@allbluecn/web-app 0.4.22 → 0.5.1

package/src/server/notifications/notification-service.ts

@@ -1,15 +1,19 @@
 // SPDX-License-Identifier: AGPL-3.0-or-later
 import { prisma } from '@allbluecn/database'
 import type {
-  CategoryPreferences,
+  CategoryFrequencies,
   NotificationCategory,
   NotificationItem,
   NotificationPreferences,
 } from '@allbluecn/shared'
-import { isInDndWindow, DEFAULT_CATEGORIES } from '@allbluecn/shared'
+import {
+  isInDndWindow,
+  normalizeCategoryFrequencies,
+  DEFAULT_CATEGORIES,
+} from '@allbluecn/shared'
 import { notificationBus } from './event-bus'
 
-export { DEFAULT_CATEGORIES, isInDndWindow } from '@allbluecn/shared'
+export { DEFAULT_CATEGORIES, isInDndWindow, normalizeCategoryFrequencies } from '@allbluecn/shared'
 
 export interface CreateNotificationInput {
   userId: string
@@ -18,13 +22,36 @@ export interface CreateNotificationInput {
   title: string
   body?: string
   link?: string
+  /** 绕过 frequency 判定并强制实时推送（仅 digest 摘要生成使用） */
+  force?: boolean
+}
+
+/** 服务端直出的类别中文名（与 zh locale tabs 保持一致） */
+const CATEGORY_LABELS: Record<NotificationCategory, string> = {
+  team: '团队协作',
+  collaboration: '内容协作',
+  system: '系统公告',
+  billing: '账单订阅',
+  security: '安全告警',
+}
+
+const DIGEST_TYPE: Record<'digest-daily' | 'digest-weekly', string> = {
+  'digest-daily': 'digest.daily',
+  'digest-weekly': 'digest.weekly',
+}
+
+const DIGEST_MIN_INTERVAL_MS: Record<'digest-daily' | 'digest-weekly', number> = {
+  'digest-daily': 24 * 60 * 60 * 1000,
+  'digest-weekly': 7 * 24 * 60 * 60 * 1000,
 }
 
+const DIGEST_SUMMARY_ITEMS = 3
+
 export async function getOrCreatePreferences(userId: string): Promise<NotificationPreferences> {
   const existing = await prisma.notificationPreference.findUnique({ where: { userId } })
   if (existing) {
     return {
-      categories: { ...DEFAULT_CATEGORIES, ...(existing.categories as object) } as CategoryPreferences,
+      categories: normalizeCategoryFrequencies(existing.categories),
       dndEnabled: existing.dndEnabled,
       dndStart: existing.dndStart,
       dndEnd: existing.dndEnd,
@@ -52,35 +79,118 @@ export async function getOrCreatePreferences(userId: string): Promise<Notificati
   return defaults
 }
 
-/** fire-and-forget：任何失败只记日志不抛出，不阻断业务主流程 */
+async function insertNotification(
+  input: CreateNotificationInput
+): Promise<NotificationItem | null> {
+  const created = await prisma.notification.create({
+    data: {
+      userId: input.userId,
+      category: input.category,
+      type: input.type,
+      title: input.title,
+      body: input.body,
+      link: input.link,
+    },
+  })
+  return {
+    id: created.id,
+    category: created.category as NotificationCategory,
+    type: created.type,
+    title: created.title,
+    body: created.body,
+    link: created.link,
+    readAt: created.readAt ? created.readAt.toISOString() : null,
+    createdAt: created.createdAt.toISOString(),
+  }
+}
+
+/**
+ * fire-and-forget：任何失败只记日志不抛出，不阻断业务主流程。
+ * frequency 判定：off 不投递；realtime 入库 + 实时推送；digest-* 仅入库（由 deliverDueDigests 汇总推送）。
+ */
 export async function createNotification(input: CreateNotificationInput): Promise<void> {
   try {
     const prefs = await getOrCreatePreferences(input.userId)
-    if (!prefs.categories[input.category]) return
+    const frequency = prefs.categories[input.category]
+    if (!input.force && frequency === 'off') return
 
-    const created = await prisma.notification.create({
-      data: {
-        userId: input.userId,
-        category: input.category,
-        type: input.type,
-        title: input.title,
-        body: input.body,
-        link: input.link,
-      },
-    })
+    const item = await insertNotification(input)
+    if (!item) return
 
-    const item: NotificationItem = {
-      id: created.id,
-      category: created.category as NotificationCategory,
-      type: created.type,
-      title: created.title,
-      body: created.body,
-      link: created.link,
-      readAt: created.readAt ? created.readAt.toISOString() : null,
-      createdAt: created.createdAt.toISOString(),
+    if (input.force || frequency === 'realtime') {
+      notificationBus.emit(input.userId, { kind: 'notification', notification: item })
     }
-    notificationBus.emit(input.userId, { kind: 'notification', notification: item })
   } catch (e) {
     console.error('[notifications] create failed:', e instanceof Error ? e.message : 'unknown')
   }
-}
+}
+
+function formatDigestBody(titles: string[], total: number): string {
+  const lines = titles.slice(0, DIGEST_SUMMARY_ITEMS).map((t) => `· ${t}`)
+  if (total > DIGEST_SUMMARY_ITEMS) {
+    lines.push(`等 ${total} 条通知`)
+  }
+  return lines.join('\n')
+}
+
+/**
+ * 检查并投递到期的 digest（摘要）通知。在用户建立 SSE 连接时调用（fire-and-forget）：
+ * 以同类别最近一条同频率摘要的 createdAt 为水位线，积压通知数 > 0 且距上次摘要超过
+ * 频率周期时，按类别生成一条摘要通知并实时推送。
+ */
+export async function deliverDueDigests(userId: string): Promise<void> {
+  try {
+    const prefs = await getOrCreatePreferences(userId)
+    const digestCats = (Object.keys(prefs.categories) as NotificationCategory[]).filter(
+      (c) => prefs.categories[c] === 'digest-daily' || prefs.categories[c] === 'digest-weekly'
+    )
+    for (const category of digestCats) {
+      const frequency = prefs.categories[category] as 'digest-daily' | 'digest-weekly'
+      const type = DIGEST_TYPE[frequency]
+
+      const lastDigest = await prisma.notification.findFirst({
+        where: { userId, category, type },
+        orderBy: { createdAt: 'desc' },
+        select: { createdAt: true },
+      })
+      if (lastDigest && Date.now() - lastDigest.createdAt.getTime() < DIGEST_MIN_INTERVAL_MS[frequency]) {
+        continue
+      }
+
+      const since = lastDigest?.createdAt ?? new Date(0)
+      const pendingCount = await prisma.notification.count({
+        where: {
+          userId,
+          category,
+          type: { not: { startsWith: 'digest.' } },
+          createdAt: { gt: since },
+        },
+      })
+      if (pendingCount === 0) continue
+
+      const pending = await prisma.notification.findMany({
+        where: {
+          userId,
+          category,
+          type: { not: { startsWith: 'digest.' } },
+          createdAt: { gt: since },
+        },
+        orderBy: { createdAt: 'desc' },
+        select: { title: true },
+        take: DIGEST_SUMMARY_ITEMS,
+      })
+
+      const periodLabel = frequency === 'digest-daily' ? '今日' : '本周'
+      await createNotification({
+        userId,
+        category,
+        type,
+        title: `${periodLabel}${CATEGORY_LABELS[category]}有 ${pendingCount} 条新通知`,
+        body: formatDigestBody(pending.map((n) => n.title), pendingCount),
+        force: true,
+      })
+    }
+  } catch (e) {
+    console.error('[notifications] digest failed:', e instanceof Error ? e.message : 'unknown')
+  }
+}

package/src/server/serverFns/__tests__/project-kb.test.ts

@@ -0,0 +1,147 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { describe, it, expect, vi, beforeEach } from "vitest";
+
+vi.mock("@tanstack/react-start", () => ({
+  createServerFn: (config: any) => {
+    const api: any = {
+      _validator: undefined,
+      validator(schema: any) {
+        this._validator = schema;
+        return this;
+      },
+      handler(fn: Function) {
+        const wrapped = async (args: any) => {
+          let data = args?.data;
+          if (this._validator && data !== undefined) {
+            data = this._validator.parse ? this._validator.parse(data) : data;
+          }
+          return fn({ data });
+        };
+        return wrapped;
+      },
+    };
+    return api;
+  },
+}));
+
+vi.mock("@tanstack/react-start/server", () => ({ getRequest: () => ({}) }));
+
+const mocks = vi.hoisted(() => ({
+  pkbFindMany: vi.fn(),
+  pkbDeleteMany: vi.fn(),
+  pkbCreateMany: vi.fn(),
+  kbFindMany: vi.fn(),
+  projectFindMany: vi.fn(),
+  kbFindFirst: vi.fn(),
+  transaction: vi.fn(),
+  currentSession: vi.fn(),
+}));
+
+vi.mock("@allbluecn/database", () => {
+  const prisma = {
+    projectKnowledgeBase: {
+      findMany: mocks.pkbFindMany,
+      deleteMany: mocks.pkbDeleteMany,
+      createMany: mocks.pkbCreateMany,
+    },
+    knowledgeBase: { findMany: mocks.kbFindMany, findFirst: mocks.kbFindFirst },
+    project: { findMany: mocks.projectFindMany },
+    $transaction: mocks.transaction,
+  };
+  return { prisma, Prisma: {} };
+});
+
+vi.mock("@/server/auth-helpers", () => ({ requireAuth: mocks.currentSession }));
+vi.mock("@/server/permissions", () => ({ requirePermission: vi.fn().mockResolvedValue(undefined) }));
+vi.mock("@/server/audit", () => ({ auditLog: vi.fn() }));
+
+import { setProjectKbsFn, listProjectKbsFn } from "../project";
+import { setKbProjectsFn, listKbProjectsFn } from "../knowledge";
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  mocks.currentSession.mockResolvedValue({ user: { id: "u1" } });
+});
+
+describe("setProjectKbsFn 校验", () => {
+  it("仅接受 team 可见性 KB，非 team 抛错且不写库", async () => {
+    mocks.kbFindMany.mockResolvedValue([{ id: "kb1" }]); // 请求 [kb1(team), kb2(general)] 但只查回 kb1
+    await expect(
+      setProjectKbsFn({ data: { projectId: "p1", kbIds: ["kb1", "kb2"] } }),
+    ).rejects.toMatchObject({ message: expect.stringContaining("仅允许团队可见") });
+    expect(mocks.transaction).not.toHaveBeenCalled();
+  });
+
+  it("全量替换：删差集 + 增新增（事务）", async () => {
+    mocks.kbFindMany.mockResolvedValue([{ id: "kb1" }, { id: "kb2" }]);
+    mocks.transaction.mockImplementation(async (fn: (tx: any) => any) =>
+      fn({
+        projectKnowledgeBase: {
+          deleteMany: mocks.pkbDeleteMany,
+          createMany: mocks.pkbCreateMany,
+        },
+      }),
+    );
+    await setProjectKbsFn({ data: { projectId: "p1", kbIds: ["kb1", "kb2"] } });
+    expect(mocks.pkbDeleteMany).toHaveBeenCalledWith({
+      where: { projectId: "p1", kbId: { notIn: ["kb1", "kb2"] } },
+    });
+    expect(mocks.pkbCreateMany).toHaveBeenCalledWith({
+      data: [
+        { projectId: "p1", kbId: "kb1" },
+        { projectId: "p1", kbId: "kb2" },
+      ],
+      skipDuplicates: true,
+    });
+  });
+});
+
+describe("setKbProjectsFn 校验", () => {
+  it("general KB 拒绝关联", async () => {
+    mocks.kbFindFirst.mockResolvedValue({ id: "kbG", visibility: "general" });
+    await expect(
+      setKbProjectsFn({ data: { kbId: "kbG", projectIds: ["p1"] } }),
+    ).rejects.toMatchObject({ message: expect.stringContaining("通用知识库") });
+  });
+
+  it("private KB 拒绝关联", async () => {
+    mocks.kbFindFirst.mockResolvedValue({ id: "kbP", visibility: "private" });
+    await expect(
+      setKbProjectsFn({ data: { kbId: "kbP", projectIds: ["p1"] } }),
+    ).rejects.toMatchObject({ message: expect.stringContaining("私有知识库") });
+  });
+});
+
+describe("listProjectKbsFn / listKbProjectsFn", () => {
+  it("项目侧返回 KB 概要", async () => {
+    mocks.pkbFindMany.mockResolvedValue([
+      { kb: { id: "kb1", name: "团队库", icon: "notebook", visibility: "team" } },
+    ]);
+    const result = await listProjectKbsFn({ data: { projectId: "p1" } });
+    expect(result[0]).toMatchObject({ id: "kb1", name: "团队库" });
+  });
+
+  it("KB 侧返回项目概要", async () => {
+    mocks.pkbFindMany.mockResolvedValue([
+      { project: { id: "p1", name: "项目A", icon: "folder" } },
+    ]);
+    const result = await listKbProjectsFn({ data: { kbId: "kb1" } });
+    expect(result[0]).toMatchObject({ id: "p1", name: "项目A" });
+  });
+});

package/src/server/serverFns/__tests__/team-invitation.test.ts

@@ -40,8 +40,9 @@ vi.mock('@allbluecn/database', () => ({
       update: vi.fn(),
       count: vi.fn(),
       deleteMany: vi.fn(),
+      delete: vi.fn(),
     },
-    teamJoinRequest: { updateMany: vi.fn(), findMany: vi.fn() },
+    teamJoinRequest: { updateMany: vi.fn(), findMany: vi.fn(), findUnique: vi.fn(), delete: vi.fn() },
     $transaction: vi.fn(),
   },
 }))
@@ -68,16 +69,18 @@ import {
   refreshTeamInvitationLinkFn,
   listTeamInvitationsFn,
   clearExpiredInvitationsFn,
+  deleteTeamInvitationFn,
+  deleteTeamJoinRequestFn,
 } from '../team'
 
 describe('refreshTeamInvitationLinkFn', () => {
   beforeEach(() => vi.clearAllMocks())
 
-  it('生成新链接，删除旧链接', async () => {
+  it('生成新链接，旧链接置 revoked 保留申请历史', async () => {
     vi.mocked(prisma.$transaction).mockImplementation(async (fn: any) => {
       const tx = {
         teamInvitation: {
-          deleteMany: vi.fn().mockResolvedValue({}),
+          updateMany: vi.fn().mockResolvedValue({}),
           create: vi.fn().mockResolvedValue({ id: 'inv-new', token: 'abc123' }),
         },
         teamJoinRequest: {
@@ -97,7 +100,7 @@ describe('refreshTeamInvitationLinkFn', () => {
     vi.mocked(prisma.$transaction).mockImplementation(async (fn: any) => {
       const tx = {
         teamInvitation: {
-          deleteMany: vi.fn().mockResolvedValue({}),
+          updateMany: vi.fn().mockResolvedValue({}),
           create: vi.fn().mockResolvedValue({ id: 'inv-new', token: 'xyz' }),
         },
         teamJoinRequest: {
@@ -114,7 +117,7 @@ describe('refreshTeamInvitationLinkFn', () => {
     vi.mocked(prisma.$transaction).mockImplementation(async (fn: any) => {
       const tx = {
         teamInvitation: {
-          deleteMany: vi.fn().mockResolvedValue({}),
+          updateMany: vi.fn().mockResolvedValue({}),
           create: vi.fn().mockResolvedValue({ id: 'inv-new', token: 'tok' }),
         },
         teamJoinRequest: {
@@ -199,15 +202,78 @@ describe('createTeamInvitationFn link 邀请', () => {
 describe('clearExpiredInvitationsFn', () => {
   beforeEach(() => vi.clearAllMocks())
 
-  it('清除所有过期邀请', async () => {
+  it('清除所有过期邮箱邀请（链接行保留以维持申请历史）', async () => {
     vi.mocked(prisma.teamInvitation.deleteMany).mockResolvedValue({ count: 2 } as never)
     const result = await clearExpiredInvitationsFn({ data: {} })
     expect(result.success).toBe(true)
     expect(result.count).toBe(2)
     expect(prisma.teamInvitation.deleteMany).toHaveBeenCalledWith(
       expect.objectContaining({
-        where: expect.objectContaining({ status: 'expired' }),
+        where: expect.objectContaining({ status: 'expired', channel: 'email' }),
       }),
     )
   })
 })
+
+describe('deleteTeamInvitationFn', () => {
+  beforeEach(() => vi.clearAllMocks())
+
+  it('删除自己的 email 邀请记录', async () => {
+    vi.mocked(prisma.teamInvitation.findUnique).mockResolvedValue({
+      id: 'inv1', ownerId: 'owner1', channel: 'email', email: 'x@y.com',
+    } as never)
+    vi.mocked(prisma.teamInvitation.delete).mockResolvedValue({} as never)
+
+    const result = await deleteTeamInvitationFn({ data: { invitationId: 'inv1' } })
+
+    expect(result.success).toBe(true)
+    expect(prisma.teamInvitation.delete).toHaveBeenCalledWith({ where: { id: 'inv1' } })
+  })
+
+  it('link 渠道邀请禁止删除（防级联删申请）', async () => {
+    vi.mocked(prisma.teamInvitation.findUnique).mockResolvedValue({
+      id: 'inv2', ownerId: 'owner1', channel: 'link',
+    } as never)
+
+    await expect(
+      deleteTeamInvitationFn({ data: { invitationId: 'inv2' } }),
+    ).rejects.toMatchObject({ message: expect.stringContaining('不可删除') })
+    expect(prisma.teamInvitation.delete).not.toHaveBeenCalled()
+  })
+
+  it('他人邀请不可删除', async () => {
+    vi.mocked(prisma.teamInvitation.findUnique).mockResolvedValue({
+      id: 'inv3', ownerId: 'someone-else', channel: 'email',
+    } as never)
+
+    await expect(
+      deleteTeamInvitationFn({ data: { invitationId: 'inv3' } }),
+    ).rejects.toMatchObject({ message: '邀请不存在' })
+    expect(prisma.teamInvitation.delete).not.toHaveBeenCalled()
+  })
+})
+
+describe('deleteTeamJoinRequestFn', () => {
+  beforeEach(() => vi.clearAllMocks())
+
+  it('删除自己的申请记录', async () => {
+    vi.mocked(prisma.teamJoinRequest.findUnique).mockResolvedValue({
+      id: 'jr1', ownerId: 'owner1', email: 'a@b.com', status: 'rejected',
+    } as never)
+    vi.mocked(prisma.teamJoinRequest.delete).mockResolvedValue({} as never)
+
+    const result = await deleteTeamJoinRequestFn({ data: { requestId: 'jr1' } })
+
+    expect(result.success).toBe(true)
+    expect(prisma.teamJoinRequest.delete).toHaveBeenCalledWith({ where: { id: 'jr1' } })
+  })
+
+  it('他人申请不可删除', async () => {
+    vi.mocked(prisma.teamJoinRequest.findUnique).mockResolvedValue(null as never)
+
+    await expect(
+      deleteTeamJoinRequestFn({ data: { requestId: 'jrX' } }),
+    ).rejects.toMatchObject({ message: '申请不存在' })
+    expect(prisma.teamJoinRequest.delete).not.toHaveBeenCalled()
+  })
+})

package/src/server/serverFns/__tests__/team-join-request.test.ts

@@ -246,9 +246,9 @@ describe('getTeamInvitationByTokenFn（link 渠道）', () => {
 describe('refreshTeamInvitationLinkFn', () => {
   beforeEach(() => vi.clearAllMocks())
 
-  it('刷新 → 旧链接 pending 申请全部 invalidated，旧链接删除，新链接创建', async () => {
+  it('刷新 → 旧链接 pending 申请全部 invalidated，旧链接置 revoked 保留历史，新链接创建', async () => {
     vi.mocked(prisma.teamJoinRequest.updateMany).mockResolvedValue({ count: 1 } as never)
-    vi.mocked(prisma.teamInvitation.deleteMany).mockResolvedValue({ count: 1 } as never)
+    vi.mocked(prisma.teamInvitation.updateMany).mockResolvedValue({ count: 1 } as never)
     vi.mocked(prisma.teamInvitation.create).mockResolvedValue({ id: 'inv2', token: 'NEW' } as never)
 
     const res = await refreshTeamInvitationLinkFn({ data: { expiresInDays: 7 } })
@@ -258,9 +258,11 @@ describe('refreshTeamInvitationLinkFn', () => {
       where: expect.objectContaining({ ownerId: 'u2', status: 'pending' }),
       data: expect.objectContaining({ status: 'invalidated' }),
     }))
-    expect(prisma.teamInvitation.deleteMany).toHaveBeenCalledWith(expect.objectContaining({
+    expect(prisma.teamInvitation.updateMany).toHaveBeenCalledWith(expect.objectContaining({
       where: { ownerId: 'u2', channel: 'link', status: { in: ['pending', 'pending_approval'] } },
+      data: { status: 'revoked' },
     }))
+    expect(prisma.teamInvitation.deleteMany).not.toHaveBeenCalled()
     expect(prisma.teamInvitation.create).toHaveBeenCalled()
   })
 })

package/src/server/serverFns/knowledge.ts

@@ -25,6 +25,12 @@ import { deleteEmbeddings } from '@/lib/pgvector'
 import { requirePermission } from '@/server/permissions'
 import { auditLog } from '@/server/audit'
 
+/** 读权限放宽：自己的 KB ∪ 他人 team/general KB */
+const READABLE_KB = (userId: string) => ({
+  isDeleted: false,
+  OR: [{ userId }, { visibility: { in: ['team', 'general'] } }],
+})
+
 export const listKnowledgeFn = createServerFn({ method: 'GET' })
   .validator(z.object({}).optional())
   .handler(async () => {
@@ -51,7 +57,7 @@ const createSchema = z.object({
   description: z.string().max(200).optional(),
   icon: z.string().default('notebook'),
   tags: z.array(z.string()).default([]),
-  visibility: z.enum(['private', 'team']).default('private'),
+  visibility: z.enum(['private', 'team', 'general']).default('private'),
 })
 
 export const createKnowledgeFn = createServerFn({ method: 'POST' })
@@ -95,7 +101,7 @@ export const getKnowledgeDetailFn = createServerFn({ method: 'GET' })
     const request = getRequest()
     const session = await requireAuth(request)
     const kb = await prisma.knowledgeBase.findFirst({
-      where: { id: data.id, userId: session.user!.id!, isDeleted: false },
+      where: { id: data.id, ...READABLE_KB(session.user!.id!) },
       select: { id: true, name: true, description: true, icon: true, tags: true, visibility: true, createdAt: true, updatedAt: true },
     })
     if (!kb) throw new Error('未找到或无权限')
@@ -130,7 +136,7 @@ const updateSchema = z.object({
   description: z.string().max(500).optional(),
   icon: z.string().optional(),
   tags: z.array(z.string()).optional(),
-  visibility: z.enum(['private', 'team']).optional(),
+  visibility: z.enum(['private', 'team', 'general']).optional(),
 })
 
 export const updateKnowledgeFn = createServerFn({ method: 'POST' })
@@ -202,7 +208,7 @@ export const createDocumentFn = createServerFn({ method: 'POST' })
     const userId = session.user!.id!
     await requirePermission(userId, 'knowledge', 'write')
     const kb = await prisma.knowledgeBase.findFirst({
-      where: { id: data.kbId, userId, isDeleted: false },
+      where: { id: data.kbId, ...READABLE_KB(session.user!.id!) },
       select: { id: true },
     })
     if (!kb) throw new Error('未找到或无权限')
@@ -581,3 +587,43 @@ export const getDocumentPreviewFn = createServerFn({ method: 'GET' })
       } : null,
     } satisfies DocumentPreviewData
   })
+
+export const listKbProjectsFn = createServerFn({ method: 'GET' })
+  .validator(z.object({ kbId: z.string() }))
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    const session = await requireAuth(request)
+    const rows = await prisma.projectKnowledgeBase.findMany({
+      where: { kbId: data.kbId },
+      select: { project: { select: { id: true, name: true, icon: true } } },
+      orderBy: { createdAt: 'asc' },
+    })
+    return rows.map((r) => r.project)
+  })
+
+export const setKbProjectsFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ kbId: z.string(), projectIds: z.array(z.string()) }))
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    const session = await requireAuth(request)
+    const userId = session.user!.id!
+    const kb = await prisma.knowledgeBase.findFirst({
+      where: { id: data.kbId, userId, isDeleted: false },
+      select: { visibility: true },
+    })
+    if (!kb) throw new Error('知识库不存在')
+    if (kb.visibility === 'general') throw new Error('通用知识库对所有项目可见，无需关联')
+    if (kb.visibility === 'private') throw new Error('私有知识库不可关联项目，请先切换为团队可见')
+    await prisma.$transaction(async (tx) => {
+      await tx.projectKnowledgeBase.deleteMany({
+        where: { kbId: data.kbId, projectId: { notIn: data.projectIds } },
+      })
+      if (data.projectIds.length > 0) {
+        await tx.projectKnowledgeBase.createMany({
+          data: data.projectIds.map((projectId) => ({ kbId: data.kbId, projectId })),
+          skipDuplicates: true,
+        })
+      }
+    })
+    return { ok: true }
+  })

package/src/server/serverFns/locale.ts

@@ -1,8 +1,20 @@
 import { createServerFn } from '@tanstack/react-start'
-import { getRequest } from '@tanstack/react-start/server'
+import { getRequest, setCookie } from '@tanstack/react-start/server'
 import { detectLocale } from '@/lib/i18n/detect'
 
+/**
+ * 检测用户语言并固化为 lng cookie：
+ * 首次访问（无 cookie）时，SSR 依据 querystring/accept-language 检测出的语言
+ * 写入 cookie，保证客户端 i18n（仅读 querystring/cookie）与服务端同源一致，
+ * 避免 hydration mismatch。
+ */
 export const getLocaleFn = createServerFn({ method: 'GET' }).handler(async () => {
   const request = getRequest()
-  return detectLocale(request, null)
-})
+  const locale = detectLocale(request, null)
+  setCookie('lng', locale, {
+    path: '/',
+    maxAge: 60 * 60 * 24 * 365,
+    sameSite: 'lax',
+  })
+  return locale
+})

package/src/server/serverFns/notifications.ts

@@ -6,10 +6,11 @@ import { prisma } from '@allbluecn/database'
 import { requireAuth } from '@/server/auth-helpers'
 import {
   NOTIFICATION_CATEGORIES,
+  NOTIFICATION_FREQUENCIES,
   type NotificationCategory,
-  type CategoryPreferences,
   type NotificationItem,
   type NotificationListResult,
+  type CategoryFrequencies,
 } from '@allbluecn/shared'
 import {
   getOrCreatePreferences,
@@ -96,6 +97,16 @@ export const deleteNotificationFn = createServerFn({ method: 'POST' })
     return { success: true }
   })
 
+export const clearNotificationsFn = createServerFn({ method: 'POST' })
+  .validator(z.object({}).optional())
+  .handler(async () => {
+    const request = getRequest()
+    const session = await requireAuth(request)
+    const userId = session.user!.id!
+    const result = await prisma.notification.deleteMany({ where: { userId } })
+    return { success: true, count: result.count }
+  })
+
 export const getUnreadCountFn = createServerFn({ method: 'GET' })
   .validator(z.object({}).optional())
   .handler(async () => {
@@ -117,7 +128,7 @@ export const getNotificationPreferencesFn = createServerFn({ method: 'GET' })
   })
 
 const preferencesSchema = z.object({
-  categories: z.record(z.string(), z.boolean()),
+  categories: z.record(z.string(), z.enum(NOTIFICATION_FREQUENCIES)),
   dndEnabled: z.boolean(),
   dndStart: z.string().regex(/^\d{2}:\d{2}$/),
   dndEnd: z.string().regex(/^\d{2}:\d{2}$/),
@@ -131,9 +142,12 @@ export const updateNotificationPreferencesFn = createServerFn({
     const request = getRequest()
     const session = await requireAuth(request)
     const userId = session.user!.id!
-    const categories = { ...DEFAULT_CATEGORIES } as CategoryPreferences
+    const categories = { ...DEFAULT_CATEGORIES } as CategoryFrequencies
     for (const c of NOTIFICATION_CATEGORIES) {
-      if (typeof data.categories[c] === 'boolean') categories[c] = data.categories[c]
+      const v = data.categories[c]
+      if ((NOTIFICATION_FREQUENCIES as readonly string[]).includes(v)) {
+        categories[c] = v as CategoryFrequencies[NotificationCategory]
+      }
     }
     await prisma.notificationPreference.upsert({
       where: { userId },