@allbluecn/web-app 0.18.2 → 0.19.0

package/src/server/serverFns/bug/bug-story-bulk.ts

@@ -0,0 +1,280 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 需求详情「关联 BUG」：批量关联/解绑 + 按需求反查 BUG 列表（bug-story.ts 的
+// 单条 link/unlink 面向 BUG 详情页单值关联；本文件面向需求侧批量操作）。
+// 活动记录：bugActivity（linked_story/unlinked_story，与单条链路同 action）
+// + storyActivity（bug_linked/bug_unlinked，需求详情活动 tab）双侧写入。
+// 本文件只准导出 createServerFn 产物（serverFn 纯净铁律）。
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import { requireAuth } from "@/server/auth-helpers";
+
+const idListSchema = z.object({ bugIds: z.array(z.string()).min(1).max(500) });
+
+/** 一次取用户可访问（有效成员，suspended 视同无权限）的项目 id 集合（bulk.ts 同款口径） */
+async function accessibleProjectIds(userId: string): Promise<string[]> {
+  const prisma = await getPrisma();
+  const rows = await prisma.projectMember.findMany({
+    where: { userId, status: { not: "suspended" } },
+    select: { projectId: true },
+  });
+  return rows.map((r) => r.projectId);
+}
+
+const bulkLinkSchema = z.object({
+  bugIds: z.array(z.string()).min(1).max(500),
+  storyId: z.string(),
+});
+
+export const bulkLinkBugsToStoryFn = createServerFn({ method: "POST" })
+  .validator(bulkLinkSchema)
+  .handler(async ({ data }) => {
+    const prisma = await getPrisma();
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    const visibleProjectIds = await accessibleProjectIds(userId);
+
+    // story 归属校验（防跨项目挂载，testcase bulk 同口径）
+    const story = await prisma.story.findUnique({
+      where: { id: data.storyId },
+      select: { id: true, identifier: true, projectId: true },
+    });
+    if (!story || !visibleProjectIds.includes(story.projectId)) {
+      throw new Error("目标需求不存在或无权访问");
+    }
+
+    return prisma.$transaction(async (tx) => {
+      const bugs = await tx.bug.findMany({
+        where: {
+          id: { in: data.bugIds },
+          projectId: { in: visibleProjectIds },
+          archived: false,
+        },
+        select: { id: true, identifier: true, storyId: true },
+      });
+      // diff：仅对「现值 ≠ 目标」的 bug 写入，幂等
+      const changed = bugs.filter((b) => b.storyId !== story.id);
+      if (changed.length > 0) {
+        await tx.bug.updateMany({
+          where: { id: { in: changed.map((b) => b.id) } },
+          data: { storyId: story.id },
+        });
+        await tx.bugActivity.createMany({
+          data: changed.map((b) => ({
+            bugId: b.id,
+            userId,
+            action: "linked_story",
+            metadata: { storyId: story.id, storyIdentifier: story.identifier },
+          })),
+        });
+        await tx.storyActivity.createMany({
+          data: changed.map((b) => ({
+            storyId: story.id,
+            userId,
+            action: "bug_linked",
+            newValue: b.identifier,
+          })),
+        });
+      }
+      return { linked: changed.length };
+    });
+  });
+
+export const bulkUnlinkBugsFromStoryFn = createServerFn({ method: "POST" })
+  .validator(idListSchema)
+  .handler(async ({ data }) => {
+    const prisma = await getPrisma();
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    const visibleProjectIds = await accessibleProjectIds(userId);
+
+    return prisma.$transaction(async (tx) => {
+      const bugs = await tx.bug.findMany({
+        where: {
+          id: { in: data.bugIds },
+          projectId: { in: visibleProjectIds },
+          storyId: { not: null },
+        },
+        select: { id: true, identifier: true, storyId: true, story: { select: { identifier: true } } },
+      });
+      if (bugs.length === 0) return { unlinked: 0 };
+
+      await tx.bug.updateMany({
+        where: { id: { in: bugs.map((b) => b.id) } },
+        data: { storyId: null },
+      });
+      await tx.bugActivity.createMany({
+        data: bugs.flatMap((b) =>
+          b.story
+            ? [
+                {
+                  bugId: b.id,
+                  userId,
+                  action: "unlinked_story",
+                  metadata: { storyId: b.storyId, storyIdentifier: b.story.identifier },
+                },
+              ]
+            : [],
+        ),
+      });
+      // storyActivity 按需求分组写（一个 bug 只挂一个需求）
+      const byStory = new Map<string, string[]>();
+      for (const b of bugs) {
+        if (!b.storyId) continue;
+        const arr = byStory.get(b.storyId) ?? [];
+        arr.push(b.identifier);
+        byStory.set(b.storyId, arr);
+      }
+      await tx.storyActivity.createMany({
+        data: [...byStory.entries()].flatMap(([sid, idents]) =>
+          idents.map((ident) => ({
+            storyId: sid,
+            userId,
+            action: "bug_unlinked",
+            newValue: ident,
+          })),
+        ),
+      });
+      return { unlinked: bugs.length };
+    });
+  });
+
+const listByStorySchema = z.object({
+  storyId: z.string().min(1),
+  take: z.number().int().min(1).max(500).default(200),
+});
+
+/** 需求详情「关联 BUG」面板：按 storyId 反查（单值关联，量级有限，一次取全） */
+export const listBugsByStoryFn = createServerFn({ method: "GET" })
+  .validator(listByStorySchema)
+  .handler(async ({ data }) => {
+    const prisma = await getPrisma();
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+
+    // story 可见性：非成员静默回退空（防越权探测 storyId）
+    const story = await prisma.story.findUnique({
+      where: { id: data.storyId },
+      select: { projectId: true },
+    });
+    if (!story) return { items: [] };
+    const membership = await prisma.projectMember.findUnique({
+      where: { projectId_userId: { projectId: story.projectId, userId } },
+      select: { status: true },
+    });
+    if (!membership || membership.status === "suspended") return { items: [] };
+
+    const bugs = await prisma.bug.findMany({
+      where: { storyId: data.storyId, archived: false },
+      orderBy: [{ lastOccurAt: "desc" }],
+      take: data.take,
+      select: {
+        id: true,
+        identifier: true,
+        title: true,
+        state: true,
+        severity: true,
+        assignee: {
+          select: { id: true, username: true, email: true, avatarConfig: true, bgShape: true, bgColor: true },
+        },
+        labels: { select: { label: { select: { id: true, name: true, color: true } } } },
+        lastOccurAt: true,
+        updatedAt: true,
+      },
+    });
+
+    return {
+      items: bugs.map((b) => ({
+        ...b,
+        assignee: b.assignee
+          ? { ...b.assignee, avatarConfig: (b.assignee.avatarConfig as unknown) ?? null }
+          : null,
+        labels: b.labels.map((bl) => bl.label),
+        lastOccurAt: b.lastOccurAt.toISOString(),
+        updatedAt: b.updatedAt.toISOString(),
+      })),
+    };
+  });
+
+/** 关联弹窗候选项：项目内未关联/已关联他需求的 BUG（弹窗自行 diff 处理已关联本需求的） */
+const listForSelectSchema = z.object({
+  projectId: z.string().min(1),
+  search: z.string().optional(),
+  cursor: z.string().optional(),
+  take: z.number().int().min(1).max(200).default(100),
+});
+
+export const listBugsForSelectFn = createServerFn({ method: "GET" })
+  .validator(listForSelectSchema)
+  .handler(async ({ data }) => {
+    const prisma = await getPrisma();
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+    const projectId = await (async () => {
+      // scope 解析同 listBugsFn：无效/非成员 → 回退独立项目
+      const { resolveStoryScopeProjectId } = await import("@/server/builtin-project");
+      return resolveStoryScopeProjectId(data.projectId, userId);
+    })();
+
+    const bugs = await prisma.bug.findMany({
+      where: {
+        projectId,
+        archived: false,
+        pendingConfirm: false,
+        ...(data.search
+          ? {
+              OR: [
+                { title: { contains: data.search, mode: "insensitive" as const } },
+                { identifier: { contains: data.search, mode: "insensitive" as const } },
+              ],
+            }
+          : {}),
+      },
+      orderBy: [{ lastOccurAt: "desc" }, { id: "desc" }],
+      take: data.take,
+      ...(data.cursor ? { skip: 1, cursor: { id: data.cursor } } : {}),
+      select: {
+        id: true,
+        identifier: true,
+        title: true,
+        state: true,
+        severity: true,
+        assignee: {
+          select: { id: true, username: true, email: true, avatarConfig: true, bgShape: true, bgColor: true },
+        },
+        storyId: true,
+        story: { select: { identifier: true } },
+      },
+    });
+
+    return {
+      items: bugs.map((b) => ({
+        ...b,
+        assignee: b.assignee
+          ? { ...b.assignee, avatarConfig: (b.assignee.avatarConfig as unknown) ?? null }
+          : null,
+      })),
+      nextCursor: bugs.length === data.take ? bugs[bugs.length - 1].id : null,
+    };
+  });

package/src/server/serverFns/bug/bug-story.ts

@@ -29,6 +29,7 @@ import { requireAuth } from "@/server/auth-helpers";
 import { assertBugProjectMember } from "@/server/bug/bug-permissions";
 import { buildConvertedDescription } from "./bug-story-utils";
 import { createStoryInternal } from "@/server/serverFns/story/story-crud/create-story-internal";
+import { withSequenceNumberRetry } from "@/server/lib/sequence-number-retry";
 
 const bugIdSchema = z.object({ bugId: z.string() });
 
@@ -47,45 +48,52 @@ export const convertBugToStoryFn = createServerFn({ method: "POST" })
 
     await assertBugProjectMember(data.bugId, userId);
 
-    return prisma.$transaction(async (tx) => {
-      const bug = await tx.bug.findUnique({
-        where: { id: data.bugId },
-        select: { id: true, projectId: true, title: true, description: true, reproduceSteps: true },
-      });
-      if (!bug) throw new Error("BUG 不存在");
-
-      // 复现步骤序列化为「## 复现步骤」节追加到描述尾部（无步骤时原样透传，附件不复制）
-      const description = buildConvertedDescription(bug.description, bug.reproduceSteps);
-
-      // 发号沿用 Story 既有 scope（裸 projectId），与手动建单共用编号序列
-      const story = await createStoryInternal(
-        tx,
-        {
-          name: bug.title,
-          description: description ?? undefined,
-          projectId: bug.projectId,
-          state: "backlog",
-          priority: "none",
-          labelIds: [],
-          isAI: false,
-        },
-        userId,
-      );
-
-      // 仅回填 storyId，不改 BUG 状态（规格 §7）
-      await tx.bug.update({ where: { id: bug.id }, data: { storyId: story.id } });
-
-      await tx.bugActivity.create({
-        data: {
-          bugId: bug.id,
-          userId,
-          action: "converted_to_story",
-          metadata: { storyId: story.id, storyIdentifier: story.identifier },
-        },
-      });
-
-      return { storyId: story.id, storyIdentifier: story.identifier };
-    });
+    // 整事务纳入编号冲突重试：事务内只有「读 bug → 建单 → 回填 → 活动」，失败即整体
+    // 回滚，重跑重新读 bug 状态（bug.storyId 回填未落库），天然幂等可重跑。scope 冲突
+    // （新项目首创并发）与 identifier 冲突一并覆盖。
+    return withSequenceNumberRetry(
+      () =>
+        prisma.$transaction(async (tx) => {
+          const bug = await tx.bug.findUnique({
+            where: { id: data.bugId },
+            select: { id: true, projectId: true, title: true, description: true, reproduceSteps: true },
+          });
+          if (!bug) throw new Error("BUG 不存在");
+
+          // 复现步骤序列化为「## 复现步骤」节追加到描述尾部（无步骤时原样透传，附件不复制）
+          const description = buildConvertedDescription(bug.description, bug.reproduceSteps);
+
+          // 发号沿用 Story 既有 scope（裸 projectId），与手动建单共用编号序列
+          const story = await createStoryInternal(
+            tx,
+            {
+              name: bug.title,
+              description: description ?? undefined,
+              projectId: bug.projectId,
+              state: "backlog",
+              priority: "none",
+              labelIds: [],
+              isAI: false,
+            },
+            userId,
+          );
+
+          // 仅回填 storyId，不改 BUG 状态（规格 §7）
+          await tx.bug.update({ where: { id: bug.id }, data: { storyId: story.id } });
+
+          await tx.bugActivity.create({
+            data: {
+              bugId: bug.id,
+              userId,
+              action: "converted_to_story",
+              metadata: { storyId: story.id, storyIdentifier: story.identifier },
+            },
+          });
+
+          return { storyId: story.id, storyIdentifier: story.identifier };
+        }),
+      { exhaustedMessage: "创建需求失败：编号冲突，请重试" },
+    );
   });
 
 export const linkBugToStoryFn = createServerFn({ method: "POST" })

package/src/server/serverFns/bug/index.ts

@@ -28,6 +28,7 @@ export {
 } from "./bug-crud";
 export { getBugDetailFn, getBugNeighborsFn, listBugEventsFn } from "./bug-crud/detail";
 export { listBugGroupsFn, listBugsInGroupFn, listAllGroupsItemsFn } from "./bug-groups";
+export { reorderBugsFn } from "./bug-reorder";
 export { getBugDisplayOptionsFn, updateBugDisplayOptionsFn } from "./bug-display-options";
 export {
   listBugViewsFn,
@@ -42,6 +43,11 @@ export {
   updateCommentFn,
   deleteCommentFn,
 } from "./bug-comments";
+export {
+  listBugCommentReactionsFn,
+  addBugCommentReactionFn,
+  toggleBugCommentReactionFn,
+} from "./bug-reactions";
 export {
   convertBugToStoryFn,
   linkBugToStoryFn,

package/src/server/serverFns/collab-presence.ts

@@ -0,0 +1,119 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 团队 presence（R3，§8.1）的 ticket 签发与房间引导：
+// - getPresenceRoomFn：解析当前用户所属团队的 presence room（一人一团队，
+//   TeamMembership.memberId 唯一；owner 无自引用行时团队即自己），并返回
+//   USER_BRIEF_SELECT 口径的头像摘要（awareness local state 的 user 字段——
+//   客户端 session 无 username/头像字段，见任务 9 报告「团队信息口径」）。
+// - createPresenceTicketFn：presence:team:{ownerId} 授权 =「我在该团队」
+//   （isUserInTeam，@/server/team-access 工具函数——prisma 查询不落在
+//   serverFn 文件）；角色恒 view（awareness only，§3.1）。
+//
+// serverFn 纯净纪律：本文件只 export createServerFn 产物（与 collab.ts
+// 「一 room 族一 fn」先例一致：实体=createCollabTicketFn、分享=
+// createSharePresenceTicketFn、团队 presence=本文件）。
+
+import { createServerFn } from '@tanstack/react-start'
+import { getRequest } from '@tanstack/react-start/server'
+import { z } from 'zod'
+import { getPrisma } from '@allbluecn/database/get-prisma'
+import { buildRoomName } from '@allbluecn/collab-core/rooms'
+import { signTicket } from '@allbluecn/collab-core/ticket'
+import { requireAuth, ForbiddenError } from '@/server/auth-helpers'
+import { parseRoomName } from '@/server/collab-permissions'
+import { isUserInTeam, USER_BRIEF_SELECT } from '@/server/team-access'
+import {
+  TICKET_TTL_SECONDS,
+  getCollabSecret,
+  avatarBriefFromSessionUser,
+} from '@/server/collab/ticket-utils'
+
+/**
+ * 当前用户的团队 presence room 引导。未登录由 requireAuth 拒绝；
+ * 无团队成员行的账号按自属团队处理（与 listTeamMembersFn 的懒建 owner 行
+ * 口径一致：presence 不触发行创建，ownerId 即自己）。
+ */
+export const getPresenceRoomFn = createServerFn({ method: 'GET' }).handler(
+  async () => {
+    const request = getRequest()
+    const session = await requireAuth(request)
+    const userId = session.user!.id!
+
+    const prisma = await getPrisma()
+    const membership = await prisma.teamMembership.findUnique({
+      where: { memberId: userId },
+      select: { ownerId: true },
+    })
+    const ownerId = membership?.ownerId ?? userId
+
+    const user = await prisma.user.findUnique({
+      where: { id: userId },
+      select: USER_BRIEF_SELECT,
+    })
+    if (!user) {
+      throw new ForbiddenError('用户不存在')
+    }
+
+    return {
+      ownerId,
+      roomName: buildRoomName({ kind: 'presence-team', ownerId }),
+      user: {
+        ...user,
+        // Prisma JsonValue → kernel AvatarConfig 形态（写入侧保证
+        // Record<string, number>，见 auth session callback 回填口径）
+        avatarConfig: (user.avatarConfig as Record<string, number> | null) ?? null,
+      },
+    }
+  },
+)
+
+/**
+ * 团队 presence ticket（role 恒 view、kind 恒 member——presence 无编辑权，
+ * awareness only）。room 必须是 presence:team:*（实体/分享 room 走各自
+ * 入口），授权 = isUserInTeam(room.ownerId, me)。
+ */
+export const createPresenceTicketFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ roomName: z.string().min(1) }))
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    const session = await requireAuth(request)
+    const user = session.user!
+    const userId = user.id!
+
+    const room = parseRoomName(data.roomName)
+    if (!room || room.kind !== 'presence-team') {
+      throw new ForbiddenError('非法 presence room')
+    }
+    if (!(await isUserInTeam(room.ownerId, userId))) {
+      throw new ForbiddenError('不在该团队')
+    }
+
+    const ticket = signTicket(
+      {
+        sub: userId,
+        name: user.name ?? '',
+        avatarBrief: avatarBriefFromSessionUser(user),
+        room: data.roomName,
+        role: 'view',
+        kind: 'member',
+        exp: Math.floor(Date.now() / 1000) + TICKET_TTL_SECONDS,
+      },
+      getCollabSecret(),
+    )
+    return { ticket }
+  })