work-agent 0.1.0

package/app/api/skills/generate/route.ts

@@ -0,0 +1,405 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { execSync } from 'child_process';
+import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
+import { join, basename } from 'path';
+import { toDirName } from '@/lib/pinyin';
+import { getDb } from '@/lib/db';
+
+export async function POST(request: NextRequest) {
+  try {
+    const body = await request.json();
+    const { swaggerUrl, systemName, outputDir, baseUrl, token, userId } = body;
+
+    if (!swaggerUrl) {
+      return NextResponse.json({ error: 'swaggerUrl is required' }, { status: 400 });
+    }
+
+    const displayName = systemName || 'API System';
+    
+    // 生成目录名
+    let name: string;
+    let username = '';
+    if (userId) {
+      const db = getDb();
+      const user = db.prepare('SELECT username FROM users WHERE id = ?').get(userId) as { username: string } | undefined;
+      username = user?.username || userId;
+      name = toDirName(displayName, username);
+    } else {
+      name = outputDir || displayName?.toLowerCase().replace(/\s+/g, '-') || 'new-api-system';
+    }
+    
+    // 如果提供了 userId，则创建到用户目录；否则创建到系统目录
+    let skillPath: string;
+    if (userId) {
+      skillPath = join(process.cwd(), 'data', 'skills', 'users', userId, name);
+    } else {
+      skillPath = join(process.cwd(), '.pi', 'skills', name);
+    }
+    const scriptsDir = join(skillPath, 'scripts');
+    const apisDir = join(skillPath, 'APIs');
+    const curlDir = join(skillPath, 'curl_examples');
+
+    if (existsSync(skillPath)) {
+      return NextResponse.json({ error: `Skill '${name}' already exists` }, { status: 409 });
+    }
+
+    // 先获取并验证 swagger 数据，确保能成功访问后再创建文件夹
+    let swaggerData;
+    try {
+      const response = await fetch(swaggerUrl);
+      if (!response.ok) {
+        return NextResponse.json({ error: `Failed to fetch swagger: ${response.status} ${response.statusText}` }, { status: 400 });
+      }
+      swaggerData = await response.json();
+      // 验证 swagger 数据格式
+      if (!swaggerData || (!swaggerData.paths && !swaggerData.info)) {
+        return NextResponse.json({ error: 'Invalid swagger document format' }, { status: 400 });
+      }
+    } catch (error) {
+      return NextResponse.json({ error: `Failed to fetch swagger document: ${error instanceof Error ? error.message : 'Unknown error'}` }, { status: 400 });
+    }
+
+    // 只有在 swagger 数据验证通过后才创建文件夹
+    mkdirSync(skillPath, { recursive: true });
+    mkdirSync(scriptsDir, { recursive: true });
+    mkdirSync(apisDir, { recursive: true });
+    mkdirSync(curlDir, { recursive: true });
+
+    const paths = swaggerData.paths || {};
+    const tags: Record<string, Array<{ method: string; path: string; operation: Record<string, unknown> }>> = {};
+
+    for (const [path, methods] of Object.entries(paths) as [string, Record<string, unknown>][]) {
+      for (const [method, operation] of Object.entries(methods) as [string, Record<string, unknown>][]) {
+        const op = operation as { summary?: string; description?: string; tags?: string[] };
+        const tagName = op.tags?.[0] || 'default';
+        
+        if (!tags[tagName]) {
+          tags[tagName] = [];
+        }
+        
+        tags[tagName].push({ method, path, operation });
+      }
+    }
+
+    const readOnlyMethods = ['GET', 'HEAD', 'OPTIONS'];
+    const allApis: Array<{ method: string; path: string; tag: string; isReadOnly: boolean; summary: string; action: string }> = [];
+    let scriptCount = 0;
+
+    for (const [tag, apis] of Object.entries(tags)) {
+      const tagDir = join(apisDir, tag.toLowerCase().replace(/\s+/g, '-'));
+      mkdirSync(tagDir, { recursive: true });
+
+      for (const api of apis) {
+        const op = api.operation as { summary?: string; description?: string; operationId?: string };
+        const action = (api.operation as { operationId?: string }).operationId || 
+          `${api.method.toLowerCase()}_${api.path.replace(/[^a-zA-Z0-9]/g, '_').replace(/__+/g, '_').replace(/^_|_$/g, '')}`;
+        const isReadOnly = readOnlyMethods.includes(api.method);
+        const description = op.summary || op.description || action;
+        allApis.push({ method: api.method, path: api.path, tag, isReadOnly, summary: description, action });
+
+        const bashSource = '${BASH_SOURCE[0]}';
+        const scriptContent = `#!/bin/bash
+# ${action} - ${description}
+# 分类: ${isReadOnly ? '只读操作 (read_only)' : '修改操作 (modify)'}
+# API: ${api.method.toUpperCase()} ${api.path}
+
+SCRIPT_DIR="$(cd "$(dirname "${bashSource}")" && pwd)"
+source "\${SCRIPT_DIR}/../config.env"
+
+# 检查必要配置
+if [[ -z "$BASE_URL" ]]; then
+  echo "错误: 请在 config.env 中配置 BASE_URL"
+  exit 1
+fi
+
+${isReadOnly ? '' : `# 修改操作需要审批后才能执行
+echo "此操作需要创建工单进行审批"
+exit 1
+`}
+
+# 构建完整 URL
+API_URL="\${BASE_URL}${api.path}"
+
+# 执行请求
+curl -s -X ${api.method.toUpperCase()} "\${API_URL}" \\
+  -H "Authorization: Bearer $TOKEN" \\
+  -H "Content-Type: application/json" \\
+  \${TIMEOUT:+--max-time "$TIMEOUT"} | jq .
+`;
+        const scriptPath = join(scriptsDir, action);
+        writeFileSync(scriptPath, scriptContent);
+        execSync(`chmod +x "${scriptPath}"`);
+        scriptCount++;
+
+        const apiDoc = `# ${api.method} ${api.path}
+
+**分类**: ${isReadOnly ? '只读操作' : '修改操作'}
+
+**Summary**: ${description}
+
+**Tag**: ${tag}
+
+## 请求信息
+
+- **Method**: \`${api.method}\`
+- **Path**: \`${api.path}\`
+
+## 脚本
+
+\`\`\`bash
+./scripts/${action}
+\`\`\`
+`;
+        writeFileSync(join(tagDir, `${api.method.toLowerCase()}_${action.replace(`${api.method.toLowerCase()}_`, '')}.md`), apiDoc);
+
+        const curlContent = `#!/bin/bash
+# ${action} - ${description}
+# 分类: ${isReadOnly ? '只读操作' : '修改操作'}
+
+SCRIPT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")" && pwd)"
+source "\${SCRIPT_DIR}/../config.env"
+
+curl -s -X ${api.method.toUpperCase()} "\${BASE_URL}${api.path}" \\
+  -H "Authorization: Bearer $TOKEN" \\
+  -H "Content-Type: application/json"
+`;
+        writeFileSync(join(curlDir, `${action}.sh`), curlContent);
+      }
+    }
+
+    const skillJson = {
+      name,
+      displayName,
+      description: swaggerData.info?.description || `API System generated from ${swaggerUrl}`,
+      version: swaggerData.info?.version || '1.0.0',
+      author: userId || 'xuanwu',
+      license: 'MIT',
+      keywords: ['generated', 'api', 'swagger'],
+      categories: Object.keys(tags),
+      capabilities: { swaggerParsing: true, codeGeneration: true, scriptGeneration: true },
+      parameters: {
+        swaggerUrl: { type: 'string', description: 'Swagger/OpenAPI document URL', required: true },
+        token: { type: 'string', description: 'API authentication token' },
+      },
+      operationClassification: {
+        readOnly: readOnlyMethods,
+        modify: ['POST', 'PUT', 'PATCH', 'DELETE'],
+      },
+      generatedAt: new Date().toISOString(),
+    };
+    writeFileSync(join(skillPath, 'SKILL.json'), JSON.stringify(skillJson, null, 2));
+
+    const skillMd = `---
+name: ${name}
+description: ${swaggerData.info?.description || `API System for ${displayName}`}
+version: 1.0.0
+author: ${userId || 'xuanwu'}
+engines:
+  pi-coding-agent: ">=1.0.0"
+allowed-tools:
+  - bash
+---
+
+# ${displayName}
+
+${swaggerData.info?.title || displayName} - API Skill generated from Swagger/OpenAPI specification.
+
+## Overview
+
+- **Version**: ${swaggerData.info?.version || '1.0.0'}
+- **APIs**: ${allApis.length} endpoints
+- **Read-only**: ${allApis.filter(a => a.isReadOnly).length}
+- **Modify**: ${allApis.filter(a => !a.isReadOnly).length}
+
+## Configuration Files
+
+此 Skill 目录包含以下配置文件：
+
+### config.env
+环境变量配置文件，脚本运行时读取。
+
+**重要配置项：**
+- \`BASE_URL\`: API 基础地址（必需）
+- \`TOKEN\`: API 认证令牌（执行 API 调用时需要）
+- \`TIMEOUT\`: 请求超时时间（秒）
+
+**使用方式：**
+1. 编辑 \`config.env\` 文件
+2. 设置 \`BASE_URL\` 为实际的 API 地址
+3. 执行 API 调用时，需要先设置 \`TOKEN\` 环境变量或通过其他方式提供
+
+**示例：**
+\`\`\`bash
+# 在 config.env 中配置
+BASE_URL="https://api.example.com"
+TOKEN="your-api-token-here"
+TIMEOUT=30
+\`\`\`
+
+### config.yaml
+API 配置说明文档（参考用），包含：
+- base_url: API 基础地址
+- api_version: API 版本
+- auth: 认证配置
+- request: 请求配置（超时、重试等）
+- read_only_operations: 只读操作方法列表
+- modify_operations: 修改操作方法列表
+
+## Directory Structure
+
+\`\`\`
+${name}/
+├── SKILL.md          # 本文件（AI 技能说明）
+├── SKILL.json        # 技能元数据
+├── config.env        # 环境配置（脚本读取）
+├── config.yaml       # 配置说明（文档参考）
+├── scripts/          # 可执行脚本
+│   ├── ${allApis[0]?.action || 'example_action'}
+│   └── ...
+├── APIs/             # API 文档
+│   ├── tag1/
+│   └── tag2/
+└── curl_examples/    # curl 命令示例
+\`\`\`
+
+## API Endpoints
+
+${Object.entries(tags).map(([tagName, apiList]) => `### ${tagName}
+
+| Method | Path | Description |
+|--------|------|-------------|
+${apiList.map(a => {
+  const op = a.operation as { summary?: string; description?: string };
+  const desc = op.summary || op.description || '';
+  return `| \`${a.method}\` | \`${a.path}\` | ${desc} |`;
+}).join('\n')}`).join('\n')}
+
+## Usage
+
+### 方式一：直接执行脚本
+
+1. 首先配置 \`config.env\`：
+   \`\`\`bash
+   # 编辑配置文件
+   vi config.env
+
+   # 设置 BASE_URL 和 TOKEN
+   BASE_URL="https://api.example.com"
+   TOKEN="your-token"
+   \`\`\`
+
+2. 执行脚本：
+   \`\`\`bash
+   # 只读操作可以直接执行
+   ./scripts/${allApis.find(a => a.isReadOnly)?.action || 'get_health'}
+
+   # 修改操作需要创建工单审批
+   \`\`\`
+
+### 方式二：AI 执行
+
+AI 可以通过 bash 工具执行 scripts 目录下的脚本，执行前会：
+1. 检查 \`config.env\` 配置是否完整
+2. 对于修改操作，创建工单进行审批
+
+## Important Notes for AI
+
+1. **配置优先级**：执行任何脚本前，先检查 \`config.env\` 中的配置是否正确
+2. **修改操作**：对于 POST/PUT/PATCH/DELETE 操作，系统会创建工单，需要用户审批
+3. **只读操作**：GET/HEAD/OPTIONS 操作可以直接执行
+4. **错误处理**：如果 curl 返回非 0，检查 BASE_URL、TOKEN 配置和网络连接
+`;
+    writeFileSync(join(skillPath, 'SKILL.md'), skillMd);
+
+    const configYaml = `base_url: "${baseUrl || ''}"
+api_version: "${swaggerData.swagger || swaggerData.openapi || '2.0'}"
+
+auth:
+  type: "bearer"
+  token_env: "TOKEN"
+  header: "Authorization"
+
+request:
+  timeout: 30
+  retry: 3
+
+output:
+  format: "json"
+  pretty: true
+
+read_only_operations: [${readOnlyMethods.join(', ')}]
+modify_operations: [POST, PUT, PATCH, DELETE]
+`;
+    writeFileSync(join(skillPath, 'config.yaml'), configYaml);
+
+    const configEnv = `# 环境配置文件
+# 复制此文件为 .env 并填写实际值
+
+# API Base URL
+BASE_URL="${baseUrl || ''}"
+
+# API 认证 Token
+TOKEN=
+
+# 请求超时时间（秒）
+TIMEOUT=30
+`;
+    writeFileSync(join(skillPath, 'config.env'), configEnv);
+
+    const readmeMd = `# ${displayName}
+
+${swaggerData.info?.description || ''}
+
+## Quick Start
+
+\`\`\`bash
+# Install dependencies
+npm install
+
+# Configure API token
+cp config.env .env
+# Edit .env and set your TOKEN
+
+# List available scripts
+ls -la scripts/
+
+# Execute a read-only operation
+./scripts/get_health
+
+# Execute a modify operation (creates ticket for approval)
+./scripts/create_resource
+\`\`\`
+
+## Documentation
+
+See [SKILL.md](./SKILL.md) for full documentation.
+`;
+    writeFileSync(join(skillPath, 'README.md'), readmeMd);
+
+    // 如果提供了 userId，则在数据库中注册技能
+    if (userId) {
+      const { installUserSkill } = require('@/lib/db');
+      // skill_name 应该存显示名称，dir_name 存目录名
+      installUserSkill(userId, displayName, 'personal', {
+        displayName: displayName,
+        description: swaggerData.info?.description || `API System for ${displayName}`,
+      });
+    }
+
+    const resultPath = userId ? `data/users/${userId}/skills/${name}` : `.pi/skills/${name}`;
+
+    return NextResponse.json({
+      success: true,
+      skillName: name,
+      displayName,
+      scriptCount,
+      apiCount: allApis.length,
+      readOnlyCount: allApis.filter(a => a.isReadOnly).length,
+      modifyCount: allApis.filter(a => !a.isReadOnly).length,
+      path: resultPath,
+    });
+  } catch (error) {
+    console.error('Error generating skill:', error);
+    return NextResponse.json({ error: 'Failed to generate skill' }, { status: 500 });
+  }
+}

package/app/api/skills/installed/route.ts

@@ -0,0 +1,151 @@
+/**
+ * 用户已安装技能 API
+ *
+ * GET /api/skills/installed?userId=xxx - 获取用户已安装的技能列表
+ * DELETE /api/skills/installed?userId=xxx&skillId=xxx - 卸载技能
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import {
+	getUserInstalledSkills,
+	deleteUserInstalledSkill,
+	getMarketSkillById,
+} from '@/lib/market-db';
+import { getUserById } from '@/lib/db';
+import { existsSync, rmSync } from 'fs';
+import { join } from 'path';
+
+// 用户技能目录
+const USER_SKILLS_BASE = join(process.cwd(), 'data', 'skills', 'users');
+
+/**
+ * GET /api/skills/installed?userId=xxx
+ *
+ * 返回用户已安装的市场技能列表（包含技能详情）
+ */
+export async function GET(request: NextRequest) {
+	try {
+		const searchParams = request.nextUrl.searchParams;
+		const userId = searchParams.get('userId');
+
+		if (!userId) {
+			return NextResponse.json(
+				{ error: '缺少必要参数: userId' },
+				{ status: 400 },
+			);
+		}
+
+		// 验证用户存在
+		const user = getUserById(userId);
+		if (!user) {
+			return NextResponse.json(
+				{ error: '用户不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 获取已安装技能ID列表
+		const installedSkillIds = getUserInstalledSkills(userId);
+
+		// 获取每个技能的详情
+		const skills = installedSkillIds
+			.map((skillId) => getMarketSkillById(skillId))
+			.filter((skill) => skill !== null);
+
+		return NextResponse.json({
+			skills,
+			total: skills.length,
+		});
+	} catch (error) {
+		console.error('[skills/installed] GET failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '获取已安装技能列表失败' },
+			{ status: 500 },
+		);
+	}
+}
+
+/**
+ * DELETE /api/skills/installed?userId=xxx&skillId=xxx
+ *
+ * 卸载技能：
+ * 1. 删除用户本地技能文件
+ * 2. 移除数据库安装记录
+ */
+export async function DELETE(request: NextRequest) {
+	try {
+		const searchParams = request.nextUrl.searchParams;
+		const userId = searchParams.get('userId');
+		const skillId = searchParams.get('skillId');
+
+		if (!userId || !skillId) {
+			return NextResponse.json(
+				{ error: '缺少必要参数: userId, skillId' },
+				{ status: 400 },
+			);
+		}
+
+		// 验证用户存在
+		const user = getUserById(userId);
+		if (!user) {
+			return NextResponse.json(
+				{ error: '用户不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 验证技能存在
+		const skill = getMarketSkillById(skillId);
+		if (!skill) {
+			return NextResponse.json(
+				{ error: '技能不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 验证已安装
+		if (!getUserInstalledSkills(userId).includes(skillId)) {
+			return NextResponse.json(
+				{ error: '技能未安装' },
+				{ status: 404 },
+			);
+		}
+
+		// 删除用户本地技能文件
+		const userSkillDir = join(USER_SKILLS_BASE, userId, skill.name);
+		if (existsSync(userSkillDir)) {
+			try {
+				rmSync(userSkillDir, { recursive: true });
+				console.log(`[skills/installed] Deleted skill files: ${userSkillDir}`);
+			} catch (error) {
+				console.error('[skills/installed] Failed to delete skill files:', error);
+				return NextResponse.json(
+					{ error: '删除技能文件失败' },
+					{ status: 500 },
+				);
+			}
+		}
+
+		// 移除数据库安装记录
+		const deleted = deleteUserInstalledSkill(userId, skillId);
+		if (!deleted) {
+			return NextResponse.json(
+				{ error: '移除安装记录失败' },
+				{ status: 500 },
+			);
+		}
+
+		return NextResponse.json({
+			success: true,
+			message: '技能卸载成功',
+			skillId,
+			skillName: skill.name,
+		});
+	} catch (error) {
+		console.error('[skills/installed] DELETE failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '卸载技能失败' },
+			{ status: 500 },
+		);
+	}
+}