@allbluecn/web-app 0.17.2 → 0.18.0

package/src/server/serverFns/testcase/automation.ts

@@ -0,0 +1,442 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 自动化代码生成/验证/采纳 serverFns（任务 29，规格 §3.9）。本文件只准导出
+// createServerFn 产物（serverFn 纯净铁律），prompt 组装、临时 spec 文件、DTO cast
+// 等均为文件内私有成员；schema/归并矩阵/元数据守卫在 automation-schema.ts（纯净自含）。
+//
+// 链路：generateArtifactFn 取用例快照 → runChatAsAgent(bizKey='testgen' 复用 +
+// promptKey='testcase.automation' 覆盖提示词，控制者裁决不新增 bizKey) 产
+// {code, notes} → 宿主写临时 spec 文件（runner 契约：runVitestSpec/runPlaywrightSpec
+// 接沙箱路径、由 runner 读宿主文件写入沙箱 workspace）→ 沙箱验证 → 失败带 lastError
+// 重生成一轮（attempts≤2）→ 落 TestAutomationArtifact（caseVersion=case.version，
+// verified 条件=passed>0 且 failed=0，否则 draft 留痕）。SpecRunnerUnavailableError
+// 属环境不可用（重试 AI 无济于事）→ 不重试直接 draft 留痕。AI/parse 双轮失败零写抛错。
+//
+// 覆盖率取舍（控制者裁定）：MVP 验证条件=passed>0 且 failed=0；「单测不得降低覆盖率」
+// 作为 prompt 约束告知 AI；sandbox-runner 不回传覆盖率数据，verifyRun.coverage 缺省
+// 挂账（见 task-29-report.md）。
+//
+// adoptArtifactFn：verified→adopted（事务内回写 case.automation，归并矩阵见
+// automation-schema.mergeAutomation：none→kind；unit+e2e→both）；rejectArtifactFn：
+// rejected 留痕；listArtifactsFn：DTO 附 stale（case.version > artifact.caseVersion，
+// 复跑任务 31 排除 stale 产物）。
+import fsPromises from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import type { Prisma } from "@allbluecn/database";
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import { requireAuth } from "@/server/auth-helpers";
+import { requireFeature } from "@/server/entitlements";
+import { checkAiRateLimit } from "@/server/lib/rate-limit";
+import { hasAiKey } from "@/server/ai-gateway/adapter";
+import { runChatAsAgent } from "@/server/ai-gateway/runs/agent-runtime";
+import {
+  runPlaywrightSpec,
+  runVitestSpec,
+  SpecRunnerUnavailableError,
+  type SpecRunResult,
+} from "@/server/testcase/sandbox-runner";
+import {
+  ARTIFACT_KIND_VALUES,
+  AutomationCodeOutputSchema,
+  ensureTestCaseTag,
+  mergeAutomation,
+  specFileName,
+  type ArtifactKind,
+} from "./automation-schema";
+
+/** 重生成轮数上限（简报口径 attempts≤2：首轮 + lastError 回喂一轮） */
+const MAX_ATTEMPTS = 2;
+/** e2e 验证缺省目标环境（可用 TESTCASE_E2E_BASE_URL 覆盖；端口 3000 = 项目根 web 约定） */
+const DEFAULT_E2E_BASE_URL = "http://localhost:3000";
+
+/** 项目有效成员校验（口径同 generation.ts：suspended 视同无权限） */
+async function assertProjectMembership(projectId: string, userId: string) {
+  const prisma = await getPrisma();
+  const membership = await prisma.projectMember.findUnique({
+    where: { projectId_userId: { projectId, userId } },
+    select: { status: true },
+  });
+  if (!membership || membership.status === "suspended") {
+    throw new Error("无权限操作该项目的测试模块");
+  }
+}
+
+/** 用例步骤 → 可读文本（prompt 上下文；结构 { steps: [{order, action, expected?}] }） */
+function stepsToText(steps: unknown): string {
+  const obj = steps as { steps?: { order: number; action: string; expected?: string }[] };
+  const list = Array.isArray(obj?.steps) ? obj.steps : [];
+  if (list.length === 0) return "（无）";
+  return list
+    .map((s) => `${s.order}. ${s.action}${s.expected ? ` → ${s.expected}` : ""}`)
+    .join("\n");
+}
+
+function isVerified(r: SpecRunResult): boolean {
+  return r.passed > 0 && r.failed === 0;
+}
+
+/** 验证未真正执行时的占位结果（provider 用 local-process 哨兵占位；lastError 携带原因） */
+function syntheticFailure(lastError: string): SpecRunResult {
+  return {
+    passed: 0,
+    failed: 0,
+    skipped: 0,
+    raw: "",
+    exitCode: -1,
+    provider: "local-process",
+    degraded: false,
+    timedOut: false,
+    lastError,
+  };
+}
+
+async function rmQuietly(dir: string): Promise<void> {
+  try {
+    await fsPromises.rm(dir, { recursive: true, force: true });
+  } catch (err) {
+    console.warn("[automation] 临时目录清理失败（不反噬主链路）:", errMessage(err));
+  }
+}
+
+function errMessage(err: unknown): string {
+  return err instanceof Error ? err.message : String(err);
+}
+
+// ── DTO cast（日期转 ISO 跨 JSON 边界；stale 由 case.version 对比得出）──
+
+interface ArtifactDTO {
+  id: string;
+  caseId: string;
+  caseVersion: number;
+  kind: string;
+  status: string;
+  language: string;
+  code: string;
+  targetPath: string | null;
+  verifyRun: Prisma.JsonValue | null;
+  stale: boolean;
+  createdAt: string;
+  adoptedAt: string | null;
+}
+
+type ArtifactRow = {
+  id: string;
+  caseId: string;
+  caseVersion: number;
+  kind: string;
+  status: string;
+  language: string;
+  code: string;
+  targetPath: string | null;
+  verifyRun: Prisma.JsonValue | null;
+  createdAt: Date;
+  adoptedAt: Date | null;
+};
+
+function castArtifact(row: ArtifactRow, caseVersion: number): ArtifactDTO {
+  return {
+    id: row.id,
+    caseId: row.caseId,
+    caseVersion: row.caseVersion,
+    kind: row.kind,
+    status: row.status,
+    language: row.language,
+    code: row.code,
+    targetPath: row.targetPath,
+    verifyRun: row.verifyRun,
+    stale: caseVersion > row.caseVersion,
+    createdAt: row.createdAt.toISOString(),
+    adoptedAt: row.adoptedAt ? row.adoptedAt.toISOString() : null,
+  };
+}
+
+// ── 生成 + 沙箱验证 ──
+
+const generateArtifactInputSchema = z.object({
+  caseId: z.string().min(1),
+  kind: z.enum(ARTIFACT_KIND_VALUES),
+  targetSourcePath: z.string().min(1).optional(),
+});
+
+export const generateArtifactFn = createServerFn({ method: "POST" })
+  .validator(generateArtifactInputSchema)
+  .handler(async ({ data }) => {
+    // 计费门控（复用任务 20 testGeneration 口径，YAGNI 不另立 key）：serverFn 第一行 requireFeature
+    await requireFeature(getRequest(), "testGeneration");
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    await checkAiRateLimit(userId, "testGeneration");
+
+    if (!(await hasAiKey(userId))) {
+      throw new Error("AI 未配置，请先前往 AI 设置页配置 API Key");
+    }
+
+    const prisma = await getPrisma();
+    const testCase = await prisma.testCase.findUnique({
+      where: { id: data.caseId },
+      select: {
+        id: true,
+        projectId: true,
+        identifier: true,
+        title: true,
+        precondition: true,
+        steps: true,
+        version: true,
+        automation: true,
+      },
+    });
+    if (!testCase) throw new Error("用例不存在");
+    await assertProjectMembership(testCase.projectId, userId);
+
+    const kind = data.kind as ArtifactKind;
+    const baseUrl = process.env.TESTCASE_E2E_BASE_URL || DEFAULT_E2E_BASE_URL;
+    const caseContext = [
+      `【用例标识】${testCase.identifier}`,
+      `【标题】${testCase.title}`,
+      `【前置条件】${testCase.precondition || "（无）"}`,
+      `【步骤】\n${stepsToText(testCase.steps)}`,
+    ].join("\n");
+
+    // 生成 + 验证循环（attempts≤2）：首轮失败带 lastError 回喂重生成一轮
+    let attemptFeedback = "";
+    let code: string | null = null;
+    let aiNotes: string[] = [];
+    let lastVerify: SpecRunResult | null = null;
+    let attempts = 0;
+
+    for (let round = 1; round <= MAX_ATTEMPTS; round++) {
+      attempts = round;
+      let raw: string;
+      try {
+        raw = await runChatAsAgent(
+          "testgen",
+          [
+            {
+              role: "user",
+              content: `为测试用例「${testCase.title}」生成${
+                kind === "e2e" ? "Playwright E2E" : "vitest 单元"
+              }自动化测试代码`,
+            },
+          ],
+          {
+            userId,
+            temperature: 0.2,
+            // 控制者裁决：复用既有 testgen bizKey + promptKey 覆盖提示词，不新增 bizKey
+            promptKey: "testcase.automation",
+            promptVars: {
+              caseContext,
+              targetPath: data.targetSourcePath ?? "（无）",
+              targetEnv: kind === "e2e" ? baseUrl : "vitest 单元测试",
+              attemptFeedback: attemptFeedback || "（首轮生成，无重试反馈）",
+            },
+            outputSchema: AutomationCodeOutputSchema,
+          },
+        );
+      } catch (err) {
+        attemptFeedback = `上一轮 AI 调用失败：${errMessage(err)}`;
+        continue;
+      }
+
+      let output: { code: string; notes?: string[] };
+      try {
+        output = AutomationCodeOutputSchema.parse(JSON.parse(raw));
+      } catch (err) {
+        attemptFeedback = `上一轮产物 JSON 解析失败：${errMessage(err)}`;
+        continue;
+      }
+      // 元数据锚点用 identifier（规格 §9：@testCase: {identifier}），与 prompt 指示一致——
+      // 用 DB id 会让遵嘱写 identifier 的 AI 产物不命中守卫、补出第二条不同值注释
+      code = ensureTestCaseTag(output.code, testCase.identifier);
+      aiNotes = output.notes ?? [];
+
+      // 宿主写临时 spec 文件（runner 契约：接沙箱路径，由 runner 读宿主文件写入沙箱 workspace）
+      const dir = await fsPromises.mkdtemp(path.join(os.tmpdir(), "testcase-automation-"));
+      const specPath = path.join(dir, specFileName(testCase.identifier, kind));
+      try {
+        await fsPromises.writeFile(specPath, code, "utf8");
+        lastVerify =
+          kind === "unit"
+            ? await runVitestSpec(specPath, { userId })
+            : await runPlaywrightSpec(specPath, baseUrl, { userId });
+      } catch (err) {
+        if (err instanceof SpecRunnerUnavailableError) {
+          // 验证环境不可用（如 vercel 沙箱无浏览器）：重试 AI 无济于事，直接 draft 留痕
+          lastVerify = syntheticFailure(`验证环境不可用：${errMessage(err)}`);
+          break;
+        }
+        lastVerify = syntheticFailure(`验证执行失败：${errMessage(err)}`);
+      } finally {
+        await rmQuietly(dir);
+      }
+      // 局部收窄（lastVerify 为跨闭包可变量，TS 无法自动窄化；try/catch 两分支均赋值）
+      const verify = lastVerify;
+      if (!verify) continue;
+      if (isVerified(verify)) break;
+      attemptFeedback =
+        verify.lastError ?? `验证未通过：passed=${verify.passed} failed=${verify.failed}`;
+    }
+
+    // 双轮均无有效产物（AI 调用/解析全失败）：零写抛错
+    if (code === null) {
+      throw new Error(`AI 生成失败（${attempts} 轮均无有效产物）：${attemptFeedback}`);
+    }
+
+    const verified = lastVerify !== null && isVerified(lastVerify);
+    const verifyRun: Record<string, unknown> = {
+      passed: lastVerify?.passed ?? 0,
+      failed: lastVerify?.failed ?? 0,
+      skipped: lastVerify?.skipped ?? 0,
+      attempts,
+    };
+    if (lastVerify?.lastError) verifyRun.lastError = lastVerify.lastError;
+    if (lastVerify?.logBlobId) verifyRun.logBlobId = lastVerify.logBlobId;
+    if (aiNotes.length > 0) verifyRun.notes = aiNotes;
+
+    const artifact = (await prisma.testAutomationArtifact.create({
+      data: {
+        caseId: data.caseId,
+        // stale 语义锚点：落库即固化生成时的用例版本
+        caseVersion: testCase.version,
+        kind,
+        status: verified ? "verified" : "draft",
+        language: "typescript",
+        code,
+        targetPath: data.targetSourcePath ?? null,
+        verifyRun: verifyRun as unknown as Prisma.InputJsonValue,
+        createdById: userId,
+      },
+    })) as unknown as ArtifactRow;
+
+    return { artifact: castArtifact(artifact, testCase.version) };
+  });
+
+// ── 采纳 / 拒绝 ──
+
+const artifactIdInputSchema = z.object({ artifactId: z.string().min(1) });
+
+export const adoptArtifactFn = createServerFn({ method: "POST" })
+  .validator(artifactIdInputSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    const prisma = await getPrisma();
+
+    const artifact = await prisma.testAutomationArtifact.findUnique({
+      where: { id: data.artifactId },
+      include: { case: { select: { id: true, projectId: true, version: true, automation: true } } },
+    });
+    if (!artifact) throw new Error("自动化产物不存在");
+    await assertProjectMembership(artifact.case.projectId, userId);
+    if (artifact.status === "adopted") throw new Error("该产物已采纳，不能重复采纳");
+    if (artifact.status === "rejected") throw new Error("该产物已被拒绝，不能采纳");
+    if (artifact.status !== "verified") {
+      throw new Error("仅验证通过的产物可采纳，请先生成并通过沙箱验证");
+    }
+    // stale 校验（任务 31 配套，规格 §9）：用例在生成后更新过（case.version >
+    // artifact.caseVersion）即过期——复跑只会纳入非 stale 采纳产物，放行过期采纳等于
+    // 永远跑不上；拒绝并提示重新生成（源头闸门，与 listArtifactsFn stale 标记同口径）
+    if (artifact.case.version > artifact.caseVersion) {
+      throw new Error(
+        `产物已过期：用例已更新至 v${artifact.case.version}，该产物基于 v${artifact.caseVersion} 生成，请重新生成后再采纳`,
+      );
+    }
+
+    const caseAutomation = mergeAutomation(artifact.case.automation, artifact.kind as ArtifactKind);
+
+    const updated = (await prisma.$transaction(async (tx) => {
+      const row = await tx.testAutomationArtifact.update({
+        where: { id: artifact.id },
+        data: { status: "adopted", adoptedAt: new Date() },
+      });
+      // 回写用例自动化覆盖面（none→kind；unit+e2e→both，归并矩阵见 mergeAutomation）
+      await tx.testCase.update({
+        where: { id: artifact.case.id },
+        data: { automation: caseAutomation },
+      });
+      return row as unknown as ArtifactRow;
+    })) as unknown as ArtifactRow;
+
+    return {
+      artifact: castArtifact(updated, artifact.case.version),
+      caseAutomation,
+      actorId: userId,
+    };
+  });
+
+export const rejectArtifactFn = createServerFn({ method: "POST" })
+  .validator(artifactIdInputSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    const prisma = await getPrisma();
+
+    const artifact = await prisma.testAutomationArtifact.findUnique({
+      where: { id: data.artifactId },
+      include: { case: { select: { projectId: true, version: true } } },
+    });
+    if (!artifact) throw new Error("自动化产物不存在");
+    await assertProjectMembership(artifact.case.projectId, userId);
+    if (artifact.status === "adopted") throw new Error("该产物已采纳，不能拒绝");
+
+    // 拒绝留痕：仅置 rejected，不影响 case.automation（历史产物仍可查）
+    const updated = (await prisma.testAutomationArtifact.update({
+      where: { id: artifact.id },
+      data: { status: "rejected" },
+    })) as unknown as ArtifactRow;
+
+    return { artifact: castArtifact(updated, artifact.case.version), actorId: userId };
+  });
+
+// ── 产物列表（stale 语义：case.version > artifact.caseVersion → 过期待重生成、复跑排除）──
+
+const listArtifactsInputSchema = z.object({ caseId: z.string().min(1) });
+
+export const listArtifactsFn = createServerFn({ method: "POST" })
+  .validator(listArtifactsInputSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    const prisma = await getPrisma();
+
+    const testCase = await prisma.testCase.findUnique({
+      where: { id: data.caseId },
+      select: { id: true, projectId: true, version: true },
+    });
+    if (!testCase) throw new Error("用例不存在");
+    await assertProjectMembership(testCase.projectId, userId);
+
+    const artifacts = (await prisma.testAutomationArtifact.findMany({
+      where: { caseId: testCase.id },
+      orderBy: { createdAt: "desc" },
+    })) as unknown as ArtifactRow[];
+
+    return {
+      caseId: testCase.id,
+      caseVersion: testCase.version,
+      artifacts: artifacts.map((a) => castArtifact(a, testCase.version)),
+      actorId: userId,
+    };
+  });

package/src/server/serverFns/testcase/constants.ts

@@ -0,0 +1,98 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 测试域零依赖常量（客户端安全）：DB 中 type/priority/state/automation 为 String 非 enum，
+// 本文件的联合类型 + 值数组是类型安全的唯一防线（serverFn 与 UI 共用）。
+// 值域钉死自规格 §3.1/§11：TestCase.state 恰四态、TestRunCase.status 恰六态。
+
+export const TEST_CASE_TYPE_VALUES = [
+  "functional",
+  "boundary",
+  "exception",
+  "performance",
+  "security",
+  "compatibility",
+] as const;
+export type TestCaseType = (typeof TEST_CASE_TYPE_VALUES)[number];
+
+export const TEST_CASE_PRIORITY_VALUES = ["p0", "p1", "p2", "p3"] as const;
+export type TestCasePriority = (typeof TEST_CASE_PRIORITY_VALUES)[number];
+
+// 四态（规格 §11 权威：deprecated 终态可逆回 draft；计划文档「五态」系笔误）
+export const TEST_CASE_STATE_VALUES = ["draft", "in_review", "approved", "deprecated"] as const;
+export type TestCaseState = (typeof TEST_CASE_STATE_VALUES)[number];
+
+export const TEST_CASE_AUTOMATION_VALUES = ["none", "unit", "e2e", "both"] as const;
+export type TestCaseAutomation = (typeof TEST_CASE_AUTOMATION_VALUES)[number];
+
+// 六态（规格 §11：retest 可再执行覆盖，其余五态为终态）
+export const RUN_CASE_STATUS_VALUES = [
+  "untested",
+  "passed",
+  "failed",
+  "blocked",
+  "skipped",
+  "retest",
+] as const;
+export type RunCaseStatus = (typeof RUN_CASE_STATUS_VALUES)[number];
+
+// 步骤级结果四值（规格 §3.7 stepResults 注释口径；人工 checklist 键盘 1/2/3/4 对应）
+export const RUN_STEP_RESULT_STATUS_VALUES = ["pass", "fail", "blocked", "skip"] as const;
+export type RunStepResultStatus = (typeof RUN_STEP_RESULT_STATUS_VALUES)[number];
+
+// 执行模式（规格 §3.6：human 人工 / ai_agent AI 执行 / automation_code 自动化脚本 / mixed 混合）
+export const RUN_EXECUTOR_TYPE_VALUES = ["human", "ai_agent", "automation_code", "mixed"] as const;
+export type RunExecutorType = (typeof RUN_EXECUTOR_TYPE_VALUES)[number];
+
+// 批次三态（规格 §3.6：running 进行中 / completed 全部 RunCase 终态 / aborted 人工中止）
+export const TEST_RUN_STATUS_VALUES = ["running", "completed", "aborted"] as const;
+export type TestRunStatus = (typeof TEST_RUN_STATUS_VALUES)[number];
+
+// 用例标识符格式 "{displayId}-TC{seq}"，SequenceCounter(scope="testcase:{projectId}") 发号
+export const TEST_CASE_IDENTIFIER_PREFIX = "-TC";
+
+// 测试计划两态（规格 §3.5：active 进行中 / closed 已关闭；closed 拒绝再圈选用例）
+export const TEST_PLAN_STATE_VALUES = ["active", "closed"] as const;
+export type TestPlanState = (typeof TEST_PLAN_STATE_VALUES)[number];
+
+// 出站 webhook 事件（规格 §12：ProjectWebhook.events 值域扩展，无 schema 变更）。
+// 客户端安全常量：webhook 设置页勾选列表与 serverFn 校验/派发共用（BUG_WEBHOOK_EVENTS 同款惯例）。
+// test.bug.drafted 由 server/testcase/auto-bug.ts 起草提交后派发（任务 34）。
+export const TEST_RUN_WEBHOOK_EVENT_RUN_COMPLETED = "test.run.completed";
+export const TEST_RUN_WEBHOOK_EVENT_BUG_DRAFTED = "test.bug.drafted";
+export const TEST_RUN_WEBHOOK_EVENTS = [
+  TEST_RUN_WEBHOOK_EVENT_RUN_COMPLETED,
+  TEST_RUN_WEBHOOK_EVENT_BUG_DRAFTED,
+] as const;
+export type TestRunWebhookEvent = (typeof TEST_RUN_WEBHOOK_EVENTS)[number];
+
+// SSE 步骤实时流（任务 26）：/api/test-runs/$runId/events CUSTOM 事件名，
+// mcp report_step（发射方）与 step-stream（订阅方）共用；客户端安全常量。
+export const TEST_RUN_STEP_SSE_EVENT = "test-run-step";
+
+// 失败归类六值（规格 §10；单一事实源——fingerprint 的 ExecutionFailureCategory 类型由
+// 此处派生，triage 归因 schema 与 stats 归因分组共用；客户端安全常量，避免 stats 经
+// triage 顶层 import 把 ai-gateway 全链拖进客户端模块图）。
+export const FAILURE_CATEGORY_VALUES = [
+  "frontend_error",
+  "api_error",
+  "assertion_mismatch",
+  "env_issue",
+  "data_issue",
+  "unknown",
+] as const;
+export type ExecutionFailureCategory = (typeof FAILURE_CATEGORY_VALUES)[number];

package/src/server/serverFns/testcase/evidence-upload.ts

@@ -0,0 +1,83 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 执行证据上传 serverFn（任务 16）：把图片文件（截图为主）落 BlobStore 返回 BlobRef，
+// 供 addEvidenceFn 追加到步骤 evidenceBlobIds。不复用/扩写 blob-upload.ts 的
+// BLOB_MIME_TYPES 白名单——那是与 AI 会话附件共用的 fail-closed 安全常量，且其注释
+// 明确「图片走 dataURL 不落 Blob 表」；执行证据需要图片落 Blob，故在此新建 testcase
+// 专用白名单（仅 image/* + 10MB），共享端点行为零变更。客户端不接触 BlobStore 实现。
+// 本文件只准导出 createServerFn 产物（serverFn 纯净铁律），白名单为文件内私有。
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import { requireAuth } from "@/server/auth-helpers";
+import { getPorts } from "@/server/ai-gateway/runtime";
+
+/** 执行证据白名单：仅图片家族（fail-closed 前缀匹配，独立于会话附件白名单） */
+function isEvidenceMime(mimeType: string): boolean {
+  return mimeType.startsWith("image/");
+}
+const MAX_EVIDENCE_BYTES = 10 * 1024 * 1024;
+// base64 编码后约为原长的 4/3，留余量
+const MAX_BASE64_LEN = Math.ceil((MAX_EVIDENCE_BYTES * 4) / 3) + 64;
+
+const UploadEvidenceSchema = z.object({
+  mimeType: z.string().min(1).max(200),
+  fileName: z.string().min(1).max(500),
+  data: z.string().min(1).max(MAX_BASE64_LEN),
+});
+
+export const uploadEvidenceFn = createServerFn({ method: "POST" })
+  .validator(UploadEvidenceSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    if (!session?.user?.id) {
+      return { error: "Unauthorized" as const };
+    }
+    const userId = session.user.id;
+
+    // SVG 显式拒绝（image/ 前缀白名单会放过 image/svg+xml）：/api/blob/$id 以存储
+    // mimeType inline 服务，SVG 内嵌脚本会在应用 origin 执行（self-XSS）——安全裁决
+    // 先于白名单判断；中文报错经客户端 catch 直出 toast
+    if (data.mimeType === "image/svg+xml") {
+      throw new Error("SVG 不能作为执行证据（安全限制）");
+    }
+
+    if (!isEvidenceMime(data.mimeType)) {
+      return { error: "UnsupportedMimeType" as const };
+    }
+
+    let bytes: Uint8Array;
+    try {
+      bytes = Uint8Array.from(atob(data.data), (c) => c.charCodeAt(0));
+    } catch {
+      return { error: "InvalidBase64" as const };
+    }
+
+    if (bytes.byteLength === 0 || bytes.byteLength > MAX_EVIDENCE_BYTES) {
+      return { error: "SizeExceeded" as const };
+    }
+
+    const ref = await getPorts().blobStore.put(
+      data.fileName,
+      Buffer.from(bytes),
+      data.mimeType,
+      userId,
+    );
+    return { ref };
+  });