💻 Change Type

• ✨ feat

🔗 Related Issue

Rebased version of #13977 on top of latest canary.

🔀 Description of Change

This is a rebased + single-squashed commit replacing #13977 after canary absorbed the workspace backend service slice (ccb33fa) and the extract server into apps/server refactor (1a4005c). 32 conflicts resolved:

• 17 AA: identical content (path-shift artifacts), staged as-is
• 5 DU: canary already ports the workspace scoping to apps/server/ new paths → stale src/server/ paths dropped
• 1 UA: branch-only test → accepted
• 9 UU (content): resolved by taking the canary side where it already includes a superset of the branch change (ModelRuntime, agentBuilder, agent.ts, benchmark.ts, file.ts, usage.ts, Header/index.tsx), and merging both sides for PageEditor.tsx (canary's overrideStyles + branch's canEdit cursor) and Topic/List/Item/index.tsx (canary's showWorkingDirectory + branch's workspace-aware href)

Notes:

• AiProviderModel / AiInfraRepos stay personal-scoped per the canary NOTE deferring workspace-scoped ai_infra to LOBE-10056
• Branch-local openPublishConfirmModal abstraction in Header/index.tsx is dropped in favor of canary's confirmModal({ onOk })
• Type-check has not been run yet — needs verification before un-drafting

⚠️ Possibly-Affected Files (rebase risk surface)

991 files changed total. The list below isolates files where rebase decisions were made by hand — these are the most likely places for regressions and warrant focused review.

🔴 High risk — content conflicts resolved by hand (UU, 9 files)

Each had divergent edits on both sides; the chosen side may have dropped a branch-specific behavior.

• apps/server/src/modules/ModelRuntime/index.ts — kept canary (AiProviderModel stays personal-scoped per LOBE-10056 NOTE; branch's workspaceId arg dropped)
• apps/server/src/routers/lambda/usage.ts — kept canary (ctx.workspaceId ?? undefined, more null-safe than branch's raw ctx.workspaceId)
• apps/server/src/services/toolExecution/serverRuntimes/agentBuilder.ts — kept canary (AiInfraRepos NOT workspace-scoped, AgentModel/PluginModel are)
• packages/database/src/models/agent.ts — kept canary's deterministic ID-then-slug getAgentConfig (uses this.ownership())
• packages/database/src/models/agentEval/benchmark.ts — kept canary's this.ownership() (dropped branch's this.mutableOwnership() — verify whether viewer-role write gating is needed here)
• packages/database/src/models/file.ts — kept canary's SandboxInitFileItem interface (superset of branch's workspace import only)
• src/features/PageEditor/PageEditor.tsx — merged both: canary's overrideStyles table-bleed + branch's canEdit cursor/focus gating
• src/routes/(main)/agent/_layout/Sidebar/Topic/List/Item/index.tsx — merged both: canary's showWorkingDirectory prop + branch's buildWorkspaceAwarePath workspace-aware href
• src/routes/(main)/agent/profile/features/Header/index.tsx — kept canary's confirmModal({ onOk }) + signIn('publish'); dropped branch's openPublishConfirmModal abstraction (see orphan below)

🟠 Medium risk — branch edits to a path canary deleted (DU, 5 files)

Branch's edits to src/server/... and src/locales/default/... were discarded on the assumption that canary's new paths already carry the same workspace scoping. Verify each new path actually includes the branch's intent.

🟡 Low risk — identical-content double-add (AA, 17 files)

Both sides added the same file with the same SHA; no decision was needed. Listed for completeness — if any later edit on canary diverges from the branch's intent these would be the seams.

Workspace stubs:

• packages/business-server/src/lambda-routers/workspace.ts
• packages/business-server/src/lambda-routers/workspaceAuditLog.ts
• packages/business-server/src/lambda-routers/workspaceCredits.ts
• packages/business-server/src/lambda-routers/workspaceData.ts
• packages/business-server/src/lambda-routers/workspaceMember.ts
• packages/business-server/src/lambda-routers/workspaceUsage.ts
• packages/business-server/src/trpc-middlewares/rbacPermission.ts
• packages/business-server/src/trpc-middlewares/workspaceAuth.ts
• packages/business-server/src/trpc-middlewares/workspaceContext.ts

Tests / utils:

• apps/server/src/routers/async/__tests__/ragEval.test.ts
• apps/server/src/routers/lambda/__tests__/knowledgeBase.test.ts
• apps/server/src/routers/lambda/market/agent.test.ts
• apps/server/src/routers/lambda/market/agentGroup.test.ts
• apps/server/src/routers/lambda/market/socialProfile.test.ts
• apps/server/src/services/toolExecution/serverRuntimes/__tests__/agentSignalSkillManagement.test.ts
• apps/server/src/services/toolExecution/serverRuntimes/__tests__/lobeAgentPlan.test.ts
• apps/server/src/workflows/agentEvalRun/utils.ts

Branch-only test (UA, 1 file):

• apps/server/src/modules/ModelRuntime/initFromDB.test.ts

🧹 Orphan to clean up

• src/routes/(main)/agent/profile/features/Header/PublishConfirmModal.tsx — added by the branch; its sole importer was removed in the Header/index.tsx resolution. Now has zero references. Safe to delete in a follow-up commit.

🧪 How to Test

• bun run type-check from repo root (not yet run)
• Manual smoke:
  • Topic href in workspace context → should include workspace slug (Sidebar/Topic/List/Item)
  • Page editor under viewer role → cursor should be not-allowed, click should not focus editor
  • Video/image/knowledgeBase routers → confirm workspace-scoped queries via the apps/server/ paths
  • Agent profile market-publish flow → confirmModal opens, signIn('publish') is the auth path
• Run impacted test files: bunx vitest run --silent='passed-only' apps/server/src/modules/ModelRuntime apps/server/src/routers/lambda/usage packages/database/src/models/agent

Closes #13977 once merged.