@allbluecn/web-app 0.18.2 → 0.19.0

package/src/server/serverFns/testcase/testcase-display-options.ts

@@ -0,0 +1,166 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 用例显示选项 per-user 持久化（UI 对齐二期任务 20，照 bug-display-options.ts
+// 模式）。存储落点：schema 无 User.testcaseDisplayOptions 字段且本期禁止迁移，
+// 借用 TestCaseFilterView 的 per-user 保留行（name = TESTCASE_DISPLAY_OPTIONS_
+// VIEW_NAME，filters 存空对象），该行对 testcase-filter-views.ts 的保存视图
+// CRUD 不可见（list where / create·update 名称守卫已在彼处收口）。
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import { requireAuth } from "@/server/auth-helpers";
+import { requireFeature } from "@/server/entitlements";
+import { isProEdition } from "@/server/pro-services";
+import {
+  DEFAULT_TESTCASE_DISPLAY_OPTIONS,
+  TESTCASE_DISPLAY_OPTIONS_VIEW_NAME,
+  TESTCASE_DISPLAY_PROPERTIES,
+  TESTCASE_GROUP_KEYS,
+  TESTCASE_ORDER_DIRECTIONS,
+  TESTCASE_ORDER_KEYS,
+  TESTCASE_PAGE_SIZE_OPTIONS,
+  type TestCaseDisplayOptions,
+  type TestCaseDisplayProperty,
+  type TestCaseGroupKey,
+  type TestCaseOrderDirection,
+  type TestCaseOrderKey,
+  type TestCasePageSize,
+} from "@/components/testcase/display/field-configs";
+import type { Prisma } from "@allbluecn/database";
+
+function toJson<T>(value: T): Prisma.InputJsonValue {
+  return value as unknown as Prisma.InputJsonValue;
+}
+
+/** 解析存储的 JSON 偏好，非法/缺失字段逐项回退默认值（照 bug parseStoredOptions） */
+function parseStoredOptions(raw: unknown): TestCaseDisplayOptions {
+  if (typeof raw !== "object" || raw === null) return { ...DEFAULT_TESTCASE_DISPLAY_OPTIONS };
+  const o = raw as Record<string, unknown>;
+
+  const groupBy =
+    typeof o.groupBy === "string" && (TESTCASE_GROUP_KEYS as readonly string[]).includes(o.groupBy)
+      ? (o.groupBy as TestCaseGroupKey)
+      : DEFAULT_TESTCASE_DISPLAY_OPTIONS.groupBy;
+  const orderBy =
+    typeof o.orderBy === "string" && (TESTCASE_ORDER_KEYS as readonly string[]).includes(o.orderBy)
+      ? (o.orderBy as TestCaseOrderKey)
+      : DEFAULT_TESTCASE_DISPLAY_OPTIONS.orderBy;
+  const orderDir =
+    typeof o.orderDir === "string" &&
+    (TESTCASE_ORDER_DIRECTIONS as readonly string[]).includes(o.orderDir)
+      ? (o.orderDir as TestCaseOrderDirection)
+      : DEFAULT_TESTCASE_DISPLAY_OPTIONS.orderDir;
+  const properties = Array.isArray(o.properties)
+    ? (o.properties as unknown[]).filter(
+        (p): p is TestCaseDisplayProperty =>
+          typeof p === "string" && (TESTCASE_DISPLAY_PROPERTIES as readonly string[]).includes(p),
+      )
+    : [];
+  const pageSize =
+    typeof o.pageSize === "number" &&
+    (TESTCASE_PAGE_SIZE_OPTIONS as readonly number[]).includes(o.pageSize)
+      ? (o.pageSize as TestCasePageSize)
+      : DEFAULT_TESTCASE_DISPLAY_OPTIONS.pageSize;
+
+  return {
+    groupBy,
+    orderBy,
+    orderDir,
+    properties:
+      properties.length > 0 ? properties : [...DEFAULT_TESTCASE_DISPLAY_OPTIONS.properties],
+    pageSize,
+  };
+}
+
+const optionsSchema = z.object({
+  groupBy: z.enum(TESTCASE_GROUP_KEYS),
+  orderBy: z.enum(TESTCASE_ORDER_KEYS),
+  orderDir: z.enum(TESTCASE_ORDER_DIRECTIONS),
+  properties: z.array(z.enum(TESTCASE_DISPLAY_PROPERTIES)),
+  pageSize: z.union([z.literal(100), z.literal(200), z.literal(500), z.literal(1000)]),
+});
+
+/** 订阅过期/降级兜底：已持久化的 500/1000 无权限时降级为 200（照 bug 同一业务规则） */
+async function capPageSize(request: Request, pageSize: TestCasePageSize): Promise<TestCasePageSize> {
+  if (pageSize <= 200) return pageSize;
+  if (!isProEdition()) return 200;
+  try {
+    await requireFeature(request, "largePageSize");
+    return pageSize;
+  } catch {
+    return 200;
+  }
+}
+
+/** 获取当前用户持久化的用例显示选项（非法/缺失字段已回退默认值） */
+export const getTestCaseDisplayOptionsFn = createServerFn({ method: "GET" }).handler(async () => {
+  const prisma = await getPrisma();
+  const request = getRequest();
+  const session = await requireAuth(request);
+  const userId = session.user!.id!;
+
+  const row = await prisma.testCaseFilterView.findFirst({
+    where: { userId, name: TESTCASE_DISPLAY_OPTIONS_VIEW_NAME },
+    orderBy: { createdAt: "asc" },
+    select: { displayOptions: true },
+  });
+  const options = parseStoredOptions(row?.displayOptions);
+  options.pageSize = await capPageSize(request, options.pageSize);
+  return options;
+});
+
+/** 保存当前用户的用例显示选项，返回更新后的完整对象 */
+export const updateTestCaseDisplayOptionsFn = createServerFn({ method: "POST" })
+  .validator(optionsSchema)
+  .handler(async ({ data }) => {
+    const prisma = await getPrisma();
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+
+    // 服务端强制校验：pageSize > 200（500/1000）为 Pro 专属，前端锁定只是 UX
+    const options: TestCaseDisplayOptions = {
+      ...data,
+      pageSize: await capPageSize(request, data.pageSize),
+    };
+
+    // 与 get 路径同一 orderBy：并发双保留行时读写对齐首行，避免保存后读不到
+    const existing = await prisma.testCaseFilterView.findFirst({
+      where: { userId, name: TESTCASE_DISPLAY_OPTIONS_VIEW_NAME },
+      orderBy: { createdAt: "asc" },
+      select: { id: true },
+    });
+    if (existing) {
+      await prisma.testCaseFilterView.update({
+        where: { id: existing.id },
+        data: { displayOptions: toJson(options) },
+      });
+    } else {
+      await prisma.testCaseFilterView.create({
+        data: {
+          userId,
+          name: TESTCASE_DISPLAY_OPTIONS_VIEW_NAME,
+          // schema 该列 Json 对象形状（默认 "{}"），与 bug 的数组形状不同
+          filters: toJson({}),
+          displayOptions: toJson(options),
+        },
+      });
+    }
+    return options;
+  });

package/src/server/serverFns/testcase/testcase-export.ts

@@ -0,0 +1,125 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 用例列表 CSV 导出 serverFn（四期 Q8 任务 44，照 testcase-crud listTestCasesFn
+// 口径同构）。权限：首行 requireAuth + resolveStoryScopeProjectIds（projectId
+// 缺省 → 成员关系内全部项目聚合；传值 → 单项目经鉴权，防越权导出）。筛选：
+// filters 为客户端 serializeFilters 产物（FilterCondition JSON 串），与列表共
+// 用 server/testcase/list-query.ts buildListWhere 翻译——导出范围=当前筛选/
+// 搜索/scope（设计 §8 审查断言④）。聚合：服务端游标分批（take 1000/批，
+// sequenceId asc + id tiebreaker 与列表同序）取全量，CSV_EXPORT_MAX_ROWS 上限
+// 截断置 truncated（R10 大数据量防炸）。编码：server/csv.ts toCsv（BOM+转义+
+// 公式注入防护）。字段=列表显示属性（恒显编号/标题 + TESTCASE_DISPLAY_PROPERTIES
+// 四项），DB 枚举原值输出保持机器可读。
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import type { Prisma } from "@allbluecn/database";
+import { requireAuth } from "@/server/auth-helpers";
+import { resolveStoryScopeProjectIds } from "@/server/builtin-project";
+import { buildListWhere } from "@/server/testcase/list-query";
+import { CSV_EXPORT_MAX_ROWS, toCsv, type CsvCell } from "@/server/csv";
+
+const exportSchema = z.object({
+  // 「全部项目」聚合：缺省 → 成员关系内全部项目（同 listTestCasesFn scope 口径）；
+  // 传值 → 单项目经鉴权
+  projectId: z.string().optional(),
+  // FilterCondition 三段式（serializeFilters 产物），buildListWhere 翻译
+  filters: z.string().optional(),
+  // 列表搜索框文本（title/identifier 双列 insensitive）
+  search: z.string().optional(),
+  // CSV 表头语言（前端随 paraglide getLocale 透传；缺省 zh 兼容旧调用）
+  locale: z.enum(["zh", "en"]).default("zh"),
+});
+
+/** CSV 表头按 locale 切换（数据行枚举保持 DB 原值，机器可读） */
+const EXPORT_HEADERS: Record<"zh" | "en", string[]> = {
+  zh: ["编号", "标题", "类型", "优先级", "状态", "负责人"],
+  en: ["ID", "Title", "Type", "Priority", "State", "Assignee"],
+};
+
+/** 游标聚合批大小（每批一条查询，防一次性大 take 拖垮 DB） */
+const BATCH_SIZE = 1000;
+
+/** 导出列 = 列表显示属性（id 供游标翻页取值；user brief 仅取 username 展示列） */
+const TEST_CASE_EXPORT_SELECT = {
+  id: true,
+  identifier: true,
+  title: true,
+  type: true,
+  priority: true,
+  state: true,
+  assignee: { select: { username: true } },
+} satisfies Prisma.TestCaseDefaultArgs["select"];
+
+type TestCaseExportRow = Prisma.TestCaseGetPayload<{ select: typeof TEST_CASE_EXPORT_SELECT }>;
+
+export const exportTestCasesFn = createServerFn({ method: "GET" })
+  .validator(exportSchema)
+  .handler(async ({ data }) => {
+    const prisma = await getPrisma();
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const userId = session.user!.id!;
+
+    const projectIds = await resolveStoryScopeProjectIds(data.projectId, userId);
+
+    // 导出范围=当前筛选：与 listTestCasesFn 完全同款 where（归档闸门固定未归档
+    // ——归档是「回收站」语义，CSV 导出面向在用数据）
+    const where = buildListWhere({
+      archived: false,
+      projectIds,
+      searchText: data.search,
+      filters: data.filters,
+    });
+
+    const rows: TestCaseExportRow[] = [];
+    let cursor: string | undefined;
+    let lastBatchFull = false;
+    while (rows.length < CSV_EXPORT_MAX_ROWS) {
+      const take = Math.min(BATCH_SIZE, CSV_EXPORT_MAX_ROWS - rows.length);
+      const batch = await prisma.testCase.findMany({
+        where,
+        orderBy: [{ sequenceId: "asc" }, { id: "asc" }],
+        take,
+        ...(cursor ? { skip: 1, cursor: { id: cursor } } : {}),
+        select: TEST_CASE_EXPORT_SELECT,
+      });
+      rows.push(...batch);
+      lastBatchFull = batch.length >= take;
+      if (!lastBatchFull) break;
+      cursor = batch[batch.length - 1]!.id;
+    }
+    // 恰好 20000 整除时末批可能全满：按「疑似还有更多」置 truncated（宁多提示
+    // 不漏提示，前端 toast 文案即按上限表述）
+    const truncated = rows.length >= CSV_EXPORT_MAX_ROWS && lastBatchFull;
+
+    const csvRows: CsvCell[][] = [
+      EXPORT_HEADERS[data.locale],
+      ...rows.map((r) => [
+        r.identifier,
+        r.title,
+        r.type,
+        r.priority,
+        r.state,
+        r.assignee?.username ?? null,
+      ]),
+    ];
+
+    return { csv: toCsv(csvRows), truncated };
+  });

package/src/server/serverFns/testcase/testcase-filter-views.ts

@@ -28,8 +28,16 @@ import { getRequest } from "@tanstack/react-start/server";
 import { z } from "zod";
 import type { Prisma } from "@allbluecn/database";
 import { requireAuth } from "@/server/auth-helpers";
+import { TESTCASE_DISPLAY_OPTIONS_VIEW_NAME } from "@/components/testcase/display/field-configs";
 
-/** 筛选对象（规格 §3.3 注释钉死键集；值全为 string | null，跨 JSON 边界可序列化） */
+// 显示选项保留行（任务 20，testcase-display-options.ts 落点）对视图清单
+// 不可见、不可建/改（bug-views.ts NOT_RESERVED 同构收口）。
+const NOT_RESERVED = { name: { not: TESTCASE_DISPLAY_OPTIONS_VIEW_NAME } };
+
+/** 筛选对象（规格 §3.3 注释钉死键集；值全为 string | null，跨 JSON 边界可序列化）。
+ * conditions（任务 21）：serializeFilters 产物（FilterCondition JSON 串）——
+ * DB Json 对象形状不变仍为 string 值域；存量行的扁平 state/type/priority 键
+ * 保留读取兼容（view-types 的 viewFiltersToState 回落映射） */
 export interface TestCaseViewFilters {
   folderId?: string | null;
   type?: string | null;
@@ -40,12 +48,15 @@ export interface TestCaseViewFilters {
   label?: string | null;
   storyId?: string | null;
   searchText?: string | null;
+  conditions?: string | null;
 }
 
-/** 显示选项（groupBy/view 缺省由前端自补默认；density 预留） */
+/** 显示选项（groupBy/view 缺省由前端自补默认；density 预留；view=board 为
+ * PR-7b 任务 26 新增，任务 27 移除 "table" 档——displayOptions 为 Json 透传
+ * 存储，类型仅客户端契约，存量 "table" 在 toView 读取面回落 "list"） */
 export interface TestCaseViewDisplayOptions {
   groupBy?: "folder" | "state" | "priority" | "none";
-  view?: "list" | "table";
+  view?: "list" | "board";
   density?: string;
 }
 
@@ -85,6 +96,16 @@ function asObject(value: unknown): Record<string, unknown> {
     : {};
 }
 
+/** displayOptions.view 存量回退（任务 27）：表格视图已移除，DB Json 透传行的
+ * "table" 残留在唯一 DTO 反序列化收口（toView，list/create/update 三路径共用）
+ * 回落 "list"；board 保留，缺省不在此补（前端 applyView ?? "list" 口径不变）。
+ * 比较取原始 unknown 值——cast 后的联合类型与 "table" 无重叠（TS2367），
+ * 而 Json 透传行运行时取值本不受接口契约约束 */
+function normalizeDisplayOptions(value: Record<string, unknown>): TestCaseViewDisplayOptions {
+  const options = value as TestCaseViewDisplayOptions;
+  return value.view === "table" ? { ...options, view: "list" } : options;
+}
+
 function toView(row: ViewRow): TestCaseFilterViewDTO {
   return {
     id: row.id,
@@ -93,7 +114,7 @@ function toView(row: ViewRow): TestCaseFilterViewDTO {
     icon: row.icon,
     projectId: row.projectId,
     filters: asObject(row.filters) as TestCaseViewFilters,
-    displayOptions: asObject(row.displayOptions) as TestCaseViewDisplayOptions,
+    displayOptions: normalizeDisplayOptions(asObject(row.displayOptions)),
     sortOrder: row.sortOrder,
     createdAt: row.createdAt.toISOString(),
     updatedAt: row.updatedAt.toISOString(),
@@ -110,7 +131,7 @@ export const listFilterViewsFn = createServerFn({ method: "GET" }).handler(async
   const session = await requireAuth(request);
   const userId = session.user!.id!;
   const rows = await prisma.testCaseFilterView.findMany({
-    where: { userId },
+    where: { userId, ...NOT_RESERVED },
     orderBy: { sortOrder: "asc" },
     select: VIEW_SELECT,
   });
@@ -131,6 +152,9 @@ const createSchema = z.object({
 export const createFilterViewFn = createServerFn({ method: "POST" })
   .validator(createSchema)
   .handler(async ({ data }) => {
+    if (data.name === TESTCASE_DISPLAY_OPTIONS_VIEW_NAME) {
+      throw new Error("该视图名称为系统保留，请换一个名称");
+    }
     const prisma = await getPrisma();
     const request = getRequest();
     const session = await requireAuth(request);
@@ -163,6 +187,9 @@ const updateSchema = z.object({
 export const updateFilterViewFn = createServerFn({ method: "POST" })
   .validator(updateSchema)
   .handler(async ({ data }) => {
+    if (data.name === TESTCASE_DISPLAY_OPTIONS_VIEW_NAME) {
+      throw new Error("该视图名称为系统保留，请换一个名称");
+    }
     const prisma = await getPrisma();
     const request = getRequest();
     const session = await requireAuth(request);
@@ -176,8 +203,8 @@ export const updateFilterViewFn = createServerFn({ method: "POST" })
     if (patch.filters !== undefined) updates.filters = toJson(patch.filters);
     if (patch.displayOptions !== undefined) updates.displayOptions = toJson(patch.displayOptions);
     const row = await prisma.testCaseFilterView.update({
-      // userId 限定：他人视图改不到（不存在/越权时 P2025 由调用方感知）
-      where: { id, userId },
+      // userId + 非保留名限定：他人视图与显示选项保留行均改不到（P2025 由调用方感知）
+      where: { id, userId, ...NOT_RESERVED },
       data: updates,
       select: VIEW_SELECT,
     });
@@ -194,8 +221,8 @@ export const deleteFilterViewFn = createServerFn({ method: "POST" })
     const session = await requireAuth(request);
     const userId = session.user!.id!;
     await prisma.testCaseFilterView.delete({
-      // userId 限定：他人视图删不到
-      where: { id: data.id, userId },
+      // userId + 非保留名限定：他人视图与显示选项保留行均删不到（照 bug-views.ts）
+      where: { id: data.id, userId, ...NOT_RESERVED },
     });
     return { success: true };
   });

package/src/server/serverFns/testcase/testcase-groups.ts

@@ -16,9 +16,9 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 // 分组统计计数 serverFn（照 story-groups.ts listStoryGroupsFn 单函数口径，供分组列表头）。
-// 计数与 listTestCasesFn（testcase-crud.ts）同口径——下方 where 构造逐字段复制自其 listSchema
-// 分支（默认排除归档 + 全部筛选参数）；crud 侧未来抽共享 buildListWhere 时两处合一，
-// 本文件测试已锁定当前 where 形状防漂移。空组不返回（groupBy 天然只出非空键）。
+// 计数与 listTestCasesFn（testcase-crud.ts）同口径——where 构造两处合一，共用
+// server/testcase/list-query.ts 的 buildListWhere（任务 21 抽建；本文件测试已
+// 锁定 where 形状防漂移）。空组不返回（groupBy 天然只出非空键）。
 // label 返回枚举 key 原文（中文 label 由前端 i18n 映射；folder 维度 key 为 folderId/
 // unassigned，前端用已有模块树数据解析名称）。
 import { getPrisma } from "@allbluecn/database/get-prisma";
@@ -27,7 +27,8 @@ import { getRequest } from "@tanstack/react-start/server";
 import { z } from "zod";
 import type { Prisma } from "@allbluecn/database";
 import { requireAuth } from "@/server/auth-helpers";
-import { resolveStoryScopeProjectId } from "@/server/builtin-project";
+import { resolveStoryScopeProjectIds } from "@/server/builtin-project";
+import { buildListWhere } from "@/server/testcase/list-query";
 import {
   TEST_CASE_AUTOMATION_VALUES,
   TEST_CASE_PRIORITY_VALUES,
@@ -71,7 +72,8 @@ function deriveGroupKey(groupBy: TestCaseGroupBy, row: Record<string, unknown>):
 }
 
 const listGroupsSchema = z.object({
-  projectId: z.string().min(1),
+  // 「全部项目」聚合（二期 TC-A）：缺省 → 成员关系内全部项目，与 listTestCasesFn 一致
+  projectId: z.string().optional(),
   groupBy: z.enum(GROUP_BY_VALUES),
   // 以下筛选参数与 listTestCasesFn 一致（cursor/take 分页参数不适用于计数）
   folderId: z.string().nullable().optional(),
@@ -81,6 +83,9 @@ const listGroupsSchema = z.object({
   priority: z.enum(TEST_CASE_PRIORITY_VALUES).optional(),
   automation: z.enum(TEST_CASE_AUTOMATION_VALUES).optional(),
   assigneeId: z.string().nullable().optional(),
+  // FilterCondition 三段式（任务 21）：与列表一致经 buildListWhere 翻译，
+  // 分组计数与列表行同口径
+  filters: z.string().optional(),
   // 归档口径与列表一致：缺省/false 仅未归档，true 仅归档
   archived: z.boolean().optional(),
   searchText: z.string().optional(),
@@ -94,26 +99,25 @@ export const listGroupsFn = createServerFn({ method: "GET" })
     const session = await requireAuth(request);
     const userId = session.user!.id!;
 
-    // scope 解析与列表一致：未传/无效/非成员 → 静默回退独立项目，防越权查询
-    const projectId = await resolveStoryScopeProjectId(data.projectId, userId);
+    // scope 解析与列表一致（同 story/story-groups 与 bug 域）：未传 → 成员关系
+    // 全部项目聚合；单项目经鉴权（无效/非成员 → 静默回退独立项目），防越权查询
+    const projectIds = await resolveStoryScopeProjectIds(data.projectId, userId);
 
-    const where: Prisma.TestCaseWhereInput = {
-      projectId,
+    // where 构造与列表同源（server/testcase/list-query.ts buildListWhere，
+    // 任务 21 起两处合一——此前为逐字段复制，文件头注钉的收口兑现）
+    const where = buildListWhere({
       archived: data.archived ?? false,
-      ...(data.folderId !== undefined && { folderId: data.folderId }),
-      ...(data.storyId !== undefined && { storyId: data.storyId }),
-      ...(data.state && { state: data.state }),
-      ...(data.type && { type: data.type }),
-      ...(data.priority && { priority: data.priority }),
-      ...(data.automation && { automation: data.automation }),
-      ...(data.assigneeId !== undefined && { assigneeId: data.assigneeId }),
-      ...(data.searchText && {
-        OR: [
-          { title: { contains: data.searchText, mode: "insensitive" } },
-          { identifier: { contains: data.searchText, mode: "insensitive" } },
-        ],
-      }),
-    };
+      projectIds,
+      folderId: data.folderId,
+      storyId: data.storyId,
+      state: data.state,
+      type: data.type,
+      priority: data.priority,
+      automation: data.automation,
+      assigneeId: data.assigneeId,
+      filters: data.filters,
+      searchText: data.searchText,
+    });
 
     const counts = await prisma.testCase.groupBy({
       by: [GROUP_BY_FIELD[data.groupBy]],

package/src/server/serverFns/testcase/testcase-reorder.ts

@@ -0,0 +1,66 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 用例看板手动排序 serverFn（UI 对齐二期 PR-7a 任务 25，照 reorderStoriesFn
+// 同构：$transaction 批量 updateMany + 可见项目集过滤）。本文件只导出
+// createServerFn 产物。purity 口径④豁免说明：boardOrder 是看板列内手动排序
+// 权重（纯元数据，不在 CASE_Y_OWNED_FIELDS/CASE_Y_UPDATE_KEYS 协同写面内），
+// 与 story 的 boardOrder 直写先例（story-search.ts reorderStoriesFn）一致，
+// 无 withCollabGuard/touchCollabSnapshot 接线。
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import { requireAuth } from "@/server/auth-helpers";
+
+const reorderSchema = z.object({
+  // 批量上限 500（story-crud/bulk idListSchema 同款）：防误用超大拖垮 $transaction
+  items: z
+    .array(
+      z.object({
+        id: z.string(),
+        boardOrder: z.number().int().min(0),
+      }),
+    )
+    .max(500),
+});
+
+export const reorderTestCasesFn = createServerFn({ method: "POST" })
+  .validator(reorderSchema)
+  .handler(async ({ data }) => {
+    const prisma = await getPrisma();
+    const request = getRequest();
+    const session = await requireAuth(request);
+    // 可见性过滤进 where（SEC-03：防跨项目改他人用例排序）；updateMany 对
+    // 越权/不存在 id 静默跳过，不中断整批合法排序
+    const memberships = await prisma.projectMember.findMany({
+      where: { userId: session.user!.id!, status: { not: "suspended" } },
+      select: { projectId: true },
+    });
+    const visibleProjectIds = memberships.map((m) => m.projectId);
+
+    await prisma.$transaction(
+      data.items.map((item) =>
+        prisma.testCase.updateMany({
+          where: { id: item.id, projectId: { in: visibleProjectIds } },
+          data: { boardOrder: item.boardOrder },
+        }),
+      ),
+    );
+
+    return { success: true };
+  });

package/src/server/story/__tests__/date-key.test.ts

@@ -0,0 +1,57 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { describe, expect, it } from "vitest";
+import { toDateKeyUtc } from "../date-key";
+
+/**
+ * task-8 根因 B 回归钉：日期变化检测的旧值日键必须取 UTC 日切片
+ * （与客户端 parseDate / 甘特回写 payload 同域），不得用服务器本地日键。
+ *
+ * 场景复现（Asia/Shanghai 服务器）：种子行 startDate 存为 naive
+ * 「2026-10-01 19:47:18」（Prisma 回读 = 2026-10-01T19:47:18.713Z），
+ * 本地日键 =「2026-10-02」而客户端键 =「2026-10-01」——客户端把条形
+ * 拖后 1 天（payload「2026-10-02」）会被旧实现判为「无变化」→ 200 但
+ * 静默丢写，UI 乐观态与 DB 分叉。
+ */
+describe("toDateKeyUtc", () => {
+  it("取 ISO(UTC) 日切片，与客户端 parseDate 切片同域", () => {
+    expect(toDateKeyUtc(new Date("2026-10-01T19:47:18.713Z"))).toBe("2026-10-01");
+    expect(toDateKeyUtc(new Date("2026-12-02T00:00:00.000Z"))).toBe("2026-12-02");
+    // 零点时刻（本代码路径写入的形态）两个日键恒一致
+    expect(toDateKeyUtc(new Date("2026-10-03T00:00:00.000Z"))).toBe("2026-10-03");
+  });
+
+  it("恒等于 toISOString 前 10 位（任意时区下语义不变）", () => {
+    for (const iso of [
+      "2026-01-31T23:59:59.999Z",
+      "2026-02-01T00:00:00.000Z",
+      "2026-06-15T12:34:56.789Z",
+      "2026-12-31T16:00:00.000Z",
+    ]) {
+      expect(toDateKeyUtc(new Date(iso))).toBe(iso.slice(0, 10));
+    }
+  });
+
+  it("gantt +1 天改期判定回归：payload 键 ≠ 旧值键 → 必须判为变化", () => {
+    // 789 号行实测数据：客户端显示 Oct 1，拖拽 +1 天 payload = "2026-10-02"
+    const oldKey = toDateKeyUtc(new Date("2026-10-01T19:47:18.713Z"));
+    const payload = "2026-10-02";
+    expect(oldKey).toBe("2026-10-01");
+    expect(payload !== oldKey).toBe(true);
+  });
+});

package/src/server/story/date-key.ts

@@ -0,0 +1,36 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+/**
+ * 日期变化检测的「旧值日键」——ISO(UTC) 日切片。
+ *
+ * 为什么必须是 UTC 日键、不能用服务器本地日键（task-8 根因 B）：
+ * - 对外契约是 UTC：serverFn 序列化走 `toISOString()`，客户端 parseDate
+ *   切同一 UTC 日片，甘特拖拽回写 payload 的日键同源——「旧值键」必须
+ *   与客户端同域，否则比较错位。
+ * - 存储列为 naive timestamp：Prisma 按 UTC 墙钟回读；写入 `new
+ *   Date("YYYY-MM-DD")` 却取服务器本地墙钟，两条口径只在零点时刻一致。
+ *   历史数据带非零时刻（如 2026-10-01T19:47:18Z）时，本地(+08)日键
+ *   =「2026-10-02」而客户端键 =「2026-10-01」——客户端 +1 天改期会被
+ *   误判为「无变化」→ 200 但静默丢写（UI 乐观态与 DB 分叉）。
+ * - 新值键用 payload 自身（`data.startDate.slice(0, 10)`），对
+ *   "YYYY-MM-DD" 输入与 UTC 日键恒等，写入经 Prisma 回读后收敛为
+ *   payload 键（零点时刻），后续编辑不再错位。
+ */
+export function toDateKeyUtc(d: Date): string {
+  return d.toISOString().slice(0, 10);
+}