@allbluecn/web-app 0.22.0 → 0.22.3

package/src/server/serverFns/workspace.ts

@@ -22,7 +22,7 @@ import { z } from "zod";
 import { requireAuth } from "@/server/auth-helpers";
 import { migrateStoriesToIndependentProject } from "@/server/builtin-project";
 import { requireResource } from "@/server/resources";
-import { USER_BRIEF_SELECT } from "@/server/story/types";
+import { USER_BRIEF_SELECT } from "@/server/story/user-brief";
 import { startOfMonth, endOfMonth, subMonths, eachDayOfInterval } from "date-fns";
 import { formatInTimeZone } from "date-fns-tz";
 

package/src/server/story/types.ts

@@ -26,14 +26,13 @@ import type {
   ActivityItem,
 } from "@/shared/story/types";
 
-export const USER_BRIEF_SELECT = {
-  id: true,
-  username: true,
-  email: true,
-  avatarConfig: true,
-  bgShape: true,
-  bgColor: true,
-} satisfies Prisma.UserDefaultArgs["select"];
+// USER_BRIEF_SELECT / castUserBrief 已下沉浏览器安全单一来源
+// @/server/story/user-brief.ts（零服务端依赖）：serverFn 在模块顶层消费时
+// 客户端 split stub 会保留 import，不能让消费方经由本文件（顶层值引
+// get-prisma）拖进 server-only 链（口径⑤）。此处 re-export 保持旧路径兼容。
+import { castUserBrief, USER_BRIEF_SELECT } from "@/server/story/user-brief";
+
+export { USER_BRIEF_SELECT, castUserBrief };
 
 export const STORY_LIST_SELECT = {
   id: true,
@@ -136,20 +135,6 @@ export function castStoryUsersLight<S extends StoryListRowLight>(s: S) {
   };
 }
 
-export function castUserBrief(u: {
-  id: string;
-  username: string;
-  email: string;
-  avatarConfig: unknown;
-  bgShape: string | null;
-  bgColor: string | null;
-}): UserBrief {
-  return {
-    ...u,
-    avatarConfig: (u.avatarConfig as AvatarConfig | null) ?? null,
-  };
-}
-
 /** 活动记录 select（含 user brief），供 serverFn 返回新创建的活动给 UI 即时追加 */
 export const ACTIVITY_SELECT = {
   id: true,

package/src/server/story/user-brief.ts

@@ -0,0 +1,48 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 用户摘要 select（含 email 版）+ castUserBrief 的浏览器安全单一来源。
+// **必须保持零服务端依赖**（仅 import type）：serverFn 文件在模块顶层消费
+// 这些绑定时，客户端 split stub 会保留顶层 import——本模块被拖进浏览器时
+// 不得携带 prisma/dotenv 等重依赖（口径⑤，scripts/check-serverfn-purity.mjs）。
+// 注意与 server/lib/user-brief.ts（审计最小披露版，无 email）语义不同，勿合并。
+import type { Prisma } from "@allbluecn/database"
+import type { AvatarConfig } from "@allbluecn/kernel"
+import type { UserBrief } from "@/shared/story/types"
+
+export const USER_BRIEF_SELECT = {
+  id: true,
+  username: true,
+  email: true,
+  avatarConfig: true,
+  bgShape: true,
+  bgColor: true,
+} satisfies Prisma.UserDefaultArgs["select"];
+
+export function castUserBrief(u: {
+  id: string;
+  username: string;
+  email: string;
+  avatarConfig: unknown;
+  bgShape: string | null;
+  bgColor: string | null;
+}): UserBrief {
+  return {
+    ...u,
+    avatarConfig: (u.avatarConfig as AvatarConfig | null) ?? null,
+  };
+}

package/src/server/sync/scopes.ts

@@ -0,0 +1,29 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+// 同步 scope 解析（迁移设计 §3.2）：用户可见归属键集 = 所属 workspace 集
+// ∪ 成员 project 集 ∪ 本人 self——**服务端从会话解析**，客户端只回显游标
+// （防越权枚举）。sync_change_log.scope 的键空间与此一一对应。
+import type { PrismaClient } from "@allbluecn/database";
+
+export type SyncScopes = { workspaces: string[]; projects: string[]; self: string };
+
+export async function resolveSyncScopes(
+  prisma: PrismaClient,
+  userId: string,
+): Promise<string[]> {
+  const [ownedWorkspaces, joinedWorkspaces, joinedProjects] = await Promise.all([
+    prisma.workspace.findMany({ where: { ownerId: userId }, select: { id: true } }),
+    prisma.workspaceMember.findMany({ where: { userId }, select: { workspaceId: true } }),
+    prisma.projectMember.findMany({ where: { userId }, select: { projectId: true } }),
+  ]);
+
+  const scopes = new Set<string>();
+  // 键格式与服务端触发器一致：workspaceId/projectId kind 存裸 id，self 存 'user:<id>'
+  scopes.add(`user:${userId}`);
+  for (const w of ownedWorkspaces) scopes.add(w.id);
+  for (const w of joinedWorkspaces) scopes.add(w.workspaceId);
+  for (const p of joinedProjects) scopes.add(p.projectId);
+  return [...scopes];
+}

package/src/start.ts

@@ -18,6 +18,7 @@
 import { createStart, createCsrfMiddleware, createMiddleware } from '@tanstack/react-start'
 import { securityHeadersMiddleware } from '@/server/middlewares/security-headers'
 import { requestContextMiddleware } from '@/server/middlewares/request'
+import { desktopTokenMiddleware } from "@/server/middlewares/desktop-token"
 import { auditRequestMiddleware } from '@/server/middlewares/audit'
 import { neonKeepaliveMiddleware } from '@/server/keepalive/middleware'
 
@@ -140,14 +141,21 @@ const apiCorsMiddleware = createMiddleware().server(async ({ request, next }: an
 })
 
 export const startInstance = createStart(async () => {
-  const requestMiddleware = [securityHeadersMiddleware, requestContextMiddleware, neonKeepaliveMiddleware, aiPortsMiddleware, apiCorsMiddleware, csrfMiddleware, auditRequestMiddleware]
+  const requestMiddleware = [securityHeadersMiddleware, requestContextMiddleware, neonKeepaliveMiddleware, aiPortsMiddleware, apiCorsMiddleware, csrfMiddleware, auditRequestMiddleware, desktopTokenMiddleware]
   if (import.meta.env.SSR) {
     ensureGithubSyncTimer()
     // S18（审计 A08 建议，裁决：仅 stdin 兜底）：桌面端 sidecar 由 Rust 壳拉起，
     // 壳崩溃时子进程沦落孤儿继续监听端口，用户重开应用拉起新 sidecar 即端口
     // 冲突/旧代码伺服。兜底：desktop 部署目标下 stdin EOF（父进程死亡时管道
     // 关闭）即自杀退出——Vercel/容器部署无 stdin 或有外部管护，不受影响。
-    if (process.env.DEPLOY_TARGET === 'desktop' && !globalAny.__sidecarStdinGuard) {
+    // Electron 壳（迁移 P2）排除：utilityProcess 生命周期由框架绑定主进程
+    //（main 退出即被回收，孤儿问题不存在），而 GUI 启动时 stdin=/dev/null
+    // 恒 EOF——守卫会立即误杀 backend（实测「打包后无窗口」的第二层根因）。
+    if (
+      process.env.DEPLOY_TARGET === 'desktop' &&
+      process.env.DESKTOP_HOST !== 'electron' &&
+      !globalAny.__sidecarStdinGuard
+    ) {
       globalAny.__sidecarStdinGuard = true
       process.stdin.resume()
       process.stdin.once('end', () => {

package/src/styles/globals.css

@@ -845,3 +845,13 @@ html.theme-transitioning *::after {
 #peek-dock-panel-slot:not(:has(> *)) {
   display: none;
 }
+
+/* Electron 桌面壳自绘标题栏拖动区（迁移 P6 顶栏改造）：
+   -webkit-app-region 仅在 Electron renderer 生效，浏览器/云端部署 no-op；
+   拖动区内的可交互元素必须逐个 app-region-no-drag，否则点击被窗口拖动吞掉。 */
+.app-region-drag {
+  -webkit-app-region: drag;
+}
+.app-region-no-drag {
+  -webkit-app-region: no-drag;
+}

package/src/__tests__/desktop-connection-validate.test.ts

@@ -1,66 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-import { describe, it, expect, vi, afterEach } from 'vitest'
-import { connectionTest, validateConnectionUrl } from '../../../desktop/src/connection-manager/connection-test'
-import { DEFAULT_SAAS_URL } from '../../../desktop/src/connection-manager/constants'
-
-// 桌面 connection-manager 经 @desktop 别名编入 web 应用；
-// validateConnectionUrl 是 switch_mode 提交前的 scheme 白名单（安全相关），
-// 独立测试防止 file:/// 等任意 scheme 回归进 open_remote_window 链路。
-
-afterEach(() => {
-  vi.unstubAllGlobals()
-})
-
-describe('validateConnectionUrl（桌面连接 URL 白名单）', () => {
-  it('空 URL 拒绝', () => {
-    expect(validateConnectionUrl('')).not.toBeNull()
-    expect(validateConnectionUrl('   ')).not.toBeNull()
-  })
-
-  it('无法解析的字符串拒绝', () => {
-    expect(validateConnectionUrl('not a url')).not.toBeNull()
-  })
-
-  it('非 http/https scheme 拒绝（file/ftp/javascript）', () => {
-    expect(validateConnectionUrl('file:///etc/passwd')).not.toBeNull()
-    expect(validateConnectionUrl('ftp://example.com')).not.toBeNull()
-    expect(validateConnectionUrl('javascript:alert(1)')).not.toBeNull()
-  })
-
-  it('http/https 合法（含尾斜杠裁剪）', () => {
-    expect(validateConnectionUrl('https://prd.mycompany.com')).toBeNull()
-    expect(validateConnectionUrl('http://10.0.0.8:3000/')).toBeNull()
-  })
-})
-
-describe('connectionTest（/api/health 探测）', () => {
-  it('非法 URL 直接返回错误，不发请求', async () => {
-    const fetchSpy = vi.fn()
-    vi.stubGlobal('fetch', fetchSpy)
-    const result = await connectionTest('file:///etc/passwd')
-    expect(result.ok).toBe(false)
-    expect(result.error).toBeTruthy()
-    expect(fetchSpy).not.toHaveBeenCalled()
-  })
-
-  it('HTTP 200 视为连通并返回延迟', async () => {
-    vi.stubGlobal('fetch', vi.fn().mockResolvedValue(new Response(null, { status: 200 })))
-    const result = await connectionTest(DEFAULT_SAAS_URL)
-    expect(result.ok).toBe(true)
-    expect(typeof result.latencyMs).toBe('number')
-  })
-
-  it('非 200 返回 HTTP 状态码错误', async () => {
-    vi.stubGlobal('fetch', vi.fn().mockResolvedValue(new Response(null, { status: 502 })))
-    const result = await connectionTest('https://example.com')
-    expect(result.ok).toBe(false)
-    expect(result.error).toBe('HTTP 502')
-  })
-
-  it('网络异常返回错误信息', async () => {
-    vi.stubGlobal('fetch', vi.fn().mockRejectedValue(new TypeError('Failed to fetch')))
-    const result = await connectionTest('https://example.com')
-    expect(result.ok).toBe(false)
-    expect(result.error).toBe('Failed to fetch')
-  })
-})

package/src/lib/vector-store/__tests__/sqlite-vec-store.test.ts

@@ -1,143 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-import { describe, it, expect, beforeEach, afterEach } from "vitest";
-import Database from "better-sqlite3";
-import * as sqliteVec from "sqlite-vec";
-import { sqliteVecStore, _setDbForTest } from "../sqlite-vec-store";
-
-function makeMemDb(): Database.Database {
-  const db = new Database(":memory:");
-  sqliteVec.load(db);
-  db.exec(
-    `CREATE TABLE knowledge_embeddings (id TEXT PRIMARY KEY, content TEXT, kbId TEXT);`
-  );
-  // 测试用 4 维（生产 1536）
-  db.exec(
-    `CREATE VIRTUAL TABLE vec_knowledge_embeddings USING vec0(embedding float[4] distance_metric=cosine);`
-  );
-  return db;
-}
-
-describe("sqliteVecStore", () => {
-  let db: Database.Database;
-  beforeEach(() => {
-    db = makeMemDb();
-    _setDbForTest(db);
-  });
-  afterEach(() => {
-    _setDbForTest(null);
-    db.close();
-  });
-
-  it("insert + search 返回相似度（越大越相似）", async () => {
-    await sqliteVecStore.insertEmbedding(
-      "knowledge_embeddings",
-      "doc1",
-      "内容1",
-      [1, 0, 0, 0],
-      { kbId: "kb1" }
-    );
-    await sqliteVecStore.insertEmbedding(
-      "knowledge_embeddings",
-      "doc2",
-      "内容2",
-      [0.9, 0.1, 0, 0],
-      { kbId: "kb1" }
-    );
-    await sqliteVecStore.insertEmbedding(
-      "knowledge_embeddings",
-      "doc3",
-      "内容3",
-      [0, 1, 0, 0],
-      { kbId: "kb1" }
-    );
-
-    const results = await sqliteVecStore.searchByVector(
-      [1, 0, 0, 0],
-      "knowledge_embeddings",
-      3
-    );
-    expect(results[0].id).toBe("doc1");
-    expect(results[0].similarity).toBeGreaterThan(0.99);
-    expect(results[2].id).toBe("doc3");
-  });
-
-  it("whereColumn 过滤", async () => {
-    await sqliteVecStore.insertEmbedding(
-      "knowledge_embeddings",
-      "a",
-      "x",
-      [1, 0, 0, 0],
-      { kbId: "kb1" }
-    );
-    await sqliteVecStore.insertEmbedding(
-      "knowledge_embeddings",
-      "b",
-      "y",
-      [1, 0, 0, 0],
-      { kbId: "kb2" }
-    );
-    const r = await sqliteVecStore.searchByVector(
-      [1, 0, 0, 0],
-      "knowledge_embeddings",
-      10,
-      "kbId",
-      "kb1"
-    );
-    expect(r.length).toBe(1);
-    expect(r.find((x) => x.id === "b")).toBeUndefined();
-  });
-
-  it("delete 清理业务表 + vec 表", async () => {
-    await sqliteVecStore.insertEmbedding(
-      "knowledge_embeddings",
-      "a",
-      "x",
-      [1, 0, 0, 0],
-      { kbId: "kb1" }
-    );
-    await sqliteVecStore.deleteEmbeddings(
-      "knowledge_embeddings",
-      "kbId",
-      "kb1"
-    );
-    const r = await sqliteVecStore.searchByVector(
-      [1, 0, 0, 0],
-      "knowledge_embeddings",
-      10
-    );
-    expect(r).toHaveLength(0);
-    const rows = db
-      .prepare("SELECT COUNT(*) AS c FROM knowledge_embeddings")
-      .get() as { c: number };
-    expect(rows.c).toBe(0);
-  });
-
-  it("非法表名/列名抛错", async () => {
-    await expect(
-      sqliteVecStore.searchByVector([1, 0, 0, 0], "evil" as never)
-    ).rejects.toThrow("非法表名");
-    await expect(
-      sqliteVecStore.deleteEmbeddings(
-        "knowledge_embeddings",
-        "evil" as never,
-        "x"
-      )
-    ).rejects.toThrow("非法删除过滤列");
-  });
-});

package/src/lib/vector-store/sqlite-vec-store.ts

@@ -1,224 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-import Database from "better-sqlite3";
-import * as sqliteVec from "sqlite-vec";
-import type { VectorStore, VectorSearchResult } from "./types";
-import {
-  ALLOWED_TABLES,
-  ALLOWED_FILTER_COLUMNS,
-  ALLOWED_INSERT_COLUMNS,
-} from "./allowlist";
-
-let db: Database.Database | null = null;
-
-function getDb(): Database.Database {
-  if (db) return db;
-  const url = process.env.DATABASE_URL;
-  if (!url) {
-    throw new Error("[sqlite-vec-store] DATABASE_URL 未配置，无法打开 SQLite 向量库");
-  }
-  const path = url.replace(/^file:/, "");
-  db = new Database(path);
-  db.pragma("journal_mode = WAL");
-  sqliteVec.load(db);
-  return db;
-}
-
-/** 测试用：注入内存 db（绕过文件连接） */
-export function _setDbForTest(testDb: Database.Database | null) {
-  db = testDb;
-}
-
-function validateTable(table: string): void {
-  if (!(ALLOWED_TABLES as readonly string[]).includes(table)) {
-    throw new Error(`非法表名: ${table}`);
-  }
-}
-
-function toBuffer(embedding: number[]): Buffer {
-  return Buffer.from(new Float32Array(embedding).buffer);
-}
-
-/** 建表（首次或测试初始化时调用；桌面端正式建表在 desktop-init.ts）。
- *  base 表必须带齐 searchByVector/insertEmbedding 消费的过滤列（kbId/documentId/
- *  designPageId/chunkIndex）——旧 2 列 schema 与查询 schema 不符，误用即运行时
- *  "no such column"（审计 ⚪）。对已存在的旧表逐列幂等补齐。 */
-export function ensureVecTables(d: Database.Database) {
-  for (const t of ALLOWED_TABLES) {
-    d.exec(
-      `CREATE TABLE IF NOT EXISTS ${t} (
-        id TEXT PRIMARY KEY,
-        content TEXT,
-        kbId TEXT,
-        documentId TEXT,
-        designPageId TEXT,
-        chunkIndex INTEGER
-      );`
-    );
-    // 旧库（仅 id/content 两列）逐列幂等补齐：duplicate column 错误即已存在
-    for (const [col, ddl] of [
-      ["kbId", "TEXT"],
-      ["documentId", "TEXT"],
-      ["designPageId", "TEXT"],
-      ["chunkIndex", "INTEGER"],
-    ] as const) {
-      try {
-        d.exec(`ALTER TABLE ${t} ADD COLUMN ${col} ${ddl};`);
-      } catch {
-        // 列已存在：忽略
-      }
-    }
-    // spike 0.3：cosine 必须列级语法（无逗号无引号），table-level 会报错
-    d.exec(
-      `CREATE VIRTUAL TABLE IF NOT EXISTS vec_${t} USING vec0(embedding float[1536] distance_metric=cosine);`
-    );
-  }
-}
-
-export const sqliteVecStore: VectorStore = {
-  async searchByVector(
-    embedding,
-    table,
-    limit = 10,
-    whereColumn,
-    whereValue
-  ): Promise<VectorSearchResult[]> {
-    validateTable(table);
-    if (
-      whereColumn &&
-      !(ALLOWED_FILTER_COLUMNS as readonly string[]).includes(whereColumn)
-    ) {
-      // 与 pg 版防护对齐：列名直接内插进 SQL，必须白名单（双后端行为一致性）
-      throw new Error(`非法过滤列: ${whereColumn}`);
-    }
-    const d = getDb();
-    const blob = toBuffer(embedding);
-    let rows: Array<{ id: string; content: string; distance: number }>;
-    if (whereColumn && whereValue !== undefined) {
-      if (Array.isArray(whereValue)) {
-        if (whereValue.length === 0) return [];
-        const placeholders = whereValue.map(() => "?").join(", ");
-        rows = d
-          .prepare(
-            `SELECT t.id AS id, t.content AS content, v.distance AS distance
-             FROM vec_${table} v JOIN ${table} t ON t.rowid = v.rowid
-             WHERE v.embedding MATCH ? AND k = ? AND t.${whereColumn} IN (${placeholders})
-             ORDER BY v.distance`
-          )
-          .all(blob, limit, ...whereValue) as Array<{
-          id: string;
-          content: string;
-          distance: number;
-        }>;
-      } else {
-        rows = d
-          .prepare(
-            `SELECT t.id AS id, t.content AS content, v.distance AS distance
-             FROM vec_${table} v JOIN ${table} t ON t.rowid = v.rowid
-             WHERE v.embedding MATCH ? AND k = ? AND t.${whereColumn} = ?
-             ORDER BY v.distance`
-          )
-          .all(blob, limit, whereValue) as Array<{
-          id: string;
-          content: string;
-          distance: number;
-        }>;
-      }
-    } else {
-      rows = d
-        .prepare(
-          `SELECT t.id AS id, t.content AS content, v.distance AS distance
-           FROM vec_${table} v JOIN ${table} t ON t.rowid = v.rowid
-           WHERE v.embedding MATCH ? AND k = ?
-           ORDER BY v.distance`
-        )
-        .all(blob, limit) as Array<{
-        id: string;
-        content: string;
-        distance: number;
-      }>;
-    }
-    // spike 0.3：cosine 度量下 similarity = 1 - distance，与 pgvector 1-(<=>) 1:1 对齐
-    return rows.map((r) => ({
-      id: r.id,
-      content: r.content,
-      similarity: 1 - r.distance,
-    }));
-  },
-
-  async insertEmbedding(table, id, content, embedding, extraFields) {
-    validateTable(table);
-    const d = getDb();
-    if (extraFields && Object.keys(extraFields).length > 0) {
-      // 键名直接拼进 SQL 列名：不在白名单即拒绝（与 pg 版同款注入面）
-      for (const k of Object.keys(extraFields)) {
-        if (!(ALLOWED_INSERT_COLUMNS as readonly string[]).includes(k)) {
-          throw new Error(`非法插入列: ${k}`);
-        }
-      }
-    }
-    // 事务包裹两段写：vec 插入失败（如维度不匹配）时 base 行不得残留成孤儿
-    const insertTx = d.transaction(() => {
-      if (!extraFields || Object.keys(extraFields).length === 0) {
-        d.prepare(
-          `INSERT INTO ${table} (id, content) VALUES (?, ?)`
-        ).run(id, content);
-      } else {
-        const keys = Object.keys(extraFields);
-        const vals = Object.values(extraFields);
-        const cols = keys.map((k) => `"${k}"`).join(", ");
-        const ph = keys.map(() => "?").join(", ");
-        d.prepare(
-          `INSERT INTO ${table} (${cols}, id, content) VALUES (${ph}, ?, ?)`
-        ).run(...vals, id, content);
-      }
-      const row = d
-        .prepare(`SELECT rowid AS rid FROM ${table} WHERE id = ?`)
-        .get(id) as { rid: number };
-      // spike 0.1：better-sqlite3 13 绑定 vec0 rowid 必须 BigInt，JS number 会绑成 REAL 报错
-      d.prepare(
-        `INSERT INTO vec_${table} (rowid, embedding) VALUES (?, ?)`
-      ).run(BigInt(row.rid), toBuffer(embedding));
-    });
-    insertTx();
-  },
-
-  async deleteEmbeddings(table, whereColumn, whereValue) {
-    validateTable(table);
-    if (
-      !(ALLOWED_FILTER_COLUMNS as readonly string[]).includes(whereColumn)
-    ) {
-      throw new Error(`非法删除过滤列: ${whereColumn}`);
-    }
-    const d = getDb();
-    // 事务包裹两段删：中断时两表不得出现不一致
-    const deleteTx = d.transaction(() => {
-      const rows = d.prepare(
-        `SELECT rowid AS rid FROM ${table} WHERE ${whereColumn} = ?`
-      ).all(whereValue) as Array<{ rid: number }>;
-      if (rows.length === 0) return;
-      const rids = rows.map((r) => BigInt(r.rid));
-      const vecPh = rids.map(() => "?").join(",");
-      d.prepare(`DELETE FROM vec_${table} WHERE rowid IN (${vecPh})`).run(
-        ...rids
-      );
-      d.prepare(`DELETE FROM ${table} WHERE ${whereColumn} = ?`).run(whereValue);
-    });
-    deleteTx();
-  },
-};

package/src/paraglide/messages/tasks_ai_desktop_notice.js

@@ -1,29 +0,0 @@
-/* eslint-disable */
-import { getLocale, experimentalStaticLocale } from '../runtime.js';
-
-/** @typedef {import('../runtime.js').LocalizedString} LocalizedString */
-
-/** @typedef {{}} Tasks_Ai_Desktop_NoticeInputs */
-
-const zh_tasks_ai_desktop_notice = /** @type {(inputs: Tasks_Ai_Desktop_NoticeInputs) => LocalizedString} */ () => {
-	return /** @type {LocalizedString} */ (`AI 任务需在 Web 端使用`)
-};
-
-const en_tasks_ai_desktop_notice = /** @type {(inputs: Tasks_Ai_Desktop_NoticeInputs) => LocalizedString} */ () => {
-	return /** @type {LocalizedString} */ (`AI tasks are available on the web app`)
-};
-
-/**
-* | output |
-* | --- |
-* | "AI tasks are available on the web app" |
-*
-* @param {Tasks_Ai_Desktop_NoticeInputs} inputs
-* @param {{ locale?: "zh" | "en" }} options
-* @returns {LocalizedString}
-*/
-export const tasks_ai_desktop_notice = /** @type {((inputs?: Tasks_Ai_Desktop_NoticeInputs, options?: { locale?: "zh" | "en" }) => LocalizedString) & import('../runtime.js').MessageMetadata<Tasks_Ai_Desktop_NoticeInputs, { locale?: "zh" | "en" }, {}>} */ ((inputs = {}, options = {}) => {
-	const locale = experimentalStaticLocale ?? options.locale ?? getLocale()
-	if (locale === "en") return en_tasks_ai_desktop_notice(inputs)
-	return zh_tasks_ai_desktop_notice(inputs)
-});