refactor: 后端仓库层收口（A1：课程/产品/素材）+ 收进工作区既有对象化重构

本提交含两部分。第一部分是本轮工作；第二部分是此前一直留在工作区、
从未提交的对象化重构，与第一部分在文件上互相咬合（internal/repository
整个包都是未跟踪状态，且 api 层已有文件引用它），无法拆成两个可编译的提交。

一、仓库层收口 A1 批（本轮工作）

把 api 层手写的 store.DB 查询收进具名仓库方法，只给真正获益的对象做方法，
不机械包裹全量。本批迁移 22 处裸查询（courses.go 9 / media.go 12 / products.go 1），
新增方法：

- MediaFileRepo.ListByBind / ListForAudit / MarkExtracted
- KnowledgeChunkRepo.CountByMediaFile
- ProductRepo.GetVisibleByID

两条业务口径改由仓库单点持有，避免各处手写漂移：
「只有 approved 素材出现在课程详情」与「已停用产品不在课程详情露出」。

修掉两个真实缺陷：
- ProductRepo.GetByID 缺 Where 条件。此前 GET /api/products/{id} 对任意 id 都返回
  第一条产品、对不存在的 id 返回 200，且 PUT /api/products/{id} 会覆盖第一条产品
  —— 数据损坏级。全仓扫描确认这是唯一一处同型写法。
- ProductRepo.Delete 写 status="deleted"，而 DELETE 处理器文档与回包都声称
  "inactive"，接口在说谎；管理员用 status=all 拉列表会看到前端不认识的状态。
  已对齐为 inactive（与 CourseRepo.Delete 一致）。

删除 8 个零调用且列名不存在的死方法（一调即 SQL 报错）：
- media_file 上的 file_path / file_type / approval_status 三列并不存在，
  GetByPath / ListByType / UpdateStatus 全废
- knowledge_chunk 上的 space_id 列不存在（模型早已改为 knowledge_space_key），
  List / Total / ListBySpaceIDs / DeleteBySpace / SearchByVector 全废
取舍边界：能对当前 schema 跑通的死方法保留，跑不通的删或修。

CourseRepo.List 补齐 status=all 档（此前传给它会当作 status='all' 过滤出空列表）。
该方法此前零调用，现与产品列表语义对齐。

验证：go build ./... 与 go test ./... 全绿；另用真实 HTTP 请求验证 34 项
（课程 17 / 产品 3 / 素材 14），跑在数据库副本与独立 KB_DATA_DIR 上，
含 multipart 真上传 → 审批 → pdftotext 提取 → 分片入库的完整链路。

二、此前未提交的对象化重构（非本轮工作）

- 新增 internal/repository 仓库层、connectors、skills、specialists、xapps、jsonutil，
  model/task_record|task_run|task_artifact、api/task_runtime|action_definition|chat_message
- 删除 api/app_definition、connectors、my_app_center、notification、office_skill、
  export_docx|pptx|xlsx、official_account_* 等，随 XApp/Skill/Specialist/Connector
  可插拔打包方向（AR10/AR11）调整
- 资产目录归位：backend-go/knowledge_source → assets/knowledge/source、
  training_materials → assets/training/materials；README 内相对路径同步加深两级；
  deploy env 补 ASSET_ROOT_DIR 并改 KNOWLEDGE_SOURCE_DIR / TRAINING_MATERIALS_DIR
- 前端新增 skills/ specialists/ connectors/ xapps/ 目录与对应页面

验证：前端 npm run build 通过（7.26s）。

Co-Authored-By: Claude Code <noreply@anthropic.com>

eai_agentplatform/backend-go/internal/api/router.go

@@ -7,7 +7,13 @@ import (
 	"github.com/gin-gonic/gin"
 
 	"eai_agentplatform/backend/internal/config"
+	connectorapi "eai_agentplatform/backend/internal/connectors/api"
 	"eai_agentplatform/backend/internal/middleware"
+	skillapi "eai_agentplatform/backend/internal/skills/api"
+	specialistapi "eai_agentplatform/backend/internal/specialists/api"
+	"eai_agentplatform/backend/internal/specialists/runtime"
+	wechatofficialaccountapi "eai_agentplatform/backend/internal/specialists/packages/wechat_official_account/api"
+	xappapi "eai_agentplatform/backend/internal/xapps/api"
 )
 
 // Cfg 全局配置，RegisterRoutes 时注入
@@ -16,6 +22,8 @@ var Cfg *config.Config
 // RegisterRoutes 注册所有路由
 func RegisterRoutes(r *gin.Engine, cfg *config.Config) {
 	Cfg = cfg
+	specialistruntime.Cfg = cfg
+	connectorapi.UseConfig(cfg)
 
 	// 素材静态预览（只读）：仅公开 approved/ 子目录（已审批通过文件），
 	// pending/ 未审批文件不对外暴露，落实「审批前置」。
@@ -40,41 +48,41 @@ func RegisterRoutes(r *gin.Engine, cfg *config.Config) {
 	// 员工可读
 	r.GET("/api/company-train", middleware.Auth(cfg), GetCompanyTrain)
 	r.POST("/api/company-train/suggest-material", middleware.Auth(cfg), SuggestMaterial)
-	r.GET("/api/specialists", middleware.Auth(cfg), ListSpecialists)
-	r.GET("/api/specialists/by-key/:key", middleware.Auth(cfg), GetSpecialistByKey)
-	r.GET("/api/specialists/summary", middleware.Auth(cfg), SpecialistSummary)
-	r.GET("/api/skills", middleware.Auth(cfg), ListSkillDefinitions)
-	r.GET("/api/skills/by-key/:key", middleware.Auth(cfg), GetSkillDefinitionByKey)
-		r.GET("/api/apps", middleware.Auth(cfg), ListAppDefinitions)
-		r.GET("/api/apps/by-key/:key", middleware.Auth(cfg), GetAppDefinitionByKey)
+	r.GET("/api/specialists", middleware.Auth(cfg), specialistapi.ListSpecialists)
+	r.GET("/api/specialists/by-key/:key", middleware.Auth(cfg), specialistapi.GetSpecialistByKey)
+	r.GET("/api/specialists/summary", middleware.Auth(cfg), specialistapi.SpecialistSummary)
+	r.GET("/api/skills", middleware.Auth(cfg), skillapi.ListSkillDefinitions)
+	r.GET("/api/skills/by-key/:key", middleware.Auth(cfg), skillapi.GetSkillDefinitionByKey)
+	r.GET("/api/xapps", middleware.Auth(cfg), xappapi.ListXAppDefinitions)
+	r.GET("/api/xapps/by-key/:key", middleware.Auth(cfg), xappapi.GetXAppDefinitionByKey)
 	r.GET("/api/actions", middleware.Auth(cfg), ListActionDefinitions)
 	r.GET("/api/actions/by-key/:key", middleware.Auth(cfg), GetActionDefinitionByKey)
 	r.GET("/api/workbench/overview", middleware.Auth(cfg), WorkbenchOverview)
-	r.GET("/api/worker/tasks", middleware.Auth(cfg), ListWorkerTasks)
-	r.GET("/api/worker/tasks/:id", middleware.Auth(cfg), GetWorkerTaskDetail)
+	r.GET("/api/tasks", middleware.Auth(cfg), ListTasks)
+	r.GET("/api/tasks/:id", middleware.Auth(cfg), GetTaskDetail)
 	// 员工自己的工作区：「新建任务」和侧边栏的任务列表走这三个。
 	// 归属由服务端按登录用户定，请求里的 owner 一律不读。
-	r.GET("/api/worker/my-tasks", middleware.Auth(cfg), ListMyTasks)
-	r.POST("/api/worker/my-tasks", middleware.Auth(cfg), CreateMyTask)
-	r.PUT("/api/worker/my-tasks/:id", middleware.Auth(cfg), UpdateMyTask)
-	r.DELETE("/api/worker/my-tasks/:id", middleware.Auth(cfg), DeleteMyTask)
+	r.GET("/api/my/tasks", middleware.Auth(cfg), ListMyTasks)
+	r.POST("/api/my/tasks", middleware.Auth(cfg), CreateMyTask)
+	r.PUT("/api/my/tasks/:id", middleware.Auth(cfg), UpdateMyTask)
+	r.DELETE("/api/my/tasks/:id", middleware.Auth(cfg), DeleteMyTask)
 	// 项目：任务的容器。和「我的任务」同一套归属规则，归属服务端定死。
-	r.GET("/api/worker/projects", middleware.Auth(cfg), ListProjects)
-	r.POST("/api/worker/projects", middleware.Auth(cfg), CreateProject)
-	r.PUT("/api/worker/projects/:id", middleware.Auth(cfg), UpdateProject)
-	r.DELETE("/api/worker/projects/:id", middleware.Auth(cfg), DeleteProject)
-	r.GET("/api/worker/projects/:id/tasks", middleware.Auth(cfg), ListProjectTasks)
-	r.GET("/api/worker/artifacts/:id", middleware.Auth(cfg), GetWorkerArtifactDetail)
-	r.POST("/api/official-account/tasks", middleware.Auth(cfg), CreateOfficialAccountTask)
-	r.GET("/api/official-account/tasks/:id/workflow", middleware.Auth(cfg), GetOfficialAccountWorkflow)
-	r.PUT("/api/official-account/tasks/:id", middleware.Auth(cfg), UpdateOfficialAccountTask)
-	r.POST("/api/official-account/tasks/:id/steps/:stepKey", middleware.Auth(cfg), ExecuteOfficialAccountWorkflowStep)
-	r.POST("/api/official-account/tasks/:id/images/:imageKey/regenerate", middleware.Auth(cfg), RegenerateOfficialAccountImage)
-	r.GET("/api/official-account/tasks/:id/export", middleware.Auth(cfg), ExportOfficialAccountDocument)
-	r.GET("/api/official-account/generated-images/:filename", middleware.Auth(cfg), ServeOfficialAccountGeneratedImage)
-	r.GET("/api/connectors", middleware.Auth(cfg), ListConnectors)
-	r.GET("/api/connectors/:key", middleware.Auth(cfg), GetConnector)
-	r.POST("/api/connectors/:key/query", middleware.Auth(cfg), QueryConnector)
+	r.GET("/api/projects", middleware.Auth(cfg), ListProjects)
+	r.POST("/api/projects", middleware.Auth(cfg), CreateProject)
+	r.PUT("/api/projects/:id", middleware.Auth(cfg), UpdateProject)
+	r.DELETE("/api/projects/:id", middleware.Auth(cfg), DeleteProject)
+	r.GET("/api/projects/:id/tasks", middleware.Auth(cfg), ListProjectTasks)
+	r.GET("/api/artifacts/:id", middleware.Auth(cfg), GetArtifactDetail)
+	r.POST("/api/official-account/tasks", middleware.Auth(cfg), wechatofficialaccountapi.CreateOfficialAccountTask)
+	r.GET("/api/official-account/tasks/:id/workflow", middleware.Auth(cfg), wechatofficialaccountapi.GetOfficialAccountWorkflow)
+	r.PUT("/api/official-account/tasks/:id", middleware.Auth(cfg), wechatofficialaccountapi.UpdateOfficialAccountTask)
+	r.POST("/api/official-account/tasks/:id/steps/:stepKey", middleware.Auth(cfg), wechatofficialaccountapi.ExecuteOfficialAccountWorkflowStep)
+	r.POST("/api/official-account/tasks/:id/images/:imageKey/regenerate", middleware.Auth(cfg), wechatofficialaccountapi.RegenerateOfficialAccountImage)
+	r.GET("/api/official-account/tasks/:id/export", middleware.Auth(cfg), wechatofficialaccountapi.ExportOfficialAccountDocument)
+	r.GET("/api/official-account/generated-images/:filename", middleware.Auth(cfg), wechatofficialaccountapi.ServeOfficialAccountGeneratedImage)
+	r.GET("/api/connectors", middleware.Auth(cfg), connectorapi.ListConnectors)
+	r.GET("/api/connectors/:key", middleware.Auth(cfg), connectorapi.GetConnector)
+	r.POST("/api/connectors/:key/query", middleware.Auth(cfg), connectorapi.QueryConnector)
 	r.GET("/api/products", middleware.Auth(cfg), ListProducts)
 	r.GET("/api/products/:id", middleware.Auth(cfg), GetProduct)
 	r.GET("/api/courses", middleware.Auth(cfg), ListCourses)
@@ -86,7 +94,7 @@ func RegisterRoutes(r *gin.Engine, cfg *config.Config) {
 	r.POST("/api/exam/start", middleware.Auth(cfg), ExamStart)
 	r.POST("/api/exam/submit", middleware.Auth(cfg), ExamSubmit)
 	r.GET("/api/exam/record", middleware.Auth(cfg), ExamRecordList)
-	r.GET("/api/exam/record/:recordId", middleware.Auth(cfg), ExamRecordDetail)
+	r.GET("/api/exam/record/:record_id", middleware.Auth(cfg), ExamRecordDetail)
 	r.GET("/api/exam/mistakes", middleware.Auth(cfg), MyMistakes)
 	r.PUT("/api/exam/mistakes/:id/resolve", middleware.Auth(cfg), ResolveMistake)
 	r.POST("/api/exam/mistakes/practice", middleware.Auth(cfg), MistakePractice)
@@ -96,34 +104,27 @@ func RegisterRoutes(r *gin.Engine, cfg *config.Config) {
 	// 学员：我的岗位应学清单 / 学习档案 / 积分与排行榜
 	r.GET("/api/my/position", middleware.Auth(cfg), MyPosition)
 	r.GET("/api/my/profile", middleware.Auth(cfg), MyProfile)
-	r.GET("/api/my/app-center", middleware.Auth(cfg), GetMyAppCenter)
-	r.PUT("/api/my/app-center", middleware.Auth(cfg), UpdateMyAppCenter)
+	r.GET("/api/my/xapp-center", middleware.Auth(cfg), xappapi.GetMyXAppCenter)
+	r.PUT("/api/my/xapp-center", middleware.Auth(cfg), xappapi.UpdateMyXAppCenter)
 	r.GET("/api/points/me", middleware.Auth(cfg), MyPoints)
 	r.GET("/api/points/leaderboard", middleware.Auth(cfg), Leaderboard)
 
-	// 站内消息通知
-	r.GET("/api/notifications", middleware.Auth(cfg), MyNotifications)
-	r.GET("/api/notifications/unread-count", middleware.Auth(cfg), UnreadNotificationCount)
-	r.PUT("/api/notifications/:id/read", middleware.Auth(cfg), MarkNotificationRead)
-	r.PUT("/api/notifications/read-all", middleware.Auth(cfg), MarkAllNotificationsRead)
-
 	// 素材媒体（员工/管理员均可上传、预览）
 	r.POST("/api/media/upload", middleware.Auth(cfg), Upload)
 	r.POST("/api/media/upload-init", middleware.Auth(cfg), UploadInit)
 	r.POST("/api/media/upload-chunk", middleware.Auth(cfg), UploadChunk)
 	r.POST("/api/media/upload-complete", middleware.Auth(cfg), UploadComplete)
-	r.GET("/api/media/preview/:mediaId", middleware.Auth(cfg), Preview)
-	r.GET("/api/media/status/:mediaId", middleware.Auth(cfg), MediaStatus)
+	r.GET("/api/media/preview/:media_id", middleware.Auth(cfg), Preview)
+	r.GET("/api/media/status/:media_id", middleware.Auth(cfg), MediaStatus)
 
 	r.GET("/api/knowledge/spaces", middleware.Auth(cfg), ListKnowledgeSpaces)
 	r.GET("/api/knowledge/search", middleware.Auth(cfg), SearchKnowledge)
-	r.GET("/api/knowledge/status/:sourceId", middleware.Auth(cfg), KnowledgeStatus)
+	r.GET("/api/knowledge/status/:source_id", middleware.Auth(cfg), KnowledgeStatus)
 
 	// ── AI 对话（普通员工可访问，管理员访问）──
 	r.POST("/api/ai-chat/message", middleware.Auth(cfg), ChatMessage)
 	r.GET("/api/ai-chat/quick-actions", middleware.Auth(cfg), QuickActions)
 	r.POST("/api/ai-chat/quick-action", middleware.Auth(cfg), QuickAction)
-	r.GET("/api/ai/me", middleware.Auth(cfg), AIUsageMe)
 	r.GET("/api/ai/usage", middleware.Auth(cfg), AIUsage)
 	r.GET("/api/ai/routes/chat", ListChatRoutes)
 	r.GET("/api/ai/routes/embed", ListEmbedRoutes)
@@ -139,12 +140,12 @@ func RegisterRoutes(r *gin.Engine, cfg *config.Config) {
 	r.DELETE("/api/notes/:id", middleware.Auth(cfg), DeleteNote)
 
 	// ── 报告生成（普通员工可访问）──
-	r.POST("/api/report/generate", middleware.Auth(cfg), ReportGenerate)
-	r.POST("/api/report/export/pdf", middleware.Auth(cfg), ReportExportPDF)
-	r.POST("/api/report/export/docx", middleware.Auth(cfg), ReportExportDOCX)
-	r.POST("/api/report/export/pptx", middleware.Auth(cfg), ReportExportPPTX)
-	r.POST("/api/report/export/xlsx", middleware.Auth(cfg), ReportExportXLSX)
-	r.POST("/api/report/preview", middleware.Auth(cfg), ReportPreview)
+	r.POST("/api/report/generate", middleware.Auth(cfg), skillapi.ReportGenerate)
+	r.POST("/api/report/export/pdf", middleware.Auth(cfg), skillapi.ReportExportPDF)
+	r.POST("/api/report/export/docx", middleware.Auth(cfg), skillapi.ReportExportDOCX)
+	r.POST("/api/report/export/pptx", middleware.Auth(cfg), skillapi.ReportExportPPTX)
+	r.POST("/api/report/export/xlsx", middleware.Auth(cfg), skillapi.ReportExportXLSX)
+	r.POST("/api/report/preview", middleware.Auth(cfg), skillapi.ReportPreview)
 	r.POST("/api/contract/review", middleware.Auth(cfg), ReviewContract)
 
 	// 文档工具
@@ -153,9 +154,9 @@ func RegisterRoutes(r *gin.Engine, cfg *config.Config) {
 	r.GET("/api/copy/quick", middleware.Auth(cfg), QuickProofread)
 	r.POST("/api/batch/extract", middleware.Auth(cfg), ExtractBatch)
 	r.POST("/api/batch/files", middleware.Auth(cfg), ExtractFromFiles)
-	r.POST("/api/skills/office/execute", middleware.Auth(cfg), ExecuteOfficeSkill)
-	r.POST("/api/skills/office/ocr", middleware.Auth(cfg), ExecuteOfficeSkillOCR)
-	r.POST("/api/assistant/chat", middleware.Auth(cfg), Chat)
+	r.POST("/api/skills/office/execute", middleware.Auth(cfg), skillapi.ExecuteOfficeSkill)
+	r.POST("/api/skills/office/ocr", middleware.Auth(cfg), skillapi.ExecuteOfficeSkillOCR)
+	r.POST("/api/chat/message", middleware.Auth(cfg), HandleChatMessage)
 
 	// 语音工具
 	r.POST("/api/audio/transcribe", middleware.Auth(cfg), TranscribeAudio)
@@ -182,7 +183,7 @@ func RegisterRoutes(r *gin.Engine, cfg *config.Config) {
 		admin.DELETE("/exam/papers/:id", DeletePaper)
 
 		admin.GET("/media/audit-list", AuditList)
-		admin.POST("/media/audit/:mediaId", AuditMedia)
+		admin.POST("/media/audit/:media_id", AuditMedia)
 
 		admin.POST("/knowledge/scan", KnowledgeScan)
 		admin.POST("/knowledge/index/rebuild", RebuildKnowledgeIndex)
@@ -194,31 +195,31 @@ func RegisterRoutes(r *gin.Engine, cfg *config.Config) {
 		admin.PUT("/knowledge/faqs/:id", UpdateKnowledgeFAQ)
 		admin.DELETE("/knowledge/faqs/:id", DeleteKnowledgeFAQ)
 		admin.GET("/knowledge/audit-list", KnowledgeAuditList)
-		admin.POST("/knowledge/audit/:sourceId", KnowledgeAudit)
+		admin.POST("/knowledge/audit/:source_id", KnowledgeAudit)
 		admin.GET("/knowledge/export", ExportKnowledge)
 
 		admin.GET("/positions", ListPositions)
 		admin.POST("/positions", CreatePosition)
 		admin.PUT("/positions/:id", UpdatePosition)
 		admin.DELETE("/positions/:id", DeletePosition)
-		admin.POST("/specialists", CreateSpecialist)
-		admin.PUT("/specialists/:id", UpdateSpecialist)
-		admin.DELETE("/specialists/:id", DeleteSpecialist)
-		admin.POST("/skills", CreateSkillDefinition)
-		admin.PUT("/skills/:id", UpdateSkillDefinition)
-		admin.DELETE("/skills/:id", DeleteSkillDefinition)
-				admin.POST("/apps", CreateAppDefinition)
-				admin.PUT("/apps/:id", UpdateAppDefinition)
-				admin.DELETE("/apps/:id", DeleteAppDefinition)
+		admin.POST("/specialists", specialistapi.CreateSpecialist)
+		admin.PUT("/specialists/:id", specialistapi.UpdateSpecialist)
+		admin.DELETE("/specialists/:id", specialistapi.DeleteSpecialist)
+		admin.POST("/skills", skillapi.CreateSkillDefinition)
+		admin.PUT("/skills/:id", skillapi.UpdateSkillDefinition)
+		admin.DELETE("/skills/:id", skillapi.DeleteSkillDefinition)
+		admin.POST("/xapps", xappapi.CreateXAppDefinition)
+		admin.PUT("/xapps/:id", xappapi.UpdateXAppDefinition)
+		admin.DELETE("/xapps/:id", xappapi.DeleteXAppDefinition)
 		admin.POST("/actions", CreateActionDefinition)
 		admin.PUT("/actions/:id", UpdateActionDefinition)
 		admin.DELETE("/actions/:id", DeleteActionDefinition)
-		admin.POST("/worker/tasks", CreateWorkerTask)
-		admin.PUT("/worker/tasks/:id", UpdateWorkerTask)
-		admin.PUT("/worker/tasks/:id/status", UpdateWorkerTaskStatus)
-		admin.DELETE("/worker/tasks/:id", DeleteWorkerTask)
-		admin.POST("/worker/tasks/:id/actions", ExecuteWorkerTaskAction)
-		admin.PUT("/worker/artifacts/:id/status", UpdateWorkerArtifactStatus)
+		admin.POST("/tasks", CreateTask)
+		admin.PUT("/tasks/:id", UpdateTask)
+		admin.PUT("/tasks/:id/status", UpdateTaskStatus)
+		admin.DELETE("/tasks/:id", DeleteTask)
+		admin.POST("/tasks/:id/actions", ExecuteTaskAction)
+		admin.PUT("/artifacts/:id/status", UpdateArtifactStatus)
 		admin.GET("/positions/:id/knowledge", ListPositionKnowledge)
 		admin.PUT("/positions/:id/knowledge", SavePositionKnowledge)
 		admin.GET("/positions/:id/blueprint", ListPositionBlueprint)