@allbluecn/web-app 0.18.0 → 0.18.2

package/src/components/workspace/__tests__/members/workspace-members-manager.test.tsx

@@ -2,15 +2,15 @@ import { describe, it, expect, vi } from "vitest";
 import { render, screen } from "@testing-library/react";
 import { WorkspaceMembersManager } from "../../members/workspace-members-manager";
 
-vi.mock("@allbluecn/ui/button", () => ({
+vi.mock("@/components/ui/button", () => ({
   Button: ({ children, ...props }: any) => <button {...props}>{children}</button>,
 }));
 
-vi.mock("@allbluecn/ui/input", () => ({
+vi.mock("@/components/ui/input", () => ({
   Input: (props: any) => <input {...props} />,
 }));
 
-vi.mock("@allbluecn/ui/dialog", () => ({
+vi.mock("@/components/ui/dialog", () => ({
   Dialog: ({ children }: any) => <div>{children}</div>,
   DialogContent: ({ children }: any) => <div>{children}</div>,
   DialogFooter: ({ children }: any) => <div>{children}</div>,
@@ -19,11 +19,11 @@ vi.mock("@allbluecn/ui/dialog", () => ({
   DialogDescription: ({ children }: any) => <p>{children}</p>,
 }));
 
-vi.mock("@allbluecn/ui/toast", () => ({
+vi.mock("@/components/ui/toast", () => ({
   toast: { error: vi.fn(), success: vi.fn() },
 }));
 
-vi.mock("@allbluecn/ui/tooltip", () => ({
+vi.mock("@/components/ui/tooltip", () => ({
   TooltipProvider: ({ children }: any) => <div>{children}</div>,
   Tooltip: ({ children }: any) => <div>{children}</div>,
   TooltipTrigger: ({ children }: any) => <div>{children}</div>,

package/src/components/workspace/__tests__/projects/workspace-project-list.test.tsx

@@ -2,11 +2,11 @@ import { describe, it, expect, vi } from "vitest";
 import { render, screen } from "@testing-library/react";
 import { WorkspaceProjectList } from "../../projects/workspace-project-list";
 
-vi.mock("@allbluecn/ui/button", () => ({
+vi.mock("@/components/ui/button", () => ({
   Button: ({ children, ...props }: any) => <button {...props}>{children}</button>,
 }));
 
-vi.mock("@allbluecn/ui/card", () => ({
+vi.mock("@/components/ui/card", () => ({
   Card: ({ children, className, ...props }: any) => <div className={className} {...props}>{children}</div>,
 }));
 

package/src/components/workspace/dialogs/create-workspace-dialog.tsx

@@ -18,15 +18,15 @@
 import { useState } from "react";
 import { useForm } from "@tanstack/react-form";
 import { Link, useRouter } from "@tanstack/react-router";
-import { Button } from "@allbluecn/ui/button";
-import { Input } from "@allbluecn/ui/input";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
 import {
   Dialog,
   DialogContent,
   DialogFooter,
   DialogHeader,
   DialogTitle,
-} from "@allbluecn/ui/dialog";
+} from "@/components/ui/dialog";
 import { LucideIconPicker } from "@/components/shared-kit/icons/lucide-icon-picker";
 import { createWorkspaceFn } from "@/server/serverFns/workspace";
 import { createWorkspaceSchema } from "../schemas/create-workspace";

package/src/components/workspace/dialogs/delete-workspace-options.tsx

@@ -21,7 +21,7 @@ import {
   FieldDescription,
   FieldLabel,
   FieldTitle,
-} from "@allbluecn/ui/field";
+} from "@/components/ui/field";
 import { RadioGroup, RadioGroupItem } from "@/components/ui/radio-group";
 import {
   Select,
@@ -29,8 +29,8 @@ import {
   SelectItem,
   SelectTrigger,
   SelectValue,
-} from "@allbluecn/ui/select";
-import { Separator } from "@allbluecn/ui/separator";
+} from "@/components/ui/select";
+import { Separator } from "@/components/ui/separator";
 import { m } from "@/paraglide/messages.js";
 
 interface DeleteWorkspaceOptionsProps {

package/src/components/workspace/dialogs/edit-workspace-dialog.tsx

@@ -18,15 +18,15 @@
 import { useState } from "react";
 import { useForm } from "@tanstack/react-form";
 import { useRouter } from "@tanstack/react-router";
-import { Button } from "@allbluecn/ui/button";
-import { Input } from "@allbluecn/ui/input";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
 import {
   Dialog,
   DialogContent,
   DialogFooter,
   DialogHeader,
   DialogTitle,
-} from "@allbluecn/ui/dialog";
+} from "@/components/ui/dialog";
 import { LucideIconPicker } from "@/components/shared-kit/icons/lucide-icon-picker";
 import { updateWorkspaceFn } from "@/server/serverFns/workspace";
 import { createWorkspaceSchema } from "../schemas/create-workspace";

package/src/components/workspace/header/workspace-header.tsx

@@ -17,16 +17,16 @@
 
 import { Link } from "@tanstack/react-router";
 import { Settings, FolderKanban, Pencil, Trash2, ArrowLeft } from "lucide-react";
-import { Button } from "@allbluecn/ui/button";
+import { Button } from "@/components/ui/button";
 import {
   DropdownMenu,
   DropdownMenuContent,
   DropdownMenuItem,
   DropdownMenuTrigger,
-} from "@allbluecn/ui/dropdown-menu";
+} from "@/components/ui/dropdown-menu";
 import {
   Separator,
-} from '@allbluecn/ui/separator';
+} from '@/components/ui/separator';
 import { LucideIconByName } from "@/components/shared-kit/icons/lucide-icon-picker/lucide-icon-by-name";
 import { m } from "@/paraglide/messages.js";
 

package/src/components/workspace/kb/workspace-kb-card.tsx

@@ -25,14 +25,14 @@ import { DragDropProvider, useDroppable, type DragEndEvent, type DragMoveEvent }
 import { useSortable } from "@dnd-kit/react/sortable";
 import { Feedback } from "@dnd-kit/dom";
 import { OptimisticSortingPlugin } from "@dnd-kit/dom/sortable";
-import { Badge } from "@allbluecn/ui/badge";
-import { Button } from "@allbluecn/ui/button";
-import { DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuTrigger } from "@allbluecn/ui/dropdown-menu";
-import { Input } from "@allbluecn/ui/input";
-import { ConfirmDialog } from "@allbluecn/ui/components/confirm-dialog";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuTrigger } from "@/components/ui/dropdown-menu";
+import { Input } from "@/components/ui/input";
+import { ConfirmDialog } from "@/components/confirm-dialog";
 import {
   Tooltip, TooltipContent, TooltipTrigger,
-} from "@allbluecn/ui/tooltip";
+} from "@/components/ui/tooltip";
 import {
   setWorkspaceKbsFn,
   renameQuickDocFn,

package/src/components/workspace/kb/workspace-kb-manage-dialog.tsx

@@ -18,13 +18,13 @@
 import * as React from "react";
 import { useServerFn } from "@tanstack/react-start";
 import { Check, Search } from "lucide-react";
-import { Button } from "@allbluecn/ui/button";
-import { Badge } from "@allbluecn/ui/badge";
-import { Checkbox } from "@allbluecn/ui/checkbox";
-import { Input } from "@allbluecn/ui/input";
+import { Button } from "@/components/ui/button";
+import { Badge } from "@/components/ui/badge";
+import { Checkbox } from "@/components/ui/checkbox";
+import { Input } from "@/components/ui/input";
 import {
   Dialog, DialogContent, DialogFooter, DialogHeader, DialogTitle,
-} from "@allbluecn/ui/dialog";
+} from "@/components/ui/dialog";
 import {
   listWorkspaceAvailableKbsFn,
   setWorkspaceKbsFn,

package/src/components/workspace/kb/workspace-quick-doc-dialog.tsx

@@ -17,15 +17,15 @@
 
 import * as React from "react";
 import { useServerFn } from "@tanstack/react-start";
-import { toast } from "@allbluecn/ui/toast";
+import { toast } from "@/components/ui/toast";
 import { BookOpenText, X } from "lucide-react";
-import { Button } from "@allbluecn/ui/button";
-import { Checkbox } from "@allbluecn/ui/checkbox";
-import { Input } from "@allbluecn/ui/input";
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@allbluecn/ui/select";
+import { Button } from "@/components/ui/button";
+import { Checkbox } from "@/components/ui/checkbox";
+import { Input } from "@/components/ui/input";
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@/components/ui/select";
 import {
   Dialog, DialogContent, DialogFooter, DialogHeader, DialogTitle,
-} from "@allbluecn/ui/dialog";
+} from "@/components/ui/dialog";
 import { KbFilterPopover, type KbFilter } from "@/components/knowledge/kb-filter-popover";
 import { generalGroupLabel } from "@/components/knowledge/general-groups";
 import { LucideIconByName } from "@/components/shared-kit/icons/lucide-icon-picker/lucide-icon-by-name";

package/src/components/workspace/members/workspace-members-manager.tsx

@@ -17,9 +17,9 @@
 
 import { useState, useEffect } from "react";
 import { UserPlus, Loader2, Search, Check, Users } from "lucide-react";
-import { toast } from "@allbluecn/ui/toast";
-import { Button } from "@allbluecn/ui/button";
-import { Input } from "@allbluecn/ui/input";
+import { toast } from "@/components/ui/toast";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
 import {
   Dialog,
   DialogContent,
@@ -27,20 +27,20 @@ import {
   DialogFooter,
   DialogHeader,
   DialogTitle,
-} from "@allbluecn/ui/dialog";
+} from "@/components/ui/dialog";
 import {
   Tooltip,
   TooltipContent,
   TooltipProvider,
   TooltipTrigger,
-} from "@allbluecn/ui/tooltip";
+} from "@/components/ui/tooltip";
 import {
   Select,
   SelectContent,
   SelectItem,
   SelectTrigger,
   SelectValue,
-} from "@allbluecn/ui/select";
+} from "@/components/ui/select";
 import { UserAvatar } from "@/components/shared-kit";
 import type { AvatarConfig, ShapeType } from "@allbluecn/kernel";
 import { NameConfirmDialog } from "@/components/shared-kit/dialogs/name-confirm-dialog";

package/src/components/workspace/projects/workspace-project-list.tsx

@@ -17,8 +17,8 @@
 
 import { Link } from "@tanstack/react-router";
 import { FolderKanban, Plus, Users, Box } from "lucide-react";
-import { Button } from "@allbluecn/ui/button";
-import { Card } from "@allbluecn/ui/card";
+import { Button } from "@/components/ui/button";
+import { Card } from "@/components/ui/card";
 import { LucideIconByName } from "@/components/shared-kit/icons/lucide-icon-picker/lucide-icon-by-name";
 import { CreateProjectDialog } from "@/components/project/create-project-dialog";
 import { m } from "@/paraglide/messages.js";

package/src/hooks/use-load-more.ts

@@ -0,0 +1,57 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+
+import { useEffect, useRef, useState } from "react";
+
+/**
+ * 无限滚动加载状态机：IntersectionObserver 哨兵 + loading 防重入。
+ *
+ * 哨兵进入视口且 hasMore 时触发 onLoadMore；返回 Promise 时 resolve 后解除
+ * loading，同步返回则由调用方经 hasMore/数据更新间接解除。供
+ * InfiniteScrollSentinel 等无限滚动组件复用。
+ */
+export function useLoadMore(
+  onLoadMore: () => void | Promise<void>,
+  hasMore: boolean,
+  rootRef?: React.RefObject<HTMLElement | null>,
+): {
+  /** 挂到滚动末端哨兵元素上 */
+  sentinelRef: React.RefObject<HTMLDivElement | null>;
+  loading: boolean;
+} {
+  const sentinelRef = useRef<HTMLDivElement>(null);
+  const observerRef = useRef<IntersectionObserver | null>(null);
+  const [loading, setLoading] = useState(false);
+  const loadingRef = useRef(false);
+
+  useEffect(() => {
+    loadingRef.current = loading;
+  }, [loading]);
+
+  useEffect(() => {
+    if (!sentinelRef.current || !hasMore) return;
+
+    if (observerRef.current) observerRef.current.disconnect();
+
+    const observer = new IntersectionObserver(
+      (entries) => {
+        if (entries[0]?.isIntersecting && !loadingRef.current) {
+          setLoading(true);
+          const result = onLoadMore();
+          if (result && typeof (result as Promise<void>).then === "function") {
+            (result as Promise<void>).then(() => setLoading(false));
+          }
+        }
+      },
+      { root: rootRef?.current ?? null, rootMargin: "80px" },
+    );
+
+    observer.observe(sentinelRef.current);
+    observerRef.current = observer;
+    return () => observer.disconnect();
+    // onLoadMore 由调用方保证稳定（多为 useCallback），与原实现一致仅依赖 hasMore/rootRef
+  }, [hasMore, rootRef]);
+
+  return { sentinelRef, loading };
+}

package/src/hooks/use-mobile.ts

@@ -0,0 +1,19 @@
+import * as React from "react"
+
+const MOBILE_BREAKPOINT = 768
+
+export function useIsMobile() {
+  const [isMobile, setIsMobile] = React.useState<boolean | undefined>(undefined)
+
+  React.useEffect(() => {
+    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`)
+    const onChange = () => {
+      setIsMobile(window.innerWidth < MOBILE_BREAKPOINT)
+    }
+    mql.addEventListener("change", onChange)
+    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT)
+    return () => mql.removeEventListener("change", onChange)
+  }, [])
+
+  return !!isMobile
+}

package/src/hooks/use-notifications.ts

@@ -2,7 +2,7 @@
 import { useCallback, useEffect } from 'react'
 import { useQuery, useQueryClient } from '@tanstack/react-query'
 import { useRouter } from '@tanstack/react-router'
-import { toast } from '@allbluecn/ui/toast'
+import { toast } from '@/components/ui/toast'
 import type { NotificationSseValue, NotificationItem } from '@allbluecn/kernel'
 import { isInDndWindow } from '@allbluecn/kernel'
 import { getUnreadCountFn, getNotificationPreferencesFn } from '@/server/serverFns/notifications'

package/src/lib/changelog/sdk-versions.ts

@@ -95,7 +95,7 @@ export const SDK_GROUPS: SdkGroup[] = [
     "items": [
       {
         "name": "@allbluecn/web-app",
-        "version": "v0.18.0",
+        "version": "v0.18.2",
         "lastUpdate": "Oct 7, 2026",
         "source": "apps/web/package.json",
         "docsUrl": "https://github.com/allbluecn/allblue"

package/src/lib/datetime.ts

@@ -15,7 +15,212 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program. If not, see <https://www.gnu.org/licenses/>.
 
-// 实现已迁至 @allbluecn/ui（任务 6.3 admin→web 解耦）：
-// datetime 无 UI / 无 i18n 依赖，admin 与 web 共同消费。
-// 本文件仅为转发层，web 内部 `@/lib/datetime` 导入保持不变。
-export * from "@allbluecn/ui/lib/datetime"
+import { formatInTimeZone, toZonedTime, fromZonedTime } from 'date-fns-tz'
+import { startOfDay, subDays } from 'date-fns'
+
+const FALLBACK_TIMEZONE = 'Asia/Shanghai'
+
+/**
+ * 解析生效时区：项目时区 > 用户时区 > 浏览器时区 > Asia/Shanghai
+ */
+export function resolveTimezone(
+  projectTz?: string | null,
+  userTz?: string | null,
+): string {
+  const browserTz =
+    typeof Intl !== 'undefined'
+      ? Intl.DateTimeFormat().resolvedOptions().timeZone
+      : FALLBACK_TIMEZONE
+  return projectTz || userTz || browserTz || FALLBACK_TIMEZONE
+}
+
+/**
+ * 时区感知的时间格式化。
+ * @param date UTC Date 对象（来自 DB）
+ * @param timezone IANA 时区，如 "Asia/Shanghai"
+ * @param fmt date-fns 格式，默认 "yyyy-MM-dd HH:mm"
+ */
+export function formatDate(
+  date: Date,
+  timezone: string,
+  fmt = 'yyyy-MM-dd HH:mm',
+): string {
+  try {
+    return formatInTimeZone(date, timezone, fmt)
+  } catch {
+    return formatInTimeZone(date, FALLBACK_TIMEZONE, fmt)
+  }
+}
+
+/**
+ * 确定性时间戳格式化：固定时区 + date-fns 数字格式，不依赖运行环境 locale/时区。
+ * SSR 与客户端输出字节级一致，专治 toLocaleString() 引发的 hydration mismatch。
+ * @param date Date 对象或 ISO 字符串
+ * @param fmt date-fns 格式，默认 "yyyy-MM-dd HH:mm"
+ */
+export function formatTimestamp(
+  date: Date | string,
+  fmt = 'yyyy-MM-dd HH:mm',
+): string {
+  const d = typeof date === 'string' ? new Date(date) : date
+  if (Number.isNaN(d.getTime())) return '-'
+  return formatDate(d, FALLBACK_TIMEZONE, fmt)
+}
+
+/**
+ * 相对时间（今天/昨天/具体日期），基于时区计算「今天的 0 点」。
+ * @param now 当前时间（测试注入；生产用默认 new Date()）
+ */
+export function formatRelative(
+  date: Date,
+  timezone: string,
+  now: Date = new Date(),
+): string {
+  try {
+    const todayStart = startOfDayInTimeZone(now, timezone)
+    const yesterdayStart = new Date(todayStart)
+    yesterdayStart.setDate(yesterdayStart.getDate() - 1)
+
+    const dateStart = startOfDayInTimeZone(date, timezone)
+
+    if (dateStart.getTime() === todayStart.getTime()) return '今天'
+    if (dateStart.getTime() === yesterdayStart.getTime()) return '昨天'
+    return formatInTimeZone(date, timezone, 'yyyy-MM-dd')
+  } catch {
+    return formatInTimeZone(date, FALLBACK_TIMEZONE, 'yyyy-MM-dd')
+  }
+}
+
+/**
+ * 获取指定时区下某天的 0 点（UTC Date 对象）。
+ */
+function startOfDayInTimeZone(date: Date, timezone: string): Date {
+  const zoned = toZonedTime(date, timezone)
+  const dayStart = startOfDay(zoned)
+  return fromZonedTime(dayStart, timezone)
+}
+
+/**
+ * 对话历史日期分组标签（今天/昨天/本周/具体日期）。
+ * @param date UTC Date 对象
+ * @param timezone IANA 时区
+ */
+export function formatChatDate(date: Date, timezone: string): string {
+  try {
+    const now = new Date()
+    const todayStart = startOfDayInTimeZone(now, timezone)
+    const yesterdayStart = subDays(todayStart, 1)
+    const weekStart = subDays(todayStart, 7)
+
+    const dateStart = startOfDayInTimeZone(date, timezone)
+
+    if (dateStart.getTime() === todayStart.getTime()) return '今天'
+    if (dateStart.getTime() === yesterdayStart.getTime()) return '昨天'
+    if (dateStart.getTime() >= weekStart.getTime()) return '本周'
+
+    const currentYear = Number(formatInTimeZone(now, timezone, 'yyyy'))
+    const dateYear = Number(formatInTimeZone(date, timezone, 'yyyy'))
+    if (dateYear === currentYear) {
+      return formatInTimeZone(date, timezone, 'M月d日')
+    }
+    return formatInTimeZone(date, timezone, 'yyyy年M月d日')
+  } catch {
+    return formatInTimeZone(date, FALLBACK_TIMEZONE, 'yyyy-MM-dd')
+  }
+}
+
+
+// ---- 本地日历工具（自 lib/date-utils.ts 并入：按本地时区做日历网格/日键计算，无时区转换） ----
+
+/** 解析 "yyyy-MM-dd" 前缀为本地 Date（避免 UTC 偏移） */
+export function parseDate(s: string): Date {
+  const datePart = s.slice(0, 10)
+  const [y, m, d] = datePart.split('-').map(Number)
+  return new Date(y, m - 1, d)
+}
+
+/** 本地时区 yyyy-MM-dd 日键（与 timezone 版 formatDate 区分） */
+export function formatDateLocal(d: Date): string {
+  const y = d.getFullYear()
+  const m = String(d.getMonth() + 1).padStart(2, '0')
+  const day = String(d.getDate()).padStart(2, '0')
+  return `${y}-${m}-${day}`
+}
+
+export function isSameDay(a: Date, b: Date): boolean {
+  return (
+    a.getFullYear() === b.getFullYear() &&
+    a.getMonth() === b.getMonth() &&
+    a.getDate() === b.getDate()
+  )
+}
+
+export function getMonthGrid(
+  year: number,
+  month: number,
+): Array<{ date: Date; inMonth: boolean }> {
+  const firstDay = new Date(year, month, 1)
+  const startOffset = firstDay.getDay() // 周日=0
+  const gridStart = new Date(year, month, 1 - startOffset)
+  const result: Array<{ date: Date; inMonth: boolean }> = []
+  for (let i = 0; i < 42; i++) {
+    const date = new Date(gridStart)
+    date.setDate(gridStart.getDate() + i)
+    result.push({ date, inMonth: date.getMonth() === month })
+  }
+  return result
+}
+
+export function getWeekGrid(
+  year: number,
+  month: number,
+  day: number,
+): Array<{ date: Date; inMonth: boolean }> {
+  const anchor = new Date(year, month, day)
+  const startOffset = anchor.getDay()
+  const gridStart = new Date(year, month, day - startOffset)
+  const result: Array<{ date: Date; inMonth: boolean }> = []
+  for (let i = 0; i < 7; i++) {
+    const date = new Date(gridStart)
+    date.setDate(gridStart.getDate() + i)
+    result.push({ date, inMonth: date.getMonth() === month })
+  }
+  return result
+}
+
+export function buildTimelineRange(
+  start: Date,
+  end: Date,
+  mode: 'month' | 'week',
+): Array<{ start: Date; label: string }> {
+  const ticks: Array<{ start: Date; label: string }> = []
+  const cursor = new Date(start.getFullYear(), start.getMonth(), 1)
+  const endDate = new Date(end.getFullYear(), end.getMonth(), 1)
+  while (cursor <= endDate) {
+    const label =
+      mode === 'month'
+        ? `${cursor.getFullYear()}-${String(cursor.getMonth() + 1).padStart(2, '0')}`
+        : `${cursor.getFullYear()}-${String(cursor.getMonth() + 1).padStart(2, '0')}-${String(cursor.getDate()).padStart(2, '0')}`
+    ticks.push({ start: new Date(cursor), label })
+    if (mode === 'month') cursor.setMonth(cursor.getMonth() + 1)
+    else cursor.setDate(cursor.getDate() + 7)
+  }
+  return ticks
+}
+
+export function getRangeFromDates(dates: Date[]): { start: Date; end: Date } {
+  if (dates.length === 0) {
+    const now = new Date()
+    return {
+      start: new Date(now.getFullYear(), now.getMonth(), 1),
+      end: new Date(now.getFullYear(), now.getMonth() + 2, 0),
+    }
+  }
+  const times = dates.map((d) => d.getTime())
+  const min = new Date(Math.min(...times))
+  const max = new Date(Math.max(...times))
+  return {
+    start: new Date(min.getFullYear(), min.getMonth() - 1, 1),
+    end: new Date(max.getFullYear(), max.getMonth() + 1, 0),
+  }
+}

package/src/lib/sanitize.ts

@@ -1,20 +1,18 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
+import DOMPurify from 'isomorphic-dompurify'
 
-// 实现已迁至 @allbluecn/ui（任务 6.3 admin→web 解耦，NotionAvatar 的依赖）。
-// 本文件仅为转发层，web 内部 `@/lib/sanitize` 导入保持不变。
-export { sanitize, sanitizeSvg } from "@allbluecn/ui/lib/sanitize"
+// HTML 清理：默认配置（html + svg + mathMl profile 均启用），
+// 覆盖富文本 diff、附件预览等 7 处 HTML 渲染场景。
+export function sanitize(html: string): string {
+  return DOMPurify.sanitize(html)
+}
+
+// SVG 清理：头像渲染（NotionAvatar）专用。
+// 显式复用默认配置——DOMPurify 默认 profile 已包含 SVG 滤镜元素
+// （<defs>/<filter>/<feMorphology>/<feFlood>/<feComposite>/<feMerge>/<feMergeNode>），
+// 同时清除 <script>/on*/javascript: 等 XSS 载荷。
+// 禁止改成 USE_PROFILES: { svg: true }——严格 SVG profile 会移除全部 fe* 滤镜元素，
+// 头像轮廓辉光（feMorphology+feFlood+feComposite+feMerge）会失效渲染白屏。
+// 结构完整性由 __tests__/security/xss-sanitize.test.ts 的双向断言锁定。
+export function sanitizeSvg(svg: string): string {
+  return DOMPurify.sanitize(svg)
+}

package/src/lib/toast-error.ts

@@ -1,4 +1,4 @@
-import { toast } from "@allbluecn/ui/toast";
+import { toast } from "@/components/ui/toast";
 
 /**
  * 从 unknown 异常中提取用户可读消息；非 Error / 空 message 时回落到 fallback。

package/src/providers/index.tsx

@@ -18,11 +18,11 @@
 import { ThemeProvider } from "next-themes";
 import { useEffect, type ReactNode } from "react";
 import { LazyMotion, domAnimation } from "motion/react";
-import { TooltipProvider } from "@allbluecn/ui/tooltip";
+import { TooltipProvider } from "@/components/ui/tooltip";
 import { TimezoneProvider } from "@/providers/timezone-provider";
 import type { Session } from "@/lib/auth/auth-client";
 import { exchangeRemoteTokenFn } from "@/server/serverFns/auth/session";
-import { toast } from "@allbluecn/ui/toast";
+import { toast } from "@/components/ui/toast";
 import { registerIconPicker } from "@/components/design/editor/icon-picker-bridge";
 import { LucideIconPicker } from "@/components/shared-kit/icons/lucide-icon-picker";
 import { m } from "@/paraglide/messages.js";

package/src/routes/__desktop/onboarding/route.lazy.tsx

@@ -1,20 +1,20 @@
 import { createLazyFileRoute, useNavigate } from '@tanstack/react-router'
 import { useState } from 'react'
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@allbluecn/ui/card'
-import { Button } from '@allbluecn/ui/button'
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
+import { Button } from '@/components/ui/button'
 import {
   Dialog,
   DialogContent,
   DialogFooter,
   DialogHeader,
   DialogTitle,
-} from '@allbluecn/ui/dialog'
-import { Input } from '@allbluecn/ui/input'
-import { Label } from '@allbluecn/ui/label'
+} from '@/components/ui/dialog'
+import { Input } from '@/components/ui/input'
+import { Label } from '@/components/ui/label'
 import { Cloud, Server, HardDrive, Loader2 } from 'lucide-react'
 import { useConnection } from '@desktop/connection-manager'
 import { connectionTest } from '@desktop/connection-manager/connection-test'
-import { toast } from '@allbluecn/ui/toast'
+import { toast } from '@/components/ui/toast'
 import { m } from "@/paraglide/messages.js";
 import { errorMessage } from "@/lib/toast-error";