YUmS#Y6<_QOxn)5X(Q8F{l7Ahds
zL|haSgjYtwpS_SgL@lW=iqp|PR?ci@7}{1}fgH0!Y*xeq!s&fxmWy)R5bmZ3-M!W=
z)S{oTgxhUllix7498W5Ao1ne0OF}llWg9b=ENog~Vd2<1(GF*g-$gVZX)Us>ftVE$
z#7_|67^RVGpmM^jT1Lygh(9%bWb5C(h_-=4^o<xI+0Q4T!yX3wnRDmv;(JdO?9Dd8
z9R{p@LUE9wz?-TWggu@L@aJmg&(&Q7>h7d651X9C)J{9Kh!;%vBnF~F<tqXOWnwFy
z9mzXoOE}4cL(5m>(4+%O&!<q;C#fsRiHFWgy{?o75EPVGPWEI$xDnE~>5hO~kwk5%
zpG{V=7%nnD&}BrP$^sOo-Ad9pgh6NNFh&j}c0dH|<d-J~$fkPCZh1>wi%C-P9Tyk$
z_GrZN8eF#W&UfSnqTBKa>yAoGzNo>pOwC+Omk(1Z;_B^+m{MpkL@<L;jb~d1ZYI_W
znt53c&*^w`TBIv_P#{7A(0LkheNlIM?j9s%3P|0ILunDf+;D-|a4|@U6UmsdnkOa7
zT;LDezGsES>@ery8sou&<T?c{HXgvWe90cX{Q;TO3w*OkDkho0&~{cFEp-8$CaX=+
z))SvIl_^uM#Drod?1@s!>3mtjlL~W1)<rkXMm(>MjfU)fH;6s06&JkWq6q4)c|>!M
zs%0M{9x9Jv!o^szUd){Czz2dusW(xxA({?;_Tk%ici+>04?~a}+5R|f-6C`FA-YRA
zmQA`KVm`D$(0+*Gmh;ebaqOXmlZZ<YAYohJ6Qc%`7e?(^@VRCC5xFUi?j#+}O%+Tw
z6Kh*Ua~j?W%DO6N)O>}2#t{W}GuvP74-<$&bXJ#T<4^_%;tY#EG?`*%n#9qLm+f*R
z^K^M=g>Hcno*JbBw1GoS4I>&iP5tPhZJc=~DeJyC=Z%T)!&_cA@y(7o(}%`idkKe!
z=4MrHkExm*aF3r)I`!O8gYL6yjX3slo$tGvjcIVYsbSYFsuWCcey`!XW$aFNXK6b#
zIB4ezX91c3Ax;n))B5d>Q(3P*9+-7EkC&q7&SvMyx#r`^F~xcvXi$yGL!Sj=H=bs!
zz2oy{8f1ibhBG%U7LF;1dWB469n?ZL7pyqjD&bzWqb{BTN3)PRx0y5eF+7z_(d3n8
zi3@-@iqJ8hHhH-N0vI(Xrzsck#2TCW-+j&i4ZAeMzRKlZ4)}S}XZOE$m-+aqX1rmp
zug%zwj*UryBo0zH)d&o}us_G`T0>5pp=3SS7LglQo&`*BXi{UU*kd@z>vcPGq;PjM
za0t-coglAl+$@dRTuXhT;c!v4GiI|PgH<a5Ng-}gF-@0c*0Zz2YI~$P%U~sD*sGoI
zxOkp&h|$@apK!r`1@wGyGJ?J!lI`p$0eCx^3+cRE4@1&0TzB3t1?U{{B4uv<)XjE_
zn9!M=%;Y7Y*=6XrfFL_cWvALcIk-7u6=p!M2W^-JkZ=ZZ6@xuR(97r;5`f)$5R*h|
zmBCP+=nj3*jjlQ1=lTfYU>%v5BTq9++AbZ0YNzgwpH3#8ZMa#P@3ehQu-q!rq8Y+!
zw%SR@xnuH)D+npl1D$trmGhuU$CMRtxv<tm4KYBVkO}U>jNvaJ_Q>TiLy}2`9?K2g
zoMIY9Zmto3_4eIQKhl41So6GQeVKTrQ&=8GktBlMR2iO|jDm<h$#c0`V^H2z92yc;
z?9pNf`%^-lNDT{;BD2;wbK9#j608pMEP)i&4PZ<)h@Fd7h8&_=oNn4xAgHWQ#(lJ=
z>ltCtU@BR3?r%f<#8h6m0<~Z%%_T?|mQz<B_N?+$3#}#~ZJ>iC#Z{#a!Rv5UTg`-D
z&SZhoraP{WTOQdQr@O>j5TV8kuHA2~9&178yz>=x=I<$QLGWNKCf(lOt8*;d_}#2>
zHj%S$3L4xpX$7i4%%A+C!xoNDBeW8*?6Pt}7;=e*F<M~jnOut@1?%MN+V7egW%Qs3
zV@=f0iX^ic>YRzlV=?xK$K1hPG`!B)Wy8}o1FpHH$?m|4qiMndCEUkp)Zb2EDV^v`
zmSu2dE!s(tib>={WV<J(fhevur~;P@u?&;R_TWyBxeim3lh+V=Q<L%ax9)P!Ovam*
z|8Z5vUVFwU2*HP??@ebB;$jvlXeXa?RX*b)0#Jlrg-O}cyKo`TTe=K9L|<q5p3pI%
zQ!0jJMTL#1xyFMj7vvpE$bf+XK7;xjw~tLVOS6@_qYWTixYewuh9yoE_gQsV9r*RW
zJW#Mtv#T_7X7P-LPV05AZe&AZNWzMD)e$*Ji)@>9$?m*&1DjvyislhCTN4vZD}x%&
z`2~h0OBJQc6}c+8Y`v#hQsdC|OeLpoZ_kHi_HGFgJF}1vR45J$4+5;36QV50E;?*9
zV&jObY1@L)yj{?Swo}9HY&}0r59zW`L$O}%oJB3t%zS^Q9c&gaCh*}5k}0i&=e~do
zmDw+Q)V9I-+|MwFWUOM_8el?N+io|{!gk5pUOL+k%U}jko1EEC?O`&bQmY}Om6<}!
zA*yq(7NPc-hNm0PB7f=X?&_IJe1+ed_f6;Kj)e_}4Q{@+0O1R*$ka2tkhkhe15X(0
zC8x*+CO}Y?tF_QoCkqCrQf3+=bH*w^l!)yl(c#oD&RLQ~-kIHF6PAV-`|>Ex*Bi#J
z7J(|V`yN>1t71>h_CA0x*^-y>;|e{mJ?`xCV3{)=o){eFCRlHhi5s-`TIyonfx{$S
zISJMw=EhhS6P;_3xgFPOa85*^L3U{lPBl%HW_!f8L@mK86zWX@0i!+U$J+yL2UK|!
z91ZYR5;ad~o5`DDUCi#*SP2o*-e*ahkqTR~cOq1glhYOkj>aCTfkt3FkYGB^l*%@m
z8|%tNgkh3KSWDMd=Phj<`fLI!DdPGIkhjwr$-%3Ltdpa$+p(mQ)U4G@@@m&dsP0;p
zl7b?jr`}{$n=;r%J(&4POwUz6n9Qi$*ads-#xuzi|NqWgw{PA12k&cl|JOTz?`xak
zX1sot2z<7@clU>be>*rHuM6NcdG8*(0EUM%C^z<O(F=PJE*0gBNHDYpa1@nbku-$H
zOIO5!vOzG!T!<TD4>>n4GuFrG-P&}fbFa&sgT0g`g`(|wziLHT)NB5rKx&vzDuYGr
zeX`Y${=zow;JBYGnYba;Qx&ff4B8)9&hBRvoi%E1Y|l%koiJPe*t$!*92TkBiaX=3
z=53^GccM_h+fRA8G~0wra2ws_yZyQkwUgBqFzOI1C?S;~K>V<lN!mUwP(y&ZG9e3H
zgTsoIGpoae=G15omPYYL-ioyBP+l82MrXLYohOEtRK>*{jtq5YkV#q+>ppG{DLh0&
z@+<?6{4PCHM%+;vN+Z-hI!cpxGo8%md^AZ;Bw|xRS$O)|*~j%H0N}Z1tWC_Y``X{`
zr%S-(cxA8xD5*-VzpB*U#c_V;xwf%&GhT(76~3j3b46NuV4!@K33~x1(9B<*JzZ^J
zk<$^w4d&%6q)#)-F*D6XW{@A7iv0X6^U7e!)A-3}ix2KnA3as3S4TI`{V9q}1Rjnw
z;n+=e3BHVy9A_1ENOfgjw-hkV&vfS40?D{c8}1--6&;o~l?CUNi`MYUk9IBKYnyC2
z(C$P%hjWuRR?Sg2ChUO;z^N{D;ly+ue~ybbH;b|rlM)ByjKB&|23S|w*?F6&r2&Hx
zwKt@*xNn37O@R&!MQ6d>2mzAgV5u_ZX|~`+tFBOkRe0~XTBWKYxkD7tQdS7Nq=p5m
z59G4rVY0P5EinKUxniA){W{6)nYb(FwO{k7U<!<Qm`K~XSPn6sHO-s2ok*MIc`soG
zb&~o`T?%dQ_Gwdx$Px`SS_rZwcH|R-q(rwZs%Z)rLq~5&Gu<_`Du;EF$4e~@r24dA
zXHDrHvxPj&v|=`4^kr-9N#W4R_IYETYZ;&5$05Lx>ybXumE1fpO|6^iOS@-NvaF^Z
z2jQCE*z^#T6E|XzaS*zmz-1Ks-7XIo@k~$W8nx~S(krqJumqL|l|X_Nv-sl+E0#Ct
zlJfpt^;=JM=?0qzZCv#PNP*~0l?p*0Pif=x&|5C@l%yO1atKvscvm545JU@8*i*$0
zo%0k9FhNak=T^4NGxX#XaiA{u^FvE*CWEQTK;j^u&~+*WTty#?j)TQ?ngypB8VZ4I
z8=AWb<~h0T^}S01b;zw`&%;Z;-0y(Q>F2_75=A;Sbb}nVr(+XP{b9L`OejotG<7;0
zV1S!Y{t)x1xrmxn>};<o`xB#ay@;vE$u3k=sskME%hPJ6?xrh-mU&^nl!3G1ZP)N=
z5(9&Wz7G!jV78}gkhG|EYNoLX;2YSf^*TsVMmY%t$mS-C@3TYB4zWzeW9me}#EF^p
zhNi5bjJDX|i12n1(m@7hN`%0^iYO@$ue;I#PL`O9gl{&uw#_pOJ}-r$z<XwO8jSNQ
zI-3=aXX4p92TFcsoFF6<6S9xcsas8sM2X-_Vs>I3)ZSx)DYA#{zS`hbfl5qa0Ly$9
zo+EY2t^AEW^&4z(<n}~8Z(dmNyg{k{#(Q^vG#IGCb$;zmQ*f%!S!15jVHzQBtWMNL
zBqgb&bgk2ZjihDVhN7Re+<`fZtdNE($_mF~J3;8J8Y!(w<ho4w?y4Y2wV>d+Y-#IG
zllQ?6YPEd`mwVTk7dGDK#6CG|uw<qL3qZ=ES*|ymM90iLve6LQqQ?$*y$I9KfN%hJ
z$`H?wmz#<>_!ALMc<wN@wQyVYj;fG3wWG{_zAdeqb}b(1pwnsHpN<RGUQC?E5`;)B
z6%!&3A%=;^(h<zmX@s=1upU@uh;Oayxiwc8Mgj~z?l}W}(3yyo-ihil>w8r+N-CFF
zSF(tWM~W2>2{UcuPa;%S;VA*`w%cQTR9a!!gRsrOYzquNL?uVek06p&XVhNfgS?%Q
zrZZS%phX6k6kq$OEhQzRBjzfk`t5W-Xq(j*3s_|x#g(@8F)od{x+O}_mAoG3ChJ0m
zW1Hg(2<Vv5HYm+UAgw&vBtBbk+x2F_AJ235fT6Xj?QG~MA>j!f97@pg^{RBtb%Cs!
zQ{*Fy=bZ01sMzM+yR&C=;2XCqgEA?y2nKNsBW^quKIdi?iJDNYjG!$5&EhPGcRsP%
zHHZ0XeX_h5=T6v~9F{T|x;CXloa|wbIh>N(D1#+)PN~dT9K~+t=?7Y|cR;e2*X7iR
zy}>KxmE9V|dp9W!$lp5fAyLR|A8vry5uwb^h-rr&&mQ2TuD8_4V3E(^ienMe1KeWR
zJIKo+Ixg@t8Bg*V&@0+7pKxrdhtrTKRW&N%CWV$uAI_aQvW?{VjuO&k;<yn^Zg;Fh
zR@G#(s=94bp3YXEMXS~#IR#h&yK)8Tk)R`_3(PBM%O);SY^rRcuwZ0u;2Mqf^>ptk
zIJG@Po5{w3hR?K|x@L9W>)w=@3`?ZxdNFN7KUB0>Tbjcr)^t`ub1|O~5VGtXz}(JS
z-_)=)U)x=W2@`b+N4YX3_W>FRVCEe4<7z@@;%P+zSUi^+fiHU+(AO?WvPMsJDkv<q
zy5AoeDINeADp_{wVNDhV4=E|Vt2|mLZ@#SB-n}b-{B$b(>iuoMaGb>UNtA>k^5#2H
z(1rb~kMrq<#Vpf^HwQRVGR{9_H9qC1jnX0kn%eFV&DTr}^zxE0>qF0M!@16*IvdiW
zx?G=nLLe7IB+U(sM&<(09t@1V96~SnOk%)eyYx)UsCM%qQaVIUV@C3#rt6sFZpj{O
zYhT&mp@_N@U1B&s3pJowRT_(w0J^QtXCsXXoD?;Iuh^5_f(5#7&p}$(JKCDr)B-D-
zVaJB?2^%mhWrH6))aNRZAGWQyb39B+>U5$TAroSW%94|L;x7|I@uG8<`r(E^Lj#*d
zl1cCC!ob*ko)K^X5J>GGLw(+7!>-A;Gp%7+x#E`%c9L0dE@>SNG*fZuMW>Tm`a&Kk
z&=9NwMP)%unKcW65s&4Jh=7w>R<iaf+b-iC*bP1ftpmi~<M{cU5N6fB-VZ~Bvf{NA
zHL~QLmw^^rC{fTtug9gLv?Z5Loh9j)qPHg4J+vn0WR&fA2iYx+Gk2<8`UdOur<<Ek
z{QtM!|IJ(X{@vl%c#Q-`0waNuz(`;uFcKIEj08pkmjpiZ@81=lMUTGfdlt@x*LQjC
z!5E6&*t>@>W0KKE7{U}vdz|Dh=+BB$oKf*!oH>aq!#1V&nu?+|yF|U!`n-p;`DPPt
z$~{l<d!p%G!HQ&!*bW<*YY?e%=*ZZEt1?;n)NBZn1n6*r399N=_J_kLdw*Smkb+N`
zVN;#sSYJ8Au(lsUl<=XK@MO(VTuj+#$ga<DNfgIUJ!;EfU)NPwaDcc(Hqs{3IF8#K
zn!Zph?j&VKG~XA5y91$}Y{r>cFqi@>I@v}JbM!IHF*jURf^*9++#?ENL{r;c4y@B~
zb;uNZZrRI8UJ32OQEi&ziimIy{I>45O4~*WfD6EEo$?TGGY1b|3`b0HDkIGn<5^bH
z&NbbtA*aF}n-E9T3Kd7O`e|XwJ_r{s$ZpqcY?lrp?Fa`^Aa;#NI@3?##yl;~N4|&+
zCIJ!vlhVC6UEnylqi~n*bGU(JZ^;USbDxS>(JthJNT7$gocp^K7+NqbSk*p0VX!-i
zIX_;8LEA}|xiUAQbYSh929ccWFHW7l`Q-i4%EJO8NeV;oo5m`!OJDzp&2{gvfHO0y
zWq0YdO9JjP+VM4+u0?)>ZS4b%?leAa3M+?)7+b*=C3+r?0qs{Oe7)|BZLp(`lfr8I
zlNab|ra)v9tBbA{+Rn4|tvN*mO|)|hS)8;8;pdPu#3nWxR!WPon3N6;>&Y^+c6PFi
zPf(MlLrgN-F?I`?oQ4tSrC)l2sVz!sg@bFJl`wLz7okYZC~{kIVTXGvNovDRnLanI
zh+VJ1JX<CT;)w@CMNd<#2-_2~P)lv9G^Sf^=W^UGwC%3+Vv<|$W=PKs$3Ambl=}mX
zEfrrc>N(<p@{S`9>RF3GiC3LYpXT5~k-MXlX=Npt<(7$M3pgt7ZiqzgPqP#Uj_e`H
zL6_T{BQ87~a<5jG69ED0%}kgB=HdYKi^HKb7k!H@%pTl9{!~!v<9WJt$W&a&Y-l<h
z3<kSJat^vF0t{zN&x$jXxvp%%U?aAtMo&aTo_1c88_hnVEk1LKy-qpPQx;o#BHvKW
F{%?Vj%1ZzM

literal 0
HcmV?d00001

diff --git a/database.py b/database.py
index f7c71ed..7b3edd6 100644
--- a/database.py
+++ b/database.py
@@ -18,9 +18,11 @@ logger = logging.getLogger(__name__)
 class DatabaseManager:
     """数据库管理器"""
     
-    def __init__(self, db_path: str = "outlook_manager.db"):
+    def __init__(self, db_path: str = "data/outlook_manager.db"):
         self.db_path = db_path
         self._local = threading.local()
+        # 确保数据目录存在
+        Path(db_path).parent.mkdir(parents=True, exist_ok=True)
         self.init_database()
     
     def get_connection(self) -> sqlite3.Connection:
@@ -28,6 +30,9 @@ class DatabaseManager:
         if not hasattr(self._local, 'connection'):
             self._local.connection = sqlite3.connect(self.db_path)
             self._local.connection.row_factory = sqlite3.Row
+            # 启用WAL模式，提升并发读性能
+            self._local.connection.execute('PRAGMA journal_mode=WAL')
+            self._local.connection.execute('PRAGMA foreign_keys=ON')
         return self._local.connection
     
     def init_database(self):
@@ -51,10 +56,11 @@ class DatabaseManager:
         cursor.execute('''
             CREATE TABLE IF NOT EXISTS account_tags (
                 id INTEGER PRIMARY KEY AUTOINCREMENT,
-                email TEXT NOT NULL,
+                email TEXT NOT NULL UNIQUE,
                 tags TEXT NOT NULL,  -- JSON格式存储标签数组
                 created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-                updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+                updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+                FOREIGN KEY (email) REFERENCES accounts(email) ON DELETE CASCADE
             )
         ''')
         
@@ -114,9 +120,8 @@ class DatabaseManager:
                 cursor.execute(f"ALTER TABLE claude_payment_status ADD COLUMN {col} TEXT {default}")
                 logger.info(f"已为 claude_payment_status 添加 {col} 列")
 
-        # 创建索引
-        cursor.execute('CREATE INDEX IF NOT EXISTS idx_accounts_email ON accounts(email)')
-        cursor.execute('CREATE INDEX IF NOT EXISTS idx_account_tags_email ON account_tags(email)')
+        # 创建索引（accounts.email 是 PRIMARY KEY，无需额外索引）
+        # account_tags.email 已有 UNIQUE 约束，无需额外索引
         cursor.execute('CREATE INDEX IF NOT EXISTS idx_email_cache_email ON email_cache(email)')
         cursor.execute('CREATE INDEX IF NOT EXISTS idx_email_cache_message_id ON email_cache(message_id)')
         
@@ -309,9 +314,9 @@ class DatabaseManager:
                 conn = self.get_connection()
                 cursor = conn.cursor()
                 cursor.execute('''
-                    DELETE FROM email_cache 
-                    WHERE created_at < datetime('now', '-{} days')
-                '''.format(days))
+                    DELETE FROM email_cache
+                    WHERE created_at < datetime('now', ? || ' days')
+                ''', (f'-{days}',))
                 deleted_count = cursor.rowcount
                 conn.commit()
                 return deleted_count
diff --git a/docker-compose.yml b/docker-compose.yml
index 0fd28e4..73264f5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -9,6 +9,8 @@ services:
     volumes:
       # 挂载配置文件，便于修改邮箱配置
       - ./config.txt:/app/config.txt
+      # 持久化SQLite数据库，防止容器重建丢失数据
+      - ./data:/app/data
       # 可选：挂载日志目录
       - ./logs:/app/logs
     environment:
diff --git a/requirements.txt b/requirements.txt
index 80398d7..8ad8727 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,7 +2,6 @@ fastapi==0.104.1
 uvicorn[standard]==0.24.0
 pydantic==2.5.0
 httpx==0.25.2
-requests==2.31.0
 python-multipart==0.0.6
 jinja2==3.1.2
 aiofiles==23.2.1
\ No newline at end of file