@leterhong/multichat 1.6.0

package/backend/dist/lib/sqlite-store.js

@@ -0,0 +1,218 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = require('fs');
+const path = require('path');
+const { DatabaseSync } = require('node:sqlite');
+function createSqliteStore(rootDir) {
+    fs.mkdirSync(rootDir, { recursive: true });
+    const databaseFile = path.join(rootDir, 'multichat.sqlite3');
+    const database = new DatabaseSync(databaseFile);
+    const chains = new Map();
+    database.exec(`
+    PRAGMA journal_mode = WAL;
+    PRAGMA synchronous = NORMAL;
+    PRAGMA busy_timeout = 5000;
+    CREATE TABLE IF NOT EXISTS kv_store (
+      name TEXT PRIMARY KEY,
+      value TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS store_meta (
+      key TEXT PRIMARY KEY,
+      value TEXT NOT NULL
+    );
+  `);
+    let ftsEnabled = false;
+    try {
+        database.exec(`CREATE VIRTUAL TABLE IF NOT EXISTS search_fts USING fts5(
+      source UNINDEXED,
+      entity_id UNINDEXED,
+      project_id UNINDEXED,
+      title,
+      content,
+      tokenize='trigram'
+    );`);
+        ftsEnabled = true;
+    }
+    catch {
+        try {
+            database.exec(`CREATE VIRTUAL TABLE IF NOT EXISTS search_fts USING fts5(
+        source UNINDEXED,
+        entity_id UNINDEXED,
+        project_id UNINDEXED,
+        title,
+        content
+      );`);
+            ftsEnabled = true;
+        }
+        catch {
+            database.exec(`
+        CREATE TABLE IF NOT EXISTS search_documents (
+          source TEXT NOT NULL,
+          entity_id TEXT NOT NULL,
+          project_id TEXT NOT NULL,
+          title TEXT NOT NULL,
+          content TEXT NOT NULL,
+          PRIMARY KEY(source, entity_id)
+        );
+        CREATE INDEX IF NOT EXISTS search_documents_project ON search_documents(project_id);
+      `);
+        }
+    }
+    const selectValue = database.prepare('SELECT value FROM kv_store WHERE name = ?');
+    const upsertValue = database.prepare(`
+    INSERT INTO kv_store(name, value, updated_at) VALUES (?, ?, ?)
+    ON CONFLICT(name) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at
+  `);
+    const deleteValue = database.prepare('DELETE FROM kv_store WHERE name = ?');
+    const migrationValue = database.prepare("SELECT value FROM store_meta WHERE key = 'json_migration_v1'");
+    function validName(name) {
+        if (typeof name !== 'string' || !name || path.basename(name) !== name)
+            throw new Error('invalid data file name');
+        return name;
+    }
+    function resolve(name) {
+        return path.join(rootDir, validName(name));
+    }
+    function importJsonFiles() {
+        if (migrationValue.get())
+            return;
+        database.exec('BEGIN IMMEDIATE');
+        try {
+            const names = fs.readdirSync(rootDir).filter((name) => name.endsWith('.json') && path.basename(name) === name);
+            for (const name of names) {
+                if (selectValue.get(name))
+                    continue;
+                try {
+                    const parsed = JSON.parse(fs.readFileSync(path.join(rootDir, name), 'utf8'));
+                    upsertValue.run(name, JSON.stringify(parsed), new Date().toISOString());
+                }
+                catch {
+                    // Corrupt legacy files remain untouched for manual recovery.
+                }
+            }
+            database.prepare("INSERT OR REPLACE INTO store_meta(key, value) VALUES ('json_migration_v1', ?)").run(new Date().toISOString());
+            database.exec('COMMIT');
+        }
+        catch (error) {
+            database.exec('ROLLBACK');
+            throw error;
+        }
+    }
+    function read(name, fallback) {
+        validName(name);
+        const row = selectValue.get(name);
+        if (!row?.value)
+            return fallback;
+        try {
+            return JSON.parse(row.value);
+        }
+        catch {
+            return fallback;
+        }
+    }
+    function reindex(source, value) {
+        if (!['assets.json', 'memories.json'].includes(source))
+            return;
+        const rows = Array.isArray(value) ? value : [];
+        const table = ftsEnabled ? 'search_fts' : 'search_documents';
+        const removeSource = database.prepare(`DELETE FROM ${table} WHERE source = ?`);
+        const insert = database.prepare(`INSERT INTO ${table}(source, entity_id, project_id, title, content) VALUES (?, ?, ?, ?, ?)`);
+        database.exec('SAVEPOINT reindex_source');
+        try {
+            removeSource.run(source);
+            for (const row of rows) {
+                if (!row?.id || !row?.content)
+                    continue;
+                insert.run(source, String(row.id), String(row.projectId || ''), String(row.name || row.title || ''), String(row.content));
+            }
+            database.exec('RELEASE reindex_source');
+        }
+        catch (error) {
+            database.exec('ROLLBACK TO reindex_source');
+            database.exec('RELEASE reindex_source');
+            throw error;
+        }
+    }
+    function write(name, value) {
+        validName(name);
+        database.exec('BEGIN IMMEDIATE');
+        try {
+            upsertValue.run(name, JSON.stringify(value), new Date().toISOString());
+            reindex(name, value);
+            database.exec('COMMIT');
+        }
+        catch (error) {
+            database.exec('ROLLBACK');
+            throw error;
+        }
+    }
+    function remove(name) {
+        validName(name);
+        database.exec('BEGIN IMMEDIATE');
+        try {
+            deleteValue.run(name);
+            database.prepare(`DELETE FROM ${ftsEnabled ? 'search_fts' : 'search_documents'} WHERE source = ?`).run(name);
+            database.exec('COMMIT');
+        }
+        catch (error) {
+            database.exec('ROLLBACK');
+            throw error;
+        }
+    }
+    function mutate(name, update, fallback) {
+        const previous = chains.get(name) || Promise.resolve();
+        const run = previous
+            .then(() => update(read(name, fallback)))
+            .then((result) => {
+            if (result !== undefined)
+                write(name, result);
+            return result;
+        });
+        chains.set(name, run.then(() => { }, () => { }));
+        return run;
+    }
+    function searchDocuments(query, options = {}) {
+        const text = String(query || '').trim();
+        if (!text)
+            return [];
+        const projectId = String(options.projectId || '');
+        const limit = Math.max(1, Math.min(100, Number(options.limit) || 12));
+        const commonSelect = `SELECT source, entity_id AS entityId, project_id AS projectId, title,
+      snippet(search_fts, 4, '', '', ' … ', 56) AS snippet,
+      bm25(search_fts) AS rank FROM search_fts`;
+        try {
+            if (!ftsEnabled)
+                throw new Error('fts5 unavailable');
+            if ([...text].length >= 3) {
+                const phrase = `"${text.replace(/"/g, '""')}"`;
+                return database.prepare(`${commonSelect}
+          WHERE search_fts MATCH ? AND (? = '' OR project_id = ?)
+          ORDER BY rank LIMIT ?`).all(phrase, projectId, projectId, limit);
+            }
+        }
+        catch {
+            // Invalid FTS syntax and short queries use the bounded LIKE fallback.
+        }
+        const like = `%${text.replace(/[\\%_]/g, '\\$&')}%`;
+        return database.prepare(`SELECT source, entity_id AS entityId, project_id AS projectId, title,
+      substr(content, 1, 2400) AS snippet, 0 AS rank FROM ${ftsEnabled ? 'search_fts' : 'search_documents'}
+      WHERE (title LIKE ? ESCAPE '\\' OR content LIKE ? ESCAPE '\\') AND (? = '' OR project_id = ?)
+      LIMIT ?`).all(like, like, projectId, projectId, limit);
+    }
+    importJsonFiles();
+    reindex('assets.json', read('assets.json', []));
+    reindex('memories.json', read('memories.json', []));
+    return {
+        kind: 'sqlite',
+        read,
+        write,
+        remove,
+        resolve,
+        mutate,
+        searchDocuments,
+        close: () => database.close(),
+    };
+}
+module.exports = { createSqliteStore };
+//# sourceMappingURL=sqlite-store.js.map

package/backend/dist/lib/sqlite-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-store.js","sourceRoot":"","sources":["../../lib/sqlite-store.ts"],"names":[],"mappings":";;AAAA,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACzB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAYhD,SAAS,iBAAiB,CAAC,OAAe;IACxC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnD,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;;GAab,CAAC,CAAC;IAEH,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC;;;;;;;OAOX,CAAC,CAAC;QACL,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC;;;;;;SAMX,CAAC,CAAC;YACL,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;OAUb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC;;;GAGpC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC;IAExG,SAAS,SAAS,CAAC,IAAY;QAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACjH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,OAAO,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,SAAS,eAAe;QACtB,IAAI,cAAc,CAAC,GAAG,EAAE;YAAE,OAAO;QACjC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YACvH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACpC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;oBAC7E,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBAAC,MAAM,CAAC;oBACP,6DAA6D;gBAC/D,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAChI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,IAAI,CAAI,IAAY,EAAE,QAAW;QACxC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAmC,CAAC;QACpE,IAAI,CAAC,GAAG,EAAE,KAAK;YAAE,OAAO,QAAQ,CAAC;QACjC,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAM,CAAC;QAAC,CAAC;QAC1C,MAAM,CAAC;YAAC,OAAO,QAAQ,CAAC;QAAC,CAAC;IAC5B,CAAC;IAED,SAAS,OAAO,CAAC,MAAc,EAAE,KAAc;QAC7C,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO;QAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,KAAK,mBAAmB,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,KAAK,wEAAwE,CAAC,CAAC;QAC9H,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,IAAoB,EAAE,CAAC;gBACvC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO;oBAAE,SAAS;gBACxC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5H,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,IAAY,EAAE,KAAc;QACzC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,MAAM,CAAC,IAAY;QAC1B,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,QAAQ,CAAC,OAAO,CAAC,eAAe,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,mBAAmB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7G,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,MAAM,CAAI,IAAY,EAAE,MAA8D,EAAE,QAAW;QAC1G,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,QAAQ;aACjB,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACL,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,eAAe,CAAC,KAAa,EAAE,UAAkD,EAAE;QAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG;;+CAEsB,CAAC;QAC5C,IAAI,CAAC;YACH,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;gBAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,YAAY;;gCAEf,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAgB,CAAC;YACpF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;QACpD,OAAO,QAAQ,CAAC,OAAO,CAAC;4DACgC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB;;cAE5F,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAgB,CAAC;IAC1E,CAAC;IAED,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;IAEpD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,KAAK;QACL,MAAM;QACN,OAAO;QACP,MAAM;QACN,eAAe;QACf,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,EAAE,iBAAiB,EAAE,CAAC"}

package/backend/dist/lib/sse.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/** Incremental WHATWG-style SSE decoder for arbitrarily split byte chunks. */
+class SSEDecoder {
+    buffer = '';
+    push(chunk) {
+        this.buffer += String(chunk || '').replace(/\r\n/g, '\n').replace(/\r/g, '\n');
+        const events = [];
+        let boundary = this.buffer.indexOf('\n\n');
+        while (boundary >= 0) {
+            const block = this.buffer.slice(0, boundary);
+            this.buffer = this.buffer.slice(boundary + 2);
+            const data = this.dataFrom(block);
+            if (data !== null)
+                events.push(`data: ${data}`);
+            boundary = this.buffer.indexOf('\n\n');
+        }
+        return events;
+    }
+    flush() {
+        const block = this.buffer;
+        this.buffer = '';
+        const data = this.dataFrom(block);
+        return data === null ? [] : [`data: ${data}`];
+    }
+    dataFrom(block) {
+        if (!block.trim())
+            return null;
+        const values = [];
+        for (const line of block.split('\n')) {
+            if (!line || line.startsWith(':'))
+                continue;
+            const separator = line.indexOf(':');
+            const field = separator < 0 ? line : line.slice(0, separator);
+            if (field !== 'data')
+                continue;
+            let value = separator < 0 ? '' : line.slice(separator + 1);
+            if (value.startsWith(' '))
+                value = value.slice(1);
+            values.push(value);
+        }
+        return values.length ? values.join('\n') : null;
+    }
+}
+module.exports = { SSEDecoder };
+//# sourceMappingURL=sse.js.map

package/backend/dist/lib/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../lib/sse.ts"],"names":[],"mappings":";;AAAA,8EAA8E;AAC9E,MAAM,UAAU;IACN,MAAM,GAAG,EAAE,CAAC;IAEpB,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,QAAQ,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAChD,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC9D,IAAI,KAAK,KAAK,MAAM;gBAAE,SAAS;YAC/B,IAAI,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YAC3D,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;CACF;AAED,MAAM,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC"}

package/backend/dist/lib/ssrf.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// SSRF 防护：拦截指向私有/内网地址的导入与远程资产请求。
+// 注意：本地模型发现（/api/fetch-local-models）故意不在此拦截，因为它本就需要访问用户自己的 localhost 服务。
+const { promises: dns } = require('dns');
+const net = require('net');
+function ipv4ToInt(ip) {
+    const parts = ip.split('.').map(Number);
+    return (((parts[0] << 24) >>> 0) + (parts[1] << 16) + (parts[2] << 8) + parts[3]) >>> 0;
+}
+function inCidr(ipInt, base, bits) {
+    if (bits === 0)
+        return ipInt === (base >>> 0);
+    const mask = (0xffffffff << (32 - bits)) >>> 0;
+    return (ipInt & mask) === (base & mask);
+}
+const PRIVATE_V4 = [
+    [0, 8], // 0.0.0.0/8
+    [ipv4ToInt('10.0.0.0'), 8],
+    [ipv4ToInt('100.64.0.0'), 10], // CGNAT
+    [ipv4ToInt('127.0.0.0'), 8], // loopback
+    [ipv4ToInt('169.254.0.0'), 16], // link-local
+    [ipv4ToInt('172.16.0.0'), 12],
+    [ipv4ToInt('192.0.0.0'), 24],
+    [ipv4ToInt('192.168.0.0'), 16],
+    [ipv4ToInt('198.18.0.0'), 15],
+];
+function isPrivateV4(ip) {
+    const n = ipv4ToInt(ip);
+    if (n === 0)
+        return true;
+    return PRIVATE_V4.some(([base, bits]) => inCidr(n, base, bits));
+}
+function isPrivateV6(ip) {
+    const a = ip.toLowerCase();
+    if (a === '::1' || a === '::')
+        return true;
+    if (a.startsWith('fe80:'))
+        return true; // link-local
+    if (a.startsWith('fc') || a.startsWith('fd'))
+        return true; // unique local fc00::/7
+    const mapped = mappedV4(a);
+    if (mapped)
+        return isPrivateV4(mapped);
+    return false;
+}
+function mappedV4(ip) {
+    const dotted = ip.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/i);
+    if (dotted)
+        return dotted[1];
+    const hex = ip.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);
+    if (!hex)
+        return null;
+    const high = Number.parseInt(hex[1], 16), low = Number.parseInt(hex[2], 16);
+    return `${high >> 8}.${high & 255}.${low >> 8}.${low & 255}`;
+}
+function isMetadataAddress(ip) {
+    const value = ip.toLowerCase();
+    const mapped = mappedV4(value);
+    const v4 = mapped || (net.isIP(value) === 4 ? value : null);
+    return Boolean(v4 && (v4.startsWith('0.') || v4.startsWith('169.254.') || v4 === '100.100.100.200')) || value === '::' || value === 'fd00:ec2::254' || value.startsWith('fe80:');
+}
+async function assertSafeUrl(input, { allowPrivate = false } = {}) {
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch {
+        throw new Error('非法 URL');
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new Error('仅支持 http/https 链接');
+    }
+    // Node keeps square brackets around IPv6 URL hostnames; net.isIP expects the
+    // bare address. Normalize before applying private/metadata checks.
+    const host = url.hostname.replace(/^\[|\]$/g, '');
+    if (net.isIP(host) === 4) {
+        if (isMetadataAddress(host))
+            throw new Error('SSRF: 目标为保留、元数据或链路本地地址 ' + host);
+        if (!allowPrivate && isPrivateV4(host))
+            throw new Error('SSRF: 目标为内网地址 ' + host);
+    }
+    else if (net.isIP(host) === 6) {
+        if (isMetadataAddress(host))
+            throw new Error('SSRF: 目标为保留、元数据或链路本地地址 ' + host);
+        if (!allowPrivate && isPrivateV6(host))
+            throw new Error('SSRF: 目标为内网地址 ' + host);
+    }
+    else {
+        const addrs = await dns.lookup(host, { all: true });
+        for (const { address } of addrs) {
+            const v = net.isIP(address);
+            if (isMetadataAddress(address))
+                throw new Error('SSRF: 解析到保留、元数据或链路本地地址 ' + address);
+            if (v === 4 && !allowPrivate && isPrivateV4(address))
+                throw new Error('SSRF: 解析到内网地址 ' + address);
+            if (v === 6 && !allowPrivate && isPrivateV6(address))
+                throw new Error('SSRF: 解析到内网地址 ' + address);
+        }
+    }
+    return url;
+}
+// 带 SSRF 校验的 fetch：手动处理重定向，每次跳转都重新校验目标地址。
+async function safeFetch(input, options = {}, allowPrivate = false, depth = 0) {
+    const url = await assertSafeUrl(input, { allowPrivate });
+    const resp = await fetch(url, { ...options, redirect: 'manual' });
+    if ([301, 302, 307, 308].includes(resp.status) && depth < 3) {
+        const loc = resp.headers.get('location');
+        if (!loc)
+            throw new Error('重定向缺少 Location');
+        const nextUrl = new URL(loc, url);
+        let nextOptions = options;
+        if (nextUrl.origin !== url.origin && options.headers) {
+            // Never forward credentials, cookies, MCP sessions or arbitrary custom
+            // headers to another origin. Only protocol/content negotiation headers
+            // are safe to retain across the redirect boundary.
+            const current = new Headers(options.headers);
+            const forwarded = new Headers();
+            for (const name of ['accept', 'accept-language', 'content-type', 'mcp-protocol-version']) {
+                const value = current.get(name);
+                if (value !== null)
+                    forwarded.set(name, value);
+            }
+            nextOptions = { ...options, headers: forwarded };
+        }
+        return safeFetch(nextUrl.toString(), nextOptions, allowPrivate, depth + 1);
+    }
+    return resp;
+}
+module.exports = { isPrivateV4, isPrivateV6, assertSafeUrl, safeFetch };
+//# sourceMappingURL=ssrf.js.map

package/backend/dist/lib/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../../lib/ssrf.ts"],"names":[],"mappings":";;AAAA,iCAAiC;AACjC,yEAAyE;AACzE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;AACzC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;AAE3B,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,IAAY;IACvD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,GAA4B;IAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY;IACpB,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ;IACvC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW;IACxC,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,aAAa;IAC7C,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;IAC7B,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;IAC5B,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;IAC9B,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;CAC9B,CAAC;AAEF,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,aAAa;IACrD,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU;IAC1B,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC1D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAClE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAU;IACnC,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,OAAO,CACZ,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,iBAAiB,CAAC,CACrF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,EAAE,YAAY,GAAG,KAAK,KAAiC,EAAE;IACnG,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,iBAAiB,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnF,CAAC;SAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,IAAI,iBAAiB,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnF,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,iBAAiB,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,OAAO,CAAC,CAAC;YACrF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,OAAO,CAAC,CAAC;YAClG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,OAAO,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0CAA0C;AAC1C,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,UAAuB,EAAE,EAAE,YAAY,GAAG,KAAK,EAAE,KAAK,GAAG,CAAC;IAChG,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,WAAW,GAAG,OAAO,CAAC;QAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrD,uEAAuE;YACvE,uEAAuE;YACvE,mDAAmD;YACnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAI,OAAO,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,cAAc,EAAE,sBAAsB,CAAC,EAAE,CAAC;gBACzF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,KAAK,KAAK,IAAI;oBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjD,CAAC;YACD,WAAW,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC"}

package/backend/dist/lib/store.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = require('fs');
+const path = require('path');
+function createJsonStore(rootDir) {
+    // per-file 串行化队列：防止多个并发请求对同一 JSON 做 read-modify-write 时互相覆盖
+    const chains = new Map();
+    function resolve(name) {
+        if (typeof name !== 'string' || !name || path.basename(name) !== name) {
+            throw new Error('invalid data file name');
+        }
+        return path.join(rootDir, name);
+    }
+    function read(name, fallback) {
+        const file = resolve(name);
+        if (!fs.existsSync(file))
+            return fallback;
+        try {
+            return JSON.parse(fs.readFileSync(file, 'utf8'));
+        }
+        catch {
+            // A partially written/corrupted JSON file should not silently erase the
+            // user's view of their data. Every successful write keeps one local
+            // recovery copy, so prefer that before falling back to an empty value.
+            const backup = `${file}.bak`;
+            try {
+                if (fs.existsSync(backup))
+                    return JSON.parse(fs.readFileSync(backup, 'utf8'));
+            }
+            catch { }
+            return fallback;
+        }
+    }
+    function write(name, value) {
+        const file = resolve(name);
+        fs.mkdirSync(rootDir, { recursive: true });
+        const temp = `${file}.${process.pid}.${Date.now()}.tmp`;
+        fs.writeFileSync(temp, JSON.stringify(value, null, 2), 'utf8');
+        // Keep one known-good recovery point. On Windows rename-over-existing can
+        // fail with EPERM, so use a guarded replacement fallback while retaining
+        // the backup. The temporary file is always cleaned up.
+        try {
+            if (fs.existsSync(file))
+                fs.copyFileSync(file, `${file}.bak`);
+            try {
+                fs.renameSync(temp, file);
+            }
+            catch (error) {
+                if (!['EEXIST', 'EPERM'].includes(error?.code))
+                    throw error;
+                fs.rmSync(file, { force: true });
+                fs.renameSync(temp, file);
+            }
+        }
+        finally {
+            if (fs.existsSync(temp))
+                fs.rmSync(temp, { force: true });
+        }
+    }
+    function remove(name) {
+        const file = resolve(name);
+        if (fs.existsSync(file))
+            fs.unlinkSync(file);
+    }
+    // 串行化 read-modify-write：fn(currentValue) => newValue（或 undefined 表示不写回）。
+    // 同一 name 的多次 mutate 会严格按调用顺序排队执行，杜绝并发覆盖。
+    function mutate(name, fn, fallback) {
+        const prev = chains.get(name) || Promise.resolve();
+        const run = prev
+            .then(() => fn(read(name, fallback)))
+            .then((result) => {
+            if (result === undefined)
+                return result;
+            write(name, result);
+            return result;
+        });
+        // 存入"已处理 rejection"的链，避免后续排队因前序失败而中断，也避免 unhandled rejection
+        chains.set(name, run.then(() => { }, () => { }));
+        return run;
+    }
+    return { kind: 'json', read, write, remove, resolve, mutate };
+}
+module.exports = { createJsonStore };
+//# sourceMappingURL=store.js.map

package/backend/dist/lib/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../lib/store.ts"],"names":[],"mappings":";;AAAA,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACzB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAG7B,SAAS,eAAe,CAAC,OAAe;IACtC,4DAA4D;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnD,SAAS,OAAO,CAAC,IAAY;QAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,SAAS,IAAI,CAAI,IAAY,EAAE,QAAW;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,oEAAoE;YACpE,uEAAuE;YACvE,MAAM,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,IAAY,EAAE,KAAc;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,0EAA0E;QAC1E,yEAAyE;QACzE,uDAAuD;QACvD,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC5D,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,SAAS,MAAM,CAAC,IAAY;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,yEAAyE;IACzE,0CAA0C;IAC1C,SAAS,MAAM,CAAI,IAAY,EAAE,EAA0D,EAAE,QAAW;QACtG,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI;aACb,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;aACpC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC;YACxC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACL,6DAA6D;QAC7D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,CAAC"}