@allbluecn/web-app 0.5.0 → 0.6.0

package/src/server/serverFns/iteration/iteration-crud.ts

@@ -0,0 +1,208 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { z } from "zod";
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { prisma } from "@allbluecn/database";
+import { requireAuth } from "@/server/auth-helpers";
+import { deriveIterationStatus, isDateRangeOverlapping, toDatePart } from "@/lib/iteration/status";
+import {
+  listIterationsSchema,
+  createIterationSchema,
+  updateIterationSchema,
+  iterationIdSchema,
+  type IterationSummary,
+} from "./schemas";
+import type { StoryState } from "@/components/story/constants";
+import { ensureUpcomingIterations, ensureAutoRollover } from "./auto-schedule-internal";
+
+const ITERATION_SELECT = {
+  id: true,
+  projectId: true,
+  name: true,
+  description: true,
+  startDate: true,
+  endDate: true,
+  archived: true,
+} as const;
+
+/** 与项目内未归档迭代校验日期不重叠（规格 §2.1：约束在 serverFn 层） */
+async function assertNoOverlap(projectId: string, range: { startDate: string; endDate: string }, excludeId?: string) {
+  const siblings = await prisma.iteration.findMany({
+    where: { projectId, archived: false, ...(excludeId ? { id: { not: excludeId } } : {}) },
+    select: { startDate: true, endDate: true },
+  });
+  if (siblings.some((s) => isDateRangeOverlapping(range, { startDate: s.startDate, endDate: s.endDate }))) {
+    throw new Error("迭代日期与现有迭代重叠");
+  }
+}
+
+function toSummary(
+  it: { id: string; name: string; description: string | null; startDate: Date; endDate: Date; archived: boolean },
+  stateCounts: Record<string, number>,
+): IterationSummary {
+  const startDate = toDatePart(it.startDate);
+  const endDate = toDatePart(it.endDate);
+  return {
+    id: it.id,
+    name: it.name,
+    description: it.description,
+    startDate,
+    endDate,
+    archived: it.archived,
+    status: deriveIterationStatus(startDate, endDate),
+    storyCount: Object.values(stateCounts).reduce((a, b) => a + b, 0),
+    stateCounts,
+  };
+}
+
+export const listIterationsFn = createServerFn({ method: "GET" })
+  .validator(listIterationsSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    await requireAuth(request);
+    // 惰性自愈：自动排期补建 + autoRollover（规格 §3.6）
+    await ensureUpcomingIterations(data.projectId);
+    await ensureAutoRollover(data.projectId);
+    const items = await prisma.iteration.findMany({
+      where: { projectId: data.projectId, ...(data.includeArchived ? {} : { archived: false }) },
+      orderBy: { startDate: "desc" },
+      select: ITERATION_SELECT,
+    });
+    const grouped = await prisma.story.groupBy({
+      by: ["iterationId", "state"],
+      where: { iterationId: { in: items.map((i) => i.id) } },
+      _count: { _all: true },
+    });
+    const counts = new Map<string, Record<string, number>>();
+    for (const g of grouped) {
+      if (!g.iterationId) continue;
+      const m = counts.get(g.iterationId) ?? {};
+      m[g.state] = g._count._all;
+      counts.set(g.iterationId, m);
+    }
+    return { items: items.map((i) => toSummary(i, counts.get(i.id) ?? {})) };
+  });
+
+export const getIterationFn = createServerFn({ method: "GET" })
+  .validator(iterationIdSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    await requireAuth(request);
+    const it = await prisma.iteration.findUnique({ where: { id: data.id }, select: ITERATION_SELECT });
+    if (!it) throw new Error("迭代不存在");
+    const grouped = await prisma.story.groupBy({
+      by: ["state"],
+      where: { iterationId: data.id },
+      _count: { _all: true },
+    });
+    const stateCounts = Object.fromEntries(grouped.map((g) => [g.state, g._count._all]));
+    return toSummary(it, stateCounts);
+  });
+
+export const createIterationsFn = createServerFn({ method: "POST" })
+  .validator(createIterationSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    await assertNoOverlap(data.projectId, data);
+    const created = await prisma.iteration.create({
+      data: {
+        projectId: data.projectId,
+        name: data.name,
+        description: data.description,
+        startDate: new Date(data.startDate + "T00:00:00.000Z"),
+        endDate: new Date(data.endDate + "T00:00:00.000Z"),
+        createdById: session.user!.id!,
+      },
+      select: { id: true },
+    });
+    return { id: created.id };
+  });
+
+export const updateIterationsFn = createServerFn({ method: "POST" })
+  .validator(updateIterationSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    await requireAuth(request);
+    const existing = await prisma.iteration.findUnique({ where: { id: data.id }, select: ITERATION_SELECT });
+    if (!existing) throw new Error("迭代不存在");
+    const next = {
+      startDate: data.startDate ?? toDatePart(existing.startDate),
+      endDate: data.endDate ?? toDatePart(existing.endDate),
+    };
+    if (next.startDate > next.endDate) throw new Error("结束日期不能早于开始日期");
+    // completed 锁定编辑（规格 §3.1）
+    if (deriveIterationStatus(next.startDate, next.endDate) === "completed") {
+      throw new Error("已完成的迭代不可编辑");
+    }
+    if (data.startDate || data.endDate) await assertNoOverlap(existing.projectId, next, data.id);
+    await prisma.iteration.update({
+      where: { id: data.id },
+      data: {
+        ...(data.name !== undefined ? { name: data.name } : {}),
+        ...(data.description !== undefined ? { description: data.description } : {}),
+        ...(data.startDate ? { startDate: new Date(next.startDate + "T00:00:00.000Z") } : {}),
+        ...(data.endDate ? { endDate: new Date(next.endDate + "T00:00:00.000Z") } : {}),
+      },
+    });
+    return { ok: true };
+  });
+
+export const archiveIterationsFn = createServerFn({ method: "POST" })
+  .validator(z.object({ id: z.string(), archived: z.boolean() }))
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    await requireAuth(request);
+    await prisma.iteration.update({
+      where: { id: data.id },
+      data: { archived: data.archived, archivedAt: data.archived ? new Date() : null },
+    });
+    return { ok: true };
+  });
+
+export const deleteIterationsFn = createServerFn({ method: "POST" })
+  .validator(iterationIdSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    await requireAuth(request);
+    await prisma.iteration.delete({ where: { id: data.id } }); // Story.iterationId SetNull 自动解绑
+    return { ok: true };
+  });
+
+const USER_BRIEF_SELECT = {
+  id: true, username: true, email: true, avatarConfig: true, bgShape: true, bgColor: true,
+} as const;
+
+const listIterationStoriesSchema = z.object({ iterationId: z.string() });
+
+export const listIterationStoriesFn = createServerFn({ method: "GET" })
+  .validator(listIterationStoriesSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    await requireAuth(request);
+    const stories = await prisma.story.findMany({
+      where: { iterationId: data.iterationId, archived: false },
+      orderBy: [{ state: "asc" }, { updatedAt: "desc" }],
+      select: {
+        id: true, identifier: true, name: true, state: true, priority: true,
+        assignee: { select: USER_BRIEF_SELECT },
+      },
+    });
+    return { items: stories.map((s) => ({ ...s, state: s.state as StoryState })) };
+  });

package/src/server/serverFns/iteration/iteration-stories.ts

@@ -0,0 +1,111 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import { prisma } from "@allbluecn/database";
+import { requireAuth } from "@/server/auth-helpers";
+import { deriveIterationStatus, toDatePart } from "@/lib/iteration/status";
+
+/** 目标迭代必须可加入：存在、未归档、非 completed（规格 §3.2） */
+async function assertTargetJoinable(iterationId: string) {
+  const it = await prisma.iteration.findUnique({
+    where: { id: iterationId },
+    select: { startDate: true, endDate: true, archived: true, name: true },
+  });
+  if (!it || it.archived) throw new Error("迭代不存在");
+  if (deriveIterationStatus(toDatePart(it.startDate), toDatePart(it.endDate)) === "completed") {
+    throw new Error("不能将需求加入已完成的迭代");
+  }
+  return it.name;
+}
+
+export const setStoryIterationFn = createServerFn({ method: "POST" })
+  .validator(z.object({ storyId: z.string(), iterationId: z.string().nullable() }))
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const story = await prisma.story.findUnique({
+      where: { id: data.storyId },
+      select: { iterationId: true, iteration: { select: { name: true } } },
+    });
+    if (!story) throw new Error("需求不存在");
+    let newName: string | null = null;
+    if (data.iterationId) newName = await assertTargetJoinable(data.iterationId);
+    await prisma.story.update({ where: { id: data.storyId }, data: { iterationId: data.iterationId } });
+    await prisma.storyActivity.create({
+      data: {
+        storyId: data.storyId,
+        userId: session.user!.id!,
+        action: "iteration_changed",
+        field: "iterationId",
+        oldValue: story.iteration?.name ?? null,
+        newValue: newName,
+      },
+    });
+    return { ok: true };
+  });
+
+export const addStoriesToIterationFn = createServerFn({ method: "POST" })
+  .validator(z.object({ iterationId: z.string(), storyIds: z.array(z.string()).min(1).max(200) }))
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const newName = await assertTargetJoinable(data.iterationId);
+    const { count } = await prisma.story.updateMany({
+      where: { id: { in: data.storyIds } },
+      data: { iterationId: data.iterationId },
+    });
+    await prisma.storyActivity.createMany({
+      data: data.storyIds.map((storyId) => ({
+        storyId,
+        userId: session.user!.id!,
+        action: "iteration_changed",
+        field: "iterationId",
+        newValue: newName,
+      })),
+    });
+    return { count };
+  });
+
+export const removeStoryFromIterationFn = createServerFn({ method: "POST" })
+  .validator(z.object({ storyId: z.string() }))
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const story = await prisma.story.findUnique({
+      where: { id: data.storyId },
+      select: { iterationId: true, iteration: { select: { name: true } } },
+    });
+    if (!story?.iterationId) return { ok: true };
+    await prisma.story.updateMany({
+      where: { id: data.storyId, iterationId: story.iterationId },
+      data: { iterationId: null },
+    });
+    await prisma.storyActivity.create({
+      data: {
+        storyId: data.storyId,
+        userId: session.user!.id!,
+        action: "iteration_changed",
+        field: "iterationId",
+        oldValue: story.iteration?.name ?? null,
+        newValue: null,
+      },
+    });
+    return { ok: true };
+  });

package/src/server/serverFns/iteration/iteration-transfer.ts

@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import { requireAuth } from "@/server/auth-helpers";
+import { transferStoriesInternal } from "./transfer-internal";
+
+export const transferUnfinishedSchema = z.object({
+  iterationId: z.string(),
+  targetIterationId: z.string(),
+  storyIds: z.array(z.string()).optional(),
+});
+
+export const transferUnfinishedFn = createServerFn({ method: "POST" })
+  .validator(transferUnfinishedSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    const session = await requireAuth(request);
+    const count = await transferStoriesInternal(
+      data.iterationId,
+      data.targetIterationId,
+      data.storyIds,
+      session.user!.id!,
+    );
+    return { count };
+  });

package/src/server/serverFns/iteration/schemas.ts

@@ -0,0 +1,58 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { z } from "zod";
+
+/** yyyy-MM-dd 校验 */
+export const dateOnly = z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "日期格式应为 yyyy-MM-dd");
+
+export const dateRange = z
+  .object({ startDate: dateOnly, endDate: dateOnly })
+  .refine((v) => v.startDate <= v.endDate, { message: "结束日期不能早于开始日期" });
+
+export const listIterationsSchema = z.object({
+  projectId: z.string(),
+  includeArchived: z.boolean().default(false),
+});
+
+export const createIterationSchema = dateRange.extend({
+  projectId: z.string(),
+  name: z.string().min(1).max(100),
+  description: z.string().max(20000).optional(),
+});
+
+export const updateIterationSchema = z.object({
+  id: z.string(),
+  name: z.string().min(1).max(100).optional(),
+  description: z.string().max(20000).optional(),
+  startDate: dateOnly.optional(),
+  endDate: dateOnly.optional(),
+});
+
+export const iterationIdSchema = z.object({ id: z.string() });
+
+export type IterationSummary = {
+  id: string;
+  name: string;
+  description: string | null;
+  startDate: string;
+  endDate: string;
+  archived: boolean;
+  status: "upcoming" | "active" | "completed";
+  storyCount: number;
+  stateCounts: Record<string, number>;
+};

package/src/server/serverFns/iteration/transfer-internal.ts

@@ -0,0 +1,62 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { prisma } from "@allbluecn/database";
+import { deriveIterationStatus, toDatePart } from "@/lib/iteration/status";
+
+/** 内部复用（用户勾选路径 + autoRollover）：目标校验 + 幂等 where 批量转移（规格 §3.5） */
+export async function transferStoriesInternal(
+  sourceIterationId: string,
+  targetIterationId: string,
+  storyIds?: string[],
+  userId?: string,
+): Promise<number> {
+  const target = await prisma.iteration.findUnique({
+    where: { id: targetIterationId },
+    select: { startDate: true, endDate: true, archived: true, name: true, projectId: true },
+  });
+  if (!target || target.archived) throw new Error("迭代不存在");
+  if (deriveIterationStatus(toDatePart(target.startDate), toDatePart(target.endDate)) === "completed") {
+    throw new Error("不能将需求加入已完成的迭代");
+  }
+  const unfinished = await prisma.story.findMany({
+    where: {
+      iterationId: sourceIterationId,
+      state: { notIn: ["done", "cancelled"] },
+      ...(storyIds ? { id: { in: storyIds } } : {}),
+    },
+    select: { id: true },
+  });
+  if (unfinished.length === 0) return 0;
+  const ids = unfinished.map((s) => s.id);
+  let actorId = userId;
+  if (!actorId) {
+    const owner = await prisma.project.findUnique({ where: { id: target.projectId }, select: { ownerId: true } });
+    actorId = owner!.ownerId!;
+  }
+  await prisma.story.updateMany({ where: { id: { in: ids } }, data: { iterationId: targetIterationId } });
+  await prisma.storyActivity.createMany({
+    data: ids.map((storyId) => ({
+      storyId,
+      userId: actorId,
+      action: "iteration_changed",
+      field: "iterationId",
+      newValue: target.name,
+    })),
+  });
+  return ids.length;
+}

package/src/server/serverFns/knowledge.ts

@@ -25,6 +25,12 @@ import { deleteEmbeddings } from '@/lib/pgvector'
 import { requirePermission } from '@/server/permissions'
 import { auditLog } from '@/server/audit'
 
+/** 读权限放宽：自己的 KB ∪ 他人 team/general KB */
+const READABLE_KB = (userId: string) => ({
+  isDeleted: false,
+  OR: [{ userId }, { visibility: { in: ['team', 'general'] } }],
+})
+
 export const listKnowledgeFn = createServerFn({ method: 'GET' })
   .validator(z.object({}).optional())
   .handler(async () => {
@@ -51,7 +57,7 @@ const createSchema = z.object({
   description: z.string().max(200).optional(),
   icon: z.string().default('notebook'),
   tags: z.array(z.string()).default([]),
-  visibility: z.enum(['private', 'team']).default('private'),
+  visibility: z.enum(['private', 'team', 'general']).default('private'),
 })
 
 export const createKnowledgeFn = createServerFn({ method: 'POST' })
@@ -95,7 +101,7 @@ export const getKnowledgeDetailFn = createServerFn({ method: 'GET' })
     const request = getRequest()
     const session = await requireAuth(request)
     const kb = await prisma.knowledgeBase.findFirst({
-      where: { id: data.id, userId: session.user!.id!, isDeleted: false },
+      where: { id: data.id, ...READABLE_KB(session.user!.id!) },
       select: { id: true, name: true, description: true, icon: true, tags: true, visibility: true, createdAt: true, updatedAt: true },
     })
     if (!kb) throw new Error('未找到或无权限')
@@ -130,7 +136,7 @@ const updateSchema = z.object({
   description: z.string().max(500).optional(),
   icon: z.string().optional(),
   tags: z.array(z.string()).optional(),
-  visibility: z.enum(['private', 'team']).optional(),
+  visibility: z.enum(['private', 'team', 'general']).optional(),
 })
 
 export const updateKnowledgeFn = createServerFn({ method: 'POST' })
@@ -202,7 +208,7 @@ export const createDocumentFn = createServerFn({ method: 'POST' })
     const userId = session.user!.id!
     await requirePermission(userId, 'knowledge', 'write')
     const kb = await prisma.knowledgeBase.findFirst({
-      where: { id: data.kbId, userId, isDeleted: false },
+      where: { id: data.kbId, ...READABLE_KB(session.user!.id!) },
       select: { id: true },
     })
     if (!kb) throw new Error('未找到或无权限')
@@ -581,3 +587,43 @@ export const getDocumentPreviewFn = createServerFn({ method: 'GET' })
       } : null,
     } satisfies DocumentPreviewData
   })
+
+export const listKbProjectsFn = createServerFn({ method: 'GET' })
+  .validator(z.object({ kbId: z.string() }))
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    const session = await requireAuth(request)
+    const rows = await prisma.projectKnowledgeBase.findMany({
+      where: { kbId: data.kbId },
+      select: { project: { select: { id: true, name: true, icon: true } } },
+      orderBy: { createdAt: 'asc' },
+    })
+    return rows.map((r) => r.project)
+  })
+
+export const setKbProjectsFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ kbId: z.string(), projectIds: z.array(z.string()) }))
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    const session = await requireAuth(request)
+    const userId = session.user!.id!
+    const kb = await prisma.knowledgeBase.findFirst({
+      where: { id: data.kbId, userId, isDeleted: false },
+      select: { visibility: true },
+    })
+    if (!kb) throw new Error('知识库不存在')
+    if (kb.visibility === 'general') throw new Error('通用知识库对所有项目可见，无需关联')
+    if (kb.visibility === 'private') throw new Error('私有知识库不可关联项目，请先切换为团队可见')
+    await prisma.$transaction(async (tx) => {
+      await tx.projectKnowledgeBase.deleteMany({
+        where: { kbId: data.kbId, projectId: { notIn: data.projectIds } },
+      })
+      if (data.projectIds.length > 0) {
+        await tx.projectKnowledgeBase.createMany({
+          data: data.projectIds.map((projectId) => ({ kbId: data.kbId, projectId })),
+          skipDuplicates: true,
+        })
+      }
+    })
+    return { ok: true }
+  })

package/src/server/serverFns/project/module-overview.ts

@@ -0,0 +1,109 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from "@tanstack/react-start";
+import { getRequest } from "@tanstack/react-start/server";
+import { z } from "zod";
+import { prisma } from "@allbluecn/database";
+import { requireAuth } from "@/server/auth-helpers";
+
+const projectIdSchema = z.object({ projectId: z.string().min(1) });
+
+const moduleStorySchema = z.object({
+  id: z.string(),
+  title: z.string(),
+  state: z.string(),
+  priority: z.string(),
+  assignee: z.string().nullable().optional(),
+  updatedAt: z.string(),
+});
+
+export type ModuleStoryItem = z.infer<typeof moduleStorySchema>;
+
+export const getModuleOverviewFn = createServerFn({ method: "GET" })
+  .validator(projectIdSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    await requireAuth(request);
+
+    const [storyAgg, prdLinks] = await Promise.all([
+      prisma.story.aggregate({
+        where: { projectId: data.projectId, archived: false },
+        _count: { _all: true },
+        _max: { updatedAt: true },
+      }),
+      prisma.storyPrdLink.findMany({
+        where: { story: { projectId: data.projectId } },
+        select: { prdId: true, createdAt: true },
+      }),
+    ]);
+
+    const prdCount = new Set(prdLinks.map((l) => l.prdId)).size;
+    const prdLastUpdated =
+      prdLinks.length > 0
+        ? prdLinks.reduce<Date>(
+            (max, l) => (l.createdAt > max ? l.createdAt : max),
+            prdLinks[0]!.createdAt,
+          )
+        : null;
+
+    // testcase / bug / acceptance 暂无独立数据模型，真实空值
+    return {
+      requirement: {
+        count: storyAgg._count._all,
+        lastUpdatedAt: storyAgg._max.updatedAt?.toISOString() ?? null,
+      },
+      prd: {
+        count: prdCount,
+        lastUpdatedAt: prdLastUpdated?.toISOString() ?? null,
+      },
+      design: { count: 0, lastUpdatedAt: null },
+      testcase: { count: 0, lastUpdatedAt: null },
+      bug: { count: 0, lastUpdatedAt: null },
+      acceptance: { count: 0, lastUpdatedAt: null },
+    };
+  });
+
+export const listModuleStoriesFn = createServerFn({ method: "GET" })
+  .validator(projectIdSchema)
+  .handler(async ({ data }) => {
+    const request = getRequest();
+    await requireAuth(request);
+    const stories = await prisma.story.findMany({
+      where: { projectId: data.projectId, archived: false },
+      orderBy: { updatedAt: "desc" },
+      take: 100,
+      select: {
+        id: true,
+        name: true,
+        state: true,
+        priority: true,
+        updatedAt: true,
+        assignee: { select: { username: true } },
+      },
+    });
+    return {
+      items: stories.map((s) => ({
+        id: s.id,
+        title: s.name,
+        state: s.state,
+        priority: s.priority,
+        assignee: s.assignee?.username ?? null,
+        updatedAt: s.updatedAt.toISOString(),
+      })),
+    };
+  });