@allbluecn/web-app 0.19.2 → 0.19.4

package/src/components/story/relations/file-preview.tsx

@@ -21,6 +21,7 @@ import { FileViewer } from "@open-file-viewer/react";
 import { imagePlugin, textPlugin, pdfPlugin, officePlugin, archivePlugin, audioPlugin, videoPlugin, epubPlugin } from "@open-file-viewer/core";
 import type { PreviewToolbarCustomAction } from "@open-file-viewer/core";
 import "@open-file-viewer/core/style.css";
+import { m } from "@/paraglide/messages.js";
 import pdfWorkerSrc from "pdfjs-dist/build/pdf.worker.mjs?url";
 
 export const fileViewerPlugins = [
@@ -65,11 +66,12 @@ export interface FilePreviewProps {
 export function FilePreview({
   file,
   fileName,
-  fullscreenLabel = "全屏预览",
-  exitFullscreenLabel = "退出全屏",
+  // 默认值走 paraglide：新调用方漏传不再出现未本地化文案（审计 A7x 🟡）
+  fullscreenLabel = m.story_associatedAttachments_fullscreen(),
+  exitFullscreenLabel = m.story_associatedAttachments_exitFullscreen(),
   showTitleToggle = false,
-  titleToggleLabel = "显示标题",
-  titleToggleHideLabel = "隐藏标题",
+  titleToggleLabel = m.story_attachmentDialog_toggleTitle(),
+  titleToggleHideLabel = m.story_attachmentDialog_hideTitle(),
   onFullscreen,
   onExitFullscreen,
   height = "var(--attachment-preview-h, 16rem)",
@@ -136,8 +138,8 @@ export function FilePreview({
         icon: '<svg viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M1 3h14v2H1V3zm0 4h14v2H1V7zm0 4h14v2H1v-2z"/></svg>',
         className: "ofv-toolbar-icon-button",
         // 标题栏存在时才显示按钮：open-file-viewer 在插件渲染完成（setCommandSupport）
-        // 与翻页/缩放时会重新求值 hidden 函数
-        hidden: (ctx: any) => !ctx.viewport.querySelector(TITLE_SELECTORS),
+        // 与翻页/缩放时会重新求值 hidden 函数（ctx 类型由库的 PreviewToolbarRenderContext 提供）
+        hidden: (ctx) => !ctx.viewport.querySelector(TITLE_SELECTORS),
         onClick: () => setShowTitle((v) => !v),
       });
     }

package/src/components/story/relations/format.ts

@@ -26,6 +26,7 @@ import {
   Music,
   type LucideIcon,
 } from "lucide-react";
+import { m } from "@/paraglide/messages.js";
 
 export function formatFileSize(bytes: number): string {
   if (bytes === 0) return "0 B";
@@ -60,21 +61,76 @@ export function isEbookMimeType(mimeType: string): boolean {
   );
 }
 
-/** mimeType → 文件类型标签（中文，用于附件列表展示） */
-export function getMimeTypeLabel(mimeType: string, fileName?: string): string {
+/** 附件类型的稳定 key（分组/排序的唯一身份，不随 locale 变化） */
+export type MimeTypeLabelKey =
+  | "image"
+  | "video"
+  | "audio"
+  | "pdf"
+  | "archive"
+  | "text"
+  | "word"
+  | "sheet"
+  | "slides"
+  | "ebook"
+  | "unknown";
+
+/** 附件类型分组展示顺序（关联面板的类型筛选 chips 唯一来源）。
+ * 与 getMimeTypeLabelKey 的 key 取值同源维护：改 key 时必须同步此表，
+ * 避免消费方手抄顺序表与 key 强耦合、key 改动即静默漏组。 */
+export const MIME_TYPE_LABEL_ORDER: MimeTypeLabelKey[] = [
+  "image",
+  "video",
+  "audio",
+  "pdf",
+  "archive",
+  "text",
+  "word",
+  "sheet",
+  "slides",
+  "ebook",
+  "unknown",
+];
+
+/** mimeType → 稳定类型 key（分组/排序身份；展示文案由 getMimeTypeLabel 本地化） */
+export function getMimeTypeLabelKey(mimeType: string, fileName?: string): MimeTypeLabelKey {
   const effective = inferMimeType(fileName ?? "", mimeType);
-  if (effective.startsWith("image/")) return "图片";
-  if (effective.startsWith("video/")) return "视频";
-  if (effective.startsWith("audio/")) return "音频";
-  if (effective === "application/pdf") return "PDF";
-  if (isEbookMimeType(effective)) return "电子书";
-  if (effective.includes("zip") || effective.includes("rar") || effective.includes("7z")) return "压缩包";
-  if (effective.includes("tar") || effective.includes("gz")) return "压缩包";
-  if (effective.startsWith("text/") || effective.includes("json")) return "文本";
-  if (effective.includes("word") || effective.includes("document")) return "Word";
-  if (effective.includes("sheet") || effective.includes("excel") || effective.includes("spreadsheet")) return "表格";
-  if (effective.includes("presentation") || effective.includes("powerpoint")) return "演示";
-  return "未识别文件";
+  if (effective.startsWith("image/")) return "image";
+  if (effective.startsWith("video/")) return "video";
+  if (effective.startsWith("audio/")) return "audio";
+  if (effective === "application/pdf") return "pdf";
+  if (isEbookMimeType(effective)) return "ebook";
+  if (effective.includes("zip") || effective.includes("rar") || effective.includes("7z")) return "archive";
+  if (effective.includes("tar") || effective.includes("gz")) return "archive";
+  if (effective.startsWith("text/") || effective.includes("json")) return "text";
+  if (effective.includes("word") || effective.includes("document")) return "word";
+  if (effective.includes("sheet") || effective.includes("excel") || effective.includes("spreadsheet")) return "sheet";
+  if (effective.includes("presentation") || effective.includes("powerpoint")) return "slides";
+  return "unknown";
+}
+
+const MIME_TYPE_LABEL_MESSAGE: Record<MimeTypeLabelKey, () => string> = {
+  image: m.story_attachmentType_image,
+  video: m.story_attachmentType_video,
+  audio: m.story_attachmentType_audio,
+  pdf: m.story_attachmentType_pdf,
+  archive: m.story_attachmentType_archive,
+  text: m.story_attachmentType_text,
+  word: m.story_attachmentType_word,
+  sheet: m.story_attachmentType_sheet,
+  slides: m.story_attachmentType_slides,
+  ebook: m.story_attachmentType_ebook,
+  unknown: m.story_attachmentType_unknown,
+};
+
+/** 类型 key → 本地化标签（分组 chips 等已持有 key 的调用方直接取文案） */
+export function getMimeTypeLabelByKey(key: MimeTypeLabelKey): string {
+  return MIME_TYPE_LABEL_MESSAGE[key]();
+}
+
+/** mimeType → 本地化类型标签（附件列表展示；en locale 不再输出硬编码中文，审计 A7x 🟡） */
+export function getMimeTypeLabel(mimeType: string, fileName?: string): string {
+  return getMimeTypeLabelByKey(getMimeTypeLabelKey(mimeType, fileName));
 }
 
 /** 扩展名 → MIME 类型映射（补充浏览器无法识别的格式） */

package/src/components/story/relations/knowledge-select-dialog.tsx

@@ -37,12 +37,20 @@ import {
   unlinkDocFn,
   type SearchDocRow,
 } from "@/server/serverFns/story";
+import { GENERAL_GROUPS, type GeneralGroup } from "@/server/serverFns/story/kb-general-consts";
 import { generalGroupLabel } from "./general-groups";
+import { useLinkedSelection } from "./use-linked-selection";
 import { KbFilterPopover, type KbFilter } from "@/components/knowledge/kb-filter-popover";
 import type { DocBrief } from "../types";
 import { m } from "@/paraglide/messages.js";
 import { toastError } from "@/lib/toast-error";
 
+/** KbFilter.group 是宽泛 string，服务端 schema 收窄为 GENERAL_GROUPS 枚举；
+ * 以同源常量做类型守卫替代 as never 欺骗（审计 A7x 🟡） */
+function isGeneralGroup(value: string): value is GeneralGroup {
+  return (GENERAL_GROUPS as readonly string[]).includes(value);
+}
+
 interface KbBrief {
   id: string;
   name: string;
@@ -77,11 +85,14 @@ export function KnowledgeSelectDialog({
   const [kbFilter, setKbFilter] = React.useState<KbFilter>(null);
   const [items, setItems] = React.useState<SearchDocRow[]>([]);
   const [search, setSearch] = React.useState("");
-  const [selected, setSelected] = React.useState<Set<string>>(new Set());
   const [loading, setLoading] = React.useState(false);
   const [submitting, setSubmitting] = React.useState(false);
 
   const linkedIds = React.useMemo(() => new Set(linkedDocs.map((d) => d.id)), [linkedDocs]);
+  const listedIds = React.useMemo(() => items.map((d) => d.id), [items]);
+  // 选择集语义与 design-select-dialog 同构，收敛到共享 hook（审计 A7x 🔵）
+  const { selected, reset: resetSelection, toggle, allSelected, someSelected, toggleSelectAll, diff } =
+    useLinkedSelection(linkedIds, listedIds);
 
   const loadDocs = React.useCallback(
     async (filter: KbFilter, query: string) => {
@@ -91,7 +102,7 @@ export function KnowledgeSelectDialog({
           data: {
             storyId,
             kbId: filter?.type === "kb" ? filter.id : undefined,
-            generalGroup: filter?.type === "general" ? (filter.group as never) : undefined,
+            generalGroup: filter?.type === "general" && isGeneralGroup(filter.group) ? filter.group : undefined,
             query,
           },
         });
@@ -108,7 +119,7 @@ export function KnowledgeSelectDialog({
 
   React.useEffect(() => {
     if (!open) return;
-    setSelected(new Set(linkedIds));
+    resetSelection(linkedIds);
     setSearch("");
     setKbFilter(null);
     void (async () => {
@@ -139,35 +150,6 @@ export function KnowledgeSelectDialog({
     void loadDocs(filter, search);
   };
 
-  const toggle = (id: string) => {
-    setSelected((prev) => {
-      const next = new Set(prev);
-      if (next.has(id)) next.delete(id);
-      else next.add(id);
-      return next;
-    });
-  };
-
-  // 全选/部分选状态（仅针对当前列表内的条目）
-  const listedIds = React.useMemo(() => items.map((d) => d.id), [items]);
-  const selectedListedCount = React.useMemo(
-    () => listedIds.filter((id) => selected.has(id)).length,
-    [listedIds, selected],
-  );
-  const allSelected = listedIds.length > 0 && selectedListedCount === listedIds.length;
-  const someSelected = selectedListedCount > 0 && !allSelected;
-  const toggleSelectAll = () => {
-    setSelected((prev) => {
-      const next = new Set(prev);
-      if (allSelected) {
-        for (const id of listedIds) next.delete(id);
-      } else {
-        for (const id of listedIds) next.add(id);
-      }
-      return next;
-    });
-  };
-
   const childrenOf = React.useMemo(() => {
     const map = new Map<string | null, SearchDocRow[]>();
     for (const row of items) {
@@ -179,7 +161,8 @@ export function KnowledgeSelectDialog({
     return map;
   }, [items]);
 
-  const renderRows = (parentId: string | null, depth: number): React.ReactNode[] => {
+  // seen 集合防环（审计 A7x ⚪）：异常数据 parentId 成环时避免无限递归栈溢出
+  const renderRows = (parentId: string | null, depth: number, seen: Set<string> = new Set()): React.ReactNode[] => {
     const rows = childrenOf.get(parentId) ?? [];
     const out: React.ReactNode[] = [];
     for (const row of rows) {
@@ -221,7 +204,10 @@ export function KnowledgeSelectDialog({
           )}
         </div>,
       );
-      out.push(...renderRows(row.id, depth + 1));
+      if (!seen.has(row.id)) {
+        seen.add(row.id);
+        out.push(...renderRows(row.id, depth + 1, seen));
+      }
     }
     return out;
   };
@@ -230,18 +216,30 @@ export function KnowledgeSelectDialog({
     if (submitting) return;
     setSubmitting(true);
     try {
-      const toAdd = [...selected].filter((id) => !linkedIds.has(id));
-      const toRemove = [...linkedIds].filter((id) => !selected.has(id));
+      const { toAdd, toRemove } = diff();
 
       let nextDocs = linkedDocs;
+      // 逐条 catch 计数（审计 A7x 🟡，与 design-select-dialog 同口径）：中途失败
+      // 不整体中断，已解联条目照常从本地状态移除，失败计入部分失败提示
+      let failedCount = 0;
       if (toRemove.length > 0) {
+        const removed: string[] = [];
         for (const docId of toRemove) {
-          await unlinkDoc({ data: { storyId, docId } });
+          try {
+            await unlinkDoc({ data: { storyId, docId } });
+            removed.push(docId);
+          } catch {
+            failedCount += 1;
+          }
+        }
+        if (removed.length > 0) {
+          const removedSet = new Set(removed);
+          nextDocs = nextDocs.filter((d) => !removedSet.has(d.id));
         }
-        nextDocs = nextDocs.filter((d) => !toRemove.includes(d.id));
       }
       if (toAdd.length > 0) {
         const res = await linkDocs({ data: { storyId, docIds: toAdd } });
+        failedCount += res.failed.length;
         if (res.failed.length > 0) {
           toast.warning(m.story_knowledgeDialog_partialFailed({ count: res.failed.length }));
         }
@@ -251,7 +249,11 @@ export function KnowledgeSelectDialog({
           ...nextDocs,
           ...items.filter((d) => addedIds.has(d.id)).map((d) => ({ id: d.id, title: d.title, kbId: d.kbId, kbName: d.kbName, kbIcon: d.kbIcon, docIcon: d.docIcon, parentId: d.parentId })),
         ];
-      }      onUpdate(nextDocs);
+      }
+      if (failedCount > 0) {
+        toast.warning(m.story_knowledgeDialog_unlinkPartialFailed({ count: failedCount }));
+      }
+      onUpdate(nextDocs);
       onOpenChange(false);
     } catch (err) {
       toastError(err, m.story_knowledgeDialog_linkFailed());

package/src/components/story/relations/link-manage-dialog.tsx

@@ -58,10 +58,12 @@ export function LinkManageDialog({
   const [editing, setEditing] = React.useState<StoryLinkItem | null>(null);
   const [form, setForm] = React.useState({ url: "", title: "", description: "" });
   const [submitting, setSubmitting] = React.useState(false);
+  const [urlError, setUrlError] = React.useState("");
 
   React.useEffect(() => {
     if (open) {
       setEditing(initialEdit);
+      setUrlError("");
       setForm(
         initialEdit
           ? { url: initialEdit.url, title: initialEdit.title ?? "", description: initialEdit.description ?? "" }
@@ -73,23 +75,35 @@ export function LinkManageDialog({
   const handleSubmit = async (e: React.FormEvent) => {
     e.preventDefault();
     if (submitting) return;
+    // URL 校验在提交侧完成（审计 A7x 🟡）：HTML required/type="url" 被项目规范禁用，
+    // 且原生校验气泡文案不可本地化
+    const url = form.url.trim();
+    try {
+      new URL(url);
+    } catch {
+      setUrlError(m.story_linkDialog_invalidUrl());
+      return;
+    }
+    setUrlError("");
     setSubmitting(true);
     try {
       if (editing) {
         const updated = await updateLink({
           data: {
             linkId: editing.id,
-            url: form.url,
+            url,
             title: form.title || undefined,
             description: form.description || undefined,
           },
         });
         toast.success(m.story_linkDialog_updated());
         if (updated.activity) onActivity?.(updated.activity);
+        // 优先消费服务端返回的完整行（服务端可能规范化 url/回填字段，
+        // 本地 form 值构造会与数据源漂移，审计 A7x ⚪）
         onUpdate(
           data.map((l) =>
             l.id === editing.id
-              ? { ...l, url: form.url, title: form.title || null, description: form.description || null }
+              ? { id: updated.id, url: updated.url, title: updated.title, description: updated.description }
               : l,
           ),
         );
@@ -97,7 +111,7 @@ export function LinkManageDialog({
         const created = await addLink({
           data: {
             storyId,
-            url: form.url,
+            url,
             title: form.title || undefined,
             description: form.description || undefined,
           },
@@ -139,13 +153,18 @@ export function LinkManageDialog({
             </label>
             <Input
               id="link-url"
-              type="url"
-              required
+              type="text"
+              inputMode="url"
+              aria-invalid={!!urlError || undefined}
               placeholder={m.story_linkDialog_urlPlaceholder()}
               value={form.url}
-              onChange={(e) => setForm({ ...form, url: e.target.value })}
+              onChange={(e) => {
+                setForm({ ...form, url: e.target.value });
+                if (urlError) setUrlError("");
+              }}
               className="h-10 text-base"
             />
+            {urlError && <p className="text-xs text-destructive">{urlError}</p>}
           </div>
           <div className="space-y-1.5">
             <label htmlFor="link-title" className="text-xs font-medium text-muted-foreground">

package/src/components/story/relations/story-ref-row.tsx

@@ -111,7 +111,7 @@ export function StoryRefRow({
   const crossProject = storyState.projectId !== parentProjectId;
   const storyProjectInfo = projects.find((p) => p.id === storyState.projectId) ?? null;
 
-  const updateField = async (patch: Record<string, any>) => {
+  const updateField = async (patch: StoryPatch) => {
     const updated = { ...storyState, ...patch };
     setStoryState(updated);
     try {
@@ -188,8 +188,8 @@ export function StoryRefRow({
       >
         {crossProject && storyProjectInfo ? (
           <Tooltip>
-            <TooltipTrigger render={<span className="shrink-0"
-                style={{ color: "oklch(80.517% 0.20237 152.675 / 0.909)" }} />}>
+            {/* 跨项目标识色用语义类（审计 A7x 🟡）：跟随主题/暗黑模式，替代写死的 oklch 字面量 */}
+            <TooltipTrigger render={<span className="shrink-0 text-green-600 dark:text-green-400" />}>
                 <LucideIconByName name={storyProjectInfo.icon} size={14} />
               </TooltipTrigger>
             <TooltipContent side="top" sideOffset={6} className="flex flex-col items-start gap-0.5 text-xs">
@@ -206,8 +206,7 @@ export function StoryRefRow({
         ) : null}
         {crossProject && storyProjectInfo ? (
           <Tooltip>
-            <TooltipTrigger render={<span className="font-mono text-xs shrink-0"
-                style={{ color: "oklch(80.517% 0.20237 152.675 / 0.909)" }} />}>
+            <TooltipTrigger render={<span className="font-mono text-xs shrink-0 text-green-600 dark:text-green-400" />}>
                 {storyState.identifier}
               </TooltipTrigger>
             <TooltipContent side="top" sideOffset={6} className="flex flex-col items-start gap-0.5 text-xs">

package/src/components/story/relations/use-linked-selection.ts

@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import * as React from "react";
+
+/**
+ * 「多选关联管理弹窗」的选择集语义（design-select-dialog 与 knowledge-select-dialog
+ * 同构复制收敛于此，审计 A7x-web-comp-15 🔵）：勾选 toggle、列表内全选/半选、
+ * 以及提交时相对已关联集合的 add/remove diff。
+ *
+ * @param linkedIds 当前已关联的 id 集合（提交 diff 的基准）
+ * @param listedIds 当前列表内展示的 id（全选/半选只统计列表内条目）
+ */
+export function useLinkedSelection(linkedIds: Set<string>, listedIds: string[]) {
+  const [selected, setSelected] = React.useState<Set<string>>(new Set());
+
+  /** 打开弹窗时以已关联集合初始化选择集 */
+  const reset = React.useCallback((initial: Set<string>) => {
+    setSelected(new Set(initial));
+  }, []);
+
+  const toggle = React.useCallback((id: string) => {
+    setSelected((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+  }, []);
+
+  const selectedListedCount = React.useMemo(
+    () => listedIds.filter((id) => selected.has(id)).length,
+    [listedIds, selected],
+  );
+  const allSelected = listedIds.length > 0 && selectedListedCount === listedIds.length;
+  const someSelected = selectedListedCount > 0 && !allSelected;
+
+  const toggleSelectAll = React.useCallback(() => {
+    setSelected((prev) => {
+      const next = new Set(prev);
+      if (allSelected) {
+        for (const id of listedIds) next.delete(id);
+      } else {
+        for (const id of listedIds) next.add(id);
+      }
+      return next;
+    });
+  }, [allSelected, listedIds]);
+
+  /** 提交 diff：toAdd=勾选了但未关联，toRemove=已关联但被取消勾选 */
+  const diff = React.useCallback(() => {
+    const toAdd = [...selected].filter((id) => !linkedIds.has(id));
+    const toRemove = [...linkedIds].filter((id) => !selected.has(id));
+    return { toAdd, toRemove };
+  }, [selected, linkedIds]);
+
+  return { selected, setSelected, reset, toggle, allSelected, someSelected, toggleSelectAll, diff };
+}

package/src/components/story/search-popover.tsx

@@ -20,6 +20,7 @@ import { Search } from "lucide-react";
 import { Popover, PopoverContent, PopoverTrigger } from "@/components/ui/popover";
 import { Input } from "@/components/ui/input";
 import { Command, CommandEmpty, CommandGroup, CommandItem, CommandList } from "@/components/ui/command";
+import { useDebouncedCallback, SEARCH_DEBOUNCE_MS } from "@/lib/pacer";
 import { cn } from "@/lib/utils";
 import { searchStoriesFn } from "@/server/serverFns/story";
 import { m } from "@/paraglide/messages.js";
@@ -41,35 +42,49 @@ export function StorySearchPopover({
   const [query, setQuery] = React.useState("");
   const [results, setResults] = React.useState<Array<{ id: string; title: string; identifier: string }>>([]);
   const [loading, setLoading] = React.useState(false);
+  // 竞态守卫：迟到旧响应不得覆盖新查询结果（审计 A7x 🟡）
+  const requestIdRef = React.useRef(0);
+  // excludeIds 为 prop 数组（身份随渲染变化），经 ref 供防抖回调读取最新值
+  const excludeIdsRef = React.useRef(excludeIds);
+  excludeIdsRef.current = excludeIds;
   const placeholderText = placeholder ?? m.story_search_searchStory();
 
-  const searchStories = async (q: string) => {
+  const runSearch = React.useCallback(async (q: string) => {
+    const reqId = ++requestIdRef.current;
     if (!q.trim()) {
       setResults([]);
+      setLoading(false);
       return;
     }
 
     setLoading(true);
     try {
-      const items = await searchStoriesFn({ data: { query: q, excludeIds } });
+      const items = await searchStoriesFn({ data: { query: q, excludeIds: excludeIdsRef.current } });
+      if (reqId !== requestIdRef.current) return;
       setResults(items);
     } catch (error) {
+      if (reqId !== requestIdRef.current) return;
       console.error(m.story_search_searchFailed(), error);
     } finally {
-      setLoading(false);
+      if (reqId === requestIdRef.current) setLoading(false);
     }
-  };
+  }, []);
+
+  // 防抖统一走 pacer（审计 A7x 🟡）：每击键直发 serverFn 浪费配额
+  const debouncedSearch = useDebouncedCallback(runSearch, { wait: SEARCH_DEBOUNCE_MS });
 
   const handleSearch = (value: string) => {
     setQuery(value);
-    searchStories(value);
+    debouncedSearch(value);
   };
 
   const handleSelect = (storyId: string, story?: { id: string; title: string; identifier: string }) => {
     onSelect(storyId, story);
+    requestIdRef.current += 1; // 作废在途响应，防选中后迟到结果闪回
     setOpen(false);
     setQuery("");
     setResults([]);
+    setLoading(false);
   };
 
   return (