@allbluecn/web-app 0.10.2 → 0.11.0

package/src/server/serverFns/workspace-kb-utils.ts

@@ -0,0 +1,138 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 工作空间知识库卡片：纯类型 + zod schema（不 import prisma，客户端可安全导入）。
+
+import { z } from "zod";
+import { GENERAL_GROUPS, externalDocId, type GeneralGroup } from "./story/kb-general-consts";
+
+export const QUICK_DOC_TITLE_MAX = 200;
+
+/** 知识库卡片快捷文档的固定列数（看板列数） */
+export const QUICK_DOC_COLUMNS = 5;
+
+/** 快捷文档标签枚举（存 DB 的 key，展示文案走 i18n workspace_kb_label_*） */
+export const QUICK_DOC_LABELS = [
+  "mrd",
+  "brd",
+  "feasibility",
+  "competitor",
+  "charter",
+  "infoArchitecture",
+  "techArchitecture",
+  "dataStructure",
+  "integration",
+  "copywriting",
+  "dictionary",
+  "legal",
+  "compliance",
+  "kbDictionary",
+  "website",
+] as const;
+
+export type QuickDocLabel = (typeof QUICK_DOC_LABELS)[number];
+
+/** 通用知识库分组 → 勾选时自动填充的默认标签 */
+export const GENERAL_GROUP_DEFAULT_LABEL: Record<string, QuickDocLabel> = {
+  legal: "legal",
+  compliance: "compliance",
+  dictionary: "kbDictionary",
+  bookmark: "website",
+};
+
+/** 标签徽章莫兰迪配色（CSS 变量引用，light/dark 双主题见 globals.css「知识库快捷文档标签莫兰迪色板」） */
+export const LABEL_COLORS: Record<string, { backgroundColor: string; borderColor: string; color: string }> = {
+  mrd: { backgroundColor: "var(--kb-label-mrd-bg)", borderColor: "var(--kb-label-mrd-border)", color: "var(--kb-label-mrd-text)" },
+  brd: { backgroundColor: "var(--kb-label-brd-bg)", borderColor: "var(--kb-label-brd-border)", color: "var(--kb-label-brd-text)" },
+  feasibility: { backgroundColor: "var(--kb-label-feasibility-bg)", borderColor: "var(--kb-label-feasibility-border)", color: "var(--kb-label-feasibility-text)" },
+  competitor: { backgroundColor: "var(--kb-label-competitor-bg)", borderColor: "var(--kb-label-competitor-border)", color: "var(--kb-label-competitor-text)" },
+  charter: { backgroundColor: "var(--kb-label-charter-bg)", borderColor: "var(--kb-label-charter-border)", color: "var(--kb-label-charter-text)" },
+  infoArchitecture: { backgroundColor: "var(--kb-label-infoArchitecture-bg)", borderColor: "var(--kb-label-infoArchitecture-border)", color: "var(--kb-label-infoArchitecture-text)" },
+  techArchitecture: { backgroundColor: "var(--kb-label-techArchitecture-bg)", borderColor: "var(--kb-label-techArchitecture-border)", color: "var(--kb-label-techArchitecture-text)" },
+  dataStructure: { backgroundColor: "var(--kb-label-dataStructure-bg)", borderColor: "var(--kb-label-dataStructure-border)", color: "var(--kb-label-dataStructure-text)" },
+  integration: { backgroundColor: "var(--kb-label-integration-bg)", borderColor: "var(--kb-label-integration-border)", color: "var(--kb-label-integration-text)" },
+  copywriting: { backgroundColor: "var(--kb-label-copywriting-bg)", borderColor: "var(--kb-label-copywriting-border)", color: "var(--kb-label-copywriting-text)" },
+  dictionary: { backgroundColor: "var(--kb-label-dictionary-bg)", borderColor: "var(--kb-label-dictionary-border)", color: "var(--kb-label-dictionary-text)" },
+  legal: { backgroundColor: "var(--kb-label-legal-bg)", borderColor: "var(--kb-label-legal-border)", color: "var(--kb-label-legal-text)" },
+  compliance: { backgroundColor: "var(--kb-label-compliance-bg)", borderColor: "var(--kb-label-compliance-border)", color: "var(--kb-label-compliance-text)" },
+  kbDictionary: { backgroundColor: "var(--kb-label-kbDictionary-bg)", borderColor: "var(--kb-label-kbDictionary-border)", color: "var(--kb-label-kbDictionary-text)" },
+  website: { backgroundColor: "var(--kb-label-website-bg)", borderColor: "var(--kb-label-website-border)", color: "var(--kb-label-website-text)" },
+};
+
+export const quickDocItemSchema = z
+  .object({
+    docId: z.string().optional(),
+    externalGroup: z.enum(GENERAL_GROUPS).optional(),
+    externalId: z.string().optional(),
+    displayTitle: z.string().min(1).max(QUICK_DOC_TITLE_MAX),
+    label: z.enum(QUICK_DOC_LABELS).optional(),
+    icon: z.string().optional(),
+  })
+  .refine(
+    (v) =>
+      v.docId ? !v.externalGroup && !v.externalId : Boolean(v.externalGroup && v.externalId),
+    { message: "docId 与 externalGroup/externalId 必须二选一" },
+  );
+
+export type QuickDocItem = z.infer<typeof quickDocItemSchema>;
+
+export type KbBrief = { id: string; name: string; icon: string; visibility: string };
+
+export type QuickDocRow = {
+  id: string;
+  displayTitle: string;
+  columnIndex: number;
+  sortOrder: number;
+  label: string | null;
+  icon: string | null;
+  source: "doc" | "general";
+  docId: string | null;
+  kbId: string | null;
+  kbName: string | null;
+  docIcon: string | null;
+  group: GeneralGroup | null;
+  externalId: string | null;
+  faviconUrl: string | null;
+  sourceTitle: string | null;
+  /** 外部条目的直接 URL（bookmark 等类型）；null 表示走内部路由 */
+  url: string | null;
+  stale: boolean;
+};
+
+export type WorkspaceKbCardData = { kbs: KbBrief[]; quickDocs: QuickDocRow[] };
+
+export function quickDocItemKey(
+  item: Pick<QuickDocItem, "docId" | "externalGroup" | "externalId">,
+): string {
+  return item.docId ?? externalDocId(item.externalGroup!, item.externalId!);
+}
+
+/** 外部条目 → 详情路由路径 */
+export function generalDocHref(group: GeneralGroup, externalId: string): string {
+  switch (group) {
+    case "legal":
+      return `/knowledge/laws/${externalId}`;
+    case "compliance":
+      return `/knowledge/compliance/${externalId}`;
+    case "dictionary":
+      return `/knowledge/dictionaries/${externalId}`;
+    case "bookmark":
+      return `/knowledge/bookmarks/${externalId}`;
+    case "summary":
+      return "/knowledge/summary";
+  }
+}

package/src/server/serverFns/workspace-kb.ts

@@ -0,0 +1,403 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 工作空间知识库卡片 serverFn 模块（纯净：仅导出 createServerFn 调用）。
+
+import { z } from "zod";
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { prisma } from "@allbluecn/database";
+import { requireAuth } from "@/server/auth-helpers";
+import { GENERAL_GROUP_TABLES, GENERAL_GROUPS, type GeneralGroup } from "./story/kb-general";
+import type { QuickDocRow, WorkspaceKbCardData, QuickDocItem } from "./workspace-kb-utils";
+import {
+  searchGeneralGroupDocs,
+  listUserTeamKbIds,
+  SEARCH_DOC_SELECT,
+  toSearchDocRow,
+  type SearchDocRow,
+} from "./kb-doc-search";
+import { quickDocItemSchema, quickDocItemKey, QUICK_DOC_COLUMNS } from "./workspace-kb-utils";
+
+/** owner 或 active 成员可访问 */
+async function requireWorkspaceMember(workspaceId: string, userId: string) {
+  const ws = await prisma.workspace.findUnique({
+    where: { id: workspaceId },
+    select: { ownerId: true, members: { where: { userId, status: "active" }, select: { id: true } } },
+  });
+  if (!ws) throw new Error("工作空间不存在");
+  if (ws.ownerId !== userId && ws.members.length === 0) throw new Error("仅工作空间成员可访问");
+}
+
+export const getWorkspaceKbCardFn = createServerFn({ method: "GET" })
+  .validator(z.object({ workspaceId: z.string() }))
+  .handler(async ({ data }): Promise<WorkspaceKbCardData> => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    await requireWorkspaceMember(data.workspaceId, userId);
+
+    const [linkRows, quickRows] = await Promise.all([
+      prisma.workspaceKnowledgeBase.findMany({
+        where: { workspaceId: data.workspaceId },
+        select: { kb: { select: { id: true, name: true, icon: true, visibility: true } } },
+        orderBy: { createdAt: "asc" },
+      }),
+      prisma.workspaceQuickDoc.findMany({
+        where: { workspaceId: data.workspaceId },
+        orderBy: [{ columnIndex: "asc" }, { sortOrder: "asc" }],
+        select: {
+          id: true, displayTitle: true, columnIndex: true, sortOrder: true, label: true, icon: true,
+          docId: true, externalGroup: true, externalId: true,
+          doc: {
+            select: { title: true, icon: true, isDeleted: true, kb: { select: { id: true, name: true } } },
+          },
+        },
+      }),
+    ]);
+
+    // 外部条目按组批量查当前标题（displayTitle 之外的兜底参考）
+    const extTitles = new Map<string, string | null>();
+    const extFavicons = new Map<string, string | null>();
+    const extUrls = new Map<string, string | null>();
+    const byGroup = new Map<Exclude<GeneralGroup, "summary">, string[]>();
+    for (const r of quickRows) {
+      if (!r.docId && r.externalGroup && r.externalId) {
+        if (r.externalGroup === "summary") {
+          extTitles.set(`summary:${r.externalId}`, null);
+          continue;
+        }
+        const group = r.externalGroup as Exclude<GeneralGroup, "summary">;
+        const arr = byGroup.get(group) ?? [];
+        arr.push(r.externalId);
+        byGroup.set(group, arr);
+      }
+    }
+    for (const [group, ids] of byGroup) {
+      const rows = await (
+        prisma[GENERAL_GROUP_TABLES[group]] as unknown as {
+          findMany: (args: Record<string, unknown>) => Promise<Array<{ id: string; title: string; faviconUrl?: string | null; url?: string | null }>>;
+        }
+      ).findMany({ where: { id: { in: ids } }, select: { id: true, title: true, faviconUrl: true, url: true } });
+      const map = new Map(rows.map((r) => [r.id, r.title]));
+      const faviconMap = new Map(rows.map((r) => [r.id, r.faviconUrl ?? null]));
+      const urlMap = new Map(rows.map((r) => [r.id, (r.url as string | null) ?? null]));
+      for (const id of ids) extTitles.set(`${group}:${id}`, map.get(id) ?? null);
+      for (const id of ids) extFavicons.set(`${group}:${id}`, faviconMap.get(id) ?? null);
+      for (const id of ids) extUrls.set(`${group}:${id}`, urlMap.get(id) ?? null);
+    }
+
+    return {
+      kbs: linkRows.map((r) => r.kb),
+      quickDocs: quickRows.map((r): QuickDocRow => {
+        if (r.docId) {
+          const stale = !r.doc || r.doc.isDeleted;
+          return {
+            id: r.id, displayTitle: r.displayTitle, columnIndex: r.columnIndex, sortOrder: r.sortOrder, label: r.label, icon: r.icon,
+            source: "doc", docId: r.docId,
+            kbId: r.doc?.kb.id ?? null, kbName: r.doc?.kb.name ?? null,
+            docIcon: r.doc?.icon ?? null, group: null, externalId: null,
+            faviconUrl: null, sourceTitle: r.doc?.title ?? null, url: null, stale,
+          };
+        }
+        const sourceTitle = r.externalGroup
+          ? (extTitles.get(`${r.externalGroup}:${r.externalId}`) ?? null)
+          : null;
+        const faviconUrl = r.externalGroup && r.externalGroup !== "summary"
+          ? (extFavicons.get(`${r.externalGroup}:${r.externalId}`) ?? null)
+          : null;
+        return {
+          id: r.id, displayTitle: r.displayTitle, columnIndex: r.columnIndex, sortOrder: r.sortOrder, label: r.label, icon: r.icon,
+          source: "general", docId: null, kbId: null, kbName: null, docIcon: null,
+          group: (r.externalGroup as GeneralGroup | null), externalId: r.externalId,
+          faviconUrl, sourceTitle, url: r.externalGroup ? (extUrls.get(`${r.externalGroup}:${r.externalId}`) ?? null) : null,
+          stale: sourceTitle === null,
+        };
+      }),
+    };
+  });
+
+export const listWorkspaceAvailableKbsFn = createServerFn({ method: "GET" })
+  .validator(z.object({ workspaceId: z.string() }))
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    await requireWorkspaceMember(data.workspaceId, userId);
+
+    const linked = await prisma.workspaceKnowledgeBase.findMany({
+      where: { workspaceId: data.workspaceId },
+      select: { kbId: true },
+    });
+    const linkedIds = new Set(linked.map((l) => l.kbId));
+    // 候选范围：本空间已关联 ∪ 我创建的 team 库（manage 弹窗需完整候选；快捷文档弹窗侧仅取已关联）
+    const kbs = await prisma.knowledgeBase.findMany({
+      where: {
+        isDeleted: false,
+        OR: [{ id: { in: [...linkedIds] } }, { visibility: "team", userId }],
+      },
+      select: { id: true, name: true, icon: true, visibility: true },
+      orderBy: { name: "asc" },
+    });
+    return kbs.map((k) => ({ ...k, linked: linkedIds.has(k.id) }));
+  });
+
+export const setWorkspaceKbsFn = createServerFn({ method: "POST" })
+  .validator(z.object({ workspaceId: z.string(), kbIds: z.array(z.string()) }))
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    await requireWorkspaceMember(data.workspaceId, session.user!.id!);
+
+    if (data.kbIds.length > 0) {
+      const valid = await prisma.knowledgeBase.findMany({
+        where: { id: { in: data.kbIds }, visibility: "team", isDeleted: false },
+        select: { id: true },
+      });
+      if (valid.length !== data.kbIds.length) {
+        throw new Error("仅允许团队可见的知识库关联工作空间");
+      }
+    }
+    await prisma.$transaction(async (tx) => {
+      await tx.workspaceKnowledgeBase.deleteMany({
+        where: { workspaceId: data.workspaceId, kbId: { notIn: data.kbIds } },
+      });
+      if (data.kbIds.length > 0) {
+        await tx.workspaceKnowledgeBase.createMany({
+          data: data.kbIds.map((kbId) => ({ workspaceId: data.workspaceId, kbId })),
+          skipDuplicates: true,
+        });
+      }
+    });
+    return { ok: true };
+  });
+
+export const searchQuickDocCandidatesFn = createServerFn({ method: "GET" })
+  .validator(
+    z.object({
+      workspaceId: z.string(),
+      kbId: z.string().optional(),
+      generalGroup: z.enum(GENERAL_GROUPS).optional(),
+      query: z.string().default(""),
+    }),
+  )
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    await requireWorkspaceMember(data.workspaceId, userId);
+
+    if (data.generalGroup) {
+      const items = await searchGeneralGroupDocs(data.generalGroup, userId, data.query);
+      return { items };
+    }
+
+    const teamKbIds = await listUserTeamKbIds(userId);
+
+    if (data.kbId) {
+      if (!teamKbIds.includes(data.kbId)) throw new Error("知识库不在可用范围内");
+      const docs = await prisma.knowledgeDocument.findMany({
+        where: {
+          kbId: data.kbId,
+          isDeleted: false,
+          ...(data.query ? { title: { contains: data.query, mode: "insensitive" as const } } : {}),
+        },
+        select: SEARCH_DOC_SELECT,
+        orderBy: [{ sortOrder: "asc" }, { createdAt: "asc" }],
+        take: 500,
+      });
+      return { items: docs.map(toSearchDocRow) };
+    }
+
+    // 默认态：用户全部 team 库文档平铺（按时间倒序，截断 100）
+    const rows = await prisma.knowledgeDocument.findMany({
+      where: {
+        isDeleted: false,
+        kb: { isDeleted: false, id: { in: teamKbIds } },
+        ...(data.query ? { title: { contains: data.query, mode: "insensitive" as const } } : {}),
+      },
+      select: SEARCH_DOC_SELECT,
+      orderBy: { createdAt: "desc" },
+      take: 100,
+    });
+    return { items: rows.map(toSearchDocRow) };
+  });
+
+export const addQuickDocsFn = createServerFn({ method: "POST" })
+  .validator(z.object({ workspaceId: z.string(), items: z.array(quickDocItemSchema).min(1) }))
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    await requireWorkspaceMember(data.workspaceId, userId);
+
+    const existing = await prisma.workspaceQuickDoc.findMany({
+      where: { workspaceId: data.workspaceId },
+      select: { columnIndex: true, sortOrder: true },
+    });
+    // 看板式追加：新文档放到「最短列」末尾（并列取最左），保持各列视觉均衡
+    const counts = new Array(QUICK_DOC_COLUMNS).fill(0) as number[];
+    const maxOrder = new Array(QUICK_DOC_COLUMNS).fill(-1) as number[];
+    for (const row of existing) {
+      const c = Math.min(Math.max(row.columnIndex, 0), QUICK_DOC_COLUMNS - 1);
+      counts[c] += 1;
+      maxOrder[c] = Math.max(maxOrder[c], row.sortOrder);
+    }
+
+    const created: string[] = [];
+    const failed: Array<{ key: string; reason: "outOfScope" | "duplicate" }> = [];
+
+    for (const item of data.items as QuickDocItem[]) {
+      const key = quickDocItemKey(item);
+      const targetCol = counts.indexOf(Math.min(...counts));
+      const order = maxOrder[targetCol] + 1;
+      if (item.docId) {
+        const doc = await prisma.knowledgeDocument.findFirst({
+          where: { id: item.docId, isDeleted: false },
+          select: { id: true },
+        });
+        if (!doc) {
+          failed.push({ key, reason: "outOfScope" });
+          continue;
+        }
+        const dup = await prisma.workspaceQuickDoc.findFirst({
+          where: { workspaceId: data.workspaceId, docId: item.docId },
+          select: { id: true },
+        });
+        if (dup) {
+          failed.push({ key, reason: "duplicate" });
+          continue;
+        }
+        await prisma.workspaceQuickDoc.create({
+          data: {
+            workspaceId: data.workspaceId, docId: item.docId,
+            displayTitle: item.displayTitle, columnIndex: targetCol, sortOrder: order, label: item.label ?? null, icon: item.icon ?? null, createdBy: userId,
+          },
+        });
+        counts[targetCol] += 1;
+        maxOrder[targetCol] = order;
+        created.push(key);
+      } else {
+        const group = item.externalGroup!;
+        const exists =
+          group === "summary"
+            ? null
+            : await (
+                prisma[GENERAL_GROUP_TABLES[group as Exclude<GeneralGroup, "summary">]] as unknown as {
+                  findFirst: (args: Record<string, unknown>) => Promise<{ id: string } | null>;
+                }
+              ).findFirst({ where: { id: item.externalId!, isDeleted: false }, select: { id: true } });
+        if (!exists) {
+          failed.push({ key, reason: "outOfScope" });
+          continue;
+        }
+        const dup = await prisma.workspaceQuickDoc.findFirst({
+          where: { workspaceId: data.workspaceId, externalGroup: group, externalId: item.externalId },
+          select: { id: true },
+        });
+        if (dup) {
+          failed.push({ key, reason: "duplicate" });
+          continue;
+        }
+        await prisma.workspaceQuickDoc.create({
+          data: {
+            workspaceId: data.workspaceId, externalGroup: group, externalId: item.externalId,
+            displayTitle: item.displayTitle, columnIndex: targetCol, sortOrder: order, label: item.label ?? null, icon: item.icon ?? null, createdBy: userId,
+          },
+        });
+        counts[targetCol] += 1;
+        maxOrder[targetCol] = order;
+        created.push(key);
+      }
+    }
+    return { created, failed };
+  });
+
+export const renameQuickDocFn = createServerFn({ method: "POST" })
+  .validator(
+    z.object({
+      quickDocId: z.string(),
+      displayTitle: z.string().min(1).max(200),
+      /** 传入空串清除自定义图标；不传保持不变 */
+      icon: z.string().optional(),
+    }),
+  )
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const row = await prisma.workspaceQuickDoc.findUnique({
+      where: { id: data.quickDocId },
+      select: { workspaceId: true },
+    });
+    if (!row) throw new Error("快捷文档不存在");
+    await requireWorkspaceMember(row.workspaceId, session.user!.id!);
+    await prisma.workspaceQuickDoc.update({
+      where: { id: data.quickDocId },
+      data: {
+        displayTitle: data.displayTitle,
+        ...(data.icon !== undefined ? { icon: data.icon || null } : {}),
+      },
+    });
+    return { ok: true };
+  });
+
+export const removeQuickDocFn = createServerFn({ method: "POST" })
+  .validator(z.object({ quickDocId: z.string() }))
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const row = await prisma.workspaceQuickDoc.findUnique({
+      where: { id: data.quickDocId },
+      select: { workspaceId: true },
+    });
+    if (!row) throw new Error("快捷文档不存在");
+    await requireWorkspaceMember(row.workspaceId, session.user!.id!);
+    await prisma.workspaceQuickDoc.delete({ where: { id: data.quickDocId } });
+    return { ok: true };
+  });
+
+export const reorderQuickDocsFn = createServerFn({ method: "POST" })
+  .validator(
+    z.object({
+      workspaceId: z.string(),
+      items: z.array(
+        z.object({ id: z.string(), columnIndex: z.number().int().min(0), sortOrder: z.number().int().min(0) }),
+      ),
+    }),
+  )
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    await requireWorkspaceMember(data.workspaceId, session.user!.id!);
+    const ids = data.items.map((item) => item.id);
+    const owned = await prisma.workspaceQuickDoc.findMany({
+      where: { id: { in: ids }, workspaceId: data.workspaceId },
+      select: { id: true },
+    });
+    if (owned.length !== new Set(ids).size) {
+      throw new Error("包含不属于本工作空间的快捷文档");
+    }
+    await prisma.$transaction(
+      data.items.map((item) =>
+        prisma.workspaceQuickDoc.update({
+          where: { id: item.id },
+          data: { columnIndex: item.columnIndex, sortOrder: item.sortOrder },
+        }),
+      ),
+    );
+    return { ok: true };
+  });

package/src/server/serverFns/workspace.ts

@@ -141,7 +141,7 @@ export const createWorkspaceFn = createServerFn({ method: "POST" })
           ownerId: userId,
         },
       });
-      await tx.knowledgeBase.create({
+      const kb = await tx.knowledgeBase.create({
         data: {
           name: data.name,
           description: `${data.name}工作空间同步创建的知识库`,
@@ -152,6 +152,9 @@ export const createWorkspaceFn = createServerFn({ method: "POST" })
           workspaceId: workspace.id,
         },
       });
+      await tx.workspaceKnowledgeBase.create({
+        data: { workspaceId: workspace.id, kbId: kb.id },
+      });
       return workspace;
     });
   });

package/src/shared/ai-cli/__tests__/adapter.test.ts

@@ -0,0 +1,67 @@
+import { describe, expect, it, beforeEach, vi } from "vitest"
+import type { CLIAgentInfo } from "@allbluecn/kernel"
+
+const execFileSyncMock = vi.hoisted(() => vi.fn())
+const execSyncMock = vi.hoisted(() => vi.fn())
+
+vi.mock("node:child_process", async (importOriginal) => {
+  const actual = await importOriginal<typeof import("node:child_process")>()
+  return {
+    ...actual,
+    execFileSync: execFileSyncMock,
+    execSync: execSyncMock,
+  }
+})
+
+vi.mock("child_process", async (importOriginal) => {
+  const actual = await importOriginal<typeof import("child_process")>()
+  return {
+    ...actual,
+    execFileSync: execFileSyncMock,
+    execSync: execSyncMock,
+  }
+})
+
+const testAgent: CLIAgentInfo = {
+  id: "claude-code",
+  name: "Claude Code",
+  binary: "claude",
+  version: "v1",
+  available: true,
+}
+
+describe("executeViaAgent 命令执行安全", () => {
+  beforeEach(() => {
+    execFileSyncMock.mockReset()
+    execSyncMock.mockReset()
+    vi.resetModules()
+  })
+
+  it("用 execFileSync 数组参数调用 CLI（无 shell 拼接）", async () => {
+    execFileSyncMock.mockReturnValue("  hello response  \n")
+    const { executeViaAgent } = await import("../adapter")
+    const result = await executeViaAgent(testAgent, "你好", {} as never)
+    expect(result).toBe("hello response")
+    expect(execFileSyncMock).toHaveBeenCalledWith(
+      "claude",
+      ["-p", "你好"],
+      expect.objectContaining({ timeout: 60000, encoding: "utf-8" })
+    )
+  })
+
+  it("execSync 未被调用（锁定无 shell 注入不变量）", async () => {
+    execFileSyncMock.mockReturnValue("ok")
+    const { executeViaAgent } = await import("../adapter")
+    await executeViaAgent(testAgent, "test", {} as never)
+    expect(execSyncMock).not.toHaveBeenCalled()
+  })
+
+  it("prompt 中的 shell 元字符作为字面量传递（防注入回归）", async () => {
+    const dangerous = `"; rm -rf /; echo $(whoami) \`id\`" && whoami`
+    execFileSyncMock.mockReturnValue("safe")
+    const { executeViaAgent } = await import("../adapter")
+    await executeViaAgent(testAgent, dangerous, {} as never)
+    expect(execFileSyncMock.mock.calls[0]![1]).toEqual(["-p", dangerous])
+    expect(execSyncMock).not.toHaveBeenCalled()
+  })
+})