@allbluecn/web-app 0.19.2 → 0.19.4

package/src/server/lib/cron-auth.ts

@@ -15,13 +15,16 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-// SEC-15：cron/运维端点共享鉴权。Bearer/x-cron-secret 与 CRON_SECRET 的比较
+// SEC-15：cron/运维端点共享鉴权。Bearer 与 CRON_SECRET 的比较
 // 必须走常数时间比较（timingSafeEqual），防逐字节猜测时序侧信道。
 import { timingSafeEqual } from "node:crypto"
 
 /**
  * 常数时间比较 presented 与 CRON_SECRET。
- * - 未配置 CRON_SECRET：生产 fail-closed（403/401），非生产放行（本地开发便利）。
+ * - 未配置 CRON_SECRET：白名单放行——仅 NODE_ENV 精确等于 "development"/"test"
+ *   （2026-10 审计 🟡 fail-closed 修正：原先 `!== "production"` 一刀切，误拼
+ *   （Production/prod）或未注入 NODE_ENV 的自部署环境会被误判为非生产放行）；
+ *   其余取值（含缺失）一律 403/401。
  * - 长度不等直接 false：timingSafeEqual 等长前置（不等长会抛异常）；
  *   token 长度非秘密，长度检查本身的时序差异可接受。
  */
@@ -32,7 +35,8 @@ export function verifyCronSecret(
   const allowUnsetDevBypass = opts?.allowUnsetDevBypass ?? true
   const secret = process.env.CRON_SECRET
   if (!secret) {
-    return allowUnsetDevBypass && process.env.NODE_ENV !== "production"
+    const nodeEnv = process.env.NODE_ENV
+    return allowUnsetDevBypass && (nodeEnv === "development" || nodeEnv === "test")
   }
   if (!presented) return false
   const a = Buffer.from(presented)

package/src/server/lib/display-options-schema.ts

@@ -0,0 +1,52 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// DisplayOptions 写入侧校验的单一来源（审计 A2x-serverfns-5 🟡/🔵 2026-10-25）：
+// story-display-options.ts（用户级偏好）与 story-view.ts（视图快照）共用同一
+// schema，替换各自手写字面量 / z.unknown() 直通。零服务端依赖（消费
+// components/shared-kit 的纯常量），客户端安全。
+// iteration 为甘特专属维度（GROUP_KEYS 之外、timeline clamp 白名单放行）：
+// groupBy 持久化放行，跨布局合法性由 filterDisplayOptionsForLayout 按布局 clamp。
+
+import { z } from 'zod'
+import {
+  GROUP_KEYS,
+  ORDER_KEYS,
+  ORDER_DIRECTIONS,
+  ALL_DISPLAY_PROPERTIES,
+} from '@/shared/list-kit/display-values'
+
+const groupBySchema = z.enum([...GROUP_KEYS, 'iteration'] as const)
+const subGroupBySchema = z.enum(GROUP_KEYS)
+const orderBySchema = z.enum(ORDER_KEYS)
+const orderDirSchema = z.enum(ORDER_DIRECTIONS)
+const propertySchema = z.enum(ALL_DISPLAY_PROPERTIES)
+const pageSizeSchema = z.union([z.literal(100), z.literal(200), z.literal(500), z.literal(1000)])
+
+export const displayOptionsSchema = z.object({
+  groupBy: groupBySchema,
+  subGroupBy: subGroupBySchema,
+  orderBy: orderBySchema,
+  orderDir: orderDirSchema,
+  properties: z.array(propertySchema),
+  showEmptyGroups: z.boolean(),
+  showSubItems: z.boolean(),
+  pageSize: pageSizeSchema,
+  columnOrder: z.array(z.string().min(1)).optional(),
+})
+
+export type DisplayOptionsInput = z.infer<typeof displayOptionsSchema>

package/src/server/lib/fixed-window-rate-limit.ts

@@ -0,0 +1,105 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 固定窗口进程内存限流 store 单一来源（2026-10 审计 🔵：middlewares/auth-rate-limit.ts
+// 与 middlewares/rate-limit.ts 各持一份同构 Map + 懒启动清扫定时器，收敛到本模块）。
+//
+// ⚠️ 架构边界：计数器存于单进程内存（Map），**多实例部署不共享**，
+// 实际阈值 = 配置值 × 实例数。本期不实施分布式限流（Redis 等），
+// 多实例部署落地前不得将本模块视为唯一防线。Cloudflare Workers 多 isolate 同语义；
+// 分布式化（Redis/DO）为独立后续任务。
+
+interface WindowEntry {
+  count: number
+  resetAt: number
+}
+
+export interface FixedWindowRateLimiter {
+  /** 消耗型判定：新窗/过期重置为 1 并放行；窗口内 count >= max 拒绝，否则 +1 放行 */
+  check(key: string, max: number, windowMs: number): boolean
+  /** 只读判定（不计数）；过期项顺带清除 */
+  isBlocked(key: string, max: number): boolean
+  /** 记一次失败（独立累计口径，配 isBlocked 使用） */
+  recordFailure(key: string, windowMs: number): void
+  /** 清空某 key（成功后清零语义） */
+  reset(key: string): void
+  /** 测试辅助：清空整个 store（用例隔离用，生产勿调） */
+  clearForTest(): void
+}
+
+const CLEANUP_INTERVAL = 60_000
+
+export function createFixedWindowRateLimiter(): FixedWindowRateLimiter {
+  const store = new Map<string, WindowEntry>()
+  // 清扫定时器懒启动：workerd 禁止在 global scope（模块顶层）设定时器/fetch
+  // （Disallowed operation within global scope），首次进入限流调用（handler
+  // 上下文）时才开启；Node 场景行为不变。过期 key（伪造 IP/随机 key）若只靠
+  // 访问时覆盖会永久滞留内存，定时清扫防无界增长（2026-10 审计 🟡）。
+  let cleanupStarted = false
+  function ensureCleanupTimer() {
+    if (cleanupStarted) return
+    cleanupStarted = true
+    const cleanupTimer = setInterval(() => {
+      const now = Date.now()
+      for (const [key, entry] of store) {
+        if (now > entry.resetAt) store.delete(key)
+      }
+    }, CLEANUP_INTERVAL)
+    // 防止 timer 阻止进程退出（jsdom 环境 setInterval 返回 number，无 unref）
+    cleanupTimer.unref?.()
+  }
+
+  return {
+    check(key, max, windowMs) {
+      ensureCleanupTimer()
+      const now = Date.now()
+      const entry = store.get(key)
+      if (!entry || now > entry.resetAt) {
+        store.set(key, { count: 1, resetAt: now + windowMs })
+        return true
+      }
+      if (entry.count >= max) return false
+      entry.count++
+      return true
+    },
+    isBlocked(key, max) {
+      const entry = store.get(key)
+      if (!entry) return false
+      if (Date.now() > entry.resetAt) {
+        store.delete(key)
+        return false
+      }
+      return entry.count >= max
+    },
+    recordFailure(key, windowMs) {
+      ensureCleanupTimer()
+      const now = Date.now()
+      const entry = store.get(key)
+      if (!entry || now > entry.resetAt) {
+        store.set(key, { count: 1, resetAt: now + windowMs })
+        return
+      }
+      entry.count++
+    },
+    reset(key) {
+      store.delete(key)
+    },
+    clearForTest() {
+      store.clear()
+    },
+  }
+}

package/src/server/lib/image-magic.ts

@@ -0,0 +1,44 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 截图魔数校验（2026-10 审计 🟡）：multipart 的 file.type 与 dataURL 前缀均为
+// 客户端声明值，任意字节流改名 image/png 即可通过声明校验、以 image/* 身份
+// 入库并经截图代理（Content-Type 回显 mimeType）输出。落库前按字节校验
+// PNG/JPEG 魔数（collect-handler 上传与 report-handler chrome_ext dataURL
+// 两处同治）。纯函数、零依赖。
+
+const PNG_MAGIC = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a] as const
+const JPEG_MAGIC = [0xff, 0xd8, 0xff] as const
+
+export type ScreenshotMime = 'image/png' | 'image/jpeg'
+
+/** 按字节前缀判定 PNG/JPEG；两者皆非返回 null（调用方拒绝入库） */
+export function detectImageMime(bytes: Uint8Array): ScreenshotMime | null {
+  if (
+    bytes.length >= PNG_MAGIC.length &&
+    PNG_MAGIC.every((b, i) => bytes[i] === b)
+  ) {
+    return 'image/png'
+  }
+  if (
+    bytes.length >= JPEG_MAGIC.length &&
+    JPEG_MAGIC.every((b, i) => bytes[i] === b)
+  ) {
+    return 'image/jpeg'
+  }
+  return null
+}

package/src/{components/design/editor/pages/design-layout.tsx → server/lib/prisma-json.ts}

@@ -15,14 +15,17 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import { Outlet } from '@tanstack/react-router'
-import { useMatches } from '@tanstack/react-router'
-import type { ComponentType } from 'react'
-import { DesignDashboard } from '../dashboard/design-dashboard'
+// Prisma Json 列写入的统一收窄（替代散落各 serverFn 的 `as any` / 本地 toJson 副本）。
+// Prisma 对可空 Json 列拒绝直接传 JS null，必须显式 DbNull；读回时两者均为 null。
 
-export const DesignLayout: ComponentType = () => {
-  const matches = useMatches()
-  const isIndex = matches.length === 3 || (matches[matches.length - 1]?.id === '/_nav/prd')
+import { Prisma } from '@allbluecn/database'
 
-  return isIndex ? <DesignDashboard /> : <Outlet />
-}
+export function toJsonInput(value: unknown): Prisma.InputJsonValue {
+  return value as Prisma.InputJsonValue
+}
+
+export function toNullableJsonInput(
+  value: unknown,
+): Prisma.InputJsonValue | typeof Prisma.DbNull {
+  return value === null || value === undefined ? Prisma.DbNull : (value as Prisma.InputJsonValue)
+}

package/src/server/lib/project-membership.ts

@@ -0,0 +1,60 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 项目成员守卫单一来源（审计 2026-10-25 🔵：story/testcase/bug/iteration 各域曾各持一份逐字
+// 相同的 assertProjectMembership 副本，仅错误文案不同）。
+// 语义与各副本完全一致：成员行不存在或 status === "suspended" 视为无权限（invited 放行）。
+
+import { getPrisma } from '@allbluecn/database/get-prisma'
+
+export const PROJECT_FORBIDDEN_MESSAGE = '无权限操作该项目'
+
+export async function isProjectMember(projectId: string, userId: string): Promise<boolean> {
+  const prisma = await getPrisma()
+  const membership = await prisma.projectMember.findUnique({
+    where: { projectId_userId: { projectId, userId } },
+    select: { status: true },
+  })
+  return !!membership && membership.status !== 'suspended'
+}
+
+export async function assertProjectMembership(
+  projectId: string,
+  userId: string,
+  message: string = PROJECT_FORBIDDEN_MESSAGE,
+): Promise<void> {
+  if (!(await isProjectMember(projectId, userId))) {
+    throw new Error(message)
+  }
+}
+
+/** 批量口径：传入的每个项目都必须是当前用户的有效成员项目，任一不满足即拒绝 */
+export async function assertProjectsMembership(
+  projectIds: readonly string[],
+  userId: string,
+  message: string = PROJECT_FORBIDDEN_MESSAGE,
+): Promise<void> {
+  const unique = Array.from(new Set(projectIds))
+  if (unique.length === 0) return
+  const prisma = await getPrisma()
+  const count = await prisma.projectMember.count({
+    where: { userId, projectId: { in: unique }, status: { not: 'suspended' } },
+  })
+  if (count !== unique.length) {
+    throw new Error(message)
+  }
+}

package/src/server/lib/rate-limit.ts

@@ -33,8 +33,15 @@ export const AI_RATE_LIMIT = {
   generatePrototype: { max: 5, windowMs: 60_000 },
   testGeneration: { max: 5, windowMs: 60_000 },
   testProvider: { max: 10, windowMs: 60_000 },
+  // 审计 A2x-serverfns-2 补口：注释模板填充（与 generatePrototype 同价位 LLM 调用）
+  fillAnnotation: { max: 5, windowMs: 60_000 },
+  // 审计 A2x-serverfns-2 补口：BYOK 拉取远程模型列表（出网请求，与 testProvider 同口径）
+  refreshModels: { max: 10, windowMs: 60_000 },
   detect: { max: 10, windowMs: 60_000 },
   webSearch: { max: 20, windowMs: 60_000 },
+  // 审计 A2x-serverfns-7 补口：translateFn 昂贵 LLM 调用此前无独立限流
+  //（与 chat 同价位；文案翻译常被批量触发，阈值对齐 chat）
+  translation: { max: 10, windowMs: 60_000 },
   // P3 媒体生成 per-minute 突发频控（月度配额由 requireResource 承担，此处仅防瞬时滥用）
   mediaImage: { max: 10, windowMs: 60_000 },
   mediaVideo: { max: 5, windowMs: 60_000 },
@@ -44,12 +51,17 @@ export const AI_RATE_LIMIT = {
   mediaPoll: { max: 60, windowMs: 60_000 },
   mediaPrototype: { max: 5, windowMs: 60_000 },
   aiTask: { max: 5, windowMs: 60_000 },
+  // 审计 A2x-serverfns-4 补口：知识库向量索引（embedding 计费调用，单文档建索引；
+  // 整库重建同样走此入口限一次，文档级循环在窗口内继续）
+  kbIndex: { max: 10, windowMs: 60_000 },
 } as const
 
 /** 非 AI 的一般用户动作 per-minute 限流（与 AI_RATE_LIMIT 同一进程内存态口径） */
 export const USER_ACTION_RATE_LIMIT = {
   faviconRefresh: { max: 10, windowMs: 60_000 },
   linkPreview: { max: 20, windowMs: 60_000 },
+  // 审计 A2x-serverfns-4 补口：书签 GitHub 同步（服务端外呼 GitHub API，防配额放大）
+  githubSync: { max: 10, windowMs: 60_000 },
 } as const
 
 export interface RateLimitConfig {
@@ -62,6 +74,9 @@ interface ServerFnRateLimitResult {
   retryAfterMs: number
 }
 
+/** 单次调用最大权重（防意外大权重打穿窗口） */
+const MAX_RATE_LIMIT_WEIGHT = 1000
+
 const limiterCache = new Map<
   string,
   { limiter: RateLimiter<(...args: unknown[]) => boolean>; lastAccess: number }
@@ -111,18 +126,36 @@ function getRateLimiter(
   return limiter
 }
 
+/**
+ * 按权重消耗限流桶（2026-10 审计新增，供 batch 语义消费方按条数计权）：
+ * weight=N 连续消耗 N 个配额；中途耗尽即拒（已消耗部分不返还，攻击者只会
+ * 更快触顶）。weight ≤0/非整数按 1 处理，上限 MAX_RATE_LIMIT_WEIGHT。
+ */
 export function checkRateLimit(
   key: string,
-  config: RateLimitConfig
+  config: RateLimitConfig,
+  weight = 1,
 ): ServerFnRateLimitResult {
   const limiter = getRateLimiter(key, config)
-  const allowed = limiter.maybeExecute()
-  return {
-    allowed,
-    retryAfterMs: allowed ? 0 : limiter.getMsUntilNextWindow(),
+  const times =
+    Number.isInteger(weight) && weight > 0 ? Math.min(weight, MAX_RATE_LIMIT_WEIGHT) : 1
+  let allowed = true
+  let retryAfterMs = 0
+  for (let i = 0; i < times; i++) {
+    const ok = limiter.maybeExecute()
+    if (!ok) {
+      allowed = false
+      retryAfterMs = limiter.getMsUntilNextWindow()
+      break
+    }
   }
+  return { allowed, retryAfterMs }
 }
 
+// async 声明为刻意设计（2026-10 审计 🟢 注记）：函数体当前全同步，保留
+// async 签名是为调用方 `await` 写法前向兼容——分布式限流（Redis 等）落地时
+// 变为真异步无需改调用点；微任务开销可接受。
+
 export class RateLimitExceededError extends Error {
   constructor(
     public readonly retryAfterMs: number,

package/src/{lib/annotation-template.ts → server/lib/sse-chunk.ts}

@@ -15,19 +15,17 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import { DOMParser } from "@tiptap/pm/model";
-import type { Editor } from "@tiptap/react";
+import type { StreamChunk } from "@tanstack/ai";
 
 /**
- * 将 HTML 字符串转为 ProseMirror content 节点数组（用于 insertContent 的 content 字段）。
- * 客户端调用（onAnnotate 事件触发），document 可用。
+ * 构造 AG-UI CUSTOM 事件 chunk（审计 2026-10-25 🔵：notifications/stream 与
+ * test-runs/$runId/events 两处同构的 `as unknown as StreamChunk` 收敛为单一出处）。
+ *
+ * @tanstack/ai 刻意将裸 CustomEvent（value: any）排除出 StreamChunk 联合类型
+ *（见其 types.d.ts 对 TaggedCustomEvent 的 Caveat 说明——入 union 会污染 name 窄化
+ * 后的 value 类型），官方建议即「cast the chunk to StreamChunk to recover the
+ * wider shape」，故此处断言为库设计豁免而非消音。
  */
-export function htmlToPmContent(editor: Editor, html: string): any[] {
-  if (typeof document === "undefined" || !html) return [{ type: "paragraph" }];
-  const wrapper = document.createElement("div");
-  wrapper.innerHTML = html;
-  const parser = DOMParser.fromSchema(editor.schema);
-  const parsed = parser.parse(wrapper);
-  const json = parsed.toJSON();
-  return (json as any).content ?? [{ type: "paragraph" }];
+export function customChunk(name: string, value: unknown): StreamChunk {
+  return { type: "CUSTOM", name, value } as unknown as StreamChunk;
 }

package/src/server/lib/text-truncate.ts

@@ -0,0 +1,51 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 字符串截断 / JSON 收敛工具（2026-10 审计 🔵 抽取）：report-handler、
+// repro-runner、ai-task/executor 三处各写一份的同型小工具收敛单源，防
+// 截断标记与多字节边界口径漂移。纯模块：仅依赖 Buffer，Prisma 仅 type
+// import（编译期擦除），客户端安全——照 server/lib/sequence-number-retry.ts
+// 先例放 serverFns 树外。
+import type { Prisma } from '@allbluecn/database'
+
+/** 硬截断：超限追加「…[截断]」标记（AI 任务错误落库口径） */
+export function truncateWithMarker(text: string, limit: number): string {
+  return text.length <= limit ? text : text.slice(0, limit) + '…[截断]'
+}
+
+/** 可空字符串截断：非字符串原样收敛为 null（事件快照 url/ua/stack 口径） */
+export function truncateNullable(
+  value: string | null | undefined,
+  max: number,
+): string | null {
+  return typeof value === 'string' ? value.slice(0, max) : null
+}
+
+/** UTF-8 字节级截断：预算按字节算而非字符数；尾部分割多字节字符产生的
+ * U+FFFD 替换符修剪掉 */
+export function truncateUtf8Bytes(value: string, maxBytes: number): string {
+  if (Buffer.byteLength(value, 'utf8') <= maxBytes) return value
+  return Buffer.from(value, 'utf8')
+    .subarray(0, maxBytes)
+    .toString('utf8')
+    .replace(/\uFFFD+$/g, '')
+}
+
+/** unknown 深度结构经 JSON round-trip 收敛为可序列化值（Prisma Json 列入参） */
+export function toJsonValue(value: unknown): Prisma.InputJsonValue {
+  return JSON.parse(JSON.stringify(value)) as Prisma.InputJsonValue
+}

package/src/{config/sidebar-teams.ts → server/lib/user-brief.ts}

@@ -15,18 +15,15 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import type React from "react";
-import { LogoIcon } from "@/components/shared-kit/logos/logo-icon";
+// 用户摘要 select 的浏览器安全单一来源（审计 2026-10-25 🔵：iteration-crud 与
+// knowledge 等域各持一份同构字面量）。**必须保持零服务端依赖**——serverFn 文件
+// 的客户端 stub 会保留顶层 import，本模块被拖进浏览器时不得携带 prisma 等重依赖。
+// 不含 email：头像/昵称展示非必要不返回成员邮箱（最小披露，审计 🟠）。
 
-export type Team = {
-  id: string;
-  name: string;
-  logo: React.ElementType;
-  plan: string;
-};
-
-export const teams: Team[] = [
-  { id: "1", name: "Alpha Inc.", logo: LogoIcon, plan: "Free" },
-  { id: "2", name: "Beta Corp.", logo: LogoIcon, plan: "Free" },
-  { id: "3", name: "Gamma Tech", logo: LogoIcon, plan: "Free" },
-];
+export const USER_BRIEF_SELECT = {
+  id: true,
+  username: true,
+  avatarConfig: true,
+  bgShape: true,
+  bgColor: true,
+} as const

package/src/server/lib/validate-assignee.ts

@@ -0,0 +1,19 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+// 负责人合法性校验（story / testcase 双域共用，A2x-7 审计：两域曾各持一份逐字相同的本地实现）
+import { getPrisma } from "@allbluecn/database/get-prisma";
+import { isUserInTeam } from "@/server/team-access";
+
+export async function validateAssignee(projectId: string, assigneeId: string | null | undefined) {
+  if (!assigneeId) return;
+  const prisma = await getPrisma();
+  const project = await prisma.project.findUnique({
+    where: { id: projectId },
+    select: { ownerId: true },
+  });
+  if (!project) throw new Error("项目不存在");
+  const ok = await isUserInTeam(project.ownerId, assigneeId);
+  if (!ok) throw new Error("负责人必须是团队成员");
+}

package/src/server/lib/validators.ts

@@ -0,0 +1,16 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+import { z } from "zod";
+
+/**
+ * http(s) URL 校验（审计 A7x-17#7 / A5x-2#1）：`z.string().url()` 只做语法校验，
+ * `javascript:alert(1)`、`data:text/html,...` 都算「合法 URL」——这些值最终以
+ * `<a href>` 渲染即成注入点，或作为跳转目标构成开放重定向。
+ * 用法：`url: httpUrl`（必填）/ `url: httpUrl.optional()` / 允许空串时 `.or(z.literal(""))`。
+ */
+export const httpUrl = z
+  .string()
+  .url()
+  .refine((v) => /^https?:\/\//i.test(v), "仅允许 http(s) 链接");

package/src/server/lib/webhook-secret.ts

@@ -0,0 +1,45 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+// Webhook 签名密钥的静态加密通道（审计 A4x-3 🟡 待决策收口：原为明文落库）。
+// 与 API Key 共用 AES-256-GCM 实现（api-key-cipher）：同一把 env 密钥
+// （API_KEY_ENCRYPTION_SECRET，缺失回退 AUTH_SECRET），`enc:v1:` 前缀区分。
+// 存量明文行（无前缀）由 decryptApiKey 的原样返回分支兼容，无需立即回填；
+// 轮换密钥将导致存量密文不可解 → 投递端按「解密失败跳过该端点」处理，
+// 属可观测的降级而非静默错误（接收方需删除重建拿新密钥）。
+import { decryptApiKey, encryptApiKey } from "@/server/lib/api-key-cipher";
+
+export function encryptWebhookSecret(plain: string): string {
+  return encryptApiKey(plain);
+}
+
+/** 解密失败（密钥轮换/密文损坏）返回 null，调用方应跳过该端点并 warn */
+export function decryptWebhookSecret(stored: string | null | undefined): string | null {
+  const plain = decryptApiKey(stored);
+  return plain && plain.length > 0 ? plain : null;
+}
+
+/** 是否已是密文（enc:v1: 前缀；无前缀 = 加密上线前写入的存量明文） */
+export function isEncryptedWebhookSecret(stored: string | null | undefined): boolean {
+  return typeof stored === "string" && stored.startsWith("enc:v1:");
+}
+
+/**
+ * 存量明文自愈：投递端读到无前缀旧值时，就地加密回写（fire-and-forget，失败仅告警）。
+ * 不要求运维手工跑迁移脚本——只要该 webhook 被投递一次即完成加密。
+ */
+export async function selfHealWebhookSecret(webhookId: string, stored: string): Promise<void> {
+  try {
+    const encrypted = encryptWebhookSecret(stored);
+    const { getPrisma } = await import("@allbluecn/database/get-prisma");
+    const prisma = await getPrisma();
+    await prisma.projectWebhook.update({
+      where: { id: webhookId },
+      data: { secret: encrypted },
+    });
+  } catch (e) {
+    // 自愈失败不影响本次投递，也不占用投递端的 warn 行（静默语义单行记录）
+    console.error("[webhook-secret] 存量密钥加密回写失败", e instanceof Error ? e.message : String(e));
+  }
+}