@allbluecn/web-app 0.10.3 → 0.11.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (246) hide show
  1. package/package.json +24 -11
  2. package/public/favicon-dark.svg +1 -0
  3. package/public/favicon.ico +0 -0
  4. package/public/favicon.svg +1 -0
  5. package/public/logo/allblue-logo-app-icon.svg +7 -0
  6. package/public/logo/allblue-logo-dark-square.svg +4 -0
  7. package/public/logo/allblue-logo-dark.png +0 -0
  8. package/public/logo/allblue-logo-dark.svg +4 -0
  9. package/public/logo/allblue-logo-light-square.svg +4 -0
  10. package/public/logo/allblue-logo-light.png +0 -0
  11. package/public/logo/allblue-logo-light.svg +4 -0
  12. package/src/__tests__/bench/baselines/format-timestamp.json +44 -0
  13. package/src/__tests__/bench/core-hot-path.bench.ts +71 -0
  14. package/src/__tests__/integration/db-crud.integration.test.ts +79 -0
  15. package/src/__tests__/integration/login-email-acceptance.test.ts +202 -0
  16. package/src/__tests__/integration/login-email-p2-acceptance.test.ts +142 -0
  17. package/src/__tests__/rejects-tothrow-regression.test.ts +31 -0
  18. package/src/__tests__/security/ai/prompt-injection.test.ts +105 -0
  19. package/src/__tests__/security/ssrf-url-whitelist.test.ts +54 -0
  20. package/src/__tests__/security/xss-sanitize.test.ts +99 -0
  21. package/src/__tests__/setup.ts +9 -0
  22. package/src/__tests__/visual/__screenshots__/theme-surface.vrt.test.tsx/theme-surface-dark-baseline-1-chromium-darwin.png +0 -0
  23. package/src/__tests__/visual/__screenshots__/theme-surface.vrt.test.tsx/theme-surface-light-baseline-1-chromium-darwin.png +0 -0
  24. package/src/__tests__/visual/__screenshots__/user-avatar.vrt.test.tsx/user-avatar-initial-fallback-baseline-1-chromium-darwin.png +0 -0
  25. package/src/__tests__/visual/theme-surface.vrt.test.tsx +54 -0
  26. package/src/__tests__/visual/user-avatar.vrt.test.tsx +32 -0
  27. package/src/components/auth/icon-input.tsx +9 -1
  28. package/src/components/auth/password-input.tsx +9 -1
  29. package/src/components/changelog/changelog-page.tsx +44 -1
  30. package/src/components/error/global-error-boundary.tsx +2 -2
  31. package/src/components/forms/app-field.tsx +3 -1
  32. package/src/components/knowledge/general-groups.ts +15 -0
  33. package/src/components/knowledge/kb-filter-popover.tsx +143 -0
  34. package/src/components/knowledge/knowledge-toolbar.tsx +17 -21
  35. package/src/components/knowledge-public/legal-compliance-editor.tsx +4 -2
  36. package/src/components/layout/sidebar-03/__tests__/nav-workspace.test.tsx +9 -6
  37. package/src/components/layout/sidebar-03/app-sidebar.tsx +4 -15
  38. package/src/components/layout/sidebar-03/nav-knowledge.tsx +19 -17
  39. package/src/components/layout/sidebar-03/nav-workspace.tsx +20 -22
  40. package/src/components/notifications/settings-notifications.tsx +41 -1
  41. package/src/components/settings/personal-team/account/settings-profile.tsx +68 -1
  42. package/src/components/shared-kit/avatars/notion-avatar.tsx +2 -1
  43. package/src/components/shared-kit/icons/__tests__/lucide-curated-icons.test.ts +2 -2
  44. package/src/components/shared-kit/icons/__tests__/lucide-icon-picker.test.tsx +3 -2
  45. package/src/components/shared-kit/icons/lucide-icon-picker/curated-icons.ts +5 -10
  46. package/src/components/shared-kit/icons/lucide-icon-picker/lucide-icon-by-name.tsx +3 -3
  47. package/src/components/shared-kit/theme/theme-surface.tsx +52 -0
  48. package/src/components/story/relations/general-groups.ts +1 -15
  49. package/src/components/story/relations/knowledge-select-dialog.tsx +13 -87
  50. package/src/components/story/story-list-view.tsx +7 -1
  51. package/src/components/tiptap/node/table-node/ui/table-move-row-column-button/use-table-move-row-column.ts +0 -2
  52. package/src/components/workspace/__tests__/activity/workspace-activity-card.test.tsx +36 -0
  53. package/src/components/workspace/__tests__/contribution/workspace-contribution-card.test.tsx +17 -0
  54. package/src/components/workspace/__tests__/dialogs/create-workspace-dialog.test.tsx +63 -0
  55. package/src/components/workspace/__tests__/dialogs/delete-workspace-options.test.tsx +89 -0
  56. package/src/components/workspace/__tests__/dialogs/edit-workspace-dialog.test.tsx +68 -0
  57. package/src/components/workspace/__tests__/header/workspace-header.test.tsx +40 -0
  58. package/src/components/workspace/__tests__/kb/workspace-kb-card.test.tsx +154 -0
  59. package/src/components/workspace/__tests__/members/workspace-member-item.test.tsx +24 -0
  60. package/src/components/workspace/__tests__/members/workspace-members-manager.test.tsx +51 -0
  61. package/src/components/workspace/__tests__/projects/workspace-project-list.test.tsx +46 -0
  62. package/src/components/workspace/{create-workspace-dialog.tsx → dialogs/create-workspace-dialog.tsx} +1 -1
  63. package/src/components/workspace/{edit-workspace-dialog.tsx → dialogs/edit-workspace-dialog.tsx} +1 -1
  64. package/src/components/workspace/kb/workspace-kb-card.tsx +594 -0
  65. package/src/components/workspace/kb/workspace-kb-manage-dialog.tsx +174 -0
  66. package/src/components/workspace/kb/workspace-quick-doc-dialog.tsx +431 -0
  67. package/src/components/workspace/{workspace-members-manager.tsx → members/workspace-members-manager.tsx} +78 -40
  68. package/src/lib/__tests__/edition-desktop.test.ts +23 -0
  69. package/src/lib/__tests__/msw-sample.test.ts +68 -0
  70. package/src/lib/__tests__/pgvector.test.ts +2 -2
  71. package/src/lib/app-version.ts +1 -1
  72. package/src/lib/auth/auth.config.ts +123 -99
  73. package/src/lib/changelog/sdk-versions.ts +21 -21
  74. package/src/lib/collections/knowledge/knowledge-bases-collection.ts +3 -1
  75. package/src/lib/collections/reference/workspaces-collection.ts +3 -1
  76. package/src/lib/edition-desktop.ts +22 -0
  77. package/src/lib/fetch-json.ts +23 -0
  78. package/src/{components/workspace/workspace-kb-card.tsx → lib/i18n/resolver.ts} +6 -12
  79. package/src/lib/sanitize.ts +14 -1
  80. package/src/lib/session.ts +10 -2
  81. package/src/lib/vector-store/__tests__/factory.test.ts +1 -1
  82. package/src/lib/vector-store/__tests__/sqlite-vec-store.test.ts +2 -2
  83. package/src/plugins/core/tags/__tests__/tags.test.ts +10 -10
  84. package/src/routeTree.gen.ts +114 -0
  85. package/src/routes/__root.tsx +20 -3
  86. package/src/routes/__tests__/-auth-schemas.test.ts +62 -0
  87. package/src/routes/__tests__/-edition-routing.test.tsx +18 -5
  88. package/src/routes/__tests__/route-tree-structure.test.ts +66 -0
  89. package/src/routes/_login/changelog/confirm/route.lazy.tsx +72 -0
  90. package/src/routes/_login/changelog/confirm/route.tsx +28 -0
  91. package/src/routes/_login/email-unsubscribe/route.lazy.tsx +76 -0
  92. package/src/routes/_login/email-unsubscribe/route.tsx +28 -0
  93. package/src/routes/_login/forgot-password/route.lazy.tsx +2 -1
  94. package/src/routes/_login/login/route.lazy.tsx +4 -2
  95. package/src/routes/_login/register/route.lazy.tsx +28 -17
  96. package/src/routes/_login/register/route.tsx +8 -1
  97. package/src/routes/_login/reset-password/route.lazy.tsx +4 -2
  98. package/src/routes/_login/schemas/-auth.ts +30 -7
  99. package/src/routes/_login/verify-email/route.lazy.tsx +82 -0
  100. package/src/routes/_login/verify-email/route.tsx +28 -0
  101. package/src/routes/_nav/knowledge/compliance/index.lazy.tsx +5 -2
  102. package/src/routes/_nav/knowledge/index.lazy.tsx +1 -1
  103. package/src/routes/_nav/knowledge/laws/index.lazy.tsx +5 -2
  104. package/src/routes/_nav/route.tsx +26 -0
  105. package/src/routes/_nav/workspaces/$workspaceId/route.lazy.tsx +13 -11
  106. package/src/routes/_nav/workspaces/$workspaceId/route.tsx +4 -2
  107. package/src/routes/_nav/workspaces/$workspaceId/settings/route.lazy.tsx +1 -1
  108. package/src/routes/_nav/workspaces/index.lazy.tsx +3 -3
  109. package/src/routes/_public/index/route.tsx +2 -1
  110. package/src/routes/api/auth/desktop-callback.ts +2 -2
  111. package/src/routes/api/billing-webhook.ts +4 -0
  112. package/src/routes/api/cron/changelog-release.ts +100 -0
  113. package/src/routes/api/cron/subscription-reminders.ts +110 -0
  114. package/src/routes/api.auth.$.ts +3 -5
  115. package/src/server/__tests__/agent-crud.test.ts +4 -4
  116. package/src/server/__tests__/auth-registration.test.ts +60 -0
  117. package/src/server/__tests__/chat-conversations.test.ts +1 -3
  118. package/src/server/__tests__/fetch-guard.test.ts +99 -0
  119. package/src/server/__tests__/permissions.test.ts +1 -3
  120. package/src/server/__tests__/resources.team-seats.test.ts +2 -0
  121. package/src/server/__tests__/skill-crud.test.ts +3 -3
  122. package/src/server/ai-gateway/__tests__/ai-output-guard.test.ts +95 -0
  123. package/src/server/ai-gateway/__tests__/kb-context-guard.test.ts +136 -0
  124. package/src/server/ai-gateway/__tests__/knowledge-search-fence.test.ts +240 -0
  125. package/src/server/ai-gateway/__tests__/llm-fence.test.ts +125 -0
  126. package/src/server/ai-gateway/__tests__/run-store.test.ts +52 -0
  127. package/src/server/ai-gateway/ai-output-guard.ts +77 -0
  128. package/src/server/ai-gateway/index.ts +5 -0
  129. package/src/server/ai-gateway/kb-context-guard.ts +46 -0
  130. package/src/server/ai-gateway/llm-fence.ts +82 -0
  131. package/src/server/ai-gateway/persistence/run-store.ts +19 -0
  132. package/src/server/ai-gateway/story-prompt.ts +4 -2
  133. package/src/server/ai-gateway/tools/definitions.ts +12 -6
  134. package/src/server/ai-gateway/tools/server.ts +97 -54
  135. package/src/server/auth-registration.ts +40 -0
  136. package/src/server/billing-email.ts +39 -0
  137. package/src/server/builtin-project.ts +21 -0
  138. package/src/server/email/__tests__/deliverability.test.ts +68 -0
  139. package/src/server/email/__tests__/index.test.ts +32 -0
  140. package/src/server/email/__tests__/outbox.test.tsx +129 -0
  141. package/src/server/email/__tests__/product-templates.test.tsx +106 -0
  142. package/src/server/email/__tests__/registry.test.tsx +50 -0
  143. package/src/server/email/deliverability.ts +57 -0
  144. package/src/server/email/drivers/console.ts +11 -0
  145. package/src/server/email/drivers/resend.ts +31 -0
  146. package/src/server/email/drivers/smtp.ts +27 -0
  147. package/src/server/email/index.ts +56 -0
  148. package/src/server/email/outbox.ts +141 -0
  149. package/src/server/email/preferences.ts +20 -0
  150. package/src/server/email/registry.ts +38 -0
  151. package/src/server/email/sender.ts +36 -13
  152. package/src/server/email/templates/_base/button.tsx +12 -0
  153. package/src/server/email/templates/_base/email-layout.tsx +117 -0
  154. package/src/server/email/templates/_base/theme-fonts.tsx +43 -0
  155. package/src/server/email/templates/_base/theme.ts +22 -0
  156. package/src/server/email/templates/auth/reset-password.tsx +58 -0
  157. package/src/server/email/templates/auth/verify-email.tsx +59 -0
  158. package/src/server/email/templates/auth/welcome.tsx +49 -0
  159. package/src/server/email/templates/billing/payment-receipt.tsx +51 -0
  160. package/src/server/email/templates/billing/subscription-canceled.tsx +51 -0
  161. package/src/server/email/templates/billing/subscription-ending.tsx +51 -0
  162. package/src/server/email/templates/notification/mirror.tsx +50 -0
  163. package/src/server/email/templates/product/changelog-confirm.tsx +53 -0
  164. package/src/server/email/templates/product/changelog-release.tsx +65 -0
  165. package/src/server/email/templates/team/apply-notify.tsx +53 -0
  166. package/src/server/email/templates/team/approved.tsx +53 -0
  167. package/src/server/email/templates/team/invite.tsx +57 -0
  168. package/src/server/fetch-guard.ts +170 -0
  169. package/src/server/middlewares/security-headers.ts +122 -0
  170. package/src/server/notifications/__tests__/email-mirror.test.ts +193 -0
  171. package/src/server/notifications/__tests__/verify-reminder.test.ts +94 -0
  172. package/src/server/notifications/notification-service.ts +71 -1
  173. package/src/server/notifications/verify-reminder.ts +55 -0
  174. package/src/server/oauth-config.ts +59 -0
  175. package/src/server/serverFns/__tests__/auth-server-schemas.test.ts +168 -0
  176. package/src/server/serverFns/__tests__/billing.test.ts +263 -0
  177. package/src/server/serverFns/__tests__/email-verification.test.ts +149 -0
  178. package/src/server/serverFns/__tests__/link-preview.test.ts +239 -0
  179. package/src/server/serverFns/__tests__/project-kb.test.ts +3 -3
  180. package/src/server/serverFns/__tests__/project-team-assign.test.ts +1 -1
  181. package/src/server/serverFns/__tests__/story-comments.test.ts +265 -0
  182. package/src/server/serverFns/__tests__/story-crud-archive-detail.test.ts +266 -0
  183. package/src/server/serverFns/__tests__/story-crud-labels-users.test.ts +227 -0
  184. package/src/server/serverFns/__tests__/story-crud.test.ts +526 -0
  185. package/src/server/serverFns/__tests__/story-links.test.ts +262 -0
  186. package/src/server/serverFns/__tests__/story-list-query.test.ts +259 -0
  187. package/src/server/serverFns/__tests__/story-reactions.test.ts +230 -0
  188. package/src/server/serverFns/__tests__/story-tree.test.ts +317 -0
  189. package/src/server/serverFns/__tests__/story-types.test.ts +294 -0
  190. package/src/server/serverFns/__tests__/team-accept.test.ts +6 -6
  191. package/src/server/serverFns/__tests__/team-invitation.test.ts +5 -5
  192. package/src/server/serverFns/__tests__/team-join-request.test.ts +8 -8
  193. package/src/server/serverFns/__tests__/update-seats.test.ts +4 -4
  194. package/src/server/serverFns/__tests__/workspace-kb-idor.test.ts +160 -0
  195. package/src/server/serverFns/__tests__/workspace-kb-utils.test.ts +54 -0
  196. package/src/server/serverFns/__tests__/workspace-kb.test.ts +348 -0
  197. package/src/server/serverFns/__tests__/workspace.test.ts +28 -8
  198. package/src/server/serverFns/auth/email-verification.ts +132 -0
  199. package/src/server/serverFns/auth/forgot-password.ts +22 -2
  200. package/src/server/serverFns/auth/providers.ts +4 -3
  201. package/src/server/serverFns/auth/register.ts +63 -19
  202. package/src/server/serverFns/auth/registration-mode.ts +23 -0
  203. package/src/server/serverFns/auth/reset-password.ts +1 -1
  204. package/src/server/serverFns/auth/{invitation.ts → verify-reminder.ts} +9 -26
  205. package/src/server/serverFns/changelog/__tests__/subscribe.test.ts +119 -0
  206. package/src/server/serverFns/changelog/subscribe.ts +89 -0
  207. package/src/server/serverFns/email-unsubscribe.ts +66 -0
  208. package/src/server/serverFns/iteration/__tests__/iteration-crud.test.ts +3 -5
  209. package/src/server/serverFns/iteration/__tests__/iteration-stories.test.ts +1 -1
  210. package/src/server/serverFns/iteration/__tests__/iteration-transfer.test.ts +2 -2
  211. package/src/server/serverFns/kb-doc-search.ts +111 -0
  212. package/src/server/serverFns/knowledge-public/compliance/create.ts +2 -1
  213. package/src/server/serverFns/knowledge-public/legal/create.ts +2 -1
  214. package/src/server/serverFns/notifications.ts +10 -0
  215. package/src/server/serverFns/story/__tests__/bulk.test.ts +1 -1
  216. package/src/server/serverFns/story/__tests__/label-suggest-fn.test.ts +2 -6
  217. package/src/server/serverFns/story/__tests__/story-assoc.test.ts +2 -4
  218. package/src/server/serverFns/story/__tests__/story-dependencies.test.ts +2 -2
  219. package/src/server/serverFns/story/__tests__/story-groups.test.ts +2 -2
  220. package/src/server/serverFns/story/kb-general-consts.ts +39 -0
  221. package/src/server/serverFns/story/kb-general.ts +30 -17
  222. package/src/server/serverFns/story/story-assoc.ts +13 -103
  223. package/src/server/serverFns/story/story-crud.ts +2 -5
  224. package/src/server/serverFns/story/story-groups.ts +4 -13
  225. package/src/server/serverFns/team.ts +50 -12
  226. package/src/server/serverFns/workspace-kb-utils.ts +138 -0
  227. package/src/server/serverFns/workspace-kb.ts +403 -0
  228. package/src/server/serverFns/workspace.ts +4 -1
  229. package/src/shared/ai-cli/__tests__/adapter.test.ts +67 -0
  230. package/src/shared/ai-cli/__tests__/cli-detector.test.ts +99 -0
  231. package/src/shared/ai-cli/adapter.ts +2 -2
  232. package/src/shared/ai-cli/cli-detector.ts +18 -9
  233. package/src/start.ts +2 -1
  234. package/src/styles/globals.css +114 -0
  235. package/src/types/jest-dom-vitest.d.ts +8 -7
  236. package/vite.shared.ts +105 -4
  237. package/public/file.svg +0 -1
  238. package/public/globe.svg +0 -1
  239. package/public/window.svg +0 -1
  240. package/src/lib/__tests__/cli-detector.test.ts +0 -80
  241. /package/src/components/workspace/{workspace-activity-card.tsx → activity/workspace-activity-card.tsx} +0 -0
  242. /package/src/components/workspace/{workspace-contribution-card.tsx → contribution/workspace-contribution-card.tsx} +0 -0
  243. /package/src/components/workspace/{delete-workspace-options.tsx → dialogs/delete-workspace-options.tsx} +0 -0
  244. /package/src/components/workspace/{workspace-header.tsx → header/workspace-header.tsx} +0 -0
  245. /package/src/components/workspace/{workspace-member-item.tsx → members/workspace-member-item.tsx} +0 -0
  246. /package/src/components/workspace/{workspace-project-list.tsx → projects/workspace-project-list.tsx} +0 -0
@@ -0,0 +1,266 @@
1
+ // SPDX-License-Identifier: AGPL-3.0-or-later
2
+ // AllBlue - 理想之海
3
+ // Copyright (C) 2026 AllBlue Contributors
4
+ //
5
+ // This program is free software: you can redistribute it and/or modify
6
+ // it under the terms of the GNU Affero General Public License as published by
7
+ // the Free Software Foundation, either version 3 of the License, or
8
+ // (at your option) any later version.
9
+ //
10
+ // This program is distributed in the hope that it will be useful,
11
+ // but WITHOUT ANY WARRANTY; without even the implied warranty of
12
+ // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13
+ // GNU Affero General Public License for more details.
14
+ //
15
+ // You should have received a copy of the GNU Affero General Public License
16
+ // along with this program. If not, see <https://www.gnu.org/licenses/>.
17
+
18
+
19
+ // story-crud 衍生域覆盖补全:archiveStoryFn / unarchiveStoryFn / getStoryNeighborsFn /
20
+ // getStoryDetailFn。关键断言:归档状态流转与相邻节点排序;详情查询断言 select 形状;
21
+ // 未登录/不存在拒绝且零资源查询。mock 骨架同 workspace-kb-idor.test.ts 样板。
22
+ import { beforeEach, describe, expect, it, vi } from "vitest";
23
+
24
+ vi.mock("@tanstack/react-start", () => ({
25
+ createServerFn: (_config: unknown) => {
26
+ const api: any = {
27
+ _validator: undefined,
28
+ validator(schema: any) {
29
+ this._validator = schema;
30
+ return this;
31
+ },
32
+ handler(fn: Function) {
33
+ return async (args: any) => {
34
+ let data = args?.data;
35
+ if (this._validator && data !== undefined) {
36
+ data = this._validator.parse(data);
37
+ }
38
+ return fn({ data });
39
+ };
40
+ },
41
+ };
42
+ return api;
43
+ },
44
+ }));
45
+ vi.mock("@tanstack/react-start/server", () => ({ getRequest: () => ({}) }));
46
+
47
+ const M = vi.hoisted(() => {
48
+ const f = () => vi.fn();
49
+ return {
50
+ requireAuth: f(),
51
+ story: { findUnique: f(), findFirst: f(), update: f() },
52
+ storyActivity: { create: f() },
53
+ };
54
+ });
55
+
56
+ vi.mock("@allbluecn/database", () => ({
57
+ prisma: {
58
+ story: M.story,
59
+ storyActivity: M.storyActivity,
60
+ },
61
+ Prisma: {},
62
+ }));
63
+ vi.mock("@/server/auth-helpers", () => ({ requireAuth: M.requireAuth }));
64
+
65
+ import { archiveStoryFn, unarchiveStoryFn } from "../story/story-crud/archive";
66
+ import { getStoryDetailFn, getStoryNeighborsFn } from "../story/story-crud/detail";
67
+ import { STORY_LIST_SELECT } from "../story/types";
68
+
69
+ const USER = "u-current";
70
+ const STORY_ID = "st-1";
71
+ const PROJECT_ID = "pr-1";
72
+ const T1 = new Date("2026-01-01T00:00:00Z");
73
+ const T2 = new Date("2026-01-02T00:00:00Z");
74
+
75
+ const userRow = {
76
+ id: USER,
77
+ username: "alice",
78
+ email: "alice@example.com",
79
+ avatarConfig: null,
80
+ bgShape: null,
81
+ bgColor: null,
82
+ };
83
+ /** STORY_LIST_SELECT 形状的需求行 fixture(castStoryUsers 需要 createdBy/labels 等) */
84
+ const storyRow = (over: Record<string, unknown> = {}) => ({
85
+ id: STORY_ID,
86
+ identifier: "STORY-1",
87
+ sequenceId: 1,
88
+ name: "需求A",
89
+ description: null,
90
+ state: "backlog",
91
+ priority: "none",
92
+ archived: false,
93
+ startDate: null,
94
+ targetDate: null,
95
+ boardOrder: 0,
96
+ projectId: PROJECT_ID,
97
+ parentId: null,
98
+ parent: null,
99
+ assignee: null,
100
+ createdBy: userRow,
101
+ updatedBy: null,
102
+ labels: [],
103
+ createdAt: T1,
104
+ updatedAt: T2,
105
+ ...over,
106
+ });
107
+
108
+ beforeEach(() => {
109
+ vi.clearAllMocks();
110
+ M.requireAuth.mockResolvedValue({ user: { id: USER } });
111
+ M.story.update.mockResolvedValue(storyRow());
112
+ M.storyActivity.create.mockResolvedValue({});
113
+ });
114
+
115
+ describe("archiveStoryFn", () => {
116
+ it("归档时置 archived 并写入 archivedAt 与活动记录", async () => {
117
+ M.story.update.mockResolvedValue(storyRow({ archived: true, archivedAt: new Date("2026-01-03T00:00:00Z") }));
118
+ const res = await archiveStoryFn({ data: { storyId: STORY_ID } });
119
+
120
+ expect(M.story.update).toHaveBeenCalledWith({
121
+ where: { id: STORY_ID },
122
+ data: expect.objectContaining({ archived: true, archivedAt: expect.any(Date) }),
123
+ select: STORY_LIST_SELECT,
124
+ });
125
+ expect(M.storyActivity.create).toHaveBeenCalledWith({
126
+ data: {
127
+ storyId: STORY_ID,
128
+ userId: USER,
129
+ action: "archived",
130
+ field: "archived",
131
+ oldValue: "false",
132
+ newValue: "true",
133
+ },
134
+ });
135
+ expect(res).toMatchObject({
136
+ id: STORY_ID,
137
+ identifier: "STORY-1",
138
+ name: "需求A",
139
+ archived: true,
140
+ createdAt: T1.toISOString(),
141
+ updatedAt: T2.toISOString(),
142
+ labels: [],
143
+ });
144
+ expect(res.createdBy).toMatchObject({ id: USER, username: "alice" });
145
+ expect(res.startDate).toBeNull();
146
+ });
147
+
148
+ it("未登录拒绝且不更新不写活动", async () => {
149
+ M.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"));
150
+ await expect(archiveStoryFn({ data: { storyId: STORY_ID } })).rejects.toThrow("UNAUTHORIZED");
151
+ expect(M.story.update).not.toHaveBeenCalled();
152
+ expect(M.storyActivity.create).not.toHaveBeenCalled();
153
+ });
154
+ });
155
+
156
+ describe("unarchiveStoryFn", () => {
157
+ it("恢复时清空 archivedAt 并写入 unarchived 活动记录", async () => {
158
+ const res = await unarchiveStoryFn({ data: { storyId: STORY_ID } });
159
+
160
+ expect(M.story.update).toHaveBeenCalledWith({
161
+ where: { id: STORY_ID },
162
+ data: { archived: false, archivedAt: null },
163
+ select: STORY_LIST_SELECT,
164
+ });
165
+ expect(M.storyActivity.create).toHaveBeenCalledWith(
166
+ expect.objectContaining({
167
+ data: expect.objectContaining({ action: "unarchived", oldValue: "true", newValue: "false" }),
168
+ }),
169
+ );
170
+ expect(res.archived).toBe(false);
171
+ });
172
+
173
+ it("未登录拒绝且不更新", async () => {
174
+ M.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"));
175
+ await expect(unarchiveStoryFn({ data: { storyId: STORY_ID } })).rejects.toThrow("UNAUTHORIZED");
176
+ expect(M.story.update).not.toHaveBeenCalled();
177
+ });
178
+ });
179
+
180
+ describe("getStoryNeighborsFn", () => {
181
+ it("需求不存在时返回双 null 且不查询相邻需求", async () => {
182
+ M.story.findUnique.mockResolvedValue(null);
183
+
184
+ await expect(getStoryNeighborsFn({ data: { storyId: STORY_ID } })).resolves.toEqual({
185
+ prevId: null,
186
+ nextId: null,
187
+ });
188
+ expect(M.story.findFirst).not.toHaveBeenCalled();
189
+ });
190
+
191
+ it("按 createdAt 分别取最新与最早作为前后邻居", async () => {
192
+ M.story.findUnique.mockResolvedValue({ id: STORY_ID, projectId: PROJECT_ID, createdAt: T1 });
193
+ M.story.findFirst.mockImplementation(({ orderBy }: { orderBy: unknown }) => {
194
+ const desc = JSON.stringify(orderBy).includes('"desc"');
195
+ return Promise.resolve(desc ? { id: "st-prev" } : { id: "st-next" });
196
+ });
197
+
198
+ const res = await getStoryNeighborsFn({ data: { storyId: STORY_ID } });
199
+
200
+ expect(M.story.findUnique).toHaveBeenCalledWith({
201
+ where: { id: STORY_ID },
202
+ select: { id: true, projectId: true, createdAt: true },
203
+ });
204
+ expect(M.story.findFirst).toHaveBeenCalledTimes(2);
205
+ expect(M.story.findFirst).toHaveBeenCalledWith(
206
+ expect.objectContaining({
207
+ where: expect.objectContaining({ projectId: PROJECT_ID, archived: false, id: { not: STORY_ID } }),
208
+ orderBy: [{ createdAt: "desc" }, { id: "desc" }],
209
+ select: { id: true },
210
+ }),
211
+ );
212
+ expect(res).toEqual({ prevId: "st-prev", nextId: "st-next" });
213
+ });
214
+
215
+ it("查询到邻居为空时对应字段为 null", async () => {
216
+ M.story.findUnique.mockResolvedValue({ id: STORY_ID, projectId: PROJECT_ID, createdAt: T1 });
217
+ M.story.findFirst.mockResolvedValue(null);
218
+ await expect(getStoryNeighborsFn({ data: { storyId: STORY_ID } })).resolves.toEqual({
219
+ prevId: null,
220
+ nextId: null,
221
+ });
222
+ });
223
+
224
+ it("未登录拒绝且不查询", async () => {
225
+ M.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"));
226
+ await expect(getStoryNeighborsFn({ data: { storyId: STORY_ID } })).rejects.toThrow("UNAUTHORIZED");
227
+ expect(M.story.findUnique).not.toHaveBeenCalled();
228
+ });
229
+ });
230
+
231
+ describe("getStoryDetailFn", () => {
232
+ it("返回序列化后的需求详情", async () => {
233
+ M.story.findUnique.mockResolvedValue(
234
+ storyRow({ name: "需求详情", startDate: T1, labels: [{ label: { id: "lb-1", name: "标签", color: "#f00" } }] }),
235
+ );
236
+
237
+ const res = await getStoryDetailFn({ data: { storyId: STORY_ID } });
238
+
239
+ expect(M.story.findUnique).toHaveBeenCalledWith({
240
+ where: { id: STORY_ID },
241
+ select: STORY_LIST_SELECT,
242
+ });
243
+ expect(res).toMatchObject({
244
+ id: STORY_ID,
245
+ name: "需求详情",
246
+ state: "backlog",
247
+ priority: "none",
248
+ startDate: T1.toISOString(),
249
+ targetDate: null,
250
+ parent: null,
251
+ assignee: null,
252
+ labels: [{ id: "lb-1", name: "标签", color: "#f00" }],
253
+ });
254
+ });
255
+
256
+ it("需求不存在时报错", async () => {
257
+ M.story.findUnique.mockResolvedValue(null);
258
+ await expect(getStoryDetailFn({ data: { storyId: "missing" } })).rejects.toThrow("需求不存在");
259
+ });
260
+
261
+ it("未登录拒绝且不查询详情", async () => {
262
+ M.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"));
263
+ await expect(getStoryDetailFn({ data: { storyId: STORY_ID } })).rejects.toThrow("UNAUTHORIZED");
264
+ expect(M.story.findUnique).not.toHaveBeenCalled();
265
+ });
266
+ });
@@ -0,0 +1,227 @@
1
+ // SPDX-License-Identifier: AGPL-3.0-or-later
2
+ // AllBlue - 理想之海
3
+ // Copyright (C) 2026 AllBlue Contributors
4
+ //
5
+ // This program is free software: you can redistribute it and/or modify
6
+ // it under the terms of the GNU Affero General Public License as published by
7
+ // the Free Software Foundation, either version 3 of the License, or
8
+ // (at your option) any later version.
9
+ //
10
+ // This program is distributed in the hope that it will be useful,
11
+ // but WITHOUT ANY WARRANTY; without even the implied warranty of
12
+ // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13
+ // GNU Affero General Public License for more details.
14
+ //
15
+ // You should have received a copy of the GNU Affero General Public License
16
+ // along with this program. If not, see <https://www.gnu.org/licenses/>.
17
+
18
+
19
+ // story-crud 衍生域覆盖补全:listUsersBriefFn / listLabelsFn / createLabelFn。
20
+ // 关键断言:用户简要列表按团队范围过滤(断言 where teamId);标签颜色校验与去重;
21
+ // 未登录拒绝且零资源查询。mock 骨架同 workspace-kb-idor.test.ts 样板。
22
+ import { beforeEach, describe, expect, it, vi } from "vitest";
23
+
24
+ vi.mock("@tanstack/react-start", () => ({
25
+ createServerFn: (_config: unknown) => {
26
+ const api: any = {
27
+ _validator: undefined,
28
+ validator(schema: any) {
29
+ this._validator = schema;
30
+ return this;
31
+ },
32
+ handler(fn: Function) {
33
+ return async (args: any) => {
34
+ let data = args?.data;
35
+ if (this._validator && data !== undefined) {
36
+ data = this._validator.parse ? this._validator.parse(data) : data;
37
+ }
38
+ return fn({ data });
39
+ };
40
+ },
41
+ };
42
+ return api;
43
+ },
44
+ }));
45
+ vi.mock("@tanstack/react-start/server", () => ({ getRequest: () => ({}) }));
46
+
47
+ const M = vi.hoisted(() => {
48
+ const f = () => vi.fn();
49
+ return {
50
+ requireAuth: f(),
51
+ project: { findUnique: f() },
52
+ projectMember: { findMany: f() },
53
+ teamMembership: { findMany: f() },
54
+ user: { findMany: f() },
55
+ label: { findMany: f() },
56
+ upsertLabel: f(),
57
+ };
58
+ });
59
+
60
+ vi.mock("@allbluecn/database", () => ({
61
+ prisma: {
62
+ project: M.project,
63
+ projectMember: M.projectMember,
64
+ teamMembership: M.teamMembership,
65
+ user: M.user,
66
+ label: M.label,
67
+ },
68
+ Prisma: {},
69
+ }));
70
+ vi.mock("@/server/auth-helpers", () => ({ requireAuth: M.requireAuth }));
71
+ vi.mock("../story/story-crud/label-upsert", () => ({ upsertLabel: M.upsertLabel }));
72
+
73
+ import {
74
+ createLabelFn,
75
+ listLabelsFn,
76
+ listUsersBriefFn,
77
+ } from "../story/story-crud/labels";
78
+ import { USER_BRIEF_SELECT } from "../story/types";
79
+
80
+ const USER = "u-current";
81
+ const OWNER = "u-owner";
82
+ const PROJECT_ID = "pr-1";
83
+
84
+ const userRow = (id: string, username: string) => ({
85
+ id,
86
+ username,
87
+ email: `${username}@example.com`,
88
+ avatarConfig: null,
89
+ bgShape: null,
90
+ bgColor: null,
91
+ });
92
+
93
+ beforeEach(() => {
94
+ vi.clearAllMocks();
95
+ M.requireAuth.mockResolvedValue({ user: { id: USER } });
96
+ M.user.findMany.mockResolvedValue([]);
97
+ });
98
+
99
+ describe("listUsersBriefFn", () => {
100
+ it("传 projectId 时只返回项目成员(含项目 owner)", async () => {
101
+ M.project.findUnique.mockResolvedValue({ ownerId: OWNER, workspaceId: "ws-1" });
102
+ M.projectMember.findMany.mockResolvedValue([{ userId: "u-m1" }]);
103
+ M.user.findMany.mockResolvedValue([userRow("u-m1", "member"), userRow(OWNER, "owner")]);
104
+
105
+ const res = await listUsersBriefFn({ data: { projectId: PROJECT_ID } });
106
+
107
+ expect(M.project.findUnique).toHaveBeenCalledWith({
108
+ where: { id: PROJECT_ID },
109
+ select: { ownerId: true, workspaceId: true },
110
+ });
111
+ expect(M.projectMember.findMany).toHaveBeenCalledWith({
112
+ where: { projectId: PROJECT_ID },
113
+ select: { userId: true },
114
+ });
115
+ expect(M.teamMembership.findMany).not.toHaveBeenCalled();
116
+ expect(M.user.findMany).toHaveBeenCalledWith({
117
+ where: { id: { in: ["u-m1", OWNER] }, status: "ACTIVE" },
118
+ orderBy: { username: "asc" },
119
+ select: USER_BRIEF_SELECT,
120
+ });
121
+ expect(res).toEqual([userRow("u-m1", "member"), userRow(OWNER, "owner")]);
122
+ });
123
+
124
+ it("项目不存在时返回空数组且不查询用户", async () => {
125
+ M.project.findUnique.mockResolvedValue(null);
126
+ await expect(listUsersBriefFn({ data: { projectId: "missing" } })).resolves.toEqual([]);
127
+ expect(M.projectMember.findMany).not.toHaveBeenCalled();
128
+ expect(M.user.findMany).not.toHaveBeenCalled();
129
+ });
130
+
131
+ it("未传 projectId 时按当前用户所属团队返回成员(含自己)", async () => {
132
+ M.teamMembership.findMany.mockResolvedValue([{ memberId: "u-m2" }]);
133
+ M.user.findMany.mockResolvedValue([userRow(USER, "self"), userRow("u-m2", "teammate")]);
134
+
135
+ const res = await listUsersBriefFn({ data: {} });
136
+
137
+ expect(M.teamMembership.findMany).toHaveBeenCalledWith({
138
+ where: { ownerId: USER },
139
+ select: { memberId: true },
140
+ });
141
+ expect(M.user.findMany).toHaveBeenCalledWith({
142
+ where: { id: { in: ["u-m2", USER] }, status: "ACTIVE" },
143
+ orderBy: { username: "asc" },
144
+ select: USER_BRIEF_SELECT,
145
+ });
146
+ expect(M.project.findUnique).not.toHaveBeenCalled();
147
+ expect(res.map((u) => u.username)).toContain("self");
148
+ expect(res.map((u) => u.avatarConfig)).toEqual([null, null]);
149
+ });
150
+
151
+ it("当前用户无任何团队成员关系时返回空数组", async () => {
152
+ M.teamMembership.findMany.mockResolvedValue([]);
153
+ await expect(listUsersBriefFn({ data: {} })).resolves.toEqual([]);
154
+ expect(M.user.findMany).not.toHaveBeenCalled();
155
+ });
156
+
157
+ it("未登录拒绝且不查询任何资源", async () => {
158
+ M.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"));
159
+ await expect(listUsersBriefFn({ data: {} })).rejects.toThrow("UNAUTHORIZED");
160
+ expect(M.teamMembership.findMany).not.toHaveBeenCalled();
161
+ expect(M.user.findMany).not.toHaveBeenCalled();
162
+ });
163
+ });
164
+
165
+ describe("listLabelsFn", () => {
166
+ it("按名称升序返回全部标签", async () => {
167
+ M.label.findMany.mockResolvedValue([
168
+ { id: "lb-2", name: "Beta", color: "#ff0000" },
169
+ { id: "lb-1", name: "Alpha", color: null },
170
+ ]);
171
+
172
+ const res = await listLabelsFn({ data: undefined });
173
+
174
+ expect(M.label.findMany).toHaveBeenCalledWith({
175
+ orderBy: { name: "asc" },
176
+ select: { id: true, name: true, color: true },
177
+ });
178
+ expect(res).toEqual([
179
+ { id: "lb-2", name: "Beta", color: "#ff0000" },
180
+ { id: "lb-1", name: "Alpha", color: null },
181
+ ]);
182
+ });
183
+
184
+ it("无标签时返回空数组", async () => {
185
+ M.label.findMany.mockResolvedValue([]);
186
+ await expect(listLabelsFn({ data: undefined })).resolves.toEqual([]);
187
+ });
188
+
189
+ it("未登录拒绝且不查询", async () => {
190
+ M.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"));
191
+ await expect(listLabelsFn({ data: undefined })).rejects.toThrow("UNAUTHORIZED");
192
+ expect(M.label.findMany).not.toHaveBeenCalled();
193
+ });
194
+ });
195
+
196
+ describe("createLabelFn", () => {
197
+ it("透传名称与颜色给 upsertLabel 并使用当前用户", async () => {
198
+ M.upsertLabel.mockResolvedValue({ id: "lb-9", name: "新标签", color: "#00ff00" });
199
+
200
+ const res = await createLabelFn({ data: { name: "新标签", color: "#00ff00" } });
201
+
202
+ expect(M.upsertLabel).toHaveBeenCalledWith("新标签", USER, "#00ff00");
203
+ expect(res).toEqual({ id: "lb-9", name: "新标签", color: "#00ff00" });
204
+ });
205
+
206
+ it("未传颜色时以 undefined 透传", async () => {
207
+ M.upsertLabel.mockResolvedValue({ id: "lb-9", name: "B", color: null });
208
+ await createLabelFn({ data: { name: "B" } });
209
+ expect(M.upsertLabel).toHaveBeenCalledWith("B", USER, undefined);
210
+ });
211
+
212
+ it("非法颜色格式被 validator 拒绝(不写库)", async () => {
213
+ await expect(createLabelFn({ data: { name: "X", color: "red" } })).rejects.toThrow();
214
+ expect(M.upsertLabel).not.toHaveBeenCalled();
215
+ });
216
+
217
+ it("空名称被 validator 拒绝", async () => {
218
+ await expect(createLabelFn({ data: { name: "" } })).rejects.toThrow();
219
+ expect(M.upsertLabel).not.toHaveBeenCalled();
220
+ });
221
+
222
+ it("未登录拒绝且不写库", async () => {
223
+ M.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"));
224
+ await expect(createLabelFn({ data: { name: "X" } })).rejects.toThrow("UNAUTHORIZED");
225
+ expect(M.upsertLabel).not.toHaveBeenCalled();
226
+ });
227
+ });