@allbluecn/web-app 0.18.2 → 0.19.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@allbluecn/web-app",
-  "version": "0.18.2",
+  "version": "0.19.0",
   "license": "AGPL-3.0-or-later",
   "type": "module",
   "files": [
@@ -58,22 +58,29 @@
     "access": "public"
   },
   "dependencies": {
-    "@allbluecn/database": "0.9.2",
-    "@allbluecn/kernel": "0.9.1",
+    "@allbluecn/collab-core": "0.2.0",
+    "@allbluecn/database": "0.9.3",
+    "@allbluecn/kernel": "0.10.0",
+    "@ag-ui/core": "1.0.0",
     "@ariakit/react": "^0.4.28",
     "@auth/core": "^0.41.2",
     "@auth/prisma-adapter": "^2.11.2",
     "@aws-sdk/client-bedrock-runtime": "3.1131.0",
     "@aws-sdk/credential-providers": "3.1131.0",
     "@base-ui/react": "^1.8.0",
+    "@date-fns/tz": "^1.5.0",
     "@devframes/vite": "1.0.0",
+    "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/dom": "0.5.0",
     "@dnd-kit/react": "^0.5.0",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
     "@floating-ui/react": "^0.27.19",
     "@fontsource-variable/geist": "^5.3.0",
     "@fontsource-variable/geist-mono": "^5.3.0",
     "@fontsource-variable/inter": "^5.3.0",
     "@fumadocs/language": "^0.2.4",
+    "@hocuspocus/provider": "^4.7.0",
     "@iconify/react": "^6.0.2",
     "@leafer-in/arrow": "2.3.0",
     "@leafer-in/color": "2.3.0",
@@ -98,54 +105,55 @@
     "@react-email/render": "^2.1.0",
     "@shadcn/react": "^0.3.1",
     "@tabler/icons-react": "^3.44.0",
-    "@tanstack/ai": "0.55.0",
-    "@tanstack/ai-acp": "0.3.11",
-    "@tanstack/ai-anthropic": "0.18.7",
-    "@tanstack/ai-bedrock": "0.3.9",
-    "@tanstack/ai-byteplus": "0.3.7",
-    "@tanstack/ai-claude-code": "0.6.6",
-    "@tanstack/ai-client": "0.32.1",
-    "@tanstack/ai-code-mode": "0.4.10",
-    "@tanstack/ai-codex": "0.5.6",
-    "@tanstack/ai-devtools-core": "0.5.14",
-    "@tanstack/ai-event-client": "0.11.3",
-    "@tanstack/ai-fal": "0.14.1",
-    "@tanstack/ai-gemini": "0.30.0",
-    "@tanstack/ai-grok": "0.18.7",
-    "@tanstack/ai-groq": "0.7.6",
-    "@tanstack/ai-isolate-node": "0.1.51",
-    "@tanstack/ai-memory": "0.2.0",
-    "@tanstack/ai-mistral": "0.6.3",
-    "@tanstack/ai-ollama": "0.11.3",
-    "@tanstack/ai-openai": "0.22.8",
-    "@tanstack/ai-opencode": "0.4.6",
-    "@tanstack/ai-openrouter": "0.19.12",
-    "@tanstack/ai-persistence": "0.6.0",
-    "@tanstack/ai-react": "0.27.0",
-    "@tanstack/ai-sandbox": "0.5.9",
-    "@tanstack/ai-sandbox-daytona": "0.3.3",
-    "@tanstack/ai-sandbox-vercel": "0.2.4",
-    "@tanstack/ai-skills": "0.1.4",
-    "@tanstack/ai-utils": "0.4.0",
-    "@tanstack/db": "0.8.6",
-    "@tanstack/hotkeys": "^0.8.0",
-    "@tanstack/markdown": "^0.0.15",
+    "@tanstack/ai": "1.0.0",
+    "@tanstack/ai-acp": "1.0.0",
+    "@tanstack/ai-anthropic": "1.0.0",
+    "@tanstack/ai-bedrock": "1.0.0",
+    "@tanstack/ai-byteplus": "1.0.0",
+    "@tanstack/ai-claude-code": "1.0.0",
+    "@tanstack/ai-client": "1.0.0",
+    "@tanstack/ai-code-mode": "1.0.0",
+    "@tanstack/ai-codex": "1.0.0",
+    "@tanstack/ai-devtools-core": "1.0.0",
+    "@tanstack/ai-event-client": "1.0.0",
+    "@tanstack/ai-fal": "1.0.0",
+    "@tanstack/ai-gemini": "1.0.0",
+    "@tanstack/ai-grok": "1.0.0",
+    "@tanstack/ai-groq": "1.0.0",
+    "@tanstack/ai-isolate-node": "1.0.0",
+    "@tanstack/ai-memory": "1.0.0",
+    "@tanstack/ai-mistral": "1.0.0",
+    "@tanstack/ai-ollama": "1.0.0",
+    "@tanstack/ai-openai": "1.0.0",
+    "@tanstack/ai-opencode": "1.0.0",
+    "@tanstack/ai-openrouter": "1.0.0",
+    "@tanstack/ai-persistence": "1.0.0",
+    "@tanstack/ai-react": "1.0.0",
+    "@tanstack/ai-sandbox": "1.0.0",
+    "@tanstack/ai-sandbox-daytona": "1.0.0",
+    "@tanstack/ai-sandbox-vercel": "1.0.0",
+    "@tanstack/ai-skills": "1.0.0",
+    "@tanstack/ai-utils": "1.0.0",
+    "@tanstack/db": "0.15.2",
+    "@tanstack/hotkeys": "^0.18.0",
+    "@tanstack/markdown": "^1.0.0",
     "@tanstack/pacer": "^0.23.1",
-    "@tanstack/query-db-collection": "1.2.11",
-    "@tanstack/react-db": "0.3.6",
-    "@tanstack/react-form": "2.0.0-alpha.2",
-    "@tanstack/react-hotkeys": "^0.10.0",
+    "@tanstack/query-db-collection": "1.4.8",
+    "@tanstack/react-form": "2.0.0-alpha.3",
+    "@tanstack/react-hotkeys": "^0.17.0",
     "@tanstack/react-pacer": "^0.24.1",
-    "@tanstack/react-query": "^5.104.1",
-    "@tanstack/react-router": "1.170.41",
+    "@tanstack/react-query": "^5.104.5",
+    "@tanstack/react-router": "1.170.46",
     "@tanstack/react-router-ssr-query": "^1.167.3",
-    "@tanstack/react-start": "1.168.60",
+    "@tanstack/react-start": "1.169.4",
     "@tanstack/react-store": "^0.11.2",
-    "@tanstack/react-table": "^9.2.6",
-    "@tanstack/react-virtual": "^3.14.13",
+    "@tanstack/react-table": "^9.3.1",
+    "@tanstack/react-virtual": "^3.14.22",
     "@tanstack/store": "^0.11.2",
     "@tiptap/core": "^3.31.3",
     "@tiptap/extension-code-block-lowlight": "^3.31.3",
+    "@tiptap/extension-collaboration": "3.31.3",
+    "@tiptap/extension-collaboration-caret": "3.31.3",
     "@tiptap/extension-color": "^3.31.3",
     "@tiptap/extension-drag-handle-react": "^3.31.3",
     "@tiptap/extension-emoji": "^3.31.3",
@@ -193,7 +201,7 @@
     "fumadocs-ui": "16.15.8",
     "ioredis": "^5.11.0",
     "is-hotkey": "^0.2.0",
-    "isomorphic-dompurify": "^3.22.0",
+    "jsdom": "^29.1.1",
     "jszip": "^3.10.2",
     "katex": "^0.18.7",
     "leafer-editor": "2.3.0",
@@ -218,19 +226,21 @@
     "radix-ui": "^1.4.3",
     "react": "19.2.4",
     "react-colorful": "5.8.0",
-    "react-day-picker": "^10.0.1",
+    "react-day-picker": "^10.0.2",
     "react-dom": "19.2.4",
     "react-hotkeys-hook": "^5.3.2",
     "react-markdown": "^10.1.0",
     "react-resizable-panels": "^4.11.1",
     "react-textarea-autosize": "^8.5.9",
     "remark-gfm": "^4.0.1",
+    "sanitize-html": "^2.18.0",
     "shiki": "^4.2.0",
     "sqlite-vec": "^0.1.9",
     "start-authjs": "^1.0.2",
     "tailwind-merge": "^3.5.0",
     "three": "^0.180.0",
     "tw-animate-css": "^1.4.0",
+    "yjs": "^13.6.33",
     "zod": "^4.4.3"
   },
   "devDependencies": {
@@ -243,10 +253,10 @@
     "@playwright/mcp": "^0.0.75",
     "@playwright/test": "^1.60.0",
     "@tailwindcss/vite": "^4.3.3",
-    "@tanstack/devtools": "0.14.2",
+    "@tanstack/devtools": "0.15.0",
     "@tanstack/devtools-ui": "0.7.1",
-    "@tanstack/react-ai-devtools": "0.2.71",
-    "@tanstack/react-query-devtools": "5.104.1",
+    "@tanstack/react-ai-devtools": "1.0.0",
+    "@tanstack/react-query-devtools": "5.104.5",
     "@tanstack/react-router-devtools": "1.167.2",
     "@testing-library/jest-dom": "7.0.1",
     "@testing-library/react": "^16.3.2",
@@ -255,18 +265,19 @@
     "@types/better-sqlite3": "^7.6.13",
     "@types/file-saver": "^2.0.7",
     "@types/is-hotkey": "^0.1.10",
+    "@types/jsdom": "^28.0.3",
     "@types/mdx": "^2.0.14",
     "@types/node": "^24.13.3",
     "@types/pg": "^8.20.0",
     "@types/react": "^19",
     "@types/react-dom": "^19",
+    "@types/sanitize-html": "^2.16.2",
     "@vitejs/plugin-react": "^6.0.1",
     "@vitest/browser-playwright": "5.0.0",
     "@vitest/coverage-v8": "5.0.0",
     "@vitest/ui": "5.0.0",
     "eslint": "^9",
     "eslint-plugin-unused-imports": "^4.4.1",
-    "jsdom": "^29.1.1",
     "msw": "2.15.0",
     "playwright": "^1.60.0",
     "sass": "^1.100.0",
@@ -278,7 +289,8 @@
     "vite": "^8.3.3",
     "vitest": "5.0.0",
     "vitest-browser-react": "2.3.0",
-    "wrangler": "^4.99.0"
+    "wrangler": "^4.99.0",
+    "y-protocols": "1.0.7"
   },
   "prisma": {
     "version": "7.8.0",
@@ -291,6 +303,9 @@
     "dev": "vite --port 3000",
     "build": "vite build",
     "start": "vite preview",
+    "build:cf": "DEPLOY_TARGET=cloudflare vite build",
+    "deploy:cf": "pnpm build:cf && node ../../scripts/check-cf-worker-size.mjs . dist/server/wrangler.json && wrangler deploy -c dist/server/wrangler.json",
+    "preview:cf": "pnpm build:cf && wrangler dev -c dist/server/wrangler.json --test-scheduled --port 8787",
     "prelint": "node scripts/check-no-use-client.mjs",
     "lint": "eslint",
     "test": "vitest",

package/src/__tests__/components/auth/auth-layout.test.tsx

@@ -15,10 +15,22 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import { describe, it, expect } from 'vitest'
+import { describe, it, expect, vi } from 'vitest'
 import { render, screen } from '@testing-library/react'
 import { AuthLayout, AuthLayoutLeft, AuthLayoutRight } from '@/components/auth/auth-layout'
 
+// #442 起 AuthLayout 内的 AnimatedThemeToggler 消费 useThemeMode（需 ThemeModeProvider），
+// 真实 provider 依赖 next-themes，测试按 use-commands.test.tsx 同款惯例 mock 钩子。
+vi.mock('@/providers/theme-mode-provider', () => ({
+  useThemeMode: () => ({
+    mode: 'auto',
+    setMode: vi.fn(),
+    toggle: vi.fn(),
+    resolved: 'light',
+    mounted: true,
+  }),
+}))
+
 describe('AuthLayout', () => {
   it('renders left content', () => {
     render(<AuthLayout><AuthLayoutLeft><div>form content</div></AuthLayoutLeft></AuthLayout>)

package/src/__tests__/{knowledge-public → knowledge/public}/canonical-id.test.ts

@@ -22,7 +22,7 @@ import {
   dictionaryCanonicalId,
   bookmarkCanonicalId,
   parseGithubUrl,
-} from '@/server/knowledge-public/canonical-id'
+} from '@/server/knowledge/public/canonical-id'
 
 describe('canonicalId 生成', () => {
   it('法律:优先用编号,空则用 title', () => {

package/src/__tests__/{knowledge-public → knowledge/public}/favicon.test.ts

@@ -20,7 +20,7 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
 const fetchMock = vi.fn()
 vi.stubGlobal('fetch', fetchMock)
 
-import { resolveFavicon } from '@/server/knowledge-public/favicon'
+import { resolveFavicon } from '@/server/knowledge/public/favicon'
 
 beforeEach(() => vi.clearAllMocks())
 

package/src/__tests__/{knowledge-public → knowledge/public}/github-sync.test.ts

@@ -20,7 +20,7 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
 const fetchMock = vi.fn()
 vi.stubGlobal('fetch', fetchMock)
 
-import { fetchGithubData } from '@/server/knowledge-public/github-sync'
+import { fetchGithubData } from '@/server/knowledge/public/github-sync'
 
 beforeEach(() => vi.clearAllMocks())
 

package/src/__tests__/{knowledge-public → knowledge/public}/share-merge.test.ts

@@ -16,7 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 import { describe, it, expect, vi, beforeEach } from 'vitest'
-import { shareToPublic } from '@/server/knowledge-public/share-merge'
+import { shareToPublic } from '@/server/knowledge/public/share-merge'
 
 vi.mock('@allbluecn/database', () => ({
   prisma: {
@@ -38,8 +38,8 @@ beforeEach(() => vi.clearAllMocks())
 
 describe('shareToPublic', () => {
   it('已存在公共记录时,追加分享人', async () => {
-    ;(prisma.legalRegulation.findFirst as any).mockResolvedValue({ id: 'pub-1', canonicalId: 'X' })
-    ;(prisma.knowledgeShareRecord.findFirst as any).mockResolvedValue(null)
+    ;vi.mocked(prisma.legalRegulation.findFirst).mockResolvedValue({ id: 'pub-1', canonicalId: 'X' } as never)
+    ;vi.mocked(prisma.knowledgeShareRecord.findFirst).mockResolvedValue(null)
 
     const result = await shareToPublic({
       model: 'legalRegulation',
@@ -57,8 +57,8 @@ describe('shareToPublic', () => {
   })
 
   it('用户已分享过时返回 already', async () => {
-    ;(prisma.legalRegulation.findFirst as any).mockResolvedValue({ id: 'pub-1', canonicalId: 'X' })
-    ;(prisma.knowledgeShareRecord.findFirst as any).mockResolvedValue({ id: 's-1' })
+    ;vi.mocked(prisma.legalRegulation.findFirst).mockResolvedValue({ id: 'pub-1', canonicalId: 'X' } as never)
+    ;vi.mocked(prisma.knowledgeShareRecord.findFirst).mockResolvedValue({ id: 's-1' } as never)
 
     const result = await shareToPublic({
       model: 'legalRegulation',
@@ -73,8 +73,8 @@ describe('shareToPublic', () => {
   })
 
   it('无公共记录时克隆新建', async () => {
-    ;(prisma.legalRegulation.findFirst as any).mockResolvedValue(null)
-    ;(prisma.legalRegulation.create as any).mockResolvedValue({ id: 'pub-2', canonicalId: 'X' })
+    ;vi.mocked(prisma.legalRegulation.findFirst).mockResolvedValue(null)
+    ;vi.mocked(prisma.legalRegulation.create).mockResolvedValue({ id: 'pub-2', canonicalId: 'X' } as never)
 
     const result = await shareToPublic({
       model: 'legalRegulation',

package/src/__tests__/security/xss-sanitize.test.ts

@@ -41,6 +41,7 @@ describe('XSS 防护：sanitize() 攻击载荷清理', () => {
 //   静态资源被篡改时提供纵深防御
 describe('XSS 防护：sanitizeSvg() SVG 结构完整性 + 恶意内容清理', () => {
   // 与 notion-avatar.tsx 中 SVGFilter 常量 + buildAvatar() 输出同构的样例
+// 断言用 /i：sanitize-html 输出小写名，浏览器 HTML 解析层自适应还原 SVG 大小写（渲染语义不变）
   const avatarSvg = `<svg viewBox="0 0 1080 1080" fill="none" xmlns="http://www.w3.org/2000/svg" style="width:100%;height:100%">
   <defs>
     <filter id="notion-avatar-filter" x="-20%" y="-20%" width="140%" height="140%" filterUnits="objectBoundingBox" primitiveUnits="userSpaceOnUse" color-interpolation-filters="linearRGB">
@@ -61,15 +62,15 @@ describe('XSS 防护：sanitizeSvg() SVG 结构完整性 + 恶意内容清理',
   it.each([
     ['<defs> 元素', /<defs[\s>]/],
     ['<filter> 元素', /<filter[\s>]/],
-    ['<feMorphology> 元素', /<feMorphology[\s>]/],
-    ['<feFlood> 元素', /<feFlood[\s>]/],
-    ['<feComposite> 元素', /<feComposite[\s>]/],
-    ['<feMerge> 元素', /<feMerge[\s>]/],
-    ['<feMergeNode> 元素', /<feMergeNode[\s>]/],
+    ['<feMorphology> 元素', /<feMorphology[\s>]/i],
+    ['<feFlood> 元素', /<feFlood[\s>]/i],
+    ['<feComposite> 元素', /<feComposite[\s>]/i],
+    ['<feMerge> 元素', /<feMerge[\s>]/i],
+    ['<feMergeNode> 元素', /<feMergeNode[\s>]/i],
     ['<g> 元素', /<g[\s>]/],
     ['<path> 元素', /<path[\s>]/],
-    ['filterUnits 属性', /filterUnits=/],
-    ['primitiveUnits 属性', /primitiveUnits=/],
+    ['filterUnits 属性', /filterUnits=/i],
+    ['primitiveUnits 属性', /primitiveUnits=/i],
     ['color-interpolation-filters 属性', /color-interpolation-filters=/],
     ['operator 属性', /operator=/],
     ['radius 属性', /radius=/],
@@ -79,7 +80,7 @@ describe('XSS 防护：sanitizeSvg() SVG 结构完整性 + 恶意内容清理',
     [' in2 属性', / in2=/],
     [' result 属性', / result=/],
     ['transform 属性', /transform=/],
-    ['viewBox 属性', /viewBox=/],
+    ['viewBox 属性', /viewBox=/i],
     ['xmlns 属性', /xmlns=/],
   ])('%s 保留', (_name, re) => {
     const cleaned = sanitizeSvg(avatarSvg)

package/src/components/ai/__tests__/chat-thread-id-stability.test.tsx

@@ -0,0 +1,125 @@
+// @vitest-environment jsdom
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+/**
+ * 审查重点 #1：threadId 每次 render 新值 = 每次发消息开新会话。
+ *
+ * threadId 必须从 useChat 的**每次调用入参**采样（而非从组件实例读取），
+ * 才能捕获「render 路径重新生成」的 bug：rerender 三次，断言三次传给
+ * useChat 的 threadId 相同且非空。同文件断言 options 使用 forwardedProps
+ * 键而非已废弃的 body（业务字段值原样保留）。
+ */
+
+const { useChatCalls } = vi.hoisted(() => ({
+  useChatCalls: [] as Array<Record<string, unknown>>,
+}));
+
+vi.mock("@tanstack/ai-react", () => ({
+  useChat: (options: Record<string, unknown>) => {
+    useChatCalls.push(options);
+    return {
+      messages: [],
+      sendMessage: vi.fn(),
+      isLoading: false,
+      error: null,
+    };
+  },
+  fetchServerSentEvents: (url: string, opts?: unknown) => ({
+    kind: "mock-sse",
+    url,
+    opts,
+  }),
+}));
+
+vi.mock("@tanstack/react-router", () => ({
+  Link: ({ children, to }: { children?: React.ReactNode; to?: string }) => (
+    <a href={to}>{children}</a>
+  ),
+}));
+
+vi.mock("@/components/ai/ai-prompt-input", () => ({
+  AIPromptInput: () => null,
+  DEFAULT_ACTIONS: [],
+}));
+
+vi.mock("@/components/ai/ai-prompt-input/image-filter", () => ({
+  filterImageFilesAndToast: () => [],
+}));
+
+vi.mock("@/components/magicui/word-rotate", () => ({
+  WordRotate: ({ words }: { words: string[] }) => <span>{words[0]}</span>,
+}));
+
+vi.mock("@/components/ai/tool-parts/tool-call-part", () => ({
+  ToolCallPartView: () => null,
+}));
+
+vi.mock("@/components/ai/tool-parts/tool-result-part", () => ({
+  ToolResultPartView: () => null,
+}));
+
+vi.mock("@/lib/ai/use-knowledge-bases", () => ({
+  useKnowledgeBases: () => [],
+}));
+
+vi.mock("@/components/harness/composer/attachments/use-attachments", () => ({
+  useAttachments: () => ({
+    attachments: [],
+    addFiles: vi.fn(),
+    removeAttachment: vi.fn(),
+  }),
+}));
+
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { render } from "@testing-library/react";
+import { AiChatPrompt } from "../ai-chat-prompt";
+
+const SELECTED_MODEL_STORAGE_KEY = "chat:selectedModel";
+
+describe("AiChatPrompt threadId 稳定性与 forwardedProps 形状", () => {
+  beforeEach(() => {
+    useChatCalls.length = 0;
+    window.localStorage.setItem(SELECTED_MODEL_STORAGE_KEY, "gpt-test");
+  });
+
+  it("rerender 三次 threadId 保持同一非空值（mount 级稳定，禁止每次 render 新值）", () => {
+    const { rerender } = render(<AiChatPrompt hasAiKey />);
+    rerender(<AiChatPrompt hasAiKey />);
+    rerender(<AiChatPrompt hasAiKey />);
+
+    expect(useChatCalls).toHaveLength(3);
+    const ids = useChatCalls.map((options) => options.threadId);
+    expect(typeof ids[0]).toBe("string");
+    expect((ids[0] as string).length).toBeGreaterThan(0);
+    expect(ids[0]).toBe(ids[1]);
+    expect(ids[1]).toBe(ids[2]);
+  });
+
+  it("options 使用 forwardedProps 键而非 body，业务字段值原样保留", () => {
+    render(<AiChatPrompt hasAiKey />);
+
+    expect(useChatCalls).toHaveLength(1);
+    const options = useChatCalls[0];
+    expect(options.connection).toBeTruthy();
+    expect(options.body).toBeUndefined();
+    expect(options.forwardedProps).toEqual({
+      model: "gpt-test",
+      promptKey: "chat.default",
+    });
+  });
+});

package/src/components/ai/ai-chat-prompt.tsx

@@ -16,7 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 
-import { useCallback } from "react";
+import { useCallback, useRef } from "react";
 import { useChat, fetchServerSentEvents } from "@tanstack/ai-react";
 import { ScrollArea } from "@/components/ui/scroll-area";
 import { Button } from "@/components/ui/button";
@@ -53,13 +53,19 @@ export function AiChatPrompt({ hasAiKey }: { hasAiKey?: boolean | null }) {
     window.dispatchEvent(new Event("allblue:open-global-sidebar"));
   }, []);
 
+  // threadId mount 级稳定值（useRef 初始值，绝无 render 路径重新生成）：
+  // 1.0 起 threadId 必填，且 useChat 在 connection/选项变化时重建 ChatClient——
+  // 每次 render 新值 = 每次发消息开新会话。
+  const threadIdRef = useRef(crypto.randomUUID())
+
   // reconnect 约束（P1-5）：同 harness/chat-ui.tsx，dev server 故障期减少自动
   // 重放 POST（默认 5 次 → 2 次、退避 250ms → 1s），避免 400 风暴。
   const { messages, sendMessage, isLoading, error } = useChat({
     connection: fetchServerSentEvents("/api/chat", {
       reconnect: { maxAttempts: 2, delayMs: 1000 },
     }),
-    body: { model: selectedModel, promptKey: 'chat.default' },
+    threadId: threadIdRef.current,
+    forwardedProps: { model: selectedModel, promptKey: 'chat.default' },
   });
 
   const configured = !!hasAiKey;

package/src/components/ai/ai-prompt-input/index.tsx

@@ -326,7 +326,8 @@ export function AIPromptInput({
           )}
         </div>
       )}
-      <Card className="w-full p-0 shadow-xs border">
+      {/* 不额外加 border：Card 基类已带 ring-1 ring-foreground/10，再加 border 会叠成 2px 显宽 */}
+      <Card className="w-full p-0 shadow-xs">
         <CardContent className="p-0">
           <form
             aria-label={m.chat_prompt_inputLabel()}

package/src/components/ai/global-harness-sidebar/__tests__/global-ai-prompts.test.ts

@@ -92,7 +92,6 @@ function coveredByBoardRule(rel: string): boolean {
  * 新增业务页面时二者必居其一：在此登记，或在 BOARD_RULES 增加板块规则。
  */
 const PAGES_WITHOUT_BOARDS = [
-  "acceptance-criteria",
   "bugs",
   "chat",
   "changelog",
@@ -102,7 +101,7 @@ const PAGES_WITHOUT_BOARDS = [
   "notion-like",
   "pricing-02",
   "projects",
-  "tags",
+  "tasks",
   "test-cases",
 ] as const;
 

package/src/components/ai/global-harness-sidebar/index.tsx

@@ -75,6 +75,7 @@ import {
   otherPanelSizes,
   type PanelSize,
 } from "./panel-size";
+import { useLayoutResponsive, useAiDocked } from "@/lib/layout-responsive";
 import {
   getGlobalAiPrompts,
   resolveGlobalAiBoardContext,
@@ -101,6 +102,9 @@ export function GlobalHarnessSidebar({ hasAiKey }: { hasAiKey?: boolean | null }
   const [mountNode, setMountNode] = useState<HTMLElement | null>(null);
   const floatHostRef = useRef<HTMLDivElement>(null);
   const mountNodeRef = useRef<HTMLElement | null>(null);
+  const { aiOverlay } = useLayoutResponsive();
+  // AI full 态是否占宽（展开且 full）：上报给布局做窄屏分配
+  useAiDocked(isOpen && size === "full");
 
   const [conversations, setConversations] = useState<Conversation[]>([]);
   const [activeThreadId, setActiveThreadId] = useState<string | undefined>(undefined);
@@ -165,10 +169,11 @@ export function GlobalHarnessSidebar({ hasAiKey }: { hasAiKey?: boolean | null }
       setMountNode(null);
       return;
     }
-    const target =
-      size === "full"
-        ? (document.getElementById(FULL_PANEL_SLOT_ID) ?? floatHostRef.current)
-        : floatHostRef.current;
+    // 最窄浮层态：挂载进内容区（与需求详情面板同一容器），absolute inset-0 精确对齐并盖住它
+    const fullTarget = aiOverlay
+      ? (document.querySelector<HTMLElement>('main[data-slot="sidebar-inset"]') ?? floatHostRef.current)
+      : (document.getElementById(FULL_PANEL_SLOT_ID) ?? floatHostRef.current);
+    const target = size === "full" ? fullTarget : floatHostRef.current;
     if (target && focusedRef.current) {
       requestAnimationFrame(() => {
         const textarea = target.querySelector("textarea");
@@ -184,7 +189,7 @@ export function GlobalHarnessSidebar({ hasAiKey }: { hasAiKey?: boolean | null }
     return () => {
       if (mountNodeRef.current === left) focusedRef.current = false;
     };
-  }, [isOpen, size]);
+  }, [isOpen, size, aiOverlay]);
 
   const loadConversations = useCallback(async () => {
     setLoadingConvos(true);
@@ -278,8 +283,13 @@ export function GlobalHarnessSidebar({ hasAiKey }: { hasAiKey?: boolean | null }
     }
   }, [deletingId, activeThreadId]);
 
+  // 空会话态（尚无 activeThreadId）的 threadId 兜底：mount 级稳定 UUID。
+  // 缺省时客户端每次发消息 mint 新 thread_*（= 每次开新会话）；真实会话 id
+  // 在新建/切换会话后经 activeThreadId 接管。
+  const fallbackThreadIdRef = useRef(crypto.randomUUID())
+
   const chat = useHarnessChat({
-    threadId: activeThreadId,
+    threadId: activeThreadId ?? fallbackThreadIdRef.current,
     initialMessages: initialMessages as any[],
     forwardedProps: {
       model: selectedModel,
@@ -354,7 +364,7 @@ export function GlobalHarnessSidebar({ hasAiKey }: { hasAiKey?: boolean | null }
       {/* 悬浮球触发器：full 态面板占满右列全高，悬浮球会压住发送按钮，故隐藏 */}
       {(!isOpen || isFloating) && (
         <Button
-          className="fixed bottom-4 right-4 z-50 size-14 rounded-full shadow-lg hover:bg-primary!"
+          className="fixed right-4 z-50 size-14 rounded-full shadow-lg hover:bg-primary! transition-[bottom] bottom-[calc(1rem+var(--ai-fab-lift,0px))]"
           size="icon"
           type="button"
           aria-label={m.chat_globalChat_title()}
@@ -382,9 +392,11 @@ export function GlobalHarnessSidebar({ hasAiKey }: { hasAiKey?: boolean | null }
             }}
             className={cn(
               "flex min-h-64 w-full flex-col overflow-hidden border bg-background",
-              isFloating
-                ? "rounded-xl shadow-lg"
-                : "h-full rounded-xl border-sidebar-border",
+              size === "full" && aiOverlay
+                ? "absolute inset-0 z-50 rounded-xl border-0"
+                : isFloating
+                  ? "rounded-xl shadow-lg"
+                  : "h-full rounded-xl border-sidebar-border",
             )}
             initial={false}
             onBlurCapture={() => {