fix: audit remediation — SSE user scoping, FK transactional safety, UI error handling

- H4: scoped SSE import progress to exact userId match; non-HTTP events excluded from all subscribers
- H2: moved PRAGMA foreign_key_check inside SQLite transaction before COMMIT; violations rollback preserving old tables
- M1: removed dead axios-style error branch from extractErrorMessage (interceptor already unwraps)
- M2: split handleSave try/catch — save errors vs reload errors shown distinctly
- M3: added provider field validation before AI config test request
- Added SSE scoping regression tests (import service + controller)
- Added FK check failure rollback test (database-migrations.spec)
- Updated controller spec expectations for userId parameter

Co-authored-by: Code Review <branch-review>

apps/admin/src/pages/AiConfig/helpers.integration.test.ts

@@ -69,10 +69,10 @@ describe('AiConfig helpers', () => {
   });
 
   describe('extractErrorMessage', () => {
-    it('extracts axios-style response error message', () => {
-      const err = {
-        response: { data: { message: 'API出错' } },
-      };
+    it('extracts message from server error response (interceptor unwraps to { message })', () => {
+      // The Axios interceptor at api/index.ts does Promise.reject(err.response?.data || err).
+      // For server errors, the rejection value is err.response.data — typically { message: '...' }.
+      const err = { message: 'API出错' };
       expect(extractErrorMessage(err)).toBe('API出错');
     });
 

apps/admin/src/pages/AiConfig/helpers.ts

@@ -60,23 +60,17 @@ export function shouldAutoSwapBaseUrl(
   return { baseUrl: currentBaseUrl, shouldSwap: false };
 }
 
-/** Extract a safe user-facing error message from any caught value */
+/** Extract a safe user-facing error message from any caught value.
+ *
+ * The Axios interceptor at `api/index.ts` unwraps errors before rejection:
+ * `Promise.reject(err.response?.data || err)`. So server errors arrive as
+ * `{ message: '...' }` (the unwrapped data) and network errors as the raw
+ * `Error` object — never as a raw AxiosError with a `.response` property. */
 export function extractErrorMessage(err: unknown, fallback: string = '操作失败'): string {
   let msg = '';
 
-  // axios-style error: { response: { data: { message: string } } }
-  if (err && typeof err === 'object' && 'response' in err) {
-    const resp: unknown = err.response;
-    if (resp && typeof resp === 'object' && 'data' in resp) {
-      const data: unknown = resp.data;
-      if (data && typeof data === 'object' && 'message' in data && typeof data.message === 'string') {
-        msg = data.message;
-      }
-    }
-  }
-
   // standard Error or any object with a string message property
-  if (!msg && err && typeof err === 'object' && 'message' in err && typeof err.message === 'string') {
+  if (err && typeof err === 'object' && 'message' in err && typeof err.message === 'string') {
     msg = err.message;
   }
 

apps/admin/src/pages/AiConfig/index.tsx

@@ -173,9 +173,17 @@ const AiConfigPage: React.FC = () => {
       await api.put('/ai/config', body);
       message.success('配置已保存');
       form.setFieldValue('apiKey', '');
-      await loadConfig();
     } catch (err: unknown) {
       message.error(extractErrorMessage(err, '保存失败'));
+      setSaving(false);
+      return;
+    }
+
+    // Reload config from server (non-fatal if it fails)
+    try {
+      await loadConfig();
+    } catch (err: unknown) {
+      message.warning(extractErrorMessage(err, '配置已保存，但刷新失败'));
     } finally {
       setSaving(false);
     }
@@ -186,7 +194,7 @@ const AiConfigPage: React.FC = () => {
   const handleTest = useCallback(async () => {
     try {
       // Validated fields: compatible requires baseUrl
-      const fieldsToValidate = ['timeoutMs'] as string[];
+      const fieldsToValidate = ['provider', 'timeoutMs'] as string[];
       if (currentProvider === 'OPENAI_COMPATIBLE') {
         fieldsToValidate.push('baseUrl');
       }