feat(whitelist): 记录未授权访问日志到数据库

当玩家未通过白名单验证时，异步将访问日志写入数据库的 operation_log 表中，
包括玩家名称、UUID、IP 地址等信息，并扩展了操作类型约束以支持
'UNAUTHORIZED_ACCESS' 类型。

同时更新数据库表结构，增加对新操作类型的校验支持，并忽略 .VSCodeCounter
目录的版本控制。

Author: ShinoyukiMiyako

.gitignore

@@ -61,4 +61,6 @@ usercache.json
 usernamecache.json
 
 # Keep the built plugin JAR for distribution
-!target/convenient-access-*.jar
+!target/convenient-access-*.jar
+
+/.VSCodeCounter

src/main/java/com/xaoxiao/convenientaccess/listener/WhitelistListener.java

@@ -213,11 +213,41 @@ private String getCustomKickMessage(String playerName) {
     private void logUnauthorizedAccess(String playerName, String playerUuid, String ipAddress) {
         logger.warn("未授权访问尝试 - 玩家: {} ({}), IP: {}", playerName, playerUuid, ipAddress);
 
-        // TODO: 可以扩展为写入数据库操作日志
-        // plugin.getDatabaseManager().executeAsync(connection -> {
-        //     // 插入操作日志
-        //     return null;
-        // });
+        // 异步写入数据库操作日志
+        plugin.getWhitelistSystem().getDatabaseManager().executeAsync(connection -> {
+            try {
+                String sql = """
+                    INSERT INTO operation_log 
+                    (operation_type, target_uuid, target_name, operator_ip, operator_agent, 
+                     request_data, response_status, execution_time)
+                    VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+                """;
+                
+                try (var pstmt = connection.prepareStatement(sql)) {
+                    pstmt.setString(1, "UNAUTHORIZED_ACCESS");
+                    pstmt.setString(2, playerUuid);
+                    pstmt.setString(3, playerName);
+                    pstmt.setString(4, ipAddress);
+                    pstmt.setString(5, "Minecraft Client"); // 游戏客户端
+                    pstmt.setString(6, String.format("{\"reason\":\"not_in_whitelist\",\"player\":\"%s\",\"uuid\":\"%s\"}", 
+                                                     playerName, playerUuid));
+                    pstmt.setInt(7, 403); // HTTP 403 Forbidden 表示拒绝访问
+                    pstmt.setLong(8, 0); // 不需要记录执行时间
+                    
+                    int affected = pstmt.executeUpdate();
+                    if (affected > 0) {
+                        logger.info("✅ 已记录未授权访问日志: {} ({})", playerName, ipAddress);
+                    } else {
+                        logger.warn("❌ 记录未授权访问日志失败: {}", playerName);
+                    }
+                }
+                
+                return null;
+            } catch (java.sql.SQLException e) {
+                logger.error("记录未授权访问日志时发生SQL异常: {} ({})", playerName, ipAddress, e);
+                return null;
+            }
+        });
     }
 
     /**

src/main/resources/schema/operation_log.sql

@@ -12,5 +12,5 @@ CREATE TABLE IF NOT EXISTS operation_log (
     created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
 
     -- 约束
-    CONSTRAINT chk_operation_type CHECK (operation_type IN ('ADD', 'REMOVE', 'QUERY', 'BATCH_ADD', 'BATCH_REMOVE', 'SYNC'))
+    CONSTRAINT chk_operation_type CHECK (operation_type IN ('ADD', 'REMOVE', 'QUERY', 'BATCH_ADD', 'BATCH_REMOVE', 'SYNC', 'UNAUTHORIZED_ACCESS'))
 );