@allbluecn/web-app 0.4.22 → 0.5.1

package/src/routes/_nav/projects/$projectId/settings/route.lazy.tsx

@@ -19,19 +19,21 @@ import { createLazyFileRoute, Link } from "@tanstack/react-router";
 import { useRouter } from "@tanstack/react-router";
 import { useTranslation } from "react-i18next";
 import { useEffect, useState } from "react";
-import { ArrowLeft, Loader2 } from "lucide-react";
+import { ArrowLeft, BookOpenText, Loader2 } from "lucide-react";
 import { toast } from '@/components/ui/sonner';
 import { Button } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
 import { Textarea } from "@/components/ui/textarea";
 import { Label } from "@/components/ui/label";
 import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Checkbox } from "@/components/ui/checkbox";
+import { Badge } from "@/components/ui/badge";
 import { IconPicker } from "@/components/shared/icon-picker";
 import { PROJECT_ICONS } from "@/components/shared/icon-packs/project";
 import { NameConfirmDialog } from "@/components/shared/name-confirm-dialog";
 import { ProjectMemberManager } from "@/components/project/project-member-manager";
 import { extractDisplayId, validateDisplayId } from "@/lib/project-display-id";
-import { checkDisplayIdAvailableFn, updateProjectFn, deleteProjectFn } from "@/server/serverFns/project";
+import { checkDisplayIdAvailableFn, updateProjectFn, deleteProjectFn, setProjectKbsFn } from "@/server/serverFns/project";
 import { useTimezone } from "@/providers/timezone-provider";
 import { TimezoneSelect } from "@/components/shared/timezone-select";
 import { RadioGroup, RadioGroupItem } from "@/components/ui/radio-group";
@@ -39,7 +41,7 @@ import { RadioGroup, RadioGroupItem } from "@/components/ui/radio-group";
 function ProjectSettingsPage() {
   const { t } = useTranslation('projects');
   const router = useRouter();
-  const { project, members } = Route.useLoaderData();
+  const { project, members, linkedKbIds, candidateKbs } = Route.useLoaderData();
   const session = Route.useRouteContext({ select: (c) => c.session });
   const currentUserId = session?.user?.id;
   const currentUserRole =
@@ -57,6 +59,8 @@ function ProjectSettingsPage() {
   const [projectTimezone, setProjectTimezone] = useState(project.timezone ?? "");
   const [saving, setSaving] = useState(false);
   const [deleteOpen, setDeleteOpen] = useState(false);
+  const [kbChecked, setKbChecked] = useState<Set<string>>(() => new Set(linkedKbIds));
+  const [savingKbs, setSavingKbs] = useState(false);
   const [deleteMode, setDeleteMode] = useState<"transfer" | "clear">("transfer");
   const userTimezone = useTimezone();
 
@@ -102,6 +106,18 @@ function ProjectSettingsPage() {
     }
   };
 
+  const saveKbs = async () => {
+    setSavingKbs(true);
+    try {
+      await setProjectKbsFn({ data: { projectId: project.id, kbIds: [...kbChecked] } });
+      toast.success(t('settings.kbSection.saved'));
+    } catch (err) {
+      toast.error((err as Error).message || t('settings.kbSection.saveFailed'));
+    } finally {
+      setSavingKbs(false);
+    }
+  };
+
   const handleDelete = async (mode: "transfer" | "clear") => {
     try {
       await deleteProjectFn({ data: { projectId: project.id, mode } })
@@ -225,6 +241,61 @@ function ProjectSettingsPage() {
           </Card>
         )}
 
+        <Card className="mb-6">
+          <CardHeader>
+            <CardTitle>{t('settings.kbSection.title')}</CardTitle>
+          </CardHeader>
+          <CardContent>
+            <p className="mb-3 text-sm text-muted-foreground">
+              {t('settings.kbSection.desc')}
+            </p>
+            {candidateKbs.filter((kb) => kb.visibility !== 'private').length === 0 && (
+              <p className="text-sm text-muted-foreground">{t('settings.kbSection.empty')}</p>
+            )}
+            <div className="flex flex-col gap-2">
+              {candidateKbs
+                .filter((kb) => kb.visibility !== 'private')
+                .map((kb) => {
+                  const isGeneral = kb.visibility === 'general';
+                  return (
+                    <label
+                      key={kb.id}
+                      className={`flex items-center gap-2 rounded-md border px-3 py-2 text-sm ${
+                        isGeneral ? 'opacity-60' : 'cursor-pointer'
+                      }`}
+                    >
+                      <Checkbox
+                        checked={isGeneral ? false : kbChecked.has(kb.id)}
+                        disabled={isGeneral}
+                        onCheckedChange={(v) =>
+                          setKbChecked((prev) => {
+                            const next = new Set(prev);
+                            if (v) next.add(kb.id);
+                            else next.delete(kb.id);
+                            return next;
+                          })
+                        }
+                      />
+                      <BookOpenText className="size-4 text-muted-foreground" />
+                      <span className="flex-1">{kb.name}</span>
+                      {isGeneral ? (
+                        <span className="text-xs text-muted-foreground">
+                          {t('settings.kbSection.generalDisabled')}
+                        </span>
+                      ) : (
+                        <Badge variant="outline" className="text-xs">{t('knowledge:toolbar.team')}</Badge>
+                      )}
+                    </label>
+                  );
+                })}
+            </div>
+            <Button onClick={saveKbs} disabled={savingKbs} className="mt-3">
+              {savingKbs ? <Loader2 className="mr-2 size-4 animate-spin" /> : null}
+              {t('settings.kbSection.save')}
+            </Button>
+          </CardContent>
+        </Card>
+
         <Card className="mb-6">
           <CardHeader>
             <CardTitle>{t('settings.members')}</CardTitle>

package/src/routes/_nav/projects/$projectId/settings/route.tsx

@@ -19,14 +19,18 @@ import { createFileRoute } from "@tanstack/react-router";
 import {
   getProjectDetailFn,
   listProjectMembersFn,
+  listProjectKbsFn,
 } from "@/server/serverFns/project";
+import { listKnowledgeFn } from "@/server/serverFns/knowledge";
 
 export const Route = createFileRoute("/_nav/projects/$projectId/settings")({
   loader: async ({ params }) => {
-    const [project, members] = await Promise.all([
+    const [project, members, linkedKbs, myKbs] = await Promise.all([
       getProjectDetailFn({ data: { projectId: params.projectId } }),
       listProjectMembersFn({ data: { projectId: params.projectId } }),
+      listProjectKbsFn({ data: { projectId: params.projectId } }),
+      listKnowledgeFn({ data: {} }),
     ]);
-    return { project, members };
+    return { project, members, linkedKbIds: linkedKbs.map((k) => k.id), candidateKbs: myKbs };
   },
 });

package/src/routes/_nav/settings/notifications/route.lazy.tsx

@@ -17,7 +17,7 @@
 
 import { createLazyFileRoute } from '@tanstack/react-router'
 import { useTranslation } from 'react-i18next'
-import { NotificationPreferences } from '@/components/notifications/notification-preferences'
+import { SettingsNotifications } from '@/components/notifications/settings-notifications'
 
 export const Route = createLazyFileRoute('/_nav/settings/notifications')({
   component: NotificationsSettingsPage,
@@ -25,13 +25,14 @@ export const Route = createLazyFileRoute('/_nav/settings/notifications')({
 
 function NotificationsSettingsPage() {
   const { t } = useTranslation('notifications')
+
   return (
     <div className="flex flex-col gap-6 p-6">
-      <div className="flex flex-col gap-1">
-        <h1 className="text-xl font-semibold">{t('preferences.title')}</h1>
-        <p className="text-sm text-muted-foreground">{t('preferences.description')}</p>
+      <div>
+        <h2 className="text-lg font-semibold">{t('settings.title')}</h2>
+        <p className="text-sm text-muted-foreground">{t('settings.description')}</p>
       </div>
-      <NotificationPreferences />
+      <SettingsNotifications />
     </div>
   )
 }

package/src/routes/api/attachments/$id/content.ts

@@ -0,0 +1,60 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from "@tanstack/react-router";
+import { prisma } from "@allbluecn/database";
+import { requireAuth } from "@/server/auth-helpers";
+
+// URL 路径中的文件名不可信，Content-Disposition 用 RFC 5987 filename* 编码
+function contentDisposition(fileName: string): string {
+  const encoded = encodeURIComponent(fileName);
+  return `inline; filename*=UTF-8''${encoded}`;
+}
+
+export const Route = createFileRoute("/api/attachments/$id/content")({
+  server: {
+    handlers: {
+      GET: async ({ request, params }) => {
+        try {
+          await requireAuth(request);
+
+          const attachment = await prisma.storyAttachment.findUnique({
+            where: { id: params.id },
+            select: { fileName: true, mimeType: true, bytes: true },
+          });
+          if (!attachment || !attachment.bytes) {
+            return new Response("Not found", { status: 404 });
+          }
+
+          const body = new Uint8Array(attachment.bytes);
+          return new Response(body, {
+            headers: {
+              "Content-Type": attachment.mimeType || "application/octet-stream",
+              "Content-Length": String(body.byteLength),
+              "Content-Disposition": contentDisposition(attachment.fileName),
+              "Cache-Control": "private, max-age=31536000, immutable",
+            },
+          });
+        } catch (e) {
+          const message = e instanceof Error ? e.message : "读取失败";
+          const status = message === "UNAUTHORIZED" ? 401 : 500;
+          return new Response(message, { status });
+        }
+      },
+    },
+  },
+});

package/src/routes/api/attachments/upload.ts

@@ -0,0 +1,148 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from "@tanstack/react-router";
+import { prisma } from "@allbluecn/database";
+import { requireAuth, requireUserInDb } from "@/server/auth-helpers";
+import { ACTIVITY_SELECT, toActivityItem } from "@/server/serverFns/story/types";
+import { inferMimeType } from "@/components/story/relations/format";
+
+const MAX_FILE_SIZE = 10 * 1024 * 1024;
+
+export const Route = createFileRoute("/api/attachments/upload")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        try {
+          const session = await requireAuth(request);
+          const userId = session.user!.id!;
+          await requireUserInDb(userId);
+
+          const formData = await request.formData();
+          const storyId = formData.get("storyId");
+          const file = formData.get("file");
+          const rawDescription = formData.get("description");
+          const description =
+            typeof rawDescription === "string" && rawDescription.trim()
+              ? rawDescription.trim().slice(0, 500)
+              : null;
+          const attachmentId = formData.get("attachmentId") as string | null;
+          const fileHash = formData.get("fileHash") as string | null;
+          if (typeof storyId !== "string" || !storyId) {
+            return Response.json({ error: "缺少 storyId" }, { status: 400 });
+          }
+          if (!(file instanceof File)) {
+            return Response.json({ error: "缺少文件" }, { status: 400 });
+          }
+          if (file.size <= 0 || file.size > MAX_FILE_SIZE) {
+            return Response.json({ error: "文件大小需在 10MB 以内" }, { status: 400 });
+          }
+
+          const story = await prisma.story.findUnique({
+            where: { id: storyId },
+            select: { id: true },
+          });
+          if (!story) {
+            return Response.json({ error: "需求不存在" }, { status: 404 });
+          }
+
+          const bytes = new Uint8Array(await file.arrayBuffer());
+          let attachment;
+          let activity;
+
+          if (attachmentId) {
+            // 编辑模式：替换现有附件
+            attachment = await prisma.storyAttachment.update({
+              where: { id: attachmentId },
+              data: {
+                fileName: file.name.slice(0, 255),
+                fileSize: BigInt(file.size),
+                mimeType: inferMimeType(file.name, file.type),
+                description,
+                bytes,
+                fileHash: fileHash ?? null,
+              },
+            });
+            activity = await prisma.storyActivity.create({
+              data: {
+                storyId,
+                userId,
+                action: "attachment_updated",
+                newValue: file.name.slice(0, 255),
+              },
+              select: ACTIVITY_SELECT,
+            });
+          } else {
+            // 新增模式：先检查同 story 是否已有相同 hash 的附件
+            const existing = fileHash
+              ? await prisma.storyAttachment.findFirst({
+                  where: { storyId, fileHash },
+                  select: { id: true },
+                })
+              : null;
+            if (existing) {
+              return Response.json({ duplicated: true, existingId: existing.id }, { status: 200 });
+            }
+            attachment = await prisma.storyAttachment.create({
+              data: {
+                storyId,
+                fileName: file.name.slice(0, 255),
+                fileSize: BigInt(file.size),
+                mimeType: inferMimeType(file.name, file.type),
+                description,
+                storageUrl: "pending",
+                bytes,
+                fileHash: fileHash ?? null,
+              },
+            });
+            const storageUrl = `/api/attachments/${attachment.id}/content`;
+            await prisma.storyAttachment.update({
+              where: { id: attachment.id },
+              data: { storageUrl },
+            });
+            activity = await prisma.storyActivity.create({
+              data: {
+                storyId,
+                userId,
+                action: "attachment_added",
+                newValue: file.name.slice(0, 255),
+              },
+              select: ACTIVITY_SELECT,
+            });
+          }
+
+          const storageUrl = `/api/attachments/${attachment.id}/content`;
+
+          return Response.json({
+            id: attachment.id,
+            fileName: attachment.fileName,
+            fileSize: Number(attachment.fileSize),
+            mimeType: attachment.mimeType,
+            description: attachment.description,
+            storageUrl,
+            fileHash: attachment.fileHash,
+            activity: toActivityItem(activity),
+          });
+        } catch (e) {
+          const message = e instanceof Error ? e.message : "上传失败";
+          const status = message === "UNAUTHORIZED" ? 401 : 500;
+          return Response.json({ error: message }, { status });
+        }
+      },
+    },
+  },
+});

package/src/routes/api/notifications/stream.ts

@@ -21,6 +21,7 @@ import type { StreamChunk } from '@tanstack/ai'
 import { prisma } from '@allbluecn/database'
 import { getCurrentSession } from '@/lib/session'
 import { notificationBus } from '@/server/notifications/event-bus'
+import { deliverDueDigests } from '@/server/notifications/notification-service'
 import type { NotificationSseValue } from '@allbluecn/shared'
 
 export const Route = createFileRoute('/api/notifications/stream')({
@@ -60,6 +61,9 @@ export const Route = createFileRoute('/api/notifications/stream')({
               value: { kind: 'unread_snapshot', count },
             } as unknown as StreamChunk
 
+            // 连接建立时检查到期 digest 摘要（fire-and-forget，摘要经 bus 实时推送）
+            void deliverDueDigests(userId)
+
             while (!abortController.signal.aborted) {
               if (queue.length === 0) {
                 await new Promise<void>((resolve) => {

package/src/server/notifications/__tests__/notification-service.test.ts

@@ -0,0 +1,189 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+vi.mock('@allbluecn/database', () => ({
+  prisma: {
+    notificationPreference: {
+      findUnique: vi.fn(),
+      create: vi.fn(),
+    },
+    notification: {
+      create: vi.fn(),
+      findFirst: vi.fn(),
+      findMany: vi.fn(),
+      count: vi.fn(),
+    },
+  },
+  Prisma: {},
+}))
+
+vi.mock('@/server/notifications/event-bus', () => ({
+  notificationBus: {
+    emit: vi.fn(),
+    subscribe: vi.fn(),
+  },
+}))
+
+import { prisma } from '@allbluecn/database'
+import { notificationBus } from '@/server/notifications/event-bus'
+import { createNotification, deliverDueDigests } from '../notification-service'
+
+const mockedFindUnique = prisma.notificationPreference.findUnique as ReturnType<typeof vi.fn>
+const mockedCreatePref = prisma.notificationPreference.create as ReturnType<typeof vi.fn>
+const mockedNotifCreate = prisma.notification.create as ReturnType<typeof vi.fn>
+const mockedNotifFindFirst = prisma.notification.findFirst as ReturnType<typeof vi.fn>
+const mockedNotifFindMany = prisma.notification.findMany as ReturnType<typeof vi.fn>
+const mockedNotifCount = prisma.notification.count as ReturnType<typeof vi.fn>
+const mockedEmit = notificationBus.emit as ReturnType<typeof vi.fn>
+
+const realtimePrefs = {
+  userId: 'u1',
+  categories: {
+    team: 'realtime',
+    collaboration: 'realtime',
+    system: 'realtime',
+    billing: 'realtime',
+    security: 'realtime',
+  },
+  dndEnabled: false,
+  dndStart: '22:00',
+  dndEnd: '08:00',
+}
+
+const createdNotification = {
+  id: 'n1',
+  category: 'team',
+  type: 'invite',
+  title: 't',
+  body: null,
+  link: null,
+  readAt: null,
+  createdAt: new Date('2026-08-29T10:00:00Z'),
+}
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  mockedFindUnique.mockResolvedValue(realtimePrefs)
+  mockedCreatePref.mockResolvedValue(null)
+  mockedNotifCreate.mockResolvedValue(createdNotification)
+})
+
+describe('createNotification frequency 判定', () => {
+  it('off 类别完全不投递（不入库）', async () => {
+    mockedFindUnique.mockResolvedValue({
+      ...realtimePrefs,
+      categories: { ...realtimePrefs.categories, team: 'off' },
+    })
+    await createNotification({ userId: 'u1', category: 'team', type: 'invite', title: 't' })
+    expect(mockedNotifCreate).not.toHaveBeenCalled()
+    expect(mockedEmit).not.toHaveBeenCalled()
+  })
+
+  it('realtime 类别入库并实时推送', async () => {
+    await createNotification({ userId: 'u1', category: 'team', type: 'invite', title: 't' })
+    expect(mockedNotifCreate).toHaveBeenCalledTimes(1)
+    expect(mockedEmit).toHaveBeenCalledTimes(1)
+    expect(mockedEmit).toHaveBeenCalledWith('u1', {
+      kind: 'notification',
+      notification: expect.objectContaining({ id: 'n1' }),
+    })
+  })
+
+  it('digest-daily 类别仅入库不推送', async () => {
+    mockedFindUnique.mockResolvedValue({
+      ...realtimePrefs,
+      categories: { ...realtimePrefs.categories, team: 'digest-daily' },
+    })
+    await createNotification({ userId: 'u1', category: 'team', type: 'invite', title: 't' })
+    expect(mockedNotifCreate).toHaveBeenCalledTimes(1)
+    expect(mockedEmit).not.toHaveBeenCalled()
+  })
+
+  it('force 绕过 off 判定并强制推送', async () => {
+    mockedFindUnique.mockResolvedValue({
+      ...realtimePrefs,
+      categories: { ...realtimePrefs.categories, team: 'off' },
+    })
+    await createNotification({ userId: 'u1', category: 'team', type: 'digest.daily', title: 't', force: true })
+    expect(mockedNotifCreate).toHaveBeenCalledTimes(1)
+    expect(mockedEmit).toHaveBeenCalledTimes(1)
+  })
+})
+
+describe('deliverDueDigests', () => {
+  const digestPrefs = {
+    userId: 'u1',
+    categories: {
+      team: 'digest-daily',
+      collaboration: 'realtime',
+      system: 'off',
+      billing: 'digest-weekly',
+      security: 'realtime',
+    },
+    dndEnabled: false,
+    dndStart: '22:00',
+    dndEnd: '08:00',
+  }
+
+  it('到期且有积压时生成摘要并实时推送', async () => {
+    mockedFindUnique.mockResolvedValue(digestPrefs)
+    mockedNotifFindFirst.mockResolvedValue({
+      createdAt: new Date(Date.now() - 25 * 60 * 60 * 1000),
+    })
+    mockedNotifCount.mockResolvedValue(4)
+    mockedNotifFindMany.mockResolvedValue([{ title: 'a' }, { title: 'b' }, { title: 'c' }])
+    mockedNotifCreate.mockResolvedValue({ ...createdNotification, type: 'digest.daily' })
+
+    await deliverDueDigests('u1')
+
+    // team(daily) 到期生成摘要并推送；billing(weekly) 距水位线 25h < 7d 未到期
+    expect(mockedEmit).toHaveBeenCalledTimes(1)
+    const teamDigest = mockedNotifCreate.mock.calls.find(
+      (c) => c[0]?.data?.type === 'digest.daily'
+    )
+    expect(teamDigest).toBeDefined()
+    expect(teamDigest![0].data.title).toContain('今日团队协作有 4 条新通知')
+    expect(teamDigest![0].data.body).toContain('等 4 条通知')
+  })
+
+  it('未到期（24h 内已有摘要）跳过', async () => {
+    mockedFindUnique.mockResolvedValue(digestPrefs)
+    mockedNotifFindFirst.mockResolvedValue({ createdAt: new Date(Date.now() - 2 * 60 * 60 * 1000) })
+
+    await deliverDueDigests('u1')
+
+    expect(mockedNotifCount).not.toHaveBeenCalled()
+    expect(mockedNotifCreate).not.toHaveBeenCalled()
+  })
+
+  it('到期但无积压通知跳过', async () => {
+    mockedFindUnique.mockResolvedValue(digestPrefs)
+    mockedNotifFindFirst.mockResolvedValue({
+      createdAt: new Date(Date.now() - 25 * 60 * 60 * 1000),
+    })
+    mockedNotifCount.mockResolvedValue(0)
+
+    await deliverDueDigests('u1')
+
+    expect(mockedNotifCreate).not.toHaveBeenCalled()
+    expect(mockedEmit).not.toHaveBeenCalled()
+  })
+
+  it('weekly 频率 7 天内已有摘要跳过', async () => {
+    mockedFindUnique.mockResolvedValue({
+      ...digestPrefs,
+      categories: { ...digestPrefs.categories, billing: 'digest-weekly', team: 'realtime' },
+    })
+    mockedNotifFindFirst.mockResolvedValue({ createdAt: new Date(Date.now() - 6 * 24 * 60 * 60 * 1000) })
+
+    await deliverDueDigests('u1')
+
+    expect(mockedNotifCount).not.toHaveBeenCalled()
+    expect(mockedNotifCreate).not.toHaveBeenCalled()
+  })
+
+  it('无 digest 类别直接返回', async () => {
+    await deliverDueDigests('u1')
+    expect(mockedNotifFindFirst).not.toHaveBeenCalled()
+  })
+})