@allbluecn/web-app 0.18.2 → 0.19.0

package/src/routes/_nav/test-cases/$caseId/route.tsx

@@ -23,6 +23,8 @@ import { getTestCaseFn } from "@/server/serverFns/testcase/testcase-crud";
 import { listTestCaseActivitiesFn } from "@/server/serverFns/testcase/testcase-activities";
 import { listFoldersFn } from "@/server/serverFns/testcase/testcase-folders";
 import { listUsersBriefFn } from "@/server/serverFns/story";
+import { getCollabSnapshotFn } from "@/server/serverFns/collab-snapshot";
+import { isCollabEnabled } from "@/lib/collab/env";
 
 function CaseDetailSkeleton() {
   return (
@@ -54,13 +56,20 @@ function CaseDetailSkeleton() {
 
 export const Route = createFileRoute("/_nav/test-cases/$caseId")({
   loader: async ({ params }) => {
+    // 协同快照并行取（规格 §6 SSR 初始快照链路，任务 22 Case 行）：未开协同
+    // 的环境（desktop / 未配置 VITE_COLLAB_WS_URL）零开销跳过；快照失败（权限/
+    // 竞态删除/网络）降级为 null → 详情页走非协同单机模式，不阻塞用例打开。
+    const collabPromise = isCollabEnabled()
+      ? getCollabSnapshotFn({ data: { entityType: "case", docId: params.caseId } }).catch(() => null)
+      : Promise.resolve(null);
     const testCase = await getTestCaseFn({ data: { id: params.caseId } });
-    const [users, { folders }, activities] = await Promise.all([
+    const [collab, users, foldersResp, activities] = await Promise.all([
+      collabPromise,
       listUsersBriefFn(),
       listFoldersFn({ data: {} }),
       listTestCaseActivitiesFn({ data: { caseId: params.caseId, take: 50 } }),
     ]);
-    return { testCase, users, folders, activities: activities.items };
+    return { testCase, collab, users, folders: foldersResp.folders, activities: activities.items };
   },
   pendingComponent: CaseDetailSkeleton,
 });

package/src/routes/api/chat.ts

@@ -17,13 +17,14 @@
 
 import { createFileRoute } from "@tanstack/react-router"
 import {
-  chatParamsFromRequestBody,
+  chatParamsFromRequest,
   memoryStream,
   resumeServerSentEventsResponse,
   resolveResumeRunId,
   toServerSentEventsResponse,
 } from "@tanstack/ai"
 import { reconstructChat } from "@tanstack/ai-persistence"
+import { AGUIError } from "@ag-ui/core"
 import { prisma } from "@allbluecn/database"
 import { handleChatRequest } from "@/server/ai-gateway"
 import { createPrismaPersistence } from "@/server/ai-gateway"
@@ -126,24 +127,24 @@ export const Route = createFileRoute("/api/chat")({
           throw err
         }
 
-        let raw: Record<string, unknown>
+        let params: Awaited<ReturnType<typeof chatParamsFromRequest>>
         try {
-          raw = (await request.json()) as Record<string, unknown>
-        } catch {
-          return new Response(
-            JSON.stringify({ error: "invalid_json_body" }),
-            { status: 400, headers: { "Content-Type": "application/json" } },
-          )
-        }
-        try {
-          await chatParamsFromRequestBody(raw)
+          params = await chatParamsFromRequest(request)
         } catch (err) {
-          // AG-UI 协议校验失败是客户端请求体缺陷，应为 400 而非 500。
-          // `AGUIError` 来自 `@ag-ui/core`（传递依赖，pnpm 严格隔离下不可直接
-          // import），故按 error.name + 特征文案双判据识别，其余异常原样上抛。
-          const message = err instanceof Error ? err.message : String(err)
+          // `chatParamsFromRequest` 把 JSON 解析失败与 AG-UI 校验失败统一包装为
+          // status 400 的 `Response`，原始错误挂在 `cause`。按 cause 恢复既有两
+          // 类 400 响应体，避免客户端请求体缺陷冒泡成 500 污染监控：
+          // - AGUIError（`@ag-ui/core` 已提升为直接依赖，1.0 构造器不设 name，
+          //   `name === "AGUIError"` 判据恒假 → instanceof 判定，特征文案兜底）
+          //   → `invalid_agui_request_body`
+          // - 其余（JSON SyntaxError）→ `invalid_json_body`
+          // 非 400 包装的异常原样上抛。
+          if (!(err instanceof Response) || err.status !== 400) throw err
+          // `cause` 是 undici/workerd 对 Response 的运行时扩展，DOM 类型未收录
+          const cause: unknown = (err as Response & { cause?: unknown }).cause
+          const message = cause instanceof Error ? cause.message : String(cause)
           if (
-            (err instanceof Error && err.name === "AGUIError") ||
+            cause instanceof AGUIError ||
             message.includes("not a valid AG-UI RunAgentInput")
           ) {
             return new Response(
@@ -154,10 +155,13 @@ export const Route = createFileRoute("/api/chat")({
               { status: 400, headers: { "Content-Type": "application/json" } },
             )
           }
-          throw err
+          return new Response(
+            JSON.stringify({ error: "invalid_json_body" }),
+            { status: 400, headers: { "Content-Type": "application/json" } },
+          )
         }
 
-        const biz = (raw.forwardedProps ?? raw.data ?? {}) as Record<string, unknown>
+        const biz = params.forwardedProps
         const agentId = biz.agentId as string | undefined
         const overrides = await resolveOverrides(session.user.id, agentId)
         if (overrides === null) {
@@ -168,7 +172,7 @@ export const Route = createFileRoute("/api/chat")({
         }
 
         const stream = await handleChatRequest(request, {
-          body: { ...raw, ...biz },
+          body: { ...params, ...biz },
           overrides,
           // 沙箱 middleware 经同一 factory 取 adapter（纯闭包，无实例状态），
           // 与下方 transport 共用一个 producer key——一份日志描述一次 run。

package/src/routes/api/design/prototype/route.ts

@@ -273,14 +273,12 @@ export const Route = createFileRoute("/api/design/prototype")({
           )
         }
         // TanStack AI 客户端（fetchServerSentEvents）发送 AG-UI RunAgentInput 信封，
-        // 业务字段落在 forwardedProps/data（chat.ts 同款双兼容读取）；
+        // 业务字段落在 forwardedProps（chat.ts 同款单读）；
         // 直接 POST 平面 body（prompt 顶层）原样兼容
         const envelope = isRecord(raw) ? raw : {}
         const biz = isRecord(envelope.forwardedProps)
           ? envelope.forwardedProps
-          : isRecord(envelope.data)
-            ? envelope.data
-            : envelope
+          : envelope
         const parsed = bodySchema.safeParse(biz)
         if (!parsed.success) {
           return new Response(

package/src/routes/{_nav/acceptance-criteria/route.tsx → api/internal/collab-reindex.ts}

@@ -15,13 +15,16 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import { createFileRoute } from '@tanstack/react-router'
-import { PlaceholderPage } from '@/components/shared-kit/pages/placeholder-page'
-import { CircleCheckBig } from 'lucide-react'
-import { m } from "@/paraglide/messages.js";
+// collab → web 向量索引重建通知路由（Yjs 多人协作任务 16，§5.2 回写）。
+// 业务与认证在 @/server/collab/reindex-endpoint（单测直调），此为薄壳。
 
-function AcceptanceCriteriaPage() {
-  return <PlaceholderPage title={m.common_nav_acceptance()} icon={CircleCheckBig} />
-}
+import { createFileRoute } from "@tanstack/react-router";
+import { handleCollabReindex } from "@/server/collab/reindex-endpoint";
 
-export const Route = createFileRoute('/_nav/acceptance-criteria')({ component: AcceptanceCriteriaPage })
+export const Route = createFileRoute("/api/internal/collab-reindex")({
+  server: {
+    handlers: {
+      POST: ({ request }: { request: Request }) => handleCollabReindex(request),
+    },
+  },
+});

package/src/routes/api/knowledge/sync-github.ts

@@ -16,7 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 import { createFileRoute } from '@tanstack/react-router'
-import { syncAllStaleGithubBookmarks } from '@/server/knowledge-public/github-sync'
+import { syncAllStaleGithubBookmarks } from '@/server/knowledge/public/github-sync'
 import { verifyCronSecret } from '@/server/lib/cron-auth'
 
 export const Route = createFileRoute('/api/knowledge/sync-github')({

package/src/routes/design-files/$projectId/$artboardId/$filename.ts

@@ -27,6 +27,15 @@ export const Route = createFileRoute("/design-files/$projectId/$artboardId/$file
   server: {
     handlers: {
       GET: async ({ request, params }) => {
+        // Cloudflare Workers 无本地文件系统（规格 Q3 裁决：先降级，R2 化单列任务）。
+        // 该路由读取 DESIGN_UPLOAD_DIR 本地盘；非 cloudflare 目标行为不变。
+        if (import.meta.env.VITE_DEPLOY_TARGET === "cloudflare") {
+          return Response.json(
+            { error: "design file serving requires a deployment with local storage" },
+            { status: 404 },
+          )
+        }
+
         try {
           await requireAuth(request)
         } catch {

package/src/routes/invite/$token/route.lazy.tsx

@@ -163,7 +163,7 @@ function InvitePage() {
           <UserAvatar
             avatarConfig={owner.avatarConfig as any}
             bgColor={owner.bgColor}
-            bgShape={owner.bgShape as 'circle' | 'rounded' | 'square' | null}
+            bgShape={owner.bgShape}
             className="mx-auto size-16"
             name={owner.username}
             size="2xl"
@@ -186,7 +186,7 @@ function InvitePage() {
                   <UserAvatar
                     avatarConfig={session.user?.avatarConfig as any}
                     bgColor={session.user?.bgColor}
-                    bgShape={session.user?.bgShape as 'circle' | 'rounded' | 'square' | null}
+                    bgShape={session.user?.bgShape}
                     className="shrink-0"
                     name={session.user?.username ?? session.user?.name}
                     size="md"

package/src/routes/share/$versionId/route.lazy.tsx

@@ -17,6 +17,7 @@
 
 import { createLazyFileRoute } from '@tanstack/react-router'
 import { ShareClient } from '@/components/design/editor/share/version-share-client'
+import { SharePresenceBar } from '@/components/share/share-presence-bar'
 import { m } from "@/paraglide/messages.js";
 
 export const Route = createLazyFileRoute('/share/$versionId')({
@@ -53,6 +54,13 @@ function ShareVersionPage() {
         <span className="text-sm font-medium">{ctx.prdName}</span>
         <span className="text-xs px-1.5 py-0.5 rounded bg-muted text-muted-foreground">{ctx.versionLabel}</span>
         {ctx.notes && <span className="text-xs text-muted-foreground ml-2">— {ctx.notes}</span>}
+        <div className="ml-auto flex items-center">
+          <SharePresenceBar
+            shareToken={ctx.shareToken}
+            designId={ctx.designId}
+            designver={ctx.versionLabel}
+          />
+        </div>
       </header>
       <ShareClient pages={ctx.pageVersions} />
     </div>

package/src/routes/share/compliance/$id/route.lazy.tsx

@@ -18,13 +18,13 @@
 import { useState, Suspense } from 'react'
 import { createLazyFileRoute } from '@tanstack/react-router'
 import { KnowledgeDocEditor } from '@/components/knowledge/editor/knowledge-doc-editor'
-import { COMPLIANCE_FIELDS } from '@/components/knowledge-public/legal-compliance-editor'
+import { COMPLIANCE_FIELDS } from '@/components/knowledge/public/legal-compliance-editor'
 import type { PropertyValues } from '@/components/knowledge/doc-properties'
 import { Button } from '@/components/ui/button'
 import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
 import { Star, Share2 } from 'lucide-react'
 import { cn } from '@/lib/utils'
-import { toggleFavoriteFn } from '@/server/serverFns/knowledge-public/favorite'
+import { toggleFavoriteFn } from '@/server/serverFns/knowledge/public/favorite'
 import { toast } from '@/components/ui/toast'
 import { m } from "@/paraglide/messages.js";
 

package/src/routes/share/compliance/$id/route.tsx

@@ -16,7 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 import { createFileRoute, notFound } from '@tanstack/react-router'
-import { getPublicComplianceFn } from '@/server/serverFns/knowledge-public/compliance/public'
+import { getPublicComplianceFn } from '@/server/serverFns/knowledge/public/compliance/public'
 
 export const Route = createFileRoute('/share/compliance/$id')({
   beforeLoad: async ({ params }) => {

package/src/routes/share/law/$id/route.lazy.tsx

@@ -18,13 +18,13 @@
 import { useState, Suspense } from 'react'
 import { createLazyFileRoute } from '@tanstack/react-router'
 import { KnowledgeDocEditor } from '@/components/knowledge/editor/knowledge-doc-editor'
-import { LEGAL_FIELDS } from '@/components/knowledge-public/legal-compliance-editor'
+import { LEGAL_FIELDS } from '@/components/knowledge/public/legal-compliance-editor'
 import type { PropertyValues } from '@/components/knowledge/doc-properties'
 import { Button } from '@/components/ui/button'
 import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
 import { Star, Share2 } from 'lucide-react'
 import { cn } from '@/lib/utils'
-import { toggleFavoriteFn } from '@/server/serverFns/knowledge-public/favorite'
+import { toggleFavoriteFn } from '@/server/serverFns/knowledge/public/favorite'
 import { toast } from '@/components/ui/toast'
 import { m } from "@/paraglide/messages.js";
 

package/src/routes/share/law/$id/route.tsx

@@ -16,7 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 import { createFileRoute, notFound } from '@tanstack/react-router'
-import { getPublicLegalFn } from '@/server/serverFns/knowledge-public/legal/public'
+import { getPublicLegalFn } from '@/server/serverFns/knowledge/public/legal/public'
 
 export const Route = createFileRoute('/share/law/$id')({
   beforeLoad: async ({ params }) => {

package/src/server/__tests__/bug-groups-two-level.test.ts

@@ -0,0 +1,263 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// BUG 分组二级化（任务 40，照 story-groups 双层模式）：组查询支持
+// parentGroupBy/parentGroupKey（组内再按子维度分桶计数）、组内取页支持
+// subGroupBy/subGroupKey（子维度过滤）。mock 脚手架照 bug-groups.test.ts 裁剪。
+import { describe, it, expect, vi, beforeEach } from "vitest";
+
+vi.mock("@tanstack/react-start", () => ({
+  createServerFn: (config: any) => {
+    const api: any = {
+      _validator: undefined,
+      validator(schema: any) {
+        this._validator = schema;
+        return this;
+      },
+      handler(fn: Function) {
+        const wrapped = async (args: any) => {
+          let data = args?.data;
+          if (this._validator && data !== undefined) {
+            data = this._validator.parse ? this._validator.parse(data) : data;
+          }
+          return fn({ data });
+        };
+        return wrapped;
+      },
+    };
+    return api;
+  },
+}));
+
+vi.mock("@tanstack/react-start/server", () => ({
+  getRequest: () => ({}),
+}));
+
+const mocks = vi.hoisted(() => ({
+  currentSession: vi.fn(),
+  resolveStoryScopeProjectIds: vi.fn(),
+  bugFindMany: vi.fn(),
+  bugCount: vi.fn(),
+  bugGroupBy: vi.fn(),
+}));
+
+vi.mock("@allbluecn/database", () => {
+  const prisma = {
+    bug: {
+      findMany: mocks.bugFindMany,
+      count: mocks.bugCount,
+      groupBy: mocks.bugGroupBy,
+    },
+  };
+  return { prisma, Prisma: {} };
+});
+
+vi.mock("@/server/auth-helpers", () => ({
+  requireAuth: mocks.currentSession,
+}));
+
+vi.mock("@/server/builtin-project", () => ({
+  resolveStoryScopeProjectIds: mocks.resolveStoryScopeProjectIds,
+}));
+
+import { listBugGroupsFn, listBugsInGroupFn } from "@/server/serverFns/bug/bug-groups";
+import { BUG_SEVERITIES } from "@/shared/bug/constants";
+
+const DATE = new Date("2026-01-01T00:00:00Z");
+
+function bugRow(overrides: Record<string, unknown> = {}) {
+  return {
+    id: "b1",
+    sequenceId: 1,
+    identifier: "ABC-B1",
+    title: "登录页崩溃",
+    description: null,
+    state: "open",
+    severity: "critical",
+    source: "manual",
+    env: null,
+    url: null,
+    totalCount: 1,
+    firstOccurAt: DATE,
+    lastOccurAt: DATE,
+    archived: false,
+    projectId: "p1",
+    storyId: null,
+    story: null,
+    assignee: null,
+    createdBy: { id: "u1", username: "alice", email: "a@x.com", avatarConfig: null, bgShape: null, bgColor: null },
+    updatedBy: null,
+    labels: [],
+    boardOrder: 0,
+    createdAt: DATE,
+    updatedAt: DATE,
+    ...overrides,
+  };
+}
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  mocks.currentSession.mockResolvedValue({ user: { id: "u1" } });
+  mocks.resolveStoryScopeProjectIds.mockResolvedValue(["p1"]);
+});
+
+describe("listBugGroupsFn 二级分组（parentGroupBy/parentGroupKey）", () => {
+  it("state=open 父组内按 severity 分桶计数（组树含子组计数）", async () => {
+    mocks.bugGroupBy.mockResolvedValue([
+      { severity: "critical", _count: { _all: 3 } },
+      { severity: "low", _count: { _all: 1 } },
+    ]);
+
+    const out = await listBugGroupsFn({
+      data: { projectId: "p1", groupBy: "severity", parentGroupBy: "state", parentGroupKey: "open" },
+    });
+
+    // 父组过滤并入 where.AND（不占顶层 key）
+    expect(mocks.bugGroupBy).toHaveBeenCalledWith(
+      expect.objectContaining({
+        by: ["severity"],
+        where: expect.objectContaining({
+          archived: false,
+          projectId: { in: ["p1"] },
+          pendingConfirm: false,
+          AND: [{ state: "open" }],
+        }),
+      }),
+    );
+    // 子组计数按 severity rank 序（critical → low）
+    expect(out.groups).toEqual([
+      { key: "critical", total: 3 },
+      { key: "low", total: 1 },
+    ]);
+  });
+
+  it("assignee 父组 unassigned → assigneeId null 过滤", async () => {
+    mocks.bugGroupBy.mockResolvedValue([{ severity: "high", _count: { _all: 2 } }]);
+
+    const out = await listBugGroupsFn({
+      data: { projectId: "p1", groupBy: "severity", parentGroupBy: "assignee", parentGroupKey: "unassigned" },
+    });
+
+    expect(mocks.bugGroupBy).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: expect.objectContaining({ AND: [{ assigneeId: null }] }),
+      }),
+    );
+    expect(out.groups).toEqual([{ key: "high", total: 2 }]);
+  });
+
+  it("showEmptyGroups=true 补全 severity 空子组（零计数保留）", async () => {
+    mocks.bugGroupBy.mockResolvedValue([]);
+
+    const out = await listBugGroupsFn({
+      data: {
+        projectId: "p1",
+        groupBy: "severity",
+        parentGroupBy: "state",
+        parentGroupKey: "open",
+        showEmptyGroups: true,
+      },
+    });
+
+    expect(out.groups.map((g: { key: string }) => g.key)).toEqual(BUG_SEVERITIES.map((s) => s.value));
+    expect(out.groups.every((g: { total: number }) => g.total === 0)).toBe(true);
+  });
+
+  it("parentGroupBy=none（缺省）不并父组过滤（一级分组行为不变）", async () => {
+    mocks.bugGroupBy.mockResolvedValue([{ severity: "low", _count: { _all: 1 } }]);
+
+    await listBugGroupsFn({ data: { projectId: "p1", groupBy: "severity" } });
+
+    expect(mocks.bugGroupBy).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { archived: false, projectId: { in: ["p1"] }, pendingConfirm: false },
+      }),
+    );
+  });
+});
+
+describe("listBugsInGroupFn 子维度过滤（subGroupBy/subGroupKey）", () => {
+  it("state=open × severity=critical 双层过滤取页", async () => {
+    mocks.bugFindMany.mockResolvedValue([bugRow()]);
+    mocks.bugCount.mockResolvedValue(100);
+
+    const out = await listBugsInGroupFn({
+      data: {
+        projectId: "p1",
+        groupBy: "state",
+        groupKey: "open",
+        subGroupBy: "severity",
+        subGroupKey: "critical",
+        orderBy: "created",
+        orderDir: "desc",
+        skip: 50,
+        take: 20,
+      },
+    });
+
+    expect(mocks.bugFindMany).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: {
+          archived: false,
+          projectId: { in: ["p1"] },
+          pendingConfirm: false,
+          AND: [{ state: "open" }, { severity: "critical" }],
+        },
+        skip: 50,
+        take: 20,
+      }),
+    );
+    expect(out.items).toHaveLength(1);
+    expect(out.hasMore).toBe(true);
+  });
+
+  it("subGroupBy=assignee + subGroupKey=unassigned → assigneeId null 过滤", async () => {
+    mocks.bugFindMany.mockResolvedValue([]);
+    mocks.bugCount.mockResolvedValue(0);
+
+    await listBugsInGroupFn({
+      data: {
+        projectId: "p1",
+        groupBy: "state",
+        groupKey: "open",
+        subGroupBy: "assignee",
+        subGroupKey: "unassigned",
+      },
+    });
+
+    expect(mocks.bugFindMany).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: expect.objectContaining({ AND: [{ state: "open" }, { assigneeId: null }] }),
+      }),
+    );
+  });
+
+  it("subGroupBy=none（缺省）不加子组过滤（单层行为不变）", async () => {
+    mocks.bugFindMany.mockResolvedValue([]);
+    mocks.bugCount.mockResolvedValue(0);
+
+    await listBugsInGroupFn({
+      data: { projectId: "p1", groupBy: "state", groupKey: "open" },
+    });
+
+    expect(mocks.bugFindMany).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { archived: false, projectId: { in: ["p1"] }, pendingConfirm: false, AND: [{ state: "open" }] },
+      }),
+    );
+  });
+});

package/src/server/__tests__/builtin-project.test.ts

@@ -23,11 +23,15 @@ vi.mock('@allbluecn/database', () => ({
       findFirst: vi.fn(),
       create: vi.fn(),
     },
+    projectMember: {
+      findUnique: vi.fn(),
+      findMany: vi.fn(),
+    },
   },
 }))
 
 import { prisma } from '@allbluecn/database'
-import { ensureBuiltinIndependentProject } from '../builtin-project'
+import { ensureBuiltinIndependentProject, resolveStoryScopeProjectIds } from '../builtin-project'
 
 describe('ensureBuiltinIndependentProject', () => {
   beforeEach(() => {
@@ -83,3 +87,43 @@ describe('ensureBuiltinIndependentProject', () => {
     await expect(ensureBuiltinIndependentProject('user-1')).rejects.toEqual(otherError)
   })
 })
+
+describe('resolveStoryScopeProjectIds', () => {
+  beforeEach(() => {
+    vi.resetAllMocks()
+  })
+
+  it('projectId 非空且是有效成员 → 单元素数组（不查全部成员关系）', async () => {
+    vi.mocked(prisma.projectMember.findUnique).mockResolvedValueOnce({ status: 'active' } as any)
+    const ids = await resolveStoryScopeProjectIds('p1', 'user-1')
+    expect(ids).toEqual(['p1'])
+    expect(prisma.projectMember.findMany).not.toHaveBeenCalled()
+  })
+
+  it('projectId 非空但非成员 → 回退独立项目', async () => {
+    vi.mocked(prisma.projectMember.findUnique).mockResolvedValueOnce(null)
+    vi.mocked(prisma.project.findFirst).mockResolvedValueOnce({ id: 'independent-1' } as any)
+    const ids = await resolveStoryScopeProjectIds('p1', 'user-1')
+    expect(ids).toEqual(['independent-1'])
+  })
+
+  it('projectId 缺省 → 聚合全部可访问项目（排除 suspended）', async () => {
+    vi.mocked(prisma.projectMember.findMany).mockResolvedValueOnce([
+      { projectId: 'p1' },
+      { projectId: 'p2' },
+    ] as any)
+    const ids = await resolveStoryScopeProjectIds(undefined, 'user-1')
+    expect(ids).toEqual(['p1', 'p2'])
+    expect(prisma.projectMember.findMany).toHaveBeenCalledWith({
+      where: { userId: 'user-1', status: { not: 'suspended' } },
+      select: { projectId: true },
+    })
+  })
+
+  it('projectId 缺省且无任何成员关系 → 回退独立项目', async () => {
+    vi.mocked(prisma.projectMember.findMany).mockResolvedValueOnce([] as any)
+    vi.mocked(prisma.project.findFirst).mockResolvedValueOnce({ id: 'independent-1' } as any)
+    const ids = await resolveStoryScopeProjectIds(undefined, 'user-1')
+    expect(ids).toEqual(['independent-1'])
+  })
+})