work-agent 0.1.0

package/lib/market-db.ts

@@ -0,0 +1,736 @@
+/**
+ * 技能市场数据库操作
+ * 提供技能市场的所有CRUD操作
+ */
+
+import { existsSync, unlinkSync } from 'fs';
+import { join } from 'path';
+import {
+	type MarketSkill,
+	type MarketSkillDetail,
+	type SkillRating,
+	type UploadToMarketRequest,
+	type RateSkillRequest,
+	type MarketSkillStatus,
+} from './market-types';
+import {
+	readSkillJsonFromZip,
+	readSkillMdFromZip,
+	cleanupZipFile,
+} from './zip-tool';
+import { getUserSkill } from './user-skills';
+import { getUserById, getDb } from './db';
+
+/**
+ * 生成唯一ID
+ */
+function generateId(prefix: string): string {
+	const timestamp = Date.now().toString(36);
+	const random = Math.random().toString(36).substring(2, 9);
+	return `${prefix}-${timestamp}${random}`;
+}
+
+/**
+ * 上传技能到市场
+ */
+export async function uploadSkillToMarket(
+	request: UploadToMarketRequest,
+	zipFilePath: string,
+): Promise<MarketSkill> {
+	const db = getDb();
+
+	// 获取用户技能信息
+	const userSkill = getUserSkill(request.userId, request.skillName);
+	if (!userSkill) {
+		throw new Error('User skill not found');
+	}
+
+	// 从ZIP读取技能元数据
+	const skillJson = readSkillJsonFromZip(zipFilePath);
+
+	// 获取用户名
+	const userName = request.userName || skillJson.author || request.userId;
+	const now = new Date().toISOString();
+
+	// 检查是否已存在同名技能
+	const existing = db
+		.prepare('SELECT id, author, file_path, display_name FROM skill_market WHERE name = ?')
+		.get(skillJson.name) as { id: string; author: string; file_path: string; display_name: string } | undefined;
+
+	if (existing) {
+		// 已有同名技能，追加作者名到 display_name
+		const authorSuffix = `-${userName}`;
+		let newDisplayName = skillJson.displayName || skillJson.name;
+		
+		// 如果 display_name 中不包含作者名，则追加
+		if (!newDisplayName.includes(authorSuffix)) {
+			newDisplayName = `${newDisplayName}${authorSuffix}`;
+		}
+
+		// 检查是否是同一作者
+		if (existing.author !== request.userId) {
+			// 不同作者：创建新记录（使用新的 name）
+			const newSkillId = generateId('skill');
+			const newName = `${skillJson.name}-${request.userId.slice(0, 8)}`;
+			
+			const stmt = db.prepare(`
+				INSERT INTO skill_market (
+					id, name, display_name, description, version,
+					author, author_name, status, is_official,
+					rating_avg, rating_count, download_count, file_path,
+					created_at, updated_at
+				) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+			`);
+
+			stmt.run(
+				newSkillId,
+				newName,
+				newDisplayName,
+				skillJson.description || '',
+				skillJson.version || '1.0.0',
+				request.userId,
+				userName,
+				'pending',
+				0,
+				0,
+				0,
+				0,
+				zipFilePath,
+				now,
+				now,
+			);
+
+			return getMarketSkillById(newSkillId)!;
+		}
+
+		// 同一作者：覆盖更新
+		const oldFilePath = existing.file_path;
+
+		const stmt = db.prepare(`
+			UPDATE skill_market
+			SET display_name = ?, description = ?, version = ?,
+			    file_path = ?, updated_at = ?
+			WHERE id = ?
+		`);
+
+		stmt.run(
+			newDisplayName,
+			skillJson.description || '',
+			skillJson.version || '1.0.0',
+			zipFilePath,
+			now,
+			existing.id,
+		);
+
+		// 清理旧的 ZIP 文件
+		if (oldFilePath && existsSync(oldFilePath) && oldFilePath !== zipFilePath) {
+			try {
+				unlinkSync(oldFilePath);
+				console.log(`[market-db] Deleted old skill file: ${oldFilePath}`);
+			} catch (error) {
+				console.error('[market-db] Failed to delete old skill file:', error);
+			}
+		}
+
+		return getMarketSkillById(existing.id)!;
+	}
+
+	// 创建新的市场技能记录
+	const skillId = generateId('skill');
+	const stmt = db.prepare(`
+		INSERT INTO skill_market (
+			id, name, display_name, description, version,
+			author, author_name, status, is_official,
+			rating_avg, rating_count, download_count, file_path,
+			created_at, updated_at
+		) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+	`);
+
+	stmt.run(
+		skillId,
+		skillJson.name,
+		skillJson.displayName || skillJson.name,
+		skillJson.description || '',
+		skillJson.version || '1.0.0',
+		request.userId,
+		userName,
+		'approved', // 新技能默认审核通过
+		0, // 非官方
+		0, // 初始评分
+		0, // 初始评分数
+		0, // 初始下载次数
+		zipFilePath, // ZIP文件路径
+		now,
+		now,
+	);
+
+	return getMarketSkillById(skillId)!;
+}
+
+/**
+ * 根据ID获取技能元数据（不含内容）
+ */
+export function getMarketSkillById(skillId: string): MarketSkill | null {
+	const db = getDb();
+	const row = db
+		.prepare(`
+			SELECT * FROM skill_market WHERE id = ?
+		`)
+		.get(skillId) as any;
+
+	if (!row) {
+		return null;
+	}
+
+	return {
+		id: row.id,
+		name: row.name,
+		displayName: row.display_name,
+		description: row.description,
+		version: row.version,
+		author: row.author,
+		authorName: row.author_name,
+		status: row.status as MarketSkillStatus,
+		isOfficial: row.is_official === 1,
+		ratingAvg: row.rating_avg,
+		ratingCount: row.rating_count,
+		downloadCount: row.download_count,
+		reviewedBy: row.reviewed_by,
+		reviewedAt: row.reviewed_at,
+		reviewComment: row.review_comment,
+		createdAt: row.created_at,
+		updatedAt: row.updated_at,
+	};
+}
+
+/**
+ * 根据名称获取技能
+ */
+export function getMarketSkillByName(skillName: string): MarketSkill | null {
+	const db = getDb();
+	const row = db
+		.prepare(`
+			SELECT * FROM skill_market WHERE name = ?
+		`)
+		.get(skillName) as any;
+
+	if (!row) {
+		return null;
+	}
+
+	return {
+		id: row.id,
+		name: row.name,
+		displayName: row.display_name,
+		description: row.description,
+		version: row.version,
+		author: row.author,
+		authorName: row.author_name,
+		status: row.status as MarketSkillStatus,
+		isOfficial: row.is_official === 1,
+		ratingAvg: row.rating_avg,
+		ratingCount: row.rating_count,
+		downloadCount: row.download_count,
+		reviewedBy: row.reviewed_by,
+		reviewedAt: row.reviewed_at,
+		reviewComment: row.review_comment,
+		createdAt: row.created_at,
+		updatedAt: row.updated_at,
+	};
+}
+
+/**
+ * 根据ID获取技能详情（包含内容）
+ */
+export function getMarketSkillDetailById(skillId: string): MarketSkillDetail | null {
+	const skill = getMarketSkillById(skillId);
+	if (!skill) {
+		return null;
+	}
+
+	const db = getDb();
+	const row = db
+		.prepare('SELECT file_path FROM skill_market WHERE id = ?')
+		.get(skillId) as any;
+
+	if (!row || !row.file_path) {
+		throw new Error('Skill file not found');
+	}
+
+	// 从ZIP读取内容
+	let content: string;
+	let riskConfig: any;
+	try {
+		content = readSkillMdFromZip(row.file_path);
+		const skillJson = readSkillJsonFromZip(row.file_path);
+		riskConfig = skillJson.riskConfig;
+	} catch (error) {
+		console.error('Failed to read skill content from ZIP:', error);
+		throw new Error('Failed to read skill content');
+	}
+
+	return {
+		...skill,
+		content,
+		riskConfig,
+	};
+}
+
+/**
+ * 列出技能市场中的技能（支持过滤）
+ */
+export interface ListMarketSkillsOptions {
+	status?: MarketSkillStatus | 'all';
+	author?: string;
+	isOfficial?: boolean;
+	search?: string;
+	limit?: number;
+	offset?: number;
+	orderBy?: 'rating' | 'downloads' | 'created' | 'updated';
+}
+
+export function listMarketSkills(
+	options: ListMarketSkillsOptions = {},
+): { skills: MarketSkill[]; total: number } {
+	const db = getDb();
+
+	let query = 'SELECT * FROM skill_market WHERE 1=1';
+	const params: any[] = [];
+
+	// 状态过滤
+	if (options.status && options.status !== 'all') {
+		query += ' AND status = ?';
+		params.push(options.status);
+	}
+
+	// 作者过滤
+	if (options.author) {
+		query += ' AND author = ?';
+		params.push(options.author);
+	}
+
+	// 官方认证过滤
+	if (options.isOfficial !== undefined) {
+		query += ' AND is_official = ?';
+		params.push(options.isOfficial ? 1 : 0);
+	}
+
+	// 搜索过滤
+	if (options.search) {
+		query += ' AND (display_name LIKE ? OR description LIKE ?)';
+		const searchTerm = `%${options.search}%`;
+		params.push(searchTerm, searchTerm);
+	}
+
+	// 获取总数
+	const countQuery = query.replace('SELECT *', 'SELECT COUNT(*) as count');
+	const totalRow = db.prepare(countQuery).get(...params) as { count: number };
+	const total = totalRow.count;
+
+	// 排序
+	switch (options.orderBy) {
+		case 'rating':
+			query += ' ORDER BY rating_avg DESC, rating_count DESC';
+			break;
+		case 'downloads':
+			query += ' ORDER BY download_count DESC';
+			break;
+		case 'created':
+			query += ' ORDER BY created_at DESC';
+			break;
+		case 'updated':
+		default:
+			query += ' ORDER BY updated_at DESC';
+			break;
+	}
+
+	// 分页
+	if (options.limit) {
+		query += ' LIMIT ?';
+		params.push(options.limit);
+	}
+	if (options.offset) {
+		query += ' OFFSET ?';
+		params.push(options.offset);
+	}
+
+	const rows = db.prepare(query).all(...params) as any[];
+
+	const skills: MarketSkill[] = rows.map((row) => ({
+		id: row.id,
+		name: row.name,
+		displayName: row.display_name,
+		description: row.description,
+		version: row.version,
+		author: row.author,
+		authorName: row.author_name,
+		status: row.status as MarketSkillStatus,
+		isOfficial: row.is_official === 1,
+		ratingAvg: row.rating_avg,
+		ratingCount: row.rating_count,
+		downloadCount: row.download_count,
+		reviewedBy: row.reviewed_by,
+		reviewedAt: row.reviewed_at,
+		reviewComment: row.review_comment,
+		createdAt: row.created_at,
+		updatedAt: row.updated_at,
+	}));
+
+	return { skills, total };
+}
+
+/**
+ * 审核技能（管理员）
+ */
+export interface ReviewSkillRequest {
+	reviewerId: string;
+	reviewerName: string;
+	approved: boolean;
+	comment?: string;
+}
+
+export function reviewSkill(
+	skillId: string,
+	request: ReviewSkillRequest,
+): MarketSkill {
+	const db = getDb();
+
+	// 检查技能是否存在
+	const skill = getMarketSkillById(skillId);
+	if (!skill) {
+		throw new Error('Skill not found');
+	}
+
+	// 只能审核pending状态的技能
+	if (skill.status !== 'pending') {
+		throw new Error('Skill is not pending review');
+	}
+
+	const now = new Date().toISOString();
+	const newStatus = request.approved ? 'approved' : 'rejected';
+
+	const stmt = db.prepare(`
+		UPDATE skill_market
+		SET status = ?, reviewed_by = ?, reviewed_at = ?, review_comment = ?, updated_at = ?
+		WHERE id = ?
+	`);
+
+	stmt.run(
+		newStatus,
+		request.reviewerId,
+		now,
+		request.comment || '',
+		now,
+		skillId,
+	);
+
+	return getMarketSkillById(skillId)!;
+}
+
+/**
+ * 设置/取消官方认证
+ */
+export function certifySkill(
+	skillId: string,
+	isOfficial: boolean,
+	reviewerId: string,
+): MarketSkill {
+	const db = getDb();
+
+	// 检查技能是否存在
+	const skill = getMarketSkillById(skillId);
+	if (!skill) {
+		throw new Error('Skill not found');
+	}
+
+	// 只能认证已审核通过的技能
+	if (skill.status !== 'approved') {
+		throw new Error('Can only certify approved skills');
+	}
+
+	const now = new Date().toISOString();
+
+	const stmt = db.prepare(`
+		UPDATE skill_market
+		SET is_official = ?, reviewed_by = ?, reviewed_at = ?, updated_at = ?
+		WHERE id = ?
+	`);
+
+	stmt.run(
+		isOfficial ? 1 : 0,
+		reviewerId,
+		now,
+		now,
+		skillId,
+	);
+
+	return getMarketSkillById(skillId)!;
+}
+
+/**
+ * 删除技能（包括文件清理）
+ * @param skillId 技能ID
+ * @param userId 用户ID
+ * @param userRole 用户角色，admin 可以删除任何技能
+ */
+export function deleteMarketSkill(skillId: string, userId: string, userRole?: string): boolean {
+	const db = getDb();
+
+	// 检查技能是否存在
+	const skill = getMarketSkillById(skillId);
+	if (!skill) {
+		return false;
+	}
+
+	// 检查权限：只有作者或管理员可以删除
+	if (skill.author !== userId && userRole !== 'admin') {
+		throw new Error('You do not have permission to delete this skill');
+	}
+
+	// 获取文件路径
+	const row = db
+		.prepare('SELECT file_path FROM skill_market WHERE id = ?')
+		.get(skillId) as any;
+	const filePath = row?.file_path;
+
+	// 删除数据库记录（外键会自动删除评分）
+	const stmt = db.prepare('DELETE FROM skill_market WHERE id = ?');
+	const result = stmt.run(skillId);
+
+	if (result.changes === 0) {
+		return false;
+	}
+
+	// 清理文件
+	if (filePath && existsSync(filePath)) {
+		try {
+			unlinkSync(filePath);
+			console.log(`[market-db] Deleted skill file: ${filePath}`);
+		} catch (error) {
+			console.error('[market-db] Failed to delete skill file:', error);
+		}
+	}
+
+	return true;
+}
+
+/**
+ * 增加下载次数
+ */
+export function incrementDownloadCount(skillId: string): void {
+	const db = getDb();
+
+	const stmt = db.prepare(`
+		UPDATE skill_market
+		SET download_count = download_count + 1
+		WHERE id = ?
+	`);
+
+	stmt.run(skillId);
+}
+
+/**
+ * 添加/更新用户评分
+ */
+export function addRating(skillId: string, request: RateSkillRequest): SkillRating {
+	const db = getDb();
+
+	// 检查技能是否存在
+	const skill = getMarketSkillById(skillId);
+	if (!skill) {
+		throw new Error('Skill not found');
+	}
+
+	// 验证评分范围
+	if (request.rating < 1 || request.rating > 5) {
+		throw new Error('Rating must be between 1 and 5');
+	}
+
+	// 检查是否已评分
+	const existing = db
+		.prepare('SELECT id FROM skill_ratings WHERE skill_id = ? AND user_id = ?')
+		.get(skillId, request.userId) as any;
+
+	const now = new Date().toISOString();
+
+	if (existing) {
+		// 更新现有评分
+		const stmt = db.prepare(`
+			UPDATE skill_ratings
+			SET rating = ?, comment = ?, created_at = ?
+			WHERE skill_id = ? AND user_id = ?
+		`);
+		stmt.run(request.rating, request.comment || null, now, skillId, request.userId);
+	} else {
+		// 创建新评分
+		const ratingId = generateId('rating');
+		const stmt = db.prepare(`
+			INSERT INTO skill_ratings (id, skill_id, user_id, rating, comment, created_at)
+			VALUES (?, ?, ?, ?, ?, ?)
+		`);
+		stmt.run(ratingId, skillId, request.userId, request.rating, request.comment || null, now);
+	}
+
+	// 更新平均评分
+	updateAverageRating(skillId);
+
+	// 返回更新后的评分
+	return getSkillRatings(skillId).find((r) => r.userId === request.userId)!;
+}
+
+/**
+ * 获取技能的所有评分
+ */
+export function getSkillRatings(skillId: string): SkillRating[] {
+	const db = getDb();
+
+	const rows = db
+		.prepare('SELECT * FROM skill_ratings WHERE skill_id = ? ORDER BY created_at DESC')
+		.all(skillId) as any[];
+
+	return rows.map((row) => ({
+		id: row.id,
+		skillId: row.skill_id,
+		userId: row.user_id,
+		rating: row.rating,
+		comment: row.comment,
+		createdAt: row.created_at,
+	}));
+}
+
+/**
+ * 获取用户对特定技能的评分
+ */
+export function getUserRating(skillId: string, userId: string): SkillRating | null {
+	const db = getDb();
+
+	const row = db
+		.prepare('SELECT * FROM skill_ratings WHERE skill_id = ? AND user_id = ?')
+		.get(skillId, userId) as any;
+
+	if (!row) {
+		return null;
+	}
+
+	return {
+		id: row.id,
+		skillId: row.skill_id,
+		userId: row.user_id,
+		rating: row.rating,
+		comment: row.comment,
+		createdAt: row.created_at,
+	};
+}
+
+/**
+ * 更新平均评分（内部函数）
+ */
+function updateAverageRating(skillId: string): void {
+	const db = getDb();
+
+	// 计算新的平均评分
+	const result = db
+		.prepare(`
+			SELECT
+				COUNT(*) as count,
+				AVG(rating) as average
+			FROM skill_ratings
+			WHERE skill_id = ?
+		`)
+		.get(skillId) as { count: number; average: number };
+
+	const stmt = db.prepare(`
+		UPDATE skill_market
+		SET rating_avg = ?, rating_count = ?, updated_at = ?
+		WHERE id = ?
+	`);
+
+	stmt.run(
+		result.average || 0,
+		result.count || 0,
+		new Date().toISOString(),
+		skillId,
+	);
+}
+
+/**
+ * 获取用户已安装的市场技能ID列表
+ */
+export function getUserInstalledSkills(userId: string): string[] {
+	const db = getDb();
+
+	const rows = db
+		.prepare('SELECT skill_id FROM user_skills WHERE user_id = ? AND source = ? AND skill_id IS NOT NULL')
+		.all(userId, 'market') as { skill_id: string }[];
+
+	return rows.map((row) => row.skill_id).filter(Boolean);
+}
+
+/**
+ * 添加用户已安装技能记录
+ */
+export function addUserInstalledSkill(userId: string, skillId: string): void {
+	const db = getDb();
+
+	const skill = db.prepare('SELECT name, display_name FROM skill_market WHERE id = ?').get(skillId) as { name: string; display_name: string } | undefined;
+	if (!skill) {
+		return;
+	}
+
+	const now = new Date().toISOString();
+	const skillName = skill.display_name || skill.name;
+
+	const existing = db.prepare('SELECT id FROM user_skills WHERE user_id = ? AND skill_name = ?').get(userId, skillName) as { id: string } | undefined;
+	if (!existing) {
+		const userSkillId = `us-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;
+		db.prepare(`
+			INSERT INTO user_skills (id, user_id, skill_name, dir_name, source, skill_id, use_count, installed_at)
+			VALUES (?, ?, ?, ?, 'market', ?, 0, ?)
+		`).run(userSkillId, userId, skillName, skillName, skillId, now);
+	}
+}
+
+/**
+ * 检查用户是否已安装技能
+ */
+export function isSkillInstalledByUser(userId: string, skillId: string): boolean {
+	const db = getDb();
+
+	const row = db
+		.prepare('SELECT id FROM user_skills WHERE user_id = ? AND skill_id = ? AND source = ?')
+		.get(userId, skillId, 'market') as { id: string } | undefined;
+
+	return !!row;
+}
+
+/**
+ * 删除用户已安装技能记录
+ */
+export function deleteUserInstalledSkill(userId: string, skillId: string): boolean {
+	const db = getDb();
+
+	const stmt = db.prepare(`
+		DELETE FROM user_skills
+		WHERE user_id = ? AND skill_id = ? AND source = 'market'
+	`);
+
+	const result = stmt.run(userId, skillId);
+	return result.changes > 0;
+}
+
+/**
+ * 获取技能作者信息（用于显示）
+ */
+export async function getSkillAuthorInfo(authorId: string): Promise<{
+	id: string;
+	username?: string;
+} | null> {
+	const user = getUserById(authorId);
+	if (!user) {
+		return null;
+	}
+	return {
+		id: user.id,
+		username: user.username,
+	};
+}