@allbluecn/web-app 0.19.2 → 0.19.4

package/src/lib/__tests__/rate-limit.test.ts

@@ -1,80 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-import { describe, it, expect, beforeEach, vi, afterEach } from 'vitest'
-import { rateLimit, rateLimitByIp, rateLimitByUser } from '../rate-limit'
-
-beforeEach(() => {
-  vi.useFakeTimers()
-})
-
-afterEach(() => {
-  vi.useRealTimers()
-})
-
-describe('rateLimit', () => {
-  it('首次请求成功', () => {
-    const result = rateLimit('test-key', 5)
-    expect(result.success).toBe(true)
-    expect(result.remaining).toBe(4)
-  })
-
-  it('达到限制后失败', () => {
-    rateLimit('test-key', 2)
-    rateLimit('test-key', 2)
-    const result = rateLimit('test-key', 2)
-    expect(result.success).toBe(false)
-    expect(result.remaining).toBe(0)
-  })
-
-  it('窗口过期后重置', () => {
-    rateLimit('test-key', 1)
-    vi.advanceTimersByTime(61_000)
-    const result = rateLimit('test-key', 1)
-    expect(result.success).toBe(true)
-  })
-
-  it('不同 key 独立计数', () => {
-    rateLimit('key-a', 1)
-    const result = rateLimit('key-b', 1)
-    expect(result.success).toBe(true)
-  })
-})
-
-describe('rateLimitByIp', () => {
-  it('从 x-forwarded-for 提取第一个 IP', () => {
-    const req = new Request('http://localhost', {
-      headers: { 'x-forwarded-for': '1.2.3.4, 5.6.7.8' },
-    })
-    const result = rateLimitByIp(req, 5)
-    expect(result.success).toBe(true)
-  })
-
-  it('无 x-forwarded-for 使用 unknown', () => {
-    const req = new Request('http://localhost')
-    const result = rateLimitByIp(req, 5)
-    expect(result.success).toBe(true)
-  })
-})
-
-describe('rateLimitByUser', () => {
-  it('按 userId 限流', () => {
-    const result = rateLimitByUser('user-1', 10)
-    expect(result.success).toBe(true)
-    expect(result.remaining).toBe(9)
-  })
-})

package/src/lib/analytics.ts

@@ -1,78 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-import { trackAnalyticsFn } from '@/server/serverFns/analytics'
-
-export interface LogEvent {
-  event: string;
-  properties?: Record<string, unknown>;
-  timestamp?: string;
-}
-
-class Analytics {
-  private queue: LogEvent[] = [];
-  private readonly flushInterval = 5000;
-  private readonly maxQueueSize = 10;
-
-  constructor() {
-    if (typeof window !== "undefined") {
-      this.init();
-    }
-  }
-
-  private init() {
-    setInterval(() => this.flush(), this.flushInterval);
-    if (typeof navigator !== "undefined" && "sendBeacon" in navigator) {
-      window.addEventListener("visibilitychange", () => {
-        if (document.visibilityState === "hidden") {
-          this.flush();
-        }
-      });
-    }
-  }
-
-  track(event: string, properties?: Record<string, unknown>) {
-    this.queue.push({
-      event,
-      properties: {
-        ...properties,
-        url: typeof window !== "undefined" ? window.location.href : "",
-        userAgent: typeof navigator !== "undefined" ? navigator.userAgent : "",
-      },
-      timestamp: new Date().toISOString(),
-    });
-
-    if (this.queue.length >= this.maxQueueSize) {
-      this.flush();
-    }
-  }
-
-  private flush() {
-    if (this.queue.length === 0) return;
-
-    const events = [...this.queue];
-    this.queue = [];
-
-    trackAnalyticsFn({ data: { events } }).catch(() => {});
-  }
-}
-
-export const analytics = typeof window !== "undefined" ? new Analytics() : null;
-
-export function track(event: string, properties?: Record<string, unknown>) {
-  analytics?.track(event, properties);
-}

package/src/lib/collections/ai/index.ts

@@ -1,17 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
-

package/src/lib/plugin-runtime/worker-realm.ts

@@ -1,225 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-// Worker 引导脚本：dsh 兼容 realm（HOST_BUILTIN_INSPECTION 对齐面）
-// 此文件作为 Blob URL 注入 Worker 线程执行
-
-const disposers: Array<() => void> = [];
-const registeredTools: any[] = [];
-const serviceListeners: Record<string, Array<(data: unknown) => void>> = {};
-const providedValues: Record<string, unknown> = {};
-const rpcHandlers: Record<string, (args: unknown) => unknown> = {};
-
-const ctx = {
-  get: (name: string) => providedValues[name] ?? null,
-  on: (name: string, listener: (data: unknown) => void) => {
-    if (!serviceListeners[name]) serviceListeners[name] = [];
-    serviceListeners[name].push(listener);
-    return () => {
-      const idx = serviceListeners[name]?.indexOf(listener) ?? -1;
-      if (idx >= 0) serviceListeners[name]?.splice(idx, 1);
-    };
-  },
-  provide: (name: string, value: unknown) => {
-    providedValues[name] = value;
-    if (serviceListeners[name]) {
-      for (const listener of serviceListeners[name]) {
-        try {
-          listener(value);
-        } catch (e) {
-          console.error(`[plugin-ctx] listener error for ${name}:`, e);
-        }
-      }
-    }
-  },
-  effect: (callback: () => void) => {
-    const disposer = () => {
-      try {
-        callback();
-      } catch (e) {
-        console.error("[plugin-ctx] effect disposer error:", e);
-      }
-    };
-    disposers.push(disposer);
-    return disposer;
-  },
-};
-
-const harness = {
-  defineTool: (definition: any) => definition,
-  registerTool: (_pluginCtx: unknown, tool: any) => {
-    registeredTools.push(tool);
-    return () => {
-      const idx = registeredTools.indexOf(tool);
-      if (idx >= 0) registeredTools.splice(idx, 1);
-    };
-  },
-  handle: (method: string, handler: (args: unknown) => unknown) => {
-    rpcHandlers[method] = handler;
-  },
-};
-
-const TAGGED_CONSOLE = {
-  log: (...args: unknown[]) => console.log("[plugin]", ...args),
-  warn: (...args: unknown[]) => console.warn("[plugin]", ...args),
-  error: (...args: unknown[]) => console.error("[plugin]", ...args),
-  info: (...args: unknown[]) => console.info("[plugin]", ...args),
-  debug: (...args: unknown[]) => console.debug("[plugin]", ...args),
-};
-
-const trappedMethods = ["require", "process", "setImmediate", "clearImmediate"];
-
-const pluginFetch = async (input: RequestInfo | URL, init?: RequestInit) => {
-  return new Promise<Response>((resolve, reject) => {
-    const url = typeof input === "string" ? input : input.toString();
-    self.postMessage({
-      type: "fetch-proxy",
-      url,
-      method: init?.method ?? "GET",
-      headers: init?.headers ?? {},
-      body: init?.body ? String(init.body) : undefined,
-    });
-    const reqId = Date.now();
-    const handler = (e: MessageEvent) => {
-      if (e.data?.type === "fetch-response" && e.data.reqId === reqId) {
-        self.removeEventListener("message", handler);
-        if (e.data.error) {
-          reject(new Error(e.data.error));
-        } else {
-          resolve(
-            new Response(e.data.body, {
-              status: e.data.status,
-              headers: e.data.headers,
-            })
-          );
-        }
-      }
-    };
-    self.addEventListener("message", handler);
-  });
-};
-
-const createTrap = () => {
-  const trap = new Proxy(
-    {},
-    {
-      get(_target, prop: string) {
-        if (trappedMethods.includes(prop)) {
-          throw new Error(`[plugin-trap] ${prop} is not allowed in plugin realm`);
-        }
-        return undefined;
-      },
-    }
-  );
-  return trap;
-};
-
-self.onmessage = (e: MessageEvent) => {
-  const { type, src, ...rest } = e.data;
-
-  if (type === "plugin-eval") {
-    try {
-      const fn = new Function(
-        "ctx",
-        "harness",
-        "console",
-        "btoa",
-        "atob",
-        "TextEncoder",
-        "TextDecoder",
-        "fetch",
-        "self",
-        src
-      );
-      const result = fn(
-        ctx,
-        harness,
-        TAGGED_CONSOLE,
-        btoa,
-        atob,
-        TextEncoder,
-        TextDecoder,
-        pluginFetch,
-        undefined
-      );
-
-      if (typeof result === "function") {
-        result(ctx);
-      } else if (result && typeof result === "object" && typeof result.apply === "function") {
-        result.apply(ctx);
-      }
-
-      self.postMessage({
-        type: "eval-success",
-        tools: registeredTools.map((t) => ({
-          name: t.name,
-          description: t.description,
-          inputSchema: t.inputSchema ?? { type: "object", properties: {} },
-        })),
-      });
-    } catch (error) {
-      self.postMessage({
-        type: "eval-error",
-        error: error instanceof Error ? error.message : String(error),
-      });
-    }
-  }
-
-  if (type === "tool-invoke") {
-    const { toolName, args, reqId } = rest;
-    try {
-      const handler = rpcHandlers[toolName];
-      if (handler) {
-        const result = handler(args);
-        self.postMessage({ type: "tool-result", reqId, result });
-      } else {
-        const tool = registeredTools.find((t) => t.name === toolName);
-        if (tool?.execute) {
-          const result = tool.execute(args);
-          self.postMessage({ type: "tool-result", reqId, result });
-        } else {
-          self.postMessage({
-            type: "tool-result",
-            reqId,
-            error: `No handler or execute for tool: ${toolName}`,
-          });
-        }
-      }
-    } catch (error) {
-      self.postMessage({
-        type: "tool-result",
-        reqId,
-        error: error instanceof Error ? error.message : String(error),
-      });
-    }
-  }
-
-  if (type === "stop") {
-    for (const disposer of disposers) {
-      try {
-        disposer();
-      } catch (e) {
-        console.error("[plugin-stop] disposer error:", e);
-      }
-    }
-    disposers.length = 0;
-    registeredTools.length = 0;
-    Object.keys(serviceListeners).forEach((k) => delete serviceListeners[k]);
-    Object.keys(providedValues).forEach((k) => delete providedValues[k]);
-    Object.keys(rpcHandlers).forEach((k) => delete rpcHandlers[k]);
-  }
-};

package/src/lib/prisma.ts

@@ -1,18 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-export { prisma } from "@allbluecn/database";

package/src/lib/rate-limit.ts

@@ -1,70 +0,0 @@
-// SPDX-License-Identifier: AGPL-3.0-or-later
-// AllBlue - 理想之海
-// Copyright (C) 2026 AllBlue Contributors
-//
-// This program is free software: you can redistribute it and/or modify
-// it under the terms of the GNU Affero General Public License as published by
-// the Free Software Foundation, either version 3 of the License, or
-// (at your option) any later version.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU Affero General Public License for more details.
-//
-// You should have received a copy of the GNU Affero General Public License
-// along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-// ⚠️ 架构边界：限流状态存于单进程内存（rateLimitMap），多实例部署不共享，
-// 实际阈值 = 配置值 × 实例数。本期不实施分布式限流（Redis 等），
-// 多实例部署落地前不得将本模块视为唯一防线。
-
-const rateLimitMap = new Map<string, { count: number; resetTime: number }>()
-
-const CLEANUP_INTERVAL = 60_000
-// 清扫定时器懒启动：workerd 禁止 global scope（模块顶层）设定时器，
-// 首次 rateLimit() 调用时才开启（浏览器/Node 行为不变）。
-let cleanupStarted = false
-function ensureCleanupTimer() {
-  if (cleanupStarted) return
-  cleanupStarted = true
-  const timer = setInterval(() => {
-    const now = Date.now()
-    for (const [key, entry] of rateLimitMap) {
-      if (now > entry.resetTime) rateLimitMap.delete(key)
-    }
-  }, CLEANUP_INTERVAL)
-  timer.unref?.()
-}
-
-export function rateLimit(
-  key: string,
-  limit: number,
-  windowMs: number = 60_000
-): { success: boolean; remaining: number } {
-  ensureCleanupTimer()
-  const now = Date.now()
-  const entry = rateLimitMap.get(key)
-
-  if (!entry || now > entry.resetTime) {
-    rateLimitMap.set(key, { count: 1, resetTime: now + windowMs })
-    return { success: true, remaining: limit - 1 }
-  }
-
-  if (entry.count >= limit) {
-    return { success: false, remaining: 0 }
-  }
-
-  entry.count++
-  return { success: true, remaining: limit - entry.count }
-}
-
-export function rateLimitByIp(request: Request, limit: number, windowMs?: number) {
-  const forwarded = request.headers.get("x-forwarded-for")
-  const ip = forwarded?.split(",")[0]?.trim() || "unknown"
-  return rateLimit(`ip:${ip}`, limit, windowMs)
-}
-
-export function rateLimitByUser(userId: string, limit: number, windowMs?: number) {
-  return rateLimit(`user:${userId}`, limit, windowMs)
-}

package/src/paraglide/.gitignore

@@ -1,3 +0,0 @@
-# ignore everything because the directory is auto-generated by inlang paraglide-js
-# for more info visit https://paraglidejs.com
-*

package/src/paraglide/.prettierignore

@@ -1,3 +0,0 @@
-# ignore everything because the directory is auto-generated by inlang paraglide-js
-# for more info visit https://paraglidejs.com
-*

package/src/paraglide/README.md

@@ -1,162 +0,0 @@
-# Paraglide JS Compiled Output
-
-> Auto-generated i18n message functions. Import `messages.js` to use translated strings.
-
-Compiled from: `/Users/urmynami/HelloAI/AllBlue-Workspace/AllBlue/apps/web/project.inlang`
-
-
-## What is this folder?
-
-This folder contains compiled [Paraglide JS](https://github.com/opral/paraglide-js) output. Paraglide JS compiles your translation messages into tree-shakeable JavaScript functions.
-
-## At a glance
-
-Purpose:
-- This folder stores compiled i18n message functions.
-- Source translations live outside this folder in your inlang project.
-
-Safe to import:
-- `messages.js` — all message functions
-- `runtime.js` — locale utilities
-- `server.js` — server-side middleware
-
-Do not edit:
-- All files in this folder are auto-generated.
-- Changes will be overwritten on next compilation.
-
-```
-paraglide/
-├── messages.js      # Message exports (import this)
-├── messages/        # Individual message functions
-├── runtime.js       # Locale detection & configuration
-├── registry.js      # Formatting utilities (plural, number, datetime, relativetime)
-├── server.js        # Server-side middleware
-└── .gitignore       # Marks folder as generated
-```
-
-## Usage
-
-```js
-import * as m from "./paraglide/messages.js";
-
-// Messages are functions that return localized strings
-m.hello_world();             // "Hello, World!" (in current locale)
-m.greeting({ name: "Sam" }); // "Hello, Sam!"
-
-// Override locale per-call
-m.hello_world({}, { locale: "de" });           // "Hallo, Welt!"
-m.greeting({ name: "Sam" }, { locale: "de" }); // "Hallo, Sam!"
-```
-
-## Runtime API
-
-```js
-import { getLocale, getTextDirection, setLocale, locales, baseLocale } from "./paraglide/runtime.js";
-
-getLocale();    // Current locale, e.g., "en"
-getTextDirection(); // "ltr" | "rtl" for current locale
-setLocale("de"); // Set locale
-locales;        // Available locales, e.g., ["en", "de", "fr"]
-baseLocale;     // Default locale, e.g., "en"
-```
-
-## Strategy
-
-The strategy determines how the current locale is detected and persisted:
-
-- **Cookie**: Stores locale preference in a cookie.
-- **URL**: Derives locale from URL patterns (e.g., `/en/about`, `en.example.com`).
-- **GlobalVariable**: Uses a global variable (client-side only).
-- **BaseLocale**: Always returns the base locale.
-
-Strategies can be combined. The order defines precedence:
-
-```js
-await compile({
-  project: "./project.inlang",
-  outdir: "./src/paraglide",
-  strategy: ["url", "cookie", "baseLocale"],
-});
-```
-
-See the [strategy documentation](https://paraglidejs.com/strategy) for details.
-
-## Markup (Rich Text)
-
-Messages can contain markup tags for bold, links, and other inline elements. Translators control where tags appear; developers control how they render.
-
-Important:
-- Tag names are app-defined. There is no built-in list of HTML tags.
-- `{#b}...{/b}` does not automatically render as `<b>...</b>`.
-- Renderers/snippets are looked up by the same tag name used in the message.
-
-### Message syntax
-
-```json
-{
-  "cta": "{#link to=|/docs| rel=$relationship @track}Read the docs{/link}",
-  "welcome": "{#b}Hi {name}{/b}{#icon/}"
-}
-```
-
-- `{#tagName}` opens a tag, `{/tagName}` closes it.
-- `{#tagName/}` creates a standalone tag.
-- Options: `to=|/docs|` or `rel=$relationship` (accessed via `options.*`).
-- Attributes: `@track` or `@variant=|hero|` (accessed via `attributes.*`).
-
-This is the default inlang message syntax. Paraglide's message format is plugin-based — you can use [ICU MessageFormat 1](https://inlang.com/m/p7c8m1d2/plugin-inlang-icu-messageformat-1), [i18next](https://inlang.com/m/3i8bor92/plugin-inlang-i18next), or other [plugins](https://inlang.com/c/plugins) instead.
-
-### Rendering markup
-
-Calling the message function still returns **plain text** (markup stripped):
-
-```js
-m.cta({ relationship: "noopener" }); // "Read the docs"
-```
-
-To render markup, use the framework adapter or the low-level `parts()` API:
-
-```js
-const parts = m.cta.parts({ relationship: "noopener" });
-// [
-//   { type: "markup-start", name: "link", options: { to: "/docs", rel: "noopener" }, attributes: { track: true } },
-//   { type: "text", value: "Read the docs" },
-//   { type: "markup-end", name: "link" }
-// ]
-```
-
-Framework adapters provide a `<ParaglideMessage>` component that accepts markup renderers:
-
-- `@inlang/paraglide-js-react`
-- `@inlang/paraglide-js-vue`
-- `@inlang/paraglide-js-svelte`
-- `@inlang/paraglide-js-solid`
-
-```jsx
-import { ParaglideMessage } from "@inlang/paraglide-js-react"; // or -vue, -svelte, -solid
-
-<ParaglideMessage
-  message={m.welcome}
-  inputs={{ name: "Ada" }}
-  markup={{
-    b: ({ children }) => <b>{children}</b>,
-    icon: () => <span aria-hidden="true" className="icon-wave" />,
-  }}
-/>
-```
-
-The available renderer/snippet names come from the message itself. You can inspect them through `message.parts()`, and TypeScript uses the same names to type-check your markup renderers.
-
-See the [markup documentation](https://paraglidejs.com/markup) for details.
-
-## Key concepts
-
-- **Tree-shakeable**: Each message is a function, enabling [up to 70% smaller i18n bundle sizes](https://paraglidejs.com/benchmark) than traditional i18n libraries.
-- **Typesafe**: Full TypeScript/JSDoc support with autocomplete.
-- **Variants**: Messages can have variants for pluralization, gender, etc.
-- **Fallbacks**: Missing translations fall back to the base locale.
-
-## Links
-
-- [Paraglide JS Documentation](https://paraglidejs.com)
-- [Source Repository](https://github.com/opral/paraglide-js)