work-agent 0.1.0

package/app/api/marketplace/skills/route.ts

@@ -0,0 +1,235 @@
+/**
+ * 技能市场 API - 获取列表和上传技能
+ *
+ * GET  /api/marketplace/skills - 列出市场上的技能（支持筛选）
+ * POST /api/marketplace/skills/upload - 用户上传技能到市场
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import {
+	listMarketSkills,
+	uploadSkillToMarket,
+} from '@/lib/market-db';
+import {
+	getUserById,
+	getDb,
+} from '@/lib/db';
+import {
+	packSkillToZip,
+	validateSkillZip,
+} from '@/lib/zip-tool';
+import {
+	getUserSkill,
+} from '@/lib/user-skills';
+import { getMarketClient } from '@/lib/market-client';
+import { mkdirSync, existsSync } from 'fs';
+import { join } from 'path';
+
+// 技能市场ZIP文件存储目录
+const MARKET_ZIP_DIR = join(process.cwd(), 'data', 'market', 'zips');
+
+/**
+ * 确保市场ZIP目录存在
+ */
+function ensureMarketZipDir(): string {
+	if (!existsSync(MARKET_ZIP_DIR)) {
+		mkdirSync(MARKET_ZIP_DIR, { recursive: true });
+	}
+	return MARKET_ZIP_DIR;
+}
+
+/**
+ * GET /api/marketplace/skills - 列出市场上的技能（支持筛选）
+ *
+ * 查询参数:
+ * - status: 技能状态 (pending, approved, rejected, archived, all)
+ * - author: 作者ID过滤
+ * - isOfficial: 是否官方认证 (true/false)
+ * - search: 搜索关键词（在display_name和description中搜索）
+ * - limit: 返回数量限制
+ * - offset: 偏移量（用于分页）
+ * - orderBy: 排序方式 (rating, downloads, created, updated)
+ */
+export async function GET(request: NextRequest) {
+	try {
+		const { searchParams } = new URL(request.url);
+
+		// 解析查询参数
+		const status = searchParams.get('status') as 'pending' | 'approved' | 'rejected' | 'archived' | 'all' | null;
+		const author = searchParams.get('author') || undefined;
+		const isOfficialParam = searchParams.get('isOfficial');
+		const isOfficial = isOfficialParam === 'true' ? true : isOfficialParam === 'false' ? false : undefined;
+		const search = searchParams.get('search') || undefined;
+		const limit = searchParams.get('limit') ? parseInt(searchParams.get('limit')!) : undefined;
+		const offset = searchParams.get('offset') ? parseInt(searchParams.get('offset')!) : undefined;
+		const orderBy = searchParams.get('orderBy') as 'rating' | 'downloads' | 'created' | 'updated' | null;
+
+		const client = getMarketClient();
+
+		// 如果启用了远程服务，优先从远程获取
+		if (client.isRemoteEnabled()) {
+			try {
+				const result = await client.searchSkills({
+					status: status || undefined,
+					author,
+					isOfficial,
+					search,
+					limit,
+					offset,
+				});
+
+				return NextResponse.json({
+					skills: result.skills,
+					total: result.total,
+					limit,
+					offset,
+					source: 'remote',
+				});
+			} catch (error) {
+				console.warn('[marketplace/skills] Remote failed, falling back to local:', error);
+			}
+		}
+
+		// 降级逻辑：直接调用本地 SQLite
+		const result = listMarketSkills({
+			status: status || undefined,
+			author,
+			isOfficial,
+			search,
+			limit,
+			offset,
+			orderBy: orderBy || undefined,
+		});
+
+		return NextResponse.json({
+			skills: result.skills,
+			total: result.total,
+			limit,
+			offset,
+			source: 'local',
+		});
+	} catch (error) {
+		console.error('[marketplace/skills] GET failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '获取技能列表失败' },
+			{ status: 500 },
+		);
+	}
+}
+
+/**
+ * POST /api/marketplace/skills/upload - 用户上传技能到市场
+ *
+ * 请求体:
+ * - userId: 用户ID
+ * - userName: 用户名（可选）
+ * - skillName: 用户私有技能的名称
+ *
+ * 流程:
+ * 1. 验证用户身份
+ * 2. 获取用户的私有技能
+ * 3. 将技能打包为ZIP
+ * 4. 上传到市场（创建pending状态的记录）
+ */
+export async function POST(request: NextRequest) {
+	try {
+		const body = await request.json();
+		const { userId, userName, skillName } = body;
+
+		// 验证必填字段
+		if (!userId || !skillName) {
+			return NextResponse.json(
+				{ error: '缺少必要参数: userId, skillName' },
+				{ status: 400 },
+			);
+		}
+
+		// 验证用户存在
+		const user = getUserById(userId);
+		if (!user) {
+			return NextResponse.json(
+				{ error: '用户不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 获取用户技能
+		const userSkill = getUserSkill(userId, skillName);
+		if (!userSkill) {
+			return NextResponse.json(
+				{ error: '用户技能不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 检查技能所有权
+		if (userSkill.author !== userId) {
+			return NextResponse.json(
+				{ error: '无权上传此技能' },
+				{ status: 403 },
+			);
+		}
+
+		// 获取用户技能目录（从数据库查询 dir_name）
+		const db = getDb();
+		const row = db.prepare(
+			'SELECT dir_name FROM user_skills WHERE user_id = ? AND skill_name = ?'
+		).get(userId, skillName) as { dir_name: string } | undefined;
+		const dirName = row?.dir_name || skillName;
+		const userSkillDir = join(process.cwd(), 'data', 'skills', 'users', userId, dirName);
+
+		// 确保市场ZIP目录存在
+		const zipDir = ensureMarketZipDir();
+		const zipFileName = `${skillName}-${Date.now()}.zip`;
+		const zipPath = join(zipDir, zipFileName);
+
+		// 打包技能为ZIP
+		try {
+			packSkillToZip(userSkillDir, zipPath);
+		} catch (error) {
+			console.error('[marketplace/skills] Failed to pack skill:', error);
+			return NextResponse.json(
+				{ error: '打包技能失败' },
+				{ status: 500 },
+			);
+		}
+
+		// 验证ZIP包
+		const validation = validateSkillZip(zipPath);
+		if (!validation.valid) {
+			return NextResponse.json(
+				{ error: `技能包验证失败: ${validation.error}` },
+				{ status: 400 },
+			);
+		}
+
+		// 上传到市场
+		const marketSkill = await uploadSkillToMarket(
+			{
+				userId,
+				userName: userName || user.username,
+				skillName,
+			},
+			zipPath,
+		);
+
+		// 判断是新建还是更新（通过比较创建时间和当前时间，如果创建时间较早则是更新）
+		const createdAt = new Date(marketSkill.createdAt).getTime();
+		const now = Date.now();
+		const isUpdate = (now - createdAt) > 5000; // 超过5秒认为是更新
+
+		return NextResponse.json(
+			{
+				skill: marketSkill,
+				updated: isUpdate,
+			},
+			{ status: isUpdate ? 200 : 201 },
+		);
+	} catch (error) {
+		console.error('[marketplace/skills] POST failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '上传技能失败' },
+			{ status: 500 },
+		);
+	}
+}

package/app/api/memory/route.ts

@@ -0,0 +1,40 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { loadUserMemories, updateMemories } from '@/lib/memory';
+
+export async function GET(request: NextRequest) {
+  const userId = request.nextUrl.searchParams.get('userId');
+
+  if (!userId) {
+    return NextResponse.json({ error: 'userId is required' }, { status: 400 });
+  }
+
+  try {
+    const content = loadUserMemories(userId);
+    return NextResponse.json({ content });
+  } catch (error: any) {
+    console.error('[memory] GET error:', error);
+    return NextResponse.json({ error: error.message }, { status: 500 });
+  }
+}
+
+export async function POST(request: NextRequest) {
+  try {
+    const body = await request.json();
+    const { userId, content } = body;
+
+    if (!userId) {
+      return NextResponse.json({ error: 'userId is required' }, { status: 400 });
+    }
+
+    if (content === undefined) {
+      return NextResponse.json({ error: 'content is required' }, { status: 400 });
+    }
+
+    updateMemories(userId, content);
+
+    return NextResponse.json({ success: true });
+  } catch (error: any) {
+    console.error('[memory] POST error:', error);
+    return NextResponse.json({ error: error.message }, { status: 500 });
+  }
+}

package/app/api/my/files/[id]/route.ts

@@ -0,0 +1,52 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { getDocument } from '@/lib/db';
+import { getStorageProvider } from '@/lib/file-storage';
+
+export async function GET(
+	request: NextRequest,
+	{ params }: { params: Promise<{ id: string }> }
+) {
+	try {
+		const { id } = await params;
+		const { searchParams } = new URL(request.url);
+		const userId = searchParams.get('userId');
+		const download = searchParams.get('download') === 'true';
+
+		const document = getDocument(id);
+		if (!document) {
+			return NextResponse.json({ error: 'File not found' }, { status: 404 });
+		}
+
+		if (!document.isPublic && document.author !== userId) {
+			return NextResponse.json({ error: 'Permission denied' }, { status: 403 });
+		}
+
+		if (!document.fileMetadata?.storageKey) {
+			return NextResponse.json({ error: 'File storage key not found' }, { status: 404 });
+		}
+
+		const storage = getStorageProvider();
+		const buffer = await storage.download(document.fileMetadata.storageKey);
+
+		const filename = document.fileMetadata.originalName || document.title;
+		const mimeType = document.fileMetadata.mimeType || 'application/octet-stream';
+
+		const headers: Record<string, string> = {
+			'Content-Type': mimeType,
+			'Content-Length': buffer.length.toString(),
+		};
+
+		if (download) {
+			headers['Content-Disposition'] = `attachment; filename*=UTF-8''${encodeURIComponent(filename)}`;
+		} else {
+			headers['Content-Disposition'] = `inline; filename*=UTF-8''${encodeURIComponent(filename)}`;
+		}
+
+		return new NextResponse(new Uint8Array(buffer), { headers });
+	} catch (error) {
+		console.error('[api/my/files/[id]] Download error:', error);
+		return NextResponse.json({ 
+			error: error instanceof Error ? error.message : 'Download failed' 
+		}, { status: 500 });
+	}
+}

package/app/api/my/files/route.ts

@@ -0,0 +1,230 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { getDb, createDocument, getDocuments, deleteDocument, updateDocument, getDocument } from '@/lib/db';
+import { getStorageProvider, MAX_FILE_SIZE, isAllowedMimeType, formatFileSize } from '@/lib/file-storage';
+import { createAuditLog } from '@/lib/db';
+import type { FileMetadata } from '@/lib/db';
+
+export async function GET(request: NextRequest) {
+	try {
+		const { searchParams } = new URL(request.url);
+		const userId = searchParams.get('userId');
+		const search = searchParams.get('search') || undefined;
+		const limit = parseInt(searchParams.get('limit') || '50');
+		const offset = parseInt(searchParams.get('offset') || '0');
+
+		if (!userId) {
+			return NextResponse.json({ error: 'userId is required' }, { status: 400 });
+		}
+
+		const db = getDb();
+		let whereClause = 'WHERE author = ? AND type = ?';
+		const params: any[] = [userId, 'file'];
+
+		if (search) {
+			whereClause += ' AND (title LIKE ? OR content LIKE ?)';
+			const searchTerm = `%${search}%`;
+			params.push(searchTerm, searchTerm);
+		}
+
+		const countStmt = db.prepare(`SELECT COUNT(*) as count FROM documents ${whereClause}`);
+		const countResult = countStmt.get(...params) as { count: number };
+		const total = countResult.count;
+
+		let query = `SELECT * FROM documents ${whereClause} ORDER BY created_at DESC LIMIT ? OFFSET ?`;
+		params.push(limit, offset);
+
+		const stmt = db.prepare(query);
+		const rows = stmt.all(...params) as any[];
+
+		const files = rows.map(row => ({
+			id: row.id,
+			title: row.title,
+			author: row.author,
+			createdAt: row.created_at,
+			updatedAt: row.updated_at,
+			fileMetadata: row.file_metadata ? JSON.parse(row.file_metadata) : null,
+			isPublic: row.is_public === 1,
+			content: row.content,
+		}));
+
+		const totalSize = rows.reduce((acc, row) => {
+			const metadata = row.file_metadata ? JSON.parse(row.file_metadata) : null;
+			return acc + (metadata?.size || 0);
+		}, 0);
+
+		return NextResponse.json({
+			files,
+			total,
+			totalSize,
+			totalSizeFormatted: formatFileSize(totalSize),
+		});
+	} catch (error) {
+		console.error('[api/my/files] Error:', error);
+		return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+	}
+}
+
+export async function POST(request: NextRequest) {
+	try {
+		const formData = await request.formData();
+		const userId = formData.get('userId') as string;
+		const file = formData.get('file') as File | null;
+		const description = formData.get('description') as string || '';
+		const isPublic = formData.get('isPublic') === 'true';
+
+		if (!userId) {
+			return NextResponse.json({ error: 'userId is required' }, { status: 400 });
+		}
+
+		if (!file) {
+			return NextResponse.json({ error: 'No file provided' }, { status: 400 });
+		}
+
+		if (file.size > MAX_FILE_SIZE) {
+			return NextResponse.json({ 
+				error: `File size exceeds limit of ${formatFileSize(MAX_FILE_SIZE)}` 
+			}, { status: 400 });
+		}
+
+		if (!isAllowedMimeType(file.type)) {
+			return NextResponse.json({ 
+				error: `File type "${file.type}" is not allowed` 
+			}, { status: 400 });
+		}
+
+		const buffer = Buffer.from(await file.arrayBuffer());
+		const storage = getStorageProvider();
+
+		const { storageKey, md5 } = await storage.upload({
+			userId,
+			filename: file.name,
+			mimeType: file.type,
+			buffer,
+		});
+
+		const fileMetadata: FileMetadata = {
+			size: file.size,
+			mimeType: file.type,
+			md5,
+			storageKey,
+			storageType: 'local',
+			originalName: file.name,
+		};
+
+		const document = createDocument({
+			title: file.name,
+			content: description,
+			author: userId,
+			type: 'file',
+			fileMetadata,
+			isPublic,
+			isActive: true,
+		});
+
+		createAuditLog({
+			action: 'file_upload',
+			userId,
+			details: { fileId: document.id, filename: file.name, size: file.size },
+			status: 'success',
+		});
+
+		return NextResponse.json({
+			success: true,
+			file: {
+				id: document.id,
+				title: document.title,
+				fileMetadata: document.fileMetadata,
+				isPublic: document.isPublic,
+				createdAt: document.createdAt,
+			},
+		});
+	} catch (error) {
+		console.error('[api/my/files] Upload error:', error);
+		return NextResponse.json({ 
+			error: error instanceof Error ? error.message : 'Upload failed' 
+		}, { status: 500 });
+	}
+}
+
+export async function DELETE(request: NextRequest) {
+	try {
+		const { searchParams } = new URL(request.url);
+		const userId = searchParams.get('userId');
+		const fileId = searchParams.get('fileId');
+
+		if (!userId || !fileId) {
+			return NextResponse.json({ error: 'userId and fileId are required' }, { status: 400 });
+		}
+
+		const document = getDocument(fileId);
+		if (!document) {
+			return NextResponse.json({ error: 'File not found' }, { status: 404 });
+		}
+
+		if (document.author !== userId) {
+			return NextResponse.json({ error: 'Permission denied' }, { status: 403 });
+		}
+
+		if (document.fileMetadata?.storageKey) {
+			const storage = getStorageProvider();
+			await storage.delete(document.fileMetadata.storageKey);
+		}
+
+		deleteDocument(fileId);
+
+		createAuditLog({
+			action: 'file_delete',
+			userId,
+			details: { fileId, filename: document.title },
+			status: 'success',
+		});
+
+		return NextResponse.json({ success: true });
+	} catch (error) {
+		console.error('[api/my/files] Delete error:', error);
+		return NextResponse.json({ 
+			error: error instanceof Error ? error.message : 'Delete failed' 
+		}, { status: 500 });
+	}
+}
+
+export async function PATCH(request: NextRequest) {
+	try {
+		const body = await request.json();
+		const { userId, fileId, title, description, isPublic } = body;
+
+		if (!userId || !fileId) {
+			return NextResponse.json({ error: 'userId and fileId are required' }, { status: 400 });
+		}
+
+		const document = getDocument(fileId);
+		if (!document) {
+			return NextResponse.json({ error: 'File not found' }, { status: 404 });
+		}
+
+		if (document.author !== userId) {
+			return NextResponse.json({ error: 'Permission denied' }, { status: 403 });
+		}
+
+		const updates: any = {};
+		if (title !== undefined) updates.title = title;
+		if (description !== undefined) updates.content = description;
+		if (isPublic !== undefined) updates.isPublic = isPublic;
+
+		const updated = updateDocument(fileId, updates);
+
+		createAuditLog({
+			action: 'file_update',
+			userId,
+			details: { fileId, updates },
+			status: 'success',
+		});
+
+		return NextResponse.json({ success: true, file: updated });
+	} catch (error) {
+		console.error('[api/my/files] Update error:', error);
+		return NextResponse.json({ 
+			error: error instanceof Error ? error.message : 'Update failed' 
+		}, { status: 500 });
+	}
+}

package/app/api/my/knowledge/route.ts

@@ -0,0 +1,36 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { getDocuments, getDocument, getUserByUsername } from '@/lib/db';
+
+export async function GET(request: NextRequest) {
+	try {
+		const userId = request.nextUrl.searchParams.get('userId');
+		const username = request.nextUrl.searchParams.get('username');
+
+		if (!userId && !username) {
+			return NextResponse.json(
+				{ error: '缺少userId或username参数' },
+				{ status: 400 }
+			);
+		}
+
+		let targetUserId = userId;
+		if (!targetUserId && username) {
+			const user = getUserByUsername(username);
+			if (!user) {
+				return NextResponse.json({ knowledge: [] });
+			}
+			targetUserId = user.id;
+		}
+
+		const allDocs = getDocuments({}) as any[];
+		const userKnowledge = allDocs.filter((d: any) => d.author === targetUserId);
+
+		return NextResponse.json({ knowledge: userKnowledge });
+	} catch (error) {
+		console.error('Get my knowledge failed:', error);
+		return NextResponse.json(
+			{ error: '获取知识失败' },
+			{ status: 500 }
+		);
+	}
+}