@airalogy/airalogy-bd 1.3.0 → 1.3.1

package/CHANGELOG.md

@@ -4,6 +4,12 @@
 
 ## [Unreleased]
 
+## [1.3.1] - 2026-10-27
+
+- 将「待确认」移到右上角头像旁，有草稿时显示数量，没有草稿时使用弱化样式，保持主导航聚焦于工作台和管理中心。
+- 数量仅统计当前账号有权查看的有效待确认草稿，与草稿列表共用权限和有效期检查；处理草稿后立即刷新，页面可见时定期更新。
+- 调整手机端顶部操作布局，并补充数量接口的账号隔离、权限撤销、过期及处理状态测试。
+
 ## [1.3.0] - 2026-10-27
 
 - 统一界面字体、字号与行高，改善正文、表格和说明文字的可读性，手机端通过布局适配而非缩小正文。

package/dashboard/app/AccountBar.tsx

@@ -1,6 +1,7 @@
 "use client";
 import { useEffect, useRef, useState } from "react";
 import Link from "next/link";
+import PendingChangesLink from "./PendingChangesLink";
 import { usePathname, useRouter } from "next/navigation";
 import { BrandIdentity, BrandLogo } from "./Branding";
 import { teamRequest, type TeamUser } from "./lib/team-client";
@@ -25,13 +26,12 @@ export default function AccountBar({ user, workspace }: { user: TeamUser | null;
         <Link className="app-brand" href="/" aria-label="返回工作台">{workspace?<><BrandLogo/><span><strong>{workspace.short_name}</strong><small>{workspace.workspace_title}</small></span></>:<BrandIdentity/>}</Link>
         <nav className="app-navigation" aria-label="全局导航">
           <Link href="/" aria-current={pathname==="/"?"page":undefined}>工作台</Link>
-          {user&&<Link href="/remote" aria-current={pathname==="/remote"?"page":undefined}>待确认修改</Link>}
           {(!user||user.role==="admin")&&<Link href="/admin" aria-current={pathname==="/admin"?"page":undefined}>管理中心</Link>}
         </nav>
-        {user?<details className="app-account" ref={menu} onKeyDown={event=>{if(event.key==="Escape"&&menu.current){menu.current.open=false;menu.current.querySelector("summary")?.focus();}}}>
+        {user?<div className="app-account-actions"><PendingChangesLink key={user.id}/><details className="app-account" ref={menu} onKeyDown={event=>{if(event.key==="Escape"&&menu.current){menu.current.open=false;menu.current.querySelector("summary")?.focus();}}}>
           <summary aria-label={`${user.name}，账号菜单`} className={pathname==="/account"?"is-current":undefined}><span className="app-avatar" aria-hidden="true">{Array.from(user.name)[0]}</span><span className="app-account-name">{user.name}<small>{{admin:"管理员",editor:"编辑成员",viewer:"只读成员"}[user.role]}</small></span><span className="app-account-chevron" aria-hidden="true">⌄</span></summary>
           <div className="app-account-menu"><Link href="/account" onClick={()=>{if(menu.current)menu.current.open=false;}}>我的账号</Link><Link href="/account#ai-tools" onClick={()=>{if(menu.current)menu.current.open=false;}}>AI 工具连接</Link><button type="button" onClick={()=>void logout()}>退出登录</button></div>
-        </details>:<span className="app-local-label">本机工作区</span>}
+        </details></div>:<span className="app-local-label">本机工作区</span>}
       </div>
     </header>
     {error&&<p className="admin-alert" role="alert">{error}</p>}

package/dashboard/app/PendingChangesLink.tsx

@@ -0,0 +1,56 @@
+"use client";
+import { useEffect, useState } from "react";
+import Link from "next/link";
+import { usePathname } from "next/navigation";
+import { SettingsIcon } from "./SettingsUI";
+import { REMOTE_DRAFTS_CHANGED } from "./lib/remote-events";
+
+export default function PendingChangesLink() {
+  const pathname = usePathname();
+  const [count, setCount] = useState<number | null>(null);
+  const [unavailable, setUnavailable] = useState(false);
+  useEffect(() => {
+    let controller: AbortController | null = null;
+    let disposed = false;
+    async function refresh(force = false) {
+      if (document.visibilityState === "hidden" || (controller && !force)) return;
+      controller?.abort();
+      const current = new AbortController();
+      controller = current;
+      try {
+        const response = await fetch("/api/remote?action=pending", { cache: "no-store", signal: current.signal });
+        if (!response.ok) throw new Error("unavailable");
+        const body = await response.json();
+        if (!body.ok || !Number.isSafeInteger(body.result?.count) || body.result.count < 0) throw new Error("invalid count");
+        if (!disposed && !current.signal.aborted) { setCount(body.result.count); setUnavailable(false); }
+      } catch {
+        if (!disposed && !current.signal.aborted) { setCount(null); setUnavailable(true); }
+      } finally {
+        if (controller === current) controller = null;
+      }
+    }
+    const onVisible = () => void refresh();
+    const onChanged = () => void refresh(true);
+    void refresh();
+    const timer = window.setInterval(onVisible, 60_000);
+    window.addEventListener("focus", onVisible);
+    document.addEventListener("visibilitychange", onVisible);
+    window.addEventListener(REMOTE_DRAFTS_CHANGED, onChanged);
+    return () => {
+      disposed = true;
+      controller?.abort();
+      window.clearInterval(timer);
+      window.removeEventListener("focus", onVisible);
+      document.removeEventListener("visibilitychange", onVisible);
+      window.removeEventListener(REMOTE_DRAFTS_CHANGED, onChanged);
+    };
+  }, [pathname]);
+  const hasPending = count !== null && count > 0;
+  const label = hasPending ? `待确认修改，${count} 条草稿` : count === 0 ? "待确认修改，暂无草稿" : "待确认修改";
+  return <Link href="/remote" className={`app-pending${hasPending ? " has-pending" : " is-muted"}`}
+    aria-current={pathname === "/remote" ? "page" : undefined} aria-label={label}
+    title={unavailable ? "数量暂时无法获取，点击查看待确认修改" : label}>
+    <SettingsIcon name="review"/><span>待确认</span>
+    {hasPending && <span className="app-pending-count" aria-hidden="true">{count > 99 ? "99+" : count}</span>}
+  </Link>;
+}

package/dashboard/app/RemoteAccess.tsx

@@ -1,6 +1,7 @@
 "use client";
 import { useCallback, useEffect, useState } from "react";
 import Link from "next/link";
+import { notifyRemoteDraftsChanged } from "./lib/remote-events";
 import {SettingsPanelHeader,SettingsStatus} from "./SettingsUI";
 import type { TeamUser } from "./lib/team-client";
 import { stageLabels, followUpStatusLabels } from "./lib/labels";
@@ -53,6 +54,7 @@ export default function RemoteAccess({ user, mode, endpoint = "" }: { user: Team
     setBusy(true); setError(""); setNotice("");
     try {
       const result = await request<{ token?: string }>(action, input);
+      notifyRemoteDraftsChanged();
       if (result.token) setSecret(result.token);
       setNotice(message); await reload();
     } catch (err) { setError((err as Error).message); }

package/dashboard/app/SettingsUI.tsx

@@ -1,6 +1,6 @@
 import type {ReactNode} from "react";
 
-export type SettingsIconName = "members" | "ai" | "usage" | "remote" | "backup" | "plus" | "search" | "lock";
+export type SettingsIconName = "members" | "ai" | "usage" | "remote" | "backup" | "plus" | "search" | "lock" | "review";
 const paths:Record<SettingsIconName,ReactNode> = {
   members:<><circle cx="9" cy="8" r="3"/><path d="M3 20v-2a6 6 0 0 1 12 0v2M16 5a3 3 0 0 1 0 6m2 3a5 5 0 0 1 3 4v2"/></>,
   ai:<><path d="m12 3 2.7 6.3L21 12l-6.3 2.7L12 21l-2.7-6.3L3 12l6.3-2.7L12 3Z"/></>,
@@ -9,6 +9,7 @@ const paths:Record<SettingsIconName,ReactNode> = {
   backup:<><path d="M12 3v12m-4-4 4 4 4-4M4 15v5h16v-5"/></>,
   plus:<path d="M12 5v14M5 12h14"/>,
   search:<><circle cx="10.5" cy="10.5" r="6.5"/><path d="m16 16 4 4"/></>,
+  review:<><path d="M9 4H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2V6a2 2 0 0 0-2-2h-4"/><rect x="9" y="2" width="6" height="4" rx="1"/><path d="m8 13 3 3 5-6"/></>,
   lock:<><rect x="5" y="10" width="14" height="11" rx="2"/><path d="M8 10V6a4 4 0 0 1 8 0v4m-4 5v2"/></>,
 };
 export function SettingsIcon({name}:{name:SettingsIconName}) {

package/dashboard/app/api/remote/route.ts

@@ -8,7 +8,7 @@ export async function GET(request: Request) {
   const access = await authorizedRequest(request);
   if (access instanceof Response) return access;
   const operation = new URL(request.url).searchParams.get("action") || "status";
-  if (!["status", "settings", "drafts"].includes(operation)) return denied();
+  if (!["status", "settings", "drafts", "pending"].includes(operation)) return denied();
   return serviceResponse(await invokeWorkspace({ action: "remote_browser", operation }, access.session));
 }
 export async function POST(request: Request) {

package/dashboard/app/lib/remote-events.ts

@@ -0,0 +1,5 @@
+export const REMOTE_DRAFTS_CHANGED = "bd:remote-drafts-changed";
+
+export function notifyRemoteDraftsChanged() {
+  window.dispatchEvent(new Event(REMOTE_DRAFTS_CHANGED));
+}

package/dashboard/app/settings.css

@@ -321,3 +321,27 @@
   .auth-page { padding:24px 16px; }
   .auth-card { padding:26px 22px; }
 }
+
+/* Pending reviews are account actions, separate from the main navigation. */
+.app-account-actions { display:flex; align-items:center; gap:14px; margin-left:auto; flex-shrink:0; }
+.app-account-actions .app-account { margin-left:0; }
+.app-pending { display:inline-flex; align-items:center; gap:6px; min-height:38px; padding:8px 10px; border:1px solid transparent; border-radius:8px; color:var(--muted); font-size:var(--text-small); line-height:var(--leading-compact); text-decoration:none; white-space:nowrap; }
+.app-pending .settings-icon { width:17px; height:17px; }
+.app-pending:hover,.app-pending[aria-current=page] { background:var(--canvas); color:var(--navy); }
+.app-pending.has-pending { color:var(--blue); background:var(--blue-soft); }
+.app-pending.has-pending:hover,.app-pending.has-pending[aria-current=page] { border-color:#cbddeb; }
+.app-pending-count { display:inline-flex; align-items:center; justify-content:center; min-width:20px; height:20px; padding:0 5px; border-radius:10px; background:var(--blue); color:white; font-size:var(--text-caption); font-weight:600; font-variant-numeric:tabular-nums; }
+@media(max-width:760px) {
+  .app-account-actions { order:1; gap:8px; }
+  .app-account-actions .app-account { order:0; }
+}
+@media(max-width:520px) {
+  .app-header-inner { padding-left:14px; padding-right:14px; gap:10px; }
+  .app-account-actions { gap:4px; }
+  .app-account summary { padding:5px; gap:4px; }
+  .app-account-name,.app-account-chevron { display:none; }
+  .app-pending { padding:7px; gap:5px; }
+  .app-pending .settings-icon { display:none; }
+  .app-brand > span:not(.site-brand-identity) { min-width:0; }
+  .app-brand strong,.app-brand small { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+}

package/docs/interface-design.md

@@ -18,6 +18,6 @@ Airalogy BD 使用系统无衬线字体：优先采用操作系统界面字体
 
 同类元素在不同页面共用字号，不通过不断增加字号区分信息层级；辅助信息优先用字重、颜色和间距区分。手机端通过换行、单列布局和表格横向滚动适配，不缩小正文。主要表单的手机端输入字号为 16px，避免聚焦输入时触发浏览器自动缩放。
 
-公司标识位于应用最上方，工作区导航和账号操作在同一栏；页面标题、页面操作和局部导航位于下方。管理中心负责全局配置和成员权限；个人连接由成员在“我的账号”管理。
+公司标识位于应用最上方，工作区导航和账号操作在同一栏；「待确认」作为头像旁的操作入口，有草稿时显示数量，没有时弱化显示；页面标题、页面操作和局部导航位于下方。管理中心负责全局配置和成员权限；个人连接由成员在“我的账号”管理。
 
 导出报告有独立的纸张与排版要求，使用报告组件的专用字号，不随界面字号批量调整。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@airalogy/airalogy-bd",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "Business development workspace for local use and team collaboration.",
   "publishConfig": {
     "access": "public",

package/scripts/remote_access.py

@@ -108,6 +108,10 @@ class RemoteAccess:
     def browser(self, request, actor):
         op = request.get("operation")
         if op == "status": return self.status(actor)
+        if op == "pending":
+            if not self.settings()["enabled"] or not self.accounts.remote_allowed(actor["id"]) or actor["role"] == "viewer":
+                return {"count": 0}
+            return {"count": sum(1 for _ in self.pending_drafts(actor))}
         if op in {"settings", "configure"}:
             self.accounts.require_admin(actor)
             if op == "configure":
@@ -152,13 +156,8 @@ class RemoteAccess:
             return {"revoked": True}
         if op == "drafts":
             self.grant(actor)
-            policy, drafts = Policy(self.workspace, actor), []
-            for row in self.db.execute("SELECT * FROM remote_drafts WHERE owner=? AND state='pending' ORDER BY created DESC", (actor["id"],)):
-                try:
-                    self.check_draft(row, actor, policy)
-                    drafts.append({"id": row["id"], "created": row["created"], "expires": row["expires"], **json.loads(row["value"])["review"]})
-                except AuthError: continue
-            return {"drafts": drafts}
+            return {"drafts": [{"id": row["id"], "created": row["created"], "expires": row["expires"],
+                                **json.loads(row["value"])["review"]} for row in self.pending_drafts(actor)]}
         if op in {"confirm", "reject"}:
             self.grant(actor)
             row = self.db.execute("SELECT * FROM remote_drafts WHERE id=?", (text(request.get("draftId")),)).fetchone()
@@ -189,6 +188,16 @@ class RemoteAccess:
             return result
         raise AuthError("未知的远程管理操作。", "invalid")
 
+    def pending_drafts(self, actor):
+        # The badge and review page use the same ownership, expiry and permission checks.
+        policy = Policy(self.workspace, actor)
+        for row in self.db.execute("SELECT * FROM remote_drafts WHERE owner=? AND state='pending' ORDER BY created DESC", (actor["id"],)):
+            try:
+                self.check_draft(row, actor, policy)
+            except AuthError:
+                continue
+            yield row
+
     def check_draft(self, row, actor, policy):
         if not row or row["owner"] != actor["id"] or row["binding"] != actor["revision"] or row["expires"] <= int(time.time()) or row["state"] != "pending":
             raise AuthError("草稿已处理或失效；请检查最新记录，必要时重新提交。", "conflict")