@allbluecn/web-app 0.17.2 → 0.18.1

package/src/server/bug-report/repro-runner.ts

@@ -0,0 +1,378 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// AI 复现运行器（任务 26，规格 §11）：输入组装 → runChatAsAgent("bug.reproduce")
+// → zod 校验 → BugReproRun 状态机落库（completed/failed）+ ai_repro_completed 活动。
+// 纯逻辑模块（非 serverFn 文件，可普通导出）——bug-repro.ts serverFn 只是
+// requireAuth + assertBugProjectMember 薄壳，组装/超时/校验/落库全部收在这里。
+// 预算（§11）：堆栈截断 8KB、事件样本仅最近 2 条、面包屑全局最近 20 条——
+// 防止长堆栈撑爆上下文。
+import type { Prisma } from "@allbluecn/database";
+import type { SchemaInput } from "@tanstack/ai";
+import { z } from "zod";
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import { hasAiKey, runChatAsAgent } from "@/server/ai-gateway";
+import { fenceLlmData } from "@/server/ai-gateway/llm-fence";
+
+// ── token 预算常量（§11）──
+export const REPRO_STACK_MAX_BYTES = 8 * 1024;
+export const REPRO_EVENT_SAMPLE_COUNT = 2;
+export const REPRO_BREADCRUMB_BUDGET = 20;
+
+// 内部超时 55s（Promise.race）：兼容 serverless 函数时长边界（Vercel 默认档 60s）；
+// 超时置 failed 可重试。测试注入短 timeoutMs 走同一代码路径。
+export const REPRO_TIMEOUT_MS = 55_000;
+
+// ── 结构化输出 schema（outputSchema 强约束 + 落库前 zod 复核）──
+export const REPRO_REPORT_SCHEMA = z.object({
+  verdict: z.enum(["reproduced", "not_reproduced", "insufficient_info"]),
+  confidence: z.number().min(0).max(1),
+  reasoning: z.string(),
+  rootCauseHypothesis: z.string(),
+  suggestedFix: z.string(),
+  missingInfo: z.array(z.string()),
+});
+
+export type ReproReport = z.output<typeof REPRO_REPORT_SCHEMA>;
+
+// outputSchema 直传 zod schema（照 label-suggest-core 先例）：
+// 请求端约束模型输出，返回的 raw JSON 再经 parseReproReport 复核。
+export const REPRO_OUTPUT_SCHEMA: SchemaInput = REPRO_REPORT_SCHEMA;
+
+/** BUG 上下文快照（serverFn 侧查出后传入，避免 runner 反查权限） */
+export interface ReproBugSnapshot {
+  title: string;
+  /** TipTap {html, markdown} JSON 字符串（历史数据可能是裸 markdown/HTML） */
+  description: string | null;
+  reproduceSteps: unknown;
+  env: string | null;
+  url: string | null;
+  /** 归一化前原始堆栈（落库已截 ≤64KB，这里再截 8KB 进 prompt） */
+  stackSummary: string | null;
+  repoHints: string | null;
+}
+
+/** 事件样本（BugEvent 投影） */
+export interface ReproEventSample {
+  rawPayload: unknown;
+  occurTime: Date;
+}
+
+export interface ReproRunOutcome {
+  runId: string;
+  status: "completed" | "failed";
+  report: ReproReport | null;
+  error: string | null;
+}
+
+// ── 输入组装 ──
+
+/** UTF-8 字节级截断（8KB 预算按字节算而非字符数；尾部分割多字节字符产生的
+ * U+FFFD 替换符修剪掉） */
+export function truncateUtf8Bytes(value: string, maxBytes: number): string {
+  if (Buffer.byteLength(value, "utf8") <= maxBytes) return value;
+  return Buffer.from(value, "utf8")
+    .subarray(0, maxBytes)
+    .toString("utf8")
+    .replace(/\uFFFD+$/g, "");
+}
+
+/** Bug.description（TipTap JSON）→ markdown（照 bug-story-utils 兼容口径：
+ * JSON 时取 markdown 字段；裸 HTML/markdown 历史数据按原文读） */
+function extractDescriptionMarkdown(desc: string | null): string {
+  if (!desc) return "";
+  try {
+    const parsed = JSON.parse(desc) as { markdown?: unknown };
+    if (typeof parsed.markdown === "string") return parsed.markdown;
+  } catch {
+    // 非 JSON：按原文（安全等价，见 lib/story/description-diff.ts 口径）
+  }
+  return desc;
+}
+
+function orNone(value: string, fallback = "（无）"): string {
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : fallback;
+}
+
+/** 事件样本瘦身：只留时间线字段（stack 与顶层堆栈变量重复、extra/userAgent
+ * 噪音大，均丢弃），面包屑单独全局预算 */
+function serializeEventSample(ev: ReproEventSample): Record<string, unknown> {
+  const payload =
+    typeof ev.rawPayload === "object" && ev.rawPayload !== null
+      ? (ev.rawPayload as Record<string, unknown>)
+      : {};
+  const pickString = (key: string): string | null =>
+    typeof payload[key] === "string" ? (payload[key] as string) : null;
+  return {
+    occurTime: ev.occurTime.toISOString(),
+    type: pickString("type"),
+    errorName: pickString("errorName"),
+    message: pickString("message"),
+    url: pickString("url"),
+  };
+}
+
+/** 面包屑全局预算：合并样本事件（旧→新），保留最近 N 条后回正序 */
+export function collectRecentBreadcrumbs(events: ReproEventSample[]): unknown[] {
+  const merged: unknown[] = [];
+  for (const ev of events) {
+    const payload =
+      typeof ev.rawPayload === "object" && ev.rawPayload !== null
+        ? (ev.rawPayload as Record<string, unknown>)
+        : {};
+    if (Array.isArray(payload.breadcrumbs)) merged.push(...payload.breadcrumbs);
+  }
+  return merged.slice(-REPRO_BREADCRUMB_BUDGET);
+}
+
+/** prompt 八变量组装（与 prompts/builtin.ts 的 bug.reproduce variables 一一对应；
+ * 用户可控内容一律 fenceLlmData 围栏，防 prompt 注入） */
+export function buildReproPromptVars(
+  bug: ReproBugSnapshot,
+  events: ReproEventSample[],
+): Record<string, string> {
+  // 时间正序后取尾部：调用方传 desc 查询结果（新→旧）也安全
+  const chronological = [...events].sort(
+    (a, b) => a.occurTime.getTime() - b.occurTime.getTime(),
+  );
+  const recent = chronological.slice(-REPRO_EVENT_SAMPLE_COUNT);
+
+  const recentEventsJson =
+    recent.length > 0
+      ? JSON.stringify(
+          {
+            events: recent.map(serializeEventSample),
+            breadcrumbs: collectRecentBreadcrumbs(recent),
+          },
+          null,
+          2,
+        )
+      : "";
+
+  const stepsJson =
+    bug.reproduceSteps == null
+      ? ""
+      : JSON.stringify(bug.reproduceSteps, null, 2);
+
+  return {
+    title: fenceLlmData("BUG 标题", orNone(bug.title)),
+    description: fenceLlmData("BUG 描述", orNone(extractDescriptionMarkdown(bug.description))),
+    reproduceSteps: fenceLlmData("复现步骤", orNone(stepsJson)),
+    // env 是 SDK 匿名上报自由文本（collect token 可由外部不可信方写入），同过围栏
+    env: fenceLlmData("发生环境", orNone(bug.env ?? "", "（未记录）")),
+    url: fenceLlmData("发生页面 URL", orNone(bug.url ?? "")),
+    stack: fenceLlmData(
+      "原始堆栈",
+      orNone(truncateUtf8Bytes(bug.stackSummary ?? "", REPRO_STACK_MAX_BYTES), "（无堆栈）"),
+    ),
+    recentEvents: fenceLlmData("最近事件样本", orNone(recentEventsJson)),
+    repoHints: fenceLlmData("仓库线索", orNone(bug.repoHints ?? "")),
+  };
+}
+
+// ── 输出解析 ──
+
+function stripCodeFence(raw: string): string {
+  const trimmed = raw.trim();
+  if (trimmed.startsWith("```")) {
+    return trimmed
+      .replace(/^```[^\n]*\s*/, "")
+      .replace(/```\s*$/, "")
+      .trim();
+  }
+  return trimmed;
+}
+
+/** R17 配套加固：模型在 JSON 前后带说明文字时（gpt-4o-mini 对「仅输出 JSON」
+ * 指令的服从并不稳定），提取首个平衡的 JSON object 子串（字符串字面量内的
+ * 花括号/引号不参与计数）。无平衡块返回 null。 */
+function extractJsonObject(raw: string): string | null {
+  const start = raw.indexOf("{");
+  if (start === -1) return null;
+  let depth = 0;
+  let inString = false;
+  let escaped = false;
+  for (let i = start; i < raw.length; i++) {
+    const ch = raw[i]!;
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (ch === "\\") escaped = true;
+      else if (ch === '"') inString = false;
+      continue;
+    }
+    if (ch === '"') inString = true;
+    else if (ch === "{") depth++;
+    else if (ch === "}") {
+      depth--;
+      if (depth === 0) return raw.slice(start, i + 1);
+    }
+  }
+  return null;
+}
+
+/** raw 返回 → 结构化报告（JSON.parse + zod 复核；任一步失败抛错 → run.failed）。
+ * 解析顺序：整段 parse → code fence 剥离 → 首个平衡 JSON object 子串
+ * （模型输出夹带说明文字时的兜底，R17 实测 gpt-4o-mini 出现过）。 */
+export function parseReproReport(raw: string): ReproReport {
+  const candidates = [raw, stripCodeFence(raw), extractJsonObject(raw) ?? ""];
+  let parsed: unknown;
+  let lastError: unknown;
+  for (const candidate of candidates) {
+    if (!candidate) continue;
+    try {
+      parsed = JSON.parse(candidate);
+      break;
+    } catch (e) {
+      lastError = e;
+    }
+  }
+  if (parsed === undefined) {
+    throw new Error(
+      `AI 返回内容不是合法 JSON（${lastError instanceof Error ? lastError.message : "未知"}）`,
+    );
+  }
+  const result = REPRO_REPORT_SCHEMA.safeParse(parsed);
+  if (!result.success) {
+    const issue = result.error.issues[0];
+    const path = issue?.path.join(".") || "(root)";
+    throw new Error(`AI 返回报告字段校验失败：${path}（${issue?.message ?? "未知问题"}）`);
+  }
+  return result.data;
+}
+
+// ── 运行器 ──
+
+function raceWithTimeout<T>(promise: Promise<T>, timeoutMs: number): Promise<T> {
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  const timeout = new Promise<never>((_, reject) => {
+    timer = setTimeout(
+      () => reject(new Error(`AI 复现执行超时（${timeoutMs}ms 上限，可重试）`)),
+      timeoutMs,
+    );
+  });
+  // 输家 promise 静默兜底，避免超时后悬挂 rejection 触发 unhandledRejection
+  promise.catch(() => {});
+  return Promise.race([promise, timeout]).finally(() => clearTimeout(timer));
+}
+
+function toJsonValue(value: unknown): Prisma.InputJsonValue {
+  return JSON.parse(JSON.stringify(value)) as Prisma.InputJsonValue;
+}
+
+/**
+ * AI 复现执行链：hasAiKey 预检（未配置抛错，不产生孤儿 run）→ 建
+ * BugReproRun(running) → runChatAsAgent（outputSchema 强约束 + 55s 超时）→
+ * zod 复核 → completed + report + ai_repro_completed 活动；任何失败
+ * （超时/校验/网关异常）→ failed + error（可重试：UI 再调建新 run）。
+ * 失败不 throw（返回结构化 outcome，UI 有 runId 可展示重试）；
+ * 仅「AI 未配置 / BUG 不存在」在建 run 前抛错。
+ */
+export async function runBugReproCore(input: {
+  bugId: string;
+  userId: string;
+  /** 测试注入短超时；生产默认 55s（serverless 60s 边界内） */
+  timeoutMs?: number;
+}): Promise<ReproRunOutcome> {
+  const timeoutMs = input.timeoutMs ?? REPRO_TIMEOUT_MS;
+  const prisma = await getPrisma();
+
+  if (!(await hasAiKey(input.userId))) {
+    throw new Error("AI 未配置，请先前往 AI 设置页配置 API Key");
+  }
+
+  const bug = await prisma.bug.findUnique({
+    where: { id: input.bugId },
+    select: {
+      title: true,
+      description: true,
+      reproduceSteps: true,
+      env: true,
+      url: true,
+      stackSummary: true,
+      repoHints: true,
+    },
+  });
+  if (!bug) throw new Error("BUG 不存在");
+
+  // 事件样本：仅最近 2 条快照（新→旧查出，组装时回正序）
+  const events: ReproEventSample[] = await prisma.bugEvent.findMany({
+    where: { bugId: input.bugId },
+    orderBy: { occurTime: "desc" },
+    take: REPRO_EVENT_SAMPLE_COUNT,
+    select: { rawPayload: true, occurTime: true },
+  });
+
+  const run = await prisma.bugReproRun.create({
+    data: {
+      bugId: input.bugId,
+      status: "running",
+      createdById: input.userId,
+    },
+  });
+
+  try {
+    const promptVars = buildReproPromptVars(bug, events);
+    const raw = await raceWithTimeout(
+      runChatAsAgent(
+        "bug.reproduce",
+        [
+          {
+            role: "user",
+            content:
+              "请基于系统提示词中的 BUG 上下文进行静态分析，输出结构化复现报告。",
+          },
+        ],
+        {
+          userId: input.userId,
+          temperature: 0.2,
+          promptVars,
+          outputSchema: REPRO_OUTPUT_SCHEMA,
+        },
+      ),
+      timeoutMs,
+    );
+
+    const report = parseReproReport(raw);
+
+    // 条件更新防并发（与 claim_fix 同款）：running 才结单
+    const updated = await prisma.bugReproRun.updateMany({
+      where: { id: run.id, status: "running" },
+      data: { status: "completed", report: toJsonValue(report) },
+    });
+    if (updated.count > 0) {
+      await prisma.bugActivity.create({
+        data: {
+          bugId: input.bugId,
+          userId: input.userId,
+          action: "ai_repro_completed",
+          isAI: true,
+          metadata: { verdict: report.verdict },
+        },
+      });
+    }
+
+    return { runId: run.id, status: "completed", report, error: null };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    await prisma.bugReproRun.updateMany({
+      where: { id: run.id, status: "running" },
+      data: { status: "failed", error: message },
+    });
+    return { runId: run.id, status: "failed", report: null, error: message };
+  }
+}

package/src/server/bug-report/severity-rules.ts

@@ -0,0 +1,68 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// BUG severity 映射规则（规格 §8.5）：表驱动（数组 + 匹配函数），
+// 便于后续开放项目级配置。零 prisma/零 server 依赖，供任务 14（上报 API）消费。
+import type { BugSeverity } from "@/shared/bug/constants";
+
+export interface SeverityInput {
+  /** 事件错误名，如 "TypeError" / "NetworkError" */
+  errorName: string;
+  /** 上报协议 type 字段（§8.2），资源加载/网络类判定用；缺省视为非资源类 */
+  type?: string | null;
+}
+
+export interface SeverityRule {
+  /** 规则标识（开放项目级配置时的引用名） */
+  name: string;
+  match: (input: SeverityInput) => boolean;
+  severity: BugSeverity;
+}
+
+/**
+ * 规则按数组顺序求值、首个命中即返回。定序 = 规格原文顺序（high → low）：
+ * 程序性异常（TypeError/ReferenceError/SyntaxError）优先判 high——即使发生在
+ * 网络回调里（type=network 的 TypeError 仍是代码缺陷信号）；资源加载/网络类
+ * 多为环境噪音降为 low；两者都不中默认 medium。
+ */
+export const SEVERITY_RULES: readonly SeverityRule[] = [
+  {
+    name: "programming-error",
+    match: ({ errorName }) =>
+      ["TypeError", "ReferenceError", "SyntaxError"].includes(errorName),
+    severity: "high",
+  },
+  {
+    name: "resource-network",
+    // 大小写不敏感，兼容 "NetworkError" / "network_error" / "Resource" 等命名
+    match: ({ errorName, type }) =>
+      /resource|network/i.test(type ?? "") || /network/i.test(errorName),
+    severity: "low",
+  },
+];
+
+/** 未命中任何规则时的默认 severity（规格 §8.5「其余」） */
+export const DEFAULT_SEVERITY: BugSeverity = "medium";
+
+export function resolveSeverity(input: SeverityInput): BugSeverity {
+  for (const rule of SEVERITY_RULES) {
+    if (rule.match(input)) {
+      return rule.severity;
+    }
+  }
+  return DEFAULT_SEVERITY;
+}

package/src/server/bug-report/tokens.ts

@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 项目接入凭证纯函数（规格 §3.5）：token 格式 abk_ + 32 位随机，明文仅在
+// 创建时返回一次，库存 sha256 hash + 8 字符前缀。零 prisma/零 server 依赖，
+// 供任务 14（上报 API 鉴权）与任务 20（MCP 鉴权）消费。
+import { createHash, randomInt } from "node:crypto";
+
+export const BUG_TOKEN_PREFIX = "abk_";
+export const BUG_TOKEN_BODY_LENGTH = 32;
+export const BUG_TOKEN_PATTERN = /^abk_[a-z0-9]{32}$/;
+
+const TOKEN_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
+
+export interface GeneratedProjectToken {
+  /** 明文，仅创建时返回一次，服务端不落库 */
+  plaintext: string;
+  /** sha256(明文) hex，落 ProjectAccessToken.tokenHash */
+  tokenHash: string;
+  /** 明文前 8 字符（"abk_9x8z"），列表识别用 */
+  tokenPrefix: string;
+}
+
+/** 校验流程第二步：请求头明文 → sha256 → 查 tokenHash（规格 §3.5） */
+export function hashToken(plaintext: string): string {
+  return createHash("sha256").update(plaintext).digest("hex");
+}
+
+/** 快速格式校验（无效 key 可在查库前直接 401） */
+export function isValidTokenFormat(plaintext: string): boolean {
+  return BUG_TOKEN_PATTERN.test(plaintext);
+}
+
+/** crypto.randomInt 拒绝采样保证 36 字符表均匀分布 */
+function randomTokenBody(length: number): string {
+  let body = "";
+  for (let i = 0; i < length; i++) {
+    body += TOKEN_ALPHABET[randomInt(TOKEN_ALPHABET.length)];
+  }
+  return body;
+}
+
+export function generateProjectToken(): GeneratedProjectToken {
+  const plaintext = `${BUG_TOKEN_PREFIX}${randomTokenBody(BUG_TOKEN_BODY_LENGTH)}`;
+  return {
+    plaintext,
+    tokenHash: hashToken(plaintext),
+    tokenPrefix: plaintext.slice(0, 8),
+  };
+}

package/src/server/bug-report/webhook-out.ts

@@ -0,0 +1,154 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 出站 webhook 投递（任务 23，规格 §3.8）：项目级 ProjectWebhook 订阅驱动，
+// HMAC-SHA256 签名（X-Allblue-Signature: sha256=<hmac(timestamp + "." + body)>，
+// timestamp 秒级十进制走 X-Allblue-Timestamp），逐端点 fire-and-forget POST
+// （AbortSignal.timeout 5s）。失败静默（console.warn 单行，不建投递表、不重试）——
+// webhook 永不反噬业务主链路：fireBugWebhook 同步返回 void，投递路径任何异常
+// （含 prisma 查询、JSON 序列化、HMAC 计算）全部内部吞掉，调用方（report-handler
+// 的 identifier 重试 try 块、bug-fix return 前、MCP report_result）不会被误判为业务失败。
+import { createHmac } from "node:crypto";
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import { assertFetchableUrl } from "@/server/fetch-guard";
+import { BUG_WEBHOOK_EVENTS, type BugWebhookEvent } from "@/shared/bug/constants";
+
+// 事件名规范（规格 §3.8）唯一定义在客户端安全的 @/shared/bug/constants
+// （设置页勾选列表与 serverFn 校验共用），此处 re-export 供 server 侧消费。
+export { BUG_WEBHOOK_EVENTS, type BugWebhookEvent };
+
+/** 投递超时（ms）：对端无响应 5s 放弃，不占用业务请求周期 */
+export const WEBHOOK_TIMEOUT_MS = 5000;
+
+/** webhook body 的 bug 对象（规格 §3.8：id/identifier/title/severity/state/url/stackSummary） */
+export interface BugWebhookBugInfo {
+  id: string;
+  identifier: string;
+  title: string;
+  severity: string;
+  state: string;
+  url: string | null;
+  stackSummary: string | null;
+}
+
+/** fireBugWebhook 入参：projectId + bug 摘要 + 可选 fixRunId（fix.* 事件专用） */
+export interface BugWebhookInput {
+  projectId: string;
+  bug: BugWebhookBugInfo;
+  fixRunId?: string;
+}
+
+/** 订阅行 shape（prisma.projectWebhook 查询结果的最小口径，events 为 Json） */
+interface WebhookRow {
+  id: string;
+  url: string;
+  secret: string;
+  events: unknown;
+  enabled: boolean;
+}
+
+/**
+ * 触发项目级 webhook 通知。fire-and-forget：同步返回 void，调用方不等待、
+ * 不感知投递结果；只投 enabled 且 events 订阅了该事件的端点。
+ */
+export function fireBugWebhook(event: BugWebhookEvent, input: BugWebhookInput): void {
+  void deliverBugWebhook(event, input);
+}
+
+/** 投递主链路：顶层 try/catch 全吞——本函数的任何失败都只落 console.warn */
+async function deliverBugWebhook(event: BugWebhookEvent, input: BugWebhookInput): Promise<void> {
+  try {
+    const prisma = await getPrisma();
+    const rows = (await prisma.projectWebhook.findMany({
+      where: { projectId: input.projectId, enabled: true },
+    })) as WebhookRow[];
+
+    // enabled 双重校验：查询 where 已过滤，行级再兜一道（订阅快照/脏数据防漂移）
+    const targets = rows.filter(
+      (row) => row.enabled && subscribedEvents(row.events).includes(event),
+    );
+    if (targets.length === 0) return;
+
+    // body 先序列化定稿再逐端点签名（签名对象是实际发送的字节，防双序列化漂移）
+    const body = JSON.stringify({
+      event,
+      projectId: input.projectId,
+      bug: input.bug,
+      ...(input.fixRunId !== undefined ? { fixRunId: input.fixRunId } : {}),
+    });
+
+    await Promise.allSettled(
+      targets.map((target) => deliverToTarget(event, target, body)),
+    );
+  } catch (error: unknown) {
+    warnDeliveryFailure(event, "投递链路异常", error);
+  }
+}
+
+/** 单端点投递：独立 try/catch，一个端点失败不拖垮同批其他端点 */
+async function deliverToTarget(
+  event: BugWebhookEvent,
+  target: WebhookRow,
+  body: string,
+): Promise<void> {
+  try {
+    // SEC-07 投递双层校验之二：注册期守卫（createBugWebhookFn）之后，存量脏 URL
+    // （守卫生效前注册的历史行/直接落库数据）在出口再拦一次；拒绝即跳过该端点，
+    // 与其他投递失败同话术静默 warn（fire-and-forget 永不反噬业务主链路）
+    const targetUrl = assertFetchableUrl(target.url);
+    // 秒级 Unix 时间戳（GitHub webhook 同款惯例），随 X-Allblue-Timestamp 头外发供接收方验签
+    const timestamp = Math.floor(Date.now() / 1000).toString();
+    const signature = createHmac("sha256", target.secret)
+      .update(`${timestamp}.${body}`)
+      .digest("hex");
+    // redirect:error 防 302 跳私网（webhook 接收端正常不重定向）
+    const response = await fetch(targetUrl, {
+      method: "POST",
+      redirect: "error",
+      headers: {
+        "Content-Type": "application/json",
+        "X-Allblue-Signature": `sha256=${signature}`,
+        "X-Allblue-Timestamp": timestamp,
+      },
+      body,
+      signal: AbortSignal.timeout(WEBHOOK_TIMEOUT_MS),
+    });
+    if (!response.ok) {
+      // 非 2xx：静默 log，不重试不建表（MVP 口径，规格 §3.8「失败静默」）
+      warnDeliveryFailure(event, `端点响应 ${response.status}（${target.url}）`, null);
+    }
+  } catch (error: unknown) {
+    warnDeliveryFailure(event, `端点请求失败（${target.url}）`, error);
+  }
+}
+
+/** events Json 安全读取：非数组/含非字符串项一律丢弃（脏数据降级为不订阅） */
+function subscribedEvents(raw: unknown): string[] {
+  if (!Array.isArray(raw)) return [];
+  return raw.filter((item): item is string => typeof item === "string");
+}
+
+/** 失败 log：单行 console.warn（换行折叠，避免多行日志刷屏） */
+function warnDeliveryFailure(
+  event: BugWebhookEvent,
+  reason: string,
+  error: unknown,
+): void {
+  const detail =
+    error instanceof Error ? error.message.replace(/\s+/g, " ") : String(error ?? "");
+  console.warn(`[webhook-out] ${event} ${reason}${detail ? `: ${detail}` : ""}`);
+}