@gadmin2n/schematics 0.0.156 → 0.0.158

package/dist/lib/application/files/gadmin2-game-angle-demo/gitignore

@@ -62,4 +62,5 @@ agent-eval/baseline/
 tmp/
 CODEBUDDY.local.md
 .scratch/
-age-sops-guides.md
+age-sops-guides.md
+.gadmin/.lock

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/canvas/canvas.controller.ts

@@ -18,6 +18,7 @@ import { ApiTags } from '@nestjs/swagger';
 import { UseRoles } from 'nest-access-control';
 import { PrismaService } from 'nestjs-prisma';
 import { AllowUnauthorizedRequest } from '../../lib/auth.guard';
+import { AllowTransferExportRequest } from '../permTransfer/transfer-export.decorator';
 import { ImportPayloadDto } from './canvas-export.dto';
 import { CanvasExportService } from './canvas-export.service';
 import {
@@ -149,7 +150,7 @@ export class CanvasController {
   }
 
   @Get('export/:code')
-  @AllowUnauthorizedRequest()
+  @AllowTransferExportRequest()
   async getExportPayload(
     @Param('code') code: string,
     @Query('token') token: string,

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/page/page.controller.ts

@@ -46,9 +46,9 @@ import {
 } from '../../generated/page/dto/page-types.dto';
 import { UpdatePageDto } from '../../generated/page/dto/update-page.dto';
 import { PageEntity } from '../../generated/page/entities/page.entity';
-import { AllowUnauthorizedRequest } from '../../lib/auth.guard';
 import { PageTransferService } from '../permTransfer/page-transfer.service';
 import { ImportPayloadDto } from '../permTransfer/perm-transfer.dto';
+import { AllowTransferExportRequest } from '../permTransfer/transfer-export.decorator';
 import { PageService } from './page.service';
 
 import { ConfigService } from '@nestjs/config';
@@ -248,7 +248,7 @@ export class PageController {
   }
 
   @Get('export/:code')
-  @AllowUnauthorizedRequest()
+  @AllowTransferExportRequest()
   async getExportPayload(
     @Param('code') code: string,
     @Query('token') token: string,

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/permTransfer/transfer-export.decorator.spec.ts

@@ -0,0 +1,34 @@
+import { setCredentialedExportCorsHeaders } from './transfer-export.decorator';
+
+describe('setCredentialedExportCorsHeaders', () => {
+  it('reflects the request origin for credentialed export responses', () => {
+    const response = {
+      setHeader: jest.fn(),
+      vary: jest.fn(),
+    };
+
+    setCredentialedExportCorsHeaders('https://target.example.com', response);
+
+    expect(response.setHeader).toHaveBeenCalledWith(
+      'Access-Control-Allow-Origin',
+      'https://target.example.com',
+    );
+    expect(response.setHeader).toHaveBeenCalledWith(
+      'Access-Control-Allow-Credentials',
+      'true',
+    );
+    expect(response.vary).toHaveBeenCalledWith('Origin');
+  });
+
+  it('leaves non-browser responses unchanged when Origin is absent', () => {
+    const response = {
+      setHeader: jest.fn(),
+      vary: jest.fn(),
+    };
+
+    setCredentialedExportCorsHeaders(undefined, response);
+
+    expect(response.setHeader).not.toHaveBeenCalled();
+    expect(response.vary).not.toHaveBeenCalled();
+  });
+});

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/permTransfer/transfer-export.decorator.ts

@@ -0,0 +1,42 @@
+import {
+  applyDecorators,
+  NestInterceptor,
+  UseInterceptors,
+} from '@nestjs/common';
+import { AllowUnauthorizedRequest } from '../../lib/auth.guard';
+
+interface CorsResponse {
+  setHeader(name: string, value: string): unknown;
+  vary(field: string): unknown;
+}
+
+export function setCredentialedExportCorsHeaders(
+  origin: unknown,
+  response: CorsResponse,
+): void {
+  if (typeof origin !== 'string' || !origin) return;
+
+  response.setHeader('Access-Control-Allow-Origin', origin);
+  response.setHeader('Access-Control-Allow-Credentials', 'true');
+  response.vary('Origin');
+}
+
+const credentialedExportCorsInterceptor: NestInterceptor = {
+  intercept(context, next) {
+    const request = context.switchToHttp().getRequest();
+    const response = context.switchToHttp().getResponse();
+
+    setCredentialedExportCorsHeaders(request.headers.origin, response);
+    return next.handle();
+  },
+};
+
+/**
+ * Public export endpoints authenticate with their short-lived transfer token,
+ * while the browser may include its gateway cookie from any deployment origin.
+ */
+export const AllowTransferExportRequest = () =>
+  applyDecorators(
+    AllowUnauthorizedRequest(),
+    UseInterceptors(credentialedExportCorsInterceptor),
+  );

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/resource/resource.controller.ts

@@ -46,9 +46,9 @@ import {
 } from '../../generated/resource/dto/resource-types.dto';
 import { UpdateResourceDto } from '../../generated/resource/dto/update-resource.dto';
 import { ResourceEntity } from '../../generated/resource/entities/resource.entity';
-import { AllowUnauthorizedRequest } from '../../lib/auth.guard';
 import { ImportPayloadDto } from '../permTransfer/perm-transfer.dto';
 import { ResourceTransferService } from '../permTransfer/resource-transfer.service';
+import { AllowTransferExportRequest } from '../permTransfer/transfer-export.decorator';
 import { ResourceService } from './resource.service';
 
 import { ConfigService } from '@nestjs/config';
@@ -194,7 +194,7 @@ export class ResourceController {
   }
 
   @Get('export/:code')
-  @AllowUnauthorizedRequest()
+  @AllowTransferExportRequest()
   async getExportPayload(
     @Param('code') code: string,
     @Query('token') token: string,

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/role/role.controller.ts

@@ -46,9 +46,9 @@ import {
 } from '../../generated/role/dto/role-types.dto';
 import { UpdateRoleDto } from '../../generated/role/dto/update-role.dto';
 import { RoleEntity } from '../../generated/role/entities/role.entity';
-import { AllowUnauthorizedRequest } from '../../lib/auth.guard';
 import { ImportPayloadDto } from '../permTransfer/perm-transfer.dto';
 import { RoleTransferService } from '../permTransfer/role-transfer.service';
+import { AllowTransferExportRequest } from '../permTransfer/transfer-export.decorator';
 import { RoleService } from './role.service';
 
 import { ConfigService } from '@nestjs/config';
@@ -208,7 +208,7 @@ export class RoleController {
   }
 
   @Get('export/:name')
-  @AllowUnauthorizedRequest()
+  @AllowTransferExportRequest()
   async getExportPayload(
     @Param('name') name: string,
     @Query('token') token: string,

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/user/user.controller.ts

@@ -46,8 +46,8 @@ import {
   UserWhereSelect,
 } from '../../generated/user/dto/user-types.dto';
 import { UserEntity } from '../../generated/user/entities/user.entity';
-import { AllowUnauthorizedRequest } from '../../lib/auth.guard';
 import { ImportPayloadDto } from '../permTransfer/perm-transfer.dto';
+import { AllowTransferExportRequest } from '../permTransfer/transfer-export.decorator';
 import { UserTransferService } from '../permTransfer/user-transfer.service';
 import { UserService } from './user.service';
 
@@ -207,7 +207,7 @@ export class UserController {
   }
 
   @Get('export/:userid')
-  @AllowUnauthorizedRequest()
+  @AllowTransferExportRequest()
   async getExportPayload(
     @Param('userid') userid: string,
     @Query('token') token: string,

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/userGroup/require-user-group.decorator.spec.ts

@@ -0,0 +1,23 @@
+import {
+  REQUIRED_USER_GROUP_KEY,
+  RequireUserGroup,
+} from './require-user-group.decorator';
+
+describe('RequireUserGroup', () => {
+  it('stores a normalized group code as route metadata', () => {
+    class Controller {
+      @RequireUserGroup('  it_ops  ')
+      create() {}
+    }
+
+    expect(
+      Reflect.getMetadata(REQUIRED_USER_GROUP_KEY, Controller.prototype.create),
+    ).toBe('it_ops');
+  });
+
+  it('rejects an empty group code instead of disabling authorization', () => {
+    expect(() => RequireUserGroup('   ')).toThrow(
+      'RequireUserGroup requires a non-empty group code',
+    );
+  });
+});

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/userGroup/require-user-group.decorator.ts

@@ -0,0 +1,15 @@
+import { SetMetadata } from '@nestjs/common';
+
+export const REQUIRED_USER_GROUP_KEY = 'required_user_group';
+
+/**
+ * Restricts an endpoint to authenticated users resolved from the given active
+ * user group. Nested active child groups are included by UserGroupService.
+ */
+export function RequireUserGroup(groupCode: string) {
+  const normalizedGroupCode = groupCode.trim();
+  if (!normalizedGroupCode) {
+    throw new Error('RequireUserGroup requires a non-empty group code');
+  }
+  return SetMetadata(REQUIRED_USER_GROUP_KEY, normalizedGroupCode);
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/userGroup/user-group.guard.spec.ts

@@ -0,0 +1,90 @@
+import {
+  ExecutionContext,
+  ForbiddenException,
+  UnauthorizedException,
+} from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { UserGroupDomainError } from './user-group.errors';
+import { UserGroupGuard } from './user-group.guard';
+import { UserGroupService } from './user-group.service';
+
+function context(user?: { userid?: string | number; username?: string }) {
+  return {
+    getHandler: () => function handler() {},
+    getClass: () => class Controller {},
+    switchToHttp: () => ({ getRequest: () => ({ user }) }),
+  } as unknown as ExecutionContext;
+}
+
+describe('UserGroupGuard', () => {
+  const reflector = {
+    getAllAndOverride: jest.fn(),
+  };
+  const groups = {
+    isUserInGroup: jest.fn(),
+  };
+  const guard = new UserGroupGuard(
+    reflector as unknown as Reflector,
+    groups as unknown as UserGroupService,
+  );
+
+  beforeEach(() => jest.clearAllMocks());
+
+  it('allows endpoints without a required user group', async () => {
+    reflector.getAllAndOverride.mockReturnValue(undefined);
+
+    await expect(guard.canActivate(context())).resolves.toBe(true);
+    expect(groups.isUserInGroup).not.toHaveBeenCalled();
+  });
+
+  it('allows an authenticated member of the required group', async () => {
+    reflector.getAllAndOverride.mockReturnValue('it_ops');
+    groups.isUserInGroup.mockResolvedValue(true);
+
+    await expect(guard.canActivate(context({ userid: 'alice' }))).resolves.toBe(
+      true,
+    );
+    expect(groups.isUserInGroup).toHaveBeenCalledWith('it_ops', 'alice');
+  });
+
+  it('falls back to username when userid is unavailable', async () => {
+    reflector.getAllAndOverride.mockReturnValue('it_ops');
+    groups.isUserInGroup.mockResolvedValue(true);
+
+    await guard.canActivate(context({ username: 'alice' }));
+
+    expect(groups.isUserInGroup).toHaveBeenCalledWith('it_ops', 'alice');
+  });
+
+  it('rejects a request without an authenticated identity', async () => {
+    reflector.getAllAndOverride.mockReturnValue('it_ops');
+
+    await expect(guard.canActivate(context())).rejects.toBeInstanceOf(
+      UnauthorizedException,
+    );
+  });
+
+  it('rejects a user outside the required group', async () => {
+    reflector.getAllAndOverride.mockReturnValue('it_ops');
+    groups.isUserInGroup.mockResolvedValue(false);
+
+    await expect(
+      guard.canActivate(context({ userid: 'bob' })),
+    ).rejects.toBeInstanceOf(ForbiddenException);
+  });
+
+  it('fails closed when the configured group is missing', async () => {
+    reflector.getAllAndOverride.mockReturnValue('missing');
+    groups.isUserInGroup.mockRejectedValue(
+      new UserGroupDomainError(
+        'USER_GROUP_NOT_FOUND',
+        'User group not found',
+        404,
+      ),
+    );
+
+    await expect(
+      guard.canActivate(context({ userid: 'alice' })),
+    ).rejects.toBeInstanceOf(ForbiddenException);
+  });
+});

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/userGroup/user-group.guard.ts

@@ -0,0 +1,51 @@
+import {
+  CanActivate,
+  ExecutionContext,
+  ForbiddenException,
+  Injectable,
+  UnauthorizedException,
+} from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { Request } from 'express';
+import { UserGroupDomainError } from './user-group.errors';
+import { REQUIRED_USER_GROUP_KEY } from './require-user-group.decorator';
+import { UserGroupService } from './user-group.service';
+
+type AuthenticatedRequest = Request & {
+  user?: {
+    userid?: string | number;
+    username?: string;
+  };
+};
+
+@Injectable()
+export class UserGroupGuard implements CanActivate {
+  constructor(
+    private readonly reflector: Reflector,
+    private readonly groups: UserGroupService,
+  ) {}
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const groupCode = this.reflector.getAllAndOverride<string>(
+      REQUIRED_USER_GROUP_KEY,
+      [context.getHandler(), context.getClass()],
+    );
+    if (!groupCode) return true;
+
+    const request = context.switchToHttp().getRequest<AuthenticatedRequest>();
+    const userId = request.user?.userid ?? request.user?.username;
+    if (userId === undefined || String(userId).trim() === '') {
+      throw new UnauthorizedException('Authenticated user is required');
+    }
+
+    try {
+      if (await this.groups.isUserInGroup(groupCode, String(userId))) {
+        return true;
+      }
+    } catch (error) {
+      if (!(error instanceof UserGroupDomainError)) throw error;
+    }
+
+    throw new ForbiddenException('User is not a member of the required group');
+  }
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/userGroup/user-group.service.spec.ts

@@ -78,6 +78,24 @@ describe('UserGroupService', () => {
     });
   });
 
+  it('checks membership using resolved active users', async () => {
+    const { service } = createHarness();
+    jest
+      .spyOn(service, 'resolveUsers')
+      .mockResolvedValue([{ userid: 'alice', username: 'Alice' }]);
+
+    await expect(service.isUserInGroup('finance', 'alice')).resolves.toBe(true);
+    await expect(service.isUserInGroup('finance', 'bob')).resolves.toBe(false);
+  });
+
+  it('rejects blank membership identities without resolving the group', async () => {
+    const { service } = createHarness();
+    const resolveUsers = jest.spyOn(service, 'resolveUsers');
+
+    await expect(service.isUserInGroup('finance', '   ')).resolves.toBe(false);
+    expect(resolveUsers).not.toHaveBeenCalled();
+  });
+
   it('replaces members and bumps revision', async () => {
     const { service, tx } = createHarness();
     tx.user.findMany.mockResolvedValue([{ userid: 'u1' }]);

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/userGroup/user-group.service.ts

@@ -334,6 +334,13 @@ export class UserGroupService {
     return [...users.values()].sort((a, b) => a.userid.localeCompare(b.userid));
   }
 
+  async isUserInGroup(code: string, userId: string): Promise<boolean> {
+    const normalizedUserId = userId.trim();
+    if (!normalizedUserId) return false;
+    const users = await this.resolveUsers(code);
+    return users.some((user) => user.userid === normalizedUserId);
+  }
+
   private async findGroup(tx: Transaction, code: string) {
     const group = await tx.userGroup.findUnique({ where: { code } });
     if (!group) throw userGroupNotFound(code);

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/userGroup/userGroup.module.ts

@@ -1,10 +1,11 @@
 import { Module } from '@nestjs/common';
 import { UserGroupController } from './user-group.controller';
+import { UserGroupGuard } from './user-group.guard';
 import { UserGroupService } from './user-group.service';
 
 @Module({
   controllers: [UserGroupController],
-  providers: [UserGroupService],
-  exports: [UserGroupService],
+  providers: [UserGroupService, UserGroupGuard],
+  exports: [UserGroupService, UserGroupGuard],
 })
 export class UserGroupModule {}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/workflow/workflow.controller.ts

@@ -24,6 +24,7 @@ import { Request } from 'express';
 import { UseRoles } from 'nest-access-control';
 import { PrismaService } from 'nestjs-prisma';
 import { AllowUnauthorizedRequest } from '../../lib/auth.guard';
+import { AllowTransferExportRequest } from '../permTransfer/transfer-export.decorator';
 import { TemporalService } from './temporal.service';
 import { listWorkflowDatabaseFunctions } from './workflow-database-function';
 import {
@@ -196,7 +197,7 @@ export class WorkflowController {
   }
 
   @Get('export/:code')
-  @AllowUnauthorizedRequest()
+  @AllowTransferExportRequest()
   async getExportPayload(
     @Param('code') code: string,
     @Query('token') token: string,

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/workflow/workflow.service.spec.ts

@@ -8,6 +8,43 @@ import { WorkflowCompilerService } from './workflow-compiler.service';
 import { WorkflowLifecycleService } from './workflow-lifecycle.service';
 import { WorkflowService } from './workflow.service';
 
+describe('WorkflowService — instance detail', () => {
+  it('returns the namespace from Temporal service registration', async () => {
+    const prisma = {
+      workflowInstance: {
+        findUnique: jest.fn().mockResolvedValue({
+          id: BigInt(8),
+          versionId: BigInt(3),
+          status: 'COMPLETED',
+          workflow: { name: 'Example workflow' },
+          nodeExecutions: [],
+        }),
+        findMany: jest.fn().mockResolvedValue([]),
+      },
+      approvalRequest: { findMany: jest.fn().mockResolvedValue([]) },
+      temporalTenantConfig: {
+        findFirst: jest
+          .fn()
+          .mockResolvedValue({ namespace: 'registered-namespace' }),
+      },
+      workflowVersion: {
+        findUnique: jest.fn().mockResolvedValue({ dsl: null }),
+      },
+    };
+    const service = new WorkflowService(
+      prisma as any,
+      {} as any,
+      {} as any,
+      {} as any,
+      {} as any,
+    );
+
+    await expect(
+      service.getInstanceDetail(BigInt(8), 'test-user'),
+    ).resolves.toMatchObject({ temporalNamespace: 'registered-namespace' });
+  });
+});
+
 describe('WorkflowService — workflow list run counts', () => {
   it('includes cancelled instances in the run summary', async () => {
     const prisma = {

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/workflow/workflow.service.ts

@@ -2242,7 +2242,7 @@ export class WorkflowService {
 
     if (!instance) throw new NotFoundException('Instance not found');
 
-    const [approvableRequests, retryAttempts] = await Promise.all([
+    const detailData = await Promise.all([
       this.prisma.approvalRequest.findMany({
         where: {
           workflowInstanceId: instanceId,
@@ -2262,7 +2262,12 @@ export class WorkflowService {
           createdAt: true,
         },
       }),
+      this.prisma.temporalTenantConfig.findFirst({
+        orderBy: { id: 'asc' },
+        select: { namespace: true },
+      }),
     ]);
+    const [approvableRequests, retryAttempts, temporalConfig] = detailData;
 
     // Fetch the workflow DSL from the version
     let dsl: any = null;
@@ -2283,6 +2288,7 @@ export class WorkflowService {
           ? listSameRunRetryableNodeIds(dsl, instance.nodeExecutions)
           : [],
       retryAttempts,
+      temporalNamespace: temporalConfig?.namespace ?? null,
       dsl,
     };
   }

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/components/TransferImportModal.tsx

@@ -85,7 +85,9 @@ export function TransferImportModal({
     setLoading(true);
     try {
       // Step 1: Fetch from source URL (cross-origin)
-      const response = await fetch(sourceUrl.trim());
+      const response = await fetch(sourceUrl.trim(), {
+        credentials: 'include',
+      });
       if (!response.ok) {
         const errorData = await response.json().catch(() => null);
         throw new Error(

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/canvas/components/ImportModal.tsx

@@ -43,7 +43,9 @@ export function ImportModal({ open, onClose, onSuccess }: ImportModalProps) {
     setLoading(true);
     try {
       // Step 1: Fetch from source URL (cross-origin)
-      const response = await fetch(sourceUrl.trim());
+      const response = await fetch(sourceUrl.trim(), {
+        credentials: 'include',
+      });
       if (!response.ok) {
         const errorData = await response.json().catch(() => null);
         throw new Error(

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/workflow/components/ImportModal.tsx

@@ -45,7 +45,9 @@ export function ImportModal({ open, onClose, onSuccess }: ImportModalProps) {
     setLoading(true);
     try {
       // Step 1: Fetch from source URL (cross-origin)
-      const response = await fetch(sourceUrl.trim());
+      const response = await fetch(sourceUrl.trim(), {
+        credentials: 'include',
+      });
       if (!response.ok) {
         const errorData = await response.json().catch(() => null);
         throw new Error(

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/workflow/instance-detail.test.tsx

@@ -1,5 +1,6 @@
 import { describe, expect, it } from 'vitest';
 import {
+  buildTemporalWorkflowUrl,
   getDisplayNodeExecutions,
   getErrorSummary,
   getStepStatus,
@@ -7,6 +8,20 @@ import {
   shouldShowNodeError,
 } from './instance-detail';
 
+describe('Temporal workflow link', () => {
+  it('uses the namespace returned by service registration', () => {
+    expect(
+      buildTemporalWorkflowUrl(
+        'https://temporal.oit-gadmin.woa.com/',
+        'registered-namespace',
+        'wf-outbox-19-w15',
+      ),
+    ).toBe(
+      'https://temporal.oit-gadmin.woa.com/namespaces/registered-namespace/workflows/wf-outbox-19-w15',
+    );
+  });
+});
+
 describe('Workflow instance cancellation display', () => {
   it('does not present a cancelled node as an error', () => {
     const cancelledError = {

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/workflow/instance-detail.tsx

@@ -80,6 +80,7 @@ interface InstanceDetail {
   context: any;
   result: any;
   temporalRunId: string | null;
+  temporalNamespace: string | null;
   cancellationRequestedAt: string | null;
   cancellationRequestedBy: string | null;
   cancellationReason: string | null;
@@ -96,6 +97,16 @@ interface InstanceDetail {
   dsl?: WorkflowDSL;
 }
 
+export function buildTemporalWorkflowUrl(
+  baseUrl: string,
+  namespace: string,
+  workflowId: string,
+): string {
+  return `${baseUrl.replace(/\/$/, '')}/namespaces/${encodeURIComponent(
+    namespace,
+  )}/workflows/${encodeURIComponent(workflowId)}`;
+}
+
 export function getDisplayNodeExecutions(
   instance: Pick<
     InstanceDetail,
@@ -355,25 +366,27 @@ export default function WorkflowInstanceDetailPage() {
           <Space wrap={false}>
             <Tooltip
               title={
-                data.temporalRunId
+                data.temporalRunId && data.temporalNamespace
                   ? '在 Temporal Web UI 中查看完整执行历史、Pending Activities 和 Worker 状态'
-                  : '此实例无 Temporal Run ID（可能由 outbox-poller 创建或 Temporal 当时不可用）'
+                  : !data.temporalRunId
+                    ? '此实例无 Temporal Workflow ID（可能由 outbox-poller 创建或 Temporal 当时不可用）'
+                    : '服务注册中未配置 Temporal Namespace'
               }
             >
               <Button
                 icon={<LinkOutlined />}
-                disabled={!data.temporalRunId}
+                disabled={!data.temporalRunId || !data.temporalNamespace}
                 onClick={() => {
-                  if (!data.temporalRunId) return;
+                  if (!data.temporalRunId || !data.temporalNamespace) return;
                   const base =
                     import.meta.env.VITE_TEMPORAL_UI_URL ||
                     'http://localhost:8080';
-                  const ns =
-                    import.meta.env.VITE_TEMPORAL_NAMESPACE || 'default';
                   window.open(
-                    `${base}/namespaces/${ns}/workflows/${encodeURIComponent(
+                    buildTemporalWorkflowUrl(
+                      base,
+                      data.temporalNamespace,
                       data.temporalRunId,
-                    )}`,
+                    ),
                     '_blank',
                     'noopener,noreferrer',
                   );

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/workflow/node-instances/node-config.css

@@ -110,6 +110,10 @@
   margin: -2px 0 12px;
 }
 
+.manual-trigger-config {
+  container-type: inline-size;
+}
+
 .manual-trigger-config__empty {
   margin-bottom: 10px;
   padding: 16px 12px;
@@ -167,6 +171,36 @@
   font-size: 12px;
 }
 
+@container (max-width: 420px) {
+  .manual-trigger-config__primary {
+    grid-template-columns: minmax(0, 1fr) max-content;
+  }
+
+  .manual-trigger-config__primary > :nth-child(1) {
+    grid-column: 1;
+    grid-row: 1;
+  }
+
+  .manual-trigger-config__primary > :nth-child(2) {
+    grid-column: 1;
+    grid-row: 2;
+  }
+
+  .manual-trigger-config__required {
+    grid-column: 2;
+    grid-row: 2;
+  }
+
+  .manual-trigger-config__primary > .ant-btn {
+    grid-column: 2;
+    grid-row: 1;
+  }
+
+  .manual-trigger-config__secondary {
+    grid-template-columns: minmax(0, 1fr);
+  }
+}
+
 .cron-trigger-config {
   display: flex;
   flex-direction: column;

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/workflow/node-instances/widgets/HttpRequestConfigEditor.tsx

@@ -118,14 +118,7 @@ export function HttpRequestConfigEditor({
         <Typography.Paragraph type="secondary">
           {t('httpRequest.connectionDescription')}
         </Typography.Paragraph>
-        <div
-          style={{
-            display: 'grid',
-            gridTemplateColumns: 'minmax(260px, 1fr) auto',
-            gap: 10,
-            alignItems: 'end',
-          }}
-        >
+        <div className="http-request-config__connection-row">
           <Form.Item
             label={t('httpRequest.connection')}
             required={requiredFields.has('connectionRef')}
@@ -155,14 +148,7 @@ export function HttpRequestConfigEditor({
             {t('httpRequest.newConnection')}
           </Button>
         </div>
-        <div
-          style={{
-            display: 'grid',
-            gridTemplateColumns: '130px 1fr',
-            gap: 10,
-            marginTop: 14,
-          }}
-        >
+        <div className="http-request-config__request-row">
           <Form.Item
             label={t('httpRequest.method')}
             required={requiredFields.has('method')}

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/workflow/node-instances/widgets/ParameterBindingListEditor.tsx

@@ -3,6 +3,7 @@ import { Button, Input, Space, Typography } from 'antd';
 import { useTranslation } from 'react-i18next';
 import { ParameterBindingEditor } from '../../components/ParameterBindingEditor';
 import type { ParameterBinding } from '../../types/parameter-binding';
+import './parameter-binding-list-editor.css';
 
 export function ParameterBindingListEditor({
   value = [],
@@ -20,17 +21,14 @@ export function ParameterBindingListEditor({
   const { t } = useTranslation('workflow');
 
   return (
-    <Space direction="vertical" size={10} style={{ width: '100%' }}>
+    <Space
+      className="workflow-parameter-list"
+      direction="vertical"
+      size={10}
+      style={{ width: '100%' }}
+    >
       {value.length > 0 && (
-        <div
-          style={{
-            display: 'grid',
-            gridTemplateColumns:
-              'minmax(140px, 0.65fr) minmax(280px, 1.6fr) 32px',
-            gap: 8,
-            marginBottom: -2,
-          }}
-        >
+        <div className="workflow-parameter-list__head">
           <Typography.Text type="secondary">
             {t('nodeEditors.database.parameter')}
           </Typography.Text>
@@ -43,32 +41,27 @@ export function ParameterBindingListEditor({
       {value.map((binding, index) => {
         const placeholder = `$${startIndex + index}`;
         return (
-          <div
-            key={index}
-            style={{
-              display: 'grid',
-              gridTemplateColumns:
-                'minmax(140px, 0.65fr) minmax(280px, 1.6fr) 32px',
-              gap: 8,
-              alignItems: 'start',
-            }}
-          >
+          <div key={index} className="workflow-parameter-list__row">
             <Input
+              className="workflow-parameter-list__parameter"
               aria-label={`参数 ${placeholder}`}
               value={placeholder}
               readOnly
               disabled
             />
-            <ParameterBindingEditor
-              name={placeholder}
-              defaultPath=""
-              value={binding}
-              disabled={disabled}
-              onChange={(next) =>
-                onChange(value.map((item, i) => (i === index ? next : item)))
-              }
-            />
+            <div className="workflow-parameter-list__binding">
+              <ParameterBindingEditor
+                name={placeholder}
+                defaultPath=""
+                value={binding}
+                disabled={disabled}
+                onChange={(next) =>
+                  onChange(value.map((item, i) => (i === index ? next : item)))
+                }
+              />
+            </div>
             <Button
+              className="workflow-parameter-list__delete"
               type="text"
               danger
               aria-label={`删除参数 ${placeholder}`}

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/workflow/node-instances/widgets/http-request-config.css

@@ -1,7 +1,43 @@
+.http-request-config {
+  container-type: inline-size;
+}
+
 .http-request-config--embedded.ant-space {
   gap: 18px !important;
 }
 
+.http-request-config__connection-row,
+.http-request-config__request-row {
+  display: grid;
+  gap: 10px;
+}
+
+.http-request-config__connection-row {
+  grid-template-columns: minmax(260px, 1fr) auto;
+  align-items: end;
+}
+
+.http-request-config__request-row {
+  grid-template-columns: 130px minmax(0, 1fr);
+  margin-top: 14px;
+}
+
+.http-request-config__connection-row > *,
+.http-request-config__request-row > * {
+  min-width: 0;
+}
+
+@container (max-width: 400px) {
+  .http-request-config__connection-row,
+  .http-request-config__request-row {
+    grid-template-columns: minmax(0, 1fr);
+  }
+
+  .http-request-config__connection-row > .workflow-panel-action {
+    width: 100%;
+  }
+}
+
 .http-request-config__timeout {
   display: flex;
   align-items: center;

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/routes/workflow/node-instances/widgets/parameter-binding-list-editor.css

@@ -0,0 +1,48 @@
+.workflow-parameter-list {
+  container-type: inline-size;
+}
+
+.workflow-parameter-list__head,
+.workflow-parameter-list__row {
+  display: grid;
+  grid-template-columns: minmax(140px, 0.65fr) minmax(280px, 1.6fr) 32px;
+  gap: 8px;
+}
+
+.workflow-parameter-list__head {
+  margin-bottom: -2px;
+}
+
+.workflow-parameter-list__row {
+  align-items: start;
+}
+
+.workflow-parameter-list__parameter,
+.workflow-parameter-list__binding {
+  min-width: 0;
+}
+
+@container (max-width: 520px) {
+  .workflow-parameter-list__head {
+    display: none;
+  }
+
+  .workflow-parameter-list__row {
+    grid-template-columns: minmax(0, 1fr) 32px;
+  }
+
+  .workflow-parameter-list__parameter {
+    grid-column: 1;
+    grid-row: 1;
+  }
+
+  .workflow-parameter-list__delete {
+    grid-column: 2;
+    grid-row: 1;
+  }
+
+  .workflow-parameter-list__binding {
+    grid-column: 1 / -1;
+    grid-row: 2;
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gadmin2n/schematics",
-  "version": "0.0.156",
+  "version": "0.0.158",
   "description": "Gadmin - modern, fast, powerful node.js web framework (@schematics)",
   "main": "dist/index.js",
   "files": [