@allbluecn/web-app 0.22.0 → 0.22.3

package/src/server/ai-task/assigned-query.ts

@@ -2,11 +2,6 @@ import { Prisma, prisma } from "@allbluecn/database"
 import { mapToUnifiedPriority } from "./priority-map"
 import type { AssignedItem, AssignedResult, TaskSource } from "./types"
 
-// provider 探测与 packages/database/index.ts 同口径（process.env.DATABASE_PROVIDER ?? "postgresql"）
-export function getDatabaseProvider(): string {
-  return process.env.DATABASE_PROVIDER ?? "postgresql"
-}
-
 const storySelect = {
   id: true,
   identifier: true,
@@ -137,17 +132,11 @@ function toTestCaseItem(row: TestCaseRow): AssignedItem {
 
 /**
  * 「分配给我的」三表聚合（story → bug → testcase 组序，组内 updatedAt 倒序，不跨表重排）。
- * 桌面端 SQLite（DATABASE_PROVIDER=sqlite）无 bug/testcase 数据源，降级为仅 story 并在 degraded 中声明。
+ * 历史 sqlite 降级已随 Tauri 清退移除（迁移 P1）：postgresql/pglite 均有全量表。
  */
 export async function fetchAssignedToMe(userId: string): Promise<AssignedResult> {
-  const isSqlite = getDatabaseProvider() === "sqlite"
-
-  const pendingBugs: Promise<BugRow[]> = isSqlite
-    ? Promise.resolve([])
-    : queryAssignedBugs(userId)
-  const pendingTestCases: Promise<TestCaseRow[]> = isSqlite
-    ? Promise.resolve([])
-    : queryAssignedTestCases(userId)
+  const pendingBugs: Promise<BugRow[]> = queryAssignedBugs(userId)
+  const pendingTestCases: Promise<TestCaseRow[]> = queryAssignedTestCases(userId)
 
   const [storyRows, bugRows, testCaseRows] = await Promise.all([
     queryAssignedStories(userId),
@@ -161,7 +150,7 @@ export async function fetchAssignedToMe(userId: string): Promise<AssignedResult>
     ...testCaseRows.map(toTestCaseItem),
   ]
 
-  const degraded: TaskSource[] = isSqlite ? ["bug", "testcase"] : []
+  const degraded: TaskSource[] = []
 
   return { items, degraded }
 }

package/src/server/desktop-guest.ts

@@ -1,4 +1,5 @@
 import { DEFAULT_AI_MODEL, DEFAULT_AI_PROVIDER } from '@/lib/ai/default-model'
+import { defaultAvatarConfig, presetBgColors } from '@/lib/avatar/avatar-config'
 import type { Session } from '@/lib/session'
 
 export const GUEST_USER_ID = 'local-guest'
@@ -9,6 +10,12 @@ export function isGuestSession(session: Session | null): boolean {
   return !!(session?.user?.id === GUEST_USER_ID)
 }
 
+/** guest 无 DB 行：用户名散列取预设底色，保证跨请求稳定（不闪变） */
+function guestBgColor(seed: string): string {
+  const sum = [...seed].reduce((acc, ch) => acc + ch.charCodeAt(0), 0)
+  return presetBgColors[sum % presetBgColors.length] as string
+}
+
 export function buildGuestSession(): Session {
   return {
     user: {
@@ -17,6 +24,11 @@ export function buildGuestSession(): Session {
       email: GUEST_EMAIL,
       role: 'USER',
       isGuest: true,
+      // 本地 guest 无 avatarConfig（DB 无行），缺省会让 UserAvatar 退化成
+      // 首字母灰块——桌面离线首屏「头像不显示」来源之一，给稳定默认配置
+      avatarConfig: defaultAvatarConfig,
+      bgShape: 'square',
+      bgColor: guestBgColor(GUEST_USERNAME),
       aiProvider: DEFAULT_AI_PROVIDER,
       aiModel: DEFAULT_AI_MODEL,
       hasAiKey: false,

package/src/server/fetch-guard.ts

@@ -34,14 +34,14 @@ export interface FetchGuardOptions {
 }
 
 /**
- * 桌面端运行时判定：desktop 端以 Tauri sidecar 形态单机部署，数据库走
- * DATABASE_PROVIDER=sqlite；此时 localhost/私网是合法服务地址（如本地
+ * 桌面端运行时判定：desktop 端（Electron + PGlite，迁移设计 §3.8）单机部署，
+ * 数据库走 DATABASE_PROVIDER=pglite；此时 localhost/私网是合法服务地址（如本地
  * Ollama http://localhost:11434），BYOK 请求的私网 baseUrl 应放行。
  * 云端 SaaS 为 postgres，恒返回 false——SSRF 防护默认语义不变（未知取值
  * 按云端处理，fail-closed）。
  */
 export function isDesktopRuntime(): boolean {
-  return process.env.DATABASE_PROVIDER === "sqlite"
+  return process.env.DATABASE_PROVIDER === "pglite"
 }
 
 /**

package/src/server/middlewares/desktop-token.ts

@@ -0,0 +1,23 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+// 桌面端本地端口防直连（迁移设计 §2.1 D1 安全增强）：main 进程为每会话生成
+// X-Desktop-Token 并注入 renderer cookie 与 backend env；backend（DEPLOY_TARGET=desktop
+// 且注入了 X_DESKTOP_TOKEN）校验请求携带的 cookie/头一致——堵「本机其他进程
+// 直连随机端口拿到 guest 会话」。云端部署（无该 env）不受影响，恒放行。
+import { createMiddleware } from "@tanstack/react-start"
+
+export const desktopTokenMiddleware = createMiddleware().server(async ({ request, next }) => {
+  const expected = process.env.X_DESKTOP_TOKEN
+  if (process.env.DEPLOY_TARGET !== "desktop" || !expected) return next()
+
+  const cookieHeader = request.headers.get("cookie") ?? ""
+  const cookieToken = /(?:^|;\s*)X-Desktop-Token=([^;]+)/.exec(cookieHeader)?.[1]
+  const headerToken = request.headers.get("x-desktop-token")
+  const provided = cookieToken ?? headerToken ?? ""
+  if (provided !== expected) {
+    return new Response("Desktop token mismatch", { status: 403 })
+  }
+  return next()
+})

package/src/server/remote-auth.ts

@@ -1,3 +1,5 @@
+// DESKTOP-LEGACY（迁移 P1 标记，勿删勿改）：Tauri 时代的桌面远端会话读取桥，
+// Electron 壳（P2）将以 preload desktopBridge 等价实现替代后整链移除。
 export interface RemoteAuthData {
   userId: string
   planName: string
@@ -8,6 +10,10 @@ export interface RemoteAuthData {
   sessionToken?: string
   tokenExpired?: boolean
   inGracePeriod?: boolean
+  /** 云端用户头像（SaaS desktop-callback profile 下发；缺省时 UI 回落首字母） */
+  avatarConfig?: Record<string, number>
+  bgShape?: string
+  bgColor?: string
 }
 
 export async function readRemoteAuth(): Promise<RemoteAuthData | null> {

package/src/server/serverFns/__tests__/billing.test.ts

@@ -27,6 +27,8 @@ const M = vi.hoisted(() => ({
   getEntitlements: vi.fn(),
   getResourceSnapshots: vi.fn(),
   userUpdate: vi.fn(),
+  subscriptionFindUnique: vi.fn(),
+  teamGroupBy: vi.fn(),
 }));
 
 const billingHolder = vi.hoisted(() => ({
@@ -36,6 +38,7 @@ const billingHolder = vi.hoisted(() => ({
     createCheckoutSession: ReturnType<typeof vi.fn>;
     createCustomerPortalSession: ReturnType<typeof vi.fn>;
     listInvoices: ReturnType<typeof vi.fn>;
+    updateSeats: ReturnType<typeof vi.fn>;
   },
 }));
 
@@ -66,7 +69,11 @@ vi.mock("@tanstack/react-start", () => ({
 vi.mock("@tanstack/react-start/server", () => ({ getRequest: () => ({}) }));
 
 vi.mock("@allbluecn/database", () => ({
-  prisma: { user: { update: M.userUpdate } },
+  prisma: {
+    user: { update: M.userUpdate },
+    subscription: { findUnique: M.subscriptionFindUnique },
+    teamMembership: { groupBy: M.teamGroupBy },
+  },
   Prisma: {},
 }));
 
@@ -88,6 +95,7 @@ import {
   createCustomerPortalSessionFn,
   listInvoicesFn,
   updatePreferredCurrencyFn,
+  updateSeatsFn,
 } from "../billing";
 import { BillingUnavailableError } from "@allbluecn/kernel";
 
@@ -103,6 +111,7 @@ beforeEach(() => {
     createCheckoutSession: vi.fn().mockResolvedValue({ url: "https://checkout/x" }),
     createCustomerPortalSession: vi.fn().mockResolvedValue({ url: "https://portal/x" }),
     listInvoices: vi.fn().mockResolvedValue([{ id: "in-1" }]),
+    updateSeats: vi.fn().mockResolvedValue({ plan: "pro", addonSeats: 2 }),
   };
 });
 
@@ -261,3 +270,51 @@ describe("updatePreferredCurrencyFn", () => {
     });
   });
 });
+
+describe("updateSeatsFn（审计 M8：席位口径=团队成员数，与展示侧一致）", () => {
+  const subWith = (overrides: Record<string, unknown> = {}) => ({
+    status: "ACTIVE",
+    plan: {
+      maxSeats: 5,
+      providerSeatPriceIdUsd: "price_seat",
+      providerSeatPriceIdCny: null,
+      ...overrides,
+    },
+  });
+
+  it("未登录拒绝", async () => {
+    M.requireAuth.mockRejectedValue(new Error("UNAUTHORIZED"));
+    await expect(updateSeatsFn({ data: { addonSeats: 2 } })).rejects.toThrow("UNAUTHORIZED");
+  });
+
+  it("无有效订阅拒绝", async () => {
+    M.subscriptionFindUnique.mockResolvedValue(null);
+    await expect(updateSeatsFn({ data: { addonSeats: 2 } })).rejects.toThrow(/无有效订阅/);
+  });
+
+  it("席位不限量（maxSeats=null）拒绝加购", async () => {
+    M.subscriptionFindUnique.mockResolvedValue(subWith({ maxSeats: null }));
+    await expect(updateSeatsFn({ data: { addonSeats: 2 } })).rejects.toThrow(/不限量/);
+  });
+
+  it("团队成员数在上限内：放行并调用计费模块加购", async () => {
+    M.subscriptionFindUnique.mockResolvedValue(subWith());
+    M.teamGroupBy.mockResolvedValue([{ ownerId: U, _count: { _all: 4 } }]);
+    await expect(updateSeatsFn({ data: { addonSeats: 2 } })).resolves.toEqual({ plan: "pro", addonSeats: 2 });
+    expect(M.teamGroupBy).toHaveBeenCalledWith({
+      by: ["ownerId"],
+      where: { owner: { id: U } },
+      _count: { _all: true },
+    });
+    expect(billingHolder.current!.updateSeats).toHaveBeenCalledWith(
+      expect.objectContaining({ userId: U, addonSeats: 2 }),
+    );
+  });
+
+  it("团队成员数超上限（5+2 < 10）：拒绝，文案按团队成员口径", async () => {
+    M.subscriptionFindUnique.mockResolvedValue(subWith());
+    M.teamGroupBy.mockResolvedValue([{ ownerId: U, _count: { _all: 10 } }]);
+    await expect(updateSeatsFn({ data: { addonSeats: 2 } })).rejects.toThrow(/团队成员数（10）/);
+    expect(billingHolder.current!.updateSeats).not.toHaveBeenCalled();
+  });
+});

package/src/server/serverFns/__tests__/update-seats.test.ts

@@ -46,8 +46,8 @@ vi.mock('@tanstack/react-start/server', () => ({
 
 vi.mock('@allbluecn/database', () => ({
   prisma: {
-    workspace: {
-      count: vi.fn(),
+    teamMembership: {
+      groupBy: vi.fn(),
     },
     subscription: {
       findUnique: vi.fn(),
@@ -73,7 +73,7 @@ import { prisma } from '@allbluecn/database'
 import { updateSeatsFn } from '../billing'
 
 const mockedSubFindUnique = prisma.subscription.findUnique as ReturnType<typeof vi.fn>
-const mockedWorkspaceCount = prisma.workspace.count as ReturnType<typeof vi.fn>
+const mockedTeamGroupBy = prisma.teamMembership.groupBy as ReturnType<typeof vi.fn>
 
 const fakeBilling = billingHolder.current!
 
@@ -81,7 +81,7 @@ describe('updateSeatsFn', () => {
   beforeEach(() => {
     vi.clearAllMocks()
     billingHolder.current = fakeBilling
-    mockedWorkspaceCount.mockResolvedValue(0)
+    mockedTeamGroupBy.mockResolvedValue([])
   })
 
   const proSubWithPlan = (over: Record<string, unknown> = {}) => ({
@@ -123,17 +123,17 @@ describe('updateSeatsFn', () => {
     ).rejects.toThrow('不限量')
   })
 
-  it('降购低于工作空间数被 floor 拦截', async () => {
+  it('加购后仍低于团队成员数被 floor 拦截（审计 M8：口径=团队成员数）', async () => {
     mockedSubFindUnique.mockResolvedValue(proSubWithPlan())
-    mockedWorkspaceCount.mockResolvedValue(7)
+    mockedTeamGroupBy.mockResolvedValue([{ ownerId: 'u1', _count: { _all: 7 } }])
     await expect(
       updateSeatsFn({ data: { addonSeats: 1 } }),
-    ).rejects.toThrow('工作空间数')
+    ).rejects.toThrow('团队成员数')
   })
 
   it('合法加购：透传 billing.updateSeats 并返回其结果', async () => {
     mockedSubFindUnique.mockResolvedValue(proSubWithPlan())
-    mockedWorkspaceCount.mockResolvedValue(4)
+    mockedTeamGroupBy.mockResolvedValue([{ ownerId: 'u1', _count: { _all: 4 } }])
     fakeBilling.updateSeats.mockResolvedValue({ planId: 'p_pro', addonSeats: 3 } as never)
     const result = await updateSeatsFn({ data: { addonSeats: 3 } })
     expect(fakeBilling.updateSeats).toHaveBeenCalledWith({

package/src/server/serverFns/agents/agent-crud.ts

@@ -19,7 +19,9 @@ import { getPrisma } from "@allbluecn/database/get-prisma"
 import { createServerFn } from "@tanstack/react-start"
 import { getRequest } from "@tanstack/react-start/server"
 import { z } from "zod"
-import { AGENT_TOOL_KEYS } from "@/server/ai-gateway/tools"
+// AGENT_TOOL_KEYS 在模块顶层（zod schema）被消费，会保留进客户端 split stub——
+// 必须走纯净子路径 tools/select；tools index re-export 含 prisma 的 tools/server.ts
+import { AGENT_TOOL_KEYS } from "@/server/ai-gateway/tools/select"
 import { requireFeature } from "@/server/entitlements"
 import { requireResource } from "@/server/resources"
 import { requireUserId } from "@/server/auth-helpers"

package/src/server/serverFns/auth/session.ts

@@ -37,6 +37,10 @@ const saasProfileSchema = z.object({
     name: z.string().nullable().optional(),
     email: z.string().nullable().optional(),
     role: z.string().optional(),
+    // 头像字段可选下发（旧 SaaS 无此字段时 UI 回落首字母）
+    avatarConfig: z.record(z.string(), z.number()).optional(),
+    bgShape: z.string().optional(),
+    bgColor: z.string().optional(),
   }),
   planName: z.string().optional(),
   features: z.record(z.string(), z.boolean()).optional(),
@@ -51,6 +55,11 @@ function buildRemoteSession(data: RemoteAuthData): Session {
       email: data.email,
       role: (data.role ?? 'USER') as 'USER' | 'ADMIN' | 'SUPER_ADMIN',
       isGuest: false,
+      // 云端头像透传（SaaS desktop-callback 下发；缺省回落首字母，修复桌面端
+      // 当前用户头像不显示）
+      avatarConfig: data.avatarConfig,
+      bgShape: data.bgShape,
+      bgColor: data.bgColor,
       aiProvider: DEFAULT_AI_PROVIDER,
       aiModel: DEFAULT_AI_MODEL,
       hasAiKey: false,

package/src/server/serverFns/billing.ts

@@ -151,13 +151,19 @@ export const updateSeatsFn = createServerFn({ method: 'POST' })
       throw new Error('当前计划未开通席位加购')
     }
 
-    const wsCount = await prisma.workspace.count({
-      where: { ownerId: userId },
+    // 席位用量与展示侧（getSubscription.seats → maxActiveTeamMembers）同一口径：
+    // 账号名下团队席位总数。审计 M8 裁决（2026-10-29）：此前误用 workspace.count
+    // 作校验基数，与客户看到的「席位」数字互相矛盾（席位≠工作空间，
+    // maxSeats 与 maxWorkspaces 是两项独立限制）。
+    const seatGroups = await prisma.teamMembership.groupBy({
+      by: ['ownerId'],
+      where: { owner: { id: userId } },
+      _count: { _all: true },
     })
-    const maxMembers = wsCount
+    const maxMembers = seatGroups.reduce((m, g) => Math.max(m, g._count._all), 0)
     if (subscription.plan.maxSeats + data.addonSeats < maxMembers) {
       throw new Error(
-        `席位上限（${subscription.plan.maxSeats + data.addonSeats}）不能低于当前工作空间数（${maxMembers}），请先删除多余工作空间`,
+        `席位上限（${subscription.plan.maxSeats + data.addonSeats}）不能低于当前团队成员数（${maxMembers}），请先移除多余成员`,
       )
     }
 

package/src/server/serverFns/bug/bug-crud.ts

@@ -41,14 +41,19 @@ import { touchCollabSnapshot } from "@/server/collab/touch-snapshot";
 import { assertProjectMembership as assertProjectMembershipShared } from "@/server/lib/project-membership";
 
 
-// S2：纯 helper 迁兄弟文件（bug-crud-helpers），此处 re-export 保持测试/消费方 import 路径不变
+// S2：helper 迁兄弟文件（bug-crud-helpers），handler 内按需引用。禁止在此
+// re-export：serverFn 的客户端 split stub 会保留模块顶层 import，而
+// bug-crud-helpers 依赖 get-prisma/team-access（→ @allbluecn/database →
+// dotenv/config），会把 server-only 链拉进浏览器令全站 hydration 崩溃
+// （2026-10-30 实锤：routeTree → serverFns/bug/index → bug-crud stub →
+// helpers → dotenv，浏览器端 process.argv.reduce 抛 TypeError，按钮全灭）。
+// 消费方一律直接 import @/server/bug/bug-crud-helpers。
 import {
   validateBugAssignee,
   assertBugsInMemberProjects,
   toBugActivityItem,
   bugDescriptionToContent,
 } from "@/server/bug/bug-crud-helpers";
-export { validateBugAssignee, assertBugsInMemberProjects, toBugActivityItem, bugDescriptionToContent };
 // 白名单校验模式（与 story 同构）：DB 中 state/severity/source 为 String，写入侧用 z.enum 收敛
 const BUG_STATE_VALUES = BUG_STATES.map((s) => s.value) as [BugState, ...BugState[]];
 const BUG_SEVERITY_VALUES = BUG_SEVERITIES.map((s) => s.value) as [BugSeverity, ...BugSeverity[]];

package/src/server/serverFns/story/__tests__/labels.test.ts

@@ -18,11 +18,14 @@
 import { describe, it, expect, vi, beforeEach } from "vitest";
 
 const mocks = vi.hoisted(() => ({
-  labelUpsert: vi.fn(),
+  labelFindFirst: vi.fn(),
+  labelCreate: vi.fn(),
 }));
 
 vi.mock("@allbluecn/database", () => ({
-  prisma: { label: { upsert: mocks.labelUpsert } },
+  prisma: {
+    label: { findFirst: mocks.labelFindFirst, create: mocks.labelCreate },
+  },
 }));
 
 import { upsertLabel } from "../../../story/story-crud/label-upsert";
@@ -45,23 +48,42 @@ describe("pickLabelColor", () => {
   });
 });
 
+// S24 语义：项目归属标签 find→create（部分唯一索引兜底并发）；
+// 历史「全局 upsert」用例已随实现下线重写（迁移 P1 顺手修复的既有失败）
 describe("upsertLabel", () => {
-  it("走 upsert 且 create 分支使用色板颜色", async () => {
-    mocks.labelUpsert.mockResolvedValue({ id: "l1", name: "性能", color: "#ef4444" });
-    const r = await upsertLabel("性能", "u1");
-    expect(mocks.labelUpsert).toHaveBeenCalledTimes(1);
-    const arg = mocks.labelUpsert.mock.calls[0][0] as any;
-    expect(arg.where).toEqual({ name: "性能" });
-    expect(arg.update).toEqual({});
-    expect(LABEL_PALETTE).toContain(arg.create.color);
-    expect(arg.create.createdById).toBe("u1");
+  it("项目标签命中即直接返回，不创建", async () => {
+    mocks.labelFindFirst.mockResolvedValue({ id: "l1", name: "性能", color: "#ef4444" });
+    const r = await upsertLabel("性能", "u1", undefined, "p1");
     expect(r).toEqual({ id: "l1", name: "性能", color: "#ef4444" });
+    expect(mocks.labelFindFirst).toHaveBeenCalledWith({
+      where: { name: "性能", projectId: "p1" },
+      select: { id: true, name: true, color: true },
+    });
+    expect(mocks.labelCreate).not.toHaveBeenCalled();
+  });
+
+  it("未命中创建：create 分支使用色板颜色", async () => {
+    mocks.labelFindFirst.mockResolvedValue(null);
+    mocks.labelCreate.mockResolvedValue({ id: "l2", name: "性能", color: "#123456" });
+    const r = await upsertLabel("性能", "u1", undefined, "p1");
+    const arg = mocks.labelCreate.mock.calls[0][0] as any;
+    expect(LABEL_PALETTE).toContain(arg.data.color);
+    expect(arg.data.createdById).toBe("u1");
+    expect(arg.data.projectId).toBe("p1");
+    expect(r.id).toBe("l2");
   });
 
   it("传自定义颜色时优先使用自定义颜色", async () => {
-    mocks.labelUpsert.mockResolvedValue({ id: "l1", name: "性能", color: "#ff0000" });
-    await upsertLabel("性能", "u1", "#ff0000");
-    const arg = mocks.labelUpsert.mock.calls[0][0] as any;
-    expect(arg.create.color).toBe("#ff0000");
+    mocks.labelFindFirst.mockResolvedValue(null);
+    mocks.labelCreate.mockResolvedValue({ id: "l3", name: "性能", color: "#ff0000" });
+    await upsertLabel("性能", "u1", "#ff0000", "p1");
+    const arg = mocks.labelCreate.mock.calls[0][0] as any;
+    expect(arg.data.color).toBe("#ff0000");
+  });
+
+  it("兼容签名（无 projectId）：仅匹配存量全局标签，找不到即抛不新建", async () => {
+    mocks.labelFindFirst.mockResolvedValue(null);
+    await expect(upsertLabel("旧标签", "u1")).rejects.toThrow("全局标签命名空间已关闭");
+    expect(mocks.labelCreate).not.toHaveBeenCalled();
   });
 });

package/src/server/serverFns/story/story-comments.ts

@@ -21,7 +21,8 @@ import { getRequest } from "@tanstack/react-start/server";
 import { z } from "zod";
 import { requireAuth } from "@/server/auth-helpers";
 import type { CommentWithReplies, ReactionGroup } from "@/shared/story/types";
-import { USER_BRIEF_SELECT, castUserBrief, aggregateReactions } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
+import { aggregateReactions } from "@/server/story/types";
 import { assertStoryProjectMember, assertStoryProjectMembership as assertProjectMembership } from "@/server/story/permissions";
 
 

package/src/server/serverFns/story/story-crud/activities.ts

@@ -21,7 +21,7 @@ import { getRequest } from "@tanstack/react-start/server";
 import { z } from "zod";
 import { requireAuth } from "@/server/auth-helpers";
 import { assertStoryProjectMember } from "@/server/story/permissions";
-import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
 
 const listActivitiesSchema = z.object({
   storyId: z.string(),

package/src/server/serverFns/story/story-crud/user-brief.ts

@@ -9,7 +9,7 @@ import { createServerFn } from "@tanstack/react-start";
 import { getRequest } from "@tanstack/react-start/server";
 import { requireAuth } from "@/server/auth-helpers";
 import { assertStoryProjectMembership } from "@/server/story/permissions";
-import { USER_BRIEF_SELECT } from "@/server/story/types";
+import { USER_BRIEF_SELECT } from "@/server/story/user-brief";
 
 export const listUsersBriefFn = createServerFn({ method: "GET" })
   .validator((data?: { projectId?: string }) => data)

package/src/server/serverFns/story/story-crud.ts

@@ -27,7 +27,8 @@ import { withCollabGuard } from "@/server/collab/write-guard";
 import { touchCollabSnapshot } from "@/server/collab/touch-snapshot";
 import type { ActivityItem } from "@/shared/story/types";
 import { diffDescriptionBlocks } from "@/lib/story/description-diff";
-import { USER_BRIEF_SELECT, STORY_LIST_SELECT, castStoryUsers, castUserBrief } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
+import { STORY_LIST_SELECT, castStoryUsers } from "@/server/story/types";
 import { toDateKeyUtc } from "@/server/story/date-key";
 import { buildListWhere } from "./story-list-query";
 import { createStoryInternal } from "./story-crud/create-story-internal";

package/src/server/serverFns/story/story-transfer.ts

@@ -25,7 +25,8 @@ import { requireAuth } from "@/server/auth-helpers";
 import { BUILTIN_INDEPENDENT_DISPLAY_ID } from "@/lib/builtin-project";
 import { resolveStoryScopeProjectId } from "@/server/builtin-project";
 import { withCollabGuard } from "@/server/collab/write-guard";
-import { STORY_LIST_SELECT, castStoryUsers, castUserBrief, USER_BRIEF_SELECT, checkDescendant } from "@/server/story/types";
+import { castUserBrief, USER_BRIEF_SELECT } from "@/server/story/user-brief";
+import { STORY_LIST_SELECT, castStoryUsers, checkDescendant } from "@/server/story/types";
 import { withSequenceNumberRetry } from "@/server/lib/sequence-number-retry";
 import { assertProjectMembership as assertProjectMembershipShared } from "@/server/lib/project-membership";
 

package/src/server/serverFns/tasks/task-crud.ts

@@ -9,8 +9,6 @@
 // checkAiRateLimit(userId, "aiTask")，再做属主/成员校验。
 // 并发裁决（双击防重入）：updateMany 以 status:{not:"running"} 做条件更新占位，
 // count===0 即已有在跑实例，抛「任务正在运行」，不建 run 不调执行体。
-// sqlite 降级：aiTask 表 pg-only（DATABASE_PROVIDER=sqlite 无此表），三个变更入口
-// 直接拒绝，不触 prisma（provider 探测复用任务 3 的 getDatabaseProvider()）。
 import { getPrisma } from "@allbluecn/database/get-prisma";
 import { createServerFn } from "@tanstack/react-start";
 import { getRequest } from "@tanstack/react-start/server";
@@ -19,7 +17,6 @@ import { requireAuth } from "@/server/auth-helpers";
 import { assertProjectMembership } from "@/server/bug/bug-permissions";
 import { checkAiRateLimit } from "@/server/lib/rate-limit";
 import { executeAiTaskRun } from "@/server/ai-task/executor";
-import { getDatabaseProvider } from "@/server/ai-task/assigned-query";
 
 /** 源条目在创建流程中的投影（title 已归一化：story.name / bug.title / testCase.title） */
 interface CreateSourceRef {
@@ -120,13 +117,6 @@ async function runTaskExecution(taskId: string, userId: string): Promise<string>
   return run.id;
 }
 
-/** sqlite（aiTask pg-only）变更入口统一降级：明确报错而非裸 Prisma 崩溃 */
-function assertPgOnlyMutation(): void {
-  if (getDatabaseProvider() === "sqlite") {
-    throw new Error("桌面端暂不支持 AI 任务");
-  }
-}
-
 const createAiTaskSchema = z
   .object({
     title: z.string().min(1).max(200).optional(),
@@ -158,7 +148,6 @@ export const createAiTaskFn = createServerFn({ method: "POST" })
     const session = await requireAuth(request);
     const userId = session.user.id;
 
-    assertPgOnlyMutation();
 
     const prisma = await getPrisma();
 
@@ -230,7 +219,6 @@ export const runAiTaskFn = createServerFn({ method: "POST" })
     const session = await requireAuth(request);
     const userId = session.user.id;
 
-    assertPgOnlyMutation();
     await checkAiRateLimit(userId, "aiTask");
 
     const runId = await runTaskExecution(data.id, userId);
@@ -245,7 +233,6 @@ export const deleteAiTaskFn = createServerFn({ method: "POST" })
     const session = await requireAuth(request);
     const userId = session.user.id;
 
-    assertPgOnlyMutation();
 
     const prisma = await getPrisma();
     // 归属过滤放 where：非属主与不存在同样抛「任务不存在」，不泄露存在性

package/src/server/serverFns/tasks/task-queries.ts

@@ -4,19 +4,13 @@
 // 非导出成员。
 // 鉴权惯例（同 testcase-crud）：serverFn 是独立 RPC 入口，路由层守卫拦不到，handler
 // 首行业务必须 requireAuth(getRequest()) 自查。
-// sqlite 降级：aiTask 表 pg-only（DATABASE_PROVIDER=sqlite 无此表），listAiTasksFn
-// 直接返回 { items: [], degraded: true } 不触 prisma.aiTask；provider 探测复用任务 3
-// 的 getDatabaseProvider()（与 packages/database/index.ts 同口径），不自建探测。
 import { getPrisma } from "@allbluecn/database/get-prisma";
 import type { Prisma } from "@allbluecn/database";
 import { createServerFn } from "@tanstack/react-start";
 import { getRequest } from "@tanstack/react-start/server";
 import { z } from "zod";
 import { requireAuth } from "@/server/auth-helpers";
-import {
-  fetchAssignedToMe,
-  getDatabaseProvider,
-} from "@/server/ai-task/assigned-query";
+import { fetchAssignedToMe } from "@/server/ai-task/assigned-query";
 import type { AssignedResult } from "@/server/ai-task/types";
 
 type AiTaskRow = Prisma.AiTaskModel;
@@ -82,11 +76,6 @@ export const listAiTasksFn = createServerFn({ method: "GET" }).handler(
     const session = await requireAuth(request);
     const userId = session.user.id;
 
-    // 桌面端 SQLite 无 aiTask 表（pg-only）：降级空列表并声明 degraded，不触 DB
-    if (getDatabaseProvider() === "sqlite") {
-      return { items: [], degraded: true };
-    }
-
     const prisma = await getPrisma();
     const rows = await prisma.aiTask.findMany({
       where: { createdById: userId },

package/src/server/serverFns/testcase/plans.ts

@@ -32,7 +32,7 @@ import { z } from "zod";
 import type { Prisma } from "@allbluecn/database";
 import { requireAuth } from "@/server/auth-helpers";
 import { resolveStoryScopeProjectId } from "@/server/builtin-project";
-import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
 import {
   TEST_PLAN_STATE_VALUES,
   type TestCaseState,

package/src/server/serverFns/testcase/run-cases.ts

@@ -40,7 +40,7 @@ import {
   finalizeRunIfComplete,
 } from "@/server/testcase/run-finalize";
 import { fireTestRunWebhook } from "@/server/testcase/run-webhook";
-import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
 import { RUN_STEP_RESULT_STATUS_VALUES } from "./constants";
 import type { RunCaseStepResult, RunCaseExecutionDetail } from "./types";
 import { assertRunCaseProjectMember, assertTestProjectMembership as assertProjectMembership } from "@/server/testcase/permissions";

package/src/server/serverFns/testcase/runs.ts

@@ -37,7 +37,7 @@ import type { Prisma } from "@allbluecn/database";
 import { requireAuth } from "@/server/auth-helpers";
 import { resolveStoryScopeProjectId } from "@/server/builtin-project";
 import { buildCaseSnapshot } from "@/server/testcase/snapshot";
-import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
 import {
   RUN_EXECUTOR_TYPE_VALUES,
   TEST_RUN_STATUS_VALUES,

package/src/server/serverFns/testcase/testcase-activities.ts

@@ -26,7 +26,7 @@ import { getRequest } from "@tanstack/react-start/server";
 import { z } from "zod";
 import { requireAuth } from "@/server/auth-helpers";
 import { assertTestCaseProjectMember } from "@/server/testcase/permissions";
-import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
 import type { TestCaseActivityItem } from "./types";
 
 const listActivitiesSchema = z.object({

package/src/server/serverFns/testcase/testcase-board.ts

@@ -30,7 +30,7 @@ import type { Prisma } from "@allbluecn/database";
 import { requireAuth } from "@/server/auth-helpers";
 import { resolveStoryScopeProjectIds } from "@/server/builtin-project";
 import { buildListWhere } from "@/server/testcase/list-query";
-import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
 import {
   TESTCASE_ORDER_DIRECTIONS,
   TESTCASE_ORDER_FIELD_MAP,

package/src/server/serverFns/testcase/testcase-crud.ts

@@ -32,7 +32,7 @@ import { requireAuth } from "@/server/auth-helpers";
 import { resolveStoryScopeProjectIds } from "@/server/builtin-project";
 import { buildListWhere } from "@/server/testcase/list-query";
 import { validateAssignee } from "@/server/lib/validate-assignee";
-import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/types";
+import { USER_BRIEF_SELECT, castUserBrief } from "@/server/story/user-brief";
 import {
   TESTCASE_ORDER_DIRECTIONS,
   TESTCASE_ORDER_FIELD_MAP,