work-agent 0.1.0

package/app/api/marketplace/skills/[id]/promote-to-system/route.ts

@@ -0,0 +1,219 @@
+/**
+ * POST /api/marketplace/skills/:id/promote-to-system - 管理员提升技能为系统技能
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import { getMarketSkillById } from '@/lib/market-db';
+import { readSkillJsonFromZip, readSkillMdFromZip } from '@/lib/zip-tool';
+import { getUserById, getDb, createAuditLog } from '@/lib/db';
+import { mkdirSync, existsSync, writeFileSync, rmSync } from 'fs';
+import { join } from 'path';
+
+// 系统技能目录
+const SYSTEM_SKILLS_BASE = join(process.cwd(), '.pi', 'skills');
+
+type RouteContext = {
+	params: Promise<{ id: string }>;
+};
+
+/**
+ * 检查用户是否是管理员
+ */
+function isAdmin(userId: string): boolean {
+	const user = getUserById(userId);
+	return user?.role === 'admin';
+}
+
+/**
+ * POST /api/marketplace/skills/:id/promote-to-system
+ *
+ * 查询参数:
+ * - userId: 管理员用户ID
+ *
+ * 流程:
+ * 1. 验证管理员权限
+ * 2. 验证技能存在且状态为 approved
+ * 3. 从ZIP解压到系统技能目录 .pi/skills/{skillName}/
+ * 4. 创建 SKILL.json 和 SKILL.md
+ * 5. 返回成功
+ */
+export async function POST(
+	request: NextRequest,
+	context: RouteContext
+) {
+	try {
+		const { id: skillId } = await context.params;
+		const { searchParams } = new URL(request.url);
+		const userId = searchParams.get('userId');
+
+		// 验证必填字段
+		if (!userId) {
+			return NextResponse.json(
+				{ error: '缺少必要参数: userId' },
+				{ status: 400 },
+			);
+		}
+
+		// 验证管理员权限
+		if (!isAdmin(userId)) {
+			return NextResponse.json(
+				{ error: '需要管理员权限' },
+				{ status: 403 },
+			);
+		}
+
+		// 验证管理员用户存在
+		const adminUser = getUserById(userId);
+		if (!adminUser) {
+			return NextResponse.json(
+				{ error: '管理员用户不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 获取技能信息
+		const skill = getMarketSkillById(skillId);
+		if (!skill) {
+			return NextResponse.json(
+				{ error: '技能不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 只能提升已审核通过的技能
+		if (skill.status !== 'approved') {
+			return NextResponse.json(
+				{ error: `技能状态为 ${skill.status}，只有已审核通过的技能才能提升为系统技能` },
+				{ status: 400 },
+			);
+		}
+
+		// 获取ZIP文件路径
+		const db = getDb();
+		const row = db
+			.prepare('SELECT file_path FROM skill_market WHERE id = ?')
+			.get(skillId) as any;
+		const zipPath = row?.file_path;
+
+		if (!zipPath || !existsSync(zipPath)) {
+			return NextResponse.json(
+				{ error: '技能文件不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 确保系统技能目录存在
+		if (!existsSync(SYSTEM_SKILLS_BASE)) {
+			mkdirSync(SYSTEM_SKILLS_BASE, { recursive: true });
+		}
+
+		// 目标系统技能目录
+		const systemSkillDir = join(SYSTEM_SKILLS_BASE, skill.name);
+
+		// 检查是否已存在同名系统技能
+		if (existsSync(systemSkillDir)) {
+			return NextResponse.json(
+				{ error: `系统技能目录下已存在同名技能 "${skill.name}"，请先删除现有技能` },
+				{ status: 409 },
+			);
+		}
+
+		// 创建系统技能目录
+		mkdirSync(systemSkillDir, { recursive: true });
+
+		// 从ZIP读取并写入SKILL.json和SKILL.md
+		try {
+			const skillJson = readSkillJsonFromZip(zipPath);
+			const skillMd = readSkillMdFromZip(zipPath);
+
+			// 验证SKILL.json包含必填字段
+			if (!skillJson.name || !skillJson.displayName) {
+				// 清理已创建的目录
+				try {
+					rmSync(systemSkillDir, { recursive: true, force: true });
+				} catch (cleanupError) {
+					console.error('[promote-to-system] Failed to cleanup directory after validation error:', cleanupError);
+				}
+				return NextResponse.json(
+					{ error: 'SKILL.json 缺少必填字段 name 或 displayName' },
+					{ status: 400 },
+				);
+			}
+
+			// 写入SKILL.json
+			try {
+				writeFileSync(
+					join(systemSkillDir, 'SKILL.json'),
+					JSON.stringify(skillJson, null, 2),
+					'utf-8'
+				);
+			} catch (writeError) {
+				// 写入失败，清理已创建的目录
+				try {
+					rmSync(systemSkillDir, { recursive: true, force: true });
+				} catch (cleanupError) {
+					console.error('[promote-to-system] Failed to cleanup directory after write error:', cleanupError);
+				}
+				throw writeError;
+			}
+
+			// 写入SKILL.md
+			try {
+				writeFileSync(
+					join(systemSkillDir, 'SKILL.md'),
+					skillMd,
+					'utf-8'
+				);
+			} catch (writeError) {
+				// 写入失败，清理已创建的目录和SKILL.json
+				try {
+					rmSync(systemSkillDir, { recursive: true, force: true });
+				} catch (cleanupError) {
+					console.error('[promote-to-system] Failed to cleanup directory after write error:', cleanupError);
+				}
+				throw writeError;
+			}
+
+			console.log(`[promote-to-system] Promoted skill "${skill.name}" to system skills`);
+		} catch (error) {
+			console.error('[promote-to-system] Failed to extract skill files:', error);
+			return NextResponse.json(
+				{ error: '提取技能文件失败' },
+				{ status: 500 },
+			);
+		}
+
+		// 创建审计日志
+		try {
+			createAuditLog({
+				action: 'promote_skill_to_system',
+				userId: adminUser.id,
+				details: {
+					skillId: skill.id,
+					skillName: skill.name,
+					skillDisplayName: skill.displayName,
+					marketplaceSkillId: skillId,
+				},
+				status: 'success',
+			});
+		} catch (auditError) {
+			// 审计日志失败不影响主流程
+			console.error('[promote-to-system] Failed to create audit log:', auditError);
+		}
+
+		return NextResponse.json(
+			{
+				success: true,
+				systemSkillName: skill.name,
+				message: `技能 "${skill.displayName || skill.name}" 已提升为系统技能`,
+			},
+			{ status: 200 },
+		);
+	} catch (error) {
+		console.error('[marketplace/skills/:id/promote-to-system] POST failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '提升技能失败' },
+			{ status: 500 },
+		);
+	}
+}

package/app/api/marketplace/skills/[id]/rate/route.ts

@@ -0,0 +1,90 @@
+/**
+ * POST /api/marketplace/skills/:id/rate - 用户评分
+ *
+ * 请求体:
+ * - userId: 用户ID (必填)
+ * - rating: 评分 1-5 (必填)
+ * - comment: 评论文本 (可选)
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import { addRating, getMarketSkillById } from '@/lib/market-db';
+import { getUserById } from '@/lib/db';
+
+type RouteContext = {
+	params: Promise<{ id: string }>;
+};
+
+/**
+ * POST /api/marketplace/skills/:id/rate - 用户评分
+ */
+export async function POST(request: NextRequest, context: RouteContext) {
+	try {
+		const { id } = await context.params;
+		const body = await request.json();
+		const { userId, rating, comment } = body;
+
+		// 验证必填字段
+		if (!userId) {
+			return NextResponse.json(
+				{ error: '缺少用户ID' },
+				{ status: 400 },
+			);
+		}
+
+		if (rating === undefined || rating === null) {
+			return NextResponse.json(
+				{ error: '缺少评分' },
+				{ status: 400 },
+			);
+		}
+
+		// 验证评分范围
+		const ratingNum = Number(rating);
+		if (!Number.isInteger(ratingNum) || ratingNum < 1 || ratingNum > 5) {
+			return NextResponse.json(
+				{ error: '评分必须是1-5之间的整数' },
+				{ status: 400 },
+			);
+		}
+
+		// 验证技能是否存在
+		const skill = getMarketSkillById(id);
+		if (!skill) {
+			return NextResponse.json(
+				{ error: '技能不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 验证用户存在
+		const user = getUserById(userId);
+		if (!user) {
+			return NextResponse.json(
+				{ error: '用户不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 添加/更新评分（数据库层处理UPSERT）
+		const skillRating = addRating(id, {
+			userId,
+			rating: ratingNum,
+			comment,
+		});
+
+		// 获取更新后的技能信息
+		const updatedSkill = getMarketSkillById(id);
+
+		return NextResponse.json({
+			rating: skillRating,
+			skill: updatedSkill,
+		});
+	} catch (error) {
+		console.error('[marketplace/skills/:id/rate] POST failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '评分失败' },
+			{ status: 500 },
+		);
+	}
+}

package/app/api/marketplace/skills/[id]/ratings/route.ts

@@ -0,0 +1,55 @@
+/**
+ * GET /api/marketplace/skills/:id/ratings - 获取技能评分列表
+ *
+ * 查询参数:
+ * - userId: 可选，获取特定用户的评分
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import { getSkillRatings, getUserRating, getMarketSkillById } from '@/lib/market-db';
+
+type RouteContext = {
+	params: Promise<{ id: string }>;
+};
+
+/**
+ * GET /api/marketplace/skills/:id/ratings - 获取技能评分列表
+ */
+export async function GET(request: NextRequest, context: RouteContext) {
+	try {
+		const { id } = await context.params;
+		const { searchParams } = new URL(request.url);
+		const userId = searchParams.get('userId');
+
+		// 验证技能是否存在
+		const skill = getMarketSkillById(id);
+		if (!skill) {
+			return NextResponse.json(
+				{ error: '技能不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 如果指定了用户ID，返回该用户的评分
+		if (userId) {
+			const userRating = getUserRating(id, userId);
+			return NextResponse.json({
+				ratings: userRating ? [userRating] : [],
+				total: userRating ? 1 : 0,
+			});
+		}
+
+		// 返回所有评分
+		const ratings = getSkillRatings(id);
+		return NextResponse.json({
+			ratings,
+			total: ratings.length,
+		});
+	} catch (error) {
+		console.error('[marketplace/skills/:id/ratings] GET failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '获取评分列表失败' },
+			{ status: 500 },
+		);
+	}
+}

package/app/api/marketplace/skills/[id]/reject/route.ts

@@ -0,0 +1,68 @@
+/**
+ * PUT /api/marketplace/skills/:id/reject - 管理员拒绝技能
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import { reviewSkill } from '@/lib/market-db';
+import { getUserById } from '@/lib/db';
+
+type RouteContext = {
+	params: Promise<{ id: string }>;
+};
+
+/**
+ * 检查用户是否是管理员
+ */
+function isAdmin(userId: string): boolean {
+	const user = getUserById(userId);
+	return user?.role === 'admin';
+}
+
+export async function PUT(request: NextRequest, context: RouteContext) {
+	try {
+		const { id } = await context.params;
+		const body = await request.json();
+		const { reviewerId, reviewerName, comment } = body;
+
+		// 验证必填字段
+		if (!reviewerId) {
+			return NextResponse.json(
+				{ error: '缺少审核人ID' },
+				{ status: 400 },
+			);
+		}
+
+		// 验证管理员权限
+		if (!isAdmin(reviewerId)) {
+			return NextResponse.json(
+				{ error: '需要管理员权限' },
+				{ status: 403 },
+			);
+		}
+
+		// 获取审核人信息
+		const reviewer = getUserById(reviewerId);
+		if (!reviewer) {
+			return NextResponse.json(
+				{ error: '审核人不存在' },
+				{ status: 404 },
+			);
+		}
+
+		// 拒绝技能
+		const skill = reviewSkill(id, {
+			reviewerId,
+			reviewerName: reviewerName || reviewer.username,
+			approved: false,
+			comment,
+		});
+
+		return NextResponse.json({ skill });
+	} catch (error) {
+		console.error('[marketplace/skills/:id/reject] PUT failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '拒绝失败' },
+			{ status: 500 },
+		);
+	}
+}

package/app/api/marketplace/skills/[id]/route.ts

@@ -0,0 +1,177 @@
+/**
+ * 技能市场详情 API - 获取技能详情和删除技能
+ *
+ * GET    /api/marketplace/skills/:id - 获取技能详情
+ * DELETE /api/marketplace/skills/:id - 删除技能
+ *
+ * 其他操作:
+ * - PUT    /api/marketplace/skills/:id/approve - 管理员审核通过
+ * - PUT    /api/marketplace/skills/:id/reject - 管理员拒绝
+ * - PUT    /api/marketplace/skills/:id/certify - 管理员设为官方认证
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import {
+	getMarketSkillDetailById,
+	deleteMarketSkill,
+} from '@/lib/market-db';
+import { getUserById } from '@/lib/db';
+import { getMarketClient } from '@/lib/market-client';
+
+type RouteContext = {
+	params: Promise<{ id: string }>;
+};
+
+/**
+ * GET /api/marketplace/skills/:id - 获取技能详情
+ */
+export async function GET(request: NextRequest, context: RouteContext) {
+	try {
+		const { id } = await context.params;
+
+		const client = getMarketClient();
+
+		// 如果启用了远程服务，优先从远程获取
+		if (client.isRemoteEnabled()) {
+			try {
+				const skill = await client.getSkill(id);
+				if (skill) {
+					return NextResponse.json({ skill, source: 'remote' });
+				}
+			} catch (error: any) {
+				console.error('[marketplace/skills/:id] Remote failed:', error.message);
+				return NextResponse.json(
+					{ error: error.message || '远程市场服务不可用', code: 'MARKET_UNAVAILABLE' },
+					{ status: 503 }
+				);
+			}
+		}
+
+		// 本地模式：直接调用本地 SQLite
+		const skill = getMarketSkillDetailById(id);
+		if (!skill) {
+			return NextResponse.json(
+				{ error: '技能不存在' },
+				{ status: 404 },
+			);
+		}
+
+		return NextResponse.json({ skill, source: 'local' });
+	} catch (error) {
+		console.error('[marketplace/skills/:id] GET failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '获取技能详情失败' },
+			{ status: 500 },
+		);
+	}
+}
+
+/**
+ * DELETE /api/marketplace/skills/:id - 删除技能
+ *
+ * 查询参数:
+ * - userId: 删除操作人ID
+ * - role: 用户角色，admin 可以删除任何技能
+ *
+ * 注意:
+ * - 远程模式：直接删除远程技能（即使本地不存在也可以删除）
+ * - 本地模式：需要技能在本地存在
+ */
+export async function DELETE(request: NextRequest, context: RouteContext) {
+	try {
+		const { id } = await context.params;
+		const { searchParams } = new URL(request.url);
+		const userId = searchParams.get('userId');
+		const role = searchParams.get('role');
+
+		// 验证必填字段
+		if (!userId) {
+			return NextResponse.json(
+				{ error: '缺少用户ID' },
+				{ status: 400 },
+			);
+		}
+
+		// 权限检查：需要管理员权限
+		if (role !== 'admin') {
+			return NextResponse.json(
+				{ error: '需要管理员权限' },
+				{ status: 403 },
+			);
+		}
+
+		const client = getMarketClient();
+
+		if (client.isRemoteMode()) {
+			// 远程模式：直接调用远程市场 API 删除（即使本地不存在也可以删除）
+			try {
+				const response = await fetch(
+					`${client['baseUrl']}/api/market/skills/${id}?api_key=${client['apiKey']}&userId=${userId}&role=${role}`,
+					{ method: 'DELETE' }
+				);
+
+				if (!response.ok) {
+					const errorText = await response.text();
+					console.error('[marketplace/skills/:id] Remote delete failed:', errorText);
+					
+					// 如果远程返回404，说明已经不存在了，也算成功
+					if (response.status === 404) {
+						console.log('[marketplace/skills/:id] Already removed from remote market:', id);
+					} else {
+						throw new Error(`Remote market error: ${response.status}`);
+					}
+				} else {
+					console.log('[marketplace/skills/:id] Removed from remote market:', id);
+				}
+
+				// 如果本地存在，也删除本地记录
+				const localSkill = getMarketSkillDetailById(id);
+				if (localSkill) {
+					deleteMarketSkill(id, userId, role);
+					console.log('[marketplace/skills/:id] Also removed from local:', id);
+				}
+
+				return NextResponse.json({ 
+					success: true,
+					message: '已从远程市场删除'
+				});
+			} catch (error: any) {
+				console.error('[marketplace/skills/:id] Failed to remove from remote:', error.message);
+				return NextResponse.json(
+					{ error: '从远程市场删除失败，请稍后重试' },
+					{ status: 500 }
+				);
+			}
+		} else {
+			// 本地模式：验证用户存在
+			const user = getUserById(userId);
+			if (!user) {
+				return NextResponse.json(
+					{ error: '用户不存在' },
+					{ status: 404 },
+				);
+			}
+
+			// 删除技能（会验证所有权，管理员可删除任何技能）
+			const deleted = deleteMarketSkill(id, userId, role);
+
+			if (!deleted) {
+				return NextResponse.json(
+					{ error: '技能不存在或无权删除' },
+					{ status: 404 },
+				);
+			}
+
+			return NextResponse.json({ 
+				success: true,
+				message: '已从本地市场删除'
+			});
+		}
+	} catch (error) {
+		console.error('[marketplace/skills/:id] DELETE failed:', error);
+		return NextResponse.json(
+			{ error: error instanceof Error ? error.message : '删除技能失败' },
+			{ status: 500 },
+		);
+	}
+}