feat(skills): 技能管理 - 增加可选的平台子分类策展 (#693)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

backend/internal/handler/skill_curation.go

@@ -0,0 +1,54 @@
+package handler
+
+import (
+	"encoding/json"
+	"github.com/gin-gonic/gin"
+	"infinite-canvas/backend/internal/service"
+	"io"
+	"net/http"
+)
+
+func registerSkillCurationRoutes(r *gin.RouterGroup, svc *service.Service) {
+	read := func(admin bool) gin.HandlerFunc {
+		return func(c *gin.Context) {
+			actor, err := currentUser(c, svc)
+			if err != nil {
+				failService(c, err)
+				return
+			}
+			result, err := svc.SkillCuration(actor, admin)
+			if err != nil {
+				failService(c, err)
+				return
+			}
+			ok(c, result)
+		}
+	}
+	r.GET("/skills/curation", read(false))
+	r.GET("/admin/skill-curation", read(true))
+	r.PUT("/admin/skill-curation", func(c *gin.Context) {
+		actor, err := currentUser(c, svc)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 64<<10)
+		dec := json.NewDecoder(c.Request.Body)
+		dec.DisallowUnknownFields()
+		var req service.SkillCurationUpdate
+		if err := dec.Decode(&req); err != nil {
+			failService(c, service.BadAuthRequest("分类请求格式无效"))
+			return
+		}
+		if err := dec.Decode(new(any)); err != io.EOF {
+			failService(c, service.BadAuthRequest("只允许一个请求对象"))
+			return
+		}
+		result, err := svc.UpdateSkillCuration(actor, req, RequestID(c))
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, result)
+	})
+}

backend/internal/handler/skill_curation_test.go

@@ -0,0 +1,62 @@
+package handler
+
+import (
+	"github.com/gin-gonic/gin"
+	"gorm.io/driver/sqlite"
+	"gorm.io/gorm"
+	"infinite-canvas/backend/internal/auth"
+	"infinite-canvas/backend/internal/model"
+	"infinite-canvas/backend/internal/repository"
+	"infinite-canvas/backend/internal/service"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+	"time"
+)
+
+func TestSkillCurationHTTP(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	db, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	sqlDB, _ := db.DB()
+	sqlDB.SetMaxOpenConns(1)
+	defer sqlDB.Close()
+	if err := db.AutoMigrate(&model.User{}, &model.AuthSession{}, &model.Skill{}, &model.SkillCurationSetting{}, &model.SkillCurationCategory{}, &model.SkillCurationAssignment{}, &model.AdminAuditEvent{}); err != nil {
+		t.Fatal(err)
+	}
+	db.Create(&model.SkillCurationSetting{ID: 1})
+	for _, role := range []model.UserRole{model.UserRoleAdmin, model.UserRoleUser} {
+		db.Create(&model.User{ID: string(role), Username: string(role), Role: role, Status: model.UserStatusActive})
+		db.Create(&model.AuthSession{ID: string(role), UserID: string(role), TokenHash: auth.HashToken("test-token"), ExpiresAt: time.Now().Add(time.Hour)})
+	}
+	router := gin.New()
+	RegisterSkillRoutes(router.Group("/api"), service.New(repository.New(db), t.TempDir()))
+	for _, tc := range []struct {
+		role, method, path, body string
+		status                   int
+	}{
+		{"", "GET", "/api/skills/curation", "", 401},
+		{"user", "GET", "/api/admin/skill-curation", "", 403},
+		{"user", "PUT", "/api/admin/skill-curation", `{"expectedRevision":0,"enabled":true}`, 403},
+		{"user", "GET", "/api/skills/curation", "", 200},
+		{"admin", "PUT", "/api/admin/skill-curation", `{"enabled":true}`, 400},
+		{"admin", "PUT", "/api/admin/skill-curation", `{"expectedRevision":0,"enabled":true,"requestId":"forged"}`, 400},
+		{"admin", "PUT", "/api/admin/skill-curation", `{"expectedRevision":0,"enabled":true} {}`, 400},
+		{"admin", "PUT", "/api/admin/skill-curation", `{"expectedRevision":0,"enabled":true}`, 200},
+		{"admin", "PUT", "/api/admin/skill-curation", `{"expectedRevision":0,"enabled":false}`, 409},
+	} {
+		req := httptest.NewRequest(tc.method, tc.path, strings.NewReader(tc.body))
+		req.Header.Set("Content-Type", "application/json")
+		if tc.role != "" {
+			req.AddCookie(&http.Cookie{Name: service.SessionCookieName, Value: tc.role + ".test-token"})
+		}
+		out := httptest.NewRecorder()
+		router.ServeHTTP(out, req)
+		if out.Code != tc.status {
+			t.Fatalf("%s %s %s: %d %s", tc.role, tc.method, tc.path, out.Code, out.Body.String())
+		}
+	}
+}

backend/internal/handler/skills.go

@@ -15,6 +15,7 @@ import (
 )
 
 func RegisterSkillRoutes(r *gin.RouterGroup, svc *service.Service) {
+	registerSkillCurationRoutes(r, svc)
 	r.POST("/skills/install", func(c *gin.Context) {
 		user, err := currentUser(c, svc)
 		if err != nil {
@@ -88,6 +89,7 @@ func RegisterSkillRoutes(r *gin.RouterGroup, svc *service.Service) {
 			return
 		}
 		result, err := svc.Skills(user.ID, service.SkillListRequest{
+			PlatformCategoryID: c.Query("platformCategoryId"), PlatformUncategorized: c.Query("platformUncategorized") == "true",
 			Page: page, PageSize: pageSize, Scope: c.DefaultQuery("scope", "public"),
 			Search: c.Query("search"), Tag: c.Query("tag"), Sort: c.DefaultQuery("sort", "popular"),
 			LibraryCategoryID: c.Query("libraryCategoryId"), LibraryUncategorized: libraryUncategorized,