@allbluecn/web-app 0.12.0 → 0.12.3

package/src/server/serverFns/harness/github-workspace.ts

@@ -0,0 +1,202 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from "@tanstack/react-start"
+import { getRequest } from "@tanstack/react-start/server"
+import { z } from "zod"
+import { getCurrentSession } from "@/lib/session"
+import { encryptApiKey, decryptApiKey } from "@/plugins/core/server/api-key-cipher"
+
+const githubRepoSchema = z.object({
+  owner: z.string().min(1),
+  repo: z.string().min(1),
+})
+
+const githubBranchSchema = z.object({
+  owner: z.string().min(1),
+  repo: z.string().min(1),
+})
+
+/**
+ * 获取当前用户的 GitHub 仓库列表（仅限用户有访问权限的仓库）。
+ *
+ * Token 来源：
+ * 1. 优先读 AiProviderConfig（providerId='github'）中加密存储的 token
+ * 2. 其次读 Account 表（provider='github'）的 access_token（session 级，不持久化）
+ * 3. 都不存在时返回空数组（未连接 GitHub）
+ */
+export const listGithubReposFn = createServerFn({ method: "GET" })
+  .handler(async () => {
+    const { prisma } = await import('@allbluecn/database')
+    const request = getRequest()
+    const session = await getCurrentSession(request)
+    if (!session?.user?.id) throw new Error("Unauthorized")
+
+    const userId = session.user.id
+
+    // 尝试从 AiProviderConfig 读取持久化 token
+    const providerConfig = await prisma.aiProviderConfig.findFirst({
+      where: { userId, providerId: "github" },
+      select: { apiKey: true },
+    })
+
+    let token: string | null = null
+    if (providerConfig?.apiKey) {
+      try {
+        token = decryptApiKey(providerConfig.apiKey)
+      } catch {
+        token = null
+      }
+    }
+
+    // 兜底：从 Account 表读 session 级 token（未显式保存）
+    if (!token) {
+      const account = await prisma.account.findFirst({
+        where: { userId, provider: "github" },
+        select: { access_token: true },
+      })
+      token = account?.access_token ?? null
+    }
+
+    if (!token) return { repos: [] }
+
+    try {
+      const response = await fetch("https://api.github.com/user/repos?per_page=100&sort=updated", {
+        headers: {
+          Authorization: `Bearer ${token}`,
+          "User-Agent": "AllBlue",
+          Accept: "application/vnd.github.v3+json",
+        },
+      })
+
+      if (!response.ok) return { repos: [] }
+
+      const repos = (await response.json()) as Array<Record<string, unknown>>
+      return {
+        repos: repos
+          .filter((r) => typeof r.id === "number")
+          .map((r) => ({
+            id: r.id as number,
+            owner: (r.owner as Record<string, unknown>)?.login as string,
+            name: r.name as string,
+            full_name: r.full_name as string,
+            private: r.private as boolean,
+            default_branch: r.default_branch as string,
+          })),
+      }
+    } catch {
+      return { repos: [] }
+    }
+  })
+
+/**
+ * 获取指定仓库的分支列表。
+ */
+export const listGithubBranchesFn = createServerFn({ method: "GET" })
+  .validator(githubRepoSchema)
+  .handler(async ({ data: { owner, repo } }) => {
+    const { prisma } = await import('@allbluecn/database')
+    const request = getRequest()
+    const session = await getCurrentSession(request)
+    if (!session?.user?.id) throw new Error("Unauthorized")
+
+    const userId = session.user.id
+
+    const providerConfig = await prisma.aiProviderConfig.findFirst({
+      where: { userId, providerId: "github" },
+      select: { apiKey: true },
+    })
+
+    let token: string | null = null
+    if (providerConfig?.apiKey) {
+      try {
+        token = decryptApiKey(providerConfig.apiKey)
+      } catch {
+        token = null
+      }
+    }
+
+    if (!token) return { branches: [] }
+
+    try {
+      const response = await fetch(
+        `https://api.github.com/repos/${owner}/${repo}/branches?per_page=100`,
+        {
+          headers: {
+            Authorization: `Bearer ${token}`,
+            "User-Agent": "AllBlue",
+            Accept: "application/vnd.github.v3+json",
+          },
+        },
+      )
+
+      if (!response.ok) return { branches: [] }
+
+      const branches = (await response.json()) as Array<Record<string, unknown>>
+      return {
+        branches: branches.map((b) => ({
+          name: b.name as string,
+          protected: b.protected as boolean,
+        })),
+      }
+    } catch {
+      return { branches: [] }
+    }
+  })
+
+/**
+ * 保存 GitHub token 到 AiProviderConfig（持久化模式）。
+ * BYOK 优先策略：默认只存 session 级 Account，用户显式「保存到服务器」才落库加密。
+ */
+export const saveGithubTokenFn = createServerFn({ method: "POST" })
+  .validator(z.object({ token: z.string().min(1) }))
+  .handler(async ({ data: { token } }) => {
+    const { prisma } = await import('@allbluecn/database')
+    const request = getRequest()
+    const session = await getCurrentSession(request)
+    if (!session?.user?.id) throw new Error("Unauthorized")
+
+    const encrypted = encryptApiKey(token)
+    await prisma.aiProviderConfig.upsert({
+      where: { userId_providerId: { userId: session.user.id, providerId: "github" } },
+      update: { apiKey: encrypted },
+      create: {
+        userId: session.user.id,
+        providerId: "github",
+        apiKey: encrypted,
+      },
+    })
+
+    return { success: true }
+  })
+
+/**
+ * 清除保存的 GitHub token。
+ */
+export const clearGithubTokenFn = createServerFn({ method: "POST" })
+  .handler(async () => {
+    const { prisma } = await import('@allbluecn/database')
+    const request = getRequest()
+    const session = await getCurrentSession(request)
+    if (!session?.user?.id) throw new Error("Unauthorized")
+
+    await prisma.aiProviderConfig.deleteMany({
+      where: { providerId: "github", userId: session.user.id },
+    })
+
+    return { success: true }
+  })

package/src/server/serverFns/harness/media.ts

@@ -0,0 +1,300 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from "@tanstack/react-start"
+import { getRequest } from "@tanstack/react-start/server"
+import { prisma } from "@allbluecn/database"
+import { z } from "zod"
+import { generateImageForUser, generateVideoForUser, pollVideoForUser, generateSpeechForUser, generateTranscriptionForUser, generatePrototypeForUser } from "@/server/ai-gateway/media"
+import { resolveAiConfig } from "@/server/ai-gateway/adapter"
+import { requireAuth } from "@/server/auth-helpers"
+import { requireFeature } from "@/server/entitlements"
+import { requireResource } from "@/server/resources"
+
+/**
+ * 媒体生成 serverFn（P4c 媒体生成转正）。
+ *
+ * 每个 serverFn 第一行 `await requireFeature(request, 'mediaGeneration')` +
+ * `await requireResource(request, 'mediaGenerationsMonthly')` 配额扣减。
+ * desktop BYOK 场景豁免（同沙箱豁免模式）。
+ */
+
+const GenerateImageSchema = z.object({
+  prompt: z.string().min(1),
+  numberOfImages: z.number().optional(),
+  size: z.string().optional(),
+  threadId: z.string(),
+})
+
+export const generateImageFn = createServerFn({ method: "POST" })
+  .validator(GenerateImageSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireFeature(request, "mediaGeneration")
+    await requireResource(request, "mediaGenerationsMonthly")
+
+    const session = await requireAuth(request)
+    if (!session?.user?.id) {
+      return { error: "Unauthorized" }
+    }
+    const userId = session.user.id
+    const thread = await prisma.chatThread.findFirst({
+      where: { id: data.threadId, userId }, select: { id: true },
+    })
+    if (!thread) throw new Error("Thread not found")
+
+    // 解析用户 AI 配置
+    const aiConfig = await resolveAiConfig(userId)
+    if (!aiConfig) {
+      return { error: "AI key not configured" }
+    }
+
+    const result = await generateImageForUser({
+      userId,
+      threadId: data.threadId,
+      prompt: data.prompt,
+      numberOfImages: data.numberOfImages,
+      size: data.size,
+      adapterKind: aiConfig.provider,
+      apiKey: aiConfig.apiKey,
+      model: aiConfig.model,
+      ...(aiConfig.baseUrl ? { baseURL: aiConfig.baseUrl } : {}),
+    })
+
+    return {
+      runId: result.runId,
+      artifacts: result.artifacts,
+      images: result.images.map((img) => ({
+        url: img.url,
+        b64Json: img.b64Json,
+      })),
+    }
+  })
+
+const GenerateVideoSchema = z.object({
+  prompt: z.string().min(1),
+  duration: z.number().optional(),
+  size: z.string().optional(),
+  threadId: z.string(),
+})
+
+export const startVideoFn = createServerFn({ method: "POST" })
+  .validator(GenerateVideoSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireFeature(request, "mediaGeneration")
+    await requireResource(request, "mediaGenerationsMonthly")
+
+    const session = await requireAuth(request)
+    if (!session?.user?.id) {
+      return { error: "Unauthorized" }
+    }
+    const userId = session.user.id
+    const thread = await prisma.chatThread.findFirst({
+      where: { id: data.threadId, userId }, select: { id: true },
+    })
+    if (!thread) throw new Error("Thread not found")
+
+    const aiConfig = await resolveAiConfig(userId)
+    if (!aiConfig) {
+      return { error: "AI key not configured" }
+    }
+
+    const result = await generateVideoForUser({
+      userId,
+      threadId: data.threadId,
+      prompt: data.prompt,
+      duration: data.duration,
+      size: data.size,
+      adapterKind: aiConfig.provider,
+      apiKey: aiConfig.apiKey,
+      model: aiConfig.model,
+      ...(aiConfig.baseUrl ? { baseURL: aiConfig.baseUrl } : {}),
+    })
+
+    return { jobId: result.jobId }
+  })
+
+const PollVideoSchema = z.object({
+  jobId: z.string(),
+  threadId: z.string(),
+})
+
+export const pollVideoFn = createServerFn({ method: "POST" })
+  .validator(PollVideoSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireFeature(request, "mediaGeneration")
+
+    const session = await requireAuth(request)
+    if (!session?.user?.id) {
+      return { error: "Unauthorized" }
+    }
+    const userId = session.user.id
+    const thread = await prisma.chatThread.findFirst({
+      where: { id: data.threadId, userId }, select: { id: true },
+    })
+    if (!thread) throw new Error("Thread not found")
+
+    const aiConfig = await resolveAiConfig(userId)
+    if (!aiConfig) {
+      return { error: "AI key not configured" }
+    }
+
+    const result = await pollVideoForUser({
+      userId,
+      threadId: data.threadId,
+      jobId: data.jobId,
+      adapterKind: aiConfig.provider,
+      apiKey: aiConfig.apiKey,
+      model: aiConfig.model,
+      ...(aiConfig.baseUrl ? { baseURL: aiConfig.baseUrl } : {}),
+    })
+
+    return {
+      status: result.status,
+      progress: result.progress,
+      url: result.url,
+      artifacts: result.artifacts,
+      error: result.error,
+    }
+  })
+
+const GenerateSpeechSchema = z.object({
+  text: z.string().min(1),
+  voice: z.string().optional(),
+  format: z.enum(["mp3", "opus", "aac", "flac", "wav", "pcm"]).optional(),
+  threadId: z.string(),
+})
+
+export const generateSpeechFn = createServerFn({ method: "POST" })
+  .validator(GenerateSpeechSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireFeature(request, "mediaGeneration")
+    await requireResource(request, "mediaGenerationsMonthly")
+
+    const session = await requireAuth(request)
+    if (!session?.user?.id) {
+      return { error: "Unauthorized" }
+    }
+    const userId = session.user.id
+    const thread = await prisma.chatThread.findFirst({
+      where: { id: data.threadId, userId }, select: { id: true },
+    })
+    if (!thread) throw new Error("Thread not found")
+
+    const aiConfig = await resolveAiConfig(userId)
+    if (!aiConfig) {
+      return { error: "AI key not configured" }
+    }
+
+    const result = await generateSpeechForUser({
+      userId,
+      threadId: data.threadId,
+      text: data.text,
+      voice: data.voice,
+      format: data.format,
+      adapterKind: aiConfig.provider,
+      apiKey: aiConfig.apiKey,
+      model: aiConfig.model,
+      ...(aiConfig.baseUrl ? { baseURL: aiConfig.baseUrl } : {}),
+    })
+
+    return {
+      artifacts: result.artifacts,
+      audio: result.audio,
+      format: result.format,
+      contentType: result.contentType,
+    }
+  })
+
+const GenerateTranscriptionSchema = z.object({
+  audio: z.any(), // File/Blob/base64，客户端传 FormData
+  language: z.string().optional(),
+  prompt: z.string().optional(),
+  threadId: z.string(),
+})
+
+export const generateTranscriptionFn = createServerFn({ method: "POST" })
+  .validator(GenerateTranscriptionSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireFeature(request, "mediaGeneration")
+    await requireResource(request, "mediaGenerationsMonthly")
+
+    const session = await requireAuth(request)
+    if (!session?.user?.id) {
+      return { error: "Unauthorized" }
+    }
+    const userId = session.user.id
+    const thread = await prisma.chatThread.findFirst({
+      where: { id: data.threadId, userId }, select: { id: true },
+    })
+    if (!thread) throw new Error("Thread not found")
+
+    const aiConfig = await resolveAiConfig(userId)
+    if (!aiConfig) {
+      return { error: "AI key not configured" }
+    }
+
+    const result = await generateTranscriptionForUser({
+      userId,
+      threadId: data.threadId,
+      audio: data.audio,
+      language: data.language,
+      prompt: data.prompt,
+      adapterKind: aiConfig.provider,
+      apiKey: aiConfig.apiKey,
+      model: aiConfig.model,
+      ...(aiConfig.baseUrl ? { baseURL: aiConfig.baseUrl } : {}),
+    })
+
+    return {
+      artifacts: result.artifacts,
+      text: result.text,
+      duration: result.duration,
+    }
+  })
+
+const GeneratePrototypeSchema = z.object({
+  prompt: z.string().min(1),
+  threadId: z.string(),
+})
+
+/**
+ * spec 路线原型生成（P4e §3.1）：走 runChatAsAgent 的 prd.prototype 链，
+ * 不扣 mediaGenerationsMonthly 配额（token 计量由 runChat 既有 AiUsageLog 承担）。
+ */
+export const generatePrototypeFn = createServerFn({ method: "POST" })
+  .validator(GeneratePrototypeSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireFeature(request, "mediaGeneration")
+
+    const session = await requireAuth(request)
+    if (!session?.user?.id) {
+      return { error: "Unauthorized" }
+    }
+    const userId = session.user.id
+
+    return generatePrototypeForUser({
+      userId,
+      threadId: data.threadId,
+      prompt: data.prompt,
+    })
+  })

package/src/server/serverFns/harness/sandbox-policy.ts

@@ -0,0 +1,88 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from "@tanstack/react-start"
+import { getRequest } from "@tanstack/react-start/server"
+import { z } from "zod"
+import { getCurrentSession } from "@/lib/session"
+import {
+  SANDBOX_DEFAULT_POLICY_LEVEL,
+  isSandboxPolicyLevel,
+} from "@/server/ai-gateway/sandbox/policy"
+import { assertSandboxEntitled } from "@/server/ai-gateway/sandbox/entitlement"
+
+const threadIdInput = z.object({ threadId: z.string().min(1) })
+
+async function requireOwnedThread(threadId: string) {
+  const session = await getCurrentSession(getRequest())
+  if (!session?.user?.id) throw new Error("Unauthorized")
+
+  const { prisma } = await import('@allbluecn/database')
+    const thread = await prisma.chatThread.findUnique({
+    where: { id: threadId },
+    select: { id: true, userId: true, sandboxPolicy: true },
+  })
+  if (!thread) throw new Error(`Chat thread not found: ${threadId}`)
+  if (thread.userId !== session.user.id) throw new Error("Unauthorized")
+
+  return thread
+}
+
+/** 读取线程沙箱策略档；DB 值非法时回落默认档（fail-closed，不返回更宽的档）。 */
+export const getSandboxPolicyFn = createServerFn({ method: "GET" })
+  .validator(threadIdInput)
+  .handler(async ({ data }) => {
+    const { prisma } = await import('@allbluecn/database')
+    const thread = await requireOwnedThread(data.threadId)
+    return isSandboxPolicyLevel(thread.sandboxPolicy)
+      ? thread.sandboxPolicy
+      : SANDBOX_DEFAULT_POLICY_LEVEL
+  })
+
+/**
+ * 切换线程沙箱策略档。「full」档放宽命令与网络拦截，需客户端二次确认后携带
+ * confirmFull: true，否则直接拒绝——UI 弹窗只是体验，这里才是安全边界。
+ */
+export const setSandboxPolicyFn = createServerFn({ method: "POST" })
+  .validator(
+    z.object({
+      threadId: z.string().min(1),
+      level: z.string(),
+      confirmFull: z.boolean().default(false),
+    }),
+  )
+  .handler(async ({ data }) => {
+    const { prisma } = await import('@allbluecn/database')
+    // 启用面也过闸：策略档只在你有权使用沙箱时才有意义，UI 层的 FeatureGate
+    // 只是体验优化，这里才是边界（desktop 在本函数内直放）。
+    await assertSandboxEntitled(getRequest())
+    if (!isSandboxPolicyLevel(data.level)) {
+      throw new Error(`Invalid sandbox policy level: ${data.level}`)
+    }
+    if (data.level === "full" && !data.confirmFull) {
+      throw new Error("Enabling full sandbox policy requires confirmFull")
+    }
+
+    const thread = await requireOwnedThread(data.threadId)
+    const updated = await prisma.chatThread.update({
+      where: { id: thread.id },
+      data: { sandboxPolicy: data.level },
+      select: { sandboxPolicy: true },
+    })
+
+    return updated.sandboxPolicy
+  })

package/src/server/serverFns/harness/search-mention-candidates.ts

@@ -0,0 +1,53 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from "@tanstack/react-start"
+import { getRequest } from "@tanstack/react-start/server"
+import { z } from "zod"
+import { requireAuth } from "@/server/auth-helpers"
+
+/** 搜索当前用户有权访问的 KB 文档（自有知识库）——不依赖 storyId */
+export const searchKbDocsForMentionFn = createServerFn({ method: "GET" })
+  .validator(z.object({ query: z.string().default("") }))
+  .handler(async ({ data }) => {
+    const { prisma } = await import("@allbluecn/database")
+    const request = getRequest()
+    const session = await requireAuth(request)
+    const userId = session.user!.id!
+
+    const accessibleKbs = await prisma.knowledgeBase.findMany({
+      where: { userId, isDeleted: false },
+      select: { id: true },
+    })
+    const docs = await prisma.knowledgeDocument.findMany({
+      where: {
+        kbId: { in: accessibleKbs.map((k) => k.id) },
+        isDeleted: false,
+        ...(data.query
+          ? { title: { contains: data.query, mode: "insensitive" as const } }
+          : {}),
+      },
+      take: 10,
+      select: { id: true, title: true, kbId: true },
+    })
+    return docs.map((d) => ({
+      kind: "kb-doc" as const,
+      id: d.id,
+      label: d.title,
+      kbId: d.kbId,
+    }))
+  })