@allbluecn/web-app 0.11.0 → 0.11.1

package/src/routeTree.gen.ts

@@ -18,10 +18,12 @@ import { Route as DocsRouteImport } from './routes/docs'
 import { Route as ShareRouteRouteImport } from './routes/share/route'
 import { Route as WorkspaceRouteImport } from './routes/workspace'
 import { Route as _desktopOnboardingRouteRouteImport } from './routes/__desktop/onboarding/route'
+import { Route as LoginEmailUnsubscribeRouteRouteImport } from './routes/_login/email-unsubscribe/route'
 import { Route as LoginForgotPasswordRouteRouteImport } from './routes/_login/forgot-password/route'
 import { Route as LoginLoginRouteRouteImport } from './routes/_login/login/route'
 import { Route as LoginRegisterRouteRouteImport } from './routes/_login/register/route'
 import { Route as LoginResetPasswordRouteRouteImport } from './routes/_login/reset-password/route'
+import { Route as LoginVerifyEmailRouteRouteImport } from './routes/_login/verify-email/route'
 import { Route as NavAcceptanceCriteriaRouteRouteImport } from './routes/_nav/acceptance-criteria/route'
 import { Route as NavAgentsRouteRouteImport } from './routes/_nav/agents/route'
 import { Route as NavAppsRouteRouteImport } from './routes/_nav/apps/route'
@@ -54,6 +56,7 @@ import { Route as ServerAiStreamRouteImport } from './routes/server.ai-stream'
 import { Route as ServerWsRouteImport } from './routes/server.ws'
 import { Route as ShareVersionIdRouteRouteImport } from './routes/share/$versionId/route'
 import { Route as LangDocsSplatRouteRouteImport } from './routes/$lang/docs/$/route'
+import { Route as LoginChangelogConfirmRouteRouteImport } from './routes/_login/changelog/confirm/route'
 import { Route as NavAppsAnyhubRouteRouteImport } from './routes/_nav/apps/anyhub/route'
 import { Route as NavChatThreadIdRouteImport } from './routes/_nav/chat/$threadId'
 import { Route as NavDesignIndexRouteImport } from './routes/_nav/design/index'
@@ -88,6 +91,8 @@ import { Route as NavWorkspacesWorkspaceIdRouteRouteImport } from './routes/_nav
 import { Route as ApiAttachmentsUploadRouteImport } from './routes/api/attachments/upload'
 import { Route as ApiAuthSplatRouteImport } from './routes/api.auth.$'
 import { Route as ApiAuthDesktopCallbackRouteImport } from './routes/api/auth/desktop-callback'
+import { Route as ApiCronChangelogReleaseRouteImport } from './routes/api/cron/changelog-release'
+import { Route as ApiCronSubscriptionRemindersRouteImport } from './routes/api/cron/subscription-reminders'
 import { Route as ApiDesignUploadRouteImport } from './routes/api/design/upload'
 import { Route as ApiKnowledgeSyncGithubRouteImport } from './routes/api/knowledge/sync-github'
 import { Route as ApiLicenseActivateRouteRouteImport } from './routes/api/license/activate/route'
@@ -187,6 +192,14 @@ const _desktopOnboardingRouteRoute = _desktopOnboardingRouteRouteImport
   .lazy(() =>
     import('./routes/__desktop/onboarding/route.lazy').then((d) => d.Route),
   )
+const LoginEmailUnsubscribeRouteRoute =
+  LoginEmailUnsubscribeRouteRouteImport.update({
+    id: '/email-unsubscribe',
+    path: '/email-unsubscribe',
+    getParentRoute: () => LoginRouteRoute,
+  } as any).lazy(() =>
+    import('./routes/_login/email-unsubscribe/route.lazy').then((d) => d.Route),
+  )
 const LoginForgotPasswordRouteRoute =
   LoginForgotPasswordRouteRouteImport.update({
     id: '/forgot-password',
@@ -216,6 +229,13 @@ const LoginResetPasswordRouteRoute = LoginResetPasswordRouteRouteImport.update({
 } as any).lazy(() =>
   import('./routes/_login/reset-password/route.lazy').then((d) => d.Route),
 )
+const LoginVerifyEmailRouteRoute = LoginVerifyEmailRouteRouteImport.update({
+  id: '/verify-email',
+  path: '/verify-email',
+  getParentRoute: () => LoginRouteRoute,
+} as any).lazy(() =>
+  import('./routes/_login/verify-email/route.lazy').then((d) => d.Route),
+)
 const NavAcceptanceCriteriaRouteRoute =
   NavAcceptanceCriteriaRouteRouteImport.update({
     id: '/acceptance-criteria',
@@ -395,6 +415,14 @@ const LangDocsSplatRouteRoute = LangDocsSplatRouteRouteImport.update({
 } as any).lazy(() =>
   import('./routes/$lang/docs/$/route.lazy').then((d) => d.Route),
 )
+const LoginChangelogConfirmRouteRoute =
+  LoginChangelogConfirmRouteRouteImport.update({
+    id: '/changelog/confirm',
+    path: '/changelog/confirm',
+    getParentRoute: () => LoginRouteRoute,
+  } as any).lazy(() =>
+    import('./routes/_login/changelog/confirm/route.lazy').then((d) => d.Route),
+  )
 const NavAppsAnyhubRouteRoute = NavAppsAnyhubRouteRouteImport.update({
   id: '/anyhub',
   path: '/anyhub',
@@ -615,6 +643,17 @@ const ApiAuthDesktopCallbackRoute = ApiAuthDesktopCallbackRouteImport.update({
   path: '/api/auth/desktop-callback',
   getParentRoute: () => rootRouteImport,
 } as any)
+const ApiCronChangelogReleaseRoute = ApiCronChangelogReleaseRouteImport.update({
+  id: '/api/cron/changelog-release',
+  path: '/api/cron/changelog-release',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiCronSubscriptionRemindersRoute =
+  ApiCronSubscriptionRemindersRouteImport.update({
+    id: '/api/cron/subscription-reminders',
+    path: '/api/cron/subscription-reminders',
+    getParentRoute: () => rootRouteImport,
+  } as any)
 const ApiDesignUploadRoute = ApiDesignUploadRouteImport.update({
   id: '/api/design/upload',
   path: '/api/design/upload',
@@ -901,10 +940,12 @@ export interface FileRoutesByFullPath {
   '/docs': typeof DocsRoute
   '/workspace': typeof WorkspaceRoute
   '/onboarding': typeof _desktopOnboardingRouteRoute
+  '/email-unsubscribe': typeof LoginEmailUnsubscribeRouteRoute
   '/forgot-password': typeof LoginForgotPasswordRouteRoute
   '/login': typeof LoginLoginRouteRoute
   '/register': typeof LoginRegisterRouteRoute
   '/reset-password': typeof LoginResetPasswordRouteRoute
+  '/verify-email': typeof LoginVerifyEmailRouteRoute
   '/acceptance-criteria': typeof NavAcceptanceCriteriaRouteRoute
   '/agents': typeof NavAgentsRouteRoute
   '/apps': typeof NavAppsRouteRouteWithChildren
@@ -936,6 +977,7 @@ export interface FileRoutesByFullPath {
   '/server/ai-stream': typeof ServerAiStreamRoute
   '/server/ws': typeof ServerWsRoute
   '/$lang/docs/$': typeof LangDocsSplatRouteRoute
+  '/changelog/confirm': typeof LoginChangelogConfirmRouteRoute
   '/apps/anyhub': typeof NavAppsAnyhubRouteRouteWithChildren
   '/design/$projectId': typeof NavDesignProjectIdRouteRouteWithChildren
   '/knowledge/$kbId': typeof NavKnowledgeKbIdRouteRouteWithChildren
@@ -969,6 +1011,8 @@ export interface FileRoutesByFullPath {
   '/api/attachments/upload': typeof ApiAttachmentsUploadRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
   '/api/auth/desktop-callback': typeof ApiAuthDesktopCallbackRoute
+  '/api/cron/changelog-release': typeof ApiCronChangelogReleaseRoute
+  '/api/cron/subscription-reminders': typeof ApiCronSubscriptionRemindersRoute
   '/api/design/upload': typeof ApiDesignUploadRoute
   '/api/knowledge/sync-github': typeof ApiKnowledgeSyncGithubRoute
   '/api/notifications/stream': typeof ApiNotificationsStreamRoute
@@ -1013,10 +1057,12 @@ export interface FileRoutesByTo {
   '/docs': typeof DocsRoute
   '/workspace': typeof WorkspaceRoute
   '/onboarding': typeof _desktopOnboardingRouteRoute
+  '/email-unsubscribe': typeof LoginEmailUnsubscribeRouteRoute
   '/forgot-password': typeof LoginForgotPasswordRouteRoute
   '/login': typeof LoginLoginRouteRoute
   '/register': typeof LoginRegisterRouteRoute
   '/reset-password': typeof LoginResetPasswordRouteRoute
+  '/verify-email': typeof LoginVerifyEmailRouteRoute
   '/acceptance-criteria': typeof NavAcceptanceCriteriaRouteRoute
   '/agents': typeof NavAgentsRouteRoute
   '/apps': typeof NavAppsRouteRouteWithChildren
@@ -1042,6 +1088,7 @@ export interface FileRoutesByTo {
   '/server/ai-stream': typeof ServerAiStreamRoute
   '/server/ws': typeof ServerWsRoute
   '/$lang/docs/$': typeof LangDocsSplatRouteRoute
+  '/changelog/confirm': typeof LoginChangelogConfirmRouteRoute
   '/apps/anyhub': typeof NavAppsAnyhubRouteRouteWithChildren
   '/design/$projectId': typeof NavDesignProjectIdRouteRouteWithChildren
   '/prd/$id': typeof NavPrdIdRouteRoute
@@ -1067,6 +1114,8 @@ export interface FileRoutesByTo {
   '/api/attachments/upload': typeof ApiAttachmentsUploadRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
   '/api/auth/desktop-callback': typeof ApiAuthDesktopCallbackRoute
+  '/api/cron/changelog-release': typeof ApiCronChangelogReleaseRoute
+  '/api/cron/subscription-reminders': typeof ApiCronSubscriptionRemindersRoute
   '/api/design/upload': typeof ApiDesignUploadRoute
   '/api/knowledge/sync-github': typeof ApiKnowledgeSyncGithubRoute
   '/api/notifications/stream': typeof ApiNotificationsStreamRoute
@@ -1115,10 +1164,12 @@ export interface FileRoutesById {
   '/workspace': typeof WorkspaceRoute
   '/_public/': typeof PublicIndexRouteRoute
   '/__desktop/onboarding': typeof _desktopOnboardingRouteRoute
+  '/_login/email-unsubscribe': typeof LoginEmailUnsubscribeRouteRoute
   '/_login/forgot-password': typeof LoginForgotPasswordRouteRoute
   '/_login/login': typeof LoginLoginRouteRoute
   '/_login/register': typeof LoginRegisterRouteRoute
   '/_login/reset-password': typeof LoginResetPasswordRouteRoute
+  '/_login/verify-email': typeof LoginVerifyEmailRouteRoute
   '/_nav/acceptance-criteria': typeof NavAcceptanceCriteriaRouteRoute
   '/_nav/agents': typeof NavAgentsRouteRoute
   '/_nav/apps': typeof NavAppsRouteRouteWithChildren
@@ -1150,6 +1201,7 @@ export interface FileRoutesById {
   '/server/ai-stream': typeof ServerAiStreamRoute
   '/server/ws': typeof ServerWsRoute
   '/$lang/docs/$': typeof LangDocsSplatRouteRoute
+  '/_login/changelog/confirm': typeof LoginChangelogConfirmRouteRoute
   '/_nav/apps/anyhub': typeof NavAppsAnyhubRouteRouteWithChildren
   '/_nav/design/$projectId': typeof NavDesignProjectIdRouteRouteWithChildren
   '/_nav/knowledge/$kbId': typeof NavKnowledgeKbIdRouteRouteWithChildren
@@ -1183,6 +1235,8 @@ export interface FileRoutesById {
   '/api/attachments/upload': typeof ApiAttachmentsUploadRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
   '/api/auth/desktop-callback': typeof ApiAuthDesktopCallbackRoute
+  '/api/cron/changelog-release': typeof ApiCronChangelogReleaseRoute
+  '/api/cron/subscription-reminders': typeof ApiCronSubscriptionRemindersRoute
   '/api/design/upload': typeof ApiDesignUploadRoute
   '/api/knowledge/sync-github': typeof ApiKnowledgeSyncGithubRoute
   '/api/notifications/stream': typeof ApiNotificationsStreamRoute
@@ -1229,10 +1283,12 @@ export interface FileRouteTypes {
     | '/docs'
     | '/workspace'
     | '/onboarding'
+    | '/email-unsubscribe'
     | '/forgot-password'
     | '/login'
     | '/register'
     | '/reset-password'
+    | '/verify-email'
     | '/acceptance-criteria'
     | '/agents'
     | '/apps'
@@ -1264,6 +1320,7 @@ export interface FileRouteTypes {
     | '/server/ai-stream'
     | '/server/ws'
     | '/$lang/docs/$'
+    | '/changelog/confirm'
     | '/apps/anyhub'
     | '/design/$projectId'
     | '/knowledge/$kbId'
@@ -1297,6 +1354,8 @@ export interface FileRouteTypes {
     | '/api/attachments/upload'
     | '/api/auth/$'
     | '/api/auth/desktop-callback'
+    | '/api/cron/changelog-release'
+    | '/api/cron/subscription-reminders'
     | '/api/design/upload'
     | '/api/knowledge/sync-github'
     | '/api/notifications/stream'
@@ -1341,10 +1400,12 @@ export interface FileRouteTypes {
     | '/docs'
     | '/workspace'
     | '/onboarding'
+    | '/email-unsubscribe'
     | '/forgot-password'
     | '/login'
     | '/register'
     | '/reset-password'
+    | '/verify-email'
     | '/acceptance-criteria'
     | '/agents'
     | '/apps'
@@ -1370,6 +1431,7 @@ export interface FileRouteTypes {
     | '/server/ai-stream'
     | '/server/ws'
     | '/$lang/docs/$'
+    | '/changelog/confirm'
     | '/apps/anyhub'
     | '/design/$projectId'
     | '/prd/$id'
@@ -1395,6 +1457,8 @@ export interface FileRouteTypes {
     | '/api/attachments/upload'
     | '/api/auth/$'
     | '/api/auth/desktop-callback'
+    | '/api/cron/changelog-release'
+    | '/api/cron/subscription-reminders'
     | '/api/design/upload'
     | '/api/knowledge/sync-github'
     | '/api/notifications/stream'
@@ -1442,10 +1506,12 @@ export interface FileRouteTypes {
     | '/workspace'
     | '/_public/'
     | '/__desktop/onboarding'
+    | '/_login/email-unsubscribe'
     | '/_login/forgot-password'
     | '/_login/login'
     | '/_login/register'
     | '/_login/reset-password'
+    | '/_login/verify-email'
     | '/_nav/acceptance-criteria'
     | '/_nav/agents'
     | '/_nav/apps'
@@ -1477,6 +1543,7 @@ export interface FileRouteTypes {
     | '/server/ai-stream'
     | '/server/ws'
     | '/$lang/docs/$'
+    | '/_login/changelog/confirm'
     | '/_nav/apps/anyhub'
     | '/_nav/design/$projectId'
     | '/_nav/knowledge/$kbId'
@@ -1510,6 +1577,8 @@ export interface FileRouteTypes {
     | '/api/attachments/upload'
     | '/api/auth/$'
     | '/api/auth/desktop-callback'
+    | '/api/cron/changelog-release'
+    | '/api/cron/subscription-reminders'
     | '/api/design/upload'
     | '/api/knowledge/sync-github'
     | '/api/notifications/stream'
@@ -1571,6 +1640,8 @@ export interface RootRouteChildren {
   ApiAttachmentsUploadRoute: typeof ApiAttachmentsUploadRoute
   ApiAuthSplatRoute: typeof ApiAuthSplatRoute
   ApiAuthDesktopCallbackRoute: typeof ApiAuthDesktopCallbackRoute
+  ApiCronChangelogReleaseRoute: typeof ApiCronChangelogReleaseRoute
+  ApiCronSubscriptionRemindersRoute: typeof ApiCronSubscriptionRemindersRoute
   ApiDesignUploadRoute: typeof ApiDesignUploadRoute
   ApiKnowledgeSyncGithubRoute: typeof ApiKnowledgeSyncGithubRoute
   ApiNotificationsStreamRoute: typeof ApiNotificationsStreamRoute
@@ -1631,6 +1702,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof _desktopOnboardingRouteRouteImport
       parentRoute: typeof rootRouteImport
     }
+    '/_login/email-unsubscribe': {
+      id: '/_login/email-unsubscribe'
+      path: '/email-unsubscribe'
+      fullPath: '/email-unsubscribe'
+      preLoaderRoute: typeof LoginEmailUnsubscribeRouteRouteImport
+      parentRoute: typeof LoginRouteRoute
+    }
     '/_login/forgot-password': {
       id: '/_login/forgot-password'
       path: '/forgot-password'
@@ -1659,6 +1737,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof LoginResetPasswordRouteRouteImport
       parentRoute: typeof LoginRouteRoute
     }
+    '/_login/verify-email': {
+      id: '/_login/verify-email'
+      path: '/verify-email'
+      fullPath: '/verify-email'
+      preLoaderRoute: typeof LoginVerifyEmailRouteRouteImport
+      parentRoute: typeof LoginRouteRoute
+    }
     '/_nav/acceptance-criteria': {
       id: '/_nav/acceptance-criteria'
       path: '/acceptance-criteria'
@@ -1883,6 +1968,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof LangDocsSplatRouteRouteImport
       parentRoute: typeof rootRouteImport
     }
+    '/_login/changelog/confirm': {
+      id: '/_login/changelog/confirm'
+      path: '/changelog/confirm'
+      fullPath: '/changelog/confirm'
+      preLoaderRoute: typeof LoginChangelogConfirmRouteRouteImport
+      parentRoute: typeof LoginRouteRoute
+    }
     '/_nav/apps/anyhub': {
       id: '/_nav/apps/anyhub'
       path: '/anyhub'
@@ -2121,6 +2213,20 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof ApiAuthDesktopCallbackRouteImport
       parentRoute: typeof rootRouteImport
     }
+    '/api/cron/changelog-release': {
+      id: '/api/cron/changelog-release'
+      path: '/api/cron/changelog-release'
+      fullPath: '/api/cron/changelog-release'
+      preLoaderRoute: typeof ApiCronChangelogReleaseRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/cron/subscription-reminders': {
+      id: '/api/cron/subscription-reminders'
+      path: '/api/cron/subscription-reminders'
+      fullPath: '/api/cron/subscription-reminders'
+      preLoaderRoute: typeof ApiCronSubscriptionRemindersRouteImport
+      parentRoute: typeof rootRouteImport
+    }
     '/api/design/upload': {
       id: '/api/design/upload'
       path: '/api/design/upload'
@@ -2377,17 +2483,23 @@ declare module '@tanstack/react-router' {
 }
 
 interface LoginRouteRouteChildren {
+  LoginEmailUnsubscribeRouteRoute: typeof LoginEmailUnsubscribeRouteRoute
   LoginForgotPasswordRouteRoute: typeof LoginForgotPasswordRouteRoute
   LoginLoginRouteRoute: typeof LoginLoginRouteRoute
   LoginRegisterRouteRoute: typeof LoginRegisterRouteRoute
   LoginResetPasswordRouteRoute: typeof LoginResetPasswordRouteRoute
+  LoginVerifyEmailRouteRoute: typeof LoginVerifyEmailRouteRoute
+  LoginChangelogConfirmRouteRoute: typeof LoginChangelogConfirmRouteRoute
 }
 
 const LoginRouteRouteChildren: LoginRouteRouteChildren = {
+  LoginEmailUnsubscribeRouteRoute: LoginEmailUnsubscribeRouteRoute,
   LoginForgotPasswordRouteRoute: LoginForgotPasswordRouteRoute,
   LoginLoginRouteRoute: LoginLoginRouteRoute,
   LoginRegisterRouteRoute: LoginRegisterRouteRoute,
   LoginResetPasswordRouteRoute: LoginResetPasswordRouteRoute,
+  LoginVerifyEmailRouteRoute: LoginVerifyEmailRouteRoute,
+  LoginChangelogConfirmRouteRoute: LoginChangelogConfirmRouteRoute,
 }
 
 const LoginRouteRouteWithChildren = LoginRouteRoute._addFileChildren(
@@ -2840,6 +2952,8 @@ const rootRouteChildren: RootRouteChildren = {
   ApiAttachmentsUploadRoute: ApiAttachmentsUploadRoute,
   ApiAuthSplatRoute: ApiAuthSplatRoute,
   ApiAuthDesktopCallbackRoute: ApiAuthDesktopCallbackRoute,
+  ApiCronChangelogReleaseRoute: ApiCronChangelogReleaseRoute,
+  ApiCronSubscriptionRemindersRoute: ApiCronSubscriptionRemindersRoute,
   ApiDesignUploadRoute: ApiDesignUploadRoute,
   ApiKnowledgeSyncGithubRoute: ApiKnowledgeSyncGithubRoute,
   ApiNotificationsStreamRoute: ApiNotificationsStreamRoute,

package/src/routes/__root.tsx

@@ -16,6 +16,7 @@
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 import { Link, Outlet, createRootRouteWithContext, HeadContent, Scripts, useParams } from '@tanstack/react-router'
+import { useEffect } from 'react'
 import { HotkeysProvider } from '@tanstack/react-hotkeys'
 import { ShortcutsPanel } from '@/components/hotkeys/shortcuts-panel'
 import { Analytics } from '@vercel/analytics/react'
@@ -53,7 +54,8 @@ export const Route = createRootRouteWithContext<RouterContext>()({
       { name: 'description', content: '专为产品经理打造的协作平台' },
     ],
     links: [
-      { rel: 'icon', href: '/favicon.ico' },
+      { rel: 'icon', href: '/favicon.svg', type: 'image/svg+xml' },
+      { rel: 'icon', href: '/favicon.ico', sizes: '48x48' },
       { rel: 'stylesheet', href: '/fonts/fonts.css' },
       { rel: 'stylesheet', href: globalsCss },
     ],
@@ -66,6 +68,20 @@ export const Route = createRootRouteWithContext<RouterContext>()({
 function RootComponent() {
   const session = Route.useRouteContext({ select: (c) => c.session }) as Session | null
   const { lang } = useParams({ strict: false }) as { lang?: string | undefined }
+
+  useEffect(() => {
+    const media = window.matchMedia('(prefers-color-scheme: dark)')
+    const update = () => {
+      const link = document.querySelector<HTMLLinkElement>('link[rel="icon"][type="image/svg+xml"]')
+      if (!link) return
+      const target = media.matches ? '/favicon-dark.svg' : '/favicon.svg'
+      if (link.getAttribute('href') !== target) link.href = target
+    }
+    update()
+    media.addEventListener('change', update)
+    return () => media.removeEventListener('change', update)
+  }, [])
+
   return (
     <html lang={getLocale()} suppressHydrationWarning>
       <head>
@@ -83,8 +99,9 @@ function RootComponent() {
           </RootProvider>
         </Providers>
         <Scripts />
-        <Analytics />
-        <SpeedInsights />
+        {/* va.vercel-scripts.com 在部分网络环境不可达，dev 下跳过避免控制台噪音 */}
+        {import.meta.env.PROD && <Analytics />}
+        {import.meta.env.PROD && <SpeedInsights />}
       </body>
     </html>
   )

package/src/routes/__tests__/-auth-schemas.test.ts

@@ -0,0 +1,62 @@
+import { describe, it, expect } from 'vitest'
+import { loginSchema, registerSchema, resetPasswordSchema, forgotPasswordSchema } from '../_login/schemas/-auth'
+
+describe('registerSchema', () => {
+  it('拒绝纯数字密码（缺字母）', () => {
+    expect(registerSchema.safeParse({ username: 'alice', email: 'a@b.com', password: '12345678', confirmPassword: '12345678', invitationCode: 'ABC123' }).success).toBe(false)
+  })
+  it('拒绝纯字母密码（缺数字）', () => {
+    expect(registerSchema.safeParse({ username: 'alice', email: 'a@b.com', password: 'abcdefgh', confirmPassword: 'abcdefgh', invitationCode: 'ABC123' }).success).toBe(false)
+  })
+  it('拒绝非法用户名字符', () => {
+    expect(registerSchema.safeParse({ username: '阿里', email: 'a@b.com', password: 'abc12345', confirmPassword: 'abc12345', invitationCode: 'ABC123' }).success).toBe(false)
+  })
+  it('接受字母+数字密码与合法用户名', () => {
+    expect(registerSchema.safeParse({ username: 'alice_01', email: 'a@b.com', password: 'abc12345', confirmPassword: 'abc12345', invitationCode: 'ABC123' }).success).toBe(true)
+  })
+  it('invitationCode 可空（open 模式前端忽略，服务端校验）', () => {
+    expect(registerSchema.safeParse({ username: 'alice', email: 'a@b.com', password: 'abc12345', confirmPassword: 'abc12345', invitationCode: '' }).success).toBe(true)
+  })
+  it('invitationCode 拒绝非法字符', () => {
+    const r = registerSchema.safeParse({ username: 'alice', email: 'a@b.com', password: 'abc12345', confirmPassword: 'abc12345', invitationCode: '!!!' })
+    expect(r.success).toBe(false)
+    if (!r.success) expect(r.error.issues[0].path).toEqual(['invitationCode'])
+  })
+  it('invitationCode 拒绝超长（>32 位）', () => {
+    expect(registerSchema.safeParse({ username: 'alice', email: 'a@b.com', password: 'abc12345', confirmPassword: 'abc12345', invitationCode: 'a'.repeat(33) }).success).toBe(false)
+  })
+  it('invitationCode 缺省（未传字段）→ 默认空串通过', () => {
+    expect(registerSchema.safeParse({ username: 'alice', email: 'a@b.com', password: 'abc12345', confirmPassword: 'abc12345' }).success).toBe(true)
+  })
+})
+
+describe('resetPasswordSchema', () => {
+  it('拒绝纯数字密码', () => {
+    expect(resetPasswordSchema.safeParse({ password: '12345678', confirmPassword: '12345678' }).success).toBe(false)
+  })
+  it('接受字母+数字密码', () => {
+    expect(resetPasswordSchema.safeParse({ password: 'abc12345', confirmPassword: 'abc12345' }).success).toBe(true)
+  })
+})
+
+describe('邮箱归一化（emailRule transform）', () => {
+  it('loginSchema 归一小写并去首尾空格', () => {
+    const r = loginSchema.safeParse({ email: ' A@B.COM ', password: 'x', remember: false })
+    expect(r.success).toBe(true)
+    if (r.success) expect(r.data.email).toBe('a@b.com')
+  })
+
+  it('forgotPasswordSchema 同样归一', () => {
+    const r = forgotPasswordSchema.safeParse({ email: 'X@Y.ORG' })
+    expect(r.success).toBe(true)
+    if (r.success) expect(r.data.email).toBe('x@y.org')
+  })
+
+  it('registerSchema 同样归一', () => {
+    const r = registerSchema.safeParse({
+      username: 'alice_01', email: ' M@N.IO ', password: 'abc12345', confirmPassword: 'abc12345',
+    })
+    expect(r.success).toBe(true)
+    if (r.success) expect(r.data.email).toBe('m@n.io')
+  })
+})

package/src/routes/__tests__/-edition-routing.test.tsx

@@ -3,10 +3,11 @@ import React from 'react'
 
 // edition.ts 从 @d plugins/modules.gen 读 profileId 并派生 isSaasEdition，
 // mock 必须在 edition 被 import 之前生效，否则 isSaasEdition 被缓存为 false（oss）。
-async function importIndexRoute(profileId: 'oss' | 'saas') {
+async function importIndexRoute(profileId: 'oss' | 'saas', desktop = false) {
   vi.doMock('@/paraglide/runtime', () => ({ getLocale: () => 'zh', overwriteGetLocale: () => {}, locales: ['zh', 'en'], baseLocale: 'zh' }))
   vi.resetModules()
   vi.doMock('@/plugins/modules.gen', () => ({ profileId }))
+  vi.doMock('@/lib/edition-desktop', () => ({ isDesktopEdition: () => desktop }))
   return import('../_public/index/route')
 }
 
@@ -55,6 +56,18 @@ describe('_public/index beforeLoad', () => {
     const { Route } = await importIndexRoute('saas')
     expect(catchRedirect(() => Route.options.beforeLoad!( {} as never))).toBeNull()
   }, 20000)
+
+  it('desktop + SaaS：redirect 到 /dashboard（跳过官网）', async () => {
+    const { Route } = await importIndexRoute('saas', true)
+    const r = catchRedirect(() => Route.options.beforeLoad!( {} as never))
+    expect(r?.to).toBe('/dashboard')
+  }, 20000)
+
+  it('desktop + OSS：redirect 到 /dashboard', async () => {
+    const { Route } = await importIndexRoute('oss', true)
+    const r = catchRedirect(() => Route.options.beforeLoad!( {} as never))
+    expect(r?.to).toBe('/dashboard')
+  }, 20000)
 })
 
 describe('_nav beforeLoad', () => {

package/src/routes/__tests__/route-tree-structure.test.ts

@@ -17,6 +17,7 @@ const MUST_EXIST_PATHS: string[] = [
   "'/register'",
   "'/forgot-password'",
   "'/reset-password'",
+  "'/verify-email'",
   // 导航区（_nav pathless layout，登录后落地页）
   "'/dashboard'",
   "'/workspaces'",

package/src/routes/_login/changelog/confirm/route.lazy.tsx

@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createLazyFileRoute, Link } from '@tanstack/react-router'
+import { RainbowButton } from '@/components/magicui/rainbow-button'
+import { ArrowRight } from 'lucide-react'
+import { AuthLayout, AuthLayoutLeft, AuthLayoutRight } from '@/components/auth/auth-layout'
+import { AuthHeader } from '@/components/auth/auth-header'
+import { AuthBrandPanel } from '@/components/auth/auth-brand-panel'
+import { m } from '@/paraglide/messages.js'
+
+export const Route = createLazyFileRoute('/_login/changelog/confirm')({
+  component: ChangelogConfirmPage,
+})
+
+function ChangelogConfirmPage() {
+  const { ok } = Route.useRouteContext()
+
+  return (
+    <AuthLayout>
+      <AuthLayoutLeft>
+        {ok ? (
+          <>
+            <AuthHeader
+              title={m.common_changelog_confirm_success()}
+              subtitle={m.common_changelog_confirm_successDesc()}
+            />
+            <RainbowButton asChild className="w-full">
+              <Link to="/changelog">
+                {m.common_changelog_confirm_view()}
+                <ArrowRight className="ml-2 h-4 w-4" />
+              </Link>
+            </RainbowButton>
+          </>
+        ) : (
+          <>
+            <AuthHeader
+              title={m.common_changelog_confirm_invalid()}
+              subtitle={m.common_changelog_confirm_invalidDesc()}
+            />
+            <RainbowButton asChild className="w-full">
+              <Link to="/changelog">
+                {m.common_changelog_confirm_resubscribe()}
+                <ArrowRight className="ml-2 h-4 w-4" />
+              </Link>
+            </RainbowButton>
+          </>
+        )}
+      </AuthLayoutLeft>
+      <AuthLayoutRight>
+        <AuthBrandPanel
+          title="AllBlue"
+          subtitle={ok ? m.common_changelog_confirm_success() : m.common_changelog_confirm_invalid()}
+        />
+      </AuthLayoutRight>
+    </AuthLayout>
+  )
+}

package/src/routes/_login/changelog/confirm/route.tsx

@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from '@tanstack/react-router'
+import { confirmChangelogSubscriptionFn } from '@/server/serverFns/changelog/subscribe'
+
+export const Route = createFileRoute('/_login/changelog/confirm')({
+  validateSearch: (s: { token?: string }) => ({ token: s.token ?? '' }),
+  beforeLoad: async ({ search }) => {
+    if (!search.token) return { ok: false }
+    const r = await confirmChangelogSubscriptionFn({ data: { token: search.token } })
+    return { ok: r.ok }
+  },
+})