@allbluecn/web-app 0.22.0 → 0.22.3

package/src/routes/api/sync/pull.ts

@@ -0,0 +1,96 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+// pull 端点（迁移设计 §3.2/§3.4）：scopes 由服务端从会话解析（客户端只回显
+// 游标，防越权枚举）；change_log 按 seq 增量页读，行载荷按注册列白名单投影。
+import { createFileRoute } from "@tanstack/react-router"
+import { getRequest } from "@tanstack/react-start/server"
+import { z } from "zod"
+import { getPrisma } from "@allbluecn/database/get-prisma"
+import { requireAuth } from "@/server/auth-helpers"
+import { resolveSyncScopes } from "@/server/sync/scopes"
+
+const pullSchema = z.object({
+  scopes: z.array(z.string().min(1).max(256)).max(500),
+  lastSeq: z.number().int().min(0),
+  limit: z.number().int().min(1).max(500).optional(),
+})
+
+const PAGE_LIMIT = 200
+
+export const Route = createFileRoute("/api/sync/pull")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const session = await requireAuth(getRequest())
+        const userId = session.user.id
+        const body = pullSchema.parse(await request.json())
+
+        const prisma = await getPrisma()
+        const { SYNC_TABLE_MAP } = await import("@allbluecn/sync-core/registrations")
+        // scopes 服务端权威解析（客户端回显值仅作对账提示，不参与过滤）
+        const scopes = await resolveSyncScopes(prisma, userId)
+        const limit = Math.min(body.limit ?? PAGE_LIMIT, PAGE_LIMIT)
+
+        const logRows = await prisma.$queryRawUnsafe<
+          Array<{ seq: bigint; table_name: string; pk: string; op: string }>
+        >(
+          `SELECT seq, table_name, pk, op FROM sync_change_log
+WHERE seq > $1 AND scope = ANY($2)
+ORDER BY seq ASC
+LIMIT $3`,
+          body.lastSeq,
+          scopes,
+          limit + 1,
+        )
+        const hasMore = logRows.length > limit
+        const page = hasMore ? logRows.slice(0, limit) : logRows
+
+        const changes: Array<Record<string, unknown>> = []
+        for (const row of page) {
+          const reg = SYNC_TABLE_MAP.get(row.table_name)
+          if (!reg) continue // 未注册表（历史注册被移除）跳过
+          const change: Record<string, unknown> = {
+            table: row.table_name,
+            pk: row.pk,
+            op: row.op,
+          }
+          if (row.op === "upsert") {
+            // pk 来自 change_log（客户端 push 时写入）——键必须经注册表 pkColumns
+            // 白名单过滤（注入面收口），值参数化
+            const params: unknown[] = []
+            let where: string
+            if (reg.pkColumns.length === 1) {
+              params.push(row.pk)
+              where = `"${reg.pkColumns[0]}" = $1`
+            } else {
+              const parsed = JSON.parse(row.pk) as Record<string, string>
+              where = reg.pkColumns
+                .map((k) => {
+                  params.push(parsed[k])
+                  return `"${k}" = $${params.length}`
+                })
+                .join(" AND ")
+            }
+            const rows = await prisma.$queryRawUnsafe<Record<string, unknown>[]>(
+              `SELECT ${reg.columns.map((c) => `"${c}"`).join(", ")}, sync_version FROM ${reg.table} WHERE ${where}`,
+              ...params,
+            )
+            if (rows.length === 0) continue // 行已删（change_log 略滞后），下轮 delete 事件收敛
+            const payload: Record<string, unknown> = {}
+            for (const c of reg.columns) payload[c] = rows[0][c] ?? null
+            change.payload = payload
+            change.syncVersion = Number(rows[0].sync_version ?? 0)
+          } else {
+            change.syncVersion = 0
+          }
+          changes.push(change)
+        }
+
+        const nextSeq = page.length ? Number(page[page.length - 1].seq) : body.lastSeq
+        return Response.json({ changes, nextSeq, hasMore })
+      },
+    },
+  },
+})

package/src/routes/api/sync/push.ts

@@ -0,0 +1,169 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+// 同步 API 三端点（迁移设计 §3.4/§3.8）。鉴权/校验/scopes 解析在服务端，
+// 逐 op 应用走 @allbluecn/sync-core 的 applyOp（整批单事务，按 outbox 顺序
+// 保证父表先于子表）。
+//
+// 编号重发号特例（迁移设计 §3.5，P6）：离线双端可能发出同号 identifier——
+// push 撞唯一键（uniqueViolation）且表为 stories/bugs 时，服务端用自家
+// SequenceCounter 重发号并重试应用，结果返回 renamed { from, to }（客户端
+// 提示「编号已调整为 X」）。仅 stories/bugs 支持；applyOp 幂等键不变。
+import { createFileRoute } from "@tanstack/react-router"
+import { getRequest } from "@tanstack/react-start/server"
+import { z } from "zod"
+import { getPrisma } from "@allbluecn/database/get-prisma"
+import { requireAuth } from "@/server/auth-helpers"
+import { resolveSyncScopes } from "@/server/sync/scopes"
+
+const pushSchema = z.object({
+  ops: z
+    .array(
+      z.object({
+        opId: z.string().min(8).max(64),
+        table: z.string().regex(/^[a-z_][a-z0-9_]*$/),
+        pk: z.string().min(1).max(512),
+        op: z.enum(["upsert", "delete"]),
+        payload: z.record(z.string(), z.unknown()).optional(),
+        baseVersion: z.number().int().min(0),
+        lamport: z.number().int().min(0),
+        clientId: z.string().min(1).max(64),
+        schemaVersion: z.string().max(64),
+      }),
+    )
+    .min(1)
+    .max(100),
+})
+
+type SyncPayload = Record<string, unknown>
+
+import type { Prisma } from "@allbluecn/database"
+type SyncTx = Prisma.TransactionClient
+
+/** stories/bugs 编号重发：SequenceCounter 自愈式发号（max 下界自愈），重建 identifier */
+async function reissueIdentifier(
+  tx: SyncTx,
+  table: "stories" | "bugs",
+  payload: SyncPayload,
+): Promise<string | null> {
+  const projectId = payload.projectId as string | undefined
+  if (!projectId) return null
+  const project = await tx.project.findUnique({
+    where: { id: projectId },
+    select: { displayId: true },
+  })
+  if (!project) return null
+  const prefix =
+    (project.displayId ?? "PRJ").replace(/[^a-zA-Z0-9]/g, "").toUpperCase() || "PRJ"
+
+  const counterScope = table === "bugs" ? `bug:${projectId}` : projectId
+  const counter = await tx.sequenceCounter.upsert({
+    where: { scope: counterScope },
+    create: { scope: counterScope, seq: 1 },
+    update: { seq: { increment: 1 } },
+  })
+  // max 下界自愈（与 createStoryInternal / bug-crud 同口径）
+  const maxExisting =
+    table === "bugs"
+      ? ((await tx.bug.aggregate({ where: { projectId }, _max: { sequenceId: true } }))._max.sequenceId ?? 0)
+      : ((await tx.story.aggregate({ where: { projectId }, _max: { sequenceId: true } }))._max.sequenceId ?? 0)
+  const seq = Math.max(counter.seq, maxExisting + 1)
+  if (seq !== counter.seq) {
+    await tx.sequenceCounter.update({ where: { scope: counterScope }, data: { seq } })
+  }
+  const identifier = table === "bugs" ? `${prefix}-B${seq}` : `${prefix}-${seq}`
+  payload.identifier = identifier
+  payload.sequenceId = seq
+  return identifier
+}
+
+export const Route = createFileRoute("/api/sync/push")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const session = await requireAuth(getRequest())
+        const userId = session.user.id
+        const body = pushSchema.parse(await request.json())
+
+        const prisma = await getPrisma()
+        const { applyOp } = await import("@allbluecn/sync-core")
+        const { SYNC_TABLE_MAP } = await import("@allbluecn/sync-core/registrations")
+        const scopes = await resolveSyncScopes(prisma, userId)
+
+        // 整批单事务：逐 op 应用（依赖拓扑由客户端 outbox 顺序保证）
+        const results = await prisma.$transaction(async (tx) => {
+          const executor = {
+            query: <T = Record<string, unknown>>(sql: string, params: unknown[]) =>
+              tx.$queryRawUnsafe<T[]>(sql, ...params),
+            execute: (sql: string, params: unknown[]) =>
+              tx.$executeRawUnsafe(sql, ...params),
+          }
+          const out: Array<Record<string, unknown>> = []
+          for (const op of body.ops) {
+            const reg = SYNC_TABLE_MAP.get(op.table)
+            if (!reg) {
+              out.push({ opId: op.opId, status: "conflict", conflict: { reason: "unknownTable" } })
+              continue
+            }
+            const payload = op.payload as SyncPayload | undefined
+            let outcome = await applyOp(executor, reg, { ...op, payload }, {
+              userId,
+              scopes,
+              now: new Date(),
+            })
+            // 编号重发号特例：stories/bugs 撞 identifier 唯一键 → 服务端重发号重试
+            if (outcome.kind === "conflict" && outcome.reason === "uniqueViolation" && (op.table === "stories" || op.table === "bugs") && payload) {
+              const oldIdentifier = payload.identifier as string | undefined
+              const newIdentifier = await reissueIdentifier(tx, op.table, payload)
+              if (newIdentifier && newIdentifier !== oldIdentifier) {
+                outcome = await applyOp(executor, reg, { ...op, payload }, {
+                  userId,
+                  scopes,
+                  now: new Date(),
+                })
+                if (outcome.kind === "applied") {
+                  out.push({
+                    opId: op.opId,
+                    status: "applied",
+                    syncVersion: outcome.syncVersion,
+                    row: outcome.row,
+                    renamed: { from: oldIdentifier ?? "", to: newIdentifier },
+                  })
+                  continue
+                }
+              }
+            }
+            out.push(mapOutcome(op.opId, outcome))
+          }
+          return out
+        })
+
+        return Response.json({ results })
+      },
+    },
+  },
+})
+
+import type { ApplyOpOutcome } from "@allbluecn/sync-core"
+
+function mapOutcome(opId: string, outcome: ApplyOpOutcome): Record<string, unknown> {
+  switch (outcome.kind) {
+    case "applied":
+      return { opId, status: "applied", syncVersion: outcome.syncVersion, row: outcome.row }
+    case "duplicate":
+      return { opId, status: "applied", syncVersion: outcome.syncVersion }
+    case "conflict":
+      return {
+        opId,
+        status: "conflict",
+        conflict: { reason: outcome.reason, local: outcome.local, remote: outcome.remote },
+      }
+    case "forbidden":
+      return { opId, status: "conflict", conflict: { reason: "forbidden" } }
+    case "unknownTable":
+      return { opId, status: "conflict", conflict: { reason: "unknownTable" } }
+    case "invalidPayload":
+      return { opId, status: "conflict", conflict: { reason: outcome.reason } }
+  }
+}

package/src/routes/api/sync/snapshot.ts

@@ -0,0 +1,104 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+// 快照分页端点（迁移设计 §3.4 首登 bootstrap）：按 (table, pk) 序分页返回
+// 单表全量行（列白名单投影），scope 行级过滤。客户端逐表拉取后以
+// watermark_seq 起步走增量 pull（不依赖 change_log 从头回放）。
+import { createFileRoute } from "@tanstack/react-router"
+import { getRequest } from "@tanstack/react-start/server"
+import { z } from "zod"
+import { getPrisma } from "@allbluecn/database/get-prisma"
+import { requireAuth } from "@/server/auth-helpers"
+import { resolveSyncScopes } from "@/server/sync/scopes"
+import { SYNC_TABLE_MAP } from "@allbluecn/sync-core/registrations"
+
+const snapshotSchema = z.object({
+  table: z.string().regex(/^[a-z_][a-z0-9_]*$/),
+  cursor: z.string().max(600).optional(), // 上一页末行 (pk)；复合主键为 JSON
+  limit: z.number().int().min(1).max(500).optional(),
+})
+
+const PAGE_LIMIT = 200
+
+export const Route = createFileRoute("/api/sync/snapshot")({
+  server: {
+    handlers: {
+      GET: async ({ request }) => {
+        const session = await requireAuth(getRequest())
+        const userId = session.user.id
+        const url = new URL(request.url)
+        const body = snapshotSchema.parse({
+          table: url.searchParams.get("table") ?? undefined,
+          cursor: url.searchParams.get("cursor") ?? undefined,
+          limit: url.searchParams.get("limit") ? Number(url.searchParams.get("limit")) : undefined,
+        })
+
+        const reg = SYNC_TABLE_MAP.get(body.table)
+        if (!reg) {
+          return Response.json({ error: "unknown table" }, { status: 400 })
+        }
+        const prisma = await getPrisma()
+        const scopes = await resolveSyncScopes(prisma, userId)
+        const scopeColumn = reg.scope.kind === "self" ? reg.scope.column ?? "id" : reg.scope.column!
+
+        // 行级 scope 过滤 + (pk) 序分页；参数化拼接（列名来自注册表白名单）
+        const params: unknown[] = []
+        const where: string[] = []
+        if (reg.scope.kind !== "self") {
+          params.push(scopes.map((s) => s.replace(/^(ws|proj):/, "")))
+          where.push(`"${reg.scope.column!}" = ANY($${params.length})`)
+        }
+        if (body.cursor) {
+          const cursorKeys = JSON.parse(body.cursor) as Record<string, string>
+          // (pk) > (cursor) 行比较——单列与复合分别构造
+          if (reg.pkColumns.length === 1) {
+            params.push(cursorKeys[reg.pkColumns[0]])
+            where.push(`"${reg.pkColumns[0]}" > $${params.length}`)
+          } else {
+            const tuples = reg.pkColumns
+              .map((k) => {
+                params.push(cursorKeys[k])
+                return `$${params.length}`
+              })
+              .join(", ")
+            const cols = reg.pkColumns.map((k) => `"${k}"`).join(", ")
+            where.push(`(${cols}) > (${tuples})`)
+          }
+        }
+        const limit = Math.min(body.limit ?? PAGE_LIMIT, PAGE_LIMIT)
+        const orderBy = [...reg.pkColumns].map((k) => `"${k}" ASC`).join(", ")
+
+        const rows = await prisma.$queryRawUnsafe<Record<string, unknown>[]>(
+          `SELECT ${reg.columns.map((c) => `"${c}"`).join(", ")}, sync_version FROM ${reg.table}
+${where.length ? `WHERE ${where.join(" AND ")}` : ""}
+ORDER BY ${orderBy}
+LIMIT ${limit + 1}`,
+          ...params,
+        )
+        const hasMore = rows.length > limit
+        const page = hasMore ? rows.slice(0, limit) : rows
+        const items = page.map((r) => {
+          const payload: Record<string, unknown> = {}
+          for (const c of reg.columns) payload[c] = r[c] ?? null
+          const pk =
+            reg.pkColumns.length === 1
+              ? String(r[reg.pkColumns[0]])
+              : JSON.stringify(Object.fromEntries(reg.pkColumns.map((k) => [k, String(r[k])])))
+          return { pk, payload, syncVersion: Number((r as { sync_version?: number }).sync_version ?? 1) }
+        })
+        const nextCursor = page.length
+          ? reg.pkColumns.length === 1
+            ? String(page[page.length - 1][reg.pkColumns[0]])
+            : JSON.stringify(Object.fromEntries(reg.pkColumns.map((k) => [k, String(page[page.length - 1][k])])))
+          : null
+        // nextCursor 包 JSON 时以 base64 走 query 参数（复合键含花括号引号）
+        return Response.json({
+          rows: items,
+          nextCursor: nextCursor === null ? null : reg.pkColumns.length === 1 ? nextCursor : Buffer.from(nextCursor).toString("base64"),
+          hasMore,
+        })
+      },
+    },
+  },
+})

package/src/server/__tests__/fetch-guard.test.ts

@@ -127,8 +127,8 @@ describe("assertFetchableUrl SSRF 主机防护", () => {
 });
 
 describe("isDesktopRuntime 桌面端判定", () => {
-  it("DATABASE_PROVIDER=sqlite（桌面端 sidecar）为 true；postgresql/缺省（云端 SaaS）恒 false", () => {
-    vi.stubEnv("DATABASE_PROVIDER", "sqlite");
+  it("DATABASE_PROVIDER=pglite（桌面端 Electron）为 true；postgresql/缺省（云端 SaaS）恒 false", () => {
+    vi.stubEnv("DATABASE_PROVIDER", "pglite");
     expect(isDesktopRuntime()).toBe(true);
     vi.stubEnv("DATABASE_PROVIDER", "postgresql");
     expect(isDesktopRuntime()).toBe(false);

package/src/server/__tests__/resource-registry.test.ts

@@ -7,7 +7,7 @@ import {
 } from '@allbluecn/kernel'
 
 describe('ResourceRegistry', () => {
-  it('注册了 seats / guestSeats / aiQuotaMonthly / agentQuota / skillQuota / workspaces / sandboxMinutesMonthly / mediaGenerationsMonthly / galleryStorageMb 九个资源', () => {
+  it('注册了 seats / guestSeats / aiQuotaMonthly / agentQuota / skillQuota / workspaces / sandboxMinutesMonthly / mediaGenerationsMonthly / galleryStorageMb / installQuota / blobStorageMb 十一个资源', () => {
     expect(RESOURCE_KEYS).toContain('seats')
     expect(RESOURCE_KEYS).toContain('guestSeats')
     expect(RESOURCE_KEYS).toContain('aiQuotaMonthly')
@@ -17,7 +17,9 @@ describe('ResourceRegistry', () => {
     expect(RESOURCE_KEYS).toContain('sandboxMinutesMonthly')
     expect(RESOURCE_KEYS).toContain('mediaGenerationsMonthly')
     expect(RESOURCE_KEYS).toContain('galleryStorageMb')
-    expect(RESOURCE_KEYS.length).toBe(9)
+    expect(RESOURCE_KEYS).toContain('installQuota')
+    expect(RESOURCE_KEYS).toContain('blobStorageMb')
+    expect(RESOURCE_KEYS.length).toBe(11)
   })
 
   it('sandboxMinutesMonthly：按分钟计的时长配额，不可加购、步进 1 分钟', () => {

package/src/server/__tests__/sandbox-entitlement.test.ts

@@ -16,6 +16,10 @@ const db = vi.hoisted(() => ({
   userAgent: { count: vi.fn() },
   userSkill: { count: vi.fn() },
   generationRun: { count: vi.fn().mockResolvedValue(0) },
+  // 资源快照 S6 扩展键（installQuota/blobStorageMb）——过期 mock 缺模型会以
+  // "Cannot read properties of undefined (reading 'count')" 炸穿 requireResource
+  anyHubApp: { count: vi.fn().mockResolvedValue(0) },
+  blob: { aggregate: vi.fn().mockResolvedValue({ _sum: { size: null } }) },
 }))
 
 vi.mock('@/server/pro-services', () => ({
@@ -75,6 +79,7 @@ describe('assertSandboxEntitled：feature + 分钟配额双闸门', () => {
     db.userAgent.count.mockResolvedValue(0)
     db.userSkill.count.mockResolvedValue(0)
     db.aiUsageLog.aggregate.mockResolvedValue({ _sum: { durationMs: null } })
+    db.aiUsageLog.aggregate.mockResolvedValue({ _sum: { durationMs: null } })
     mockRequireAuth.mockResolvedValue({ user: { id: 'user-1' } })
   })
 

package/src/server/__tests__/security-headers.test.ts

@@ -0,0 +1,25 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+import { describe, it, expect } from "vitest";
+import { buildSecurityHeaders } from "../middlewares/security-headers";
+
+// CSP script-src 必须含 'unsafe-inline'：TanStack Start SSR 向 HTML 注入内联
+// dehydration 脚本（window.$_TSR，随请求变化，hash/nonce 均不可用），收紧为
+// 'self' 会拦截 hydration → 客户端崩溃整站按钮死（Pro 生产 2026-09-11 已复现，
+// 见 security-headers.ts 头注；admin 生产 CSP 同型缺失 2026-10-30 修复）。
+function csp(prod: boolean): string {
+  const headers = buildSecurityHeaders(prod);
+  return headers["Content-Security-Policy"] ?? "";
+}
+
+describe("security-headers CSP", () => {
+  it("生产 script-src 含 'unsafe-inline'（dehydration 内联脚本必需）", () => {
+    expect(csp(true)).toMatch(/script-src[^;]*'unsafe-inline'/);
+  });
+
+  it("开发 script-src 含 'unsafe-inline'", () => {
+    expect(csp(false)).toMatch(/script-src[^;]*'unsafe-inline'/);
+  });
+});

package/src/server/__tests__/task-assigned-query.test.ts

@@ -194,17 +194,6 @@ describe("fetchAssignedToMe", () => {
     })
   })
 
-  it("DATABASE_PROVIDER=sqlite：只查 story，bug/testcase 降级", async () => {
-    vi.stubEnv("DATABASE_PROVIDER", "sqlite")
-    storyFindMany.mockResolvedValue([storyRow])
-    const result = await fetchAssignedToMe("u1")
-    expect(storyFindMany).toHaveBeenCalledTimes(1)
-    expect(bugFindMany).not.toHaveBeenCalled()
-    expect(testCaseFindMany).not.toHaveBeenCalled()
-    expect(result.degraded).toEqual(["bug", "testcase"])
-    expect(result.items).toHaveLength(1)
-    expect(result.items[0]?.source).toBe("story")
-  })
 
   it("DATABASE_PROVIDER 未设置时默认 postgresql：三表全查", async () => {
     vi.stubEnv("DATABASE_PROVIDER", undefined)

package/src/server/__tests__/task-serverfn-crud.test.ts

@@ -12,7 +12,7 @@
 //   最小存在性校验（仅上下文提示、非成员边界，不存在拒绝；源型以源条目项目为准）；
 //   runNow:true 内部复用 runTaskExecution 同款执行逻辑，返回 { id, runId }；
 // - deleteAiTaskFn：running 拒绝；非属主与不存在同抛「任务不存在」；删除走 schema
-//   Cascade（无手动删 runs）；sqlite 降级三入口均拒绝不触 prisma。
+//   Cascade（无手动删 runs）。历史 sqlite 降级用例已随 Tauri 清退移除（迁移 P1）。
 // mock 惯例同 task-serverfn-queries.test.ts（伪造 createServerFn + getPrisma）。
 import { beforeEach, describe, expect, it, vi } from "vitest"
 
@@ -429,14 +429,6 @@ describe("createAiTaskFn", () => {
     })
   })
 
-  it("sqlite 降级：拒绝且不触 prisma", async () => {
-    mocks.getDatabaseProvider.mockReturnValue("sqlite")
-
-    await expect(
-      createAiTaskFn({ data: { title: "t", instruction: "x" } }),
-    ).rejects.toThrow()
-    expect(mocks.aiTaskCreate).not.toHaveBeenCalled()
-  })
 
   it("未登录：requireAuth 抛错直接拒绝，不触限流与 DB", async () => {
     mocks.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"))
@@ -570,12 +562,6 @@ describe("runAiTaskFn", () => {
     expect(mocks.aiTaskFindFirst).not.toHaveBeenCalled()
   })
 
-  it("sqlite 降级：拒绝且不触 prisma", async () => {
-    mocks.getDatabaseProvider.mockReturnValue("sqlite")
-
-    await expect(runAiTaskFn({ data: { id: "t1" } })).rejects.toThrow()
-    expect(mocks.aiTaskFindFirst).not.toHaveBeenCalled()
-  })
 
   it("未登录：requireAuth 抛错直接拒绝，不触限流与 DB", async () => {
     mocks.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"))
@@ -619,13 +605,6 @@ describe("deleteAiTaskFn", () => {
     expect(mocks.aiTaskDelete).not.toHaveBeenCalled()
   })
 
-  it("sqlite 降级：拒绝且不触 prisma", async () => {
-    mocks.getDatabaseProvider.mockReturnValue("sqlite")
-
-    await expect(deleteAiTaskFn({ data: { id: "t1" } })).rejects.toThrow()
-    expect(mocks.aiTaskFindFirst).not.toHaveBeenCalled()
-    expect(mocks.aiTaskDelete).not.toHaveBeenCalled()
-  })
 
   it("未登录：requireAuth 抛错直接拒绝，不触 DB", async () => {
     mocks.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"))

package/src/server/__tests__/task-serverfn-queries.test.ts

@@ -2,7 +2,7 @@
 // 钉死口径：
 // - 三个 serverFn 均 GET method；handler 首行 requireAuth，未登录直接拒绝不触 DB；
 // - listAiTasksFn：where createdById + updatedAt 倒序 + 列表字段 select（含 instruction 供指令搜索）；lastRunAt/updatedAt
-//   转 ISO string；sqlite provider 降级 { items: [], degraded: true } 且不触 prisma.aiTask；
+//   转 ISO string。历史 sqlite provider 降级用例已随 Tauri 清退移除（迁移 P1）。
 // - getAiTaskFn：归属过滤放 where（非属主与不存在同样抛「任务不存在」，不泄露存在性）；
 //   runs 按 startedAt 倒序；task 附关联项目名 projectName（projectId null 不查、查询
 //   落空兜底 null）；sourceExists 仅源型任务探测源表（null = 非源型）。
@@ -248,14 +248,6 @@ describe("listAiTasksFn", () => {
     })
   })
 
-  it("sqlite provider 降级：{ items: [], degraded: true } 且不触 prisma.aiTask", async () => {
-    mocks.getDatabaseProvider.mockReturnValue("sqlite")
-
-    const result = await listAiTasksFn()
-
-    expect(result).toEqual({ items: [], degraded: true })
-    expect(mocks.aiTaskFindMany).not.toHaveBeenCalled()
-  })
 
   it("未登录直接拒绝，不触 DB", async () => {
     mocks.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"))

package/src/server/ai-gateway/__tests__/chat-stream-builder-memory.test.ts

@@ -137,17 +137,6 @@ describe("buildChatStreamWithTools 挂载记忆中间件", () => {
     expect(mocks.memoryMiddleware.mock.calls[0]![0].role).toBe("save-only")
   })
 
-  it("DATABASE_PROVIDER=sqlite 时完全不挂载", async () => {
-    vi.stubEnv("DATABASE_PROVIDER", "sqlite")
-    await buildChatStreamWithTools(BASE_PARAMS)
-
-    expect(mocks.memoryMiddleware).not.toHaveBeenCalled()
-    const config = mocks.chat.mock.calls[0]![0]
-    expect(config.middleware.map((m: { name: string }) => m.name)).not.toContain(
-      "memory:pgvector",
-    )
-  })
-
   it("DEPLOY_TARGET=desktop 时完全不挂载", async () => {
     vi.stubEnv("DEPLOY_TARGET", "desktop")
     await buildChatStreamWithTools(BASE_PARAMS)

package/src/server/ai-gateway/__tests__/embedding-request.test.ts

@@ -44,7 +44,7 @@ describe("generateEmbedding 真实请求路径（本地 mock OpenAI 兼容端点
     // 本测试的 mock 端点跑在本机回环地址：SEC-08 出口守卫按云端语义会拒绝
     // 127.0.0.1。stub 为桌面运行时（DESKTOP 语义 = 单机形态允许本地服务），
     // 与「桌面端本地 embedding 服务」这条放行路径一致。
-    vi.stubEnv("DATABASE_PROVIDER", "sqlite");
+    vi.stubEnv("DATABASE_PROVIDER", "pglite");
     const mod = await import("../embedding");
     generateEmbedding = mod.generateEmbedding;
     EMBEDDING_MODEL = mod.EMBEDDING_MODEL;

package/src/server/ai-gateway/__tests__/provider-adapter.test.ts

@@ -183,9 +183,9 @@ describe("createProviderAdapter SEC-08 baseUrl 出口校验", () => {
     ).rejects.toThrow(/SSRF/)
   })
 
-  it("desktop 运行时（DATABASE_PROVIDER=sqlite）放行本地 baseUrl（本地 Ollama）", async () => {
+  it("desktop 运行时（DATABASE_PROVIDER=pglite）放行本地 baseUrl（本地 Ollama）", async () => {
     const saved = process.env.DATABASE_PROVIDER
-    process.env.DATABASE_PROVIDER = "sqlite"
+    process.env.DATABASE_PROVIDER = "pglite"
     try {
       // 用 mock 的 bedrock 分支断言（openaiText 真 factory 会读 env key）
       mockFindUnique.mockResolvedValue(providerRow("bedrock") as never)

package/src/server/ai-gateway/__tests__/run-store-durable.test.ts

@@ -43,7 +43,7 @@ const RUN_ID = "fc-1";
 const THREAD_ID = "fc-t";
 
 describe.skipIf(
-  !process.env.DATABASE_URL || process.env.DATABASE_PROVIDER === "sqlite",
+  !process.env.DATABASE_URL,
 )("chatRunStore 真库契约（durable 四列）", () => {
     beforeAll(async () => {
       // ChatThread.userId 是 FK，归属校验需要的 owner 必须是真用户行。

package/src/server/ai-gateway/durability/__tests__/pg-stream.test.ts

@@ -42,7 +42,7 @@ function mkChunk(delta: string): C {
 }
 
 describe.skipIf(
-  !process.env.DATABASE_URL || process.env.DATABASE_PROVIDER === "sqlite",
+  !process.env.DATABASE_URL,
 )("PG StreamDurability（真库）", () => {
     afterAll(async () => {
       if (usedRunIds.size > 0) {

package/src/server/ai-gateway/durability/__tests__/reaper-real-db.test.ts

@@ -67,7 +67,7 @@ const SANDBOX_KEY = `thread:${THREAD_ID}`;
 const PROVIDER_NAME = "rrdb-mock";
 
 describe.skipIf(
-  !process.env.DATABASE_URL || process.env.DATABASE_PROVIDER === "sqlite",
+  !process.env.DATABASE_URL,
 )("runReaperCycle 真库装配（chatRunStore 全局变体 + PG durability）", () => {
   // 全套用例共享一个确定性时钟：detachedSince 与 now 都是常量，TTL 判定不依赖墙上时间
   const DETACHED_AT = 10_000;

package/src/server/ai-gateway/memory/index.ts

@@ -32,10 +32,10 @@ function truncateError(error: string | undefined): string {
     : error
 }
 
-// 桌面端 SQLite 无 pgvector，直接不挂（与 unified-router 的 desktop 短路一致）
+// 桌面端不挂（与 unified-router 的 desktop 短路一致）；历史 sqlite 无 pgvector
+// 短路已随 Tauri 清退移除（迁移 P1）：pglite 预载 pgvector，但 desktop 短路仍生效
 export function isMemoryMiddlewareEnabled(): boolean {
   if (process.env.DEPLOY_TARGET === "desktop") return false
-  if (process.env.DATABASE_PROVIDER === "sqlite") return false
   return true
 }
 

package/src/server/ai-gateway/sandbox/__tests__/instance-store.test.ts

@@ -28,7 +28,7 @@ function makeRecord(key: string, extra: Partial<SandboxInstanceRecord> = {}) {
 }
 
 describe.skipIf(
-  !process.env.DATABASE_URL || process.env.DATABASE_PROVIDER === "sqlite",
+  !process.env.DATABASE_URL,
 )("prismaInstanceStore（真库，三不变量）", () => {
   const store = prismaInstanceStore()