@aalis/plugin-webui-server 0.1.0

package/README.md

@@ -0,0 +1,21 @@
+# @aalis/plugin-webui-server
+
+运行时插件
+
+## 角色
+
+运行时插件
+
+## 安装
+
+```bash
+pnpm add @aalis/plugin-webui-server
+```
+
+## 文档
+
+详见 [docs/plugins/plugin-webui-server.md](../../docs/plugins/plugin-webui-server.md)。
+
+## 许可
+
+见仓库根目录 LICENSE。

package/dist/auth.d.ts

@@ -0,0 +1,43 @@
+import type { IncomingMessage } from 'node:http';
+import type { Logger } from '@aalis/core';
+import type { UserIdentity } from '@aalis/plugin-authority-api';
+import type { ProcessService } from '@aalis/plugin-process-api';
+import type { RequestHandler } from 'express';
+/**
+ * 账户校验器 —— auth 系统对 authority 服务的最小依赖面。
+ *
+ * 以函数注入而非服务引用，调用方应惰性解析（authority 可能晚于 webui-server
+ * 激活或被热替换）。
+ */
+export interface AccountVerifier {
+    /** 校验账户密码（无账户/不匹配均 false） */
+    verify(username: string, password: string): boolean | Promise<boolean>;
+    /** 是否存在任何可登录账户（决定登录页是否显示账户表单） */
+    hasAccounts(): boolean;
+}
+export interface AuthSystem {
+    /** Express 中间件：处理 ?token= 重定向、登录端点、未认证拦截、登录页 */
+    middleware: RequestHandler;
+    /** 校验 WebSocket 升级请求是否已认证（cookie 读取） */
+    verifyWsClient(req: IncomingMessage): boolean;
+    /**
+     * 解析请求的调用者身份：账户 session → `webui:<username>`；
+     * 单 token 模式 → `webui:console`（owner 级，单人模式语义）；未认证 → undefined。
+     */
+    identify(req: Pick<IncomingMessage, 'headers'>): UserIdentity | undefined;
+}
+/**
+ * 创建认证系统：账户 session + 单 token 双模式。
+ *
+ * - 账户登录（username/password）→ 服务端随机 session（内存表，重启失效），
+ *   cookie `aalis_webui_session`，身份为 `webui:<username>`
+ * - token 登录（向后兼容的单人模式）→ cookie `aalis_webui_token`，身份 `webui:console`
+ * - 两者并存时 session 身份优先
+ */
+export declare function createAuthSystem(token: string, logger: Logger, accounts?: AccountVerifier, tokenLogin?: () => boolean): AuthSystem;
+/**
+ * 跨平台打开默认浏览器到指定 URL（无外部依赖）
+ * 失败静默；此为便利功能，不影响服务启动。
+ */
+export declare function openBrowser(url: string, proc: ProcessService): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAuG9C;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,iCAAiC;IACjC,WAAW,IAAI,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,gDAAgD;IAChD,UAAU,EAAE,cAAc,CAAC;IAC3B,wCAAwC;IACxC,cAAc,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,GAAG,YAAY,GAAG,SAAS,CAAC;CAC3E;AAWD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,eAAe,EAC1B,UAAU,GAAE,MAAM,OAAoB,GACrC,UAAU,CAwJZ;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CAenE"}

package/dist/auth.js

@@ -0,0 +1,279 @@
+const TOKEN_COOKIE = 'aalis_webui_token';
+const SESSION_COOKIE = 'aalis_webui_session';
+function parseCookieValue(header, name) {
+    if (!header)
+        return undefined;
+    for (const pair of header.split(';')) {
+        const eq = pair.indexOf('=');
+        if (eq < 0)
+            continue;
+        const k = pair.slice(0, eq).trim();
+        if (k === name) {
+            try {
+                return decodeURIComponent(pair.slice(eq + 1).trim());
+            }
+            catch {
+                return undefined;
+            }
+        }
+    }
+    return undefined;
+}
+function buildSetCookie(name, value, maxAgeSec) {
+    return `${name}=${encodeURIComponent(value)}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${maxAgeSec}`;
+}
+function buildClearCookie(name) {
+    return `${name}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0`;
+}
+/**
+ * 登录页：自包含 HTML，不引入外部资源。
+ *
+ * 存在账户时默认显示「账户登录」表单（用户名+密码），token 登录折叠为次选
+ * （tokenMode=disabled 时整体隐藏）；无账户时只显示 token 表单（兜底，防锁死）。
+ * 两种提交都打 POST /api/auth/login。
+ */
+function loginPageHtml(hasAccounts, showToken, reason) {
+    const note = reason ? `<p class="note">${escapeHtml(reason)}</p>` : '';
+    const tokenDetails = showToken
+        ? `<details style="margin-top:14px"><summary>使用访问 token 登录</summary>
+<input id="t" type="password" autocomplete="off" placeholder="访问 token" style="margin-top:8px">
+<button type="button" id="tb" style="background:#2a3038">Token 登录</button>
+</details>`
+        : '';
+    const accountForm = hasAccounts
+        ? `<input id="u" type="text" autocomplete="username" placeholder="用户名" autofocus required>
+<input id="p" type="password" autocomplete="current-password" placeholder="密码" required style="margin-top:8px">
+<button type="submit" id="b">登录</button>
+${tokenDetails}`
+        : `<p>请输入启动日志或 data/webui/access.txt 中显示的访问 token。</p>
+<input id="t" type="password" autocomplete="off" placeholder="访问 token" autofocus required>
+<button type="submit" id="b">登录</button>`;
+    return `<!DOCTYPE html><html lang="zh-CN"><head>
+<meta charset="utf-8"><title>Aalis WebUI 登录</title>
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<style>
+:root{color-scheme:light dark}
+*{box-sizing:border-box}
+body{margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;background:#0b0d10;color:#e6e8eb}
+.card{width:min(420px,90vw);padding:32px;background:#16191d;border:1px solid #262b32;border-radius:12px;box-shadow:0 12px 36px rgba(0,0,0,.4)}
+h1{margin:0 0 8px;font-size:22px;font-weight:600}
+p{margin:0 0 16px;color:#8b95a1;font-size:14px;line-height:1.5}
+p.note{color:#ffb300}
+summary{color:#8b95a1;font-size:13px;cursor:pointer}
+input{width:100%;padding:10px 12px;font-size:14px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;background:#0b0d10;color:#e6e8eb;border:1px solid #2a3038;border-radius:6px;outline:none}
+input:focus{border-color:#5b8def}
+button{width:100%;margin-top:12px;padding:10px;font-size:14px;font-weight:500;background:#5b8def;color:#fff;border:0;border-radius:6px;cursor:pointer}
+button:hover{filter:brightness(1.08)}
+button:disabled{opacity:.5;cursor:wait}
+.err{margin-top:10px;color:#ff6b6b;font-size:13px;min-height:18px}
+</style></head>
+<body><form class="card" id="f">
+<h1>Aalis WebUI</h1>
+${note}
+${accountForm}
+<div class="err" id="e"></div>
+</form>
+<script>
+const $=id=>document.getElementById(id);
+const f=$('f'),e=$('e');
+async function login(body,btn){
+  e.textContent='';btn.disabled=true;
+  try{
+    const r=await fetch('/api/auth/login',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(body)});
+    if(r.ok){location.replace('/');}else{const j=await r.json().catch(()=>({}));e.textContent=j.error||'登录失败';btn.disabled=false;}
+  }catch(err){e.textContent='网络错误';btn.disabled=false;}
+}
+f.addEventListener('submit',ev=>{
+  ev.preventDefault();
+  const u=$('u'),t=$('t');
+  if(u&&u.value.trim()){login({username:u.value.trim(),password:$('p').value},$('b'));}
+  else if(t&&t.value.trim()){login({token:t.value.trim()},$('b'));}
+});
+const tb=$('tb');
+if(tb)tb.addEventListener('click',()=>{const t=$('t');if(t.value.trim())login({token:t.value.trim()},tb);});
+</script></body></html>`;
+}
+function escapeHtml(s) {
+    return s.replace(/[&<>"']/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
+}
+const MAX_FAILURES = 5;
+const LOCK_MS = 60_000;
+/**
+ * 创建认证系统：账户 session + 单 token 双模式。
+ *
+ * - 账户登录（username/password）→ 服务端随机 session（内存表，重启失效），
+ *   cookie `aalis_webui_session`，身份为 `webui:<username>`
+ * - token 登录（向后兼容的单人模式）→ cookie `aalis_webui_token`，身份 `webui:console`
+ * - 两者并存时 session 身份优先
+ */
+export function createAuthSystem(token, logger, accounts, tokenLogin = () => true) {
+    const cookieMaxAge = 30 * 24 * 3600; // 30d；进程重启 token 轮换/session 表清空后无效
+    const sessions = new Map();
+    const failures = new Map();
+    /** token 登录是否可用：宿主开关（tokenMode!=disabled）|| 无账户兜底（防锁死） */
+    function tokenAllowed() {
+        return tokenLogin() || !(accounts?.hasAccounts() ?? false);
+    }
+    function newSession(username) {
+        // 顺带清扫过期 session（登录是低频操作，无需独立 timer——审计 MEDIUM #10）
+        const now = Date.now();
+        for (const [id, s] of sessions)
+            if (s.expiresAt <= now)
+                sessions.delete(id);
+        const id = Buffer.from(crypto.getRandomValues(new Uint8Array(24))).toString('hex');
+        sessions.set(id, { username, expiresAt: now + cookieMaxAge * 1000 });
+        return id;
+    }
+    function sessionUser(req) {
+        const id = parseCookieValue(req.headers.cookie, SESSION_COOKIE);
+        if (!id)
+            return undefined;
+        const s = sessions.get(id);
+        if (!s)
+            return undefined;
+        if (s.expiresAt <= Date.now()) {
+            sessions.delete(id);
+            return undefined;
+        }
+        return s.username;
+    }
+    function tokenAuthed(req) {
+        if (!tokenAllowed())
+            return false;
+        const cookieToken = parseCookieValue(req.headers.cookie, TOKEN_COOKIE);
+        return !!cookieToken && cookieToken === token;
+    }
+    function identify(req) {
+        const username = sessionUser(req);
+        if (username)
+            return { platform: 'webui', userId: username };
+        if (tokenAuthed(req))
+            return { platform: 'webui', userId: 'console' };
+        return undefined;
+    }
+    function checkLocked(username) {
+        const rec = failures.get(username);
+        return !!rec && rec.count >= MAX_FAILURES && rec.lockedUntil > Date.now();
+    }
+    function recordFailure(username) {
+        const rec = failures.get(username);
+        if (rec && rec.lockedUntil > Date.now()) {
+            rec.count += 1;
+            rec.lockedUntil = Date.now() + LOCK_MS;
+        }
+        else {
+            failures.set(username, { count: 1, lockedUntil: Date.now() + LOCK_MS });
+        }
+    }
+    const middleware = async (req, res, next) => {
+        const url = req.path;
+        const qToken = typeof req.query?.token === 'string' ? req.query.token : undefined;
+        const hasAccounts = accounts?.hasAccounts() ?? false;
+        // 1. ?token= 命中 → 设置 cookie → 302 到不带 query 的同路径
+        if (req.method === 'GET' && qToken && tokenAllowed()) {
+            if (qToken === token) {
+                res.setHeader('Set-Cookie', buildSetCookie(TOKEN_COOKIE, token, cookieMaxAge));
+                res.redirect(302, url);
+                return;
+            }
+            // ?token 错误：落到登录页（不向 next 透）
+            res
+                .status(401)
+                .type('html')
+                .send(loginPageHtml(hasAccounts, true, 'URL 中的 token 不正确，请手动输入。'));
+            return;
+        }
+        // 2. 登录端点：{username, password}（账户）或 {token}（单人模式）
+        if (url === '/api/auth/login' && req.method === 'POST') {
+            const body = req.body ?? {};
+            if (typeof body.username === 'string' && typeof body.password === 'string') {
+                const username = body.username.trim();
+                if (checkLocked(username)) {
+                    res.status(429).json({ ok: false, error: '尝试次数过多，请稍后再试' });
+                    return;
+                }
+                if (username && (await accounts?.verify(username, body.password))) {
+                    failures.delete(username);
+                    res.setHeader('Set-Cookie', buildSetCookie(SESSION_COOKIE, newSession(username), cookieMaxAge));
+                    logger.info(`账户登录: webui:${username}`);
+                    res.json({ ok: true, identity: { platform: 'webui', userId: username } });
+                }
+                else {
+                    recordFailure(username);
+                    res.status(401).json({ ok: false, error: '用户名或密码不正确' });
+                }
+                return;
+            }
+            if (typeof body.token === 'string' && !tokenAllowed()) {
+                res.status(401).json({ ok: false, error: 'token 登录已禁用，请使用账户密码' });
+            }
+            else if (typeof body.token === 'string' && body.token === token) {
+                res.setHeader('Set-Cookie', buildSetCookie(TOKEN_COOKIE, token, cookieMaxAge));
+                res.json({ ok: true, identity: { platform: 'webui', userId: 'console' } });
+            }
+            else {
+                res.status(401).json({ ok: false, error: 'token 不正确' });
+            }
+            return;
+        }
+        // 3. 状态查询（含当前身份，供前端顶栏展示）
+        if (url === '/api/auth/status' && req.method === 'GET') {
+            const identity = identify(req);
+            res.json({ authed: !!identity, identity });
+            return;
+        }
+        // 4. 注销：清 session 记录与两种 cookie
+        if (url === '/api/auth/logout' && req.method === 'POST') {
+            const sid = parseCookieValue(req.headers.cookie, SESSION_COOKIE);
+            if (sid)
+                sessions.delete(sid);
+            res.setHeader('Set-Cookie', [buildClearCookie(SESSION_COOKIE), buildClearCookie(TOKEN_COOKIE)]);
+            res.json({ ok: true });
+            return;
+        }
+        // 5. 已认证 → 放行
+        if (identify(req)) {
+            next();
+            return;
+        }
+        // 6. 未认证：API 一律 401
+        if (url.startsWith('/api/')) {
+            res.status(401).json({ error: 'unauthenticated' });
+            return;
+        }
+        // 7. 未认证 GET：返回内联登录页（覆盖 SPA shell，不暴露任何静态资源）
+        if (req.method === 'GET') {
+            res.status(401).type('html').send(loginPageHtml(hasAccounts, tokenAllowed()));
+            return;
+        }
+        res.status(401).end();
+    };
+    function verifyWsClient(req) {
+        return !!identify(req);
+    }
+    return { middleware, verifyWsClient, identify };
+}
+/**
+ * 跨平台打开默认浏览器到指定 URL（无外部依赖）
+ * 失败静默；此为便利功能，不影响服务启动。
+ */
+export function openBrowser(url, proc) {
+    try {
+        const spawnDetached = (cmd, args) => {
+            proc.spawn(cmd, args, { detached: true, stdio: 'ignore' }).unref();
+        };
+        if (process.platform === 'darwin') {
+            spawnDetached('open', [url]);
+        }
+        else if (process.platform === 'win32') {
+            spawnDetached('cmd', ['/c', 'start', '""', url]);
+        }
+        else {
+            spawnDetached('xdg-open', [url]);
+        }
+    }
+    catch {
+        /* ignore */
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAMA,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C,SAAS,gBAAgB,CAAC,MAA0B,EAAE,IAAY;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa,EAAE,SAAiB;IACpE,OAAO,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,gDAAgD,SAAS,EAAE,CAAC;AACzG,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,GAAG,IAAI,iDAAiD,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,WAAoB,EAAE,SAAkB,EAAE,MAAe;IAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,mBAAmB,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,YAAY,GAAG,SAAS;QAC5B,CAAC,CAAC;;;WAGK;QACP,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,WAAW,GAAG,WAAW;QAC7B,CAAC,CAAC;;;EAGJ,YAAY,EAAE;QACZ,CAAC,CAAC;;yCAEmC,CAAC;IACxC,OAAO;;;;;;;;;;;;;;;;;;;;;EAqBP,IAAI;EACJ,WAAW;;;;;;;;;;;;;;;;;;;;;wBAqBW,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;AACnH,CAAC;AAiCD,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,OAAO,GAAG,MAAM,CAAC;AAEvB;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,MAAc,EACd,QAA0B,EAC1B,aAA4B,GAAG,EAAE,CAAC,IAAI;IAEtC,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,mCAAmC;IACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmD,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAElD,0DAA0D;IAC1D,SAAS,YAAY;QACnB,OAAO,UAAU,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,UAAU,CAAC,QAAgB;QAClC,oDAAoD;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;gBAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnF,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,YAAY,GAAG,IAAI,EAAE,CAAC,CAAC;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,SAAS,WAAW,CAAC,GAAqC;QACxD,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAChE,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACzB,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,CAAC;IACpB,CAAC;IAED,SAAS,WAAW,CAAC,GAAqC;QACxD,IAAI,CAAC,YAAY,EAAE;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,CAAC;IAChD,CAAC;IAED,SAAS,QAAQ,CAAC,GAAqC;QACrD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC7D,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,WAAW,CAAC,QAAgB;QACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,YAAY,IAAI,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5E,CAAC;IAED,SAAS,aAAa,CAAC,QAAgB;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;YACf,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;QACrB,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,KAAK,CAAC,KAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,MAAM,WAAW,GAAG,QAAQ,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;QAErD,iDAAiD;QACjD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,IAAI,YAAY,EAAE,EAAE,CAAC;YACrD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC/E,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,6BAA6B;YAC7B,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,MAAM,CAAC;iBACZ,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,yBAAyB,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,kDAAkD;QAClD,IAAI,GAAG,KAAK,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,GAAI,GAA2E,CAAC,IAAI,IAAI,EAAE,CAAC;YACrG,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtC,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;oBAC3D,OAAO;gBACT,CAAC;gBACD,IAAI,QAAQ,IAAI,CAAC,MAAM,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;oBAClE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;oBAChG,MAAM,CAAC,IAAI,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;oBACvC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC5E,CAAC;qBAAM,CAAC;oBACN,aAAa,CAAC,QAAQ,CAAC,CAAC;oBACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAClE,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC/E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO;QACT,CAAC;QAED,yBAAyB;QACzB,IAAI,GAAG,KAAK,kBAAkB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,IAAI,GAAG,KAAK,kBAAkB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACjE,IAAI,GAAG;gBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChG,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,cAAc;QACd,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,oBAAoB;QACpB,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,6CAA6C;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC;IAEF,SAAS,cAAc,CAAC,GAAoB;QAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,IAAoB;IAC3D,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE;YACpD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACrE,CAAC,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,aAAa,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC"}

package/dist/gate.d.ts

@@ -0,0 +1,39 @@
+import type { Context } from '@aalis/core';
+import type { UserIdentity } from '@aalis/plugin-authority-api';
+/** 从请求解析调用者身份（auth.ts 的 AuthSystem.identify） */
+type IdentifyFn = (req: {
+    headers: {
+        cookie?: string;
+    };
+}) => UserIdentity | undefined;
+interface GateRequest {
+    headers: {
+        cookie?: string;
+    };
+}
+interface GateResponse {
+    status(code: number): {
+        json(body: unknown): unknown;
+    };
+}
+type GateMiddleware = (req: GateRequest, res: GateResponse, next: () => void) => void;
+/**
+ * REST 路由权限闸工厂。
+ *
+ * 连接级认证（auth middleware）只回答"是否登录"；本闸回答"该身份能否做这件事"——
+ * 每条 REST 路由声明一个 capability 与基础等级门槛，过 authorize 统一闸
+ * （与 tool/command/page-action 同一裁决：permissionPolicy > deny > grant > 角色链，
+ * 因此可对单个账户 grant `webui:files:read` 这类细粒度放行）。
+ *
+ * 分层缺省（可经 config.permissionAuthority 或 per-user grant/deny 调整）：
+ * - 1：公共读（status / pages / 模型列表等，聊天面板可用即可）
+ * - 4：管理读（插件清单含原始配置、日志、文件浏览——可能含密钥/敏感信息）
+ * - 'owner'：变更操作（配置写、插件启停装卸、服务偏好、文件删改）
+ *
+ * authority 服务缺席时放行（与 tools/commands 守卫缺席语义一致）。
+ */
+export declare function createRouteGate(ctx: Context, identify: IdentifyFn): (capability: string, declared: number | "owner") => GateMiddleware;
+/** createRouteGate 返回的闸生成函数类型（传给各 routes/ 注册器） */
+export type RouteGate = ReturnType<typeof createRouteGate>;
+export {};
+//# sourceMappingURL=gate.d.ts.map

package/dist/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAoB,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAElF,gDAAgD;AAChD,KAAK,UAAU,GAAG,CAAC,GAAG,EAAE;IAAE,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,KAAK,YAAY,GAAG,SAAS,CAAC;AAKtF,UAAU,WAAW;IACnB,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9B;AACD,UAAU,YAAY;IACpB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAA;KAAE,CAAC;CACxD;AACD,KAAK,cAAc,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;AAEtF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,IAIxD,YAAY,MAAM,EAAE,UAAU,MAAM,GAAG,OAAO,KAAG,cAAc,CAuBxE;AAED,kDAAkD;AAClD,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/gate.js

@@ -0,0 +1,43 @@
+/**
+ * REST 路由权限闸工厂。
+ *
+ * 连接级认证（auth middleware）只回答"是否登录"；本闸回答"该身份能否做这件事"——
+ * 每条 REST 路由声明一个 capability 与基础等级门槛，过 authorize 统一闸
+ * （与 tool/command/page-action 同一裁决：permissionPolicy > deny > grant > 角色链，
+ * 因此可对单个账户 grant `webui:files:read` 这类细粒度放行）。
+ *
+ * 分层缺省（可经 config.permissionAuthority 或 per-user grant/deny 调整）：
+ * - 1：公共读（status / pages / 模型列表等，聊天面板可用即可）
+ * - 4：管理读（插件清单含原始配置、日志、文件浏览——可能含密钥/敏感信息）
+ * - 'owner'：变更操作（配置写、插件启停装卸、服务偏好、文件删改）
+ *
+ * authority 服务缺席时放行（与 tools/commands 守卫缺席语义一致）。
+ */
+export function createRouteGate(ctx, identify) {
+    // 公共读基线：authority 缺席时，门槛 <= 此值的路由仍放行（聊天面板可用即可），
+    // 高于此值的（管理读/变更）一律拒绝——fail-closed，不在权限服务缺位时裸奔。
+    const PUBLIC_BASELINE = 1;
+    return (capability, declared) => (req, res, next) => {
+        const ownerLevel = ctx.config.get('ownerAuthority') ?? 5;
+        const declaredAuthority = declared === 'owner' ? ownerLevel : declared;
+        const authority = ctx.getService('authority');
+        if (!authority) {
+            // authority 缺席（未配置/启动失败/bounce 窗口期）→ 无法裁决等级。
+            // 公共读放行，其余 503（区别于 403：服务暂不可用，非权限不足）。
+            if (declaredAuthority > PUBLIC_BASELINE) {
+                res.status(503).json({ error: '权限服务不可用，敏感操作暂时被拒绝' });
+                return;
+            }
+            next();
+            return;
+        }
+        const caller = identify(req) ?? { platform: 'webui', userId: 'console' };
+        const denied = authority.authorize(caller, { capabilities: [capability], declaredAuthority });
+        if (denied) {
+            res.status(403).json({ error: denied });
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=gate.js.map

package/dist/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,QAAoB;IAChE,gDAAgD;IAChD,8CAA8C;IAC9C,MAAM,eAAe,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,UAAkB,EAAE,QAA0B,EAAkB,EAAE,CACxE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,iBAAiB,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAmB,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,6CAA6C;YAC7C,sCAAsC;YACtC,IAAI,iBAAiB,GAAG,eAAe,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC9F,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACN,CAAC"}

package/dist/i18n.d.ts

@@ -0,0 +1,3 @@
+import type { I18nResources } from '@aalis/core';
+export declare const i18n: I18nResources;
+//# sourceMappingURL=i18n.d.ts.map

package/dist/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,eAAO,MAAM,IAAI,EAAE,aAmClB,CAAC"}

package/dist/i18n.js

@@ -0,0 +1,37 @@
+export const i18n = {
+    'zh-CN': {
+        'plugin.webuiServer.displayName': 'WebUI 服务端',
+        'webui.page.dashboard': '仪表盘',
+        'webui.page.marketplace': '插件市场',
+        'webui.page.pluginConfig': '插件配置',
+        'webui.page.platforms': '平台接入',
+        'webui.page.files': '文件管理',
+        'webui.page.logs': '日志',
+        'config.webui.port.label': '端口',
+        'config.webui.port.description': 'Web 管理界面的 HTTP 端口',
+        'config.webui.host.label': '监听地址',
+        'config.webui.host.description': '绑定的 IP 地址，0.0.0.0 可对外访问',
+        'config.webui.fileRoot.label': '文件浏览根',
+        'config.webui.fileRoot.description': '文件管理页面使用的 storage 根 ID，默认 workspace',
+        'config.webui.workspaceRoot.label': '兼容文件根目录',
+        'config.webui.workspaceRoot.description': '缺少 storage 服务时的兼容文件根目录',
+    },
+    'en-US': {
+        'plugin.webuiServer.displayName': 'WebUI Server',
+        'webui.page.dashboard': 'Dashboard',
+        'webui.page.marketplace': 'Marketplace',
+        'webui.page.pluginConfig': 'Plugin Config',
+        'webui.page.platforms': 'Platforms',
+        'webui.page.files': 'Files',
+        'webui.page.logs': 'Logs',
+        'config.webui.port.label': 'Port',
+        'config.webui.port.description': 'HTTP port for the Web management UI.',
+        'config.webui.host.label': 'Bind Address',
+        'config.webui.host.description': 'IP address to bind. Use 0.0.0.0 to allow external access.',
+        'config.webui.fileRoot.label': 'File Root',
+        'config.webui.fileRoot.description': 'Storage root ID used by the file manager. Defaults to workspace.',
+        'config.webui.workspaceRoot.label': 'Compatibility File Root',
+        'config.webui.workspaceRoot.description': 'Fallback file root used when the storage service is unavailable.',
+    },
+};
+//# sourceMappingURL=i18n.js.map

package/dist/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,IAAI,GAAkB;IACjC,OAAO,EAAE;QACP,gCAAgC,EAAE,WAAW;QAC7C,sBAAsB,EAAE,KAAK;QAC7B,wBAAwB,EAAE,MAAM;QAChC,yBAAyB,EAAE,MAAM;QACjC,sBAAsB,EAAE,MAAM;QAC9B,kBAAkB,EAAE,MAAM;QAC1B,iBAAiB,EAAE,IAAI;QACvB,yBAAyB,EAAE,IAAI;QAC/B,+BAA+B,EAAE,mBAAmB;QACpD,yBAAyB,EAAE,MAAM;QACjC,+BAA+B,EAAE,yBAAyB;QAC1D,6BAA6B,EAAE,OAAO;QACtC,mCAAmC,EAAE,qCAAqC;QAC1E,kCAAkC,EAAE,SAAS;QAC7C,wCAAwC,EAAE,wBAAwB;KACnE;IACD,OAAO,EAAE;QACP,gCAAgC,EAAE,cAAc;QAChD,sBAAsB,EAAE,WAAW;QACnC,wBAAwB,EAAE,aAAa;QACvC,yBAAyB,EAAE,eAAe;QAC1C,sBAAsB,EAAE,WAAW;QACnC,kBAAkB,EAAE,OAAO;QAC3B,iBAAiB,EAAE,MAAM;QACzB,yBAAyB,EAAE,MAAM;QACjC,+BAA+B,EAAE,sCAAsC;QACvE,yBAAyB,EAAE,cAAc;QACzC,+BAA+B,EAAE,2DAA2D;QAC5F,6BAA6B,EAAE,WAAW;QAC1C,mCAAmC,EAAE,kEAAkE;QACvG,kCAAkC,EAAE,yBAAyB;QAC7D,wCAAwC,EAAE,kEAAkE;KAC7G;CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+import type { ConfigSchema, Context } from '@aalis/core';
+export declare const name = "@aalis/plugin-webui-server";
+export declare const displayName = "WebUI \u670D\u52A1\u7AEF";
+export declare const subsystem = "platform";
+export declare const provides: string[];
+export declare const inject: {
+    optional: string[];
+};
+export declare const configSchema: ConfigSchema;
+export declare const defaultConfig: {
+    port: number;
+    host: string;
+    fileRoot: string;
+    autoOpen: boolean;
+    tokenMode: string;
+    fixedToken: string;
+    relationGraphDefaultSpacing: number;
+    marketplaceRegistry: string;
+};
+export { type WSIncoming, WSIncomingSchema } from './protocol.js';
+export declare function apply(ctx: Context, config: Record<string, unknown>): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAc,YAAY,EAAE,OAAO,EAAkC,MAAM,aAAa,CAAC;AAqCrG,eAAO,MAAM,IAAI,+BAA+B,CAAC;AACjD,eAAO,MAAM,WAAW,6BAAc,CAAC;AACvC,eAAO,MAAM,SAAS,aAAa,CAAC;AACpC,eAAO,MAAM,QAAQ,UAAmB,CAAC;AACzC,eAAO,MAAM,MAAM;;CAMlB,CAAC;AAWF,eAAO,MAAM,YAAY,EAAE,YAgD1B,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;CASzB,CAAC;AAoBF,OAAO,EAAE,KAAK,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAqIlE,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAg0CxF"}