skill-base 2.0.11 → 2.0.13

package/README.md

@@ -87,6 +87,10 @@ npx skill-base --base-path /skills/  # 部署在子路径下 (例如: /skills/)
 | `--host` | `-h` | 指定监听地址 | 0.0.0.0 |
 | `--data-dir` | `-d` | 指定数据目录 | 包内 data/ |
 | `--base-path` | - | 指定部署前缀 | / |
+| `--no-cappy` | - | 禁用 Cappy 水豚吉祥物 | 启用 |
+| `--verbose` | `-v` | 启用调试日志 | 禁用 |
+| `--help` | - | 显示帮助信息 | - |
+| `--version` | - | 显示版本号 | - |
 
 > 🔐 **首次运行须知**：系统启动后，首次访问 Web 端将自动跳转至**初始化页面**，请根据提示设置系统管理员账号与密码。
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "skill-base",
-  "version": "2.0.11",
-  "description": "Skill Base - 内网轻量版 Skill 管理平台",
+  "version": "2.0.13",
+  "description": "Skill Base - 私有部署的轻量级 Skill 管理平台",
   "main": "src/index.js",
   "bin": {
     "skill-base": "./bin/skill-base.js"

package/src/database.js

@@ -116,6 +116,7 @@ try {
 } catch(e) {}
 try { db.exec("ALTER TABLE users ADD COLUMN created_by INTEGER REFERENCES users(id)"); } catch(e) {}
 try { db.exec("ALTER TABLE users ADD COLUMN name TEXT"); } catch(e) {}
+try { db.exec("ALTER TABLE skill_versions ADD COLUMN description TEXT"); } catch(e) {}
 
 // 数据迁移：为已有 Skills 的 owner 插入 skill_collaborators 记录
 const existingSkills = db.prepare('SELECT id, owner_id FROM skills').all();

package/src/models/skill.js

@@ -40,6 +40,30 @@ const SkillModel = {
     return this.findById(id);
   },
 
+  // 更新 Skill
+  update(id, name, description) {
+    const fields = [];
+    const values = [];
+    if (name !== undefined) {
+      fields.push('name = ?');
+      values.push(name);
+    }
+    if (description !== undefined) {
+      fields.push('description = ?');
+      values.push(description);
+    }
+    if (fields.length === 0) return this.findById(id);
+    
+    fields.push('updated_at = CURRENT_TIMESTAMP');
+    values.push(id);
+    
+    db.prepare(`
+      UPDATE skills SET ${fields.join(', ')} WHERE id = ?
+    `).run(...values);
+    
+    return this.findById(id);
+  },
+
   // 更新 latest_version 和 updated_at
   updateLatestVersion(id, version) {
     db.prepare(`

package/src/models/version.js

@@ -2,11 +2,11 @@ const db = require('../database');
 
 const VersionModel = {
   // 创建新版本
-  create(skillId, version, changelog, zipPath, uploaderId) {
+  create(skillId, version, changelog, zipPath, uploaderId, description) {
     const result = db.prepare(`
-      INSERT INTO skill_versions (skill_id, version, changelog, zip_path, uploader_id)
-      VALUES (?, ?, ?, ?, ?)
-    `).run(skillId, version, changelog || '', zipPath, uploaderId);
+      INSERT INTO skill_versions (skill_id, version, changelog, zip_path, uploader_id, description)
+      VALUES (?, ?, ?, ?, ?, ?)
+    `).run(skillId, version, changelog || '', zipPath, uploaderId, description || '');
     return this.findById(result.lastInsertRowid);
   },
 
@@ -51,6 +51,16 @@ const VersionModel = {
       ORDER BY sv.created_at DESC
       LIMIT 1
     `).get(skillId);
+  },
+
+  // 更新版本描述和更新日志
+  update(id, description, changelog) {
+    db.prepare(`
+      UPDATE skill_versions
+      SET description = ?, changelog = ?
+      WHERE id = ?
+    `).run(description, changelog, id);
+    return this.findById(id);
   }
 };
 

package/src/routes/publish.js

@@ -90,7 +90,8 @@ async function publishRoutes(fastify, options) {
       version,
       changelog || '',
       zipRelativePath,
-      request.user.id
+      request.user.id,
+      description || ''
     );
 
     // 更新 skill 的最新版本

package/src/routes/skills.js

@@ -3,11 +3,12 @@ const path = require('path');
 const SkillModel = require('../models/skill');
 const VersionModel = require('../models/version');
 const { getZipPath, resolveZipPath } = require('../utils/zip');
+const { canManageSkill } = require('../utils/permission');
 
 // 格式化 skill，将 owner 转为对象
-function formatSkill(skill) {
+function formatSkill(skill, currentUser) {
   if (!skill) return null;
-  return {
+  const result = {
     id: skill.id,
     name: skill.name,
     description: skill.description,
@@ -20,6 +21,24 @@ function formatSkill(skill) {
     created_at: skill.created_at,
     updated_at: skill.updated_at
   };
+
+  if (currentUser) {
+    if (currentUser.id === skill.owner_id) {
+      result.permission = 'owner';
+    } else {
+      const db = require('../database');
+      const collab = db.prepare('SELECT role FROM skill_collaborators WHERE skill_id = ? AND user_id = ?').get(skill.id, currentUser.id);
+      if (collab) {
+        result.permission = collab.role;
+      } else {
+        result.permission = 'user';
+      }
+    }
+  } else {
+    result.permission = 'user';
+  }
+
+  return result;
 }
 
 // 格式化 version，将 uploader 转为对象
@@ -30,6 +49,7 @@ function formatVersion(version) {
     skill_id: version.skill_id,
     version: version.version,
     changelog: version.changelog,
+    description: version.description,
     zip_path: version.zip_path,
     uploader: {
       id: version.uploader_id,
@@ -42,10 +62,10 @@ function formatVersion(version) {
 
 async function skillsRoutes(fastify, options) {
   // GET / - 获取 skills 列表
-  fastify.get('/', async (request, reply) => {
+  fastify.get('/', { preHandler: [fastify.optionalAuth] }, async (request, reply) => {
     const { q } = request.query;
     const skills = SkillModel.search(q);
-    const formattedSkills = skills.map(formatSkill);
+    const formattedSkills = skills.map(skill => formatSkill(skill, request.user));
 
     return {
       skills: formattedSkills,
@@ -54,7 +74,7 @@ async function skillsRoutes(fastify, options) {
   });
 
   // GET /:skill_id - 获取单个 skill
-  fastify.get('/:skill_id', async (request, reply) => {
+  fastify.get('/:skill_id', { preHandler: [fastify.optionalAuth] }, async (request, reply) => {
     const { skill_id } = request.params;
     const skill = SkillModel.findById(skill_id);
 
@@ -62,7 +82,7 @@ async function skillsRoutes(fastify, options) {
       return reply.code(404).send({ detail: 'Skill not found' });
     }
 
-    return formatSkill(skill);
+    return formatSkill(skill, request.user);
   });
 
   // GET /:skill_id/versions - 获取 skill 的所有版本
@@ -119,6 +139,77 @@ async function skillsRoutes(fastify, options) {
 
     return fs.createReadStream(finalZipPath);
   });
+
+  // PUT /:skill_id - 更新 skill 的基本信息
+  fastify.put('/:skill_id', {
+    preHandler: [fastify.authenticate]
+  }, async (request, reply) => {
+    const { skill_id } = request.params;
+    const { name, description } = request.body || {};
+
+    if (!SkillModel.exists(skill_id)) {
+      return reply.code(404).send({ detail: 'Skill not found' });
+    }
+
+    if (!canManageSkill(request.user, skill_id)) {
+      return reply.code(403).send({ ok: false, error: 'forbidden', detail: 'Owner or admin permission required' });
+    }
+
+    const updated = SkillModel.update(skill_id, name, description);
+    return formatSkill(updated, request.user);
+  });
+
+  // PUT /:skill_id/head - 设置 skill 的最新版本 (Head 指针)
+  fastify.put('/:skill_id/head', {
+    preHandler: [fastify.authenticate]
+  }, async (request, reply) => {
+    const { skill_id } = request.params;
+    const { version } = request.body || {};
+
+    if (!version) {
+      return reply.code(400).send({ detail: 'Version is required' });
+    }
+
+    if (!SkillModel.exists(skill_id)) {
+      return reply.code(404).send({ detail: 'Skill not found' });
+    }
+
+    if (!canManageSkill(request.user, skill_id)) {
+      return reply.code(403).send({ ok: false, error: 'forbidden', detail: 'Owner or admin permission required' });
+    }
+
+    const versionRecord = VersionModel.findByVersion(skill_id, version);
+    if (!versionRecord) {
+      return reply.code(404).send({ detail: 'Version not found' });
+    }
+
+    SkillModel.updateLatestVersion(skill_id, version);
+    return { ok: true, skill_id, latest_version: version };
+  });
+
+  // PATCH /:skill_id/versions/:version - 更新指定版本的介绍和日志
+  fastify.patch('/:skill_id/versions/:version', {
+    preHandler: [fastify.authenticate]
+  }, async (request, reply) => {
+    const { skill_id, version } = request.params;
+    const { description, changelog } = request.body || {};
+
+    if (!SkillModel.exists(skill_id)) {
+      return reply.code(404).send({ detail: 'Skill not found' });
+    }
+
+    if (!canManageSkill(request.user, skill_id)) {
+      return reply.code(403).send({ ok: false, error: 'forbidden', detail: 'Owner or admin permission required' });
+    }
+
+    const versionRecord = VersionModel.findByVersion(skill_id, version);
+    if (!versionRecord) {
+      return reply.code(404).send({ detail: 'Version not found' });
+    }
+
+    const updated = VersionModel.update(versionRecord.id, description, changelog);
+    return formatVersion(updated);
+  });
 }
 
 module.exports = skillsRoutes;