feat: 管理员可删除内置技能并管理技能内文件

新增内置技能删除与技能文件删除 API，允许管理员编辑/删除内置技能文件；技能设置页与文件预览弹窗同步支持删除操作。

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend-web/src/components/workspace/settings/skill-settings-page.tsx

@@ -71,8 +71,9 @@ import { useTheme } from "@/contexts/ThemeContext";
 import { getStoredAuth } from "@/core/auth";
 import { useI18n } from "@/core/i18n/hooks";
 import type { ValidateSkillUploadResponse } from "@/core/skills/api";
-import {
-  useDeleteCustomSkill,
+import {
+  useDeleteBuiltinSkill,
+  useDeleteCustomSkill,
   useDuplicateSkill,
   useGenerateMissingSkillNameZh,
   useGenerateSkillNameZh,
@@ -616,9 +617,10 @@ export function SkillRow({
   const { data: cardPublishSquares } = usePublishSquares();
   const setPinned = useSetSkillPinned();
   const setFeatured = useSetSkillFeatured();
-  const setAlwaysOn = useSetSkillAlwaysOn();
-  const { data: compression } = useSkillCompressionSettings();
-  const deleteSkill = useDeleteCustomSkill();
+  const setAlwaysOn = useSetSkillAlwaysOn();
+  const { data: compression } = useSkillCompressionSettings();
+  const deleteCustom = useDeleteCustomSkill();
+  const deleteBuiltin = useDeleteBuiltinSkill();
   const duplicateSkillMutation = useDuplicateSkill();
   const [confirmDeleteOpen, setConfirmDeleteOpen] = useState(false);
   const [tagPickerOpen, setTagPickerOpen] = useState(false);
@@ -634,8 +636,9 @@ export function SkillRow({
   const isOwned =
     isCustom && !isBuiltin && !!skill.owner_user_id && skill.owner_user_id === currentUserId;
   const isFromOthers = isCustom && !isBuiltin && !isOwned;
-  // Admin can edit/delete/unpublish anyone's skill; non-admin only their own.
-  const canManage = isCustom && (isOwned || isAdmin);
+  // Admin can manage custom skills from any owner; non-admin only their own.
+  const canManage = isCustom && (isOwned || isAdmin);
+  const canDelete = isAdmin || isOwned;
   const canTogglePublish = canManage && !isBuiltin;
   // 常驻(免压缩):内置技能仅管理员可设;自定义技能其所有者或管理员可设(与后端一致)。
   const canSetAlwaysOn = isAdmin || isOwned;
@@ -686,11 +689,15 @@ export function SkillRow({
     }
   }
 
-  async function handleDelete() {
-    try {
-      await deleteSkill.mutateAsync(skill.name);
-      toast.success(t.settings.skills.deleteSuccess);
-      setConfirmDeleteOpen(false);
+  async function handleDelete() {
+    try {
+      if (isBuiltin) {
+        await deleteBuiltin.mutateAsync(skill.name);
+      } else {
+        await deleteCustom.mutateAsync(skill.name);
+      }
+      toast.success(t.settings.skills.deleteSuccess);
+      setConfirmDeleteOpen(false);
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
     }
@@ -918,7 +925,7 @@ export function SkillRow({
       >
         <TagsIcon className="size-3.5" />
       </Button>
-      {canManage && (
+      {canManage && (
         <Button
           size="icon"
           variant="ghost"
@@ -939,12 +946,12 @@ export function SkillRow({
           />
         </Button>
       )}
-      {canManage && (
-        <Button
-          size="icon"
-          variant="ghost"
-          className={cn(
-            "h-8 w-8 shrink-0",
+      {canManage && (
+        <Button
+          size="icon"
+          variant="ghost"
+          className={cn(
+            "h-8 w-8 shrink-0",
             skill.pinned && "text-emerald-600 hover:text-emerald-700",
           )}
           disabled={setPinned.isPending}
@@ -1011,11 +1018,11 @@ export function SkillRow({
       >
         <CopyIcon className="size-3.5" />
       </Button>
-      {canManage && (
-        <Button
-          size="icon"
-          variant="ghost"
-          className="text-destructive hover:text-destructive h-8 w-8 shrink-0"
+      {canDelete && (
+        <Button
+          size="icon"
+          variant="ghost"
+          className="text-destructive hover:text-destructive h-8 w-8 shrink-0"
           onClick={() => setConfirmDeleteOpen(true)}
           title={t.settings.skills.deleteAction}
         >
@@ -1109,16 +1116,18 @@ export function SkillRow({
             <Button
               variant="outline"
               onClick={() => setConfirmDeleteOpen(false)}
-              disabled={deleteSkill.isPending}
+              disabled={deleteCustom.isPending || deleteBuiltin.isPending}
             >
               {t.common.cancel}
             </Button>
             <Button
               variant="destructive"
               onClick={() => void handleDelete()}
-              disabled={deleteSkill.isPending}
-            >
-              {deleteSkill.isPending ? t.common.loading : t.common.delete}
+              disabled={deleteCustom.isPending || deleteBuiltin.isPending}
+            >
+              {deleteCustom.isPending || deleteBuiltin.isPending
+                ? t.common.loading
+                : t.common.delete}
             </Button>
           </DialogFooter>
         </DialogContent>

frontend-web/src/components/workspace/skills/skill-file-preview-dialog.tsx

@@ -5,6 +5,7 @@ import {
   DownloadIcon,
   Loader2,
   PencilIcon,
+  Trash2Icon,
   XIcon,
 } from "lucide-react";
 import { useEffect, useMemo, useState } from "react";
@@ -22,6 +23,7 @@ import { Textarea } from "@/components/ui/textarea";
 import { MarkdownContent } from "@/components/workspace/messages/markdown-content";
 import { getSkillFileDownloadURL } from "@/core/skills/api";
 import {
+  useDeleteSkillFile,
   useSaveSkillFile,
   useSkillFileContent,
 } from "@/core/skills/hooks";
@@ -66,6 +68,7 @@ export function SkillFilePreviewDialog({
     open ? path : null,
   );
   const save = useSaveSkillFile();
+  const remove = useDeleteSkillFile();
 
   const [editing, setEditing] = useState(false);
   const [draft, setDraft] = useState("");
@@ -77,6 +80,8 @@ export function SkillFilePreviewDialog({
   }, [path, open]);
 
   const fileEditable = !!data?.editable && treeEditable;
+  const isRootSkillFile = path?.replace(/\\/g, "/").toLowerCase() === "skill.md";
+  const fileDeletable = !!data && treeEditable && !isRootSkillFile;
   const isMarkdown = useMemo(() => {
     if (!path) return false;
     const lower = path.toLowerCase();
@@ -115,6 +120,18 @@ export function SkillFilePreviewDialog({
     }
   }
 
+  async function handleDelete() {
+    if (!skillName || !path) return;
+    if (!window.confirm(tx.filesDeleteConfirm.replace("{path}", path))) return;
+    try {
+      await remove.mutateAsync({ skillName, path });
+      toast.success(tx.filesDeleteSuccess);
+      onOpenChange(false);
+    } catch (err) {
+      toast.error(err instanceof Error ? err.message : String(err));
+    }
+  }
+
   async function handleCopyPath() {
     if (!path) return;
     await navigator.clipboard.writeText(path);
@@ -158,6 +175,18 @@ export function SkillFilePreviewDialog({
                   {tx.filesEditAction}
                 </Button>
               )}
+              {fileDeletable && !editing && (
+                <Button
+                  size="sm"
+                  variant="ghost"
+                  className="h-7 px-2 text-xs text-destructive hover:text-destructive"
+                  onClick={() => void handleDelete()}
+                  disabled={remove.isPending}
+                >
+                  {remove.isPending ? <Loader2 className="size-3.5 animate-spin" /> : <Trash2Icon className="size-3.5" />}
+                  {tx.filesDeleteAction}
+                </Button>
+              )}
               {editing && (
                 <>
                   <Button

frontend-web/src/core/i18n/locales/en-US.ts

@@ -545,10 +545,13 @@ export const enUS: Translations = {
       filesSaveAction: "Save",
       filesCancelEditAction: "Cancel",
       filesDownloadAction: "Download",
-      filesCopyPathAction: "Copy path",
-      filesDiscardConfirm: "Discard unsaved changes?",
-      filesSaveSuccess: "File saved",
-      filesReadOnlyHint: "Built-in skills are read-only.",
+      filesCopyPathAction: "Copy path",
+      filesDiscardConfirm: "Discard unsaved changes?",
+      filesSaveSuccess: "File saved",
+      filesDeleteAction: "Delete",
+      filesDeleteConfirm: "Delete \"{path}\"? This cannot be undone.",
+      filesDeleteSuccess: "File deleted",
+      filesReadOnlyHint: "Only administrators can edit or delete built-in skill files.",
       viewDetailAction: "View skill details",
       stateSheet: {
         archivedTitle: "Archived skills",

frontend-web/src/core/i18n/locales/types.ts

@@ -475,10 +475,13 @@ export interface Translations {
       filesSaveAction: string;
       filesCancelEditAction: string;
       filesDownloadAction: string;
-      filesCopyPathAction: string;
-      filesDiscardConfirm: string;
-      filesSaveSuccess: string;
-      filesReadOnlyHint: string;
+      filesCopyPathAction: string;
+      filesDiscardConfirm: string;
+      filesSaveSuccess: string;
+      filesDeleteAction: string;
+      filesDeleteConfirm: string;
+      filesDeleteSuccess: string;
+      filesReadOnlyHint: string;
       viewDetailAction: string;
       stateSheet: {
         archivedTitle: string;

frontend-web/src/core/i18n/locales/zh-CN.ts

@@ -524,8 +524,11 @@ export const zhCN: Translations = {
       filesDownloadAction: "下载",
       filesCopyPathAction: "复制路径",
       filesDiscardConfirm: "有未保存的修改,确定放弃吗?",
-      filesSaveSuccess: "文件已保存",
-      filesReadOnlyHint: "内置技能为只读,仅可查看。",
+      filesSaveSuccess: "文件已保存",
+      filesDeleteAction: "删除",
+      filesDeleteConfirm: "确定删除“{path}”？该操作不可撤销。",
+      filesDeleteSuccess: "文件已删除",
+      filesReadOnlyHint: "仅管理员可以编辑或删除内置技能文件。",
       viewDetailAction: "查看技能详情",
       stateSheet: {
         archivedTitle: "归档的技能",

frontend-web/src/core/skills/api.ts

@@ -402,15 +402,26 @@ export async function getSkillContent(
   return response.json() as Promise<SkillContentResponse>;
 }
 
-export async function deleteCustomSkill(skillName: string): Promise<void> {
+export async function deleteCustomSkill(skillName: string): Promise<void> {
   const response = await apiFetch(
     `${getBackendBaseURL()}/api/skills/custom/${encodeURIComponent(skillName)}`,
     { method: "DELETE" },
   );
   if (!response.ok) {
     throw await parseDetailedError(response, "Failed to delete skill");
-  }
-}
+  }
+}
+
+/** Delete a built-in skill. The backend permits this only for administrators. */
+export async function deleteBuiltinSkill(skillName: string): Promise<void> {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}`,
+    { method: "DELETE" },
+  );
+  if (!response.ok) {
+    throw await parseDetailedError(response, "Failed to delete built-in skill");
+  }
+}
 
 export interface SkillFileNode {
   name: string;
@@ -479,7 +490,7 @@ export function getSkillFileDownloadURL(skillName: string, path: string): string
   );
 }
 
-export async function saveSkillFile(
+export async function saveSkillFile(
   skillName: string,
   path: string,
   content: string,
@@ -494,9 +505,22 @@ export async function saveSkillFile(
   );
   if (!response.ok) {
     throw await parseDetailedError(response, "Failed to save skill file");
-  }
-  return response.json() as Promise<SkillFileSaveResponse>;
-}
+  }
+  return response.json() as Promise<SkillFileSaveResponse>;
+}
+
+export async function deleteSkillFile(
+  skillName: string,
+  path: string,
+): Promise<void> {
+  const url =
+    `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}/files/content` +
+    `?path=${encodeURIComponent(path)}`;
+  const response = await apiFetch(url, { method: "DELETE" });
+  if (!response.ok) {
+    throw await parseDetailedError(response, "Failed to delete skill file");
+  }
+}
 
 export interface SkillNameZhResponse {
   name: string;

frontend-web/src/core/skills/hooks.ts

@@ -5,8 +5,10 @@ import {
   useQueryClient,
 } from "@tanstack/react-query";
 
-import {
-  deleteCustomSkill,
+import {
+  deleteBuiltinSkill,
+  deleteCustomSkill,
+  deleteSkillFile,
   duplicateSkill,
   enableSkill,
   generateMissingSkillNameZh,
@@ -318,7 +320,7 @@ export function useSkillFileContent(skillName: string | null, path: string | nul
   });
 }
 
-export function useSaveSkillFile() {
+export function useSaveSkillFile() {
   const queryClient = useQueryClient();
   return useMutation({
     mutationFn: ({
@@ -339,5 +341,33 @@ export function useSaveSkillFile() {
         void queryClient.invalidateQueries({ queryKey: ["skill", skillName] });
       }
     },
-  });
-}
+  });
+}
+
+export function useDeleteSkillFile() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: ({
+      skillName,
+      path,
+    }: {
+      skillName: string;
+      path: string;
+    }) => deleteSkillFile(skillName, path),
+    onSuccess: (_data, { skillName, path }) => {
+      void queryClient.invalidateQueries({ queryKey: ["skill-files", skillName] });
+      void queryClient.removeQueries({ queryKey: ["skill-file", skillName, path] });
+    },
+  });
+}
+
+export function useDeleteBuiltinSkill() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: deleteBuiltinSkill,
+    onSuccess: () => {
+      void queryClient.invalidateQueries({ queryKey: ["skills"] });
+      void queryClient.invalidateQueries({ queryKey: ["admin-skills"] });
+    },
+  });
+}