@allbluecn/web-app 0.12.0 → 0.12.2

package/src/server/ai-gateway/__tests__/provider-adapter.test.ts

@@ -0,0 +1,164 @@
+// @vitest-environment node
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// createProviderAdapter 的 mistral / bedrock 分支。两个 factory 的 apiKey 都是
+// 位置参数（第 2 个形参），不是 config 字段——断言里显式校验这一点，防止误改成
+// config.apiKey 后静默丢失密钥。
+
+import { describe, expect, it, vi } from "vitest"
+
+type AdapterConfig = { baseURL?: string }
+
+const mistralMock = vi.hoisted(() =>
+  vi.fn(
+    (_model: unknown, _apiKey: unknown, _config?: unknown) => ({
+      __adapter: "mistral",
+    }),
+  ),
+)
+const bedrockMock = vi.hoisted(() =>
+  vi.fn(
+    (_model: unknown, _apiKey: unknown, _config?: unknown) => ({
+      __adapter: "bedrock",
+    }),
+  ),
+)
+
+vi.mock("@tanstack/ai-mistral", () => ({ createMistralText: mistralMock }))
+vi.mock("@tanstack/ai-bedrock", () => ({ createBedrockText: bedrockMock }))
+vi.mock("../env-key", () => ({
+  envApiKey: vi.fn(() => undefined),
+  ENV_OPENAI_API_KEY: "OPENAI_API_KEY",
+  ENV_OPENROUTER_API_KEY: "OPENROUTER_API_KEY",
+}))
+vi.mock("@allbluecn/database", () => ({
+  prisma: {
+    aiProvider: { findUnique: vi.fn() },
+    aiProviderConfig: { findFirst: vi.fn() },
+    user: { findUnique: vi.fn() },
+  },
+}))
+
+import { prisma } from "@allbluecn/database"
+import { createProviderAdapter } from "../adapter"
+
+const mockFindUnique = vi.mocked(prisma.aiProvider.findUnique)
+const mistralTextMock = vi.mocked(mistralMock)
+const bedrockTextMock = vi.mocked(bedrockMock)
+
+const mistralCalls = () =>
+  mistralTextMock.mock.calls.map(
+    ([model, apiKey, config]) =>
+      [model, apiKey, (config ?? {}) as AdapterConfig] as const,
+  )
+const bedrockCalls = () =>
+  bedrockTextMock.mock.calls.map(
+    ([model, apiKey, config]) =>
+      [model, apiKey, (config ?? {}) as AdapterConfig] as const,
+  )
+
+const providerRow = (kind: string) => ({
+  adapterKind: kind,
+  defaultBaseUrl: kind === "mistral" ? "https://api.mistral.ai/v1" : null,
+  isLocal: false,
+  models: [],
+})
+
+describe("createProviderAdapter mistral 分支", () => {
+  it("adapterKind=mistral 走 createMistralText，apiKey 是位置参数、baseURL 进 config", async () => {
+    mockFindUnique.mockResolvedValue(providerRow("mistral") as never)
+
+    const adapter = await createProviderAdapter("mistral", {
+      model: "mistral-large-latest",
+      apiKey: "msl-key",
+    })
+
+    expect(mistralTextMock).toHaveBeenCalledTimes(1)
+    const [model, apiKey, config] = mistralCalls()[0]!
+    expect(model).toBe("mistral-large-latest")
+    expect(apiKey).toBe("msl-key")
+    expect(config).not.toHaveProperty("apiKey")
+    expect(config.baseURL).toBe("https://api.mistral.ai/v1")
+    expect(adapter).toEqual({ __adapter: "mistral" })
+    expect(bedrockTextMock).not.toHaveBeenCalled()
+  })
+
+  it("未传 apiKey 时位置参数降级为空串，不传 undefined 也不抛错", async () => {
+    mockFindUnique.mockResolvedValue(providerRow("mistral") as never)
+
+    await createProviderAdapter("mistral", {
+      model: "mistral-small-latest",
+      apiKey: null,
+    })
+
+    const [model, apiKey, config] = mistralCalls()[0]!
+    expect(model).toBe("mistral-small-latest")
+    expect(apiKey).toBe("")
+    expect(config.baseURL).toBe("https://api.mistral.ai/v1")
+  })
+})
+
+describe("createProviderAdapter bedrock 分支", () => {
+  it("adapterKind=bedrock 走 createBedrockText，apiKey 是位置参数而非 config 字段", async () => {
+    mockFindUnique.mockResolvedValue(providerRow("bedrock") as never)
+
+    const adapter = await createProviderAdapter("bedrock", {
+      model: "us.amazon.nova-pro-v1:0",
+      apiKey: "AKIA-KEY",
+    })
+
+    expect(bedrockTextMock).toHaveBeenCalledTimes(1)
+    const [model, apiKey, config] = bedrockCalls()[0]!
+    expect(model).toBe("us.amazon.nova-pro-v1:0")
+    expect(apiKey).toBe("AKIA-KEY")
+    expect(config).not.toHaveProperty("apiKey")
+    expect(config).not.toHaveProperty("baseURL")
+    expect(adapter).toEqual({ __adapter: "bedrock" })
+    expect(mistralTextMock).not.toHaveBeenCalled()
+  })
+
+  it("未传 apiKey 时位置参数降级为空串（adapter 内部回落 env / SigV4），不抛错", async () => {
+    mockFindUnique.mockResolvedValue(providerRow("bedrock") as never)
+
+    await createProviderAdapter("bedrock", {
+      model: "us.amazon.nova-pro-v1:0",
+    })
+
+    const [model, apiKey] = bedrockCalls()[0]!
+    expect(model).toBe("us.amazon.nova-pro-v1:0")
+    expect(apiKey).toBe("")
+  })
+})
+
+describe("createProviderAdapter 兜底分支", () => {
+  it("未知 adapterKind 仍抛「不支持的 adapter 类型」", async () => {
+    mockFindUnique.mockResolvedValue(providerRow("notion-ai") as never)
+
+    await expect(
+      createProviderAdapter("notion-ai", { model: "anything" }),
+    ).rejects.toThrow("不支持的 adapter 类型：notion-ai")
+  })
+
+  it("provider 不存在时抛「未知的 AI 服务商」", async () => {
+    mockFindUnique.mockResolvedValue(null)
+
+    await expect(
+      createProviderAdapter("ghost", { model: "anything" }),
+    ).rejects.toThrow("未知的 AI 服务商：ghost")
+  })
+})

package/src/server/ai-gateway/__tests__/run-store-durable.test.ts

@@ -0,0 +1,151 @@
+// @vitest-environment node
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
+import { prisma } from "@allbluecn/database";
+import { runDurableRunFieldsConformance } from "@tanstack/ai-sandbox/testkit";
+import { chatRunStore } from "../persistence/run-store";
+
+/**
+ * ChatRun 的 durable 四列（sandboxKey / detachedSince / cancelRequested /
+ * driverEpoch）走真库验证。
+ *
+ * 这四个字段是 detach-on-disconnect、takeover、reaper 的地基：chat-only 应用
+ * 永远不写它们，`@tanstack/ai-persistence` 的 runPersistenceConformance 也就
+ * 永远发现不了我们悄悄丢掉其中一列。丢 `detachedSince` 的表象是 run 永久挂在
+ * reclaimable 列表；丢 `driverEpoch` 的表象是 takeover 无法 fence 掉旧的宿主。
+ * 官方 `runDurableRunFieldsConformance` 直接锁 `update`/`get` 往返对。
+ *
+ * 测试用固定 id（`fc-1` / `fc-t`，官方套件写死），靠 beforeEach 级联清理隔离：
+ * ChatThread → ChatRun → ChatInterrupt 都是 Cascade，删 thread 一次即可。
+ *
+ *   DATABASE_URL=postgresql://allblue:allblue@localhost:5432/allblue \
+ *     npx vitest run --project unit src/server/ai-gateway/__tests__/run-store-durable.test.ts
+ */
+
+const OWNER = "run-store-durable-owner";
+const RUN_ID = "fc-1";
+const THREAD_ID = "fc-t";
+
+describe.skipIf(
+  !process.env.DATABASE_URL || process.env.DATABASE_PROVIDER === "sqlite",
+)("chatRunStore 真库契约（durable 四列）", () => {
+    beforeAll(async () => {
+      // ChatThread.userId 是 FK，归属校验需要的 owner 必须是真用户行。
+      // 固定 id + upsert 幂等，配合 afterAll 清理，中断的测试轮次也能自愈。
+      await prisma.user.upsert({
+        where: { id: OWNER },
+        create: {
+          id: OWNER,
+          email: "run-store-durable@allblue.test",
+          username: "run_store_durable_owner",
+          password: "$2a$12$dummyhashplaceholderdummyhashplaceholderdummyhashplaceholder",
+          status: "ACTIVE",
+        },
+        update: {},
+      });
+    });
+
+    afterAll(async () => {
+      // ChatThread → ChatRun → ChatInterrupt 全是 Cascade，删 thread 即可连带清空
+      await prisma.chatThread.deleteMany({ where: { userId: OWNER } }).catch(() => {});
+      await prisma.user.deleteMany({ where: { id: OWNER } }).catch(() => {});
+    });
+
+    beforeEach(async () => {
+      await prisma.chatThread.deleteMany({ where: { id: THREAD_ID } });
+    });
+
+    runDurableRunFieldsConformance(
+      "chat_runs durable fields",
+      () => chatRunStore(OWNER),
+    );
+
+    it("cancel 写入序列：cancelRequested 幂等、detachedSince 落库、driverEpoch 从 null 起单调递增", async () => {
+      const store = chatRunStore(OWNER);
+      await store.createOrResume({
+        runId: RUN_ID,
+        threadId: THREAD_ID,
+        startedAt: 1000,
+      });
+
+      const before = await store.get(RUN_ID);
+      expect(before?.cancelRequested).toBeUndefined();
+      expect(before?.detachedSince).toBeUndefined();
+      expect(before?.driverEpoch).toBeUndefined();
+
+      // 与 cancelRunFn 同一写入序列：read 当前 epoch → +1，两次 cancel 不丢增量
+      await store.update(RUN_ID, {
+        cancelRequested: true,
+        detachedSince: Date.now(),
+        driverEpoch: (before?.driverEpoch ?? 0) + 1,
+      });
+      const afterFirst = await store.get(RUN_ID);
+      expect(afterFirst).toMatchObject({ cancelRequested: true, driverEpoch: 1 });
+      expect(afterFirst?.detachedSince).toBeTypeOf("number");
+
+      await store.update(RUN_ID, {
+        cancelRequested: true,
+        detachedSince: Date.now(),
+        driverEpoch: (afterFirst?.driverEpoch ?? 0) + 1,
+      });
+      const afterSecond = await store.get(RUN_ID);
+      expect(afterSecond).toMatchObject({ cancelRequested: true, driverEpoch: 2 });
+    });
+
+    it("listReclaimable 按 detachedSince 到期过滤（reaper 的候选集）", async () => {
+      const store = chatRunStore(OWNER);
+      await store.createOrResume({
+        runId: RUN_ID,
+        threadId: THREAD_ID,
+        startedAt: 1000,
+      });
+
+      const stale = 1000;
+      await store.update(RUN_ID, { detachedSince: stale });
+
+      // 未到期：cutoff 晚于 detachedSince，不入选
+      expect(
+        await store.listReclaimable?.({ now: stale + 1000, ttlMs: 6000 }),
+      ).toEqual([]);
+
+      // 到期：detachedSince <= now - ttlMs（含等号），入选
+      const reclaimed = await store.listReclaimable?.({
+        now: stale + 6000,
+        ttlMs: 6000,
+      });
+      expect(reclaimed).toHaveLength(1);
+      expect(reclaimed![0]).toMatchObject({ runId: RUN_ID, detachedSince: stale });
+    });
+
+    it("listReclaimable 全局变体跨用户回收（reaper 无 userId 闭包）", async () => {
+      const owner = chatRunStore(OWNER);
+      await owner.createOrResume({
+        runId: RUN_ID,
+        threadId: THREAD_ID,
+        startedAt: 1000,
+      });
+      await owner.update(RUN_ID, { detachedSince: 1000 });
+
+      const globalReaper = chatRunStore();
+      expect(await globalReaper.listReclaimable?.({ now: 7000, ttlMs: 6000 })).toHaveLength(1);
+      // 归属过滤仍在的闭包看不到别人的 detached run，全局变体必须能看到
+      expect(await chatRunStore("some-other-user").listReclaimable?.({ now: 7000, ttlMs: 6000 })).toEqual([]);
+    });
+  },
+);

package/src/server/ai-gateway/__tests__/run-store.test.ts

@@ -38,6 +38,8 @@ vi.mock("@tanstack/ai", () => ({
 }));
 
 import { prisma } from "@allbluecn/database";
+import { runDurableRunFieldsConformance } from "@tanstack/ai-sandbox/testkit";
+import { chatRunStore } from "../persistence/run-store";
 
 const mockPrisma = prisma as unknown as {
   chatThread: {
@@ -427,4 +429,92 @@ describe("runStore", () => {
     // 越权失败必须零 run 写入——不留下跨用户关联的记录
     expect(mockPrisma.chatRun.upsert).not.toHaveBeenCalled();
   });
+
+  describe("chatRunStore() 全局变体（reaper / cancel 跨用户驱动用）", () => {
+    it("createOrResume 对已存在的 run 幂等 resume（reaper 的 pipeToRunLog 在 drive 开头无条件调用）", async () => {
+      mockPrisma.chatRun.findUnique.mockResolvedValue({
+        id: "run1",
+        threadId: "thread1",
+        status: "running",
+        startedAt: new Date(1000),
+        finishedAt: null,
+        error: null,
+        usage: null,
+        detachedSince: null,
+        sandboxKey: null,
+        cancelRequested: null,
+        driverEpoch: null,
+      });
+
+      const store = (await import("../persistence/run-store")).chatRunStore();
+      const record = await store.createOrResume({
+        runId: "run1",
+        threadId: "thread1",
+        startedAt: 9999,
+      });
+
+      expect(record).toMatchObject({ runId: "run1", threadId: "thread1", status: "running" });
+      // resume 是纯读：不碰 thread 表，也不做 upsert（不改 startedAt/status）
+      expect(mockPrisma.chatThread.upsert).not.toHaveBeenCalled();
+      expect(mockPrisma.chatRun.upsert).not.toHaveBeenCalled();
+    });
+
+    it("createOrResume 对不存在的 run 仍抛错：ChatRun.userId 必填，无归属主体可填", async () => {
+      const store = (await import("../persistence/run-store")).chatRunStore();
+
+      await expect(
+        store.createOrResume({ runId: "run1", threadId: "thread1", startedAt: 1000 }),
+      ).rejects.toThrow(/cannot create runs/);
+
+      expect(mockPrisma.chatThread.upsert).not.toHaveBeenCalled();
+      expect(mockPrisma.chatRun.upsert).not.toHaveBeenCalled();
+    });
+
+    it("findActiveRun / listByThread / listReclaimable 的 where 不含 userId", async () => {
+      const store = (await import("../persistence/run-store")).chatRunStore();
+
+      await store.findActiveRun("thread1");
+      await store.listByThread?.("thread1");
+      await store.listReclaimable?.({ now: 10000, ttlMs: 6000 });
+
+      expect(mockPrisma.chatRun.findFirst).toHaveBeenCalledWith({
+        where: { threadId: "thread1", status: { in: ["running", "interrupted"] } },
+        orderBy: { startedAt: "desc" },
+      });
+      expect(mockPrisma.chatRun.findMany).toHaveBeenNthCalledWith(1, {
+        where: { threadId: "thread1" },
+        orderBy: { startedAt: "asc" },
+      });
+      expect(mockPrisma.chatRun.findMany).toHaveBeenNthCalledWith(2, {
+        where: { status: "running", detachedSince: { lte: expect.any(Date) } },
+      });
+    });
+
+    it("update / get 不带 userId——归属校验由调用方在写前完成", async () => {
+      mockPrisma.chatRun.findUnique.mockResolvedValue({
+        id: "run1",
+        threadId: "thread1",
+        userId: "other-user",
+        status: "running",
+        startedAt: new Date(1000),
+        finishedAt: null,
+        detachedSince: null,
+        usage: null,
+        error: null,
+      });
+      mockPrisma.chatRun.update.mockResolvedValue({} as any);
+
+      const store = (await import("../persistence/run-store")).chatRunStore();
+      await store.update("run1", { cancelRequested: true });
+      expect(mockPrisma.chatRun.update).toHaveBeenCalledWith({
+        where: { id: "run1" },
+        data: { cancelRequested: true },
+      });
+
+      expect(await store.get("run1")).toMatchObject({
+        runId: "run1",
+        status: "running",
+      });
+    });
+  });
 });

package/src/server/ai-gateway/__tests__/runtime.test.ts

@@ -31,7 +31,7 @@ describe("gateway runtime", () => {
   const fullPorts = {
     keyCipher: { decrypt: (k: string) => k },
     accessPolicy: { requireFeature: async () => undefined },
-    auth: { getSession: async () => null },
+    auth: { getSession: async () => null, invalidateProfileCache: () => {} },
     remoteAuth: { read: async () => null },
     webSearch: { search: async () => ({ results: [] }) },
     infra: {