@aiti-ai/aiti-mail 0.0.0-stage → 0.1.7

package/AGENTS.md

@@ -0,0 +1,28 @@
+# aiti-mail 扩展（部署目录直改指南）
+
+## 结构
+- 运行时文件平铺在本目录根（index.ts / core.cjs …，宿主 loader 按相对路径加载——**禁手改运行时平铺文件**，改 src/ 再 build）
+- `src/` 源码（client/src + 服务端 ts/cjs）· `dist/` 构建产物（禁手改）· `tools/` 构建/部署脚本
+- npm 包形态的扩展：本目录 package.json 含 version 与 aitiConfigs 声明
+
+## 小改现场流程（改文案/样式/小逻辑）
+1. 改 `src/` 下对应源码
+2. `node tools/build.mjs`（client 有构建产物的扩展；纯服务端改动跳过）
+3. `curl -X POST http://127.0.0.1:3001/api/extensions/reload`（dev；prod 3002；外部经 nginx 带 basePath：/dev、/mac、/mdev、/win、/wdev → `/xxx/api/extensions/reload`）
+4. 浏览器刷新页面验证
+
+## 大改回源码仓
+- 源码仓：`extensions/aiti-mail/`（git 管理，deploy 同步回本目录）
+- 改完在源码仓跑 `node tools/deploy.mjs`（或仓库根 `node scripts/deploy-all.mjs --only aiti-mail`）
+
+## 数据目录（数据分层：config / cache）
+- `ctx.configDir` 根级 = 配置与关键小状态（aiti-configs 备份范围；小、珍贵、人可读）
+- `ctx.cacheDir`（= `<configDir>/cache/`）= 可删缓存：db/venv/日志/大文件；rm -rf 后扩展下次访问自动重建
+- `ctx.dataDir` 已移除（访问即抛）——新代码禁用
+- 本扩展白名单（永不为 cache 的配置文件）见 package.json `aitiConfigs.configFiles`
+
+## 红线
+- 禁轮询（setInterval 拉取）；需要等待用事件/回调/SSE（桥的 SSE、aiti-event-bus topics）
+- 禁重启生产服务（pi-web 3002 等 restart 须用户明确同意）
+- 禁手改 dist/ 与运行时平铺文件；跨扩展通信走 ctx.services（禁 globalThis.__ext 直穿）
+- 服务端：SQLite 一律 WAL + 分批小事务（批间 setImmediate 让步）；禁 execFileSync 调 >1s 外部程序；>8MB 文件禁同步读

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 aiti-ai contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/check-client.mjs

@@ -0,0 +1,273 @@
+/**
+ * check-client —— 扩展 client .mjs/.js 的 TS 残留 tripwire（零依赖，纯 node）。
+ *
+ * 背景：aiti-plan-review 事故（docs/aiti-ext-client-hardening-plan.md §1）——
+ * `useState<any>(null)` 解析为合法 JS 比较表达式 `useState < any > (null)`，
+ * node --check / TS 解析器 / babel 全不报错，只有运行时才炸。纯语法检查
+ * 原理性无效，只能启发式规则 + 渲染期错误边界兜底。
+ *
+ * 用法：
+ *   CLI    node check-client.mjs <file|dir>...        FAIL → exit 1
+ *   自测   node check-client.mjs --selftest           fixtures 全过 → exit 0
+ *   API    lintClientSource(src) → violations[]       { line, level, rule, text }
+ *          lintPath(path)        → { files, violations }（文件或目录，递归）
+ *          checkClientDir(dir,{log})                 FAIL → throw（deploy 脚本用）
+ *
+ * 词法：规则匹配前先剥离注释/字符串/模板字面量（${} 插值内代码保留检查）——
+ * aiti-editor 的 Monaco TS stub 模板串、JSDoc @return 都是合法内容，不剥全误报。
+ * 已知极限：regex 字面量含引号等 lexer 歧义允许漏报（tripwire 定位非编译器）。
+ *
+ * 豁免：目标行或其上一行含 `check-client:allow` 即跳过该行。
+ * 权威源：本文件；aiti-extman 部署副本由其 tools/deploy.mjs 拷贝（改动两处同步）。
+ */
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join, resolve } from "node:path";
+
+// ── 规则（分级）──────────────────────────────────────────────────────────────
+
+const RULES = [
+  // FAIL：合法 JS 但运行时必炸 / 纯 TS 语法
+  { level: "FAIL", re: /\b(useState|useRef|useMemo|useCallback|useReducer|useImperativeHandle)\s*</, why: "React hook 泛型（运行时必炸）" },
+  // 注：含「any/unknown/string」字样的规则用字符串构 RegExp——本文件自身也
+  // 会被扫，正则字面量里的 (?:any 会被自己命中（词法器不处理 regex 字面量），
+  // 字符串字面量则会被词法遮蔽。
+  { level: "FAIL", re: new RegExp("\\bas\\s+(?:" + "any|unknown|const)\\b"), why: "as 断言" },
+  { level: "FAIL", re: new RegExp(":\\s*(?:" + "any|unknown)\\b"), why: ": any/: unknown 注解" },
+  { level: "FAIL", re: /\b(?:import|export)\s+type\s/, why: "import/export type" },
+  { level: "FAIL", re: /\b(?:interface|enum)\s+[A-Za-z_$]/, why: "interface/enum 声明" },
+  // warn：疑似残留，人工确认，不阻断
+  { level: "warn", re: new RegExp(":\\s*(?:" + "string|number|boolean|void)\\b(?!\\s*[._\\w])"), why: "疑似类型注解" },
+  { level: "warn", re: /\bsatisfies\s/, why: "satisfies" },
+  { level: "warn", re: /\b(?:Record|Partial|Readonly|Omit|Pick)\s*</, why: "TS 工具类型" },
+];
+
+// ── 词法剥离：注释/字符串/模板字面量 → 空格（保留换行，行号不漂移）─────────
+export function stripLiterals(src) {
+  const out = src.split("");
+  const n = src.length;
+  const mask = (from, to) => {
+    for (let k = from; k < to && k < n; k++) if (out[k] !== "\n") out[k] = " ";
+  };
+  let mode = "code";
+  let depth = 0;
+  const stack = []; // 模板 ${ 插值进入时的 brace 深度（支持嵌套模板）
+  let i = 0;
+  while (i < n) {
+    const c = src[i];
+    const d = i + 1 < n ? src[i + 1] : "";
+    if (mode === "code") {
+      if (c === "/" && d === "/") {
+        const j = src.indexOf("\n", i);
+        const end = j === -1 ? n : j;
+        mask(i, end);
+        i = end;
+      } else if (c === "/" && d === "*") {
+        const j = src.indexOf("*/", i + 2);
+        const end = j === -1 ? n : j + 2;
+        mask(i, end);
+        i = end;
+      } else if (c === "'" || c === '"') {
+        let j = i + 1;
+        while (j < n && src[j] !== c && src[j] !== "\n") j += src[j] === "\\" ? 2 : 1;
+        if (j < n && src[j] === c) {
+          mask(i, j + 1);
+          i = j + 1;
+        } else {
+          // 未闭合到行尾 → 可能是 regex 字面量歧义，只遮开引号，按代码继续
+          out[i] = " ";
+          i++;
+        }
+      } else if (c === "`") {
+        mode = "tpl";
+        out[i] = " ";
+        i++;
+      } else if (c === "{") {
+        depth++;
+        i++;
+      } else if (c === "}") {
+        if (stack.length && depth === stack[stack.length - 1]) {
+          stack.pop();
+          mode = "tpl"; // 插值结束回模板
+          out[i] = " ";
+        } else {
+          depth = Math.max(0, depth - 1);
+        }
+        i++;
+      } else i++;
+    } else if (mode === "tpl") {
+      if (c === "\\") {
+        mask(i, Math.min(i + 2, n));
+        i += 2;
+      } else if (c === "`") {
+        mode = "code";
+        out[i] = " ";
+        i++;
+      } else if (c === "$" && d === "{") {
+        stack.push(depth);
+        mode = "code";
+        mask(i, i + 2);
+        i += 2;
+      } else {
+        if (c !== "\n") out[i] = " ";
+        i++;
+      }
+    } else {
+      // 不可达：line/block/字符串均在 code 分支内联处理
+      i++;
+    }
+  }
+  return out.join("");
+}
+
+// ── 单源检查 ────────────────────────────────────────────────────────────────
+export function lintClientSource(src) {
+  const masked = stripLiterals(src);
+  const origLines = src.split("\n");
+  const maskedLines = masked.split("\n");
+  const violations = [];
+  for (let i = 0; i < maskedLines.length; i++) {
+    const prev = i > 0 ? origLines[i - 1] : "";
+    if (origLines[i].includes("check-client:allow") || prev.includes("check-client:allow")) continue;
+    for (const { level, re, why } of RULES) {
+      if (re.test(maskedLines[i])) {
+        violations.push({ line: i + 1, level, rule: why, text: origLines[i].trim().slice(0, 90) });
+      }
+    }
+  }
+  return violations;
+}
+
+// ── 文件/目录检查 ───────────────────────────────────────────────────────────
+const SKIP_DIR = new Set(["node_modules", ".git"]);
+/** 超过此体积视为 vendored bundle（如 Monaco ts.worker，合法含 interface 字样），不查。 */
+const MAX_BYTES = 512 * 1024;
+const isClientFile = (name) => /\.(mjs|js|cjs)$/.test(name) && !/\.min\./.test(name) && !/\.test\./.test(name);
+
+export function lintPath(p, out = { files: 0, violations: [] }) {
+  const st = statSync(p);
+  if (st.isDirectory()) {
+    for (const name of readdirSync(p)) {
+      if (SKIP_DIR.has(name)) continue;
+      lintPath(join(p, name), out);
+    }
+    return out;
+  }
+  const base = p.split("/").pop();
+  if (!isClientFile(base)) return out;
+  if (st.size > MAX_BYTES) return out; // vendored bundle 豁免
+  out.files++;
+  for (const v of lintClientSource(readFileSync(p, "utf8"))) out.violations.push({ file: p, ...v });
+  return out;
+}
+
+export function formatViolations(violations) {
+  return violations
+    .map((v) => `  ${v.level} ${v.file}:${v.line} [${v.rule}] ${v.text}`)
+    .join("\n");
+}
+
+/** deploy 脚本用：检查目录，FAIL 抛错（消息含违规清单），warn 只打日志不阻断。 */
+export function checkClientDir(dir, { log = console.log } = {}) {
+  const { files, violations } = lintPath(resolve(dir));
+  const fails = violations.filter((v) => v.level === "FAIL");
+  const warns = violations.filter((v) => v.level === "warn");
+  if (warns.length) log(`[check-client] ${warns.length} 处疑似 TS 残留（不阻断，建议人工确认）：\n${formatViolations(warns)}`);
+  if (fails.length) {
+    throw new Error(
+      `client 检查未通过：${files} 个文件中 ${fails.length} 处 TS 残留（.mjs 里是合法 JS，语法检查不报，运行时必炸）。\n` +
+        formatViolations(fails) +
+        `\n修复或在该行加注释 // check-client:allow 豁免。详见 docs/aiti-ext-client-hardening-plan.md`,
+    );
+  }
+  if (files) log(`[check-client] ${files} 个 client 文件检查通过`);
+  return { files, fails: fails.length, warns: warns.length };
+}
+
+/**
+ * extman 安装用：扫整个扩展目录（含第三方，不遵循 client/ 约定）。
+ * 在 SKIP_DIR 之上额外跳过构建产物/vendored 目录（Monaco ts.worker、语言包等
+ * 合法包含 TS 字样，词法器对 minified 代码不提供保证）；体积上限同上。
+ */
+export function lintExtensionDir(dir) {
+  const out = { files: 0, violations: [] };
+  const walk = (p) => {
+    const st = statSync(p);
+    if (st.isDirectory()) {
+      for (const name of readdirSync(p)) {
+        if (SKIP_DIR.has(name) || VENDORED_DIRS.has(name)) continue;
+        walk(join(p, name));
+      }
+      return;
+    }
+    const base = p.split("/").pop();
+    if (!isClientFile(base) || st.size > MAX_BYTES) return;
+    out.files++;
+    for (const v of lintClientSource(readFileSync(p, "utf8"))) out.violations.push({ file: p, ...v });
+  };
+  walk(resolve(dir));
+  return out;
+}
+const VENDORED_DIRS = new Set(["vendor", "monaco", "dist", "build", "assets", "static", "bundles", "chunks"]);
+
+// ── CLI ─────────────────────────────────────────────────────────────────────
+function selftest() {
+  const MUST_FAIL = [
+    "const [st, setSt] = useState<any>(null);",
+    "const r = useRef<number>(null);",
+    "const x = v as any;",
+    "function f(a: unknown) {}",
+    'import type { Foo } from "./x";',
+    "interface Foo { a: string }",
+    "enum Color { Red }",
+    "const y = v as const;",
+  ];
+  const MUST_WARN = [
+    "const opts = { mode: string };",
+    "x satisfies Y;",
+    "const m: Record<string, any> = {};",
+  ];
+  const MUST_PASS = [
+    'const REACT_TYPE_STUB = `\ndeclare module "react" {\n  export function useState<T>(init: T): [T];\n  export const Fragment: any;\n}\n`;',
+    "/** @return {{chars1: string, chars2: string}} */",
+    "const [s] = useState(null);",
+    "useState<any>(null); // check-client:allow",
+    "// check-client:allow\nuseState<never>(0);",
+    "const cmp = a < b && c > (d);",
+    "if (a // 注释里 as any 不算\n  ) run();",
+  ];
+  let bad = 0;
+  const check = (src, expect, desc) => {
+    const v = lintClientSource(src);
+    const fails = v.filter((x) => x.level === "FAIL");
+    const ok = expect === "FAIL" ? fails.length > 0 : expect === "PASS" ? v.length === 0 : v.length > 0 && fails.length === 0;
+    if (!ok) {
+      bad++;
+      console.log(`SELFTEST FAIL [${desc}] 期望 ${expect}，实际 ${JSON.stringify(v)}`);
+    }
+  };
+  MUST_FAIL.forEach((s) => check(s, "FAIL", s.slice(0, 40)));
+  MUST_WARN.forEach((s) => check(s, "WARN", s.slice(0, 40)));
+  MUST_PASS.forEach((s) => check(s, "PASS", s.replace(/\n/g, "⏎").slice(0, 40)));
+  if (bad) {
+    console.log(`selftest: ${bad} 处未过`);
+    process.exit(1);
+  }
+  console.log("selftest: 全部通过（8 FAIL / 3 WARN / 7 PASS）");
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === resolve(import.meta.filename)) {
+  if (process.argv.includes("--selftest")) {
+    selftest();
+  } else if (process.argv.length > 2) {
+    const all = { files: 0, violations: [] };
+    for (const p of process.argv.slice(2)) lintPath(resolve(p), all);
+    const fails = all.violations.filter((v) => v.level === "FAIL");
+    const warns = all.violations.filter((v) => v.level === "warn");
+    if (all.violations.length) console.log(formatViolations(all.violations));
+    console.log(`\n${all.files} 个文件：FAIL=${fails.length} warn=${warns.length}`);
+    process.exit(fails.length ? 1 : 0);
+  } else {
+    console.log("用法：node check-client.mjs <file|dir>... ｜ --selftest");
+    process.exit(2);
+  }
+}

package/client/src/aiti-mail-client.mjs

@@ -0,0 +1,269 @@
+/**
+ * aiti-mail client —— 管理弹窗（原生 mjs，宿主 h()/useState 委托）
+ *
+ * 插槽：toolbar（✉ 线图按钮入口，静态条目两段式——ui.toolbar id 与本注册 raw id 一致）
+ *      + dialogs（面板，data-ext-float 规范：拖拽/缩放/持久化/小屏全屏由 aiti-float 接管）。
+ * 两个页签：「配置」（SMTP 表单 + 发送测试）与「发送记录」（sqlite 记录表格）。
+ * 右上角 AI 按钮（🤖）由框架在 dialog 渲染层统一注入——扩展不手写。
+ */
+let _ctx = null;
+function __setCtx(ctx) { _ctx = ctx; }
+function c(name) { return _ctx?.[name] ?? function () { return undefined; }; }
+function h(type, props) {
+  var args = Array.prototype.slice.call(arguments);
+  return c("h").apply(null, args);
+}
+function useState(init) { return c("useState")(init); }
+function useEffect(fn, deps) { return c("useEffect")(fn, deps); }
+function useRef(v) { return c("useRef")(v); }
+function apiUrl(p) {
+  var fn = _ctx?.apiUrl;
+  return typeof fn === "function" ? fn(p) : p;
+}
+var API = function (p) { return apiUrl("/api/extensions/aiti-mail" + p); };
+
+// ── dock v3（P3 批）：显隐收口 aiti-float 展示状态机（手写 mjs 免构建，内联薄桥） ──
+var MAIL_KEY = "aiti-mail:panel";
+var mailLocalOpen = false; // 未装 aiti-float 的本地降级开关
+var mailFloat = function () {
+  var a = (typeof window !== "undefined") && window.__piweFloat;
+  return a && typeof a.present === "function" ? a : null;
+};
+var mailPresented = function () {
+  var a = mailFloat();
+  return a ? (a.presented(MAIL_KEY) || "closed") : (mailLocalOpen ? "floating" : "closed");
+};
+var mailSetOpen = function (v) {
+  var a = mailFloat();
+  if (a) { a.present(MAIL_KEY, v ? "open" : "close"); return; }
+  mailLocalOpen = v;
+};
+try { var mk = "pi-web:ext-float:dockpref:v1:" + MAIL_KEY; if (!localStorage.getItem(mk)) localStorage.setItem(mk, "right-panel"); } catch (e) {}
+var mailFragment = (typeof Symbol !== "undefined" && Symbol.for) ? Symbol.for("react.fragment") : 0xacb;
+
+// ── 线图（lucide 同风格，24×24 stroke） ──
+var ICONS = {
+  mail: ["M4 6h16a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2z", "m22 7-8.97 5.7a1.94 1.94 0 0 1-2.06 0L2 7"],
+  x: ["M18 6 6 18", "m6 6 12 12"],
+};
+function Ic(size, paths) {
+  return h("svg", { width: size, height: size, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor",
+    strokeWidth: 2, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true" },
+    paths.map(function (d, i) { return h("path", { key: i, d: d }); }));
+}
+
+// ── 小工具 ──
+var btnStyle = function (bg, color) {
+  return { padding: "4px 12px", borderRadius: 6, fontSize: 12, cursor: "pointer",
+    background: bg, border: "1px solid var(--border)", color: color };
+};
+var inputStyle = { padding: "5px 8px", borderRadius: 6, fontSize: 12.5, border: "1px solid var(--border)",
+  background: "var(--bg)", color: "var(--text)", width: "100%", boxSizing: "border-box" };
+var tdStyle = { padding: "4px 8px", borderBottom: "1px solid var(--border)", verticalAlign: "top", fontSize: 11.5 };
+
+// ── 打开句柄（toolbar onClick 在组件外触发；状态机收口） ──
+function requestOpen() { mailSetOpen(true); }
+
+function MailPanel() { return renderMailPanel("float"); }
+function MailDockFace() { return renderMailPanel("dock"); }
+function renderMailPanel(face) {
+  // 机器态 → 本组件同步：force-update 计数器（状态机 CHANGE_EVENT 驱动，无轮询）；
+  // 机器态在渲染时直读（useState 存值会过期）
+  var fuS = useState(0); var fuSet = fuS[1];
+  useEffect(function () {
+    var sync = function () { fuSet(function (n) { return n + 1; }); };
+    window.addEventListener("piwe-float-present-change", sync);
+    return function () { window.removeEventListener("piwe-float-present-change", sync); };
+  }, []);
+  var st = mailPresented();
+  var open = face === "float" ? st === "floating" : st === "docked:right-panel";
+  var floating = face === "float";
+  var setOpen = function (v) { mailSetOpen(v); };
+  var tabS = useState("config"); var tab = tabS[0]; var setTab = tabS[1];
+  var cfgS = useState(null); var cfg = cfgS[0]; var setCfg = cfgS[1];
+  var formS = useState({ host: "", port: "465", secure: "starttls", user: "", pass: "", from: "", testTo: "" });
+  var form = formS[0]; var setForm = formS[1];
+  var logS = useState(null); var log = logS[0]; var setLog = logS[1];
+  var msgS = useState(null); var msg = msgS[0]; var setMsg = msgS[1];
+  var busyS = useState(false); var busy = busyS[0]; var setBusy = busyS[1];
+  var liveRef = useRef(true);
+
+  var setF = function (k, v) { setForm(function (f0) { var f = Object.assign({}, f0); f[k] = v; return f; }); };
+
+  var loadConfig = function () {
+    return fetch(API("/config")).then(function (r) { return r.json(); }).then(function (d) {
+      if (!liveRef.current) return;
+      setCfg(d.config || null);
+      if (d.config) {
+        setForm(function (f0) {
+          var f = Object.assign({}, f0);
+          f.host = d.config.host || "";
+          f.port = String(d.config.port || 465);
+          f.secure = d.config.secure ? "ssl" : (d.config.noStarttls ? "none" : "starttls");
+          f.user = d.config.user || "";
+          f.from = d.config.from || "";
+          return f;
+        });
+      }
+    }).catch(function () {});
+  };
+  var loadLog = function () {
+    fetch(API("/log?limit=100")).then(function (r) { return r.json(); })
+      .then(function (d) { if (liveRef.current) setLog(d.sends || []); })
+      .catch(function () { if (liveRef.current) setLog([]); });
+  };
+  useEffect(function () {
+    liveRef.current = true;
+    if (open) { loadConfig(); loadLog(); }
+    return function () { liveRef.current = false; };
+  }, [open]);
+
+  var save = function () {
+    setBusy(true); setMsg(null);
+    var body = { host: form.host, port: Number(form.port) || (form.secure === "ssl" ? 465 : 25),
+      secure: form.secure === "ssl", noStarttls: form.secure === "none",
+      user: form.user, from: form.from };
+    if (form.pass) body.pass = form.pass; // 缺省=保留旧值（服务端语义）
+    fetch(API("/config"), { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(body) })
+      .then(function (r) { return r.json(); })
+      .then(function (d) {
+        if (!liveRef.current) return;
+        setMsg(d.ok ? { kind: "ok", text: "已保存" } : { kind: "err", text: "保存失败：" + (d.error || "?") });
+        if (d.ok) loadConfig();
+      })
+      .catch(function (e) { if (liveRef.current) setMsg({ kind: "err", text: "保存失败：" + e }); })
+      .finally(function () { if (liveRef.current) setBusy(false); });
+  };
+  var sendTest = function () {
+    setBusy(true); setMsg(null);
+    fetch(API("/test"), { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ to: form.testTo }) })
+      .then(function (r) { return r.json(); })
+      .then(function (d) {
+        if (!liveRef.current) return;
+        var rs = d.results || [];
+        var bad = rs.filter(function (r) { return r.status !== "ok"; });
+        if (d.ok) setMsg({ kind: "ok", text: "测试邮件已发送 → " + rs.map(function (r) { return r.to; }).join(", ") + "（" + rs.map(function (r) { return r.durationMs; }).join("/") + "ms）" });
+        else setMsg({ kind: "err", text: "发送失败：" + (d.error || (bad[0] && bad[0].error) || "?") });
+        loadLog();
+      })
+      .catch(function (e) { if (liveRef.current) setMsg({ kind: "err", text: "发送失败：" + e }); })
+      .finally(function () { if (liveRef.current) setBusy(false); });
+  };
+
+  if (!open) return null;
+
+  var row = function (label, el) {
+    return h("label", { key: label, style: { display: "grid", gridTemplateColumns: "72px 1fr", gap: 8, alignItems: "center", fontSize: 12 } },
+      h("span", { style: { color: "var(--text-muted)" } }, label), el);
+  };
+  var dlgRoot = {
+    position: "fixed", right: 18, bottom: 70, width: 620, maxWidth: "94vw", maxHeight: "80vh",
+    display: "flex", flexDirection: "column", zIndex: 2147483101,
+    background: "var(--bg,#fff)", color: "var(--text,#1a1a1a)",
+    border: "1px solid var(--border,#e0e0e0)", borderRadius: 16,
+    boxShadow: "0 16px 64px rgba(0,0,0,.25)", fontFamily: "inherit", overflow: "hidden",
+  };
+  var head = { display: "flex", alignItems: "center", gap: 8, padding: "10px 14px",
+    borderBottom: "1px solid var(--border,#e0e0e0)", background: "var(--bg-subtle,#f5f5f5)", flexShrink: 0 };
+  var tabBtn = function (id, label) {
+    return h("button", { key: id, onClick: function () { setTab(id); setMsg(null); if (id === "log") loadLog(); },
+      style: { padding: "3px 12px", borderRadius: 6, fontSize: 12, cursor: "pointer", border: "1px solid " + (tab === id ? "var(--border)" : "transparent"),
+        background: tab === id ? "var(--bg)" : "transparent", color: tab === id ? "var(--text)" : "var(--text-muted)",
+        fontWeight: tab === id ? 600 : 400 } }, label);
+  };
+
+  var bodyEl;
+  if (tab === "config") {
+    var hasCfg = !!cfg;
+    bodyEl = h("div", { style: { display: "flex", flexDirection: "column", gap: 8 } },
+      row("SMTP 服务器", h("input", { value: form.host, onChange: function (e) { setF("host", e.target.value); }, placeholder: "如 smtp.qq.com", style: inputStyle })),
+      h("div", { style: { display: "grid", gridTemplateColumns: "1fr 1fr", gap: 8 } },
+        row("端口", h("input", { value: form.port, onChange: function (e) { setF("port", e.target.value.replace(/\D/g, "")); }, placeholder: "465 / 587 / 25", style: inputStyle })),
+        row("加密", h("select", { value: form.secure, onChange: function (e) { setF("secure", e.target.value); }, style: inputStyle },
+          h("option", { value: "ssl" }, "SSL/TLS（465 隐式）"),
+          h("option", { value: "starttls" }, "STARTTLS（587 推荐，服务器支持则自动升级）"),
+          h("option", { value: "none" }, "不加密直连（25 等，永不升级）")))),
+      row("用户名", h("input", { value: form.user, onChange: function (e) { setF("user", e.target.value); }, placeholder: " usually 即发件邮箱", style: inputStyle })),
+      row("密码/授权码", h("input", { type: "password", value: form.pass, onChange: function (e) { setF("pass", e.target.value); },
+        placeholder: hasCfg && cfg && cfg.hasPass ? "已保存（留空=不修改）" : "SMTP 授权码（非登录密码）", style: inputStyle })),
+      row("发件人", h("input", { value: form.from, onChange: function (e) { setF("from", e.target.value); }, placeholder: "可选，缺省用用户名", style: inputStyle })),
+      h("div", { style: { display: "flex", justifyContent: "flex-end" } },
+        h("button", { disabled: busy || !form.host.trim(), onClick: save,
+          style: Object.assign(btnStyle("#3b82f6", "#fff"), { opacity: busy || !form.host.trim() ? 0.5 : 1 }) }, busy ? "保存中…" : "保存配置")),
+      h("div", { style: { borderTop: "1px solid var(--border)", paddingTop: 8, display: "flex", flexDirection: "column", gap: 8 } },
+        h("div", { style: { fontSize: 12, fontWeight: 600 } }, "发送测试"),
+        row("测试收件人", h("input", { value: form.testTo, onChange: function (e) { setF("testTo", e.target.value); },
+          placeholder: "you@example.com", style: inputStyle })),
+        h("div", { style: { display: "flex", justifyContent: "flex-end" } },
+          h("button", { disabled: busy || !form.testTo.trim() || !cfg, onClick: sendTest,
+            style: Object.assign(btnStyle("var(--bg-hover)", "var(--text)"), { opacity: busy || !form.testTo.trim() || !cfg ? 0.5 : 1 }),
+            title: !cfg ? "先保存配置" : "" }, "发送测试")),
+        h("div", { style: { fontSize: 11, color: "var(--text-muted)" } },
+          "提示：QQ/163 邮箱需在邮箱设置里开启 SMTP 并使用「授权码」。密码只存本机 configDir/config.json（0600），API 不回显。")));
+  } else {
+    bodyEl = h("div", null,
+      h("div", { style: { display: "flex", justifyContent: "flex-end", marginBottom: 6 } },
+        h("button", { onClick: loadLog, style: btnStyle("var(--bg-hover)", "var(--text)") }, "刷新")),
+      log === null
+        ? h("div", { style: { color: "var(--text-muted)", fontSize: 12 } }, "加载中…")
+        : log.length === 0
+          ? h("div", { style: { color: "var(--text-muted)", fontSize: 12, padding: "20px 0", textAlign: "center" } }, "暂无发送记录")
+          : h("table", { style: { width: "100%", borderCollapse: "collapse", fontSize: 11.5 } },
+              h("thead", null, h("tr", null, ["时间", "收件人", "主题", "状态", "耗时", "来源"].map(function (th) {
+                return h("th", { key: th, style: { textAlign: "left", padding: "4px 8px", borderBottom: "1px solid var(--border)", color: "var(--text-muted)" } }, th);
+              }))),
+              h("tbody", null, log.map(function (r) {
+                return h("tr", { key: r.id },
+                  h("td", { style: tdStyle, title: r.ts }, new Date(r.ts).toLocaleString()),
+                  h("td", { style: tdStyle }, r.to_addr),
+                  h("td", { style: Object.assign({}, tdStyle, { maxWidth: 200, overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" }), title: r.subject }, r.subject),
+                  h("td", { style: Object.assign({}, tdStyle, { color: r.status === "ok" ? "var(--ok, #10b981)" : "var(--danger, #ef4444)" }), title: r.error || "" }, r.status === "ok" ? "ok" : "error"),
+                  h("td", { style: tdStyle }, r.duration_ms != null ? r.duration_ms + "ms" : ""),
+                  h("td", { style: tdStyle }, r.source || ""));
+              }))),
+      h("div", { style: { fontSize: 11, color: "var(--text-muted)", marginTop: 8 } }, "记录保留 90 天（cache/mails.db）。"));
+  }
+
+  var panelEl = h(mailFragment, null,
+    h("div", { style: head },
+      floating ? h("span", { style: { fontWeight: 700, fontSize: 14, display: "flex", alignItems: "center", gap: 6 } },
+        Ic(15, ICONS.mail), "邮件") : null,
+      h("span", { style: { flex: 1 } }),
+      tabBtn("config", "配置"),
+      tabBtn("log", "发送记录"),
+      floating ? h("button", { onClick: function () { setOpen(false); }, "aria-label": "关闭", title: "关闭",
+        style: { background: "none", border: "none", color: "var(--text-muted)", cursor: "pointer", padding: "2px 6px", flexShrink: 0 } },
+        Ic(12, ICONS.x)) : null),
+    h("div", { style: { flex: 1, minHeight: 0, overflowY: "auto", padding: 12 } },
+      msg && h("div", { role: "alert",
+        style: { marginBottom: 8, padding: "6px 10px", borderRadius: 6, fontSize: 12,
+          background: msg.kind === "ok" ? "color-mix(in srgb, var(--ok, #10b981) 12%, transparent)" : "color-mix(in srgb, var(--danger, #ef4444) 12%, transparent)",
+          color: msg.kind === "ok" ? "var(--ok, #10b981)" : "var(--danger, #ef4444)" } }, msg.text),
+      bodyEl));
+  // dock v3 分面：float = 浮窗壳（float 契约）；dock = 右栏 tab（embedded 铺满，TabBar ✕ 关闭）
+  if (floating) {
+    return h("div", { "data-ext-float": "1", "data-ext-float-key": MAIL_KEY, "data-ext-float-dock": "right-panel",
+      "data-ext-float-dock-default": "right-panel",
+      "data-ext-float-w": 620, "data-ext-float-h": 540, "data-ext-float-full": "1", style: dlgRoot }, panelEl);
+  }
+  return h("div", { style: { width: "100%", height: "100%", display: "flex", flexDirection: "column", background: "var(--bg,#fff)", color: "var(--text,#1a1a1a)", overflow: "hidden" } }, panelEl);
+}
+
+function register(ctx) {
+  __setCtx(ctx);
+  ctx.registerItems("toolbar", [{
+    id: "aiti-mail-open",
+    meta: {
+      label: "邮件",
+      title: "邮件：SMTP 配置 / 发送测试 / 发送记录",
+      icon: "icons/mail.svg",
+      onClick: function () { requestOpen(); },
+    },
+  }]);
+  ctx.registerItems("dialogs", [{ id: "aiti-mail-panel", render: MailPanel }]);
+  // aiti-float dock v3（P3 批）：右栏「邮件」tab（id 拼后 = MAIL_KEY）
+  ctx.registerItems("rightFileDock", [{ id: "panel", render: MailDockFace, meta: { title: "邮件" } }]);
+  try { console.log("[aiti-mail] 管理弹窗已挂载（toolbar ✉ 入口 → dialogs 弹窗）"); } catch (e) { /* noop */ }
+}
+
+export { register as default };

package/deploy-commit.mjs

@@ -0,0 +1,52 @@
+/**
+ * deploy 脚本共享「部署状态 commit」助手（pi-web-ext 各扩展 tools/deploy.mjs 统一用）。
+ *
+ * 背景（2026-08-30 排障，session 0cc6ad47 op264）：重复部署同内容时
+ * `git add -A && git commit` 以 "nothing to commit" exit 1，而 stdio:"ignore" 吞掉
+ * stderr，输出「提交失败（忽略）：Command failed: …」假报警（msg-smart 实证）；
+ * 另有 --allow-empty 族每次部署都造空 commit 噪音。本助手统一三态语义：
+ *   committed → 有暂存变更，已提交
+ *   clean     → 无变更，跳过（不算失败）
+ *   failed    → git 真失败（带 stderr 首行，不阻断部署——部署本体永远优先）
+ *
+ * 用法：
+ *   import { deployCommit } from "../../_shared/deploy-commit.mjs";
+ *   deployCommit({ repo: extRepo, name: "aiti-msg-smart", paths: ["aiti-msg-smart"],
+ *                  log: (m) => console.log("[deploy] " + m) });
+ *
+ * 红线：本助手永不 throw、不触碰部署产物路径之外的任何东西；只对 <repo> 做
+ * add/diff/commit（默认 --no-verify，extRepo 无 hooks，防未来误挂）。
+ */
+import { execFileSync } from "node:child_process";
+
+export function deployCommit({ repo, name, paths = null, extraMsg = "", ident = false, log = console.log }) {
+  const git = (args) =>
+    execFileSync("git", args, { cwd: repo, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+  const firstLine = (s) => String(s || "").trim().split("\n")[0];
+  try {
+    // 暂存：默认只收本扩展子目录（与 add <ext> 行为对齐；避免把别的扩展的
+    // 未提交改动卷进本扩展的部署 commit）；paths=null 时退回 add -A 全仓。
+    git(["add", ...(paths && paths.length ? ["--", ...paths] : ["-A"])]);
+    let dirty;
+    try {
+      git(["diff", "--cached", "--quiet"]);
+      dirty = false; // exit 0 = 暂存区与 HEAD 一致
+    } catch (e) {
+      if (e.status !== 1) throw e; // 1 = 有变更；其他才是真错误
+      dirty = true;
+    }
+    if (!dirty) {
+      log("扩展仓库无变化（跳过提交）");
+      return { status: "clean" };
+    }
+    const stamp = new Date().toISOString().replace("T", " ").slice(0, 19);
+    const msg = `[deploy] ${name} · ${stamp}${extraMsg ? " · " + extraMsg : ""}`;
+    git([...(ident ? ["-c", "user.name=deploy", "-c", "user.email=deploy@local"] : []), "commit", "--no-verify", "-m", msg]);
+    log("扩展仓库已提交：" + msg);
+    return { status: "committed", msg };
+  } catch (e) {
+    const reason = firstLine(e.stderr) || firstLine(e.message) || "git error";
+    log("提交失败（忽略，不影响部署）：" + reason);
+    return { status: "failed", reason };
+  }
+}