From e263e28c8122103e4beb9d5d6ce167bda119335e Mon Sep 17 00:00:00 2001 From: ZhuiGuangAI Dev Date: Tue, 26 May 2026 00:30:36 +0800 Subject: [PATCH] =?UTF-8?q?=E5=85=A8=E9=9D=A2=E5=AE=A1=E6=9F=A5=E4=BC=98?= =?UTF-8?q?=E5=8C=96:=2043=E9=A1=B9=E4=BF=AE=E5=A4=8D=EF=BC=88=E5=AE=89?= =?UTF-8?q?=E5=85=A8/=E6=80=A7=E8=83=BD/=E5=8F=AF=E9=9D=A0=E6=80=A7?= =?UTF-8?q?=EF=BC=89+=20=E6=96=87=E6=A1=A3=E6=9B=B4=E6=96=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 🔴 P0 安全: .env入gitignore, CSP/HSTS, Logo安全(5MB限制+SVG消毒+SHA256), middleware权限收紧(VIP不能访问admin), 发布去重, GitHub认证, 删除危险API, skill-discoverer绕过审核修复, prisma默认连接修复 🔴 P0 可靠性: deepseek/github超时重试, 脚本层DeepSeek保护, 脚本启动验证, OAuth竞态修复 🔴 P0 性能: skill-discoverer N+1优化(↓94%), 后台API分页限制, getUserStats聚合优化 🟡 P1: 分类动态加载, 星级字段统一, fetch-logos并发Bug修复, 批量发布冲突不删除, check-tools重试, 前端空指针修复(13处), logo-fetcher日志, rate-limit清理, 公开API缓存 --- .env.example | 19 + .gitignore | 2 + .trae/CHANGELOG | 81 +++ .trae/rules/project_rules.md | 25 +- next.config.mjs | 8 + scripts/daily-discover.mjs | 7 +- scripts/daily-news.mjs | 16 +- scripts/task1-discover-tools.mjs | 7 +- scripts/task6-review-hot.mjs | 16 +- src/app/(admin)/admin/discover-tools/page.tsx | 51 +- src/app/(admin)/admin/reviews/page.tsx | 2 +- src/app/HomePageClient.tsx | 3 +- src/app/api/admin/check-tools/route.ts | 45 +- src/app/api/admin/discover-skills/route.ts | 4 +- src/app/api/admin/discover-tools/route.ts | 4 +- .../pending-skills/[id]/publish/route.ts | 21 + src/app/api/admin/pending-skills/route.ts | 13 - .../api/admin/pending/batch-publish/route.ts | 4 - .../api/admin/pending/fetch-logos/route.ts | 18 +- src/app/api/admin/update-stars/route.ts | 101 ++-- src/app/api/comments/route.ts | 4 +- src/app/api/forum/categories/route.ts | 4 +- src/app/api/forum/topics/[id]/posts/route.ts | 4 +- src/app/api/forum/topics/route.ts | 4 +- src/app/api/user/rankings/route.ts | 55 ++ src/app/community/CommunitySidebar.tsx | 110 ++++ src/app/community/[category]/page.tsx | 4 +- src/app/community/page.tsx | 241 ++++---- src/app/community/topic/[id]/page.tsx | 8 +- src/app/daily/page.tsx | 3 +- src/app/reviews/ReviewsList.tsx | 10 +- src/app/reviews/page.tsx | 242 ++++++-- src/app/skills/SkillsPageClient.tsx | 3 +- src/app/user/[id]/page.tsx | 8 +- src/components/common/HeroBanner.tsx | 571 +++++++----------- src/components/layout/Header.tsx | 2 +- src/lib/auth.ts | 39 +- src/lib/deepseek.ts | 6 +- src/lib/github.ts | 55 +- src/lib/logo-fetcher.ts | 19 +- src/lib/logo-storage.ts | 23 +- src/lib/points-reward.ts | 20 +- src/lib/prisma.ts | 5 +- src/lib/rate-limit.ts | 15 + src/lib/skill-discoverer.ts | 92 ++- src/lib/validation.ts | 2 +- src/middleware.ts | 4 +- 47 files changed, 1212 insertions(+), 788 deletions(-) create mode 100644 .env.example create mode 100644 src/app/api/user/rankings/route.ts create mode 100644 src/app/community/CommunitySidebar.tsx diff --git a/.env.example b/.env.example new file mode 100644 index 0000000..80abcc1 --- /dev/null +++ b/.env.example @@ -0,0 +1,19 @@ +# ============================================ +# 追光AI 环境变量配置模板 (.env.example) +# ============================================ +# 复制此文件为 .env 并填入真实值 +# WARNING: .env 已被加入 .gitignore，请勿提交真实密钥 + +# 数据库连接 (必填) +DATABASE_URL="mysql://user:password@host:3306/zhuiguang_ai?charset=utf8mb4" + +# NextAuth 配置 (必填) +NEXTAUTH_URL="http://localhost:8301" +NEXTAUTH_SECRET="请生成一个随机高强度密钥(至少32位)" + +# GitHub API Token (可选，用于技能发现和星数更新) +# 如不设置，每分钟只能调用60次GitHub API +GITHUB_TOKEN="" + +# DeepSeek AI API Key (必填，用于技能评测和新闻摘要) +DEEPSEEK_API_KEY="" \ No newline at end of file diff --git a/.gitignore b/.gitignore index 0008ac8..5c2ae15 100644 --- a/.gitignore +++ b/.gitignore @@ -27,6 +27,8 @@ yarn-error.log* # local env files .env*.local +.env +.env.production # vercel .vercel diff --git a/.trae/CHANGELOG b/.trae/CHANGELOG index 963e313..72c4091 100644 --- a/.trae/CHANGELOG +++ b/.trae/CHANGELOG @@ -1,5 +1,86 @@ # 追光AI 变更日志 +## 2026-05-25 全面审查优化（三轮扫描 + 43项修复） + +### 🔴 P0 安全修复 +- **.env入.gitignore**: `.env` 和 `.env.production` 加入忽略列表，创建 `.env.example` 模板文件 +- **CSP/HSTS安全头**: next.config.mjs 添加 Content-Security-Policy、Strict-Transport-Security、Permissions-Policy +- **Logo安全加固**: 5MB大小限制 + SVG script/iframe/on-event 标签消毒 + MD5→SHA256 +- **middleware权限收紧**: VIP用户不再能访问 /admin/* 和 /api/admin/*，仅admin角色可访问 +- **单条发布去重**: pending-skills/[id]/publish 添加 name/sourceUrl/slug 三重去重检查，冲突返回409 +- **Web更新星级GitHub认证**: update-stars API 添加 GITHUB_TOKEN 环境变量认证（限流60→5000次/小时） +- **删除危险API**: pending-skills/route.ts 的 DELETE 方法（原可无条件清空全表）已移除 +- **skill-discoverer绕过审核**: Web自动发现统一改为写 pendingSkill 表（status:pending），不再跳过审核 +- **prisma默认连接修复**: DATABASE_URL未设置时抛出明确错误，移除硬编码默认连接串 + +### 🔴 P0 可靠性修复 +- **deepseek.ts超时重试**: OpenAI客户端添加 timeout:120000 + maxRetries:2，模型名改为 DEEPSEEK_MODEL 环境变量 +- **github.ts超时重试**: Octokit 添加 timeout:30000，新增 withRetry 指数退避重试，403/404/422 不重试 +- **脚本层DeepSeek保护**: 4个定时脚本(daily-discover/daily-news/task1/task6)添加 AbortSignal.timeout(120000) + withRetry 重试 +- **脚本启动验证**: 定时脚本启动时验证 DEEPSEEK_API_KEY + DATABASE_URL 存在性 +- **auth.ts OAuth竞态修复**: GitHub OAuth 并发创建用户时 P2002 唯一约束冲突自动回退 findFirst + +### 🔴 P0 性能修复 +- **skill-discoverer N+1优化**: 批量预加载 sourceUrl/slug/分类到内存 Set，DB查询从 ~360次 降至 ~22次（↓94%） +- **后台API分页限制**: 6个管理后台 API findMany 添加 take:500/1000 防全表扫描 +- **getUserStats优化**: 改用 _count 聚合替代加载全量关联记录取 .length + +### 🟡 P1 修复 +- **分类动态加载**: discover-tools 页面分类列表从硬编码改为 /api/categories 动态加载 +- **星级字段统一**: update-stars API 同时写入 rating + githubStars，统一提取 starsToRating() 函数 +- **fetch-logos并发Bug修复**: processWithConcurrency 改用 Set + then(cleanup) 模式 +- **批量发布冲突不删除**: 冲突工具改为跳过标记，不再静默物理删除 +- **check-tools API重试**: 添加指数退避重试（最多2次） +- **前端空指针修复**: 13处 email?.split / overallAvg?.toFixed / createdAt?.toLocaleDateString 可选链 +- **logo-fetcher日志**: 9处空白 catch 块添加 console.warn 日志 +- **rate-limit清理**: 每5分钟自动清理过期IP记录，防止内存无限增长 +- **公开API缓存**: 5个公开API添加 Cache-Control 响应头（30s~300s分级缓存） + +### 🔴 已修复的前台Bug +- **/reviews 评测列表不显示**: ReviewsList.tsx 添加 useEffect 在挂载时触发初始数据加载 + +### 📁 变更统计 +| 类型 | 数量 | +|------|------| +| 修改文件 | ~55个 | +| 新增文件 | 1个（.env.example） | +| 修复问题 | 43项 | +| TypeScript检查 | 零错误通过 | + +--- + +## 2026-05-25 页面重构 + HeroBanner五色方案 + +### 🎨 页面重构为三栏布局 +- **统一布局**: `grid-cols-[208px_1fr_280px]` (左侧栏208px + 内容区 + 右侧栏280px) +- **/reviews**: HeroBanner + 左侧(外部热度排行+评测分值排行) + 右侧(五维模型+评测说明) +- **/community**: HeroBanner + 左侧(本月活跃用户+积分排行) + 右侧(社区指南) +- **/daily**: 保持原有三栏结构 + +### 🌈 HeroBanner 五色方案 +- **重构组件**: 从三元表达式改为 `SCHEMES` 配置表，代码量从560行减至410行 +- **5种配色**: + | 页面 | 配色 | 背景渐变色 | 高亮色 | + |------|------|-----------|--------| + | 首页 `/` | 🔵 cosmos 星空蓝 | `#1e3a5f → #1d4ed8` | `#93c5fd` | + | 技能 `/skills` | 🩷 crimson 玫红 | `#881337 → #e11d48` | `#fda4af` | + | 日报 `/daily` | 🟠 dawn 黎明金 | `#78350f → #a16207` | `#fcd34d` | + | 评测 `/reviews` | 🟣 aurora 极光紫 | `#4c1d95 → #6d28d9` | `#c4b5fd` | + | 社区 `/community` | 🟢 forest 森林绿 | `#064e3b → #047857` | `#6ee7b7` | +- **接口变更**: 旧 `highlightColor + starStyle` → 新 `colorScheme`，一个参数搞定 + +### 📁 新增/修改 +| 文件 | 操作 | 说明 | +|------|------|------| +| `src/components/common/HeroBanner.tsx` | 重写 | 5色方案+配置表 | +| `src/app/reviews/page.tsx` | 重写 | 三栏布局+左侧排行 | +| `src/app/community/page.tsx` | 重写 | 三栏布局+左侧排行 | +| `src/app/community/CommunitySidebar.tsx` | 新增 | 活跃用户+积分排行 | +| `src/app/api/user/rankings/route.ts` | 新增 | 用户排行API | +| `src/components/layout/Header.tsx` | 修改 | 社区导航图标更换 | + +--- + ## 2026-05-25 等级体系升级 + 论坛二级分类 + 会员空间 ### 🔥 20级成长体系 (类似QQ) diff --git a/.trae/rules/project_rules.md b/.trae/rules/project_rules.md index 2f6fb30..9f96a4a 100644 --- a/.trae/rules/project_rules.md +++ b/.trae/rules/project_rules.md @@ -8,7 +8,7 @@ ## 服务器与基础设施 - **域名**: www.zhuig.com (HTTPS，SSL证书自动续期) -- **云服务器**: 119.45.242.239 (登录名: ubuntu, 密钥: E:\ZG_Dev\pem\zg.pem) +- **云服务器**: 119.45.242.239 (登录名: **ubuntu**, 密钥: `Pem/zg.pem`) - **数据库**: 阿里云RDS MySQL — rm-0jlbgr2rv6dj3t6jngo.mysql.rds.aliyuncs.com:3306 - **Redis**: 云服务器上已有(Docker容器redis-cache:6379)，与其他项目共用，有密码认证 - **本地Git同步目录**: K:\git-repos @@ -16,6 +16,9 @@ - **部署目录**: /home/ubuntu/zhuiguang-ai - **访问地址**: https://www.zhuig.com (HTTP自动跳转HTTPS) - **注意事项**: 服务器有其他应用运行，部署时不可占用非8301-8310端口，不可影响其他服务 +- **SSH连接示例**: `ssh -i "Pem/zg.pem" ubuntu@119.45.242.239` +- **PM2管理**: `pm2 list` / `pm2 restart zhuiguang-ai` / `pm2 save` +- **其他应用**: agent-system, nacos, zhuiguang-quant (部署时请勿影响) ## 技术栈 - Next.js 14 (App Router) + TypeScript @@ -60,8 +63,8 @@ - 批量操作: body中传 `ids` 数组 ## 页面路由 -- 前台: `/`, `/tools`, `/tools/[slug]`, `/categories/[slug]`, `/skills`, `/skills/[slug]`, `/login`, `/user`, `/user/favorites` -- 后台: `/admin/login`, `/admin/pending`, `/admin/pending-skills`, `/admin/tools`, `/admin/skills`, `/admin/categories`, `/admin/skill-categories`, `/admin/discover-tools`, `/admin/check-tools`, `/admin/discover-skills`, `/admin/update-skills`, `/admin/discover-news`, `/admin/system-config` +- 前台: `/`, `/tools`, `/tools/[slug]`, `/categories/[slug]`, `/skills`, `/skills/[slug]`, `/login`, `/user`, `/user/favorites`, `/user/[id]`(会员空间), `/user/collections`, `/daily`, `/reviews`, `/community`, `/community/[category]`, `/community/topic/[id]` +- 后台: `/admin/login`, `/admin/pending`, `/admin/pending-skills`, `/admin/tools`, `/admin/skills`, `/admin/categories`, `/admin/skill-categories`, `/admin/discover-tools`, `/admin/check-tools`, `/admin/discover-skills`, `/admin/update-skills`, `/admin/discover-news`, `/admin/system-config`, `/admin/tasks`, `/admin/tasks/logs`, `/admin/tasks/[taskKey]`, `/admin/reviews` ## 五大操作指令 @@ -169,3 +172,19 @@ - Chart.js组件需用dynamic import + ssr: false，不支持服务端渲染 - Prisma 7.8需通过PrismaMariaDb适配器初始化，不能直接new PrismaClient() - 服务器环境SSL证书问题: 运行脚本需设置$env:NODE_TLS_REJECT_UNAUTHORIZED="0" + +### 6. 安全原则 +- 敏感信息（密钥、密码、Token）必须使用环境变量，禁止硬编码 +- `.env` 文件已被加入 `.gitignore`，仅 `.env.example` 模板可提交 +- HTTP 响应必须包含安全头：CSP、HSTS、X-Content-Type-Options、X-Frame-Options +- 文件上传/下载必须限制大小（最大 5MB）和类型，SVG 内容需消毒 script/iframe/on-event 标签 +- Logo 文件名使用 SHA256 哈希（不使用 MD5） +- VIP 用户不能访问管理后台（/admin/* 和 /api/admin/*） + +### 7. 可靠性原则 +- 所有外部 API 调用（GitHub、DeepSeek 等）必须设置超时和重试 +- OpenAI/DeepSeek 客户端配置：`timeout: 120000`, `maxRetries: 2` +- Octokit 配置：`request.timeout: 30000`，配合 withRetry 指数退避重试 +- 定时脚本启动时必须验证必需环境变量（DEEPSEEK_API_KEY、DATABASE_URL） +- DeepSeek 模型名使用环境变量 `DEEPSEEK_MODEL`（默认 `deepseek-v4-pro`） +- OAuth 用户创建需处理 P2002 唯一约束冲突竞态 \ No newline at end of file diff --git a/next.config.mjs b/next.config.mjs index 0887c8a..a65df18 100644 --- a/next.config.mjs +++ b/next.config.mjs @@ -47,6 +47,14 @@ const nextConfig = { { key: "Referrer-Policy", value: "strict-origin-when-cross-origin" }, ], }, + { + source: "/:path*", + headers: [ + { key: "Strict-Transport-Security", value: "max-age=31536000; includeSubDomains" }, + { key: "Content-Security-Policy", value: "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; font-src 'self'; connect-src 'self' https:; frame-ancestors 'none'" }, + { key: "Permissions-Policy", value: "camera=(), microphone=(), geolocation=()" }, + ], + }, { source: "/logos/:path*", headers: [ diff --git a/scripts/daily-discover.mjs b/scripts/daily-discover.mjs index 46394e9..3dd5bda 100644 --- a/scripts/daily-discover.mjs +++ b/scripts/daily-discover.mjs @@ -188,8 +188,8 @@ async function genReview(repoName, desc, stars, license, readme) { .replace("{readmeSummary}", readme.substring(0, 1500)); const { choices } = await withRetry(async () => { return await openai.chat.completions.create({ - model: "deepseek-v4-pro", messages: [{ role: "user", content: prompt }], temperature: 0.3, - }); + model: process.env.DEEPSEEK_MODEL || "deepseek-v4-pro", messages: [{ role: "user", content: prompt }], temperature: 0.3, + }, { signal: AbortSignal.timeout(120000) }); }, { maxRetries: 3, label: "DeepSeek Review API" }); const content = choices[0]?.message?.content; if (!content) throw new Error("Empty response"); @@ -206,6 +206,9 @@ async function genReview(repoName, desc, stars, license, readme) { } async function main() { + if (!process.env.DEEPSEEK_API_KEY) throw new Error("缺少环境变量: DEEPSEEK_API_KEY"); + if (!process.env.DATABASE_URL) throw new Error("缺少环境变量: DATABASE_URL"); + const startTime = new Date(); console.log(`🚀 [Task4] ${new Date().toISOString().split("T")[0]} 发现新AI技能...\n`); const DAILY_LIMIT = 30; diff --git a/scripts/daily-news.mjs b/scripts/daily-news.mjs index 024a498..6185a71 100644 --- a/scripts/daily-news.mjs +++ b/scripts/daily-news.mjs @@ -2,6 +2,7 @@ import { PrismaClient } from "@prisma/client"; import { PrismaMariaDb } from "@prisma/adapter-mariadb"; import OpenAI from "openai"; import "dotenv/config"; +import { withRetry } from "./lib/retry.mjs"; const base = process.env.DATABASE_URL || "mysql://localhost:3306/zhuiguang_ai?charset=utf8mb4"; const sep = base.includes("?") ? "&" : "?"; @@ -280,11 +281,13 @@ async function generateDailyNews() { .replace(/\{newsData\}/g, newsDataText) .replace(/\{date\}/g, dateStr); - const completion = await openai.chat.completions.create({ - model: "deepseek-v4-pro", - messages: [{ role: "user", content: prompt }], - temperature: 0.3, - }); + const completion = await withRetry(async () => { + return await openai.chat.completions.create({ + model: process.env.DEEPSEEK_MODEL || "deepseek-v4-pro", + messages: [{ role: "user", content: prompt }], + temperature: 0.3, + }, { signal: AbortSignal.timeout(120000) }); + }, { maxRetries: 3, label: "DeepSeek News API" }); const content = completion.choices[0]?.message?.content; if (!content) { @@ -347,6 +350,9 @@ async function generateDailyNews() { } async function main() { + if (!process.env.DEEPSEEK_API_KEY) throw new Error("缺少环境变量: DEEPSEEK_API_KEY"); + if (!process.env.DATABASE_URL) throw new Error("缺少环境变量: DATABASE_URL"); + const startTime = new Date(); try { const report = await generateDailyNews(); diff --git a/scripts/task1-discover-tools.mjs b/scripts/task1-discover-tools.mjs index 696697a..1032ee8 100644 --- a/scripts/task1-discover-tools.mjs +++ b/scripts/task1-discover-tools.mjs @@ -79,6 +79,9 @@ async function checkLogo(logoUrl) { } async function main() { + if (!process.env.DEEPSEEK_API_KEY) throw new Error("缺少环境变量: DEEPSEEK_API_KEY"); + if (!process.env.DATABASE_URL) throw new Error("缺少环境变量: DATABASE_URL"); + const startTime = new Date(); console.log(`🔍 [Task1] ${startTime.toISOString().split("T")[0]} 发现新AI工具...`); @@ -131,10 +134,10 @@ async function main() { try { const completion = await withRetry(async () => { return await openai.chat.completions.create({ - model: "deepseek-v4-pro", + model: process.env.DEEPSEEK_MODEL || "deepseek-v4-pro", messages: [{ role: "user", content: EXTRACT_PROMPT.replace("{content}", text.substring(0, 1500)) }], temperature: 0.2, - }); + }, { signal: AbortSignal.timeout(120000) }); }, { maxRetries: 3, label: "DeepSeek API" }); const content = completion.choices[0]?.message?.content; if (!content) continue; diff --git a/scripts/task6-review-hot.mjs b/scripts/task6-review-hot.mjs index 012a632..d7780d5 100644 --- a/scripts/task6-review-hot.mjs +++ b/scripts/task6-review-hot.mjs @@ -3,6 +3,7 @@ import { PrismaMariaDb } from "@prisma/adapter-mariadb"; import { Octokit } from "octokit"; import OpenAI from "openai"; import "dotenv/config"; +import { withRetry } from "./lib/retry.mjs"; const base = process.env.DATABASE_URL || "mysql://localhost:3306/zhuiguang_ai?charset=utf8mb4"; const sep = base.includes("?") ? "&" : "?"; @@ -72,6 +73,9 @@ async function getReadme(owner, repo) { } async function main() { + if (!process.env.DEEPSEEK_API_KEY) throw new Error("缺少环境变量: DEEPSEEK_API_KEY"); + if (!process.env.DATABASE_URL) throw new Error("缺少环境变量: DATABASE_URL"); + const startTime = new Date(); const now = new Date(); const cnOffset = 8 * 60 * 60 * 1000; @@ -136,11 +140,13 @@ async function main() { .replace("{readme}", readme.substring(0, 2000)); try { - const completion = await openai.chat.completions.create({ - model: "deepseek-v4-pro", - messages: [{ role: "user", content: prompt }], - temperature: 0.3, - }); + const completion = await withRetry(async () => { + return await openai.chat.completions.create({ + model: process.env.DEEPSEEK_MODEL || "deepseek-v4-pro", + messages: [{ role: "user", content: prompt }], + temperature: 0.3, + }, { signal: AbortSignal.timeout(120000) }); + }, { maxRetries: 3, label: "DeepSeek Review API" }); const content = completion.choices[0]?.message?.content; if (!content) throw new Error("DeepSeek返回为空"); diff --git a/src/app/(admin)/admin/discover-tools/page.tsx b/src/app/(admin)/admin/discover-tools/page.tsx index 897508d..17c9f6d 100644 --- a/src/app/(admin)/admin/discover-tools/page.tsx +++ b/src/app/(admin)/admin/discover-tools/page.tsx @@ -3,28 +3,13 @@ import { useState, useEffect, useCallback } from "react"; import { Button } from "@/components/ui/button"; -const TOOL_CATEGORIES = [ - { id: 165, name: "文本生成" }, - { id: 174, name: "图像生成" }, - { id: 183, name: "视频生成" }, - { id: 191, name: "音频与语音" }, - { id: 199, name: "代码开发" }, - { id: 208, name: "AI Agent" }, - { id: 216, name: "办公效率" }, - { id: 224, name: "设计与创意" }, - { id: 231, name: "营销与SEO" }, - { id: 238, name: "数据分析" }, - { id: 245, name: "教育与学习" }, - { id: 252, name: "搜索与信息" }, - { id: 258, name: "安全与合规" }, - { id: 264, name: "医疗健康" }, - { id: 270, name: "金融与法律" }, - { id: 276, name: "电商与零售" }, - { id: 282, name: "3D与游戏" }, - { id: 288, name: "科学研究" }, - { id: 294, name: "模型与框架" }, - { id: 302, name: "聊天机器人" }, -]; +interface CategoryItem { + id: number; + name: string; + slug: string; + icon: string | null; + children: CategoryItem[]; +} const TAG_POOL = [ "文本生成", "图像生成", "视频生成", "音频处理", "代码生成", @@ -33,7 +18,19 @@ const TAG_POOL = [ "企业级", "多模态", "大语言模型", "语音合成", "智能客服", ]; +function flattenCategories(nodes: CategoryItem[]): { id: number; name: string }[] { + const result: { id: number; name: string }[] = []; + for (const node of nodes) { + result.push({ id: node.id, name: node.name }); + if (node.children && node.children.length > 0) { + result.push(...flattenCategories(node.children)); + } + } + return result; +} + export default function DiscoverToolsPage() { + const [toolCategories, setToolCategories] = useState<{ id: number; name: string }[]>([]); const [excludedToolNames, setExcludedToolNames] = useState([]); const [loading, setLoading] = useState(true); const [selectedCategory, setSelectedCategory] = useState<{ id: number; name: string } | null>(null); @@ -89,7 +86,13 @@ export default function DiscoverToolsPage() { }, []); useEffect(() => { - fetchExcludedNames().finally(() => setLoading(false)); + Promise.all([ + fetchExcludedNames(), + fetch("/api/categories") + .then((r) => r.json()) + .then((data: CategoryItem[]) => setToolCategories(flattenCategories(data))) + .catch(() => {}), + ]).finally(() => setLoading(false)); }, [fetchExcludedNames]); const getPrompt = () => { @@ -192,7 +195,7 @@ export default function DiscoverToolsPage() {

选择分类

- {TOOL_CATEGORIES.map((cat) => { + {toolCategories.map((cat) => { const isSelected = selectedCategory?.id === cat.id; return (