@allbluecn/kernel 0.10.0 → 0.10.2

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as dumpModules, et as generateAssemblyCode, it as resolvePluginOrder, nt as parseProfileImports, tt as generateAssemblyFiles } from "./src-CKvw-8uC.js";
+import { $ as dumpModules, et as generateAssemblyCode, it as parseProfileImports, ot as resolvePluginOrder, rt as extractPluginLocalNames, tt as generateAssemblyFiles } from "./src-CyBj_lD7.js";
 import { parseArgs } from "node:util";
 import { pathToFileURL } from "node:url";
 import { dirname, relative, resolve } from "node:path";
@@ -86,11 +86,6 @@ async function main() {
 		return;
 	}
 }
-function extractPluginLocalNames(source) {
-	const match = source.match(/plugins:\s*\[([^\]]*)\]/s);
-	if (!match) return [];
-	return match[1].split(",").map((s) => s.trim()).filter(Boolean);
-}
 async function writeAssemblyFiles(appDir, assembly) {
 	const { writeFile, readFile, unlink, mkdir } = await import("node:fs/promises");
 	const { join } = await import("node:path");
@@ -102,7 +97,13 @@ async function writeAssemblyFiles(appDir, assembly) {
 	await writeFile(join(pluginsDir, "ui.gen.ts"), assembly.uiGen + "\n");
 	const manifestPath = join(pluginsDir, ".gen-manifest.json");
 	const oldManifest = await readFile(manifestPath, "utf8").catch(() => null);
-	const oldFiles = oldManifest ? JSON.parse(oldManifest).routeFiles : [];
+	let oldFiles = [];
+	if (oldManifest) try {
+		const parsed = JSON.parse(oldManifest);
+		oldFiles = Array.isArray(parsed.routeFiles) ? parsed.routeFiles.filter((f) => typeof f === "string") : [];
+	} catch {
+		console.warn(`旧 gen-manifest 损坏（${manifestPath}），已忽略并重新生成`);
+	}
 	const newFiles = [...assembly.routeFiles.keys()];
 	for (const f of oldFiles) if (!newFiles.includes(f)) await unlink(join(appDir, f)).catch(() => {});
 	for (const [file, content] of assembly.routeFiles.entries()) {

package/dist/contract/infrastructure/crypto.js

@@ -7,10 +7,22 @@ const ALGO = "aes-256-gcm";
 const IV_BYTES = 12;
 const VERSION = "v1";
 let cachedKey = null;
+let randomFallbackWarned = false;
+function resolveSecret() {
+	const secret = process.env.AUTH_SECRET;
+	if (secret) return secret;
+	if (process.env.DEPLOY_TARGET === "desktop") {
+		if (!randomFallbackWarned) {
+			randomFallbackWarned = true;
+			console.warn("[kernel/crypto] AUTH_SECRET 未设置：已派生进程级随机密钥（仅限桌面端；重启后历史密文将无法解密）");
+		}
+		return randomBytes(32).toString("base64url");
+	}
+	throw new Error("[kernel/crypto] 缺少 AUTH_SECRET 环境变量：拒绝使用可预测密钥加密敏感数据。生产/开发部署必须显式配置 AUTH_SECRET；仅桌面端可设 DEPLOY_TARGET=desktop 启用进程级随机密钥。");
+}
 function deriveKey() {
 	if (cachedKey) return cachedKey;
-	const secret = process.env.AUTH_SECRET ?? "dev-only-secret";
-	cachedKey = pbkdf2Sync(secret, KDF_SALT, KDF_ITERATIONS, KEY_BYTES, "sha256");
+	cachedKey = pbkdf2Sync(resolveSecret(), KDF_SALT, KDF_ITERATIONS, KEY_BYTES, "sha256");
 	return cachedKey;
 }
 /** 格式：v1.<iv-b64url>.<cipher-b64url>.<tag-b64url> */
@@ -23,10 +35,11 @@ function encryptSecret(plain) {
 }
 function decryptSecret(payload) {
 	if (!payload) return null;
+	const key = deriveKey();
 	try {
 		const [v, ivS, dataS, tagS] = payload.split(".");
 		if (v !== VERSION || !ivS || !dataS || !tagS) return null;
-		const decipher = createDecipheriv(ALGO, deriveKey(), Buffer.from(ivS, "base64url"));
+		const decipher = createDecipheriv(ALGO, key, Buffer.from(ivS, "base64url"));
 		decipher.setAuthTag(Buffer.from(tagS, "base64url"));
 		return Buffer.concat([decipher.update(Buffer.from(dataS, "base64url")), decipher.final()]).toString("utf8");
 	} catch {

package/dist/index.d.ts

@@ -398,7 +398,7 @@ interface AnalyticsService {
 }
 //#endregion
 //#region src/pro-contract/global-search.d.ts
-interface SearchResult$1 {
+interface SearchResult {
   id: string;
   type: 'document' | 'project' | 'story' | 'comment' | 'user' | 'tag';
   title: string;
@@ -411,13 +411,13 @@ interface SearchResult$1 {
 interface SearchParams {
   query: string;
   workspaceId?: string | null;
-  types?: Array<SearchResult$1['type']>;
+  types?: Array<SearchResult['type']>;
   limit?: number;
   offset?: number;
 }
 interface GlobalSearchService {
   search(params: SearchParams): Promise<{
-    results: SearchResult$1[];
+    results: SearchResult[];
     total: number;
   }>;
   index(documentId: string, content: string, metadata: Record<string, unknown>): Promise<void>;
@@ -463,7 +463,12 @@ interface ComplianceService {
 //#endregion
 //#region src/pro-contract/module.d.ts
 type ProEdition = 'oss' | 'pro';
-type ProFeature = 'billing' | 'hostedAi' | 'sso' | 'audit' | 'permissions' | 'license' | 'versionHistory' | 'automation' | 'templates' | 'analytics' | 'globalSearch' | 'compliance';
+/**
+ * Pro 功能键单一来源（generate-assembly 的 implementedModules 生成亦消费此常量）。
+ * 新增 feature 只改这里；ProFeature 联合类型由本数组派生，杜绝双维护漂移。
+ */
+declare const PRO_FEATURES: readonly ['billing', 'hostedAi', 'sso', 'audit', 'permissions', 'license', 'versionHistory', 'automation', 'templates', 'analytics', 'globalSearch', 'compliance'];
+type ProFeature = (typeof PRO_FEATURES)[number];
 interface ProModule {
   readonly isAvailable: boolean;
   readonly edition: ProEdition;
@@ -582,6 +587,13 @@ declare function generateAssemblyFiles(input: AssembleInput): AssemblyFiles;
 declare function dumpModules(profileId: string, resolved: ResolveResult): string;
 //#endregion
 //#region src/server-seam.d.ts
+/**
+ * Seam 注入模式：宿主（start.ts）与 database 包各自注册实现，契约包只声明接口。
+ *
+ * ServerSeam —— 宿主注入（鉴权 / 会话 / 平台判定）；
+ * PrismaSeam —— database 包注入（prisma 接入点，解决 shared → database → shared 循环依赖）。
+ * 两者同构的「模块级单例 + 注册 + 未注册抛错」逻辑由 createSeam 泛型工厂统一提供。
+ */
 interface HostSession {
   user?: {
     id?: string;
@@ -590,14 +602,20 @@ interface HostSession {
   } | null;
   [key: string]: unknown;
 }
+/** 鉴权成功后的会话形状：注册实现（web/admin requireAuth）保证 user.id 必在，消费方免 `session.user!.id!` 断言 */
+type AuthedHostSession = HostSession & {
+  user: {
+    id: string;
+    role?: string | null;
+    [key: string]: unknown;
+  };
+};
 interface ServerSeam {
-  requireAuth: (request?: Request) => Promise<HostSession>;
+  requireAuth: (request?: Request) => Promise<AuthedHostSession>;
   requireUserInDb: (userId: string) => Promise<void>;
   getCurrentSession: (request?: Request) => Promise<HostSession | null>;
   isDesktop: () => boolean;
 }
-declare function registerServerSeam(impl: ServerSeam): void;
-declare function getServerSeam(): ServerSeam;
 /**
  * PrismaSeam — 注入式 prisma 接入点
  *
@@ -610,8 +628,14 @@ interface PrismaSeam {
     create: (data: unknown) => Promise<unknown>;
     findMany: (where: unknown) => Promise<unknown[]>;
   };
+  /**
+   * ⚠ 硬约束：`sql` 必须是常量字符串（模板内不允许出现任何来源的用户输入拼接），
+   * 用户输入只允许通过 `...params` 占位参数传入。违反即为 SQL 注入。
+   */
   $queryRawUnsafe: <T = Record<string, unknown>>(sql: string, ...params: unknown[]) => Promise<T[]>;
 }
+declare function registerServerSeam(impl: ServerSeam): void;
+declare function getServerSeam(): ServerSeam;
 declare function registerPrismaSeam(seam: PrismaSeam): void;
 //#endregion
 //#region src/contract/constants/perf.d.ts
@@ -623,7 +647,7 @@ declare const DND_STICKY_THRESHOLD = 500;
 type AdapterKind = 'openai' | 'anthropic' | 'gemini' | 'groq' | 'grok' | 'openrouter' | 'ollama' | 'openai-compatible' | 'mistral' | 'bedrock' | 'byteplus' | 'fal' |
 /** harness 型 provider（需沙箱上下文，不走 createProviderAdapter 普通路径） */
 'harness-claude-code' | 'harness-codex' | 'harness-acp' | 'harness-opencode';
-type ProviderCategory = 'recommended' | 'popular' | 'local' | 'harness' | 'hosted';
+type ProviderCategory = 'recommended' | 'popular' | 'local' | 'harness';
 type ModelCapability = 'text' | 'vision' | 'tools' | 'reasoning' | 'audio';
 interface AiModelMeta {
   /** 模型 ID（传给 adapter 的 model 字符串） */
@@ -681,7 +705,13 @@ interface AiProviderRow extends AiProviderMeta {
 /** 模型来源模式：平台托管 / 本地 Agent / 使用自己的 Key */
 type AiSourceMode = 'hosted' | 'local-agent' | 'byok';
 declare const AI_SOURCE_MODES: readonly ['hosted', 'local-agent', 'byok'];
-/** 卡片角标的预设颜色（按文案匹配），admin 也可自由输入文案 */
+/**
+ * 卡片角标的预设颜色（按文案匹配），admin 也可自由输入文案。
+ *
+ * ⚠ 这里的类名字符串位于 npm 包 dist 内，app 侧 Tailwind v4 不会自动扫描
+ * node_modules——消费方 globals.css 必须显式 `@source` 指向本包 dist，
+ * 否则角标样式在生产构建被 tree-shake 静默丢失（不报错）。
+ */
 declare const PROVIDER_BADGE_STYLES: Record<string, string>;
 //#endregion
 //#region src/contract/modules/ai-providers/constants.d.ts
@@ -690,6 +720,11 @@ declare const ADAPTER_KINDS: Array<{
   label: string;
   description: string;
 }>;
+/**
+ * 服务商分类筛选项。有意不含 'harness'（沙箱 harness 型服务商需专用上下文，
+ * 不进常规筛选）与 'hosted'（已从 ProviderCategory 移除，托管语义归
+ * AiSourceMode）；若未来放开筛选，在此补全映射。
+ */
 declare const PROVIDER_CATEGORIES: Array<{
   value: ProviderCategory;
   label: string;
@@ -716,19 +751,36 @@ declare const MODEL_TABS: Array<{
 declare const LOBE_ICON_MAP: Record<string, string>;
 //#endregion
 //#region src/contract/modules/ai-providers/seed-data.d.ts
-/** 10 个最受欢迎 AI 服务商的种子数据，admin 可在其基础上增删改 */
+/** 18 个 AI 服务商的种子数据（14 个常规 + 4 个 harness 沙箱型），admin 可在其基础上增删改 */
 declare const SEED_AI_PROVIDERS: AiProviderMeta[];
 //#endregion
-//#region src/contract/modules/ai-prompts/types.d.ts
-interface SystemPromptSectionDTO {
+//#region src/contract/modules/ai-prompts/builtin.d.ts
+interface PromptSection {
   id: string;
   order: number;
   template: string;
 }
-interface PromptVariableDefDTO {
+interface PromptVariableDef {
   name: string;
   description: string;
 }
+interface PromptDefinition {
+  key: string;
+  name: string;
+  description?: string;
+  sections: PromptSection[];
+  variables: PromptVariableDef[];
+  isProtected: boolean;
+}
+declare const TIPTAP_ACTION_INSTRUCTIONS: Record<string, string>;
+declare const PROMPT_DEFINITIONS: PromptDefinition[];
+declare function listPromptDefinitions(): PromptDefinition[];
+declare function getPromptDefinition(key: string): PromptDefinition | undefined;
+declare function promptDefinitionKeys(): string[];
+//#endregion
+//#region src/contract/modules/ai-prompts/types.d.ts
+type SystemPromptSectionDTO = PromptSection;
+type PromptVariableDefDTO = PromptVariableDef;
 interface SystemPromptTemplateDTO {
   id: string;
   key: string;
@@ -757,30 +809,6 @@ declare class UnknownPromptVariableError extends Error {
 }
 declare function interpolateTemplate(template: string, vars: Record<string, string>): string;
 //#endregion
-//#region src/contract/modules/ai-prompts/builtin.d.ts
-interface PromptSection {
-  id: string;
-  order: number;
-  template: string;
-}
-interface PromptVariableDef {
-  name: string;
-  description: string;
-}
-interface PromptDefinition {
-  key: string;
-  name: string;
-  description?: string;
-  sections: PromptSection[];
-  variables: PromptVariableDef[];
-  isProtected: boolean;
-}
-declare const TIPTAP_ACTION_INSTRUCTIONS: Record<string, string>;
-declare const PROMPT_DEFINITIONS: PromptDefinition[];
-declare function listPromptDefinitions(): PromptDefinition[];
-declare function getPromptDefinition(key: string): PromptDefinition | undefined;
-declare function promptDefinitionKeys(): string[];
-//#endregion
 //#region src/contract/modules/dependencies/index.d.ts
 /** 依赖分类 */
 type DependencyCategory = 'framework' | 'ui' | 'editor' | 'ai' | 'state' | 'auth' | 'tool' | 'other';
@@ -876,7 +904,13 @@ declare const DEFAULT_WATCHED_DEPENDENCIES: DependencySeed[];
 declare function resolveIpLocation(ip: string | null | undefined): Promise<string>;
 /**
  * 从 Request 中提取客户端真实 IP
- * 优先级：X-Forwarded-For > X-Real-IP > CF-Connecting-IP
+ *
+ * 优先级：CF-Connecting-IP（Cloudflare 平台注入的权威头，客户端不可伪造）
+ * > X-Real-IP > X-Forwarded-For 末段。
+ *
+ * ⚠ 前提声明：XFF 首值可由客户端任意伪造，因此取**末段**（最靠近本服务的
+ * 可信代理所追加的一跳）。部署平台若自身不覆写 XFF（Vercel 会覆写），
+ * 末段仍可能被上游代理链污染；Cloudflare 场景以 CF-Connecting-IP 为准。
  */
 declare function getClientIp(request: Request): string | null;
 //#endregion
@@ -895,10 +929,37 @@ interface ParsedUA {
 }
 declare function parseUserAgent(ua: string | null | undefined): ParsedUA;
 /**
- * 将 ParsedUA 拼接为可读字符串，如 "Chrome 120 / Windows 10/11 / 桌面"
+ * 将 ParsedUA 拼接为可读字符串，如 "Chrome 120 / Windows 10/11 / Desktop"
+ * （输出为英文原文；中文文案由展示层经 paraglide 映射）
  */
 declare function formatParsedUA(parsed: ParsedUA): string;
 //#endregion
+//#region src/contract/interfaces/references.d.ts
+interface RefDisplay {
+  title: string;
+  status?: string;
+  priority?: string;
+  url?: string;
+}
+interface Reference {
+  id: string;
+  sourceModule: string;
+  sourceEntityId: string;
+  targetModule: string;
+  targetEntityId: string;
+}
+interface ResolvedRef extends Reference {
+  display: RefDisplay;
+}
+interface SearchResult$1 {
+  id: string;
+  module: string;
+  type: string;
+  title: string;
+  status?: string;
+  url?: string;
+}
+//#endregion
 //#region src/contract/interfaces/module.d.ts
 interface EntityDef {
   type: string;
@@ -927,12 +988,7 @@ interface AICommandDef {
   entityTypes: string[];
   handler: AICommandHandler;
 }
-type ReferenceDisplayFn = (type: string, data: Record<string, unknown>) => {
-  title: string;
-  status?: string;
-  priority?: string;
-  url?: string;
-};
+type ReferenceDisplayFn = (type: string, data: Record<string, unknown>) => RefDisplay;
 interface AllBlueModule {
   id: string;
   name: string;
@@ -943,32 +999,6 @@ interface AllBlueModule {
   referenceDisplay: ReferenceDisplayFn;
 }
 //#endregion
-//#region src/contract/interfaces/references.d.ts
-interface RefDisplay {
-  title: string;
-  status?: string;
-  priority?: string;
-  url?: string;
-}
-interface Reference {
-  id: string;
-  sourceModule: string;
-  sourceEntityId: string;
-  targetModule: string;
-  targetEntityId: string;
-}
-interface ResolvedRef extends Reference {
-  display: RefDisplay;
-}
-interface SearchResult {
-  id: string;
-  module: string;
-  type: string;
-  title: string;
-  status?: string;
-  url?: string;
-}
-//#endregion
 //#region src/contract/interfaces/ai.d.ts
 interface CLIAgentInfo {
   id: string;
@@ -991,7 +1021,8 @@ interface AiAdapter {
     entityIds: string[];
     userInput?: string;
   }): AsyncGenerator<string>;
-  getActiveAgent(): string;
+  /** 当前 agent id；未选择时为 null（与 infrastructure/ai/adapter.ts 实现一致） */
+  getActiveAgent(): string | null;
   switchAgent(agentId: string): void;
 }
 //#endregion
@@ -1219,6 +1250,7 @@ declare function isResourceDefined(key: string): key is ResourceKey;
 interface DeveloperLogEntry {
   id: string;
   date: string;
+  /** DB 列投影（developerLog.year，供 orderBy/分组直用），恒等于 date 的年份——改列需同步迁移 */
   year: string;
   title: string;
   desc: string;
@@ -1285,12 +1317,26 @@ declare function normalizeCategoryFrequencies(raw: unknown): CategoryFrequencies
  * 部分缺失（只有部分 key）或缺失值非布尔（类型错误）时，该 key 用默认值。
  */
 declare function normalizeEmailCategories(raw: unknown): CategoryEmailFlags;
+/**
+ * 判定 now（HH:MM）是否落在勿扰窗口内（支持跨零点）。
+ *
+ * 畸形时间输入（空串 / 非数字，如 DB 脏数据）旧实现产出 NaN、比较恒 false、
+ * DND 静默失效——现显式校验，畸形时告警一次并按「不在勿扰窗口」处理。
+ */
 declare function isInDndWindow(prefs: Pick<NotificationPreferences, 'dndEnabled' | 'dndStart' | 'dndEnd'>, now: string): boolean;
 //#endregion
 //#region src/contract/modules/registry.d.ts
 declare class ModuleRegistry {
   private modules;
-  register(mod: AllBlueModule): void;
+  /**
+   * 注册模块。同 id 重复注册的语义：
+   * - 显式 `{ overwrite: true }`：警告并覆盖（有意的替换场景）；
+   * - 生产环境：视为装配期配置错误直接抛出，避免「两个模块意外同 id」被静默掩盖；
+   * - dev/test/HMR：警告并覆盖（模块双执行 / 热更新场景保持宽松）。
+   */
+  register(mod: AllBlueModule, options?: {
+    overwrite?: boolean;
+  }): void;
   getModule(id: string): AllBlueModule | undefined;
   getAll(): AllBlueModule[];
   getAICommands(): AICommandDef[];
@@ -1400,8 +1446,8 @@ interface DesignVersionWithSemver extends DesignVersionBase {
   minor: number;
   patch: number;
 }
-declare const ICON_MAP: Record<string, React.ComponentType<{
+declare const ICON_MAP: Record<string, ComponentType<{
   className?: string;
 }>>;
 //#endregion
-export { ADAPTER_KINDS, ADAPTER_KIND_VALUES, type AICommandContext, type AICommandDef, type AICommandHandler, type AICommandResult, AI_SOURCE_MODES, type ActivationResult, AdapterKind, type AiAdapter, AiModelMeta, AiProviderMeta, AiProviderRow, type AiQuota, AiSourceMode, type AllBlueModule, type AnalyticsQuery, type AnalyticsResult, type AnalyticsService, type AssembleInput, type AssemblyFiles, type AuditLogEntry, type AuditQuery, type AuditService, type AutomationRule, type AutomationService, type AvatarConfig, type AvatarPart, type BillingService, BillingUnavailableError, type CLIAgentInfo, type CanvasElement, CategoryEmailFlags, CategoryFrequencies, type CheckoutParams, type ComplianceJobSummary, type ComplianceService, type ComponentCategory, type ComponentSource, type CustomDashboard, DEFAULT_CATEGORIES, DEFAULT_EMAIL_CATEGORIES, DEFAULT_WATCHED_DEPENDENCIES, DEPENDENCY_CATEGORIES, DEPENDENCY_PRIORITIES, DEVICE_SIZES, DND_STICKY_THRESHOLD, DependencyCategory, DependencyPriority, DependencySeed, DependencyUsage, type Design, type DesignDetail, type DesignVersionWithPages, type DesignVersionWithSemver, type DeveloperLogEntry, type DeviceType, type DocumentTemplate, type DocumentVersion, type EditableFieldType, type EditablePropField, type EntityDef, type EntityUpdateEvent, FEATURE_KEYS, type FeatureContribution, type FeatureKey, type FeatureMeta, FeatureRegistry, type GlobalSearchService, type HostSession, type HostedAiChatParams, type HostedAiChatResult, HostedAiError, type HostedAiModel, type HostedAiService, ICON_MAP, type InvoiceInfo, LOAD_MORE_STEP, LOBE_ICON_MAP, type LicenseInfo, type LicenseIssueParams, type LicenseIssueResult, type LicenseService, type LicenseStatus, MODEL_CAPABILITY_OPTIONS, MODEL_TABS, type Middleware, ModelCapability, ModelTab, NOTIFICATION_CATEGORIES, NOTIFICATION_FREQUENCIES, NotificationCategory, NotificationFrequency, NotificationItem, NotificationListResult, NotificationPreferences, NotificationSsePayload, NotificationSseValue, OSS_BASE_FEATURES, type OutlineNode, PROMPT_DEFINITIONS, PROVIDER_BADGE_STYLES, PROVIDER_CATEGORIES, PROVIDER_CATEGORY_VALUES, type ParsedUA, type PermissionLevel, type PermissionsService, type PlanFeatures, PlanFeaturesSchema, type PlanInfo, type PluginContributions, type PluginDefinition, type PluginRouteContext, type PortalSessionParams, type PrismaContribution, type PrismaSeam, type ProEdition, type ProFeature, type ProModule, type ProServiceMap, type ProfileDefinition, PromptDefinition, PromptSection, PromptVariableDef, PromptVariableDefDTO, type PrototypeComponentConfig, ProviderCategory, type QueryFactoryMap, RESOURCE_KEYS, type RealtimeTransport, type RefDisplay, type Reference, type ReferenceDisplayFn, type ResizeDirection, type ResizeMode, type ResolveResult, type ResolvedRef, type ResourceKey, type ResourceMeta, ResourceRegistry, type ResourceSnapshot, type ResourceSnapshots, type RoleDefinition, type RouteContribution, SEED_AI_PROVIDERS, type SearchParams, type SearchResult, type SeatCheckResult, SeatsExceededError, type ServerSeam, type SettingsTabContribution, type ShapeType, type SsoProvider, type SsoService, type SubscriptionInfo, SyncDependencyResult, SystemPromptSectionDTO, SystemPromptTemplateDTO, SystemPromptVersionDTO, TIPTAP_ACTION_INSTRUCTIONS, type TemplatesService, ThirdPartyDependencyRow, type UiSlotContributions, UnknownPromptVariableError, UnreadSnapshotPayload, UpdateDependencyInput, VIRTUALIZE_THRESHOLD, type VersionHistoryService, VersionStatus, WebhookSignatureError, definePlugin, defineProfile, dumpModules, formatParsedUA, generateAssemblyCode, generateAssemblyFiles, getClientIp, getPromptDefinition, getServerSeam, interpolateTemplate, isInDndWindow, isOssFeature, isResourceDefined, listPromptDefinitions, moduleRegistry, normalizeCategoryFrequencies, normalizeEmailCategories, parseProfileImports, parseUserAgent, promptDefinitionKeys, registerPrismaSeam, registerServerSeam, resolveImportSpecifiers, resolveIpLocation, resolvePluginOrder };
+export { ADAPTER_KINDS, ADAPTER_KIND_VALUES, type AICommandContext, type AICommandDef, type AICommandHandler, type AICommandResult, AI_SOURCE_MODES, type ActivationResult, AdapterKind, type AiAdapter, AiModelMeta, AiProviderMeta, AiProviderRow, type AiQuota, AiSourceMode, type AllBlueModule, type AnalyticsQuery, type AnalyticsResult, type AnalyticsService, type AssembleInput, type AssemblyFiles, type AuditLogEntry, type AuditQuery, type AuditService, type AutomationRule, type AutomationService, type AvatarConfig, type AvatarPart, type BillingService, BillingUnavailableError, type CLIAgentInfo, type CanvasElement, CategoryEmailFlags, CategoryFrequencies, type CheckoutParams, type ComplianceJobSummary, type ComplianceService, type ComponentCategory, type ComponentSource, type CustomDashboard, DEFAULT_CATEGORIES, DEFAULT_EMAIL_CATEGORIES, DEFAULT_WATCHED_DEPENDENCIES, DEPENDENCY_CATEGORIES, DEPENDENCY_PRIORITIES, DEVICE_SIZES, DND_STICKY_THRESHOLD, DependencyCategory, DependencyPriority, DependencySeed, DependencyUsage, type Design, type DesignDetail, type DesignVersionWithPages, type DesignVersionWithSemver, type DeveloperLogEntry, type DeviceType, type DocumentTemplate, type DocumentVersion, type EditableFieldType, type EditablePropField, type EntityDef, type EntityUpdateEvent, FEATURE_KEYS, type FeatureContribution, type FeatureKey, type FeatureMeta, FeatureRegistry, type SearchResult as GlobalSearchResult, type GlobalSearchService, type HostSession, type HostedAiChatParams, type HostedAiChatResult, HostedAiError, type HostedAiModel, type HostedAiService, ICON_MAP, type InvoiceInfo, LOAD_MORE_STEP, LOBE_ICON_MAP, type LicenseInfo, type LicenseIssueParams, type LicenseIssueResult, type LicenseService, type LicenseStatus, MODEL_CAPABILITY_OPTIONS, MODEL_TABS, type Middleware, ModelCapability, ModelTab, NOTIFICATION_CATEGORIES, NOTIFICATION_FREQUENCIES, NotificationCategory, NotificationFrequency, NotificationItem, NotificationListResult, NotificationPreferences, NotificationSsePayload, NotificationSseValue, OSS_BASE_FEATURES, type OutlineNode, PROMPT_DEFINITIONS, PROVIDER_BADGE_STYLES, PROVIDER_CATEGORIES, PROVIDER_CATEGORY_VALUES, PRO_FEATURES, type ParsedUA, type PermissionLevel, type PermissionsService, type PlanFeatures, PlanFeaturesSchema, type PlanInfo, type PluginContributions, type PluginDefinition, type PluginRouteContext, type PortalSessionParams, type PrismaContribution, type PrismaSeam, type ProEdition, type ProFeature, type ProModule, type ProServiceMap, type ProfileDefinition, PromptDefinition, PromptSection, PromptVariableDef, PromptVariableDefDTO, type PrototypeComponentConfig, ProviderCategory, type QueryFactoryMap, RESOURCE_KEYS, type RealtimeTransport, type RefDisplay, type Reference, type ReferenceDisplayFn, type ResizeDirection, type ResizeMode, type ResolveResult, type ResolvedRef, type ResourceKey, type ResourceMeta, ResourceRegistry, type ResourceSnapshot, type ResourceSnapshots, type RoleDefinition, type RouteContribution, SEED_AI_PROVIDERS, type SearchParams, type SearchResult$1 as SearchResult, type SeatCheckResult, type SeatUpdateParams, SeatsExceededError, type ServerSeam, type SettingsTabContribution, type ShapeType, type SsoProvider, type SsoService, type SubscriptionInfo, SyncDependencyResult, SystemPromptSectionDTO, SystemPromptTemplateDTO, SystemPromptVersionDTO, TIPTAP_ACTION_INSTRUCTIONS, type TemplatesService, ThirdPartyDependencyRow, type UiSlotContributions, UnknownPromptVariableError, UnreadSnapshotPayload, UpdateDependencyInput, VIRTUALIZE_THRESHOLD, type VersionHistoryService, VersionStatus, WebhookSignatureError, definePlugin, defineProfile, dumpModules, formatParsedUA, generateAssemblyCode, generateAssemblyFiles, getClientIp, getPromptDefinition, getServerSeam, interpolateTemplate, isInDndWindow, isOssFeature, isResourceDefined, listPromptDefinitions, moduleRegistry, normalizeCategoryFrequencies, normalizeEmailCategories, parseProfileImports, parseUserAgent, promptDefinitionKeys, registerPrismaSeam, registerServerSeam, resolveImportSpecifiers, resolveIpLocation, resolvePluginOrder };

package/dist/index.js

@@ -1,2 +1,2 @@
-import { $ as dumpModules, A as promptDefinitionKeys, B as PROVIDER_CATEGORY_VALUES, C as DEFAULT_WATCHED_DEPENDENCIES, D as TIPTAP_ACTION_INSTRUCTIONS, E as PROMPT_DEFINITIONS, F as ADAPTER_KIND_VALUES, G as VIRTUALIZE_THRESHOLD, H as PROVIDER_BADGE_STYLES, I as LOBE_ICON_MAP, J as registerServerSeam, K as getServerSeam, L as MODEL_CAPABILITY_OPTIONS, M as interpolateTemplate, N as SEED_AI_PROVIDERS, O as getPromptDefinition, P as ADAPTER_KINDS, Q as WebhookSignatureError, R as MODEL_TABS, S as resolveIpLocation, T as DEPENDENCY_PRIORITIES, U as DND_STICKY_THRESHOLD, V as AI_SOURCE_MODES, W as LOAD_MORE_STEP, X as BillingUnavailableError, Y as HostedAiError, Z as SeatsExceededError, _ as OSS_BASE_FEATURES, a as DEFAULT_EMAIL_CATEGORIES, at as defineProfile, b as parseUserAgent, c as normalizeEmailCategories, d as RESOURCE_KEYS, et as generateAssemblyCode, f as ResourceRegistry, g as FeatureRegistry, h as FEATURE_KEYS, i as DEFAULT_CATEGORIES, it as resolvePluginOrder, j as UnknownPromptVariableError, k as listPromptDefinitions, l as NOTIFICATION_CATEGORIES, m as PlanFeaturesSchema, n as DEVICE_SIZES, nt as parseProfileImports, o as isInDndWindow, ot as definePlugin, p as isResourceDefined, q as registerPrismaSeam, r as moduleRegistry, rt as resolveImportSpecifiers, s as normalizeCategoryFrequencies, t as ICON_MAP, tt as generateAssemblyFiles, u as NOTIFICATION_FREQUENCIES, v as isOssFeature, w as DEPENDENCY_CATEGORIES, x as getClientIp, y as formatParsedUA, z as PROVIDER_CATEGORIES } from "./src-CKvw-8uC.js";
-export { ADAPTER_KINDS, ADAPTER_KIND_VALUES, AI_SOURCE_MODES, BillingUnavailableError, DEFAULT_CATEGORIES, DEFAULT_EMAIL_CATEGORIES, DEFAULT_WATCHED_DEPENDENCIES, DEPENDENCY_CATEGORIES, DEPENDENCY_PRIORITIES, DEVICE_SIZES, DND_STICKY_THRESHOLD, FEATURE_KEYS, FeatureRegistry, HostedAiError, ICON_MAP, LOAD_MORE_STEP, LOBE_ICON_MAP, MODEL_CAPABILITY_OPTIONS, MODEL_TABS, NOTIFICATION_CATEGORIES, NOTIFICATION_FREQUENCIES, OSS_BASE_FEATURES, PROMPT_DEFINITIONS, PROVIDER_BADGE_STYLES, PROVIDER_CATEGORIES, PROVIDER_CATEGORY_VALUES, PlanFeaturesSchema, RESOURCE_KEYS, ResourceRegistry, SEED_AI_PROVIDERS, SeatsExceededError, TIPTAP_ACTION_INSTRUCTIONS, UnknownPromptVariableError, VIRTUALIZE_THRESHOLD, WebhookSignatureError, definePlugin, defineProfile, dumpModules, formatParsedUA, generateAssemblyCode, generateAssemblyFiles, getClientIp, getPromptDefinition, getServerSeam, interpolateTemplate, isInDndWindow, isOssFeature, isResourceDefined, listPromptDefinitions, moduleRegistry, normalizeCategoryFrequencies, normalizeEmailCategories, parseProfileImports, parseUserAgent, promptDefinitionKeys, registerPrismaSeam, registerServerSeam, resolveImportSpecifiers, resolveIpLocation, resolvePluginOrder };
+import { $ as dumpModules, A as promptDefinitionKeys, B as PROVIDER_CATEGORY_VALUES, C as DEFAULT_WATCHED_DEPENDENCIES, D as TIPTAP_ACTION_INSTRUCTIONS, E as PROMPT_DEFINITIONS, F as ADAPTER_KIND_VALUES, G as VIRTUALIZE_THRESHOLD, H as PROVIDER_BADGE_STYLES, I as LOBE_ICON_MAP, J as registerServerSeam, K as getServerSeam, L as MODEL_CAPABILITY_OPTIONS, M as interpolateTemplate, N as SEED_AI_PROVIDERS, O as getPromptDefinition, P as ADAPTER_KINDS, Q as WebhookSignatureError, R as MODEL_TABS, S as resolveIpLocation, T as DEPENDENCY_PRIORITIES, U as DND_STICKY_THRESHOLD, V as AI_SOURCE_MODES, W as LOAD_MORE_STEP, X as BillingUnavailableError, Y as HostedAiError, Z as SeatsExceededError, _ as OSS_BASE_FEATURES, a as DEFAULT_EMAIL_CATEGORIES, at as resolveImportSpecifiers, b as parseUserAgent, c as normalizeEmailCategories, ct as definePlugin, d as RESOURCE_KEYS, et as generateAssemblyCode, f as ResourceRegistry, g as FeatureRegistry, h as FEATURE_KEYS, i as DEFAULT_CATEGORIES, it as parseProfileImports, j as UnknownPromptVariableError, k as listPromptDefinitions, l as NOTIFICATION_CATEGORIES, m as PlanFeaturesSchema, n as DEVICE_SIZES, nt as PRO_FEATURES, o as isInDndWindow, ot as resolvePluginOrder, p as isResourceDefined, q as registerPrismaSeam, r as moduleRegistry, s as normalizeCategoryFrequencies, st as defineProfile, t as ICON_MAP, tt as generateAssemblyFiles, u as NOTIFICATION_FREQUENCIES, v as isOssFeature, w as DEPENDENCY_CATEGORIES, x as getClientIp, y as formatParsedUA, z as PROVIDER_CATEGORIES } from "./src-CyBj_lD7.js";
+export { ADAPTER_KINDS, ADAPTER_KIND_VALUES, AI_SOURCE_MODES, BillingUnavailableError, DEFAULT_CATEGORIES, DEFAULT_EMAIL_CATEGORIES, DEFAULT_WATCHED_DEPENDENCIES, DEPENDENCY_CATEGORIES, DEPENDENCY_PRIORITIES, DEVICE_SIZES, DND_STICKY_THRESHOLD, FEATURE_KEYS, FeatureRegistry, HostedAiError, ICON_MAP, LOAD_MORE_STEP, LOBE_ICON_MAP, MODEL_CAPABILITY_OPTIONS, MODEL_TABS, NOTIFICATION_CATEGORIES, NOTIFICATION_FREQUENCIES, OSS_BASE_FEATURES, PROMPT_DEFINITIONS, PROVIDER_BADGE_STYLES, PROVIDER_CATEGORIES, PROVIDER_CATEGORY_VALUES, PRO_FEATURES, PlanFeaturesSchema, RESOURCE_KEYS, ResourceRegistry, SEED_AI_PROVIDERS, SeatsExceededError, TIPTAP_ACTION_INSTRUCTIONS, UnknownPromptVariableError, VIRTUALIZE_THRESHOLD, WebhookSignatureError, definePlugin, defineProfile, dumpModules, formatParsedUA, generateAssemblyCode, generateAssemblyFiles, getClientIp, getPromptDefinition, getServerSeam, interpolateTemplate, isInDndWindow, isOssFeature, isResourceDefined, listPromptDefinitions, moduleRegistry, normalizeCategoryFrequencies, normalizeEmailCategories, parseProfileImports, parseUserAgent, promptDefinitionKeys, registerPrismaSeam, registerServerSeam, resolveImportSpecifiers, resolveIpLocation, resolvePluginOrder };

package/dist/{src-CKvw-8uC.js → src-CyBj_lD7.js}

@@ -2,9 +2,10 @@ import { z } from "zod";
 import { BadgeDollarSign, BarChart3, Bell, Brain, Building2, Calendar, CircleStar, Database, Earth, FileText, Fish, Folder, GraduationCap, HandFist, Heart, HeartHandshake, Link, LoaderPinwheel, MessageSquare, Music4, Package, PartyPopper, PencilRuler, Settings, ShoppingCart, Shrimp, Sparkles, SquareChartGantt, ToolCase, Users, VenetianMask } from "lucide-react";
 //#region src/define-plugin.ts
 const PLUGIN_ID_RE = /^@[a-z0-9-]+\/[a-z0-9-]+$/;
+const SEMVER_RE = /^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$/;
 function definePlugin(def) {
 	if (!PLUGIN_ID_RE.test(def.id)) throw new Error(`插件 id 必须形如 '@scope/name'（小写），收到: ${def.id}`);
-	if (!/^\d+\.\d+\.\d+/.test(def.version)) throw new Error(`插件 version 必须是语义化版本，收到: ${def.version}`);
+	if (!SEMVER_RE.test(def.version)) throw new Error(`插件 version 必须是语义化版本，收到: ${def.version}`);
 	return deepFreeze(def);
 }
 function deepFreeze(value) {
@@ -71,8 +72,7 @@ function findCyclePath(cyclicIds, byId) {
 	const visited = /* @__PURE__ */ new Set([start]);
 	let current = start;
 	while (true) {
-		const deps = byId.get(current)?.dependencies ?? [];
-		const next = deps.find((d) => cyclicIds.includes(d)) ?? deps[0];
+		const next = (byId.get(current)?.dependencies ?? []).find((d) => cyclicIds.includes(d));
 		if (!next) break;
 		if (next === start || visited.has(next)) {
 			path.push(next);
@@ -82,10 +82,72 @@ function findCyclePath(cyclicIds, byId) {
 		path.push(next);
 		current = next;
 	}
-	return path;
+	return path.length > 1 ? path : cyclicIds;
 }
 //#endregion
 //#region src/assemble-input.ts
+const IDENTIFIER_RE = /^[A-Za-z_$][\w$]*$/;
+/**
+* 从 profile 源码的 `plugins: [...]` 数组提取本地标识符（按声明顺序）。
+*
+* 2026-10-28 修复：原实现把数组开括号也算作元素内容，首项被解析成
+* `"[\n    pluginA"` 而整体跳过 —— 空 plugins（OSS profile）时只打一条
+* warning 无人注意，非空 plugins（Pro saas profile）直接装配失败。
+* 现从开括号后一位开始扫描，并支持行/块注释与嵌套括号。
+*/
+function extractPluginLocalNames(source) {
+	const start = source.search(/plugins\s*:\s*\[/);
+	if (start === -1) {
+		console.warn("未能从 profile 源码解析 plugins 数组（约定写法：plugins: [pluginA, pluginB]），按空数组处理");
+		return [];
+	}
+	const arrayStart = source.indexOf("[", start);
+	let depth = 0;
+	let inString = null;
+	const names = [];
+	let current = "";
+	for (let i = arrayStart + 1; i < source.length; i++) {
+		const ch = source[i];
+		if (inString) {
+			if (ch === "\\") i++;
+			else if (ch === inString) inString = null;
+			continue;
+		}
+		if (ch === "\"" || ch === "'" || ch === "`") {
+			inString = ch;
+			continue;
+		}
+		if (ch === "/" && source[i + 1] === "/") {
+			while (i < source.length && source[i] !== "\n") i++;
+			continue;
+		}
+		if (ch === "/" && source[i + 1] === "*") {
+			i = source.indexOf("*/", i + 2);
+			if (i === -1) break;
+			i++;
+			continue;
+		}
+		if (ch === "[" || ch === "{" || ch === "(") depth++;
+		if (ch === "]" || ch === "}" || ch === ")") {
+			if (depth === 0) break;
+			depth--;
+		}
+		if (ch === "," && depth === 0) {
+			addPluginLocalName(names, current);
+			current = "";
+			continue;
+		}
+		current += ch;
+	}
+	addPluginLocalName(names, current);
+	return names;
+}
+function addPluginLocalName(names, raw) {
+	const entry = raw.trim();
+	if (!entry) return;
+	if (IDENTIFIER_RE.test(entry)) names.push(entry);
+	else console.warn(`plugins 数组元素 ${JSON.stringify(entry)} 不是标识符（不支持 spread / 变量引用 / 表达式），已跳过`);
+}
 function parseProfileImports(source) {
 	const map = /* @__PURE__ */ new Map();
 	const re = /import\s+([A-Za-z_$][\w$]*)\s+from\s+['"]([^'"]+)['"]/g;
@@ -99,31 +161,18 @@ function resolveImportSpecifiers(input) {
 		const localName = input.pluginLocalNames[index];
 		if (!localName) throw new Error(`插件 ${plugin.id} 在 profile 源码中找不到对应标识符`);
 		const specifier = input.imports.get(localName);
-		if (!specifier) throw new Error(`标识符 ${localName} 没有 default import（约定：profile 中插件必须以 default import 引入）`);
+		if (!specifier) throw new Error(`标识符 ${localName} 没有 default import（约定：profile 中插件必须以单标识符 default import 单行引入，如 \`import tags from '@scope/tags'\`；不支持 \`import X, { y }\` / \`import * as X\` / \`import { default as X }\` / 跨行 import）`);
 		byId.set(plugin.id, specifier);
 	});
 	return byId;
 }
 //#endregion
-//#region src/generate-assembly.ts
-function generateAssemblyCode(input) {
-	const { profileId, profileModulePath, resolved } = input;
-	const ids = resolved.ids.map((id) => `'${id}'`).join(", ");
-	return [
-		`// AUTO-GENERATED by @allbluecn/kernel — DO NOT EDIT`,
-		`// profile: ${profileId} (validated: ${resolved.order.length} plugins)`,
-		`// 拓扑序（被依赖者在前）：${resolved.ids.join(" -> ")}`,
-		`import type { ProfileDefinition } from '@allbluecn/kernel'`,
-		``,
-		`export { default as profile } from '${profileModulePath}'`,
-		``,
-		`export const pluginIds: string[] = [${ids}]`,
-		``,
-		`declare const _profile: ProfileDefinition`
-	].join("\n");
-}
-const HEADER = "// AUTO-GENERATED by @allbluecn/kernel — DO NOT EDIT";
-const ALL_FEATURES = [
+//#region src/pro-contract/module.ts
+/**
+* Pro 功能键单一来源（generate-assembly 的 implementedModules 生成亦消费此常量）。
+* 新增 feature 只改这里；ProFeature 联合类型由本数组派生，杜绝双维护漂移。
+*/
+const PRO_FEATURES = [
 	"billing",
 	"hostedAi",
 	"sso",
@@ -137,11 +186,40 @@ const ALL_FEATURES = [
 	"globalSearch",
 	"compliance"
 ];
+//#endregion
+//#region src/generate-assembly.ts
+/**
+* 生成单引号字符串字面量：转义反斜杠与单引号，
+* 防止 profileId / 插件 id / 模块路径 / route path 中的特殊字符污染生成代码。
+*/
+const q = (s) => `'${s.replace(/[\\']/g, "\\$&")}'`;
+/**
+* route 贡献路径白名单：以 / 开头，仅允许小写字母、数字、-、_、/。
+* 排除 `..`、绝对路径片段、反常字符，防止生成文件被映射到 src/routes 之外。
+*/
+const ROUTE_PATH_RE = /^\/[a-z0-9\-_/]*$/;
+function assertRoutePath(path) {
+	if (!ROUTE_PATH_RE.test(path)) throw new Error(`[kernel] 非法 route path: ${JSON.stringify(path)}（须以 / 开头，仅允许小写字母/数字/-/_，不得含 .. 等穿越片段）`);
+}
+function generateAssemblyCode(input) {
+	const { profileId, profileModulePath, resolved } = input;
+	const ids = resolved.ids.map((id) => q(id)).join(", ");
+	return [
+		`// AUTO-GENERATED by @allbluecn/kernel — DO NOT EDIT`,
+		`// profile: ${profileId} (validated: ${resolved.order.length} plugins)`,
+		`// 拓扑序（被依赖者在前）：${resolved.ids.join(" -> ")}`,
+		``,
+		`export { default as profile } from ${q(profileModulePath)}`,
+		``,
+		`export const pluginIds: string[] = [${ids}]`
+	].join("\n");
+}
+const HEADER = "// AUTO-GENERATED by @allbluecn/kernel — DO NOT EDIT";
 function generateAssemblyFiles(input) {
 	const specifiers = resolveImportSpecifiers(input);
 	const { resolved } = input;
 	const importLines = resolved.order.map((p, i) => {
-		return `import ${input.pluginLocalNames[i]} from '${specifiers.get(p.id)}'`;
+		return `import ${input.pluginLocalNames[i]} from ${q(specifiers.get(p.id) ?? "")}`;
 	});
 	const pluginList = input.pluginLocalNames.slice(0, resolved.order.length).join(", ");
 	const middlewareParts = resolved.order.map((p, i) => {
@@ -155,25 +233,25 @@ function generateAssemblyFiles(input) {
 		`import { defineProfile, type ProfileDefinition } from '@allbluecn/kernel'`,
 		``,
 		`export const profile: ProfileDefinition = defineProfile({`,
-		`  id: '${input.profileId}',`,
+		`  id: ${q(input.profileId)},`,
 		`  plugins: [${pluginList}],`,
 		`})`,
 		``,
-		`export const pluginIds: string[] = [${resolved.ids.map((i) => `'${i}'`).join(", ")}]`,
+		`export const pluginIds: string[] = [${resolved.ids.map((i) => q(i)).join(", ")}]`,
 		``,
 		`export const pluginMiddleware: unknown[] = [`,
 		middlewareParts,
 		`]`
 	].join("\n");
-	const implLines = ALL_FEATURES.map((f) => {
+	const implLines = PRO_FEATURES.map((f) => {
 		return `  ${f}: ${resolved.order.some((p) => p.contributes.services?.[f] !== void 0)},`;
 	});
 	const modulesGen = [
 		HEADER,
 		`import type { ProFeature } from '@allbluecn/kernel'`,
 		``,
-		`export const profileId = '${input.profileId}' as const`,
-		`export const activePluginIds = [${resolved.ids.map((i) => `'${i}'`).join(", ")}] as const`,
+		`export const profileId = ${q(input.profileId)} as const`,
+		`export const activePluginIds = [${resolved.ids.map((i) => q(i)).join(", ")}] as const`,
 		`export type ActivePluginId = (typeof activePluginIds)[number]`,
 		``,
 		`export const implementedModules: Record<ProFeature, boolean> = {`,
@@ -190,16 +268,17 @@ function generateAssemblyFiles(input) {
 		const spec = specifiers.get(p.id);
 		const slots = p.contributes.uiSlots;
 		if (!slots) continue;
+		const uiSpec = q(`${spec}/ui`);
 		for (const [key] of Object.entries(slots.navItems ?? {})) {
-			uiImports.push(`import { ${key} } from '${spec}/ui'`);
+			uiImports.push(`import { ${key} } from ${uiSpec}`);
 			navItems.push(key);
 		}
 		if (slots.settingsTabs?.length) {
-			uiImports.push(`import { ${local}SettingsTabs } from '${spec}/ui'`);
+			uiImports.push(`import { ${local}SettingsTabs } from ${uiSpec}`);
 			settingsTabs.push(`...${local}SettingsTabs`);
 		}
 		for (const [key] of Object.entries(slots.dashboardWidgets ?? {})) {
-			uiImports.push(`import { ${key} } from '${spec}/ui'`);
+			uiImports.push(`import { ${key} } from ${uiSpec}`);
 			widgets.push(key);
 		}
 	}
@@ -218,6 +297,7 @@ function generateAssemblyFiles(input) {
 		const p = resolved.order[i];
 		const spec = specifiers.get(p.id);
 		p.contributes.routes?.forEach((r, j) => {
+			assertRoutePath(r.path);
 			const file = routeContributionToFile(r.path);
 			const varName = `${input.pluginLocalNames[i]}_route_${j}`;
 			const routePath = r.path.endsWith("/") ? r.path.slice(0, -1) : r.path;
@@ -225,9 +305,9 @@ function generateAssemblyFiles(input) {
 				HEADER,
 				`import { createFileRoute } from '@tanstack/react-router'`,
 				...r.beforeLoad || r.loader ? [`import type { PluginRouteContext } from '@allbluecn/kernel'`] : [],
-				`import { ${varName} } from '${spec}/routes'`,
+				`import { ${varName} } from ${q(`${spec}/routes`)}`,
 				``,
-				`export const Route = createFileRoute('${routePath}')({`,
+				`export const Route = createFileRoute(${q(routePath)})({`,
 				...r.beforeLoad ? [`  beforeLoad: ((ctx: PluginRouteContext) => ${varName}.beforeLoad(ctx)) as any,`] : [],
 				...r.loader ? [`  loader: ((ctx: PluginRouteContext) => ${varName}.loader(ctx)) as any,`] : [],
 				...r.validateSearch ? [`  validateSearch: ${varName}.validateSearch as any,`] : [],
@@ -295,27 +375,43 @@ var SeatsExceededError = class SeatsExceededError extends Error {
 };
 //#endregion
 //#region src/pro-contract/hosted-ai.ts
-var HostedAiError = class extends Error {
+var HostedAiError = class HostedAiError extends Error {
 	code;
 	details;
 	constructor(code, message, details) {
-		super(message);
+		super(message, details?.cause !== void 0 ? { cause: details.cause } : void 0);
 		this.code = code;
 		this.details = details;
 		this.name = "HostedAiError";
+		Object.setPrototypeOf(this, HostedAiError.prototype);
 	}
 };
 //#endregion
 //#region src/server-seam.ts
-let seam = null;
+/** 「模块级单例 + 注册 + 未注册抛错」泛型工厂：新增 seam 时复用，避免复制三件套。 */
+function createSeam(notRegisteredMessage) {
+	let impl = null;
+	return {
+		register: (value) => {
+			impl = value;
+		},
+		get: () => {
+			if (!impl) throw new Error(notRegisteredMessage);
+			return impl;
+		}
+	};
+}
+const serverSeam = createSeam("ServerSeam 未注册：宿主需在 start.ts 中调用 registerServerSeam()");
 function registerServerSeam(impl) {
-	seam = impl;
+	serverSeam.register(impl);
 }
 function getServerSeam() {
-	if (!seam) throw new Error("ServerSeam 未注册：宿主需在 start.ts 中调用 registerServerSeam()");
-	return seam;
+	return serverSeam.get();
+}
+const prismaSeam = createSeam("[@allbluecn/kernel] PrismaSeam not registered. Call registerPrismaSeam(prisma) before using reference engine.");
+function registerPrismaSeam(seam) {
+	prismaSeam.register(seam);
 }
-function registerPrismaSeam(seam) {}
 //#endregion
 //#region src/contract/constants/perf.ts
 const VIRTUALIZE_THRESHOLD = 250;
@@ -328,7 +424,13 @@ const AI_SOURCE_MODES = [
 	"local-agent",
 	"byok"
 ];
-/** 卡片角标的预设颜色（按文案匹配），admin 也可自由输入文案 */
+/**
+* 卡片角标的预设颜色（按文案匹配），admin 也可自由输入文案。
+*
+* ⚠ 这里的类名字符串位于 npm 包 dist 内，app 侧 Tailwind v4 不会自动扫描
+* node_modules——消费方 globals.css 必须显式 `@source` 指向本包 dist，
+* 否则角标样式在生产构建被 tree-shake 静默丢失（不报错）。
+*/
 const PROVIDER_BADGE_STYLES = {
 	推荐: "bg-primary/10 text-primary border-primary/30",
 	热门: "bg-orange-500/10 text-orange-600 dark:text-orange-400 border-orange-500/30",
@@ -400,6 +502,11 @@ const ADAPTER_KINDS = [
 		description: "fal.ai 聚合平台，image / video / audio / speech"
 	}
 ];
+/**
+* 服务商分类筛选项。有意不含 'harness'（沙箱 harness 型服务商需专用上下文，
+* 不进常规筛选）与 'hosted'（已从 ProviderCategory 移除，托管语义归
+* AiSourceMode）；若未来放开筛选，在此补全映射。
+*/
 const PROVIDER_CATEGORIES = [
 	{
 		value: "recommended",
@@ -453,7 +560,7 @@ const MODEL_TABS = [
 	},
 	{
 		value: "tools",
-		label: "对话"
+		label: "工具"
 	},
 	{
 		value: "vision",
@@ -489,7 +596,7 @@ const LOBE_ICON_MAP = {
 };
 //#endregion
 //#region src/contract/modules/ai-providers/seed-data.ts
-/** 10 个最受欢迎 AI 服务商的种子数据，admin 可在其基础上增删改 */
+/** 18 个 AI 服务商的种子数据（14 个常规 + 4 个 harness 沙箱型），admin 可在其基础上增删改 */
 const SEED_AI_PROVIDERS = [
 	{
 		providerId: "openai",
@@ -1545,7 +1652,7 @@ const PROMPT_DEFINITIONS = [
 1. 每行输出一个独立的 JSON 对象，行与行以换行分隔；不要输出 markdown 代码块标记，不要输出任何解释文字
 2. 每行只能是以下四种操作之一：
    {"op":"frame","node":{"name":"画板名","x":0,"y":0,"width":375,"height":812}}
-   {"op":"nodes","nodes":[{...},{"..."}]}
+   {"op":"nodes","nodes":[{...},{...}]}
    {"op":"replace","removeIds":["节点id"],"nodes":[{...}]}
    {"op":"done","message":"给用户的中文完成说明"}
 3. 节点结构必须符合下方 JSON Schema；节点一律不含 parentId 字段，禁止输出 parentId（节点归属由服务端按「最近一个 frame 操作」回填）
@@ -2038,7 +2145,7 @@ const DEPENDENCY_CATEGORIES = [
 	{
 		value: "ui",
 		label: "UI 组件",
-		description: "radix / motion / lucide / tailwind 等界面库"
+		description: "Base UI / radix / motion / lucide / tailwind 等界面库"
 	},
 	{
 		value: "editor",
@@ -2048,7 +2155,7 @@ const DEPENDENCY_CATEGORIES = [
 	{
 		value: "ai",
 		label: "AI 能力",
-		description: "@tanstack/ai / openai 等 LLM 集成"
+		description: "@tanstack/ai 及其 provider 适配器等 LLM 集成"
 	},
 	{
 		value: "state",
@@ -2063,7 +2170,7 @@ const DEPENDENCY_CATEGORIES = [
 	{
 		value: "tool",
 		label: "工具库",
-		description: "zod / nanoid / i18next 等通用工具"
+		description: "zod / nanoid / paraglide 等通用工具"
 	},
 	{
 		value: "other",
@@ -2241,18 +2348,26 @@ const DEFAULT_WATCHED_DEPENDENCIES = [
 	{
 		name: "openai",
 		displayName: "OpenAI SDK",
-		description: "OpenAI 官方 SDK，本项目用于 embedding 生成",
+		description: "OpenAI 官方 SDK（项目 LLM 链路已统一走 @tanstack/ai 适配器，本包保留关注）",
 		homepage: "https://openai.com",
 		category: "ai",
-		priority: "normal"
+		priority: "low"
+	},
+	{
+		name: "@base-ui/react",
+		displayName: "Base UI",
+		description: "无样式可访问组件库（shadcn radix-nova 底座），项目 UI 基座",
+		homepage: "https://base-ui.com",
+		category: "ui",
+		priority: "high"
 	},
 	{
 		name: "radix-ui",
 		displayName: "Radix UI",
-		description: "无样式可访问组件库统一入口（dialog/menu 等）",
+		description: "无样式可访问组件库统一入口（遗留：TipTap ui-primitive / magicui 仍在用，逐步迁移 Base UI）",
 		homepage: "https://radix-ui.com",
 		category: "ui",
-		priority: "high"
+		priority: "normal"
 	},
 	{
 		name: "motion",
@@ -2294,14 +2409,6 @@ const DEFAULT_WATCHED_DEPENDENCIES = [
 		category: "ui",
 		priority: "normal"
 	},
-	{
-		name: "sonner",
-		displayName: "Sonner",
-		description: "Toast 通知组件，项目消息提示",
-		homepage: "https://sonner.emilkowal.ski",
-		category: "ui",
-		priority: "normal"
-	},
 	{
 		name: "@tanstack/react-query",
 		displayName: "TanStack Query",
@@ -2327,20 +2434,12 @@ const DEFAULT_WATCHED_DEPENDENCIES = [
 		priority: "high"
 	},
 	{
-		name: "i18next",
-		displayName: "i18next",
-		description: "国际化框架，多语言文案管理",
-		homepage: "https://www.i18next.com",
+		name: "@inlang/paraglide-js",
+		displayName: "Paraglide JS",
+		description: "编译期 i18n 框架，类型安全的多语言文案（项目 i18n 方案）",
+		homepage: "https://inlang.com/m/gerre34r/library-inlang-paraglideJs",
 		category: "tool",
-		priority: "normal"
-	},
-	{
-		name: "react-i18next",
-		displayName: "React i18next",
-		description: "i18next 的 React 绑定",
-		homepage: "https://react.i18next.com",
-		category: "tool",
-		priority: "normal"
+		priority: "high"
 	},
 	{
 		name: "nanoid",
@@ -2364,25 +2463,30 @@ const DEFAULT_WATCHED_DEPENDENCIES = [
 /**
 * IP 地理位置查询工具（服务端专用）
 *
-* - 开发环境 / 内网 IP：返回「本地」
-* - 生产环境：使用 ip-api.com 免费查询（中文，每分钟 45 请求限制）
-*   失败时返回「未知」，不阻塞登录流程
+* - 内网/保留段 IP：返回「Local」
+* - 公网 IP：使用 ipwho.is 免费 HTTPS 查询（无 Key，返回英文地名），
+*   失败时返回「Unknown」，不阻塞登录流程
+* - 弃用 ip-api.com 免费档：其免费端点不支持 HTTPS（明文外发用户 IP，
+*   且响应可被中间人篡改污染审计数据），2026-10 审计后切换
 */
-const PRIVATE_IP_PATTERNS = /^(127\.|10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.|::1$|fc00:|fd00:|fe80:|169\.254\.|localhost)/i;
+const PRIVATE_IP_PATTERNS = /^(127\.|10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.|169\.254\.|100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.|0\.|198\.1[89]\.|2(2[4-9]|3\d)\.|2[45]\d\.)/;
+const PRIVATE_IPV6_PATTERNS = /^(::1$|f[cd][0-9a-f]{2}:|fe80:|::ffff:|localhost)/i;
+function isPrivateIp(ip) {
+	const mapped = ip.match(/^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/i);
+	if (mapped) return PRIVATE_IP_PATTERNS.test(mapped[1]);
+	return PRIVATE_IP_PATTERNS.test(ip) || PRIVATE_IPV6_PATTERNS.test(ip);
+}
 async function resolveIpLocation(ip) {
 	if (!ip) return "Unknown";
-	if (PRIVATE_IP_PATTERNS.test(ip)) return "Local";
+	if (isPrivateIp(ip)) return "Local";
 	try {
-		const controller = new AbortController();
-		const timeout = setTimeout(() => controller.abort(), 3e3);
-		const res = await fetch(`http://ip-api.com/json/${encodeURIComponent(ip)}?fields=status,country,regionName,city&lang=zh-CN`, { signal: controller.signal });
-		clearTimeout(timeout);
+		const res = await fetch(`https://ipwho.is/${encodeURIComponent(ip)}`, { signal: AbortSignal.timeout(3e3) });
 		if (!res.ok) return "Unknown";
 		const data = await res.json();
-		if (data.status !== "success") return "Unknown";
+		if (data.success !== true) return "Unknown";
 		const parts = [
 			data.city,
-			data.regionName,
+			data.region,
 			data.country
 		].filter(Boolean);
 		return parts.length > 0 ? parts.join(", ") : "Unknown";
@@ -2392,18 +2496,25 @@ async function resolveIpLocation(ip) {
 }
 /**
 * 从 Request 中提取客户端真实 IP
-* 优先级：X-Forwarded-For > X-Real-IP > CF-Connecting-IP
+*
+* 优先级：CF-Connecting-IP（Cloudflare 平台注入的权威头，客户端不可伪造）
+* > X-Real-IP > X-Forwarded-For 末段。
+*
+* ⚠ 前提声明：XFF 首值可由客户端任意伪造，因此取**末段**（最靠近本服务的
+* 可信代理所追加的一跳）。部署平台若自身不覆写 XFF（Vercel 会覆写），
+* 末段仍可能被上游代理链污染；Cloudflare 场景以 CF-Connecting-IP 为准。
 */
 function getClientIp(request) {
+	const cfip = request.headers.get("cf-connecting-ip");
+	if (cfip) return cfip.trim();
+	const xri = request.headers.get("x-real-ip");
+	if (xri) return xri.trim();
 	const xff = request.headers.get("x-forwarded-for");
 	if (xff) {
-		const first = xff.split(",")[0]?.trim();
-		if (first) return first;
+		const segments = xff.split(",").map((s) => s.trim()).filter(Boolean);
+		const last = segments[segments.length - 1];
+		if (last) return last;
 	}
-	const xri = request.headers.get("x-real-ip");
-	if (xri) return xri.trim();
-	const cfip = request.headers.get("cf-connecting-ip");
-	if (cfip) return cfip.trim();
 	return null;
 }
 //#endregion
@@ -2465,7 +2576,8 @@ function parseUserAgent(ua) {
 	};
 }
 /**
-* 将 ParsedUA 拼接为可读字符串，如 "Chrome 120 / Windows 10/11 / 桌面"
+* 将 ParsedUA 拼接为可读字符串，如 "Chrome 120 / Windows 10/11 / Desktop"
+* （输出为英文原文；中文文案由展示层经 paraglide 映射）
 */
 function formatParsedUA(parsed) {
 	return [
@@ -2710,14 +2822,29 @@ function normalizeEmailCategories(raw) {
 	}
 	return result;
 }
+let dndMalformedWarned = false;
+/**
+* 判定 now（HH:MM）是否落在勿扰窗口内（支持跨零点）。
+*
+* 畸形时间输入（空串 / 非数字，如 DB 脏数据）旧实现产出 NaN、比较恒 false、
+* DND 静默失效——现显式校验，畸形时告警一次并按「不在勿扰窗口」处理。
+*/
 function isInDndWindow(prefs, now) {
 	if (!prefs.dndEnabled) return false;
-	const [sh, sm] = prefs.dndStart.split(":").map(Number);
-	const [eh, em] = prefs.dndEnd.split(":").map(Number);
-	const [nh, nm] = now.split(":").map(Number);
-	const start = sh * 60 + sm;
-	const end = eh * 60 + em;
-	const cur = nh * 60 + nm;
+	const parse = (s) => {
+		const [h, m] = s.split(":").map(Number);
+		return Number.isFinite(h) && Number.isFinite(m) ? h * 60 + m : NaN;
+	};
+	const start = parse(prefs.dndStart);
+	const end = parse(prefs.dndEnd);
+	const cur = parse(now);
+	if (Number.isNaN(start) || Number.isNaN(end) || Number.isNaN(cur)) {
+		if (!dndMalformedWarned) {
+			dndMalformedWarned = true;
+			console.warn(`[notifications] 勿扰时段格式非法（须为 HH:MM）：start=${JSON.stringify(prefs.dndStart)} end=${JSON.stringify(prefs.dndEnd)}，DND 判定按不生效处理`);
+		}
+		return false;
+	}
 	if (start <= end) return cur >= start && cur < end;
 	return cur >= start || cur < end;
 }
@@ -2725,8 +2852,18 @@ function isInDndWindow(prefs, now) {
 //#region src/contract/modules/registry.ts
 var ModuleRegistry = class {
 	modules = /* @__PURE__ */ new Map();
-	register(mod) {
-		if (this.modules.has(mod.id)) console.warn(`[ModuleRegistry] "${mod.id}" already registered, overwriting`);
+	/**
+	* 注册模块。同 id 重复注册的语义：
+	* - 显式 `{ overwrite: true }`：警告并覆盖（有意的替换场景）；
+	* - 生产环境：视为装配期配置错误直接抛出，避免「两个模块意外同 id」被静默掩盖；
+	* - dev/test/HMR：警告并覆盖（模块双执行 / 热更新场景保持宽松）。
+	*/
+	register(mod, options) {
+		if (this.modules.has(mod.id)) {
+			const isProd = typeof process !== "undefined" && process.env?.NODE_ENV === "production";
+			if (!options?.overwrite && isProd) throw new Error(`[ModuleRegistry] "${mod.id}" already registered（同 id 模块重复注册；若确需覆盖请传 { overwrite: true }）`);
+			console.warn(`[ModuleRegistry] "${mod.id}" already registered, overwriting`);
+		}
 		this.modules.set(mod.id, mod);
 	}
 	getModule(id) {
@@ -2790,4 +2927,4 @@ const ICON_MAP = {
 	music4: Music4
 };
 //#endregion
-export { dumpModules as $, promptDefinitionKeys as A, PROVIDER_CATEGORY_VALUES as B, DEFAULT_WATCHED_DEPENDENCIES as C, TIPTAP_ACTION_INSTRUCTIONS as D, PROMPT_DEFINITIONS as E, ADAPTER_KIND_VALUES as F, VIRTUALIZE_THRESHOLD as G, PROVIDER_BADGE_STYLES as H, LOBE_ICON_MAP as I, registerServerSeam as J, getServerSeam as K, MODEL_CAPABILITY_OPTIONS as L, interpolateTemplate as M, SEED_AI_PROVIDERS as N, getPromptDefinition as O, ADAPTER_KINDS as P, WebhookSignatureError as Q, MODEL_TABS as R, resolveIpLocation as S, DEPENDENCY_PRIORITIES as T, DND_STICKY_THRESHOLD as U, AI_SOURCE_MODES as V, LOAD_MORE_STEP as W, BillingUnavailableError as X, HostedAiError as Y, SeatsExceededError as Z, OSS_BASE_FEATURES as _, DEFAULT_EMAIL_CATEGORIES as a, defineProfile as at, parseUserAgent as b, normalizeEmailCategories as c, RESOURCE_KEYS as d, generateAssemblyCode as et, ResourceRegistry as f, FeatureRegistry as g, FEATURE_KEYS as h, DEFAULT_CATEGORIES as i, resolvePluginOrder as it, UnknownPromptVariableError as j, listPromptDefinitions as k, NOTIFICATION_CATEGORIES as l, PlanFeaturesSchema as m, DEVICE_SIZES as n, parseProfileImports as nt, isInDndWindow as o, definePlugin as ot, isResourceDefined as p, registerPrismaSeam as q, moduleRegistry as r, resolveImportSpecifiers as rt, normalizeCategoryFrequencies as s, ICON_MAP as t, generateAssemblyFiles as tt, NOTIFICATION_FREQUENCIES as u, isOssFeature as v, DEPENDENCY_CATEGORIES as w, getClientIp as x, formatParsedUA as y, PROVIDER_CATEGORIES as z };
+export { dumpModules as $, promptDefinitionKeys as A, PROVIDER_CATEGORY_VALUES as B, DEFAULT_WATCHED_DEPENDENCIES as C, TIPTAP_ACTION_INSTRUCTIONS as D, PROMPT_DEFINITIONS as E, ADAPTER_KIND_VALUES as F, VIRTUALIZE_THRESHOLD as G, PROVIDER_BADGE_STYLES as H, LOBE_ICON_MAP as I, registerServerSeam as J, getServerSeam as K, MODEL_CAPABILITY_OPTIONS as L, interpolateTemplate as M, SEED_AI_PROVIDERS as N, getPromptDefinition as O, ADAPTER_KINDS as P, WebhookSignatureError as Q, MODEL_TABS as R, resolveIpLocation as S, DEPENDENCY_PRIORITIES as T, DND_STICKY_THRESHOLD as U, AI_SOURCE_MODES as V, LOAD_MORE_STEP as W, BillingUnavailableError as X, HostedAiError as Y, SeatsExceededError as Z, OSS_BASE_FEATURES as _, DEFAULT_EMAIL_CATEGORIES as a, resolveImportSpecifiers as at, parseUserAgent as b, normalizeEmailCategories as c, definePlugin as ct, RESOURCE_KEYS as d, generateAssemblyCode as et, ResourceRegistry as f, FeatureRegistry as g, FEATURE_KEYS as h, DEFAULT_CATEGORIES as i, parseProfileImports as it, UnknownPromptVariableError as j, listPromptDefinitions as k, NOTIFICATION_CATEGORIES as l, PlanFeaturesSchema as m, DEVICE_SIZES as n, PRO_FEATURES as nt, isInDndWindow as o, resolvePluginOrder as ot, isResourceDefined as p, registerPrismaSeam as q, moduleRegistry as r, extractPluginLocalNames as rt, normalizeCategoryFrequencies as s, defineProfile as st, ICON_MAP as t, generateAssemblyFiles as tt, NOTIFICATION_FREQUENCIES as u, isOssFeature as v, DEPENDENCY_CATEGORIES as w, getClientIp as x, formatParsedUA as y, PROVIDER_CATEGORIES as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@allbluecn/kernel",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "license": "AGPL-3.0-or-later",
   "type": "module",
   "description": "AllBlue 插件协议：类型定义 + 构建期装配器（零运行时）",
@@ -56,8 +56,8 @@
     "react": "^19",
     "tsdown": "^0.22.0",
     "typescript": "^7",
-    "vitest": "4.1.5",
-    "zod": "^4.4.3"
+    "vitest": "^5.0.5",
+    "zod": "^4.6.7"
   },
   "dependencies": {},
   "publishConfig": {