feat: 添加批量写入关键词 API

src/app/api/keyword-cloud/keywords/route.ts

@@ -0,0 +1,131 @@
+import { NextResponse } from 'next/server';
+import { prisma } from '@/lib/prisma';
+import { BatchKeywordsRequestSchema } from '@/lib/validations';
+import { upsertQuarter, createKeywords, logKeywordCloudError } from '@/hooks/useKeywordCloud';
+import crypto from 'crypto';
+
+export const dynamic = 'force-dynamic';
+
+/**
+ * POST /api/keyword-cloud/keywords
+ * 批量写入关键词(n8n 工作流使用)
+ */
+export async function POST(request: Request) {
+  try {
+    // 1. 验证 API Key
+    const body = await request.json();
+    const { apiKey, ...requestData } = body;
+
+    if (!apiKey) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'Missing API key',
+        },
+        { status: 401 }
+      );
+    }
+
+    const expectedApiKey = process.env.WEBHOOK_API_KEY;
+    if (!expectedApiKey) {
+      console.error('WEBHOOK_API_KEY not configured');
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'Server configuration error',
+        },
+        { status: 500 }
+      );
+    }
+
+    // 使用 timing-safe 比较防止时序攻击
+    try {
+      const apiKeyBuffer = Buffer.from(apiKey, 'utf-8');
+      const expectedBuffer = Buffer.from(expectedApiKey, 'utf-8');
+
+      if (apiKeyBuffer.length !== expectedBuffer.length ||
+          !crypto.timingSafeEqual(apiKeyBuffer, expectedBuffer)) {
+        return NextResponse.json(
+          {
+            success: false,
+            error: 'Invalid API key',
+          },
+          { status: 401 }
+        );
+      }
+    } catch (error) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'Authentication failed',
+        },
+        { status: 401 }
+      );
+    }
+
+    // 2. 验证请求数据
+    const validationResult = BatchKeywordsRequestSchema.safeParse(requestData);
+
+    if (!validationResult.success) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'Validation failed',
+          details: validationResult.error.errors,
+        },
+        { status: 400 }
+      );
+    }
+
+    const { quarter, keywords } = validationResult.data;
+
+    // 3. 创建或更新季度记录
+    const quarterData = await upsertQuarter(quarter, {
+      title: `${quarter.replace('-', '年')}季度`,
+      titleEn: quarter.replace('-', ' '),
+    });
+
+    // 4. 批量创建关键词
+    const result = await createKeywords(quarterData.id, keywords);
+
+    // 5. 记录错误
+    for (const error of result.errors) {
+      await logKeywordCloudError({
+        quarter,
+        keyword: error.word,
+        errorType: 'DB_ERROR',
+        errorMessage: error.error,
+      });
+    }
+
+    // 6. 返回结果
+    return NextResponse.json({
+      success: true,
+      created: result.created,
+      failed: result.failed,
+      errors: result.errors,
+    });
+  } catch (error) {
+    console.error('Error creating keywords:', error);
+
+    // 记录未捕获的错误
+    try {
+      await logKeywordCloudError({
+        quarter: 'unknown',
+        errorType: 'API_ERROR',
+        errorMessage: error instanceof Error ? error.message : 'Unknown error',
+        rawData: { error },
+      });
+    } catch (logError) {
+      console.error('Failed to log error:', logError);
+    }
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: 'Failed to create keywords',
+      },
+      { status: 500 }
+    );
+  }
+}