@gadmin2n/schematics 0.0.87 → 0.0.89

package/dist/lib/application/files/gadmin2-game-angle-demo/temporal/worker/src/outbox-poller.ts

@@ -1,11 +1,25 @@
 import { Client as PgClient } from "pg";
-import { Client, Connection } from "@temporalio/client";
+import {
+  Client,
+  Connection,
+  WorkflowExecutionAlreadyStartedError,
+} from "@temporalio/client";
 import { config } from "./config";
 
 const POLL_INTERVAL = Number(process.env.EVENT_POLL_INTERVAL_MS) || 10_000; // 默认 10 秒
 const BATCH_SIZE = 50;
 const MAX_RETRIES = Number(process.env.OUTBOX_MAX_RETRIES) || 5;
 
+/**
+ * Outbox Poller 控制句柄。stop() 用于优雅关闭：
+ * - 不再调度下一次 poll
+ * - 等待当前 in-flight poll 完成
+ * - 释放 PG 与 Temporal 连接
+ */
+export interface OutboxPollerHandle {
+  stop(): Promise<void>;
+}
+
 /**
  * Outbox Poller — 定时扫描 t_workflow_event_outbox 未处理事件，匹配并触发 workflow。
  *
@@ -14,8 +28,14 @@ const MAX_RETRIES = Number(process.env.OUTBOX_MAX_RETRIES) || 5;
  * 2. 本轮询器每 N 秒扫描未处理行
  * 3. 匹配 event_trigger workflow → 启动 Temporal 执行
  * 4. 标记行为已处理
+ *
+ * 事务边界（重要）：
+ * - 每个 outbox 行用一个独立的 PG 事务包裹：BEGIN → SELECT FOR UPDATE → 触发 workflow → UPDATE processed → COMMIT
+ * - workflowId 由 outbox.id 派生为确定性值（`wf-outbox-{id}-w{workflowId}`），
+ *   即使在 workflow.start 与 COMMIT 之间崩溃，下次 poll 重试时 Temporal 会抛
+ *   WorkflowExecutionAlreadyStartedError，被本模块识别为幂等成功，不会丢事件、不会重复启动 workflow。
  */
-export async function startOutboxPoller() {
+export async function startOutboxPoller(): Promise<OutboxPollerHandle> {
   const pg = new PgClient({ connectionString: config.database.url });
   await pg.connect();
 
@@ -27,68 +47,27 @@ export async function startOutboxPoller() {
     namespace: config.temporal.namespace,
   });
 
-  console.log(`[OutboxPoller] Started. Polling every ${POLL_INTERVAL}ms, max retries: ${MAX_RETRIES}`);
+  console.log(
+    `[OutboxPoller] Started. Polling every ${POLL_INTERVAL}ms, max retries: ${MAX_RETRIES}`,
+  );
 
   const poll = async () => {
     try {
-      // 用 FOR UPDATE SKIP LOCKED 保证多实例不重复消费
-      const { rows } = await pg.query(
-        `UPDATE t_workflow_event_outbox
-        SET processed = TRUE, processed_at = NOW()
-        WHERE id IN (
-          SELECT id FROM t_workflow_event_outbox
-            WHERE processed = FALSE
-            ORDER BY created_at
-            LIMIT $1
-            FOR UPDATE SKIP LOCKED
-        )
-        RETURNING id, event_name, payload, retry_count`,
+      // 1. 先 SELECT 候选 id（不锁），减少长事务持锁时间
+      const { rows: candidates } = await pg.query(
+        `SELECT id FROM t_workflow_event_outbox
+          WHERE processed = FALSE
+          ORDER BY created_at
+          LIMIT $1`,
         [BATCH_SIZE],
       );
 
-      if (rows.length === 0) return;
-      console.log(`[OutboxPoller] Processing ${rows.length} events`);
+      if (candidates.length === 0) return;
+      console.log(`[OutboxPoller] Found ${candidates.length} candidate events`);
 
-      for (const row of rows) {
-        try {
-          const matched = await matchAndTrigger(
-            pg,
-            temporalClient,
-            row.event_name,
-            row.payload,
-          );
-          if (matched === 0) {
-            console.warn(
-              `[OutboxPoller] No workflow matched event "${row.event_name}" (id=${row.id}). Event consumed without action.`,
-            );
-          }
-        } catch (err: any) {
-          const nextRetry = (row.retry_count ?? 0) + 1;
-          const errMsg = String(err?.message ?? err);
-          if (nextRetry >= MAX_RETRIES) {
-            // 终态失败：保持 processed=true，仅记录 retry_count + last_error，不再重试
-            console.error(
-              `[OutboxPoller] Event ${row.id} (${row.event_name}) failed ${nextRetry} times. Marking as terminal failure: ${errMsg}`,
-            );
-            await pg.query(
-              `UPDATE t_workflow_event_outbox
-                SET retry_count = $1, last_error = $2
-                WHERE id = $3`,
-              [nextRetry, errMsg, row.id],
-            );
-          } else {
-            console.error(
-              `[OutboxPoller] Event ${row.id} (${row.event_name}) failed (retry ${nextRetry}/${MAX_RETRIES}): ${errMsg}`,
-            );
-            // 标记回未处理，下次重试
-            await pg.query(
-              `UPDATE t_workflow_event_outbox
-                SET processed = FALSE, processed_at = NULL, retry_count = $1, last_error = $2
-                WHERE id = $3`,
-              [nextRetry, errMsg, row.id],
-            );
-          }
-        }
+      // 2. 逐行处理：每行一个独立事务，保证 workflow.start 与 outbox UPDATE 的原子性
+      for (const { id } of candidates) {
+        await processOneEvent(pg, temporalClient, Number(id));
       }
     } catch (err: any) {
       console.error("[OutboxPoller] Poll error:", err.message);
@@ -96,24 +75,180 @@ export async function startOutboxPoller() {
   };
 
   // 自调度循环：每次 poll 完成后再排下一次，避免 setInterval 在 poll 慢于 POLL_INTERVAL 时重叠调用
+  let stopped = false;
+  let timer: NodeJS.Timeout | null = null;
+  let inFlight: Promise<void> | null = null;
+
   const loop = async () => {
+    if (stopped) return;
+    inFlight = poll();
     try {
-      await poll();
+      await inFlight;
     } finally {
-      setTimeout(loop, POLL_INTERVAL);
+      inFlight = null;
+      if (!stopped) {
+        timer = setTimeout(loop, POLL_INTERVAL);
+      }
     }
   };
-  loop();
+  void loop();
+
+  return {
+    async stop() {
+      stopped = true;
+      if (timer) {
+        clearTimeout(timer);
+        timer = null;
+      }
+      // 等待当前正在执行的 poll 完成（含本轮所有事件处理）
+      if (inFlight) {
+        try {
+          await inFlight;
+        } catch {
+          // poll 内部已捕获错误并写日志，这里忽略
+        }
+      }
+      try {
+        await pg.end();
+      } catch (err: any) {
+        console.error(
+          "[OutboxPoller] PG client close error:",
+          err?.message ?? err,
+        );
+      }
+      try {
+        await temporalConn.close();
+      } catch (err: any) {
+        console.error(
+          "[OutboxPoller] Temporal connection close error:",
+          err?.message ?? err,
+        );
+      }
+      console.log("[OutboxPoller] Stopped, resources released");
+    },
+  };
+}
+
+/**
+ * 处理单条 outbox 事件（一个事务）。
+ *
+ * 流程：
+ *   BEGIN
+ *   SELECT FOR UPDATE SKIP LOCKED
+ *     ↓
+ *   matchAndTrigger（INSERT instance + workflow.start，workflowId 由 outbox.id 派生）
+ *     ↓
+ *   ┌─ 全部成功:  UPDATE processed=TRUE → COMMIT
+ *   ├─ 还能重试:  UPDATE retry_count（保持 processed=FALSE）→ COMMIT
+ *   └─ 终态失败:  UPDATE processed=TRUE + last_error → COMMIT
+ */
+async function processOneEvent(
+  pg: PgClient,
+  temporalClient: Client,
+  outboxId: number,
+): Promise<void> {
+  await pg.query("BEGIN");
+  let inTransaction = true;
+  try {
+    // 行级锁：SKIP LOCKED 保证多实例 poller 不会同时处理同一行
+    const { rows } = await pg.query(
+      `SELECT id, event_name, payload, retry_count
+         FROM t_workflow_event_outbox
+         WHERE id = $1 AND processed = FALSE
+         FOR UPDATE SKIP LOCKED`,
+      [outboxId],
+    );
+
+    if (rows.length === 0) {
+      // 已被另一实例处理或已 processed
+      await pg.query("ROLLBACK");
+      inTransaction = false;
+      return;
+    }
+
+    const row = rows[0];
+    try {
+      const matched = await matchAndTrigger(
+        pg,
+        temporalClient,
+        Number(row.id),
+        row.event_name,
+        row.payload,
+      );
+      if (matched === 0) {
+        console.warn(
+          `[OutboxPoller] No workflow matched event "${row.event_name}" (id=${row.id}). Event consumed without action.`,
+        );
+      }
+
+      // 全部 workflow.start 成功（含幂等成功），原子提交"已处理"
+      await pg.query(
+        `UPDATE t_workflow_event_outbox
+            SET processed = TRUE, processed_at = NOW()
+            WHERE id = $1`,
+        [row.id],
+      );
+      await pg.query("COMMIT");
+      inTransaction = false;
+    } catch (err: any) {
+      // workflow.start / DB 操作失败 —— 回滚后用独立事务记录 retry 状态
+      await pg.query("ROLLBACK");
+      inTransaction = false;
+
+      const nextRetry = (row.retry_count ?? 0) + 1;
+      const errMsg = String(err?.message ?? err);
+
+      if (nextRetry >= MAX_RETRIES) {
+        console.error(
+          `[OutboxPoller] Event ${row.id} (${row.event_name}) failed ${nextRetry} times. Marking as terminal failure: ${errMsg}`,
+        );
+        await pg.query(
+          `UPDATE t_workflow_event_outbox
+              SET processed = TRUE, processed_at = NOW(), retry_count = $1, last_error = $2
+              WHERE id = $3`,
+          [nextRetry, errMsg, row.id],
+        );
+      } else {
+        console.error(
+          `[OutboxPoller] Event ${row.id} (${row.event_name}) failed (retry ${nextRetry}/${MAX_RETRIES}): ${errMsg}`,
+        );
+        await pg.query(
+          `UPDATE t_workflow_event_outbox
+              SET retry_count = $1, last_error = $2
+              WHERE id = $3`,
+          [nextRetry, errMsg, row.id],
+        );
+      }
+    }
+  } catch (txErr: any) {
+    // 事务级异常（PG 连接断等）— 尝试回滚兜底
+    if (inTransaction) {
+      try {
+        await pg.query("ROLLBACK");
+      } catch {
+        /* ignore */
+      }
+    }
+    console.error(
+      `[OutboxPoller] Tx error for outbox ${outboxId}:`,
+      txErr?.message ?? txErr,
+    );
+  }
 }
 
 /**
  * 查找监听该 eventName 的 workflow 并启动执行。
  *
- * @returns 实际匹配并启动的 workflow 数量；0 表示无人订阅。
+ * **幂等性**：workflowId 由 outboxId + workflow_id 派生为确定性值。
+ * 若先前 poll 已成功 start 但事务未 COMMIT 就崩溃，本次重试时
+ * Temporal 会抛 WorkflowExecutionAlreadyStartedError —— 视为幂等成功。
+ *
+ * @returns 实际匹配并启动（或确认已启动）的 workflow 数量；0 表示无人订阅。
  */
 async function matchAndTrigger(
   pg: PgClient,
   temporalClient: Client,
+  outboxId: number,
   eventName: string,
   payload: Record<string, any>,
 ): Promise<number> {
@@ -150,40 +285,61 @@ async function matchAndTrigger(
       if (!evaluateFilter(trigger.config.filterExpression, payload)) continue;
     }
 
-    // 创建 WorkflowInstance
-    const instance = await pg.query(
-      `INSERT INTO t_workflow_instance (workflow_id, version_id, status, context, creator, created_at, updated_at)
-       VALUES ($1, $2, 'PENDING', $3, 'event_trigger', NOW(), NOW())
-       RETURNING id`,
-      [row.workflow_id, row.version_id, JSON.stringify(payload)],
+    // 确定性 workflowId（用于幂等保护）
+    const deterministicWorkflowId = `wf-outbox-${outboxId}-w${row.workflow_id}`;
+
+    // 创建（或复用）WorkflowInstance —— 用 (workflow_id, source_outbox_id) UNIQUE 做幂等 upsert。
+    // 崩溃恢复路径下 (workflow_id, outboxId) 相同 → 直接拿到上次的 instanceId，不会产生孤儿行。
+    // 一个 outbox 事件可被多个 workflow 订阅，每个 workflow 各自得到一条 instance。
+    const instanceUpsert = await pg.query(
+      `INSERT INTO t_workflow_instance
+         (workflow_id, version_id, status, context, creator, source_outbox_id, created_at, updated_at)
+       VALUES ($1, $2, 'PENDING', $3, 'event_trigger', $4, NOW(), NOW())
+       ON CONFLICT (workflow_id, source_outbox_id) DO UPDATE
+         SET updated_at = NOW()
+       RETURNING id, (xmax = 0) AS inserted`,
+      [row.workflow_id, row.version_id, JSON.stringify(payload), outboxId],
     );
-    const instanceId = Number(instance.rows[0].id);
-
-    // 启动 Temporal workflow
-    const workflowId = `wf-${row.workflow_id}-${instanceId}`;
-    const handle = await temporalClient.workflow.start("dslWorkflow", {
-      taskQueue: config.temporal.taskQueue,
-      workflowId,
-      args: [
-        {
-          instanceId,
-          workflowId: Number(row.workflow_id),
-          versionId: Number(row.version_id),
-          dsl,
-          context: payload,
-        },
-      ],
-    });
-
-    // 回写 temporal_run_id
+    const instanceId = Number(instanceUpsert.rows[0].id);
+    const wasInserted = instanceUpsert.rows[0].inserted as boolean;
+
+    // 启动 Temporal workflow（幂等：同 workflowId 第二次启动会抛 AlreadyStartedError）
+    let temporalRunId = deterministicWorkflowId;
+    try {
+      const handle = await temporalClient.workflow.start("dslWorkflow", {
+        taskQueue: config.temporal.taskQueue,
+        workflowId: deterministicWorkflowId,
+        args: [
+          {
+            instanceId,
+            workflowId: Number(row.workflow_id),
+            versionId: Number(row.version_id),
+            dsl,
+            context: payload,
+          },
+        ],
+      });
+      temporalRunId = handle.workflowId;
+      console.log(
+        `[OutboxPoller] Triggered workflow ${row.workflow_id} for event "${eventName}", instance=${instanceId}${wasInserted ? "" : " (recovered)"}, wfId=${deterministicWorkflowId}`,
+      );
+    } catch (err: any) {
+      if (err instanceof WorkflowExecutionAlreadyStartedError) {
+        // 上一轮 start 成功但 outbox 提交前崩溃 —— 这次重放视为幂等成功
+        console.warn(
+          `[OutboxPoller] Workflow ${deterministicWorkflowId} already exists (recovery). outboxId=${outboxId}, instance=${instanceId}`,
+        );
+      } else {
+        throw err; // 其它错误冒泡，触发上层 ROLLBACK + retry
+      }
+    }
+
+    // 回写 temporal_run_id（即便走的是 recovery 分支也确保字段不为空）
     await pg.query(
       `UPDATE t_workflow_instance SET temporal_run_id = $1 WHERE id = $2`,
-      [handle.workflowId, instanceId],
+      [temporalRunId, instanceId],
     );
 
-    console.log(
-      `[OutboxPoller] Triggered workflow ${row.workflow_id} for event "${eventName}", instance=${instanceId}`,
-    );
     matchedCount++;
   }
 

package/dist/lib/application/files/gadmin2-game-angle-demo/temporal/worker/src/tests/cron-trigger-workflow.test.ts

@@ -0,0 +1,20 @@
+import { describe, it, expect } from 'vitest';
+import * as workflows from '../workflows/dsl-workflow';
+
+/**
+ * Smoke test: confirm cronTriggerWorkflow is exported from dsl-workflow.ts so the
+ * Temporal SDK auto-registers it via the workflowsPath setting in worker/src/index.ts.
+ *
+ * We don't run a TestWorkflowEnvironment here — that requires booting a real Temporal
+ * Server. The actual schedule registration + workflow execution paths are covered by
+ * the server-side TemporalService unit tests.
+ */
+describe('cronTriggerWorkflow export', () => {
+  it('is exported as a function', () => {
+    expect(typeof workflows.cronTriggerWorkflow).toBe('function');
+  });
+
+  it('dslWorkflow is also still exported', () => {
+    expect(typeof workflows.dslWorkflow).toBe('function');
+  });
+});

package/dist/lib/application/files/gadmin2-game-angle-demo/temporal/worker/src/workflows/dsl-workflow.ts

@@ -41,10 +41,44 @@ import {
 } from '../dsl/helpers';
 
 // ─── Activity Proxies ─────────────────────────────────────────────────────────
-
-const acts = proxyActivities<typeof import('../activities')>({
+//
+// Activity 按"职责类别"分组配置 timeout / retry，避免一刀切。
+// startToCloseTimeout 必须覆盖：业务上限（含 axios/vm 内部 timeout）+ Worker SIGTERM 后 cancel 响应窗口。
+// 业务可在 dsl.config 里通过 `timeoutSec` 覆盖某次调用，这里的值是默认值/上限。
+//
+// 注意：单条 Activity 的最坏耗时 ≈ startToCloseTimeout × maximumAttempts。
+// 若长于 K8s Pod 的 grace period（300s）会被 SIGKILL，把后续重试推给其它 worker。
+
+// HTTP — axios 默认 timeout 30s，给 Activity 预留 cancel 响应余量
+const httpActs = proxyActivities<
+  Pick<typeof import('../activities'), 'httpRequest'>
+>({
   startToCloseTimeout: '60s',
-  retry: { maximumAttempts: 3 },
+  retry: { maximumAttempts: 3, initialInterval: '1s', maximumInterval: '30s' },
+});
+
+// DB — 慢查询 / 大写入可能比较久；不重试写入（dbExecute 可能非幂等）
+const dbActs = proxyActivities<
+  Pick<typeof import('../activities'), 'dbQuery' | 'dbExecute'>
+>({
+  startToCloseTimeout: '120s',
+  retry: { maximumAttempts: 1 }, // 写入默认不重试，避免重复扣款类问题
+});
+
+// 通知 —— 邮件/IM 网关一般快；失败重试要积极
+const notifyActs = proxyActivities<
+  Pick<typeof import('../activities'), 'sendNotification'>
+>({
+  startToCloseTimeout: '30s',
+  retry: { maximumAttempts: 5, initialInterval: '2s', maximumInterval: '60s' },
+});
+
+// 自定义 JS —— vm 内部默认 5s timeout，外层留足边界 + 不重试（脚本可能非幂等）
+const codeActs = proxyActivities<
+  Pick<typeof import('../activities'), 'codeExecute'>
+>({
+  startToCloseTimeout: '15s',
+  retry: { maximumAttempts: 1 },
 });
 
 const reportActs = proxyActivities<typeof import('../activities')>({
@@ -123,9 +157,22 @@ async function executeGraph(
   const executed = new Set<string>();
   const queue = [...startNodeIds];
 
+  // 防御：DSL 是循环图（A→B→A）或不可达 predecessor 时，
+  // 当前 BFS 会把 nodeId 不停 push 回 queue 形成死循环。
+  // 给一个上限：每个节点最多被处理 nodeCount * 2 次（包含一次重排队）。
+  const MAX_ITERATIONS = Math.max(dsl.nodes.length * 10, 100);
+  let iterations = 0;
+
   while (queue.length > 0) {
     if (isCancelled()) throw new CancellationScope().cancel;
 
+    if (++iterations > MAX_ITERATIONS) {
+      throw new Error(
+        `executeGraph exceeded ${MAX_ITERATIONS} iterations — DSL likely contains a cycle ` +
+          `or unreachable predecessors. Pending queue: [${queue.join(', ')}], executed: [${[...executed].join(', ')}]`,
+      );
+    }
+
     const nodeId = queue.shift()!;
     if (executed.has(nodeId)) continue;
 
@@ -217,27 +264,27 @@ async function executeNode(
 
     // ─── Actions ────────────────────────────────────────────────────
     case 'http_request': {
-      const result = await acts.httpRequest(config as any);
+      const result = await httpActs.httpRequest(config as any);
       return { output: result };
     }
 
     case 'db_query': {
-      const result = await acts.dbQuery(config as any);
+      const result = await dbActs.dbQuery(config as any);
       return { output: result };
     }
 
     case 'db_execute': {
-      const result = await acts.dbExecute(config as any);
+      const result = await dbActs.dbExecute(config as any);
       return { output: result };
     }
 
     case 'send_notification': {
-      const result = await acts.sendNotification(config as any);
+      const result = await notifyActs.sendNotification(config as any);
       return { output: result };
     }
 
     case 'code': {
-      const result = await acts.codeExecute({
+      const result = await codeActs.codeExecute({
         ...config,
         data: ctx,
       } as any);
@@ -409,3 +456,44 @@ async function executeNode(
 
 // ─── Helper Functions ─────────────────────────────────────────────────────────
 // Pure functions are defined in ../dsl/helpers.ts and imported above.
+
+// ─── Cron Trigger Workflow ────────────────────────────────────────────────────
+//
+// Started by Temporal Schedules (registered via NestJS TemporalService.upsertCronSchedule).
+// Creates a t_workflow_instance row with creator='cron', then delegates to dslWorkflow
+// as a child workflow so it shares all the per-node logic.
+
+const cronActs = proxyActivities<typeof import('../activities')>({
+  startToCloseTimeout: '15s',
+  retry: { maximumAttempts: 5 },
+});
+
+export interface CronTriggerInput {
+  workflowId: number;
+  versionId: number;
+  dsl: WorkflowDSL;
+  scheduleId: string;
+}
+
+export async function cronTriggerWorkflow(
+  input: CronTriggerInput,
+): Promise<WorkflowResult> {
+  const { instanceId } = await cronActs.createCronInstance({
+    workflowId: input.workflowId,
+    versionId: input.versionId,
+    scheduleId: input.scheduleId,
+  });
+
+  return await executeChild(dslWorkflow, {
+    workflowId: `wf-${input.workflowId}-${instanceId}`,
+    args: [
+      {
+        instanceId,
+        workflowId: input.workflowId,
+        versionId: input.versionId,
+        dsl: input.dsl,
+        context: { scheduledAt: new Date().toISOString(), scheduleId: input.scheduleId },
+      },
+    ],
+  });
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/web/nginx.conf

@@ -0,0 +1,74 @@
+# nginx.conf 核心配置
+user nginx;
+worker_processes auto;
+
+events {
+  worker_connections 1024;
+}
+
+http {
+  include /etc/nginx/mime.types;
+  default_type application/octet-stream;
+  server_tokens off;
+
+  # --------------------------
+  # 日志格式定义
+  # --------------------------
+  log_format custom '$remote_addr - $remote_user [$time_local] "$request" '
+                   '$status $body_bytes_sent "$http_referer" ';
+
+  # --------------------------
+  # 安全头部配置
+  # --------------------------
+  add_header X-Content-Type-Options "nosniff";
+  add_header X-Frame-Options "SAMEORIGIN";
+  add_header X-XSS-Protection "1; mode=block";
+  #add_header Content-Security-Policy "default-src 'self'";
+
+  # --------------------------
+  # GZIP 压缩配置
+  # --------------------------
+  gzip on;                            # 启用 GZIP 压缩
+  gzip_comp_level 6;                  # 压缩级别（1-9，6 是性能与压缩率的平衡点）
+  gzip_min_length 1024;               # 最小压缩文件大小（小于此值不压缩）
+  gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;  # 压缩的 MIME 类型
+  gzip_vary on;                       # 兼容不支持 GZIP 的客户端
+  gzip_proxied any;                   # 对所有代理请求启用压缩
+
+  # --------------------------
+  # SSL 配置（若启用 HTTPS）
+  # --------------------------
+  ssl_protocols TLSv1.2 TLSv1.3;
+  ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256';
+  ssl_prefer_server_ciphers on;
+
+  server {
+    listen 80;
+    server_name _;                     # 接受所有域名（如果前面有反向代理，这里可以是默认值）
+    root /var/www/html;
+
+    autoindex off;                     # 关闭目录索引
+    index index.html;
+
+    location ~ \.(js|mjs)$ {
+      add_header Content-Type application/javascript;
+    }
+
+    # --------------------------
+    # SPA 路由处理 - 必须放在最后
+    # --------------------------
+    location / {
+      limit_except GET HEAD POST {     # 仅允许 GET/HEAD/POST
+        deny all;
+      }
+      # 对于 SPA：先尝试文件，如果不存在直接回退到 index.html（不尝试目录，避免 403）
+      try_files $uri /index.html;
+    }
+
+    # --------------------------
+    # 日志格式（隐藏敏感信息）
+    # --------------------------
+    access_log /var/log/nginx/access.log custom;
+    error_log /var/log/nginx/error.log warn;
+  }
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/components/agentPanel/ElementInspector.tsx

@@ -653,6 +653,8 @@ export const ElementInspector: React.FC = () => {
   const [freeInputMode, setFreeInputMode] = useState<
     'freeInput' | 'requiresInput'
   >('freeInput');
+  const [quickSelectVisible, setQuickSelectVisible] = useState(false);
+  const [quickInputVisible, setQuickInputVisible] = useState(false);
   const pendingActionRef = useRef<InspectorAction | null>(null);
   const pendingMenuInfoRef = useRef<InspectedElementInfo | null>(null);
 
@@ -1126,6 +1128,22 @@ export const ElementInspector: React.FC = () => {
         onOk={handleFieldConfirmOk}
         onCancel={handleFieldConfirmCancel}
       />
+
+      {/* Quick select modal */}
+      <QuickSelectModal
+        open={quickSelectVisible}
+        action={pendingActionRef.current}
+        onOk={handleQuickSelectOk}
+        onCancel={handleQuickSelectCancel}
+      />
+
+      {/* Quick input modal */}
+      <QuickInputModal
+        open={quickInputVisible}
+        action={pendingActionRef.current}
+        onOk={handleQuickInputOk}
+        onCancel={handleQuickInputCancel}
+      />
     </>
   );
 };

package/dist/lib/application/files/gadmin2-game-angle-demo/web/src/components/agentPanel/promptGenerator.ts

@@ -29,7 +29,7 @@ export function generatePrompt(options: PromptOptions): string {
 
     if (skill) {
       parts.push(
-        `严格按照: ${skill} skill 描述的方法来完成代码的修改。如有不确定的地方，请先询问我，不要自己假设。`,
+        `严格按照: ${skill} skill（位于 .claude/skills/${skill}/SKILL.md）描述的方法来完成代码的修改。如有不确定的地方，请先询问我，不要自己假设。`,
       );
       parts.push('');
     }