@allbluecn/web-app 0.22.4 → 0.23.1

package/src/server/__tests__/sso-rate-limit-singleton.test.ts

@@ -0,0 +1,123 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// 限流实例收敛单源测试：sso serverFn 的限流必须与 server/lib/rate-limit
+// 共享同一 limiterCache（同 key 计数累计），不得各自为政（双实例双计数）。
+// 本文件刻意不 mock 任何限流模块——双侧都用真实实现，靠「服务端直接耗尽
+// 桶 → serverFn 同 key 被拒」证明共享实例。
+
+import { describe, it, expect, vi, beforeEach } from "vitest";
+
+vi.mock("@tanstack/react-start", () => ({
+  createServerFn: (config: any) => {
+    const api: any = {
+      _validator: undefined,
+      validator(schema: any) {
+        this._validator = schema;
+        return this;
+      },
+      handler(fn: Function) {
+        const wrapped = async (args: any) => {
+          let data = args?.data;
+          if (this._validator && data !== undefined) {
+            data = this._validator.parse ? this._validator.parse(data) : data;
+          }
+          return fn({ data });
+        };
+        return wrapped;
+      },
+    };
+    return api;
+  },
+}));
+
+vi.mock("@tanstack/react-start/server", () => ({
+  // 无 x-forwarded-for / x-real-ip → clientIp 收敛到 'unknown' 共享桶
+  getRequest: () => new Request("https://allblue.test/sso"),
+}));
+
+const mocks = vi.hoisted(() => ({
+  findFirst: vi.fn(),
+}));
+
+vi.mock("@allbluecn/database", () => ({
+  prisma: {
+    ssoProvider: {
+      findFirst: mocks.findFirst,
+    },
+  },
+  Prisma: {},
+}));
+
+vi.mock("@/server/pro-services", () => ({
+  getProService: vi.fn((key: string) => (key === "sso" ? {} : null)),
+  isProEdition: () => true,
+}));
+
+// 精确取值照抄 sso.ts（阈值为实现细节，serverFn 未导出，测试侧同值复刻）
+const SSO_DOMAIN_RATE_LIMIT = { max: 20, windowMs: 60_000 };
+const SSO_IP_RATE_LIMIT = { max: 60, windowMs: 60_000 };
+
+const { checkRateLimit } = await import("@/server/lib/rate-limit");
+const { checkSsoDomainFn } = await import("../serverFns/sso");
+
+describe("sso 限流单实例（与 server/lib/rate-limit 共享 limiterCache）", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    mocks.findFirst.mockResolvedValue({
+      id: "p1",
+      name: "Corp SSO",
+      domain: "corp.com",
+      type: "google",
+    } as never);
+  });
+
+  it("正向对照：未耗尽桶 → 正常返回 provider 摘要", async () => {
+    const result = await checkSsoDomainFn({
+      data: { email: "a@ok-singleton.example.com" },
+    });
+    expect(result).toMatchObject({ providerId: "p1", name: "Corp SSO" });
+  });
+
+  it("domain 桶由服务端 checkRateLimit 直接打满 → serverFn 同 key 被拒（计数累计而非双实例各自为政）", async () => {
+    const domain = "domain-exhaust.example.com";
+    for (let i = 0; i < SSO_DOMAIN_RATE_LIMIT.max; i++) {
+      expect(
+        checkRateLimit(`sso-domain:${domain}`, SSO_DOMAIN_RATE_LIMIT).allowed
+      ).toBe(true);
+    }
+    const result = await checkSsoDomainFn({
+      data: { email: `a@${domain}` },
+    });
+    expect(result).toBeNull();
+  });
+
+  it("IP 桶由服务端 checkRateLimit 直接打满 → serverFn 同 key 被拒", async () => {
+    // 正向对照用例的 handler 调用已消耗 sso-ip:unknown 共享兜底桶 1 次，
+    // 故打满循环不逐次断言 allowed，循环后直接断言桶处于耗尽态
+    for (let i = 0; i < SSO_IP_RATE_LIMIT.max; i++) {
+      checkRateLimit("sso-ip:unknown", SSO_IP_RATE_LIMIT);
+    }
+    expect(checkRateLimit("sso-ip:unknown", SSO_IP_RATE_LIMIT).allowed).toBe(
+      false
+    );
+    const result = await checkSsoDomainFn({
+      data: { email: "a@ip-exhaust.example.com" },
+    });
+    expect(result).toBeNull();
+  });
+});

package/src/server/__tests__/task-serverfn-crud.test.ts

@@ -1,6 +1,6 @@
 // 任务模块 CRUD serverFns 测试（createAiTaskFn / runAiTaskFn / deleteAiTaskFn）。
 // 钉死口径：
-// - 三 serverFn 均 POST；handler 首行 requireAuth，未登录直接拒绝不触 DB；
+// - 三 serverFn 均 POST；鉴权由链上挂载的 authContextMiddleware 前置，未登录直接拒绝不触 DB；
 // - runAiTaskFn 并发裁决（双击防重入）：updateMany 以 status:{not:"running"} 条件
 //   更新占位，count 0 → 抛「任务正在运行」且不建 run、不调执行体；鉴权后先过
 //   checkAiRateLimit("aiTask")，再查库；
@@ -37,8 +37,13 @@ const mocks = vi.hoisted(() => ({
 vi.mock("@tanstack/react-start", () => ({
   createServerFn: (config: any) => {
     let validator: any = undefined
+    const middlewares: any[] = []
     return {
       _method: config.method,
+      middleware(mws: any[]) {
+        middlewares.push(...mws)
+        return this
+      },
       validator(schema: any) {
         validator = schema
         return this
@@ -50,7 +55,24 @@ vi.mock("@tanstack/react-start", () => ({
           if (validator && data !== undefined) {
             data = validator.parse ? validator.parse(data) : data
           }
-          return fn({ data, request: args?.request })
+          // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+          // 依序执行 middleware 的 server 段（requireAuth 抛错时整个调用 reject，
+          // 「未登录直接拒绝」与「鉴权先于限流」断言语义不变）
+          let context: any = {}
+          for (const mw of middlewares) {
+            const serverFn = mw?.options?.server
+            if (!serverFn) continue
+            const result = await serverFn({
+              data,
+              context,
+              method: "POST",
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: any) => ({ context: { ...context, ...(inner?.context ?? {}) } }),
+            })
+            context = result.context
+          }
+          return fn({ data, request: args?.request, context })
         }
         // method 契约随链式产物保留（.handler() 后 builder 对象已不可达）
         ;(fn2 as any)._method = config.method
@@ -58,6 +80,17 @@ vi.mock("@tanstack/react-start", () => ({
       },
     }
   },
+      // auth-context.ts 依赖 createMiddleware({ type: 'function' }).server(fn)：
+      // mock 产出与真实 middleware 同构的 { options: { server } } 形状，
+      // 供 handler 包装器执行 server 段注入 context.user
+      createMiddleware: (opts: any) => {
+        const mw: any = { options: { type: opts?.type } }
+        mw.server = (fn: Function) => {
+          mw.options.server = fn
+          return mw
+        }
+        return mw
+      },
 }))
 
 vi.mock("@tanstack/react-start/server", () => ({

package/src/server/__tests__/task-serverfn-queries.test.ts

@@ -1,6 +1,6 @@
 // 任务模块查询 serverFns 测试（listAssignedToMeFn / listAiTasksFn / getAiTaskFn）。
 // 钉死口径：
-// - 三个 serverFn 均 GET method；handler 首行 requireAuth，未登录直接拒绝不触 DB；
+// - 三个 serverFn 均 GET method；鉴权由链上挂载的 authContextMiddleware 前置，未登录直接拒绝不触 DB；
 // - listAiTasksFn：where createdById + updatedAt 倒序 + 列表字段 select（含 instruction 供指令搜索）；lastRunAt/updatedAt
 //   转 ISO string。历史 sqlite provider 降级用例已随 Tauri 清退移除（迁移 P1）。
 // - getAiTaskFn：归属过滤放 where（非属主与不存在同样抛「任务不存在」，不泄露存在性）；
@@ -27,8 +27,13 @@ const mocks = vi.hoisted(() => ({
 vi.mock("@tanstack/react-start", () => ({
   createServerFn: (config: any) => {
     let validator: any = undefined
+    const middlewares: any[] = []
     return {
       _method: config.method,
+      middleware(mws: any[]) {
+        middlewares.push(...mws)
+        return this
+      },
       validator(schema: any) {
         validator = schema
         return this
@@ -40,7 +45,24 @@ vi.mock("@tanstack/react-start", () => ({
           if (validator && data !== undefined) {
             data = validator.parse ? validator.parse(data) : data
           }
-          return fn({ data, request: args?.request })
+          // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+          // 依序执行 middleware 的 server 段（requireAuth 抛错时整个调用 reject，
+          // 「未登录直接拒绝」与「鉴权先于限流」断言语义不变）
+          let context: any = {}
+          for (const mw of middlewares) {
+            const serverFn = mw?.options?.server
+            if (!serverFn) continue
+            const result = await serverFn({
+              data,
+              context,
+              method: "POST",
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: any) => ({ context: { ...context, ...(inner?.context ?? {}) } }),
+            })
+            context = result.context
+          }
+          return fn({ data, request: args?.request, context })
         }
         // method 契约随链式产物保留（.handler() 后 builder 对象已不可达）
         ;(fn2 as any)._method = config.method
@@ -48,6 +70,17 @@ vi.mock("@tanstack/react-start", () => ({
       },
     }
   },
+      // auth-context.ts 依赖 createMiddleware({ type: 'function' }).server(fn)：
+      // mock 产出与真实 middleware 同构的 { options: { server } } 形状，
+      // 供 handler 包装器执行 server 段注入 context.user
+      createMiddleware: (opts: any) => {
+        const mw: any = { options: { type: opts?.type } }
+        mw.server = (fn: Function) => {
+          mw.options.server = fn
+          return mw
+        }
+        return mw
+      },
 }))
 
 vi.mock("@tanstack/react-start/server", () => ({

package/src/server/__tests__/testcase-board.test.ts

@@ -54,24 +54,57 @@ const DB = H.db;
 vi.mock("@tanstack/react-start", () => {
   // 每个 serverFn 实例独立持有自己的 capture，避免同模块多实例共用导致 validator 串号
   const createServerFn = () => {
-    const capture: { validator?: unknown; handler?: unknown } = {};
+    const capture: { validator?: unknown; handler?: unknown; middlewares?: unknown[] } = {};
     const api = {
       validator: (v: unknown) => {
         capture.validator = v;
         return api;
       },
+      middleware: (mws: unknown[]) => {
+        capture.middlewares = mws;
+        return api;
+      },
       handler: (h: unknown) => {
         capture.handler = h;
-        return async (args?: { data?: unknown }) => {
+        return async (args: { data: unknown }) => {
           const v = capture.validator as { parse?: (d: unknown) => unknown } | undefined;
-          const data = v && v.parse ? v.parse(args?.data) : args?.data;
-          return (h as (p: { data: unknown }) => Promise<unknown>)({ data });
+          const data = v && v.parse ? v.parse(args.data) : args.data;
+          // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+          // 依序执行 middleware 的 server 段，真实鉴权链由被 mock 的 auth-helpers 承接
+          let context: Record<string, unknown> = {};
+          for (const mw of capture.middlewares ?? []) {
+            const serverFn = (mw as { options?: { server?: unknown } })?.options?.server;
+            if (typeof serverFn !== "function") continue;
+            const result = await (
+              serverFn as (p: unknown) => Promise<{ context?: unknown }>
+            )({
+              data,
+              context,
+              method: "POST",
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: { context?: unknown }) => ({
+                context: { ...context, ...(inner?.context ?? {}) },
+              }),
+            });
+            context = (result?.context ?? context) as Record<string, unknown>;
+          }
+          return (h as (p: { data: unknown; context: unknown }) => Promise<unknown>)({ data, context });
         };
       },
     };
     return api;
   };
-  return { createServerFn };
+  // auth-context.ts 依赖 createMiddleware({ type: 'function' }).server(fn)
+  const createMiddleware = (opts?: { type?: string }) => {
+    const mw: { options: { type?: string; server?: unknown }; server?: unknown } = { options: { type: opts?.type } };
+    mw.server = (fn: unknown) => {
+      mw.options.server = fn;
+      return mw;
+    };
+    return mw;
+  };
+  return { createServerFn, createMiddleware };
 });
 
 vi.mock("@tanstack/react-start/server", () => ({ getRequest: () => ({}) }));

package/src/server/__tests__/testcase-bulk.test.ts

@@ -44,24 +44,57 @@ const DB = H.db;
 vi.mock("@tanstack/react-start", () => {
   // 每个 serverFn 实例独立持有自己的 capture，避免同模块多实例共用导致 validator 串号
   const createServerFn = () => {
-    const capture: { validator?: unknown; handler?: unknown } = {};
+    const capture: { validator?: unknown; handler?: unknown; middlewares?: unknown[] } = {};
     const api = {
       validator: (v: unknown) => {
         capture.validator = v;
         return api;
       },
+      middleware: (mws: unknown[]) => {
+        capture.middlewares = mws;
+        return api;
+      },
       handler: (h: unknown) => {
         capture.handler = h;
-        return async (args?: { data?: unknown }) => {
+        return async (args: { data: unknown }) => {
           const v = capture.validator as { parse?: (d: unknown) => unknown } | undefined;
-          const data = v && v.parse ? v.parse(args?.data) : args?.data;
-          return (h as (p: { data: unknown }) => Promise<unknown>)({ data });
+          const data = v && v.parse ? v.parse(args.data) : args.data;
+          // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+          // 依序执行 middleware 的 server 段，真实鉴权链由被 mock 的 auth-helpers 承接
+          let context: Record<string, unknown> = {};
+          for (const mw of capture.middlewares ?? []) {
+            const serverFn = (mw as { options?: { server?: unknown } })?.options?.server;
+            if (typeof serverFn !== "function") continue;
+            const result = await (
+              serverFn as (p: unknown) => Promise<{ context?: unknown }>
+            )({
+              data,
+              context,
+              method: "POST",
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: { context?: unknown }) => ({
+                context: { ...context, ...(inner?.context ?? {}) },
+              }),
+            });
+            context = (result?.context ?? context) as Record<string, unknown>;
+          }
+          return (h as (p: { data: unknown; context: unknown }) => Promise<unknown>)({ data, context });
         };
       },
     };
     return api;
   };
-  return { createServerFn };
+  // auth-context.ts 依赖 createMiddleware({ type: 'function' }).server(fn)
+  const createMiddleware = (opts?: { type?: string }) => {
+    const mw: { options: { type?: string; server?: unknown }; server?: unknown } = { options: { type: opts?.type } };
+    mw.server = (fn: unknown) => {
+      mw.options.server = fn;
+      return mw;
+    };
+    return mw;
+  };
+  return { createServerFn, createMiddleware };
 });
 
 vi.mock("@tanstack/react-start/server", () => ({ getRequest: () => ({}) }));

package/src/server/__tests__/testcase-list-scope.test.ts

@@ -48,24 +48,57 @@ const DB = H.db;
 vi.mock("@tanstack/react-start", () => {
   // 每个 serverFn 实例独立持有自己的 capture，避免同模块多实例共用导致 validator 串号
   const createServerFn = () => {
-    const capture: { validator?: unknown; handler?: unknown } = {};
+    const capture: { validator?: unknown; handler?: unknown; middlewares?: unknown[] } = {};
     const api = {
       validator: (v: unknown) => {
         capture.validator = v;
         return api;
       },
+      middleware: (mws: unknown[]) => {
+        capture.middlewares = mws;
+        return api;
+      },
       handler: (h: unknown) => {
         capture.handler = h;
-        return async (args?: { data?: unknown }) => {
+        return async (args: { data: unknown }) => {
           const v = capture.validator as { parse?: (d: unknown) => unknown } | undefined;
-          const data = v && v.parse ? v.parse(args?.data) : args?.data;
-          return (h as (p: { data: unknown }) => Promise<unknown>)({ data });
+          const data = v && v.parse ? v.parse(args.data) : args.data;
+          // 迁移后经 .middleware([authContextMiddleware]) 注入 context.user：
+          // 依序执行 middleware 的 server 段，真实鉴权链由被 mock 的 auth-helpers 承接
+          let context: Record<string, unknown> = {};
+          for (const mw of capture.middlewares ?? []) {
+            const serverFn = (mw as { options?: { server?: unknown } })?.options?.server;
+            if (typeof serverFn !== "function") continue;
+            const result = await (
+              serverFn as (p: unknown) => Promise<{ context?: unknown }>
+            )({
+              data,
+              context,
+              method: "POST",
+              serverFnMeta: {},
+              signal: new AbortController().signal,
+              next: async (inner: { context?: unknown }) => ({
+                context: { ...context, ...(inner?.context ?? {}) },
+              }),
+            });
+            context = (result?.context ?? context) as Record<string, unknown>;
+          }
+          return (h as (p: { data: unknown; context: unknown }) => Promise<unknown>)({ data, context });
         };
       },
     };
     return api;
   };
-  return { createServerFn };
+  // auth-context.ts 依赖 createMiddleware({ type: 'function' }).server(fn)
+  const createMiddleware = (opts?: { type?: string }) => {
+    const mw: { options: { type?: string; server?: unknown }; server?: unknown } = { options: { type: opts?.type } };
+    mw.server = (fn: unknown) => {
+      mw.options.server = fn;
+      return mw;
+    };
+    return mw;
+  };
+  return { createServerFn, createMiddleware };
 });
 
 vi.mock("@tanstack/react-start/server", () => ({ getRequest: () => ({}) }));

package/src/server/ai-gateway/__tests__/ai-output-guard.test.ts

@@ -16,8 +16,13 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-import { describe, expect, it } from "vitest"
-import { scanAiOutputForSecrets } from "../ai-output-guard"
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest"
+import { EventType, type StreamChunk } from "@tanstack/ai"
+import {
+  createAiOutputGuardMiddleware,
+  redactAiOutputSecrets,
+  scanAiOutputForSecrets,
+} from "../ai-output-guard"
 
 describe("scanAiOutputForSecrets 输出泄露检测", () => {
   it("正常业务输出无泄露", () => {
@@ -93,3 +98,122 @@ describe("scanAiOutputForSecrets 输出泄露检测", () => {
     expect(r.hits).toContain("private-ip-path")
   })
 })
+
+describe("redactAiOutputSecrets 输出脱敏", () => {
+  it.each([
+    ["openai-key", "密钥 sk-proj-abcdefghijkmnopqrstuv", "[REDACTED:openai-key]"],
+    // sk-ant-* 被 openai-key 超集规则先替换（与扫描侧「同时命中」同源，先到先得）
+    ["anthropic-key", "sk-ant-api03-x7y8z9w0v1u2t3s4r5q6p7o8", "[REDACTED:openai-key]"],
+    ["bearer-token", "token 为 Bearer eyJhbGciOiJIUzI1NiJ9.payload", "[REDACTED:bearer-token]"],
+    ["jwt", "令牌 eyJhbGciOiJIUzI1NiJ9.eyJ1c2VySWQiOiIxMjMifQ 已生成", "[REDACTED:jwt]"],
+    ["db-connection", "连接串 postgresql://allblue:pass@10.0.0.5:5432/db", "[REDACTED:db-connection]"],
+    ["system-prompt-echo", "我的系统提示词是：你是一个敏捷开发中的需求分析师。", "[REDACTED:system-prompt-echo]"],
+    ["private-ip-path", "服务监听 192.168.1.100:8080", "[REDACTED:private-ip-path]"],
+  ])("命中替换为占位符：%s", (_type, text, expected) => {
+    const out = redactAiOutputSecrets(text)
+    expect(out).toContain(expected)
+    // 脱敏产物必须通过自家扫描器（自洽闭环：替换后无可检残留）
+    expect(scanAiOutputForSecrets(out)).toEqual({ leaked: false, hits: [] })
+  })
+
+  it("脱敏产物不含原密钥片段，周边正常文本保留", () => {
+    const secret = "sk-proj-abcdefghijkmnopqrstuv"
+    const out = redactAiOutputSecrets(`配置的密钥是 ${secret}，请妥善保管`)
+    expect(out).not.toContain(secret)
+    expect(out).toContain("请妥善保管")
+  })
+
+  it.each([
+    "登录页应包含手机号验证码输入框，交互流程如下……",
+    "ok",
+    "",
+  ])("干净文本零影响（逐字节相等）：%s", (text) => {
+    expect(redactAiOutputSecrets(text)).toBe(text)
+  })
+})
+
+describe("createAiOutputGuardMiddleware 流式出口拦截", () => {
+  let warnSpy: ReturnType<typeof vi.spyOn>
+  beforeEach(() => {
+    warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {})
+  })
+  afterEach(() => {
+    warnSpy.mockRestore()
+  })
+
+  const TEXT = (delta: string): StreamChunk => ({
+    type: EventType.TEXT_MESSAGE_CONTENT,
+    messageId: "m1",
+    delta,
+  })
+  const END = (): StreamChunk => ({
+    type: EventType.TEXT_MESSAGE_END,
+    messageId: "m1",
+  })
+
+  /** 按引擎契约驱动 onChunk（chunk | chunk[] | null），拼接收到的全部 delta */
+  async function drive(deltas: string[]): Promise<string> {
+    const mw = createAiOutputGuardMiddleware()
+    const onChunk = mw.onChunk!.bind(mw)
+    const pieces: string[] = []
+    const collect = (result: unknown) => {
+      const chunks = Array.isArray(result) ? result : result ? [result] : []
+      for (const chunk of chunks) {
+        const c = chunk as { type?: string; delta?: string }
+        if (c.type === "TEXT_MESSAGE_CONTENT" && typeof c.delta === "string") {
+          pieces.push(c.delta)
+        }
+      }
+    }
+    for (const delta of deltas) {
+      collect(await onChunk({} as never, TEXT(delta)))
+    }
+    collect(await onChunk({} as never, END()))
+    return pieces.join("")
+  }
+
+  it("密钥跨 delta 分片仍被脱敏（buffered 策略跨块匹配）", async () => {
+    const assembled = await drive([
+      "配置的密钥是 sk-proj-",
+      "abcdefghijkmnopqrstuv，请妥善保管",
+    ])
+    expect(assembled).not.toContain("sk-proj-abcdefghijkmnopqrstuv")
+    expect(assembled).toContain("[REDACTED:openai-key]")
+    expect(assembled).toContain("请妥善保管")
+    expect(scanAiOutputForSecrets(assembled).leaked).toBe(false)
+  })
+
+  it("完整密钥单 delta 直出同样脱敏", async () => {
+    const assembled = await drive(["密钥 sk-ant-api03-x7y8z9w0v1u2t3s4r5q6p7o8 结束"])
+    expect(assembled).not.toContain("sk-ant-api03-x7y8z9w0v1u2t3s4r5q6p7o8")
+    expect(assembled).toContain("[REDACTED:openai-key]")
+  })
+
+  it("不含密钥的流式输出零影响（拼接逐字节等于输入）", async () => {
+    const deltas = ["登录页应包含", "手机号验证码输入框，", "交互流程如下……"]
+    await expect(drive(deltas)).resolves.toBe(deltas.join(""))
+  })
+
+  it("超过 bufferSize 的干净长文本零影响（缓冲切片不丢字不重字）", async () => {
+    const deltas = ["甲乙丙丁戊己庚辛壬癸子丑寅卯辰巳午未申酉戌亥", "。恢复正常回答继续。", "收尾三句。"]
+    const input = Array.from({ length: 12 }, () => deltas.join("")).join("")
+    await expect(
+      drive(input.match(/.{1,40}/gs) ?? []),
+    ).resolves.toBe(input)
+  })
+
+  it("middleware 名为官方 content-guard（挂载链 name 断言的权威值）", () => {
+    expect(createAiOutputGuardMiddleware().name).toBe("content-guard")
+  })
+
+  it("onFiltered 告警只含命中类型，不落原文（防日志成为第二泄露面）", async () => {
+    const secret = "sk-proj-abcdefghijkmnopqrstuv"
+    await drive([`配置的密钥是 ${secret}，请妥善保管`])
+    const logged = warnSpy.mock.calls
+      .map((args: unknown[]) => args.join(" "))
+      .join("\n")
+    expect(logged).toContain("hits=openai-key")
+    expect(logged).not.toContain(secret)
+    expect(warnSpy).toHaveBeenCalledTimes(1)
+  })
+})

package/src/server/ai-gateway/__tests__/chat-stream-builder-code-mode.test.ts

@@ -19,6 +19,9 @@ vi.mock("@tanstack/ai/middlewares/otel", () => ({
 vi.mock("@tanstack/ai/middlewares", () => ({
   toolCacheMiddleware: () => ({ name: "toolCache" }),
 }))
+vi.mock("../ai-output-guard", () => ({
+  createAiOutputGuardMiddleware: () => ({ name: "content-guard" }),
+}))
 vi.mock("@tanstack/ai-persistence", () => ({
   withPersistence: () => ({ name: "persistence" }),
 }))
@@ -70,6 +73,7 @@ const MIDDLEWARE_NAMES = [
   "rateLimit",
   "otel",
   "toolCache",
+  "content-guard",
   "toolBudget",
   "planApproval",
   "compaction",

package/src/server/ai-gateway/__tests__/chat-stream-builder-memory.test.ts

@@ -32,6 +32,9 @@ vi.mock("@tanstack/ai/middlewares/otel", () => ({
 vi.mock("@tanstack/ai/middlewares", () => ({
   toolCacheMiddleware: () => ({ name: "toolCache" }),
 }))
+vi.mock("../ai-output-guard", () => ({
+  createAiOutputGuardMiddleware: () => ({ name: "content-guard" }),
+}))
 vi.mock("@tanstack/ai-persistence", () => ({
   withPersistence: () => ({ name: "persistence" }),
 }))
@@ -110,6 +113,7 @@ describe("buildChatStreamWithTools 挂载记忆中间件", () => {
       "rateLimit",
       "otel",
       "toolCache",
+      "content-guard",
       "toolBudget",
       "planApproval",
       "compaction",

package/src/server/ai-gateway/__tests__/chat-stream-builder-sandbox.test.ts

@@ -25,6 +25,9 @@ vi.mock("@tanstack/ai/middlewares/otel", () => ({
 vi.mock("@tanstack/ai/middlewares", () => ({
   toolCacheMiddleware: () => ({ name: "toolCache" }),
 }))
+vi.mock("../ai-output-guard", () => ({
+  createAiOutputGuardMiddleware: () => ({ name: "content-guard" }),
+}))
 vi.mock("@tanstack/ai-persistence", () => ({
   withPersistence: () => ({ name: "persistence" }),
 }))
@@ -150,6 +153,7 @@ describe("buildChatStreamWithTools 沙箱装配", () => {
       "rateLimit",
       "otel",
       "toolCache",
+      "content-guard",
       "toolBudget",
       "planApproval",
       "compaction",

package/src/server/ai-gateway/__tests__/chat-stream-builder-skills.test.ts

@@ -18,6 +18,9 @@ vi.mock("@tanstack/ai/middlewares/otel", () => ({
 vi.mock("@tanstack/ai/middlewares", () => ({
   toolCacheMiddleware: () => ({ name: "toolCache" }),
 }))
+vi.mock("../ai-output-guard", () => ({
+  createAiOutputGuardMiddleware: () => ({ name: "content-guard" }),
+}))
 vi.mock("@tanstack/ai-persistence", () => ({
   withPersistence: () => ({ name: "persistence" }),
 }))
@@ -58,6 +61,7 @@ const EXISTING_MIDDLEWARE_NAMES = [
   "rateLimit",
   "otel",
   "toolCache",
+  "content-guard",
   "toolBudget",
   "planApproval",
   "compaction",