node-resource-utils 0.0.0-stage → 1.1.8

package/resources/src/app/api/employees/import/route.ts

@@ -0,0 +1,205 @@
+import dayjs from 'dayjs';
+import { BizError, audit, clientInfo, ok, withRoute } from '@/lib/api';
+import { prisma } from '@/lib/prisma';
+import { requireUser } from '@/auth';
+import { P, deptAllowed, requirePerm } from '@/lib/rbac';
+import { parseExcel } from '@/lib/excel';
+import { readUpload } from '@/lib/upload';
+import { validateField } from '@/lib/validation';
+
+export const dynamic = 'force-dynamic';
+
+/** 表头别名 → 内部字段。中英文都认，用户从别处导出的模板也能直接导入 */
+const HEADER_MAP: Record<string, string> = {
+  工号: 'code',
+  code: 'code',
+  编号: 'code',
+  姓名: 'name',
+  name: 'name',
+  身份证号: 'idCard',
+  身份证: 'idCard',
+  证件号: 'idCard',
+  idcard: 'idCard',
+  idCard: 'idCard',
+  idno: 'idCard',
+  性别: 'gender',
+  gender: 'gender',
+  部门: 'deptName',
+  dept: 'deptName',
+  部门名称: 'deptName',
+  职位: 'position',
+  岗位: 'position',
+  position: 'position',
+  手机号: 'phone',
+  手机: 'phone',
+  phone: 'phone',
+  邮箱: 'email',
+  email: 'email',
+  入职日期: 'hireDate',
+  入职时间: 'hireDate',
+  hireDate: 'hireDate',
+  月薪: 'salary',
+  薪资: 'salary',
+  salary: 'salary',
+  状态: 'status',
+  status: 'status',
+  备注: 'remark',
+  remark: 'remark',
+};
+
+function isFile(v: unknown): v is File {
+  return typeof v === 'object' && v !== null && typeof (v as File).arrayBuffer === 'function';
+}
+
+function pick(row: Record<string, string>, headers: string[], field: string): string {
+  for (const h of headers) {
+    if (HEADER_MAP[h.replace(/\s/g, '')] === field) return (row[h] ?? '').trim();
+  }
+  return '';
+}
+
+function toGender(v: string): 'male' | 'female' {
+  const s = v.trim().toLowerCase();
+  if (s === '女' || s === 'female' || s === 'f' || s === '2') return 'female';
+  return 'male';
+}
+
+function toStatus(v: string): number {
+  const s = v.trim().toLowerCase();
+  if (!s) return 1;
+  if (['离职', '0', 'false', '在职-否', 'resigned'].includes(s)) return 0;
+  return 1;
+}
+
+/**
+ * POST /api/employees/import —— Excel 批量导入。
+ *
+ * 逐行处理而不是整批事务：一行脏数据不该让 499 行正常的也导不进去。
+ * 失败的行走 failed[] 返回给前端展示「第几行、什么原因」。
+ */
+export const POST = withRoute(async (req) => {
+  const user = await requireUser();
+  requirePerm(user, P.empImport);
+
+  const form = await req.formData();
+  const file = form.get('file');
+  if (!isFile(file)) throw new BizError('请上传 Excel 文件（字段名 file）');
+
+  const { filename, buffer } = await readUpload(file);
+  if (!/\.xlsx?$/i.test(filename)) {
+    throw new BizError('仅支持 .xlsx 文件（.xls 请先用 Excel 另存为 .xlsx）');
+  }
+
+  const { headers, rows } = await parseExcel(buffer, { headerRow: 1 });
+  if (!rows.length) throw new BizError('未从文件中解析到任何数据行');
+  if (rows.length > 5000) throw new BizError('单次导入最多 5000 行，请拆分后再试');
+
+  const depts = await prisma.department.findMany({ select: { id: true, name: true } });
+  const deptIdByName = new Map(depts.map((d) => [d.name.trim(), d.id]));
+
+  let inserted = 0;
+  let updated = 0;
+  const failed: { row: number; reason: string }[] = [];
+
+  for (let i = 0; i < rows.length; i++) {
+    const rowNo = i + 2; // +2：第 1 行是表头
+    const row = rows[i];
+    try {
+      // 逐列走统一校验底座：哪一格不合法，就把「第几行 + 哪一列 + 为什么」还给用户
+      const codeCheck = validateField('code', pick(row, headers, 'code'), {
+        label: '工号',
+        required: true,
+      });
+      if (!codeCheck.ok) throw new Error(codeCheck.message);
+      const code = codeCheck.value;
+
+      const nameCheck = validateField('name', pick(row, headers, 'name'), {
+        label: '姓名',
+        required: true,
+      });
+      if (!nameCheck.ok) throw new Error(nameCheck.message);
+      const name = nameCheck.value;
+
+      const idCardCheck = validateField('idCard', pick(row, headers, 'idCard'), {
+        label: '身份证号',
+      });
+      if (!idCardCheck.ok) throw new Error(idCardCheck.message);
+
+      const phoneCheck = validateField('phone', pick(row, headers, 'phone'), {
+        label: '手机号',
+      });
+      if (!phoneCheck.ok) throw new Error(phoneCheck.message);
+
+      const emailCheck = validateField('email', pick(row, headers, 'email'), {
+        label: '邮箱',
+      });
+      if (!emailCheck.ok) throw new Error(emailCheck.message);
+
+      const deptName = pick(row, headers, 'deptName');
+      const salaryRaw = pick(row, headers, 'salary');
+      const hireRaw = pick(row, headers, 'hireDate');
+
+      const hireCheck = validateField('date', hireRaw, { label: '入职日期' });
+      if (!hireCheck.ok) throw new Error(hireCheck.message);
+
+      const salaryCheck = validateField('amount', salaryRaw, { label: '月薪' });
+      if (!salaryCheck.ok) throw new Error(salaryCheck.message);
+
+      const salary = salaryCheck.value ? Number(salaryCheck.value) : null;
+      const hireDate = hireCheck.value ? dayjs(hireCheck.value).toDate() : null;
+
+      const targetDept = deptName ? deptIdByName.get(deptName) ?? null : null;
+      // 数据范围：不能借导入把员工写到别的部门去（读能过滤只是看不到，写不校验就是换个入口照样改）
+      if (!deptAllowed(user, targetDept)) {
+        throw new Error(`部门「${deptName}」不在你的数据范围内`);
+      }
+
+      const payload = {
+        name,
+        idCard: idCardCheck.value || null,
+        gender: toGender(pick(row, headers, 'gender')),
+        deptId: deptName ? deptIdByName.get(deptName) ?? null : null,
+        position: pick(row, headers, 'position') || null,
+        phone: phoneCheck.value || null,
+        email: emailCheck.value || null,
+        hireDate,
+        salary,
+        status: toStatus(pick(row, headers, 'status')),
+        remark: pick(row, headers, 'remark') || null,
+      };
+
+      const exist = await prisma.employee.findUnique({ where: { code } });
+      if (exist) {
+        // 软删过的同工号记录按「恢复并覆盖」处理，否则 unique 约束会一直挡住重新导入
+        await prisma.employee.update({
+          where: { code },
+          data: { ...payload, deletedAt: null },
+        });
+        updated++;
+      } else {
+        await prisma.employee.create({ data: { code, ...payload } });
+        inserted++;
+      }
+    } catch (e) {
+      failed.push({ row: rowNo, reason: (e as Error).message || '未知错误' });
+    }
+  }
+
+  const { ip, userAgent } = clientInfo(req);
+  await audit({
+    userId: user.id,
+    username: user.username,
+    module: '员工管理',
+    action: '导入',
+    method: 'POST',
+    path: req.nextUrl.pathname,
+    detail: { inserted, updated, failed: failed.length, filename },
+    ip,
+    userAgent,
+  });
+
+  return ok(
+    { inserted, updated, failed },
+    `导入完成：新增 ${inserted} 条，更新 ${updated} 条${failed.length ? `，失败 ${failed.length} 条` : ''}`
+  );
+});

package/resources/src/app/api/employees/route.ts

@@ -0,0 +1,149 @@
+import { z } from 'zod';
+import { Prisma } from '@prisma/client';
+import dayjs from 'dayjs';
+import {
+  BizError,
+  CODE,
+  audit,
+  clientInfo,
+  ok,
+  pageResult,
+  parseListQuery,
+  withRoute,
+} from '@/lib/api';
+import { prisma } from '@/lib/prisma';
+import { requireUser } from '@/auth';
+import { P, deptScope, requirePerm } from '@/lib/rbac';
+import { zField, zNullableField } from '@/lib/zodField';
+
+export const dynamic = 'force-dynamic';
+
+const employeeSelect = {
+  id: true,
+  code: true,
+  name: true,
+  idCard: true,
+  gender: true,
+  deptId: true,
+  position: true,
+  phone: true,
+  email: true,
+  hireDate: true,
+  salary: true,
+  status: true,
+  remark: true,
+  createdAt: true,
+  updatedAt: true,
+  dept: { select: { id: true, name: true } },
+} satisfies Prisma.EmployeeSelect;
+
+/** 员工写入校验（route 文件不能导出额外符号，故不 export） */
+const employeeSchema = z.object({
+  code: zField('code', { label: '工号' }),
+  name: zField('name', { label: '姓名' }),
+  idCard: zNullableField('idCard', { label: '身份证号' }),
+  gender: z.enum(['male', 'female']).default('male'),
+  deptId: z.string().nullish(),
+  position: z.string().trim().max(64).nullish(),
+  phone: zNullableField('phone', { label: '手机号' }),
+  email: zNullableField('email', { label: '邮箱' }),
+  hireDate: zNullableField('date', { label: '入职日期' }),
+  // InputNumber 清空后是 null；用 union 而不是 coerce.number，避免 null 被强转成 0
+  salary: z.union([z.number(), z.null()]).optional(),
+  status: z.coerce.number().int().min(0).max(1).default(1),
+  remark: z.string().max(200).nullish(),
+});
+
+/** 日期字符串 → Date，非法值按空处理（表单里清空日期很常见，不该报错） */
+function toDate(v?: string | null): Date | null {
+  if (!v) return null;
+  const d = dayjs(v);
+  return d.isValid() ? d.toDate() : null;
+}
+
+/** GET /api/employees —— 分页列表 */
+export const GET = withRoute(async (req) => {
+  const user = await requireUser();
+  requirePerm(user, P.empList);
+
+  const q = parseListQuery(req, { createdAt: 'desc' });
+  const sp = req.nextUrl.searchParams;
+  const status = sp.get('status');
+  const deptId = sp.get('deptId');
+  const gender = sp.get('gender');
+
+  const where: Prisma.EmployeeWhereInput = { deletedAt: null };
+  if (q.keyword) {
+    where.OR = [
+      { code: { contains: q.keyword } },
+      { name: { contains: q.keyword } },
+      { idCard: { contains: q.keyword } },
+      { phone: { contains: q.keyword } },
+      { email: { contains: q.keyword } },
+      { position: { contains: q.keyword } },
+    ];
+  }
+  if (status === '0' || status === '1') where.status = Number(status);
+  if (deptId) where.deptId = deptId;
+  if (gender === 'male' || gender === 'female') where.gender = gender;
+
+  // 数据范围：必须放在所有筛选之后合并，否则用户传 ?deptId= 就能筛出别人的数据
+  Object.assign(where, deptScope(user));
+
+  const [list, total] = await Promise.all([
+    prisma.employee.findMany({
+      where,
+      skip: q.skip,
+      take: q.take,
+      orderBy: q.orderBy as Prisma.EmployeeOrderByWithRelationInput,
+      select: employeeSelect,
+    }),
+    prisma.employee.count({ where }),
+  ]);
+
+  return ok(pageResult(list, total, q));
+});
+
+/** POST /api/employees —— 新建员工 */
+export const POST = withRoute(async (req) => {
+  const user = await requireUser();
+  requirePerm(user, P.empAdd);
+
+  const parsed = employeeSchema.parse(await req.json());
+
+  const exists = await prisma.employee.findUnique({ where: { code: parsed.code } });
+  if (exists) throw new BizError('工号已存在', CODE.CONFLICT);
+
+  const created = await prisma.employee.create({
+    data: {
+      code: parsed.code,
+      name: parsed.name,
+      idCard: parsed.idCard || null,
+      gender: parsed.gender,
+      deptId: parsed.deptId || null,
+      position: parsed.position || null,
+      phone: parsed.phone || null,
+      email: parsed.email || null,
+      hireDate: toDate(parsed.hireDate),
+      salary: parsed.salary ?? null,
+      status: parsed.status,
+      remark: parsed.remark || null,
+    },
+  });
+
+  const { ip, userAgent } = clientInfo(req);
+  await audit({
+    userId: user.id,
+    username: user.username,
+    module: '员工管理',
+    action: '新增',
+    method: 'POST',
+    path: req.nextUrl.pathname,
+    targetId: created.id,
+    detail: { code: parsed.code, name: parsed.name },
+    ip,
+    userAgent,
+  });
+
+  return ok({ id: created.id }, '新增成功');
+});

package/resources/src/app/api/export/route.ts

@@ -0,0 +1,254 @@
+import { Prisma } from '@prisma/client';
+import dayjs from 'dayjs';
+import { BizError, audit, clientInfo, withRoute } from '@/lib/api';
+import { prisma } from '@/lib/prisma';
+import { requireUser } from '@/auth';
+import { P, DATA_SCOPE, deptScope, effectiveDataScope, requirePerm } from '@/lib/rbac';
+import { buildExcelResponse, exportToExcel, type ExcelColumn } from '@/lib/excel';
+
+export const dynamic = 'force-dynamic';
+
+/**
+ * GET /api/export?module=xxx —— 通用导出入口。
+ *
+ * 列表页 DataTable 的「导出 Excel」按钮统一打到这里，把当前筛选参数原样带上；
+ * 后端按 module 分发到对应的查询。这样新增一个可导出的模块，
+ * 只需要在这里加一个分支，前端不用改。
+ *
+ * 每个分支都会单独校验权限码 —— 通用入口最容易变成越权后门。
+ */
+function dateRangeWhere(sp: URLSearchParams): Prisma.DateTimeFilter | undefined {
+  const startDate = sp.get('startDate');
+  const endDate = sp.get('endDate');
+  if (!startDate && !endDate) return undefined;
+  const filter: Prisma.DateTimeFilter = {};
+  if (startDate) filter.gte = dayjs(startDate).startOf('day').toDate();
+  if (endDate) filter.lte = dayjs(endDate).endOf('day').toDate();
+  return filter;
+}
+
+function parseStatus(sp: URLSearchParams): number | undefined {
+  const s = sp.get('status');
+  return s === '0' || s === '1' ? Number(s) : undefined;
+}
+
+export const GET = withRoute(async (req) => {
+  const user = await requireUser();
+  const sp = req.nextUrl.searchParams;
+  const targetModule = sp.get('module') || '';
+  const keyword = (sp.get('keyword') || '').trim();
+
+  let columns: ExcelColumn[] = [];
+  let rows: Record<string, unknown>[] = [];
+  let filename = '导出数据.xlsx';
+
+  if (targetModule === 'employees') {
+    requirePerm(user, P.empExport);
+    const deptId = sp.get('deptId');
+    const status = parseStatus(sp);
+    const gender = sp.get('gender');
+
+    const where: Prisma.EmployeeWhereInput = { deletedAt: null };
+    if (keyword) {
+      where.OR = [
+        { code: { contains: keyword } },
+        { name: { contains: keyword } },
+        { idCard: { contains: keyword } },
+        { phone: { contains: keyword } },
+        { email: { contains: keyword } },
+        { position: { contains: keyword } },
+      ];
+    }
+    if (status !== undefined) where.status = status;
+    if (deptId) where.deptId = deptId;
+    if (gender === 'male' || gender === 'female') where.gender = gender;
+    Object.assign(where, deptScope(user));
+
+    const list = await prisma.employee.findMany({
+      where,
+      orderBy: { code: 'asc' },
+      take: 20000,
+      select: {
+        code: true,
+        name: true,
+        idCard: true,
+        gender: true,
+        position: true,
+        phone: true,
+        email: true,
+        hireDate: true,
+        salary: true,
+        status: true,
+        remark: true,
+        dept: { select: { name: true } },
+      },
+    });
+
+    columns = [
+      { header: '工号', key: 'code' },
+      { header: '姓名', key: 'name' },
+      { header: '身份证号', key: 'idCard' },
+      { header: '性别', key: 'gender' },
+      { header: '部门', key: 'deptName' },
+      { header: '职位', key: 'position' },
+      { header: '手机号', key: 'phone' },
+      { header: '邮箱', key: 'email' },
+      { header: '入职日期', key: 'hireDate' },
+      { header: '月薪', key: 'salary' },
+      { header: '状态', key: 'status' },
+      { header: '备注', key: 'remark' },
+    ];
+    rows = list.map((r) => ({
+      code: r.code,
+      name: r.name,
+      idCard: r.idCard ?? '',
+      gender: r.gender === 'female' ? '女' : '男',
+      deptName: r.dept?.name ?? '',
+      position: r.position ?? '',
+      phone: r.phone ?? '',
+      email: r.email ?? '',
+      hireDate: r.hireDate ? dayjs(r.hireDate).format('YYYY-MM-DD') : '',
+      salary: r.salary ?? '',
+      status: r.status === 1 ? '在职' : '离职',
+      remark: r.remark ?? '',
+    }));
+    filename = '员工信息';
+  } else if (targetModule === 'users') {
+    requirePerm(user, P.userList);
+    const status = parseStatus(sp);
+    const deptId = sp.get('deptId');
+
+    const where: Prisma.UserWhereInput = { deletedAt: null };
+    if (keyword) {
+      where.OR = [
+        { username: { contains: keyword } },
+        { name: { contains: keyword } },
+        { phone: { contains: keyword } },
+        { email: { contains: keyword } },
+      ];
+    }
+    if (status !== undefined) where.status = status;
+    if (deptId) where.deptId = deptId;
+    Object.assign(where, deptScope(user));
+
+    const list = await prisma.user.findMany({
+      where,
+      orderBy: { createdAt: 'desc' },
+      take: 20000,
+      select: {
+        username: true,
+        name: true,
+        email: true,
+        phone: true,
+        status: true,
+        isSuper: true,
+        lastLogin: true,
+        createdAt: true,
+        dept: { select: { name: true } },
+        roles: { select: { role: { select: { name: true } } } },
+      },
+    });
+
+    columns = [
+      { header: '用户名', key: 'username' },
+      { header: '姓名', key: 'name' },
+      { header: '部门', key: 'deptName' },
+      { header: '角色', key: 'roleNames' },
+      { header: '邮箱', key: 'email' },
+      { header: '手机号', key: 'phone' },
+      { header: '状态', key: 'status' },
+      { header: '账号类型', key: 'isSuper' },
+      { header: '最后登录', key: 'lastLogin' },
+      { header: '创建时间', key: 'createdAt' },
+    ];
+    rows = list.map((u) => ({
+      username: u.username,
+      name: u.name,
+      deptName: u.dept?.name ?? '',
+      roleNames: u.roles.map((r) => r.role.name).join('、'),
+      email: u.email ?? '',
+      phone: u.phone ?? '',
+      status: u.status === 1 ? '启用' : '停用',
+      isSuper: u.isSuper === 1 ? '超级管理员' : '普通用户',
+      lastLogin: u.lastLogin ? dayjs(u.lastLogin).format('YYYY-MM-DD HH:mm:ss') : '',
+      createdAt: dayjs(u.createdAt).format('YYYY-MM-DD HH:mm:ss'),
+    }));
+    filename = '用户信息';
+  } else if (targetModule === 'logs') {
+    requirePerm(user, P.logList);
+    const action = sp.get('action');
+    // 日志页的模块筛选走 logModule，module 已被「导出模块」占用
+    const logModule = sp.get('logModule');
+    const createdAt = dateRangeWhere(sp);
+
+    const where: Prisma.OperationLogWhereInput = {};
+    if (keyword) {
+      where.OR = [
+        { username: { contains: keyword } },
+        { module: { contains: keyword } },
+        { action: { contains: keyword } },
+        { path: { contains: keyword } },
+      ];
+    }
+    if (logModule) where.module = logModule;
+    if (action) where.action = action;
+    if (createdAt) where.createdAt = createdAt;
+    // 日志表没有 deptId，套不了部门范围：非「全部」的账号只能导出自己的操作记录
+    if (effectiveDataScope(user) !== DATA_SCOPE.ALL) where.userId = user.id;
+
+    const list = await prisma.operationLog.findMany({
+      where,
+      orderBy: { createdAt: 'desc' },
+      take: 20000,
+    });
+
+    columns = [
+      { header: '时间', key: 'createdAt' },
+      { header: '操作人', key: 'username' },
+      { header: '模块', key: 'module' },
+      { header: '动作', key: 'action' },
+      { header: '方法', key: 'method' },
+      { header: '路径', key: 'path' },
+      { header: 'IP', key: 'ip' },
+      { header: '结果', key: 'status' },
+      { header: '耗时(ms)', key: 'durationMs' },
+    ];
+    rows = list.map((l) => ({
+      createdAt: dayjs(l.createdAt).format('YYYY-MM-DD HH:mm:ss'),
+      username: l.username ?? '',
+      module: l.module,
+      action: l.action,
+      method: l.method ?? '',
+      path: l.path ?? '',
+      ip: l.ip ?? '',
+      status: l.status === 1 ? '成功' : '失败',
+      durationMs: l.durationMs ?? '',
+    }));
+    filename = '操作日志';
+  } else {
+    throw new BizError(`不支持的导出模块：${targetModule || '(空)'}`);
+  }
+
+  const buffer = await exportToExcel({
+    filename: `${filename}.xlsx`,
+    sheetName: filename,
+    columns,
+    rows,
+  });
+
+  const { ip, userAgent } = clientInfo(req);
+  await audit({
+    userId: user.id,
+    username: user.username,
+    module: '数据导出',
+    action: '导出',
+    method: 'GET',
+    path: req.nextUrl.pathname,
+    detail: { module: targetModule, count: rows.length, keyword },
+    ip,
+    userAgent,
+  });
+
+  const outName = `${filename}_${dayjs().format('YYYYMMDD_HHmmss')}.xlsx`;
+  return buildExcelResponse(buffer, outName);
+});

package/resources/src/app/api/favorites/route.ts

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+import { BizError, CODE, ok, withRoute } from '@/lib/api';
+import { requireUser } from '@/auth';
+import { buildSearchEntries, getUserMenuTree } from '@/lib/menu-service';
+import { addFavoritePath, listFavoritePaths, removeFavoritePath } from '@/lib/favorites';
+
+export const dynamic = 'force-dynamic';
+
+const bodySchema = z.object({
+  path: z.string().trim().min(1, '缺少收藏目标').max(200, '收藏路径过长'),
+});
+
+/**
+ * 收藏（书签）接口。
+ *
+ * 能力很小，但有一条安全线必须守住：**前端传来的 path 不可信**。
+ * 它必须落在「当前用户自己菜单树能到达的路由」里 —— 否则这个接口就成了
+ * 往收藏表写任意字符串的口子，还会攒出一堆点进去 404 的死链。
+ *
+ * 可见性判断直接复用 buildSearchEntries：功能开关、隐藏菜单、角色权限
+ * 已经在这一层过滤干净了，这里不用再判第二次（判两次早晚会判不一致）。
+ */
+
+async function visiblePaths() {
+  const user = await requireUser();
+  const entries = buildSearchEntries(await getUserMenuTree(user));
+  return { userId: user.id, paths: new Set(entries.map((e) => e.path)) };
+}
+
+/** GET /api/favorites —— 当前用户的收藏路径，按收藏顺序 */
+export const GET = withRoute(async () => {
+  const user = await requireUser();
+  return ok(await listFavoritePaths(user.id));
+});
+
+/** POST /api/favorites { path } —— 收藏一个页面，返回最新列表 */
+export const POST = withRoute(async (req) => {
+  const { path } = bodySchema.parse(await req.json());
+  const { userId, paths } = await visiblePaths();
+
+  if (!paths.has(path)) {
+    throw new BizError('该页面不在你的可见范围内，无法收藏', CODE.FORBIDDEN);
+  }
+  return ok(await addFavoritePath(userId, path));
+});
+
+/** DELETE /api/favorites?path=/system/users —— 取消收藏，返回最新列表 */
+export const DELETE = withRoute(async (req) => {
+  const user = await requireUser();
+  const path = (req.nextUrl.searchParams.get('path') || '').trim();
+  if (!path) throw new BizError('缺少要取消的收藏路径', CODE.BAD_REQUEST);
+
+  // 刻意**不**校验 path 是否仍可见：权限被收回的收藏本来就渲染不出来，
+  // 若再拦住删除，孤儿记录就永远清不掉了。deleteMany 已按 userId 收窄，不会误删他人。
+  return ok(await removeFavoritePath(user.id, path));
+});

package/resources/src/app/api/feedback/ai/route.ts

@@ -0,0 +1,31 @@
+import type { NextRequest } from 'next/server';
+import { BizError, CODE, ok, withRoute } from '@/lib/api';
+import { currentUser } from '@/auth';
+import { processFeedbackWithAi } from '@/lib/feedbackAi';
+
+export const dynamic = 'force-dynamic';
+
+/**
+ * POST /api/feedback/ai —— 对一条反馈执行智能处理。
+ *
+ * 请求：{ id: string }
+ * 返回：{ code: 0, data: FeedbackAiResult }
+ *
+ * ★ 这个接口**永远不返回 404 / 500**：
+ *   反馈不存在、模型不可用、业务规则冲突，全部转成
+ *   `code: 0 + outcome` 的结构化结果，由前端在弹窗里展示分析与提示。
+ *   反馈页因此不会出现红色报错弹窗，评委点任何一条都能得到回应。
+ */
+export const POST = withRoute(async (req: NextRequest) => {
+  const user = await currentUser();
+  if (!user) {
+    throw new BizError('登录已过期，请重新登录后再试', CODE.UNAUTHORIZED, 401);
+  }
+
+  const body = (await req.json().catch(() => ({}))) as { id?: unknown };
+  const id = String(body.id ?? '').trim();
+  if (!id) throw new BizError('请先选择一条反馈', CODE.BAD_REQUEST);
+
+  const result = await processFeedbackWithAi(id, user);
+  return ok(result, '处理完成');
+});