@allbluecn/web-app 0.17.1 → 0.18.0

package/src/server/testcase/fingerprint.ts

@@ -0,0 +1,58 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 执行指纹（规格 §10 钉死算法）：sha256(projectId:caseId:首个失败步骤 order:
+// category:normalize(错误摘要 200 字))。失败判重依据——同批次内同指纹视为同一
+// 缺陷，不重复转 Bug。纯函数：无时钟/随机数，sha256 天然确定。
+// 纯服务端逻辑模块：禁止引入 prisma。
+import { createHash } from "node:crypto";
+import { FAILURE_CATEGORY_VALUES } from "@/server/serverFns/testcase/constants";
+
+/** 失败归类六值域（单一事实源在 serverFns/testcase/constants，规格 §10） */
+export type ExecutionFailureCategory = (typeof FAILURE_CATEGORY_VALUES)[number];
+
+export interface ExecutionFingerprintInput {
+  projectId: string;
+  caseId: string;
+  /** 首个失败步骤的 order */
+  firstFailedOrder: number;
+  category: ExecutionFailureCategory;
+  errorSummary: string;
+}
+
+/** 错误摘要参与哈希的最大长度（截断先于归一，规格 §10「normalize(错误摘要 200 字)」） */
+const ERROR_SUMMARY_MAX_LENGTH = 200;
+
+/** 生成执行指纹（64 位十六进制小写） */
+export function execFingerprint(input: ExecutionFingerprintInput): string {
+  const parts = [
+    input.projectId,
+    input.caseId,
+    String(input.firstFailedOrder),
+    input.category,
+    normalizeSummary(input.errorSummary),
+  ];
+  return createHash("sha256").update(parts.join(":")).digest("hex");
+}
+
+/** 归一 = 截断 200 字 + 去首尾空白 + 内部连续空白折叠为单空格 */
+function normalizeSummary(summary: string): string {
+  return summary
+    .slice(0, ERROR_SUMMARY_MAX_LENGTH)
+    .trim()
+    .replace(/\s+/g, " ");
+}

package/src/server/testcase/flaky-retry.ts

@@ -0,0 +1,160 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// flaky 自动重试（任务 32，规格 §10「automation/exec 执行 failed → 自动重试 1 次；
+// 两态不一致→flaky=true + status=retest（不转 bug）；一致 failed→进归因」）。
+//
+// 两条来源、两种重试形态：
+// - automation 来源（automation-rerun.ts inline）：断言类失败（mapped status=failed）
+//   立即第二跑，judgeRetryOutcome 纯判定——复跑 passed → flaky（RunCase 置 retest +
+//   flaky=true）；其余（一致 failed / 复跑 blocked|skipped 环境类不可判定）→
+//   failed_confirm（首跑 failed 为准，进归因队列）。
+// - ai 来源（mcp tools report_exec_result fail 分支）：服务端无法代跑 agent，重试 =
+//   回池——retryFailedExecOnce 把 RunCase 置回可执行态（untested + execRunId null，
+//   同 exec-pool.scanExpired 回池三写），agent 经 list_pending_execs 重新认领执行；
+//   第二次上报时以 TestExecRun 历史 finalVerdict（任务 24 起落账）为「第一态」，
+//   decideFlakyAction 裁决 retry/mark_flaky/triage。
+//
+// 终局三态（不转 bug 不计指纹——fingerprint/转 bug 归任务 33+ 归因链）：
+// - flaky：两态不一致 → flaky=true + status=retest（终局态，人工裁决）；
+// - triage（归因队列口径）：status=failed 且 flaky=false（Boolean 默认值不写列）——
+//   任务 33 归因扫描按「failed 非 flaky 的 ai/automation 来源 RunCase」圈队列，无新表；
+// - human 来源（reportResultFn）不自动重试：人工判断终局。
+//
+// 边界：回池前守卫 run 仍 running（最后一例失败已触发 run completed + webhook 的，
+// 不再回池重试——该 failed 直接进归因队列）；arbiter 条件更新（status=failed 且
+// execRunId 匹配）防人工并发改判误回池。本模块为 server/testcase/ 纯服务端模块
+//（同 exec-pool 口径），非 serverFn；判定纯函数零 prisma 依赖可直测。
+import { prisma } from "@allbluecn/database";
+import type { RunCaseStatus } from "@/server/serverFns/testcase/constants";
+
+// ── 纯判定（automation 来源 inline 复跑）──
+
+export type RetryJudgement = "flaky" | "failed_confirm";
+
+/** 两态输入（RunCaseStatus 全值域：触发面只有 failed，复跑可能落任意终态） */
+export type RetryOutcomeStatus = RunCaseStatus;
+
+const PASS_FAIL_STATES: ReadonlySet<string> = new Set(["passed", "failed"]);
+
+/**
+ * 两态判定：passed/failed 不一致 → flaky；一致 failed（或复跑 blocked/skipped
+ * 环境类不可判定）→ failed_confirm。规格 §10「两态不一致→flaky」的两态即 passed/
+ * failed——blocked/skipped 非断言翻转，不误判 flaky。
+ */
+export function judgeRetryOutcome(
+  firstStatus: RetryOutcomeStatus,
+  secondStatus: RetryOutcomeStatus,
+): RetryJudgement {
+  if (PASS_FAIL_STATES.has(firstStatus) && PASS_FAIL_STATES.has(secondStatus) && firstStatus !== secondStatus) {
+    return "flaky";
+  }
+  return "failed_confirm";
+}
+
+// ── 纯判定（ai 来源历史感知裁决）──
+
+/** AI 终局判定（MCP report_exec_result.finalVerdict 值域） */
+export type ExecVerdict = "pass" | "fail" | "uncertain";
+
+export type FlakyAction =
+  | "retry" // 首次失败：回池让 agent 重试一次
+  | "mark_flaky" // 两态不一致：flaky=true + status=retest
+  | "triage" // 两次一致 failed：进归因队列（status 保持 failed）
+  | "none"; // 与 flaky 链无关（普通通过 / uncertain 既有 retest 语义）
+
+/**
+ * 历史感知裁决（current 上报时点，priorVerdicts = 本次之前的终局时序）：
+ * - uncertain 不参与 flaky 链（既有 retest 语义，任务 24 口径）；
+ * - fail 且无先例可比较终局 → retry（仅此一次——先例存在即不再回池）；
+ * - fail 且先例存在 → triage（两态一致 failed；先例 pass 的「或反之」同属两态
+ *   不一致 → mark_flaky）；
+ * - pass 且先例为 fail → mark_flaky；pass 无先例/先例 pass → none。
+ */
+export function decideFlakyAction(params: {
+  priorVerdicts: ExecVerdict[];
+  currentVerdict: ExecVerdict;
+}): FlakyAction {
+  const { priorVerdicts, currentVerdict } = params;
+  if (currentVerdict === "uncertain") return "none";
+  const lastPrior = [...priorVerdicts].reverse().find((v) => v !== "uncertain");
+  if (lastPrior === undefined) {
+    return currentVerdict === "fail" ? "retry" : "none";
+  }
+  if (lastPrior !== currentVerdict) return "mark_flaky";
+  return currentVerdict === "fail" ? "triage" : "none";
+}
+
+/**
+ * 从 ExecRun.report（Json | null）提取 finalVerdict 时序：automation 形状 report
+ * （计数面，无 finalVerdict）与 null/异常形状跳过——只认 MCP 协议落账的终局。
+ */
+export function extractFinalVerdicts(reports: unknown[]): ExecVerdict[] {
+  const verdicts: ExecVerdict[] = [];
+  for (const report of reports) {
+    if (report !== null && typeof report === "object" && !Array.isArray(report)) {
+      const verdict = (report as { finalVerdict?: unknown }).finalVerdict;
+      if (verdict === "pass" || verdict === "fail" || verdict === "uncertain") {
+        verdicts.push(verdict);
+      }
+    }
+  }
+  return verdicts;
+}
+
+// ── ai 来源回池（事务后 fire-and-forget）──
+
+export interface FailedExecRetryParams {
+  runId: string;
+  runCaseId: string;
+  /** 刚落 failed 的那次 ExecRun（arbiter 匹配键：人工改判后 execRunId 已变则不回池） */
+  execRunId: string;
+}
+
+/**
+ * 失败回池重试一次（retryFailedExecOnce 的 fire-and-forget 包装，照
+ * fireAutomationRerun 先例）：链路异常只落 console.warn，不反噬上报主链路。
+ */
+export function scheduleFailedExecRetry(params: FailedExecRetryParams): void {
+  void retryFailedExecOnce(params).catch((err: unknown) => {
+    console.warn("[flaky-retry] 失败回池重试异常（RunCase 保持 failed，进归因队列）:", err);
+  });
+}
+
+/**
+ * 回池执行（同 exec-pool.scanExpired 回池三写：untested + execRunId null +
+ * startedAt null + stepResults 清空——重试窗内不残留上一轮旧 verdict，agent 经
+ * list_pending_execs 重新认领）。守卫 run 仍 running（已完结批次不重试）；
+ * arbiter 条件更新（status=failed 且 execRunId 匹配）count=0 即人工已介入/并发
+ * 变更，放弃重试。返回是否实际回池。
+ */
+export async function retryFailedExecOnce(params: FailedExecRetryParams): Promise<boolean> {
+  return prisma.$transaction(async (tx) => {
+    const run = await tx.testRun.findUnique({
+      where: { id: params.runId },
+      select: { status: true },
+    });
+    // 批次已完结/中止：最后一例失败触发 run completed（webhook 已发）或用户已中止，
+    // 不回池——该 failed 保持终局进归因队列
+    if (!run || run.status !== "running") return false;
+    const reset = await tx.testRunCase.updateMany({
+      where: { id: params.runCaseId, status: "failed", execRunId: params.execRunId },
+      data: { status: "untested", execRunId: null, startedAt: null, stepResults: [] },
+    });
+    return reset.count > 0;
+  });
+}

package/src/server/testcase/run-finalize.ts

@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// Run 终态判定与完成落账（快照隔离的姐妹逻辑：批次何时算跑完）。
+// 终态口径（控制者裁决修正，2026-10-05）：untested 为初始非终态，五终态 =
+// passed|failed|blocked|skipped|retest——retest 属终态但可再执行覆盖（终态可覆写），
+// 「run 全部 RunCase 终态」即「全部离开 untested」→ run completed + summary。
+// finalizeRunIfComplete 是任务 15（人工回报）/24（AI 回报）共享的同一落账入口：
+// tx 由调用方注入（须与 RunCase 状态变更同事务，防并发回报漏计/重复落账），
+// 本模块零运行时 import（Prisma 仅 type-only），纯逻辑可用 fake tx 直接测试。
+import type { Prisma } from "@allbluecn/database";
+import type { RunCaseStatus } from "@/server/serverFns/testcase/constants";
+import { summarizeRunStatuses, type TestRunSummaryJson } from "./run-summary";
+
+/** TestRunCase 终态集（untested 初始非终态；retest 属终态但可再执行覆盖） */
+export const RUN_CASE_TERMINAL_STATUSES = [
+  "passed",
+  "failed",
+  "blocked",
+  "skipped",
+  "retest",
+] as const;
+
+const TERMINAL_SET: ReadonlySet<string> = new Set(RUN_CASE_TERMINAL_STATUSES);
+
+/** 批次是否全部 RunCase 终态（= 全部离开 untested；空集不算完成——无 RunCase 的批次没有「跑完」语义） */
+export function isRunComplete(statuses: readonly RunCaseStatus[]): boolean {
+  return statuses.length > 0 && statuses.every((status) => TERMINAL_SET.has(status));
+}
+
+/** durationMs 口径：completedAt - startedAt（毫秒）；无 startedAt 不可算 → null */
+export function computeRunDurationMs(
+  startedAt: Date | null,
+  completedAt: Date,
+): number | null {
+  return startedAt === null ? null : Math.max(0, completedAt.getTime() - startedAt.getTime());
+}
+
+/**
+ * 全部 RunCase 终态时把 run 落账为 completed（status + summary + completedAt）。
+ * 仅 running 态可落账（规格 §11 TestRun 双终态状态机守卫）：run 不存在或已
+ * aborted/completed 时返回 null 零写入——aborted 批次的 RunCase 后续全部到达终态
+ * （如任务 15 abort 语义把余例置 skipped）不得把 aborted 覆盖为 completed。
+ * 调用方须在自己更新 RunCase 状态的同一事务内调用本函数；running 下重复调用为
+ * 幂等覆盖（summary/completedAt 重算）。
+ */
+export async function finalizeRunIfComplete(
+  tx: Prisma.TransactionClient,
+  runId: string,
+  completedAt: Date,
+): Promise<TestRunSummaryJson | null> {
+  const rows = await tx.testRunCase.findMany({
+    where: { runId },
+    select: { status: true },
+  });
+  const statuses = rows.map((row) => row.status as RunCaseStatus);
+  if (!isRunComplete(statuses)) return null;
+
+  const run = await tx.testRun.findUnique({
+    where: { id: runId },
+    select: { status: true, startedAt: true },
+  });
+  if (!run || run.status !== "running") return null;
+
+  const summary: TestRunSummaryJson = {
+    ...summarizeRunStatuses(statuses),
+    durationMs: computeRunDurationMs(run.startedAt, completedAt),
+  };
+  await tx.testRun.update({
+    where: { id: runId },
+    data: {
+      status: "completed",
+      // Json 列写入 cast（testcase-crud steps 同款惯例；Prisma 仅 type-only import）
+      summary: summary as unknown as Prisma.InputJsonValue,
+      completedAt,
+    },
+  });
+  return summary;
+}

package/src/server/testcase/run-summary.ts

@@ -0,0 +1,65 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// Run summary 统计纯函数（规格 §3.6 TestRun.summary Json 形状的计数面）：
+// 输入 RunCase status 集合，输出六态计数 + passRate（passed/total 小数，total=0 时 0）。
+// durationMs 口径（run startedAt→completedAt）不在本模块计算——由 serverFn 层落账方
+// （run-finalize.finalizeRunIfComplete）算好后并入 TestRunSummaryJson。
+// 纯服务端逻辑模块：无副作用、不触 DB，禁止引入 prisma（同 snapshot.ts 铁律）。
+import type { RunCaseStatus } from "@/server/serverFns/testcase/constants";
+
+/** TestRun.summary 计数面（untested 只进 total，无独立键——schema 注释口径） */
+export interface RunSummaryCounts {
+  total: number;
+  passed: number;
+  failed: number;
+  blocked: number;
+  skipped: number;
+  retest: number;
+  /** 通过率 = passed/total（0..1 小数；total=0 时为 0） */
+  passRate: number;
+}
+
+/** TestRun.summary Json 完整形状（计数 + 时长；schema.prisma TestRun.summary 注释口径） */
+export interface TestRunSummaryJson extends RunSummaryCounts {
+  durationMs: number | null;
+}
+
+/** 零常量供空集复用（passRate: total=0 时 0） */
+const EMPTY_COUNTS: RunSummaryCounts = {
+  total: 0,
+  passed: 0,
+  failed: 0,
+  blocked: 0,
+  skipped: 0,
+  retest: 0,
+  passRate: 0,
+};
+
+/** 从 RunCase status 集合算 summary 计数面（供 serverFn 落账与复用方测试） */
+export function summarizeRunStatuses(statuses: readonly RunCaseStatus[]): RunSummaryCounts {
+  const counts: RunSummaryCounts = { ...EMPTY_COUNTS, total: statuses.length };
+  for (const status of statuses) {
+    if (status === "passed") counts.passed += 1;
+    else if (status === "failed") counts.failed += 1;
+    else if (status === "blocked") counts.blocked += 1;
+    else if (status === "skipped") counts.skipped += 1;
+    else if (status === "retest") counts.retest += 1;
+  }
+  counts.passRate = counts.total === 0 ? 0 : counts.passed / counts.total;
+  return counts;
+}

package/src/server/testcase/run-webhook.ts

@@ -0,0 +1,183 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// Run 完成出站 webhook 投递（任务 18，规格 §12「HMAC 签名，fire-and-forget 5s 超时，
+// 同 BUG 模块实现」）。结构照抄 bug-report/webhook-out.ts：项目级 ProjectWebhook
+// 订阅驱动，HMAC-SHA256 签名（X-Allblue-Signature: sha256=<hmac(timestamp + "." + body)>，
+// timestamp 秒级十进制走 X-Allblue-Timestamp），逐端点 fire-and-forget POST
+// （AbortSignal.timeout 5s），失败静默（console.warn 单行，不重试）——webhook 永不
+// 反噬业务主链路。与 BUG 派发器的差异仅 body 形状：test.run.completed 为
+// {event, projectId, run, summary}；test.bug.drafted（任务 34）为 {event, projectId, bug}。
+// 挂载点契约：finalizeRunIfComplete 在事务内落账、无法在事务内派发，调用方
+//（run-cases.reportResultFn，任务 24 AI 回报后续接入同款）以 finalize 返回非 null
+// 为信号在事务提交后调用本函数——签名密钥只在 ProjectWebhook.secret，投递失败不重试。
+import { createHmac } from "node:crypto";
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import { assertFetchableUrl } from "@/server/fetch-guard";
+import {
+  TEST_RUN_WEBHOOK_EVENT_BUG_DRAFTED,
+  TEST_RUN_WEBHOOK_EVENT_RUN_COMPLETED,
+} from "@/server/serverFns/testcase/constants";
+import type { TestRunSummaryJson } from "./run-summary";
+
+/** 投递超时（ms）：对端无响应 5s 放弃（规格 §12 与 BUG 模块同值） */
+export const TEST_RUN_WEBHOOK_TIMEOUT_MS = 5000;
+
+/** webhook body 的 run 对象：id/name/planId + 起止时间（ISO 字符串，已完成恒有 completedAt） */
+export interface TestRunWebhookRunInfo {
+  id: string;
+  name: string;
+  planId: string | null;
+  startedAt: string | null;
+  completedAt: string;
+}
+
+/** fireTestRunWebhook 入参：projectId + run 摘要 + 完成落账 summary（含 durationMs） */
+export interface TestRunWebhookInput {
+  projectId: string;
+  run: TestRunWebhookRunInfo;
+  summary: TestRunSummaryJson;
+}
+
+/** test.bug.drafted body 的 bug 对象（任务 34，形状对齐 bug.created 的 bug 摘要 + 闸门位） */
+export interface TestBugDraftedWebhookBugInfo {
+  id: string;
+  identifier: string;
+  title: string;
+  severity: string;
+  state: string;
+  /** true=落在人工确认闸门后（pendingConfirm 闸门，规格 Q2） */
+  pendingConfirm: boolean;
+  fingerprint: string;
+}
+
+/** fireTestBugDraftedWebhook 入参：projectId + 起草 bug 摘要 */
+export interface TestBugDraftedWebhookInput {
+  projectId: string;
+  bug: TestBugDraftedWebhookBugInfo;
+}
+
+/** 订阅行 shape（prisma.projectWebhook 查询结果的最小口径，events 为 Json） */
+interface WebhookRow {
+  id: string;
+  url: string;
+  secret: string;
+  events: unknown;
+  enabled: boolean;
+}
+
+/**
+ * 触发项目级 webhook 通知（事件名 test.run.completed）。fire-and-forget：同步返回
+ * void，调用方不等待、不感知投递结果；只投 enabled 且 events 订阅了该事件的端点。
+ */
+export function fireTestRunWebhook(input: TestRunWebhookInput): void {
+  void deliverWebhookEvent(TEST_RUN_WEBHOOK_EVENT_RUN_COMPLETED, {
+    event: TEST_RUN_WEBHOOK_EVENT_RUN_COMPLETED,
+    projectId: input.projectId,
+    run: input.run,
+    summary: input.summary,
+  });
+}
+
+/**
+ * 触发 test.bug.drafted（任务 34：AI 起草提交后派发）。fire-and-forget 语义同
+ * fireTestRunWebhook：只投 enabled 且订阅了该事件的端点，失败静默不重试。
+ */
+export function fireTestBugDraftedWebhook(input: TestBugDraftedWebhookInput): void {
+  void deliverWebhookEvent(TEST_RUN_WEBHOOK_EVENT_BUG_DRAFTED, {
+    event: TEST_RUN_WEBHOOK_EVENT_BUG_DRAFTED,
+    projectId: input.projectId,
+    bug: input.bug,
+  });
+}
+
+/** 投递主链路：顶层 try/catch 全吞——本函数的任何失败都只落 console.warn */
+async function deliverWebhookEvent(
+  event: string,
+  payload: Record<string, unknown>,
+): Promise<void> {
+  try {
+    const prisma = await getPrisma();
+    const rows = (await prisma.projectWebhook.findMany({
+      where: { projectId: payload.projectId as string, enabled: true },
+    })) as WebhookRow[];
+
+    // enabled 双重校验：查询 where 已过滤，行级再兜一道（订阅快照/脏数据防漂移）
+    const targets = rows.filter(
+      (row) => row.enabled && subscribedEvents(row.events).includes(event),
+    );
+    if (targets.length === 0) return;
+
+    // body 先序列化定稿再逐端点签名（签名对象是实际发送的字节，防双序列化漂移）
+    const body = JSON.stringify(payload);
+
+    await Promise.allSettled(
+      targets.map((target) => deliverToTarget(event, target, body)),
+    );
+  } catch (error: unknown) {
+    warnDeliveryFailure(event, "投递链路异常", error);
+  }
+}
+
+/** 单端点投递：独立 try/catch，一个端点失败不拖垮同批其他端点 */
+async function deliverToTarget(
+  event: string,
+  target: WebhookRow,
+  body: string,
+): Promise<void> {
+  try {
+    // SEC-07 投递双层校验之二：注册期守卫（createBugWebhookFn）之后，存量脏 URL
+    // 在出口再拦一次；拒绝即跳过该端点，与其他投递失败同话术静默 warn
+    const targetUrl = assertFetchableUrl(target.url);
+    // 秒级 Unix 时间戳（GitHub webhook 同款惯例），随 X-Allblue-Timestamp 头外发供接收方验签
+    const timestamp = Math.floor(Date.now() / 1000).toString();
+    const signature = createHmac("sha256", target.secret)
+      .update(`${timestamp}.${body}`)
+      .digest("hex");
+    // redirect:error 防 302 跳私网（webhook 接收端正常不重定向）
+    const response = await fetch(targetUrl, {
+      method: "POST",
+      redirect: "error",
+      headers: {
+        "Content-Type": "application/json",
+        "X-Allblue-Signature": `sha256=${signature}`,
+        "X-Allblue-Timestamp": timestamp,
+      },
+      body,
+      signal: AbortSignal.timeout(TEST_RUN_WEBHOOK_TIMEOUT_MS),
+    });
+    if (!response.ok) {
+      // 非 2xx：静默 log，不重试不建表（MVP 口径，失败静默）
+      warnDeliveryFailure(event, `端点响应 ${response.status}（${target.url}）`, null);
+    }
+  } catch (error: unknown) {
+    warnDeliveryFailure(event, `端点请求失败（${target.url}）`, error);
+  }
+}
+
+/** events Json 安全读取：非数组/含非字符串项一律丢弃（脏数据降级为不订阅） */
+function subscribedEvents(raw: unknown): string[] {
+  if (!Array.isArray(raw)) return [];
+  return raw.filter((item): item is string => typeof item === "string");
+}
+
+/** 失败 log：单行 console.warn（换行折叠，避免多行日志刷屏） */
+function warnDeliveryFailure(event: string, reason: string, error: unknown): void {
+  const detail =
+    error instanceof Error ? error.message.replace(/\s+/g, " ") : String(error ?? "");
+  console.warn(`[run-webhook] ${event} ${reason}${detail ? `: ${detail}` : ""}`);
+}