@axewo/fin-micro 0.0.0-stage → 1.0.0

package/dist/types/vue/tab-context.d.ts

@@ -0,0 +1,6 @@
+import { InjectionKey } from 'vue';
+import { MicroTab } from '../sdk';
+/** 页签边界注入创建时的身份，不会随宿主活动页改变。 */
+export declare const microTabKey: InjectionKey<MicroTab>;
+/** 在缓存页面 setup 中取得创建时的页签快照；必须位于 MicroTabCache 默认插槽内。 */
+export declare function useMicroTab(): MicroTab;

package/dist/vue.cjs

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("vue"),s=Symbol("micro-tab");function d(){const t=e.inject(s);if(!t)throw new Error("useMicroTab 必须在 MicroTabCache 内调用");return t}const m=e.defineComponent({name:"MicroRouteView",props:{name:{type:String,default:"default"}},slots:Object,setup(t,{slots:n}){const i=d(),a=e.shallowRef(),r=e.shallowRef(!1);let u=!1,c=!1;async function o(){if(!(u||c)){c=!0,r.value=!1;try{const l=await Promise.resolve().then(()=>require("./router-view-impl-CgLEalx4.cjs"));u||(a.value=l.MicroRouteViewImpl)}catch{u||(r.value=!0)}finally{c=!1}}}return e.onBeforeUnmount(()=>{u=!0}),o(),()=>{var l,f;return a.value?e.h(a.value,{name:t.name},n):r.value?((l=n.error)==null?void 0:l.call(n,{tab:i,code:"LOAD_FAILED",retry:o}))??e.h("div",{role:"alert","data-micro-route-error":"LOAD_FAILED"},[e.h("p","页面加载失败（LOAD_FAILED）"),e.h("button",{type:"button",onClick:o},"重新加载")]):((f=n.loading)==null?void 0:f.call(n,{tab:i}))??e.h("p",{role:"status"},"页面加载中…")}}}),h=e.defineComponent({name:"MicroAppContainer",props:{appId:{type:String,required:!0},runtime:{type:Object,required:!0},retryDisabled:Boolean},setup(t){const n=e.shallowRef(),i=e.shallowRef(""),a=e.shallowRef(!1);let r=!1;async function u(c=!1){if(!(r||a.value||!c&&t.retryDisabled)){a.value=!0,i.value="";try{await t.runtime.mount(t.appId,n.value)}catch(o){r||(i.value=String(o))}finally{r||(a.value=!1)}}}return e.onMounted(()=>{u(!0)}),e.onBeforeUnmount(()=>{r=!0,t.runtime.unmount(t.appId).catch(console.error)}),()=>e.h("section",{style:{height:"100%",minHeight:"420px"},"aria-busy":a.value},[i.value?e.h("div",{role:"alert"},[e.h("p",i.value),e.h("button",{type:"button",disabled:t.retryDisabled||a.value,onClick:()=>{u()}},"重新加载")]):null,a.value?e.h("p",{role:"status"},"子应用加载中…"):null,e.h("div",{ref:n,style:{height:"100%",minHeight:"420px"}})])}});function v(t){const n=e.shallowRef(t.getState()),i=t.subscribe(a=>{n.value=a});return e.onBeforeUnmount(i),n}const b=e.defineComponent({name:"MicroTabBoundary",props:{tab:{type:Object,required:!0},active:Boolean},setup(t,{slots:n}){const i=Object.freeze({...t.tab});e.provide(s,i);const a=e.defineComponent({name:"MicroTabContent",setup:()=>()=>{var r;return(r=n.default)==null?void 0:r.call(n,{tab:i})}});return()=>e.h("section",{hidden:!t.active,"data-micro-tab":i.key},[e.h(e.KeepAlive,null,{default:()=>t.active?e.h(a):null})])}}),p=e.defineComponent({name:"MicroTabCache",props:{tabs:{type:Array,required:!0},activeKey:String,max:{type:Number,default:20}},setup(t,{slots:n}){const i=e.shallowRef([]);return e.watch(()=>[t.tabs,t.activeKey,t.max],()=>{const a=new Set(t.tabs.map(o=>o.key));let r=i.value.filter(o=>a.has(o.key));const u=t.tabs.find(o=>o.key===t.activeKey);u&&(r=[...r.filter(o=>o.key!==u.key),u]);const c=Number.isFinite(t.max)?Math.max(1,Math.floor(t.max)):20;for(;r.length>c;){const o=r.findIndex(l=>l.key!==t.activeKey);if(o<0)break;r.splice(o,1)}i.value=r},{immediate:!0,flush:"sync"}),()=>i.value.map(a=>e.h(b,{key:a.key,tab:a,active:a.key===t.activeKey},n))}});function M(t,n,i=console.error){let a=!1,r,u=!1,c=0;async function o(){if(!u){u=!0;try{let f=-1;for(;!a&&r&&f!==c;){f=c;try{await n.replace(r.route,r)}catch(y){i(y)}}}finally{u=!1}}}const l=t.ready(f=>{r=f,c++,o()});return()=>{a=!0,l()}}function w(t,n){const i=t.page(n.key);return e.onBeforeUnmount(i.dispose),i}exports.MicroAppContainer=h;exports.MicroRouteView=m;exports.MicroTabCache=p;exports.connectMicroRouter=M;exports.useMicroHost=v;exports.useMicroPage=w;exports.useMicroTab=d;

package/dist/vue.mjs

@@ -0,0 +1,166 @@
+import { inject as b, defineComponent as s, shallowRef as d, onBeforeUnmount as y, h as u, onMounted as p, provide as h, KeepAlive as M, watch as g } from "vue";
+const m = Symbol("micro-tab");
+function k() {
+  const e = b(m);
+  if (!e) throw new Error("useMicroTab 必须在 MicroTabCache 内调用");
+  return e;
+}
+const A = s({
+  name: "MicroRouteView",
+  props: { name: { type: String, default: "default" } },
+  slots: Object,
+  setup(e, { slots: t }) {
+    const r = k(), a = d(), n = d(!1);
+    let o = !1, c = !1;
+    async function i() {
+      if (!(o || c)) {
+        c = !0, n.value = !1;
+        try {
+          const l = await import("./router-view-impl-C1KG6mxu.mjs");
+          o || (a.value = l.MicroRouteViewImpl);
+        } catch {
+          o || (n.value = !0);
+        } finally {
+          c = !1;
+        }
+      }
+    }
+    return y(() => {
+      o = !0;
+    }), i(), () => {
+      var l, f;
+      return a.value ? u(a.value, { name: e.name }, t) : n.value ? ((l = t.error) == null ? void 0 : l.call(t, { tab: r, code: "LOAD_FAILED", retry: i })) ?? u("div", { role: "alert", "data-micro-route-error": "LOAD_FAILED" }, [
+        u("p", "页面加载失败（LOAD_FAILED）"),
+        u("button", { type: "button", onClick: i }, "重新加载")
+      ]) : ((f = t.loading) == null ? void 0 : f.call(t, { tab: r })) ?? u("p", { role: "status" }, "页面加载中…");
+    };
+  }
+}), C = s({
+  name: "MicroAppContainer",
+  props: {
+    appId: { type: String, required: !0 },
+    runtime: { type: Object, required: !0 },
+    retryDisabled: Boolean
+  },
+  setup(e) {
+    const t = d(), r = d(""), a = d(!1);
+    let n = !1;
+    async function o(c = !1) {
+      if (!(n || a.value || !c && e.retryDisabled)) {
+        a.value = !0, r.value = "";
+        try {
+          await e.runtime.mount(e.appId, t.value);
+        } catch (i) {
+          n || (r.value = String(i));
+        } finally {
+          n || (a.value = !1);
+        }
+      }
+    }
+    return p(() => {
+      o(!0);
+    }), y(() => {
+      n = !0, e.runtime.unmount(e.appId).catch(console.error);
+    }), () => u("section", { style: { height: "100%", minHeight: "420px" }, "aria-busy": a.value }, [
+      r.value ? u("div", { role: "alert" }, [
+        u("p", r.value),
+        u("button", { type: "button", disabled: e.retryDisabled || a.value, onClick: () => {
+          o();
+        } }, "重新加载")
+      ]) : null,
+      a.value ? u("p", { role: "status" }, "子应用加载中…") : null,
+      u("div", { ref: t, style: { height: "100%", minHeight: "420px" } })
+    ]);
+  }
+});
+function D(e) {
+  const t = d(e.getState()), r = e.subscribe((a) => {
+    t.value = a;
+  });
+  return y(r), t;
+}
+const w = s({
+  name: "MicroTabBoundary",
+  props: {
+    tab: { type: Object, required: !0 },
+    active: Boolean
+  },
+  setup(e, { slots: t }) {
+    const r = Object.freeze({ ...e.tab });
+    h(m, r);
+    const a = s({ name: "MicroTabContent", setup: () => () => {
+      var n;
+      return (n = t.default) == null ? void 0 : n.call(t, { tab: r });
+    } });
+    return () => u("section", { hidden: !e.active, "data-micro-tab": r.key }, [
+      u(M, null, { default: () => e.active ? u(a) : null })
+    ]);
+  }
+}), T = s({
+  name: "MicroTabCache",
+  props: {
+    tabs: { type: Array, required: !0 },
+    activeKey: String,
+    max: { type: Number, default: 20 }
+  },
+  setup(e, { slots: t }) {
+    const r = d([]);
+    return g(() => [e.tabs, e.activeKey, e.max], () => {
+      const a = new Set(e.tabs.map((i) => i.key));
+      let n = r.value.filter((i) => a.has(i.key));
+      const o = e.tabs.find((i) => i.key === e.activeKey);
+      o && (n = [...n.filter((i) => i.key !== o.key), o]);
+      const c = Number.isFinite(e.max) ? Math.max(1, Math.floor(e.max)) : 20;
+      for (; n.length > c; ) {
+        const i = n.findIndex((l) => l.key !== e.activeKey);
+        if (i < 0) break;
+        n.splice(i, 1);
+      }
+      r.value = n;
+    }, { immediate: !0, flush: "sync" }), () => r.value.map((a) => u(w, {
+      key: a.key,
+      tab: a,
+      active: a.key === e.activeKey
+    }, t));
+  }
+});
+function I(e, t, r = console.error) {
+  let a = !1, n, o = !1, c = 0;
+  async function i() {
+    if (!o) {
+      o = !0;
+      try {
+        let f = -1;
+        for (; !a && n && f !== c; ) {
+          f = c;
+          try {
+            await t.replace(n.route, n);
+          } catch (v) {
+            r(v);
+          }
+        }
+      } finally {
+        o = !1;
+      }
+    }
+  }
+  const l = e.ready((f) => {
+    n = f, c++, i();
+  });
+  return () => {
+    a = !0, l();
+  };
+}
+function K(e, t) {
+  const r = e.page(t.key);
+  return y(r.dispose), r;
+}
+export {
+  C as MicroAppContainer,
+  A as MicroRouteView,
+  T as MicroTabCache,
+  I as connectMicroRouter,
+  D as useMicroHost,
+  K as useMicroPage,
+  k as useMicroTab
+};

package/package.json

@@ -1,6 +1,94 @@
 {
   "name": "@axewo/fin-micro",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "1.0.0",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/types/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs"
+    },
+    "./browser": {
+      "types": "./dist/types/browser/index.d.ts",
+      "import": "./dist/browser.mjs",
+      "require": "./dist/browser.cjs"
+    },
+    "./iframe": {
+      "types": "./dist/types/iframe/index.d.ts",
+      "import": "./dist/iframe.mjs",
+      "require": "./dist/iframe.cjs"
+    },
+    "./sdk": {
+      "types": "./dist/types/sdk/index.d.ts",
+      "import": "./dist/sdk.mjs",
+      "require": "./dist/sdk.cjs"
+    },
+    "./core": {
+      "types": "./dist/types/core/index.d.ts",
+      "import": "./dist/core.mjs",
+      "require": "./dist/core.cjs"
+    },
+    "./vue": {
+      "types": "./dist/types/vue/index.d.ts",
+      "import": "./dist/vue.mjs",
+      "require": "./dist/vue.cjs"
+    },
+    "./runtime": {
+      "types": "./dist/types/runtime/index.d.ts",
+      "import": "./dist/runtime.mjs",
+      "require": "./dist/runtime.cjs"
+    }
+  },
+  "bin": {
+    "fin-micro": "./cli/index.mjs"
+  },
+  "files": [
+    "dist/**/*.mjs",
+    "dist/**/*.cjs",
+    "dist/**/*.d.ts",
+    "cli/index.mjs",
+    "scaffold"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "sideEffects": false,
+  "peerDependencies": {
+    "vue": "^3.4.0",
+    "vue-router": "^4.5.0"
+  },
+  "peerDependenciesMeta": {
+    "vue": {
+      "optional": true
+    },
+    "vue-router": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "wujie": "2.1.0"
+  },
+  "devDependencies": {
+    "vue-router": "^4.5.0",
+    "vue": "^3.5.0",
+    "vite": "^5.4.0",
+    "vite-plugin-dts": "^4.3.0",
+    "vitest": "^2.1.0",
+    "vue-tsc": "^2.1.0",
+    "typescript": "^5.6.0"
+  },
+  "license": "MIT",
+  "scripts": {
+    "build": "vite build",
+    "test": "vitest run",
+    "typecheck": "vue-tsc --noEmit -p tsconfig.json",
+    "test:cli": "node --test cli/create.test.mjs cli/scaffold.test.mjs",
+    "check:package": "node scripts/check-package.mjs"
+  }
 }

package/scaffold/base/index.html

@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>__PROJECT_NAME__</title>
+  </head>
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/main.ts"></script>
+  </body>
+</html>

package/scaffold/base/package.json.template

@@ -0,0 +1,29 @@
+{
+  "name": "__PROJECT_NAME__",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "vue-tsc --noEmit && vite build",
+    "preview": "vite preview",
+    "typecheck": "vue-tsc --noEmit"
+  },
+  "dependencies": {
+    "@axewo/fin-core": "2.1.0",
+    "@axewo/fin-micro": "__FIN_MICRO_VERSION__",
+    "@axewo/fin-ui": "__FIN_UI_VERSION__",
+    "@axewo/fin-editor": "2.0.1",
+    "@element-plus/icons-vue": "2.3.2",
+    "element-plus": "2.14.2",
+    "vue": "3.5.13",
+    "vue-i18n": "^9.14.0",
+    "vue-router": "4.5.0"
+  },
+  "devDependencies": {
+    "@vitejs/plugin-vue": "5.2.1",
+    "typescript": "5.6.3",
+    "vite": "5.4.14",
+    "vue-tsc": "2.2.0"
+  }
+}

package/scaffold/base/src/components/.gitkeep

@@ -0,0 +1 @@
+# 预留可复用业务组件目录；宿主专属结构组件位于 layout。

package/scaffold/base/src/components/AppProviders.vue

@@ -0,0 +1,25 @@
+<script setup lang="ts">
+import { computed } from 'vue'
+import { FConfigProvider, useFinLocale, zhCN, en, type FinConfig } from '@axewo/fin-ui'
+import { ElConfigProvider } from 'element-plus'
+import elZhCN from 'element-plus/es/locale/lang/zh-cn'
+import elEn from 'element-plus/es/locale/lang/en'
+
+const props = withDefaults(defineProps<{ size?: FinConfig['size'] }>(), { size: 'default' })
+// bootstrap 已为当前应用安装 i18n；切换全局 locale 时，两套组件库同步更新。
+const { locale } = useFinLocale()
+const config = computed<FinConfig>(() => ({
+  locale: locale.value === 'en' ? en : zhCN,
+  size: props.size,
+}))
+const elementLocale = computed(() => locale.value === 'en' ? elEn : elZhCN)
+</script>
+
+<template>
+  <!-- config.locale 仅注入语言包，不能代替 app 安装 vue-i18n。 -->
+  <FConfigProvider :config="config">
+    <ElConfigProvider :locale="elementLocale" :size="config.size">
+      <slot />
+    </ElConfigProvider>
+  </FConfigProvider>
+</template>

package/scaffold/base/src/hooks/.gitkeep

@@ -0,0 +1 @@
+# 预留业务组合函数目录；不要在此复制核心导航、权限或页签状态机。

package/scaffold/base/src/layout/.gitkeep

@@ -0,0 +1 @@
+# 预留布局组件目录；仅在页面有实际布局职责时添加组件。

package/scaffold/base/src/locales/.gitkeep

@@ -0,0 +1 @@
+# 预留语言资源目录；当前模板未启用国际化，也未引入国际化依赖。

package/scaffold/base/src/locales/index.ts

@@ -0,0 +1,7 @@
+import type { App } from 'vue'
+import { installFinI18n } from '@axewo/fin-ui'
+
+/** 每次 createApp 后独立安装，不在模块级共享可变 i18n 实例。 */
+export function installAppLocale(app: App): void {
+  installFinI18n(app, { locale: 'zh-CN', fallbackLocale: 'zh-CN', legacy: false })
+}

package/scaffold/base/src/main.ts

@@ -0,0 +1,14 @@
+import 'element-plus/dist/index.css'
+import '@axewo/fin-ui/style.css'
+import './styles/index.css'
+import { mount, unmount } from './bootstrap'
+
+// 普通应用直接启动；Vue 子应用模板覆盖本入口，接入微前端生命周期。
+// fin-ui 公开根入口依赖 editor 与 icons，依赖已在公共 package.json 中显式声明。
+void mount()
+window.addEventListener('unload', unmount)
+if (import.meta.hot) import.meta.hot.dispose(() => {
+  // 基座只清理自身实例，不注册 Wujie 子应用全局回调。
+  window.removeEventListener('unload', unmount)
+  unmount()
+})

package/scaffold/base/src/router/.gitkeep

@@ -0,0 +1 @@
+# 路由目录由对应模板提供；宿主地址由 connectMicroBrowser 管理，不创建第二个 Vue Router。

package/scaffold/base/src/stores/.gitkeep

@@ -0,0 +1 @@
+# 预留跨页面业务状态目录；当前模板没有需要共享的业务状态，未引入状态管理依赖。

package/scaffold/base/src/styles/index.css

@@ -0,0 +1,18 @@
+:root { font-family: 'PingFang SC', 'Microsoft YaHei', sans-serif; color: #243247; background: #f4f6fa; font-synthesis: none; }
+* { box-sizing: border-box; }
+body { margin: 0; }
+button, input { font: inherit; }
+#app { min-height: 100vh; }
+.page { padding: 24px; }
+.panel { background: white; border-radius: 10px; padding: 24px; }
+.actions { display: flex; align-items: center; gap: 12px; margin: 16px 0; flex-wrap: wrap; }
+.feedback { color: #b45309; padding: 12px 24px; }
+.login { max-width: 440px; margin: 14vh auto; }
+.shell { display: grid; grid-template: 64px 1fr / 240px minmax(0, 1fr); height: 100vh; }
+.shell-header { grid-column: 1 / -1; display: flex; align-items: center; justify-content: space-between; padding: 0 24px; background: white; border-bottom: 1px solid #e5e7eb; }
+.sidebar { overflow: auto; background: white; border-right: 1px solid #e5e7eb; }
+.workspace { min-width: 0; overflow: auto; }
+.tabbar { display: flex; gap: 6px; padding: 12px; background: #fff; overflow: auto; }
+.tabbar .tab { display: flex; align-items: center; gap: 4px; }
+.micro-workspace { padding: 16px; }
+@media (max-width: 760px) { .shell { grid-template-columns: 170px minmax(0, 1fr); } .page { padding: 12px; } }

package/scaffold/base/src/types/.gitkeep

@@ -0,0 +1 @@
+# 预留跨模块业务类型目录；SDK 类型直接从对应依赖导入。

package/scaffold/base/src/utils/.gitkeep

@@ -0,0 +1 @@
+# 预留业务通用工具目录；没有复用需求时不创建空工具封装。

package/scaffold/base/src/utils/requestUtils.ts

@@ -0,0 +1,123 @@
+import { AxiosHttpClient } from '@axewo/fin-core/http/axios'
+
+/**
+ * 应用独立的 Axios 请求实例；由 base 生成到基座和子应用，各项目自行定义拦截器。
+ * 仅共享模板与封装实现，不跨应用共享可变配置、请求实例或身份信息。
+ * 默认 /api/ 指向当前应用运行环境解析出的源，嵌入运行也不会自动代理到基座后端。
+ * 部署时须配置真实API网关/开发代理；跨域Cookie须显式启用withCredentials并由后端配置CORS。
+ * 如需Token，通过installRequestTokenProvider每次读取最新值；不要在模块初始化时缓存Token。
+ * 不擅自从window/localStorage读取基座凭据，不硬编码Token，不自动刷新登录或重试写请求。
+ * get/post等返回整个响应体；业务code/data解包和401会话协调由业务层明确实现。
+ * 响应拦截器须返回AxiosResponse，而不是直接返回response.data；错误保持AxiosError/isCancel语义。
+ */
+export const http = new AxiosHttpClient({
+  baseURL: '/api/',
+  timeout: 30000,
+  withCredentials: false,
+})
+
+/** 按请求读取最新凭据；独立应用可显式安装自己的 provider，基座默认不读取 bridge。 */
+export type RequestTokenProvider = (signal: AbortSignal) => Promise<string | null> | string | null
+interface TokenBinding {
+  provider: RequestTokenProvider
+  api: URL
+  active: boolean
+  pending: Set<AbortController>
+  previous?: TokenBinding
+}
+let tokenBinding: TokenBinding | undefined
+/**
+ * 在应用挂载时安装，卸载必须调用返回的还原函数；同时取消所有尚未完成的凭据读取。
+ * trustedApiBase 是业务明确配置的可信 API 目录（默认当前源 /api/），不是从请求的 baseURL 推断。
+ * 跨源网关必须显式传完整 HTTPS 地址，且与 http 的 baseURL 保持一致。
+ * @param provider 每次读取最新凭据，接收请求取消信号；null 代表 Cookie 模式，不伪造已登录。
+ * @param trustedApiBase 可信 API 目录，必须以 / 结束；SSR 无浏览器来源时只能显式使用绝对 HTTPS 地址。
+ * @returns 幂等释放函数，取消挂起读取并恢复仍有效的前一个绑定，不撤回已发出的网络请求。
+ * @throws 可信地址无效时立即抛错；provider 失败使本次请求拒绝，不降级匿名重发。
+ */
+export function installRequestTokenProvider(provider: RequestTokenProvider, trustedApiBase = '/api/'): () => void {
+  const location = globalThis.location
+  if (!location && !/^https:\/\//i.test(trustedApiBase)) throw new Error('无浏览器来源时必须显式配置绝对 HTTPS API')
+  const api = new URL(trustedApiBase, location?.href)
+  if (!['http:', 'https:'].includes(api.protocol) || api.username || api.password || api.search || api.hash || !api.pathname.endsWith('/')) throw new Error('可信 API 必须是 HTTP(S) 目录地址')
+  if (api.protocol !== 'https:' && (!location || api.origin !== location.origin)) throw new Error('跨源可信 API 必须使用 HTTPS')
+  const binding: TokenBinding = { provider, api, active: true, pending: new Set(), previous: tokenBinding }
+  tokenBinding = binding
+  return () => {
+    binding.active = false
+    for (const controller of binding.pending) controller.abort()
+    binding.pending.clear()
+    if (tokenBinding === binding) {
+      tokenBinding = binding.previous
+      while (tokenBinding && !tokenBinding.active) tokenBinding = tokenBinding.previous
+    }
+  }
+}
+
+/**
+ * 应用级请求拦截器：每次请求时处理当前应用的动态配置。
+ * 业务替换点：从应用的身份模块读取最新 Token，按后台协议设置请求头；
+ * 不在这里缓存初始 Token，也不默认读取基座的 window/localStorage 凭据。
+ * 必须返回 config；异常原样拒绝，由调用方继续处理。
+ */
+http.interceptors.request.use(
+  async config => {
+    const binding = tokenBinding
+    if (!binding?.active) return config
+    const origin = globalThis.location?.href
+    if (!origin && !/^https:\/\//i.test(config.baseURL ?? '')) return config
+    const base = new URL(config.baseURL ?? '', origin)
+    const url = config.url ?? ''
+    // 不对绝对 URL、协议相对地址、反斜线或被覆盖的 baseURL 发送任何宿主凭据。
+    // 即使绝对 URL 指向可信源也拒绝自动注入，防止后续调用者无意扩大授权面。
+    if (url.trim() !== url || /[\u0000-\u001f\u007f]/.test(url) || /%(?:2f|5c)/i.test(url) || /^[a-z][a-z\d+.-]*:/i.test(url) || url.startsWith('//') || url.includes('\\') || base.href !== binding.api.href) return config
+    const target = new URL(url.replace(/^\/+/, ''), base)
+    if (target.origin !== binding.api.origin || !target.pathname.startsWith(binding.api.pathname)) return config
+    const controller = new AbortController()
+    const abort = () => controller.abort()
+    if (config.signal?.aborted) controller.abort()
+    config.signal?.addEventListener?.('abort', abort)
+    binding.pending.add(controller)
+    try {
+      if (controller.signal.aborted) throw new Error('凭据读取已取消')
+      // Promise 竞速确保不合作的独立 provider 也不会在卸载后继续发送请求。
+      const token = await new Promise<string | null>((resolve, reject) => {
+        const cancelled = () => reject(new Error('凭据读取已取消'))
+        controller.signal.addEventListener('abort', cancelled, { once: true })
+        // 竞速一旦结束立即释放监听，不等待不合作 provider 的底层 Promise。
+        const settle = <T>(callback: (value: T) => void, value: T) => {
+          controller.signal.removeEventListener('abort', cancelled)
+          callback(value)
+        }
+        Promise.resolve().then(() => binding.provider(controller.signal)).then(value => settle(resolve, value), error => settle(reject, error))
+      })
+      if (controller.signal.aborted || !binding.active || tokenBinding !== binding) throw new Error('凭据来源已释放')
+      if (token !== null && (typeof token !== 'string' || !token || token.length > 16384 || /[\s\u0000-\u001f\u007f]/.test(token))) throw new Error('凭据格式无效')
+      // Cookie 模式的 null 不添加头；不缓存凭据，不刷新登录、不自动重试写请求。
+      if (token !== null) config.headers.set('Authorization', `Bearer ${token}`)
+      return config
+    } finally {
+      binding.pending.delete(controller)
+      config.signal?.removeEventListener?.('abort', abort)
+    }
+  },
+  error => Promise.reject(error),
+)
+
+/**
+ * 应用级响应拦截器：业务码校验、错误提示及 401 会话协调在此按实际协议实现。
+ * 成功分支必须保留完整 AxiosResponse；http.get/post 等已统一返回 response.data，
+ * 此处再次解包会破坏客户端返回契约。业务失败可抛出应用定义的错误。
+ * 错误分支保持拒绝，不能吞掉错误、返回 undefined 或自动重试写请求；
+ * 如需登录失效处理，应协调并发请求，取消请求通常不展示错误提示。
+ */
+http.interceptors.response.use(
+  response => {
+    // 业务替换点：检查 response.data 中的业务状态，不假设固定 code/data 结构。
+    return response
+  },
+  error => {
+    // 业务替换点：按应用规范区分取消、网络异常、HTTP 401 及其他错误。
+    return Promise.reject(error)
+  },
+)

package/scaffold/base/src/views/.gitkeep

@@ -0,0 +1 @@
+# 预留页面业务视图目录；布局与跨页面逻辑分别放入 layout 和 hooks。

package/scaffold/base/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "strict": true,
+    "skipLibCheck": true,
+    "isolatedModules": true,
+    "resolveJsonModule": true,
+    "esModuleInterop": true,
+    "noEmit": true,
+    "types": ["vite/client"]
+  },
+  "include": ["src/**/*.ts", "src/**/*.vue", "vite.config.ts"]
+}

package/scaffold/base/vite.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from 'vite'
+import vue from '@vitejs/plugin-vue'
+
+// 只引用已发布依赖，不配置指向 monorepo 源码的 alias。
+export default defineConfig({
+  plugins: [vue()],
+  server: { port: __PORT__, strictPort: true, cors: true },
+})

package/scaffold/host/.env.example

@@ -0,0 +1,5 @@
+# 仅本地演示可打开；正式部署必须接入 src/platform.ts 的真实认证接口。
+VITE_AUTH_DEMO=false
+# 业务子应用地址和 appId 必须与子应用部署配置一致；仅允许可信 HTTP(S) 地址。
+VITE_MICRO_APP_ID=business
+VITE_MICRO_APP_ENTRY=http://localhost:7101

package/scaffold/host/src/App.vue

@@ -0,0 +1,16 @@
+<script setup lang="ts">
+import AppProviders from './components/AppProviders.vue'
+import HostLayout from './layout/HostLayout.vue'
+import LoginView from './views/LoginView.vue'
+import { usePlatformSession } from './hooks/usePlatformSession'
+
+// 根组件只切换登录页与已认证工作区；身份就绪前不创建微前端宿主。
+const { session, loading, error, signIn, restore, signOut } = usePlatformSession()
+</script>
+
+<template>
+  <AppProviders>
+    <HostLayout v-if="session" :key="session.user.id" :session="session" @logout="signOut" />
+    <LoginView v-else :loading="loading" :error="error" :sign-in="signIn" @restore="restore" />
+  </AppProviders>
+</template>

package/scaffold/host/src/bootstrap.ts

@@ -0,0 +1,18 @@
+import { createApp, type App as VueApp } from 'vue'
+import ElementPlus from 'element-plus'
+import App from './App.vue'
+import { installAppLocale } from './locales'
+let app: VueApp | undefined
+
+/** 幂等释放整个认证与宿主组件树，组件内负责停止请求、会话订阅及 runtime。 */
+export function unmount(): void { app?.unmount(); app = undefined }
+
+/** 无参数启动平台；宿主只会在 App 完成认证后创建，不在此绕过登录门禁。 */
+export async function mount(): Promise<void> {
+  unmount()
+  app = createApp(App)
+  // 根组件 setup 前安装，登录页和工作区共用当前应用的语言上下文。
+  installAppLocale(app)
+  app.use(ElementPlus)
+  app.mount('#app')
+}