@allbluecn/web-app 0.22.4 → 0.23.1

package/src/server/__tests__/bug-groups-two-level.test.ts

@@ -24,6 +24,11 @@ vi.mock("@tanstack/react-start", () => ({
   createServerFn: (config: any) => {
     const api: any = {
       _validator: undefined,
+      _middlewares: [] as any[],
+      middleware(mws: any[]) {
+        this._middlewares.push(...mws);
+        return this;
+      },
       validator(schema: any) {
         this._validator = schema;
         return this;
@@ -34,13 +39,41 @@ vi.mock("@tanstack/react-start", () => ({
           if (this._validator && data !== undefined) {
             data = this._validator.parse ? this._validator.parse(data) : data;
           }
-          return fn({ data });
+          // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+          // mock 依序执行 middleware 的 server 段（复现框架 executeMiddleware 的
+          // context 合并语义），真实鉴权链由被 mock 的 auth-helpers/getRequest 承接
+          let context: any = {};
+          for (const mw of this._middlewares) {
+            const serverFn = mw?.options?.server;
+            if (!serverFn) continue;
+            const result = await serverFn({
+              data,
+              context,
+              method: 'POST',
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: any) => ({ context: { ...context, ...(inner?.context ?? {}) } }),
+            });
+            context = result.context;
+          }
+          return fn({ data, context });
         };
         return wrapped;
       },
     };
     return api;
   },
+  // auth-context.ts 依赖 createMiddleware({ type: 'function' }).server(fn)：
+  // mock 产出与真实 middleware 同构的 { options: { server } } 形状，
+  // 供上方 handler 包装器执行 server 段注入 context.user
+  createMiddleware: (opts: any) => {
+    const mw: any = { options: { type: opts?.type } };
+    mw.server = (fn: Function) => {
+      mw.options.server = fn;
+      return mw;
+    };
+    return mw;
+  },
 }));
 
 vi.mock("@tanstack/react-start/server", () => ({

package/src/server/__tests__/chat-conversations.test.ts

@@ -27,24 +27,57 @@ const mocks = vi.hoisted(() => ({
 }))
 
 vi.mock("@tanstack/react-start", () => ({
+  // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+  // mock 依序执行 middleware 的 server 段（复现框架 executeMiddleware 的
+  // context 合并语义），真实鉴权链由被 mock 的 auth-helpers/getRequest 承接
   createServerFn: (config: any) => {
     let validator: any = undefined
-    return {
+    const api: any = {
       _method: config.method,
+      _middlewares: [] as any[],
+      middleware(mws: any[]) {
+        api._middlewares.push(...mws)
+        return api
+      },
       validator(schema: any) {
         validator = schema
-        return this
+        return api
       },
       handler(fn: Function) {
-        return function fn2(args: any = {}) {
+        return async function fn2(args: any = {}) {
           let data = args?.data
           if (validator && data !== undefined) {
             data = validator.parse ? validator.parse(data) : data
           }
-          return fn({ data, request: args?.request })
+          let context: any = {}
+          for (const mw of api._middlewares) {
+            const serverFn = mw?.options?.server
+            if (!serverFn) continue
+            const result = await serverFn({
+              data,
+              context,
+              method: "POST",
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: any) => ({ context: { ...context, ...(inner?.context ?? {}) } }),
+            })
+            context = result.context
+          }
+          return fn({ data, context })
         }
       },
     }
+    return api
+  },
+  // auth-context.ts 依赖 createMiddleware({ type: "function" }).server(fn)：
+  // mock 产出与真实 middleware 同构的 { options: { server } } 形状
+  createMiddleware: (opts: any) => {
+    const mw: any = { options: { type: opts?.type } }
+    mw.server = (fn: Function) => {
+      mw.options.server = fn
+      return mw
+    }
+    return mw
   },
 }))
 

package/src/server/__tests__/chat-list-messages.test.ts

@@ -17,7 +17,7 @@
 
 // SEC-17：listMessagesFn 越权读修复测试。
 // 钉死口径：
-// - 未登录 → Unauthorized，不触达 DB；
+// - 未登录 → Unauthorized（middleware requireAuth 统一抛 UnauthorizedError），不触达 DB；
 // - 跨用户 threadId（thread 属主非当前 session 用户）→ thread not found，
 //   不执行 chatMessage.findMany；
 // - 属主正常读取 → findFirst 带 { id, userId } 归属过滤 + findMany 只 select
@@ -32,24 +32,57 @@ const mocks = vi.hoisted(() => ({
 }))
 
 vi.mock("@tanstack/react-start", () => ({
+  // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+  // mock 依序执行 middleware 的 server 段（复现框架 executeMiddleware 的
+  // context 合并语义），真实鉴权链由被 mock 的 auth-helpers/getRequest 承接
   createServerFn: (config: any) => {
     let validator: any = undefined
-    return {
+    const api: any = {
       _method: config.method,
+      _middlewares: [] as any[],
+      middleware(mws: any[]) {
+        api._middlewares.push(...mws)
+        return api
+      },
       validator(schema: any) {
         validator = schema
-        return this
+        return api
       },
       handler(fn: Function) {
-        return function fn2(args: any = {}) {
+        return async function fn2(args: any = {}) {
           let data = args?.data
           if (validator && data !== undefined) {
             data = validator.parse ? validator.parse(data) : data
           }
-          return fn({ data, request: args?.request })
+          let context: any = {}
+          for (const mw of api._middlewares) {
+            const serverFn = mw?.options?.server
+            if (!serverFn) continue
+            const result = await serverFn({
+              data,
+              context,
+              method: "POST",
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: any) => ({ context: { ...context, ...(inner?.context ?? {}) } }),
+            })
+            context = result.context
+          }
+          return fn({ data, context })
         }
       },
     }
+    return api
+  },
+  // auth-context.ts 依赖 createMiddleware({ type: "function" }).server(fn)：
+  // mock 产出与真实 middleware 同构的 { options: { server } } 形状
+  createMiddleware: (opts: any) => {
+    const mw: any = { options: { type: opts?.type } }
+    mw.server = (fn: Function) => {
+      mw.options.server = fn
+      return mw
+    }
+    return mw
   },
 }))
 
@@ -81,12 +114,12 @@ beforeEach(() => {
 })
 
 describe("listMessagesFn", () => {
-  it("未登录 → 抛 Unauthorized，不查库", async () => {
+  it("未登录 → 抛 Unauthorized（UnauthorizedError），不查库", async () => {
     mocks.getCurrentSession.mockResolvedValue(null)
 
     await expect(
       listMessagesFn({ data: { threadId } }),
-    ).rejects.toThrow("Unauthorized")
+    ).rejects.toThrow("UNAUTHORIZED")
     expect(mocks.threadFindFirst).not.toHaveBeenCalled()
     expect(mocks.messageFindMany).not.toHaveBeenCalled()
   })

package/src/server/__tests__/csv-export.test.ts

@@ -43,24 +43,57 @@ const H = vi.hoisted(() => {
 vi.mock("@tanstack/react-start", () => {
   // 每个 serverFn 实例独立持有自己的 capture，避免同模块多实例共用导致 validator 串号
   const createServerFn = () => {
-    const capture: { validator?: unknown; handler?: unknown } = {};
+    const capture: { validator?: unknown; handler?: unknown; middlewares?: unknown[] } = {};
     const api = {
       validator: (v: unknown) => {
         capture.validator = v;
         return api;
       },
+      middleware: (mws: unknown[]) => {
+        capture.middlewares = mws;
+        return api;
+      },
       handler: (h: unknown) => {
         capture.handler = h;
         return async (args: { data: unknown }) => {
           const v = capture.validator as { parse?: (d: unknown) => unknown } | undefined;
           const data = v && v.parse ? v.parse(args.data) : args.data;
-          return (h as (p: { data: unknown }) => Promise<unknown>)({ data });
+          // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+          // 依序执行 middleware 的 server 段，真实鉴权链由被 mock 的 auth-helpers 承接
+          let context: Record<string, unknown> = {};
+          for (const mw of capture.middlewares ?? []) {
+            const serverFn = (mw as { options?: { server?: unknown } })?.options?.server;
+            if (typeof serverFn !== "function") continue;
+            const result = await (
+              serverFn as (p: unknown) => Promise<{ context?: unknown }>
+            )({
+              data,
+              context,
+              method: "POST",
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: { context?: unknown }) => ({
+                context: { ...context, ...(inner?.context ?? {}) },
+              }),
+            });
+            context = (result?.context ?? context) as Record<string, unknown>;
+          }
+          return (h as (p: { data: unknown; context: unknown }) => Promise<unknown>)({ data, context });
         };
       },
     };
     return api;
   };
-  return { createServerFn };
+  // auth-context.ts 依赖 createMiddleware({ type: 'function' }).server(fn)
+  const createMiddleware = (opts?: { type?: string }) => {
+    const mw: { options: { type?: string; server?: unknown }; server?: unknown } = { options: { type: opts?.type } };
+    mw.server = (fn: unknown) => {
+      mw.options.server = fn;
+      return mw;
+    };
+    return mw;
+  };
+  return { createServerFn, createMiddleware };
 });
 
 vi.mock("@tanstack/react-start/server", () => ({ getRequest: () => ({}) }));

package/src/server/__tests__/desktop-bootstrap.test.ts

@@ -0,0 +1,189 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 桌面首启本地影子用户（P1）四断言：
+// ① 空库首调：upsert users 行（id=local-guest / username=本地用户）+ 内置项目
+// ② 二次调用幂等（upsert 语义天然幂等，不抛 P2002）
+// ③ 非 desktop（DEPLOY_TARGET!=='desktop'）不触库直接返回
+// ④ getSessionFn 挂点：desktop guest 分支先懒 seed 再发会话；seed 抛错仅 warn
+//    不阻断 guest 会话（首启体验优先，规格 §3.1）。
+// mock 惯例照 builtin-project.test.ts：vi.mock('@allbluecn/database') 拦模块级
+// prisma 单例（复审⑥钉死，勿真连库）；builtin-project 整体 mock 断言入参。
+// ④ 走 serverFns/auth/session.ts 真模块全链路（tanstack createServerFn 捕获器
+// 照 csv-export.test.ts 样板），影子用户用真实现——由 mocked prisma 断言触达。
+import { beforeEach, afterEach, describe, expect, it, vi } from 'vitest'
+
+const H = vi.hoisted(() => ({
+  ensureBuiltinIndependentProject: vi.fn(),
+}))
+
+vi.mock('@allbluecn/database', () => ({
+  prisma: {
+    user: {
+      upsert: vi.fn(),
+    },
+  },
+}))
+
+vi.mock('@/server/builtin-project', () => ({
+  ensureBuiltinIndependentProject: H.ensureBuiltinIndependentProject,
+}))
+
+vi.mock('@tanstack/react-start', () => {
+  // 每个 serverFn 实例独立 capture，避免同模块多实例（session.ts 有三个）串号
+  const createServerFn = () => {
+    const capture: { validator?: unknown; handler?: unknown } = {}
+    const api = {
+      validator: (v: unknown) => {
+        capture.validator = v
+        return api
+      },
+      middleware: () => api,
+      handler: (h: unknown) => {
+        capture.handler = h
+        return async (args?: { data?: unknown }) => {
+          const v = capture.validator as { parse?: (d: unknown) => unknown } | undefined
+          const data = v && typeof v.parse === 'function' ? v.parse(args?.data) : args?.data
+          return (capture.handler as (p: { data?: unknown }) => unknown)({ data })
+        }
+      },
+    }
+    return api
+  }
+  return { createServerFn }
+})
+
+vi.mock('@tanstack/react-start/server', () => ({ getRequest: () => ({}) }))
+
+vi.mock('@/lib/session', () => ({ getCurrentSession: vi.fn(async () => null) }))
+
+vi.mock('@/server/remote-auth', () => ({
+  readRemoteAuth: vi.fn(async () => null),
+  writeRemoteAuth: vi.fn(),
+  writeRemoteSession: vi.fn(),
+  clearRemoteAuth: vi.fn(),
+}))
+
+vi.mock('@/server/entitlements-token', () => ({ generateEntitlementsToken: vi.fn() }))
+
+vi.mock('@/server/middlewares/rate-limit', () => ({ checkAuthRateLimit: vi.fn() }))
+
+import { prisma } from '@allbluecn/database'
+import { ensureBuiltinIndependentProject } from '@/server/builtin-project'
+import { ensureLocalShadowUser } from '../desktop-bootstrap'
+import { getSessionFn } from '../serverFns/auth/session'
+
+const upsert = vi.mocked(prisma.user.upsert)
+
+describe('ensureLocalShadowUser', () => {
+  const ENV_KEYS = ['DEPLOY_TARGET'] as const
+  const saved: Record<string, string | undefined> = {}
+
+  beforeEach(() => {
+    vi.resetAllMocks()
+    for (const k of ENV_KEYS) saved[k] = process.env[k]
+    H.ensureBuiltinIndependentProject.mockResolvedValue('proj-independent-1')
+    upsert.mockResolvedValue({} as never)
+  })
+
+  afterEach(() => {
+    for (const k of ENV_KEYS) {
+      if (saved[k] === undefined) delete process.env[k]
+      else process.env[k] = saved[k]
+    }
+  })
+
+  it('① 空库首调：upsert 影子用户行 + 复用内置项目，返回 local-guest', async () => {
+    process.env.DEPLOY_TARGET = 'desktop'
+
+    const id = await ensureLocalShadowUser()
+
+    expect(id).toBe('local-guest')
+    expect(upsert).toHaveBeenCalledTimes(1)
+    expect(upsert).toHaveBeenCalledWith({
+      where: { id: 'local-guest' },
+      create: expect.objectContaining({
+        id: 'local-guest',
+        username: '本地用户',
+        email: 'guest@localhost',
+        bgShape: 'square',
+        // password 必填占位（随机不可登录值），类型为 string
+        password: expect.any(String),
+        avatarConfig: expect.objectContaining({ face: 0 }),
+      }),
+      update: {},
+    })
+    expect(H.ensureBuiltinIndependentProject).toHaveBeenCalledTimes(1)
+    expect(H.ensureBuiltinIndependentProject).toHaveBeenCalledWith('local-guest')
+  })
+
+  it('② 二次调用幂等：upsert 语义天然幂等，两次调用均 resolve 不抛 P2002', async () => {
+    process.env.DEPLOY_TARGET = 'desktop'
+
+    await expect(ensureLocalShadowUser()).resolves.toBe('local-guest')
+    await expect(ensureLocalShadowUser()).resolves.toBe('local-guest')
+
+    expect(upsert).toHaveBeenCalledTimes(2)
+    expect(H.ensureBuiltinIndependentProject).toHaveBeenCalledTimes(2)
+  })
+
+  it('③ 非 desktop 部署：防御性早退不触库，直接返回 local-guest', async () => {
+    process.env.DEPLOY_TARGET = 'vercel'
+
+    const id = await ensureLocalShadowUser()
+
+    expect(id).toBe('local-guest')
+    expect(upsert).not.toHaveBeenCalled()
+    expect(H.ensureBuiltinIndependentProject).not.toHaveBeenCalled()
+  })
+})
+
+describe('getSessionFn 桌面 guest 分支挂点（懒 seed）', () => {
+  const savedTarget = process.env.DEPLOY_TARGET
+
+  beforeEach(() => {
+    vi.resetAllMocks()
+    process.env.DEPLOY_TARGET = 'desktop'
+    upsert.mockResolvedValue({} as never)
+    vi.spyOn(console, 'warn').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    if (savedTarget === undefined) delete process.env.DEPLOY_TARGET
+    else process.env.DEPLOY_TARGET = savedTarget
+    vi.restoreAllMocks()
+  })
+
+  it('④a desktop 无会话时：先 ensureLocalShadowUser（经 prisma 触达）再发 guest 会话', async () => {
+    const session = await getSessionFn()
+
+    expect(session).toMatchObject({ user: { id: 'local-guest', isGuest: true } })
+    expect(upsert).toHaveBeenCalledTimes(1)
+    expect(H.ensureBuiltinIndependentProject).toHaveBeenCalledWith('local-guest')
+  })
+
+  it('④b 影子用户落库抛错：仅 warn 不阻断，guest 会话照常发放', async () => {
+    upsert.mockRejectedValueOnce(new Error('db gone'))
+
+    const session = await getSessionFn()
+
+    expect(session).toMatchObject({ user: { id: 'local-guest', isGuest: true } })
+    expect(console.warn).toHaveBeenCalled()
+    // 失败发生在 seed 侧，不应向调用方传播
+    expect(H.ensureBuiltinIndependentProject).not.toHaveBeenCalled()
+  })
+})

package/src/server/__tests__/remote-auth.test.ts

@@ -0,0 +1,72 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest"
+import { promises as fs } from "node:fs"
+import os from "node:os"
+import path from "node:path"
+import {
+  readRemoteAuth,
+  writeRemoteAuth,
+  writeRemoteSession,
+  clearRemoteAuth,
+} from "../remote-auth"
+
+// Electron fs 持久层：roundtrip + 守卫语义（非 desktop 恒 null/no-op）
+const ENV_KEYS = ["DEPLOY_TARGET", "DESKTOP_USER_DATA_DIR"] as const
+
+describe("remote-auth（Electron fs 持久层）", () => {
+  let dir: string
+  const saved: Record<string, string | undefined> = {}
+
+  beforeEach(async () => {
+    for (const k of ENV_KEYS) saved[k] = process.env[k]
+    dir = await fs.mkdtemp(path.join(os.tmpdir(), "remote-auth-test-"))
+    process.env.DESKTOP_USER_DATA_DIR = dir
+    process.env.DEPLOY_TARGET = "desktop"
+  })
+
+  afterEach(async () => {
+    for (const k of ENV_KEYS) {
+      if (saved[k] === undefined) delete process.env[k]
+      else process.env[k] = saved[k]
+    }
+    await fs.rm(dir, { recursive: true, force: true })
+  })
+
+  it("未写入时 read 返回 null", async () => {
+    expect(await readRemoteAuth()).toBeNull()
+  })
+
+  it("仅写 auth token（无 session）不构成登录态", async () => {
+    await writeRemoteAuth("tok-1")
+    expect(await readRemoteAuth()).toBeNull()
+  })
+
+  it("write session 后 read 返回会话态，sessionToken 优先 session 侧", async () => {
+    await writeRemoteAuth("tok-1", "stale-st")
+    await writeRemoteSession("user-1", "pro", "fresh-st")
+    const data = await readRemoteAuth()
+    expect(data).toMatchObject({
+      userId: "user-1",
+      planName: "pro",
+      sessionToken: "fresh-st",
+      features: {},
+    })
+  })
+
+  it("clear 后 read 回 null", async () => {
+    await writeRemoteSession("user-1", "pro")
+    await clearRemoteAuth()
+    expect(await readRemoteAuth()).toBeNull()
+  })
+
+  it("非 desktop 部署恒 no-op：写入不落盘、读取恒 null", async () => {
+    process.env.DEPLOY_TARGET = "vercel"
+    await writeRemoteSession("user-1", "pro")
+    await expect(fs.readdir(dir)).resolves.toEqual([])
+    expect(await readRemoteAuth()).toBeNull()
+  })
+
+  it("损坏文件自愈为 null（不抛错）", async () => {
+    await fs.writeFile(path.join(dir, "remote-auth.json"), "{broken", "utf8")
+    expect(await readRemoteAuth()).toBeNull()
+  })
+})

package/src/server/__tests__/skill-crud.test.ts

@@ -32,24 +32,57 @@ const mocks = vi.hoisted(() => ({
 }))
 
 vi.mock('@tanstack/react-start', () => ({
+  // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+  // mock 依序执行 middleware 的 server 段（复现框架 executeMiddleware 的
+  // context 合并语义），真实鉴权链由被 mock 的 auth-helpers/getRequest 承接
   createServerFn: (config: any) => {
     let validator: any = undefined
-    return {
+    const api: any = {
       _method: config.method,
+      _middlewares: [] as any[],
+      middleware(mws: any[]) {
+        api._middlewares.push(...mws)
+        return api
+      },
       validator(schema: any) {
         validator = schema
-        return this
+        return api
       },
       handler(fn: Function) {
-        return function fn2(args: any = {}) {
+        return async function fn2(args: any = {}) {
           let data = args?.data
           if (validator && data !== undefined) {
             data = validator.parse ? validator.parse(data) : data
           }
-          return fn({ data, request: args?.request })
+          let context: any = {}
+          for (const mw of api._middlewares) {
+            const serverFn = mw?.options?.server
+            if (!serverFn) continue
+            const result = await serverFn({
+              data,
+              context,
+              method: 'POST',
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: any) => ({ context: { ...context, ...(inner?.context ?? {}) } }),
+            })
+            context = result.context
+          }
+          return fn({ data, context })
         }
       },
     }
+    return api
+  },
+  // auth-context.ts 依赖 createMiddleware({ type: 'function' }).server(fn)：
+  // mock 产出与真实 middleware 同构的 { options: { server } } 形状
+  createMiddleware: (opts: any) => {
+    const mw: any = { options: { type: opts?.type } }
+    mw.server = (fn: Function) => {
+      mw.options.server = fn
+      return mw
+    }
+    return mw
   },
 }))
 

package/src/server/__tests__/sso-domain.test.ts

@@ -45,7 +45,7 @@ vi.mock('@/server/pro-services', () => ({
   isProEdition: () => true,
 }))
 
-vi.mock("@/lib/pacer", () => ({
+vi.mock("@/server/lib/rate-limit", () => ({
   checkRateLimit: vi.fn(() => ({ allowed: true, retryAfterMs: 0 })),
 }));